last executing test programs: 22m3.566025984s ago: executing program 32 (id=14): socket$nl_route(0x10, 0x3, 0x0) socket(0xa, 0x3, 0x3a) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e24}, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x6, 0x8, 0x8001, 0x0, 0x9, 0x4, 0x1, 0xfa14, 0xffffffff}, 0x0) ioctl$VIDIOC_S_FMT(0xffffffffffffffff, 0xc0d05605, 0x0) madvise(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x16) r2 = userfaultfd(0x80000) ioctl$UFFDIO_API(r2, 0xc018aa3f, 0x0) ioctl$UFFDIO_REGISTER(r2, 0xc020aa00, &(0x7f0000000000)={{&(0x7f0000400000/0xc00000)=nil, 0xc00000}, 0x3}) r3 = socket$pppl2tp(0x18, 0x1, 0x1) r4 = socket$inet6_udp(0xa, 0x2, 0x0) connect$pppl2tp(r3, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x3, r4, {0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x20}}, 0x2}}, 0x2e) r5 = fsopen(&(0x7f00000001c0)='ramfs\x00', 0x1) fsconfig$FSCONFIG_CMD_CREATE(r5, 0x6, 0x0, 0x0, 0x0) r6 = fsmount(r5, 0x0, 0x86) fchdir(r6) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x20) symlink(0x0, &(0x7f0000000340)='./file0/file0\x00') mkdir(&(0x7f0000000680)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0) rename(&(0x7f0000000580)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', &(0x7f0000000200)='./file0\x00') socket$nl_netfilter(0x10, 0x3, 0xc) syz_open_dev$cec(&(0x7f0000000000), 0xffffffffffffffff, 0xc0c00) syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') socketpair$unix(0x1, 0x2, 0x0, 0x0) 21m14.364338886s ago: executing program 33 (id=65): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) capset(0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000007c0), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r2, 0xaf01, 0x0) r3 = eventfd(0x0) ioctl$VHOST_SET_VRING_BASE(r2, 0x4008af12, &(0x7f0000000080)={0x1, 0x7f}) ioctl$VHOST_SET_LOG_FD(r2, 0x4004af07, &(0x7f0000000240)=r3) ioctl$VHOST_SET_VRING_KICK(r2, 0x4008af20, &(0x7f0000000040)={0x1, r3}) ioctl$VHOST_SET_VRING_ADDR(r2, 0x4028af11, &(0x7f0000000140)={0x0, 0x0, 0x0, &(0x7f0000000180)=""/53, 0x0}) ioctl$VHOST_SET_VRING_ADDR(r2, 0x4028af11, &(0x7f0000000280)={0x1, 0x1, &(0x7f0000000380)=""/247, &(0x7f00000000c0)=""/87, &(0x7f0000000800)=""/90}) ioctl$VHOST_SET_MEM_TABLE(r2, 0x4008af03, &(0x7f0000001cc0)={0x2, 0x0, [{0x0, 0x24, &(0x7f0000000000)=""/36}, {0x0, 0xffb, &(0x7f0000001d80)=""/4091}]}) ioctl$VHOST_VSOCK_SET_RUNNING(r2, 0x4004af61, &(0x7f0000000340)=0x1) ioctl$BTRFS_IOC_SCRUB_PROGRESS(r2, 0xc400941d, &(0x7f0000000380)={0x0, 0x3ff, 0x5}) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0xd18c9b25, &(0x7f0000000080)=[{&(0x7f0000000040)="e03f030041000b05d25a806c8c6394f90324fc60100000000a000200053582c137153e3704020180fc5409000c00", 0x33fe0}], 0x1}, 0x0) 20m26.624156095s ago: executing program 34 (id=102): syz_usb_connect$cdc_ecm(0x0, 0x4d, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000020000402505a5a440000000010109023b000101000000090400001202060000052406000005240000000d240f01000000000000000000090582020002"], 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f00000000c0)=@abs={0x0, 0x0, 0x4e24}, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) lseek(0xffffffffffffffff, 0x6, 0x0) 15m29.130260552s ago: executing program 5 (id=413): r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$TCSBRKP(r0, 0x5425, 0x2000000) 15m28.497811049s ago: executing program 3 (id=414): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f00000003c0)={0xa, 0x4e22, 0x0, @empty}, 0x1c) ioctl$TCSETSF(0xffffffffffffffff, 0x5404, 0x0) listen(r0, 0x4) ppoll(&(0x7f0000001300)=[{r0, 0x102}], 0x1, 0x0, 0x0, 0x0) r1 = socket$netlink(0x10, 0x3, 0x4) close(0x3) getsockopt$inet_sctp6_SCTP_DELAYED_SACK(0xffffffffffffffff, 0x84, 0x10, 0x0, 0x0) writev(r1, &(0x7f0000000080)=[{0x0}], 0x1) 15m27.643524982s ago: executing program 5 (id=415): madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0xe) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) mprotect(&(0x7f0000293000/0x4000)=nil, 0x4000, 0x2) prctl$PR_SET_IO_FLUSHER(0x43, 0x1) prctl$PR_SET_IO_FLUSHER(0x43, 0x0) 15m26.953649676s ago: executing program 3 (id=416): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000680)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWSET={0x38, 0x9, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x4}, [@NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x2}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ID={0x8, 0xa, 0x1, 0x0, 0xfffffffc}, @NFTA_SET_FLAGS={0x8, 0x3, 0x1, 0x0, 0x10}]}, @NFT_MSG_NEWSETELEM={0x40, 0xc, 0xa, 0x101, 0x0, 0x0, {0xa, 0x0, 0x6}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x14, 0x3, 0x0, 0x1, [{0x10, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_KEY={0xc, 0x1, 0x0, 0x1, [@NFTA_DATA_VALUE={0x6, 0x1, "d103"}]}]}]}]}, @NFT_MSG_DELSETELEM={0x2c, 0xe, 0xa, 0x201, 0x0, 0x0, {0xa}, [@NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0xcc}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) 15m26.287167117s ago: executing program 3 (id=417): socket$kcm(0x10, 0x3, 0x10) open(&(0x7f0000000000)='./bus\x00', 0x1a1043, 0xc5) r0 = getuid() quotactl$Q_QUOTAON(0xffffffff80000200, &(0x7f00000002c0)=@loop={'/dev/loop', 0x0}, r0, &(0x7f0000000300)='./bus\x00') r1 = socket$inet(0x2, 0x3, 0x2) setsockopt$inet_mreqsrc(r1, 0x0, 0x27, &(0x7f0000000280)={@multicast2, @local, @remote}, 0xc) r2 = socket$inet(0x2, 0x3, 0x2) setsockopt$inet_mreqsrc(r2, 0x0, 0x27, &(0x7f0000000040)={@multicast2, @local, @loopback}, 0xc) setsockopt$packet_fanout_data(0xffffffffffffffff, 0x107, 0x16, 0x0, 0x0) setsockopt$inet_msfilter(r2, 0x0, 0x29, &(0x7f0000000180)=ANY=[], 0x18) syz_emit_ethernet(0x36, &(0x7f0000001800)={@link_local, @local, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x28, 0x64, 0x0, 0x4, 0x2, 0x0, @empty, @multicast2}, @timestamp_reply={0x11, 0x0, 0x0, 0xe000, 0x2, 0x2, 0x4}}}}}, 0x0) setsockopt$inet_msfilter(r1, 0x0, 0x29, &(0x7f00000000c0)=ANY=[@ANYBLOB="e0000002ac1414aa"], 0x1c) syz_emit_ethernet(0x36, &(0x7f0000001800)={@link_local, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x32}, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x28, 0x64, 0x0, 0x4, 0x2, 0x0, @empty, @multicast2}, @timestamp_reply={0x11, 0x0, 0x0, 0xe000, 0x2, 0x10001}}}}}, 0x0) 15m26.129869668s ago: executing program 5 (id=418): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) close(r0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) close(r1) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={0x0, 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r2, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a4c000000090a010400000000000000000a0000040900010073797a310000000008000540000000020900020073797a310000000008000a40fffffffc080003400000001408000c4000000e45400000000c0a010100000000000000000a0000060900020073797a31000000000900010073797a310000000014000380100000800c00018006000100d103000014000000110001"], 0xb4}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) sendmsg$NFT_BATCH(r1, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000002c0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWSETELEM={0x40, 0xc, 0xa, 0x801, 0x0, 0x0, {0xa, 0x0, 0x6}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x14, 0x3, 0x0, 0x1, [{0x10, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_KEY={0xc, 0x1, 0x0, 0x1, [@NFTA_DATA_VALUE={0x6, 0x1, "901f"}]}]}]}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x3}}}, 0x68}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000500)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a480000000c0a010100000000000000000a0000060900020073797a31000000000900010073797a31000000001c000380180000800c000180060001"], 0x70}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) 15m25.377491446s ago: executing program 3 (id=420): r0 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r0, 0x10f, 0x87, &(0x7f0000000140)=@req={0x82, 0x57b3, 0x3, 0x9}, 0x10) recvmmsg$unix(r0, &(0x7f0000004400)=[{{0x0, 0x0, &(0x7f0000001480)=[{0x0}], 0x1}}], 0x1, 0x0, 0x0) sendmmsg(r0, &(0x7f00000030c0)=[{{0x0, 0xa9cc7003, &(0x7f0000000400)=[{&(0x7f00000000c0)="ee", 0x101d0}], 0x1}}], 0x400000000000181, 0x9200000000000000) sendmsg$netlink(0xffffffffffffffff, &(0x7f0000005d80)={0x0, 0x0, &(0x7f00000000c0)=[{0x0, 0x28}, {0x0}], 0x2, 0x0, 0x0, 0x8010}, 0x40830) 15m25.182746447s ago: executing program 5 (id=421): r0 = syz_open_dev$vbi(&(0x7f00000002c0), 0x0, 0x2) ioctl$VIDIOC_S_INPUT(r0, 0xc0045627, &(0x7f00000000c0)=0x2) preadv(r0, &(0x7f0000000740)=[{&(0x7f0000000340)=""/162, 0xca80}], 0x1, 0x80000001, 0x3f7a) 15m23.858510286s ago: executing program 3 (id=422): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000400)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_CONTROL_PORT_FRAME(r0, &(0x7f0000003700)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000440)=ANY=[@ANYBLOB, @ANYRES16=r1, @ANYBLOB="0100000000fb080000008100000008000300", @ANYRES32=r2, @ANYBLOB="060066008e8800000a0006000802110000010000100133"], 0x140}}, 0x4854) 15m23.757524235s ago: executing program 5 (id=423): r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000340)={0x1, &(0x7f0000000000)=[{0x6, 0xf, 0x0, 0x7fff8000}]}) close_range(r0, 0xffffffffffffffff, 0x0) 15m22.964713711s ago: executing program 5 (id=425): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) socket(0x23, 0x5, 0x5) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f0000000300)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sendmsg(r1, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0xffffffff, 0x0, 0xb49, 0x9, 0x8000000000000001, 0x0, 0x3}, 0x0) r2 = socket$inet6(0xa, 0x1, 0x0) r3 = socket$key(0xf, 0x3, 0x2) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r4, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x24000000}, 0x0) r5 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r5, &(0x7f0000000240)={0x0, 0x0, 0x0}, 0x20000091) sendmsg$key(r3, &(0x7f0000000000)={0x500, 0x0, 0x0}, 0x0) setsockopt$inet6_IPV6_XFRM_POLICY(r2, 0x29, 0x23, &(0x7f0000000180)={{{@in=@private, @in6=@dev, 0x0, 0x0, 0x0, 0x0, 0x2}, {}, {}, 0x0, 0x0, 0x1}, {{@in=@local, 0x0, 0x6c}, 0x0, @in6=@loopback, 0x0, 0x0, 0x0, 0x4}}, 0xe8) r6 = syz_open_dev$dri(&(0x7f00000000c0), 0x1ff, 0x80800) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r6, 0xc04064a0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000240)=[0x0], 0x0, 0x0, 0x0, 0x1}) ioctl$DRM_IOCTL_MODE_GETCONNECTOR(r6, 0xc05064a7, &(0x7f0000000540)={0x0, 0x0, &(0x7f00000002c0)=[0x0], &(0x7f0000000340), 0x0, 0x1, 0x0, 0x0, r7}) ioctl$DRM_IOCTL_MODE_SETPROPERTY(r6, 0xc01064ab, &(0x7f0000000380)={0x1, r8, r7}) ioctl$DRM_IOCTL_MODE_GETRESOURCES(0xffffffffffffffff, 0xc04064a0, 0x0) bind$unix(0xffffffffffffffff, &(0x7f0000000480)=@abs={0x1, 0x0, 0x4e22}, 0x6e) r9 = syz_open_dev$loop(&(0x7f0000000080), 0x4, 0x80000) ioctl$BLKTRACESETUP(r9, 0xc0481273, &(0x7f0000000000)={'\x00', 0x4, 0x3, 0x1, 0x4de2, 0x1}) ioctl$BLKTRACETEARDOWN(r9, 0x1276, 0x0) ioctl$DRM_IOCTL_MODE_SETPROPERTY(0xffffffffffffffff, 0xc01064ab, &(0x7f0000000440)={0x5, r8}) 15m22.703282078s ago: executing program 3 (id=427): r0 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_int(r0, 0x107, 0xa, &(0x7f0000000080)=0x1, 0x4) r1 = socket$nl_generic(0x10, 0x3, 0x10) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0x80000000e) mlock(&(0x7f0000a93000/0x4000)=nil, 0x4000) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff) io_submit(0x0, 0x1, &(0x7f0000000500)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x5, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x2}]) ioctl$IOC_WATCH_QUEUE_SET_FILTER(0xffffffffffffffff, 0x5761, &(0x7f0000000f40)=ANY=[]) r4 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r5, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000b00)={&(0x7f0000000440)=ANY=[@ANYBLOB="140000001000010000000000000000000a00000a6c000000060a0104000000000000000002000000400004803c0001800a0001006d617463680000002c00028014000300f4f03b0200000000030007116b61979e0c000100636c75737465720008000240000000000900010073797a30000000000900020073"], 0x94}, 0x1, 0x0, 0x0, 0x4000000}, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r4, 0xc02064b2, 0x0) socket$netlink(0x10, 0x3, 0x12) write$FUSE_STATX(0xffffffffffffffff, &(0x7f0000000540)={0x130, 0x0, 0x0, {0x3, 0x6, 0x0, '\x00', {0x2000, 0x5, 0x7, 0xc07, 0x0, 0x0, 0xc000, '\x00', 0x1, 0x3ff, 0x0, 0x3, {0x0, 0x1}, {0x4, 0x800}, {0x961, 0x6a5ad1fb}, {0xfffffffffffffffe}, 0x80000000, 0xdc, 0x7e, 0xa}}}, 0x130) sendmsg$NL80211_CMD_CONNECT(r1, &(0x7f00000001c0)={0x0, 0x0, 0x0}, 0x0) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r6, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000480)=ANY=[@ANYBLOB="4c00000002060108000034e4000000000000000805000400030000000900020073797a3100000000050005000200000014000300686173683a69702c706f72742c6970000500010007"], 0x4c}, 0x1, 0x0, 0x0, 0x20044095}, 0x8042) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_LIST(r7, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000000c0)={0x1c, 0x7, 0x6, 0x5, 0x0, 0x0, {0x1, 0x0, 0x2}, [@IPSET_ATTR_PROTOCOL={0x5}]}, 0x1c}, 0x1, 0x0, 0x0, 0x20004080}, 0x48810) recvmsg(r7, &(0x7f000000c1c0)={0x0, 0x0, &(0x7f000000c080)=[{&(0x7f000000acc0)=""/4096, 0x1000}, {&(0x7f000000bec0)=""/27, 0x1b}], 0x2}, 0x20) syz_80211_inject_frame(&(0x7f00000002c0)=@device_b, &(0x7f0000000300)=ANY=[], 0x2e) setsockopt$packet_rx_ring(r0, 0x107, 0x5, &(0x7f0000000140)=@req3={0x1000, 0x3a, 0x1000, 0x3a, 0x7ff, 0xf83, 0x3}, 0x1c) 15m5.149474747s ago: executing program 35 (id=427): r0 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_int(r0, 0x107, 0xa, &(0x7f0000000080)=0x1, 0x4) r1 = socket$nl_generic(0x10, 0x3, 0x10) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0x80000000e) mlock(&(0x7f0000a93000/0x4000)=nil, 0x4000) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff) io_submit(0x0, 0x1, &(0x7f0000000500)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x5, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x2}]) ioctl$IOC_WATCH_QUEUE_SET_FILTER(0xffffffffffffffff, 0x5761, &(0x7f0000000f40)=ANY=[]) r4 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r5, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000b00)={&(0x7f0000000440)=ANY=[@ANYBLOB="140000001000010000000000000000000a00000a6c000000060a0104000000000000000002000000400004803c0001800a0001006d617463680000002c00028014000300f4f03b0200000000030007116b61979e0c000100636c75737465720008000240000000000900010073797a30000000000900020073"], 0x94}, 0x1, 0x0, 0x0, 0x4000000}, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r4, 0xc02064b2, 0x0) socket$netlink(0x10, 0x3, 0x12) write$FUSE_STATX(0xffffffffffffffff, &(0x7f0000000540)={0x130, 0x0, 0x0, {0x3, 0x6, 0x0, '\x00', {0x2000, 0x5, 0x7, 0xc07, 0x0, 0x0, 0xc000, '\x00', 0x1, 0x3ff, 0x0, 0x3, {0x0, 0x1}, {0x4, 0x800}, {0x961, 0x6a5ad1fb}, {0xfffffffffffffffe}, 0x80000000, 0xdc, 0x7e, 0xa}}}, 0x130) sendmsg$NL80211_CMD_CONNECT(r1, &(0x7f00000001c0)={0x0, 0x0, 0x0}, 0x0) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r6, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000480)=ANY=[@ANYBLOB="4c00000002060108000034e4000000000000000805000400030000000900020073797a3100000000050005000200000014000300686173683a69702c706f72742c6970000500010007"], 0x4c}, 0x1, 0x0, 0x0, 0x20044095}, 0x8042) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_LIST(r7, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000000c0)={0x1c, 0x7, 0x6, 0x5, 0x0, 0x0, {0x1, 0x0, 0x2}, [@IPSET_ATTR_PROTOCOL={0x5}]}, 0x1c}, 0x1, 0x0, 0x0, 0x20004080}, 0x48810) recvmsg(r7, &(0x7f000000c1c0)={0x0, 0x0, &(0x7f000000c080)=[{&(0x7f000000acc0)=""/4096, 0x1000}, {&(0x7f000000bec0)=""/27, 0x1b}], 0x2}, 0x20) syz_80211_inject_frame(&(0x7f00000002c0)=@device_b, &(0x7f0000000300)=ANY=[], 0x2e) setsockopt$packet_rx_ring(r0, 0x107, 0x5, &(0x7f0000000140)=@req3={0x1000, 0x3a, 0x1000, 0x3a, 0x7ff, 0xf83, 0x3}, 0x1c) 15m4.476035465s ago: executing program 36 (id=425): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) socket(0x23, 0x5, 0x5) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f0000000300)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sendmsg(r1, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0xffffffff, 0x0, 0xb49, 0x9, 0x8000000000000001, 0x0, 0x3}, 0x0) r2 = socket$inet6(0xa, 0x1, 0x0) r3 = socket$key(0xf, 0x3, 0x2) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r4, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x24000000}, 0x0) r5 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r5, &(0x7f0000000240)={0x0, 0x0, 0x0}, 0x20000091) sendmsg$key(r3, &(0x7f0000000000)={0x500, 0x0, 0x0}, 0x0) setsockopt$inet6_IPV6_XFRM_POLICY(r2, 0x29, 0x23, &(0x7f0000000180)={{{@in=@private, @in6=@dev, 0x0, 0x0, 0x0, 0x0, 0x2}, {}, {}, 0x0, 0x0, 0x1}, {{@in=@local, 0x0, 0x6c}, 0x0, @in6=@loopback, 0x0, 0x0, 0x0, 0x4}}, 0xe8) r6 = syz_open_dev$dri(&(0x7f00000000c0), 0x1ff, 0x80800) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r6, 0xc04064a0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000240)=[0x0], 0x0, 0x0, 0x0, 0x1}) ioctl$DRM_IOCTL_MODE_GETCONNECTOR(r6, 0xc05064a7, &(0x7f0000000540)={0x0, 0x0, &(0x7f00000002c0)=[0x0], &(0x7f0000000340), 0x0, 0x1, 0x0, 0x0, r7}) ioctl$DRM_IOCTL_MODE_SETPROPERTY(r6, 0xc01064ab, &(0x7f0000000380)={0x1, r8, r7}) ioctl$DRM_IOCTL_MODE_GETRESOURCES(0xffffffffffffffff, 0xc04064a0, 0x0) bind$unix(0xffffffffffffffff, &(0x7f0000000480)=@abs={0x1, 0x0, 0x4e22}, 0x6e) r9 = syz_open_dev$loop(&(0x7f0000000080), 0x4, 0x80000) ioctl$BLKTRACESETUP(r9, 0xc0481273, &(0x7f0000000000)={'\x00', 0x4, 0x3, 0x1, 0x4de2, 0x1}) ioctl$BLKTRACETEARDOWN(r9, 0x1276, 0x0) ioctl$DRM_IOCTL_MODE_SETPROPERTY(0xffffffffffffffff, 0xc01064ab, &(0x7f0000000440)={0x5, r8}) 14m20.718168814s ago: executing program 6 (id=500): openat(0xffffffffffffff9c, 0x0, 0x40, 0x1) mount$fuse(0x0, 0x0, 0x0, 0x0, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX, @ANYBLOB=',rootmode=000000000', @ANYRESDEC=0x0, @ANYBLOB=',gr']) read$FUSE(0xffffffffffffffff, &(0x7f00000021c0)={0x2020}, 0x2020) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, 0x0) syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce) r1 = syz_open_dev$MSR(&(0x7f0000000240), 0xfffffffffffffffa, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r2, &(0x7f0000000040)={0xa, 0x4e20, 0x401, @empty, 0x4}, 0x1c) listen(r2, 0x4) accept(r2, 0xfffffffffffffffc, 0x0) syz_open_procfs(0xffffffffffffffff, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) connect$inet6(r3, &(0x7f00000002c0)={0xa, 0x4e20, 0x4001fe, @empty, 0x8000b}, 0x1c) r4 = getpid() syz_pidfd_open(r4, 0x0) r5 = openat$sndseq(0xffffffffffffff9c, &(0x7f00000004c0), 0x48100) r6 = openat$sndseq(0xffffffffffffff9c, &(0x7f00000002c0), 0x1) write$sndseq(r6, &(0x7f0000000000)=[{0x84, 0x77, 0x0, 0x0, @time={0x2, 0x6}, {0x0, 0x10}, {}, @raw32}], 0x1c) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_INFO(r5, 0xc08c5335, &(0x7f00000001c0)={0x0, 0x80, 0x0, 'queue0\x00'}) 14m18.670641436s ago: executing program 6 (id=501): socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000200)) socket$inet6_sctp(0xa, 0x5, 0x84) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000200)={0xffffffffffffffff, 0x0, 0x5, 0x0, &(0x7f00000002c0)='\\ S', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20000005}, 0x50) r0 = syz_io_uring_setup(0x54d, &(0x7f0000000040)={0x0, 0x735a, 0x100, 0x805, 0x350}, &(0x7f0000000100)=0x0, &(0x7f00000001c0)) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, &(0x7f0000000400)={0x1, &(0x7f0000000200)=[{0x2e, 0x0, 0x0, 0x5}]}, 0x10) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) io_uring_enter(r0, 0x47bc, 0x0, 0x0, 0x0, 0x0) 14m16.522667169s ago: executing program 6 (id=502): r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000080)=ANY=[@ANYBLOB="12010000201b4510fc0428155d6d01020301090212000100000000090401"], 0x0) syz_usb_control_io$printer(r0, 0x0, 0x0) syz_usb_control_io$printer(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) 14m11.86078215s ago: executing program 6 (id=504): socketpair$unix(0x1, 0x3, 0x0, 0x0) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@abs, 0x6e) socket$inet6_sctp(0xa, 0x1, 0x84) r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000340), 0x2, 0x0) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f00000003c0)={0x0, 0x0, 0x0}, 0x0) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) socket$key(0xf, 0x3, 0x2) sendmsg$nl_xfrm(r2, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f00000000c0)=ANY=[@ANYBLOB="040100001a0007000000000000000000ff020000000000000000000000000001e000000200000037947427bb759dccec6c0c7ed4000000000000000000ffff00", @ANYRES32=0x0, @ANYRES32=0xee00, @ANYBLOB="ff010000000000000000000000000001000000002b000000fc0000000000000000000000000000000000000000000000000000000000000002000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000200000000000070000000000000000000000000000000000040000000000e80a000000000000000000000a0002007000000014000e00fe8000000000000000000000000000bb"], 0x104}}, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000040)={0x0, 0x18, 0xfa00, {0x3, &(0x7f0000000740)={0xffffffffffffffff}, 0x111}}, 0x20) openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) syz_open_dev$sndmidi(&(0x7f0000000180), 0x2, 0x141101) write$6lowpan_enable(0xffffffffffffffff, &(0x7f0000000000)='0', 0xfffffd2c) r4 = syz_io_uring_setup(0x239, &(0x7f0000000780)={0x0, 0xb2ca, 0x10100, 0x0, 0x1e6}, &(0x7f0000000240)=0x0, &(0x7f0000000080)=0x0) syz_io_uring_submit(r5, r6, &(0x7f0000000040)=@IORING_OP_POLL_ADD={0x6, 0x2, 0x0, @fd, 0x0, 0x0, 0x0, {0x90c0}, 0x1}) io_uring_enter(r4, 0x2ded, 0x4000, 0x0, 0x0, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz1\x00', 0x1ff) r7 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup/syz1\x00', 0x200002, 0x0) openat$cgroup_type(r7, &(0x7f0000000140), 0x2, 0x0) syz_emit_ethernet(0x3e, &(0x7f0000000340)=ANY=[@ANYRES8=r3], 0x0) r8 = openat$cgroup_procs(r7, &(0x7f00000002c0)='cgroup.threads\x00', 0x2, 0x0) write$cgroup_pid(r8, &(0x7f0000000c40), 0x12) r9 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r10 = openat$cgroup_ro(r9, &(0x7f0000000040)='cgroup.freeze\x00', 0x275a, 0x0) write$cgroup_int(r10, &(0x7f0000000200)=0x1, 0x12) 14m9.894028274s ago: executing program 6 (id=507): syz_emit_vhci(&(0x7f00000000c0)=ANY=[@ANYBLOB], 0xd) 14m8.296783106s ago: executing program 6 (id=508): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r2 = socket$vsock_stream(0x28, 0x1, 0x0) bind$vsock_stream(r2, &(0x7f0000000440), 0x10) listen(r2, 0x0) r3 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r3, &(0x7f0000000100)={0x28, 0x0, 0x0, @local}, 0x10) writev(r3, &(0x7f0000000200)=[{&(0x7f0000000080)='?', 0x1}], 0x1) r4 = accept4$unix(r2, 0x0, 0x0, 0x0) recvmmsg(r4, &(0x7f0000001680)=[{{0x0, 0x0, &(0x7f0000003380)=[{0x0}, {&(0x7f0000000040)=""/40, 0x28}, {&(0x7f0000003300)=""/107, 0x6b}], 0x3}}], 0x1, 0x2, 0x0) recvmsg(r4, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000480)=""/68, 0x44}], 0x1}, 0x4c2103a0) 13m52.815893589s ago: executing program 37 (id=508): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r2 = socket$vsock_stream(0x28, 0x1, 0x0) bind$vsock_stream(r2, &(0x7f0000000440), 0x10) listen(r2, 0x0) r3 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r3, &(0x7f0000000100)={0x28, 0x0, 0x0, @local}, 0x10) writev(r3, &(0x7f0000000200)=[{&(0x7f0000000080)='?', 0x1}], 0x1) r4 = accept4$unix(r2, 0x0, 0x0, 0x0) recvmmsg(r4, &(0x7f0000001680)=[{{0x0, 0x0, &(0x7f0000003380)=[{0x0}, {&(0x7f0000000040)=""/40, 0x28}, {&(0x7f0000003300)=""/107, 0x6b}], 0x3}}], 0x1, 0x2, 0x0) recvmsg(r4, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000480)=""/68, 0x44}], 0x1}, 0x4c2103a0) 13m38.568088228s ago: executing program 0 (id=521): r0 = socket(0x18, 0xa, 0x0) setsockopt$inet_mreqn(r0, 0x0, 0x37ea2bf19b47f90e, 0x0, 0x0) r1 = syz_open_dev$video(0x0, 0xad4, 0x0) ioctl$VIDIOC_S_FMT(r1, 0xc0d05605, &(0x7f0000000380)={0x1, @pix_mp={0x8, 0x5, 0x34524742, 0x5, 0x4, [{0x8, 0x9}, {0x7, 0x9}, {0x5}, {0xd, 0x8}, {0xd, 0xe0}, {0x4, 0x7ff}, {0x2, 0x3}, {0xfffffffc, 0xa}], 0xff, 0x28, 0x8, 0x1, 0x5}}) r2 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$tipc2(&(0x7f0000000100), 0xffffffffffffffff) sendmsg$TIPC_NL_BEARER_ENABLE(r2, 0x0, 0x0) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) r3 = socket$kcm(0x2a, 0x2, 0x0) sendmsg$kcm(r3, 0x0, 0xc000) recvmsg(r3, &(0x7f0000000540)={0x0, 0x0, 0x0}, 0x40002182) openat$apparmor_thread_current(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) unshare(0x20000400) r4 = openat$dir(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x108) fcntl$notify(r4, 0x402, 0x1c) r5 = socket$inet_sctp(0x2, 0x1, 0x84) listen(r5, 0x7) unlinkat(r4, &(0x7f0000000000)='./file0\x00', 0x200) setsockopt$inet_sctp_SCTP_SOCKOPT_CONNECTX(r5, 0x84, 0x6e, &(0x7f0000000040)=[@in6={0xa, 0x4e20, 0x3, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x7fff}], 0x1c) ioctl$sock_inet_SIOCDARP(r5, 0x8953, &(0x7f00000002c0)={{0x2, 0x4e24, @local}, {0x1, @remote}, 0x28, {0x2, 0x4e23, @multicast2}, 'ip_vti0\x00'}) memfd_create(&(0x7f0000000240)='\x02A\xbb\xcc\x96\x0e\x00\x00\x00\x00\x00\x00\xf3\x13[\xb6\xcc_\x02\xb3\x05\xc1\xf1\x9e\"\x93\x19\x19\x1a\xcc\x7fy\xd2~\x05\x99\xe6\x00o\xca\xe0\xc6\xd4\xf5\xa0\xc8P\xd6;\xf3\xc6~E\xacI\xd4\xe9\xa1|>\x91.K\x81\xa9+\xcf\xff\xcb\xfa\x0f\xe7n\x83H\x12\xac\x80\x16\xf8\x87Q\x97Az\n`\xb6\xe13A\xec\x8d(\\D\xec\xa6\t1\xa0h\xfc\x1f\xdd1@-4\xb4:\xf8\xd5wP \x84m\xe2\xd9\xfcb\xa0\xc3\xc9\xe7W\x86\xd7$\xa4ml\xee\x97[\xb7\xfa', 0x2) mount(0x0, &(0x7f0000000240)='.