last executing test programs: 4m14.160178066s ago: executing program 3 (id=533): r0 = socket$isdn(0x22, 0x3, 0x3) pidfd_getfd(0xffffffffffffffff, r0, 0x0) prlimit64(0x0, 0xe, &(0x7f00000007c0)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) syz_open_dev$dri(0x0, 0xd21, 0x0) sendmsg$NFT_MSG_GETOBJ(0xffffffffffffffff, 0x0, 0x20040000) mount(&(0x7f0000000380)=@sg0, 0x0, &(0x7f0000000400)='minix\x00', 0x2000, &(0x7f0000000440)='&/#%&-\x00') mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x0) mount$fuse(0x0, 0x0, 0x0, 0x2b38094, &(0x7f0000000400)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=0x0]) mount(0x0, &(0x7f0000000380)='./file1\x00', &(0x7f0000000040)='autofs\x00', 0x0, &(0x7f0000000400)) chdir(&(0x7f0000000080)='./file1\x00') r2 = syz_open_dev$dri(&(0x7f0000000080), 0x1, 0x0) ioctl$DRM_IOCTL_SET_CLIENT_CAP(r2, 0x4010640d, &(0x7f0000000000)={0x3, 0x2}) ioctl$DRM_IOCTL_MODE_GETPLANE(r2, 0xc02064b6, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_GET_LEASE(r2, 0xc01064c8, 0x0) ioctl$DRM_IOCTL_MODE_OBJ_GETPROPERTIES(r2, 0xc02064b9, 0x0) move_pages(0x0, 0x0, 0x0, 0x0, 0x0, 0x4) ioctl$DRM_IOCTL_MODE_ATOMIC(r2, 0xc03864bc, &(0x7f0000000380)={0x401, 0x1, &(0x7f0000000240)=[r3], &(0x7f0000000200), &(0x7f00000000c0)=[0x0], &(0x7f0000000040), 0x0, 0x300}) mkdir(&(0x7f0000000200)='./file0\x00', 0x0) unlinkat(0xffffffffffffffff, &(0x7f0000000280)='./file0\x00', 0x200) 4m12.5737107s ago: executing program 3 (id=535): r0 = openat$binderfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f00000000c0)={0x73622a85, 0x110b, 0x8000000000002}) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000300)='./binderfs/binder0\x00', 0x0, 0x0) r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000200)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f00000002c0)=[@increfs], 0x0, 0x0, 0x0}) r3 = dup3(r2, r1, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000540)={0x10, 0x0, &(0x7f0000000440)=[@request_death={0x400c6313}], 0x0, 0x1000000, 0x0}) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000000640)={0x8, 0x0, &(0x7f0000000000)=[@decrefs={0x400c6314}], 0x0, 0x0, 0x0}) 4m12.343223969s ago: executing program 3 (id=536): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) openat$vnet(0xffffffffffffff9c, 0x0, 0x2, 0x0) socket$packet(0x11, 0x3, 0x300) socketpair$unix(0x1, 0x1, 0x0, 0x0) sendmsg$unix(0xffffffffffffffff, &(0x7f0000000d80)={0x0, 0x0, &(0x7f0000000380)=[{&(0x7f0000000080)="03", 0x1}], 0x1, &(0x7f0000000280)=ANY=[@ANYBLOB="14000000000000000100000001"], 0x18}, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f000000aa80)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000007fc0)=""/82, 0x52}, 0x2}], 0x1, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x3, 0x5, &(0x7f0000000780)=ANY=[@ANYBLOB="bf16000000000000b7070000000100004870000000ffffffdc0700001000000095000000000000002ba728041598fbd30cb599e83d24a3aa81d36bb3019c13bd23212fb56fa54f2681d8b02c3815e79c1414eb07eae6f0711e6bd917487960717142fa9ea4318123f602000000000080de89e661168c1886d0d4d94f204e345c65c26e278ef5b915395b19284a1a4bc72fbc1626e3a2a2ad358061d0ae0209e6e83d15645aa818d92b21aa6459512f51ee988e6ea604ce974a22a550d6f97080980400003e05df3ceb9f1feae5737ecaa8666963c474c2a100c788b277beee1cbf9b0a4d3881dcc7b1b85f3c3d44aeaccd3641110bec4e90a6341965c39e4b3431abe802f5ab3e89cf6c662ed4048d3b3e22278d00ce00000000d3a02762c2951257b85802189d74005d2a1bcf9436e192e23fd275985bf31b714f000bcab6fcd610f25f5888000000003f11afc9bd08c6ebfbb89432fb465bc52f49129b9b6150e320c9901de2ebb9000000018e3095c4c5c7a156cec33a667dccaff950ca1e5efdd4c968dacf81baa3a509b1041d06f6b0097c430481824a3f4fddd3c643f630ba175d876defd3541772f26e27c44cfdb2d85d6d29983e830a9cdd79837b3468e8c67a571d0a017c100344c52a6f387a1340a1c8889464f90cc4cd1f570dd39877dfb2ff1ae66e1ce917474b2e650ae630afd014a337ac5d58bcb5e517232586872c5255f20100000000000000f041b665ab21372c8d8b7bac5b5c784d20a4a24d8dbd75062e1daef9dead619cc6e7baa72707157791c3d2a286ffb8d35452bb5d36c2a8682bf7ecbd53f950ef4709ec01e230d2f53594ef4839c6130c4c13a0cca84b9935f771fd49e480cd9d48aeb12b1d6acabd38a817bcd222614d1f62734d679039a97d2b74f9e8e997ccd314000f747f4e8e7025123e783df8b8a17e3aa9fe1f662aef87a065b03cfb65b4dfe4f1b56e1f23128d743753a1de172d683d5892ce9414a1d98ea93e3d35dbb6c23b90cf36e83b8a434a97d09343d7f83079ccb02e69d384146056d125cfa788237874dd42dae334bda042819a2aa24dba1c25be2794448b4f63483026b5e34d44705b76ef29241adab0dd7d68bf975e02069f6f2425e1bc97a3d588085f16bef63a06578d4f5de7bfb6aaa75f16996d536256c02284cb1d3a6fb8cae87691fae365a70c3fc69e1565bba8dd8a8ca049f798abe646f738bebd69413afc9d8a5edd7aaa000000000600001e6c2f2a287c5278a218dbfaffffff00a14db5cfa6819eb1d39c48cfdc80d215c9e16e0c4736dd19363154cca4e2f89800d18c89d7f46f679df6c9e2952ae1ebfd0ca88368ee6ce139e8b5822c22cf2e9dde943d34c432e1001171792c65986146666a5490928441f47e0fe5eac41824ca1fd0eb71aa243c88d5480e5aee9c9e5f2e5a56a6d920335c8e8726fd8329d9a733d8f9ffffff5f912ac4e34bf6ea8a86da707b03bddb491ba0cc98f6be92c50008a2b50025419dfc75c73132ca7ca26ce8a7e3ffb700f09e157f9b844051f1a642aca9ff98c9036471ccff0522903e7bcf62e18f7696bbc280b95e8e0d6fd5644b0ebde3a95b06548862de809d3dae3cccf109f7c78e8479a345e800000000000000000000009455bf417627ce723a5d9103706aba69279500bb82f6b5a3ddc0bd9856712945b70c75ce5b722578820820d010d7a3cffc99fc647d0b82ef26ab708c0b19ed144be51c3b398f0e6bb7a30006000000cba12953d58cff0f0378740fe6662f377b97d8e7cdb047050d7296cd3856476a0ea49ad127ba6570bafc2bbcf9ee721fd9cb467ff071e5604fbf0491245c0000007d932d7a64de4c4aa433fc0840aff7c47da3a4c6966d0000000000000000f6bfbae29e8a6e2a889f6ef6869d82d6bd73eb76b65c7a35a54a4a6b8ad4600e3a972a0bb5971a5f16590b0a03dafa3fd1118765cc8ab9fccf3b51c41a339f200f2fa33006910a679a9ae0187b4d750c4bd244cba13005ef2164770cbfd23b265f4d4da448a7a0d19c5e43eae50a31609dfa2ddf267551467eb6475293dd7012cc449009981f22820e57a0eff234ccfe21d7a2302e000669753d3c3432cc14ee1abe724adb6b5431befedd3e22971118f0e21aed186a370e9eb56b3d790b98f2bd0db1e5de6a146597b2cbb7103040d2a39d7965d36df524b760ab92efcce7dd1574a0730a9e015c7f5ffee9ff66e5dd2866b15b6e0d17618cb1f5c1ee4b05ebf1445ea110f499f840a5c965443d725556351ee25fe09f69494b053678dcadcf02e063dff2fa4bef1ac3bbbe4fe3e8cc759b05785adc346b7ffd05963f92c1d0d7d90ba878ad89e490f3e29ac51d30632869a534418f916bf6fe8167827a8e6c8f8b391c822805cb0adf1b8bd6947ff208753eb0d208ce14f3b206b2e02c21e963abc5ceb735c1b3c46b0a843de52a903375dfb663a8d8ee9c2b2705c1a81d9d3b9656b219c8cd99c9cafcd0d0540884d97aecb19983fc6af29ab44a82aff9cba921192c665b877af6539bdb1b567f481ba07982e7ad758f4e1eac69e7e88a63960975f490e161e371ec8534791e3b61c63fb9450dd03985d900a9c0839208356b53750e76fcc3c2d1bddcbd83897921bd4d0c02e8188f3df79ea2a5c5444004830e6cb227ca1bdafb977c00000000003a417193b8c5d793687335a980010000fdf278218218e04b705ec62f1608cb569b81914e68f175b392af6bc4fd2121d7fd276af2c97a441b56e7a0687d98b8e76d8d0d231e4fe00be1de76bd19cc12e2bd938eb681ed6bc951c1b4f7c51af59eea4d40c6000000000200778a677b72786311153271a3313da02645e11761699e4d04ac86dd14ff7b9a10d3fa74696fe3953a5b7706bf5d1faba4b18808d9cb0e9d3696dec4e0820ee4028d7225a2c9c427cf64cbde6fba056b2006b7a37c1181d530fb865e235cd302f3b4071ee5237ada986b9e5e3144bf479f277f10656ad3744037ccc9c63685a6f1109d2ea73773d3635f61497f1fa1ea4a16f601800bf3e59141fbf05a96113320c445f9ba8596970d5254727e804fbd99ccefb7c09269dd2c5c25e56e169ac15980f3f85f7ca36dd5950ef5b64fd46f123311829534a82940994199b3cf7a8fabea9930952f5da9b909c1946e55289f668c423fcbb31ae91864c882313151741a67538c9689dc8ecc9903c7041e5c0704e2fa55a756487517a7445cbd9e3f5175e41c00000000000000000000000000bf98efd587fffe326f474b0b089c017b16c0062cbce96f5adebec52a79f9363909842f79c50a1520be46d87003137e4c5031f00123e812a5e37cd52c9eb7336281cb8c6ce9934b157d7875a70eaf103cb3138e2361c51cd1eab8a26b232acf6bf0ab829c26dab637538b2eb1420d812d2b80c777710ba0f18e4661681aa218d9ba54023ab4305d77eb15611ae2545835e9d30e9f6d4fb43a291c69545a1eea0f8720431132d8549f99bf6c5cb060da70cbb59d0a000000000034d083fc37d2449f72de0cbea4bc1dc89c136cdbc504f849d5502d77a95c7bfff4cd9c03058d0d4d07ea64824f1acf2b39389f675f39d01719cdbab3f1ce10609c8d7b3e37cb99b41da5e485a441b6a103549f55ab09dc98767763d1f21d9d5bc27d2b40050d1f8292f4d9ec6d0000000000003932062290f4996fdd55b06023437e9e2072daf7f5d82f6f1b5b89a41134f4dc2e65bb11272fdf8c8141f41d6160b3d8b6ecd16d14267f61b4881adee7f07f3d6af5ae79e16fe2c3f55ac7a6392d2e1d9b4286b6c30600a76b85ed6e1f0000c67e6c5fcdc8c39381be4799b8cb2d08b8262c807dd755e22b801162381aa9d1af2bbc9cfd497585337eac408b8475b47a392a10cae349160f128e5f873a58064eb400c36a90624f6aed398a215e9ce64522ab249f67c38a656d32ecff5cdb2b039c4abf349d2c0f88a42e9189bbfa7f5cf35b6e7ef8f9d33163b7ea87550fb1ba334c83e3aec4714c9c4ca3ecb04f2720237615a28bf310b58ffa2a103216fdcc8c2d8f5d55e5e7ebf147105272aaae56e86da86b3cf79a3f7306436762dd1a08ce873e07cebc7892ec6f9f696da38feed3d70001500e34ad2e1b2e64af4e37211b524e20f4ae1b232aa89a32bad2af9030f8add5cbacc59352c290f55d971b65953533668c25f21d8d62d849e9058eaa97c63491568887548f668cdbca2abf01a361a0b64d8b523e669da350e3ec7445dfbf366b0b3bc5e76824a1e43eaaeca70db90f2fa39596443447671933079a24fe3681ad9ac361f71ac279a688f10a12105edebc5e3bbc394c8305ab129ca2dfb9b7c5e9d097bd01b495cccefddce569117f7f5d6a6270ff0f0f4c371029ca8489571b55841bf3dd003bc81460eee57ceb3c33f4e90eb1fffffffffffffcfcbb616c2070237881afdb314cecd1623f3e55ab8b7627fa1be349145a8d6313cbc790eefe2020138e82fb9d351be4ddcbcc9bc048dd3db5828d16baec6e07a007f0030f34ea3cfd524d6fa1d45da5641d6c94e1d3ae7fba1c85035d2a60ef1696e0d96aa1c60019f73ae0aa6113cd66ef26b5777337c26e1461405d86fdf091edd526f25cada439bb3609ed5c35ab60a539ade786bd6004d0ea3edbd6c4da0d8e8be8c771c8c8a0b07d9859e04adb18964dcce9bce546074c2615318bf813e788c84409dffbc2df372a016e8c845d4257000000000000000000000000000000000000f29657697d9c2b132b2dc2f5ea5122836582a7e85fe2bc166f17aefd9d861de0191f5277d4a3b5afb6f23d9eea2459f7844606e1202768d83c24cc791bde44a448022bbfa571fe029a7b2d5152639ee283894ab6168992ff0acc01b39a078f285ce615351f262019586eb9447bb3eaffd7b53d8f37ca6c5f1027dd5b7592996c8a7789ba108979cc9ad07ed86682843e2eaa855dd01443ee6ffde1811f10039d5d14458177096e15cc4d8f2582a1bea5cc98d992f3de7d1cdfb24384b9f11b615c87c441dc970ec896a5af6bf69b50a244bc138a1cae3d220bcff6bcb3058c6e0d1cc0da889710f33f5638f805ce602365492282863cc8092b16656dea03cd50182aabbac78a14506dcbf823bec4a5dad14c4d7353b6a55c28321647df3a85bf9fca4e18aeaf4867e6a3dbdd7a5dbe1a52bddae83fc368404a032b75649cf74d7af8e9e3e43fad643ad3e8575a2bb0507531eac5e10b631575f1360803c8f556e07f292ab66b9bcea0c2f09db289a5934a4f2f5fe5cfc52b270a4a5fa2a8de62dcaf7ef52f1fd84c55e6a0c5a365a3b4e73c4ac6fc26367f3f6c07b06a0874c039622ba2bd369b105f57099f742a000a36c2f044a5de24604f82a1f197d9a70b5a62f794f57ec02df70d459fedd6125ae41479a2661360a79e175f0add2820018d5985183ee80f681403a7d08e0e2b88d0750c90b7ed5fed6f81ce797f3b60445ce811d2b4e45005a5ea06c1fe927af06433cd3885dc954e698a7a73416c73bfab7773a6e5e14338797ce9148cda4c0bf05fb67915aeb3661e755e4e1a0ceedfe8e91ee5361ff4c7c07b422e1443a6616b6eb3c325d5687644a4c0a1d44d9dfd82896f56bdfa0790406984c123e1d37da4a9a9444485e9b1e3b6b548528989d2aecc1e7b6ee92ca19298801105ced8964e000000000000000000000000000000000000000000000000000000000003d1c031ee2fc25c7ad34283187545b1343f7ab862e66cf5bf4ba4dbf5fda31619c05ddb97199ad4d01471e9b3c7f485b1e74d0ed34201915e79d5ed229f0773ab6b38529c45b10d0796e005b6d663b942320339b9fe1d4e393b4bcb596898cde06955a345db3cb956b0e5da1c1dba7046f4d12fc65085306e32d41e1b78ca58c9c9581830e6f3ddffffa2b71676c87c45eabc59af421e6b9a98ac"], &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) openat$sequencer(0xffffffffffffff9c, &(0x7f00000001c0), 0x80280, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000400)={0xffffffffffffffff}) r2 = syz_io_uring_setup(0x117, &(0x7f0000000100)={0x0, 0x4, 0x400, 0x4000, 0x3a6}, &(0x7f0000000000)=0x0, &(0x7f0000000200)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r3, 0x4, &(0x7f0000000080)=0xfffffc00, 0x0, 0x4) syz_io_uring_submit(r3, r4, &(0x7f00000000c0)=@IORING_OP_SENDMSG={0x9, 0x40, 0x0, r1, 0x0, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="18000000000000000100000001"], 0x18}, 0x0, 0x20040000, 0x1}) io_uring_enter(r2, 0x47f6, 0x80ffff, 0x0, 0x0, 0x0) 4m10.990312911s ago: executing program 3 (id=538): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000400)=0x6) r0 = getpid() sched_setaffinity(0x0, 0x0, 0x0) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0/file0\x00'}, 0x6e) sendmmsg$unix(r2, 0x0, 0x0, 0x0) sched_setaffinity(r0, 0x0, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socket$nl_route(0x10, 0x3, 0x0) ioperm(0x700, 0x8000, 0x2) 4m9.685828089s ago: executing program 3 (id=540): seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000080)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) ppoll(0x0, 0x0, &(0x7f0000000040)={0x0, 0x989680}, 0x0, 0x0) socket$key(0xf, 0x3, 0x2) sendmsg$inet(0xffffffffffffffff, 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000040)='net/route\x00') prlimit64(0x0, 0xe, &(0x7f0000000140)={0x5, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000100)=0x2) sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bce) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, 0x0, 0x0) stat(0x0, 0x0) pread64(r0, &(0x7f0000000080)=""/102356, 0x18fd4, 0x200) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$SO_ATTACH_FILTER(r3, 0x1, 0x1a, &(0x7f0000000000)={0x0, &(0x7f00000000c0)}, 0x10) r4 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0), 0x802, 0x0) ioctl$UI_SET_EVBIT(r4, 0x40045564, 0x3) r5 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000340), 0x101142, 0x0) ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0) ioctl$KVM_SET_VCPU_EVENTS(r0, 0x4040aea0, &(0x7f0000000240)=@arm64={0x4, 0x9, 0x9, '\x00', 0x10001}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fd7000/0x18000)=nil, &(0x7f0000005700)=[@text32={0x20, 0x0}], 0x1, 0xc, 0x0, 0x0) r6 = syz_open_procfs(0x0, &(0x7f0000000000)='ns\x00') move_mount(r6, &(0x7f00000000c0)='./mnt\x00', r6, 0x0, 0x172) ioctl$NS_GET_PARENT(r6, 0xb702, 0x0) ioctl$UI_SET_ABSBIT(r4, 0x40045567, 0x0) write$uinput_user_dev(r4, &(0x7f0000000ec0)={'syz0\x00', {0x0, 0x0, 0xfffe, 0x9}, 0x37, [0x0, 0x0, 0x0, 0x0, 0x0, 0x7ff, 0x0, 0x4, 0x0, 0x1, 0x10000, 0xcd, 0x3, 0x8, 0x5, 0x20001, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x7, 0x3, 0x0, 0x0, 0x1, 0x2, 0x0, 0x0, 0x2, 0x7b8ec57e, 0x2000006, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x2000000, 0x0, 0x0, 0x7, 0x0, 0x0, 0x3, 0x5, 0x0, 0x0, 0xffffffff, 0x0, 0x6, 0x0, 0x0, 0x1000000, 0xffffffff, 0x0, 0x0, 0x9], [0x0, 0x0, 0x4, 0x9, 0x2, 0x200000, 0x0, 0x0, 0x0, 0x0, 0x7ff, 0x0, 0xfffffffe, 0x0, 0x2, 0x0, 0x9, 0x24, 0x0, 0x200401, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xd, 0x1010, 0x0, 0xf, 0x0, 0x7fff, 0x0, 0x1, 0xffff8000, 0xfffffffe, 0x862, 0x1, 0x0, 0x0, 0x0, 0xfffffffd, 0xfffffffd, 0x0, 0xfffffffa, 0xa10000, 0x80000000, 0x0, 0x0, 0x0, 0x80000000, 0x0, 0x0, 0x0, 0xfffffffd, 0x0, 0xb, 0x80000000, 0x0, 0x0, 0x4], [0x8000, 0x3, 0x4, 0x0, 0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x6, 0x5, 0x0, 0x0, 0x6, 0xff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0xe, 0x1, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x4c44, 0x2, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000000, 0x1ff, 0x2, 0x8, 0x2, 0x0, 0x0, 0x0, 0xffffffff, 0xfffffffe, 0xfffffff9, 0x17, 0x4], [0xffffeffc, 0x0, 0x1, 0x0, 0x0, 0x9, 0x0, 0x0, 0xc045, 0x0, 0x0, 0x7, 0x1000, 0x0, 0x80, 0x0, 0x3, 0x2, 0x0, 0x1, 0x0, 0x0, 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x200000, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x2, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffc, 