last executing test programs: 33m42.748833271s ago: executing program 32 (id=414): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x11, 0x5, &(0x7f00000002c0)=ANY=[@ANYBLOB="18050000000000fe000000004b64ffec850000007d000000040000000700000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r0}, 0xc) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socket$inet6(0xa, 0x80002, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000000)={'\x00', 0x5}) socket$nl_generic(0x10, 0x3, 0x10) unlinkat(0xffffffffffffffff, 0x0, 0x200) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000c00)={0x1, 0x13, &(0x7f0000001600)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020786c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000800000018010000202075250000"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={r4, 0x0, 0x8, 0x0, &(0x7f00000002c0)='\x00\x00\x00\x00\x00\x00\x00\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) r5 = creat(&(0x7f0000000140)='./bus\x00', 0x0) r6 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route(r6, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000001440)=ANY=[@ANYBLOB="1c0000005e0021a5553f8c6b23cbff070000e5373526a01edb"], 0x1c}}, 0x0) recvmmsg$unix(r6, &(0x7f0000002380)=[{{0x0, 0x0, &(0x7f0000001340)=[{&(0x7f00000002c0)=""/4096, 0x1004}], 0x1}}], 0x8, 0x34000, 0x0) ftruncate(r5, 0x12081ff) open(&(0x7f0000000200)='./bus\x00', 0x14507e, 0x0) 32m53.291764168s ago: executing program 33 (id=551): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x3, &(0x7f0000000400)=ANY=[@ANYBLOB="03000000ffff06000000000000feffff9500000000000000f164470d6f7245dbcb77020e988af0acade311922aabc2"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x4, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000003c0)={&(0x7f0000000040)='kmem_cache_free\x00', r0}, 0x10) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) socket$igmp6(0xa, 0x3, 0x2) bind$inet6(r1, &(0x7f0000000280)={0xa, 0x4e23, 0x0, @private1}, 0x1c) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x5, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0xffffffee, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x5, 0x0, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r2}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r3 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) syz_open_dev$usbmon(&(0x7f0000000440), 0x100, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={0x0}, 0x18) r6 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCL_GETKMSGREDIRECT(r6, 0x4b4d, &(0x7f00000000c0)) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x11, 0x3, &(0x7f0000000440)=ANY=[@ANYBLOB], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$MAP_CREATE(0x0, &(0x7f0000000500)=ANY=[], 0x50) r7 = add_key$keyring(&(0x7f0000000080), &(0x7f0000001100)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffffe) add_key(&(0x7f0000000000)='asymmetric\x00', 0x0, &(0x7f0000000580)="303e30801f0000000900f190c937dc6b14243b0402e8886ff204d830fa5b3ba026b4fb643891162fb3fbf36e7118a3d45a46b678a2e5b247a74fb2c38c802a2a", 0x40, r7) keyctl$read(0xb, r7, &(0x7f0000000300)=""/134, 0x86) 32m49.116465301s ago: executing program 34 (id=565): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = socket$inet6(0xa, 0x2, 0x0) sendmmsg$inet(r0, 0x0, 0x0, 0x0) r1 = bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000180)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYBLOB="0000000000000000b702000014000000b7030000010100008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000085000000b70000000000000095"], &(0x7f0000001dc0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r2}, 0x2d) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r3 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, r1, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r6 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r6, &(0x7f0000000080)={0x2, 0x4e23, @multicast1}, 0x10) sendto$inet6(r0, 0x0, 0x0, 0x8000, 0x0, 0x0) ioctl$F2FS_IOC_START_ATOMIC_WRITE(0xffffffffffffffff, 0xf501, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) syz_open_procfs(0x0, &(0x7f0000000580)='net/tcp6\x00') syz_clone3(&(0x7f00000002c0)={0x230a8000, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, &(0x7f0000000000)=[0x0], 0x1}, 0x58) 32m45.904108963s ago: executing program 35 (id=575): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0b00000007000000080000000800000005"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000000400000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r2 = getpid() sched_setscheduler(r2, 0x1, &(0x7f0000000100)=0x5) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000200)='sched_switch\x00', r1}, 0x10) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f00000bd000), 0x318, 0x0) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680)) syz_clone3(&(0x7f0000001240)={0x2d000000, 0x0, 0x0, 0x0, {0x20}, 0x0, 0x0, 0x0, 0x0}, 0x58) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) write$P9_RVERSION(0xffffffffffffffff, &(0x7f0000000080)=ANY=[@ANYBLOB="1500000065ffff097b"], 0x15) syz_mount_image$msdos(&(0x7f00000001c0), &(0x7f0000000080)='./file1\x00', 0x0, &(0x7f00000004c0)={[{@fat=@uid}, {@fat=@dos1xfloppy}, {@dots}, {@dots}, {@dots}, {@nodots}, {@dots}, {@nodots}, {@fat=@umask={'umask', 0x3d, 0x8b3}}, {@dots}, {@fat=@nocase}, {@dots}, {@dots}, {@dots}, {@nodots}, {@dots}, {@fat=@dos1xfloppy}, {@nodots}, {@fat=@time_offset={'time_offset', 0x3d, 0x3ac}}, {@nodots}, {@nodots}, {@nodots}]}, 0xfd, 0x1bf, &(0x7f0000000300)="$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") r5 = syz_open_procfs(0x0, &(0x7f0000000100)='mountinfo\x00') sendfile(0xffffffffffffffff, r5, 0x0, 0x80000000) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70800000000ebff7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x33, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='kfree\x00', r6}, 0x10) syz_open_dev$usbfs(&(0x7f0000000100), 0x205, 0x8401) 32m35.418084091s ago: executing program 36 (id=601): bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0b00000007000000080000000800000005"], 0x48) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000000400000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r1 = getpid() sched_setscheduler(r1, 0x1, &(0x7f0000000100)=0x5) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000200)='sched_switch\x00', r0}, 0x10) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680)) syz_clone3(&(0x7f0000001240)={0x2d000000, 0x0, 0x0, 0x0, {0x20}, 0x0, 0x0, 0x0, 0x0}, 0x58) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) write$P9_RVERSION(0xffffffffffffffff, &(0x7f0000000080)=ANY=[@ANYBLOB="1500000065ffff097b"], 0x15) syz_mount_image$msdos(&(0x7f00000001c0), &(0x7f0000000080)='./file1\x00', 0x0, &(0x7f00000004c0)={[{@fat=@uid}, {@fat=@dos1xfloppy}, {@dots}, {@dots}, {@dots}, {@nodots}, {@dots}, {@nodots}, {@fat=@umask={'umask', 0x3d, 0x8b3}}, {@dots}, {@fat=@nocase}, {@dots}, {@dots}, {@dots}, {@nodots}, {@dots}, {@fat=@dos1xfloppy}, {@nodots}, {@fat=@time_offset={'time_offset', 0x3d, 0x3ac}}, {@nodots}, {@nodots}, {@nodots}]}, 0xfd, 0x1bf, &(0x7f0000000300)="$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") r4 = syz_open_procfs(0x0, &(0x7f0000000100)='mountinfo\x00') r5 = open(&(0x7f0000000080)='./file1\x00', 0x10b942, 0x0) sendfile(r5, r4, 0x0, 0x80000000) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='kfree\x00'}, 0x10) r6 = syz_open_dev$usbfs(&(0x7f0000000100), 0x205, 0x8401) ioctl$USBDEVFS_SUBMITURB(r6, 0x8038550a, &(0x7f0000000000)=@urb_type_control={0x2, {}, 0x0, 0x0, &(0x7f0000000080)={0x0, 0xe, 0x0, 0x0, 0x7995}, 0x799d, 0x0, 0x0, 0x48000000, 0x0, 0x1, 0x0}) 32m33.374547133s ago: executing program 37 (id=610): syz_mount_image$ext4(&(0x7f0000000140)='ext4\x00', &(0x7f00000005c0)='./file0\x00', 0x4000, &(0x7f0000000380)={[{@test_dummy_encryption}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x84}}, {@stripe={'stripe', 0x3d, 0x7}}, {@commit={'commit', 0x3d, 0x5}}, {@orlov}, {@barrier_val={'barrier', 0x3d, 0x5}}, {@max_batch_time}, {@data_err_abort}]}, 0xd, 0x5d8, &(0x7f0000000c00)="$eJzs3c9vFFUcAPDvbH/QUrSFGBUP0sQYSJSWFjDEeICrIQ3+iBcvVloQKdDQGi2aUBK8mBgvxph48iD+F0rkyklPHrx4MiREDUcT18x2pnTb2ZYubacyn0+y9M17O7w33X773r6+NxtAZQ2m/9Qi9kbEdBLRn8wvlnVGVji48Lx7f39yOn0kUa+/8WcSSZaXPz/JvvZlJ/dExM8/JbGnY2W9M3NXzo9PTU1ezo6HZy9MD8/MXTl47sL42cmzkxdHXxo9dvTI0WMjh9q6rqsFeSevv/9h/2djb3/3zT/JyPe/jSVxPF7Nnrj0OjbKYAw2vifJyqK+YxtdWUk6sp+TpS9x0llig1iX/PXrioinoj864v6L1x+fvlZq44BNVU8i6kBFJeIfKiofB+Tv7Ze/D66VMioBtsLdEwsTACvjv3NhbjB6GnMDO+8lsXRaJ4mI9mbmmu2KiNu3xq6fuTV2PTZpHg4oNn8tIp4uiv+kEf8D0RMDjfivNcV/Oi44lX1N819vs/7lU8XiH7bOQvz3rBr/0SL+31kS/++2Wf/g/eR7vU3x39vuJQEAAAAAAEBl3TwRES8W/f2/trj+JwrW//RFxPENqH9w2fHKv//X7mxANUCBuyciXilc/1vLV/8OdGSpxxrrAbqSM+emJg9FxOMRcSC6dqTHI6vUcfDzPV+3KhvM1v/lj7T+29lawKwddzp3NJ8zMT47/rDXDUTcvRbxTOH632Sx/08K+v/098H0A9ax5/kbp1qVrR3/wGapfxuxv7D/v3/XimT1+3MMN8YDw/moYKVnP/7ih1b1txv/bjEBDy/t/3euHv8DydL79cysv47Dc531VmXtjv+7kzcbt5zpzvI+Gp+dvTwS0Z2c7Ehzm/JH199meBTl8ZDHSxr/B55bff6vaPzfGxHzy/7v5K/mPcW5J//t+71Ve4z/oTxp/E+sq/9ff2L0xsCPrep/sP7/SKOvP5DlmP+DBV/lYdrdnF8Qjp1FRVvdXgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAB4FNQiYlcktaHFdK02NBTRFxFPxM7a1KWZ2RfOXPrg4kRa1vj8/1r+Sb/9C8dJ/vn/A0uOR5cdH46I3RHxZUdv43jo9KWpibIvHgAAAAAAAAAAAAAAAAAAALaJvhb7/1N/dJTdOmDTdZbdAKA0BfH/SxntALae/h+qS/xDdYl/qC7xD9Ul/qG6xD9Ul/iH6hL/AAAAAADwSNm97+avSUTMv9zbeKS6s7KuUlsGbLZa2Q0ASuMWP1Bdlv5AdXmPDyRrlPe0PGmtM1czffohTgYAAAAAAAAAAACAytm/1/5/qCr7/6G67P+H6sr3/+8ruR3A1vMeH4g1dvIX7v9f8ywAAAAAAAAAAAAAYCPNzF05Pz41NXlZ4q3t0YytTNTr9avpT8F2ac//PJEvhd8u7VmWyPf6PdhZ5f1OAgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAmv0XAAD//xYSJMU=") r0 = open(&(0x7f0000000340)='./bus\x00', 0x64842, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() link(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000100)='./file0\x00') sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x11, 0x6, &(0x7f00000005c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000080)='GPL\x00', 0x5, 0x29e, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x6, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x70) r5 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000580)={&(0x7f0000000080)='sched_switch\x00', r4}, 0x10) setsockopt$inet6_udp_int(0xffffffffffffffff, 0x11, 0x67, &(0x7f0000000040)=0x91, 0x4) ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, &(0x7f0000000180)={'vxcan1\x00'}) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000001c0)={&(0x7f0000001a00)=ANY=[@ANYBLOB="9feb0100180000000000000034000000340000000700000009000000000000010000000006001201060000000000000903000000100000000000001004000000e45d070000000000000a03000000002e5f305f00"], &(0x7f0000000a00)=""/4096, 0x53, 0x1000, 0x1, 0x0, 0x0, @void, @value}, 0x28) r6 = bpf$MAP_CREATE(0x0, 0x0, 0x0) sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000003cc0)=[{{0x0, 0x0, &(0x7f0000003980), 0x171}}], 0x400000000000172, 0x4001c00) r7 = open(&(0x7f0000000180)='./bus\x00', 0x14927e, 0x0) fallocate(r7, 0x0, 0x0, 0x1001f0) pwritev2(r0, &(0x7f0000000240)=[{&(0x7f0000000000)="85", 0x1}], 0x1, 0x6c00, 0x0, 0x3) truncate(&(0x7f00000001c0)='./bus\x00', 0x8) ioctl$INCFS_IOC_PERMIT_FILL(r6, 0x40046721, &(0x7f0000000500)={r5}) 32m31.338595124s ago: executing program 38 (id=621): syz_open_procfs(0x0, &(0x7f0000000040)='coredump_filter\x00') syz_open_dev$tty1(0xc, 0x4, 0x1) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_GET_BTF_INFO(0xf, 0x0, 0x0) r0 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$ASHMEM_SET_SIZE(r0, 0x40087703, 0xfffffffe) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x9) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) add_key$keyring(0x0, &(0x7f00000002c0)={'syz', 0x3}, 0x0, 0x0, 0xffffffffffffffff) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) ioctl$UI_SET_FFBIT(0xffffffffffffffff, 0x4004556b, 0x69) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x7, &(0x7f0000000240)=ANY=[@ANYBLOB="1800"/15, @ANYRES32=r4, @ANYBLOB="0000000000000000b702000003000000850000008600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f00000006c0)='sched_switch\x00', r5}, 0x10) gettid() r6 = socket$tipc(0x1e, 0x5, 0x0) bind$tipc(r6, &(0x7f0000000340)=@name={0x1e, 0x2, 0x0, {{0x42, 0x20002}}}, 0x10) setsockopt$TIPC_GROUP_JOIN(r6, 0x10f, 0x87, &(0x7f0000000040)={0x42}, 0x10) mmap(&(0x7f0000701000/0x1000)=nil, 0x1000, 0x0, 0x12, r0, 0x0) ioctl$ASHMEM_SET_NAME(r0, 0x40087708, &(0x7f00000007c0)='\x00\x00\x03\x06\x00\x00\x00\x05\x00x\x92\x12\xac\x06^\xbewV\xf3\"\xc4\x04\xbb\x0642\x9c\x1a\xd1\xcb{\xb0\xd6\x1e\x00gQ\xca\x0eU\xf7\'\x8c\xc1\xc6\xbb\xc5\x1c\xf7\xaf\x95\x83=\t7\x96\x1a\xad\xd0\xd0\xee\x9c\x962\bu\xba\xfc\xae\xc2\x19\xeb\x91\xc9\t\xbc\xc1\xcb\xba\xe3\x8e\xf6\x89\xc2\'\xdfn(Q=v-<\r\xd1?$\x8b\x17Bn\x17h\x1b\xac\xfc\x82\x1c\xf4\xd0\xf5\xd5\x80\xc0\xb4a \x15\x9a\x9f\xf0:\xfd$\xad\xbb\x9a|c\xfc\"\xee\xc4\x93Q\x82\x16\xbf\xe3c\x8d \x0f\xb1\xe9\xf2o \x00\x00\x00\x00\x00\x00\x00H\xaf\t\x18\xc8\x1b\x1e\xbe\xd8>\xec\x9f~\xa7\xf7\xafdd\xf1\xdbjE\x01\xd1sD\x89\x94&\\U\f\x18\x99]\xaba\xe93\x01\xa23\xc9hP1\xdc-\'\xd0\x9e}\x89\xff\x8c\xec^\x84\x19\x9f_D\xbdt/\'\xf6\xc3\x8c\xb8\vS\x80\xad\xf8\xbf\xa2\xa0\x99\xc2\x16=\xcc\xb0\x1b7\xe3-\'\x02\x16\xf5\xe6\x93\x02E\n\xe8\x00\x00\x8c\xed\x11\xf7\xf2J\xf6\x90A@\x01\x13\xc7`g\xcb\xd7\xdb\x1e\xb2\xc9\xfd\xf7\xa9\x96\xf8/0Xd\xcf\xb9\xa2\x1d\x13\x8fC\xd2&\xd8\x9d\x8b\xe0E\xd2\xc6\x1a\xf3\xa8\x0e\xba\xecOv$\xc8\"\a\xd7T\xfb\xfc\xfauT\xf8\x9e\x86\xef.\xf6<\xbfB\xe7\x80\x1a\a\t+x_B=\xe7\xa5\x89\xfb\xa2\xc6\x97\xeb\xdecY{\x0e\xc2\x00\x00\x00\x00\x00\x00\x00\a\xf4\x88\x06\xe3\xcb\xc8\xe0\xcc\vE\x18\"\x87\xa0\xa9:\xceY\xf0\xa2\xe0\x9d\x8c\x8e\x11\xb7\x98\xa5\xda$\x94D\xb4\xf2>\x01\x00+\xfa\xa9 \xe1\x13Y\x86\xd8\xbfH\xc6\x9c\x8cs4\r\xcd\xd1\x83JT\xf9\xa2\x83?\xb3\x0f\xc6&\x1d\xa3\xc4\xc3\xd2\xfd\xad\xa35o\xe8\xcd^/\xd8\xf4[n\x9fJ\xf4\n\x92c\xaa\xddT&L<+\x19R\a\xfc\xf2\x17\xb8$\xa9]\xc2\\\xda<\xc8d.w\x9c\xaf4\xbb\xe8Co\xb3\xd8\x82\x92\xba+\x99PXB\xdc\xbay\xa0s<\x92k\vJTRW\xc26\x06\x10\x92\xc7\xa55\x9fZ\xff*ir\x1e\xe8\a\x00\x00\x00\x00\x00\x00\x00\x88\x19\xf7\xdd\xa8\xef\xa0\x98\xcd\x81\x10>\xc7{\x84\xb9\xc0B\xe1\t\x00\xbaQj\x81\xc8\xf8\x146%Z\x83H\xabF\x18<\x86h\x01=\x03i\xc4\t\x8e/\x12\a\xdf\xe7zU\x1d\x15\x0e\xc1?\xeau\xb4\x84x\x00\x00X\xf4\xe9\x1f\xcd\x05\x0fz_\x8d,^\xde\xfd\xd1\xbed\xed\xa1\xf5\xc6(p\xb4;\x0e\x18\xf7/A\xfd\x92\xd0}ur\xaag\xdb&e$\f\rrT\xd8\x88~\x13\xc22t\xf6\xf4Fs\xc1\x05\xfa\x99\x15\x87\x14\x13$\t\xa8?\xee\x94W\x8e\xe1\xcc\xc3U\x84\xc6]:\x9a|W\xec\x84\x18\bb\x82\x8f\xc0\xab\xe3a\x99\x17\x85\x9a\x05\xb1\x12K\\\xf2\xd5\b^[D~~\x84\\\xe4\x00') 32m24.436139549s ago: executing program 39 (id=639): mkdir(&(0x7f0000000040)='./file0\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000480)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}]}) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="180100001c0000000000000000000004850000"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r0}, 0x10) mount$incfs(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000000), 0x0, 0x0) 31m11.580593374s ago: executing program 40 (id=884): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xc, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r4 = ioctl$LOOP_CTL_GET_FREE(r3, 0x4c82) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x16, 0x0, 0x4, 0xff, 0x0, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008000000000000000000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000058"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f0000000300)='sched_switch\x00', r6}, 0x10) ioctl$LOOP_CTL_REMOVE(r3, 0x4c81, r4) 31m0.799152462s ago: executing program 41 (id=913): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x3, &(0x7f0000000400)=ANY=[@ANYBLOB="03000000ffff06000000000000feffff9500000000000000f164470d6f7245dbcb77020e988af0acade311922aabc2"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x4, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000003c0)={&(0x7f0000000040)='kmem_cache_free\x00', r0}, 0x10) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) socket$igmp6(0xa, 0x3, 0x2) bind$inet6(r1, &(0x7f0000000280)={0xa, 0x4e23, 0x0, @private1}, 0x1c) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x5, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0xffffffee, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x5, &(0x7f00000002c0)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x78) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r2 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) syz_open_dev$usbmon(&(0x7f0000000440), 0x100, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={0x0}, 0x18) r5 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCL_GETKMSGREDIRECT(r5, 0x4b4d, &(0x7f00000000c0)) bpf$MAP_CREATE(0x0, &(0x7f0000000500)=ANY=[], 0x50) r6 = add_key$keyring(&(0x7f0000000080), &(0x7f0000001100)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffffe) add_key(&(0x7f0000000000)='asymmetric\x00', 0x0, &(0x7f0000000580)="303e30801f0000000900f190c937dc6b14243b0402e8886ff204d830fa5b3ba026b4fb643891162fb3fbf36e7118a3d45a46b678a2e5b247a74fb2c38c802a2a", 0x40, r6) keyctl$read(0xb, r6, &(0x7f0000000300)=""/134, 0x86) 30m39.602740338s ago: executing program 42 (id=978): syz_usb_connect(0x0, 0x46, &(0x7f00000000c0)=ANY=[@ANYBLOB="12010000f3c7c820da059a0095620102030109023400010000000009049200030f6276000905000000000000000705e3d71b82e60905f2020000060000090501"], 0x0) 25m41.368116723s ago: executing program 43 (id=2242): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0) mount$bind(&(0x7f0000000380)='./file0\x00', &(0x7f0000000200)='./file0\x00', 0x0, 0x2125099, 0x0) mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0) r0 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r0, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) mount$bind(&(0x7f0000000000)='./file0/../file0\x00', &(0x7f0000000340)='./file0/file0\x00', 0x0, 0x89101a, 0x0) mount$bind(&(0x7f0000000100)='./file0\x00', &(0x7f0000000280)='./file0/../file0\x00', 0x0, 0x1adc51, 0x0) mount$bind(0x0, &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101091, 0x0) mount$bind(&(0x7f00000003c0)='./file0\x00', &(0x7f0000000440)='./file0/file0\x00', 0x0, 0x12f451, 0x0) mount$bind(&(0x7f00000000c0)='.\x00', &(0x7f0000000080)='./file0/file0/file0\x00', 0x0, 0x80700a, 0x0) 25m1.92792983s ago: executing program 44 (id=2376): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000600)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40, 0x5ac, 0x265, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x0, 0x2, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x3}}}}]}}]}}, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000840)={0x6, 0x0, 0x0, &(0x7f0000000000)='GPL\x00', 0x6, 0x0, 0x0, 0x41100, 0x20, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x5, @void, @value}, 0x94) r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='smaps\x00') setsockopt$packet_int(r1, 0x107, 0xf, &(0x7f0000000300)=0x1, 0x4) ioctl$KVM_SET_VCPU_EVENTS(0xffffffffffffffff, 0x4040aea0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r2 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x1}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000002000000b7030000e8ffffff850000000400000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) socket(0x10, 0x3, 0x0) lseek(r1, 0x2000, 0x0) 24m57.284670672s ago: executing program 45 (id=2403): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000600)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40, 0x5ac, 0x265, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x0, 0x2, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x3}}}}]}}]}}, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000840)={0x6, 0x0, 0x0, &(0x7f0000000000)='GPL\x00', 0x6, 0x0, 0x0, 0x41100, 0x20, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x5, @void, @value}, 0x94) r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='smaps\x00') setsockopt$packet_int(r1, 0x107, 0xf, &(0x7f0000000300)=0x1, 0x4) ioctl$KVM_SET_VCPU_EVENTS(0xffffffffffffffff, 0x4040aea0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r2 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x1}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000002000000b7030000e8ffffff850000000400000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000d00)='sched_switch\x00', r5}, 0x10) lseek(r1, 0x2000, 0x0) syz_usb_control_io(r0, &(0x7f0000000740)={0x2c, &(0x7f0000000000)=ANY=[], 0x0, 0x0, 0x0, 0x0}, 0x0) 24m10.468490243s ago: executing program 46 (id=2568): mknod(&(0x7f0000000080)='./bus\x00', 0x1000, 0x0) mknod(&(0x7f0000000040)='./file0\x00', 0x0, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000300)='blkio.bfq.io_wait_time_recursive\x00', 0x275a, 0x0) syz_emit_ethernet(0x36, &(0x7f0000000100)=ANY=[@ANYBLOB="000002f0d31209000000bc2e79e995"], 0x0) write$binfmt_script(r2, &(0x7f0000000100), 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r2, 0x0) preadv(r2, 0x0, 0x0, 0x0, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f00000004c0)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0xf2, &(0x7f0000000000)={0x0}}, 0x44044010) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x0, 0x1c, &(0x7f0000000040)=ANY=[@ANYBLOB="0000000000000000b702000014000000b7030000030000008500000005000000bf0900000000000055090100000000009500000000000000b7020000000000007b2af0ff000000003609080000000000c39af0ffa0"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) ioctl$KVM_RUN(r3, 0xae80, 0x0) r4 = open$dir(&(0x7f0000000100)='./file0\x00', 0x0, 0x0) r5 = open(&(0x7f0000000140)='./file0\x00', 0x2, 0x0) write$FUSE_IOCTL(r5, &(0x7f0000000100)={0x20}, 0xfdef) r6 = open(&(0x7f00000002c0)='./bus\x00', 0x60102, 0x0) read$FUSE(r6, &(0x7f0000001f40)={0x2020}, 0x2020) splice(r4, 0x0, r6, 0x0, 0xffffffe1, 0x0) 22m40.763160567s ago: executing program 9 (id=2820): mknod$loop(0x0, 0x0, 0x0) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file3\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18090000000000000000000000000000850000006d0000001801000020696c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007000000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x20, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r3}, 0x10) r4 = socket$nl_route(0x10, 0x3, 0x0) socket$nl_route(0x10, 0x3, 0x0) syz_socket_connect_nvme_tcp() r5 = socket$unix(0x1, 0x5, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r5, 0x8933, &(0x7f0000000040)={'batadv_slave_1\x00', 0x0}) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="01000000060000000800"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, 0x0, &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) socketpair(0x1e, 0x1, 0x0, &(0x7f0000000040)={0x0, 0x0}) sendmsg$nl_route(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=@ipv4_newaddr={0x20, 0x14, 0x509, 0x0, 0x0, {0x2, 0x1f, 0x0, 0x0, r6}, [@IFA_LOCAL={0x8, 0x2, @empty}]}, 0x20}, 0x1, 0x0, 0x0, 0x1}, 0x0) 22m37.253452804s ago: executing program 9 (id=2830): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0b00000007000000080000000800000005"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000000400000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r2 = getpid() sched_setscheduler(r2, 0x1, &(0x7f0000000100)=0x5) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000200)='sched_switch\x00', r1}, 0x10) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f00000bd000), 0x318, 0x0) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680)) syz_clone3(&(0x7f0000001240)={0x2d000000, 0x0, 0x0, 0x0, {0x20}, 0x0, 0x0, 0x0, 0x0}, 0x58) recvmmsg(r3, 0x0, 0x0, 0x2, 0x0) write$P9_RVERSION(0xffffffffffffffff, &(0x7f0000000080)=ANY=[@ANYBLOB="1500000065ffff097b"], 0x15) syz_mount_image$msdos(&(0x7f00000001c0), &(0x7f0000000080)='./file1\x00', 0x0, &(0x7f00000004c0)={[{@fat=@uid}, {@fat=@dos1xfloppy}, {@dots}, {@dots}, {@dots}, {@nodots}, {@dots}, {@nodots}, {@fat=@umask={'umask', 0x3d, 0x8b3}}, {@dots}, {@fat=@nocase}, {@dots}, {@dots}, {@dots}, {@nodots}, {@dots}, {@fat=@dos1xfloppy}, {@nodots}, {@fat=@time_offset={'time_offset', 0x3d, 0x3ac}}, {@nodots}, {@nodots}, {@nodots}]}, 0xfd, 0x1bf, &(0x7f0000000300)="$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") r5 = syz_open_procfs(0x0, &(0x7f0000000100)='mountinfo\x00') r6 = open(&(0x7f0000000080)='./file1\x00', 0x10b942, 0x0) sendfile(r6, r5, 0x0, 0x80000000) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70800000000ebff7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x33, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='kfree\x00', r7}, 0x10) ioctl$USBDEVFS_SUBMITURB(0xffffffffffffffff, 0x8038550a, &(0x7f0000000000)=@urb_type_control={0x2, {}, 0x0, 0x0, &(0x7f0000000080)={0x0, 0xe, 0x0, 0x0, 0x7995}, 0x799d, 0x0, 0x0, 0x48000000, 0x0, 0x1, 0x0}) 22m36.342005859s ago: executing program 9 (id=2834): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0b00000007000000080000000800000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000000400000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r1 = getpid() sched_setscheduler(r1, 0x1, &(0x7f0000000100)=0x5) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680)) syz_clone3(&(0x7f0000001240)={0x2d000000, 0x0, 0x0, 0x0, {0x20}, 0x0, 0x0, 0x0, 0x0}, 0x58) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) write$P9_RVERSION(0xffffffffffffffff, &(0x7f0000000080)=ANY=[@ANYBLOB="1500000065ffff097b"], 0x15) syz_mount_image$msdos(&(0x7f00000001c0), &(0x7f0000000080)='./file1\x00', 0x0, &(0x7f00000004c0)={[{@fat=@uid}, {@fat=@dos1xfloppy}, {@dots}, {@dots}, {@dots}, {@nodots}, {@dots}, {@nodots}, {@fat=@umask={'umask', 0x3d, 0x8b3}}, {@dots}, {@fat=@nocase}, {@dots}, {@dots}, {@dots}, {@nodots}, {@dots}, {@fat=@dos1xfloppy}, {@nodots}, {@fat=@time_offset={'time_offset', 0x3d, 0x3ac}}, {@nodots}, {@nodots}, {@nodots}]}, 0xfd, 0x1bf, &(0x7f0000000300)="$eJzs3TGL02AYB/Cn9bzmnG4TRCHg4nSon+BEThADgtJBJ4XT5SqCt0SX9mP4Af0A0qmLRGrSxkaHWmxS6++39En/edvnHZp26ZNXN99dnL+/fPvl+udIkl70T+M0Zr04jn4sTAIA2CezooivRanrXgCAdqzx/f+t5ZYAgC17/uLlkwdZdvYsTZOI6SQf5sPyscwfPc7O7qY/HNerpnk+vLLM76XN3w7z/Gpcq/L75fp0NT+MO7fLfJ49fJo18kGcb3frAAAAAAAAAAAAAAAAAAAAAADQmVuRLvx2vs/JSTM/qvLy6Kf5QI35PQdx46A6rMcDFeM2NgUAAAAAAAAAAAAAAAAAAAD/mMuPny5ej0ZvPtTFICJWn/mTole98IbL2y76sRNtKP5qke5GG6MNPwWHEbGtxmZFUax1cn2NGHR1cQIAAAAAAAAAAAAAAAAAgP9M/affX7Oki4YAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAoAP1/f83KMYRscbJyzc76nSrAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA7LHvAQAA///DgjXa") r4 = syz_open_procfs(0x0, &(0x7f0000000100)='mountinfo\x00') r5 = open(&(0x7f0000000080)='./file1\x00', 0x10b942, 0x0) sendfile(r5, r4, 0x0, 0x80000000) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70800000000ebff7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x33, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='kfree\x00', r6}, 0x10) r7 = syz_open_dev$usbfs(&(0x7f0000000100), 0x205, 0x8401) ioctl$USBDEVFS_SUBMITURB(r7, 0x8038550a, &(0x7f0000000000)=@urb_type_control={0x2, {}, 0x0, 0x0, &(0x7f0000000080)={0x0, 0xe, 0x0, 0x0, 0x7995}, 0x799d, 0x0, 0x0, 0x48000000, 0x0, 0x1, 0x0}) 22m35.209594024s ago: executing program 9 (id=2840): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0) mount$bind(&(0x7f0000000380)='./file0\x00', &(0x7f0000000200)='./file0\x00', 0x0, 0x2125099, 0x0) r0 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r0, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) mount$bind(&(0x7f0000000000)='./file0/../file0\x00', &(0x7f0000000340)='./file0/file0\x00', 0x0, 0x89101a, 0x0) mount$bind(&(0x7f0000000100)='./file0\x00', &(0x7f0000000280)='./file0/../file0\x00', 0x0, 0x1adc51, 0x0) mount$bind(&(0x7f00000003c0)='./file0\x00', &(0x7f0000000440)='./file0/file0\x00', 0x0, 0x12f451, 0x0) mount$bind(&(0x7f00000000c0)='.\x00', &(0x7f0000000080)='./file0/file0/file0\x00', 0x0, 0x80700a, 0x0) 22m35.167852354s ago: executing program 9 (id=2841): prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000080)={'pim6reg1\x00', 0xe511}) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0100000004000000ff0f00000300000000000000", @ANYRES32, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\x00', @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) ioctl$TUNSETQUEUE(r0, 0x400454d9, &(0x7f0000000280)={'macvlan1\x00', 0x400}) syz_usb_connect(0x0, 0x2d, &(0x7f0000000580)=ANY=[@ANYBLOB="12010000459bb2405804035000000000000109021b000111000000090400000195699b0009058b", @ANYRES32], 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x16, 0x0, 0x4, 0xff, 0x0, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000003c0)={{r1}, 0x0, &(0x7f0000000040)}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000500)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r2}, 0x10) close(r0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f00000002c0)={'bridge_slave_0\x00', 0x0}) r4 = socket$nl_route(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)) socket$inet6(0xa, 0x2, 0x0) r5 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x1b) bpf$MAP_LOOKUP_ELEM(0x5, &(0x7f00000000c0)={r5, &(0x7f0000000000), &(0x7f0000000040)=""/73}, 0x70) sendmsg$nl_route(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000280)=ANY=[@ANYBLOB="54000000100001040000000002000000000000", @ANYRES32, @ANYBLOB="0000faffffff000034001280110001006272696467655f736c617665000000001c000580050021000000000006001f0000000000080022"], 0x54}}, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r6, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000280)=@getchain={0x24, 0x11, 0x839, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {0x8}, {0xa}}}, 0x24}}, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000280)={0x0}, 0x18) 22m34.806205025s ago: executing program 9 (id=2843): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x17, 0x0, 0x4, 0xff, 0x0, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB, @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000940)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x25, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f00000001c0)='sched_kthread_work_queue_work\x00', r1}, 0x10) socketpair(0x11, 0xa, 0x0, &(0x7f0000001080)) 22m34.718987316s ago: executing program 47 (id=2843): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x17, 0x0, 0x4, 0xff, 0x0, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB, @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000940)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x25, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f00000001c0)='sched_kthread_work_queue_work\x00', r1}, 0x10) socketpair(0x11, 0xa, 0x0, &(0x7f0000001080)) 21m46.764441483s ago: executing program 4 (id=2977): socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r1, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x0) recvmsg$unix(r0, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000080), 0x100}, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0200000004000000930a0000040000000010"], 0x48) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x48) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000280)=ANY=[@ANYBLOB="18000000000000000000000000000000850000005000000018", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000001b80)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x36, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000005c0)={&(0x7f0000000080)='kfree\x00', r3}, 0x10) syz_usb_connect(0x0, 0x24, &(0x7f0000000100)=ANY=[], 0x0) 21m46.200408385s ago: executing program 4 (id=2982): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r2 = getpid() sched_setscheduler(r2, 0x1, &(0x7f0000000100)=0x5) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000200)='sched_switch\x00', r1}, 0x10) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f00000bd000), 0x318, 0x0) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680)) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) write$P9_RVERSION(0xffffffffffffffff, &(0x7f0000000080)=ANY=[@ANYBLOB="1500000065ffff097b"], 0x15) syz_mount_image$msdos(&(0x7f00000001c0), &(0x7f0000000080)='./file1\x00', 0x0, &(0x7f00000004c0)={[{@fat=@uid}, {@fat=@dos1xfloppy}, {@dots}, {@dots}, {@dots}, {@nodots}, {@dots}, {@nodots}, {@fat=@umask={'umask', 0x3d, 0x8b3}}, {@dots}, {@fat=@nocase}, {@dots}, {@dots}, {@dots}, {@nodots}, {@dots}, {@fat=@dos1xfloppy}, {@nodots}, {@fat=@time_offset={'time_offset', 0x3d, 0x3ac}}, {@nodots}, {@nodots}, {@nodots}]}, 0xfd, 0x1bf, &(0x7f0000000300)="$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") r5 = syz_open_procfs(0x0, &(0x7f0000000100)='mountinfo\x00') r6 = open(&(0x7f0000000080)='./file1\x00', 0x10b942, 0x0) sendfile(r6, r5, 0x0, 0x80000000) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70800000000ebff7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x33, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='kfree\x00', r7}, 0x10) r8 = syz_open_dev$usbfs(&(0x7f0000000100), 0x205, 0x8401) ioctl$USBDEVFS_SUBMITURB(r8, 0x8038550a, &(0x7f0000000000)=@urb_type_control={0x2, {}, 0x0, 0x0, &(0x7f0000000080)={0x0, 0xe, 0x0, 0x0, 0x7995}, 0x799d, 0x0, 0x0, 0x48000000, 0x0, 0x1, 0x0}) 21m44.763927702s ago: executing program 4 (id=2986): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0b00000007000000080000000800000005"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000000400000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(0x0, 0x1, &(0x7f0000000100)=0x5) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000200)='sched_switch\x00', r1}, 0x10) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680)) syz_clone3(&(0x7f0000001240)={0x2d000000, 0x0, 0x0, 0x0, {0x20}, 0x0, 0x0, 0x0, 0x0}, 0x58) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) write$P9_RVERSION(0xffffffffffffffff, &(0x7f0000000080)=ANY=[@ANYBLOB="1500000065ffff097b"], 0x15) syz_mount_image$msdos(&(0x7f00000001c0), &(0x7f0000000080)='./file1\x00', 0x0, &(0x7f00000004c0)={[{@fat=@uid}, {@fat=@dos1xfloppy}, {@dots}, {@dots}, {@dots}, {@nodots}, {@dots}, {@nodots}, {@fat=@umask={'umask', 0x3d, 0x8b3}}, {@dots}, {@fat=@nocase}, {@dots}, {@dots}, {@dots}, {@nodots}, {@dots}, {@fat=@dos1xfloppy}, {@nodots}, {@fat=@time_offset={'time_offset', 0x3d, 0x3ac}}, {@nodots}, {@nodots}, {@nodots}]}, 0xfd, 0x1bf, &(0x7f0000000300)="$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") r4 = syz_open_procfs(0x0, &(0x7f0000000100)='mountinfo\x00') r5 = open(&(0x7f0000000080)='./file1\x00', 0x10b942, 0x0) sendfile(r5, r4, 0x0, 0x80000000) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70800000000ebff7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x33, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='kfree\x00', r6}, 0x10) r7 = syz_open_dev$usbfs(&(0x7f0000000100), 0x205, 0x8401) ioctl$USBDEVFS_SUBMITURB(r7, 0x8038550a, &(0x7f0000000000)=@urb_type_control={0x2, {}, 0x0, 0x0, &(0x7f0000000080)={0x0, 0xe, 0x0, 0x0, 0x7995}, 0x799d, 0x0, 0x0, 0x48000000, 0x0, 0x1, 0x0}) 21m43.588057138s ago: executing program 4 (id=2991): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0) mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0) r0 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r0, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) mount$bind(&(0x7f0000000000)='./file0/../file0\x00', &(0x7f0000000340)='./file0/file0\x00', 0x0, 0x89101a, 0x0) mount$bind(&(0x7f0000000100)='./file0\x00', &(0x7f0000000280)='./file0/../file0\x00', 0x0, 0x1adc51, 0x0) mount$bind(&(0x7f00000003c0)='./file0\x00', &(0x7f0000000440)='./file0/file0\x00', 0x0, 0x12f451, 0x0) mount$bind(&(0x7f00000000c0)='.\x00', &(0x7f0000000080)='./file0/file0/file0\x00', 0x0, 0x80700a, 0x0) umount2(&(0x7f0000000100)='./file0/file0\x00', 0xb) 21m43.576317958s ago: executing program 4 (id=2992): syz_mount_image$f2fs(&(0x7f0000000140), &(0x7f00000000c0)='./file0\x00', 0x0, &(0x7f0000000300)={[{@nodiscard}, {@fault_type={'fault_type', 0x3d, 0x291}}, {@acl}, {@alloc_mode_reuse}, {@jqfmt_vfsv0}, {@disable_roll_forward}, {@background_gc_on}, {@nobarrier}, {@noflush_merge}, {@user_xattr}, {@fsync_mode_strict}, {@adaptive_mode}, {@jqfmt_vfsold}, {@noinline_dentry}]}, 0x1, 0x5505, &(0x7f0000002480)="$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") openat(0xffffffffffffff9c, 0x0, 0x20040, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xc, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) syz_open_procfs(0xffffffffffffffff, 0x0) r3 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r4 = ioctl$LOOP_CTL_GET_FREE(r3, 0x4c82) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x16, 0x0, 0x4, 0xff, 0x0, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008000000000000000000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f0000000300)='sched_switch\x00', r6}, 0x10) ioctl$LOOP_CTL_REMOVE(r3, 0x4c81, r4) 21m43.390023428s ago: executing program 4 (id=2993): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000edff0000000000000000850000000f00000018010000646c012500000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000800000850000000600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000580)={&(0x7f0000000540)='fib6_table_lookup\x00', r0}, 0x10) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000580)={&(0x7f0000000800)='fib6_table_lookup\x00', r1}, 0x10) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000002e00)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0x222, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r2, 0x18000000000002a0, 0x1e6, 0x0, &(0x7f0000000980)="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", 0x0, 0x2f, 0xe8034000, 0x0, 0x0, &(0x7f0000000000), 0x0, 0x5dc}, 0x50) 21m43.14611678s ago: executing program 48 (id=2993): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000edff0000000000000000850000000f00000018010000646c012500000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000800000850000000600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000580)={&(0x7f0000000540)='fib6_table_lookup\x00', r0}, 0x10) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000580)={&(0x7f0000000800)='fib6_table_lookup\x00', r1}, 0x10) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000002e00)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0x222, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r2, 0x18000000000002a0, 0x1e6, 0x0, &(0x7f0000000980)="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", 0x0, 0x2f, 0xe8034000, 0x0, 0x0, &(0x7f0000000000), 0x0, 0x5dc}, 0x50) 20m45.372132703s ago: executing program 0 (id=3159): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) add_key$user(&(0x7f0000000780), 0x0, 0x0, 0x0, 0xffffffffffffffff) r4 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000440)='sched_switch\x00', 0xffffffffffffffff, 0x0, 0x1}, 0x18) syz_open_dev$loop(&(0x7f0000000240), 0x20364, 0x1) keyctl$chown(0x4, 0x0, 0x0, 0x0) setgroups(0x1, &(0x7f0000000340)=[0x0]) close(r2) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r5, 0x0, 0x0) sendmsg$IPSET_CMD_DESTROY(r5, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000040)=ANY=[@ANYRESHEX=r4], 0x1c}}, 0x0) r6 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r6, &(0x7f0000000200)={0x2, 0x4e20, @empty}, 0x10) connect$inet(r6, 0x0, 0x0) setsockopt$inet_tcp_TCP_CONGESTION(r6, 0x6, 0xd, &(0x7f0000000000)='yeah\x00', 0x5) sendmsg$inet(r6, &(0x7f00000015c0)={0x0, 0x0, 0x0}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000540)=@newqdisc={0x3c, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {0x0, 0x8}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_codel={{0xa}, {0xc, 0x2, [@TCA_CODEL_LIMIT={0x8}]}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x40001}, 0x4000080) 20m44.509581677s ago: executing program 0 (id=3162): syz_mount_image$f2fs(&(0x7f0000000140), &(0x7f00000000c0)='./file0\x00', 0x0, &(0x7f0000000300)={[{@nodiscard}, {@fault_type={'fault_type', 0x3d, 0x291}}, {@acl}, {@alloc_mode_reuse}, {@jqfmt_vfsv0}, {@disable_roll_forward}, {@background_gc_on}, {@nobarrier}, {@noflush_merge}, {@user_xattr}, {@fsync_mode_strict}, {@adaptive_mode}, {@jqfmt_vfsold}, {@noinline_dentry}]}, 0x1, 0x5505, &(0x7f0000002480)="$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") openat(0xffffffffffffff9c, 0x0, 0x20040, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xc, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='mountinfo\x00') r3 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$LOOP_CTL_GET_FREE(r3, 0x4c82) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x16, 0x0, 0x4, 0xff, 0x0, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f0000000300)='sched_switch\x00', r5}, 0x10) r6 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r7 = ioctl$KVM_CREATE_VM(r6, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r7, 0xae60) r8 = eventfd(0x0) eventfd(0x0) ioctl$KVM_IRQFD(r7, 0x4020ae76, &(0x7f0000000380)={r8, 0xfffffffd, 0x2, r8}) unshare(0x42040000) 20m41.412633422s ago: executing program 0 (id=3169): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000340)=ANY=[@ANYBLOB="12010000000000406c256d0000000000000109022400010000000009040000010300000009210000000122050009058103"], 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0xb, 0x7, 0x10001, 0x8, 0x1, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r1}, 0x10) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, &(0x7f0000000540)={0x2c, &(0x7f0000000200)={0x0, 0x0, 0x5, {0x5, 0x0, "a8c6df"}}, 0x0, 0x0, 0x0, 0x0}, 0x0) syz_usb_control_io$hid(r0, &(0x7f00000002c0)={0x24, 0x0, &(0x7f0000000580)=ANY=[@ANYBLOB="0003020000000003"], 0x0, 0x0}, 0x0) syz_usb_control_io$hid(r0, &(0x7f0000000280)={0x24, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="000312"], 0x0, 0x0}, 0x0) 20m37.936117378s ago: executing program 0 (id=3179): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0) mount$bind(&(0x7f0000000380)='./file0\x00', 0x0, 0x0, 0x2125099, 0x0) mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0) r0 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r0, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) mount$bind(&(0x7f0000000000)='./file0/../file0\x00', &(0x7f0000000340)='./file0/file0\x00', 0x0, 0x89101a, 0x0) mount$bind(&(0x7f0000000100)='./file0\x00', &(0x7f0000000280)='./file0/../file0\x00', 0x0, 0x1adc51, 0x0) mount$bind(&(0x7f00000003c0)='./file0\x00', &(0x7f0000000440)='./file0/file0\x00', 0x0, 0x12f451, 0x0) mount$bind(&(0x7f00000000c0)='.