\x00', 0x0, 0x2390024, 0x0) r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000000000040260933334000000000010902240001000000000904000001030100000921000000"], 0x0) syz_usb_disconnect(r0) mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1) creat(&(0x7f0000000000)='./file0\x00', 0x168) 13m35.114488258s ago: executing program 0 (id=524): syz_emit_vhci(&(0x7f00000000c0)=ANY=[@ANYBLOB="043e0a"], 0xd) 13m34.43541771s ago: executing program 0 (id=525): r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000015c0), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f00000000c0)={0x0, 0x1, 0x0, &(0x7f00000002c0)=""/70, 0x0, 0xfec00000}) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000280)={0x1, 0x1, 0x0, &(0x7f0000000200)=""/85, 0x0, 0x60000}) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000000c40)={0x7, 0x0, [{0x5000, 0x7d, &(0x7f0000000500)=""/125}, {0x7000, 0xc2, &(0x7f0000000d80)=""/194}, {0xeeefe000, 0x11, &(0x7f0000000080)=""/17}, {0x7000, 0x46, &(0x7f0000000980)=""/70}, {0xeeee8000, 0x94, &(0x7f0000000a00)=""/148}, {0xa000, 0x4b, &(0x7f0000000ac0)=""/75}, {0x30000, 0x58, &(0x7f0000000b40)=""/88}]}) ioctl$VHOST_VSOCK_SET_RUNNING(r0, 0x4004af61, &(0x7f0000000000)=0xfffffffe) ioctl$VHOST_SET_VRING_KICK(r0, 0x4008af04, &(0x7f0000000040)={0x1}) 13m34.01731822s ago: executing program 0 (id=526): openat(0xffffffffffffff9c, 0x0, 0x40, 0x1) mount$fuse(0x0, 0x0, 0x0, 0x0, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX, @ANYBLOB=',rootmode=000000000', @ANYRESDEC=0x0, @ANYBLOB=',gr']) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, 0x0) syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce) r1 = syz_open_dev$MSR(&(0x7f0000000240), 0xfffffffffffffffa, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r2, &(0x7f0000000040)={0xa, 0x4e20, 0x401, @empty, 0x4}, 0x1c) listen(r2, 0x4) accept(r2, 0xfffffffffffffffc, 0x0) syz_open_procfs(0xffffffffffffffff, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) connect$inet6(r3, &(0x7f00000002c0)={0xa, 0x4e20, 0x4001fe, @empty, 0x8000b}, 0x1c) r4 = getpid() syz_pidfd_open(r4, 0x0) r5 = openat$sndseq(0xffffffffffffff9c, &(0x7f00000004c0), 0x48100) r6 = openat$sndseq(0xffffffffffffff9c, &(0x7f00000002c0), 0x1) write$sndseq(r6, &(0x7f0000000000)=[{0x84, 0x77, 0x0, 0x0, @time={0x2, 0x6}, {0x0, 0x10}, {}, @raw32}], 0x1c) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_INFO(r5, 0xc08c5335, &(0x7f00000001c0)={0x0, 0x80, 0x0, 'queue0\x00'}) 13m27.698412193s ago: executing program 0 (id=527): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = openat$sequencer(0xffffffffffffff9c, &(0x7f00000001c0), 0xa0602, 0x0) writev(r2, 0x0, 0x0) 13m12.406090583s ago: executing program 38 (id=527): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = openat$sequencer(0xffffffffffffff9c, &(0x7f00000001c0), 0xa0602, 0x0) writev(r2, 0x0, 0x0) 3m57.219149492s ago: executing program 4 (id=1426): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000000000040260933334000000000010902240001000000000904000001030100000921000000012201000905810308"], 0x0) syz_usb_disconnect(r0) r1 = syz_usb_connect$hid(0x2, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000009"], 0x0) syz_usb_control_io$hid(r1, &(0x7f0000000240)={0x24, &(0x7f00000002c0)=ANY=[@ANYBLOB], 0x0, 0x0, 0x0}, 0x0) syz_usb_control_io(r1, 0x0, &(0x7f0000000180)={0x84, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000280)=ANY=[@ANYBLOB=' '], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r1, 0x0, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000900)={0x84, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000600)=ANY=[@ANYBLOB="200084"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000e40)={0x18, &(0x7f0000000700)={0x0, 0xf}, 0x0, 0x0, 0x0, 0x0}) syz_usb_ep_write(r0, 0x81, 0x1, &(0x7f0000000400)="b9") 3m55.138034758s ago: executing program 4 (id=1430): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000100)={'macvtap0\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={0x0}, 0x1, 0x0, 0x0, 0x4000000}, 0x20040084) sendmsg$nl_route_sched(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000f40)=@newqdisc={0x24, 0x28, 0x4ee4e6a52ff56541, 0x5000, 0xfffffdfc, {0x0, 0x0, 0x0, r1, {0x0, 0xfff1}, {}, {0x2, 0xb}}}, 0x24}, 0x1, 0x0, 0x0, 0x40098}, 0x4008000) 3m53.85140185s ago: executing program 4 (id=1434): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000040), 0x42, 0x0) mount$fuse(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB='fd=', @ANYRESOCT=r0, @ANYBLOB=',rootmode=0000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=r0]) mkdir(&(0x7f0000000000)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f0000000140)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000400)={[{@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './bus'}}, {@workdir={'workdir', 0x3d, './file1'}}]}) chdir(&(0x7f00000000c0)='./bus\x00') r1 = open(&(0x7f00000000c0)='.\x00', 0x0, 0x0) getdents(r1, 0x0, 0x0) 3m52.764024889s ago: executing program 4 (id=1437): socket$inet6_udp(0xa, 0x2, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000001200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000540)=@newqdisc={0x58, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {}, {0xffff, 0xffff}, {0x0, 0xb}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x28, 0x2, {{0x6, 0x1ff, 0x0, 0x2, 0xffffffff}, [@TCA_NETEM_RATE64={0xc, 0x8, 0xc1160cbda5ab1ab}]}}}]}, 0x58}}, 0x20000000) userfaultfd(0x80001) socket$inet_sctp(0x2, 0x5, 0x84) syz_open_dev$sndctrl(&(0x7f0000001440), 0x0, 0x0) mmap$qrtrtun(&(0x7f0000004000/0x3000)=nil, 0x3000, 0x2000002, 0x4010, 0xffffffffffffffff, 0x2) syz_open_dev$sg(&(0x7f00000060c0), 0x0, 0x8002) openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/tty/ldiscs\x00', 0x0, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) socket$inet6_tcp(0xa, 0x1, 0x0) socket$xdp(0x2c, 0x3, 0x0) openat$rtc(0xffffff9c, &(0x7f00000062c0), 0x300, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) socket$inet6_mptcp(0xa, 0x1, 0x106) fanotify_init(0x8, 0x800) openat$nullb(0xffffffffffffff9c, &(0x7f00000000c0), 0x8000, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) dup(r0) r1 = userfaultfd(0x801) ioctl$UFFDIO_CONTINUE(r1, 0xc020aa08, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) socket$netlink(0x10, 0x3, 0x9) socket$packet(0x11, 0x2, 0x300) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) syz_emit_vhci(&(0x7f0000000000)=ANY=[@ANYBLOB="04050400c900", @ANYRES32=r2], 0x7) 3m51.82210689s ago: executing program 4 (id=1440): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000000000040260933334000000000010902240001000000000904000001030100000921000000012201000905810308"], 0x0) syz_usb_disconnect(r0) r1 = syz_usb_connect$hid(0x2, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000009"], 0x0) syz_usb_control_io$hid(r1, &(0x7f0000000240)={0x24, &(0x7f00000002c0)=ANY=[@ANYBLOB], 0x0, 0x0, 0x0}, 0x0) syz_usb_control_io(r1, 0x0, &(0x7f0000000180)={0x84, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000280)=ANY=[@ANYBLOB=' '], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r1, 0x0, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000900)={0x84, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000600)=ANY=[@ANYBLOB="200084"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000e40)={0x18, &(0x7f0000000700)={0x0, 0xf}, 0x0, 0x0, 0x0, 0x0}) syz_usb_ep_write(r0, 0x81, 0x1, &(0x7f0000000400)="b9") 3m50.432077057s ago: executing program 4 (id=1445): socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r1, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) symlinkat(&(0x7f0000001040)='./file0/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa/file0\x00', 0xffffffffffffff9c, &(0x7f0000000640)='./file0\x00') 3m34.808461783s ago: executing program 39 (id=1445): socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r1, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) symlinkat(&(0x7f0000001040)='./file0/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa/file0\x00', 0xffffffffffffff9c, &(0x7f0000000640)='./file0\x00') 17.871424437s ago: executing program 1 (id=2132): r0 = syz_usb_connect$cdc_ncm(0x0, 0x8f, &(0x7f0000000580)=ANY=[@ANYBLOB="12010000020000402505a1a440000102030109027d0002010080000904000001020d0000052406000105240000000d240f0103050000fd0000000406241aff072908241c0101090000142413099f33760bf14377323063f9c8a04d113905241510000905810300020800040904010000020d00000904010102020d0000090582020002e1ad00090503020002"], 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, &(0x7f00000003c0)={0x44, 0x0, 0x0, 0x0, &(0x7f0000000280)={0x20, 0x80, 0x1c, {0xd750, 0x3, 0x7, 0x0, 0xd, 0xcf0, 0x3ff, 0xdf, 0x401, 0xffff, 0xc335, 0x1}}, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) 14.840237542s ago: executing program 1 (id=2146): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000100)='dctcp', 0x5) bind$inet6(r0, &(0x7f0000000080)={0xa, 0x2, 0x200, @loopback, 0x7}, 0x1c) r1 = syz_usb_connect$hid(0x5, 0x3f, &(0x7f0000000400)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x10, 0x1532, 0x11b, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x2d, 0x1, 0x0, 0x0, 0x0, 0x3, [{{0x9, 0x4, 0x0, 0x5, 0x1, 0x3, 0x0, 0x2, 0x0, {0x9, 0x21, 0xffff, 0x3, 0x1, {0x22, 0x3}}, {{{0x9, 0x5, 0x81, 0x3, 0x40, 0x3, 0x0, 0x2}}, [{{0x9, 0x5, 0x2, 0x3, 0x40, 0x5, 0x3, 0x1}}]}}}]}}]}}, 0x0) syz_usb_control_io$hid(r1, 0x0, 0x0) syz_usb_control_io(r1, &(0x7f0000000440)={0x2c, &(0x7f0000000380)=ANY=[@ANYBLOB="60071c"], 0x0, 0x0, 0x0, 0x0}, 0x0) r2 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r2, &(0x7f00000006c0)={0x0, 0x18, 0xfa00, {0x3, 0x0, 0x111, 0x5}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_ADDR(r2, &(0x7f0000000140)={0x15, 0x110, 0xfa00, {0xffffffffffffffff, 0x808, 0x30, 0x30, 0x0, @in={0x2, 0x4e22, @initdev={0xac, 0x1e, 0x0, 0x0}}, @in6={0xa, 0x4e20, 0xe, @dev={0xfe, 0x80, '\x00', 0x1e}, 0x2}}}, 0x113) write$RDMA_USER_CM_CMD_LISTEN(r2, &(0x7f0000000100)={0x7, 0x8, 0xfa00, {0xffffffffffffffff, 0x4734}}, 0x10) close_range(r2, r2, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000700)=ANY=[@ANYRESOCT, @ANYRES32=r0, @ANYBLOB="002000000010325e6c0000a00900000800000000", @ANYRES32=0x0, @ANYBLOB='\x00'/28], 0x50) r3 = openat$vnet(0xffffffffffffff9c, &(0x7f00000003c0), 0x2, 0x0) ioctl$int_in(r3, 0x40000000af01, 0x0) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x275a, 0x0) write$cgroup_subtree(r4, &(0x7f0000001a40)=ANY=[], 0x17) write$binfmt_script(r4, &(0x7f00000000c0), 0xfecc) ioctl$VHOST_SET_VRING_ADDR(r3, 0x4028af11, &(0x7f0000000340)={0x0, 0x1, 0x0, 0x0, 0x0, 0x3332f000}) ioctl$VHOST_SET_MEM_TABLE(r3, 0x4008af03, &(0x7f0000000a80)) ioctl$VHOST_NET_SET_BACKEND(r3, 0x4008af30, &(0x7f0000000040)) setsockopt$inet6_tcp_int(r0, 0x6, 0x9, &(0x7f0000000200)=0xfffffff9, 0x4) sendto$inet6(r0, &(0x7f0000000300)="a6", 0x1, 0x24000045, &(0x7f00000001c0)={0xa, 0x2, 0xffff, @loopback, 0x9}, 0x1c) 13.333741836s ago: executing program 7 (id=2152): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x28100, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000180)={0x1fe, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_NMI(r2, 0xae9a) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000440)={[0x0, 0x100000000, 0x0, 0x0, 0x100000, 0x0, 0x2004c8, 0x8000000, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x5, 0xffffffffffffffff, 0x2, 0xffffffffffffffff], 0x0, 0x280004}) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f00000002c0)={[0x5, 0x7, 0x6, 0x8004002, 0x0, 0x800000000000, 0xefffffffffffffff, 0x0, 0x0, 0xfffffffffffff801, 0xfffffffffffffffe, 0x2, 0x6, 0x200001, 0x800006, 0xec], 0x0, 0x40400}) ioctl$KVM_RUN(r2, 0xae80, 0x0) 12.581460487s ago: executing program 7 (id=2154): sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x20000050) r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000200)={0x2, 0x4e20, @multicast1}, 0x10) connect$inet(r0, &(0x7f0000000000)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x18}}, 0x10) r1 = socket(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000300)={0x0}}, 0x44080) sendmsg$nl_route_sched(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000ac0)=@newqdisc={0x30, 0x24, 0xd0f, 0x70bd2c, 0x25dfdbfb, {0x60, 0x0, 0x0, r3, {0x0, 0xc}, {0xffe0, 0xa}, {0x1, 0x10}}, [@qdisc_kind_options=@q_fq={{0x7}, {0x4}}]}, 0x30}, 0x1, 0x0, 0x0, 0x4010}, 0xc010) sendmsg$inet(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000001600)=[{&(0x7f0000000240)=' ', 0x1}], 0x1}, 0x4000855) 11.997304341s ago: executing program 1 (id=2156): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000080)=ANY=[@ANYBLOB="12010000000000406c256d0000000200000109022400010000000009040000010300000009210000000122050009058103"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) connect$can_bcm(0xffffffffffffffff, &(0x7f00000000c0), 0x10) sendmsg$can_bcm(0xffffffffffffffff, 0x0, 0x0) syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) socket$can_bcm(0x1d, 0x2, 0x2) sendto(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000000380)=[{{0x0, 0x0, &(0x7f0000000880)=[{0x0}, {0x0}, {0x0}, {0x0}], 0x4}, 0x1009}], 0x1, 0x40012160, 0x0) syz_usb_control_io$hid(r0, &(0x7f0000000e40)={0x24, 0x0, 0x0, &(0x7f0000000580)={0x0, 0x22, 0x5, {[@main=@item_4={0x3, 0x0, 0xc, "f31f1fa1"}]}}, 0x0}, 0x0) syz_usb_control_io(r0, &(0x7f00000004c0)={0x2c, 0x0, &(0x7f0000000040)={0x0, 0x3, 0x2, @string={0x2}}, 0x0, 0x0, 0x0}, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) 11.046670135s ago: executing program 7 (id=2158): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000340), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x4, 0x1, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffb000/0x1000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ff7000/0x1000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) mount$overlay(0x0, 0x0, 0x0, 0x8, &(0x7f0000000140)={[{@upperdir={'upperdir', 0x3d, './file0'}}]}) r3 = io_uring_setup(0x7, &(0x7f0000000040)={0x0, 0xc8a1, 0xc000, 0x8, 0xc1}) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="020800000400000001000000090001"], 0x48) io_uring_enter(r3, 0x2219, 0x7721, 0x16, 0x0, 0x0) ioctl$KVM_SET_SREGS(r2, 0x4138ae84, 0x0) 10.498453921s ago: executing program 7 (id=2162): sendmsg$MPTCP_PM_CMD_GET_LIMITS(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0xffffffffffffffb4, 0x0, 0x1, 0x0, 0x0, 0x41}, 0x809d) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000300)='blkio.bfq.io_merged_recursive\x00', 0x275a, 0x0) syz_emit_ethernet(0x36, &(0x7f0000000100)=ANY=[@ANYBLOB="000002f0d31209000000bc2e"], 0x0) write$binfmt_script(r2, &(0x7f0000000100), 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r2, 0x0) preadv(r2, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffff23}], 0x3e, 0x0, 0x0) openat$vcsa(0xffffffffffffff9c, &(0x7f0000000140), 0x40, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000499000/0x18000)=nil, &(0x7f0000000040)=[@text16={0x10, 0x0}], 0x1, 0x0, 0x0, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x20004840}, 0x14) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000240)=[@text32={0x20, 0x0}], 0x1, 0x0, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x11, 0x0, 0x0, &(0x7f0000000000)='GPL\x00', 0x2a7, 0x0, 0x0, 0x41100, 0x24, '\x00', 0x0, 0x0, r2, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x3ff}, 0x94) ioctl$KVM_RUN(r3, 0xae80, 0x0) 9.659640422s ago: executing program 7 (id=2166): r0 = mq_open(0x0, 0x6e93ebbbcc0884f2, 0x0, 0x0) mq_timedsend(r0, 0x0, 0x0, 0x4, 0x0) r1 = socket$inet(0x2, 0x4000000000000001, 0x0) wait4(0x0, 0x0, 0x8, 0x0) setsockopt$inet_tcp_int(r1, 0x6, 0x80000000000002, &(0x7f00000004c0)=0x79, 0x4) bind$inet(r1, &(0x7f0000000080)={0x2, 0x4e23, @local}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r1, 0x6, 0xd, &(0x7f00000000c0)='dctcp', 0x5) sendmsg$IPCTNL_MSG_EXP_NEW(0xffffffffffffffff, 0x0, 0x4) sendto$inet(r1, 0x0, 0x0, 0x200007fd, 0x0, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) lstat(0x0, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, &(0x7f0000008900)) sendmsg$netlink(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000001d40)=[{&(0x7f0000000100)=ANY=[@ANYBLOB="2c00000010008100000000000080000000000000", @ANYRES32=0x0, @ANYBLOB="0a043cbf", @ANYRES32, @ANYBLOB="0a001b"], 0x2c}], 0x1}, 0x0) setsockopt$inet_tcp_TCP_CONGESTION(r1, 0x6, 0xd, &(0x7f00000011c0)='reno', 0x4) sendto$inet(r1, &(0x7f0000000f00)="8995b3c271bab84f6e841cd28301f2e02519276836b2ab14ba300f39a71758d74d011771db342aa6df71dc54faabe6ccc2dae1fdf17d4c74618af0933c8c800ec3ce49bd4af9b8cf0b15e8ad756f12238f6649d204a1065dad7cffef082a59ee2b21eb73656d3dc03547888735", 0x6d, 0x4c840, 0x0, 0x0) 9.030978684s ago: executing program 1 (id=2168): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000600)=@newqdisc={0x4c, 0x24, 0x4ee4e6a52ff56541, 0x1, 0x25dfdbfd, {0x0, 0x0, 0x0, r2, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x1c, 0x2, {{0x3, 0x3, 0x6361, 0x5, 0xffffffff, 0x3}}}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x40088c1}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000006c0)=@newqdisc={0x24, 0x24, 0x4ee4e6a52ff56541, 0x70b926, 0x25dfdc01, {0x0, 0x0, 0x0, r2, {0x0, 0xd}, {0xffff, 0xb}, {0xfff1, 0xffe4}}}, 0x24}, 0x1, 0x0, 0x0, 0x240040e0}, 0x4890) r3 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0), 0x20080, 0x0) close(r3) r4 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) ioctl$SIOCSIFHWADDR(r3, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r6 = socket$packet(0x11, 0x3, 0x300) sendto$packet(r6, &(0x7f0000000440)="18", 0x1, 0x200000c1, &(0x7f00000001c0)={0x11, 0x8100, r5, 0x1, 0x3, 0x6, @local}, 0x14) 8.67544652s ago: executing program 9 (id=2169): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000000000040260933334000000000010902240001000000000904000001030100000921000000012201000905810308"], 0x0) syz_usb_disconnect(r0) r1 = syz_usb_connect$hid(0x2, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000009"], 0x0) syz_usb_control_io$hid(r1, &(0x7f0000000240)={0x24, &(0x7f00000002c0)=ANY=[@ANYBLOB="00000c000000070001"], 0x0, 0x0, 0x0}, 0x0) syz_usb_control_io(r1, 0x0, &(0x7f0000000180)={0x84, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000280)=ANY=[@ANYBLOB=' '], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r1, 0x0, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000900)={0x84, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000600)=ANY=[@ANYBLOB=' \x00'], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000e40)={0x18, &(0x7f0000000700)={0x0, 0xf}, 0x0, 0x0, 0x0, 0x0}) syz_usb_ep_write(r0, 0x81, 0x1, &(0x7f0000000400)="b9") 8.491433046s ago: executing program 2 (id=2170): r0 = socket$netlink(0x10, 0x3, 0xf) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r0, 0x10e, 0x4, 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x40, 0x0) r1 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r1, @ANYBLOB=',rootmode=00000000000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r1, &(0x7f00000021c0)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r1, &(0x7f0000000040)={0x50, 0x0, r2, {0x7, 0x1f, 0x8, 0xffffffffd24b2432, 0x6, 0xffff, 0x0, 0xabe6, 0x0, 0x0, 0x80, 0x8001}}, 0x50) syz_fuse_handle_req(r1, &(0x7f000000e3c0)="000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000080000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000dc4e00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ba045abcd5dfc67d000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000230000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000050000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000d838aae8c05dd22d0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000209bfd66eea210560000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000020000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000040000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001354c4b600", 0x2000, &(0x7f00000062c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000001c0)={0x20}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r3 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x20c01, 0x0) writev(r3, &(0x7f0000000200)=[{&(0x7f00000003c0)='n', 0xfdef}], 0x1) dup3(r1, r3, 0x6700000000000000) r4 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x72, 0x0, 0x7fff0000}]}) close_range(r4, 0xffffffffffffffff, 0x0) 7.09634545s ago: executing program 9 (id=2173): socket$inet_tcp(0x2, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000600)={0x9, 0x20000008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e22}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000480)='./file0\x00', 0x18000, &(0x7f0000003b40)=ANY=[@ANYRES32=0x0, @ANYRESDEC, @ANYRES16=0x0, @ANYBLOB="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", @ANYRESDEC, @ANYRES64], 0x8, 0x2eb, &(0x7f00000004c0)="$eJzs3E1PE10UwPHTF0pbAmXx5DGaGG50o5sJVNdKYyAxNpEgNb4kJgNMtenYkpkGU2NEV26NH8IFYcmORPkCbNzpxo07NiYuZGEc0+kMhTKAlNIi/H8JmcPce6b3zgzk3AnD+r23T4t5W8vrFQnHlYRERDZEBiUsvpC3DbtxTLZ6JZf7fnw+f+f+g1uZbHZsUqnxzNSVtFJqYOjDsxcJr9tKr6wNPlr/nv629v/a2fXfU08KtirYqlSuKF1Nl79W9GnTULMFu6gpNWEaum2oQsk2rHp7ud6eN8tzc1Wll2b7k3OWYdtKL1VV0aiqSllVrKqKPNYLJaVpmupPCvaTW5yc1DMtJs+0eTA4IpaV0SMiktjRklvsyoAAAEBXNdf/YVHtrP+XLqxW+u4uD3j1/0osqP6/+qV+rG31f1xEAut///MD63/9YPX/zorodDlU/Y/jYSi2Y1eoEdYarYye9H5+Xa8fLg27AfU/AAAAAAAAAAAAAAAAAAAAAAD/gg3HSTmOk/K3/leviMRFxP8+IDUiIte7MGS00SGuP06Axot70QER8818bj5X33odVkXEFEOGJSW/3PvBU4v9N49UzaB8NBe8/IX5XMRtyeSl4OaPSKpHmvMdZ/xmdmxE1W3P75Hk1vy0pOS/4Px0YH5MLl3ckq9JSj7NSFlMmXXH0ch/OaLUjdvZpvyE2w8AAAAAgJNAU5sC1++atlt7PX9zfd38fCDSWF8PB67Po3Iu2t25AwAAAABwWtjV50XdNA1rjyAh+/dpPYge0ZH9Gf5tlv+3DEc30z0C/8O3NcW9nW0/LaEDnJZdgrC0kjVUm4067Cz8x0a79ZGJ0c5fQTc48+79z/Yd8NpyfJ+Zth5E9r4Bejr2CwgAAABAxzSKfn/PaHcHBAAAAAAAAAAAAAAAAAAAAAAAAAAAAADAKdSJ/47W7TkCAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAx8WfAAAA//+SWQVN") sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x44a0, &(0x7f0000000280)={0xa, 0x4e21, 0x3c, @dev={0xfe, 0x80, '\x00', 0x3a}, 0x3}, 0x1c) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='io.stat\x00', 0x275a, 0x0) write$binfmt_script(r3, &(0x7f0000000040), 0x208e24b) 6.86430098s ago: executing program 2 (id=2174): r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000002c0)={'bridge_slave_0\x00'}) r1 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route(r1, 0x0, 0x2404000c) 5.117883983s ago: executing program 2 (id=2176): sendmsg$MPTCP_PM_CMD_GET_LIMITS(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0xffffffffffffffb4, 0x0, 0x1, 0x0, 0x0, 0x41}, 0x809d) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000300)='blkio.bfq.io_merged_recursive\x00', 0x275a, 0x0) syz_emit_ethernet(0x36, &(0x7f0000000100)=ANY=[@ANYBLOB="000002f0d31209000000bc2e"], 0x0) write$binfmt_script(r2, &(0x7f0000000100), 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r2, 0x0) preadv(r2, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffff23}], 0x3e, 0x0, 0x0) openat$vcsa(0xffffffffffffff9c, &(0x7f0000000140), 0x40, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000499000/0x18000)=nil, &(0x7f0000000040)=[@text16={0x10, 