0xffffffff, 0x0, 0x0, 0x80000000, 0x0, 0x0, 0x0, 0x4, 0x7, 0x8000, 0x0, 0xfffffffd, 0x0, 0x4, 0x0, 0x0, 0xfffffffe, 0x9]}, 0x45c) ioctl$UI_DEV_CREATE(r4, 0x5501) write$uinput_user_dev(r4, &(0x7f0000000a00)={'syz1\x00', {0x4, 0x1, 0x4, 0x60}, 0x47, [0x3, 0x2a1, 0x6, 0x5, 0x1, 0x3c, 0x4f, 0x8, 0xffffff5b, 0x3000, 0x281, 0xfffffff8, 0x400, 0xe, 0xfffffff7, 0x9, 0x990, 0x6, 0x4, 0x1, 0xfffffff7, 0x9, 0x4, 0x8, 0x3, 0xf9, 0x0, 0x7, 0x5a09, 0x7632, 0x58, 0x1612, 0x47d9, 0x2, 0xf1b, 0x1, 0x0, 0x9, 0x7, 0x5, 0xcf, 0x0, 0x1, 0x0, 0x4, 0x1, 0x0, 0xf, 0x10000, 0x10000, 0xae, 0x34, 0x80000001, 0x1ff, 0x0, 0x893, 0x0, 0x6, 0x7fff, 0xfff, 0xe40c, 0x9, 0x3000, 0xae], [0xa03d, 0x6, 0x0, 0x401, 0xfffffffc, 0x8000, 0x80000001, 0x4, 0x5, 0x7, 0x6, 0x8, 0x3, 0x40, 0x1, 0x2000000, 0xa00, 0x632a, 0x7, 0x10000, 0x3, 0x7, 0x1d46, 0x4, 0x80000000, 0x3, 0x3, 0x8, 0xfffffffa, 0xb6, 0x8, 0x401, 0x4, 0xfffffff9, 0x8, 0x7f, 0x0, 0x5, 0x800, 0x6, 0x10001, 0x325, 0x9, 0x4, 0x5, 0x1, 0x9, 0xf4, 0x8001, 0x1, 0x6, 0xfabd, 0xfffffff8, 0x6, 0x55, 0x8, 0xede4, 0xf, 0x7, 0x80000000, 0xd1, 0x4, 0xe, 0x400], [0x9, 0x5, 0x1, 0xa, 0x7fff, 0x0, 0xd, 0x5, 0xffffffa5, 0x1, 0x2, 0x5, 0x401, 0x40, 0x4, 0x2, 0x1, 0x9, 0xfffffff9, 0x1000, 0x2, 0x0, 0x6, 0x9, 0x7, 0x9, 0x6, 0x9, 0xc14, 0x3, 0x8, 0x5, 0xb5b, 0xd04a, 0x947d, 0x1, 0x80000000, 0x2, 0x6, 0x7, 0xc, 0x80, 0x8, 0x7fffffff, 0xb2f, 0x2, 0x664, 0x3, 0x4, 0x80000001, 0x1, 0x3a92, 0x6, 0x8, 0x4, 0x193f, 0x6, 0x9, 0x9, 0x8001, 0x2, 0x0, 0xb88f, 0x7], [0x3, 0x2a5, 0xdd7, 0x0, 0xe, 0x5, 0x9, 0x5, 0xd, 0xffff0a22, 0x5, 0x7fffffff, 0x4, 0x8, 0xf24, 0x4, 0x58, 0x63, 0x6be, 0x7f, 0x6, 0xd4, 0x3, 0xfff, 0x10001, 0xfff, 0x80000000, 0x6, 0x144, 0x2, 0x5bf, 0x6, 0x2, 0x6, 0x1ff, 0x1, 0x4, 0x1, 0x8001, 0x8, 0x62, 0xfffffffc, 0x2, 0x0, 0x200, 0xff, 0x197cf6e9, 0x3ec78781, 0x1, 0x487, 0x1, 0x6d739670, 0x7, 0x1000, 0x8, 0x81, 0x4, 0x9, 0xfffffff0, 0x4, 0x5, 0xfffffffc, 0x7fff, 0x8]}, 0x45c) sendmmsg(r2, 0x0, 0x0, 0x0) 4m9.211637113s ago: executing program 3 (id=541): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x22900, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r1 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) syz_genetlink_get_family_id$mptcp(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_DEL_ADDR(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000240)=ANY=[], 0x20}}, 0x24008094) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = syz_open_dev$MSR(&(0x7f0000000040), 0x0, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) r3 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r3}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) r4 = open(&(0x7f00009e1000)='./file0\x00', 0x60840, 0x1d2) fcntl$setlease(r4, 0x400, 0x0) truncate(&(0x7f0000000040)='./file0\x00', 0x1000000) close_range(r1, 0xffffffffffffffff, 0x0) 3m53.954959643s ago: executing program 32 (id=541): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x22900, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r1 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) syz_genetlink_get_family_id$mptcp(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_DEL_ADDR(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000240)=ANY=[], 0x20}}, 0x24008094) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = syz_open_dev$MSR(&(0x7f0000000040), 0x0, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) r3 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r3}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) r4 = open(&(0x7f00009e1000)='./file0\x00', 0x60840, 0x1d2) fcntl$setlease(r4, 0x400, 0x0) truncate(&(0x7f0000000040)='./file0\x00', 0x1000000) close_range(r1, 0xffffffffffffffff, 0x0) 19.55486267s ago: executing program 5 (id=933): r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) connect$bt_l2cap(r0, &(0x7f0000000080)={0x1f, 0x0, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x7ff}, 0xe) syz_emit_ethernet(0x52, &(0x7f0000000100)=ANY=[@ANYRES32=0x41424344, @ANYRES32=0x41424344], 0x0) r1 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) r2 = dup(r1) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x2) ioctl$KVM_RUN(r3, 0xae80, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) prlimit64(0x0, 0xe, &(0x7f00000007c0)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) r6 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r6, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) mlock(&(0x7f00007d8000/0x800000)=nil, 0x800000) sendmsg$ETHTOOL_MSG_LINKSTATE_GET(r4, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000600)={0x20, r5, 0x65283e1aaa2ddbb1, 0x0, 0x1ffffffc, {}, [@HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x6}]}]}, 0x20}}, 0x0) openat$uinput(0xffffffffffffff9c, 0x0, 0x802, 0x0) 18.741795742s ago: executing program 0 (id=935): syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) socket$tipc(0x1e, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x1, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = syz_io_uring_setup(0x497, &(0x7f0000000200)={0x0, 0x3661, 0x0, 0x1, 0x2c}, &(0x7f0000000340)=0x0, &(0x7f00000000c0)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r4, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r4, r5, &(0x7f00000002c0)=@IORING_OP_WRITEV={0x2, 0x0, 0x0, @fd_index=0x4, 0x0, 0x0}) io_uring_enter(r3, 0x3516, 0x0, 0x0, 0x0, 0x0) 16.166185922s ago: executing program 5 (id=940): r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000000)=ANY=[@ANYBLOB="120100000306b240c50f27128eda0102030109021200"], 0x0) syz_usb_ep_write$ath9k_ep1(0xffffffffffffffff, 0x82, 0x0, &(0x7f0000000100)) r1 = gettid() r2 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000180), 0x40e02, 0x0) write$rfkill(r2, &(0x7f0000000300)={0x0, 0x2, 0x3, 0x1, 0x1}, 0x8) shmget$private(0x0, 0x2000, 0x800, &(0x7f0000ffd000/0x2000)=nil) setsockopt$RXRPC_SECURITY_KEY(0xffffffffffffffff, 0x110, 0x1, 0x0, 0x0) write$rfkill(r2, &(0x7f0000000340)={0x53, 0x8, 0x0, 0x1, 0xcc}, 0x8) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0xc1842, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) clock_gettime(0x0, &(0x7f00000003c0)) ioctl$VIDIOC_QBUF(0xffffffffffffffff, 0xc058560f, 0x0) timer_create(0x0, &(0x7f0000000040)={0x0, 0x21, 0x800000000004, @tid=r1}, &(0x7f0000bbdffc)) syz_usb_ep_write$ath9k_ep1(r0, 0x82, 0x1a0, &(0x7f0000000800)={[{0xa9, 0x4e00, "6dff62efa76115ba6b0871944f44f89468c9982a261b1907d4f726b1037fdc4abc7ca149c94e4e4c49ee54d5a9fa5346b855da30fe59a863d54f2de1ee03a600bd79c91f14ea753ef08ccec0e1cb066f6cf18f1322c2d43894c648142722a3cc1194455c969f9bec6d15e404e5679ec314e317421be7549d7dd73935ba5700e7375d05b9e9de563a3579306c3c783e497524a076d010ad256a2c25119090e1d01bb6eaf36c32fdc240"}, {0x15, 0x4e00, "0074569da11013cfdbdf1633afa91fda43ef418676"}, {0x6, 0x4e00, "0f1661169634"}, {}, {0x7b, 0x4e00, "08a10d42fde45f481771fc1bfd12dc1d1d93d697e3839827cf05096880c3223956b4cc1ca73ba890728eab9237b7f2b03313ac6581e5c7228b8b0d12f6a5214c337b27bcc940d11e9287100018be066e491b2e18486cee62e5519165abf59387162c7de0f072275bd2d2fe7860e8f6fe333ca7e65704204f011bdb"}, {}, {0x3a, 0x4e00, "ccc7bdbb8ec34798b222b508247acf41e6128d1904fcaf784d0f36b3bd078292a781c50cdd9cec4dad9f0a709a87c3124b8644bb8ab20ec0803e"}]}) timer_settime(0x0, 0x1, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x3938700}}, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) 13.484692913s ago: executing program 4 (id=943): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000000)={&(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ff7000/0x3000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000fef000/0x10000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000fef000/0x4000)=nil, &(0x7f0000fef000/0x2000)=nil, &(0x7f0000ff2000/0x4000)=nil, &(0x7f00000000c0)="8fb2c230f2fa77846e9ff16f2b6967b0bf0422b3e7b0edaf8c8b8d05f5ecedf40a41e70b57f0ea09f827", 0x2a}, 0x68) r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x3) socket$packet(0x11, 0x1, 0x300) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) read$msr(0xffffffffffffffff, &(0x7f0000019680)=""/102392, 0x18ff8) r2 = add_key$user(&(0x7f0000000240), &(0x7f0000000200)={'syz', 0x1}, &(0x7f00000004c0), 0x0, 0xfffffffffffffffe) keyctl$dh_compute(0x17, &(0x7f0000000140)={0x0, 0x0, r2}, &(0x7f00000000c0)=""/83, 0x53, 0x0) process_vm_readv(0x0, &(0x7f0000008400)=[{0x0}], 0x1, 0x0, 0x0, 0x0) mlockall(0x5) ioctl$FS_IOC_GETFSLABEL(r1, 0x400452c8, 0x0) r3 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x6) syz_kvm_setup_cpu$x86(r3, r4, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@text32={0x20, &(0x7f0000000140)="66baf80cb8044fdc87efed660f388059e0b805000000b91e4200000f01c10f20c035000000200f22c0f20fa20f01cb36263e660f381efc660f7c150c000000b805000000b9210000000f01c1c4e17929d8", 0x51}], 0x1, 0x11, 0x0, 0x0) ioctl$vim2m_VIDIOC_ENUM_FRAMESIZES(0xffffffffffffffff, 0xc02c564a, 0x0) syz_open_dev$usbmon(&(0x7f0000000080), 0x0, 0x80800) syz_genetlink_get_family_id$nl80211(&(0x7f0000000400), r3) socket$unix(0x1, 0x1, 0x0) r5 = syz_usbip_server_init(0x1) syz_usb_connect(0x0, 0x24, &(0x7f0000000540)=ANY=[@ANYBLOB="12010000e2793b10d105012000090102030109021200010000000009040000004d2f9c00e4f868cbf340a736d8dbddd4f9b5eb3b5cfdb0f4f16a4f1b4e9c43e583f7c19341ce2a7a5bd55bc71c28bc42915ccfe7c36d8dac1d780cd9f5d695f267dec95063bb6e99252774759528e525c7e8e33bc59d37f420c99d794dbdbd6945a469d8774c2ccac4be45916c90d1456327656c06ce206ee0c4ac6e82c2aa1f7e54ee4b191f01eba77681ab636024e4c221ba9104a9b8"], 0x0) write$usbip_server(r5, &(0x7f0000000380)=ANY=[@ANYBLOB="00000003"], 0x31) 12.641655522s ago: executing program 2 (id=945): socket$inet6(0xa, 0x1, 0x8010000000000084) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000040), 0x42, 0x0) mount$fuse(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000002100), 0x280449c, &(0x7f0000002140)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x4000}}) read$FUSE(r0, &(0x7f00000093c0)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r0, &(0x7f0000000240)={0x50, 0x0, r1, {0x7, 0x1f, 0x0, 0x2066012}}, 0x50) prlimit64(0x0, 0xe, &(0x7f00000007c0)={0x8, 0x88}, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) syz_open_dev$sg(&(0x7f0000001600), 0x0, 0x400) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) r2 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r2, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18020000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb703000008000000b703000000000020850000007200000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x17, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000080)='sched_switch\x00', r3}, 0x18) pselect6(0x40, &(0x7f0000000000)={0x6, 0x2, 0x8000000000000000, 0x0, 0x2, 0x0, 0x100, 0x10001003}, 0x0, &(0x7f00000002c0)={0x3ff, 0x8, 0x1000000000, 0x689, 0x2, 0x3ffffffffd, 0x2, 0x7}, 0x0, 0x0) ioctl$int_in(r0, 0x5452, &(0x7f00000000c0)=0x1) syz_fuse_handle_req(r0, &(0x7f00000042c0)="000000000000000000000000000000000000000000000000000000000000000090c400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000542d0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ea8286a2fba523440000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000633956a1000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001800000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000007d6ab715107fa1820000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f6ffffffffffffff0000000000000e000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000100000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000e1ffffff00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f4000000000000000000000000000000000200000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000286071480000000000b13bc1e6d970884f00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000060000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000fcffffff00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000200000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f3ffffffffffffff00", 0x2000, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000006340)={0x20}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r4 = openat(0xffffffffffffff9c, &(0x7f0000004280)='./file0\x00', 0x0, 0x40) getdents64(r4, 0x0, 0x0) write$FUSE_NOTIFY_DELETE(r0, &(0x7f0000000000)={0x2a, 0x6, 0x0, {0x1, 0x0, 0x1, 0x2, '\x00', 0x8}}, 0x2a) syz_fuse_handle_req(r0, &(0x7f00000021c0)="7b1713b4c6f02da7493fb6859f0143c68a58166f472c5078104b859bc37f9a49a8f85c9101df3b2736ff9bebcb1a3c2f570b28279b8ff7afdef7451b3d10b4578c2e81784b6e4f410800d997f0689546cee0852e9e9c64c1f95df7b136243cf7aee1b8e7a4e1d6e6fc01337370f0dfc098d975e9a6f90a08f5b845054d1e1fc81adadbf2836ff758bade0484377855b05b3556a91827599638458ad30baea03240b302638b88423ecaba6da1e40f6f1b24d60dde1652f2d5f818af43d49dd55c4eadea945e9b6aa744dca07ec2e00320bef5b045414836941469129670c4cdb953ed61efeeae2ced1b7cb3e7fa4c93cce5623a9e33c69d068b801fd1369aba759e2829c67c705853262fef6669aab956f0f733619dd361be5e1414c7e7ff6218e330156d609fa9f3244a0a4fb678a58e70b86f6dabc3331f755b786c42b4198149941a7a58c83f1f2811209025269c5ffcbe0c34ac98cc091cec2c993bca0aa8400ff9e39cc9fba8dda886f95357957bbad8bb850ab92f7aa9bebcdb0ef188749a1742e5597d199f3ccdc2d807bf757da45acc93e3e9645a1036cb041b3c38dafef367b8dae802bbbc03bacb905d40e1da78591687b416ee380103a670aa8f722c76e13f7f0e3effbb37f15a821b8315fe541e3ffc09289d96db1dfa8861e5da41c812b54ee20ca8b3180f2f46db56954791465cb572de0cce16d789d6fff216ca46977ed724dc0cc8cef7b295ebb2998a5c4662e32ae1001e59f3bfefcd72543bfe1aa6688d65c547089ec0fe1f1d9610095a5a4008b14f46775c368417376ee143856031947db71c455dc40eeeda210fbf258452781ce46e51f6df683a7918770f73d324d9401648d271cb9a7e919401567e400fec420cf363444a78eea03e73176abd6546e1657945aa88f64a21e07fc23edd74512cf89781e8ffe9bb1601ab25d31801332a6c5be9cebb6cb08207bb832106553ea9fc19b4b4f1f0cd55efc2925ffef75e9b12f06b5a7496506a274ca25f88398a1734b7013c3f78a2e49ef0d946a1aff362e37c9b5f5473de11401097722adda87944ee3eeb1bdde60e97484af4d2e5f8b0a9c63bb8bb99461b16edd824add1caf9d5247811cc4f6b48004774f1a4fe4dd125ddbfd8b69ff3ee314aeb445bee9f217a2f5a9e0e84ccd8718471f949086df6cdcbf95e568317e31dd01be1b826cf9a09373b16935fc864794a3886a2f4aacc42135db85f8921916a10aa7111a686979e2a5c9959cafc9774c416c4dfe0b9e06657feb2fbc31e7c11f6e2841680986557c1f2b1ec3c0fcc6a749a3c97a5b370550ab7110e25851b13c0b75a7fb0cd3c4659878209867659c216b467bdcf51e786a59fad084886490fc77e186ab827d844d0ac4682651fc4043f8e87b905532a53017ada44feee1f89f9bc6d2a8b144e721a479f7b90acb91033774f4c12df633548a9097c791ec7e80fa2607c86fce6e9abcae1296528b8488ccf18a4bb0fc9b50c15d294e8d380465465b4eeae26eb6800faba611785cd2ff95ca1923dfa47d5923f89e4eadb612002caceaebbe779c4e3a3833455752eae63689ab8dc03db63d82feeab7f1162eed5909b69ccd5abeb9c071da82cfc76cc692a51d99e0c4bdfa6c81c9878e893a77e1e7105e7910827ddb3353612fa8d5e547b43b5abfe50829c1eb7bfda1731db2a9a1e8f0fc298dfa7009679489f9d9323338b7e59f1e48419ca531d88170a5a1995f576aa125edae9e9ea26f6e9c4bc26323b7db0998c528a7b343ccd87ff44c77e6cfc0a324cc1d4ea79c30015f0caaeccd46e5db580aa5ce8030c2b13b37494557da58abbdc7ce9fc9afa49ce0e8a7a6fa058db210ed654203e7879cf5004ebec57522ed34481b749554b36cd7171209b0763e110096704604f2d3f28c5ddc66c877e3ab63f36137d5a67cbf872aa6af79cb3a66c9040009b5e1c7b718c1b8788156b82d6d800dbe9fc3d16c812a963c73599b79efb89aa74bdbd9b1a2dc0b8ad853f79c0867a3a45d7a1645059171877687a72dd5ed4213c0ab84ef6185e7935346a84450887bdb2b216883e907b13b03c133adc04ab3c5f60209bd90aad3d94443105f08f0ee1b2231e1a