\x00', &(0x7f0000000080)='./file0/file0/file0\x00', 0x0, 0x80700a, 0x0) umount2(&(0x7f0000000100)='./file0/file0\x00', 0xb) 20m37.922115208s ago: executing program 0 (id=3180): prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x7, &(0x7f0000000540)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000002000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x17, 0x0, 0x4, 0x3, 0x0, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1], 0x0, 0x0, 0x0, 0x0, 0x0, 0x1e, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r2}, 0x10) bpf$BPF_GET_BTF_INFO(0xf, &(0x7f0000000540)={0xffffffffffffffff, 0x20, &(0x7f00000000c0)={&(0x7f0000000340)=""/205, 0xcd, 0x0, &(0x7f0000000440)=""/208, 0xd0}}, 0x10) r3 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) bind$bt_sco(r3, 0x0, 0x0) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xb, &(0x7f0000000c00)=ANY=[@ANYBLOB="18000000000000000000000023ed0000180100002820702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000083850000007100000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000040)='kmem_cache_free\x00', r4}, 0x10) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) utimes(0x0, 0x0) getsockopt$bt_BT_DEFER_SETUP(r3, 0x112, 0x7, &(0x7f0000000080)=0x1, &(0x7f00000000c0)=0x4) r5 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r6 = ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0) syz_usb_connect(0x0, 0x6a, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000093ef85402104280184a6010203010902"], 0x0) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x22000406, &(0x7f0000000580)={[{@dioread_lock}, {@lazytime}, {@journal_ioprio}, {@auto_da_alloc}, {@auto_da_alloc}, {@grpjquota, 0x2e}, {@minixdf}, {@errors_remount}, {@lazytime}, {@grpid}], [{@fowner_gt}], 0x2c}, 0x84, 0x485, &(0x7f0000000dc0)="$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") r7 = ioctl$KVM_CREATE_VCPU(r6, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r6, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r7, &(0x7f0000014000/0x18000)=nil, 0x0, 0x0, 0x8, 0x0, 0x0) ioctl$KVM_RUN(r7, 0xae80, 0x0) r8 = socket$nl_generic(0x11, 0x3, 0x10) sendmsg(r8, &(0x7f0000000640)={&(0x7f00000000c0)=@caif=@dgm={0x25, 0xd}, 0x2c, &(0x7f00000005c0)=[{&(0x7f0000000000)="4ba72c4cfd81685544f46c3f0800", 0x3e}], 0x2, 0x0, 0x0, 0x11000000}, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) 20m37.579894589s ago: executing program 0 (id=3182): syz_mount_image$exfat(&(0x7f0000006c00), &(0x7f0000001b40)='./file0\x00', 0x208008de, &(0x7f0000000080)=ANY=[@ANYRES8=0x0, @ANYRESDEC, @ANYBLOB=',umask=00000000000000000000077,umask=00000000000000000005676,uid=', @ANYRESHEX=0x0, @ANYRES64=0x0, @ANYRESHEX=0x0, @ANYRES64], 0x1, 0x1506, &(0x7f0000001b80)="$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") r0 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r0}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000340)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) futex(&(0x7f000000cffc)=0x1, 0x6, 0x0, 0x0, 0x0, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="19000000040000000800000008"], 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000600)={{r1}, &(0x7f0000000000), &(0x7f00000005c0)}, 0x20) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000006c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f0000000300)='sched_switch\x00', r2}, 0x10) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) 20m35.957885677s ago: executing program 49 (id=3182): syz_mount_image$exfat(&(0x7f0000006c00), &(0x7f0000001b40)='./file0\x00', 0x208008de, &(0x7f0000000080)=ANY=[@ANYRES8=0x0, @ANYRESDEC, @ANYBLOB=',umask=00000000000000000000077,umask=00000000000000000005676,uid=', @ANYRESHEX=0x0, @ANYRES64=0x0, @ANYRESHEX=0x0, @ANYRES64], 0x1, 0x1506, &(0x7f0000001b80)="$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") r0 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r0}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000340)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) futex(&(0x7f000000cffc)=0x1, 0x6, 0x0, 0x0, 0x0, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="19000000040000000800000008"], 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000600)={{r1}, &(0x7f0000000000), &(0x7f00000005c0)}, 0x20) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000006c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f0000000300)='sched_switch\x00', r2}, 0x10) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) 17m32.219153796s ago: executing program 7 (id=3726): syz_mount_image$f2fs(&(0x7f0000000140), &(0x7f00000000c0)='./file0\x00', 0x0, &(0x7f0000000300)={[{@nodiscard}, {@fault_type={'fault_type', 0x3d, 0x291}}, {@acl}, {@alloc_mode_reuse}, {@jqfmt_vfsv0}, {@disable_roll_forward}, {@background_gc_on}, {@nobarrier}, {@noflush_merge}, {@user_xattr}, {@fsync_mode_strict}, {@adaptive_mode}, {@jqfmt_vfsold}, {@noinline_dentry}]}, 0x1, 0x5505, &(0x7f0000002480)="$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") openat(0xffffffffffffff9c, 0x0, 0x20040, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xc, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='mountinfo\x00') r3 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$LOOP_CTL_GET_FREE(r3, 0x4c82) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x16, 0x0, 0x4, 0xff, 0x0, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f0000000300)='sched_switch\x00', r5}, 0x10) r6 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r6, 0xae60) r7 = eventfd(0x0) ioctl$KVM_IRQFD(r6, 0x4020ae76, &(0x7f0000000380)={0xffffffffffffffff, 0xfffffffd, 0x2}) ioctl$KVM_IRQFD(r6, 0x4020ae76, &(0x7f0000000080)={r7, 0xffffffff, 0x2}) unshare(0x42040000) 17m28.041570476s ago: executing program 7 (id=3734): socket$nl_netfilter(0x10, 0x3, 0xc) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, 0x0, 0x0, 0x2, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x19, 0x4, 0x8, 0x8, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000107b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000925e850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r5 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f0000000300)='sched_switch\x00', r4}, 0x10) ioctl$sock_inet_tcp_SIOCOUTQNSD(0xffffffffffffffff, 0x894b, &(0x7f0000000180)) r6 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TIOCSETD(r6, 0x5423, &(0x7f0000000000)=0xf) pipe2$9p(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r7, &(0x7f0000000300)=ANY=[@ANYBLOB="1500000065ffff017f000e0800395032303030"], 0x15) poll(&(0x7f0000000040)=[{0xffffffffffffffff, 0x1000}, {r2, 0x22}, {r6, 0x4002}, {r6, 0x4000}, {r4, 0x4094}, {r5, 0x2000}], 0x6, 0x43) 17m27.444304908s ago: executing program 7 (id=3738): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x11, 0x5, &(0x7f00000002c0)=ANY=[@ANYBLOB="18050000000000fe000000004b64ffec850000007d000000040000000700000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socket$inet6(0xa, 0x80002, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000000)={'\x00', 0x5}) ioctl$UI_SET_ABSBIT(0xffffffffffffffff, 0x40045567, 0x4) r3 = socket$nl_generic(0x10, 0x3, 0x10) unlinkat(0xffffffffffffffff, 0x0, 0x200) bpf$PROG_LOAD(0x5, &(0x7f0000000c00)={0x1, 0x13, &(0x7f0000001600)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020786c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000800000018010000202075250000"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r4 = creat(&(0x7f0000000140)='./bus\x00', 0x0) r5 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000001440)=ANY=[@ANYBLOB="1c0000005e0021a5553f8c6b23cbff070000e5373526a01edb"], 0x1c}}, 0x0) recvmmsg$unix(r5, &(0x7f0000002380)=[{{0x0, 0x0, &(0x7f0000001340)=[{&(0x7f00000002c0)=""/4096, 0x1004}], 0x1}}], 0x8, 0x34000, 0x0) ftruncate(r4, 0x12081ff) r6 = open(&(0x7f0000000200)='./bus\x00', 0x14507e, 0x0) sendfile(r6, r6, 0x0, 0x100000000) sendmsg$BATADV_CMD_TP_METER_CANCEL(r3, &(0x7f0000000240)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x4}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x801}, 0x40000) 17m26.324074844s ago: executing program 7 (id=3742): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0) mount$bind(&(0x7f0000000380)='./file0\x00', &(0x7f0000000200)='./file0\x00', 0x0, 0x2125099, 0x0) mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0) r0 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r0, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) mount$bind(&(0x7f0000000000)='./file0/../file0\x00', &(0x7f0000000340)='./file0/file0\x00', 0x0, 0x89101a, 0x0) mount$bind(&(0x7f0000000100)='./file0\x00', &(0x7f0000000280)='./file0/../file0\x00', 0x0, 0x1adc51, 0x0) mount$bind(&(0x7f00000003c0)='./file0\x00', &(0x7f0000000440)='./file0/file0\x00', 0x0, 0x12f451, 0x0) mount$bind(0x0, &(0x7f0000000080)='./file0/file0/file0\x00', 0x0, 0x80700a, 0x0) umount2(&(0x7f0000000100)='./file0/file0\x00', 0xb) 17m26.267323634s ago: executing program 7 (id=3743): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x11, 0x5, &(0x7f00000002c0)=ANY=[@ANYBLOB="18050000000000fe000000004b64ffec850000007d00000004000000070000"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socket$inet6(0xa, 0x80002, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000000)={'\x00', 0x5}) unlinkat(0xffffffffffffffff, 0x0, 0x200) bpf$PROG_LOAD(0x5, &(0x7f0000000c00)={0x1, 0x13, &(0x7f0000001600)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020786c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000800000018010000202075250000"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r3 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000001440)=ANY=[@ANYBLOB="1c0000005e0021a5553f8c6b23cbff070000e5373526a01edb"], 0x1c}}, 0x0) ftruncate(0xffffffffffffffff, 0x12081ff) open(&(0x7f0000000200)='./bus\x00', 0x14507e, 0x0) sendmsg$BATADV_CMD_TP_METER_CANCEL(0xffffffffffffffff, &(0x7f0000000240)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x4}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x801}, 0x40000) 17m25.863948796s ago: executing program 7 (id=3746): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x11, 0x5, 0x0, &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000001440)=ANY=[@ANYBLOB="1c0000005e0021a5553f8c6b23cbff070000e5373526a01edb"], 0x1c}}, 0x0) recvmmsg$unix(r3, &(0x7f0000002380)=[{{0x0, 0x0, &(0x7f0000001340)=[{&(0x7f00000002c0)=""/4096, 0x1004}], 0x1}}], 0x8, 0x34000, 0x0) ftruncate(0xffffffffffffffff, 0x12081ff) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x100000000) 17m25.835983566s ago: executing program 50 (id=3746): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x11, 0x5, 0x0, &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000001440)=ANY=[@ANYBLOB="1c0000005e0021a5553f8c6b23cbff070000e5373526a01edb"], 0x1c}}, 0x0) recvmmsg$unix(r3, &(0x7f0000002380)=[{{0x0, 0x0, &(0x7f0000001340)=[{&(0x7f00000002c0)=""/4096, 0x1004}], 0x1}}], 0x8, 0x34000, 0x0) ftruncate(0xffffffffffffffff, 0x12081ff) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x100000000) 9m27.759245872s ago: executing program 6 (id=5314): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0b00000007000000080000000800000005"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000000400000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r2 = getpid() sched_setscheduler(r2, 0x1, &(0x7f0000000100)=0x5) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000200)='sched_switch\x00', r1}, 0x10) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f00000bd000), 0x318, 0x0) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680)) syz_clone3(&(0x7f0000001240)={0x2d000000, 0x0, 0x0, 0x0, {0x20}, 0x0, 0x0, 0x0, 0x0}, 0x58) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) write$P9_RVERSION(0xffffffffffffffff, &(0x7f0000000080)=ANY=[@ANYBLOB="1500000065ffff097b"], 0x15) syz_mount_image$msdos(&(0x7f00000001c0), &(0x7f0000000080)='./file1\x00', 0x0, &(0x7f00000004c0)={[{@fat=@uid}, {@fat=@dos1xfloppy}, {@dots}, {@dots}, {@dots}, {@nodots}, {@dots}, {@nodots}, {@fat=@umask={'umask', 0x3d, 0x8b3}}, {@dots}, {@fat=@nocase}, {@dots}, {@dots}, {@dots}, {@nodots}, {@dots}, {@fat=@dos1xfloppy}, {@nodots}, {@fat=@time_offset={'time_offset', 0x3d, 0x3ac}}, {@nodots}, {@nodots}, {@nodots}]}, 0xfd, 0x1bf, &(0x7f0000000300)="$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") r5 = syz_open_procfs(0x0, &(0x7f0000000100)='mountinfo\x00') r6 = open(&(0x7f0000000080)='./file1\x00', 0x10b942, 0x0) sendfile(r6, r5, 0x0, 0x80000000) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70800000000ebff7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x33, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='kfree\x00', r7}, 0x10) r8 = syz_open_dev$usbfs(&(0x7f0000000100), 0x205, 0x8401) ioctl$USBDEVFS_SUBMITURB(r8, 0x8038550a, &(0x7f0000000000)=@urb_type_control={0x2, {}, 0x0, 0x0, &(0x7f0000000080)={0x0, 0xe, 0x0, 0x0, 0x7995}, 0x799d, 0x0, 0x0, 0x48000000, 0x0, 0x1, 0x0}) 9m26.554730648s ago: executing program 6 (id=5318): write$P9_RREADDIR(0xffffffffffffffff, 0x0, 0x0) sched_setscheduler(0x0, 0x1, 0x0) r0 = getpid() sched_setaffinity(0x0, 0x0, 0x0) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2500000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r4 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r3}, 0x10) ioctl$FS_IOC_FIEMAP(r4, 0xc020660b, 0x0) r5 = syz_open_procfs(0x0, &(0x7f0000000100)='net/softnet_stat\x00') pread64(r5, &(0x7f000001a240)=""/102400, 0x19000, 0x0) 9m24.566788599s ago: executing program 6 (id=5329): openat(0xffffffffffffff9c, 0x0, 0x20040, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xc, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, 0x0, 0x0, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) ioctl$LOOP_CTL_GET_FREE(0xffffffffffffffff, 0x4c82) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x16, 0x0, 0x4, 0xff, 0x0, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f0000000300)='sched_switch\x00', r4}, 0x10) r5 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r6 = ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0) ioctl$KVM_IRQFD(r6, 0x4020ae76, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffff, 0x2}) unshare(0x42040000) 9m22.263102482s ago: executing program 6 (id=5338): mkdir(&(0x7f0000000040)='./file0\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000480)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}]}) chdir(0x0) r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000200)='.\x00', 0x0, 0x0) getdents(r0, 0x0, 0x0) lseek(r0, 0x10000, 0x0) r1 = syz_usb_connect$hid(0x1, 0x36, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x8, 0x1038, 0x1410, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x7}}}}]}}]}}, 0x0) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r2 = syz_open_dev$tty1(0xc, 0x4, 0x4) ioctl$TCSETS(r2, 0x5402, &(0x7f0000000ac0)={0x80000001, 0xc, 0x6, 0x3, 0x16, "a63cf6354d7e7d25f0dca7fa4d024d9d9a9c5c"}) r3 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r3}, 0x10) syz_usb_control_io$hid(r1, 0x0, 0x0) syz_mount_image$ext4(0x0, &(0x7f0000000440)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="180100001c0000000000000000000004850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r4}, 0x10) mount$incfs(&(0x7f0000000080)='./bus\x00', &(0x7f0000000100)='./file0\x00', &(0x7f0000000000), 0x0, 0x0) syz_usb_control_io(r1, &(0x7f0000000700)={0x2c, &(0x7f0000000380)={0x0, 0x0, 0x7, {0x7, 0x0, "b27814d066"}}, 0x0, 0x0, 0x0, 0x0}, 0x0) r5 = syz_usb_connect$cdc_ecm(0x5, 0x76, &(0x7f00000000c0)={{0x12, 0x1, 0x200, 0x2, 0x0, 0x0, 0x10, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x64, 0x1, 0x1, 0x10, 0xd0, 0x37, [{{0x9, 0x4, 0x0, 0x7, 0x3, 0x2, 0x6, 0x0, 0x80, {{0x6, 0x24, 0x6, 0x0, 0x0, "f9"}, {0x5, 0x24, 0x0, 0xeb}, {0xd, 0x24, 0xf, 0x1, 0x7, 0x2000, 0x7, 0x8}, [@obex={0x5, 0x24, 0x15, 0x4}, @dmm={0x7, 0x24, 0x14, 0x7, 0x1af2}, @mbim={0xc, 0x24, 0x1b, 0x2, 0x7, 0xf2, 0x6, 0xb, 0xf8}, @dmm={0x7, 0x24, 0x14, 0x7, 0x8}]}, {[{{0x9, 0x5, 0x81, 0x3, 0x0, 0xff, 0x3c, 0x9}}], {{0x9, 0x5, 0x82, 0x2, 0x400, 0x4b, 0x6, 0x80}}, {{0x9, 0x5, 0x3, 0x2, 0x400, 0x3c, 0xb9, 0x5}}}}}]}}]}}, &(0x7f0000000240)={0xa, &(0x7f0000000040)={0xa, 0x6, 0x250, 0x4, 0x3, 0x80, 0x30, 0xff}, 0x5, &(0x7f0000000bc0)=ANY=[@ANYBLOB="0000009db9b8bedb5ddf8e"], 0x2, [{0x4, &(0x7f0000000180)=@lang_id={0x4, 0x3, 0x843}}, {0x4, &(0x7f00000001c0)=@lang_id={0x4, 0x3, 0x83e}}]}) r6 = syz_usb_connect(0x0, 0x2d, &(0x7f0000000500)=ANY=[@ANYBLOB="12010000066930108205050088000002030109021b000100000000090402000191baf205"], 0x0) syz_usb_control_io$cdc_ecm(r6, &(0x7f0000000540)={0x14, 0x0, &(0x7f0000000400)={0x0, 0x3, 0x1a, {0x1a}}}, 0x0) syz_usb_control_io$printer(r6, &(0x7f00000007c0)={0x14, &(0x7f0000000600)={0x40, 0xb, 0xee, {0xee, 0x7, "98ccf43f852611f034b9d49848ad37f80087c8ee0417a80b209e6e3da40593198984e3b70d9da38c42b8c58a80ecb69d6a1af60b8fcea73a257527dcc5bdfe870ea23ab7c3f16fc34bda22c665e4d64d59307112ff7bfd3bf285925ad5df9186c5b95389173b779cf5bfc10afff1f64fad68bdb5a7710a63c019f07992e485d90ecf98eb3a4cd8af4d4288f5262a3382449fe4802c05de13c4e8b214d29b116d53509ad582b99b1cbf2eb79b0c69bec9da51dc757dd69786ee619280585fc8020473985443be1077337d6defca597475dda1e7ecdec1fd526bbdee1a3e92e8c5d5f5f2d323e91795421bdb56"}}, &(0x7f0000000740)={0x0, 0x3, 0x6d, @string={0x6d, 0x3, "25df41bd0c19286bdd1559cf508eb623031da1996f8a3a89fac7e4a15c8ad71c00297a905580f9db597725e12345538454d3acd08a61843c6c422d3b6df82aea99c7463913d1ff7b3b690d21f076318f0afd5092f211442c7b82f83ddbd62f1ef4282aa4f2c4875bd3f8a3"}}}, &(0x7f0000000a80)={0x34, &(0x7f0000000800)={0x20, 0x13, 0x4e, "82f65a33c42d9c9b22109f091af93e70c2fe906f53728c0342727ef55f76e6ecc02bfddeedc18b7c631991189fd0c8490752c3269b4cef593ebbdca3f42d0fc8b0f82d7bff09b0162427ab003ec3"}, &(0x7f0000000880)={0x0, 0xa, 0x1, 0x1}, &(0x7f00000008c0)={0x0, 0x8, 0x1, 0xe}, &(0x7f0000000900)={0x20, 0x0, 0x56, {0x54, "94b4adf98a543d8408fcb8242bd5ee6c7533e636b55a5f42795622348cf623239852df6295afdd8c79dbfcaf67b4dc44b2827cc8cc972512b08677a44f439576fe1c420e99d5afe9b9a7ddb70db1f2a726f74d7b"}}, &(0x7f0000000980)={0x20, 0x1, 0x1, 0x8}, &(0x7f0000000a40)={0x20, 0x0, 0x1, 0xe7}}) syz_usb_control_io$cdc_ecm(r5, &(0x7f00000002c0)={0x14, &(0x7f00000003c0)={0x0, 0x26, 0x2, {0x2, 0x10}}, &(0x7f0000000280)={0x0, 0x3, 0x1a, {0x1a}}}, &(0x7f00000005c0)={0x1c, &(0x7f0000000500)={0x40, 0x7, 0x6e, "9019918133f490d055b5e88817d32d9dc8b8e75a30b9fa6b4278a170c84ce4babc8d6b539fc6f74556e132b235d3383952af67b717c0e76d51eb2a9d11190f19dfa5f748719adbb5c6c50dcf41a20380cc46939ea8cc66353c322cb4629e7b6b458b90240401505e9a3b6901b657"}, &(0x7f0000000300)={0x0, 0xa, 0x1, 0xf}, &(0x7f0000000580)={0x0, 0x8, 0x1, 0x5}}) 9m18.685070451s ago: executing program 6 (id=5349): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x18, 0x7, &(0x7f0000000540)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000001000000850000008600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000a80)='kfree\x00', r1}, 0x10) syz_usb_connect(0x1, 0x2d, &(0x7f00000000c0)=ANY=[@ANYBLOB="1201000009a65d0860040800dec3010203010902"], &(0x7f00000009c0)={0x0, 0x0, 0x0, 0x0, 0x3, [{0x0, 0x0}, {0x0, 0x0}, {0x0, 0x0}]}) 9m18.575339071s ago: executing program 6 (id=5351): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file3\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18090000000000000000000000000000850000006d0000001801000020696c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007000000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x20, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r3}, 0x10) syz_mount_image$fuse(0x0, &(0x7f0000001040)='./file2\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount$overlay(0x0, 0x0, &(0x7f0000000000), 0x0, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, 0x0, &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, 0x0, 0x0) r5 = socket$tipc(0x1e, 0x5, 0x0) bind$tipc(r5, &(0x7f0000000000)=@nameseq={0x1e, 0x1, 0x0, {0x41}}, 0x10) listen(r5, 0x0) r6 = socket$tipc(0x1e, 0x5, 0x0) sendmsg$tipc(r6, &(0x7f0000000240)={&(0x7f0000000080)=@name={0x1e, 0x2, 0x0, {{0x41}}}, 0x10, 0x0}, 0x0) accept4$tipc(r5, 0x0, 0x0, 0x0) sendmsg$nl_generic(r4, 0x0, 0x800) openat$fuse(0xffffffffffffff9c, &(0x7f0000000040), 0x42, 0x0) 9m17.496129138s ago: executing program 51 (id=5351): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file3\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18090000000000000000000000000000850000006d0000001801000020696c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007000000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x20, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r3}, 0x10) syz_mount_image$fuse(0x0, &(0x7f0000001040)='./file2\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount$overlay(0x0, 0x0, &(0x7f0000000000), 0x0, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, 0x0, &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, 0x0, 0x0) r5 = socket$tipc(0x1e, 0x5, 0x0) bind$tipc(r5, &(0x7f0000000000)=@nameseq={0x1e, 0x1, 0x0, {0x41}}, 0x10) listen(r5, 0x0) r6 = socket$tipc(0x1e, 0x5, 0x0) sendmsg$tipc(r6, &(0x7f0000000240)={&(0x7f0000000080)=@name={0x1e, 0x2, 0x0, {{0x41}}}, 0x10, 0x0}, 0x0) accept4$tipc(r5, 0x0, 0x0, 0x0) sendmsg$nl_generic(r4, 0x0, 0x800) openat$fuse(0xffffffffffffff9c, &(0x7f0000000040), 0x42, 0x0) 12.354292742s ago: executing program 3 (id=7236): r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a60000000060a090400"], 0xbf}}, 0x4000) socket$nl_generic(0x10, 0x3, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000240)={0xc, 0xfffffffffffff800}, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000ac0)=ANY=[@ANYBLOB="1800000000000000000000000000000018010000786c6c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000fdffff"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r1}, 0x10) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r2 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) openat$binderfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) tkill(r2, 0x35) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r5, 0x29, 0x40, &(0x7f0000000980)=@raw={'raw\x00', 0x3c1, 0x3, 0x3f0, 0x0, 0xc8, 0x8, 0x0, 0x5803, 0x320, 0x2e8, 0x2e8, 0x320, 0x2e8, 0x3, 0x0, {[{{@ipv6={@ipv4={'\x00', '\xff\xff', @multicast1}, @mcast1, [], [], 'erspan0\x00', 'geneve1\x00'}, 0x0, 0x190, 0x1c0, 0x0, {0x0, 0x2000000000000}, [@common=@unspec=@string={{0xc0}, {0x0, 0x0, 'kmp\x00', "cfcaf80c672f61cd17ae5119b5135c2aee68d23a465cd431e1ecef50c3234e082555f67222476147864fa03182f5cf11d8c348cbd06dc8de1dcbde7d4e252c3394fed47bf78c70f607b0178fa5ea335019ac07a602061c96baebc989f1f34a214e67262c1fe4b124e0f7323a587d2a1fcfe36bbf12eca0a7b66c60c527bac2b5", 0x1}}, @common=@inet=@socket3={{0x28}}]}, @common=@unspec=@CONNMARK={0x30}}, {{@uncond, 0x0, 0xf8, 0x160, 0x0, {}, [@inet=@rpfilter={{0x28}, {0x13}}, @inet=@rpfilter={{0x28}}]}, @unspec=@CT1={0x68, 'CT\x00', 0x1, {0x0, 0x0, 0x0, 0x0, 'netbios-ns\x00', 'syz1\x00'}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x450) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000002c80)={0x3, 0x4, &(0x7f0000000000)=@framed={{0x18, 0x2}, [@call={0x85, 0x0, 0x0, 0x87}]}, &(0x7f0000000080)='GPL\x00', 0x4, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x1, @void, @value}, 0x94) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000040)={0xffffffffffffffff, &(0x7f0000000100)='H', 0x0}, 0x20) ioctl$HCIINQUIRY(r0, 0x800448f0, &(0x7f00000000c0)={0x4, 0xb51c, "e1efff", 0x6, 0x8}) bind$bt_hci(r0, 0x0, 0x0) setsockopt$IPT_SO_SET_REPLACE(0xffffffffffffffff, 0x0, 0x40, &(0x7f0000001900)=@raw={'raw\x00', 0x8, 0x3, 0x250, 0x0, 0xe138, 0x198, 0x1c0, 0x198, 0x2a0, 0x358, 0x358, 0x2a0, 0x358, 0x3, 0x0, {[{{@ip={@broadcast, @loopback, 0x0, 0x0, 'pimreg\x00', 'veth0_to_bond\x00'}, 0x0, 0x98, 0x100, 0x0, {}, [@inet=@rpfilter={{0x28}}]}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x0, 0x0, 0x0, 0x0, 'snmp_trap\x00', 'syz0\x00'}}}, {{@uncond, 0x0, 0x70, 0xb8}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 'syz0\x00'}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x2b0) 11.334010858s ago: executing program 3 (id=7239): bpf$MAP_CREATE(0x2000000000000000, &(0x7f0000000b00)=ANY=[@ANYBLOB="0600000004000000be7000005c00000000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="0000000002"], 0x48) 11.02620048s ago: executing program 3 (id=7240): write$P9_RREADDIR(0xffffffffffffffff, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r4 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r3}, 0x10) ioctl$FS_IOC_FIEMAP(r4, 0xc020660b, 0x0) socket$packet(0x11, 0x3, 0x300) socket$nl_route(0x10, 0x3, 0x0) ptrace$ARCH_MAP_VDSO_32(0x1e, r0, 0x8004, 0x2002) syz_open_dev$tty1(0xc, 0x4, 0x4) write$UHID_INPUT(0xffffffffffffffff, &(0x7f0000002080)={0xf, {"a2e3ad21e08eeb661b5e060987f70e06d038e7ff7fc6e5539b0d650e8b089b3f3b3b68090890e0878f0e1ac6e7049b3b46959b649a240d5b67f3988f7ef319520100ffe8d178708c523c921b1b5b31070d07440936cd3b78130daa61d8e8040000005802b77f07227227b7ba67e0e78657a6f5c2a874e62a9ccdc0d31a0c9f318c0da1993bd160e233df4a62179c6f30e065cd5b91cd0ae193973735b36d5b1b63dd1c00305d3f46635eb016d5b1dda98e2d749be7bd1df1fb3b231fdcdb5075a9aaa1b469c3090000000000000075271b286329d169934288fd789aa37d6e98b224fd44b65b31334ffc55cc82cd3ac32ecdb08ced6f9081b4dd0d8b38f3cd4498bee800490841bdb114f6b76383709d8f5c554336909fda039aec54a1236e80f6a8abadea7662496bddbb42be6bfb2f17959d1f416e56c71b1931870262f5e801119242ca026bfc821e7e7daf2451138e645bb80c617669314e2fbe70de98ec76a9e40dad47f36fd9f7d0d42a4b5f1185ccdcf16ff46295d8a0fa17713c5802630933a9a34af674f3f39fe23491237c08822dec110911e893d0a8c4f6777478bc360934b82910ff85bfd995083bba2987a67399eac427d145d546a40b9f6ff14ac488ec130fb3850a27af9544ae15ffffffffffffffff1243513f000000000000000a3621c56cea8d20fa911a0c41db6ebe8cac64f17679141d54b34bbc9963ac4f4bb3309603f1d4ab966203861b5b15a841f2b575a8bd0d78248ebe4d9a80002695104f674c2431dca141fae269cab70e9a66f3c3a9a63e9639e1f59c0ede26c6b5d74b078a5e15c31634e5ae098ce9ee70771aaa18119a867e14ffd9f9db2a7869d85864056526f889af43a6056080572286522449df466c632b3570243f989cce7cd9f465e41e610c20d80421d653a5520000008213b704c7fb082ff27590678ef9f190bae97909507041d860420c5664b27921b14dc1db8892fd32d0ad7bc946813591ad8deff4b05f60cea0da7710ac0000000000008000bea37ce0d0d4aa202f928f28381aab144a5dc29a04a6a2b83c7068ae949ed06e288e810bac9c76600025e19c907f6435f7590000008271a1f5f8528f227e79c1389dbdfffe492f21579d2c15b8c70cdb1c332d86d87341432750861ec2bc3451edca194b221cfec4603d276bbaa1dfa6d4fb8a48a76eafc9a9a0270e4c10d64cd5a62427264f2377fe763c43470833ac96c45f357cbbaba8f1b1fdcc7cbb61a7cdb9744ed7f9129aede2be21ccfdc4e9134f8684b3a4f354da9a795e96334e207dff70f1988037b2ed3aaf575c0b88d8f146684078416d59fdee5325928974d12dad99dac44c3f0008047096a44002bebc2420aed92fa9b6578b4779415d4ac01b75d5495c118045651cf41c2fc48b778efa5ea5677747430af4162b987b80c3e001cd34e5c92f76cc4c24eeb8bc4e9ac2aed9a53803ed0ca4ae3a9737d214060005ea6f1783e287b3bee96e3a726eafe2fdfaa78d1f48c13b64df07847754b8400daaa69bf5c8f4350aeae9ca1207e78283cd0b20ceb360c7e658828163e2d25c4aa348561f927e88f63aa70e73a5e69b3df3495903f06572e1e007fa55a2999f596d067312f5779e8dbfdcf3427138f3d444d2639a10477f9bec4b0bbb6e3c04be68981f392203dd0ee3ef478e16dacfc5e3e03cf7ab8e3902f1b0ff034ef655b253ca509383815b1b6fc6522d4e4fdc11a48cf42d48604675fde2b94cf00500a2690891abf8ab9c015073014d9e08d4338b8780bdecd436cf0541359bafffa45237f104b96210403b2de9efed496f423500c7872c827467cfa5c4e72730d56bd068ed211cf847535edecb7b373f78b095b68441a34cb51682a8ae4d24ad0465f3927f889b813076a882e8020f06c4c2ba1dd5cac7c18876da865d258734dd73583df292892448039ef799cf0630becdcce04579b5561dc825ab829827945e020c1f67ee615feb6243378e0610060f02da93aec92a5de203717aa49c2d284acfabe262fccfcbb2b75a2183c46eb65ca8104e1b4da7fbb77ab2fc043aead87c32ab875ee7c2e7b7019c982cd3b43eaeb1a5fb135c0c7dcee8fe6516a328032f88c042891824659e9e94265c803b35ee5f83a2b210520106b8a358b50ab7a1fa89af9c251fe5294b3d1802d5676d95f160ec97b1ad94872cb2044642c37b4a6cc6c04effc1672db7e4b68d787d9a7a508ae54b3cd7369dde50e8c77d95a3d361c040babb171607caac2a3559ad4f75465f49c0d0ae3716db6e00cb11db4a5fade2a57c10238e204a67737c3b42aae501b20f7694a00f16e2d0174035a2c22656dc29880acebdbe8ddbd75c2f998d8ac2dfad2ba3a504767b6b45a45957f24d758ed024b3849c11d412a2a03b4047497022d9c30e23ef4df5c89644f48bb536f7945b59d7bcddff754413d135273ea8e75f22f216c6b9990ae71806f2c00b4025c48b75c0f73cdb9a7b8fa367b50028067e7f16f4dd569d462f4f19eacdb3ed70eeebb4e8b40427db6fe29068c0ca3d2414442e8f3a154704b0e51bc664a137b26be719f4f7c9a5678a674dfc95df80b9ce375dd649c8c704e509bd88c8e63d8c7dd67071115c8982ba46af4d6adcc9f68a75b9397b035153faf46366e7205dd8d6f37525c1a0e94610dd94323f6c15d085197149bfd6655548cfd9c52c9711937f79abb1a124f1210465483cd3b2d78378cfb85ed82e7da0f6eb6d279f2ae455925d0f6f1ba571eba281f2a654fb39ddff3b484439ff158e7c5419e037f3e3ad038f2211f1033195563c7f93cd54b9094f226e783271e1e5a2a2c10712eab625d64931cd4ffe6738d97b9b5ef828ee9fb059fc01af0e79c1e14b1d25988c69a399567c1d93768f7971d31488b8658a20878b7c1dd7ba02fc42939dde3d4a3339a65d507dc59c51097b40517705da56e9ebf0afa53282bf86dbb58c548069ff6eb95aade7cc66d7bbef724779ca1f731b3346ff177050373d79ff7b3e7f9bc0c1b4b266a8878b90baaa039d3e3b63979ac3df6e6f4859afd50238c7547a39b60810938044ae185d2ba3e00a4e73676864ae090d0300000000000000b378dd4dd891e937c2ea5410e0513005000000000000003911fab964c271550027697b52160687461602f88df165d884b36ec2b6c25a2f33c715687e9d4afb96d6861aca47da73d6f3144345f48843dd014e5c5ad8fe995754bd9cf32fce1e31919c4b2082fb0a30b9deae84bed4b28045634073c9c58c89d9e99c81769177c6d594f88a4facfd4c735a20307c737afa2d60399473296b831dbd933d93994ba3064279b10ea0c5833f41f157ea2302993dbe433b1aa3a3766d5439020484f4113c4c859465c3b415c3432f81db8719539d5bf372aaaea1cc43a6c5cbe59758bfee2916580dac4b008e595f437491d87abed02cefcd9db53d94d02daee67918e5d678746383074c6bc1050000002f7809959bc048850613d17ca51055f2f416a44fe180d2d50c312cca7cb14a2bdc331f57a9817139a206fc76957227ffff2de20a4b8e3737fbb42913777c06376f799eba367e21f94ca598705f5dcb767d6f0900d6b0f6095e53c4c4234d0c1fbe434f6ab8f43c0013ee93b83946ee7759e89d7bdd1a32d7b311711b757fe43c06d21a35810d8fe98b27faea8aa12bc8716eefc5c97c45ac33eeec964c5214bc3a9359bdea1cccab94f15e36319cb34ebcacedb82c2ed3de5a8a8f0011e8f74e82d7f96093530e76692839d7961939adfdeeeaff19d11efcafb6d546fef271e89d6cc2389e81ff58cefcce3fbf4625a7e7de40e42e07b3c7340002000000000000f288a4510de03dab19d26285eda89156d50dd385a60333ba5bbf5d77cd7007ad1519ad5470de3dd6d6080cafccf8a97406bb6b68a1f0c4549820a73c880f475f732ae00398e8bd1f4108b7807fb33b72685ec37a2d3f766413a60459516246e5a1d998a2017aef0948a68cf255315ab80dd349e891aef595dc4d470e8ac32a308e15fc37d06aeac289c0523f483e1ff7408c6087f1ab652f2ef91d4f2b01987b0f46da034e5c3f745a7ee8101a3934c54e24b48ec0275e2d0687dc746b0827cbf652f406c6b95f2722e58c05f752ce2126596e1cd7655b904801784c416b22f73d324678e2724f43f1fe687c7e8a60c28b82b6528341b648cdd56fed7cdcbb1575912d5ecd36dea3bca0b7427d8392c6289455e8f8d2ab2242729251ae033a9e02210e62df0546a74b333a1c48f95fd54acb5741259e8c5488efeee327415cc19451432c6f14c27693102a3cd84857cd6586fc5ca9a93eb0145fac0662ff86107f998a8ef7df8aa14046c55b03d3d47f88a8d60f7774a2ee08758897fb411a94b3c2fc5d5f0da42c0456ec015f08e5247d33ae2d35603ff8454c16f8342856935125102bb784ed7148b6ce431b63ee356b0c785f2f47b90e29389f22fc5b59a70efaea2bd40195af4486220d702e30bfc43c10ec23ea6283994a7dde4dcb61fea6b651fb1d62458d0741a12830052fcc460db043afe525629b40d7cee458e4cb5e930ed624806c43a006e39336d07c2b8081c128ad2706f48261f7897484c297a1a6613bc18f5a38d442768af38041efe03d152ef95ff569e76db2391f4509d7f339d92fdb4a89364949da398000000000000000d80a4fe654578376e599aff3565b1d531f30912b9945030b81ea9935fd46edb44a78f615255490a4b621501f2a9e4d24624c4dac9274118c67584f5d374755534d7f68f679c4ff516a9cc8036cbd65868fcb2bf1cb9aea4e05df72279fdb0d2b9e935c5af3cf474bed79dfc248c1f5aea4b8b32c5d295e57079d0fe662a46b7f71cd47744db86c50b704c971d90295c7b2c7439a2d78ccfa79b5fc2bff6bbf840262bf89394b3e0691953264d2700c838fa2c7b3425260f59554e502dcea39cb313b0000000000004ca7c12f45858d6284ca6270d6b2f0e58fded8a7b4a302a97bc641df07720ba2b26bbfcc807ca0abb1b44322269c21c5ec68cb068ea88067d905ea917bb03eefdaebdeabf2d0dce80997c915c8949de992587c2cb5fe36d7d3e5db21b094b8b77940b5f07722e47a08d367e5f84c96ec664b72934b99b3109af65d77e86abd6859cddf4bbae1f0930462df15fddbc48562ea3511a8065ef028cf12f14dcf6ebecd8d884836174faf1aa609e5f1ee1162dfa13bdc1fa7cfaadba85c72e9758f03a755d0be53f8d2a1dfb1c68cc164b0a0780d971a96ea2c4d4ca0398c2235980a9307b3d5bd3b01faffd0a5dbed2881a9700af561ac8c6b00000000000000f96f06817fb903729a7db6ff957697c9ede7885d94ffb0969be0daf60af93109eb1dee72e4363f51af62af6fb2a6df3bec89822a7a0b678058fa3fef86faec216eb6992162f8dcbf719c148cd2f9c55f4901203a9a8a2c3e90f3943dbc10360a1a49700d1dfbf66d69f6fbaf506c8bcce8bb0d872a02238926407a4eddd5d0fc5a752f90000000000000000000000000000020000000000000000000000000000000000000000000000000000000000000000000000000000400", 0x104d}}, 0x1006) 7.925623757s ago: executing program 1 (id=7251): r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a60000000060a090400"], 0xbf}}, 0x4000) socket$nl_generic(0x10, 0x3, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000240)={0xc, 0xfffffffffffff800}, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000ac0)=ANY=[@ANYBLOB="1800000000000000000000000000000018010000786c6c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000fdffffff85000000"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r1}, 0x10) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r2 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) openat$binderfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) tkill(r2, 0x35) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r5, 0x29, 0x40, &(0x7f0000000980)=@raw={'raw\x00', 0x3c1, 0x3, 0x3f0, 0x0, 0xc8, 0x8, 0x0, 0x5803, 0x320, 0x2e8, 0x2e8, 0x320, 0x2e8, 0x3, 0x0, {[{{@ipv6={@ipv4={'\x00', '\xff\xff', @multicast1}, @mcast1, [], [], 'erspan0\x00', 'geneve1\x00'}, 0x0, 0x190, 0x1c0, 0x0, {0x0, 0x2000000000000}, [@common=@unspec=@string={{0xc0}, {0x0, 0x0, 'kmp\x00', "cfcaf80c672f61cd17ae5119b5135c2aee68d23a465cd431e1ecef50c3234e082555f67222476147864fa03182f5cf11d8c348cbd06dc8de1dcbde7d4e252c3394fed47bf78c70f607b0178fa5ea335019ac07a602061c96baebc989f1f34a214e67262c1fe4b124e0f7323a587d2a1fcfe36bbf12eca0a7b66c60c527bac2b5", 0x1}}, @common=@inet=@socket3={{0x28}}]}, @common=@unspec=@CONNMARK={0x30}}, {{@uncond, 0x0, 0xf8, 0x160, 0x0, {}, [@inet=@rpfilter={{0x28}, {0x13}}, @inet=@rpfilter={{0x28}}]}, @unspec=@CT1={0x68, 'CT\x00', 0x1, {0x0, 0x0, 0x0, 0x0, 'netbios-ns\x00', 'syz1\x00'}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x450) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000002c80)={0x3, 0x4, &(0x7f0000000000)=@framed={{0x18, 0x2}, [@call={0x85, 0x0, 0x0, 0x87}]}, &(0x7f0000000080)='GPL\x00', 0x4, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x1, @void, @value}, 0x94) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000040)={0xffffffffffffffff, &(0x7f0000000100)='H', 0x0}, 0x20) ioctl$HCIINQUIRY(r0, 0x800448f0, &(0x7f00000000c0)={0x4, 0xb51c, "e1efff", 0x6, 0x8}) bind$bt_hci(r0, 0x0, 0x0) setsockopt$IPT_SO_SET_REPLACE(0xffffffffffffffff, 0x0, 0x40, &(0x7f0000001900)=@raw={'raw\x00', 0x8, 0x3, 0x250, 0x0, 0xe138, 0x198, 0x1c0, 0x198, 0x2a0, 0x358, 0x358, 0x2a0, 0x358, 0x3, 0x0, {[{{@ip={@broadcast, @loopback, 0x0, 0x0, 'pimreg\x00', 'veth0_to_bond\x00'}, 0x0, 0x98, 0x100, 0x0, {}, [@inet=@rpfilter={{0x28}}]}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x0, 0x0, 0x0, 0x0, 'snmp_trap\x00', 'syz0\x00'}}}, {{@uncond, 0x0, 0x70, 0xb8}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 'syz0\x00'}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x2b0) 7.924366687s ago: executing program 2 (id=7252): r0 = open$dir(&(0x7f0000000000)='./file0\x00', 0x0, 0x4) ioctl$BTRFS_IOC_QUOTA_RESCAN_WAIT(r0, 0x942e, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) openat$binderfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000f6000000850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x61, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x3, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r5}, 0x10) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) sendto$inet6(r6, 0x0, 0x0, 0x22004001, &(0x7f0000b63fe4)={0xa, 0x2, 0x0, @loopback}, 0x1c) 7.065917161s ago: executing program 3 (id=7256): bpf$PROG_LOAD(0x5, 0x0, 0xfffffffffffffd6d) bpf$PROG_LOAD(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x9b443000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFULNL_MSG_CONFIG(r3, 0x0, 0x20) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a00000004000000ff0f00000700000000000000", @ANYRES32, @ANYRES32, @ANYBLOB], 0x48) r5 = socket$inet6_udp(0xa, 0x2, 0x0) connect$pppl2tp(0xffffffffffffffff, &(0x7f0000000040)=@pppol2tp={0x18, 0x1, {0x0, r5, {0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x4}}, 0x26) syz_emit_ethernet(0x4b, &(0x7f0000000080)={@local, @dev, @void, {@ipv6={0x86dd, @udp={0x0, 0x6, "014100", 0x15, 0x11, 0x0, @remote, @local, {[], {0x0, 0xe22, 0x15, 0x0, @gue={{0x2, 0x0, 0x0, 0x2, 0x0, @val=0xff7f0000}, "2775a7399c"}}}}}}}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000940)={{r4}, &(0x7f00000008c0), &(0x7f0000000900)}, 0x20) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r6}, 0x10) r7 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, 0x0) 6.021621997s ago: executing program 3 (id=7257): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f00000000c0)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x10, 0x1fd2, 0x6007, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x5}}}}]}}]}}, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x19, 0x4, 0x8, 0x8, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000001b518110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={0x0, r2}, 0x18) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000600)={{r1}, &(0x7f0000000000), &(0x7f00000005c0)=r2}, 0x20) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, &(0x7f0000000e00)={0x2c, &(0x7f0000000040)={0x0, 0x0, 0x5, {0x5, 0x8, "820027"}}, 0x0, 0x0, 0x0, 0x0}, 0x0) 6.020699437s ago: executing program 2 (id=7258): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB='\v\x00\x00\x00\a\x00\x00\x00\b\x00\x00\x00\b'], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000000400000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r2 = getpid() sched_setscheduler(r2, 0x1, &(0x7f0000000100)=0x5) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000200)='sched_switch\x00', r1}, 0x10) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f00000bd000), 0x318, 0x0) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680)) syz_clone3(&(0x7f0000001240)={0x2d000000, 0x0, 0x0, 0x0, {0x20}, 0x0, 0x0, 0x0, 0x0}, 0x58) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) write$P9_RVERSION(0xffffffffffffffff, &(0x7f0000000080)=ANY=[@ANYBLOB="1500000065ffff097b"], 0x15) syz_mount_image$msdos(&(0x7f00000001c0), &(0x7f0000000080)='./file1\x00', 0x0, &(0x7f00000004c0)={[{@fat=@uid}, {@fat=@dos1xfloppy}, {@dots}, {@dots}, {@dots}, {@nodots}, {@dots}, {@nodots}, {@fat=@umask={'umask', 0x3d, 0x8b3}}, {@dots}, {@fat=@nocase}, {@dots}, {@dots}, {@dots}, {@nodots}, {@dots}, {@fat=@dos1xfloppy}, {@nodots}, {@fat=@time_offset={'time_offset', 0x3d, 0x3ac}}, {@nodots}, {@nodots}, {@nodots}]}, 0xfd, 0x1bf, &(0x7f0000000300)="$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") r5 = syz_open_procfs(0x0, &(0x7f0000000100)='mountinfo\x00') r6 = open(&(0x7f0000000080)='./file1\x00', 0x10b942, 0x0) sendfile(r6, r5, 0x0, 0x80000000) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70800000000ebff7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000003000000"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x33, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='kfree\x00', r7}, 0x10) r8 = syz_open_dev$usbfs(&(0x7f0000000100), 0x205, 0x8401) ioctl$USBDEVFS_SUBMITURB(r8, 0x8038550a, &(0x7f0000000000)=@urb_type_control={0x2, {}, 0x0, 0x0, &(0x7f0000000080)={0x0, 0xe, 0x0, 0x0, 0x7995}, 0x799d, 0x0, 0x0, 0x48000000, 0x0, 0x1, 0x0}) 5.834594558s ago: executing program 1 (id=7259): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x9b443000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sendmsg$NFULNL_MSG_CONFIG(0xffffffffffffffff, 0x0, 0x20) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a00000004000000ff0f0000070000000000", @ANYRES32, @ANYRES32], 0x48) r4 = socket$inet6_udp(0xa, 0x2, 0x0) r5 = socket$pppl2tp(0x18, 0x1, 0x1) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000040)='kmem_cache_free\x00'}, 0x10) connect$pppl2tp(r5, &(0x7f0000000040)=@pppol2tp={0x18, 0x1, {0x0, r4, {0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x4}}, 0x26) syz_emit_ethernet(0x4c, &(0x7f0000000080)={@local, @dev, @void, {@ipv6={0x86dd, @udp={0x0, 0x6, "014100", 0x16, 0x11, 0x0, @remote, @local, {[], {0x0, 0xe22, 0x16, 0x0, @gue={{0x8, 0x0, 0x0, 0x2, 0x0, @val=0xff7f0000}, "2775a7399c79"}}}}}}}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000940)={{r3}, &(0x7f00000008c0), &(0x7f0000000900)}, 0x20) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r6}, 0x10) r7 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000300)={'bridge0\x00'}) sendmsg$nl_route(r7, &(0x7f0000000240)={0x0, 0x0, 0x0}, 0x0) 5.196571411s ago: executing program 8 (id=7262): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xc, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r4 = ioctl$LOOP_CTL_GET_FREE(r3, 0x4c82) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x16, 0x0, 0x4, 0xff, 0x0, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008000000000000000000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb70300000800"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f0000000300)='sched_switch\x00', r6}, 0x10) ioctl$LOOP_CTL_REMOVE(r3, 0x4c81, r4) 5.040138912s ago: executing program 2 (id=7263): r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={0x0, 0xbf}}, 0x4000) socket$nl_generic(0x10, 0x3, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000240)={0xc, 