0x0}], 0x1, 0x0, 0x0, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x20004840}, 0x14) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000240)=[@text32={0x20, 0x0}], 0x1, 0x0, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x11, 0x0, 0x0, &(0x7f0000000000)='GPL\x00', 0x2a7, 0x0, 0x0, 0x41100, 0x24, '\x00', 0x0, 0x0, r2, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x3ff}, 0x94) ioctl$KVM_RUN(r3, 0xae80, 0x0) 4.849183031s ago: executing program 8 (id=2177): prlimit64(0x0, 0xe, &(0x7f0000000600)={0x9, 0x20000008b}, 0x0) sched_setscheduler(0x0, 0x1, 0x0) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e22}, 0x6e) syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000480)='./file0\x00', 0x18000, &(0x7f0000003b40)=ANY=[@ANYRES32=0x0, @ANYRESDEC, @ANYRES16=0x0, @ANYBLOB="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", @ANYRESDEC, @ANYRES64], 0x8, 0x2eb, &(0x7f00000004c0)="$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") sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x44a0, 0x0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='io.stat\x00', 0x275a, 0x0) write$binfmt_script(r1, &(0x7f0000000040), 0x208e24b) fadvise64(r1, 0x2, 0x0, 0x4) 4.064565241s ago: executing program 9 (id=2178): r0 = socket$kcm(0x10, 0x3, 0x10) r1 = open(&(0x7f0000000000)='./bus\x00', 0x1a1043, 0xc5) r2 = getuid() quotactl$Q_QUOTAON(0xffffffff80000200, &(0x7f00000002c0)=@loop={'/dev/loop', 0x0}, r2, &(0x7f0000000300)='./bus\x00') r3 = socket$inet(0x2, 0x3, 0x2) setsockopt$inet_mreqsrc(r3, 0x0, 0x27, &(0x7f0000000280)={@multicast2, @local, @remote}, 0xc) r4 = socket$inet(0x2, 0x3, 0x2) setsockopt$inet_mreqsrc(r4, 0x0, 0x27, &(0x7f0000000040)={@multicast2, @local, @loopback}, 0xc) setsockopt$packet_fanout_data(0xffffffffffffffff, 0x107, 0x16, 0x0, 0x0) setsockopt$inet_msfilter(r4, 0x0, 0x29, &(0x7f0000000180)=ANY=[], 0x18) syz_emit_ethernet(0x36, &(0x7f0000001800)={@link_local, @local, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x28, 0x64, 0x0, 0x4, 0x2, 0x0, @empty, @multicast2}, @timestamp_reply={0x11, 0x0, 0x0, 0xe000, 0x2, 0x2, 0x4}}}}}, 0x0) setsockopt$inet_msfilter(r3, 0x0, 0x29, &(0x7f00000000c0)=ANY=[@ANYBLOB="e0000002ac1414aa"], 0x1c) syz_emit_ethernet(0x36, &(0x7f0000001800)={@link_local, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x32}, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x28, 0x64, 0x0, 0x4, 0x2, 0x0, @empty, @multicast2}, @timestamp_reply={0x11, 0x0, 0x0, 0xe000, 0x2, 0x10001}}}}}, 0x0) ioctl$FS_IOC_FSSETXATTR(r1, 0x401c5820, &(0x7f00000003c0)={0xd8, 0x0, 0x1fe, 0x0, 0x10}) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000040)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0}, 0x50) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000002040)={0x18, 0x3, &(0x7f0000000080)=@framed, &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0xf}, 0x94) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f00000006c0)={0xffffffffffffffff, 0x0, 0x0}, 0x10) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)}, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000a3a000/0x2000)=nil, 0x2000, 0x0, 0x30, r1, 0x0) r5 = syz_open_procfs(0x0, &(0x7f0000000200)='oom_score_adj\x00') syz_usb_connect(0x0, 0x5a, &(0x7f00000000c0)=ANY=[@ANYBLOB="12010000ec13b2106d04f308280b0102030109024800010000000009046900000e0100002b4101", @ANYRESHEX=0x0, @ANYRES64=r5], 0x0) syz_emit_ethernet(0x3e, &(0x7f0000000000)={@local, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}, @void, {@ipv4={0x800, @dccp={{0x8, 0x4, 0x0, 0x3d, 0x30, 0x67, 0x0, 0x9, 0x21, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @local, {[@ssrr={0x89, 0x7, 0xbd, [@multicast2]}, @generic={0x94, 0x2}]}}, {{0x4e21, 0x4e22, 0x4, 0x1, 0x3, 0x0, 0x0, 0x0, 0x4, "180f8f", 0x1, "fffb45"}}}}}}, 0x0) 3.529724827s ago: executing program 2 (id=2179): r0 = openat$nci(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) bind$inet6(0xffffffffffffffff, &(0x7f0000000040)={0xa, 0xe22}, 0x1c) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nfc(&(0x7f0000000380), r1) ioctl$IOCTL_GET_NCIDEV_IDX(r0, 0x0, &(0x7f00000000c0)=0x0) sendmsg$NFC_CMD_DEV_UP(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000280)=ANY=[@ANYBLOB, @ANYRES16=r2, @ANYBLOB="010026bd7000ffdbdf250200000008000100", @ANYRES32=r3], 0x1c}, 0x1, 0x0, 0x0, 0x1000}, 0x4) write$nci(r0, &(0x7f0000000040)=ANY=[], 0x61) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) 3.442198418s ago: executing program 8 (id=2180): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x28100, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000180)={0x1fe, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_NMI(r2, 0xae9a) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000440)={[0x0, 0x100000000, 0x0, 0x0, 0x100000, 0x0, 0x2004c8, 0x8000000, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x5, 0xffffffffffffffff, 0x2, 0xffffffffffffffff], 0x0, 0x280004}) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f00000002c0)={[0x5, 0x7, 0x6, 0x8004002, 0x0, 0x800000000000, 0xefffffffffffffff, 0x0, 0x0, 0xfffffffffffff801, 0xfffffffffffffffe, 0x2, 0x6, 0x200001, 0x800006, 0xec], 0x0, 0x40400}) ioctl$KVM_RUN(r2, 0xae80, 0x0) 3.260132434s ago: executing program 7 (id=2181): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000600)=@newqdisc={0x4c, 0x24, 0x4ee4e6a52ff56541, 0x1, 0x25dfdbfd, {0x0, 0x0, 0x0, r2, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x1c, 0x2, {{0x3, 0x3, 0x6361, 0x5, 0xffffffff, 0x3}}}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x40088c1}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000006c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70b926, 0x25dfdc01, {0x0, 0x0, 0x0, r2, {0x0, 0xd}, {0xffff, 0xb}, {0xfff1, 0xffe4}}, [@qdisc_kind_options=@q_fq_codel={{0xd}, {0x4}}]}, 0x38}, 0x1, 0x0, 0x0, 0x240040e0}, 0x4890) r3 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0), 0x20080, 0x0) close(r3) r4 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) ioctl$SIOCSIFHWADDR(r3, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r6 = socket$packet(0x11, 0x3, 0x300) sendto$packet(r6, &(0x7f0000000440)="18", 0x1, 0x200000c1, &(0x7f00000001c0)={0x11, 0x8100, r5, 0x1, 0x3, 0x6, @local}, 0x14) 2.770082231s ago: executing program 1 (id=2182): r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000340), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f00000000c0)={0x0, 0x18, 0xfa00, {0x3, &(0x7f0000000080)={0xffffffffffffffff}, 0x13f}}, 0x20) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x18, 0xfa00, {0x1, 0x0, 0x106, 0xd}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_IP(0xffffffffffffffff, &(0x7f0000000300)={0x3, 0x40, 0xfa02, {{0x6000000, 0xfffb, 0x3, @mcast1}, {0xa, 0x1c, 0x8ae5, @loopback, 0x1}}}, 0x48) write$RDMA_USER_CM_CMD_RESOLVE_IP(0xffffffffffffffff, &(0x7f0000000100)={0x3, 0x40, 0xfa00, {{0xa, 0xfffb, 0x5, @empty, 0xa097}, {0xa, 0x4e21, 0x9, @local, 0x9}, r1, 0x8001}}, 0x48) writev(r0, &(0x7f0000000040)=[{&(0x7f0000000100), 0x86}], 0x2) 2.654003872s ago: executing program 8 (id=2183): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000340)=ANY=[@ANYBLOB="12010000090024206d041cc340000000000109022400010000a00009040000010301010009210008000122010009058103"], 0x0) syz_usb_control_io$hid(r0, &(0x7f0000000240)={0x24, 0x0, 0x0, 0x0, 0x0}, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000180)={0x84, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000280)=ANY=[@ANYBLOB=' '], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000640)={0x2c, &(0x7f00000002c0)={0x20, 0x15, 0x4, "f93f80fb"}, &(0x7f0000000300)={0x0, 0xa, 0x1, 0x8}, &(0x7f0000000480)={0x0, 0x8, 0x1, 0x9}, &(0x7f00000004c0)={0x20, 0x1, 0xf9, "c3b7fe99b5b6ccbf4fc724f8b33ef407da301478a787d331765d236e829212cc0a1e8358ef97410aa5e06fac8e2317b21d42c5adc21a4198a966d2c4e05120bb0d3b8a30fcbd83d26c85f6cdedec5a47ab060badcbc3eef68554d50fbe1e1a3ca82db229c8c55dd56245eab3d0bf5db72bf44b52d52439c6aed4409c5223a0f37e375e539cfe4ab233847e69857f80f2cc0970ccf16d5f21ac32d826fe1d4e68d5ee622c5a1458314a8487c8e9603c1cb52ebc62a22ceaea54a769b4297a12dac69352d38b583e6c45727e323dbbdf07a5fbf0d1e8ac0906a3b0e456ac5f5e316f72c6ef756cd7fce4ef0ec9f2ff982f2261c595b0f6073eb8"}, &(0x7f0000000600)={0x20, 0x3, 0x1, 0xf}}) syz_usb_control_io(r0, 0x0, &(0x7f0000001200)={0x84, 0x0, 0x0, 0x0, &(0x7f0000000040)={0x20, 0x0, 0x4, {0x1}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, 0x0) 2.304117469s ago: executing program 2 (id=2184): sendmsg$AUDIT_SET(0xffffffffffffffff, 0x0, 0x40890) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x2) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f00000002c0)={[0x8aba, 0x2, 0x80020007, 0x804, 0x7, 0xf, 0x8001, 0x6, 0x0, 0x200000000000006, 0xfffffffffffffffb, 0x5, 0x0, 0x102, 0x3, 0xfffffffffffffffe], 0x7ffffff, 0x141202}) ioctl$KVM_SET_VCPU_EVENTS(r2, 0x4400ae8f, &(0x7f0000000140)=@arm64={0x6, 0xd1, 0x82, '\x00', 0x1}) ioctl$KVM_RUN(r2, 0xae80, 0x0) 2.029404023s ago: executing program 1 (id=2185): syz_usb_connect(0x3, 0x3f2, &(0x7f0000000780)=ANY=[@ANYBLOB="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"], 0x0) ioctl$XFS_IOC_FSINUMBERS(0xffffffffffffffff, 0xc0205867, &(0x7f0000000500)={&(0x7f0000000040)=0x8007, 0x0, &(0x7f00000024c0)=[{}, {}, {}, {}, {}, {}], 0x0}) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, 0x0) syz_usb_connect(0x0, 0x2d, &(0x7f0000000800)={{0x12, 0x1, 0x0, 0x5a, 0x48, 0xef, 0x40, 0x3f0, 0x581d, 0x2657, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x1b, 0x2, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x73, 0x0, 0x0, 0xff, 0x1, 0x7, 0x8}}, {{0x9, 0x4, 0xe, 0x4, 0x0, 0xa3, 0xbd, 0x12, 0x7}}]}}]}}, 0x0) r0 = syz_open_procfs(0x0, &(0x7f00000005c0)='ns\x00') request_key(&(0x7f0000000000)='asymmetric\x00', 0x0, &(0x7f0000001fee)='R\x10rust\xc0\x01\x00\x00\x00\x00\x00\x00\x00:De', 0x0) move_mount(r0, 0x0, r0, 0x0, 0x177) syz_usb_connect(0x2, 0x36, &(0x7f0000000100)=ANY=[@ANYBLOB="120100004106cd40cd060f011bd50000000109022400010000800009040bfd0233776100090507dfff03", @ANYRES64], 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000001380)=@base={0x12, 0x4, 0x8, 0x1}, 0x50) syz_usb_connect$cdc_ecm(0x0, 0x5a, &(0x7f0000000400)=ANY=[@ANYBLOB="12010000020000102505a1a440000000010109024800010100200009040004ff02020000052406000005240000000d240f0100000000"], 0x0) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="0200000004000000080000000100000080000000", @ANYRES32=r1, @ANYBLOB="a600"/20, @ANYRES32, @ANYBLOB], 0x50) r2 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/power/pm_freeze_timeout', 0x82802, 0xf) bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000300)={@map, 0xffffffffffffffff, 0xb, 0x2018}, 0x20) writev(r2, &(0x7f0000000100)=[{&(0x7f0000000080)="db", 0x1}], 0x1) syz_emit_ethernet(0xfc6, &(0x7f0000001000)=ANY=[@ANYBLOB="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"], 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000380)=@base={0x12, 0xc, 0x4, 0x2}, 0x50) bpf$MAP_DELETE_ELEM(0x3, &(0x7f0000000080)={r3, &(0x7f0000000040)}, 0x20) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000006c0)=@bpf_ext={0x1c, 0x0, &(0x7f0000000040), &(0x7f0000000080)='syzkaller\x00', 0x6, 0x0, 0x0, 0x41000, 0x2, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000240)={0x3, 0x2}, 0x8, 0x10, &(0x7f00000002c0)={0x2, 0x9, 0x9, 0x402}, 0x10, 0x2e82c, 0xffffffffffffffff, 0x1, &(0x7f0000000400)=[r0, r3, r2], &(0x7f0000000440)=[{0x3, 0x4, 0x6, 0x2}], 0x10, 0x4e}, 0x94) sendmsg$RDMA_NLDEV_CMD_RES_PD_GET(r2, &(0x7f0000000680)={&(0x7f0000000540)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000580)={&(0x7f0000000600)=ANY=[@ANYBLOB="600000000e1420002dbd7000fd5bdf25080001000000000008003c000000000008f80000000000000800010001000000080001ff07000000000000000000000008003c000400000008003c000300000008003c00050000000800030004000000"], 0x60}}, 0x20000000) preadv(0xffffffffffffffff, &(0x7f0000000480), 0x0, 0x3, 0xd) 1.522000354s ago: executing program 9 (id=2187): accept4$inet(0xffffffffffffffff, &(0x7f0000000000), &(0x7f0000000080)=0x10, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_REGISTER_COALESCED_MMIO(r1, 0x4010ae67, &(0x7f0000000180)={0x3000, 0x0, 0x1}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x2) ioctl$KVM_REGISTER_COALESCED_MMIO(r1, 0x4010ae67, &(0x7f0000000040)={0x0, 0x12000, 0x1}) ioctl$KVM_RUN(r2, 0xae80, 0x0) 1.446165527s ago: executing program 8 (id=2188): bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) r0 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000180)={'syz_tun\x00', 0x0}) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[], 0x48) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000b80)=ANY=[@ANYBLOB="19000000040000000800000008"], 0x50) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x6, 0x10, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b702000002000000850000008600000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bca2000000000000a6020000f8ffffffb703000008000000b7040000000000008500000033000000"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000140)={r3, &(0x7f0000000380)='v', &(0x7f0000000080)=@tcp6=r5, 0x2}, 0x20) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000300)={r4, r1, 0x25, 0x0, @val=@tcx={@void, @value=r4}}, 0x1c) syz_emit_ethernet(0xd81, &(0x7f0000002740)=ANY=[], 0x0) 1.065662061s ago: executing program 2 (id=2189): accept4$inet(0xffffffffffffffff, &(0x7f0000000000), &(0x7f0000000080)=0x10, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_REGISTER_COALESCED_MMIO(r1, 0x4010ae67, &(0x7f0000000180)={0x3000, 0x0, 0x1}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x2) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 863.022341ms ago: executing program 9 (id=2190): prlimit64(0x0, 0xe, &(0x7f0000000600)={0x9, 0x20000008b}, 0x0) sched_setscheduler(0x0, 0x1, 0x0) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e22}, 0x6e) syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000480)='./file0\x00', 0x18000, &(0x7f0000003b40)=ANY=[@ANYRES32=0x0, @ANYRESDEC, @ANYRES16=0x0, @ANYBLOB="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", @ANYRESDEC, @ANYRES64], 0x8, 0x2eb, &(0x7f00000004c0)="$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") sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x44a0, &(0x7f0000000280)={0xa, 0x4e21, 0x3c, @dev={0xfe, 0x80, '\x00', 0x3a}, 0x3}, 0x1c) r1 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) write$binfmt_script(r1, &(0x7f0000000040), 0x208e24b) fadvise64(r1, 0x2, 0x0, 0x4) 714.875486ms ago: executing program 8 (id=2191): r0 = socket(0x28, 0x5, 0x0) r1 = socket(0x28, 0x5, 0x0) bind$vsock_stream(r1, &(0x7f0000000040)={0x28, 0x0, 0x0, @local}, 0x10) listen(r1, 0x4) connect$vsock_stream(r0, &(0x7f0000000080)={0x28, 0x0, 0x0, @local}, 0x10) sendmmsg(r0, &(0x7f0000000100)=[{{0x0, 0x2d, &(0x7f00000000c0)=[{&(0x7f0000000000)="1b", 0x40000}], 0x1}}], 0x51, 0x0) r2 = accept4$unix(r1, 0x0, 0x0, 0x800) recvfrom$unix(r2, &(0x7f0000000140)=""/248, 0xf8, 0x122, 0x0, 0x0) r3 = openat$kvm(0xffffff9c, &(0x7f00000000c0), 0x800, 0x0) openat$sysfs(0xffffffffffffff9c, &(0x7f0000000140)='/sys/kernel/profiling', 0x1, 0x1cc) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000040)) ioctl$KVM_SET_MSRS(0xffffffffffffffff, 0xc008ae88, &(0x7f0000000000)) ioctl$KVM_CAP_SPLIT_IRQCHIP(0xffffffffffffffff, 0x4068aea3, &(0x7f0000000140)={0x79, 0x0, 0x334}) ioctl$KVM_SET_MSRS(0xffffffffffffffff, 0x4008ae89, &(0x7f0000000100)={0x1, 0x0, [{0x83f, 0x0, 0x2}]}) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r4, 0x4020ae46, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r5, 0x4090ae82, &(0x7f00000002c0)={[0x2, 0x9, 0xfffffffffffffffd, 0x2, 0x2, 0x0, 0x4002004c4, 0x80000001004, 0x8000000000000000, 0xc595, 0x0, 0x1, 0xffffffffffffffff, 0x2000000000000000, 0xb3, 0x8d], 0xeeee8000, 0x2010d1}) ioctl$KVM_RUN(r5, 0xae80, 0x0) ioctl$KVM_RUN(r5, 0xae80, 0x0) ioctl$KVM_RUN(r5, 0xae80, 0x0) 205.511618ms ago: executing program 9 (id=2192): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) io_uring_setup(0x36df, &(0x7f0000000180)={0x0, 0x472f, 0x10000, 0x3, 0xdf}) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) semctl$GETALL(0x0, 0x0, 0xd, 0xfffffffffffffffe) sendmsg$MPTCP_PM_CMD_ADD_ADDR(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000300)=ANY=[@ANYBLOB, @ANYRES16=0x0], 0x14}, 0x1, 0x0, 0x0, 0x20000801}, 0x4) pread64(0xffffffffffffffff, 0x0, 0x0, 0x0) socket$nl_rdma(0x10, 0x3, 0x14) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000000100)=ANY=[], &(0x7f0000003ff6)='GPL\x00', 0x2, 0x0, 0x0, 0x0, 0x40, '\x00', 0x0, @sk_msg=0x7}, 0x94) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000380)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]}) mknod$loop(&(0x7f0000000140)='./file0\x00', 0xfff, 0x0) r3 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000740), 0x2, 0x0) ioctl$IOCTL_VMCI_VERSION2(r3, 0x7a7, &(0x7f00000009c0)=0x80000) ioctl$IOCTL_VMCI_INIT_CONTEXT(r3, 0x7a0, &(0x7f0000000140)={@my=0x1}) ioctl$IOCTL_VMCI_QUEUEPAIR_ALLOC(r3, 0x7a8, 0x0) ioctl$IOCTL_VMCI_QUEUEPAIR_ALLOC(r3, 0x7a8, &(0x7f0000000040)={{@my=0x1}, @any, 0x0, 0x1, 0x9, 0xfffffffffffffffd, 0x0, 0x8, 0x1}) utimes(&(0x7f0000000100)='./file0\x00', 0x0) 0s ago: executing program 8 (id=2193): r0 = socket$inet_sctp(0x2, 0x5, 0x84) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r1, 0x84, 0x6f, &(0x7f0000000540)={0x0, 0x1c, &(0x7f0000000000)=[@in6={0xa, 0x4e22, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x9}]}, &(0x7f0000000380)=0x10) getsockopt$inet_sctp6_SCTP_MAX_BURST(r1, 0x84, 0x83, &(0x7f0000000000)=@assoc_value, &(0x7f0000000300)=0x8) getsockopt$inet_sctp_SCTP_AUTH_ACTIVE_KEY(r0, 0x84, 0x18, 0x0, &(0x7f0000000200)) kernel console output (not intermixed with test programs): Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.1/usb2/report_descriptor': No such file or directory [ 1121.206104][T10917] syzkaller0: entered allmulticast mode [ 1125.045152][ T10] usb 2-1: new high-speed USB device number 8 using dummy_hcd [ 1125.186766][T10954] loop8: detected capacity change from 0 to 64 [ 1125.234866][ T10] usb 2-1: Using ep0 maxpacket: 32 [ 1125.271797][T10954] hfs: Unknown parameter '18446744073709551615type' [ 1125.365210][ T10] usb 2-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xA6, changing to 0x86 [ 1125.437859][ T10] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x86 has an invalid bInterval 0, changing to 7 [ 1125.536321][ T10] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x86 has invalid wMaxPacketSize 0 [ 1125.573438][ T10] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x7 has an invalid bInterval 255, changing to 11 [ 1125.642644][ T1291] ieee802154 phy0 wpan0: encryption failed: -22 [ 1125.650607][ T1291] ieee802154 phy1 wpan1: encryption failed: -22 [ 1125.666405][ T10] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x7 has invalid maxpacket 59391, setting to 1024 [ 1125.774497][ T10] usb 2-1: New USB device found, idVendor=05ef, idProduct=020a, bcdDevice=91.36 [ 1125.792374][ T10] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1125.837148][ T10] usb 2-1: Product: syz [ 1125.901397][ T10] usb 2-1: Manufacturer: syz [ 1125.921575][ T10] usb 2-1: SerialNumber: syz [ 1125.943876][T10954] loop8: detected capacity change from 0 to 256 [ 1126.020550][ T10] usb 2-1: config 0 descriptor?? [ 1126.617790][ T10] iforce 2-1:0.0: usb_submit_urb failed: -32 [ 1126.624163][ T10] input input24: Device does not respond to id packet M [ 1126.652822][ T10] iforce 2-1:0.0: usb_submit_urb failed: -32 [ 1126.670675][ T10] input input24: Device does not respond to id packet P [ 1126.689856][ T10] input input24: Device does not respond to id packet B [ 1126.738965][T10954] FAT-fs (loop8): Directory bread(block 64) failed [ 1126.842803][T10954] FAT-fs (loop8): Directory bread(block 65) failed [ 1126.914506][T10954] FAT-fs (loop8): Directory bread(block 66) failed [ 1126.921592][T10954] FAT-fs (loop8): Directory bread(block 67) failed [ 1127.035781][T10954] FAT-fs (loop8): Directory bread(block 68) failed [ 1127.042621][T10954] FAT-fs (loop8): Directory bread(block 69) failed [ 1127.106248][ T10] iforce 2-1:0.0: usb_submit_urb failed: -71 [ 1127.152411][T10954] FAT-fs (loop8): Directory bread(block 70) failed [ 1127.161411][ T10] iforce 2-1:0.0: usb_submit_urb failed: -71 [ 1127.162838][ T10] iforce 2-1:0.0: usb_submit_urb failed: -71 [ 1127.164281][ T10] iforce 2-1:0.0: usb_submit_urb failed: -71 [ 1127.187611][ T10] input: Unknown I-Force Device [%04x:%04x] as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/input/input24 [ 1127.237935][T10954] FAT-fs (loop8): Directory bread(block 71) failed [ 1127.280279][T10954] FAT-fs (loop8): Directory bread(block 72) failed [ 1127.343601][T10954] FAT-fs (loop8): Directory bread(block 73) failed [ 1127.399997][ T10] usb 2-1: USB disconnect, device number 8 [ 1127.581299][ T24] usb 5-1: new high-speed USB device number 4 using dummy_hcd [ 1127.796102][ T24] usb 5-1: config 128 has an invalid interface number: 187 but max is 0 [ 1127.833601][ T24] usb 5-1: config 128 has an invalid descriptor of length 0, skipping remainder of the config [ 1127.887272][ T24] usb 5-1: config 128 has no interface number 0 [ 1127.893812][ T24] usb 5-1: config 128 interface 187 altsetting 255 endpoint 0x5 has an invalid bInterval 32, changing to 9 [ 1127.998106][ T24] usb 5-1: config 128 interface 187 altsetting 255 has an invalid descriptor for endpoint zero, skipping [ 1128.063485][ T24] usb 5-1: config 128 interface 187 altsetting 255 has an invalid descriptor for endpoint zero, skipping [ 1128.184763][ T24] usb 5-1: config 128 interface 187 altsetting 255 endpoint 0x6 has invalid maxpacket 22491, setting to 64 [ 1128.275429][ T24] usb 5-1: config 128 interface 187 altsetting 255 endpoint 0xC has invalid maxpacket 463, setting to 64 [ 1128.389075][ T24] usb 5-1: config 128 interface 187 altsetting 255 has 7 endpoint descriptors, different from the interface descriptor's value: 15 [ 1128.442969][ T24] usb 5-1: config 128 interface 187 has no altsetting 0 [ 1128.555030][ T24] usb 5-1: New USB device found, idVendor=0bfd, idProduct=0111, bcdDevice=bc.6a [ 1128.564399][ T24] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1128.616551][ T24] usb 5-1: Product: syz [ 1128.620967][ T24] usb 5-1: Manufacturer: syz [ 1128.646237][ T24] usb 5-1: SerialNumber: syz [ 1128.875242][ T10] usb 2-1: new full-speed USB device number 9 using dummy_hcd [ 1129.049149][T10968] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1129.119995][T10968] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1129.187288][ T10] usb 2-1: too many endpoints for config 1 interface 0 altsetting 0: 255, using maximum allowed: 30 [ 1129.244893][ T10] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 1129.302843][ T10] usb 2-1: config 1 interface 0 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 255 [ 1129.354263][T10968] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1129.442712][T10968] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1129.475208][ T10] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 1129.584942][ T10] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 1129.593639][ T10] usb 2-1: SerialNumber: syz [ 1129.695355][ T24] kvaser_usb 5-1:128.187: error -ENODEV: Cannot get usb endpoint(s) [ 1129.755589][ T10] cdc_acm 2-1:1.0: Control and data interfaces are not separated! [ 1129.860489][ T24] usb 5-1: USB disconnect, device number 4 [ 1130.246818][ T10] cdc_acm 2-1:1.0: ttyACM0: USB ACM device [ 1130.415770][ T10] usb 2-1: USB disconnect, device number 9 [ 1131.897924][T10993] syzkaller0: entered promiscuous mode [ 1131.931626][T10993] syzkaller0: entered allmulticast mode [ 1132.155549][T11004] xt_hashlimit: size too large, truncated to 1048576 [ 1134.515230][ T24] usb 8-1: new high-speed USB device number 39 using dummy_hcd [ 1134.745756][ T24] usb 8-1: Using ep0 maxpacket: 16 [ 1134.767469][ T24] usb 8-1: config 0 interface 0 altsetting 5 has 2 endpoint descriptors, different from the interface descriptor's value: 1 [ 1134.794932][ T24] usb 8-1: config 0 interface 0 has no altsetting 0 [ 1134.812606][ T24] usb 8-1: New USB device found, idVendor=1532, idProduct=011b, bcdDevice= 0.00 [ 1134.823721][ T24] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1134.952720][ T24] usb 8-1: config 0 descriptor?? [ 1135.580876][ T24] razer 0003:1532:011B.000C: unknown main item tag 0x0 [ 1135.633423][ T24] razer 0003:1532:011B.000C: unknown main item tag 0x0 [ 1135.710822][ T24] razer 0003:1532:011B.000C: unknown main item tag 0x0 [ 1135.977197][ T24] razer 0003:1532:011B.000C: failed to enable macro keys: -71 [ 1136.087956][ T24] razer 0003:1532:011B.000C: hidraw0: USB HID vff.ff Device [HID 1532:011b] on usb-dummy_hcd.7-1/input0 [ 1136.229449][ T24] usb 8-1: USB disconnect, device number 39 [ 1137.288135][T11036] fido_id[11036]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.7/usb8/report_descriptor': No such file or directory [ 1140.488228][T11081] bridge0: received packet on syz_tun with own address as source address (addr:aa:aa:aa:aa:aa:aa, vlan:0) [ 1141.123273][T11083] netlink: 52 bytes leftover after parsing attributes in process `syz.8.907'. [ 1141.175845][T11083] netlink: 12 bytes leftover after parsing attributes in process `syz.8.907'. [ 1143.044999][T11084] Bluetooth: hci3: command 0x0406 tx timeout [ 1145.555736][T11143] netlink: 12 bytes leftover after parsing attributes in process `syz.9.921'. [ 1147.187884][T11154] netlink: 12 bytes leftover after parsing attributes in process `syz.1.925'. [ 1147.214873][ T24] usb 10-1: new high-speed USB device number 3 using dummy_hcd [ 1147.433896][T11161] fuse: Bad value for 'fd' [ 1147.464203][ T24] usb 10-1: config 128 has an invalid interface number: 187 but max is 0 [ 1147.487880][ T24] usb 10-1: config 128 has an invalid descriptor of length 0, skipping remainder of the config [ 1147.520757][ T24] usb 10-1: config 128 has no interface number 0 [ 1147.575535][ T24] usb 10-1: config 128 interface 187 altsetting 255 endpoint 0x5 has an invalid bInterval 32, changing to 9 [ 1147.618267][ T24] usb 10-1: config 128 interface 187 altsetting 255 has an invalid descriptor for endpoint zero, skipping [ 1147.680761][ T24] usb 10-1: config 128 interface 187 altsetting 255 has an invalid descriptor for endpoint zero, skipping [ 1147.754132][ T24] usb 10-1: config 128 interface 187 altsetting 255 endpoint 0x6 has invalid maxpacket 22491, setting to 64 [ 1147.809944][ T24] usb 10-1: config 128 interface 187 altsetting 255 endpoint 0xC has invalid maxpacket 463, setting to 64 [ 1147.861573][ T24] usb 10-1: config 128 interface 187 altsetting 255 has 7 endpoint descriptors, different from the interface descriptor's value: 15 [ 1147.879016][ T24] usb 10-1: config 128 interface 187 has no altsetting 0 [ 1147.935616][ T24] usb 10-1: New USB device found, idVendor=0bfd, idProduct=0111, bcdDevice=bc.6a [ 1147.982489][ T24] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1147.994106][ T24] usb 10-1: Product: syz [ 1148.023567][ T24] usb 10-1: Manufacturer: syz [ 1148.061817][ T24] usb 10-1: SerialNumber: syz [ 1148.442444][T11156] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1148.467102][T11156] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1148.601308][T11156] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1148.613511][T11156] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1148.633284][T11156] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1148.693164][T11156] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1148.774180][ T24] kvaser_usb 10-1:128.187: error -ENODEV: Cannot get usb endpoint(s) [ 1148.940974][ T24] usb 10-1: USB disconnect, device number 3 [ 1153.011116][T11199] fuse: Bad value for 'fd' [ 1153.292223][T11182] Bluetooth: hci0: command 0x0406 tx timeout [ 1153.297196][ T9128] Bluetooth: hci6: command 0x0406 tx timeout [ 1153.365143][ T9] usb 2-1: new high-speed USB device number 10 using dummy_hcd [ 1153.632412][ T9] usb 2-1: config 128 has an invalid interface number: 187 but max is 0 [ 1153.652921][ T9] usb 2-1: config 128 has an invalid descriptor of length 0, skipping remainder of the config [ 1153.667078][ T9] usb 2-1: config 128 has no interface number 0 [ 1153.696914][ T9] usb 2-1: config 128 interface 187 altsetting 255 endpoint 0x5 has an invalid bInterval 32, changing to 9 [ 1153.773299][ T9] usb 2-1: config 128 interface 187 altsetting 255 has an invalid descriptor for endpoint zero, skipping [ 1153.793686][ T9] usb 2-1: config 128 interface 187 altsetting 255 has an invalid descriptor for endpoint zero, skipping [ 1153.817478][ T9] usb 2-1: config 128 interface 187 altsetting 255 endpoint 0x6 has invalid maxpacket 22491, setting to 64 [ 1153.875042][ T9] usb 2-1: config 128 interface 187 altsetting 255 endpoint 0xC has invalid maxpacket 463, setting to 64 [ 1153.925045][ T9] usb 2-1: config 128 interface 187 altsetting 255 has 7 endpoint descriptors, different from the interface descriptor's value: 15 [ 1153.990243][ T9] usb 2-1: config 128 interface 187 has no altsetting 0 [ 1154.031935][ T9] usb 2-1: New USB device found, idVendor=0bfd, idProduct=0111, bcdDevice=bc.6a [ 1154.090943][ T9] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1154.129894][ T9] usb 2-1: Product: syz [ 1154.151721][ T9] usb 2-1: Manufacturer: syz [ 1154.162067][ T9] usb 2-1: SerialNumber: syz [ 1154.508662][T11202] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1154.556434][T11202] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1154.683959][T11212] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1154.777008][T11212] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1154.897352][T11202] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1155.045408][T11202] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1155.189464][ T9] kvaser_usb 2-1:128.187: error -ENODEV: Cannot get usb endpoint(s) [ 1155.350767][ T9] usb 2-1: USB disconnect, device number 10 [ 1157.949926][T11247] overlayfs: failed to resolve './file2': -2 [ 1158.404873][T11204] Bluetooth: hci2: command 0x0406 tx timeout [ 1161.314916][ T9] usb 8-1: new high-speed USB device number 40 using dummy_hcd [ 1161.544867][ T9] usb 8-1: Using ep0 maxpacket: 32 [ 1161.590605][ T9] usb 8-1: New USB device found, idVendor=0ac8, idProduct=0321, bcdDevice=6f.be [ 1161.645051][ T9] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1161.725479][ T9] usb 8-1: config 0 descriptor?? [ 1161.864052][ T9] gspca_main: vc032x-2.14.0 probing 0ac8:0321 [ 1161.961070][T11296] fuse: Bad value for 'fd' [ 1162.095025][ T24] usb 10-1: new high-speed USB device number 4 using dummy_hcd [ 1162.269257][ T24] usb 10-1: device descriptor read/64, error -71 [ 1162.390595][ T9] gspca_vc032x: reg_w err -71 [ 1162.405273][ T9] gspca_vc032x: I2c Bus Busy Wait 70 [ 1162.410994][ T9] gspca_vc032x: I2c Bus Busy Wait 70 [ 1162.454961][ T9] gspca_vc032x: I2c Bus Busy Wait 70 [ 1162.460898][ T9] gspca_vc032x: I2c Bus Busy Wait 70 [ 1162.504974][ T9] gspca_vc032x: I2c Bus Busy Wait 70 [ 1162.542511][ T9] gspca_vc032x: I2c Bus Busy Wait 70 [ 1162.565388][ T9] gspca_vc032x: I2c Bus Busy Wait 70 [ 1162.570916][ T9] gspca_vc032x: I2c Bus Busy Wait 70 [ 1162.592662][ T24] usb 10-1: new high-speed USB device number 5 using dummy_hcd [ 1162.605011][ T9] gspca_vc032x: I2c Bus Busy Wait 70 [ 1162.610513][ T9] gspca_vc032x: I2c Bus Busy Wait 70 [ 1162.655565][ T9] gspca_vc032x: I2c Bus Busy Wait 70 [ 1162.661067][ T9] gspca_vc032x: I2c Bus Busy Wait 70 [ 1162.711766][ T9] gspca_vc032x: I2c Bus Busy Wait 70 [ 1162.732097][ T9] gspca_vc032x: I2c Bus Busy Wait 70 [ 1162.760184][ T9] gspca_vc032x: I2c Bus Busy Wait 70 [ 1162.781618][ T24] usb 10-1: device descriptor read/64, error -71 [ 1162.791058][ T9] gspca_vc032x: I2c Bus Busy Wait 70 [ 1162.791132][ T9] gspca_vc032x: I2c Bus Busy Wait 70 [ 1162.791207][ T9] gspca_vc032x: I2c Bus Busy Wait 70 [ 1162.791293][ T9] gspca_vc032x: Unknown sensor... [ 1162.791652][ T9] vc032x 8-1:0.0: probe with driver vc032x failed with error -22 [ 1162.829220][ T9] usb 8-1: USB disconnect, device number 40 [ 1163.030385][ T24] usb usb10-port1: attempt power cycle [ 1163.435116][ T24] usb 10-1: new high-speed USB device number 6 using dummy_hcd [ 1163.482044][ T24] usb 10-1: device descriptor read/8, error -71 [ 1163.771175][ T24] usb 10-1: new high-speed USB device number 7 using dummy_hcd [ 1163.853488][ T24] usb 10-1: device descriptor read/8, error -71 [ 1164.006046][ T24] usb usb10-port1: unable to enumerate USB device [ 1167.002354][ T24] usb 10-1: new high-speed USB device number 8 using dummy_hcd [ 1167.283462][ T24] usb 10-1: config 4 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 1167.384885][ T24] usb 10-1: config 4 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 1167.419142][ T24] usb 10-1: config 4 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 1167.555068][ T24] usb 10-1: New USB device found, idVendor=03f0, idProduct=0004, bcdDevice= 0.40 [ 1167.634275][ T24] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1167.722733][ T24] usb 10-1: Product: syz [ 1167.743324][ T24] usb 10-1: Manufacturer: syz [ 1167.774465][ T24] usb 10-1: SerialNumber: syz [ 1167.854261][ T24] usblp0: Disabling reads from problematic bidirectional printer [ 1168.209860][ T24] usblp 10-1:4.0: usblp0: USB Unidirectional printer dev 8 if 0 alt 0 proto 1 vid 0x03F0 pid 0x0004 [ 1168.471482][ T24] usb 10-1: USB disconnect, device number 8 [ 1168.475232][ C0] hrtimer: interrupt took 748139 ns [ 1168.573659][ T24] usblp0: removed [ 1168.725943][ T9] usb 2-1: new high-speed USB device number 11 using dummy_hcd [ 1168.995118][ T9] usb 2-1: config 4 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 1169.030015][ T9] usb 2-1: config 4 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 1169.101287][ T9] usb 2-1: config 4 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 1169.275525][ T9] usb 2-1: New USB device found, idVendor=03f0, idProduct=0004, bcdDevice= 0.40 [ 1169.325100][ T9] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1169.397690][ T9] usb 2-1: Product: syz [ 1169.402119][ T9] usb 2-1: Manufacturer: syz [ 1169.440239][ T9] usb 2-1: SerialNumber: syz [ 1169.614451][ T9] usblp0: Disabling reads from problematic bidirectional printer [ 1169.872548][ T9] usblp 2-1:4.0: usblp0: USB Unidirectional printer dev 11 if 0 alt 0 proto 1 vid 0x03F0 pid 0x0004 [ 1170.079511][ T30] usb 2-1: USB disconnect, device number 11 [ 1170.095413][T11391] netlink: 12 bytes leftover after parsing attributes in process `syz.8.994'. [ 1170.219978][ T30] usblp0: removed [ 1170.664826][ T9] usb 8-1: new high-speed USB device number 41 using dummy_hcd [ 1170.885854][ T9] usb 8-1: Using ep0 maxpacket: 32 [ 1170.952338][ T9] usb 8-1: New USB device found, idVendor=0ac8, idProduct=0321, bcdDevice=6f.be [ 1171.014983][ T9] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1171.088301][ T9] usb 8-1: config 0 descriptor?? [ 1171.177096][ T9] gspca_main: vc032x-2.14.0 probing 0ac8:0321 [ 1172.446609][ T9] gspca_vc032x: reg_w err -71 [ 1172.451705][ T9] gspca_vc032x: I2c Bus Busy Wait 70 [ 1172.457925][ T9] gspca_vc032x: I2c Bus Busy Wait 70 [ 1172.463829][ T9] gspca_vc032x: I2c Bus Busy Wait 70 [ 1172.469815][ T9] gspca_vc032x: I2c Bus Busy Wait 70 [ 1172.475757][ T9] gspca_vc032x: I2c Bus Busy Wait 70 [ 1172.482499][ T9] gspca_vc032x: I2c Bus Busy Wait 70 [ 1172.488665][ T9] gspca_vc032x: I2c Bus Busy Wait 70 [ 1172.494202][ T9] gspca_vc032x: I2c Bus Busy Wait 70 [ 1173.446824][ T9] gspca_vc032x: I2c Bus Busy Wait 70 [ 1173.452343][ T9] gspca_vc032x: I2c Bus Busy Wait 70 [ 1173.458610][ T9] gspca_vc032x: I2c Bus Busy Wait 70 [ 1173.464241][ T9] gspca_vc032x: I2c Bus Busy Wait 70 [ 1173.469971][ T9] gspca_vc032x: I2c Bus Busy Wait 70 [ 1173.476396][ T9] gspca_vc032x: I2c Bus Busy Wait 70 [ 1173.481861][ T9] gspca_vc032x: I2c Bus Busy Wait 70 [ 1173.487501][ T9] gspca_vc032x: I2c Bus Busy Wait 70 [ 1173.493176][ T9] gspca_vc032x: I2c Bus Busy Wait 70 [ 1173.700135][T11414] fuse: Bad value for 'fd' [ 1173.748728][ T9] gspca_vc032x: I2c Bus Busy Wait 70 [ 1173.754236][ T9] gspca_vc032x: Unknown sensor... [ 1173.760945][ T9] vc032x 8-1:0.0: probe with driver vc032x failed with error -22 [ 1173.781487][ T9] usb 8-1: USB disconnect, device number 41 [ 1174.447514][T11417] syzkaller0: entered promiscuous mode [ 1174.475970][T11417] syzkaller0: entered allmulticast mode [ 1174.655127][T11420] netlink: 12 bytes leftover after parsing attributes in process `syz.7.1001'. [ 1175.812633][T11437] fuse: Unknown parameter 'group_id00000000000000000000' [ 1179.751298][ T29] audit: type=1326 audit(1771411078.077:170): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11446 comm="syz.4.1008" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa9a3f9c629 code=0x7ffc0000 [ 1180.145149][ T29] audit: type=1326 audit(1771411078.077:171): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11446 comm="syz.4.1008" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa9a3f9c629 code=0x7ffc0000 [ 1180.442255][ T29] audit: type=1326 audit(1771411078.077:172): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11446 comm="syz.4.1008" exe="/root/syz-executor" sig=0 arch=c000003e syscall=133 compat=0 ip=0x7fa9a3f9c629 code=0x7ffc0000 [ 1180.636341][ T29] audit: type=1326 audit(1771411078.077:173): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11446 comm="syz.4.1008" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa9a3f9c629 code=0x7ffc0000 [ 1180.665013][ T29] audit: type=1326 audit(1771411078.077:174): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11446 comm="syz.4.1008" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa9a3f9c629 code=0x7ffc0000 [ 1181.237153][ T9398] usb 8-1: new high-speed USB device number 42 using dummy_hcd [ 1181.537157][ T9398] usb 8-1: Using ep0 maxpacket: 32 [ 1181.640088][ T29] audit: type=1326 audit(1771411078.077:175): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11446 comm="syz.4.1008" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7fa9a3f9c629 code=0x7ffc0000 [ 1181.709472][ T9398] usb 8-1: New USB device found, idVendor=0ac8, idProduct=0321, bcdDevice=6f.be [ 1181.854519][ T9398] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1182.015364][ T9398] usb 8-1: config 0 descriptor?? [ 1182.170475][ T29] audit: type=1326 audit(1771411078.077:176): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11446 comm="syz.4.1008" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa9a3f9c629 code=0x7ffc0000 [ 1182.199752][ T9398] gspca_main: vc032x-2.14.0 probing 0ac8:0321 [ 1182.258961][ T29] audit: type=1326 audit(1771411078.087:177): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11446 comm="syz.4.1008" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa9a3f9c629 code=0x7ffc0000 [ 1182.391537][ T29] audit: type=1326 audit(1771411078.087:178): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11446 comm="syz.4.1008" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7fa9a3f9c629 code=0x7ffc0000 [ 1182.476738][ T29] audit: type=1326 audit(1771411078.087:179): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11446 comm="syz.4.1008" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa9a3f9c629 code=0x7ffc0000 [ 1182.785221][ T9398] gspca_vc032x: reg_w err -71 [ 1182.790164][ T9398] gspca_vc032x: I2c Bus Busy Wait 70 [ 1182.845074][ T9398] gspca_vc032x: I2c Bus Busy Wait 70 [ 1182.850571][ T9398] gspca_vc032x: I2c Bus Busy Wait 70 [ 1182.895009][ T9398] gspca_vc032x: I2c Bus Busy Wait 70 [ 1182.900550][ T9398] gspca_vc032x: I2c Bus Busy Wait 70 [ 1182.970017][ T9398] gspca_vc032x: I2c Bus Busy Wait 70 [ 1182.984924][ T9398] gspca_vc032x: I2c Bus Busy Wait 70 [ 1182.990622][ T9398] gspca_vc032x: I2c Bus Busy Wait 70 [ 1183.047203][ T9398] gspca_vc032x: I2c Bus Busy Wait 70 [ 1183.053544][ T9398] gspca_vc032x: I2c Bus Busy Wait 70 [ 1183.124369][ T9398] gspca_vc032x: I2c Bus Busy Wait 70 [ 1183.141567][ T9398] gspca_vc032x: I2c Bus Busy Wait 70 [ 1183.214921][ T9398] gspca_vc032x: I2c Bus Busy Wait 70 [ 1183.246491][ T9398] gspca_vc032x: I2c Bus Busy Wait 70 [ 1183.251988][ T9398] gspca_vc032x: I2c Bus Busy Wait 70 [ 1183.316850][ T9398] gspca_vc032x: I2c Bus Busy Wait 70 [ 1183.322789][ T9398] gspca_vc032x: I2c Bus Busy Wait 70 [ 1183.384811][ T9398] gspca_vc032x: I2c Bus Busy Wait 70 [ 1183.411583][ T9398] gspca_vc032x: Unknown sensor... [ 1183.451710][ T9398] vc032x 8-1:0.0: probe with driver vc032x failed with error -22 [ 1183.516259][ T9398] usb 8-1: USB disconnect, device number 42 [ 1184.786847][T11495] fuse: Unknown parameter 'group_id00000000000000000000' [ 1187.201442][ T1291] ieee802154 phy0 wpan0: encryption failed: -22 [ 1187.212874][ T1291] ieee802154 phy1 wpan1: encryption failed: -22 [ 1187.534754][ T29] kauditd_printk_skb: 13 callbacks suppressed [ 1187.534839][ T29] audit: type=1326 audit(1771411085.467:193): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11514 comm="syz.4.1025" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa9a3f9c629 code=0x7ffc0000 [ 1187.956278][ T29] audit: type=1326 audit(1771411085.467:194): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11514 comm="syz.4.1025" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa9a3f9c629 code=0x7ffc0000 [ 1188.051476][T11528] netlink: 8 bytes leftover after parsing attributes in process `syz.8.1027'. [ 1188.177777][ T29] audit: type=1326 audit(1771411085.467:195): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11514 comm="syz.4.1025" exe="/root/syz-executor" sig=0 arch=c000003e syscall=133 compat=0 ip=0x7fa9a3f9c629 code=0x7ffc0000 [ 1188.373629][ T29] audit: type=1326 audit(1771411085.467:196): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11514 comm="syz.4.1025" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa9a3f9c629 code=0x7ffc0000 [ 1188.611434][ T29] audit: type=1326 audit(1771411085.477:197): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11514 comm="syz.4.1025" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa9a3f9c629 code=0x7ffc0000 [ 1188.872103][ T29] audit: type=1326 audit(1771411085.477:198): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11514 comm="syz.4.1025" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7fa9a3f9c629 code=0x7ffc0000 [ 1189.126274][ T29] audit: type=1326 audit(1771411085.477:199): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11514 comm="syz.4.1025" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa9a3f9c629 code=0x7ffc0000 [ 1189.369850][ T29] audit: type=1326 audit(1771411085.477:200): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11514 comm="syz.4.1025" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa9a3f9c629 code=0x7ffc0000 [ 1189.596910][ T29] audit: type=1326 audit(1771411085.477:201): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11514 comm="syz.4.1025" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7fa9a3f9c629 code=0x7ffc0000 [ 1189.643925][ T29] audit: type=1326 audit(1771411085.477:202): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11514 comm="syz.4.1025" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa9a3f9c629 code=0x7ffc0000 [ 1190.452712][T11542] overlayfs: failed to clone upperpath [ 1194.390024][T11561] syzkaller0: entered promiscuous mode [ 1194.454285][T11561] syzkaller0: entered allmulticast mode [ 1194.490168][T11564] overlayfs: failed to clone upperpath [ 1196.488380][ T29] kauditd_printk_skb: 13 callbacks suppressed [ 1196.488606][ T29] audit: type=1326 audit(1771411094.777:216): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11573 comm="syz.8.1040" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1a84b9c629 code=0x7ffc0000 [ 1196.783700][ T29] audit: type=1326 audit(1771411094.787:217): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11573 comm="syz.8.1040" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1a84b9c629 code=0x7ffc0000 [ 1197.016617][ T29] audit: type=1326 audit(1771411094.787:218): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11573 comm="syz.8.1040" exe="/root/syz-executor" sig=0 arch=c000003e syscall=133 compat=0 ip=0x7f1a84b9c629 code=0x7ffc0000 [ 1197.206563][T11586] overlayfs: failed to clone upperpath [ 1197.212867][ T29] audit: type=1326 audit(1771411094.787:219): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11573 comm="syz.8.1040" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1a84b9c629 code=0x7ffc0000 [ 1197.395189][ T29] audit: type=1326 audit(1771411094.787:220): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11573 comm="syz.8.1040" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1a84b9c629 code=0x7ffc0000 [ 1198.371374][ T29] audit: type=1326 audit(1771411094.787:221): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11573 comm="syz.8.1040" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f1a84b9c629 code=0x7ffc0000 [ 1198.394405][ T29] audit: type=1326 audit(1771411094.787:222): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11573 comm="syz.8.1040" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1a84b9c629 code=0x7ffc0000 [ 1198.839864][ T29] audit: type=1326 audit(1771411094.787:223): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11573 comm="syz.8.1040" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1a84b9c629 code=0x7ffc0000 [ 1198.882841][ T29] audit: type=1326 audit(1771411094.787:224): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11573 comm="syz.8.1040" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f1a84b9c629 code=0x7ffc0000 [ 1198.924890][ T29] audit: type=1326 audit(1771411094.787:225): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11573 comm="syz.8.1040" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1a84b9c629 code=0x7ffc0000 [ 1200.321755][T11612] netlink: 12 bytes leftover after parsing attributes in process `syz.9.1049'. [ 1200.874752][T11624] loop7: detected capacity change from 0 to 128 [ 1201.377906][T11624] bio_check_eod: 9 callbacks suppressed [ 1201.378014][T11624] syz.7.1051: attempt to access beyond end of device [ 1201.378014][T11624] loop7: rw=1, sector=145, nr_sectors = 896 limit=128 [ 1204.480546][T11644] overlayfs: failed to clone upperpath [ 1205.347284][ T29] kauditd_printk_skb: 13 callbacks suppressed [ 1205.347524][ T29] audit: type=1326 audit(1771411103.537:239): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11646 comm="syz.4.1057" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa9a3f9c629 code=0x7ffc0000 [ 1205.735090][ T29] audit: type=1326 audit(1771411103.547:240): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11646 comm="syz.4.1057" exe="/root/syz-executor" sig=0 arch=c000003e syscall=133 compat=0 ip=0x7fa9a3f9c629 code=0x7ffc0000 [ 1205.924366][ T29] audit: type=1326 audit(1771411103.557:241): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11646 comm="syz.4.1057" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa9a3f9c629 code=0x7ffc0000 [ 1206.195789][ T29] audit: type=1326 audit(1771411103.557:242): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11646 comm="syz.4.1057" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7fa9a3f9c629 code=0x7ffc0000 [ 1206.659439][ T29] audit: type=1326 audit(1771411103.557:243): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11646 comm="syz.4.1057" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa9a3f9c629 code=0x7ffc0000 [ 1207.040691][ T29] audit: type=1326 audit(1771411103.567:244): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11646 comm="syz.4.1057" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7fa9a3f9c629 code=0x7ffc0000 [ 1207.368403][ T29] audit: type=1326 audit(1771411103.567:245): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11646 comm="syz.4.1057" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa9a3f9c629 code=0x7ffc0000 [ 1207.593270][ T29] audit: type=1326 audit(1771411103.567:246): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11646 comm="syz.4.1057" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7fa9a3f9c629 code=0x7ffc0000 [ 1207.720997][ T29] audit: type=1326 audit(1771411103.577:247): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11646 comm="syz.4.1057" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa9a3f9c629 code=0x7ffc0000 [ 1207.799789][ T29] audit: type=1326 audit(1771411103.577:248): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11646 