1f8cce71de74d5308b78b5d99ce4ad4573faba9fab48bc1615f14d453c67714b99f274de041512b07b885679e6f89f481c28b082084b853c9afcda31def2898284d6ca28fb124df67142821c9705e28093ded60992d9587fb466df839aa2a4973dd48f9372a55da6592646fc918e533955566a2d8dc59277308223aea4dbe0daf839f95516b8995e9eec87df1df9d38693e0824dca7423b08d553b0ae1c5c44533b918eaa02dd17b4c8ce515ae7de410970f670e17b5e3c0a207fb8464d5d442694a271d593fc23ac19619bac32ac17cc6705ce2e6262361eba24277a471602e7ca57cc614ee116e60a9e0b6ac5e3228ea2c650baf1a09e9e5c7a1b25a078d1d11a673d88f6ee33e50d036d7fe4b9c06adc70aede2e35c6738b255690ed3f7a8d2d14e36e360f3bb66978d6cfcfc41887c751c0efc9325d4485a2f561060413fe6af4ce40d87a476201f15a584fc7ba18ddfef5f1d729d5f544c2c6b06befccb444f0408451089f20b06f05ab7d6702b97819b0eff6fb090f21afb3076558e692920053702fc2348f8dade0cb2b007f38d6dcd4ed3bb42553b1bd684791743a1941e5bf2ed234f44be64a95b485a3e949538a40542f25ca4bfce44e291037ab282082f02157a96f4ca0a0c5cd39215fd07461093a4d87a7979f7aa97142bf5b9ef71db537f9acc90f22ca2ded5c1ecd1ba972d05db7f71e8466085c9b3e975fa3a948f2c4049d1a8e46f71157017a3a74ad25e215dcfe7a4c5cb0a7baea0b0ec60c5df82555c553ac60dd39174c721edc0304b836a4de539c3ee55401e13848018f889cc4a0fcd01d9f4978eb730fb1b4a94ede0283f8c95062f01c8c8a3169b2d5c50cdd4f3a248d80a26c950b4036fc6ffefaf5101269fe3594c2cc128220a1d0b5f9f23121f2b184894e129159eaa92d9a30e878839be44d20cbdff3c338cc95795c86121b2b498bd376e895c98d67f6a27eecb46a203aa9de744feedf27b6825cc17aaa098b5ca05cad6bdbe320908ed36bdc8a8f2c777eeb9b037b36c0e36019c264b3e36196501d6cc90e7b1899a72bea5c8a24a5ae62e3684a39a06208bd382cd32acfabd742c76334797fa0c09a2a2a7e1240974afe0f3d6eb44590cf171efb7602009a93bde85cea6701c765dbca7c6a879be41dd08847802d4f59e933df65f727cbb45e3a4a5019f503b6fad7e0338e653f8b2c87aa7f196444e0dc1be6d7c4f0c7ddd663d06ff1365a9c362384a33b0315adbfb2d73359c485cd5410d36d21044bd8d3771c5492803b19f7f3a1a5c3248e66786479fa4416a55855adebeb09528ff5add597790b97bddc16bb9b7b33a1f800701c4293e2c8428dc2684726cfe5539ae0a9bf89e1b6f1989fd0433cc865b308bd0c636402b4b285c290e2439b9ecf0eba156fb6b613ea7f97b04506fe28e9471343c854fdfd48945a7f564acc817e609be8f8a7fdee12e9b592fd8c5c08f51ba8cb95be12cfa497d1539a4b8217818d47ebb3cc669014261530205948fdb9983a0e5759afa9b290ce838102661750ab06d7fe65a39efa6af36c042d2dee36402a6686d58eb144b76033cab4482b8fbdd213a90170939ec98df1fdfca4b37b143a971b9b59fc351098942bba090056c20e8cfbfe8fcbe361d068c98a020f67e807b8db2e45cad83c9970907646c0049c05c1ed657d53d859f1a47bfe6f022be0689de224034d0160b1dbc878ba6dd685911288d7af22ff5eedc1634c36e25f51d0757c7b9c73d7937955da356dea68749d464a75f56c9f6ba36cc1ca8c2f3aa34beae14fba894ca705111cdb19094432c2f6caa0eac78ab09b0cee330f36b1b91a6a5d4896cd15d96c12547826559441cbf578f189f5f04526a4cf76d60144090c2386b747ad50f7962ef2950d2c6f4ff8477ad0681ab24c47ea7ded8c9accff0dfa30489f43f0f3182b88e757fd9a1d82e1c9bb4efe5215518a6e48c688b2dabbd15107c5c6245de0acfd740ea54e0ec212f405f25bc3aafc63009631a4e4749296d47c2bcf25cc95afceb0a1ddb3c6124208f5134981c30489b42eeb864b3123b03106c9b234a465d87c30ef36e00244390de36a5dd93794467ef37bd01b86387855d2ac24e05370212e845082bb22c8fcda0f0bc78ddf971b0b9d69fc50e0d907408e9c9ac4e5099f47db2d0c14d888e363ece768555362a08c408d0119c45f158aad695d455d28e223be2862c19262c9f43eff8855b5a9af4f2cede95e415e2f597bb64c8bb2d608f86b15950ffe2e6bea3cdb221cf8b7eb35e0bdf6638283b09c68cda0bf1ccb9e353a7f0afb58d806923e36b22db68615a7e4e04d0932d928afdc8af3963378ebd5e05058160ac67fadb7a7d9ec498e00f63671b84d880d196c93afb4fc823e7d6576ad824ffb4c90fc780b163a292899ccfcaed81dee2c992787a66800e206df3dfc4a6b441d54ccb1a19a587402a663d510e45a5b1aa96fc467efaf7e71cbbff087f3d2922a133466d5ae9f86b0bc39bb3093b87ac2db941b1fd9e40427402781425d6e8856a2c66cbdd274f4c689758db6dd58ec7d766b177739e8c9173f2b1946be5396aad6d7ed29d058ac231e8c2e6a9077b4a217df4580a2d72bcf0b73e4bd07465deb8798a55ee855b82f1fa7d3748a40485bd90fab94b617d92219c4b65efa022936895e51873058615a19b9d1347120c405c3254f290b4c8b99c8ea9dde3a749ec538421a29d27b48ccd83852abe1a461123e4d36e56508d1827880960362d10835df77f9d4be51f1447cac5ae2017a814de58cd99bcc0c194254b17114ea48f5a0cfe6547686088d527c65180474fd460ffea5d48767ceb65c6fa3d7d3c632591d2d9d65c6c3a35a6ae4dc56322cd84734b0e7a092a4c46c1c607afa6d0e477e8d04e4993e595ba708a0f4466cd8a89fbc06d3cd366007296a9f05b66cfdcd5b30b6745e71d513205d5dbe1e8516d9e9cf133caa994ec0ac2c543d107efd4b9a7d9ee1ee415830a6c2ea17114ea9683726f2c82741f9ad4ac1be6772f0809f18c13f4cfc82fd1b7b3bd29615336003c6784c03fbcae475a58a3c4d68099732c326dfb7643eb150f2354918077bb798b5ecf491cdd0765e3e1ed5d0a37840f1a28f7e188a021781f1896dae7153f9d6639bf66be0c7857d7eccd2a1e6c9fd0cc3594477bb005df9b29f680c966161e37bcec97fc2ef7a2c3bf64e4df5785c9b080c7f9c6d7c515408445d55da499c03ba66369a31157bb03588e84a5303c46cd393c5bd6fbbb8deed94b62d67a9351c259b263c6c4fa65a4dbdd7eee080d82cc5e478c885678edbc9cfce74169ab748d7f4a08aec3e114394fc1d5e361267b8f3fcf38a024928d58158560f7da427680e7611a9f1b8255c67e6ea6b597ebd31bed9fd6f85f9b6ee63d4374c1e50597d1c9f3c56b4266bc632ba66ebecc396f6bead40392dcc138098b4166ab7f8714bd4db0615480705dd200da92dc51ec215844d7599e0a6262e8d5dc6a9452db8994d8b8f19ad4029e0b41b5e13fd6b56230cecea57f3111fe6c78876b3e657fab112968e83a0b64ce9837b89f5dad0d5f0b8b410e3a9a56ab2e9143e90fe371a944989ee206eef777cf4a235333c647e45aab910af492bc7c2213246374251e23accf5818aa2f24823bcba12efe3658e1e2cb49a5d4ffd26453829739647eccd106605921641afe16bbe79c8739062eabeeda4d4a42cb70d84e1e1d3506c7bfba5f5135aaae85b03dc6518eb30d832175cedc5bdca95e600e04902d9eda90c1da4bdd3138ac889398c239068857103ad70b5d1d9fac27c8ccfbcfcf126d9a5441bc963bce4669047ac901a14ca7c7e76f94c77159cdbda5360e04bb539a9d5ccd16a8cc88bacaa5b952c86b163575d7f1cab58f0d612d796b570f3c5debd7d9abde7e24de2c252173f1edc93817192699bddad45eeb41ff398c1bee4d2194f38bf4d2b4ed3a8895476bc441f464753139e204ff5dee7f45ce639d7541c0d396141aeff30cbbfa7157a61993eec98a4356df98665546a1d1e8429fb0c78684000862aac50f7d9a1413e89958f4defd3f087769cafc32bcd6016e496b41b7754cfbe42b352346fd585fb19a80f4af9a19811311b5fc6ea8eb5519a3cf7dbc1a06eed41668e332224c1daa01776e0886044f5a95e5dffc8d9ccce7840eeae97e8cc916db95bdc33fb420e28030c6edb011d5281db1dbeac9bfcaf938a757e3939b025d339e69b9692c8c7352787d399f342e96096e37ca208609e5f93629e36ee442db9fb822ea236683f79875e7dc73ec97f98fe0795f9d83f473cc80a589043a7edd953473684ea4e80f698683a0fc1d8863adc44fc13c27a08921a681ca1ad76207b1a97f8fff7db247ea09b3a6407ea83d82d82d171fc80a8f5fb9f19cd7e94fe121a6a0ef9c4cff7a8689c0abf750dadcc7442c2ca5ed437af5e88e89b0a783a1164cd1eb2a33a64c919d9f08fe5aa7a775352ab6027a7b73d6fef51acebec5516c2a5f2b932b2621bbd2cdb415fce9ba1dbc3de205869fa0423adcedd5570ab0b4b64afafaa458b3840b48f018297aa46426d7893418033f00b5378eac6a70275ec860609b07851b88ecb5da05086adfb80f47c71a77301ca0f1520dfb7a800bc8421abf5eb94942ec818e3a1d45f09ff93e6549b3ef6152c6abe38231b4a82e355e27e363184df51418286d7073cf464eee02310e84b3eccabd2120fcca333130357e1967f67a69f437dcf6a20ca21797230aad086bd4c28348f58b80ec5d27626004533993b9f85897d00bc271a62ab67f92e2eed6d900000000549e8344ad90b47fb5c1ed5908bce94d03bbe98a87a1733b5031f89644c2d35d729e1375969a82f0252859219407c5c87f5d249d5eb8c17001fc7c6dc5d1825851b41e5e937f2c39d7f7196f38f83619da2cddce747bb0e906d0fc13a11fc6c2be3d140ea6da886cd5e194ca9dbff565d2a82e7e82dc5a36084bf02029ea05a9cfe1f3dc80489b426a14372232940ffad8124bd515f0a73fa85c2aa0cd51d76a0cc6e75ccc35b702a4fed4d2e2828d98939406ddc6df1048f0a22611859d6bfcbb0873d102e4b8a86b5d9af8056447f6c1552a603d9f67009fa070db73a01e1b4adbe4e841d0b9a92d148b626c386b25687817e5ec07dbbfa1d62d078578fe21d546414e3c5e29e8e086d7e542a2eb74a67127e7f171e076bbdd62767aae3db467db1df13b3121023bcee33f814d767a9ef14651f76ec89910ed33e9804df8619f69ad06bf0559b00d4efbf6f44e922d50a18ffa25d8ac58dec53a93642186c0ca81b07fe5c14c9c13397649a53ebfcec118e5bb84db053e6e505d07a09bb50f33906e7febac3c85ca337111dbfcb7b9becccaaefa3d857d48f0b3d8646d70fdcf2f1dfb89cc3ba1394cb5de24d999c88235418bc0f20d4036bd0113d298b91c44fe042d3b8e4070e3f828499972524601c4725389122c7fc3e38eb799f7b755f23bd5362880b9275e58eab2c8f42e583890cb84e17f35025d1d76dd28171bee561d21451b4b2ebf23b923221c9ea06b924815889d2b605af66539c3b0ffc30c7170a5581727f0faddb257cb6ab28b3456737d3588fa3bce0ba6a2a5c3c94301fa8a4e6db358731bd3a4a62b42181e04241010d7bc3e973b9fe428175ec8f8e6cbd4e53c8bd957621acb1e42504e6f8a7bb30c382058fc9dcd0cd0ba0b789c316cd58d7b5606cc2a66c872f10e6663346d572ecc37ad1c3d8146a137e35e54096ddc2a5e2d26765d75615fecd09b864b29adfe92763ab54272365f56feeb9b57059744e765485ee322cb879fd3c8fd8bc4727d860995c548bcd41852349f1b2227f5a1f39b24549693fb05c04ba8f190673d11eb27d0bf628489f9b8049f5f3a1e1fed97ba9881da0031ef5960b6b0af825cfae8252b931f6151cba9bf889a5c74051a176c56d3cbb8915d3f28f8f684629bd1e3f87f27909b4e8eca6b88cdd60f3b5bbe0641a469e396080fdd2feeac7a11703b758f1815f100ab2ca4403af34a655f4c35e62778c276c96bb94a3d9f58f3bbd7ae6c4f133f7c4199f18d02d66598a54769415b376bb04b520881f23b22b32685ea1ea0dc179ab2f33f07c7039d1a5eedd1905d2a8c7d3c9686758ba5aafdd74f36da7f5522aff5c40e565b50cdd92ce353c3d6c97ce87f0495bdb95d70ea52c8c26b87cd337fd2283b88d7301c32f26833451b8f7c2ee5f44eec58d9eef2a39b3021a29c8747d36a2dbca6c0c085399bb720000000000000009d67e17060abad89c7d8b8970244c2f11ad2f4ae878a3676659b77178a9b651b12cf9c21e658a32999d596af4648f636df4de8c037d1fa63b1a685e8850156bf99e00666dbc03d3e3b44018659743127f91d44c99b578b86a44f3bcf1523c8cb45accc3c5fedfd7796411eddfc3a7a6b7c57ae10fd4bd3fe9f662dc59747ac4b7cc2584ae3ce2e42a41066dd0d560f1b4c83edc57121dade5e397380bec5f40b5d0beb14aef21b2c68ccfd0eb4959b5e7f5b5779903963298e3c9a2141f145137de1d604d9124c3c4f60a4d54da38a7c32ef2632fe66a8ce8e95ee95a570e18e9fbd44884afe291550839dd61e65c952a3f5c6b61850d1c2a77e18fde734a305b407cf6dbf17afd66da6e42f0e8f66092df46c79b44711f6e8aafa831fa1188beea696672b0e94cc3cae584b30dccf053634f792c2d9f4c87e306991b407949f2870b525d123f9ca23142a0ee13d05f51ed4ff2653727ad5bf16453276b2d5e7d7a8a0a1c4847cb61ac4b08d9abee25165a120d156775a534a62f9af3a3b62726101b94ae1e14352262f017c5361b3341952d194a6a2d470e60df3fde61d343e0af8fdff36ad976af6732b732ceb69344550555174fa280153e08f74d81f4ee69c1eb44a3468e8cf78bf7c1663dae3d31553466faa207b8e9887cb54209fac0b6f6d12d9588351c76e6bad884799afe856a25b5fe737d0ba737a0f1a12b4eb3ede48a0c38e6787ab42fca1c7f2ab42fa6104d5a99aa36b73ac3622ccae122524c28a6557cb7d0a7c7eb5de795647dca0621fc2c9599441dae7cc2a8631252abb5e0f22e9355e0a156a1ab7b1641e345045e8303b5f6dda5c3c1cc2637700cea25c004460d101fc42ad78ae477739a4efbacc57272cfafae15292dc3b2800d9f42002c2062af9a1f329e11140f8317242c04ac1f11cdb45f5f9ab18877daa214c151fb9ac54e3e010b5e7944d7217442d5c4fc29956c1333cb932424096f5b6afe1128db53f7171be4372be8bae538bcb3e4a2eb29608678735a667135e0f2660956e9e2a3ed862209efe65d9ab2fbbf88e5d3384fb3362af00e1ec6b4d3ca40df442b70951026438877189c4b0ae136a9a35c131fdf19115e8dc1ee2b938bfbfdb3808aebbe7dfbbd3510c7070388f5813e8bc63be744b99116c4b84ea37d57c5da7a80cc883aa915d84a249ebfa78ceb124c63b3a0720b19483189ee50824e8581556f0520e434803204cd0f3dd09fc97c979f9a7e3f8e5eca8fccde98fc4939551338235c0c6378faade0d18f7050f29189485e01ec120239373c5478cd19ab27570921415a6680924baf9c5829f3f2115460d1fceb8a026fa1a0a0047fe1cd6fcf1861dd3784e006abfddfe79461c5001e4e32d99c5bc203c21f8c711c5ecccf8941093d95a8db73722bb7511443fb2670244cc1249492e92fc4bf7e06ec6f08c5c6931929d58232b551957b771ea5e4a932b037904b81916e662e3fe95af894e80f699e5c00ab664f381bd9c0bd41322a8b3cf367577429fa52c0f1c44ffc626c215e7103cba05bff4931d9a202c1eb9068f44983d1e0c6d9fb5fed738561651e854a3c1b362ae354a0b4a270386ed2dbef093bd82f07f25edfae31901cb86fd214576b25f769bcb215214c63026b2581a8d17779aae03ba310f3243b3631f4b01c9e3eb342c3bdb44d8e47cdc1683e3b1cfffef72e385cc8831f99425fc406575170e1c106618d5429144a436b9e92d241d8118b5cbe0dca5e8ddd86e671e13080eddcf8dee9e317d192a3a5386378de9b1ecd8cf5439cfbe9f65965e5a5f6c145627ac23fe30c2e06e623b0eca15b225b32b65ce568b656cec0e0d6752fdebffd39c7538472ad7a195b56fcad3fab80016ff006df6b01d785191e4fca143b14ce68b32571476a779515ccb14d35cf9aabd4849c03c9bf12a42cfc2a7146ed6c25892a9d1c48f95314f641142d38cd882e54534d69b3fcc18044309e6debef6dc79d7737956418b955d33737115b44360e0bac14b71e2e64f0c8aea428dce5b65e210c108f832a6041c0aab116488e5863cd1039dc8af537908be3541352bdad303de43387503d19d7c0f0390bdc5b95f1dfb0701fd0e14a22c210837cc0a1cb059de474f4476bfe9bddfe3e7977fb299e82d9eefb18111f7c4a5fbd406fca720fec69340d978f4c9832204d67f6fa5793325e04d4af84acde0b56158e4c606394286a4b3cfc04a426a665529b753e1ce2d6c613159844bd069a67b5b96cb8ec993f05a8e252ed3d8ed63d524af0845f519f9d47b85a773f37031cb91055fb963db50e6a1e368f10a82fa40ac055e0201c6d29661eadb76f8154ef9c1cc210ccf1ccb063e8c00324ed6a14fdefa0167a9abb04debbbf5e7b8a57a7772373c765947f0f67b5130d77a6ca6ab166147d4eba97b4ddf1465d25b02f4430227b5713a29fd84664bfdfa5fc450e48f5263eaca67c16033b79bf1cb819511cf16bae6ffd5d05a7d9cc93067b6f2512fea2424a9c7d178f653ffa7ce1c00924707e3817c7cd461cb2a8cc5eadc40821258eaad7720ee3976c5a60025c317480016e5e5bd884f3646651f3bdc1185ec1a4112eb24ba5b3b6f94ac66322042d4bc48cb5befabfcf950cf8a0165fba3fa019324b53fb56bbfaec7f4ec733e84c22f841c1c9c1dc51dd3ac4887e155ac4095a6b8846c8f401f3c2d48d4de18906193a9f05ed59e3b0add8bc27c0bad8418ccbb842123ce1d39fdeeaa7984dfba9ef121ab4d4d35de076262636f3815708e4bcf31e634a290b13317425b1a4a2e4ebf8537092c7e524c126faa9622bf1337168e003857805dd420a51816fea3cd37c34e483f64a2da3ab67442314ffff40727835a1bc7b9971ccb5f83183cf1a135defd468907b988d97028f904c4d9c712f7d0ed6abe4d80712a7b7e06efcbe6a5b83e32beb1556326af7a97437c35c6a706c6cf4403b98f5134547ac167fd1abcb9245ec3450202ab80e553952412032a6c3cfa64441d4aecabd1e182c50bf67801fd3b44b40648ac9926bbbd7095425a429f2a9550c2fd1267cbf6156897b705255cadf1c7f233f4effd788b3f446dba19e68bbf8b42ff6caf984a4eb51328ab5e2bc28366e8b4df4df967a166470a00", 0x2000, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)) 11.540730435s ago: executing program 1 (id=946): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f00000000c0)={0x73622a85, 0x110b, 0x8000000000002}) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000300)='./binderfs/binder0\x00', 0x0, 0x0) r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000200)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f00000002c0)=[@increfs], 0x0, 0x0, 0x0}) r3 = dup3(r2, r1, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000540)={0x10, 0x0, &(0x7f0000000440)=[@request_death={0x400c6313}], 0x0, 0x1000000, 0x0}) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000000), 0x0, 0x0, 0x0}) 10.93058657s ago: executing program 1 (id=947): socket$inet6_icmp_raw(0xa, 0x3, 0x3a) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000180), 0x42280, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) socket$xdp(0x2c, 0x3, 0x0) pselect6(0x40, &(0x7f0000000140)={0x0, 0x2, 0xc, 0x4, 0x8, 0x9, 0x0, 0x5}, 0x0, &(0x7f0000000280)={0xff, 0xffff, 0x753, 0x22, 0x0, 0x1, 0x5, 0x7}, 0x0, 0x0) r1 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) close_range(r1, 0xffffffffffffffff, 0x0) timer_create(0x5, &(0x7f0000000180)={0x0, 0x40011, 0x5}, 0x0) read$FUSE(0xffffffffffffffff, &(0x7f00000008c0)={0x2020}, 0xfffffef0) timer_settime(0x0, 0x0, 0x0, 0x0) ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) r2 = openat$fb0(0xffffff9c, &(0x7f0000000040), 0x20080, 0x0) ioctl$FBIOPUTCMAP(r2, 0x4605, &(0x7f00000001c0)={0x8, 0x1, &(0x7f0000000080)=[0x6], &(0x7f0000000100), &(0x7f0000000140), &(0x7f0000000180)}) 10.370912148s ago: executing program 5 (id=948): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f00000000c0)={0x73622a85, 0x110b, 0x8000000000002}) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000300)='./binderfs/binder0\x00', 0x0, 0x0) r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000200)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f00000002c0)=[@increfs], 