0xfffffffffffff800}, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000ac0)=ANY=[@ANYBLOB="1800000000000000000000000000000018010000786c6c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000fdffffff850000002d00000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r1}, 0x10) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r2 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) openat$binderfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) tkill(r2, 0x35) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r5, 0x29, 0x40, &(0x7f0000000980)=@raw={'raw\x00', 0x3c1, 0x3, 0x3f0, 0x0, 0xc8, 0x8, 0x0, 0x5803, 0x320, 0x2e8, 0x2e8, 0x320, 0x2e8, 0x3, 0x0, {[{{@ipv6={@ipv4={'\x00', '\xff\xff', @multicast1}, @mcast1, [], [], 'erspan0\x00', 'geneve1\x00'}, 0x0, 0x190, 0x1c0, 0x0, {0x0, 0x2000000000000}, [@common=@unspec=@string={{0xc0}, {0x0, 0x0, 'kmp\x00', "cfcaf80c672f61cd17ae5119b5135c2aee68d23a465cd431e1ecef50c3234e082555f67222476147864fa03182f5cf11d8c348cbd06dc8de1dcbde7d4e252c3394fed47bf78c70f607b0178fa5ea335019ac07a602061c96baebc989f1f34a214e67262c1fe4b124e0f7323a587d2a1fcfe36bbf12eca0a7b66c60c527bac2b5", 0x1}}, @common=@inet=@socket3={{0x28}}]}, @common=@unspec=@CONNMARK={0x30}}, {{@uncond, 0x0, 0xf8, 0x160, 0x0, {}, [@inet=@rpfilter={{0x28}, {0x13}}, @inet=@rpfilter={{0x28}}]}, @unspec=@CT1={0x68, 'CT\x00', 0x1, {0x0, 0x0, 0x0, 0x0, 'netbios-ns\x00', 'syz1\x00'}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x450) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000002c80)={0x3, 0x4, &(0x7f0000000000)=@framed={{0x18, 0x2}, [@call={0x85, 0x0, 0x0, 0x87}]}, &(0x7f0000000080)='GPL\x00', 0x4, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x1, @void, @value}, 0x94) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000040)={0xffffffffffffffff, &(0x7f0000000100)='H', 0x0}, 0x20) ioctl$HCIINQUIRY(r0, 0x800448f0, &(0x7f00000000c0)={0x4, 0xb51c, "e1efff", 0x6, 0x8}) bind$bt_hci(r0, 0x0, 0x0) r6 = socket$inet(0x2, 0x3, 0x8) setsockopt$IPT_SO_SET_REPLACE(r6, 0x0, 0x40, &(0x7f0000001900)=@raw={'raw\x00', 0x8, 0x3, 0x250, 0x0, 0xe138, 0x198, 0x1c0, 0x198, 0x2a0, 0x358, 0x358, 0x2a0, 0x358, 0x3, 0x0, {[{{@ip={@broadcast, @loopback, 0x0, 0x0, 'pimreg\x00', 'veth0_to_bond\x00'}, 0x0, 0x98, 0x100, 0x0, {}, [@inet=@rpfilter={{0x28}}]}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x0, 0x0, 0x0, 0x0, 'snmp_trap\x00', 'syz0\x00'}}}, {{@uncond, 0x0, 0x70, 0xb8}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 'syz0\x00'}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x2b0) 4.505249435s ago: executing program 1 (id=7264): bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB='\v\x00\x00\x00\a\x00\x00\x00\b\x00\x00\x00\b\x00\x00'], 0x48) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000000400000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r1 = getpid() sched_setscheduler(r1, 0x1, &(0x7f0000000100)=0x5) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000200)='sched_switch\x00', r0}, 0x10) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680)) syz_clone3(0x0, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) write$P9_RVERSION(0xffffffffffffffff, &(0x7f0000000080)=ANY=[], 0x15) syz_mount_image$msdos(&(0x7f00000001c0), &(0x7f0000000080)='./file1\x00', 0x0, &(0x7f00000004c0)={[{@fat=@uid}, {@fat=@dos1xfloppy}, {@dots}, {@dots}, {@dots}, {@nodots}, {@dots}, {@nodots}, {@fat=@umask={'umask', 0x3d, 0x8b3}}, {@dots}, {@fat=@nocase}, {@dots}, {@dots}, {@dots}, {@nodots}, {@dots}, {@fat=@dos1xfloppy}, {@nodots}, {@fat=@time_offset={'time_offset', 0x3d, 0x3ac}}, {@nodots}, {@nodots}, {@nodots}]}, 0xfd, 0x1bf, &(0x7f0000000300)="$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") r4 = syz_open_procfs(0x0, &(0x7f0000000100)='mountinfo\x00') r5 = open(&(0x7f0000000080)='./file1\x00', 0x10b942, 0x0) sendfile(r5, r4, 0x0, 0x80000000) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, 0x0, &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x33, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='kfree\x00', r6}, 0x10) r7 = syz_open_dev$usbfs(&(0x7f0000000100), 0x205, 0x8401) ioctl$USBDEVFS_SUBMITURB(r7, 0x8038550a, &(0x7f0000000000)=@urb_type_control={0x2, {}, 0x0, 0x0, &(0x7f0000000080)={0x0, 0xe, 0x0, 0x0, 0x7995}, 0x799d, 0x0, 0x0, 0x48000000, 0x0, 0x1, 0x0}) 4.390413215s ago: executing program 5 (id=7265): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB='\v\x00\x00\x00\a\x00\x00\x00\b\x00\x00\x00\b'], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000000400000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r2 = getpid() sched_setscheduler(r2, 0x1, &(0x7f0000000100)=0x5) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000200)='sched_switch\x00', r1}, 0x10) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f00000bd000), 0x318, 0x0) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680)) syz_clone3(&(0x7f0000001240)={0x2d000000, 0x0, 0x0, 0x0, {0x20}, 0x0, 0x0, 0x0, 0x0}, 0x58) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) syz_mount_image$msdos(&(0x7f00000001c0), &(0x7f0000000080)='./file1\x00', 0x0, &(0x7f00000004c0)={[{@fat=@uid}, {@fat=@dos1xfloppy}, {@dots}, {@dots}, {@dots}, {@nodots}, {@dots}, {@nodots}, {@fat=@umask={'umask', 0x3d, 0x8b3}}, {@dots}, {@fat=@nocase}, {@dots}, {@dots}, {@dots}, {@nodots}, {@dots}, {@fat=@dos1xfloppy}, {@nodots}, {@fat=@time_offset={'time_offset', 0x3d, 0x3ac}}, {@nodots}, {@nodots}, {@nodots}]}, 0xfd, 0x1bf, &(0x7f0000000300)="$eJzs3TGL02AYB/Cn9bzmnG4TRCHg4nSon+BEThADgtJBJ4XT5SqCt0SX9mP4Af0A0qmLRGrSxkaHWmxS6++39En/edvnHZp26ZNXN99dnL+/fPvl+udIkl70T+M0Zr04jn4sTAIA2CezooivRanrXgCAdqzx/f+t5ZYAgC17/uLlkwdZdvYsTZOI6SQf5sPyscwfPc7O7qY/HNerpnk+vLLM76XN3w7z/Gpcq/L75fp0NT+MO7fLfJ49fJo18kGcb3frAAAAAAAAAAAAAAAAAAAAAADQmVuRLvx2vs/JSTM/qvLy6Kf5QI35PQdx46A6rMcDFeM2NgUAAAAAAAAAAAAAAAAAAAD/mMuPny5ej0ZvPtTFICJWn/mTole98IbL2y76sRNtKP5qke5GG6MNPwWHEbGtxmZFUax1cn2NGHR1cQIAAAAAAAAAAAAAAAAAgP9M/affX7Oki4YAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAoAP1/f83KMYRscbJyzc76nSrAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA7LHvAQAA///DgjXa") r5 = syz_open_procfs(0x0, &(0x7f0000000100)='mountinfo\x00') r6 = open(&(0x7f0000000080)='./file1\x00', 0x10b942, 0x0) sendfile(r6, r5, 0x0, 0x80000000) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70800000000ebff7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x33, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={0x0, r7}, 0x18) r8 = syz_open_dev$usbfs(&(0x7f0000000100), 0x205, 0x8401) ioctl$USBDEVFS_SUBMITURB(r8, 0x8038550a, &(0x7f0000000000)=@urb_type_control={0x2, {}, 0x0, 0x0, &(0x7f0000000080)={0x0, 0xe, 0x0, 0x0, 0x7995}, 0x799d, 0x0, 0x0, 0x48000000, 0x0, 0x1, 0x0}) 3.880100079s ago: executing program 8 (id=7266): bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x6, 0x4, 0xfff, 0x7, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000500)='percpu_free_percpu\x00', r0}, 0x10) bpf$MAP_CREATE(0x2000000000000000, &(0x7f0000000b00)=ANY=[@ANYBLOB="0600000004000000be7000005c00000000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="0000000002"], 0x48) 3.771029279s ago: executing program 2 (id=7267): bpf$PROG_LOAD(0x5, 0x0, 0xfffffffffffffd6d) bpf$PROG_LOAD(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x9b443000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFULNL_MSG_CONFIG(r3, 0x0, 0x20) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a00000004000000ff0f00000700000000000000", @ANYRES32, @ANYRES32, @ANYBLOB], 0x48) r5 = socket$inet6_udp(0xa, 0x2, 0x0) connect$pppl2tp(0xffffffffffffffff, &(0x7f0000000040)=@pppol2tp={0x18, 0x1, {0x0, r5, {0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x4}}, 0x26) syz_emit_ethernet(0x4b, &(0x7f0000000080)={@local, @dev, @void, {@ipv6={0x86dd, @udp={0x0, 0x6, "014100", 0x15, 0x11, 0x0, @remote, @local, {[], {0x0, 0xe22, 0x15, 0x0, @gue={{0x2, 0x0, 0x0, 0x2, 0x0, @val=0xff7f0000}, "2775a7399c"}}}}}}}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000940)={{r4}, &(0x7f00000008c0), &(0x7f0000000900)}, 0x20) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r6}, 0x10) r7 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, 0x0) 3.305166421s ago: executing program 5 (id=7268): r0 = open$dir(&(0x7f0000000000)='./file0\x00', 0x0, 0x4) ioctl$BTRFS_IOC_QUOTA_RESCAN_WAIT(r0, 0x942e, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) openat$binderfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000f6000000850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x61, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x3, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r5}, 0x10) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) sendto$inet6(r6, 0x0, 0x0, 0x22004001, &(0x7f0000b63fe4)={0xa, 0x2, 0x0, @loopback}, 0x1c) 3.303520452s ago: executing program 1 (id=7269): r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a60000000060a090400"], 0xbf}}, 0x4000) socket$nl_generic(0x10, 0x3, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000240)={0xc, 0xfffffffffffff800}, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000ac0)=ANY=[@ANYBLOB="1800000000000000000000000000000018010000786c6c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000fdffffff85000000"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r1}, 0x10) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r2 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) openat$binderfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) tkill(r2, 0x35) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r5, 0x29, 0x40, &(0x7f0000000980)=@raw={'raw\x00', 0x3c1, 0x3, 0x3f0, 0x0, 0xc8, 0x8, 0x0, 0x5803, 0x320, 0x2e8, 0x2e8, 0x320, 0x2e8, 0x3, 0x0, {[{{@ipv6={@ipv4={'\x00', '\xff\xff', @multicast1}, @mcast1, [], [], 'erspan0\x00', 'geneve1\x00'}, 0x0, 0x190, 0x1c0, 0x0, {0x0, 0x2000000000000}, [@common=@unspec=@string={{0xc0}, {0x0, 0x0, 'kmp\x00', "cfcaf80c672f61cd17ae5119b5135c2aee68d23a465cd431e1ecef50c3234e082555f67222476147864fa03182f5cf11d8c348cbd06dc8de1dcbde7d4e252c3394fed47bf78c70f607b0178fa5ea335019ac07a602061c96baebc989f1f34a214e67262c1fe4b124e0f7323a587d2a1fcfe36bbf12eca0a7b66c60c527bac2b5", 0x1}}, @common=@inet=@socket3={{0x28}}]}, @common=@unspec=@CONNMARK={0x30}}, {{@uncond, 0x0, 0xf8, 0x160, 0x0, {}, [@inet=@rpfilter={{0x28}, {0x13}}, @inet=@rpfilter={{0x28}}]}, @unspec=@CT1={0x68, 'CT\x00', 0x1, {0x0, 0x0, 0x0, 0x0, 'netbios-ns\x00', 'syz1\x00'}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x450) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000002c80)={0x3, 0x4, &(0x7f0000000000)=@framed={{0x18, 0x2}, [@call={0x85, 0x0, 0x0, 0x87}]}, &(0x7f0000000080)='GPL\x00', 0x4, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x1, @void, @value}, 0x94) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000040)={0xffffffffffffffff, &(0x7f0000000100)='H', 0x0}, 0x20) ioctl$HCIINQUIRY(r0, 0x800448f0, &(0x7f00000000c0)={0x4, 0xb51c, "e1efff", 0x6, 0x8}) bind$bt_hci(r0, 0x0, 0x0) setsockopt$IPT_SO_SET_REPLACE(0xffffffffffffffff, 0x0, 0x40, &(0x7f0000001900)=@raw={'raw\x00', 0x8, 0x3, 0x250, 0x0, 0xe138, 0x198, 0x1c0, 0x198, 0x2a0, 0x358, 0x358, 0x2a0, 0x358, 0x3, 0x0, {[{{@ip={@broadcast, @loopback, 0x0, 0x0, 'pimreg\x00', 'veth0_to_bond\x00'}, 0x0, 0x98, 0x100, 0x0, {}, [@inet=@rpfilter={{0x28}}]}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x0, 0x0, 0x0, 0x0, 'snmp_trap\x00', 'syz0\x00'}}}, {{@uncond, 0x0, 0x70, 0xb8}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 'syz0\x00'}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x2b0) 3.274675032s ago: executing program 8 (id=7270): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x6, 0x4, 0xfff, 0x7, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000140)={'pim6reg1\x00', 0x1}) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000940)={&(0x7f0000000640)='console\x00', r2}, 0x10) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r3, 0x8914, &(0x7f0000000100)={'pim6reg1\x00', @broadcast}) 3.177719042s ago: executing program 8 (id=7271): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x2, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000070000001801000020756c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000a5df850000002d00000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xb, 0x7, 0x10001, 0x9, 0x1, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000067dfb4a518110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000060000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000003"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='net_dev_xmit\x00'}, 0x10) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000002ec0)=ANY=[@ANYBLOB="b702000007000000bfa30000000000000703000000feffff7a0af0ff0100000079a4f0ff00000000b7060000ffffffff2d6405000000000065040400010000000404000001007d60b7030000000000006a0a00fe00000000850000000d000000b70000000000000095000000000000005ecefab8f2e85c6c1ca711fcd0cdfa146ec561750379585e5a076d839240d29c034055b67dafe6c8dc3d5d78c07fa1f7e655ce34e4d5b3185fec0e07004e60c08dc8b8dbf11e6e94d75938321a3aa502cd2424a66e6d2ef831ab7ea0c34f17e3946ef3bb622003b538dfd8e01f3440cee51bc53099e90f4580d760551b5b341a29f31e3106d1ddd6152f7cbdb9cd38bdb2209c67deca8eeb9c15ab3a14817ac61e4dd11183a13477bf7e860e3670ef0e789f65f1328d6704902cbe7bc04b82d2789cad32b8667c2147661df28d9961b63e1a9cf6c2a660a1fe3c184b751c51160fb20b1c581e7be6ba0dc001c4110555850915148ba532e6ea09c346dfebd38608b3280080005d9a9500000000000000334d83239dd27080851dcac3c12233f9a1fb9c2aec61ce63a38d2fd50117b89a9ab359b4eea0c6e95767d42b4e54861d0227dbfd2e6d7f715a7f3deadd7130856f756436303767d2e24f29e5dad9796edb697aeea0182babd18cac1bd4f4390af9a9ceafd0002cab154ad029a1090000002780870014f51c3c975d5aec84222fd3a0ec4be3e563112f0b39501aafe234870072858dc06e7c337602d3e5a815232f5e16c1b30c3a6abc85018e5ff2c91018afc9ffc2cc788bee1b47683db012469398685211dfbbae3e2ed0a50e7393bff5d4c391ddece00fc772dd6b4d4de2a41990f05ca3bdfc92c88c5b8dcd36e7487afa447e2edfae4f390a8337841cef386e22cc22ee17476d738952229682e24b92533ac2a9f5a699593f084419cae0b4532bcc97d300006aca54183fb01c73f979ca9857399537f5dc2a2d0e0000000000000578673f8b6e74ce23877a6b24db0e067345560942fa629fbef2461c96a088a22e8b15c3e233db7af22e30d46a9d26d37cef099ece729aa218f9f44a3210223fdae7ed04935c3c90d3add8eebc8619d73415cda2130f5011e48455b5a8b90dfae158b94f50adab988dd8e12baf5cc9398fff00404d5d99f82e20ee6a8c88e18c2977fb536a9caab37d9ac4cfc1c7b400000000000007ffc826b956ba859ac8e3c177b91bd7d5e41ff83ced846891180604b6dd2499d16d7d9158ffffffff00000000ef069dc42749a89f854797f29d000069a16203a967c1bbe09315c29877a308bcc87dc3addb08142bdee5d27874b2f663ddeef0005b3d96c7aabf4df517d90bdc01e73835d5a3e1a90800c66ee2b1ad76dff9f9000071414c99d4894ee7f8240000e3428d2129369ee1b85af9ffffff0d0df414b315f651c8412392191fa83ee830548f11be359454a3f2239cfe35f81b7a490f167e6d5c1109000000000000000042b8ff8c21ad702ccacad5b39eef213d1ca296d2a27798c8ce2a305c0c7d35cf4b22549a4bd92000000000f285f653b621491dc6aaee0200e2ff08644fb94c06006eff1be2f633c1d987591ec3db58a7bb74d4ec3f771f7a1338a5c3dd35e926049fe86e09c58e273cd905de328c13c1ed1c0d9cae846bcbfa8cce7b893e578af7dc7d5e87d44ff828de453f34c2b18660b080efc707e676e1fb4d5825c0ca177a4c7fbb4eda0545c00f576b2b5cc7f819abd0f885cc4806f40300966fcf1e54f5a2d38708294cd6f496e5dee734fe7da3770845cf442d488afdc0e17000000000000000000000000000000000000000000000000000005205000000dc1c56d59f35d367632952a978ee56c83a3466ae595c6a8cda690d192a070886df42b27098773b45198b4a34ac977ebd4450e121d01342e0eaf6f330e935878a6d169c80aa4252d4ea6b8f6216ff202b5b5a182cb5e838b307632d03a7ca6f6d0339f9953c3093c3690d10ecb65dc5b47481edbf1f000000000000004d16d29c28eb5167e9936ed327fb237a56224e49d9ea95ec1b3ccd35364600000000000000000000000000000000000000000000000000000000000026ded4dd6fe1518cc7802043ecfe69f743f1213bf81700cd9e5a225d67521dc728eac7d80a5656ac2cbde21d3ebfbf69ff861f4394836ddf128d6d19079e64336e7c676505c78ad67548f4b192be3827fcd95cf107753cb0a6a979d3db0c407081c6281e2d8429a863903ca75f4c7df3ea8fc2018d07af1491ef060cd4403a099f32468f65bd06b4082d43e121861b5cc03f1a1561f0589e0d12969bc982ff5d8e9b986c0c6c747d9a1cc500bb892c3a16ff10feea20bdac0000000000000000ca06f256c8028e0f9b65f037b21f3289f86a6826c69fa35ba5cbc3f2db1516ffc5c6e3fa618b24a6ce16d6c7010bb37b61fa0a2d8974e69115d33394e86e4b838297ba20f969369de47422604e2fc5d1d33d84d96b50fb000000ae07c65b71088dd7d5d1e1bab9000000000000000000000000b5ace293b6c833c13e3229432ad71d646218b5229dd88137fc7c59aa242af3bb4efb82055a3b612272d40f522d8c98c879aca11033ec14bb9cc16bd83a00840e31d828ec78e116ae46c4897e2795b6ff92e9a1e24b0b855c02f2b7add58ffb25f339297729a7a51810134d3dfbe71f6516737be55c06d9cdcfb1e2bb10b50000eb4acff90756dba1ecf9f58afd3c19b5c4558ba9af6b7333c894a1fb29ade9ad75c9c022e8d03fe28bc358684492aa771dbfe80745fe89ad349ffaad76ff9dd643796caffdf67af5dd476c37e7e9a84e2e5da2696e285a59b53f2fb0e16d8262c080c159ce40c14089c82759106f422582b42e3e8484ea5a6ad9aa52106eafe0e0caea1ad4cb23f3c2b8a0f455ba69ea284c268d54b43158a8b1d128d02af263b3dc1cab794c9ac57a2a7332f4d8764c302ccd5aac114482b619fc575aa0dd2777e881e29a854380e2f1e49db5a1517ec40bb3fa44f9959bad67ccaba76408da35c9f1534c8bd46dbd61627a2e0a74b5e6aefb7eee403502734137ff47a57f164391c673b6079e65d7295eed164ca63e4ea26dce0fb3ce0f6591d80dfb8f386bb74b5589829b6b0679b5d65a125e3af1130d66a7b66837ae7e7123dde7404a067ad0a6a2d6bec9411b61cad4121be3c72ff3a04713042253d438e7becf8120de3895b8ce974958bde39cb8da3427a2e9e2de936431e67fed5ab5684db07de39083d8948cc4c8a2608100000000000000000000aecb8b0b7941088f971ce17427eec32a012295cc0cdd32955176b6ad5a4bb953e58ccfa9428f452cfb5a48a9fda26db3985c8be3c2f99827da074825b01c4a3a71fb59d5798100000000000000c76b05a45d2dd8c20d971e2f3e4369168f5cb83d6ff3a18733fec726034fbfa95624135bee374414b2c8c61f52357a520efd6a10aff244bc8a62ed367981fb4d5d77f7bc093958ff46527499957da4934cd4b370cf76f72dd05fa80cdfb68c836fd81be7a58532e041a87f9222f157610a4bcdc05b2a55308c8e7568b90f7a338557e816a16972aea79dff5becefa6f9c5ce6c58fb38da9e7532dc53cfdc2e789b76f7d32aca1bfea2aa62621b78dded30fc07171866bf3d552900000000a32dda61eeda1750e157c2d569b9d08f583c0ee28daec2e8bb85f3c8e91c4448096ee953def18dc73e55cb30f9cd069d8780b00eaba382f0c3ae391c30a5f1b0f36dd0c2193b791995d2890327a10d7abac76d1202f72e97f0105184d7aaaab8d3e29c9a8d263f076b55cf53c5bb9c0662a3d19a6722d7f83ae4331d3256f90af0857788b380ccc3b266c418e66d1d756d5df6423dd0cea67bc235d3776d22270fc19301ead09f156893e9"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r1, 0x18000000000002a0, 0xe2c, 0x60000000, &(0x7f0000000100)="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", 0x0, 0x24, 0x60000000}, 0x2c) 3.154109282s ago: executing program 8 (id=7272): r0 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000001400)={{}, 0x0, &(0x7f00000013c0)}, 0x20) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000300)='sys_enter\x00', r1}, 0x10) mkdir(0x0, 0x0) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000a00)=@newsa={0x154, 0x10, 0x633, 0x1, 0x0, {{@in6=@dev, @in6=@private1}, {@in=@dev, 0x0, 0x32}, @in6=@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, {}, {}, {}, 0x0, 0x0, 0xa}, [@algo_crypt={0x48, 0x2, {{'ecb(cipher_null)\x00'}}}, @encap={0x1c, 0x20, {0x0, 0x1, 0x0, @in=@initdev={0xac, 0x1e, 0x0, 0x0}}}]}, 0x154}}, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r0}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r2 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) getgroups(0x0, 0x0) sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000400)={&(0x7f0000000240)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x0, 0x0, 0x2}}, 0x0, 0x1a, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x20) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000000100)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x0, 0x0, 0x2}}, 0x0, 0x1a, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x28) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r6 = bpf$MAP_CREATE(0x0, &(0x7f00000001c0)=@base={0x12, 0xb, 0x4, 0x2, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$MAP_DELETE_ELEM(0x2, &(0x7f0000000080)={r6, &(0x7f0000000240), 0x20000000}, 0x20) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000004c0)={{r6}, &(0x7f0000000440), &(0x7f0000000480)=r5}, 0x20) bpf$MAP_DELETE_ELEM(0x3, &(0x7f00000000c0)={r6, &(0x7f0000000100)}, 0x20) socket$nl_generic(0x10, 0x3, 0x10) 2.313879777s ago: executing program 5 (id=7273): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000f6000017850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x23, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000040)='page_pool_release\x00', r1}, 0x10) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0x7, &(0x7f0000000000)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b702000003000000850000008600000095"], &(0x7f0000000180)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$PROG_BIND_MAP(0xa, &(0x7f00000002c0)={r3}, 0x69) 2.285889427s ago: executing program 2 (id=7274): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB='\v\x00\x00\x00\a\x00\x00\x00\b\x00\x00\x00\b'], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000000400000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r2 = getpid() sched_setscheduler(r2, 0x1, &(0x7f0000000100)=0x5) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000200)='sched_switch\x00', r1}, 0x10) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f00000bd000), 0x318, 0x0) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680)) syz_clone3(&(0x7f0000001240)={0x2d000000, 0x0, 0x0, 0x0, {0x20}, 0x0, 0x0, 0x0, 0x0}, 0x58) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) write$P9_RVERSION(0xffffffffffffffff, &(0x7f0000000080)=ANY=[@ANYBLOB="1500000065ffff097b"], 0x15) syz_mount_image$msdos(&(0x7f00000001c0), &(0x7f0000000080)='./file1\x00', 0x0, &(0x7f00000004c0)={[{@fat=@uid}, {@fat=@dos1xfloppy}, {@dots}, {@dots}, {@dots}, {@nodots}, {@dots}, {@nodots}, {@fat=@umask={'umask', 0x3d, 0x8b3}}, {@dots}, {@fat=@nocase}, {@dots}, {@dots}, {@dots}, {@nodots}, {@dots}, {@fat=@dos1xfloppy}, {@nodots}, {@fat=@time_offset={'time_offset', 0x3d, 0x3ac}}, {@nodots}, {@nodots}, {@nodots}]}, 0xfd, 0x1bf, &(0x7f0000000300)="$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") r5 = syz_open_procfs(0x0, &(0x7f0000000100)='mountinfo\x00') r6 = open(&(0x7f0000000080)='./file1\x00', 0x10b942, 0x0) sendfile(r6, r5, 0x0, 0x80000000) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70800000000ebff7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000003000000"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x33, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='kfree\x00', r7}, 0x10) r8 = syz_open_dev$usbfs(&(0x7f0000000100), 0x205, 0x8401) ioctl$USBDEVFS_SUBMITURB(r8, 0x8038550a, &(0x7f0000000000)=@urb_type_control={0x2, {}, 0x0, 0x0, &(0x7f0000000080)={0x0, 0xe, 0x0, 0x0, 0x7995}, 0x799d, 0x0, 0x0, 0x48000000, 0x0, 0x1, 0x0}) 2.252448617s ago: executing program 5 (id=7275): bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b000000000000000000"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xf, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000008000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000084000000b70000000000000095000000000000"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f00000006c0)='sched_switch\x00', r1}, 0x10) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x3, 0xe, &(0x7f00000016c0)=ANY=[@ANYBLOB="b702000000000000bfa300000000000007030000f0ffffff7a0af0ff0200000079a4f0ff00000000b706000000000081ad64020000000000450404000100ff0f1704000001130a00b7050000000000006a0af2fe000000008500000009000000b700000000000000950000000000000000e154cd8445974b26c933f7ffffffffe40400000056bb2007ee51050512b5b42128aa090a79507df79f298129daa7a6b2f91af50342115e17392ac627c87881c000006146001e04aeacea799a22a2fa798b5adc43eb27d53319d0ad229e5752548300000000dbc2777df150b7cdd77b85b941092314fd085f028f2ed1a4535550614e09d6378198a6097a670838337af2abd55a87ac0394b2f92ffab7d153d62058d0a413b2173619ccf55520f22c9ca8b6712f3024b7041b1df65b3e1b9bf115646d14ce53d13d0ccacda1ef0900094fa737c28b99938512c816fdcceaede3faedc51d29a47fc813a2ec00f4c7a53ac271d6d7f4ea6bf97f2f33e2ea2e534300bcb3fdc4b4861004eefbda7f54f82a804da4f85db47a4a69bf9bc5fa96ee293fbd165a5a68488e40b030166565a097b1b44b451de736bb6d43db8db03d4b7745fef1d04ec633dee254a6d491b849a5a787e814c4fd21a18986252a70f8f92eb6f0e8c7db4bf23242a1f2c28159f09943b1b0452d1b72183aacf4a84f9130b775dd4e9e3070756f97ad791fa99dac06b57479321a05cbee30ff0000001989425f5d0b79f6584d0416d7c4bb9f547b328c8ddc20ea011bf5742e0e0d4334db8b20ce3f9f16cb7fc20fb4791ec85821d0c48fb657c29b309c73f0977e7cde65a82b94c461d7962b0d2277a84af326f37f3e2c25a61ec45c3af97a8f17da954aff3fc8c108755f75ca13fb7c8bbd8b6e7dac1aba4b20dc7de058a4dfa7e85a8bdf1d41a2d8bda74d66f47cc180f82c5f573c6d294d3665016ac59dda0fde4745db06753a7ac74a2d32f7528751313694bf5700b20ef0c248ddd3da32396a614cacad4aff2066bb5d4045c958559b7dcb98a6273b8c651e24d9f679e4fbe948dfb4cc4a389469608241730459f0123fd39206000000000000eb55dad46de56ef907b059b90b8aa49afb9a79ae5498f6589880ed6eea7f9c670012be05e7de0940313c5870786554df26236ebced9390cb6941b8375d936a7d2120eca291963eb2d537d8ee4de5c183c960119451c3157f00000000000000a06a9fa87d64cb77872a2cd8a104e16bb1a2bacf13464ca03aff14a9aa4bd9539f5096412b92012e095b84c20243ff98df3347f0e399d1b9f27e3c33269c0e153b28b2d4410572bc45b9d3fa02208d304d455c3630000000002232017810e743bdaf879946547dbf8b497af002000000cd1d00000020000000ef19349ee7f31abc11c800000000000000000000000928ee53595a779d243a48cea769470424d28804c04b2c4324ab7f4a5c81921f0128dfd70b438af60b060000000000000056642b49b745f3bf2c4af38ffb7d748308eea09fc361b4735efbf3411718d6ee7aebf9ef679dbfae9fb4a79f8a836804ed3a1079b0282a12043408cd60b687dcff91af19010000000000000000456f7d2a42bd13da202274f20675eb781925441578e93046aaddea8ec4ca37f71c2710a7ea8ae0dc214e1cc275b26adfa892e6de92000000000000000000ddff004cff9ec7ffff35e62f4eeee50e6dafecea4d4134f9d006c8d6883eca5c9c58c9e93311ab5009c68c73de2f04f15d005387577f480000ea65559eb00e76e9d0ada201bcbb5c252b28a60ca770663da451790cc36000906d5a9fad98c308e39bd5ffb6151d79c1cee1cd102e3c8e63e9fba05e3633be3f00000015762e5f5a3a0bc33fdbe28a5ffc83f2b485185cc92fe7f791e8f6429309d6adab4b7e508e5bf024ed8f8a005f2bbf96c89739f5cf1e750d50517a59a3ad09e8802e8f4f535447cc0fc9d5f99a73145dfcedad69da9cd4375c624600e78f4458542b14f29611f95d4a31838eeb20c20bb82aa31771cd379ec83554cea5e6539db7384e1f58d81f2f2653c4d9818708e27c89b552d7fcd116bce9c764c714c9402c21d181aac59efb28d4f91652f6750b6ec962802c0320f8059195729d60c534ee8e8ff0755b67fe4c25edb85bcff24c757aa8090000000000008c420eb4304f66e3a37aaf000000c42a570f0e9dd5fd545470f862f8c3c14fa9ecd1e877b0d8ca84c044859e85e6158f9184bc61a9a284db80e4636c25b96174327d82761c26e329555f9290af4100000000000000749efd3763655500344bae34137f5ab0d534b8d63e4ca3b671f2de1cdf519192c6b59a601fd419adc16e2055b85058f793484305d7a1759782e4c571ee855a47bc00edf5e9020c09ab004321610b857e8717764b633b21cb32f0eb3280e097585ab91d20baca005472b79d7b574a247f1d2fe45b3c4e93da3d51de647c10dd49944dc87c92fe8bad99ca332af00f191b66b6a6f732a91f0e2e9190e4b448da7de018c58e950767f9b320be61e58c79d497247d278888901d442ad7f8536605a644e9e3d769db497c3960dfde12182334caee994adc38a436367a54b9e182b78e9a0ceb9a2c4f63902c1ad1a7c5a08d0920a23c2a86abbdf357849a651733e57f31019876026888c8ccb85c86b4f8ffffff7f000000002c331fca0e541b7ca211c28ed61c52573d9308a13d115b43f8b1894c8fa8a14dc4810f61ae96bf704526a8919bc700002100000000000000000001000027c9a46157a3609b6fd9843ee19ec647249a9375de5858818f3c4a4fa6ce46f4d42b07199de8b99231ace58c77819ee214e49666c464d35ca9b5143ed3b3dc8c17a23692759ccf5a205311b7ab22532697b861dfb50409fd88e6043bd52ae84c1bb0c8a6c769f952283a1f4e3842edb3d42c68a27ef6a1296dfff4a979369b0e8ebc62887aa46e820a74f91381ccc198e353047db70686d147357024eb3cb94f1e89cb5ba0a56aa046b4d8521a3d9356b4b8b5917c4c860495b240e80063bde261fd00000000007271e28ef6806bc8e139c49b91c76bea3858f78fbd8d31330d89069f9648a2ff93060fd2b0976cf2ec447c030931651dd315003b7a6a5433a2bb3c035fc6846abe389b25c988f0bbb889560ae99ec4b227eda2e63a1c31a2c2bd48a822cbe92b6524e0cd8020ecaa34e19e7141d5e221509342bfe7d294d1eb3de6a50ca0301f89c2ee627e949c68b3bca426a9b7d503a26e9a714ee5f72d8805dd1bfbd081f6a5d1f1289dfe14cb9194e26a44fac273461fc5c0e0a33db7f2d43ea8086cf059f40fa2640b6bfb74dd35f5a31059c01517cf4b6641fce9a24b96767b837ca037a1199735c375c705c798e0e208e4a5259d0bfa526b462af45a6eab34000000000000000000000000c4426344ec1a3366515dee221e747f55d7dd02534bc503b9b28277c253e410986bef2111a99cc448d652929f8a67a6a1d3f00dcad91aff428aade3f85714a1d3ef29acd4d49b62339c10c2ec0dac4728288e78980c1184d8223edbccbf9258b7374e79a1f8bf3fb73cfd1e76982f3d899f71e4a9f0ba8c6dbb7bbdfc399847a11921f97eba0ea14c4fed9a71eedb97c02461792e3a49dac16c60c3fcaab222025d78963c3ac899fa8b63f58a30212c9b2d7fe751e2046b78f86e22861b6504c667350244dd6d9189a8b9c45f8aaff9db694811ca86ed978f23eed7459c0382074170cf1e25b0e9ba3d1cc309353eea4cd8ab96bafda393276bdd8d32ead8db00000000000001f915268fc1a6ec566981bc8ca2a4583f3d40e817433d0f4f25cfe6cc1897449ba5f26a9d66ac73e6f5c401376f23a314e0b9ff997d22f3e34b7524642c248aa813edaa626f00000021f8547d393dabe616fbbde21c90be00b5a22671395c7a69c6dd4d022ffc97ddb6aa025131652d409da1d8cfc3d219d4b1c1b7b8170d7c33d91db2b73f7ae02485a209a2474b5d0790d05c01bec623056e4d3f4d3149373a28b26a15a1fcce73d57e6eaf7e6f315fe275ebc9ef7aeca277dde01dde724f419803a2172a7833ceab38d21ca4f1dea5e1f4d8824167b21dd289dd4e6ecfba9e163bdbc48e1e758ecde000006c06d4d551e81ee73459cf1c00000000000000000000628a663ed417be6ff5b172cba4a1ec629a39ec253c087b1e9ce84e25b8717ae8581bf28c16a8bbda8d69358e885ddf5387e419c64847b8953070cdefe7d6a35197638e929f8f3c005f9de3fe351def9ed5"], &(0x7f0000000b80)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xfffffedf, 0x10, &(0x7f0000000040), 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000640)={r2, 0x0, 0x62, 0xfffffffffffffe74, &(0x7f0000000140)="cb74445b7d4c0b24676c6c71ae37efcedaf40242309766deb4e793f90000000000000000dbc856cbc664650634231454ca2d8034c4ca29e0d99c3b6615e91835a600c08f989af45438a54981be310aad92ae545b1c961e5f3762a51fe4c736edec6f", &(0x7f0000000cc0)=""/265, 0xcb95, 0x0, 0xff, 0x194, &(0x7f0000000980)="ffc4438e5c3081d0e133e812196ec0ed923733aa8b5aba32c8650e7a66d6136853773dfbc6226be13039e230d511f1ac50cc7811aac0400e4c833fedf842ae2918e6fddb550729246fcf4c0a01bc64989ea3985fb362751a83991bd56e761379caa64f6148893ff25f38d5cd6dd695bbf9ca709a9960e0e6b054d5e2239bcb7c0fb2ac66dc4c8f534e439ff20ccaf0d48a98c19c92a3b437a699350f49606d21a403f8c112c46fea5486bf367a854b0f6c1e563b656e4794f6793a08bb3656c391643f6df71d0255054368a938d38503d064da82d5dbf395ad47ed3932669168d324ed0f6de8360d499042ddc7d02b6c0772128257702bfe6d0971f00fea85da062cdc", &(0x7f00000007c0)="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", 0x2, 0x0, 0x3ff}, 0x24) 2.231205028s ago: executing program 8 (id=7276): r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={0x0, 0xbf}}, 0x4000) socket$nl_generic(0x10, 0x3, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000240)={0xc, 0xfffffffffffff800}, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000ac0)=ANY=[@ANYBLOB="1800000000000000000000000000000018010000786c6c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000fdffffff850000002d00000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r1}, 0x10) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r2 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) openat$binderfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) tkill(r2, 0x35) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r5, 0x29, 0x40, &(0x7f0000000980)=@raw={'raw\x00', 0x3c1, 0x3, 0x3f0, 0x0, 0xc8, 0x8, 0x0, 0x5803, 0x320, 0x2e8, 0x2e8, 0x320, 0x2e8, 0x3, 0x0, {[{{@ipv6={@ipv4={'\x00', '\xff\xff', @multicast1}, @mcast1, [], [], 'erspan0\x00', 'geneve1\x00'}, 0x0, 0x190, 0x1c0, 0x0, {0x0, 0x2000000000000}, [@common=@unspec=@string={{0xc0}, {0x0, 0x0, 'kmp\x00', "cfcaf80c672f61cd17ae5119b5135c2aee68d23a465cd431e1ecef50c3234e082555f67222476147864fa03182f5cf11d8c348cbd06dc8de1dcbde7d4e252c3394fed47bf78c70f607b0178fa5ea335019ac07a602061c96baebc989f1f34a214e67262c1fe4b124e0f7323a587d2a1fcfe36bbf12eca0a7b66c60c527bac2b5", 0x1}}, @common=@inet=@socket3={{0x28}}]}, @common=@unspec=@CONNMARK={0x30}}, {{@uncond, 0x0, 0xf8, 0x160, 0x0, {}, [@inet=@rpfilter={{0x28}, {0x13}}, @inet=@rpfilter={{0x28}}]}, @unspec=@CT1={0x68, 'CT\x00', 0x1, {0x0, 0x0, 0x0, 0x0, 'netbios-ns\x00', 'syz1\x00'}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x450) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000002c80)={0x3, 0x4, &(0x7f0000000000)=@framed={{0x18, 0x2}, [@call={0x85, 0x0, 0x0, 0x87}]}, &(0x7f0000000080)='GPL\x00', 0x4, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x1, @void, @value}, 0x94) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000040)={0xffffffffffffffff, &(0x7f0000000100)='H', 0x0}, 0x20) ioctl$HCIINQUIRY(r0, 0x800448f0, &(0x7f00000000c0)={0x4, 0xb51c, "e1efff", 0x6, 0x8}) bind$bt_hci(r0, 0x0, 0x0) r6 = socket$inet(0x2, 0x3, 0x8) setsockopt$IPT_SO_SET_REPLACE(r6, 0x0, 0x40, &(0x7f0000001900)=@raw={'raw\x00', 0x8, 0x3, 0x250, 0x0, 0xe138, 0x198, 0x1c0, 0x198, 0x2a0, 0x358, 0x358, 0x2a0, 0x358, 0x3, 0x0, {[{{@ip={@broadcast, @loopback, 0x0, 0x0, 'pimreg\x00', 'veth0_to_bond\x00'}, 0x0, 0x98, 0x100, 0x0, {}, [@inet=@rpfilter={{0x28}}]}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x0, 0x0, 0x0, 0x0, 'snmp_trap\x00', 'syz0\x00'}}}, {{@uncond, 0x0, 0x70, 0xb8}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 'syz0\x00'}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x2b0) 2.219439587s ago: executing program 1 (id=7277): bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB='\v\x00\x00\x00\a\x00\x00\x00\b\x00\x00\x00\b\x00\x00'], 0x48) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000000400000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r1 = getpid() sched_setscheduler(r1, 0x1, &(0x7f0000000100)=0x5) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000200)='sched_switch\x00', r0}, 0x10) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680)) syz_clone3(0x0, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) write$P9_RVERSION(0xffffffffffffffff, &(0x7f0000000080)=ANY=[], 0x15) syz_mount_image$msdos(&(0x7f00000001c0), &(0x7f0000000080)='./file1\x00', 0x0, &(0x7f00000004c0)={[{@fat=@uid}, {@fat=@dos1xfloppy}, {@dots}, {@dots}, {@dots}, {@nodots}, {@dots}, {@nodots}, {@fat=@umask={'umask', 0x3d, 0x8b3}}, {@dots}, {@fat=@nocase}, {@dots}, {@dots}, {@dots}, {@nodots}, {@dots}, {@fat=@dos1xfloppy}, {@nodots}, {@fat=@time_offset={'time_offset', 0x3d, 0x3ac}}, {@nodots}, {@nodots}, {@nodots}]}, 0xfd, 0x1bf, &(0x7f0000000300)="$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") r4 = syz_open_procfs(0x0, &(0x7f0000000100)='mountinfo\x00') r5 = open(&(0x7f0000000080)='./file1\x00', 0x10b942, 0x0) sendfile(r5, r4, 0x0, 0x80000000) r6 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='kfree\x00', r6}, 0x10) r7 = syz_open_dev$usbfs(&(0x7f0000000100), 0x205, 0x8401) ioctl$USBDEVFS_SUBMITURB(r7, 0x8038550a, &(0x7f0000000000)=@urb_type_control={0x2, {}, 0x0, 0x0, &(0x7f0000000080)={0x0, 0xe, 0x0, 0x0, 0x7995}, 0x799d, 0x0, 0x0, 0x48000000, 0x0, 0x1, 0x0}) 2.166897317s ago: executing program 5 (id=7278): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB='\v\x00\x00\x00\a\x00\x00\x00\b\x00\x00\x00\b'], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000000400000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r2 = getpid() sched_setscheduler(r2, 0x1, &(0x7f0000000100)=0x5) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000200)='sched_switch\x00', r1}, 0x10) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f00000bd000), 0x318, 0x0) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680)) syz_clone3(&(0x7f0000001240)={0x2d000000, 0x0, 0x0, 0x0, {0x20}, 0x0, 0x0, 0x0, 0x0}, 0x58) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) syz_mount_image$msdos(&(0x7f00000001c0), &(0x7f0000000080)='./file1\x00', 0x0, &(0x7f00000004c0)={[{@fat=@uid}, {@fat=@dos1xfloppy}, {@dots}, {@dots}, {@dots}, {@nodots}, {@dots}, {@nodots}, {@fat=@umask={'umask', 0x3d, 0x8b3}}, {@dots}, {@fat=@nocase}, {@dots}, {@dots}, {@dots}, {@nodots}, {@dots}, {@fat=@dos1xfloppy}, {@nodots}, {@fat=@time_offset={'time_offset', 0x3d, 0x3ac}}, {@nodots}, {@nodots}, {@nodots}]}, 0xfd, 0x1bf, &(0x7f0000000300)="$eJzs3TGL02AYB/Cn9bzmnG4TRCHg4nSon+BEThADgtJBJ4XT5SqCt0SX9mP4Af0A0qmLRGrSxkaHWmxS6++39En/edvnHZp26ZNXN99dnL+/fPvl+udIkl70T+M0Zr04jn4sTAIA2CezooivRanrXgCAdqzx/f+t5ZYAgC17/uLlkwdZdvYsTZOI6SQf5sPyscwfPc7O7qY/HNerpnk+vLLM76XN3w7z/Gpcq/L75fp0NT+MO7fLfJ49fJo18kGcb3frAAAAAAAAAAAAAAAAAAAAAADQmVuRLvx2vs/JSTM/qvLy6Kf5QI35PQdx46A6rMcDFeM2NgUAAAAAAAAAAAAAAAAAAAD/mMuPny5ej0ZvPtTFICJWn/mTole98IbL2y76sRNtKP5qke5GG6MNPwWHEbGtxmZFUax1cn2NGHR1cQIAAAAAAAAAAAAAAAAAgP9M/affX7Oki4YAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAoAP1/f83KMYRscbJyzc76nSrAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA7LHvAQAA///DgjXa") r5 = syz_open_procfs(0x0, &(0x7f0000000100)='mountinfo\x00') r6 = open(&(0x7f0000000080)='./file1\x00', 0x10b942, 0x0) sendfile(r6, r5, 0x0, 0x80000000) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70800000000ebff7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x33, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={0x0, r7}, 0x18) r8 = syz_open_dev$usbfs(&(0x7f0000000100), 0x205, 0x8401) ioctl$USBDEVFS_SUBMITURB(r8, 0x8038550a, &(0x7f0000000000)=@urb_type_control={0x2, {}, 0x0, 0x0, &(0x7f0000000080)={0x0, 0xe, 0x0, 0x0, 0x7995}, 0x799d, 0x0, 0x0, 0x48000000, 0x0, 0x1, 0x0}) 227.117168ms ago: executing program 3 (id=7279): ioctl$PTP_EXTTS_REQUEST2(0xffffffffffffffff, 0x40103d0b, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x4000) socket$nl_generic(0x10, 0x3, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000240)={0xc, 0xfffffffffffff800}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000ac0)=ANY=[@ANYBLOB="1800000000000000000000000000000018010000786c6c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000fdffff"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) bpf$PROG_LOAD(0x5, &(0x7f00002a0fb8)={0x17, 0x0, 0x0, &(0x7f0000000140)='GPL\x00', 0x4, 0x99, &(0x7f0000000180)=""/153, 0x0, 0x8, '\x00', 0x0, @cgroup_sysctl, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xe, 0x4, 0x8, 0x8, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, 0x0, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r2}, 0x10) syz_clone(0x80842111, 0x0, 0x0, 0x0, 0x0, 0x0) 205.526528ms ago: executing program 2 (id=7280): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) r0 = getpid() syz_clone(0x0, 0x0, 0xfffffe11, 0x0, 0x0, 0x0) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) ptrace$ARCH_SET_GS(0x1e, r0, &(0x7f00000000c0), 0x1001) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r2, &(0x7f0000d84000)={0xa, 0x2}, 0x1c) setsockopt$inet6_tcp_int(r2, 0x6, 0xa, &(0x7f0000001100)=0x4, 0x4) bpf$PROG_LOAD(0x5, &(0x7f0000000500)={0x6, 0x4, &(0x7f0000000240)=ANY=[@ANYBLOB="180200"/13], 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) sendto$inet6(r2, &(0x7f0000f6f000), 0xfffffffffffffea7, 0x20000004, &(0x7f0000b63fe4)={0xa, 0x2, 0x18115, @rand_addr, 0x983a}, 0x1c) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000023c0)=ANY=[@ANYBLOB="3c0100001a0001000000000000000000ac14142200"/64, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="fe80000000000000000000000000000300000000330000002001000000000000000000000000000000000000000000000000000200000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000300000000000000000000000000000000000000000000000000000000000000000000000a00000400000000000000004c001400636d6163286165732900"], 0x13c}}, 0x0) 184.480699ms ago: executing program 1 (id=7281): bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB='\v\x00\x00\x00\a\x00\x00\x00\b\x00\x00\x00\b\x00\x00'], 0x48) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000000400000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r1 = getpid() sched_setscheduler(r1, 0x1, &(0x7f0000000100)=0x5) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000200)='sched_switch\x00', r0}, 0x10) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680)) syz_clone3(0x0, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) write$P9_RVERSION(0xffffffffffffffff, &(0x7f0000000080)=ANY=[], 0x15) syz_mount_image$msdos(&(0x7f00000001c0), &(0x7f0000000080)='./file1\x00', 0x0, &(0x7f00000004c0)={[{@fat=@uid}, {@fat=@dos1xfloppy}, {@dots}, {@dots}, {@dots}, {@nodots}, {@dots}, {@nodots}, {@fat=@umask={'umask', 0x3d, 0x8b3}}, {@dots}, {@fat=@nocase}, {@dots}, {@dots}, {@dots}, {@nodots}, {@dots}, {@fat=@dos1xfloppy}, {@nodots}, {@fat=@time_offset={'time_offset', 0x3d, 0x3ac}}, {@nodots}, {@nodots}, {@nodots}]}, 0xfd, 0x1bf, &(0x7f0000000300)="$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") r4 = syz_open_procfs(0x0, &(0x7f0000000100)='mountinfo\x00') r5 = open(&(0x7f0000000080)='./file1\x00', 0x10b942, 0x0) sendfile(r5, r4, 0x0, 0x80000000) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, 0x0, &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x33, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='kfree\x00', r6}, 0x10) r7 = syz_open_dev$usbfs(&(0x7f0000000100), 0x205, 0x8401) ioctl$USBDEVFS_SUBMITURB(r7, 0x8038550a, &(0x7f0000000000)=@urb_type_control={0x2, {}, 0x0, 0x0, &(0x7f0000000080)={0x0, 0xe, 0x0, 0x0, 0x7995}, 0x799d, 0x0, 0x0, 0x48000000, 0x0, 0x1, 0x0}) 0s ago: executing program 5 (id=7282): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x2, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000070000001801000020756c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000a5df850000002d00000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xb, 0x7, 0x10001, 0x9, 0x1, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000067dfb4a518110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000060000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000003"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='net_dev_xmit\x00'}, 0x10) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000002ec0)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r1, 0x18000000000002a0, 0xe2c, 0x60000000, &(0x7f0000000100)="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", 0x0, 0x24, 0x60000000}, 0x2c) kernel console output (not intermixed with test programs): it(1732127845.027:4849): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16133 comm="syz.8.4213" exe="/root/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7f7b8e17e853 