comm="syz.4.1057" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7fa9a3f9c629 code=0x7ffc0000 [ 1209.159695][T11680] fuse: Bad value for 'rootmode' [ 1210.253453][T11697] netlink: 12 bytes leftover after parsing attributes in process `syz.9.1070'. [ 1211.363499][T11709] fuse: Bad value for 'fd' [ 1214.145041][ T9398] usb 2-1: new high-speed USB device number 12 using dummy_hcd [ 1214.355711][ T9398] usb 2-1: config 17 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 1214.390777][ T9398] usb 2-1: config 17 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 1214.425692][ T9398] usb 2-1: config 17 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 1214.444725][ T9398] usb 2-1: New USB device found, idVendor=0458, idProduct=5003, bcdDevice= 0.00 [ 1214.556172][ T9398] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1214.636875][T11740] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 1215.600207][ T9398] aiptek 2-1:17.0: Aiptek using 400 ms programming speed [ 1215.675946][ T9398] input: Aiptek as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:17.0/input/input25 [ 1217.256213][ T9] usb 2-1: USB disconnect, device number 12 [ 1217.257714][ C1] aiptek 2-1:17.0: aiptek_irq - usb_submit_urb failed with result -19 [ 1220.384985][T11795] tipc: Enabling of bearer rejected, failed to enable media [ 1220.939723][T11795] netlink: 12 bytes leftover after parsing attributes in process `syz.8.1092'. [ 1222.817068][T11829] 9p: Bad value for 'rfdno' [ 1230.718304][T11916] tipc: Enabling of bearer rejected, failed to enable media [ 1231.097798][T11923] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1128'. [ 1231.592229][T11930] libceph: resolve '400' (ret=-3): failed [ 1231.941690][ T24] usb 2-1: new high-speed USB device number 13 using dummy_hcd [ 1232.143989][ T24] usb 2-1: Using ep0 maxpacket: 16 [ 1232.186172][ T24] usb 2-1: too many configurations: 17, using maximum allowed: 8 [ 1232.365069][ T24] usb 2-1: string descriptor 0 read error: -71 [ 1232.372526][ T24] usb 2-1: New USB device found, idVendor=04e8, idProduct=a101, bcdDevice= 4.48 [ 1232.453411][ T24] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1232.555788][ T24] r8152-cfgselector 2-1: Unknown version 0x0000 [ 1232.562458][ T24] r8152-cfgselector 2-1: rejected 8 configurations due to insufficient available bus power [ 1232.654854][ T24] r8152-cfgselector 2-1: no configuration chosen from 8 choices [ 1232.718838][ T24] r8152-cfgselector 2-1: USB disconnect, device number 13 [ 1233.644382][T11959] netlink: 4 bytes leftover after parsing attributes in process `syz.7.1138'. [ 1237.855774][T11981] libceph: resolve '400' (ret=-3): failed [ 1240.704786][ T24] usb 2-1: new high-speed USB device number 14 using dummy_hcd [ 1240.885336][ T24] usb 2-1: Using ep0 maxpacket: 16 [ 1240.941576][ T24] usb 2-1: config 0 has an invalid interface number: 105 but max is 0 [ 1240.972414][ T24] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1241.000989][ T24] usb 2-1: config 0 has no interface number 0 [ 1241.043803][ T24] usb 2-1: New USB device found, idVendor=046d, idProduct=08f3, bcdDevice= b.28 [ 1241.062369][ T24] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1241.106659][ T24] usb 2-1: Product: syz [ 1241.111197][ T24] usb 2-1: Manufacturer: syz [ 1241.141505][ T24] usb 2-1: SerialNumber: syz [ 1241.169068][ T24] usb 2-1: config 0 descriptor?? [ 1241.274434][ T24] uvcvideo 2-1:0.105: Found UVC 0.00 device syz (046d:08f3) [ 1241.304886][ T24] uvcvideo 2-1:0.105: No valid video chain found. [ 1241.457764][ T10] usb 2-1: USB disconnect, device number 14 [ 1241.753739][T12031] libceph: resolve '400' (ret=-3): failed [ 1244.943597][T12074] libceph: resolve '400' (ret=-3): failed [ 1246.301847][T12098] tipc: Enabling of bearer rejected, failed to enable media [ 1247.488146][T12112] fuse: Bad value for 'fd' [ 1247.817147][T11084] Bluetooth: hci0: unexpected event 0x2f length: 509 > 260 [ 1248.171007][T12123] overlayfs: missing 'lowerdir' [ 1248.290043][T12123] overlayfs: failed to clone upperpath [ 1248.517723][ T1291] ieee802154 phy0 wpan0: encryption failed: -22 [ 1248.524497][ T1291] ieee802154 phy1 wpan1: encryption failed: -22 [ 1251.431392][T11084] Bluetooth: hci3: unexpected event 0x2f length: 509 > 260 [ 1252.899914][T12192] bridge0: received packet on syz_tun with own address as source address (addr:aa:aa:aa:aa:aa:aa, vlan:0) [ 1255.613344][T11084] Bluetooth: hci6: unexpected event 0x2f length: 509 > 260 [ 1256.443306][T12234] fuse: Invalid rootmode [ 1258.736120][T12261] netlink: 20 bytes leftover after parsing attributes in process `syz.9.1229'. [ 1260.225726][T12282] fuse: Invalid rootmode [ 1269.856505][T12411] overlayfs: missing 'lowerdir' [ 1270.693481][T12424] fuse: Bad value for 'rootmode' [ 1273.971993][T12464] loop5: detected capacity change from 0 to 4095 [ 1275.607169][T12484] fuse: Bad value for 'rootmode' [ 1277.955202][ T10] usb 2-1: new high-speed USB device number 15 using dummy_hcd [ 1278.171935][ T10] usb 2-1: Using ep0 maxpacket: 32 [ 1278.299868][ T29] kauditd_printk_skb: 6 callbacks suppressed [ 1278.300013][ T29] audit: type=1326 audit(1771411176.607:255): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12514 comm="syz.8.1303" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1a84b9c629 code=0x7ffc0000 [ 1278.405497][ T10] usb 2-1: config 1 interface 0 altsetting 160 bulk endpoint 0x1 has invalid maxpacket 64 [ 1278.445447][ T10] usb 2-1: config 1 interface 0 altsetting 160 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 1278.480363][ T29] audit: type=1326 audit(1771411176.637:256): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12514 comm="syz.8.1303" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1a84b9c629 code=0x7ffc0000 [ 1278.539792][ T10] usb 2-1: config 1 interface 0 has no altsetting 0 [ 1278.614062][ T29] audit: type=1326 audit(1771411176.657:257): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12514 comm="syz.8.1303" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f1a84b9c629 code=0x7ffc0000 [ 1278.667435][ T10] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40 [ 1278.709994][ T10] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1278.729759][ T29] audit: type=1326 audit(1771411176.657:258): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12514 comm="syz.8.1303" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1a84b9c629 code=0x7ffc0000 [ 1278.770942][ T10] usb 2-1: Product: syz [ 1278.790786][ T10] usb 2-1: Manufacturer: syz [ 1278.830650][ T10] usb 2-1: SerialNumber: syz [ 1278.885188][ T29] audit: type=1326 audit(1771411176.697:259): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12514 comm="syz.8.1303" exe="/root/syz-executor" sig=0 arch=c000003e syscall=425 compat=0 ip=0x7f1a84b9c629 code=0x7ffc0000 [ 1278.927349][T12499] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 1279.026376][ T29] audit: type=1326 audit(1771411176.707:260): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12514 comm="syz.8.1303" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1a84b9c629 code=0x7ffc0000 [ 1279.165369][ T29] audit: type=1326 audit(1771411176.737:261): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12514 comm="syz.8.1303" exe="/root/syz-executor" sig=0 arch=c000003e syscall=427 compat=0 ip=0x7f1a84b9c629 code=0x7ffc0000 [ 1279.338759][ T29] audit: type=1326 audit(1771411176.737:262): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12514 comm="syz.8.1303" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1a84b9c629 code=0x7ffc0000 [ 1279.475922][ T10] usb 2-1: USB disconnect, device number 15 [ 1279.527460][ T29] audit: type=1326 audit(1771411176.747:263): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12514 comm="syz.8.1303" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f1a84b9c629 code=0x7ffc0000 [ 1279.674331][ T29] audit: type=1326 audit(1771411176.747:264): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12514 comm="syz.8.1303" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1a84b9c629 code=0x7ffc0000 [ 1280.193186][T12536] fuse: Bad value for 'rootmode' [ 1284.994205][ T29] kauditd_printk_skb: 2 callbacks suppressed [ 1284.994287][ T29] audit: type=1326 audit(1771411183.337:267): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12565 comm="syz.7.1317" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f868c99c629 code=0x7ffc0000 [ 1285.511751][ T29] audit: type=1326 audit(1771411183.377:268): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12565 comm="syz.7.1317" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f868c99c629 code=0x7ffc0000 [ 1286.065306][ T29] audit: type=1326 audit(1771411183.377:269): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12565 comm="syz.7.1317" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f868c99c629 code=0x7ffc0000 [ 1286.355873][ T29] audit: type=1326 audit(1771411183.387:270): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12565 comm="syz.7.1317" exe="/root/syz-executor" sig=0 arch=c000003e syscall=425 compat=0 ip=0x7f868c99c629 code=0x7ffc0000 [ 1286.603639][ T29] audit: type=1326 audit(1771411183.387:271): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12565 comm="syz.7.1317" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f868c99c629 code=0x7ffc0000 [ 1286.813698][ T29] audit: type=1326 audit(1771411183.407:272): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12565 comm="syz.7.1317" exe="/root/syz-executor" sig=0 arch=c000003e syscall=427 compat=0 ip=0x7f868c99c629 code=0x7ffc0000 [ 1287.059438][ T29] audit: type=1326 audit(1771411183.407:273): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12565 comm="syz.7.1317" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f868c99c629 code=0x7ffc0000 [ 1287.267722][ T29] audit: type=1326 audit(1771411183.407:274): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12565 comm="syz.7.1317" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f868c99c629 code=0x7ffc0000 [ 1287.505201][ T29] audit: type=1326 audit(1771411183.417:275): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12565 comm="syz.7.1317" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f868c99c629 code=0x7ffc0000 [ 1287.761306][ T29] audit: type=1326 audit(1771411183.417:276): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12565 comm="syz.7.1317" exe="/root/syz-executor" sig=0 arch=c000003e syscall=55 compat=0 ip=0x7f868c99c629 code=0x7ffc0000 [ 1291.208159][T12622] loop5: detected capacity change from 0 to 4095 [ 1295.205721][T12647] syzkaller0: entered promiscuous mode [ 1295.211692][T12647] syzkaller0: entered allmulticast mode [ 1297.569194][T12679] overlayfs: failed to clone upperpath [ 1310.691181][ T1291] ieee802154 phy0 wpan0: encryption failed: -22 [ 1310.698160][ T1291] ieee802154 phy1 wpan1: encryption failed: -22 [ 1315.753274][T12855] loop5: detected capacity change from 0 to 4095 [ 1317.580899][ T24] usb 2-1: new high-speed USB device number 16 using dummy_hcd [ 1318.065550][ T24] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1318.292460][ T24] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1318.505483][ T24] usb 2-1: New USB device found, idVendor=256c, idProduct=006d, bcdDevice= 0.00 [ 1318.678747][ T24] usb 2-1: New USB device strings: Mfr=2, Product=0, SerialNumber=0 [ 1318.824366][ T24] usb 2-1: Manufacturer: syz [ 1319.007627][ T24] usb 2-1: config 0 descriptor?? [ 1321.812041][ T24] usb 2-1: can't set config #0, error -71 [ 1321.983423][ T24] usb 2-1: USB disconnect, device number 16 [ 1330.175125][T12969] overlayfs: failed to clone upperpath [ 1335.533553][ T9398] usb 2-1: new high-speed USB device number 17 using dummy_hcd [ 1335.909846][ T9398] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1335.938466][ T9398] usb 2-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 1336.031688][ T9398] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1336.117583][ T9398] usb 2-1: config 0 descriptor?? [ 1336.432636][ T9398] usbhid 2-1:0.0: can't add hid device: -71 [ 1336.518071][ T9398] usbhid 2-1:0.0: probe with driver usbhid failed with error -71 [ 1336.675399][ T9398] usb 2-1: USB disconnect, device number 17 [ 1337.255029][ T9398] usb 2-1: new full-speed USB device number 18 using dummy_hcd [ 1337.525800][ T9398] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 1337.594830][ T9398] usb 2-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 1337.654909][ T9398] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1337.722050][ T9398] usb 2-1: config 0 descriptor?? [ 1337.773928][ T9398] hub 2-1:0.0: USB hub found [ 1337.849615][T13058] fuse: Bad value for 'fd' [ 1338.197081][ T9398] hub 2-1:0.0: config failed, can't read hub descriptor (err -22) [ 1338.794456][ T9398] usbhid 2-1:0.0: can't add hid device: -71 [ 1338.801478][ T9398] usbhid 2-1:0.0: probe with driver usbhid failed with error -71 [ 1338.896642][ T9398] usb 2-1: USB disconnect, device number 18 [ 1342.004756][ T10] usb 2-1: new high-speed USB device number 19 using dummy_hcd [ 1343.481898][ T10] usb 2-1: Using ep0 maxpacket: 16 [ 1343.495930][ T10] usb 2-1: config 0 interface 0 altsetting 5 has 2 endpoint descriptors, different from the interface descriptor's value: 1 [ 1343.544757][ T10] usb 2-1: config 0 interface 0 has no altsetting 0 [ 1343.552232][ T10] usb 2-1: New USB device found, idVendor=1532, idProduct=011b, bcdDevice= 0.00 [ 1343.594699][ T10] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1343.619497][ T10] usb 2-1: config 0 descriptor?? [ 1344.202784][ T10] usb 2-1: can't set config #0, error -71 [ 1344.289258][ T10] usb 2-1: USB disconnect, device number 19 [ 1344.814886][ T10] usb 2-1: new high-speed USB device number 20 using dummy_hcd [ 1345.065401][ T10] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1345.138616][ T10] usb 2-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 1345.215614][ T10] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1345.313873][ T10] usb 2-1: config 0 descriptor?? [ 1345.693527][ T10] usbhid 2-1:0.0: can't add hid device: -71 [ 1345.739739][ T10] usbhid 2-1:0.0: probe with driver usbhid failed with error -71 [ 1345.828901][ T10] usb 2-1: USB disconnect, device number 20 [ 1354.425575][T11204] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 1354.466479][T11204] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 1354.488944][T11204] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 1354.522723][T11204] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 1354.557609][T11204] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 1355.849357][T13179] loop1: detected capacity change from 0 to 128 [ 1355.983140][T13179] syz.1.1495: attempt to access beyond end of device [ 1355.983140][T13179] loop1: rw=1, sector=153, nr_sectors = 8 limit=128 [ 1355.997731][T13179] syz.1.1495: attempt to access beyond end of device [ 1355.997731][T13179] loop1: rw=1, sector=169, nr_sectors = 8 limit=128 [ 1356.038545][T13174] syz.1.1495: attempt to access beyond end of device [ 1356.038545][T13174] loop1: rw=8388608, sector=176, nr_sectors = 1 limit=128 [ 1356.728758][T11084] Bluetooth: hci1: command tx timeout [ 1357.635441][T13156] chnl_net:caif_netlink_parms(): no params data found [ 1358.807230][T11084] Bluetooth: hci1: command tx timeout [ 1359.563357][T13207] overlayfs: failed to resolve './file1': -2 [ 1359.957048][ T1028] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1360.237468][ T1028] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1360.508408][ T1028] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1360.892209][T11084] Bluetooth: hci1: command tx timeout [ 1360.939191][ T1028] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1361.215002][T13156] bridge0: port 1(bridge_slave_0) entered blocking state [ 1361.257646][T13156] bridge0: port 1(bridge_slave_0) entered disabled state [ 1361.290460][T13156] bridge_slave_0: entered allmulticast mode [ 1361.326969][T13156] bridge_slave_0: entered promiscuous mode [ 1361.436162][T13156] bridge0: port 2(bridge_slave_1) entered blocking state [ 1361.527400][T13156] bridge0: port 2(bridge_slave_1) entered disabled state [ 1361.559836][T13156] bridge_slave_1: entered allmulticast mode [ 1361.590254][T13156] bridge_slave_1: entered promiscuous mode [ 1362.971208][T11084] Bluetooth: hci1: command tx timeout [ 1366.210345][T13156] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1366.506650][T13156] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1366.826047][T13261] fuse: Unknown parameter '0x0000000000000003' [ 1367.222441][T13156] team0: Port device team_slave_0 added [ 1367.275868][ T1028] bridge_slave_1: left allmulticast mode [ 1367.303117][ T1028] bridge_slave_1: left promiscuous mode [ 1367.338229][ T1028] bridge0: port 2(bridge_slave_1) entered disabled state [ 1367.513341][ T1028] bridge_slave_0: left allmulticast mode [ 1367.524008][ T1028] bridge_slave_0: left promiscuous mode [ 1367.585507][ T1028] bridge0: port 1(bridge_slave_0) entered disabled state [ 1371.006787][ T1028] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1371.237602][ T1028] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1371.411592][ T1028] bond0 (unregistering): Released all slaves [ 1371.427685][ T1291] ieee802154 phy0 wpan0: encryption failed: -22 [ 1371.434333][ T1291] ieee802154 phy1 wpan1: encryption failed: -22 [ 1371.513984][T13156] team0: Port device team_slave_1 added [ 1371.975543][T13156] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1371.994100][T13156] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1372.101435][T13156] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1372.357218][T13156] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1372.408223][T13156] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1372.565019][T13156] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1372.738890][T13310] fuse: Unknown parameter '0x0000000000000003' [ 1372.909685][T13306] netlink: 'syz.1.1536': attribute type 27 has an invalid length. [ 1375.049518][T13306] bridge0: port 2(bridge_slave_1) entered disabled state [ 1375.058342][T13306] bridge0: port 1(bridge_slave_0) entered disabled state [ 1376.555229][T13349] libceph: resolve '400' (ret=-3): failed [ 1377.007028][T13353] overlayfs: option "workdir=./bus" is useless in a non-upper mount, ignore [ 1377.023255][T13353] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent [ 1378.668743][T13306] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1378.809066][T13306] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1380.331193][T13156] hsr_slave_0: entered promiscuous mode [ 1380.372023][T13156] hsr_slave_1: entered promiscuous mode [ 1380.417639][T13156] debugfs: 'hsr0' already exists in 'hsr' [ 1380.423598][T13156] Cannot create hsr debugfs directory [ 1380.502485][T11627] netdevsim netdevsim1 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1380.545114][ T5877] netdevsim netdevsim1 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1380.673113][ T1028] hsr_slave_0: left promiscuous mode [ 1380.736188][ T1028] hsr_slave_1: left promiscuous mode [ 1380.744364][ T1028] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1380.783099][ T1028] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1380.818873][ T1028] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1380.876065][ T1028] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1381.161175][ T1028] veth1_macvtap: left promiscuous mode [ 1381.212915][ T1028] veth0_macvtap: left promiscuous mode [ 1381.240400][ T1028] veth1_vlan: left promiscuous mode [ 1381.266233][ T1028] veth0_vlan: left promiscuous mode [ 1382.491928][T13399] libceph: resolve '400' (ret=-3): failed [ 1382.764729][T13373] usb 2-1: new high-speed USB device number 22 using dummy_hcd [ 1382.974742][T13373] usb 2-1: Using ep0 maxpacket: 16 [ 1382.984287][T13373] usb 2-1: too many configurations: 17, using maximum allowed: 8 [ 1383.094826][T13373] usb 2-1: string descriptor 0 read error: -71 [ 1383.114730][T13373] usb 2-1: New USB device found, idVendor=04e8, idProduct=a101, bcdDevice= 4.48 [ 1383.152424][T13373] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1383.229340][T13373] r8152-cfgselector 2-1: Unknown version 0x0000 [ 1383.236868][T13373] r8152-cfgselector 2-1: rejected 8 configurations due to insufficient available bus power [ 1383.257950][T13373] r8152-cfgselector 2-1: no configuration chosen from 8 choices [ 1383.332995][T13373] r8152-cfgselector 2-1: USB disconnect, device number 22 [ 1383.774163][ T1028] team0 (unregistering): Port device team_slave_1 removed [ 1383.871126][ T1028] team0 (unregistering): Port device team_slave_0 removed [ 1384.881265][ T5877] netdevsim netdevsim1 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1384.900442][ T5877] netdevsim netdevsim1 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1386.281597][T13433] loop5: detected capacity change from 0 to 4095 [ 1387.047347][T13439] libceph: resolve '400' (ret=-3): failed [ 1389.011256][T13156] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 1389.059820][T13156] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 1389.144291][T13156] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 1389.235865][T13156] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 1389.634003][T13467] overlayfs: failed to clone upperpath [ 1390.850412][T13156] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1391.164257][T13156] 8021q: adding VLAN 0 to HW filter on device team0 [ 1391.266788][ T140] bridge0: port 1(bridge_slave_0) entered blocking state [ 1391.274806][ T140] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1391.378491][ T140] bridge0: port 2(bridge_slave_1) entered blocking state [ 1391.386295][ T140] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1392.662012][T13509] netlink: 12 bytes leftover after parsing attributes in process `syz.8.1590'. [ 1392.762448][T13509] vlan2: entered promiscuous mode [ 1392.789180][T13509] gretap0: entered promiscuous mode [ 1394.463186][T13156] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1395.238192][T13156] veth0_vlan: entered promiscuous mode [ 1395.382940][T13156] veth1_vlan: entered promiscuous mode [ 1395.931166][T13550] overlayfs: failed to clone upperpath [ 1396.057848][T13156] veth0_macvtap: entered promiscuous mode [ 1396.180088][T13156] veth1_macvtap: entered promiscuous mode [ 1396.643264][T13156] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1396.900727][T13156] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1397.170321][ T12] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1397.264811][ T12] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1397.273893][ T12] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1397.408348][ T12] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1398.084420][T13568] kvm: kvm [13567]: vcpu0, guest rIP: 0x18e Unhandled WRMSR(0xc2) = 0x495a [ 1398.185456][T13568] kvm: kvm [13567]: vcpu0, guest rIP: 0x18e Unhandled WRMSR(0xc2) = 0x1016 [ 1400.008173][T13606] overlayfs: failed to clone upperpath [ 1402.484383][T13645] libceph: resolve '400' (ret=-3): failed [ 1404.211340][T13666] netlink: 'syz.9.1631': attribute type 27 has an invalid length. [ 1404.983684][T13669] loop1: detected capacity change from 0 to 256 [ 1405.120252][T13669] FAT-fs (loop1): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 1405.343080][T13669] FAT-fs (loop1): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 1409.726924][T13666] bridge0: port 2(bridge_slave_1) entered disabled state [ 1409.735696][T13666] bridge0: port 1(bridge_slave_0) entered disabled state [ 1411.576547][T13666] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1411.856725][T13666] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1412.534804][ T29] kauditd_printk_skb: 2 callbacks suppressed [ 1412.534890][ T29] audit: type=1326 audit(1771411310.857:279): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13698 comm="syz.7.1641" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f868c99c629 code=0x7ffc0000 [ 1412.784137][ T29] audit: type=1326 audit(1771411310.947:280): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13698 comm="syz.7.1641" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f868c99c629 