0x0, 0x0, 0x0}) r3 = dup3(r2, r1, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000540)={0x10, 0x0, &(0x7f0000000440)=[@request_death={0x400c6313}], 0x0, 0x1000000, 0x0}) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x4e, 0x0, &(0x7f0000000140)="d2ffb49ede31518d65a476b76e4a4e0b75db47c327ab5b7233ac3507e16db41df04709094056af33a6db1e301a74db81f27f6aa6a8ca9d22a565ff96d46e88fa99b284c26c46494072fc2e47da24"}) 10.151740557s ago: executing program 2 (id=949): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) openat$vnet(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) socket$packet(0x11, 0x3, 0x300) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) sendmsg$unix(r0, &(0x7f0000000d80)={0x0, 0x0, &(0x7f0000000380)=[{0x0}], 0x1, &(0x7f0000000280)=ANY=[@ANYBLOB="14000000000000000100000001"], 0x18}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0x1}], 0x1) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000400)={0xffffffffffffffff}) r3 = syz_io_uring_setup(0x117, &(0x7f0000000100)={0x0, 0x4, 0x400, 0x4000, 0x3a6}, &(0x7f0000000000)=0x0, &(0x7f0000000200)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r4, 0x4, &(0x7f0000000080)=0xfffffc00, 0x0, 0x4) socket$inet_sctp(0x2, 0x1, 0x84) ioctl$SNDRV_PCM_IOCTL_HW_REFINE_OLD(0xffffffffffffffff, 0xc1004110, &(0x7f0000000000)={0x0, [0xa, 0xffff133a, 0x80000001], [{0x20, 0x0, 0x0, 0x1}, {0x35, 0x31}, {0x0, 0x8}, {}, {}, {0x0, 0x9}, {0x0, 0x3}, {}, {0x6}, {0x101}, {0x2}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x1}], 0xc}) syz_io_uring_submit(r4, r5, &(0x7f00000000c0)=@IORING_OP_SENDMSG={0x9, 0x40, 0x0, r2, 0x0, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="18000000000000000100000001"], 0x18}, 0x0, 0x20040000, 0x1}) io_uring_enter(r3, 0x47f6, 0x80ffff, 0x0, 0x0, 0x0) 10.029084732s ago: executing program 5 (id=950): r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) connect$bt_l2cap(r0, &(0x7f0000000080)={0x1f, 0x0, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x7ff}, 0xe) syz_emit_ethernet(0x52, &(0x7f0000000100)=ANY=[@ANYRES32=0x41424344, @ANYRES32=0x41424344], 0x0) r1 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) r2 = dup(r1) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x2) ioctl$KVM_RUN(r3, 0xae80, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) prlimit64(0x0, 0xe, &(0x7f00000007c0)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) r6 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r6, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) mlock(&(0x7f00007d8000/0x800000)=nil, 0x800000) sendmsg$ETHTOOL_MSG_LINKSTATE_GET(r4, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000600)={0x20, r5, 0x65283e1aaa2ddbb1, 0x0, 0x1ffffffc, {}, [@HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x6}]}]}, 0x20}}, 0x0) openat$uinput(0xffffffffffffff9c, 0x0, 0x802, 0x0) 8.746234844s ago: executing program 0 (id=951): openat$binderfs(0xffffffffffffff9c, 0x0, 0x802, 0x0) ioctl$SCSI_IOCTL_GET_PCI(0xffffffffffffffff, 0x5393, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) bpf$MAP_CREATE(0x0, &(0x7f0000001e80)=ANY=[], 0x48) bpf$PROG_LOAD(0x5, 0x0, 0x0) r1 = socket$kcm(0x10, 0x2, 0x0) write$cgroup_subtree(r1, &(0x7f0000000000)=ANY=[@ANYBLOB="364000002600913e"], 0xfe33) socket$nl_netfilter(0x10, 0x3, 0xc) 8.67592865s ago: executing program 4 (id=952): r0 = signalfd(0xffffffffffffffff, &(0x7f00000002c0)={[0x7fffffff]}, 0x8) r1 = gettid() timer_create(0x5, &(0x7f0000000180)={0x0, 0x40011, 0x5, @tid=r1}, &(0x7f0000000000)) read$FUSE(r0, &(0x7f00000008c0)={0x2020}, 0xfffffef0) timer_settime(0x0, 0x0, &(0x7f0000000300)={{0x0, 0x1}, {0x0, 0xe4c}}, 0x0) ioctl$NS_GET_OWNER_UID(r0, 0xb704, 0x0) signalfd(0xffffffffffffffff, &(0x7f00000002c0)={[0x7fffffff]}, 0x8) r2 = gettid() timer_create(0x0, &(0x7f0000000180)={0x0, 0x11, 0x4, @tid=r2}, &(0x7f0000000080)) timer_settime(0x0, 0x0, &(0x7f0000000300)={{0x0, 0x1}, {0x0, 0xe4c}}, 0x0) 7.618778477s ago: executing program 1 (id=953): getpid() r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000380)={0x11, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="1801000000000000000000000000ea04850000005000000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000040)='sched_switch\x00', r0}, 0x10) mkdirat$cgroup_root(0xffffffffffffff9c, 0x0, 0x1ff) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x9) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000580)=ANY=[], 0x50) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r2 = socket$inet6(0xa, 0x1, 0x8010000000000084) bind$inet6(r2, &(0x7f00000000c0)={0xa, 0x4e21, 0x0, @empty}, 0x1c) connect$inet6(r2, &(0x7f0000000000)={0xa, 0x4e21, 0x0, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x14}}}, 0x1c) r3 = openat$vim2m(0xffffffffffffff9c, 0x0, 0x2, 0x0) madvise(&(0x7f0000000000/0x3000)=nil, 0x7fffffffffffffff, 0x15) mbind(&(0x7f00005b4000/0x4000)=nil, 0x100000000004000, 0x0, 0x0, 0x0, 0x2) ioctl$vim2m_VIDIOC_REQBUFS(r3, 0xc0145608, 0x0) mmap(&(0x7f0000fed000/0x12000)=nil, 0x12000, 0x2, 0x11, 0xffffffffffffffff, 0x0) ioctl$vim2m_VIDIOC_REQBUFS(r3, 0xc0585609, &(0x7f0000000080)={0x0, 0x2, 0x0, 0x0, 0x3}) r4 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000280)='/proc/meminfo\x00', 0x0, 0x0) r5 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r5, &(0x7f0000000180)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x2a}}, 0x10) sendfile(r5, r4, 0x0, 0x20000023893) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r2, 0x84, 0x9, &(0x7f0000000300)={0x0, @in6={{0xa, 0x0, 0x0, @empty}}, 0x0, 0x0, 0x317, 0x1, 0x34, 0x9}, 0x9c) 7.594123182s ago: executing program 0 (id=954): r0 = socket$nl_generic(0x10, 0x3, 0x10) socketpair(0x1e, 0x1, 0x0, 0x0) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) ioctl$sock_SIOCGPGRP(0xffffffffffffffff, 0x8904, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(0xffffffffffffffff, 0x84, 0x6f, 0x0, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) socket(0x11, 0x800000003, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r1, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000000)=@newqdisc={0x24, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x12, 0x0, {0x0, 0x2}, {0xffff, 0xffff}}}, 0x24}, 0x1, 0x0, 0x0, 0x4000000}, 0x0) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) r3 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) r4 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)=ANY=[@ANYBLOB="1b00000000000000000000000000040000000000", @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00@\x00'/20, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB='\x00'/14], 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x6, 0x1c, &(0x7f0000000d80)=@ringbuf={{0x18, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, {{0x18, 0x1, 0x1, 0x0, r4}, {}, {}, {0x85, 0x0, 0x0, 0x5}, {0x4, 0x1, 0xb, 0x9, 0xa}}, {{0x5, 0x0, 0x3}}, [@snprintf={{0x5, 0x0, 0xb, 0x9, 0x0, 0x2, 0x2}, {0x3, 0x2, 0x3, 0xa, 0x9, 0xfe00}, {0x5, 0x0, 0xb, 0x9, 0x0, 0x0, 0x4}, {0x3, 0x0, 0x6, 0xa, 0x9, 0xfe04, 0xe1}, {0x7, 0x1, 0xb, 0x7, 0x8}, {0x7, 0x0, 0x0, 0x8}, {0x7, 0x1, 0xb, 0x4, 0xa, 0x20}, {}, {}, {0x18, 0x2, 0x2, 0x0, r3}, {}, {0x46, 0x8, 0xfff0, 0x76}}], {{0x7, 0x1, 0xb, 0x8}, {0x6, 0x0, 0x5, 0x8}, {0x85, 0x0, 0x0, 0x7}}}, &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f00000014c0), 0xffffffffffffffff) r6 = socket$netlink(0x10, 0x3, 0x10) bind$netlink(r6, &(0x7f00000000c0)={0x10, 0x0, 0x2, 0x8000000}, 0xc) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000f80)={0x12, 0x4, &(0x7f0000001300)=@framed={{}, [@ldst={0x1, 0x0, 0x3, 0x9, 0x1, 0x2}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xf, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) setsockopt$bt_l2cap_L2CAP_OPTIONS(0xffffffffffffffff, 0x6, 0x1, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000080)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_CHANNEL_SWITCH(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000240)={0x24, r5, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r7}, @void}}, [@chandef_params, @NL80211_ATTR_CH_SWITCH_COUNT={0x8}]}, 0x24}}, 0x0) 7.442901617s ago: executing program 2 (id=955): r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r0, 0x107, 0x7, 0x0, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) r2 = socket$kcm(0xa, 0x3, 0x3a) sendmsg$kcm(r2, &(0x7f0000000080)={&(0x7f0000000000)=@l2tp6={0xa, 0x0, 0x0, @loopback={0x0, 0xac14140c}, 0xff000000}, 0x80, &(0x7f00000000c0)=[{&(0x7f0000000140)="8bcd", 0xffe3}], 0x1, 0x0, 0x0, 0x900}, 0x60) r3 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_ASSOCINFO(r3, 0x84, 0x1, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r4 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r4, &(0x7f0000019680)=""/102392, 0x18ff8) r5 = socket$inet(0x2, 0x1, 0x0) setsockopt$sock_int(r5, 0x1, 0x2, 0x0, 0x0) listen(r5, 0x0) futex(0x0, 0xc, 0x1, 0x0, &(0x7f0000048000)=0xf2, 0x0) r6 = syz_open_dev$video4linux(&(0x7f0000000480), 0x5, 0x0) r7 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r7, &(0x7f0000001a40)={0x1f, 0xffff, 0x3}, 0x6) write(r7, &(0x7f0000000000)="2e000300010000", 0x7) ioctl$VIDIOC_SUBDEV_ENUM_FRAME_SIZE(r6, 0xc040564a, 0x0) sendmsg$NFT_BATCH(r1, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)={{0x14, 0x10, 0x1, 0x0, 0x0, {0xa}}, [@NFT_MSG_NEWRULE={0x44, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x18, 0x4, 0x0, 0x1, [{0x14, 0x1, 0x0, 0x1, @inner={{0xa}, @val={0x4}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x3}}}, 0x6c}}, 0x0) 4.76196875s ago: executing program 1 (id=956): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x18, 0x3, &(0x7f0000000200)=@framed={{0x18, 0x0, 0x0, 0x0, 0x4}}, &(0x7f00000003c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) timer_settime(0x0, 0x0, &(0x7f0000000240)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) rseq(0x0, 0x0, 0x0, 0x300) 4.647613297s ago: executing program 5 (id=957): ioctl$SNDCTL_DSP_SETFRAGMENT(0xffffffffffffffff, 0xc004500a, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000500)={0x18, 0x10, &(0x7f0000000480)=ANY=[], &(0x7f0000000300)='syzkaller\x00', 0x8, 0x9c, &(0x7f0000000140)=""/156, 0x41000, 0xb, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x3, @void, @value}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x6) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) sendmsg$IPVS_CMD_GET_INFO(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x850}, 0x20000000) r1 = openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r2 = socket$inet(0x2, 0x2, 0x0) setsockopt$inet_mreqn(r2, 0x0, 0x27, &(0x7f0000000740)={@multicast2, @loopback}, 0xc) r3 = socket$netlink(0x10, 0x3, 0x0) writev(r3, &(0x7f00000003c0)=[{&(0x7f0000000180)="390000001300034700bb65e1c3e4ffff01000000010000005600000025000000190004000400000007fd17e5ffff0800040000000000000000", 0x39}], 0x1) writev(r3, &(0x7f0000000100)=[{&(0x7f0000000400)="390000001300034700bb5be1c3e4feff06000000010000004500000025000000190004000400ad000200000000000006040000000000f93132", 0x39}], 0x1) setsockopt$inet_msfilter(r2, 0x0, 0x29, &(0x7f00000000c0)=ANY=[@ANYBLOB="e00000027fff"], 0x14) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000280)=ANY=[@ANYBLOB="300000003e000701fcfffffffddbdf25017c0000100036800c00020004000500000000000c000180060006008e"], 0x30}, 0x1, 0x0, 0x0, 0x488c0}, 0xc000) syz_emit_vhci(&(0x7f0000000280)=ANY=[], 0xd) bpf$MAP_CREATE(0x0, 0x0, 0x50) madvise(&(0x7f0000000000/0x3000)=nil, 0x7fffffffffffffff, 0x3) syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) setsockopt$PNPIPE_HANDLE(0xffffffffffffffff, 0x113, 0x3, 0x0, 0x0) futex_waitv(&(0x7f0000000180)=[{0x0, &(0x7f0000000000), 0x2}, {0x3, &(0x7f0000000040)=0x3, 0x2}], 0x2, 0x0, 0x0, 0x0) futex(&(0x7f0000000140), 0x5, 0x0, 0x0, &(0x7f0000000000), 0x0) 4.539934923s ago: executing program 1 (id=958): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, 0x0) connect$unix(0xffffffffffffffff, 0x0, 0x0) sendmmsg$unix(0xffffffffffffffff, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg(0xffffffffffffffff, 0x0, 0x0) sched_setattr(0x0, 0x0, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, 0x0, 0x0) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x60303, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r3, 0xae60) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f0000000200)={0x0, 0x0, 0xf000, 0x2000, &(0x7f0000f9a000/0x2000)=nil}) r5 = dup(r4) syz_memcpy_off$IO_URING_METADATA_GENERIC(0x0, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) ioctl$KVM_SET_VCPU_EVENTS(r5, 0x4400ae8f, &(0x7f0000000000)=@x86={0xa0, 0x1, 0x5, 0x0, 0x3, 0x3, 0xb, 0xd, 0xf8, 0x15, 0x7, 0x3, 0x0, 0x9d, 0x4, 0x7, 0x6, 0x40, 0x0, '\x00', 0x4, 0xcaa}) ioctl$KVM_SET_VAPIC_ADDR(r5, 0x4008ae93, &(0x7f00000002c0)=0x10000) ioctl$KVM_RUN(r4, 0xae80, 0x0) 4.531620974s ago: executing program 4 (id=959): r0 = openat$binderfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) fsmount(0xffffffffffffffff, 0x0, 0x0) r4 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x0, 0x0) getdents64(r4, 0x0, 0x3f) 4.481081951s ago: executing program 0 (id=960): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f00000000c0)={0x73622a85, 0x110b, 0x8000000000002}) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000300)='./binderfs/binder0\x00', 0x0, 0x0) r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000200)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f00000002c0)=[@increfs], 0x0, 0x0, 0x0}) r3 = dup3(r2, r1, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000540)={0x10, 0x0, &(0x7f0000000440)=[@request_death={0x400c6313}], 0x0, 0x1000000, 0x0}) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x4e, 0x0, &(0x7f0000000140)="d2ffb49ede31518d65a476b76e4a4e0b75db47c327ab5b7233ac3507e16db41df04709094056af33a6db1e301a74db81f27f6aa6a8ca9d22a565ff96d46e88fa99b284c26c46494072fc2e47da24"}) 4.480144681s ago: executing program 2 (id=961): socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'batadv_slave_0\x00'}) r1 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) setsockopt$ax25_SO_BINDTODEVICE(0xffffffffffffffff, 0x101, 0x19, &(0x7f0000000000)=@bpq0, 0xfffffffffffffe1d) ioctl$sock_netdev_private(r1, 0x8914, &(0x7f0000000000)) r2 = syz_init_net_socket$rose(0xb, 0x5, 0x0) r3 = syz_init_net_socket$rose(0xb, 0x5, 0x0) ioctl$sock_rose_SIOCADDRT(r3, 0x890b, &(0x7f0000000380)={@remote={0xcc, 0xcc, 0xcc, 0xcc, 0x0}, 0x6, @bcast, @bpq0, 0x5, [@bcast, @bcast, @null, @bcast, @default, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @bcast, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}]}) ioctl$sock_rose_SIOCDELRT(r2, 0x890c, &(0x7f00000000c0)={@remote={0xcc, 0xcc, 0xcc, 0xcc, 0x1}, 0x6, @null, @bpq0, 0x1, [@bcast, @default, @bcast, @default, @default, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}, @default]}) 3.442035048s ago: executing program 4 (id=962): openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) r0 = syz_open_dev$usbfs(&(0x7f0000000000), 0xe, 0x60882) read$FUSE(r0, 0x0, 0x0) openat$ptmx(0xffffffffffffff9c, 0x0, 0x60281, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) listen(0xffffffffffffffff, 0x7fff) pselect6(0x40, &(0x7f0000000040)={0x5, 0x8, 0xd95, 0x1, 0xffff, 0xfffffffffffffffd, 0x8000000000000000, 0x100000001}, 0x0, &(0x7f0000000140)={0x0, 0x3ff, 0x367d, 0x9, 0xb5, 0x47c, 0x7, 0x9}, &(0x7f0000000180)={0x0, 0x3938700}, 