code=0x7ffc0000 [ 1279.908014][ T28] audit: type=1326 audit(1732127845.027:4850): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16133 comm="syz.8.4213" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7b8e17e819 code=0x7ffc0000 [ 1279.961219][ T28] audit: type=1326 audit(1732127845.027:4851): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16133 comm="syz.8.4213" exe="/root/syz-executor" sig=0 arch=c000003e syscall=426 compat=0 ip=0x7f7b8e17e819 code=0x7ffc0000 [ 1283.848688][T16198] overlayfs: failed to resolve './file0': -2 [ 1287.755632][T16250] 9pnet_fd: Insufficient options for proto=fd [ 1289.232085][T14298] usb 4-1: new low-speed USB device number 65 using dummy_hcd [ 1290.127970][T14298] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 1290.142119][T14298] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1290.152019][T14298] usb 4-1: New USB device found, idVendor=1038, idProduct=1410, bcdDevice= 0.00 [ 1290.161109][T14298] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1290.175548][T14298] usb 4-1: config 0 descriptor?? [ 1291.548108][T14298] usbhid 4-1:0.0: can't add hid device: -71 [ 1291.553915][T14298] usbhid: probe of 4-1:0.0 failed with error -71 [ 1291.998008][T14298] usb 4-1: USB disconnect, device number 65 [ 1294.514309][T11166] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 1294.520866][ T3061] Bluetooth: hci0: command 0x1003 tx timeout [ 1294.872441][T16340] binder: 16336:16340 ioctl c0306201 0 returned -14 [ 1299.397072][T16385] binder: 16379:16385 ioctl c0306201 0 returned -14 [ 1301.787925][T16400] syz.3.4283 calls setitimer() with new_value NULL pointer. Misfeature support will be removed [ 1302.011602][T16405] Bluetooth: received HCILL_WAKE_UP_IND in state 2 [ 1314.671176][ T7904] Bluetooth: hci0: Frame reassembly failed (-84) [ 1316.414032][T16536] binder: 16532:16536 ioctl c0306201 0 returned -14 [ 1316.758011][T11166] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 1316.788223][ T1681] usb 4-1: new high-speed USB device number 66 using dummy_hcd [ 1317.298033][ T1681] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1317.319771][ T1681] usb 4-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 1317.338000][ T1681] usb 4-1: New USB device found, idVendor=256c, idProduct=006d, bcdDevice= 0.00 [ 1317.356183][ T1681] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1317.378024][ T1681] usb 4-1: config 0 descriptor?? [ 1318.727170][T14298] usb 4-1: USB disconnect, device number 66 [ 1324.526738][T16607] netlink: 'syz.1.4337': attribute type 32 has an invalid length. [ 1327.527924][T14298] usb 2-1: new high-speed USB device number 82 using dummy_hcd [ 1327.893375][T16665] fuse: Bad value for 'fd' [ 1329.434598][T16674] binder: 16672:16674 ioctl c0306201 0 returned -14 [ 1329.697936][T11166] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 1329.697937][ T3061] Bluetooth: hci0: command 0x1003 tx timeout [ 1329.988323][T11257] usb 9-1: new low-speed USB device number 48 using dummy_hcd [ 1332.563437][T11257] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 1332.892253][T11257] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1332.908424][T11257] usb 9-1: New USB device found, idVendor=1038, idProduct=1410, bcdDevice= 0.00 [ 1332.922520][T11257] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1332.954535][T11257] usb 9-1: config 0 descriptor?? [ 1333.055301][T11257] usb 9-1: can't set config #0, error -71 [ 1333.068225][T11257] usb 9-1: USB disconnect, device number 48 [ 1333.312270][ T3090] usb 4-1: new high-speed USB device number 67 using dummy_hcd [ 1333.888209][ T3090] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1334.179036][ T3090] usb 4-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 21 [ 1334.198098][ T3090] usb 4-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 1334.213908][ T3090] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1334.288529][ T3090] usb 4-1: config 0 descriptor?? [ 1334.385966][ T3090] usbhid 4-1:0.0: couldn't find an input interrupt endpoint [ 1334.407700][T16735] overlayfs: missing 'lowerdir' [ 1335.091143][ T3090] usb 9-1: new low-speed USB device number 49 using dummy_hcd [ 1336.348110][T16201] Bluetooth: hci1: Frame reassembly failed (-84) [ 1336.357504][T14298] usb 4-1: USB disconnect, device number 67 [ 1336.712890][ T3090] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 1336.724137][ T3090] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1336.733774][ T3090] usb 9-1: New USB device found, idVendor=1038, idProduct=1410, bcdDevice= 0.00 [ 1336.781185][ T3090] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1336.793274][ T3090] usb 9-1: config 0 descriptor?? [ 1336.977992][ T6763] Bluetooth: hci0: command 0x1003 tx timeout [ 1336.993756][T11166] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 1337.440136][T16735] incfs: Error accessing: ./bus. [ 1337.445119][T16735] incfs: mount failed -2 [ 1337.458946][ T3090] steelseries_srws1 0003:1038:1410.004E: unknown main item tag 0xd [ 1337.466921][ T3090] steelseries_srws1 0003:1038:1410.004E: item fetching failed at offset 6/7 [ 1337.475627][ T3090] steelseries_srws1 0003:1038:1410.004E: parse failed [ 1337.482278][ T3090] steelseries_srws1: probe of 0003:1038:1410.004E failed with error -22 [ 1337.661448][T16735] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1337.670843][T16735] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1337.685782][T16735] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1337.695273][T16735] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1337.714274][T14298] usb 9-1: USB disconnect, device number 49 [ 1337.737157][T16782] overlayfs: failed to resolve './file0': -2 [ 1338.454605][T11166] Bluetooth: hci1: command 0x1003 tx timeout [ 1338.456455][ T3061] Bluetooth: hci1: Opcode 0x1003 failed: -110 [ 1343.072585][T16838] overlayfs: failed to resolve './file0': -2 [ 1343.374999][T16854] binder: 16843:16854 ioctl c0306201 0 returned -14 [ 1343.777973][ T321] usb 2-1: new high-speed USB device number 83 using dummy_hcd [ 1344.218018][ T321] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1344.236454][ T321] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1344.252481][ T321] usb 2-1: New USB device found, idVendor=256c, idProduct=006d, bcdDevice= 0.00 [ 1344.269769][ T321] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1344.290426][ T321] usb 2-1: config 0 descriptor?? [ 1344.967359][ T321] hid (null): bogus close delimiter [ 1345.498038][ T321] usb 2-1: string descriptor 0 read error: -71 [ 1345.518056][ T321] uclogic 0003:256C:006D.004F: failed retrieving string descriptor #200: -71 [ 1345.529719][ T321] uclogic 0003:256C:006D.004F: failed retrieving pen parameters: -71 [ 1346.050671][ T321] uclogic 0003:256C:006D.004F: failed probing pen v2 parameters: -71 [ 1346.096349][ T321] uclogic 0003:256C:006D.004F: failed probing parameters: -71 [ 1346.118452][ T321] uclogic: probe of 0003:256C:006D.004F failed with error -71 [ 1346.131129][ T321] usb 2-1: USB disconnect, device number 83 [ 1348.087404][T16913] binder: 16904:16913 ioctl c0306201 0 returned -14 [ 1348.317249][T16914] usb usb8: Requested nonsensical USBDEVFS_URB_SHORT_NOT_OK. [ 1352.110898][T16940] syz.8.4425 (16940) used greatest stack depth: 19256 bytes left [ 1352.287930][T14298] usb 6-1: new high-speed USB device number 35 using dummy_hcd [ 1352.668022][T14298] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1352.707191][T14298] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1352.745594][T14298] usb 6-1: New USB device found, idVendor=256c, idProduct=006d, bcdDevice= 0.00 [ 1352.816785][T14298] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1352.870782][T14298] usb 6-1: config 0 descriptor?? [ 1353.938074][T14298] usbhid 6-1:0.0: can't add hid device: -71 [ 1353.944073][T14298] usbhid: probe of 6-1:0.0 failed with error -71 [ 1353.956921][T16977] binder: 16974:16977 ioctl c0306201 0 returned -14 [ 1353.975903][T14298] usb 6-1: USB disconnect, device number 35 [ 1358.189575][T17030] binder: 17024:17030 ioctl c0306201 0 returned -14 [ 1358.825290][T17041] netlink: 'syz.8.4451': attribute type 32 has an invalid length. [ 1359.350050][T17047] overlayfs: failed to resolve './file0': -2 [ 1359.724956][T17057] overlayfs: failed to resolve './file0': -2 [ 1360.106937][T14922] usb 6-1: new high-speed USB device number 36 using dummy_hcd [ 1360.347896][T14922] usb 6-1: Using ep0 maxpacket: 16 [ 1360.377903][T14298] usb 9-1: new high-speed USB device number 50 using dummy_hcd [ 1360.468002][T14922] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1360.492259][T14922] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1360.509815][T14922] usb 6-1: New USB device found, idVendor=1fd2, idProduct=6007, bcdDevice= 0.00 [ 1360.530371][T14922] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1360.555919][T14922] usb 6-1: config 0 descriptor?? [ 1360.777968][T14298] usb 9-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1360.795548][T14298] usb 9-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 1360.827985][T14298] usb 9-1: New USB device found, idVendor=256c, idProduct=006d, bcdDevice= 0.00 [ 1360.837649][T14298] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1360.860307][T14298] usb 9-1: config 0 descriptor?? [ 1360.909385][T14298] usbhid 9-1:0.0: couldn't find an input interrupt endpoint [ 1361.061614][T14922] hid-multitouch 0003:1FD2:6007.0050: hidraw0: USB HID v0.00 Device [HID 1fd2:6007] on usb-dummy_hcd.5-1/input0 [ 1361.591105][ T1681] usb 6-1: USB disconnect, device number 36 [ 1362.171243][T17104] overlayfs: failed to resolve './file0': -2 [ 1362.957921][ T1681] usb 7-1: new high-speed USB device number 34 using dummy_hcd [ 1363.098859][ T9688] usb 9-1: USB disconnect, device number 50 [ 1363.136609][T17123] overlayfs: failed to resolve './file0': -2 [ 1363.727724][ T1681] usb 7-1: Using ep0 maxpacket: 16 [ 1363.878150][ T1681] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1363.974606][ T1681] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1364.061278][ T1681] usb 7-1: New USB device found, idVendor=1fd2, idProduct=6007, bcdDevice= 0.00 [ 1364.177241][ T1681] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1364.272780][ T1681] usb 7-1: config 0 descriptor?? [ 1364.968791][ T1681] usbhid 7-1:0.0: can't add hid device: -71 [ 1364.981197][ T1681] usbhid: probe of 7-1:0.0 failed with error -71 [ 1365.276968][ T1681] usb 7-1: USB disconnect, device number 34 [ 1366.523041][T17175] overlayfs: missing 'lowerdir' [ 1366.970898][T16201] Bluetooth: hci0: Frame reassembly failed (-84) [ 1367.089111][T16201] Bluetooth: hci0: Frame reassembly failed (-84) [ 1367.098125][ T9688] usb 4-1: new low-speed USB device number 68 using dummy_hcd [ 1368.508037][ T9688] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 1368.527908][ T9688] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1368.547905][ T9688] usb 4-1: New USB device found, idVendor=1038, idProduct=1410, bcdDevice= 0.00 [ 1368.556778][ T9688] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1368.581802][ T9688] usb 4-1: config 0 descriptor?? [ 1369.027931][T11166] Bluetooth: hci0: command 0x1003 tx timeout [ 1369.033802][ T3061] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 1369.078324][T14922] usb 2-1: new high-speed USB device number 84 using dummy_hcd [ 1369.089235][T17175] incfs: Error accessing: ./bus. [ 1369.126640][T17175] incfs: mount failed -2 [ 1369.182875][ T9688] steelseries_srws1 0003:1038:1410.0051: unknown main item tag 0xd [ 1369.201266][ T9688] steelseries_srws1 0003:1038:1410.0051: item fetching failed at offset 6/7 [ 1369.222303][ T9688] steelseries_srws1 0003:1038:1410.0051: parse failed [ 1369.229147][ T9688] steelseries_srws1: probe of 0003:1038:1410.0051 failed with error -22 [ 1369.327952][T14922] usb 2-1: Using ep0 maxpacket: 8 [ 1369.373490][T17175] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1369.382145][T17175] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1369.390748][T17175] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1369.399152][T17175] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1369.407991][ T321] usb 4-1: USB disconnect, device number 68 [ 1369.666875][T14922] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1369.677028][T14922] usb 2-1: config 0 has no interfaces? [ 1369.682388][T14922] usb 2-1: New USB device found, idVendor=1557, idProduct=7720, bcdDevice=b7.eb [ 1369.691208][T14922] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1369.699690][T14922] usb 2-1: config 0 descriptor?? [ 1370.875704][T16201] Bluetooth: hci0: Frame reassembly failed (-84) [ 1371.435982][ T9688] usb 2-1: USB disconnect, device number 84 [ 1372.907916][ T6763] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 1372.910122][ T3061] Bluetooth: hci0: command 0x1003 tx timeout [ 1373.328640][ T7904] Bluetooth: hci0: Frame reassembly failed (-84) [ 1375.976187][ T6763] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 1376.259844][T17284] binder: 17278:17284 ioctl c0306201 0 returned -14 [ 1381.449958][T17330] usb usb8: Requested nonsensical USBDEVFS_URB_SHORT_NOT_OK. [ 1385.353695][ T500] Bluetooth: hci0: Frame reassembly failed (-84) [ 1385.362077][T17372] Bluetooth: received HCILL_WAKE_UP_IND in state 2 [ 1386.441044][T17387] overlayfs: failed to resolve './file0': -2 [ 1387.462495][ T6763] Bluetooth: hci0: command 0x1003 tx timeout [ 1387.462704][ T3061] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 1390.418425][ T43] Bluetooth: hci0: Frame reassembly failed (-84) [ 1390.528132][ T43] Bluetooth: hci0: Frame reassembly failed (-84) [ 1391.391893][T17455] overlayfs: option "workdir=./bus" is useless in a non-upper mount, ignore [ 1391.400583][T17455] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent [ 1391.645789][T17458] overlayfs: failed to resolve './file0': -2 [ 1391.997995][T10095] usb 6-1: new high-speed USB device number 37 using dummy_hcd [ 1392.005464][T14922] usb 4-1: new low-speed USB device number 69 using dummy_hcd [ 1392.427885][ T3061] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 1393.388010][T14922] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 1393.399104][T10095] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1393.409869][T10095] usb 6-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 21 [ 1393.440123][T14922] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1393.450076][T14922] usb 4-1: New USB device found, idVendor=1038, idProduct=1410, bcdDevice= 0.00 [ 1393.459438][T10095] usb 6-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 1393.469055][T14922] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1393.476929][T10095] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1393.490409][T14922] usb 4-1: config 0 descriptor?? [ 1393.504279][T10095] usb 6-1: config 0 descriptor?? [ 1393.632233][T10095] usbhid 6-1:0.0: couldn't find an input interrupt endpoint [ 1393.949569][T17455] incfs: Error accessing: ./bus. [ 1393.955512][T17455] incfs: mount failed -2 [ 1393.968923][T14922] steelseries_srws1 0003:1038:1410.0052: unknown main item tag 0xd [ 1393.976831][T14922] steelseries_srws1 0003:1038:1410.0052: item fetching failed at offset 6/7 [ 1393.985913][T14922] steelseries_srws1 0003:1038:1410.0052: parse failed [ 1393.992932][T14922] steelseries_srws1: probe of 0003:1038:1410.0052 failed with error -22 [ 1394.180210][T17455] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1394.188652][T17455] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1394.197150][T17455] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1394.205685][T17455] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1394.230365][T14922] usb 4-1: USB disconnect, device number 69 [ 1394.848645][T14922] usb 6-1: USB disconnect, device number 37 [ 1394.851711][T17501] usb usb8: Requested nonsensical USBDEVFS_URB_SHORT_NOT_OK. [ 1396.667602][T14922] usb 6-1: new high-speed USB device number 38 using dummy_hcd [ 1397.027994][T14922] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1397.039064][T14922] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1397.049287][T14922] usb 6-1: New USB device found, idVendor=256c, idProduct=006d, bcdDevice= 0.00 [ 1397.062916][T14922] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1397.075795][T14922] usb 6-1: config 0 descriptor?? [ 1397.108033][T10095] usb 2-1: new high-speed USB device number 85 using dummy_hcd [ 1397.548919][T10095] usb 2-1: Using ep0 maxpacket: 16 [ 1397.668076][T10095] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1397.678153][T10095] usb 2-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 3 [ 1397.997527][T14922] usbhid 6-1:0.0: can't add hid device: -71 [ 1398.004749][T14922] usbhid: probe of 6-1:0.0 failed with error -71 [ 1398.011910][T14922] usb 6-1: USB disconnect, device number 38 [ 1398.127966][T10095] usb 2-1: New USB device found, idVendor=046d, idProduct=08f0, bcdDevice=50.0d [ 1398.137074][T10095] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1398.218962][T17555] binder: 17552:17555 ioctl c0306201 0 returned -14 [ 1398.358364][T10095] usb 2-1: Product: syz [ 1398.362419][T10095] usb 2-1: Manufacturer: syz [ 1398.366869][T10095] usb 2-1: SerialNumber: syz [ 1398.375700][T10095] usb 2-1: config 0 descriptor?? [ 1398.429113][T10095] usb-storage 2-1:0.0: USB Mass Storage device detected [ 1398.621457][T17563] binder: 17557:17563 ioctl c0306201 0 returned -14 [ 1399.253317][T14298] usb 2-1: USB disconnect, device number 85 [ 1401.437914][ T9688] usb 4-1: new high-speed USB device number 70 using dummy_hcd [ 1401.937339][ T9688] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1401.948214][ T9688] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1402.006882][ T9688] usb 4-1: New USB device found, idVendor=256c, idProduct=006d, bcdDevice= 0.00 [ 1402.016158][ T9688] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1402.171640][T17612] binder: 17605:17612 ioctl c0306201 0 returned -14 [ 1402.564843][ T9688] usb 4-1: config 0 descriptor?? [ 1404.913517][ T9688] usbhid 4-1:0.0: can't add hid device: -71 [ 1404.919418][ T9688] usbhid: probe of 4-1:0.0 failed with error -71 [ 1406.498358][ T9688] usb 4-1: USB disconnect, device number 70 [ 1406.995675][T17662] binder: 17656:17662 ioctl c0306201 0 returned -14 [ 1407.018120][ T8] Bluetooth: hci0: Frame reassembly failed (-84) [ 1410.108642][ T3061] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 1410.109059][ T6763] Bluetooth: hci0: command 0x1003 tx timeout [ 1411.152281][T17721] usb usb8: Requested nonsensical USBDEVFS_URB_SHORT_NOT_OK. [ 1413.467922][T11166] Bluetooth: hci0: sending frame failed (-49) [ 1413.473951][ T3061] Bluetooth: hci0: Opcode 0x1003 failed: -49 [ 1413.512126][ T6850] Bluetooth: hci0: Frame reassembly failed (-84) [ 1413.519492][T17751] Bluetooth: received HCILL_WAKE_UP_IND in state 2 [ 1414.477978][T11257] usb 9-1: new high-speed USB device number 51 using dummy_hcd [ 1414.810817][T11257] usb 9-1: Using ep0 maxpacket: 16 [ 1414.857937][ T40] usb 4-1: new high-speed USB device number 71 using dummy_hcd [ 1414.947958][T11257] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1414.958739][T11257] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1414.968237][T11257] usb 9-1: New USB device found, idVendor=1fd2, idProduct=6007, bcdDevice= 0.00 [ 1414.977059][T11257] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1414.988835][T11257] usb 9-1: config 0 descriptor?? [ 1415.327977][ T40] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1415.338824][ T40] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1415.348360][ T40] usb 4-1: New USB device found, idVendor=05ac, idProduct=0265, bcdDevice= 0.00 [ 1415.357306][ T40] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1415.366003][ T40] usb 4-1: config 0 descriptor?? [ 1415.537937][ T3061] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 1415.537937][T11166] Bluetooth: hci0: command 0x1003 tx timeout [ 1415.609317][T11257] usbhid 9-1:0.0: can't add hid device: -71 [ 1415.618938][T11257] usbhid: probe of 9-1:0.0 failed with error -71 [ 1415.626260][T11257] usb 9-1: USB disconnect, device number 51 [ 1417.387974][ T3061] Bluetooth: hci0: sending frame failed (-49) [ 1417.396508][T11166] Bluetooth: hci0: Opcode 0x1003 failed: -49 [ 1419.264641][ T40] usbhid 4-1:0.0: can't add hid device: -71 [ 1419.272236][ T40] usbhid: probe of 4-1:0.0 failed with error -71 [ 1419.288298][ T40] usb 4-1: USB disconnect, device number 71 [ 1421.668356][T17856] netlink: 'syz.6.4667': attribute type 32 has an invalid length. [ 1424.157764][T17889] usb usb8: Requested nonsensical USBDEVFS_URB_SHORT_NOT_OK. [ 1424.610042][T17899] overlayfs: failed to resolve './file1': -2 [ 1425.631286][T11257] usb 4-1: new high-speed USB device number 72 using dummy_hcd [ 1428.053491][T17949] overlayfs: failed to resolve './file1': -2 [ 1429.997684][T10095] usb 9-1: new high-speed USB device number 52 using dummy_hcd [ 1431.777911][T14298] usb 7-1: new high-speed USB device number 35 using dummy_hcd [ 1432.122994][T14298] usb 7-1: Using ep0 maxpacket: 16 [ 1432.817979][T14298] usb 7-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1432.828327][T14298] usb 7-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 3 [ 1433.752254][T18004] binder: 17996:18004 ioctl c0306201 0 returned -14 [ 1433.976875][T17395] Bluetooth: hci0: Frame reassembly failed (-84) [ 1434.338037][T14298] usb 7-1: New USB device found, idVendor=046d, idProduct=08f0, bcdDevice=50.0d [ 1434.346974][T14298] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1434.354877][T14298] usb 7-1: Product: syz [ 1434.359092][T14298] usb 7-1: Manufacturer: syz [ 1434.363514][T14298] usb 7-1: SerialNumber: syz [ 1434.368690][T14298] usb 7-1: config 0 descriptor?? [ 1434.418344][T14298] usb-storage 7-1:0.0: USB Mass Storage device detected [ 1434.494203][T14298] usb 7-1: USB disconnect, device number 35 [ 1434.517962][ T321] usb 6-1: new high-speed USB device number 39 using dummy_hcd [ 1435.311870][T10095] usb 9-1: device descriptor read/64, error -71 [ 1435.530908][ T321] usb 6-1: Using ep0 maxpacket: 16 [ 1435.677694][ T321] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1435.688702][ T321] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1435.977502][ T321] usb 6-1: New USB device found, idVendor=1fd2, idProduct=6007, bcdDevice= 0.00 [ 1435.986444][ T321] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1435.998238][ T321] usb 6-1: config 0 descriptor?? [ 1436.027907][T11166] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 1436.027969][ T3061] Bluetooth: hci0: command 0x1003 tx timeout [ 1436.076340][T18039] overlayfs: failed to resolve './file1': -2 [ 1436.227915][T10095] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1436.238666][T10095] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1436.252576][T10095] usb 9-1: New USB device found, idVendor=256c, idProduct=006d, bcdDevice= 0.00 [ 1436.261917][T10095] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1436.279868][T10095] usb 9-1: config 0 descriptor?? [ 1436.547969][ T321] usbhid 6-1:0.0: can't add hid device: -71 [ 1436.553869][ T321] usbhid: probe of 6-1:0.0 failed with error -71 [ 1436.573688][ T321] usb 6-1: USB disconnect, device number 39 [ 1437.616230][T10095] hid (null): bogus close delimiter [ 1438.527915][T10095] usb 9-1: string descriptor 0 read error: -71 [ 1438.701933][T10095] uclogic 0003:256C:006D.0053: failed retrieving string descriptor #200: -71 [ 1438.710749][T10095] uclogic 0003:256C:006D.0053: failed retrieving pen parameters: -71 [ 1438.718873][T10095] uclogic 0003:256C:006D.0053: failed probing pen v2 parameters: -71 [ 1438.726826][T10095] uclogic 0003:256C:006D.0053: failed probing parameters: -71 [ 1438.734261][ T320] usb 2-1: new high-speed USB device number 86 using dummy_hcd [ 1438.748616][T10095] uclogic: probe of 0003:256C:006D.0053 failed with error -71 [ 1438.751473][T18081] overlayfs: failed to resolve './file1': -2 [ 1438.762303][T10095] usb 9-1: USB disconnect, device number 52 [ 1439.938406][ T320] usb 2-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 21 [ 1439.951607][ T320] usb 2-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 1439.961927][ T320] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1439.988836][ T320] usb 2-1: config 0 descriptor?? [ 1440.036972][ T320] usbhid 2-1:0.0: couldn't find an input interrupt endpoint [ 1440.719653][T14298] usb 2-1: USB disconnect, device number 86 [ 1440.776176][T18101] netlink: 'syz.6.4736': attribute type 32 has an invalid length. [ 1442.977315][T18126] overlayfs: failed to resolve './file1': -2 [ 1446.159337][ T320] usb 4-1: new high-speed USB device number 73 using dummy_hcd [ 1448.660043][T18196] overlayfs: failed to resolve './file1': -2 [ 1448.677936][ T320] usb 4-1: unable to read config index 0 descriptor/all [ 1448.684729][ T320] usb 4-1: can't read configurations, error -71 [ 1449.730223][T18217] usb usb8: Requested nonsensical USBDEVFS_URB_SHORT_NOT_OK. [ 1451.956805][T18246] overlayfs: failed to resolve './file1': -2 [ 1452.569999][ T3090] usb 6-1: new high-speed USB device number 40 using dummy_hcd [ 1452.616084][T18263] 9pnet: Could not find request transport: fd0x0000000000000003 [ 1453.508297][ T3090] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1453.568077][ T3090] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1453.722605][ T3090] usb 6-1: New USB device found, idVendor=256c, idProduct=006d, bcdDevice= 0.00 [ 1453.748085][ T3090] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1453.777010][ T3090] usb 6-1: config 0 descriptor?? [ 1456.874078][ T3090] usb 6-1: can't set config #0, error -71 [ 1456.882701][ T3090] usb 6-1: USB disconnect, device number 40 [ 1456.893295][T18292] netlink: 'syz.6.4782': attribute type 32 has an invalid length. [ 1458.441999][T18302] 9pnet: Could not find request transport: fd0x0000000000000003 [ 1460.696591][ T320] usb 7-1: new high-speed USB device number 36 using dummy_hcd [ 1460.880668][T18348] 9pnet: Could not find request transport: fd0x0000000000000003 [ 1461.847429][T18363] ip6t_rpfilter: unknown options [ 1462.717894][ T320] usb 7-1: unable to read config index 0 descriptor/start: -71 [ 1462.728215][ T320] usb 7-1: can't read configurations, error -71 [ 1463.646160][ T3061] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 1464.606242][T18398] 9pnet_fd: Insufficient options for proto=fd [ 1464.627969][T18400] overlayfs: option "workdir=./bus" is useless in a non-upper mount, ignore [ 1464.636789][T18400] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent [ 1465.297861][ T320] usb 7-1: new low-speed USB device number 38 using dummy_hcd [ 1466.217529][T18414] ip6t_rpfilter: unknown options [ 1466.627974][ T320] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 1466.639229][ T320] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1466.649275][ T320] usb 7-1: New USB device found, idVendor=1038, idProduct=1410, bcdDevice= 0.00 [ 1466.649317][T18426] usb usb8: Requested nonsensical USBDEVFS_URB_SHORT_NOT_OK. [ 1466.665633][ T320] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1466.673607][ T8954] usb 6-1: new high-speed USB device number 41 using dummy_hcd [ 1466.691031][ T320] usb 7-1: config 0 descriptor?? [ 1466.867849][T18431] binder: 18427:18431 ioctl c0306201 0 returned -14 [ 1467.362618][ T8954] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1467.374470][ T8954] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1467.378502][T18400] incfs: Error accessing: ./bus. [ 1467.385700][ T8954] usb 6-1: New USB device found, idVendor=256c, idProduct=006d, bcdDevice= 0.00 [ 1467.396775][T18400] incfs: mount failed -2 [ 1467.398988][ T8954] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1467.411545][ T320] steelseries_srws1 0003:1038:1410.0054: unknown main item tag 0xd [ 1467.419646][ T320] steelseries_srws1 0003:1038:1410.0054: item fetching failed at offset 6/7 [ 1467.428844][ T8954] usb 6-1: config 0 descriptor?? [ 1467.433818][ T320] steelseries_srws1 0003:1038:1410.0054: parse failed [ 1467.440483][ T320] steelseries_srws1: probe of 0003:1038:1410.0054 failed with error -22 [ 1467.590076][T18442] 9pnet_fd: Insufficient options for proto=fd [ 1467.617126][T18400] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1467.628547][T18400] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1467.764933][T18400] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1468.621494][T18400] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1468.634039][ T493] usb 7-1: USB disconnect, device number 38 [ 1468.746298][T18460] usb usb8: Requested nonsensical USBDEVFS_URB_SHORT_NOT_OK. [ 1469.808179][ T8954] hid (null): bogus close delimiter [ 1471.097995][ T3061] Bluetooth: hci0: sending frame failed (-49) [ 1471.103965][T11166] Bluetooth: hci0: Opcode 0x1003 failed: -49 [ 1471.657996][ T8954] usb 6-1: string descriptor 0 read error: -71 [ 1471.677909][ T8954] uclogic 0003:256C:006D.0055: failed retrieving string descriptor #200: -71 [ 1471.686738][ T8954] uclogic 0003:256C:006D.0055: failed retrieving pen parameters: -71 [ 1471.704336][ T8954] uclogic 0003:256C:006D.0055: failed probing pen v2 parameters: -71 [ 1471.713606][ T8954] uclogic 0003:256C:006D.0055: failed probing parameters: -71 [ 1471.724963][ T8954] uclogic: probe of 0003:256C:006D.0055 failed with error -71 [ 1471.738767][ T8954] usb 6-1: USB disconnect, device number 41 [ 1472.087958][ T43] Bluetooth: hci0: Frame reassembly failed (-84) [ 1472.135842][T18515] ip6t_rpfilter: unknown options [ 1472.152690][ T28] audit: type=1326 audit(1732128037.777:4852): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18516 comm="syz.3.4841" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9aee17e819 code=0x7ffc0000 [ 1472.176190][ T28] audit: type=1326 audit(1732128037.777:4853): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18516 comm="syz.3.4841" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9aee17e819 code=0x7ffc0000 [ 1472.205413][ T28] audit: type=1326 audit(1732128037.777:4854): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18516 comm="syz.3.4841" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f9aee17e819 code=0x7ffc0000 [ 1472.229550][ T28] audit: type=1326 audit(1732128037.777:4855): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18516 comm="syz.3.4841" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9aee17e819 code=0x7ffc0000 [ 1472.253491][ T28] audit: type=1326 audit(1732128037.777:4856): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18516 comm="syz.3.4841" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9aee17e819 code=0x7ffc0000 [ 1472.277249][ T28] audit: type=1326 audit(1732128037.777:4857): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18516 comm="syz.3.4841" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f9aee17e819 code=0x7ffc0000 [ 1472.301815][ T28] audit: type=1326 audit(1732128037.777:4858): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18516 comm="syz.3.4841" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9aee17e819 code=0x7ffc0000 [ 1472.325355][ T28] audit: type=1326 audit(1732128037.777:4859): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18516 comm="syz.3.4841" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9aee17e819 code=0x7ffc0000 [ 1472.349009][ T28] audit: type=1326 audit(1732128037.777:4860): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18516 comm="syz.3.4841" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f9aee17e819 code=0x7ffc0000 [ 1472.372582][ T8954] usb 6-1: new high-speed USB device number 42 using dummy_hcd [ 1472.372599][ T28] audit: type=1326 audit(1732128037.777:4861): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18516 comm="syz.3.4841" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9aee17e819 code=0x7ffc0000 [ 1472.568081][T11259] usb 4-1: new high-speed USB device number 75 using dummy_hcd [ 1472.618045][ T8954] usb 6-1: Using ep0 maxpacket: 16 [ 1472.747992][ T8954] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1472.767923][ T8954] usb 6-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 3 [ 1472.885180][T18530] overlayfs: option "workdir=./bus" is useless in a non-upper mount, ignore [ 1472.893863][T18530] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent [ 1472.938079][ T8954] usb 6-1: New USB device found, idVendor=046d, idProduct=08f0, bcdDevice=50.0d [ 1472.948582][T11259] usb 4-1: config 0 has no interfaces? [ 1472.953980][ T8954] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1472.961813][ T8954] usb 6-1: Product: syz [ 1472.965819][ T8954] usb 6-1: Manufacturer: syz [ 1472.970311][ T8954] usb 6-1: SerialNumber: syz [ 1472.975333][ T8954] usb 6-1: config 0 descriptor?? [ 1473.018385][ T8954] usb-storage 6-1:0.0: USB Mass Storage device detected [ 1473.108014][T11259] usb 4-1: New USB device found, idVendor=0421, idProduct=0128, bcdDevice=a6.84 [ 1473.116992][T11259] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1473.124876][T11259] usb 4-1: Product: syz [ 1473.128895][T11259] usb 4-1: Manufacturer: syz [ 1473.133354][T11259] usb 4-1: SerialNumber: syz [ 1473.138471][T11259] usb 4-1: config 0 descriptor?? [ 1473.168023][ T493] usb 2-1: new low-speed USB device number 87 using dummy_hcd [ 1473.391691][T11259] usb 4-1: USB disconnect, device number 75 [ 1473.627922][ T493] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 1473.638849][ T493] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1473.648615][ T493] usb 2-1: New USB device found, idVendor=1038, idProduct=1410, bcdDevice= 0.00 [ 1473.657662][ T493] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1473.669993][ T493] usb 2-1: config 0 descriptor?? [ 1473.996276][ T8842] Bluetooth: hci1: Frame reassembly failed (-84) [ 1474.002639][T18539] Bluetooth: received HCILL_WAKE_UP_IND in state 2 [ 1474.097900][ T6763] Bluetooth: hci0: command 0x1003 tx timeout [ 1474.097920][ T3061] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 1474.189907][T18530] incfs: Error accessing: ./bus. [ 1474.194967][T18530] incfs: mount failed -2 [ 1474.210922][ T493] steelseries_srws1 0003:1038:1410.0056: unknown main item tag 0xd [ 1474.219006][ T493] steelseries_srws1 0003:1038:1410.0056: item fetching failed at offset 6/7 [ 1474.227671][ T493] steelseries_srws1 0003:1038:1410.0056: parse failed [ 1474.234350][ T493] steelseries_srws1: probe of 0003:1038:1410.0056 failed with error -22 [ 1475.117425][T18547] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1475.128859][ T1681] usb 6-1: USB disconnect, device number 42 [ 1475.142808][T18547] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1475.163860][T18530] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1475.172413][T18530] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1475.181434][ T3090] usb 2-1: USB disconnect, device number 87 [ 1476.211979][T11166] Bluetooth: hci1: Opcode 0x1003 failed: -110 [ 1476.218567][ T3061] Bluetooth: hci1: command 0x1003 tx timeout [ 1481.367973][ T40] usb 6-1: new high-speed USB device number 43 using dummy_hcd [ 1481.738695][T11257] usb 9-1: new high-speed USB device number 53 using dummy_hcd [ 1482.157980][T11257] usb 9-1: Using ep0 maxpacket: 16 [ 1482.297906][T11257] usb 9-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1482.307961][T11257] usb 9-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 3 [ 1482.567928][T11257] usb 9-1: New USB device found, idVendor=046d, idProduct=08f0, bcdDevice=50.0d [ 1482.577013][T11257] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1482.585148][T11257] usb 9-1: Product: syz [ 1482.591928][T11257] usb 9-1: Manufacturer: syz [ 1482.596446][T11257] usb 9-1: SerialNumber: syz [ 1482.718293][T11257] usb 9-1: config 0 descriptor?? [ 1482.748091][T11257] usb 9-1: can't set config #0, error -71 [ 1482.754772][T11257] usb 9-1: USB disconnect, device number 53 [ 1488.527868][T18726] binder: 18723:18726 ioctl c0306201 0 returned -14 [ 1491.718751][T18784] netlink: 'syz.1.4904': attribute type 32 has an invalid length. [ 1492.345037][T18790] ip6t_rpfilter: unknown options [ 1492.747918][ T3090] usb 9-1: new high-speed USB device number 54 using dummy_hcd [ 1493.172721][T18795] overlayfs: failed to resolve './file1': -2 [ 1493.431756][T18801] ip6t_rpfilter: unknown options [ 1493.865994][ T3090] usb 9-1: Using ep0 maxpacket: 16 [ 1493.947943][ T3090] usb 9-1: device descriptor read/all, error -71 [ 1495.143859][T18819] overlayfs: missing 'lowerdir' [ 1495.727903][ T3090] usb 9-1: new low-speed USB device number 55 using dummy_hcd [ 1495.877888][T18499] usb 7-1: new high-speed USB device number 39 using dummy_hcd [ 1496.087927][ T3090] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 1496.098875][ T3090] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1496.108499][ T3090] usb 9-1: New USB device found, idVendor=1038, idProduct=1410, bcdDevice= 0.00 [ 1496.117409][ T3090] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1496.154431][ T3090] usb 9-1: config 0 descriptor?? [ 1496.679842][T18819] incfs: Error accessing: ./bus. [ 1496.684725][T18819] incfs: mount failed -2 [ 1496.698843][ T3090] steelseries_srws1 0003:1038:1410.0057: unknown main item tag 0xd [ 1496.706708][ T3090] steelseries_srws1 0003:1038:1410.0057: item fetching failed at offset 6/7 [ 1496.715592][ T3090] steelseries_srws1 0003:1038:1410.0057: parse failed [ 1496.722285][ T3090] steelseries_srws1: probe of 0003:1038:1410.0057 failed with error -22 [ 1496.901794][T18819] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1496.910352][T18819] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1496.918868][T18819] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1496.927322][T18819] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1496.936326][ T8954] usb 9-1: USB disconnect, device number 55 [ 1497.137948][ T3090] usb 2-1: new high-speed USB device number 88 using dummy_hcd [ 1497.978034][ T3090] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1497.994654][ T3090] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1498.017944][ T3090] usb 2-1: New USB device found, idVendor=256c, idProduct=006d, bcdDevice= 0.00 [ 1498.027001][ T3090] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1498.040297][ T3090] usb 2-1: config 0 descriptor?? [ 1498.674859][ T3090] hid (null): bogus close delimiter [ 1500.057958][ T3090] usb 2-1: string descriptor 0 read error: -71 [ 1500.077905][ T3090] uclogic 0003:256C:006D.0058: failed retrieving string descriptor #200: -71 [ 1500.145757][ T3090] uclogic 0003:256C:006D.0058: failed retrieving pen parameters: -71 [ 1500.156695][T18890] device pim6reg1 entered promiscuous mode [ 1500.162441][ T3090] uclogic 0003:256C:006D.0058: failed probing pen v2 parameters: -71 [ 1500.174090][ T3090] uclogic 0003:256C:006D.0058: failed probing parameters: -71 [ 1500.182161][ T3090] uclogic: probe of 0003:256C:006D.0058 failed with error -71 [ 1500.190785][ T3090] usb 2-1: USB disconnect, device number 88 [ 1500.367261][T18898] ip6t_rpfilter: unknown options [ 1503.947892][T11166] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 1503.951678][ T3061] Bluetooth: hci0: command 0x1003 tx timeout [ 1505.135166][T18954] overlayfs: failed to resolve './file1': -2 [ 1505.589172][ T3217] usb 9-1: new high-speed USB device number 56 using dummy_hcd [ 1507.188646][ T43] Bluetooth: hci0: Frame reassembly failed (-84) [ 1507.198543][ T43] Bluetooth: hci0: Frame reassembly failed (-84) [ 1508.279206][T18991] netlink: 'syz.1.4960': attribute type 32 has an invalid length. [ 1509.196143][T11166] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 1509.208018][T19002] overlayfs: failed to resolve './file1': -2 [ 1514.193200][T19047] ip6t_rpfilter: unknown options [ 1516.621692][T19056] overlayfs: failed to resolve './file1': -2 [ 1516.766189][T19071] device pim6reg1 entered promiscuous mode [ 1516.987905][T19024] usb 4-1: new high-speed USB device number 76 using dummy_hcd [ 1517.524455][ T28] kauditd_printk_skb: 70 callbacks suppressed [ 1517.524472][ T28] audit: type=1400 audit(1732128083.144:4932): avc: denied { read } for pid=19088 comm="syz.1.4988" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 1517.597912][T19024] usb 4-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 1517.662128][T19024] usb 4-1: New USB device found, idVendor=256c, idProduct=006d, bcdDevice= 0.00 [ 1519.217727][T19024] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1519.322881][T19024] usb 4-1: config 0 descriptor?? [ 1519.733908][T19106] overlayfs: failed to resolve './file1': -2 [ 1519.829740][T19024] usbhid 4-1:0.0: couldn't find an input interrupt endpoint [ 1519.840046][T19024] usb 4-1: USB disconnect, device number 76 [ 1520.248820][T19129] binder: 19123:19129 ioctl c0306201 0 returned -14 [ 1521.717357][T19147] ip6t_rpfilter: unknown options [ 1523.225435][T19180] binder: 19176:19180 ioctl c0306201 0 returned -14 [ 1524.686875][T19196] netlink: 'syz.8.5019': attribute type 32 has an invalid length. [ 1528.057931][ T376] usb 7-1: new high-speed USB device number 40 using dummy_hcd [ 1528.347854][T11166] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 1530.268420][ T376] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1530.340073][ T376] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1530.520012][ T376] usb 7-1: New USB device found, idVendor=05ac, idProduct=0265, bcdDevice= 0.00 [ 1530.529310][ T376] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1530.542482][ T376] usb 7-1: config 0 descriptor?? [ 1531.257936][ T376] usbhid 7-1:0.0: can't add hid device: -71 [ 1531.269019][ T376] usbhid: probe of 7-1:0.0 failed with error -71 [ 1531.281260][ T376] usb 7-1: USB disconnect, device number 40 [ 1533.257829][ T376] usb 7-1: new high-speed USB device number 41 using dummy_hcd [ 1534.281858][T19306] ip6t_rpfilter: unknown options [ 1536.913606][T19350] overlayfs: failed to resolve './file0': -2 [ 1539.091865][ T376] usb 2-1: new high-speed USB device number 89 using dummy_hcd [ 1539.818012][T19367] ip6t_rpfilter: unknown options [ 1540.996287][T19384] usb usb8: Requested nonsensical USBDEVFS_URB_SHORT_NOT_OK. [ 1543.639209][ T9688] usb 4-1: new low-speed USB device number 77 using dummy_hcd [ 1544.498034][ T43] Bluetooth: hci0: Frame reassembly failed (-84) [ 1544.504550][ T9688] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 1544.544349][ T9688] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1544.571934][ T9688] usb 4-1: New USB device found, idVendor=1038, idProduct=1410, bcdDevice= 0.00 [ 1544.629436][ T9688] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1544.659835][ T9688] usb 4-1: config 0 descriptor?? [ 1544.934186][T19439] netlink: 'syz.6.5077': attribute type 32 has an invalid length. [ 1545.171300][ T9688] steelseries_srws1 0003:1038:1410.0059: unknown main item tag 0xd [ 1545.183584][ T9688] steelseries_srws1 0003:1038:1410.0059: item fetching failed at offset 6/7 [ 1545.192683][ T9688] steelseries_srws1 0003:1038:1410.0059: parse failed [ 1545.199446][ T9688] steelseries_srws1: probe of 0003:1038:1410.0059 failed with error -22 [ 1545.449587][ T9688] usb 4-1: USB disconnect, device number 77 [ 1545.628604][T19377] udevd[19377]: inotify_add_watch(7, /dev/loop0, 10) failed: No such file or directory [ 1546.418001][T11166] Bluetooth: hci0: command 0x1003 tx timeout [ 1546.497829][ T376] usb 7-1: new high-speed USB device number 42 using dummy_hcd [ 1546.611473][ T3061] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 1546.854225][T19474] usb usb8: Requested nonsensical USBDEVFS_URB_SHORT_NOT_OK. [ 1547.698055][T19480] ip6t_rpfilter: unknown options [ 1548.647996][ T376] usb 7-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 1548.725790][ T376] usb 7-1: New USB device found, idVendor=256c, idProduct=006d, bcdDevice= 0.00 [ 1548.805795][ T376] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1548.877403][ T376] usb 7-1: config 0 descriptor?? [ 1549.008394][ T376] usbhid 7-1:0.0: couldn't find an input interrupt endpoint [ 1549.122189][T19024] usb 9-1: new high-speed USB device number 57 using dummy_hcd [ 1549.195000][T19500] overlayfs: option "workdir=./bus" is useless in a non-upper mount, ignore [ 1549.216930][T19500] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent [ 1549.341701][ T376] usb 7-1: USB disconnect, device number 42 [ 1549.367969][T19024] usb 9-1: Using ep0 maxpacket: 16 [ 1549.537933][T19024] usb 9-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1549.548471][T19024] usb 9-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 3 [ 1550.890123][T19024] usb 9-1: New USB device found, idVendor=046d, idProduct=08f0, bcdDevice=50.0d [ 1550.899133][T19024] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1550.907028][T19024] usb 9-1: Product: syz [ 1550.911431][T19024] usb 9-1: Manufacturer: syz [ 1550.915858][T19024] usb 9-1: SerialNumber: syz [ 1550.942702][T19024] usb 9-1: config 0 descriptor?? [ 1551.188664][T19024] usb-storage 9-1:0.0: USB Mass Storage device detected [ 1553.308494][T19024] usb 9-1: USB disconnect, device number 57 [ 1553.892999][ T7904] Bluetooth: hci0: Frame reassembly failed (-84) [ 1553.903361][T19564] overlayfs: option "workdir=./bus" is useless in a non-upper mount, ignore [ 1553.912235][T19564] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent [ 1554.601382][T19024] usb 9-1: new low-speed USB device number 58 using dummy_hcd [ 1555.081416][T19591] overlayfs: missing 'workdir' [ 1555.097900][T19024] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 1555.109252][T19024] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1555.120898][T19024] usb 9-1: New USB device found, idVendor=1038, idProduct=1410, bcdDevice= 0.00 [ 1555.131321][T19024] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1555.143712][T19024] usb 9-1: config 0 descriptor?? [ 1555.347919][T18499] usb 2-1: new low-speed USB device number 90 using dummy_hcd [ 1555.351513][T19597] overlayfs: failed to resolve './file1': -2 [ 1555.577863][T11259] usb 4-1: new high-speed USB device number 78 using dummy_hcd [ 1555.618877][T19024] steelseries_srws1 0003:1038:1410.005A: unknown main item tag 0xd [ 1555.626764][T19024] steelseries_srws1 0003:1038:1410.005A: item fetching failed at offset 6/7 [ 1555.636000][T19024] steelseries_srws1 0003:1038:1410.005A: parse failed [ 1555.642828][T19024] steelseries_srws1: probe of 0003:1038:1410.005A failed with error -22 [ 1555.882603][T19024] usb 9-1: USB disconnect, device number 58 [ 1555.937923][ T3060] Bluetooth: hci0: command 0x1003 tx timeout [ 1555.943945][ T3061] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 1556.007846][T18499] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 1556.027982][T18499] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1556.037572][T18499] usb 2-1: New USB device found, idVendor=1038, idProduct=1410, bcdDevice= 0.00 [ 1556.046479][T18499] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1556.058101][T18499] usb 2-1: config 0 descriptor?? [ 1556.147869][T11259] usb 4-1: Using ep0 maxpacket: 16 [ 1556.179025][T19608] overlayfs: missing 'lowerdir' [ 1556.267977][T11259] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1556.278783][T11259] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1556.288385][T11259] usb 4-1: New USB device found, idVendor=1fd2, idProduct=6007, bcdDevice= 0.00 [ 1556.297227][T11259] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1556.306836][T11259] usb 4-1: config 0 descriptor?? [ 1556.519593][T19591] incfs: Error accessing: ./bus. [ 1556.524469][T19591] incfs: mount failed -2 [ 1556.541242][T18499] steelseries_srws1 0003:1038:1410.005B: unknown main item tag 0xd [ 1556.552213][T18499] steelseries_srws1 0003:1038:1410.005B: item fetching failed at offset 6/7 [ 1556.565346][T18499] steelseries_srws1 0003:1038:1410.005B: parse failed [ 1556.572201][T18499] steelseries_srws1: probe of 0003:1038:1410.005B failed with error -22 [ 1557.887504][T19621] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1558.126887][T19621] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1558.204938][T18499] usb 2-1: USB disconnect, device number 90 [ 1558.237900][T11259] usbhid 4-1:0.0: can't add hid device: -71 [ 1558.243833][T11259] usbhid: probe of 4-1:0.0 failed with error -71 [ 1558.265581][T11259] usb 4-1: USB disconnect, device number 78 [ 1559.663533][T19646] overlayfs: failed to resolve './file1': -2 [ 1559.831275][T19657] ip6t_rpfilter: unknown options [ 1561.712736][T19662] overlayfs: missing 'lowerdir' [ 1563.372672][T19688] overlayfs: failed to resolve './file0': -2 [ 1563.759691][T19693] overlayfs: failed to resolve './file1': -2 [ 1564.278169][T19708] ip6t_rpfilter: unknown options [ 1565.968977][ T376] usb 9-1: new high-speed USB device number 59 using dummy_hcd [ 1566.428184][T19741] overlayfs: failed to resolve './file0': -2 [ 1566.717903][ T376] usb 9-1: Using ep0 maxpacket: 8 [ 1566.859081][T19749] overlayfs: failed to resolve './file1': -2 [ 1566.868120][ T376] usb 9-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 1567.273737][ T376] usb 9-1: New USB device found, idVendor=1557, idProduct=7720, bcdDevice=b7.eb [ 1568.176721][ T376] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1568.251144][ T376] usb 9-1: config 0 descriptor?? [ 1568.296264][T19764] netlink: 'syz.6.5164': attribute type 32 has an invalid length. [ 1568.982727][ T376] usb 9-1: USB disconnect, device number 59 [ 1569.716703][T19778] device pim6reg1 entered promiscuous mode [ 1571.381051][T19788] ip6t_rpfilter: unknown options [ 1572.437858][ T8954] usb 6-1: new high-speed USB device number 44 using dummy_hcd [ 1572.977927][ T8954] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1572.989147][ T8954] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1572.998785][ T8954] usb 6-1: New USB device found, idVendor=05ac, idProduct=0265, bcdDevice= 0.00 [ 1573.007658][ T8954] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1573.378145][ T8954] usb 6-1: config 0 descriptor?? [ 1574.722611][ T9688] usb 9-1: new high-speed USB device number 60 using dummy_hcd [ 1575.135911][T19852] ip6t_rpfilter: unknown options [ 1576.167880][T19864] ip6t_rpfilter: unknown options [ 1577.319130][ T8954] usbhid 6-1:0.0: can't add hid device: -71 [ 1577.325001][ T8954] usbhid: probe of 6-1:0.0 failed with error -71 [ 1577.334732][ T8954] usb 6-1: USB disconnect, device number 44 [ 1577.459446][ T8842] Bluetooth: hci0: Frame reassembly failed (-84) [ 1578.463726][T19907] ip6t_rpfilter: unknown options [ 1579.555748][ T3061] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 1579.555785][ T3060] Bluetooth: hci0: command 0x1003 tx timeout [ 1583.769541][T19970] ip6t_rpfilter: unknown options [ 1585.218043][ T8842] Bluetooth: hci0: Frame reassembly failed (-84) [ 1585.228398][T19977] Bluetooth: received HCILL_WAKE_UP_IND in state 2 [ 1585.675721][T19986] usb usb8: Requested nonsensical USBDEVFS_URB_SHORT_NOT_OK. [ 1587.297843][ T3060] Bluetooth: hci0: command 0x1003 tx timeout [ 1587.303719][ T3061] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 1587.490305][T20018] netlink: 'syz.5.5225': attribute type 32 has an invalid length. [ 1587.626958][T20020] ip6t_rpfilter: unknown options [ 1594.414709][T19024] usb 6-1: new high-speed USB device number 45 using dummy_hcd [ 1594.843814][T20090] overlayfs: failed to resolve './file0': -2 [ 1595.536851][T20088] ip6t_rpfilter: unknown options [ 1595.693093][T20109] usb usb8: Requested nonsensical USBDEVFS_URB_SHORT_NOT_OK. [ 1596.597869][T19024] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1596.608977][T19024] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1596.618946][T19024] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 1596.632695][T19024] usb 6-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 1596.641872][T19024] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1596.657590][T19024] usb 6-1: config 0 descriptor?? [ 1597.969664][T19024] usbhid 6-1:0.0: can't add hid device: -71 [ 1597.975802][T19024] usbhid: probe of 6-1:0.0 failed with error -71 [ 1598.030574][T19024] usb 6-1: USB disconnect, device number 45 [ 1600.688039][T19024] usb 4-1: new high-speed USB device number 79 using dummy_hcd [ 1601.100817][T19024] usb 4-1: Using ep0 maxpacket: 16 [ 1601.519587][T20189] overlayfs: failed to resolve './file0': -2 [ 1604.127357][T20197] device pim6reg1 entered promiscuous mode [ 1604.312862][T19024] usb 4-1: unable to read config index 0 descriptor/start: -61 [ 1604.320550][T19024] usb 4-1: can't read configurations, error -61 [ 1604.564548][T19024] usb 4-1: new high-speed USB device number 80 using dummy_hcd [ 1605.253802][T19024] usb 4-1: device descriptor read/64, error -71 [ 1605.947665][T20239] usb usb8: Requested nonsensical USBDEVFS_URB_SHORT_NOT_OK. [ 1606.227688][T20245] netlink: 'syz.5.5281': attribute type 32 has an invalid length. [ 1606.883043][T20258] ip6t_rpfilter: unknown options [ 1608.095010][T20270] ip6t_rpfilter: unknown options [ 1608.697874][ T9559] usb 2-1: new high-speed USB device number 91 using dummy_hcd [ 1608.987839][ T9559] usb 2-1: Using ep0 maxpacket: 16 [ 1608.999531][T20285] usb usb8: Requested nonsensical USBDEVFS_URB_SHORT_NOT_OK. [ 1609.053412][ T6850] Bluetooth: hci0: Frame reassembly failed (-84) [ 1609.127906][ T9559] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1609.146854][ T9559] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1609.166715][ T9559] usb 2-1: New USB device found, idVendor=1fd2, idProduct=6007, bcdDevice= 0.00 [ 1609.196386][ T9559] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1609.209668][ T9559] usb 2-1: config 0 descriptor?? [ 1610.111611][ T9559] hid-multitouch 0003:1FD2:6007.005C: hidraw0: USB HID v0.00 Device [HID 1fd2:6007] on usb-dummy_hcd.1-1/input0 [ 1610.313350][ T9559] usb 2-1: USB disconnect, device number 91 [ 1610.329741][T20310] overlayfs: failed to resolve './file1': -2 [ 1611.669666][ T3061] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 1611.685199][ T3060] Bluetooth: hci0: command 0x1003 tx timeout [ 1613.790344][T20338] device pim6reg1 entered promiscuous mode [ 1613.793620][T20341] netlink: 'syz.8.5306': attribute type 32 has an invalid length. [ 1614.907162][T20365] usb usb8: Requested nonsensical USBDEVFS_URB_SHORT_NOT_OK. [ 1616.160804][T20388] device pim6reg1 entered promiscuous mode [ 1616.207098][T17395] Bluetooth: hci0: Frame reassembly failed (-84) [ 1616.480971][T20393] ip6t_rpfilter: unknown options [ 1616.975240][T20404] ip6t_rpfilter: unknown options [ 1618.257847][T11166] Bluetooth: hci0: command 0x1003 tx timeout [ 1618.267930][ T3061] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 1620.593163][T20459] ip6t_rpfilter: unknown options [ 1620.691679][ T7904] Bluetooth: hci0: Frame reassembly failed (-84) [ 1620.709730][ T7904] Bluetooth: hci0: Frame reassembly failed (-84) [ 1620.857588][T20461] device pim6reg1 entered promiscuous mode [ 1620.897839][ T3217] usb 7-1: new low-speed USB device number 43 using dummy_hcd [ 1621.288695][ T3217] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 1621.300308][ T3217] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1621.311475][ T3217] usb 7-1: New USB device found, idVendor=1038, idProduct=1410, bcdDevice= 0.00 [ 1621.398158][ T3217] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1621.426057][ T3217] usb 7-1: config 0 descriptor?? [ 1622.143783][T20480] netlink: 'syz.8.5345': attribute type 32 has an invalid length. [ 1622.262034][ T3217] steelseries_srws1 0003:1038:1410.005D: unknown main item tag 0xd [ 1622.270954][ T3217] steelseries_srws1 0003:1038:1410.005D: item fetching failed at offset 6/7 [ 1622.280019][ T3217] steelseries_srws1 0003:1038:1410.005D: parse failed [ 1622.286816][ T3217] steelseries_srws1: probe of 0003:1038:1410.005D failed with error -22 [ 1622.372567][T20453] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1622.382159][T20453] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1622.392412][T20453] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1622.401950][T20453] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1623.923470][T11166] Bluetooth: hci0: command 0x1003 tx timeout [ 1623.944828][ T3061] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 1623.994352][ T3217] usb 7-1: USB disconnect, device number 43 [ 1625.424096][T20509] bridge0: port 1(bridge_slave_0) entered blocking state [ 1625.431748][T20509] bridge0: port 1(bridge_slave_0) entered disabled state [ 1625.471132][T20509] device bridge_slave_0 entered promiscuous mode [ 1625.480332][T20509] bridge0: port 2(bridge_slave_1) entered blocking state [ 1625.487192][T20509] bridge0: port 2(bridge_slave_1) entered disabled state [ 1625.494785][T20509] device bridge_slave_1 entered promiscuous mode [ 1626.522469][ T8] device bridge_slave_1 left promiscuous mode [ 1626.528898][ T8] bridge0: port 2(bridge_slave_1) entered disabled state [ 1626.536324][ T8] device bridge_slave_0 left promiscuous mode [ 1626.542712][ T8] bridge0: port 1(bridge_slave_0) entered disabled state [ 1626.551296][ T8] device veth1_macvtap left promiscuous mode [ 1626.557152][ T8] device veth0_vlan left promiscuous mode [ 1626.647830][ T3217] usb 2-1: new high-speed USB device number 92 using dummy_hcd [ 1627.417020][ T7904] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 1627.455561][ T3217] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1627.468138][ T7904] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 1627.477272][ T3217] usb 2-1: New USB device found, idVendor=256c, idProduct=006d, bcdDevice= 0.00 [ 1627.498145][ T3217] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1627.512079][ T7904] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 1627.526176][ T3217] usb 2-1: config 0 descriptor?? [ 1627.531432][ T7904] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 1627.548191][ T7904] bridge0: port 1(bridge_slave_0) entered blocking state [ 1627.555086][ T7904] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1627.572294][ T7904] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 1627.580958][ T3217] usbhid 2-1:0.0: couldn't find an input interrupt endpoint [ 1627.596346][ T7904] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 1627.604458][ T7904] bridge0: port 2(bridge_slave_1) entered blocking state [ 1627.611343][ T7904] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1627.628139][ T7904] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 1627.649380][ T500] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 1627.658573][ T500] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 1627.773190][ T500] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 1627.782365][ T500] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 1627.792021][ T500] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 1627.804599][ T500] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 1627.932545][ T500] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 1627.940478][ T500] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 1627.948616][ T500] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 1627.955949][ T500] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 1627.972547][T20509] device veth0_vlan entered promiscuous mode [ 1628.055801][T20546] overlayfs: failed to resolve './file0': -2 [ 1628.090622][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 1628.102239][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 1628.123145][T20509] device veth1_macvtap entered promiscuous mode [ 1628.175141][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 1628.185170][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 1628.263082][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 1628.279533][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 1628.298525][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 1628.527438][T20553] ip6t_rpfilter: unknown options [ 1629.094216][ T9688] usb 2-1: USB disconnect, device number 92 [ 1630.147876][ T3061] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 1631.208845][T20587] ip6t_rpfilter: unknown options [ 1631.482770][T20582] usb usb8: Requested nonsensical USBDEVFS_URB_SHORT_NOT_OK. [ 1631.658405][T20603] ip6t_rpfilter: unknown options [ 1631.837851][ T9688] usb 4-1: new high-speed USB device number 81 using dummy_hcd [ 1632.157820][ T9688] usb 4-1: Using ep0 maxpacket: 8 [ 1632.307856][ T9688] usb 4-1: New USB device found, idVendor=1557, idProduct=7720, bcdDevice=b7.eb [ 1632.316798][ T9688] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1632.325766][ T9688] usb 4-1: config 0 descriptor?? [ 1632.410337][T20612] overlayfs: failed to resolve './file0': -2 [ 1632.899049][ T9688] asix 4-1:0.0 (unnamed net_device) (uninitialized): Failed to read reg index 0x0000: -32 [ 1632.908890][ T9688] asix: probe of 4-1:0.0 failed with error -32 [ 1633.147395][T20630] ip6t_rpfilter: unknown options [ 1633.951659][T20636] device pim6reg1 entered promiscuous mode [ 1634.263449][T20648] overlayfs: failed to resolve './file1': -2 [ 1634.705251][T10095] usb 4-1: USB disconnect, device number 81 [ 1634.785007][T20661] overlayfs: failed to resolve './file0': -2 [ 1636.443962][T20692] device pim6reg1 entered promiscuous mode [ 1637.320660][T20698] binder: 20674:20698 ioctl c0306201 0 returned -14 [ 1638.198727][ T8] Bluetooth: hci0: Frame reassembly failed (-84) [ 1638.565862][T20724] ip6t_rpfilter: unknown options [ 1638.911185][T20730] usb usb8: Requested nonsensical USBDEVFS_URB_SHORT_NOT_OK. [ 1640.084216][T20757] usb usb8: Requested nonsensical USBDEVFS_URB_SHORT_NOT_OK. [ 1640.257882][ T3060] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 1640.555272][T20764] netlink: 28 bytes leftover after parsing attributes in process `syz.8.5420'. [ 1640.608641][T20768] netlink: 'syz.8.5423': attribute type 32 has an invalid length. [ 1640.927622][T20335] udevd[20335]: inotify_add_watch(7, /dev/loop0, 10) failed: No such file or directory [ 1643.135636][T20806] device pim6reg1 entered promiscuous mode [ 1643.223019][T20810] netlink: 'syz.2.5434': attribute type 32 has an invalid length. [ 1644.390152][T20828] usb usb8: Requested nonsensical USBDEVFS_URB_SHORT_NOT_OK. [ 1644.435566][T20831] device pim6reg1 entered promiscuous mode [ 1644.461239][T20829] ip6t_rpfilter: unknown options [ 1646.887094][T20867] device pim6reg1 entered promiscuous mode [ 1648.184214][T20878] ip6t_rpfilter: unknown options [ 1649.283744][T20891] device pim6reg1 entered promiscuous mode [ 1649.398297][T20892] ip6t_rpfilter: unknown options [ 1650.221017][T20913] ip6t_rpfilter: unknown options [ 1650.626584][T20915] ip6t_rpfilter: unknown options [ 1652.048438][T20932] ip6t_rpfilter: unknown options [ 1653.819678][T20941] device pim6reg1 entered promiscuous mode [ 1653.917516][T20950] device pim6reg1 entered promiscuous mode [ 1655.049561][ T7904] Bluetooth: hci0: Frame reassembly failed (-84) [ 1655.223744][T20978] ip6t_rpfilter: unknown options [ 1655.290925][ T7904] Bluetooth: hci0: Frame reassembly failed (-84) [ 1655.751467][T20986] ip6t_rpfilter: unknown options [ 1656.013296][T20990] device pim6reg1 entered promiscuous mode [ 1656.065799][T20995] device pim6reg1 entered promiscuous mode [ 1656.330543][T21004] netlink: 28 bytes leftover after parsing attributes in process `syz.2.5488'. [ 1656.440541][T21007] netlink: 28 bytes leftover after parsing attributes in process `syz.2.5489'. [ 1657.178735][ T3060] Bluetooth: hci0: command 0x1003 tx timeout [ 1657.179268][ T3061] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 1657.679070][T21037] device pim6reg1 entered promiscuous mode [ 1657.835731][T21039] device pim6reg1 entered promiscuous mode [ 1658.230700][T21051] ip6t_rpfilter: unknown options [ 1660.849093][T21078] usb usb8: Requested nonsensical USBDEVFS_URB_SHORT_NOT_OK. [ 1661.078819][T21095] device pim6reg1 entered promiscuous mode [ 1661.211613][ T8842] Bluetooth: hci0: Frame reassembly failed (-84) [ 1662.404812][T21116] ip6t_rpfilter: unknown options [ 1662.478139][T19024] usb 6-1: new high-speed USB device number 46 using dummy_hcd [ 1662.907980][T19024] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1662.919560][T19024] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1663.075750][T19024] usb 6-1: New USB device found, idVendor=256c, idProduct=006d, bcdDevice= 0.00 [ 1663.084741][T19024] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1663.099398][T19024] usb 6-1: config 0 descriptor?? [ 1663.224900][ T3061] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 1663.229082][T11166] Bluetooth: hci0: command 0x1003 tx timeout [ 1663.358281][T21133] ip6t_rpfilter: unknown options [ 1663.627297][T21135] ip6t_rpfilter: unknown options [ 1663.839837][T21137] device pim6reg1 entered promiscuous mode [ 1664.080749][T19024] hid (null): bogus close delimiter [ 1664.348271][T19024] usb 6-1: string descriptor 0 read error: -22 [ 1664.559821][T19024] input: HID 256c:006d Pen as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:0.0/0003:256C:006D.005E/input/input101 [ 1664.599774][T19024] input: HID 256c:006d Pad as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:0.0/0003:256C:006D.005E/input/input102 [ 1664.634042][T19024] input: HID 256c:006d Touch Strip as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:0.0/0003:256C:006D.005E/input/input103 [ 1664.682088][T19024] input: HID 256c:006d Dial as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:0.0/0003:256C:006D.005E/input/input104 [ 1664.701767][T19024] uclogic 0003:256C:006D.005E: input,hiddev96,hidraw0: USB HID v0.00 Keypad [HID 256c:006d] on usb-dummy_hcd.5-1/input0 [ 1664.770543][T19024] usb 6-1: USB disconnect, device number 46 [ 1666.080011][T21181] netlink: 'syz.5.5538': attribute type 32 has an invalid length. [ 1668.045596][T21203] netlink: 28 bytes leftover after parsing attributes in process `syz.1.5544'. [ 1668.206253][T21209] netlink: 'syz.5.5546': attribute type 32 has an invalid length. [ 1668.916958][T21221] device pim6reg1 entered promiscuous mode [ 1669.227540][T21230] ip6t_rpfilter: unknown options [ 1671.568635][T21265] device pim6reg1 entered promiscuous mode [ 1672.327045][T21279] ip6t_rpfilter: unknown options [ 1672.562404][T21282] device pim6reg1 entered promiscuous mode [ 1673.535531][T21291] udevd[21291]: inotify_add_watch(7, /dev/loop0, 10) failed: No such file or directory [ 1675.908533][T21326] device pim6reg1 entered promiscuous mode [ 1676.099624][T18499] usb 2-1: new high-speed USB device number 93 using dummy_hcd [ 1677.217780][T11259] usb 3-1: new high-speed USB device number 18 using dummy_hcd [ 1678.427868][T11166] Bluetooth: hci0: command 0x1003 tx timeout [ 1678.433970][ T3061] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 1678.457804][ T320] usb 4-1: new high-speed USB device number 82 using dummy_hcd [ 1680.099328][T21379] device pim6reg1 entered promiscuous mode [ 1680.314542][T21389] netlink: 'syz.5.5592': attribute type 32 has an invalid length. [ 1682.119326][T21409] bridge: RTM_NEWNEIGH bridge0 without NUD_PERMANENT [ 1682.282110][T21422] usb usb8: Requested nonsensical USBDEVFS_URB_SHORT_NOT_OK. [ 1684.716909][T21455] device pim6reg1 entered promiscuous mode [ 1685.316798][T21470] binder: 21457:21470 ioctl c0306201 0 returned -14 [ 1686.321486][T21485] netlink: 'syz.3.5616': attribute type 32 has an invalid length. [ 1687.992511][T21499] usb usb8: Requested nonsensical USBDEVFS_URB_SHORT_NOT_OK. [ 1688.174718][T21503] bridge0: port 1(bridge_slave_0) entered blocking state [ 1688.181747][T21503] bridge0: port 1(bridge_slave_0) entered disabled state [ 1688.189201][T21503] device bridge_slave_0 entered promiscuous mode [ 1688.196259][T21503] bridge0: port 2(bridge_slave_1) entered blocking state [ 1688.203180][T21503] bridge0: port 2(bridge_slave_1) entered disabled state [ 1688.215022][T21503] device bridge_slave_1 entered promiscuous mode [ 1688.272365][T21508] ip6t_rpfilter: unknown options [ 1688.624392][T21503] bridge0: port 2(bridge_slave_1) entered blocking state [ 1688.631319][T21503] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1688.638408][T21503] bridge0: port 1(bridge_slave_0) entered blocking state [ 1688.645247][T21503] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1689.105936][ T7904] bridge0: port 1(bridge_slave_0) entered disabled state [ 1689.132061][ T7904] bridge0: port 2(bridge_slave_1) entered disabled state [ 1689.246090][ T500] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 1689.281746][ T500] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 1689.372307][ T500] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 1689.388830][ T500] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 1689.432482][ T500] bridge0: port 1(bridge_slave_0) entered blocking state [ 1689.439385][ T500] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1689.459741][ T500] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 1689.468101][ T500] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 1689.476156][ T500] bridge0: port 2(bridge_slave_1) entered blocking state [ 1689.483064][ T500] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1689.511424][T21532] usb usb8: Requested nonsensical USBDEVFS_URB_SHORT_NOT_OK. [ 1689.521152][ T500] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 1689.555809][ T500] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 1689.635971][ T500] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 1689.645785][ T500] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 1689.668358][ T500] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 1689.684217][ T500] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 1689.778026][ T376] usb 2-1: new high-speed USB device number 94 using dummy_hcd [ 1690.014565][T21503] device veth0_vlan entered promiscuous mode [ 1690.024078][ T500] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 1690.035534][ T500] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 1690.055954][ T500] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 1690.063947][ T500] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 1690.071875][ T500] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 1690.083235][ T500] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 1690.091869][T21503] device veth1_macvtap entered promiscuous mode [ 1690.105556][ T500] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 1690.113357][ T500] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 1690.122204][ T500] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 1690.143696][ T500] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 1690.160122][ T500] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 1690.178009][ T376] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1690.188904][ T376] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1690.198509][ T376] usb 2-1: New USB device found, idVendor=256c, idProduct=006d, bcdDevice= 0.00 [ 1690.207416][ T376] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1690.220415][ T376] usb 2-1: config 0 descriptor?? [ 1690.259062][T17395] device bridge_slave_1 left promiscuous mode [ 1690.271544][T17395] bridge0: port 2(bridge_slave_1) entered disabled state [ 1690.287159][T17395] device bridge_slave_0 left promiscuous mode [ 1690.373454][T17395] bridge0: port 1(bridge_slave_0) entered disabled state [ 1690.381593][T17395] device veth1_macvtap left promiscuous mode [ 1690.387481][T17395] device veth0_vlan left promiscuous mode [ 1690.772117][ T376] hid (null): bogus close delimiter [ 1691.417841][ T376] usb 2-1: string descriptor 0 read error: -22 [ 1691.649747][ T376] input: HID 256c:006d Pen as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/0003:256C:006D.005F/input/input105 [ 1691.762687][ T493] usb 9-1: new high-speed USB device number 61 using dummy_hcd [ 1691.776945][ T376] input: HID 256c:006d Pad as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/0003:256C:006D.005F/input/input106 [ 1691.800776][ T376] input: HID 256c:006d Touch Strip as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/0003:256C:006D.005F/input/input107 [ 1691.855773][ T376] input: HID 256c:006d Dial as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/0003:256C:006D.005F/input/input108 [ 1692.072079][ T376] uclogic 0003:256C:006D.005F: input,hiddev96,hidraw0: USB HID v0.00 Keypad [HID 256c:006d] on usb-dummy_hcd.1-1/input0 [ 1692.107803][ T493] usb 9-1: Using ep0 maxpacket: 16 [ 1692.222763][ T376] usb 2-1: USB disconnect, device number 94 [ 1692.260701][ T493] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1692.286889][ T493] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1692.792363][ T493] usb 9-1: New USB device found, idVendor=1fd2, idProduct=6007, bcdDevice= 0.00 [ 1692.817769][ T493] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1692.841636][ T493] usb 9-1: config 0 descriptor?? [ 1693.502545][T21596] loop1: detected capacity change from 0 to 256 [ 1693.547077][ T493] hid-multitouch 0003:1FD2:6007.0060: hidraw0: USB HID v0.00 Device [HID 1fd2:6007] on usb-dummy_hcd.8-1/input0 [ 1693.783986][T21599] usb usb8: Requested nonsensical USBDEVFS_URB_SHORT_NOT_OK. [ 1693.793615][ T493] usb 9-1: USB disconnect, device number 61 [ 1695.351103][T21614] usb usb8: Requested nonsensical USBDEVFS_URB_SHORT_NOT_OK. [ 1695.389215][ T9559] usb 3-1: new high-speed USB device number 19 using dummy_hcd [ 1695.604291][T21624] ip6t_rpfilter: unknown options [ 1695.648778][T21625] ip6t_rpfilter: unknown options [ 1695.796244][ T9559] usb 3-1: Using ep0 maxpacket: 16 [ 1696.698822][T21630] overlayfs: failed to resolve './file0': -2 [ 1697.517798][ T9559] usb 3-1: unable to read config index 0 descriptor/all [ 1697.545900][ T9559] usb 3-1: can't read configurations, error -71 [ 1698.477810][T11259] usb 2-1: new high-speed USB device number 95 using dummy_hcd [ 1699.478467][T21670] device pim6reg1 entered promiscuous mode [ 1699.919307][T21673] ip6t_rpfilter: unknown options [ 1699.958303][T21679] device pim6reg1 entered promiscuous mode [ 1699.965516][T21681] netlink: 'syz.2.5669': attribute type 32 has an invalid length. [ 1699.977928][T11259] usb 2-1: Using ep0 maxpacket: 16 [ 1701.367813][T11259] usb 2-1: device descriptor read/all, error -71 [ 1701.615436][T21712] loop1: detected capacity change from 0 to 256 [ 1702.007751][T18499] usb 6-1: new high-speed USB device number 47 using dummy_hcd [ 1702.247771][T18499] usb 6-1: Using ep0 maxpacket: 16 [ 1702.289622][T21717] device pim6reg1 entered promiscuous mode [ 1702.367811][T18499] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1702.383363][T18499] usb 6-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 3 [ 1703.207917][T21725] overlayfs: failed to resolve './file0': -2 [ 1704.683837][T21734] device pim6reg1 entered promiscuous mode [ 1704.822414][T21738] ip6t_rpfilter: unknown options [ 1704.995208][T18499] usb 6-1: New USB device found, idVendor=046d, idProduct=08f0, bcdDevice=50.0d [ 1705.004583][T18499] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1705.013346][T18499] usb 6-1: config 0 descriptor?? [ 1705.037872][T18499] usb 6-1: can't set config #0, error -71 [ 1705.047091][T18499] usb 6-1: USB disconnect, device number 47 [ 1707.447830][ T9559] usb 4-1: new high-speed USB device number 83 using dummy_hcd [ 1707.647837][T18499] usb 9-1: new high-speed USB device number 62 using dummy_hcd [ 1707.777905][ T9559] usb 4-1: Using ep0 maxpacket: 16 [ 1707.787451][T21790] device pim6reg1 entered promiscuous mode [ 1707.907803][ T9559] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1707.990035][ T9559] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1708.003217][ T9559] usb 4-1: New USB device found, idVendor=1fd2, idProduct=6007, bcdDevice= 0.00 [ 1708.012135][ T9559] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1708.021195][ T9559] usb 4-1: config 0 descriptor?? [ 1708.042437][T21798] usb usb8: Requested nonsensical USBDEVFS_URB_SHORT_NOT_OK. [ 1708.534614][ T9559] hid-multitouch 0003:1FD2:6007.0061: unknown main item tag 0x0 [ 1708.663522][ T9559] hid-multitouch 0003:1FD2:6007.0061: item fetching failed at offset 4/5 [ 1708.685113][ T9559] hid-multitouch: probe of 0003:1FD2:6007.0061 failed with error -22 [ 1708.725709][ T320] usb 4-1: USB disconnect, device number 83 [ 1710.150614][T21827] device pim6reg1 entered promiscuous mode [ 1710.229132][T21832] bridge: RTM_NEWNEIGH bridge0 without NUD_PERMANENT [ 1710.419084][ T6850] Bluetooth: hci0: Frame reassembly failed (-84) [ 1710.425743][ T6850] Bluetooth: hci0: Frame reassembly failed (-84) [ 1711.023863][T21845] device pim6reg1 entered promiscuous mode [ 1711.947387][T21867] 9pnet_fd: Insufficient options for proto=fd [ 1711.979106][T18499] usb 3-1: new high-speed USB device number 21 using dummy_hcd [ 1712.865223][ T3060] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 1713.137830][T18499] usb 3-1: Using ep0 maxpacket: 16 [ 1714.244768][T21890] device pim6reg1 entered promiscuous mode [ 1714.462180][T21894] ip6t_rpfilter: unknown options [ 1715.320939][T18499] usb 3-1: device descriptor read/all, error -71 [ 1715.426315][T21906] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=21906 comm=syz.3.5733 [ 1717.916905][T21931] device pim6reg1 entered promiscuous mode [ 1718.168003][T21946] usb usb8: Requested nonsensical USBDEVFS_URB_SHORT_NOT_OK. [ 1718.618160][T21953] ip6t_rpfilter: unknown options [ 1719.448402][T21967] ip6t_rpfilter: unknown options [ 1720.166835][T21968] overlayfs: failed to resolve './file0': -2 [ 1721.807847][T14298] usb 2-1: new high-speed USB device number 97 using dummy_hcd [ 1722.685316][T14298] usb 2-1: Using ep0 maxpacket: 16 [ 1722.908875][T14298] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1722.919851][T14298] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1723.408762][T14298] usb 2-1: New USB device found, idVendor=1fd2, idProduct=6007, bcdDevice= 0.00 [ 1723.835207][T22018] ip6t_rpfilter: unknown options [ 1724.228899][T14298] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1724.248017][T14298] usb 2-1: config 0 descriptor?? [ 1724.664688][T22034] ip6t_rpfilter: unknown options [ 1724.927776][T14298] usbhid 2-1:0.0: can't add hid device: -71 [ 1724.934089][T14298] usbhid: probe of 2-1:0.0 failed with error -71 [ 1725.415703][ T9559] usb 6-1: new high-speed USB device number 48 using dummy_hcd [ 1725.470440][T14298] usb 2-1: USB disconnect, device number 97 [ 1725.652094][T22048] usb usb8: Requested nonsensical USBDEVFS_URB_SHORT_NOT_OK. [ 1727.031549][T22060] device pim6reg1 entered promiscuous mode [ 1729.187762][ T9559] usb 6-1: device descriptor read/64, error -71 [ 1729.221232][T22092] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=22092 comm=syz.2.5780 [ 1729.286551][T22094] ip6t_rpfilter: unknown options [ 1730.567798][ T9559] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1730.578621][ T9559] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1730.590844][ T9559] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 1730.608422][ T9559] usb 6-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 1730.617497][ T9559] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1730.733906][ T9559] usb 6-1: config 0 descriptor?? [ 1732.689093][ T3060] Bluetooth: hci0: sending frame failed (-49) [ 1732.695864][ T3061] Bluetooth: hci0: Opcode 0x1003 failed: -49 [ 1733.022750][T21988] udevd[21988]: inotify_add_watch(7, /dev/loop0, 10) failed: No such file or directory [ 1733.200535][ T9559] usbhid 6-1:0.0: can't add hid device: -71 [ 1733.216805][ T9559] usbhid: probe of 6-1:0.0 failed with error -71 [ 1735.594545][ T9559] usb 6-1: USB disconnect, device number 48 [ 1736.914430][T22170] ip6t_rpfilter: unknown options [ 1738.486558][T22177] device pim6reg1 entered promiscuous mode [ 1739.559446][T10095] usb 4-1: new high-speed USB device number 84 using dummy_hcd [ 1746.261715][T22271] ip6t_rpfilter: unknown options [ 1748.157793][T10095] usb 6-1: new high-speed USB device number 49 using dummy_hcd [ 1748.229631][T21988] udevd[21988]: inotify_add_watch(7, /dev/loop0, 10) failed: No such file or directory [ 1748.427742][T10095] usb 6-1: Using ep0 maxpacket: 16 [ 1749.815777][T22315] netlink: 'syz.8.5835': attribute type 32 has an invalid length. [ 1750.447772][T10095] usb 6-1: unable to read config index 0 descriptor/all [ 1750.457772][T10095] usb 6-1: can't read configurations, error -71 [ 1750.605347][T22330] ip6t_rpfilter: unknown options [ 1751.346097][ T9559] usb 3-1: new high-speed USB device number 23 using dummy_hcd [ 1751.602513][T22341] binder: 22333:22341 ioctl c0306201 0 returned -14 [ 1754.052222][ T9559] usb 3-1: Using ep0 maxpacket: 16 [ 1754.256244][ T9559] usb 3-1: device descriptor read/all, error -71 [ 1754.456772][ T6850] Bluetooth: hci0: Frame reassembly failed (-84) [ 1755.245981][T22378] ip6t_rpfilter: unknown options [ 1755.585148][ T9559] usb 3-1: new high-speed USB device number 24 using dummy_hcd [ 1755.617379][T22389] netlink: 'syz.5.5856': attribute type 32 has an invalid length. [ 1757.223688][ T3061] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 1758.012158][T22413] usb usb8: Requested nonsensical USBDEVFS_URB_SHORT_NOT_OK. [ 1758.020082][ T9559] usb 3-1: device descriptor read/all, error -71 [ 1758.034085][ T9559] usb usb3-port1: attempt power cycle [ 1758.366629][T22418] Bluetooth: received HCILL_WAKE_UP_IND in state 2 [ 1758.394444][ T500] Bluetooth: hci0: Frame reassembly failed (-84) [ 1758.632438][T18499] usb 9-1: new high-speed USB device number 63 using dummy_hcd [ 1759.247822][T18499] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1759.263858][T18499] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1759.281823][T18499] usb 9-1: New USB device found, idVendor=256c, idProduct=006d, bcdDevice= 0.00 [ 1759.291023][T18499] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1759.311138][T18499] usb 9-1: config 0 descriptor?? [ 1759.652670][T22437] usb usb8: Requested nonsensical USBDEVFS_URB_SHORT_NOT_OK. [ 1759.685053][T22446] netlink: 28 bytes leftover after parsing attributes in process `syz.1.5871'. [ 1759.974804][T22453] netlink: 'syz.2.5873': attribute type 32 has an invalid length. [ 1760.085245][T18499] hid (null): bogus close delimiter [ 1760.187808][T18499] usb 9-1: string descriptor 0 read error: -22 [ 1760.386749][T22456] overlayfs: failed to resolve './file0': -2 [ 1760.420826][ T3061] Bluetooth: hci0: command 0x1003 tx timeout [ 1760.421878][ T3060] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 1760.595740][T18499] input: HID 256c:006d Pen as /devices/platform/dummy_hcd.8/usb9/9-1/9-1:0.0/0003:256C:006D.0062/input/input114 [ 1760.610616][T18499] input: HID 256c:006d Pad as /devices/platform/dummy_hcd.8/usb9/9-1/9-1:0.0/0003:256C:006D.0062/input/input115 [ 1760.670173][T18499] input: HID 256c:006d Touch Strip as /devices/platform/dummy_hcd.8/usb9/9-1/9-1:0.0/0003:256C:006D.0062/input/input116 [ 1760.694052][T18499] input: HID 256c:006d Dial as /devices/platform/dummy_hcd.8/usb9/9-1/9-1:0.0/0003:256C:006D.0062/input/input117 [ 1760.712882][T18499] uclogic 0003:256C:006D.0062: input,hiddev96,hidraw0: USB HID v0.00 Keypad [HID 256c:006d] on usb-dummy_hcd.8-1/input0 [ 1760.734225][T18499] usb 9-1: USB disconnect, device number 63 [ 1761.303968][ T9559] usb 4-1: new high-speed USB device number 85 using dummy_hcd [ 1761.330424][ T8842] Bluetooth: hci0: Frame reassembly failed (-84) [ 1761.337057][ T8842] Bluetooth: hci0: Frame reassembly failed (-84) [ 1763.343893][ T9559] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1763.354614][ T9559] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1763.364201][ T9559] usb 4-1: New USB device found, idVendor=256c, idProduct=006d, bcdDevice= 0.00 [ 1763.377782][T11166] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 