code=0x7ffc0000 [ 1413.000167][ T29] audit: type=1326 audit(1771411310.947:281): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13698 comm="syz.7.1641" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f868c99c629 code=0x7ffc0000 [ 1413.233680][ T29] audit: type=1326 audit(1771411310.957:282): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13698 comm="syz.7.1641" exe="/root/syz-executor" sig=0 arch=c000003e syscall=425 compat=0 ip=0x7f868c99c629 code=0x7ffc0000 [ 1413.481017][ T29] audit: type=1326 audit(1771411310.957:283): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13698 comm="syz.7.1641" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f868c99c629 code=0x7ffc0000 [ 1413.588886][ T29] audit: type=1326 audit(1771411310.957:284): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13698 comm="syz.7.1641" exe="/root/syz-executor" sig=0 arch=c000003e syscall=427 compat=0 ip=0x7f868c99c629 code=0x7ffc0000 [ 1413.616632][T11204] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 1413.646055][T11204] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 1413.660912][T11204] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 1413.688099][T11204] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 1413.700328][T11204] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 1413.779548][ T29] audit: type=1326 audit(1771411310.957:285): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13698 comm="syz.7.1641" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f868c99c629 code=0x7ffc0000 [ 1413.820157][T13705] libceph: resolve '400' (ret=-3): failed [ 1413.903380][ T29] audit: type=1326 audit(1771411310.967:286): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13698 comm="syz.7.1641" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f868c99c629 code=0x7ffc0000 [ 1414.038201][ T29] audit: type=1326 audit(1771411310.967:287): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13698 comm="syz.7.1641" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f868c99c629 code=0x7ffc0000 [ 1414.109888][ T29] audit: type=1326 audit(1771411310.997:288): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13698 comm="syz.7.1641" exe="/root/syz-executor" sig=0 arch=c000003e syscall=55 compat=0 ip=0x7f868c99c629 code=0x7ffc0000 [ 1414.214791][T13370] usb 2-1: new high-speed USB device number 23 using dummy_hcd [ 1414.403834][T13370] usb 2-1: Using ep0 maxpacket: 16 [ 1414.452501][T13370] usb 2-1: too many configurations: 17, using maximum allowed: 8 [ 1414.619161][T13370] usb 2-1: string descriptor 0 read error: -71 [ 1414.661881][T13370] usb 2-1: New USB device found, idVendor=04e8, idProduct=a101, bcdDevice= 4.48 [ 1414.695366][T13370] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1414.778202][T13370] r8152-cfgselector 2-1: Unknown version 0x0000 [ 1414.818259][T13370] r8152-cfgselector 2-1: rejected 8 configurations due to insufficient available bus power [ 1414.872595][T13370] r8152-cfgselector 2-1: no configuration chosen from 8 choices [ 1415.005241][T13370] r8152-cfgselector 2-1: USB disconnect, device number 23 [ 1415.072258][T11627] netdevsim netdevsim9 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1415.145077][T11627] netdevsim netdevsim9 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1415.154331][T11627] netdevsim netdevsim9 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1415.355645][T11627] netdevsim netdevsim9 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1415.764876][T11204] Bluetooth: hci2: command tx timeout [ 1416.702724][T13732] xt_hashlimit: size too large, truncated to 1048576 [ 1417.677984][T13704] chnl_net:caif_netlink_parms(): no params data found [ 1417.845574][T11204] Bluetooth: hci2: command tx timeout [ 1418.508061][T13753] loop1: detected capacity change from 0 to 512 [ 1418.640043][T13753] EXT4-fs: journaled quota format not specified [ 1418.745692][ T29] kauditd_printk_skb: 2 callbacks suppressed [ 1418.745780][ T29] audit: type=1326 audit(1771411317.037:291): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13751 comm="syz.1.1655" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2c6f99c629 code=0x7ffc0000 [ 1418.879507][ T12] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1418.893178][ T29] audit: type=1326 audit(1771411317.077:292): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13751 comm="syz.1.1655" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f2c6f99c629 code=0x7ffc0000 [ 1418.956620][T13757] libceph: resolve '400' (ret=-3): failed [ 1419.008347][ T29] audit: type=1326 audit(1771411317.077:293): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13751 comm="syz.1.1655" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2c6f99c629 code=0x7ffc0000 [ 1419.075648][ T29] audit: type=1326 audit(1771411317.087:294): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13751 comm="syz.1.1655" exe="/root/syz-executor" sig=0 arch=c000003e syscall=425 compat=0 ip=0x7f2c6f99c629 code=0x7ffc0000 [ 1419.265236][ T29] audit: type=1326 audit(1771411317.087:295): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13751 comm="syz.1.1655" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2c6f99c629 code=0x7ffc0000 [ 1419.356701][ T12] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1419.402128][ T29] audit: type=1326 audit(1771411317.097:296): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13751 comm="syz.1.1655" exe="/root/syz-executor" sig=0 arch=c000003e syscall=427 compat=0 ip=0x7f2c6f99c629 code=0x7ffc0000 [ 1419.537745][ T29] audit: type=1326 audit(1771411317.097:297): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13751 comm="syz.1.1655" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2c6f99c629 code=0x7ffc0000 [ 1419.660434][ T12] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1419.687408][ T29] audit: type=1326 audit(1771411317.127:298): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13751 comm="syz.1.1655" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f2c6f99c629 code=0x7ffc0000 [ 1419.767356][ T29] audit: type=1326 audit(1771411317.127:299): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13751 comm="syz.1.1655" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2c6f99c629 code=0x7ffc0000 [ 1419.871731][ T29] audit: type=1326 audit(1771411317.147:300): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13751 comm="syz.1.1655" exe="/root/syz-executor" sig=0 arch=c000003e syscall=55 compat=0 ip=0x7f2c6f99c629 code=0x7ffc0000 [ 1419.924943][T11204] Bluetooth: hci2: command tx timeout [ 1420.270413][ T12] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1420.383934][T13704] bridge0: port 1(bridge_slave_0) entered blocking state [ 1420.433399][T13704] bridge0: port 1(bridge_slave_0) entered disabled state [ 1420.452400][T13704] bridge_slave_0: entered allmulticast mode [ 1420.492407][T13704] bridge_slave_0: entered promiscuous mode [ 1420.558827][T13704] bridge0: port 2(bridge_slave_1) entered blocking state [ 1420.578637][T13704] bridge0: port 2(bridge_slave_1) entered disabled state [ 1420.597967][T13704] bridge_slave_1: entered allmulticast mode [ 1420.629792][T13704] bridge_slave_1: entered promiscuous mode [ 1420.695474][T13370] usb 2-1: new high-speed USB device number 24 using dummy_hcd [ 1420.901656][T13370] usb 2-1: config 17 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 1420.940296][T13370] usb 2-1: config 17 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 1420.974695][T13370] usb 2-1: config 17 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 1421.004958][T13370] usb 2-1: New USB device found, idVendor=0458, idProduct=5003, bcdDevice= 0.00 [ 1421.029978][T13370] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1421.098491][T13773] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 1421.733048][T13704] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1421.782932][T13704] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1422.213897][T11204] Bluetooth: hci2: command tx timeout [ 1422.639769][T13704] team0: Port device team_slave_0 added [ 1422.797245][T13704] team0: Port device team_slave_1 added [ 1423.643494][T13704] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1423.683626][T13704] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1423.889200][T13704] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1423.948880][T13370] aiptek 2-1:17.0: Aiptek using 400 ms programming speed [ 1423.979536][T13370] input: Aiptek as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:17.0/input/input26 [ 1424.252541][ T12] bridge_slave_1: left allmulticast mode [ 1424.284916][ T12] bridge_slave_1: left promiscuous mode [ 1424.356170][ T12] bridge0: port 2(bridge_slave_1) entered disabled state [ 1424.481954][ T12] bridge_slave_0: left allmulticast mode [ 1424.514691][ T12] bridge_slave_0: left promiscuous mode [ 1424.585762][ T12] bridge0: port 1(bridge_slave_0) entered disabled state [ 1424.764399][ C0] aiptek 2-1:17.0: aiptek_irq - usb_submit_urb failed with result -19 [ 1424.773510][T13370] usb 2-1: USB disconnect, device number 24 [ 1424.881853][T13802] loop1: detected capacity change from 0 to 512 [ 1424.934192][T13804] libceph: resolve '400' (ret=-3): failed [ 1424.985786][T13802] EXT4-fs: journaled quota format not specified [ 1425.179940][ T29] kauditd_printk_skb: 2 callbacks suppressed [ 1425.180026][ T29] audit: type=1326 audit(1771411323.487:303): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13801 comm="syz.1.1667" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2c6f99c629 code=0x7ffc0000 [ 1425.324840][ T29] audit: type=1326 audit(1771411323.527:304): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13801 comm="syz.1.1667" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2c6f99c629 code=0x7ffc0000 [ 1425.438859][ T29] audit: type=1326 audit(1771411323.587:305): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13801 comm="syz.1.1667" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f2c6f99c629 code=0x7ffc0000 [ 1425.562220][ T29] audit: type=1326 audit(1771411323.587:306): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13801 comm="syz.1.1667" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2c6f99c629 code=0x7ffc0000 [ 1425.590826][ T29] audit: type=1326 audit(1771411323.587:307): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13801 comm="syz.1.1667" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2c6f99c629 code=0x7ffc0000 [ 1425.697080][ T29] audit: type=1326 audit(1771411323.597:308): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13801 comm="syz.1.1667" exe="/root/syz-executor" sig=0 arch=c000003e syscall=427 compat=0 ip=0x7f2c6f99c629 code=0x7ffc0000 [ 1425.784906][ T29] audit: type=1326 audit(1771411323.677:309): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13801 comm="syz.1.1667" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2c6f99c629 code=0x7ffc0000 [ 1425.900831][ T29] audit: type=1326 audit(1771411323.677:310): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13801 comm="syz.1.1667" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2c6f99c629 code=0x7ffc0000 [ 1426.352237][ T12] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1426.426818][ T12] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1426.458908][ T12] bond0 (unregistering): Released all slaves [ 1426.507737][T13704] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1426.546207][T13704] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1426.605269][T13704] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1426.848348][ T12] hsr_slave_0: left promiscuous mode [ 1426.895559][ T12] hsr_slave_1: left promiscuous mode [ 1426.914109][ T12] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1426.953066][ T12] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1426.995776][ T12] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1427.019987][ T12] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1427.085525][ T12] veth1_macvtap: left promiscuous mode [ 1427.094970][ T12] veth0_macvtap: left promiscuous mode [ 1427.101145][ T12] veth1_vlan: left promiscuous mode [ 1427.107549][ T12] veth0_vlan: left promiscuous mode [ 1428.244157][T13838] libceph: resolve '400' (ret=-3): failed [ 1428.356601][ T12] team0 (unregistering): Port device team_slave_1 removed [ 1428.485640][ T12] team0 (unregistering): Port device team_slave_0 removed [ 1428.768711][T13845] loop1: detected capacity change from 0 to 128 [ 1428.855519][T13847] syz.1.1682: attempt to access beyond end of device [ 1428.855519][T13847] loop1: rw=1, sector=145, nr_sectors = 16 limit=128 [ 1428.869502][T13847] syz.1.1682: attempt to access beyond end of device [ 1428.869502][T13847] loop1: rw=1, sector=169, nr_sectors = 8 limit=128 [ 1428.889130][T13847] syz.1.1682: attempt to access beyond end of device [ 1428.889130][T13847] loop1: rw=1, sector=185, nr_sectors = 8 limit=128 [ 1428.902939][T13847] syz.1.1682: attempt to access beyond end of device [ 1428.902939][T13847] loop1: rw=1, sector=201, nr_sectors = 8 limit=128 [ 1428.917028][T13847] syz.1.1682: attempt to access beyond end of device [ 1428.917028][T13847] loop1: rw=1, sector=217, nr_sectors = 8 limit=128 [ 1428.931805][T13847] syz.1.1682: attempt to access beyond end of device [ 1428.931805][T13847] loop1: rw=1, sector=233, nr_sectors = 8 limit=128 [ 1428.945577][T13847] syz.1.1682: attempt to access beyond end of device [ 1428.945577][T13847] loop1: rw=1, sector=249, nr_sectors = 8 limit=128 [ 1428.959328][T13847] syz.1.1682: attempt to access beyond end of device [ 1428.959328][T13847] loop1: rw=1, sector=265, nr_sectors = 8 limit=128 [ 1428.973419][T13847] syz.1.1682: attempt to access beyond end of device [ 1428.973419][T13847] loop1: rw=1, sector=281, nr_sectors = 8 limit=128 [ 1428.987341][T13847] syz.1.1682: attempt to access beyond end of device [ 1428.987341][T13847] loop1: rw=1, sector=297, nr_sectors = 8 limit=128 [ 1429.360220][ T29] audit: type=1326 audit(1771411327.707:311): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13844 comm="syz.7.1683" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f868c99c629 code=0x7ffc0000 [ 1429.436932][ T29] audit: type=1326 audit(1771411327.767:312): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13844 comm="syz.7.1683" exe="/root/syz-executor" sig=0 arch=c000003e syscall=425 compat=0 ip=0x7f868c99c629 code=0x7ffc0000 [ 1430.107334][T13704] hsr_slave_0: entered promiscuous mode [ 1430.151863][T13704] hsr_slave_1: entered promiscuous mode [ 1430.193656][T13704] debugfs: 'hsr0' already exists in 'hsr' [ 1430.200713][T13704] Cannot create hsr debugfs directory [ 1431.856345][T13875] libceph: resolve '400' (ret=-3): failed [ 1432.194881][T13373] usb 2-1: new high-speed USB device number 25 using dummy_hcd [ 1432.414981][T13373] usb 2-1: Using ep0 maxpacket: 16 [ 1432.442138][T13373] usb 2-1: too many configurations: 17, using maximum allowed: 8 [ 1432.928604][ T1291] ieee802154 phy0 wpan0: encryption failed: -22 [ 1432.936457][ T1291] ieee802154 phy1 wpan1: encryption failed: -22 [ 1433.032534][ T29] kauditd_printk_skb: 8 callbacks suppressed [ 1433.032687][ T29] audit: type=1326 audit(1771411331.357:321): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13881 comm="syz.8.1695" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1a84b9c629 code=0x7ffc0000 [ 1433.101311][ T29] audit: type=1326 audit(1771411331.427:322): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13881 comm="syz.8.1695" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f1a84b9c629 code=0x7ffc0000 [ 1433.165419][ T29] audit: type=1326 audit(1771411331.427:323): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13881 comm="syz.8.1695" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1a84b9c629 code=0x7ffc0000 [ 1433.200094][T13373] usb 2-1: string descriptor 0 read error: -71 [ 1433.209504][ T29] audit: type=1326 audit(1771411331.437:324): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13881 comm="syz.8.1695" exe="/root/syz-executor" sig=0 arch=c000003e syscall=425 compat=0 ip=0x7f1a84b9c629 code=0x7ffc0000 [ 1433.234287][T13373] usb 2-1: New USB device found, idVendor=04e8, idProduct=a101, bcdDevice= 4.48 [ 1433.244001][T13373] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1433.325879][T13373] r8152-cfgselector 2-1: Unknown version 0x0000 [ 1433.349079][ T29] audit: type=1326 audit(1771411331.437:325): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13881 comm="syz.8.1695" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1a84b9c629 code=0x7ffc0000 [ 1433.392849][T13373] r8152-cfgselector 2-1: rejected 8 configurations due to insufficient available bus power [ 1433.433005][T13373] r8152-cfgselector 2-1: no configuration chosen from 8 choices [ 1433.459752][ T29] audit: type=1326 audit(1771411331.447:326): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13881 comm="syz.8.1695" exe="/root/syz-executor" sig=0 arch=c000003e syscall=427 compat=0 ip=0x7f1a84b9c629 code=0x7ffc0000 [ 1433.496056][T13373] r8152-cfgselector 2-1: USB disconnect, device number 25 [ 1433.509884][ T29] audit: type=1326 audit(1771411331.457:327): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13881 comm="syz.8.1695" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1a84b9c629 code=0x7ffc0000 [ 1433.614739][ T29] audit: type=1326 audit(1771411331.467:328): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13881 comm="syz.8.1695" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f1a84b9c629 code=0x7ffc0000 [ 1433.680084][ T29] audit: type=1326 audit(1771411331.507:329): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13881 comm="syz.8.1695" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1a84b9c629 code=0x7ffc0000 [ 1433.742017][ T29] audit: type=1326 audit(1771411331.507:330): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13881 comm="syz.8.1695" exe="/root/syz-executor" sig=0 arch=c000003e syscall=55 compat=0 ip=0x7f1a84b9c629 code=0x7ffc0000 [ 1434.636178][T13704] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 1434.713119][T13704] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 1434.805072][T13704] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 1434.861808][T13704] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 1436.161792][T13917] loop1: detected capacity change from 0 to 512 [ 1436.252689][T13917] EXT4-fs: journaled quota format not specified [ 1436.506516][T13704] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1436.710869][T13704] 8021q: adding VLAN 0 to HW filter on device team0 [ 1436.821068][ T6111] bridge0: port 1(bridge_slave_0) entered blocking state [ 1436.828955][ T6111] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1437.110181][ T1028] bridge0: port 2(bridge_slave_1) entered blocking state [ 1437.118020][ T1028] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1439.447993][T13964] 8021q: adding VLAN 0 to HW filter on device bond2 [ 1439.506330][T13964] bond0: (slave bond2): Enslaving as an active interface with an up link [ 1440.203065][T13704] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1440.957312][T13704] veth0_vlan: entered promiscuous mode [ 1441.106997][T13704] veth1_vlan: entered promiscuous mode [ 1441.175931][T13999] fuse: Bad value for 'fd' [ 1441.831611][T13704] veth0_macvtap: entered promiscuous mode [ 1441.922817][T13704] veth1_macvtap: entered promiscuous mode [ 1442.222701][T13704] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1442.388683][T13704] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1442.711442][T14013] 8021q: adding VLAN 0 to HW filter on device bond1 [ 1442.728440][T14013] bond0: (slave bond1): Enslaving as an active interface with an up link [ 1442.844991][ T8774] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1442.886323][ T12] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1442.948028][ T12] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1442.997055][ T12] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1445.045043][T13326] usb 2-1: new high-speed USB device number 26 using dummy_hcd [ 1445.271941][T13326] usb 2-1: Using ep0 maxpacket: 16 [ 1445.299687][T13326] usb 2-1: config 0 interface 0 altsetting 5 has 2 endpoint descriptors, different from the interface descriptor's value: 1 [ 1445.357701][T13326] usb 2-1: config 0 interface 0 has no altsetting 0 [ 1445.379838][T13326] usb 2-1: New USB device found, idVendor=1532, idProduct=011b, bcdDevice= 0.00 [ 1445.421646][T13326] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1445.505725][T13326] usb 2-1: config 0 descriptor?? [ 1445.974160][T13326] razer 0003:1532:011B.000D: unknown main item tag 0x0 [ 1446.032059][T13326] razer 0003:1532:011B.000D: unknown main item tag 0x0 [ 1446.065212][T13326] razer 0003:1532:011B.000D: unknown main item tag 0x0 [ 1446.284156][T13326] razer 0003:1532:011B.000D: failed to enable macro keys: -71 [ 1446.359606][T13326] razer 0003:1532:011B.000D: hidraw0: USB HID vff.ff Device [HID 1532:011b] on usb-dummy_hcd.1-1/input0 [ 1446.472056][T13326] usb 2-1: USB disconnect, device number 26 [ 1447.127155][T14084] bridge0: received packet on syz_tun with own address as source address (addr:aa:aa:aa:aa:aa:aa, vlan:0) [ 1447.148345][T14078] fido_id[14078]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.1/usb2/report_descriptor': No such file or directory [ 1448.056925][T14097] fuse: Bad value for 'group_id' [ 1448.062099][T14097] fuse: Bad value for 'group_id' [ 1449.730644][T14120] syzkaller0: entered promiscuous mode [ 1449.748690][T14120] syzkaller0: entered allmulticast mode [ 1450.141238][T11627] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1450.228632][T11627] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1450.451563][ T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1450.509255][ T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1451.151488][T14139] netlink: 20 bytes leftover after parsing attributes in process `syz.1.1771'. [ 1451.305960][T14139] vlan2: entered promiscuous mode [ 1451.356499][T14139] gretap0: entered promiscuous mode [ 1452.665981][T14163] overlayfs: failed lookup in lower (newroot/190, name='file0', err=-40): overlapping layers [ 1453.477472][T14178] netlink: 12 bytes leftover after parsing attributes in process `syz.9.1784'. [ 1453.579391][T14180] loop1: detected capacity change from 0 to 64 [ 1453.597672][T14178] vlan2: entered promiscuous mode [ 1453.631027][T14180] hfs: Unknown parameter '18446744073709551615type' [ 1453.654896][T14178] gretap0: entered promiscuous mode [ 1453.999281][T14180] loop1: detected capacity change from 0 to 256 [ 1454.549864][T14180] FAT-fs (loop1): Directory bread(block 64) failed [ 1454.570318][T14180] FAT-fs (loop1): Directory bread(block 65) failed [ 1454.604235][T14194] netlink: 'syz.2.1788': attribute type 27 has an invalid length. [ 1454.623195][T14180] FAT-fs (loop1): Directory bread(block 66) failed [ 1454.666462][T14180] FAT-fs (loop1): Directory bread(block 67) failed [ 1454.673398][T14180] FAT-fs (loop1): Directory bread(block 68) failed [ 1454.738901][T14180] FAT-fs (loop1): Directory bread(block 69) failed [ 1454.755371][T14180] FAT-fs (loop1): Directory bread(block 70) failed [ 1454.762136][T14180] FAT-fs (loop1): Directory bread(block 71) failed [ 1454.847913][T14180] FAT-fs (loop1): Directory bread(block 72) failed [ 1454.889688][T14180] FAT-fs (loop1): Directory bread(block 73) failed [ 1455.065536][T14194] bridge0: port 2(bridge_slave_1) entered disabled state [ 1455.075468][T14194] bridge0: port 1(bridge_slave_0) entered disabled state [ 1456.150774][T14194] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1456.174859][T13326] usb 2-1: new high-speed USB device number 27 using dummy_hcd [ 1456.234402][T14194] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1456.366063][T13326] usb 2-1: Using ep0 maxpacket: 32 [ 1456.399886][T13326] usb 2-1: New USB device found, idVendor=0ac8, idProduct=0321, bcdDevice=6f.be [ 1456.428913][T13326] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1456.465919][T13326] usb 2-1: config 0 descriptor?? [ 1456.541314][T13326] gspca_main: vc032x-2.14.0 probing 0ac8:0321 [ 1457.145261][T13326] gspca_vc032x: reg_w err -71 [ 1457.157106][T13326] gspca_vc032x: I2c Bus Busy Wait 00 [ 1457.162593][T13326] gspca_vc032x: I2c Bus Busy Wait 00 [ 1457.215628][T13326] gspca_vc032x: I2c Bus Busy Wait 00 [ 1457.221200][T13326] gspca_vc032x: I2c Bus Busy Wait 00 [ 1457.250751][T13326] gspca_vc032x: I2c Bus Busy Wait 00 [ 1457.279039][T13326] gspca_vc032x: I2c Bus Busy Wait 00 [ 1457.302496][T13326] gspca_vc032x: I2c Bus Busy Wait 00 [ 1457.331479][T13326] gspca_vc032x: I2c Bus Busy Wait 00 [ 1457.344620][T13326] gspca_vc032x: I2c Bus Busy Wait 00 [ 1457.357235][ T12] netdevsim netdevsim2 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1457.371775][T13326] gspca_vc032x: I2c Bus Busy Wait 00 [ 1457.390687][ T12] netdevsim netdevsim2 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1457.404266][T13326] gspca_vc032x: I2c Bus Busy Wait 00 [ 1457.423519][T13326] gspca_vc032x: I2c Bus Busy Wait 00 [ 1457.440129][T13326] gspca_vc032x: I2c Bus Busy Wait 00 [ 1457.462651][T13326] gspca_vc032x: I2c Bus Busy Wait 00 [ 1457.499142][T13326] gspca_vc032x: I2c Bus Busy Wait 00 [ 1457.535299][T13326] gspca_vc032x: I2c Bus Busy Wait 00 [ 1457.550503][T13326] gspca_vc032x: I2c Bus Busy Wait 00 [ 1457.572512][T13326] gspca_vc032x: I2c Bus Busy Wait 00 [ 1457.612273][T13326] gspca_vc032x: Unknown sensor... [ 1457.643522][T13326] vc032x 2-1:0.0: probe with driver vc032x failed with error -22 [ 1457.679740][T13326] usb 2-1: USB disconnect, device number 27 [ 1457.739157][ T12] netdevsim netdevsim2 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1457.794631][ T106] netdevsim netdevsim2 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1460.821122][T14272] fuse: Invalid rootmode [ 1462.910824][T14307] netlink: 20 bytes leftover after parsing attributes in process `syz.2.1819'. [ 1464.221728][T14326] netlink: 12 bytes leftover after parsing attributes in process `syz.8.1822'. [ 1464.413240][T14326] vlan2: entered promiscuous mode [ 1464.638011][T14334] fuse: Bad value for 'rootmode' [ 1465.222375][T14344] loop1: detected capacity change from 0 to 128 [ 1465.395797][T14347] netlink: 'syz.9.1830': attribute type 27 has an invalid length. [ 1465.457159][T14352] bio_check_eod: 101 callbacks suppressed [ 1465.457252][T14352] syz.1.1829: attempt to access beyond end of device [ 1465.457252][T14352] loop1: rw=1, sector=145, nr_sectors = 16 limit=128 [ 1465.501782][T14347] vlan2: left promiscuous mode [ 1465.539941][T14347] gretap0: left promiscuous mode [ 1465.553273][T14353] loop2: detected capacity change from 0 to 64 [ 1465.591907][T14353] hfs: Unknown parameter '18446744073709551615type' [ 1465.666839][T14352] syz.1.1829: attempt to access beyond end of device [ 1465.666839][T14352] loop1: rw=1, sector=169, nr_sectors = 8 limit=128 [ 1465.736834][T14352] syz.1.1829: attempt to access beyond end of device [ 1465.736834][T14352] loop1: rw=1, sector=185, nr_sectors = 8 limit=128 [ 1465.885900][T14352] syz.1.1829: attempt to access beyond end of device [ 1465.885900][T14352] loop1: rw=1, sector=201, nr_sectors = 8 limit=128 [ 1466.081960][T14353] loop2: detected capacity change from 0 to 256 [ 1466.385490][T14366] netlink: 20 bytes leftover after parsing attributes in process `syz.7.1834'. [ 1466.626505][ T12] kworker/u8:0: attempt to access beyond end of device [ 1466.626505][ T12] loop1: rw=1, sector=217, nr_sectors = 8 limit=128 [ 1466.722243][ T12] kworker/u8:0: attempt to access beyond end of device [ 1466.722243][ T12] loop1: rw=1, sector=233, nr_sectors = 8 limit=128 [ 1466.748320][T14353] FAT-fs (loop2): Directory bread(block 64) failed [ 1466.765234][T14353] FAT-fs (loop2): Directory bread(block 65) failed [ 1466.772155][T14353] FAT-fs (loop2): Directory bread(block 66) failed [ 1466.784639][ T12] kworker/u8:0: attempt to access beyond end of device [ 1466.784639][ T12] loop1: rw=1, sector=249, nr_sectors = 8 limit=128 [ 1466.815539][T14353] FAT-fs (loop2): Directory bread(block 67) failed [ 1466.832213][T14353] FAT-fs (loop2): Directory bread(block 68) failed [ 1466.840420][ T12] kworker/u8:0: attempt to access beyond end of device [ 1466.840420][ T12] loop1: rw=1, sector=265, nr_sectors = 8 limit=128 [ 1466.866590][T14353] FAT-fs (loop2): Directory bread(block 69) failed [ 1466.885018][ T12] kworker/u8:0: attempt to access beyond end of device [ 1466.885018][ T12] loop1: rw=1, sector=281, nr_sectors = 8 limit=128 [ 1466.903868][T14353] FAT-fs (loop2): Directory bread(block 70) failed [ 1466.932397][T14353] FAT-fs (loop2): Directory bread(block 71) failed [ 1466.954993][ T12] kworker/u8:0: attempt to access beyond end of device [ 1466.954993][ T12] loop1: rw=1, sector=297, nr_sectors = 8 limit=128 [ 1466.971423][T14353] FAT-fs (loop2): Directory bread(block 72) failed [ 1467.015247][T14353] FAT-fs (loop2): Directory bread(block 73) failed [ 1467.251814][T14377] netlink: 12 bytes leftover after parsing attributes in process `syz.7.1839'. [ 1467.388391][T14377] vlan2: entered promiscuous mode [ 1467.433206][T14377] gretap0: entered promiscuous mode [ 1467.656867][T14382] fuse: Bad value for 'fd' [ 1468.831480][T14401] loop1: detected capacity change from 0 to 128 [ 1469.220248][T13326] usb 3-1: new high-speed USB device number 12 using dummy_hcd [ 1469.394697][T13326] usb 3-1: Using ep0 maxpacket: 16 [ 1469.421895][T13326] usb 3-1: config 0 has an invalid interface number: 105 but max is 0 [ 1469.455122][T13326] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1469.514986][T13326] usb 3-1: config 0 has no interface number 0 [ 1469.560241][T13326] usb 3-1: New USB device found, idVendor=046d, idProduct=08f3, bcdDevice= b.28 [ 1469.583077][T13326] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1469.614159][T13326] usb 3-1: Product: syz [ 1469.636141][T13326] usb 3-1: Manufacturer: syz [ 1469.659019][T13326] usb 3-1: SerialNumber: syz [ 1469.723076][T13326] usb 3-1: config 0 descriptor?? [ 1469.819170][T13326] uvcvideo 3-1:0.105: Found UVC 0.00 device syz (046d:08f3) [ 1469.851146][T13326] uvcvideo 3-1:0.105: No valid video chain found. [ 1469.989405][T13373] usb 3-1: USB disconnect, device number 12 [ 1470.731116][T14425] fuse: Bad value for 'fd' [ 1473.725145][T13326] usb 3-1: new high-speed USB device number 13 using dummy_hcd [ 1473.962510][T13326] usb 3-1: Using ep0 maxpacket: 16 [ 1474.005942][T13326] usb 3-1: config 0 has an invalid interface number: 105 but max is 0 [ 1474.014388][T13326] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1474.074857][T13326] usb 3-1: config 0 has no interface number 0 [ 1474.119979][T13326] usb 3-1: New USB device found, idVendor=046d, idProduct=08f3, bcdDevice= b.28 [ 1474.144199][T13326] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1474.155205][T13326] usb 3-1: Product: syz [ 1474.159610][T13326] usb 3-1: Manufacturer: syz [ 1474.195252][T13326] usb 3-1: SerialNumber: syz [ 1474.232879][T13326] usb 3-1: config 0 descriptor?? [ 1474.317453][T13326] uvcvideo 3-1:0.105: Found UVC 0.00 device syz (046d:08f3) [ 1474.345882][T13326] uvcvideo 3-1:0.105: No valid video chain found. [ 1474.512466][T13326] usb 3-1: USB disconnect, device number 13 [ 1476.035973][T13326] usb 3-1: new high-speed USB device number 14 using dummy_hcd [ 1476.272626][T13326] usb 3-1: config 128 has an invalid interface number: 187 but max is 0 [ 1476.311004][T13326] usb 3-1: config 128 has an invalid descriptor of length 0, skipping remainder of the config [ 1476.396712][T13326] usb 3-1: config 128 has no interface number 0 [ 1476.403317][T13326] usb 3-1: config 128 interface 187 altsetting 255 endpoint 0x5 has an invalid bInterval 32, changing to 9 [ 1476.444197][T13326] usb 3-1: config 128 interface 187 altsetting 255 has an invalid descriptor for endpoint zero, skipping [ 1476.474633][T13326] usb 3-1: config 128 interface 187 altsetting 255 has an invalid descriptor for endpoint zero, skipping [ 1476.516524][T13326] usb 3-1: config 128 interface 187 altsetting 255 endpoint 0x6 has invalid maxpacket 22491, setting to 64 [ 1476.564613][T13326] usb 3-1: config 128 interface 187 altsetting 255 endpoint 0xC has invalid maxpacket 463, setting to 64 [ 1476.610048][T13326] usb 3-1: config 128 interface 187 altsetting 255 has 7 endpoint descriptors, different from the interface descriptor's value: 15 [ 1476.658611][T13326] usb 3-1: config 128 interface 187 has no altsetting 0 [ 1476.696792][T13326] usb 3-1: New USB device found, idVendor=0bfd, idProduct=0111, bcdDevice=bc.6a [ 1476.724940][T13326] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1476.757195][T13326] usb 3-1: Product: syz [ 1476.781768][T13326] usb 3-1: Manufacturer: syz [ 1476.798434][T13326] usb 3-1: SerialNumber: syz [ 1477.142940][T14512] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1477.192965][T14512] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1477.250317][T14512] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1477.355052][T14512] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1477.428019][T14512] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1477.516523][T14512] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1477.631401][T13326] kvaser_usb 3-1:128.187: error -ENODEV: Cannot get usb endpoint(s) [ 1477.759908][T13326] usb 3-1: USB disconnect, device number 14 [ 1478.373846][T14547] fuse: Unknown parameter 'group_id00000000000000000003' [ 1478.441208][T14547] overlayfs: failed to clone upperpath [ 1479.004383][T14555] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1891'. [ 1480.703140][T14590] netlink: 'syz.9.1902': attribute type 27 has an invalid length. [ 1481.255200][T13373] usb 2-1: new high-speed USB device number 28 using dummy_hcd [ 1481.407580][T14603] netlink: 28 bytes leftover after parsing attributes in process `syz.9.1908'. [ 1481.454057][T13373] usb 2-1: Using ep0 maxpacket: 16 [ 1481.529753][T13373] usb 2-1: config 0 has an invalid interface number: 105 but max is 0 [ 1481.539521][T13373] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1481.570001][T13373] usb 2-1: config 0 has no interface number 0 [ 1481.618449][T13373] usb 2-1: New USB device found, idVendor=046d, idProduct=08f3, bcdDevice= b.28 [ 1481.644690][T13373] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1481.673942][T13373] usb 2-1: Product: syz [ 1481.684281][T13373] usb 2-1: Manufacturer: syz [ 1481.690134][T13373] usb 2-1: SerialNumber: syz [ 1481.755513][T13373] usb 2-1: config 0 descriptor?? [ 1481.820927][T13373] uvcvideo 2-1:0.105: Found UVC 0.00 device syz (046d:08f3) [ 1481.855798][T13373] uvcvideo 2-1:0.105: No valid video chain found. [ 1482.000430][T13326] usb 2-1: USB disconnect, device number 28 [ 1483.155009][T13373] usb 3-1: new high-speed USB device number 15 using dummy_hcd [ 1483.353118][T13373] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1483.427472][T13373] usb 3-1: config 1 interface 1 altsetting 1 has 0 endpoint descriptors, different from the interface descriptor's value: 2 [ 1483.480983][T13373] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 1483.524895][T13373] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1483.533352][T13373] usb 3-1: Product: syz [ 1483.569064][T13373] usb 3-1: Manufacturer: syz [ 1483.573931][T13373] usb 3-1: SerialNumber: syz [ 1483.815520][T14637] netlink: 12 bytes leftover after parsing attributes in process `syz.8.1919'. [ 1483.837723][T14637] 8021q: VLANs not supported on gre0 [ 1484.640880][T14648] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1923'. [ 1484.935755][T13373] cdc_ncm 3-1:1.0: bind() failure [ 1485.013948][T13373] cdc_ncm 3-1:1.1: CDC Union missing and no IAD found [ 1485.033027][T13373] cdc_ncm 3-1:1.1: bind() failure [ 1485.148719][T13373] usb 3-1: USB disconnect, device number 15 [ 1487.275682][ T29] kauditd_printk_skb: 14 callbacks suppressed [ 1487.275926][ T29] audit: type=1326 audit(1771411385.567:345): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14673 comm="syz.7.1933" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f868c99c629 code=0x7ffc0000 [ 1487.525792][ T29] audit: type=1326 audit(1771411385.577:346): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14673 comm="syz.7.1933" exe="/root/syz-executor" sig=0 arch=c000003e syscall=133 compat=0 ip=0x7f868c99c629 code=0x7ffc0000 [ 1487.660338][ T29] audit: type=1326 audit(1771411385.577:347): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14673 comm="syz.7.1933" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f868c99c629 code=0x7ffc0000 [ 1487.815623][ T29] audit: type=1326 audit(1771411385.577:348): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14673 comm="syz.7.1933" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f868c99c629 code=0x7ffc0000 [ 1487.959423][ T29] audit: type=1326 audit(1771411385.587:349): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14673 comm="syz.7.1933" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f868c99c629 code=0x7ffc0000 [ 1488.138814][ T29] audit: type=1326 audit(1771411385.587:350): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14673 comm="syz.7.1933" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f868c99c629 code=0x7ffc0000 [ 1488.428668][ T29] audit: type=1326 audit(1771411385.587:351): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14673 comm="syz.7.1933" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f868c99c629 code=0x7ffc0000 [ 1488.642051][ T29] audit: type=1326 audit(1771411385.597:352): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14673 comm="syz.7.1933" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f868c99c629 code=0x7ffc0000 [ 1488.669540][T14695] loop5: detected capacity change from 0 to 4095 [ 1488.936779][ T29] audit: type=1326 audit(1771411385.597:353): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14673 comm="syz.7.1933" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f868c99c629 code=0x7ffc0000 [ 1489.169401][ T29] audit: type=1326 audit(1771411385.597:354): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14673 comm="syz.7.1933" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f868c99c629 code=0x7ffc0000 [ 1490.106014][T14713] netlink: 20 bytes leftover after parsing attributes in process `syz.1.1946'. [ 1490.558429][T14718] netlink: 'syz.2.1948': attribute type 27 has an invalid length. [ 1490.852606][T14723] overlayfs: failed to clone upperpath [ 1491.092233][T13373] usb 2-1: new full-speed USB device number 29 using dummy_hcd [ 1491.333371][T13373] usb 2-1: New USB device found, idVendor=1d50, idProduct=60a1, bcdDevice=a1.4f [ 1491.391465][T13373] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1491.438283][T13373] usb 2-1: Product: syz [ 1491.442692][T13373] usb 2-1: Manufacturer: syz [ 1491.505008][T13373] usb 2-1: SerialNumber: syz [ 1491.547855][T13373] usb 2-1: config 0 descriptor?? [ 1492.230132][T13373] airspy 2-1:0.0: usb_control_msg() failed -71 request 0a [ 1492.302616][T13373] airspy 2-1:0.0: Could not detect board [ 1492.341086][T13373] airspy 2-1:0.0: probe with driver airspy failed with error -71 [ 1492.468754][T13373] usb 2-1: USB disconnect, device number 29 [ 1493.036935][ T29] kauditd_printk_skb: 6 callbacks suppressed [ 1493.037566][ T29] audit: type=1326 audit(1771411391.297:361): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14740 comm="syz.7.1955" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f868c99c629 code=0x7ffc0000 [ 1493.393907][ T29] audit: type=1326 audit(1771411391.297:362): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14740 comm="syz.7.1955" exe="/root/syz-executor" sig=0 arch=c000003e syscall=133 compat=0 ip=0x7f868c99c629 code=0x7ffc0000 [ 1493.664996][ T29] audit: type=1326 audit(1771411391.307:363): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14740 comm="syz.7.1955" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f868c99c629 code=0x7ffc0000 [ 1493.931619][ T29] audit: type=1326 audit(1771411391.307:364): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14740 comm="syz.7.1955" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f868c99c629 code=0x7ffc0000 [ 1494.064929][T13373] usb 2-1: new high-speed USB device number 30 using dummy_hcd [ 1494.174939][ T29] audit: type=1326 audit(1771411391.307:365): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14740 comm="syz.7.1955" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f868c99c629 code=0x7ffc0000 [ 1494.286839][ T1291] ieee802154 phy0 wpan0: encryption failed: -22 [ 1494.298098][ T1291] ieee802154 phy1 wpan1: encryption failed: -22 [ 1494.382559][T13373] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1494.451799][ T29] audit: type=1326 audit(1771411391.317:366): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14740 comm="syz.7.1955" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f868c99c629 code=0x7ffc0000 [ 1494.487487][T13373] usb 2-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 1494.573349][T13373] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1494.679975][T13373] usb 2-1: config 0 descriptor?? [ 1494.715633][ T29] audit: type=1326 audit(1771411391.317:367): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14740 comm="syz.7.1955" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f868c99c629 code=0x7ffc0000 [ 1495.087424][ T29] audit: type=1326 audit(1771411391.317:368): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14740 comm="syz.7.1955" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f868c99c629 code=0x7ffc0000 [ 1495.300214][T13373] usbhid 2-1:0.0: can't add hid device: -71 [ 1495.306875][ T29] audit: type=1326 audit(1771411391.327:369): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14740 comm="syz.7.1955" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f868c99c629 code=0x7ffc0000 [ 1495.337019][ T29] audit: type=1326 audit(1771411391.327:370): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14740 comm="syz.7.1955" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f868c99c629 code=0x7ffc0000 [ 1495.356441][T13373] usbhid 2-1:0.0: probe with driver usbhid failed with error -71 [ 1495.492867][T13373] usb 2-1: USB disconnect, device number 30 [ 1495.721182][T14759] netlink: 20 bytes leftover after parsing attributes in process `syz.9.1960'. [ 1495.905191][T13373] usb 2-1: new full-speed USB device number 31 using dummy_hcd [ 1495.957523][ T7331] usb 3-1: new high-speed USB device number 16 using dummy_hcd [ 1496.104619][T13373] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 1496.139366][ T7331] usb 3-1: Using ep0 maxpacket: 16 [ 1496.149260][T13373] usb 2-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 1496.164780][ T7331] usb 3-1: config 0 has an invalid interface number: 105 but max is 0 [ 1496.182294][T13373] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1496.193260][ T7331] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1496.238784][T13373] usb 2-1: config 0 descriptor?? [ 1496.255027][ T7331] usb 3-1: config 0 has no interface number 0 [ 1496.280068][ T7331] usb 3-1: New USB device found, idVendor=046d, idProduct=08f3, bcdDevice= b.28 [ 1496.290491][T13373] hub 2-1:0.0: USB hub found [ 1496.316113][ T7331] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1496.363218][ T7331] usb 3-1: Product: syz [ 1496.384066][ T7331] usb 3-1: Manufacturer: syz [ 1496.411799][ T7331] usb 3-1: SerialNumber: syz [ 1496.462528][ T7331] usb 3-1: config 0 descriptor?? [ 1496.494287][T13373] hub 2-1:0.0: 1 port detected [ 1496.550476][ T7331] uvcvideo 3-1:0.105: Found UVC 0.00 device syz (046d:08f3) [ 1496.580240][ T7331] uvcvideo 3-1:0.105: No valid video chain found. [ 1496.712506][T13326] usb 3-1: USB disconnect, device number 16 [ 1497.148824][T13373] hub 2-1:0.0: hub_ext_port_status failed (err = 0) [ 1497.558775][T13326] usb 2-1: USB disconnect, device number 31 [ 1498.199394][T14796] fuse: Unknown parameter 'group_i00000000000000000000' [ 1498.639219][T14798] netlink: 20 bytes leftover after parsing attributes in process `syz.9.1973'. [ 1499.148334][ T29] kauditd_printk_skb: 6 callbacks suppressed [ 1499.148587][ T29] audit: type=1326 audit(1771411397.437:377): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14793 comm="syz.8.1971" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1a84b9c629 code=0x7ffc0000 [ 1499.498188][ T29] audit: type=1326 audit(1771411397.447:378): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14793 comm="syz.8.1971" exe="/root/syz-executor" sig=0 arch=c000003e syscall=133 compat=0 ip=0x7f1a84b9c629 code=0x7ffc0000 [ 1499.787792][ T29] audit: type=1326 audit(1771411397.447:379): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14793 comm="syz.8.1971" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1a84b9c629 code=0x7ffc0000 [ 1500.027452][ T29] audit: type=1326 audit(1771411397.457:380): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14793 comm="syz.8.1971" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f1a84b9c629 code=0x7ffc0000 [ 1500.307159][ T29] audit: type=1326 audit(1771411397.457:381): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14793 comm="syz.8.1971" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1a84b9c629 code=0x7ffc0000 [ 1500.543128][ T29] audit: type=1326 audit(1771411397.457:382): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14793 comm="syz.8.1971" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f1a84b9c629 code=0x7ffc0000 [ 1500.809094][ T29] audit: type=1326 audit(1771411397.467:383): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14793 comm="syz.8.1971" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1a84b9c629 code=0x7ffc0000 [ 1500.954025][T14816] bridge0: received packet on syz_tun with own address as source address (addr:aa:aa:aa:aa:aa:aa, vlan:0) [ 1501.051947][ T29] audit: type=1326 audit(1771411397.467:384): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14793 comm="syz.8.1971" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f1a84b9c629 code=0x7ffc0000 [ 1501.339544][ T29] audit: type=1326 audit(1771411397.467:385): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14793 comm="syz.8.1971" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1a84b9c629 code=0x7ffc0000 [ 1501.511441][ T29] audit: type=1326 audit(1771411397.477:386): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14793 comm="syz.8.1971" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f1a84b9c629 code=0x7ffc0000 [ 1501.594388][T14826] netlink: 20 bytes leftover after parsing attributes in process `syz.2.1980'. [ 1502.352096][T14837] syzkaller0: entered promiscuous mode [ 1502.440539][T14837] syzkaller0: entered allmulticast mode [ 1502.484113][T14839] overlayfs: failed to clone upperpath [ 1502.837285][T14847] fuse: Bad value for 'fd' [ 1503.203974][T14855] loop2: detected capacity change from 0 to 128 [ 1503.556663][T14860] netlink: 84 bytes leftover after parsing attributes in process `syz.7.1989'. [ 1503.767058][T14863] fuse: Unknown parameter 'use00000000000000000000' [ 1503.866503][T14863] overlayfs: failed to clone upperpath [ 1504.308209][ T5877] bio_check_eod: 82 callbacks suppressed [ 1504.308294][ T5877] kworker/u8:9: attempt to access beyond end of device [ 1504.308294][ T5877] loop2: rw=1, sector=153, nr_sectors = 8 limit=128 [ 1504.429633][ T5877] kworker/u8:9: attempt to access beyond end of device [ 1504.429633][ T5877] loop2: rw=1, sector=169, nr_sectors = 8 limit=128 [ 1504.579194][ T5877] kworker/u8:9: attempt to access beyond end of device [ 1504.579194][ T5877] loop2: rw=1, sector=185, nr_sectors = 8 limit=128 [ 1504.667454][ T5877] kworker/u8:9: attempt to access beyond end of device [ 1504.667454][ T5877] loop2: rw=1, sector=201, nr_sectors = 8 limit=128 [ 1504.749879][ T5877] kworker/u8:9: attempt to access beyond end of device [ 1504.749879][ T5877] loop2: rw=1, sector=217, nr_sectors = 8 limit=128 [ 1504.930092][ T29] kauditd_printk_skb: 6 callbacks suppressed [ 1504.930357][ T29] audit: type=1326 audit(1771411403.177:393): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14866 comm="syz.8.1992" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1a84b9c629 code=0x7ffc0000 [ 1505.050651][ T5877] kworker/u8:9: attempt to access beyond end of device [ 1505.050651][ T5877] loop2: rw=1, sector=233, nr_sectors = 8 limit=128 [ 1505.144696][ T5877] kworker/u8:9: attempt to access beyond end of device [ 1505.144696][ T5877] loop2: rw=1, sector=249, nr_sectors = 8 limit=128 [ 1505.170535][ T29] audit: type=1326 audit(1771411403.177:394): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14866 comm="syz.8.1992" exe="/root/syz-executor" sig=0 arch=c000003e syscall=133 compat=0 ip=0x7f1a84b9c629 code=0x7ffc0000 [ 1505.244864][ T5877] kworker/u8:9: attempt to access beyond end of device [ 1505.244864][ T5877] loop2: rw=1, sector=265, nr_sectors = 8 limit=128 [ 1505.286614][ T29] audit: type=1326 audit(1771411403.187:395): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14866 comm="syz.8.1992" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1a84b9c629 code=0x7ffc0000 [ 1505.333758][ T5877] kworker/u8:9: attempt to access beyond end of device [ 1505.333758][ T5877] loop2: rw=1, sector=281, nr_sectors = 8 limit=128 [ 1505.410512][ T5877] kworker/u8:9: attempt to access beyond end of device [ 1505.410512][ T5877] loop2: rw=1, sector=297, nr_sectors = 8 limit=128 [ 1505.445028][ T29] audit: type=1326 audit(1771411403.187:396): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14866 comm="syz.8.1992" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f1a84b9c629 code=0x7ffc0000 [ 1505.561663][T13704] INFO: The task syz-executor:13704 has been waiting for writeback completion for more than 1 seconds. [ 1505.561822][T13704] INFO: The task syz-executor:13704 has been waiting for writeback completion for more than 1 seconds. [ 1505.627259][ T29] audit: type=1326 audit(1771411403.187:397): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14866 comm="syz.8.1992" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1a84b9c629 code=0x7ffc0000 [ 1505.909428][ T29] audit: type=1326 audit(1771411403.197:398): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14866 comm="syz.8.1992" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f1a84b9c629 code=0x7ffc0000 [ 1506.124951][ T29] audit: type=1326 audit(1771411403.197:399): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14866 comm="syz.8.1992" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1a84b9c629 code=0x7ffc0000 [ 1506.388114][ T29] audit: type=1326 audit(1771411403.197:400): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14866 comm="syz.8.1992" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f1a84b9c629 code=0x7ffc0000 [ 1506.414900][T13326] usb 2-1: new high-speed USB device number 32 using dummy_hcd [ 1506.646710][ T29] audit: type=1326 audit(1771411403.207:401): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14866 comm="syz.8.1992" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1a84b9c629 code=0x7ffc0000 [ 1506.705069][T13326] usb 2-1: Using ep0 maxpacket: 16 [ 1506.787824][T13326] usb 2-1: config 0 has an invalid interface number: 105 but max is 0 [ 1506.848762][T13326] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1506.904953][ T29] audit: type=1326 audit(1771411403.207:402): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14866 comm="syz.8.1992" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f1a84b9c629 code=0x7ffc0000 [ 1506.967522][T13326] usb 2-1: config 0 has no interface number 0 [ 1507.035722][T13326] usb 2-1: New USB device found, idVendor=046d, idProduct=08f3, bcdDevice= b.28 [ 1507.147956][T13326] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1507.254905][T13326] usb 2-1: Product: syz [ 1507.284377][T13326] usb 2-1: Manufacturer: syz [ 1507.345821][T13326] usb 2-1: SerialNumber: syz [ 1507.381559][T13326] usb 2-1: config 0 descriptor?? [ 1507.442593][T13326] uvcvideo 2-1:0.105: Found UVC 0.00 device syz (046d:08f3) [ 1507.534248][T13326] uvcvideo 2-1:0.105: No valid video chain found. [ 1507.642285][T13326] usb 2-1: USB disconnect, device number 32 [ 1507.727561][T14896] netlink: 20 bytes leftover after parsing attributes in process `syz.8.1999'. [ 1507.760075][T14894] syzkaller0: entered promiscuous mode [ 1507.779775][T14894] syzkaller0: entered allmulticast mode [ 1507.811956][T14896] 8021q: VLANs not supported on gre0 [ 1513.729906][T14963] fuse: Unknown parameter 'group_id00000000000000000000' [ 1521.861861][T13337] usb 2-1: new high-speed USB device number 33 using dummy_hcd [ 1522.183016][T13337] usb 2-1: config 128 has an invalid interface number: 187 but max is 0 [ 1522.244631][T13337] usb 2-1: config 128 has an invalid descriptor of length 0, skipping remainder of the config [ 1522.350554][T13337] usb 2-1: config 128 has no interface number 0 [ 1522.434933][T13337] usb 2-1: config 128 interface 187 altsetting 255 endpoint 0x5 has an invalid bInterval 32, changing to 9 [ 1522.565651][T13337] usb 2-1: config 128 interface 187 altsetting 255 has an invalid descriptor for endpoint zero, skipping [ 1522.708998][T13337] usb 2-1: config 128 interface 187 altsetting 255 has an invalid descriptor for endpoint zero, skipping [ 1522.914665][T13337] usb 2-1: config 128 interface 187 altsetting 255 endpoint 0x6 has invalid maxpacket 22491, setting to 64 [ 1523.045524][T13337] usb 2-1: config 128 interface 187 altsetting 255 endpoint 0xC has invalid maxpacket 463, setting to 64 [ 1523.231199][T13337] usb 2-1: config 128 interface 187 altsetting 255 has 7 endpoint descriptors, different from the interface descriptor's value: 15 [ 1523.400406][T13337] usb 2-1: config 128 interface 187 has no altsetting 0 [ 1523.550751][T13337] usb 2-1: New USB device found, idVendor=0bfd, idProduct=0111, bcdDevice=bc.6a [ 1523.681922][T13337] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1523.814674][T13337] usb 2-1: Product: syz [ 1523.885138][T13337] usb 2-1: Manufacturer: syz [ 1523.890005][T13337] usb 2-1: SerialNumber: syz [ 1524.704710][T15010] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1524.870055][T15010] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1525.104005][T15010] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1525.232977][T15010] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1525.406572][T15010] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1525.513446][T15010] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1525.709446][T13337] kvaser_usb 2-1:128.187: error -ENODEV: Cannot get usb endpoint(s) [ 1525.854906][T13337] usb 2-1: USB disconnect, device number 33 [ 1527.018604][T15061] netlink: 'syz.1.2051': attribute type 27 has an invalid length. [ 1527.039263][T15061] vlan2: left promiscuous mode [ 1527.074660][T15061] gretap0: left promiscuous mode [ 1527.088846][T15063] fuse: Unknown parameter '00000000000000000000003' [ 1527.159032][T15063] overlayfs: failed to clone upperpath [ 1527.855076][T15075] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 1528.729446][T13373] usb 2-1: new high-speed USB device number 34 using dummy_hcd [ 1528.941231][T13373] usb 2-1: config 128 has an invalid interface number: 187 but max is 0 [ 1528.964824][T13373] usb 2-1: config 128 has an invalid descriptor of length 0, skipping remainder of the config [ 1529.017444][T13373] usb 2-1: config 128 has no interface number 0 [ 1529.052140][T13373] usb 2-1: config 128 interface 187 altsetting 255 endpoint 0x5 has an invalid bInterval 32, changing to 9 [ 1529.114826][T13373] usb 2-1: config 128 interface 187 altsetting 255 has an invalid descriptor for endpoint zero, skipping [ 1529.179670][T13373] usb 2-1: config 128 interface 187 altsetting 255 has an invalid descriptor for endpoint zero, skipping [ 1529.243274][T13373] usb 2-1: config 128 interface 187 altsetting 255 endpoint 0x6 has invalid maxpacket 22491, setting to 64 [ 1529.294801][T13373] usb 2-1: config 128 interface 187 altsetting 255 endpoint 0xC has invalid maxpacket 463, setting to 64 [ 1529.342423][T13373] usb 2-1: config 128 interface 187 altsetting 255 has 7 endpoint descriptors, different from the interface descriptor's value: 15 [ 1529.393241][T13373] usb 2-1: config 128 interface 187 has no altsetting 0 [ 1529.443642][T13373] usb 2-1: New USB device found, idVendor=0bfd, idProduct=0111, bcdDevice=bc.6a [ 1529.504971][T13373] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1529.513257][T13373] usb 2-1: Product: syz [ 1529.556195][T13373] usb 2-1: Manufacturer: syz [ 1529.577445][T13373] usb 2-1: SerialNumber: syz [ 1529.882190][T15089] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1529.939308][T15089] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1530.047314][T15089] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1530.117241][T15089] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1530.192471][T15089] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1530.259671][T15089] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1530.401699][T13373] kvaser_usb 2-1:128.187: error -ENODEV: Cannot get usb endpoint(s) [ 1530.555280][T13373] usb 2-1: USB disconnect, device number 34 [ 1531.017744][T15119] netlink: 'syz.2.2073': attribute type 27 has an invalid length. [ 1532.686698][T15148] netlink: 20 bytes leftover after parsing attributes in process `syz.8.2082'. [ 1534.237171][T13373] usb 2-1: new high-speed USB device number 35 using dummy_hcd [ 1534.367873][T15179] fuse: Bad value for 'fd' [ 1534.437516][T13373] usb 2-1: Using ep0 maxpacket: 16 [ 1534.492997][T13373] usb 2-1: config 0 interface 0 altsetting 5 has 2 endpoint descriptors, different from the interface descriptor's value: 1 [ 1534.557525][T13373] usb 2-1: config 0 interface 0 has no altsetting 0 [ 1534.622537][T13373] usb 2-1: New USB device found, idVendor=1532, idProduct=011b, bcdDevice= 0.00 [ 1534.661365][T13373] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1534.726592][T13373] usb 2-1: config 0 descriptor?? [ 1535.289392][T13373] razer 0003:1532:011B.000E: unknown main item tag 0x0 [ 1535.320462][T13373] razer 0003:1532:011B.000E: unknown main item tag 0x0 [ 1535.340767][T13373] razer 0003:1532:011B.000E: unknown main item tag 0x0 [ 1535.566058][T13373] razer 0003:1532:011B.000E: failed to enable macro keys: -71 [ 1535.677303][T13373] razer 0003:1532:011B.000E: hidraw0: USB HID vff.ff Device [HID 1532:011b] on usb-dummy_hcd.1-1/input0 [ 1535.700891][T15198] netlink: 20 bytes leftover after parsing attributes in process `syz.2.2096'. [ 1535.809528][T13373] usb 2-1: USB disconnect, device number 35 [ 1535.901083][T15204] netlink: 'syz.9.2097': attribute type 27 has an invalid length. [ 1536.592251][T15205] fido_id[15205]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.1/usb2/report_descriptor': No such file or directory [ 1537.305048][T11084] Bluetooth: hci2: command 0x0406 tx timeout [ 1539.408349][T15241] netlink: 68 bytes leftover after parsing attributes in process `syz.8.2110'. [ 1543.865210][T15284] netlink: 68 bytes leftover after parsing attributes in process `syz.1.2124'. [ 1545.895405][T13327] usb 2-1: new high-speed USB device number 36 using dummy_hcd [ 1546.126710][T13327] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 1546.137436][T13327] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1546.147873][T13327] usb 2-1: Product: syz [ 1546.152296][T13327] usb 2-1: Manufacturer: syz [ 1546.169134][T13327] usb 2-1: SerialNumber: syz [ 1546.728945][T15324] netlink: 68 bytes leftover after parsing attributes in process `syz.8.2137'. [ 1547.539928][T13327] cdc_ncm 2-1:1.0: failed to get mac address [ 1547.593497][T13327] cdc_ncm 2-1:1.0: bind() failure [ 1547.666723][T13327] cdc_ncm 2-1:1.1: probe with driver cdc_ncm failed with error -71 [ 1547.767134][T13327] cdc_mbim 2-1:1.1: probe with driver cdc_mbim failed with error -71 [ 1547.831822][T13327] usbtest 2-1:1.1: probe with driver usbtest failed with error -71 [ 1547.918352][T13327] usb 2-1: USB disconnect, device number 36 [ 1548.437168][T15350] netlink: 'syz.8.2144': attribute type 27 has an invalid length. [ 1548.994821][T13373] usb 2-1: new high-speed USB device number 37 using dummy_hcd [ 1549.185729][T13373] usb 2-1: Using ep0 maxpacket: 16 [ 1549.218249][T13373] usb 2-1: config 0 interface 0 altsetting 5 has 2 endpoint descriptors, different from the interface descriptor's value: 1 [ 1549.269347][T13373] usb 2-1: config 0 interface 0 has no altsetting 0 [ 1549.295043][T13373] usb 2-1: New USB device found, idVendor=1532, idProduct=011b, bcdDevice= 0.00 [ 1549.314545][T15350] bridge0: port 2(bridge_slave_1) entered disabled state [ 1549.323056][T15350] bridge0: port 1(bridge_slave_0) entered disabled state [ 1549.329461][T13373] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1549.404327][T13373] usb 2-1: config 0 descriptor?? [ 1549.974037][T13373] razer 0003:1532:011B.000F: unknown main item tag 0x0 [ 1550.013452][T13373] razer 0003:1532:011B.000F: unknown main item tag 0x0 [ 1550.044997][T13373] razer 0003:1532:011B.000F: unknown main item tag 0x0 [ 1550.265384][T13373] razer 0003:1532:011B.000F: failed to enable macro keys: -71 [ 1550.323628][T13373] razer 0003:1532:011B.000F: hidraw0: USB HID vff.ff Device [HID 1532:011b] on usb-dummy_hcd.1-1/input0 [ 1550.435323][T13373] usb 2-1: USB disconnect, device number 37 [ 1550.446362][T15350] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1550.591480][T15350] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1551.280252][T15380] fido_id[15380]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.1/usb2/report_descriptor': No such file or directory [ 1551.845026][T13337] usb 2-1: new high-speed USB device number 38 using dummy_hcd [ 1551.901511][T15350] vlan2: left promiscuous mode [ 1551.935109][ T57] netdevsim netdevsim8 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1551.983730][ T57] netdevsim netdevsim8 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1552.043775][T13337] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1552.059552][ T57] netdevsim netdevsim8 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1552.077882][T13337] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1552.103940][ T57] netdevsim netdevsim8 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1552.144204][T13337] usb 2-1: New USB device found, idVendor=256c, idProduct=006d, bcdDevice= 0.00 [ 1552.193369][T13337] usb 2-1: New USB device strings: Mfr=2, Product=0, SerialNumber=0 [ 1552.250455][T13337] usb 2-1: Manufacturer: syz [ 1552.290773][T13337] usb 2-1: config 0 descriptor?? [ 1553.088948][T15410] fuse: Invalid rootmode [ 1553.349085][T13337] uclogic 0003:256C:006D.0010: interface is invalid, ignoring [ 1553.430724][T13337] usb 2-1: USB disconnect, device number 38 [ 1554.040401][T15426] netlink: 'syz.7.2166': attribute type 27 has an invalid length. [ 1554.833996][T15426] bridge0: port 3(syz_tun) entered disabled state [ 1555.061870][T15426] bridge0: port 2(bridge_slave_1) entered disabled state [ 1555.070027][T15426] bridge0: port 1(bridge_slave_0) entered disabled state [ 1555.717860][ T1291] ieee802154 phy0 wpan0: encryption failed: -22 [ 1555.733825][ T1291] ieee802154 phy1 wpan1: encryption failed: -22 [ 1556.313501][T15426] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1557.269300][T15426] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1559.577336][T15426] bond1: left promiscuous mode [ 1559.629176][T15426] vlan2: left promiscuous mode [ 1559.634178][T15426] gretap0: left promiscuous mode [ 1559.780031][ T8774] netdevsim netdevsim7 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1559.849493][ T8774] netdevsim netdevsim7 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1559.922667][ T8774] netdevsim netdevsim7 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1559.976176][ T8774] netdevsim netdevsim7 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1561.894674][ T9253] usb 2-1: new high-speed USB device number 39 using dummy_hcd [ 1562.123573][ T9253] usb 2-1: config 128 has an invalid interface number: 187 but max is 0 [ 1562.174770][ T9253] usb 2-1: config 128 has an invalid descriptor of length 0, skipping remainder of the config [ 1562.218637][ T9253] usb 2-1: config 128 has no interface number 0 [ 1562.260395][ T9253] usb 2-1: config 128 interface 187 altsetting 255 endpoint 0x5 has an invalid bInterval 32, changing to 9 [ 1562.321308][ T9253] usb 2-1: config 128 interface 187 altsetting 255 has an invalid descriptor for endpoint zero, skipping [ 1562.374670][ T9253] usb 2-1: config 128 interface 187 altsetting 255 has an invalid descriptor for endpoint zero, skipping [ 1562.424741][ T9253] usb 2-1: config 128 interface 187 altsetting 255 endpoint 0x6 has invalid maxpacket 22491, setting to 64 [ 1562.459634][ T9253] usb 2-1: config 128 interface 187 altsetting 255 endpoint 0xC has invalid maxpacket 463, setting to 64 [ 1562.511021][ T9253] usb 2-1: config 128 interface 187 altsetting 255 has 7 endpoint descriptors, different from the interface descriptor's value: 15 [ 1562.564595][ T9253] usb 2-1: config 128 interface 187 has no altsetting 0 [ 1562.636318][ T9253] usb 2-1: New USB device found, idVendor=0bfd, idProduct=0111, bcdDevice=bc.6a [ 1562.669600][ T9253] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1562.717891][ T9253] usb 2-1: Product: syz [ 1562.722321][ T9253] usb 2-1: Manufacturer: syz [ 1562.774895][ T9253] usb 2-1: SerialNumber: syz [ 1563.075211][T15513] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1563.130512][T15513] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1563.245166][T15513] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1563.266457][T15513] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1563.303618][T11084] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 1563.314237][T11084] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 1563.328853][T11084] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 1563.336001][ C1] ===================================================== [ 1563.336220][ C1] BUG: KMSAN: uninit-value in __flush_smp_call_function_queue+0x362/0x18e0 [ 1563.336360][ C1] __flush_smp_call_function_queue+0x362/0x18e0 [ 1563.336481][ C1] generic_smp_call_function_single_interrupt+0x1c/0x30 [ 1563.336631][ C1] __sysvec_call_function_single+0x4b/0x3e0 [ 1563.336775][ C1] sysvec_call_function_single+0x7c/0x90 [ 1563.337160][ C1] asm_sysvec_call_function_single+0x1f/0x30 [ 1563.337286][ C1] console_flush_all+0xe48/0x1270 [ 1563.337454][ C1] console_unlock+0xeb/0x460 [ 1563.337601][ C1] vprintk_emit+0x850/0xba0 [ 1563.337749][ C1] vprintk_default+0x3f/0x50 [ 1563.337901][ C1] vprintk+0x36/0x50 [ 1563.338017][ C1] _printk+0x17e/0x1b0 [ 1563.338163][ C1] bt_warn+0x22e/0x250 [ 1563.338263][ C1] hci_cmd_complete_evt+0x7ad/0xfa0 [ 1563.338510][ C1] hci_event_packet+0xce2/0x1e40 [ 1563.338660][ C1] hci_rx_work+0x8c3/0xfc0 [ 1563.338854][ C1] process_scheduled_works+0xb21/0x1e30 [ 1563.338978][ C1] worker_thread+0xede/0x1580 [ 1563.339107][ C1] kthread+0x53f/0x600 [ 1563.339245][ C1] ret_from_fork+0x20f/0x910 [ 1563.339368][ C1] ret_from_fork_asm+0x1a/0x30 [ 1563.339513][ C1] [ 1563.339545][ C1] Local variable iter created at: [ 1563.339584][ C1] tdp_mmu_zap_leafs+0x52/0x6e0 [ 1563.339710][ C1] kvm_tdp_mmu_unmap_gfn_range+0x910/0xb50 [ 1563.339848][ C1] [ 1563.339898][ C1] CPU: 1 UID: 0 PID: 11084 Comm: kworker/u9:0 Not tainted syzkaller #0 PREEMPT(full) [ 1563.340028][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 1563.340114][ C1] Workqueue: hci1 hci_rx_work [ 1563.340272][ C1] ===================================================== [ 1563.340311][ C1] Disabling lock debugging due to kernel taint [ 1563.340370][ C1] Kernel panic - not syncing: kmsan.panic set ... [ 1563.340452][ C1] CPU: 1 UID: 0 PID: 11084 Comm: kworker/u9:0 Tainted: G B syzkaller #0 PREEMPT(full) [ 1563.340602][ C1] Tainted: [B]=BAD_PAGE [ 1563.340646][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 1563.340732][ C1] Workqueue: hci1 hci_rx_work [ 1563.340885][ C1] Call Trace: [ 1563.340927][ C1] [ 1563.340969][ C1] __dump_stack+0x26/0x30 [ 1563.341110][ C1] dump_stack_lvl+0x50/0x1c0 [ 1563.341246][ C1] ? dump_stack+0x12/0x25 [ 1563.341382][ C1] dump_stack+0x1e/0x25 [ 1563.341509][ C1] vpanic+0x7b4/0x1430 [ 1563.341684][ C1] panic+0x15d/0x160 [ 1563.341872][ C1] kmsan_report+0x31a/0x320 [ 1563.342030][ C1] ? __msan_warning+0x1b/0x30 [ 1563.342176][ C1] ? __flush_smp_call_function_queue+0x362/0x18e0 [ 1563.342307][ C1] ? generic_smp_call_function_single_interrupt+0x1c/0x30 [ 1563.342445][ C1] ? __sysvec_call_function_single+0x4b/0x3e0 [ 1563.342589][ C1] ? sysvec_call_function_single+0x7c/0x90 [ 1563.342734][ C1] ? asm_sysvec_call_function_single+0x1f/0x30 [ 1563.342866][ C1] ? console_flush_all+0xe48/0x1270 [ 1563.343044][ C1] ? console_unlock+0xeb/0x460 [ 1563.343195][ C1] ? vprintk_emit+0x850/0xba0 [ 1563.343347][ C1] ? vprintk_default+0x3f/0x50 [ 1563.343502][ C1] ? vprintk+0x36/0x50 [ 1563.343616][ C1] ? _printk+0x17e/0x1b0 [ 1563.343768][ C1] ? bt_warn+0x22e/0x250 [ 1563.343871][ C1] ? hci_cmd_complete_evt+0x7ad/0xfa0 [ 1563.344044][ C1] ? hci_event_packet+0xce2/0x1e40 [ 1563.344202][ C1] ? hci_rx_work+0x8c3/0xfc0 [ 1563.344360][ C1] ? process_scheduled_works+0xb21/0x1e30 [ 1563.344490][ C1] ? worker_thread+0xede/0x1580 [ 1563.344618][ C1] ? kthread+0x53f/0x600 [ 1563.344760][ C1] ? ret_from_fork+0x20f/0x910 [ 1563.344884][ C1] ? ret_from_fork_asm+0x1a/0x30 [ 1563.345046][ C1] ? kmsan_internal_set_shadow_origin+0x7a/0x110 [ 1563.345206][ C1] ? kmsan_internal_unpoison_memory+0x14/0x20 [ 1563.345350][ C1] ? kmsan_get_metadata+0xf1/0x160 [ 1563.345510][ C1] ? kmsan_get_shadow_origin_ptr+0x4a/0xb0 [ 1563.345677][ C1] ? kmsan_get_metadata+0xf1/0x160 [ 1563.345839][ C1] ? kmsan_internal_set_shadow_origin+0x7a/0x110 [ 1563.345999][ C1] ? kmsan_get_metadata+0xf1/0x160 [ 1563.346162][ C1] ? kmsan_get_shadow_origin_ptr+0x4a/0xb0 [ 1563.346334][ C1] ? kmsan_get_metadata+0xf1/0x160 [ 1563.346502][ C1] __msan_warning+0x1b/0x30 [ 1563.346639][ C1] __flush_smp_call_function_queue+0x362/0x18e0 [ 1563.346788][ C1] ? kmsan_get_shadow_origin_ptr+0x4a/0xb0 [ 1563.346996][ C1] generic_smp_call_function_single_interrupt+0x1c/0x30 [ 1563.347139][ C1] __sysvec_call_function_single+0x4b/0x3e0 [ 1563.347297][ C1] sysvec_call_function_single+0x7c/0x90 [ 1563.347448][ C1] [ 1563.347486][ C1] [ 1563.347529][ C1] asm_sysvec_call_function_single+0x1f/0x30 [ 1563.347675][ C1] RIP: 0010:console_flush_all+0xe48/0x1270 [ 1563.347859][ C1] Code: 89 de 48 81 e6 00 02 00 00 31 ff e8 d2 94 36 00 48 81 e3 00 02 00 00 75 07 e8 e4 8f 36 00 eb 06 e8 dd 8f 36 00 fb 4c 8b 65 b8 <4d> 85 e4 0f 85 32 02 00 00 4d 8b 75 00 4c 89 ef e8 53 be e1 00 8b [ 1563.347971][ C1] RSP: 0018:ffff888083fdb508 EFLAGS: 00000283 [ 1563.348065][ C1] RAX: ffffffff81c929e3 RBX: 0000000000000200 RCX: 0000000000100000 [ 1563.348148][ C1] RDX: ffffc90012026000 RSI: 00000000000007cd RDI: 00000000000007ce [ 1563.348225][ C1] RBP: ffff888083fdb5f8 R08: ffffea000000000f R09: 0000000000000000 [ 1563.348314][ C1] R10: ffff888237d0a568 R11: ffffffff875a40e0 R12: 0000000000000000 [ 1563.348394][ C1] R13: ffffffff92b8a9b8 R14: ffff888083fdb627 R15: 0000000000000000 [ 1563.348489][ C1] ? __pfx_io_serial_out+0x10/0x10 [ 1563.348617][ C1] ? console_flush_all+0xe43/0x1270 [ 1563.348805][ C1] ? console_flush_all+0xe43/0x1270 [ 1563.349033][ C1] console_unlock+0xeb/0x460 [ 1563.349204][ C1] vprintk_emit+0x850/0xba0 [ 1563.349382][ C1] vprintk_default+0x3f/0x50 [ 1563.349547][ C1] vprintk+0x36/0x50 [ 1563.349668][ C1] _printk+0x17e/0x1b0 [ 1563.349879][ C1] bt_warn+0x22e/0x250 [ 1563.350038][ C1] ? kmsan_get_shadow_origin_ptr+0x4a/0xb0 [ 1563.350216][ C1] hci_cmd_complete_evt+0x7ad/0xfa0 [ 1563.350427][ C1] hci_event_packet+0xce2/0x1e40 [ 1563.350589][ C1] ? __pfx_hci_cmd_complete_evt+0x10/0x10 [ 1563.350812][ C1] hci_rx_work+0x8c3/0xfc0 [ 1563.350989][ C1] ? kmsan_get_metadata+0xf1/0x160 [ 1563.351155][ C1] ? __pfx_hci_rx_work+0x10/0x10 [ 1563.351326][ C1] process_scheduled_works+0xb21/0x1e30 [ 1563.351523][ C1] worker_thread+0xede/0x1580 [ 1563.351695][ C1] kthread+0x53f/0x600 [ 1563.351845][ C1] ? __pfx_worker_thread+0x10/0x10 [ 1563.351997][ C1] ? __pfx_kthread+0x10/0x10 [ 1563.352142][ C1] ret_from_fork+0x20f/0x910 [ 1563.352271][ C1] ? __switch_to+0x51c/0x750 [ 1563.352434][ C1] ? __pfx_kthread+0x10/0x10 [ 1563.352588][ C1] ret_from_fork_asm+0x1a/0x30 [ 1563.352774][ C1] [ 1563.353416][ C1] Kernel Offset: disabled