0x0) connect$phonet_pipe(0xffffffffffffffff, 0x0, 0x0) socket$kcm(0xa, 0x922000000003, 0x11) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000780)={0x5, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="1804000000000000000000000000000018010000696c6c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000b100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x11, 0xb, &(0x7f0000000180)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000200)='inet_sk_error_report\x00', r2}, 0x18) r3 = openat$sysctl(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sys/vm/drop_caches\x00', 0x1, 0x0) writev(r3, &(0x7f00000000c0)=[{&(0x7f0000000140)='2', 0x1}], 0x1) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="48000000150081fb7059ae08060c04000aff0f11000000040011018701546fabca1b4e7d06a6bd7c493872f750375ed08a562af5745e17b8c119418f0f000000d6e74703c48f", 0x46}], 0x1}, 0x0) ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, 0x0) syz_io_uring_setup(0x2be, &(0x7f0000000240)={0x0, 0x4331, 0x1, 0x2, 0x113}, 0x0, &(0x7f0000000000)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(0x0, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(0x0, r4, 0x0) pselect6(0x40, &(0x7f00000001c0)={0x0, 0x0, 0x9, 0xfffffffffffffffd}, 0x0, &(0x7f00000002c0)={0x3fe, 0x5, 0x3, 0x9, 0x8, 0x45ff, 0x7ffffffc}, 0x0, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) mknod$loop(0x0, 0x0, 0x0) openat$cuse(0xffffff9c, &(0x7f00000003c0), 0x2, 0x0) 3.386996392s ago: executing program 2 (id=963): socket$inet6_icmp_raw(0xa, 0x3, 0x3a) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000180), 0x42280, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) socket$xdp(0x2c, 0x3, 0x0) pselect6(0x40, &(0x7f0000000140)={0x0, 0x2, 0xc, 0x4, 0x8, 0x9, 0x0, 0x5}, 0x0, &(0x7f0000000280)={0xff, 0xffff, 0x753, 0x22, 0x0, 0x1, 0x5, 0x7}, 0x0, 0x0) r1 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) close_range(r1, 0xffffffffffffffff, 0x0) timer_create(0x5, &(0x7f0000000180)={0x0, 0x40011, 0x5}, 0x0) read$FUSE(0xffffffffffffffff, &(0x7f00000008c0)={0x2020}, 0xfffffef0) timer_settime(0x0, 0x0, 0x0, 0x0) ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) r2 = openat$fb0(0xffffff9c, &(0x7f0000000040), 0x20080, 0x0) ioctl$FBIOPUTCMAP(r2, 0x4605, &(0x7f00000001c0)={0x8, 0x1, &(0x7f0000000080)=[0x6], &(0x7f0000000100), &(0x7f0000000140), &(0x7f0000000180)}) 2.794783461s ago: executing program 1 (id=964): r0 = socket$nl_generic(0x10, 0x3, 0x10) setsockopt$packet_rx_ring(0xffffffffffffffff, 0x107, 0x5, 0x0, 0x0) open(&(0x7f0000000100)='./file0\x00', 0x80ff, 0x36) r1 = openat$fuse(0xffffffffffffff9c, &(0x7f00000001c0), 0x42, 0x0) write$qrtrtun(0xffffffffffffffff, 0x0, 0x0) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) mkdirat(0xffffffffffffff9c, 0x0, 0x0) mount(0x0, &(0x7f0000000380)='./file1\x00', &(0x7f0000000100)='autofs\x00', 0x0, &(0x7f0000000400)) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0x9362, 0x0) ioctl$F2FS_IOC_GARBAGE_COLLECT_RANGE(r0, 0x4014f50b, &(0x7f0000000140)={0x1, 0x6, 0x288}) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r2 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r2, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r1, @ANYBLOB=',rootmode=000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r1, &(0x7f0000006300)={0x2020, 0x0, 0x0, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r1, &(0x7f0000000040)={0x50, 0x0, r3, {0x7, 0x1f, 0x0, 0x10408}}, 0x50) syz_fuse_handle_req(r1, &(0x7f00000021c0)="0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000e00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000800000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000dc4e00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ba045abcd5dfc67d00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000081000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000230000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000050000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000090000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000dc000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000209bfd66eea210560000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000020000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000003dc150f4000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000030000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f50000000000000000000000000000000000000000000000000000000000000000000000000000000000c6d90000000000001354c4b6000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f8000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001a00", 0x2000, &(0x7f00000062c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000300)={0x20}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_fuse_handle_req(r1, &(0x7f0000004200)="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", 0x2000, &(0x7f0000000c80)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000580)={0x78, 0x0, 0x6, {0x0, 0x0, 0x0, {0x0, 0x10000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3966, 0x3, 0x8000, 0x0, r4, r5, 0xe, 0x4}}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r6 = openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x80101, 0x0) write$tcp_congestion(r6, &(0x7f00000000c0)='lp\x00', 0xfffffdef) 2.78907845s ago: executing program 0 (id=965): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) openat$vnet(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) socket$packet(0x11, 0x3, 0x300) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) sendmsg$unix(r0, &(0x7f0000000d80)={0x0, 0x0, &(0x7f0000000380)=[{0x0}], 0x1, &(0x7f0000000280)=ANY=[@ANYBLOB="14000000000000000100000001"], 0x18}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0x1}], 0x1) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000400)={0xffffffffffffffff}) r3 = syz_io_uring_setup(0x117, &(0x7f0000000100)={0x0, 0x4, 0x400, 0x4000, 0x3a6}, &(0x7f0000000000)=0x0, &(0x7f0000000200)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r4, 0x4, &(0x7f0000000080)=0xfffffc00, 0x0, 0x4) socket$inet_sctp(0x2, 0x1, 0x84) ioctl$SNDRV_PCM_IOCTL_HW_REFINE_OLD(0xffffffffffffffff, 0xc1004110, &(0x7f0000000000)={0x0, [0xa, 0xffff133a, 0x80000001], [{0x20, 0x0, 0x0, 0x1}, {0x35, 0x31}, {0x0, 0x8}, {}, {}, {0x0, 0x9}, {0x0, 0x3}, {}, {0x6}, {0x101}, {0x2}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x1}], 0xc}) syz_io_uring_submit(r4, r5, &(0x7f00000000c0)=@IORING_OP_SENDMSG={0x9, 0x40, 0x0, r2, 0x0, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="18000000000000000100000001"], 0x18}, 0x0, 0x20040000, 0x1}) io_uring_enter(r3, 0x47f6, 0x80ffff, 0x0, 0x0, 0x0) 1.584879459s ago: executing program 4 (id=966): sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000000), 0x400000000000041, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) mount$afs(0x0, &(0x7f00000001c0)='./file0\x00', &(0x7f00000002c0), 0x0, &(0x7f0000000200)=ANY=[@ANYBLOB='dyn']) chdir(&(0x7f0000000340)='./file0\x00') rename(&(0x7f0000000000)='./file1\x00', &(0x7f0000000080)='./file2\x00') 1.166574957s ago: executing program 0 (id=967): socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'batadv_slave_0\x00'}) r1 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) setsockopt$ax25_SO_BINDTODEVICE(0xffffffffffffffff, 0x101, 0x19, &(0x7f0000000000)=@bpq0, 0xfffffffffffffe1d) ioctl$sock_netdev_private(r1, 0x8914, &(0x7f0000000000)) r2 = syz_init_net_socket$rose(0xb, 0x5, 0x0) syz_init_net_socket$rose(0xb, 0x5, 0x0) r3 = syz_init_net_socket$rose(0xb, 0x5, 0x0) connect$rose(r3, &(0x7f0000000040)=@short={0xb, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, 0x1, @null}, 0x1c) connect$rose(r3, &(0x7f0000000240)=@short={0xb, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0x2}, @bcast, 0x1, @null}, 0x1c) ioctl$sock_rose_SIOCDELRT(r2, 0x890c, &(0x7f00000000c0)={@remote={0xcc, 0xcc, 0xcc, 0xcc, 0x1}, 0x6, @null, @bpq0, 0x1, [@bcast, @default, @default, @default, @null, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}, @default]}) 1.057498938s ago: executing program 2 (id=968): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x22900, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) socket$pppoe(0x18, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sendmsg$MPTCP_PM_CMD_DEL_ADDR(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000240)=ANY=[], 0x20}}, 0x24008094) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = syz_open_dev$MSR(&(0x7f0000000040), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) ioperm(0x7, 0x81, 0x2) timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) r2 = open(&(0x7f00009e1000)='./file0\x00', 0x60840, 0x1d2) fcntl$setlease(r2, 0x400, 0x0) truncate(0x0, 0x1000000) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0, 0x0}, 0x30) r3 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) getsockopt$inet6_mreq(r3, 0x3a, 0x1, 0x0, 0x0) 307.836718ms ago: executing program 5 (id=969): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x18, 0x3, &(0x7f0000000200)=@framed={{0x18, 0x0, 0x0, 0x0, 0x4}}, &(0x7f00000003c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) timer_settime(0x0, 0x0, &(0x7f0000000240)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) rseq(0x0, 0x0, 0x0, 0x300) 0s ago: executing program 4 (id=970): socket$nl_generic(0x10, 0x3, 0x10) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz1\x00', 0x1ff) socket$netlink(0x10, 0x3, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) socket$nl_xfrm(0x10, 0x3, 0x6) setrlimit(0x0, 0x0) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = userfaultfd(0x801) ioctl$UFFDIO_API(r4, 0xc018aa3f, &(0x7f0000000040)) ioctl$UFFDIO_CONTINUE(r4, 0xc028aa05, &(0x7f0000000000)={{&(0x7f0000cfb000/0xb000)=nil, 0xb000}, 0x1000000}) sendmsg$IPCTNL_MSG_EXP_NEW(0xffffffffffffffff, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000300)=ANY=[], 0xc8}}, 0x0) r5 = openat$cuse(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) write$FUSE_DIRENTPLUS(r5, &(0x7f0000000840)=ANY=[], 0xb0) r6 = dup(0xffffffffffffffff) ioctl$BLKZEROOUT(r6, 0x127f, 0x0) connect$inet(0xffffffffffffffff, &(0x7f0000000000)={0x2, 0x4001, @remote}, 0x10) setsockopt$SO_BINDTODEVICE_wg(0xffffffffffffffff, 0x1, 0x19, 0x0, 0x0) sendto$inet(0xffffffffffffffff, &(0x7f0000000040)="e5", 0xffffffe4, 0x0, 0x0, 0x0) unshare(0x40020000) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={0x0}}, 0x40080) kernel console output (not intermixed with test programs): , error -71 [ 120.119828][ T5461] usb 5-1: new high-speed USB device number 2 using dummy_hcd [ 120.127543][ T5886] usb 1-1: new full-speed USB device number 3 using dummy_hcd [ 120.206012][ T3079] usb usb3-port1: attempt power cycle [ 120.370269][ T5461] usb 5-1: New USB device found, idVendor=249c, idProduct=9002, bcdDevice=de.ad [ 120.398448][ T5886] usb 1-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 120.411243][ T5461] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 120.446757][ T5886] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 120.571261][ T5461] usb 5-1: config 0 descriptor?? [ 120.615791][ T5886] usb 1-1: Product: syz [ 120.650519][ T5886] usb 1-1: Manufacturer: syz [ 120.716314][ T5886] usb 1-1: SerialNumber: syz [ 120.917791][ T5886] usb 1-1: config 0 descriptor?? [ 120.927242][ T5461] snd-usb-hiface 5-1:0.0: probe with driver snd-usb-hiface failed with error -22 [ 121.004119][ T6183] 9pnet_fd: Insufficient options for proto=fd [ 121.172273][ T6170] netlink: zone id is out of range [ 121.178163][ T5886] usb 1-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 121.195395][ T6170] netlink: zone id is out of range [ 121.206550][ T6170] netlink: zone id is out of range [ 121.216326][ T6170] netlink: zone id is out of range [ 121.243647][ T6170] netlink: zone id is out of range [ 121.248901][ T6170] netlink: zone id is out of range [ 121.330286][ T6170] netlink: zone id is out of range [ 121.450670][ T6170] netlink: zone id is out of range [ 121.884385][ T6170] netlink: zone id is out of range [ 121.901856][ T6170] netlink: zone id is out of range [ 121.942755][ T5911] usb 5-1: USB disconnect, device number 2 [ 122.009846][ T5900] usb 2-1: new high-speed USB device number 2 using dummy_hcd [ 122.180529][ T5900] usb 2-1: Using ep0 maxpacket: 16 [ 122.385915][ T5900] usb 2-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 0, changing to 7 [ 122.397831][ T5900] usb 2-1: config 1 interface 1 altsetting 1 endpoint 0x1 has invalid wMaxPacketSize 0 [ 122.407797][ T5900] usb 2-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 122.423167][ T5900] usb 2-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 122.432459][ T5900] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 122.440578][ T5900] usb 2-1: Product: syz [ 122.444872][ T5900] usb 2-1: Manufacturer: syz [ 122.449513][ T5900] usb 2-1: SerialNumber: syz [ 122.510854][ T6205] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 123.290233][ T5886] dvb_usb_rtl28xxu 1-1:0.0: probe with driver dvb_usb_rtl28xxu failed with error -32 [ 123.555275][ T5900] usb 2-1: 2:1 : format type 0 is detected, processed as PCM [ 124.607954][ T5461] usb 1-1: USB disconnect, device number 3 [ 124.711005][ T5886] usb 5-1: new high-speed USB device number 3 using dummy_hcd [ 124.789901][ T6234] 9pnet_fd: Insufficient options for proto=fd [ 124.809438][ T5900] usb 2-1: 2:1: cannot get freq at ep 0x82 [ 124.918773][ T5900] usb 2-1: USB disconnect, device number 2 [ 124.993425][ T5886] usb 5-1: device descriptor read/64, error -71 [ 125.094293][ T6034] udevd[6034]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 125.124532][ T51] Bluetooth: hci0: Controller not accepting commands anymore: ncmd = 0 [ 125.151177][ T51] Bluetooth: hci0: Injecting HCI hardware error event [ 125.180561][ T51] Bluetooth: hci0: hardware error 0x00 [ 125.619772][ T5886] usb 5-1: new high-speed USB device number 4 using dummy_hcd [ 125.938215][ T5886] usb 5-1: device descriptor read/64, error -71 [ 126.147897][ T5886] usb usb5-port1: attempt power cycle [ 126.346345][ T6252] Invalid ELF header magic: != ELF [ 126.582778][ T6254] netlink: 16 bytes leftover after parsing attributes in process `syz.0.95'. [ 127.109846][ T5886] usb 5-1: new high-speed USB device number 5 using dummy_hcd [ 127.156188][ T6261] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 127.666439][ T51] Bluetooth: hci0: Opcode 0x0c03 failed: -110 [ 127.822271][ T5886] usb 5-1: device descriptor read/8, error -71 [ 127.981013][ T6268] 9pnet_fd: Insufficient options for proto=fd [ 128.091589][ T5934] usb 3-1: new full-speed USB device number 10 using dummy_hcd [ 128.354001][ T5934] usb 3-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 128.413656][ T5934] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 128.446023][ T5934] usb 3-1: Product: syz [ 128.469927][ T5934] usb 3-1: Manufacturer: syz [ 128.474886][ T5934] usb 3-1: SerialNumber: syz [ 128.749806][ T5934] usb 3-1: config 0 descriptor?? [ 129.329473][ T5934] usb 3-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 131.615403][ T6292] Invalid ELF header magic: != ELF [ 132.001041][ T5934] dvb_usb_rtl28xxu 3-1:0.0: probe with driver dvb_usb_rtl28xxu failed with error -32 [ 132.081379][ T6301] 9pnet_fd: Insufficient options for proto=fd [ 132.100240][ T43] usb 2-1: new high-speed USB device number 3 using