1763.377812][ T3060] Bluetooth: hci0: command 0x1003 tx timeout [ 1763.390690][ T9559] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1763.529144][ T9559] usb 4-1: config 0 descriptor?? [ 1763.677786][ T9559] usb 4-1: can't set config #0, error -71 [ 1763.708062][ T9559] usb 4-1: USB disconnect, device number 85 [ 1764.614469][T22515] netlink: 'syz.3.5889': attribute type 32 has an invalid length. [ 1765.858181][ T9559] usb 9-1: new high-speed USB device number 64 using dummy_hcd [ 1766.188160][ T9559] usb 9-1: Using ep0 maxpacket: 16 [ 1766.348120][ T9559] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1766.399111][ T9559] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1766.464411][ T9559] usb 9-1: New USB device found, idVendor=1fd2, idProduct=6007, bcdDevice= 0.00 [ 1766.477516][ T9559] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1766.486248][ T9559] usb 9-1: config 0 descriptor?? [ 1766.821083][T10095] usb 3-1: new high-speed USB device number 26 using dummy_hcd [ 1767.167295][ T9559] hid-multitouch 0003:1FD2:6007.0063: hidraw0: USB HID v0.00 Device [HID 1fd2:6007] on usb-dummy_hcd.8-1/input0 [ 1767.339840][T10095] usb 3-1: Using ep0 maxpacket: 16 [ 1767.378683][ T9559] usb 9-1: USB disconnect, device number 64 [ 1767.402901][T22542] device pim6reg1 entered promiscuous mode [ 1767.457889][T10095] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1767.468018][T10095] usb 3-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 3 [ 1768.607783][T10095] usb 3-1: string descriptor 0 read error: -71 [ 1768.620466][T10095] usb 3-1: New USB device found, idVendor=046d, idProduct=08f0, bcdDevice=50.0d [ 1768.634127][T10095] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1769.135665][T10095] usb 3-1: config 0 descriptor?? [ 1769.157802][T10095] usb 3-1: can't set config #0, error -71 [ 1769.166317][T10095] usb 3-1: USB disconnect, device number 26 [ 1769.574212][ T9559] usb 4-1: new low-speed USB device number 86 using dummy_hcd [ 1769.727822][ T8954] usb 6-1: new high-speed USB device number 51 using dummy_hcd [ 1769.842640][T22581] ip6t_rpfilter: unknown options [ 1770.087872][ T8954] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1770.098787][ T8954] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1770.111404][ T8954] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 1770.126280][ T8954] usb 6-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 1770.135236][ T8954] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1770.144000][ T8954] usb 6-1: config 0 descriptor?? [ 1770.147809][ T9559] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 1770.159612][ T9559] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1770.169157][ T9559] usb 4-1: New USB device found, idVendor=1038, idProduct=1410, bcdDevice= 0.00 [ 1770.178188][ T9559] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1770.208563][ T9559] usb 4-1: config 0 descriptor?? [ 1770.640569][T22590] ip6t_rpfilter: unknown options [ 1770.669789][T22564] incfs: Error accessing: ./bus. [ 1770.674567][T22564] incfs: mount failed -2 [ 1770.688742][ T9559] steelseries_srws1 0003:1038:1410.0064: unknown main item tag 0xd [ 1770.696600][ T9559] steelseries_srws1 0003:1038:1410.0064: item fetching failed at offset 6/7 [ 1770.705321][ T9559] steelseries_srws1 0003:1038:1410.0064: parse failed [ 1770.711995][ T9559] steelseries_srws1: probe of 0003:1038:1410.0064 failed with error -22 [ 1771.120990][T22595] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1771.130906][T22595] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1771.149792][T22564] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1771.158676][T22564] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1771.167985][ T8954] usbhid 6-1:0.0: can't add hid device: -71 [ 1771.168510][ T376] usb 4-1: USB disconnect, device number 86 [ 1771.174462][ T8954] usbhid: probe of 6-1:0.0 failed with error -71 [ 1771.191971][ T8954] usb 6-1: USB disconnect, device number 51 [ 1771.485143][ T9559] usb 3-1: new high-speed USB device number 27 using dummy_hcd [ 1771.777770][ T9559] usb 3-1: Using ep0 maxpacket: 16 [ 1771.941584][T22610] device pim6reg1 entered promiscuous mode [ 1771.964234][ T9559] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1771.975171][ T9559] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1771.985013][ T9559] usb 3-1: New USB device found, idVendor=1fd2, idProduct=6007, bcdDevice= 0.00 [ 1771.993895][ T9559] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1772.002696][ T9559] usb 3-1: config 0 descriptor?? [ 1772.885014][T22625] Bluetooth: received HCILL_WAKE_UP_IND in state 2 [ 1773.830080][ T9559] hid-multitouch 0003:1FD2:6007.0065: hidraw0: USB HID v0.00 Device [HID 1fd2:6007] on usb-dummy_hcd.2-1/input0 [ 1776.426006][T22642] device pim6reg1 entered promiscuous mode [ 1776.435868][ T9559] usb 3-1: USB disconnect, device number 27 [ 1776.994958][T22652] netlink: 'syz.2.5926': attribute type 32 has an invalid length. [ 1777.277012][T22656] ip6t_rpfilter: unknown options [ 1781.393270][T18499] usb 6-1: new high-speed USB device number 52 using dummy_hcd [ 1781.467755][T22670] usb 9-1: new high-speed USB device number 65 using dummy_hcd [ 1781.637730][T18499] usb 6-1: Using ep0 maxpacket: 8 [ 1781.717740][T22670] usb 9-1: Using ep0 maxpacket: 16 [ 1781.744750][T22696] device pim6reg1 entered promiscuous mode [ 1781.787802][T18499] usb 6-1: New USB device found, idVendor=1557, idProduct=7720, bcdDevice=b7.eb [ 1781.797064][T18499] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1781.820521][T18499] usb 6-1: config 0 descriptor?? [ 1781.847874][T22670] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1781.859079][T22670] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1782.179204][T22670] usb 9-1: New USB device found, idVendor=1fd2, idProduct=6007, bcdDevice= 0.00 [ 1782.188133][T22670] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1782.225508][T22670] usb 9-1: config 0 descriptor?? [ 1782.493336][T18499] asix 6-1:0.0 (unnamed net_device) (uninitialized): Failed to read reg index 0x0000: -32 [ 1782.503361][T18499] asix 6-1:0.0 (unnamed net_device) (uninitialized): Error reading PHY_ID register: ffffffe0 [ 1782.513478][T18499] asix: probe of 6-1:0.0 failed with error -32 [ 1782.702375][T22670] hid-multitouch 0003:1FD2:6007.0066: hidraw0: USB HID v0.00 Device [HID 1fd2:6007] on usb-dummy_hcd.8-1/input0 [ 1782.722704][T22712] ip6t_rpfilter: unknown options [ 1783.287154][T18499] usb 9-1: USB disconnect, device number 65 [ 1783.310938][ T9559] usb 6-1: USB disconnect, device number 52 [ 1783.321445][T22722] ip6t_rpfilter: unknown options [ 1785.713149][T22751] overlayfs: failed to resolve './file1': -2 [ 1785.831938][T22759] ip6t_rpfilter: unknown options [ 1786.226607][T22766] netlink: 'syz.2.5953': attribute type 32 has an invalid length. [ 1787.966580][T22769] netlink: 'syz.8.5954': attribute type 32 has an invalid length. [ 1788.056740][T22787] ip6t_rpfilter: unknown options [ 1789.883261][T22670] usb 2-1: new high-speed USB device number 98 using dummy_hcd [ 1789.945871][T22804] device pim6reg1 entered promiscuous mode [ 1790.367708][T22670] usb 2-1: Using ep0 maxpacket: 16 [ 1790.914547][T22822] ip6t_rpfilter: unknown options [ 1791.463214][T22825] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=8 sclass=netlink_route_socket pid=22825 comm=syz.5.5969 [ 1791.588778][T22670] usb 2-1: device descriptor read/all, error -71 [ 1791.688692][T22841] ip6t_rpfilter: unknown options [ 1797.330417][ T28] audit: type=1400 audit(1732128360.784:4933): avc: denied { view } for pid=22884 comm="syz.3.5986" scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=key permissive=1 [ 1798.309145][T22912] ip6t_rpfilter: unknown options [ 1798.722509][T22924] netlink: 'syz.8.5997': attribute type 32 has an invalid length. [ 1798.766954][T22931] fuse: Unknown parameter 'use00000000000000000000' [ 1799.745890][T22945] ip6t_rpfilter: unknown options [ 1800.342615][T22960] ip6t_rpfilter: unknown options [ 1800.897754][ T3060] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 1803.125025][T22984] ip6t_rpfilter: unknown options [ 1803.167977][T22993] device pim6reg1 entered promiscuous mode [ 1803.229735][T22995] device pim6reg1 entered promiscuous mode [ 1803.757997][T23010] overlayfs: failed to resolve './file1': -2 [ 1807.211435][ T3060] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 1807.433315][T23049] fuse: Unknown parameter 'user_i00000000000000000000' [ 1807.492683][T23050] ip6t_rpfilter: unknown options [ 1807.817728][ T40] usb 6-1: new high-speed USB device number 53 using dummy_hcd [ 1808.117696][ T40] usb 6-1: Using ep0 maxpacket: 16 [ 1808.247793][ T40] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1808.266137][ T40] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1808.291435][ T40] usb 6-1: New USB device found, idVendor=1fd2, idProduct=6007, bcdDevice= 0.00 [ 1808.314834][ T40] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1808.341511][ T40] usb 6-1: config 0 descriptor?? [ 1811.117510][ T40] hid-multitouch 0003:1FD2:6007.0067: hidraw0: USB HID v0.00 Device [HID 1fd2:6007] on usb-dummy_hcd.5-1/input0 [ 1811.130214][ T40] usb 6-1: USB disconnect, device number 53 [ 1812.154125][ T3090] usb 9-1: new high-speed USB device number 66 using dummy_hcd [ 1813.586581][T23118] device pim6reg1 entered promiscuous mode [ 1813.599511][T23119] netlink: 'syz.3.6051': attribute type 32 has an invalid length. [ 1813.628876][T23121] netlink: 'syz.2.6053': attribute type 32 has an invalid length. [ 1814.593234][T23136] device pim6reg1 entered promiscuous mode [ 1815.313802][T23148] device pim6reg1 entered promiscuous mode [ 1817.021144][T23173] ip6t_rpfilter: unknown options [ 1817.813394][T23179] device pim6reg1 entered promiscuous mode [ 1817.873455][T23183] netlink: 'syz.2.6069': attribute type 32 has an invalid length. [ 1823.501916][T23241] ip6t_rpfilter: unknown options [ 1823.857782][ T8954] usb 6-1: new high-speed USB device number 54 using dummy_hcd [ 1823.867787][T14298] usb 4-1: new high-speed USB device number 87 using dummy_hcd [ 1824.399881][T14298] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1824.411543][T14298] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1824.462799][T14298] usb 4-1: New USB device found, idVendor=05ac, idProduct=0265, bcdDevice= 0.00 [ 1824.477814][ T9688] usb 2-1: new high-speed USB device number 100 using dummy_hcd [ 1824.485658][T14298] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1824.495754][T14298] usb 4-1: config 0 descriptor?? [ 1824.567186][T23250] udevd[23250]: inotify_add_watch(7, /dev/loop0, 10) failed: No such file or directory [ 1824.777704][ T9688] usb 2-1: Using ep0 maxpacket: 16 [ 1824.917855][ T9688] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1824.933504][ T9688] usb 2-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 3 [ 1824.941986][T23271] netlink: 'syz.8.6089': attribute type 32 has an invalid length. [ 1825.138024][ T9688] usb 2-1: New USB device found, idVendor=046d, idProduct=08f0, bcdDevice=50.0d [ 1825.159311][ T9688] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1825.197544][ T9688] usb 2-1: Product: syz [ 1825.217361][ T9688] usb 2-1: Manufacturer: syz [ 1825.241521][ T9688] usb 2-1: SerialNumber: syz [ 1825.270084][ T9688] usb 2-1: config 0 descriptor?? [ 1825.317592][ T9688] usb-storage 2-1:0.0: USB Mass Storage device detected [ 1826.882146][T23250] udevd[23250]: inotify_add_watch(7, /dev/loop0, 10) failed: No such file or directory [ 1827.043848][ T3090] usb 2-1: USB disconnect, device number 100 [ 1827.374880][T23303] ip6t_rpfilter: unknown options [ 1828.397779][T14298] usbhid 4-1:0.0: can't add hid device: -71 [ 1828.403819][T14298] usbhid: probe of 4-1:0.0 failed with error -71 [ 1828.486462][T14298] usb 4-1: USB disconnect, device number 87 [ 1829.348923][T23333] usb usb8: Requested nonsensical USBDEVFS_URB_SHORT_NOT_OK. [ 1831.707782][ T500] Bluetooth: hci0: Frame reassembly failed (-84) [ 1832.297719][T23162] usb 6-1: new high-speed USB device number 55 using dummy_hcd [ 1832.661065][T23387] netlink: 'syz.3.6119': attribute type 32 has an invalid length. [ 1832.757786][T23162] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1832.768740][T23162] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1832.778555][T23162] usb 6-1: New USB device found, idVendor=05ac, idProduct=0265, bcdDevice= 0.00 [ 1832.787508][T23162] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1832.808217][T23162] usb 6-1: config 0 descriptor?? [ 1833.137378][T17395] Bluetooth: hci1: Frame reassembly failed (-84) [ 1833.143738][T23396] Bluetooth: received HCILL_WAKE_UP_IND in state 2 [ 1833.150152][ T3090] usb 2-1: new high-speed USB device number 101 using dummy_hcd [ 1833.507827][ T3090] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1833.527753][ T3090] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1833.537399][ T3090] usb 2-1: New USB device found, idVendor=256c, idProduct=006d, bcdDevice= 0.00 [ 1833.552888][ T3090] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1833.566216][ T3090] usb 2-1: config 0 descriptor?? [ 1833.697728][T23397] Bluetooth: hci0: command 0x1003 tx timeout [ 1833.697741][ T3060] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 1833.715329][T23401] bridge0: port 1(bridge_slave_0) entered blocking state [ 1833.722294][T23401] bridge0: port 1(bridge_slave_0) entered disabled state [ 1833.730130][T23401] device bridge_slave_0 entered promiscuous mode [ 1833.737064][T23401] bridge0: port 2(bridge_slave_1) entered blocking state [ 1833.744214][T23401] bridge0: port 2(bridge_slave_1) entered disabled state [ 1833.751722][T23401] device bridge_slave_1 entered promiscuous mode [ 1833.809729][T23401] bridge0: port 2(bridge_slave_1) entered blocking state [ 1833.816581][T23401] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1833.823705][T23401] bridge0: port 1(bridge_slave_0) entered blocking state [ 1833.830479][T23401] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1834.446428][ T3090] hid (null): bogus close delimiter [ 1834.459898][ T6850] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 1834.467363][ T6850] bridge0: port 1(bridge_slave_0) entered disabled state [ 1834.474646][ T6850] bridge0: port 2(bridge_slave_1) entered disabled state [ 1834.504319][ T6850] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 1834.512403][ T6850] bridge0: port 1(bridge_slave_0) entered blocking state [ 1834.519323][ T6850] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1834.529660][ T6850] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 1834.537901][ T6850] bridge0: port 2(bridge_slave_1) entered blocking state [ 1834.544766][ T6850] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1834.558099][ T6850] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 1834.567187][ T6850] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 1834.582733][ T6850] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 1834.594991][ T6850] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 1834.603117][ T6850] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 1834.610543][ T6850] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 1834.620236][T23401] device veth0_vlan entered promiscuous mode [ 1834.630636][ T6850] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 1834.639677][T23401] device veth1_macvtap entered promiscuous mode [ 1834.647762][ T3090] usb 2-1: string descriptor 0 read error: -22 [ 1834.654369][ T6850] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 1834.665498][ T6850] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 1834.673544][ T6850] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 1834.767739][T23105] usb 3-1: new high-speed USB device number 28 using dummy_hcd [ 1834.798377][T17395] device bridge_slave_1 left promiscuous mode [ 1834.804365][T17395] bridge0: port 2(bridge_slave_1) entered disabled state [ 1834.811751][T17395] device bridge_slave_0 left promiscuous mode [ 1834.817709][T17395] bridge0: port 1(bridge_slave_0) entered disabled state [ 1834.825315][T17395] device veth1_macvtap left promiscuous mode [ 1834.831247][T17395] device veth0_vlan left promiscuous mode [ 1834.869740][ T3090] input: HID 256c:006d Pen as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/0003:256C:006D.0068/input/input119 [ 1834.922223][ T3090] input: HID 256c:006d Pad as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/0003:256C:006D.0068/input/input120 [ 1834.958724][T23162] usbhid 6-1:0.0: can't add hid device: -71 [ 1834.964732][T23162] usbhid: probe of 6-1:0.0 failed with error -71 [ 1834.971875][ T8954] usb 4-1: new high-speed USB device number 88 using dummy_hcd [ 1834.979744][ T3090] input: HID 256c:006d Touch Strip as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/0003:256C:006D.0068/input/input121 [ 1834.980430][T23162] usb 6-1: USB disconnect, device number 55 [ 1834.994694][ T3090] input: HID 256c:006d Dial as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/0003:256C:006D.0068/input/input122 [ 1835.010225][T23105] usb 3-1: Using ep0 maxpacket: 16 [ 1835.137734][ T3061] Bluetooth: hci1: command 0x1003 tx timeout [ 1835.167822][T11166] Bluetooth: hci1: Opcode 0x1003 failed: -110 [ 1835.322712][ T3090] uclogic 0003:256C:006D.0068: input,hiddev96,hidraw0: USB HID v0.00 Keypad [HID 256c:006d] on usb-dummy_hcd.1-1/input0 [ 1835.338229][ T3090] usb 2-1: USB disconnect, device number 101 [ 1835.397764][T23105] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1835.408000][T23105] usb 3-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 3 [ 1835.527708][ T8954] usb 4-1: Using ep0 maxpacket: 16 [ 1835.577764][T23105] usb 3-1: New USB device found, idVendor=046d, idProduct=08f0, bcdDevice=50.0d [ 1835.586793][T23105] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1835.594752][T23105] usb 3-1: Product: syz [ 1835.599056][T23105] usb 3-1: Manufacturer: syz [ 1835.603764][T23105] usb 3-1: SerialNumber: syz [ 1835.609015][T23105] usb 3-1: config 0 descriptor?? [ 1835.647776][ T8954] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1835.659299][T23105] usb-storage 3-1:0.0: USB Mass Storage device detected [ 1835.666136][ T8954] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1835.676145][ T8954] usb 4-1: New USB device found, idVendor=1fd2, idProduct=6007, bcdDevice= 0.00 [ 1835.685299][ T8954] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1835.701402][ T8954] usb 4-1: config 0 descriptor?? [ 1835.844423][T23430] binder: 23421:23430 ioctl c0306201 0 returned -14 [ 1836.181249][ T8954] hid-multitouch 0003:1FD2:6007.0069: hidraw0: USB HID v0.00 Device [HID 1fd2:6007] on usb-dummy_hcd.3-1/input0 [ 1836.340231][T23438] netlink: 'syz.8.6131': attribute type 32 has an invalid length. [ 1836.381736][ T8954] usb 4-1: USB disconnect, device number 88 [ 1836.969606][T23162] usb 3-1: USB disconnect, device number 28 [ 1837.911455][T17395] Bluetooth: hci0: Frame reassembly failed (-84) [ 1837.940078][T23461] netlink: 'syz.2.6139': attribute type 32 has an invalid length. [ 1839.937890][ T3061] Bluetooth: hci0: command 0x1003 tx timeout [ 1839.966651][T11166] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 1840.173413][T23480] ip6t_rpfilter: unknown options [ 1841.448427][T23487] ip6t_rpfilter: unknown options [ 1841.507791][T23105] usb 6-1: new high-speed USB device number 56 using dummy_hcd [ 1841.746069][T23503] binder: 23498:23503 ioctl c0306201 0 returned -14 [ 1842.374450][T23506] device pim6reg1 entered promiscuous mode [ 1842.411788][T23510] netlink: 'syz.3.6151': attribute type 32 has an invalid length. [ 1842.559486][T23514] ip6t_rpfilter: unknown options [ 1842.617952][T23105] usb 6-1: Using ep0 maxpacket: 16 [ 1842.739457][T23105] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1845.203692][T23105] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1845.261953][T23536] ip6t_rpfilter: unknown options [ 1845.465752][T23105] usb 6-1: New USB device found, idVendor=1fd2, idProduct=6007, bcdDevice= 0.00 [ 1845.478784][T23105] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1845.487352][T23105] usb 6-1: config 0 descriptor?? [ 1845.507742][T23105] usb 6-1: can't set config #0, error -71 [ 1845.521734][T23105] usb 6-1: USB disconnect, device number 56 [ 1846.644564][T23555] binder: 23551:23555 ioctl c0306201 0 returned -14 [ 1848.271065][T23586] binder: 23578:23586 ioctl c0306201 0 returned -14 [ 1848.385219][T23588] ip6t_rpfilter: unknown options [ 1848.908744][T23593] netlink: 'syz.8.6172': attribute type 32 has an invalid length. [ 1849.849255][ T500] Bluetooth: hci0: Frame reassembly failed (-84) [ 1849.889828][T23608] Bluetooth: received HCILL_WAKE_UP_IND in state 2 [ 1850.109622][T23619] binder: 23614:23619 ioctl c0306201 0 returned -14 [ 1853.156323][T11166] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 1854.187900][T23659] netlink: 'syz.1.6187': attribute type 32 has an invalid length. [ 1854.275063][T23664] ip6t_rpfilter: unknown options [ 1854.487062][T23671] binder: 23666:23671 ioctl c0306201 0 returned -14 [ 1855.214785][T23688] netlink: 'syz.3.6196': attribute type 32 has an invalid length. [ 1856.462824][T23695] device pim6reg1 entered promiscuous mode [ 1856.827709][T10095] usb 3-1: new high-speed USB device number 29 using dummy_hcd [ 1859.242726][T23709] ip6t_rpfilter: unknown options [ 1859.377695][T10095] usb 3-1: Using ep0 maxpacket: 16 [ 1859.677709][T10095] usb 3-1: device descriptor read/all, error -71 [ 1861.110414][T23743] binder: 23737:23743 ioctl c0306201 0 returned -14 [ 1861.508412][T23747] netlink: 'syz.8.6208': attribute type 32 has an invalid length. [ 1861.642308][T23745] overlayfs: failed to resolve './file0': -2 [ 1861.874551][T23750] overlayfs: failed to resolve './file0': -2 [ 1862.214749][T23759] netlink: 'syz.3.6212': attribute type 32 has an invalid length. [ 1862.288069][T23763] device pim6reg1 entered promiscuous mode [ 1864.892418][T23794] binder: 23784:23794 ioctl c0306201 0 returned -14 [ 1866.687743][T22670] usb 2-1: new high-speed USB device number 102 using dummy_hcd [ 1866.828201][T23820] ip6t_rpfilter: unknown options [ 1866.887704][T10095] usb 6-1: new high-speed USB device number 57 using dummy_hcd [ 1866.927717][T22670] usb 2-1: Using ep0 maxpacket: 16 [ 1867.057734][T22670] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1867.077692][T22670] usb 2-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 3 [ 1867.137711][T10095] usb 6-1: Using ep0 maxpacket: 16 [ 1867.257795][T10095] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1867.267822][T22670] usb 2-1: New USB device found, idVendor=046d, idProduct=08f0, bcdDevice=50.0d [ 1867.276696][T22670] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1867.295232][T10095] usb 6-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 3 [ 1867.317727][T22670] usb 2-1: Product: syz [ 1867.321896][T22670] usb 2-1: Manufacturer: syz [ 1867.326270][T22670] usb 2-1: SerialNumber: syz [ 1867.343317][T22670] usb 2-1: config 0 descriptor?? [ 1867.388391][T22670] usb-storage 2-1:0.0: USB Mass Storage device detected [ 1867.497742][T10095] usb 6-1: New USB device found, idVendor=046d, idProduct=08f0, bcdDevice=50.0d [ 1867.509101][T10095] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1867.517050][T10095] usb 6-1: Product: syz [ 1867.526171][T10095] usb 6-1: Manufacturer: syz [ 1867.530870][T10095] usb 6-1: SerialNumber: syz [ 1867.540062][T10095] usb 6-1: config 0 descriptor?? [ 1867.690313][T10095] usb-storage 6-1:0.0: USB Mass Storage device detected [ 1867.702973][ T500] Bluetooth: hci0: Frame reassembly failed (-84) [ 1868.403173][T23846] binder: 23843:23846 ioctl c0306201 0 returned -14 [ 1868.755007][ T8954] usb 2-1: USB disconnect, device number 102 [ 1868.921270][T14298] usb 6-1: USB disconnect, device number 57 [ 1869.607063][T23858] netlink: 'syz.5.6237': attribute type 32 has an invalid length. [ 1869.610254][T23859] netlink: 'syz.3.6236': attribute type 32 has an invalid length. [ 1869.697723][ T3061] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 1869.807706][ T8954] usb 2-1: new high-speed USB device number 103 using dummy_hcd [ 1870.437674][ T8954] usb 2-1: Using ep0 maxpacket: 16 [ 1870.567761][ T8954] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1870.584140][ T8954] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1870.601648][ T8954] usb 2-1: New USB device found, idVendor=1fd2, idProduct=6007, bcdDevice= 0.00 [ 1870.618563][ T8954] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1870.634362][ T8954] usb 2-1: config 0 descriptor?? [ 1870.778462][T23884] device pim6reg1 entered promiscuous mode [ 1871.075397][T23798] udevd[23798]: inotify_add_watch(7, /dev/loop0, 10) failed: No such file or directory [ 1871.108986][T23894] binder: 23889:23894 ioctl c0306201 0 returned -14 [ 1871.221697][ T8954] hid-multitouch 0003:1FD2:6007.006A: hidraw0: USB HID v0.00 Device [HID 1fd2:6007] on usb-dummy_hcd.1-1/input0 [ 1871.331341][T23898] netlink: 'syz.5.6248': attribute type 32 has an invalid length. [ 1871.431744][ T8954] usb 2-1: USB disconnect, device number 103 [ 1871.844945][T23910] device pim6reg1 entered promiscuous mode [ 1871.870425][T23912] netlink: 'syz.8.6253': attribute type 32 has an invalid length. [ 1872.087975][ T3090] usb 3-1: new low-speed USB device number 31 using dummy_hcd [ 1872.827816][ T3090] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 1872.859224][ T3090] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1872.904558][ T3090] usb 3-1: New USB device found, idVendor=1038, idProduct=1410, bcdDevice= 0.00 [ 1872.946123][ T3090] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1872.988080][ T3090] usb 3-1: config 0 descriptor?? [ 1873.733496][T23929] device pim6reg1 entered promiscuous mode [ 1873.762521][T23906] incfs: Error accessing: ./bus. [ 1873.767322][T23906] incfs: mount failed -2 [ 1873.789012][ T3090] steelseries_srws1 0003:1038:1410.006B: unknown main item tag 0xd [ 1873.799223][ T3090] steelseries_srws1 0003:1038:1410.006B: item fetching failed at offset 6/7 [ 1873.808257][ T3090] steelseries_srws1 0003:1038:1410.006B: parse failed [ 1873.849982][ T3090] steelseries_srws1: probe of 0003:1038:1410.006B failed with error -22 [ 1875.328077][T23941] ip6t_rpfilter: unknown options [ 1875.768135][T23940] overlayfs: failed to resolve './file0': -2 [ 1876.700753][ T3090] usb 3-1: USB disconnect, device number 31 [ 1876.818297][T23953] device pim6reg1 entered promiscuous mode [ 1877.292813][T23956] binder: 23945:23956 ioctl c0306201 0 returned -14 [ 1878.100643][T23967] netlink: 'syz.2.6268': attribute type 32 has an invalid length. [ 1879.924317][T23978] device pim6reg1 entered promiscuous mode [ 1880.581162][T24001] binder: 23994:24001 ioctl c0306201 0 returned -14 [ 1881.337914][ T3090] usb 6-1: new low-speed USB device number 58 using dummy_hcd [ 1882.796095][ T3090] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 1882.964092][T24025] device pim6reg1 entered promiscuous mode [ 1882.981121][T24027] device pim6reg1 entered promiscuous mode [ 1883.269273][T24035] ip6t_rpfilter: unknown options [ 1883.668208][ T3090] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1883.696563][ T3090] usb 6-1: New USB device found, idVendor=1038, idProduct=1410, bcdDevice= 0.00 [ 1883.715761][ T3090] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1883.737581][ T3090] usb 6-1: config 0 descriptor?? [ 1883.794282][ T3090] usb 6-1: can't set config #0, error -71 [ 1883.804446][ T3090] usb 6-1: USB disconnect, device number 58 [ 1883.908838][T24048] ip6t_rpfilter: unknown options [ 1885.084868][T24058] netlink: 'syz.5.6294': attribute type 32 has an invalid length. [ 1885.287682][T23105] usb 2-1: new high-speed USB device number 104 using dummy_hcd [ 1886.117729][T23105] usb 2-1: Using ep0 maxpacket: 8 [ 1886.237829][T23105] usb 2-1: New USB device found, idVendor=1557, idProduct=7720, bcdDevice=b7.eb [ 1886.250164][T23105] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1886.757846][T24076] ip6t_rpfilter: unknown options [ 1886.941152][T23105] usb 2-1: config 0 descriptor?? [ 1886.967779][T23105] usb 2-1: can't set config #0, error -71 [ 1887.341436][T24085] ip6t_rpfilter: unknown options [ 1887.608256][T23105] usb 2-1: USB disconnect, device number 104 [ 1888.137367][T24098] ip6t_rpfilter: unknown options [ 1888.701741][T24104] netlink: 'syz.5.6305': attribute type 32 has an invalid length. [ 1890.386067][T24116] overlayfs: failed to resolve './file0': -2 [ 1892.417841][T24132] ip6t_rpfilter: unknown options [ 1892.798776][T23105] usb 9-1: new high-speed USB device number 67 using dummy_hcd [ 1892.868906][T24135] netlink: 'syz.8.6312': attribute type 32 has an invalid length. [ 1894.954689][ T3061] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 1895.010376][T24153] syz.5.6317[24153] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 1895.010451][T24153] syz.5.6317[24153] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 1897.889782][ T7904] Bluetooth: hci0: Frame reassembly failed (-84) [ 1897.922051][T24190] ip6t_rpfilter: unknown options [ 1899.572167][T24198] overlayfs: failed to resolve './file0': -2 [ 1899.937706][ T3061] Bluetooth: hci0: command 0x1003 tx timeout [ 1899.943580][T11166] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 1900.147686][ T3090] usb 6-1: new low-speed USB device number 59 using dummy_hcd [ 1900.722110][T24225] netlink: 'syz.3.6337': attribute type 32 has an invalid length. [ 1900.918024][ T3090] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 1900.941252][ T3090] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1900.952595][ T3090] usb 6-1: New USB device found, idVendor=1038, idProduct=1410, bcdDevice= 0.00 [ 1900.962024][ T3090] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1901.036613][ T3090] usb 6-1: config 0 descriptor?? [ 1901.539669][T24205] incfs: Error accessing: ./bus. [ 1901.546092][T24205] incfs: mount failed -2 [ 1901.581784][ T3090] steelseries_srws1 0003:1038:1410.006C: unknown main item tag 0xd [ 1901.595863][ T3090] steelseries_srws1 0003:1038:1410.006C: item fetching failed at offset 6/7 [ 1901.631552][ T3090] steelseries_srws1 0003:1038:1410.006C: parse failed [ 1901.643429][ T3090] steelseries_srws1: probe of 0003:1038:1410.006C failed with error -22 [ 1901.848245][T24205] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1901.888644][T24205] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1901.964621][T24205] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1902.033541][T24205] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1902.161289][ T9688] usb 6-1: USB disconnect, device number 59 [ 1903.324265][T24254] overlayfs: failed to resolve './file0': -2 [ 1905.577686][ T3090] usb 4-1: new high-speed USB device number 89 using dummy_hcd [ 1905.647832][T14298] usb 2-1: new high-speed USB device number 105 using dummy_hcd [ 1905.778485][ T9688] usb 3-1: new high-speed USB device number 32 using dummy_hcd [ 1906.139564][T24288] ip6t_rpfilter: unknown options [ 1906.298191][T14298] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1906.328376][T14298] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1906.344235][T14298] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 1906.399989][T14298] usb 2-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 1906.408967][T14298] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1906.420735][T14298] usb 2-1: config 0 descriptor?? [ 1908.953951][T24306] device pim6reg1 entered promiscuous mode [ 1910.750223][T24320] netlink: 'syz.3.6362': attribute type 32 has an invalid length. [ 1913.837797][T14298] usbhid 2-1:0.0: can't add hid device: -71 [ 1913.865152][T14298] usbhid: probe of 2-1:0.0 failed with error -71 [ 1913.983615][T14298] usb 2-1: USB disconnect, device number 105 [ 1915.067843][ T9688] usb 6-1: new low-speed USB device number 60 using dummy_hcd [ 1915.477766][ T9688] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 1915.525442][ T7904] Bluetooth: hci1: Frame reassembly failed (-84) [ 1915.549883][ T7904] Bluetooth: hci1: Frame reassembly failed (-84) [ 1915.559418][ T9688] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1915.574358][ T9688] usb 6-1: New USB device found, idVendor=1038, idProduct=1410, bcdDevice= 0.00 [ 1915.585089][ T9688] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1915.609325][ T9688] usb 6-1: config 0 descriptor?? [ 1916.089695][T24370] incfs: Error accessing: ./bus. [ 1916.094486][T24370] incfs: mount failed -2 [ 1916.113326][ T9688] steelseries_srws1 0003:1038:1410.006D: unknown main item tag 0xd [ 1916.123323][ T9688] steelseries_srws1 0003:1038:1410.006D: item fetching failed at offset 6/7 [ 1916.137804][ T9688] steelseries_srws1 0003:1038:1410.006D: parse failed [ 1916.144416][ T9688] steelseries_srws1: probe of 0003:1038:1410.006D failed with error -22 [ 1916.303709][T24389] ip6t_rpfilter: unknown options [ 1916.313624][T24370] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1916.323146][T24370] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1916.332931][T24370] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1916.342647][T24370] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1916.352043][ T3090] usb 6-1: USB disconnect, device number 60 [ 1916.577682][ T3060] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 1916.677696][T19024] usb 2-1: new high-speed USB device number 106 using dummy_hcd [ 1917.122649][T19024] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1917.868065][T11166] Bluetooth: hci1: Opcode 0x1003 failed: -110 [ 1917.868154][ T3060] Bluetooth: hci1: command 0x1003 tx timeout [ 1917.914151][T19024] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1918.051393][T19024] usb 2-1: New USB device found, idVendor=05ac, idProduct=0265, bcdDevice= 0.00 [ 1918.067786][T19024] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1918.083258][T19024] usb 2-1: config 0 descriptor?? [ 1920.252607][T24423] netlink: 32 bytes leftover after parsing attributes in process `syz.5.6389'. [ 1920.301950][T19024] usb 2-1: can't set config #0, error -71 [ 1920.408207][T19024] usb 2-1: USB disconnect, device number 106 [ 1921.132688][T24434] netlink: 'syz.8.6394': attribute type 32 has an invalid length. [ 1922.340474][T24454] netlink: 'syz.5.6400': attribute type 32 has an invalid length. [ 1924.816655][T24469] binder: 24464:24469 ioctl c0306201 0 returned -14 [ 1927.057302][T24487] netlink: 'syz.5.6410': attribute type 32 has an invalid length. [ 1929.789038][T24524] binder: 24515:24524 ioctl c0306201 0 returned -14 [ 1933.312432][ T9688] usb 4-1: new high-speed USB device number 90 using dummy_hcd [ 1933.429426][T24554] device pim6reg1 entered promiscuous mode [ 1933.991489][T24563] overlayfs: failed to resolve './file0': -2 [ 1934.005809][ T9688] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1934.502081][ T9688] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1934.512073][ T9688] usb 4-1: New USB device found, idVendor=05ac, idProduct=0265, bcdDevice= 0.00 [ 1934.522037][ T9688] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1934.549280][ T9688] usb 4-1: config 0 descriptor?? [ 1935.271593][T24540] udevd[24540]: inotify_add_watch(7, /dev/loop0, 10) failed: No such file or directory [ 1935.677009][T24586] device pim6reg1 entered promiscuous mode [ 1938.661081][T24600] device pim6reg1 entered promiscuous mode [ 1938.907728][T10095] usb 6-1: new high-speed USB device number 61 using dummy_hcd [ 1939.697745][ T9688] usbhid 4-1:0.0: can't add hid device: -71 [ 1939.703789][ T9688] usbhid: probe of 4-1:0.0 failed with error -71 [ 1939.719597][ T9688] usb 4-1: USB disconnect, device number 90 [ 1939.747682][ T493] usb 2-1: new high-speed USB device number 107 using dummy_hcd [ 1940.873161][T24628] syz.8.6446[24628] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 1940.873216][T24628] syz.8.6446[24628] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 1940.963757][T10095] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1940.992123][T10095] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1941.002997][T10095] usb 6-1: New USB device found, idVendor=256c, idProduct=006d, bcdDevice= 0.00 [ 1941.791985][T10095] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1941.822470][T10095] usb 6-1: config 0 descriptor?? [ 1941.840538][T10095] usb 6-1: can't set config #0, error -71 [ 1941.859461][T10095] usb 6-1: USB disconnect, device number 61 [ 1942.007697][ T493] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1942.018871][ T493] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1942.029041][T24642] ip6t_rpfilter: unknown options [ 1942.035189][ T493] usb 2-1: New USB device found, idVendor=05ac, idProduct=0265, bcdDevice= 0.00 [ 1942.044465][ T493] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1942.057041][ T493] usb 2-1: config 0 descriptor?? [ 1942.107668][T19024] usb 9-1: new low-speed USB device number 68 using dummy_hcd [ 1942.387833][ T493] usbhid 2-1:0.0: can't add hid device: -71 [ 1942.393733][ T493] usbhid: probe of 2-1:0.0 failed with error -71 [ 1942.401152][ T493] usb 2-1: USB disconnect, device number 107 [ 1942.499900][T19024] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 1942.572073][T19024] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1942.583833][T19024] usb 9-1: New USB device found, idVendor=1038, idProduct=1410, bcdDevice= 0.00 [ 1942.597986][T19024] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1942.660038][T19024] usb 9-1: config 0 descriptor?? [ 1944.340238][T24657] incfs: Error accessing: ./bus. [ 1944.345072][T24657] incfs: mount failed -2 [ 1944.934755][T19024] steelseries_srws1 0003:1038:1410.006E: unknown main item tag 0xd [ 1944.944627][T19024] steelseries_srws1 0003:1038:1410.006E: item fetching failed at offset 6/7 [ 1944.954003][T24635] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1944.975906][T24635] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1944.996699][T19024] steelseries_srws1 0003:1038:1410.006E: parse failed [ 1945.007292][T24667] netlink: 'syz.2.6458': attribute type 32 has an invalid length. [ 1945.018218][T24635] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1945.030748][T19024] steelseries_srws1: probe of 0003:1038:1410.006E failed with error -22 [ 1945.100744][T24635] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1945.175843][T10095] usb 9-1: USB disconnect, device number 68 [ 1948.961478][T24707] device pim6reg1 entered promiscuous mode [ 1951.014022][T24727] syz.8.6473[24727] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 1951.014109][T24727] syz.8.6473[24727] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 1951.638161][T24741] ip6t_rpfilter: unknown options [ 1951.967676][ T3090] usb 3-1: new high-speed USB device number 33 using dummy_hcd [ 1952.207660][ T3090] usb 3-1: Using ep0 maxpacket: 16 [ 1952.311273][T24752] netlink: 'syz.3.6479': attribute type 32 has an invalid length. [ 1952.337742][ T3090] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1954.444284][ T3090] usb 3-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 3 [ 1954.451903][T24759] binder: 24745:24759 ioctl c0306201 0 returned -14 [ 1954.487689][ T3090] usb 3-1: string descriptor 0 read error: -71 [ 1954.493751][ T3090] usb 3-1: New USB device found, idVendor=046d, idProduct=08f0, bcdDevice=50.0d [ 1954.507652][ T3090] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1954.531823][ T3090] usb 3-1: config 0 descriptor?? [ 1954.567707][ T3090] usb 3-1: can't set config #0, error -71 [ 1954.575476][ T3090] usb 3-1: USB disconnect, device number 33 [ 1955.134626][T24776] device pim6reg1 entered promiscuous mode [ 1956.234180][T24791] device pim6reg1 entered promiscuous mode [ 1958.061704][T24805] netlink: 'syz.5.6493': attribute type 32 has an invalid length. [ 1962.362921][T24851] ip6t_rpfilter: unknown options [ 1962.417805][T24855] device pim6reg1 entered promiscuous mode [ 1964.725271][T24892] syz.1.6518[24892] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 1964.727280][T24892] syz.1.6518[24892] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 1965.446314][T24895] device pim6reg1 entered promiscuous mode [ 1967.407774][T19024] usb 4-1: new high-speed USB device number 91 using dummy_hcd [ 1968.207731][T19024] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1968.299907][T19024] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1968.414705][T19024] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 1968.437015][T19024] usb 4-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 1968.446248][T19024] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1969.490522][T19024] usb 4-1: config 0 descriptor?? [ 1969.968769][T19024] plantronics 0003:047F:FFFF.006F: unknown main item tag 0x7 [ 1969.976039][T19024] plantronics 0003:047F:FFFF.006F: item fetching failed at offset 13/15 [ 1970.024117][T19024] plantronics 0003:047F:FFFF.006F: parse failed [ 1970.044926][T19024] plantronics: probe of 0003:047F:FFFF.006F failed with error -22 [ 1970.077669][ T8954] usb 6-1: new high-speed USB device number 62 using dummy_hcd [ 1971.060365][ T9688] usb 4-1: USB disconnect, device number 91 [ 1974.635110][T25003] device pim6reg1 entered promiscuous mode [ 1974.701041][T25006] ip6t_rpfilter: unknown options [ 1975.223224][T25013] ip6t_rpfilter: unknown options [ 1977.427743][ T1681] usb 4-1: new high-speed USB device number 92 using dummy_hcd [ 1977.514457][T25036] ip6t_rpfilter: unknown options [ 1977.677721][ T1681] usb 4-1: Using ep0 maxpacket: 16 [ 1977.838033][ T1681] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1977.874251][ T1681] usb 4-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 3 [ 1978.147790][ T1681] usb 4-1: New USB device found, idVendor=046d, idProduct=08f0, bcdDevice=50.0d [ 1978.165417][ T1681] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1978.238244][ T1681] usb 4-1: Product: syz [ 1978.243000][ T1681] usb 4-1: Manufacturer: syz [ 1978.247473][ T1681] usb 4-1: SerialNumber: syz [ 1978.257447][ T1681] usb 4-1: config 0 descriptor?? [ 1978.298226][ T1681] usb-storage 4-1:0.0: USB Mass Storage device detected [ 1979.783804][T10095] usb 4-1: USB disconnect, device number 92 [ 1980.009949][T25074] ip6t_rpfilter: unknown options [ 1982.045915][T25095] syz.2.6567[25095] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 1982.045995][T25095] syz.2.6567[25095] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 1983.911378][T25110] ip6t_rpfilter: unknown options [ 1984.084691][T10095] usb 6-1: new high-speed USB device number 63 using dummy_hcd [ 1985.100426][T10095] usb 6-1: Using ep0 maxpacket: 16 [ 1985.667697][T10095] usb 6-1: device descriptor read/all, error -71 [ 1986.170972][T18499] usb 4-1: new low-speed USB device number 93 using dummy_hcd [ 1986.988674][T18499] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 1986.999915][T18499] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1987.009709][T18499] usb 4-1: New USB device found, idVendor=1038, idProduct=1410, bcdDevice= 0.00 [ 1987.018923][T18499] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1987.031745][T18499] usb 4-1: config 0 descriptor?? [ 1988.373792][T25139] incfs: Error accessing: ./bus. [ 1988.381424][T25139] incfs: mount failed -2 [ 1988.396944][T18499] steelseries_srws1 0003:1038:1410.0070: unknown main item tag 0xd [ 1988.404918][T18499] steelseries_srws1 0003:1038:1410.0070: item fetching failed at offset 6/7 [ 1988.413931][T18499] steelseries_srws1 0003:1038:1410.0070: parse failed [ 1988.420569][T18499] steelseries_srws1: probe of 0003:1038:1410.0070 failed with error -22 [ 1988.487834][ T8954] usb 9-1: new high-speed USB device number 69 using dummy_hcd [ 1988.606062][T25139] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1988.615098][T25139] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1988.627282][T25139] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1988.636245][T25139] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1988.649966][ T9688] usb 4-1: USB disconnect, device number 93 [ 1988.737641][ T8954] usb 9-1: Using ep0 maxpacket: 16 [ 1988.877754][ T8954] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1988.889178][ T8954] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1988.899649][ T8954] usb 9-1: New USB device found, idVendor=1fd2, idProduct=6007, bcdDevice= 0.00 [ 1988.909098][ T8954] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1989.056506][ T8954] usb 9-1: config 0 descriptor?? [ 1990.208574][ T8954] hid-multitouch 0003:1FD2:6007.0071: hidraw0: USB HID v0.00 Device [HID 1fd2:6007] on usb-dummy_hcd.8-1/input0 [ 1990.499575][T23162] usb 9-1: USB disconnect, device number 69 [ 1991.938175][T25220] ip6t_rpfilter: unknown options [ 1992.876172][T10095] usb 3-1: new high-speed USB device number 34 using dummy_hcd [ 1993.918000][T25237] device pim6reg1 entered promiscuous mode [ 1993.927678][T10095] usb 3-1: Using ep0 maxpacket: 8 [ 1994.047715][T10095] usb 3-1: New USB device found, idVendor=1557, idProduct=7720, bcdDevice=b7.eb [ 1994.063322][T10095] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1994.123080][T10095] usb 3-1: config 0 descriptor?? [ 1995.607743][T10095] asix 3-1:0.0 (unnamed net_device) (uninitialized): Failed to read reg index 0x0000: -61 [ 1995.627684][T10095] asix: probe of 3-1:0.0 failed with error -61 [ 1996.550613][T25295] device pim6reg1 entered promiscuous mode [ 1996.569591][T25298] overlayfs: missing 'lowerdir' [ 1996.864915][T10095] usb 3-1: USB disconnect, device number 34 [ 1999.464268][T25337] ip6t_rpfilter: unknown options [ 1999.669578][T25339] netlink: 'syz.2.6635': attribute type 32 has an invalid length. [ 1999.951639][T25347] device pim6reg1 entered promiscuous mode [ 2000.218296][T25356] udevd[25356]: inotify_add_watch(7, /dev/loop0, 10) failed: No such file or directory [ 2000.687636][T10095] usb 4-1: new high-speed USB device number 94 using dummy_hcd [ 2000.877625][ T3090] usb 3-1: new high-speed USB device number 35 using dummy_hcd [ 2000.990017][T25371] 9pnet: Could not find request transport: fd0x0000000000000003 [ 2001.078003][T10095] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 2001.115355][T10095] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 2001.171469][T10095] usb 4-1: New USB device found, idVendor=256c, idProduct=006d, bcdDevice= 0.00 [ 2001.226191][T10095] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2001.268061][ T3090] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 2001.319862][T10095] usb 4-1: config 0 descriptor?? [ 2001.346502][ T3090] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 2001.383460][ T3090] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 2001.498937][ T3090] usb 3-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 2001.524227][ T3090] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2001.575434][ T3090] usb 3-1: config 0 descriptor?? [ 2003.082351][ T3090] plantronics 0003:047F:FFFF.0072: item fetching failed at offset 8/15 [ 2003.092418][ T3090] plantronics 0003:047F:FFFF.0072: parse failed [ 2003.098841][ T3090] plantronics: probe of 0003:047F:FFFF.0072 failed with error -22 [ 2003.131952][T25394] device pim6reg1 entered promiscuous mode [ 2003.147999][T10095] usb 4-1: string descriptor 0 read error: -71 [ 2003.167863][T10095] uclogic 0003:256C:006D.0073: failed retrieving string descriptor #200: -71 [ 2003.177701][T10095] uclogic 0003:256C:006D.0073: failed retrieving pen parameters: -71 [ 2003.185635][T10095] uclogic 0003:256C:006D.0073: failed probing pen v2 parameters: -71 [ 2003.193765][T10095] uclogic 0003:256C:006D.0073: failed probing parameters: -71 [ 2003.201138][T10095] uclogic: probe of 0003:256C:006D.0073 failed with error -71 [ 2003.227797][T10095] usb 4-1: USB disconnect, device number 94 [ 2003.261518][T18499] usb 3-1: USB disconnect, device number 35 [ 2003.336283][T25402] netlink: 'syz.5.6653': attribute type 32 has an invalid length. [ 2003.432220][T25403] bridge0: port 1(bridge_slave_0) entered blocking state [ 2003.445751][T25403] bridge0: port 1(bridge_slave_0) entered disabled state [ 2003.453226][T25403] device bridge_slave_0 entered promiscuous mode [ 2003.462486][T25403] bridge0: port 2(bridge_slave_1) entered blocking state [ 2003.470119][T25403] bridge0: port 2(bridge_slave_1) entered disabled state [ 2003.479389][T25403] device bridge_slave_1 entered promiscuous mode [ 2003.816575][ T8842] Bluetooth: hci0: Frame reassembly failed (-84) [ 2003.823582][T25410] Bluetooth: received HCILL_WAKE_UP_IND in state 2 [ 2003.927427][T25403] bridge0: port 2(bridge_slave_1) entered blocking state [ 2003.934313][T25403] bridge0: port 2(bridge_slave_1) entered forwarding state [ 2003.941422][T25403] bridge0: port 1(bridge_slave_0) entered blocking state [ 2003.948187][T25403] bridge0: port 1(bridge_slave_0) entered forwarding state [ 2003.986541][ T8842] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 2003.994769][ T8842] bridge0: port 1(bridge_slave_0) entered disabled state [ 2004.002141][ T8842] bridge0: port 2(bridge_slave_1) entered disabled state [ 2004.023047][ T8842] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 2004.031186][ T8842] bridge0: port 1(bridge_slave_0) entered blocking state [ 2004.038059][ T8842] bridge0: port 1(bridge_slave_0) entered forwarding state [ 2004.045610][ T8842] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 2004.054637][ T8842] bridge0: port 2(bridge_slave_1) entered blocking state [ 2004.061525][ T8842] bridge0: port 2(bridge_slave_1) entered forwarding state [ 2004.076685][ T8842] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 2004.085585][ T8842] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 2004.105595][ T7904] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 2004.120234][ T7904] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 2004.128619][ T7904] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 2004.135926][ T7904] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 2004.143948][T25403] device veth0_vlan entered promiscuous mode [ 2004.161577][ T8842] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 2004.188404][T16201] device bridge_slave_1 left promiscuous mode [ 2004.195564][T16201] bridge0: port 2(bridge_slave_1) entered disabled state [ 2004.206963][T16201] device bridge_slave_0 left promiscuous mode [ 2004.213307][T16201] bridge0: port 1(bridge_slave_0) entered disabled state [ 2004.224507][T16201] device veth1_macvtap left promiscuous mode [ 2004.231029][T16201] device veth0_vlan left promiscuous mode [ 2004.341616][T25403] device veth1_macvtap entered promiscuous mode [ 2004.351944][ T6850] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 2004.360070][ T6850] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 2004.398999][ T6850] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 2004.409552][ T6850] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 2004.767010][T25436] device pim6reg1 entered promiscuous mode [ 2005.252895][T25447] ip6t_rpfilter: unknown options [ 2005.857661][T11166] Bluetooth: hci0: command 0x1003 tx timeout [ 2005.863526][ T3060] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 2005.937652][T23105] usb 9-1: new high-speed USB device number 70 using dummy_hcd [ 2006.147654][ T9688] usb 3-1: new high-speed USB device number 36 using dummy_hcd [ 2006.187636][T19024] usb 4-1: new low-speed USB device number 95 using dummy_hcd [ 2006.347732][T23105] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 2006.358519][T23105] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 2006.368321][T23105] usb 9-1: New USB device found, idVendor=256c, idProduct=006d, bcdDevice= 0.00 [ 2006.377240][T23105] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2006.389469][T23105] usb 9-1: config 0 descriptor?? [ 2006.397613][ T9688] usb 3-1: Using ep0 maxpacket: 16 [ 2006.517707][ T9688] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 2006.528669][ T9688] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 2006.538326][ T9688] usb 3-1: New USB device found, idVendor=1fd2, idProduct=6007, bcdDevice= 0.00 [ 2006.557631][ T9688] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2006.569763][T19024] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 2006.580663][ T9688] usb 3-1: config 0 descriptor?? [ 2006.585470][T19024] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 2006.595014][T19024] usb 4-1: New USB device found, idVendor=1038, idProduct=1410, bcdDevice= 0.00 [ 2006.604004][T19024] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2006.612721][T19024] usb 4-1: config 0 descriptor?? [ 2007.060792][ T9688] hid-multitouch 0003:1FD2:6007.0075: hidraw0: USB HID v0.00 Device [HID 1fd2:6007] on usb-dummy_hcd.2-1/input0 [ 2007.078228][T25458] incfs: Error accessing: ./bus. [ 2007.083031][T25458] incfs: mount failed -2 [ 2007.107718][T23105] usb 9-1: string descriptor 0 read error: -71 [ 2007.108755][T19024] steelseries_srws1 0003:1038:1410.0076: unknown main item tag 0xd [ 2007.121710][T19024] steelseries_srws1 0003:1038:1410.0076: item fetching failed at offset 6/7 [ 2007.130386][T19024] steelseries_srws1 0003:1038:1410.0076: parse failed [ 2007.136976][T19024] steelseries_srws1: probe of 0003:1038:1410.0076 failed with error -22 [ 2007.138023][T23105] uclogic 0003:256C:006D.0074: failed retrieving string descriptor #200: -71 [ 2007.157564][T23105] uclogic 0003:256C:006D.0074: failed retrieving pen parameters: -71 [ 2007.165611][T23105] uclogic 0003:256C:006D.0074: failed probing pen v2 parameters: -71 [ 2007.173506][T23105] uclogic 0003:256C:006D.0074: failed probing parameters: -71 [ 2007.180952][T23105] uclogic: probe of 0003:256C:006D.0074 failed with error -71 [ 2007.193894][T23105] usb 9-1: USB disconnect, device number 70 [ 2007.259493][ T9688] usb 3-1: USB disconnect, device number 36 [ 2007.314935][T25458] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2007.323957][T25458] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2007.335084][T25458] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2007.344189][T25458] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2007.355856][T19024] usb 4-1: USB disconnect, device number 95 [ 2007.540394][T25476] device pim6reg1 entered promiscuous mode [ 2009.467137][T25501] ip6t_rpfilter: unknown options [ 2011.227785][ T9688] usb 6-1: new high-speed USB device number 65 using dummy_hcd [ 2011.358172][T25528] ip6t_rpfilter: unknown options [ 2011.467695][ T9688] usb 6-1: Using ep0 maxpacket: 16 [ 2011.487654][ T376] usb 9-1: new high-speed USB device number 71 using dummy_hcd [ 2011.547694][T18499] usb 3-1: new high-speed USB device number 37 using dummy_hcd [ 2011.610452][ T9688] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 2011.620522][ T9688] usb 6-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 3 [ 2011.787693][ T9688] usb 6-1: New USB device found, idVendor=046d, idProduct=08f0, bcdDevice=50.0d [ 2011.800762][ T9688] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2011.808731][ T9688] usb 6-1: Product: syz [ 2011.812903][ T9688] usb 6-1: Manufacturer: syz [ 2011.817462][ T9688] usb 6-1: SerialNumber: syz [ 2011.824325][ T9688] usb 6-1: config 0 descriptor?? [ 2011.827645][T18499] usb 3-1: Using ep0 maxpacket: 16 [ 2011.857780][ T376] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 2011.871676][ T9688] usb-storage 6-1:0.0: USB Mass Storage device detected [ 2011.878643][ T376] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 2011.891652][ T376] usb 9-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 2011.911594][ T376] usb 9-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 2011.937677][ T376] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2011.948409][ T376] usb 9-1: config 0 descriptor?? [ 2011.987781][T18499] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 2012.006717][T18499] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 2012.016745][T18499] usb 3-1: New USB device found, idVendor=1fd2, idProduct=6007, bcdDevice= 0.00 [ 2012.025976][T18499] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2012.038274][T18499] usb 3-1: config 0 descriptor?? [ 2012.563734][T19024] usb 4-1: new high-speed USB device number 96 using dummy_hcd [ 2012.716974][ T376] plantronics 0003:047F:FFFF.0077: unknown main item tag 0x7 [ 2012.732499][ T376] plantronics 0003:047F:FFFF.0077: item fetching failed at offset 13/15 [ 2012.758875][T18499] hid-multitouch 0003:1FD2:6007.0078: hidraw0: USB HID v0.00 Device [HID 1fd2:6007] on usb-dummy_hcd.2-1/input0 [ 2012.800134][ T376] plantronics 0003:047F:FFFF.0077: parse failed [ 2012.807300][ T376] plantronics: probe of 0003:047F:FFFF.0077 failed with error -22 [ 2012.914758][ T376] usb 9-1: USB disconnect, device number 71 [ 2012.950866][ T1681] usb 3-1: USB disconnect, device number 37 [ 2013.027771][T19024] usb 4-1: Using ep0 maxpacket: 8 [ 2013.150176][T19024] usb 4-1: New USB device found, idVendor=1557, idProduct=7720, bcdDevice=b7.eb [ 2013.159338][T19024] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2013.171396][T19024] usb 4-1: config 0 descriptor?? [ 2013.178150][T25543] syz.1.6691[25543] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 2013.178259][T25543] syz.1.6691[25543] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 2013.330294][T18499] usb 6-1: USB disconnect, device number 65 [ 2013.883707][T25393] udevd[25393]: inotify_add_watch(7, /dev/loop0, 10) failed: No such file or directory [ 2014.039574][T19024] asix 4-1:0.0 (unnamed net_device) (uninitialized): Failed to read reg index 0x0000: -61 [ 2014.128959][T19024] asix: probe of 4-1:0.0 failed with error -61 [ 2015.717057][T25581] ip6t_rpfilter: unknown options [ 2016.244829][ T9688] usb 4-1: USB disconnect, device number 96 [ 2017.107841][T25601] device pim6reg1 entered promiscuous mode [ 2017.159827][T16201] Bluetooth: hci0: Frame reassembly failed (-84) [ 2017.166592][T25606] Bluetooth: received HCILL_WAKE_UP_IND in state 2 [ 2018.767732][ T9688] usb 3-1: new high-speed USB device number 38 using dummy_hcd [ 2019.103155][ T9688] usb 3-1: Using ep0 maxpacket: 16 [ 2019.277291][ T9688] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 2019.287483][ T3060] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 2019.293471][T11166] Bluetooth: hci0: command 0x1003 tx timeout [ 2019.325509][ T9688] usb 3-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 3 [ 2019.364109][T25640] binder: 25633:25640 ioctl c0306201 0 returned -14 [ 2019.607944][T19024] usb 6-1: new low-speed USB device number 66 using dummy_hcd [ 2019.628278][ T9688] usb 3-1: New USB device found, idVendor=046d, idProduct=08f0, bcdDevice=50.0d [ 2019.646269][ T9688] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2019.679024][ T9688] usb 3-1: Product: syz [ 2019.701154][ T9688] usb 3-1: Manufacturer: syz [ 2019.724945][ T9688] usb 3-1: SerialNumber: syz [ 2019.792452][ T9688] usb 3-1: config 0 descriptor?? [ 2019.854885][ T9688] usb-storage 3-1:0.0: USB Mass Storage device detected [ 2019.977926][T19024] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 2019.997089][T19024] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 2020.022831][T19024] usb 6-1: New USB device found, idVendor=1038, idProduct=1410, bcdDevice= 0.00 [ 2020.045824][T19024] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2020.058510][T19024] usb 6-1: config 0 descriptor?? [ 2021.490664][ T9688] usb 3-1: USB disconnect, device number 38 [ 2021.500345][T25669] incfs: Error accessing: ./bus. [ 2021.505145][T25669] incfs: mount failed -2 [ 2021.587115][T25674] syz.2.6728[25674] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 2021.587213][T25674] syz.2.6728[25674] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 2021.598278][T19024] steelseries_srws1 0003:1038:1410.0079: unknown main item tag 0xd [ 2021.618087][T19024] steelseries_srws1 0003:1038:1410.0079: item fetching failed at offset 6/7 [ 2021.626758][T19024] steelseries_srws1 0003:1038:1410.0079: parse failed [ 2021.633421][T19024] steelseries_srws1: probe of 0003:1038:1410.0079 failed with error -22 [ 2023.078599][ T9688] usb 6-1: USB disconnect, device number 66 [ 2024.310014][T25699] ip6t_rpfilter: unknown options [ 2024.386740][T25706] overlayfs: missing 'lowerdir' [ 2025.478977][T25710] netlink: 'syz.3.6734': attribute type 32 has an invalid length. [ 2026.267686][ T9688] usb 9-1: new high-speed USB device number 72 using dummy_hcd [ 2026.338370][T25724] device pim6reg1 entered promiscuous mode [ 2026.407723][ T3090] usb 3-1: new high-speed USB device number 39 using dummy_hcd [ 2026.633550][T25734] ip6t_rpfilter: unknown options [ 2026.707667][ T9688] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 2026.732771][ T9688] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 2026.760285][ T9688] usb 9-1: New USB device found, idVendor=256c, idProduct=006d, bcdDevice= 0.00 [ 2026.782841][ T9688] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2026.797674][ T3090] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 2026.808770][ T9688] usb 9-1: config 0 descriptor?? [ 2026.815245][ T3090] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 2026.845243][ T3090] usb 3-1: New USB device found, idVendor=05ac, idProduct=0265, bcdDevice= 0.00 [ 2026.875504][ T3090] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2026.896364][ T3090] usb 3-1: config 0 descriptor?? [ 2028.907720][ T9688] usb 9-1: string descriptor 0 read error: -71 [ 2028.928209][ T9688] uclogic 0003:256C:006D.007A: failed retrieving string descriptor #200: -71 [ 2028.942078][ T9688] uclogic 0003:256C:006D.007A: failed retrieving pen parameters: -71 [ 2028.995716][ T9688] uclogic 0003:256C:006D.007A: failed probing pen v2 parameters: -71 [ 2029.004022][ T9688] uclogic 0003:256C:006D.007A: failed probing parameters: -71 [ 2029.011395][ T9688] uclogic: probe of 0003:256C:006D.007A failed with error -71 [ 2029.079893][ T9688] usb 9-1: USB disconnect, device number 72 [ 2029.274427][T25759] ip6t_rpfilter: unknown options [ 2029.559359][T25763] device pim6reg1 entered promiscuous mode [ 2029.658096][T25765] ip6t_rpfilter: unknown options [ 2031.072565][T25779] syz.5.6753[25779] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 2031.072661][T25779] syz.5.6753[25779] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 2031.327670][ T3090] usbhid 3-1:0.0: can't add hid device: -71 [ 2032.078035][ T3090] usbhid: probe of 3-1:0.0 failed with error -71 [ 2032.117505][ T3090] usb 3-1: USB disconnect, device number 39 [ 2032.233288][T25790] netlink: 'syz.5.6756': attribute type 32 has an invalid length. [ 2033.387365][T19024] usb 9-1: new high-speed USB device number 73 using dummy_hcd [ 2034.729911][T25814] ip6t_rpfilter: unknown options [ 2034.827713][T19024] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 2034.839330][T25816] ip6t_rpfilter: unknown options [ 2035.007632][T19024] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 2035.017193][T19024] usb 9-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 2035.058478][T19024] usb 9-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 2035.067555][T19024] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2035.077652][T10095] usb 2-1: new high-speed USB device number 108 using dummy_hcd [ 2035.113598][T19024] usb 9-1: config 0 descriptor?? [ 2035.367848][T19024] usb 9-1: can't set config #0, error -71 [ 2035.416728][T19024] usb 9-1: USB disconnect, device number 73 [ 2035.451200][T25824] 9pnet_fd: Insufficient options for proto=fd [ 2037.504723][T10095] usb 2-1: Using ep0 maxpacket: 16 [ 2037.587664][T10095] usb 2-1: device descriptor read/all, error -71 [ 2037.878166][T25842] netlink: 'syz.8.6769': attribute type 32 has an invalid length. [ 2041.558150][T25882] ip6t_rpfilter: unknown options [ 2042.208594][T25888] bridge0: port 1(bridge_slave_0) entered blocking state [ 2042.256672][T25888] bridge0: port 1(bridge_slave_0) entered disabled state [ 2042.312986][T25888] device bridge_slave_0 entered promiscuous mode [ 2042.377973][T25888] bridge0: port 2(bridge_slave_1) entered blocking state [ 2042.527597][T25888] bridge0: port 2(bridge_slave_1) entered disabled state [ 2042.538724][T25888] device bridge_slave_1 entered promiscuous mode [ 2042.646856][T16201] device bridge_slave_1 left promiscuous mode [ 2042.653197][T16201] bridge0: port 2(bridge_slave_1) entered disabled state [ 2042.678084][T16201] device bridge_slave_0 left promiscuous mode [ 2042.699458][T16201] bridge0: port 1(bridge_slave_0) entered disabled state [ 2042.719706][T16201] device veth1_macvtap left promiscuous mode [ 2042.745777][T16201] device veth0_vlan left promiscuous mode [ 2043.437192][ T500] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 2043.456815][ T500] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 2043.478870][ T500] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 2043.505388][ T500] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 2043.523813][ T500] bridge0: port 1(bridge_slave_0) entered blocking state [ 2043.530691][ T500] bridge0: port 1(bridge_slave_0) entered forwarding state [ 2043.554242][ T500] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 2043.569595][ T500] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 2043.584393][ T500] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 2043.600044][ T500] bridge0: port 2(bridge_slave_1) entered blocking state [ 2043.606916][ T500] bridge0: port 2(bridge_slave_1) entered forwarding state [ 2043.634311][ T500] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 2043.644521][ T500] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 2043.667227][ T500] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 2043.684694][ T500] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 2043.708835][ T500] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 2043.725901][ T500] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 2043.740544][T25888] device veth0_vlan entered promiscuous mode [ 2043.747178][ T500] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 2043.755695][ T500] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 2043.771868][T25888] device veth1_macvtap entered promiscuous mode [ 2043.778690][ T500] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 2043.786221][ T500] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 2043.794531][ T500] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 2043.802659][ T500] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 2043.810918][ T500] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 2043.829577][ T500] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 2043.849271][ T500] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 2043.857684][ T500] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 2043.865774][ T500] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 2046.050588][T25929] netlink: 'syz.8.6778': attribute type 32 has an invalid length. [ 2047.629952][T19024] usb 2-1: new high-speed USB device number 110 using dummy_hcd [ 2047.637487][T23162] usb 4-1: new high-speed USB device number 97 using dummy_hcd [ 2048.048044][T19024] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 2048.048106][T23162] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 2048.069870][T23162] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 2048.112982][T23162] usb 4-1: New USB device found, idVendor=256c, idProduct=006d, bcdDevice= 0.00 [ 2048.187114][T23162] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2048.214720][T19024] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 2048.237497][T23162] usb 4-1: config 0 descriptor?? [ 2048.248866][T19024] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 2048.267744][T19024] usb 2-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 2048.276736][T19024] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2048.289436][T19024] usb 2-1: config 0 descriptor?? [ 2048.590593][T25969] overlayfs: option "workdir=./bus" is useless in a non-upper mount, ignore [ 2048.599538][T25969] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent [ 2048.837934][T23162] hid (null): bogus close delimiter [ 2049.057762][T23162] usb 4-1: string descriptor 0 read error: -22 [ 2049.070133][T19024] plantronics 0003:047F:FFFF.007C: unknown main item tag 0x7 [ 2049.089610][T19024] plantronics 0003:047F:FFFF.007C: item fetching failed at offset 13/15 [ 2049.098081][T25980] ip6t_rpfilter: unknown options [ 2049.111518][T19024] plantronics 0003:047F:FFFF.007C: parse failed [ 2049.122220][T19024] plantronics: probe of 0003:047F:FFFF.007C failed with error -22 [ 2049.167615][ T376] usb 6-1: new low-speed USB device number 67 using dummy_hcd [ 2049.254377][T19024] usb 2-1: USB disconnect, device number 110 [ 2049.291104][T23162] input: HID 256c:006d Pen as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/0003:256C:006D.007B/input/input129 [ 2049.337654][T23162] input: HID 256c:006d Pad as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/0003:256C:006D.007B/input/input130 [ 2049.353932][T23162] input: HID 256c:006d Touch Strip as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/0003:256C:006D.007B/input/input131 [ 2049.384449][T23162] input: HID 256c:006d Dial as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/0003:256C:006D.007B/input/input132 [ 2049.425679][T23162] uclogic 0003:256C:006D.007B: input,hiddev96,hidraw0: USB HID v0.00 Keypad [HID 256c:006d] on usb-dummy_hcd.3-1/input0 [ 2049.490279][T19024] usb 4-1: USB disconnect, device number 97 [ 2049.557683][ T376] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 2049.568465][ T376] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 2049.578210][ T376] usb 6-1: New USB device found, idVendor=1038, idProduct=1410, bcdDevice= 0.00 [ 2049.587055][ T376] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2049.595766][ T376] usb 6-1: config 0 descriptor?? [ 2050.416045][T25973] incfs: Error accessing: ./bus. [ 2050.425126][T25973] incfs: mount failed -2 [ 2050.459898][ T376] steelseries_srws1 0003:1038:1410.007D: unknown main item tag 0xd [ 2050.477998][ T376] steelseries_srws1 0003:1038:1410.007D: item fetching failed at offset 6/7 [ 2050.501980][ T376] steelseries_srws1 0003:1038:1410.007D: parse failed [ 2050.515907][ T376] steelseries_srws1: probe of 0003:1038:1410.007D failed with error -22 [ 2050.693481][T25973] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2050.702158][T25973] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2050.710640][T25973] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2050.722277][T25973] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2050.745661][T25943] udevd[25943]: inotify_add_watch(7, /dev/loop0, 10) failed: No such file or directory [ 2050.759493][T22670] usb 6-1: USB disconnect, device number 67 [ 2052.294865][T23162] usb 2-1: new high-speed USB device number 111 using dummy_hcd [ 2052.362831][T26036] ip6t_rpfilter: unknown options [ 2052.557682][T23162] usb 2-1: Using ep0 maxpacket: 16 [ 2052.736039][T23162] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 2052.759326][T23162] usb 2-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 3 [ 2053.368536][T23162] usb 2-1: New USB device found, idVendor=046d, idProduct=08f0, bcdDevice=50.0d [ 2053.410549][T23162] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2053.499235][T23162] usb 2-1: Product: syz [ 2053.549842][T23162] usb 2-1: Manufacturer: syz [ 2053.587447][T23162] usb 2-1: SerialNumber: syz [ 2053.601410][T23162] usb 2-1: config 0 descriptor?? [ 2053.648145][T23162] usb-storage 2-1:0.0: USB Mass Storage device detected [ 2054.629284][T25943] udevd[25943]: inotify_add_watch(7, /dev/loop0, 10) failed: No such file or directory [ 2056.260139][T19024] usb 2-1: USB disconnect, device number 111 [ 2056.357622][T18499] usb 4-1: new high-speed USB device number 98 using dummy_hcd [ 2056.714516][ T3090] usb 6-1: new high-speed USB device number 68 using dummy_hcd [ 2056.757643][T19024] usb 2-1: new high-speed USB device number 112 using dummy_hcd [ 2057.108134][T18499] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 2057.119144][T18499] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 2057.128749][T18499] usb 4-1: New USB device found, idVendor=0f30, idProduct=0111, bcdDevice= 0.00 [ 2057.137589][T18499] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2057.142264][T19024] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 2057.155213][T18499] usb 4-1: config 0 descriptor?? [ 2057.159956][T19024] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 2057.170542][T19024] usb 2-1: New USB device found, idVendor=05ac, idProduct=0265, bcdDevice= 0.00 [ 2057.181239][T19024] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2057.291317][T19024] usb 2-1: config 0 descriptor?? [ 2057.717695][ T3090] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 2057.731562][ T3090] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 2057.747405][ T3090] usb 6-1: New USB device found, idVendor=256c, idProduct=006d, bcdDevice= 0.00 [ 2057.763125][ T3090] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2057.788268][ T3090] usb 6-1: config 0 descriptor?? [ 2057.967665][T18499] usbhid 4-1:0.0: can't add hid device: -71 [ 2057.973506][T18499] usbhid: probe of 4-1:0.0 failed with error -71 [ 2057.982035][T18499] usb 4-1: USB disconnect, device number 98 [ 2058.356999][T26118] ip6t_rpfilter: unknown options [ 2058.517905][ T3090] hid (null): bogus close delimiter [ 2058.861602][ T3090] usb 6-1: string descriptor 0 read error: -22 [ 2058.977647][T18499] usb 4-1: new high-speed USB device number 99 using dummy_hcd [ 2059.911813][ T3090] input: HID 256c:006d Pen as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:0.0/0003:256C:006D.007E/input/input136 [ 2059.928743][ T3090] input: HID 256c:006d Pad as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:0.0/0003:256C:006D.007E/input/input137 [ 2059.948876][ T3090] input: HID 256c:006d Touch Strip as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:0.0/0003:256C:006D.007E/input/input138 [ 2059.970665][ T3090] input: HID 256c:006d Dial as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:0.0/0003:256C:006D.007E/input/input139 [ 2060.014646][ T3090] uclogic 0003:256C:006D.007E: input,hiddev96,hidraw0: USB HID v0.00 Keypad [HID 256c:006d] on usb-dummy_hcd.5-1/input0 [ 2060.032082][ T3090] usb 6-1: USB disconnect, device number 68 [ 2060.202023][T19024] usbhid 2-1:0.0: can't add hid device: -71 [ 2060.208053][T19024] usbhid: probe of 2-1:0.0 failed with error -71 [ 2060.215096][T19024] usb 2-1: USB disconnect, device number 112 [ 2060.357664][T18499] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 2060.368475][T18499] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 2060.387322][T18499] usb 4-1: New USB device found, idVendor=0f30, idProduct=0111, bcdDevice= 0.00 [ 2060.396953][T18499] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2060.405171][ T500] Bluetooth: hci0: Frame reassembly failed (-84) [ 2060.412909][T18499] usb 4-1: config 0 descriptor?? [ 2060.567635][ T8954] usb 9-1: new high-speed USB device number 74 using dummy_hcd [ 2060.954996][ T3090] usb 6-1: new high-speed USB device number 69 using dummy_hcd [ 2061.017704][T18499] usbhid 4-1:0.0: can't add hid device: -71 [ 2061.023445][T18499] usbhid: probe of 4-1:0.0 failed with error -71 [ 2061.030444][T18499] usb 4-1: USB disconnect, device number 99 [ 2061.077693][ T8954] usb 9-1: Using ep0 maxpacket: 8 [ 2061.197689][ T8954] usb 9-1: New USB device found, idVendor=1557, idProduct=7720, bcdDevice=b7.eb [ 2061.206584][ T8954] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2061.215002][ T8954] usb 9-1: config 0 descriptor?? [ 2061.317681][ T3090] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 2061.328394][ T3090] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 2061.337963][ T3090] usb 6-1: New USB device found, idVendor=256c, idProduct=006d, bcdDevice= 0.00 [ 2061.346778][ T3090] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2061.355262][ T3090] usb 6-1: config 0 descriptor?? [ 2061.842199][T26166] overlayfs: missing 'lowerdir' [ 2061.857765][T19024] usb 3-1: new high-speed USB device number 40 using dummy_hcd [ 2061.973917][ T3090] hid (null): bogus close delimiter [ 2061.979025][ T8954] asix 9-1:0.0 (unnamed net_device) (uninitialized): Failed to read reg index 0x0000: -61 [ 2061.989769][ T8954] asix: probe of 9-1:0.0 failed with error -61 [ 2062.098020][ T3090] usb 6-1: string descriptor 0 read error: -22 [ 2062.237664][T19024] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 2062.248447][T19024] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 2062.257955][T19024] usb 3-1: New USB device found, idVendor=256c, idProduct=006d, bcdDevice= 0.00 [ 2062.266800][T19024] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2062.275179][T19024] usb 3-1: config 0 descriptor?? [ 2062.316219][ T3090] input: HID 256c:006d Pen as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:0.0/0003:256C:006D.007F/input/input140 [ 2062.329768][ T3090] input: HID 256c:006d Pad as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:0.0/0003:256C:006D.007F/input/input141 [ 2062.358463][ T3090] input: HID 256c:006d Touch Strip as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:0.0/0003:256C:006D.007F/input/input142 [ 2062.384680][ T3090] input: HID 256c:006d Dial as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:0.0/0003:256C:006D.007F/input/input143 [ 2062.414720][ T3090] uclogic 0003:256C:006D.007F: input,hiddev96,hidraw0: USB HID v0.00 Keypad [HID 256c:006d] on usb-dummy_hcd.5-1/input0 [ 2062.417704][T11166] Bluetooth: hci0: command 0x1003 tx timeout [ 2062.427903][ T3060] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 2062.519691][ T3090] usb 6-1: USB disconnect, device number 69 [ 2062.637632][T23162] usb 4-1: new low-speed USB device number 100 using dummy_hcd [ 2062.997770][T23162] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 2063.008642][T23162] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 2063.018224][T23162] usb 4-1: New USB device found, idVendor=1038, idProduct=1410, bcdDevice= 0.00 [ 2063.027090][T23162] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2063.035750][T23162] usb 4-1: config 0 descriptor?? [ 2063.040605][T19024] usb 3-1: string descriptor 0 read error: -71 [ 2063.104245][T19024] uclogic 0003:256C:006D.0080: failed retrieving string descriptor #200: -71 [ 2063.113674][T19024] uclogic 0003:256C:006D.0080: failed retrieving pen parameters: -71 [ 2063.121930][T19024] uclogic 0003:256C:006D.0080: failed probing pen v2 parameters: -71 [ 2063.130083][T19024] uclogic 0003:256C:006D.0080: failed probing parameters: -71 [ 2063.137383][T19024] uclogic: probe of 0003:256C:006D.0080 failed with error -71 [ 2063.146411][T19024] usb 3-1: USB disconnect, device number 40 [ 2063.254506][T26177] ip6t_rpfilter: unknown options [ 2063.443771][ T1681] usb 9-1: USB disconnect, device number 74 [ 2063.549795][T26168] incfs: Error accessing: ./bus. [ 2063.556567][T26168] incfs: mount failed -2 [ 2063.570880][T23162] steelseries_srws1 0003:1038:1410.0081: unknown main item tag 0xd [ 2063.578785][T23162] steelseries_srws1 0003:1038:1410.0081: item fetching failed at offset 6/7 [ 2063.587469][T23162] steelseries_srws1 0003:1038:1410.0081: parse failed [ 2063.594574][T23162] steelseries_srws1: probe of 0003:1038:1410.0081 failed with error -22 [ 2063.813319][T26168] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2063.831067][T26168] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2063.845375][T26168] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2063.860718][T26168] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2063.875564][T23162] usb 4-1: USB disconnect, device number 100 [ 2063.927658][ T1681] usb 9-1: new high-speed USB device number 75 using dummy_hcd [ 2064.176796][ T500] Bluetooth: hci0: Frame reassembly failed (-84) [ 2064.347981][ T1681] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 2064.379266][ T1681] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 2064.393832][ T1681] usb 9-1: New USB device found, idVendor=0f30, idProduct=0111, bcdDevice= 0.00 [ 2064.404676][ T1681] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2064.489957][ T1681] usb 9-1: config 0 descriptor?? [ 2065.873032][T18499] usb 3-1: new high-speed USB device number 41 using dummy_hcd [ 2066.202443][ T3060] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 2066.208541][T11166] Bluetooth: hci0: command 0x1003 tx timeout [ 2066.209168][ T3090] usb 2-1: new high-speed USB device number 113 using dummy_hcd [ 2066.263203][T26214] netlink: 'syz.5.6867': attribute type 32 has an invalid length. [ 2066.347652][T18499] usb 3-1: Using ep0 maxpacket: 16 [ 2066.357665][ T1681] usbhid 9-1:0.0: can't add hid device: -71 [ 2066.363516][ T1681] usbhid: probe of 9-1:0.0 failed with error -71 [ 2066.370964][ T1681] usb 9-1: USB disconnect, device number 75 [ 2066.657649][ T3090] usb 2-1: Using ep0 maxpacket: 16 [ 2066.697962][T18499] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 2066.708896][T18499] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 2066.719137][T18499] usb 3-1: New USB device found, idVendor=05ac, idProduct=8241, bcdDevice= 0.00 [ 2066.728195][T18499] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2066.737094][T18499] usb 3-1: config 0 descriptor?? [ 2066.787792][ T3090] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 2066.800816][ T3090] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 2066.810844][ T3090] usb 2-1: New USB device found, idVendor=1fd2, idProduct=6007, bcdDevice= 0.00 [ 2066.820233][ T3090] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2066.920054][T26223] ip6t_rpfilter: unknown options [ 2067.176441][ T3090] usb 2-1: config 0 descriptor?? [ 2067.428580][T18499] appleir 0003:05AC:8241.0082: unknown main item tag 0x0 [ 2067.437545][T18499] appleir 0003:05AC:8241.0082: unknown main item tag 0x0 [ 2067.444463][T18499] appleir 0003:05AC:8241.0082: unknown main item tag 0x0 [ 2067.451506][T18499] appleir 0003:05AC:8241.0082: unknown main item tag 0x0 [ 2067.458432][T18499] appleir 0003:05AC:8241.0082: unknown main item tag 0x0 [ 2067.465534][T18499] appleir 0003:05AC:8241.0082: No inputs registered, leaving [ 2067.480891][T18499] appleir 0003:05AC:8241.0082: hiddev96,hidraw0: USB HID v0.00 Device [HID 05ac:8241] on usb-dummy_hcd.2-1/input0 [ 2067.641843][ T3090] hid-multitouch 0003:1FD2:6007.0083: hidraw1: USB HID v0.00 Device [HID 1fd2:6007] on usb-dummy_hcd.1-1/input0 [ 2067.653640][T18499] usb 9-1: new high-speed USB device number 76 using dummy_hcd [ 2067.752360][T25943] udevd[25943]: inotify_add_watch(7, /dev/loop0, 10) failed: No such file or directory [ 2067.763045][T19024] usb 3-1: USB disconnect, device number 41 [ 2067.840180][T23162] usb 2-1: USB disconnect, device number 113 [ 2067.917613][T18499] usb 9-1: Using ep0 maxpacket: 16 [ 2068.037678][T18499] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 2068.048450][T18499] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 2068.057973][T18499] usb 9-1: New USB device found, idVendor=05ac, idProduct=8241, bcdDevice= 0.00 [ 2068.066930][T18499] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2068.075585][T18499] usb 9-1: config 0 descriptor?? [ 2068.807708][ T8954] usb 4-1: new high-speed USB device number 101 using dummy_hcd [ 2069.125471][ T8954] usb 4-1: Using ep0 maxpacket: 16 [ 2069.248547][T18499] appleir 0003:05AC:8241.0084: unknown main item tag 0x0 [ 2069.255428][T18499] appleir 0003:05AC:8241.0084: unknown main item tag 0x0 [ 2069.264861][ T8954] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 2069.291710][T18499] appleir 0003:05AC:8241.0084: unknown main item tag 0x0 [ 2069.298913][ T8954] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 2069.343524][T18499] appleir 0003:05AC:8241.0084: unknown main item tag 0x0 [ 2069.350817][ T8954] usb 4-1: New USB device found, idVendor=05ac, idProduct=8241, bcdDevice= 0.00 [ 2069.359990][T18499] appleir 0003:05AC:8241.0084: unknown main item tag 0x0 [ 2069.366891][ T8954] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2069.397741][T18499] appleir 0003:05AC:8241.0084: No inputs registered, leaving [ 2069.409921][ T8954] usb 4-1: config 0 descriptor?? [ 2069.414903][T18499] appleir 0003:05AC:8241.0084: hiddev96,hidraw0: USB HID v0.00 Device [HID 05ac:8241] on usb-dummy_hcd.8-1/input0 [ 2069.711695][T26253] ip6t_rpfilter: unknown options [ 2069.955276][T18499] usb 9-1: USB disconnect, device number 76 [ 2070.238426][ T8954] appleir 0003:05AC:8241.0085: unknown main item tag 0x0 [ 2070.245386][ T8954] appleir 0003:05AC:8241.0085: unknown main item tag 0x0 [ 2070.252213][ T8954] appleir 0003:05AC:8241.0085: unknown main item tag 0x0 [ 2070.259070][ T8954] appleir 0003:05AC:8241.0085: unknown main item tag 0x0 [ 2070.265856][ T8954] appleir 0003:05AC:8241.0085: unknown main item tag 0x0 [ 2070.272979][ T8954] appleir 0003:05AC:8241.0085: No inputs registered, leaving [ 2070.282374][ T8954] appleir 0003:05AC:8241.0085: hiddev96,hidraw0: USB HID v0.00 Device [HID 05ac:8241] on usb-dummy_hcd.3-1/input0 [ 2070.417960][T23162] usb 6-1: new high-speed USB device number 70 using dummy_hcd [ 2070.501434][T19024] usb 3-1: new low-speed USB device number 42 using dummy_hcd [ 2070.520410][ T9688] usb 4-1: USB disconnect, device number 101 [ 2070.684368][T26273] ip6t_rpfilter: unknown options [ 2071.027675][T23162] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 2071.038624][T19024] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 2071.049511][T23162] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 2071.059342][T19024] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 2071.068976][T23162] usb 6-1: New USB device found, idVendor=256c, idProduct=006d, bcdDevice= 0.00 [ 2071.077945][T19024] usb 3-1: New USB device found, idVendor=1038, idProduct=1410, bcdDevice= 0.00 [ 2071.086753][T23162] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2071.094598][T19024] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2071.103025][T23162] usb 6-1: config 0 descriptor?? [ 2071.108566][T19024] usb 3-1: config 0 descriptor?? [ 2071.267704][ T9688] usb 2-1: new high-speed USB device number 114 using dummy_hcd [ 2071.811985][T26283] syz.8.6888[26283] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 2071.812041][T26283] syz.8.6888[26283] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 2072.000586][T26267] incfs: Error accessing: ./bus. [ 2072.025640][T26267] incfs: mount failed -2 [ 2072.031208][ T9688] usb 2-1: Using ep0 maxpacket: 8 [ 2072.038810][T19024] steelseries_srws1 0003:1038:1410.0087: unknown main item tag 0xd [ 2072.046558][T19024] steelseries_srws1 0003:1038:1410.0087: item fetching failed at offset 6/7 [ 2072.059358][T19024] steelseries_srws1 0003:1038:1410.0087: parse failed [ 2072.066071][T19024] steelseries_srws1: probe of 0003:1038:1410.0087 failed with error -22 [ 2072.232448][ T9688] usb 2-1: New USB device found, idVendor=1557, idProduct=7720, bcdDevice=b7.eb [ 2072.241385][ T9688] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2072.281653][ T9688] usb 2-1: config 0 descriptor?? [ 2072.793696][T26267] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2072.864132][T26267] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2072.875399][T26267] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2072.883991][T26267] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2072.893202][ T493] usb 3-1: USB disconnect, device number 42 [ 2072.907731][T23162] usb 6-1: string descriptor 0 read error: -71 [ 2072.927647][T23162] uclogic 0003:256C:006D.0086: failed retrieving string descriptor #200: -71 [ 2072.938149][T23162] uclogic 0003:256C:006D.0086: failed retrieving pen parameters: -71 [ 2072.946182][T23162] uclogic 0003:256C:006D.0086: failed probing pen v2 parameters: -71 [ 2072.954840][T23162] uclogic 0003:256C:006D.0086: failed probing parameters: -71 [ 2072.962529][T23162] uclogic: probe of 0003:256C:006D.0086 failed with error -71 [ 2072.975257][T23162] usb 6-1: USB disconnect, device number 70 [ 2073.289589][T26304] ip6t_rpfilter: unknown options [ 2073.477667][ T9688] asix 2-1:0.0 (unnamed net_device) (uninitialized): Failed to read reg index 0x0000: -61 [ 2073.497836][ T9688] asix: probe of 2-1:0.0 failed with error -61 [ 2074.952221][T26313] overlayfs: missing 'workdir' [ 2075.206088][T23162] usb 2-1: USB disconnect, device number 114 [ 2075.315313][T26322] device pim6reg1 entered promiscuous mode [ 2078.773785][T26348] ip6t_rpfilter: unknown options [ 2079.725600][T23162] usb 3-1: new high-speed USB device number 43 using dummy_hcd [ 2079.755304][T26353] ip6t_rpfilter: unknown options [ 2080.037752][T26349] ip6t_rpfilter: unknown options [ 2080.731856][ T1681] usb 4-1: new high-speed USB device number 102 using dummy_hcd [ 2084.297618][T23105] usb 9-1: new high-speed USB device number 77 using dummy_hcd [ 2084.909627][ T7904] Bluetooth: hci0: Frame reassembly failed (-84) [ 2084.950359][ T7904] Bluetooth: hci0: Frame reassembly failed (-84) [ 2085.165584][T23105] usb 9-1: Using ep0 maxpacket: 16 [ 2085.337640][T23105] usb 9-1: device descriptor read/all, error -71 [ 2085.567885][T26416] ip6t_rpfilter: unknown options [ 2085.757773][ T493] usb 3-1: new high-speed USB device number 44 using dummy_hcd [ 2085.847616][ T1681] usb 4-1: new high-speed USB device number 103 using dummy_hcd [ 2085.997624][ T493] usb 3-1: Using ep0 maxpacket: 16 [ 2086.087603][ T1681] usb 4-1: Using ep0 maxpacket: 16 [ 2086.117687][ T493] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 2086.127738][ T493] usb 3-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 3 [ 2086.255119][ T1681] usb 4-1: New USB device found, idVendor=0582, idProduct=007d, bcdDevice=a3.85 [ 2086.265190][ T1681] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2086.320547][ T1681] usb 4-1: config 0 descriptor?? [ 2086.417945][ T493] usb 3-1: New USB device found, idVendor=046d, idProduct=08f0, bcdDevice=50.0d [ 2086.427136][ T493] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2086.436868][ T493] usb 3-1: Product: syz [ 2086.441713][ T493] usb 3-1: Manufacturer: syz [ 2086.446282][ T493] usb 3-1: SerialNumber: syz [ 2086.652253][ T1681] usb 4-1: USB disconnect, device number 103 [ 2086.658349][ T493] usb 3-1: config 0 descriptor?? [ 2086.698630][ T493] usb-storage 3-1:0.0: USB Mass Storage device detected [ 2086.897608][ T3060] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 2087.880805][T26448] ip6t_rpfilter: unknown options [ 2088.007692][T23162] usb 9-1: new high-speed USB device number 79 using dummy_hcd [ 2088.404023][ T493] usb 3-1: USB disconnect, device number 44 [ 2088.447622][T23162] usb 9-1: Using ep0 maxpacket: 16 [ 2088.647638][T23162] usb 9-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 2088.688070][T23162] usb 9-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 3 [ 2088.907696][T23162] usb 9-1: New USB device found, idVendor=046d, idProduct=08f0, bcdDevice=50.0d [ 2088.929540][T23162] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2088.948119][T23162] usb 9-1: Product: syz [ 2089.021284][T23162] usb 9-1: Manufacturer: syz [ 2089.025961][T23162] usb 9-1: SerialNumber: syz [ 2089.034183][T23162] usb 9-1: config 0 descriptor?? [ 2090.007274][T23162] usb-storage 9-1:0.0: USB Mass Storage device detected [ 2091.319666][ T8954] usb 9-1: USB disconnect, device number 79 [ 2091.326730][T26491] device pim6reg1 entered promiscuous mode [ 2091.337714][T26493] netlink: 'syz.1.6945': attribute type 32 has an invalid length. [ 2092.160083][ T500] Bluetooth: hci0: Frame reassembly failed (-84) [ 2092.203523][ T500] Bluetooth: hci0: Frame reassembly failed (-84) [ 2092.687670][ T493] usb 3-1: new high-speed USB device number 45 using dummy_hcd [ 2093.313524][ T8954] usb 9-1: new high-speed USB device number 80 using dummy_hcd [ 2093.347642][ T493] usb 3-1: Using ep0 maxpacket: 16 [ 2093.483681][ T493] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 2093.519417][ T493] usb 3-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 3 [ 2093.531431][T26526] device pim6reg1 entered promiscuous mode [ 2093.647594][ T8954] usb 9-1: Using ep0 maxpacket: 16 [ 2093.727684][ T493] usb 3-1: New USB device found, idVendor=046d, idProduct=08f0, bcdDevice=50.0d [ 2093.737277][ T493] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2093.745690][ T493] usb 3-1: Product: syz [ 2093.749824][ T493] usb 3-1: Manufacturer: syz [ 2093.754352][ T493] usb 3-1: SerialNumber: syz [ 2093.759778][ T493] usb 3-1: config 0 descriptor?? [ 2093.767741][ T8954] usb 9-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 2093.778045][ T8954] usb 9-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 3 [ 2093.801984][ T493] usb-storage 3-1:0.0: USB Mass Storage device detected [ 2094.177635][T11166] Bluetooth: hci0: command 0x1003 tx timeout [ 2094.183515][ T3060] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 2094.246866][T26543] netlink: 'syz.1.6960': attribute type 32 has an invalid length. [ 2094.257747][ T8954] usb 9-1: New USB device found, idVendor=046d, idProduct=08f0, bcdDevice=50.0d [ 2094.266981][ T8954] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2094.275133][ T8954] usb 9-1: Product: syz [ 2094.279623][ T8954] usb 9-1: Manufacturer: syz [ 2094.366050][ T8954] usb 9-1: SerialNumber: syz [ 2095.660541][T10095] usb 3-1: USB disconnect, device number 45 [ 2095.669508][ T8954] usb 9-1: config 0 descriptor?? [ 2095.753026][ T8954] usb-storage 9-1:0.0: USB Mass Storage device detected [ 2096.370373][T22670] usb 4-1: new high-speed USB device number 104 using dummy_hcd [ 2096.575673][T26567] bridge: RTM_NEWNEIGH with invalid ether address [ 2096.631755][T26571] device pim6reg1 entered promiscuous mode [ 2096.681019][ T8954] usb 9-1: USB disconnect, device number 80 [ 2096.942063][T26579] binder: 26568:26579 ioctl c0306201 0 returned -14 [ 2097.218770][T22670] usb 4-1: Using ep0 maxpacket: 16 [ 2097.312832][T22670] usb 4-1: device descriptor read/all, error -71 [ 2097.781038][T26594] netlink: 'syz.2.6973': attribute type 32 has an invalid length. [ 2099.164198][T26608] device pim6reg1 entered promiscuous mode [ 2099.207672][ T1681] usb 2-1: new high-speed USB device number 115 using dummy_hcd [ 2100.057844][ T1681] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 2100.117934][ T1681] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 2100.187926][ T1681] usb 2-1: New USB device found, idVendor=256c, idProduct=006d, bcdDevice= 0.00 [ 2100.228039][ T1681] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2100.286738][ T1681] usb 2-1: config 0 descriptor?? [ 2100.528370][ T3090] usb 9-1: new high-speed USB device number 81 using dummy_hcd [ 2100.840738][T25943] udevd[25943]: inotify_add_watch(7, /dev/loop0, 10) failed: No such file or directory [ 2100.947677][T22670] usb 3-1: new high-speed USB device number 46 using dummy_hcd [ 2100.987711][ T1681] usbhid 2-1:0.0: can't add hid device: -71 [ 2100.993592][ T1681] usbhid: probe of 2-1:0.0 failed with error -71 [ 2101.000577][ T1681] usb 2-1: USB disconnect, device number 115 [ 2101.007626][ T3090] usb 9-1: Using ep0 maxpacket: 16 [ 2101.127671][ T3090] usb 9-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 2101.137706][ T3090] usb 9-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 3 [ 2101.352454][ T3090] usb 9-1: New USB device found, idVendor=046d, idProduct=08f0, bcdDevice=50.0d [ 2101.361540][T22670] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 2101.372741][ T3090] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2101.381272][T22670] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 2101.397745][ T3090] usb 9-1: Product: syz [ 2101.401892][T22670] usb 3-1: New USB device found, idVendor=256c, idProduct=006d, bcdDevice= 0.00 [ 2101.408026][ T1681] usb 2-1: new high-speed USB device number 116 using dummy_hcd [ 2101.443929][ T3090] usb 9-1: Manufacturer: syz [ 2101.448470][ T3090] usb 9-1: SerialNumber: syz [ 2101.453282][T22670] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2101.462646][ T3090] usb 9-1: config 0 descriptor?? [ 2101.467999][T22670] usb 3-1: config 0 descriptor?? [ 2101.518249][ T3090] usb-storage 9-1:0.0: USB Mass Storage device detected [ 2102.477943][ T1681] usb 2-1: Using ep0 maxpacket: 16 [ 2102.658967][T26651] netlink: 'syz.5.6987': attribute type 32 has an invalid length. [ 2102.763401][T26654] device pim6reg1 entered promiscuous mode [ 2102.787761][ T1681] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 2102.799077][ T1681] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 2102.810877][ T1681] usb 2-1: New USB device found, idVendor=05ac, idProduct=8241, bcdDevice= 0.00 [ 2102.821381][ T1681] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2102.868670][ T1681] usb 2-1: config 0 descriptor?? [ 2103.018033][T26657] Illegal XDP return value 2760407541 on prog (id 3988) dev N/A, expect packet loss! [ 2103.054122][T22670] usbhid 3-1:0.0: can't add hid device: -71 [ 2103.060492][T22670] usbhid: probe of 3-1:0.0 failed with error -71 [ 2103.067928][T22670] usb 3-1: USB disconnect, device number 46 [ 2103.405061][ T9688] usb 9-1: USB disconnect, device number 81 [ 2103.409274][T26670] device pim6reg1 entered promiscuous mode [ 2103.447665][ T1681] usbhid 2-1:0.0: can't add hid device: -71 [ 2103.453786][ T1681] usbhid: probe of 2-1:0.0 failed with error -71 [ 2103.465594][ T1681] usb 2-1: USB disconnect, device number 116 [ 2103.718306][ T7904] Bluetooth: hci0: Frame reassembly failed (-84) [ 2104.681507][T26692] ip6t_rpfilter: unknown options [ 2105.842252][ T3060] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 2105.848410][ T3061] Bluetooth: hci0: command 0x1003 tx timeout [ 2106.617655][ T320] usb 9-1: new high-speed USB device number 82 using dummy_hcd [ 2106.965855][ T320] usb 9-1: Using ep0 maxpacket: 16 [ 2107.119553][ T320] usb 9-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 2107.147580][ T320] usb 9-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 3 [ 2107.311591][T26717] device pim6reg1 entered promiscuous mode [ 2107.339581][ T320] usb 9-1: New USB device found, idVendor=046d, idProduct=08f0, bcdDevice=50.0d [ 2107.359532][ T320] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2107.367379][ T320] usb 9-1: Product: syz [ 2107.389948][ T320] usb 9-1: Manufacturer: syz [ 2107.406004][ T320] usb 9-1: SerialNumber: syz [ 2107.438391][ T320] usb 9-1: config 0 descriptor?? [ 2107.498163][ T320] usb-storage 9-1:0.0: USB Mass Storage device detected [ 2107.693383][T26728] binder: 26721:26728 ioctl c0306201 0 returned -14 [ 2107.871211][ T1681] usb 9-1: USB disconnect, device number 82 [ 2110.202383][ T376] usb 9-1: new low-speed USB device number 83 using dummy_hcd [ 2110.237596][T26708] usb 6-1: new high-speed USB device number 71 using dummy_hcd [ 2110.473812][T26752] ip6t_rpfilter: unknown options [ 2110.737629][ T376] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 2110.771037][ T376] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 2110.807086][ T376] usb 9-1: New USB device found, idVendor=1038, idProduct=1410, bcdDevice= 0.00 [ 2110.827594][ T376] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2110.837659][T26708] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 2110.838231][ T376] usb 9-1: config 0 descriptor?? [ 2110.857865][T26708] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 2110.877603][T26708] usb 6-1: New USB device found, idVendor=256c, idProduct=006d, bcdDevice= 0.00 [ 2110.904165][T26708] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2110.930172][T26708] usb 6-1: config 0 descriptor?? [ 2111.172187][T26757] device pim6reg1 entered promiscuous mode [ 2111.355873][T26746] incfs: Error accessing: ./bus. [ 2111.368812][T26746] incfs: mount failed -2 [ 2111.515746][T26708] hid (null): bogus close delimiter [ 2111.639998][ T376] steelseries_srws1 0003:1038:1410.0089: unknown main item tag 0xd [ 2111.651425][ T376] steelseries_srws1 0003:1038:1410.0089: item fetching failed at offset 6/7 [ 2111.673086][ T376] steelseries_srws1 0003:1038:1410.0089: parse failed [ 2111.685919][ T376] steelseries_srws1: probe of 0003:1038:1410.0089 failed with error -22 [ 2111.718164][T26708] usb 6-1: string descriptor 0 read error: -22 [ 2111.785356][T26746] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2111.830986][T26746] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2111.959295][T26708] input: HID 256c:006d Pen as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:0.0/0003:256C:006D.0088/input/input144 [ 2112.267969][T26746] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2112.278474][T26708] input: HID 256c:006d Pad as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:0.0/0003:256C:006D.0088/input/input145 [ 2112.311659][T26746] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2112.350873][T26708] input: HID 256c:006d Touch Strip as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:0.0/0003:256C:006D.0088/input/input146 [ 2112.414611][T26708] input: HID 256c:006d Dial as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:0.0/0003:256C:006D.0088/input/input147 [ 2112.479270][T26708] uclogic 0003:256C:006D.0088: input,hiddev96,hidraw0: USB HID v0.00 Keypad [HID 256c:006d] on usb-dummy_hcd.5-1/input0 [ 2112.514371][T26708] usb 6-1: USB disconnect, device number 71 [ 2112.528053][T18499] usb 9-1: USB disconnect, device number 83 [ 2113.184683][T25943] udevd[25943]: inotify_add_watch(7, /dev/loop0, 10) failed: No such file or directory [ 2113.540590][ T9688] usb 4-1: new high-speed USB device number 106 using dummy_hcd [ 2113.590630][T26798] device pim6reg1 entered promiscuous mode [ 2114.133147][T16201] Bluetooth: hci0: Frame reassembly failed (-84) [ 2114.207672][ T9688] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 2114.228003][ T9688] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 2114.402108][ T9688] usb 4-1: New USB device found, idVendor=0f30, idProduct=0111, bcdDevice= 0.00 [ 2114.490137][ T9688] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2114.547109][ T9688] usb 4-1: config 0 descriptor?? [ 2114.837605][T23162] usb 9-1: new high-speed USB device number 84 using dummy_hcd [ 2115.038611][ T9688] pantherlord 0003:0F30:0111.008A: item fetching failed at offset 6/7 [ 2115.046879][ T9688] pantherlord 0003:0F30:0111.008A: parse failed [ 2115.112004][ T9688] pantherlord: probe of 0003:0F30:0111.008A failed with error -22 [ 2115.127649][T23162] usb 9-1: Using ep0 maxpacket: 16 [ 2115.226415][T26833] overlayfs: option "workdir=./bus" is useless in a non-upper mount, ignore [ 2115.235142][T26833] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent [ 2115.247788][T23162] usb 9-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 2115.267378][T23162] usb 9-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 3 [ 2115.443988][ T493] usb 4-1: USB disconnect, device number 106 [ 2115.457742][T23162] usb 9-1: New USB device found, idVendor=046d, idProduct=08f0, bcdDevice=50.0d [ 2115.467066][T23162] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2115.475142][T23162] usb 9-1: Product: syz [ 2115.479158][T23162] usb 9-1: Manufacturer: syz [ 2115.483518][T23162] usb 9-1: SerialNumber: syz [ 2115.488604][T23162] usb 9-1: config 0 descriptor?? [ 2115.528131][T23162] usb-storage 9-1:0.0: USB Mass Storage device detected [ 2115.774280][T26838] device pim6reg1 entered promiscuous mode [ 2116.783157][ T3060] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 2116.790897][T11166] Bluetooth: hci0: command 0x1003 tx timeout [ 2117.223436][ T376] usb 9-1: USB disconnect, device number 84 [ 2117.283513][T26862] netlink: 'syz.5.7049': attribute type 32 has an invalid length. [ 2118.584395][T26880] ip6t_rpfilter: unknown options [ 2118.797590][ T376] usb 9-1: new high-speed USB device number 85 using dummy_hcd [ 2119.369864][T26890] binder: 26886:26890 ioctl c0306201 0 returned -14 [ 2120.390640][T26891] overlayfs: option "workdir=./bus" is useless in a non-upper mount, ignore [ 2120.399269][T26891] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent [ 2120.768077][ T376] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 2120.801579][ T376] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 2120.856633][T26900] bridge: RTM_NEWNEIGH with invalid ether address [ 2120.940542][ T376] usb 9-1: New USB device found, idVendor=256c, idProduct=006d, bcdDevice= 0.00 [ 2120.971795][ T376] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2120.983728][ T376] usb 9-1: config 0 descriptor?? [ 2121.427698][ T376] usb 9-1: can't set config #0, error -71 [ 2121.439296][ T376] usb 9-1: USB disconnect, device number 85 [ 2121.637846][T26912] ip6t_rpfilter: unknown options [ 2122.614296][T26919] device pim6reg1 entered promiscuous mode [ 2122.627370][T23162] usb 2-1: new high-speed USB device number 117 using dummy_hcd [ 2124.107613][T23162] usb 2-1: unable to read config index 0 descriptor/start: -71 [ 2124.918758][T23162] usb 2-1: can't read configurations, error -71 [ 2125.539261][T26956] ip6t_rpfilter: unknown options [ 2126.224636][T23162] usb 2-1: new high-speed USB device number 118 using dummy_hcd [ 2126.577829][T23162] usb 2-1: Using ep0 maxpacket: 16 [ 2126.697649][T23162] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 2126.716838][T23162] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 2126.741249][T23162] usb 2-1: New USB device found, idVendor=05ac, idProduct=8241, bcdDevice= 0.00 [ 2126.766864][T23162] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2126.797136][T23162] usb 2-1: config 0 descriptor?? [ 2127.347819][T23162] usbhid 2-1:0.0: can't add hid device: -71 [ 2127.361303][T23162] usbhid: probe of 2-1:0.0 failed with error -71 [ 2127.391367][T23162] usb 2-1: USB disconnect, device number 118 [ 2127.607678][T18499] usb 4-1: new low-speed USB device number 107 using dummy_hcd [ 2127.737596][ T320] usb 9-1: new high-speed USB device number 86 using dummy_hcd [ 2127.987662][ T320] usb 9-1: Using ep0 maxpacket: 16 [ 2127.992723][T18499] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 2128.003810][T18499] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 2128.013634][T18499] usb 4-1: New USB device found, idVendor=1038, idProduct=1410, bcdDevice= 0.00 [ 2128.022731][T18499] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2128.649359][ T320] usb 9-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 2128.928215][T27006] device pim6reg1 entered promiscuous mode [ 2128.952158][T18499] usb 4-1: config 0 descriptor?? [ 2128.957282][ T320] usb 9-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 3 [ 2131.049905][ T320] usb 9-1: New USB device found, idVendor=046d, idProduct=08f0, bcdDevice=50.0d [ 2132.199563][ T320] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2132.208036][ T320] usb 9-1: Product: syz [ 2132.212124][ T320] usb 9-1: Manufacturer: syz [ 2132.216735][ T320] usb 9-1: SerialNumber: syz [ 2132.225536][ T320] usb 9-1: config 0 descriptor?? [ 2132.256484][ T320] usb 9-1: can't set config #0, error -71 [ 2132.269195][ T320] usb 9-1: USB disconnect, device number 86 [ 2132.298461][T18499] usbhid 4-1:0.0: can't add hid device: -71 [ 2132.304246][T18499] usbhid: probe of 4-1:0.0 failed with error -71 [ 2132.370908][T18499] usb 4-1: USB disconnect, device number 107 [ 2132.517337][T27036] binder: 27025:27036 ioctl c0306201 0 returned -14 [ 2133.308309][T27038] binder: 27028:27038 ioctl c0306201 0 returned -14 [ 2136.255434][T27055] ip6t_rpfilter: unknown options [ 2136.714465][T27066] device pim6reg1 entered promiscuous mode [ 2136.822728][T27069] ip6t_rpfilter: unknown options [ 2141.261664][ T500] Bluetooth: hci0: Frame reassembly failed (-84) [ 2141.883646][T27104] ip6t_rpfilter: unknown options [ 2142.193816][ T320] usb 3-1: new low-speed USB device number 47 using dummy_hcd [ 2142.263080][T27113] device pim6reg1 entered promiscuous mode [ 2143.297589][T11166] Bluetooth: hci0: command 0x1003 tx timeout [ 2143.297638][ T3060] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 2143.399048][ T320] usb 3-1: unable to read config index 0 descriptor/start: -71 [ 2143.541060][ T320] usb 3-1: can't read configurations, error -71 [ 2143.802765][T27135] device pim6reg1 entered promiscuous mode [ 2143.901358][T27142] ip6t_rpfilter: unknown options [ 2144.143157][T27152] netlink: 'syz.2.7129': attribute type 32 has an invalid length. [ 2144.232739][T14298] usb 9-1: new high-speed USB device number 87 using dummy_hcd [ 2144.256800][T27154] ip6t_rpfilter: unknown options [ 2145.959449][T14298] usb 9-1: Using ep0 maxpacket: 16 [ 2146.077755][T14298] usb 9-1: New USB device found, idVendor=0582, idProduct=007d, bcdDevice=a3.85 [ 2146.086936][T14298] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2146.121540][T14298] usb 9-1: config 0 descriptor?? [ 2147.537647][T14298] usb 9-1: can't set config #0, error -71 [ 2147.583150][T14298] usb 9-1: USB disconnect, device number 87 [ 2148.068453][T27075] udevd[27075]: inotify_add_watch(7, /dev/loop0, 10) failed: No such file or directory [ 2148.278955][T27199] ip6t_rpfilter: unknown options [ 2149.280318][T27207] binder: 27203:27207 ioctl c0306201 0 returned -14 [ 2149.508259][ T320] usb 3-1: new high-speed USB device number 49 using dummy_hcd [ 2149.777666][ T320] usb 3-1: Using ep0 maxpacket: 16 [ 2149.926413][ T320] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 2149.938198][ T320] usb 3-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 3 [ 2150.247884][ T320] usb 3-1: New USB device found, idVendor=046d, idProduct=08f0, bcdDevice=50.0d [ 2150.258920][ T320] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2150.271932][ T320] usb 3-1: Product: syz [ 2150.277682][ T493] usb 6-1: new high-speed USB device number 73 using dummy_hcd [ 2150.278035][ T320] usb 3-1: Manufacturer: syz [ 2150.297752][ T320] usb 3-1: SerialNumber: syz [ 2150.309006][ T320] usb 3-1: config 0 descriptor?? [ 2150.358021][ T320] usb-storage 3-1:0.0: USB Mass Storage device detected [ 2150.698264][T27229] ip6t_rpfilter: unknown options [ 2151.341979][ T493] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 2151.353118][ T493] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 2151.362934][ T493] usb 6-1: New USB device found, idVendor=256c, idProduct=006d, bcdDevice= 0.00 [ 2151.371977][ T493] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2151.441576][ T493] usb 6-1: config 0 descriptor?? [ 2151.628507][ T500] Bluetooth: hci0: Frame reassembly failed (-84) [ 2151.651699][ T500] Bluetooth: hci0: Frame reassembly failed (-84) [ 2151.897600][T26708] usb 4-1: new high-speed USB device number 108 using dummy_hcd [ 2151.987851][ T493] hid (null): bogus close delimiter [ 2152.187628][T26708] usb 4-1: Using ep0 maxpacket: 16 [ 2152.207681][ T493] usb 6-1: string descriptor 0 read error: -22 [ 2152.276399][T27245] device pim6reg1 entered promiscuous mode [ 2152.317470][ T320] usb 3-1: USB disconnect, device number 49 [ 2152.347701][T26708] usb 4-1: New USB device found, idVendor=0582, idProduct=007d, bcdDevice=a3.85 [ 2152.356812][T26708] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2152.387143][T26708] usb 4-1: config 0 descriptor?? [ 2152.449560][ T493] input: HID 256c:006d Pen as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:0.0/0003:256C:006D.008B/input/input148 [ 2152.463163][ T493] input: HID 256c:006d Pad as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:0.0/0003:256C:006D.008B/input/input149 [ 2152.476584][ T493] input: HID 256c:006d Touch Strip as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:0.0/0003:256C:006D.008B/input/input150 [ 2152.505103][ T493] input: HID 256c:006d Dial as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:0.0/0003:256C:006D.008B/input/input151 [ 2152.524207][ T493] uclogic 0003:256C:006D.008B: input,hiddev96,hidraw0: USB HID v0.00 Keypad [HID 256c:006d] on usb-dummy_hcd.5-1/input0 [ 2152.794717][ T493] usb 6-1: USB disconnect, device number 73 [ 2153.427612][T26708] usb 9-1: new high-speed USB device number 88 using dummy_hcd [ 2153.537708][T14298] usb 6-1: new high-speed USB device number 74 using dummy_hcd [ 2153.617593][ T3060] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 2153.993258][T26708] usb 9-1: Using ep0 maxpacket: 16 [ 2154.047978][T14298] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 2154.059423][T14298] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 2154.069212][T14298] usb 6-1: New USB device found, idVendor=256c, idProduct=006d, bcdDevice= 0.00 [ 2154.078514][T14298] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2154.108631][T14298] usb 6-1: config 0 descriptor?? [ 2154.157650][T26708] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 2154.168529][T26708] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 2154.178159][T26708] usb 9-1: New USB device found, idVendor=1fd2, idProduct=6007, bcdDevice= 0.00 [ 2154.216475][T26708] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2154.226050][T26708] usb 9-1: config 0 descriptor?? [ 2154.428841][T27277] ip6t_rpfilter: unknown options [ 2154.714750][T14298] hid (null): bogus close delimiter [ 2154.898144][T14298] usb 6-1: string descriptor 0 read error: -22 [ 2155.040766][T26708] hid-multitouch 0003:1FD2:6007.008D: hidraw0: USB HID v0.00 Device [HID 1fd2:6007] on usb-dummy_hcd.8-1/input0 [ 2155.162317][T14298] input: HID 256c:006d Pen as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:0.0/0003:256C:006D.008C/input/input152 [ 2155.175945][ T493] usb 9-1: USB disconnect, device number 88 [ 2155.183287][T14298] input: HID 256c:006d Pad as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:0.0/0003:256C:006D.008C/input/input153 [ 2155.197322][T19024] usb 4-1: USB disconnect, device number 108 [ 2155.338348][T14298] input: HID 256c:006d Touch Strip as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:0.0/0003:256C:006D.008C/input/input154 [ 2155.363713][T14298] input: HID 256c:006d Dial as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:0.0/0003:256C:006D.008C/input/input155 [ 2155.383661][T14298] uclogic 0003:256C:006D.008C: input,hiddev96,hidraw0: USB HID v0.00 Keypad [HID 256c:006d] on usb-dummy_hcd.5-1/input0 [ 2155.407905][T14298] usb 6-1: USB disconnect, device number 74 [ 2155.484042][T27291] ip6t_rpfilter: unknown options [ 2156.961146][T17395] Bluetooth: hci0: Frame reassembly failed (-84) [ 2157.051902][T17395] Bluetooth: hci0: Frame reassembly failed (-84) [ 2157.683608][T27336] ip6t_rpfilter: unknown options [ 2158.392185][T27355] ip6t_rpfilter: unknown options [ 2158.601976][T14298] usb 3-1: new low-speed USB device number 50 using dummy_hcd [ 2159.007681][ T3060] Bluetooth: hci0: command 0x1003 tx timeout [ 2159.007724][ T3061] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 2159.028348][T14298] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 2159.079043][T14298] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 2159.088811][T14298] usb 3-1: New USB device found, idVendor=1038, idProduct=1410, bcdDevice= 0.00 [ 2159.102221][T14298] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2159.265292][T14298] usb 3-1: config 0 descriptor?? [ 2159.829833][T27346] incfs: Error accessing: ./bus. [ 2159.834646][T27346] incfs: mount failed -2 [ 2159.858598][T14298] steelseries_srws1 0003:1038:1410.008E: unknown main item tag 0xd [ 2159.874754][T14298] steelseries_srws1 0003:1038:1410.008E: item fetching failed at offset 6/7 [ 2160.040608][T14298] steelseries_srws1 0003:1038:1410.008E: parse failed [ 2160.055648][T14298] steelseries_srws1: probe of 0003:1038:1410.008E failed with error -22 [ 2160.069971][T27346] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2160.127676][T27346] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2160.534708][T27346] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2160.648064][T27346] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2160.708051][ T3217] usb 3-1: USB disconnect, device number 50 [ 2160.720916][T27394] netlink: 'syz.1.7197': attribute type 32 has an invalid length. [ 2160.870670][T14298] usb 9-1: new high-speed USB device number 89 using dummy_hcd [ 2161.327700][T14298] usb 9-1: Using ep0 maxpacket: 16 [ 2161.447777][T14298] usb 9-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 2161.458512][T14298] usb 9-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 3 [ 2161.991492][T14298] usb 9-1: New USB device found, idVendor=046d, idProduct=08f0, bcdDevice=50.0d [ 2162.457615][T14298] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2162.467938][T14298] usb 9-1: Product: syz [ 2162.471949][T14298] usb 9-1: Manufacturer: syz [ 2162.480520][T14298] usb 9-1: SerialNumber: syz [ 2162.558141][T14298] usb 9-1: config 0 descriptor?? [ 2162.610690][T14298] usb-storage 9-1:0.0: USB Mass Storage device detected [ 2162.658726][T27429] ip6t_rpfilter: unknown options [ 2163.155005][T27441] device pim6reg1 entered promiscuous mode [ 2163.283777][T27447] netlink: 24 bytes leftover after parsing attributes in process `syz.3.7212'. [ 2163.312435][T27449] netlink: 'syz.3.7214': attribute type 32 has an invalid length. [ 2164.840707][T26708] usb 9-1: USB disconnect, device number 89 [ 2164.853128][T27457] device pim6reg1 entered promiscuous mode [ 2165.159443][T27465] binder: 27460:27465 ioctl c0306201 0 returned -14 [ 2165.622954][T14298] usb 2-1: new high-speed USB device number 119 using dummy_hcd [ 2165.810983][T27475] ip6t_rpfilter: unknown options [ 2166.157729][T14298] usb 2-1: Using ep0 maxpacket: 16 [ 2166.357671][T14298] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 2166.402883][T14298] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 2166.419483][T14298] usb 2-1: New USB device found, idVendor=1fd2, idProduct=6007, bcdDevice= 0.00 [ 2166.428764][T14298] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2166.446097][T14298] usb 2-1: config 0 descriptor?? [ 2166.687687][T27491] ip6t_rpfilter: unknown options [ 2167.566355][T27496] netlink: 'syz.5.7227': attribute type 32 has an invalid length. [ 2167.584992][T14298] hid-multitouch 0003:1FD2:6007.008F: hidraw0: USB HID v0.00 Device [HID 1fd2:6007] on usb-dummy_hcd.1-1/input0 [ 2167.627801][T14298] usb 2-1: USB disconnect, device number 119 [ 2170.480185][T27533] ip6t_rpfilter: unknown options [ 2170.872649][ T28] audit: type=1400 audit(1732128736.497:4934): avc: denied { read } for pid=27534 comm="poweroff" name="log" dev="sda1" ino=1915 scontext=system_u:system_r:acpid_t tcontext=system_u:object_r:var_t tclass=lnk_file permissive=1 [ 2171.451371][T27544] udevd[27544]: inotify_add_watch(7, /dev/loop0, 10) failed: No such file or directory [ 2173.814224][T27577] binder: 27572:27577 ioctl c0306201 0 returned -14 Connection to 10.128.1.143 closed by remote host. [ 2175.063892][ T28] audit: type=1400 audit(1732128740.667:4935): avc: denied { execmem } for pid=27593 comm="syz.2.7252" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1 [ 2175.275590][T27613] ip6t_rpfilter: unknown options [ 2175.540661][ T28] audit: type=1400 audit(1732128741.167:4936): avc: denied { search } for pid=85 comm="syslogd" name="/" dev="tmpfs" ino=1 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 2175.715097][ T28] audit: type=1400 audit(1732128741.297:4937): avc: denied { read write } for pid=27604 comm="syz.5.7255" name="raw-gadget" dev="devtmpfs" ino=254 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 2176.747974][ T28] audit: type=1400 audit(1732128741.297:4938): avc: denied { open } for pid=27604 comm="syz.5.7255" path="/dev/raw-gadget" dev="devtmpfs" ino=254 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 2176.784242][ T28] audit: type=1400 audit(1732128741.297:4939): avc: denied { ioctl } for pid=27604 comm="syz.5.7255" path="/dev/raw-gadget" dev="devtmpfs" ino=254 ioctlcmd=0x5500 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 2176.817581][T14298] usb 6-1: new high-speed USB device number 75 using dummy_hcd [ 2177.084859][ T28] audit: type=1400 audit(1732128742.707:4940): avc: denied { search } for pid=141 comm="dhcpcd" name="/" dev="tmpfs" ino=1 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 2177.106906][ T28] audit: type=1400 audit(1732128742.707:4941): avc: denied { write } for pid=141 comm="dhcpcd" name="dhcpcd" dev="tmpfs" ino=415 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 2177.112353][T14298] usb 6-1: Using ep0 maxpacket: 16 [ 2177.128668][ T28] audit: type=1400 audit(1732128742.707:4942): avc: denied { remove_name } for pid=141 comm="dhcpcd" name="sock" dev="tmpfs" ino=417 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 2177.160000][ T28] audit: type=1400 audit(1732128742.707:4943): avc: denied { unlink } for pid=141 comm="dhcpcd" name="sock" dev="tmpfs" ino=417 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=sock_file permissive=1 [ 2177.183509][ T28] audit: type=1400 audit(1732128742.707:4944): avc: denied { unlink } for pid=141 comm="dhcpcd" name="pid" dev="tmpfs" ino=416 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 2177.277793][T14298] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 2177.318433][T14298] usb 6-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 3 [ 2177.400916][ T320] usb 4-1: new high-speed USB device number 109 using dummy_hcd [ 2177.427807][ T28] audit: type=1400 audit(1732128743.037:4945): avc: denied { search } for pid=27647 comm="iptables" name="/" dev="tmpfs" ino=1 scontext=system_u:system_r:iptables_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 2177.462530][ T28] audit: type=1400 audit(1732128743.037:4946): avc: denied { write } for pid=27647 comm="iptables" name="/" dev="tmpfs" ino=1 scontext=system_u:system_r:iptables_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 2177.484449][ T28] audit: type=1400 audit(1732128743.037:4947): avc: denied { add_name } for pid=27647 comm="iptables" name="xtables.lock" scontext=system_u:system_r:iptables_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 2177.767695][T14298] usb 6-1: New USB device found, idVendor=046d, idProduct=08f0, bcdDevice=50.0d [ 2177.800596][T14298] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2177.808819][ T320] usb 4-1: Using ep0 maxpacket: 16 [ 2178.136375][T27669] ip6t_rpfilter: unknown options [ 2178.150561][T14298] usb 6-1: Product: syz [ 2178.154774][T14298] usb 6-1: Manufacturer: syz [ 2178.159405][T14298] usb 6-1: SerialNumber: syz [ 2178.229361][T14298] usb 6-1: config 0 descriptor?? [ 2178.247635][T14298] usb 6-1: can't set config #0, error -71 [ 2178.255406][T14298] usb 6-1: USB disconnect, device number 75 [ 2178.287613][ T320] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 2178.950469][ T320] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 2178.960146][ T320] usb 4-1: New USB device found, idVendor=1fd2, idProduct=6007, bcdDevice= 0.00 [ 2178.969055][ T320] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2178.977803][ T320] usb 4-1: config 0 descriptor?? [ 2179.418181][T27696] device pim6reg1 entered promiscuous mode [ 2179.599599][T27705] ip6t_rpfilter: unknown options [ 2180.619537][ T320] hid-multitouch 0003:1FD2:6007.0090: hidraw0: USB HID v0.00 Device [HID 1fd2:6007] on usb-dummy_hcd.3-1/input0 [ 2182.042613][ T320] usb 4-1: USB disconnect, device number 109 [ 2182.459152][T27720] ip6t_rpfilter: unknown options [ 2183.478140][ T500] device bridge_slave_1 left promiscuous mode [ 2183.484183][ T500] bridge0: port 2(bridge_slave_1) entered disabled state [ 2183.492423][ T500] device bridge_slave_0 left promiscuous mode [ 2183.498513][ T500] bridge0: port 1(bridge_slave_0) entered disabled state [ 2183.506195][ T500] device veth1_macvtap left promiscuous mode [ 2183.512060][ T500] device veth0_vlan left promiscuous mode [ 2184.278677][ T500] device bridge_slave_1 left promiscuous mode [ 2184.284619][ T500] bridge0: port 2(bridge_slave_1) entered disabled state [ 2184.291922][ T500] device bridge_slave_0 left promiscuous mode [ 2184.297862][ T500] bridge0: port 1(bridge_slave_0) entered disabled state [ 2184.305521][ T500] device bridge_slave_1 left promiscuous mode [ 2184.311473][ T500] bridge0: port 2(bridge_slave_1) entered disabled state [ 2184.318665][ T500] device bridge_slave_0 left promiscuous mode [ 2184.324580][ T500] bridge0: port 1(bridge_slave_0) entered disabled state [ 2184.332341][ T500] device bridge_slave_1 left promiscuous mode [ 2184.338325][ T500] bridge0: port 2(bridge_slave_1) entered disabled state [ 2184.345801][ T500] device bridge_slave_0 left promiscuous mode [ 2184.351788][ T500] bridge0: port 1(bridge_slave_0) entered disabled state [ 2184.359430][ T500] device bridge_slave_1 left promiscuous mode [ 2184.365541][ T500] bridge0: port 2(bridge_slave_1) entered disabled state [ 2184.372878][ T500] device bridge_slave_0 left promiscuous mode [ 2184.378906][ T500] bridge0: port 1(bridge_slave_0) entered disabled state [ 2184.387284][ T500] device veth1_macvtap left promiscuous mode [ 2184.393148][ T500] device veth0_vlan left promiscuous mode [ 2184.399089][ T500] device veth1_macvtap left promiscuous mode [ 2184.404900][ T500] device veth0_vlan left promiscuous mode [ 2184.410889][ T500] device veth1_macvtap left promiscuous mode [ 2184.416705][ T500] device veth0_vlan left promiscuous mode [ 2184.422667][ T500] device veth1_macvtap left promiscuous mode [ 2184.428668][ T500] device veth0_vlan left promiscuous mode [ 2184.860296][T27736] kvm: exiting hardware virtualization [ 2184.866522][T27736] sd 0:0:1:0: [sda] Synchronizing SCSI cache [ 2184.873032][T27736] ACPI: PM: Preparing to enter system sleep state S5 [ 2184.879855][T27736] reboot: Power down serialport: VM disconnected.