dummy_hcd [ 133.304841][ T1301] ieee802154 phy0 wpan0: encryption failed: -22 [ 133.312676][ T1301] ieee802154 phy1 wpan1: encryption failed: -22 [ 133.423009][ T43] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 133.441387][ T43] usb 2-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 133.455702][ T43] usb 2-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 133.464903][ T43] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 133.477135][ T43] usb 2-1: config 0 descriptor?? [ 133.490896][ T5951] usb 3-1: USB disconnect, device number 10 [ 135.310399][ T6328] kvm: kvm [6327]: vcpu0, guest rIP: 0x18e Unhandled WRMSR(0xc2) = 0x100000000 [ 135.423925][ T6328] kvm: kvm [6327]: vcpu0, guest rIP: 0x18e Unhandled WRMSR(0x11e) = 0x0 [ 135.551648][ T6328] kvm: kvm [6327]: vcpu0, guest rIP: 0x1b8 Unhandled WRMSR(0x11e) = 0xbe702111 [ 136.177388][ T6351] 9pnet_fd: Insufficient options for proto=fd [ 136.487094][ T5951] usb 2-1: USB disconnect, device number 3 [ 137.015336][ T5911] usb 4-1: new full-speed USB device number 3 using dummy_hcd [ 138.274584][ T5911] usb 4-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 138.284306][ T5911] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 138.330724][ T5911] usb 4-1: Product: syz [ 138.348299][ T5911] usb 4-1: Manufacturer: syz [ 138.374439][ T5911] usb 4-1: SerialNumber: syz [ 138.599222][ T5911] usb 4-1: config 0 descriptor?? [ 139.416743][ T5911] usb 4-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 139.761145][ T6377] overlayfs: missing 'lowerdir' [ 140.294631][ T6381] kvm: kvm [6380]: vcpu0, guest rIP: 0x18e Unhandled WRMSR(0xc2) = 0x100000000 [ 140.314573][ T6381] kvm: kvm [6380]: vcpu0, guest rIP: 0x18e Unhandled WRMSR(0x11e) = 0x0 [ 140.411669][ T6381] kvm: kvm [6380]: vcpu0, guest rIP: 0x1b8 Unhandled WRMSR(0x11e) = 0xbe702111 [ 140.949801][ T5951] usb 5-1: new high-speed USB device number 7 using dummy_hcd [ 140.972277][ T5911] dvb_usb_rtl28xxu 4-1:0.0: probe with driver dvb_usb_rtl28xxu failed with error -32 [ 141.301617][ T5951] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 141.315307][ T5951] usb 5-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 141.326032][ T5951] usb 5-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 141.336453][ T5951] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 141.385607][ T5951] usb 5-1: config 0 descriptor?? [ 142.029004][ T3079] usb 4-1: USB disconnect, device number 3 [ 142.261552][ T6405] netlink: 16 bytes leftover after parsing attributes in process `syz.2.141'. [ 144.337298][ T3079] usb 5-1: USB disconnect, device number 7 [ 144.909837][ T3079] usb 5-1: new full-speed USB device number 8 using dummy_hcd [ 145.039771][ T5461] usb 3-1: new high-speed USB device number 11 using dummy_hcd [ 145.146966][ T3079] usb 5-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 145.163264][ T3079] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 145.176313][ T3079] usb 5-1: Product: syz [ 145.209996][ T3079] usb 5-1: Manufacturer: syz [ 145.217119][ T3079] usb 5-1: SerialNumber: syz [ 145.225731][ T5461] usb 3-1: Using ep0 maxpacket: 16 [ 145.244081][ T5461] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 145.267510][ T3079] usb 5-1: config 0 descriptor?? [ 145.276951][ T5461] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 145.347808][ T5461] usb 3-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 145.376055][ T5461] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 145.405908][ T5461] usb 3-1: Product: syz [ 145.415233][ T5461] usb 3-1: Manufacturer: syz [ 145.422045][ T5461] usb 3-1: SerialNumber: syz [ 145.528135][ T3079] usb 5-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 145.796517][ T5461] usb 3-1: 0:2 : does not exist [ 145.817954][ T5461] usb 3-1: 5:0: failed to get current value for ch 0 (-22) [ 146.113007][ T6448] Invalid ELF header magic: != ELF [ 146.368194][ T5461] usb 3-1: USB disconnect, device number 11 [ 146.446577][ T6030] udevd[6030]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 147.054361][ T3079] dvb_usb_rtl28xxu 5-1:0.0: probe with driver dvb_usb_rtl28xxu failed with error -32 [ 148.423954][ T5461] usb 5-1: USB disconnect, device number 8 [ 148.517629][ T6482] netlink: 16 bytes leftover after parsing attributes in process `syz.1.166'. [ 149.974690][ T6490] netlink: 4 bytes leftover after parsing attributes in process `syz.2.170'. [ 150.050072][ T6490] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 150.191493][ T6493] Invalid ELF header magic: != ELF [ 150.250498][ T6490] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 151.067979][ T6512] autofs: Unknown parameter '0x0000000000000000' [ 151.318373][ T6506] input: syz0 as /devices/virtual/input/input5 [ 151.892051][ T5951] usb 5-1: new full-speed USB device number 9 using dummy_hcd [ 152.013089][ T6519] netlink: 16 bytes leftover after parsing attributes in process `syz.0.179'. [ 152.762208][ T5951] usb 5-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 152.780512][ T5951] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 152.804554][ T5951] usb 5-1: Product: syz [ 152.808807][ T5951] usb 5-1: Manufacturer: syz [ 152.865442][ T5951] usb 5-1: SerialNumber: syz [ 152.887590][ T5951] usb 5-1: config 0 descriptor?? [ 153.606564][ T5951] usb 5-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 153.840981][ T5886] usb 4-1: new high-speed USB device number 4 using dummy_hcd [ 155.665646][ T5951] dvb_usb_rtl28xxu 5-1:0.0: probe with driver dvb_usb_rtl28xxu failed with error -32 [ 156.170034][ T5886] usb 4-1: Using ep0 maxpacket: 32 [ 156.179013][ T5951] usb 5-1: USB disconnect, device number 9 [ 156.182263][ T5886] usb 4-1: device descriptor read/all, error -71 [ 157.629872][ T6552] Bluetooth: hci0: Opcode 0x0401 failed: -4 [ 158.156032][ T6555] kvm: kvm [6554]: vcpu0, guest rIP: 0x18e Unhandled WRMSR(0xc2) = 0x100000000 [ 158.195705][ T6555] kvm: kvm [6554]: vcpu0, guest rIP: 0x18e Unhandled WRMSR(0x11e) = 0x0 [ 158.241305][ T6555] kvm: kvm [6554]: vcpu0, guest rIP: 0x1b8 Unhandled WRMSR(0x11e) = 0xbe702111 [ 160.045992][ T5911] usb 2-1: new full-speed USB device number 4 using dummy_hcd [ 160.210155][ T5911] usb 2-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 160.210190][ T5911] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 160.210212][ T5911] usb 2-1: Product: syz [ 160.210229][ T5911] usb 2-1: Manufacturer: syz [ 160.210245][ T5911] usb 2-1: SerialNumber: syz [ 160.213541][ T5911] usb 2-1: config 0 descriptor?? [ 160.517171][ T5911] usb 2-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 160.583616][ T6597] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 161.398482][ T6604] netlink: 16 bytes leftover after parsing attributes in process `syz.2.205'. [ 163.003441][ T5911] dvb_usb_rtl28xxu 2-1:0.0: probe with driver dvb_usb_rtl28xxu failed with error -32 [ 164.002815][ T3079] usb 2-1: USB disconnect, device number 4 [ 164.226793][ T5886] usb 3-1: new high-speed USB device number 12 using dummy_hcd [ 164.399866][ T5886] usb 3-1: device descriptor read/64, error -71 [ 166.547904][ T5886] usb 3-1: new high-speed USB device number 13 using dummy_hcd [ 166.717807][ T5886] usb 3-1: device descriptor read/64, error -71 [ 166.906747][ T5886] usb usb3-port1: attempt power cycle [ 167.014326][ T6645] netlink: 16 bytes leftover after parsing attributes in process `syz.3.217'. [ 167.689174][ T3079] usb 1-1: new high-speed USB device number 4 using dummy_hcd [ 167.840084][ T3079] usb 1-1: Using ep0 maxpacket: 16 [ 167.843217][ T3079] usb 1-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 0, changing to 7 [ 167.843252][ T3079] usb 1-1: config 1 interface 1 altsetting 1 endpoint 0x1 has invalid wMaxPacketSize 0 [ 167.843295][ T3079] usb 1-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 167.845676][ T3079] usb 1-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 167.845709][ T3079] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 167.845731][ T3079] usb 1-1: Product: syz [ 167.845746][ T3079] usb 1-1: Manufacturer: syz [ 167.845762][ T3079] usb 1-1: SerialNumber: syz [ 168.166414][ T977] usb 2-1: new full-speed USB device number 5 using dummy_hcd [ 168.522700][ T3079] usb 1-1: 2:1 : format type 0 is detected, processed as PCM [ 168.590400][ T977] usb 2-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 168.699181][ T977] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 168.744098][ T977] usb 2-1: Product: syz [ 168.754440][ T977] usb 2-1: Manufacturer: syz [ 168.759239][ T977] usb 2-1: SerialNumber: syz [ 168.801992][ T977] usb 2-1: config 0 descriptor?? [ 169.041387][ T977] usb 2-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 169.333159][ T3079] usb 1-1: 2:1: cannot get freq at ep 0x82 [ 169.521542][ T3079] usb 1-1: USB disconnect, device number 4 [ 170.463564][ T977] dvb_usb_rtl28xxu 2-1:0.0: probe with driver dvb_usb_rtl28xxu failed with error -32 [ 171.132955][ T6687] netlink: 16 bytes leftover after parsing attributes in process `syz.4.229'. [ 171.409817][ T977] usb 1-1: new high-speed USB device number 5 using dummy_hcd [ 171.597224][ T977] usb 1-1: device descriptor read/64, error -71 [ 171.995782][ T6691] input: syz0 as /devices/virtual/input/input6 [ 172.008930][ T5951] usb 2-1: USB disconnect, device number 5 [ 172.050458][ T977] usb 1-1: new high-speed USB device number 6 using dummy_hcd [ 172.220836][ T977] usb 1-1: device descriptor read/64, error -71 [ 172.334250][ T977] usb usb1-port1: attempt power cycle [ 172.719832][ T977] usb 1-1: new high-speed USB device number 7 using dummy_hcd [ 172.760732][ T977] usb 1-1: device descriptor read/8, error -71 [ 172.785916][ T6709] overlayfs: option "workdir=./bus" is useless in a non-upper mount, ignore [ 172.818924][ T6709] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent [ 173.330928][ T6711] loop6: detected capacity change from 0 to 524287999 [ 173.439751][ T977] usb 1-1: new high-speed USB device number 8 using dummy_hcd [ 173.499502][ T977] usb 1-1: device descriptor read/8, error -71 [ 173.611097][ T977] usb usb1-port1: unable to enumerate USB device [ 173.919781][ T5870] usb 5-1: new high-speed USB device number 10 using dummy_hcd [ 174.033349][ T6717] autofs: Unknown parameter 'fd0x0000000000000000' [ 174.130097][ T5870] usb 5-1: Using ep0 maxpacket: 16 [ 174.253409][ T5870] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 174.388446][ T5870] usb 5-1: config 1 interface 0 has no altsetting 0 [ 174.538705][ T5870] usb 5-1: New USB device found, idVendor=0508, idProduct=a4a1, bcdDevice= 0.40 [ 174.698481][ T5870] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 174.879064][ T5870] usb 5-1: Product: syz [ 174.903512][ T5870] usb 5-1: Manufacturer: syz [ 174.908243][ T5870] usb 5-1: SerialNumber: syz [ 175.265374][ T5870] usb 5-1: USB disconnect, device number 10 [ 176.360678][ T6731] overlayfs: missing 'lowerdir' [ 176.410479][ T5870] usb 5-1: new full-speed USB device number 11 using dummy_hcd [ 176.713396][ T5870] usb 5-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 176.792483][ T5870] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 176.890114][ T5870] usb 5-1: Product: syz [ 177.449846][ T5870] usb 5-1: Manufacturer: syz [ 177.459776][ T5870] usb 5-1: SerialNumber: syz [ 177.474273][ T5870] usb 5-1: config 0 descriptor?? [ 177.699201][ T5870] usb 5-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 178.239774][ T977] usb 3-1: new high-speed USB device number 15 using dummy_hcd [ 179.119764][ T977] usb 3-1: device descriptor read/64, error -71 [ 179.373028][ T6756] netlink: 16 bytes leftover after parsing attributes in process `syz.0.248'. [ 179.389994][ T977] usb 3-1: new high-speed USB device number 16 using dummy_hcd [ 179.451337][ T6760] loop6: detected capacity change from 0 to 524287999 [ 179.561278][ T977] usb 3-1: device descriptor read/64, error -71 [ 180.460537][ T5870] dvb_usb_rtl28xxu 5-1:0.0: probe with driver dvb_usb_rtl28xxu failed with error -110 [ 180.625388][ T977] usb usb3-port1: attempt power cycle [ 181.714795][ T43] usb 5-1: USB disconnect, device number 11 [ 181.737340][ T5911] usb 4-1: new high-speed USB device number 6 using dummy_hcd [ 181.922825][ T5911] usb 4-1: Using ep0 maxpacket: 16 [ 181.964446][ T5911] usb 4-1: config 1 has an invalid descriptor of length 125, skipping remainder of the config [ 181.975374][ T5911] usb 4-1: config 1 interface 0 altsetting 14 has 0 endpoint descriptors, different from the interface descriptor's value: 3 [ 181.994311][ T5911] usb 4-1: config 1 interface 0 has no altsetting 0 [ 182.052457][ T3079] usb 2-1: new full-speed USB device number 6 using dummy_hcd [ 182.331929][ T3079] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 182.361590][ T5911] usb 4-1: New USB device found, idVendor=0508, idProduct=a4a1, bcdDevice= 0.40 [ 182.437540][ T3079] usb 2-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 3 [ 182.455041][ T5911] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 182.547931][ T3079] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a5, bcdDevice= 0.40 [ 182.630762][ T5951] usb 5-1: new high-speed USB device number 12 using dummy_hcd [ 182.659405][ T3079] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 182.666697][ T5911] usb 4-1: Product: syz [ 182.773541][ T3079] usb 2-1: SerialNumber: syz [ 182.774996][ T5911] usb 4-1: Manufacturer: syz [ 182.809801][ T5911] usb 4-1: SerialNumber: syz [ 182.876864][ T5911] usb 4-1: can't set config #1, error -71 [ 182.882319][ T3079] cdc_ether 2-1:1.0: probe with driver cdc_ether failed with error -22 [ 182.920166][ T3079] usb-storage 2-1:1.0: USB Mass Storage device detected [ 182.920228][ T5911] usb 4-1: USB disconnect, device number 6 [ 182.952902][ T5951] usb 5-1: Using ep0 maxpacket: 32 [ 183.153502][ T3079] usb-storage 2-1:1.0: Quirks match for vid 0525 pid a4a5: 10000 [ 183.182439][ T5951] usb 5-1: unable to get BOS descriptor or descriptor too short [ 183.205067][ T6775] overlayfs: missing 'lowerdir' [ 183.217049][ T5951] usb 5-1: config 128 has an invalid interface number: 127 but max is 3 [ 183.244784][ T5951] usb 5-1: config 128 has an invalid descriptor of length 0, skipping remainder of the config [ 183.275419][ T5951] usb 5-1: config 128 has 1 interface, different from the descriptor's value: 4 [ 183.295026][ T5951] usb 5-1: config 128 has no interface number 0 [ 183.308995][ T5951] usb 5-1: config 128 interface 127 altsetting 14 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 183.338948][ T5951] usb 5-1: config 128 interface 127 has no altsetting 0 [ 183.356197][ T5951] usb 5-1: New USB device found, idVendor=0582, idProduct=295c, bcdDevice=d4.55 [ 183.430179][ T5951] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 183.438893][ T5951] usb 5-1: Product: syz [ 183.443596][ T5951] usb 5-1: Manufacturer: syz [ 183.448642][ T5951] usb 5-1: SerialNumber: syz [ 184.489770][ T5951] usb 5-1: USB disconnect, device number 12 [ 184.556727][ T5973] udevd[5973]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:128.127/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 185.664859][ T5911] usb 2-1: USB disconnect, device number 6 [ 186.459828][ T5870] usb 1-1: new high-speed USB device number 9 using dummy_hcd [ 186.569822][ T3079] usb 5-1: new full-speed USB device number 13 using dummy_hcd [ 186.599839][ T5870] usb 1-1: device descriptor read/64, error -71 [ 186.757033][ T3079] usb 5-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 186.829745][ T3079] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 186.859494][ T5870] usb 1-1: new high-speed USB device number 10 using dummy_hcd [ 186.906236][ T3079] usb 5-1: Product: syz [ 186.929499][ T3079] usb 5-1: Manufacturer: syz [ 186.950745][ T3079] usb 5-1: SerialNumber: syz [ 186.984910][ T3079] usb 5-1: config 0 descriptor?? [ 187.039832][ T5870] usb 1-1: device descriptor read/64, error -71 [ 187.160053][ T5870] usb usb1-port1: attempt power cycle [ 187.212265][ T3079] usb 5-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 187.289794][ T5934] usb 4-1: new high-speed USB device number 7 using dummy_hcd [ 187.449848][ T5934] usb 4-1: Using ep0 maxpacket: 16 [ 187.457216][ T5934] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 187.468710][ T5934] usb 4-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 9 [ 187.481998][ T5934] usb 4-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 187.495718][ T5934] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 187.512970][ T5934] usb 4-1: config 0 descriptor?? [ 187.514295][ T5870] usb 1-1: new high-speed USB device number 11 using dummy_hcd [ 187.536506][ T5934] usbhid 4-1:0.0: couldn't find an input interrupt endpoint [ 187.553721][ T5870] usb 1-1: device descriptor read/8, error -71 [ 187.590294][ T5911] usb 3-1: new high-speed USB device number 18 using dummy_hcd [ 187.729782][ T5911] usb 3-1: device descriptor read/64, error -71 [ 187.801232][ T5870] usb 1-1: new high-speed USB device number 12 using dummy_hcd [ 187.840515][ T5870] usb 1-1: device descriptor read/8, error -71 [ 187.951919][ T5870] usb usb1-port1: unable to enumerate USB device [ 187.969712][ T5911] usb 3-1: new high-speed USB device number 19 using dummy_hcd [ 188.139847][ T5911] usb 3-1: device descriptor read/64, error -71 [ 188.289311][ T5911] usb usb3-port1: attempt power cycle [ 188.649813][ T5911] usb 3-1: new high-speed USB device number 20 using dummy_hcd [ 188.667936][ T3079] dvb_usb_rtl28xxu 5-1:0.0: probe with driver dvb_usb_rtl28xxu failed with error -32 [ 188.680488][ T5911] usb 3-1: device descriptor read/8, error -71 [ 188.929745][ T5911] usb 3-1: new high-speed USB device number 21 using dummy_hcd [ 188.950595][ T5911] usb 3-1: device descriptor read/8, error -71 [ 189.069815][ T5911] usb usb3-port1: unable to enumerate USB device [ 189.653072][ T3079] usb 1-1: new full-speed USB device number 13 using dummy_hcd [ 189.716110][ T43] usb 5-1: USB disconnect, device number 13 [ 189.831823][ T3079] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 189.869279][ T3079] usb 1-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 3 [ 189.938517][ T3079] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a5, bcdDevice= 0.40 [ 189.955917][ T3079] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 189.971824][ T3079] usb 1-1: SerialNumber: syz [ 190.148578][ T3079] cdc_ether 1-1:1.0: probe with driver cdc_ether failed with error -22 [ 190.169363][ T3079] usb-storage 1-1:1.0: USB Mass Storage device detected [ 190.170664][ T5934] usb 4-1: USB disconnect, device number 7 [ 190.197791][ T3079] usb-storage 1-1:1.0: Quirks match for vid 0525 pid a4a5: 10000 [ 190.620977][ T43] usb 5-1: new high-speed USB device number 14 using dummy_hcd [ 191.578062][ T43] usb 5-1: too many configurations: 9, using maximum allowed: 8 [ 191.616228][ T43] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 191.649270][ T43] usb 5-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 191.706886][ T43] usb 5-1: config 0 interface 0 has no altsetting 0 [ 191.734817][ T43] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 191.788911][ T43] usb 5-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 191.879549][ T43] usb 5-1: config 0 interface 0 has no altsetting 0 [ 191.971330][ T43] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 192.029873][ T43] usb 5-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 192.116716][ T43] usb 5-1: config 0 interface 0 has no altsetting 0 [ 192.181502][ T43] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 192.200688][ T43] usb 5-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 192.234192][ T43] usb 5-1: config 0 interface 0 has no altsetting 0 [ 192.251875][ T43] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 192.277793][ T43] usb 5-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 192.302361][ T43] usb 5-1: config 0 interface 0 has no altsetting 0 [ 192.313256][ T43] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 192.333730][ T43] usb 5-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 192.346882][ T43] usb 5-1: config 0 interface 0 has no altsetting 0 [ 192.371996][ T43] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 192.385100][ T43] usb 5-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 192.398835][ T43] usb 5-1: config 0 interface 0 has no altsetting 0 [ 192.408703][ T43] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 192.418148][ T43] usb 5-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 192.429321][ T43] usb 5-1: config 0 interface 0 has no altsetting 0 [ 192.440982][ T43] usb 5-1: New USB device found, idVendor=0c45, idProduct=1010, bcdDevice=49.8e [ 192.450793][ T43] usb 5-1: New USB device strings: Mfr=41, Product=64, SerialNumber=168 [ 192.459477][ T43] usb 5-1: Product: syz [ 192.469035][ T43] usb 5-1: Manufacturer: syz [ 192.474442][ T43] usb 5-1: SerialNumber: syz [ 192.493693][ T43] usb 5-1: config 0 descriptor?? [ 192.521803][ T43] yurex 5-1:0.0: USB YUREX device now attached to Yurex #0 [ 192.693494][ T43] usb 1-1: USB disconnect, device number 13 [ 192.710191][ T6846] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 192.731132][ T6846] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 192.974050][ T977] usb 5-1: USB disconnect, device number 14 [ 193.075729][ T977] yurex 5-1:0.0: USB YUREX #0 now disconnected [ 193.289855][ T5934] usb 2-1: new high-speed USB device number 7 using dummy_hcd [ 193.441071][ T5934] usb 2-1: device descriptor read/64, error -71 [ 193.689860][ T5934] usb 2-1: new high-speed USB device number 8 using dummy_hcd [ 193.829739][ T43] usb 4-1: new full-speed USB device number 8 using dummy_hcd [ 193.950264][ T5934] usb 2-1: device descriptor read/64, error -71 [ 194.288158][ T6891] Invalid ELF header magic: != ELF [ 194.345845][ T5934] usb usb2-port1: attempt power cycle [ 194.433846][ T43] usb 4-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 194.502904][ T1301] ieee802154 phy0 wpan0: encryption failed: -22 [ 194.509471][ T1301] ieee802154 phy1 wpan1: encryption failed: -22 [ 194.520651][ T43] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 194.564013][ T43] usb 4-1: Product: syz [ 194.568347][ T43] usb 4-1: Manufacturer: syz [ 194.590978][ T43] usb 4-1: SerialNumber: syz [ 194.611315][ T43] usb 4-1: config 0 descriptor?? [ 194.790137][ T5934] usb 2-1: new high-speed USB device number 9 using dummy_hcd [ 194.830440][ T5934] usb 2-1: device descriptor read/8, error -71 [ 194.845011][ T43] usb 4-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 195.200039][ T5934] usb 2-1: new high-speed USB device number 10 using dummy_hcd [ 195.234426][ T5934] usb 2-1: device descriptor read/8, error -71 [ 195.350006][ T5934] usb usb2-port1: unable to enumerate USB device [ 195.574954][ T5870] usb 1-1: new high-speed USB device number 14 using dummy_hcd [ 195.719751][ T5870] usb 1-1: device descriptor read/64, error -71 [ 195.979838][ T5870] usb 1-1: new high-speed USB device number 15 using dummy_hcd [ 196.131352][ T5870] usb 1-1: device descriptor read/64, error -71 [ 196.276078][ T5870] usb usb1-port1: attempt power cycle [ 196.331623][ T43] dvb_usb_rtl28xxu 4-1:0.0: probe with driver dvb_usb_rtl28xxu failed with error -32 [ 196.449996][ T5893] usb 2-1: new full-speed USB device number 11 using dummy_hcd [ 196.631810][ T5893] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 196.657848][ T5893] usb 2-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 3 [ 196.680851][ T5870] usb 1-1: new high-speed USB device number 16 using dummy_hcd [ 196.691616][ T5893] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a5, bcdDevice= 0.40 [ 196.708629][ T5893] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 196.717174][ T5893] usb 2-1: SerialNumber: syz [ 196.717773][ T5870] usb 1-1: device descriptor read/8, error -71 [ 196.765341][ T5893] cdc_ether 2-1:1.0: probe with driver cdc_ether failed with error -22 [ 196.780840][ T5893] usb-storage 2-1:1.0: USB Mass Storage device detected [ 196.803443][ T5893] usb-storage 2-1:1.0: Quirks match for vid 0525 pid a4a5: 10000 [ 196.989805][ T5870] usb 1-1: new high-speed USB device number 17 using dummy_hcd [ 197.012183][ T5870] usb 1-1: device descriptor read/8, error -71 [ 197.121759][ T5870] usb usb1-port1: unable to enumerate USB device [ 197.439696][ T5911] usb 4-1: USB disconnect, device number 8 [ 199.238489][ T6931] netlink: 'syz.3.297': attribute type 4 has an invalid length. [ 199.686054][ T5951] usb 2-1: USB disconnect, device number 11 [ 199.906297][ T6928] netlink: 'syz.3.297': attribute type 4 has an invalid length. [ 199.918993][ T6928] net_ratelimit: 167 callbacks suppressed [ 199.919009][ T6928] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 200.012180][ T5911] usb 3-1: new high-speed USB device number 22 using dummy_hcd [ 200.389945][ T3079] usb 5-1: new high-speed USB device number 15 using dummy_hcd [ 200.540862][ T5911] usb 3-1: too many configurations: 9, using maximum allowed: 8 [ 200.640407][ T5911] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 200.649729][ T5911] usb 3-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 200.879461][ T3079] usb 5-1: Using ep0 maxpacket: 16 [ 200.905707][ T3079] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 200.937388][ T5911] usb 3-1: config 0 interface 0 has no altsetting 0 [ 200.944083][ T3079] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 200.961691][ T3079] usb 5-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 200.982919][ T3079] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 200.998550][ T5911] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 201.023383][ T5911] usb 3-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 201.034732][ T3079] usb 5-1: Product: syz [ 201.038981][ T3079] usb 5-1: Manufacturer: syz [ 201.067883][ T3079] usb 5-1: SerialNumber: syz [ 201.075535][ T5911] usb 3-1: config 0 interface 0 has no altsetting 0 [ 201.090815][ T5911] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 201.116934][ T5911] usb 3-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 201.153809][ T5911] usb 3-1: config 0 interface 0 has no altsetting 0 [ 201.181338][ T5911] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 201.197308][ T5911] usb 3-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 201.235063][ T5911] usb 3-1: config 0 interface 0 has no altsetting 0 [ 201.246953][ T5911] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 201.263204][ T5911] usb 3-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 201.390459][ T3079] usb 5-1: 0:2 : does not exist [ 201.424668][ T3079] usb 5-1: 5:0: failed to get current value for ch 0 (-22) [ 202.160779][ T5911] usb 3-1: config 0 interface 0 has no altsetting 0 [ 202.200169][ T5911] usb 3-1: unable to read config index 5 descriptor/start: -71 [ 202.207876][ T5911] usb 3-1: can't read configurations, error -71 [ 202.220116][ T3079] usb 5-1: USB disconnect, device number 15 [ 202.789971][ T5934] usb 2-1: new full-speed USB device number 12 using dummy_hcd [ 203.145288][ T5973] udevd[5973]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 203.323147][ T5934] usb 2-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 203.383573][ T5934] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 203.417239][ T5934] usb 2-1: Product: syz [ 203.452928][ T5934] usb 2-1: Manufacturer: syz [ 203.468040][ T5934] usb 2-1: SerialNumber: syz [ 203.501964][ T5934] usb 2-1: config 0 descriptor?? [ 203.558076][ T6973] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 203.572984][ T6973] No such timeout policy "syz0" [ 203.964589][ T6981] /dev/nullb0: Can't open blockdev [ 203.971949][ T6981] ubi31: attaching mtd0 [ 203.978852][ T6981] ubi31: scanning is finished [ 203.983679][ T6981] ubi31: empty MTD device detected [ 204.196145][ T5934] usb 2-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 204.290315][ T6981] ubi31: attached mtd0 (name "mtdram test device", size 0 MiB) [ 204.298134][ T6981] ubi31: PEB size: 4096 bytes (4 KiB), LEB size: 3968 bytes [ 204.306074][ T6981] ubi31: min./max. I/O unit sizes: 1/64, sub-page size 1 [ 204.313213][ T6981] ubi31: VID header offset: 64 (aligned 64), data offset: 128 [ 204.320781][ T6981] ubi31: good PEBs: 32, bad PEBs: 0, corrupted PEBs: 0 [ 204.327680][ T6981] ubi31: user volume: 0, internal volumes: 1, max. volumes count: 23 [ 204.335931][ T6981] ubi31: max/mean erase counter: 0/0, WL threshold: 4096, image sequence number: 185994138 [ 204.347871][ T6981] ubi31: available PEBs: 28, total reserved PEBs: 4, PEBs reserved for bad PEB handling: 0 [ 204.463610][ T6985] ubi31: background thread "ubi_bgt31d" started, PID 6985 [ 204.569748][ T3079] usb 3-1: new high-speed USB device number 24 using dummy_hcd [ 204.855161][ T6989] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 204.933101][ T3079] usb 3-1: no configurations [ 204.983064][ T3079] usb 3-1: can't read configurations, error -22 [ 205.240407][ T3079] usb 3-1: new high-speed USB device number 25 using dummy_hcd [ 205.650630][ T3079] usb 3-1: no configurations [ 205.665559][ T3079] usb 3-1: can't read configurations, error -22 [ 205.696611][ T3079] usb usb3-port1: attempt power cycle [ 205.966199][ T5934] dvb_usb_rtl28xxu 2-1:0.0: probe with driver dvb_usb_rtl28xxu failed with error -32 [ 206.230205][ T3079] usb 3-1: new high-speed USB device number 26 using dummy_hcd [ 206.258808][ T3079] usb 3-1: no configurations [ 206.281207][ T3079] usb 3-1: can't read configurations, error -22 [ 206.490366][ T3079] usb 3-1: new high-speed USB device number 27 using dummy_hcd [ 206.750273][ T3079] usb 3-1: device descriptor read/8, error -71 [ 206.761434][ T6997] Bluetooth: hci0: Opcode 0x0401 failed: -4 [ 206.914473][ T3079] usb usb3-port1: unable to enumerate USB device [ 207.203554][ T43] usb 1-1: new high-speed USB device number 18 using dummy_hcd [ 207.527496][ T43] usb 1-1: too many configurations: 9, using maximum allowed: 8 [ 207.699940][ T43] usb 1-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 207.742277][ T43] usb 1-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 207.782164][ T5870] usb 2-1: USB disconnect, device number 12 [ 208.011916][ T43] usb 1-1: config 0 interface 0 has no altsetting 0 [ 208.020968][ T43] usb 1-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 208.032245][ T43] usb 1-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 208.043995][ T43] usb 1-1: config 0 interface 0 has no altsetting 0 [ 208.056091][ T43] usb 1-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 208.066297][ T43] usb 1-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 208.752378][ T43] usb 1-1: config 0 interface 0 has no altsetting 0 [ 208.762806][ T43] usb 1-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 208.776289][ T43] usb 1-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 208.787319][ T43] usb 1-1: config 0 interface 0 has no altsetting 0 [ 208.796745][ T43] usb 1-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 208.809697][ T3079] usb 3-1: new high-speed USB device number 28 using dummy_hcd [ 208.830599][ T43] usb 1-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 208.854461][ T43] usb 1-1: config 0 interface 0 has no altsetting 0 [ 208.865959][ T43] usb 1-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 209.037976][ T43] usb 1-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 209.038015][ T43] usb 1-1: config 0 interface 0 has no altsetting 0 [ 209.039355][ T43] usb 1-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 209.039413][ T43] usb 1-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 209.039438][ T43] usb 1-1: config 0 interface 0 has no altsetting 0 [ 209.041677][ T43] usb 1-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 209.041723][ T43] usb 1-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 209.041747][ T43] usb 1-1: config 0 interface 0 has no altsetting 0 [ 209.043749][ T43] usb 1-1: New USB device found, idVendor=0c45, idProduct=1010, bcdDevice=49.8e [ 209.043775][ T43] usb 1-1: New USB device strings: Mfr=41, Product=64, SerialNumber=168 [ 209.043794][ T43] usb 1-1: Product: syz [ 209.043807][ T43] usb 1-1: Manufacturer: syz [ 209.043821][ T43] usb 1-1: SerialNumber: syz [ 209.061057][ T43] usb 1-1: config 0 descriptor?? [ 209.470486][ T43] yurex 1-1:0.0: USB YUREX device now attached to Yurex #0 [ 209.489785][ T3079] usb 3-1: Using ep0 maxpacket: 16 [ 209.492132][ T3079] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 209.492161][ T3079] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 209.506670][ T3079] usb 3-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 209.506705][ T3079] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 209.506755][ T3079] usb 3-1: Product: syz [ 209.506772][ T3079] usb 3-1: Manufacturer: syz [ 209.506788][ T3079] usb 3-1: SerialNumber: syz [ 209.945460][ T3079] usb 3-1: 0:2 : does not exist [ 209.993027][ T3079] usb 3-1: 5:0: failed to get current value for ch 0 (-22) [ 210.057227][ T3079] usb 3-1: USB disconnect, device number 28 [ 210.333742][ T5934] usb 1-1: USB disconnect, device number 18 [ 210.340594][ T5934] yurex 1-1:0.0: USB YUREX #0 now disconnected [ 210.348499][ T7037] binder: 7034:7037 ioctl c0306201 200000000640 returned -22 [ 210.419708][ T7040] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 211.146609][ T5973] udevd[5973]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 211.917929][ T5822] Bluetooth: hci3: command 0x0406 tx timeout [ 211.918260][ T5822] Bluetooth: hci1: command 0x0406 tx timeout [ 211.919506][ T5822] Bluetooth: hci4: command 0x0406 tx timeout [ 211.919749][ T5834] Bluetooth: hci2: command 0x0406 tx timeout [ 212.766772][ T7045] input: syz0 as /devices/virtual/input/input7 [ 212.768728][ T3079] usb 1-1: new full-speed USB device number 19 using dummy_hcd [ 213.131615][ T3079] usb 1-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 213.141159][ T3079] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 213.151067][ T3079] usb 1-1: Product: syz [ 213.155418][ T3079] usb 1-1: Manufacturer: syz [ 213.160551][ T3079] usb 1-1: SerialNumber: syz [ 213.168278][ T3079] usb 1-1: config 0 descriptor?? [ 213.311230][ T7057] netlink: 'syz.4.333': attribute type 4 has an invalid length. [ 213.380255][ T7057] netlink: 'syz.4.333': attribute type 4 has an invalid length. [ 213.460277][ T7057] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 213.858217][ T3079] usb 1-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 215.066435][ T7070] netlink: 'syz.4.336': attribute type 4 has an invalid length. [ 215.136326][ T7070] netlink: 'syz.4.336': attribute type 4 has an invalid length. [ 215.172744][ T7070] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 215.640031][ T3079] dvb_usb_rtl28xxu 1-1:0.0: probe with driver dvb_usb_rtl28xxu failed with error -32 [ 216.619783][ T5934] usb 5-1: new high-speed USB device number 16 using dummy_hcd [ 216.666237][ T7088] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 216.820295][ T5934] usb 5-1: Using ep0 maxpacket: 16 [ 217.199866][ T5934] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 217.245170][ T5934] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 217.278524][ T5986] usb 1-1: USB disconnect, device number 19 [ 217.306974][ T5934] usb 5-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 217.351378][ T5934] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 217.370383][ T5934] usb 5-1: Product: syz [ 217.377536][ T5934] usb 5-1: Manufacturer: syz [ 217.397084][ T5934] usb 5-1: SerialNumber: syz [ 218.329789][ T5911] usb 3-1: new high-speed USB device number 29 using dummy_hcd [ 218.486980][ T5934] usb 5-1: 0:2 : does not exist [ 218.494245][ T5934] usb 5-1: 5:0: failed to get current value for ch 0 (-22) [ 218.523850][ T5911] usb 3-1: too many configurations: 9, using maximum allowed: 8 [ 218.526428][ T5911] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 218.526475][ T5911] usb 3-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 218.526497][ T5911] usb 3-1: config 0 interface 0 has no altsetting 0 [ 218.529537][ T5911] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 218.532394][ T5911] usb 3-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 218.532436][ T5911] usb 3-1: config 0 interface 0 has no altsetting 0 [ 218.539793][ T5911] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 218.539852][ T5911] usb 3-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 218.539880][ T5911] usb 3-1: config 0 interface 0 has no altsetting 0 [ 218.543034][ T5911] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 218.543087][ T5911] usb 3-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 218.543114][ T5911] usb 3-1: config 0 interface 0 has no altsetting 0 [ 218.544937][ T5911] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 218.544986][ T5911] usb 3-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 218.545013][ T5911] usb 3-1: config 0 interface 0 has no altsetting 0 [ 218.547923][ T5911] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 218.547975][ T5911] usb 3-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 218.548003][ T5911] usb 3-1: config 0 interface 0 has no altsetting 0 [ 218.552375][ T5911] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 218.552431][ T5911] usb 3-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 218.552460][ T5911] usb 3-1: config 0 interface 0 has no altsetting 0 [ 218.555695][ T5911] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 218.555748][ T5911] usb 3-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 218.555777][ T5911] usb 3-1: config 0 interface 0 has no altsetting 0 [ 218.559520][ T5911] usb 3-1: New USB device found, idVendor=0c45, idProduct=1010, bcdDevice=49.8e [ 218.559552][ T5911] usb 3-1: New USB device strings: Mfr=41, Product=64, SerialNumber=168 [ 218.559575][ T5911] usb 3-1: Product: syz [ 218.559656][ T5911] usb 3-1: Manufacturer: syz [ 218.559673][ T5911] usb 3-1: SerialNumber: syz [ 218.565451][ T5911] usb 3-1: config 0 descriptor?? [ 219.459161][ T5911] yurex 3-1:0.0: USB YUREX device now attached to Yurex #0 [ 219.508998][ T5934] usb 5-1: USB disconnect, device number 16 [ 219.567091][ T5973] udevd[5973]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 219.719734][ T3079] usb 3-1: USB disconnect, device number 29 [ 219.725976][ T3079] yurex 3-1:0.0: USB YUREX #0 now disconnected [ 221.419795][ T7114] netlink: 'syz.2.349': attribute type 4 has an invalid length. [ 221.599900][ T7114] netlink: 'syz.2.349': attribute type 4 has an invalid length. [ 221.671207][ T7114] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 223.065980][ T7123] input: syz0 as /devices/virtual/input/input8 [ 223.749708][ T3079] usb 3-1: new full-speed USB device number 30 using dummy_hcd [ 225.269958][ T5911] usb 4-1: new high-speed USB device number 9 using dummy_hcd [ 225.284187][ T3079] usb 3-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 225.510212][ T5911] usb 4-1: Using ep0 maxpacket: 16 [ 225.563903][ T5911] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 225.596079][ T3079] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 225.604398][ T3079] usb 3-1: Product: syz [ 225.608741][ T3079] usb 3-1: Manufacturer: syz [ 225.608820][ T5911] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 225.613487][ T3079] usb 3-1: SerialNumber: syz [ 225.636491][ T3079] usb 3-1: config 0 descriptor?? [ 225.714586][ T5911] usb 4-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 225.760167][ T5911] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 225.806751][ T5911] usb 4-1: Product: syz [ 225.831548][ T5911] usb 4-1: Manufacturer: syz [ 225.857506][ T5911] usb 4-1: SerialNumber: syz [ 225.889494][ T3079] usb 3-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 226.144524][ T5911] usb 4-1: 0:2 : does not exist [ 226.153775][ T5911] usb 4-1: 5:0: failed to get current value for ch 0 (-22) [ 226.220119][ T5911] usb 4-1: USB disconnect, device number 9 [ 226.557875][ T6030] udevd[6030]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 227.433473][ T7157] netlink: 'syz.4.362': attribute type 4 has an invalid length. [ 227.459730][ T3079] dvb_usb_rtl28xxu 3-1:0.0: probe with driver dvb_usb_rtl28xxu failed with error -32 [ 227.594036][ T7156] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 228.442195][ T7164] No control pipe specified [ 229.294943][ T5911] usb 3-1: USB disconnect, device number 30 [ 230.584941][ T7181] overlayfs: missing 'lowerdir' [ 231.147359][ T7184] 9pnet_fd: Insufficient options for proto=fd [ 231.168553][ T7184] lo speed is unknown, defaulting to 1000 [ 231.176968][ T7184] lo speed is unknown, defaulting to 1000 [ 231.193049][ T7184] lo speed is unknown, defaulting to 1000 [ 231.232198][ T7184] iwpm_register_pid: Unable to send a nlmsg (client = 2) [ 231.308953][ T7184] infiniband syz0: RDMA CMA: cma_listen_on_dev, error -98 [ 231.864064][ T7184] lo speed is unknown, defaulting to 1000 [ 231.872114][ T7184] lo speed is unknown, defaulting to 1000 [ 231.879222][ T7184] lo speed is unknown, defaulting to 1000 [ 231.888465][ T7184] lo speed is unknown, defaulting to 1000 [ 231.987727][ T7184] lo speed is unknown, defaulting to 1000 [ 232.247367][ T7190] netlink: 16402 bytes leftover after parsing attributes in process `syz.1.371'. [ 232.264620][ T7189] netlink: 16402 bytes leftover after parsing attributes in process `syz.1.371'. [ 234.024147][ T7212] netlink: 'syz.1.376': attribute type 4 has an invalid length. [ 234.186401][ T7203] Bluetooth: hci0: Opcode 0x0401 failed: -4 [ 234.428166][ T7199] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 234.659770][ T5986] usb 4-1: new full-speed USB device number 10 using dummy_hcd [ 235.603066][ T5986] usb 4-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 235.627786][ T5986] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 235.820299][ T5986] usb 4-1: Product: syz [ 235.836608][ T5986] usb 4-1: Manufacturer: syz [ 235.854628][ T5986] usb 4-1: SerialNumber: syz [ 235.893168][ T5986] usb 4-1: config 0 descriptor?? [ 236.152829][ T5986] usb 4-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 236.262517][ T7225] overlayfs: missing 'lowerdir' [ 237.564346][ T7237] lo speed is unknown, defaulting to 1000 [ 238.255298][ T5986] dvb_usb_rtl28xxu 4-1:0.0: probe with driver dvb_usb_rtl28xxu failed with error -110 [ 238.400536][ T5886] usb 2-1: new high-speed USB device number 13 using dummy_hcd [ 238.472237][ T5934] usb 4-1: USB disconnect, device number 10 [ 238.639714][ T5886] usb 2-1: Using ep0 maxpacket: 8 [ 239.222685][ T5886] usb 2-1: config index 0 descriptor too short (expected 301, got 45) [ 239.351790][ T5886] usb 2-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 239.662460][ T7245] netlink: 16402 bytes leftover after parsing attributes in process `syz.0.386'. [ 239.704732][ T5886] usb 2-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 240.500418][ T30] audit: type=1326 audit(1750648949.473:2): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7241 comm="syz.3.387" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f38a5b8e929 code=0x0 [ 240.584070][ T5886] usb 2-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 240.676280][ T5886] usb 2-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 240.718814][ T5886] usb 2-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 240.737290][ T5886] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 240.989574][ T5886] usb 2-1: usb_control_msg returned -71 [ 241.027842][ T5886] usbtmc 2-1:16.0: can't read capabilities [ 241.089055][ T5886] usb 2-1: USB disconnect, device number 13 [ 241.606210][ T7253] Bluetooth: hci0: Opcode 0x0401 failed: -4 [ 244.729740][ T3079] usb 4-1: new high-speed USB device number 11 using dummy_hcd [ 245.494314][ T7276] netlink: 'syz.4.396': attribute type 4 has an invalid length. [ 245.520761][ T7276] netlink: 'syz.4.396': attribute type 4 has an invalid length. [ 245.992565][ T5900] usb 5-1: new full-speed USB device number 17 using dummy_hcd [ 246.268501][ T7279] netlink: 'syz.2.395': attribute type 4 has an invalid length. [ 246.654096][ T5900] usb 5-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 246.665085][ T5900] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 246.686020][ T5900] usb 5-1: Product: syz [ 246.704694][ T5900] usb 5-1: Manufacturer: syz [ 246.709456][ T5900] usb 5-1: SerialNumber: syz [ 246.753974][ T5900] usb 5-1: config 0 descriptor?? [ 246.824749][ T7273] netlink: 'syz.2.395': attribute type 4 has an invalid length. [ 246.841675][ T7273] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 247.074614][ T5900] usb 5-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 247.168686][ T7290] netlink: 'syz.3.400': attribute type 4 has an invalid length. [ 247.585122][ T7288] netlink: 'syz.3.400': attribute type 4 has an invalid length. [ 249.297658][ T5900] dvb_usb_rtl28xxu 5-1:0.0: probe with driver dvb_usb_rtl28xxu failed with error -32 [ 249.322504][ T7299] Bluetooth: hci0: Opcode 0x0401 failed: -4 [ 249.721789][ T7303] netlink: 16 bytes leftover after parsing attributes in process `syz.2.405'. [ 249.809290][ T5986] usb 4-1: new high-speed USB device number 12 using dummy_hcd [ 250.082225][ T5986] usb 4-1: Using ep0 maxpacket: 32 [ 250.105606][ T5986] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 250.124096][ T5986] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 250.127939][ T7312] netlink: 'syz.0.407': attribute type 4 has an invalid length. [ 250.134270][ T5986] usb 4-1: New USB device found, idVendor=0403, idProduct=6030, bcdDevice= 0.00 [ 250.169310][ T5986] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 250.820894][ T7315] netlink: 'syz.0.407': attribute type 4 has an invalid length. [ 250.843577][ T5986] usb 4-1: config 0 descriptor?? [ 250.877864][ T3079] lo speed is unknown, defaulting to 1000 [ 250.989909][ T3079] syz0: Port: 1 Link DOWN [ 250.991533][ T5900] usb 5-1: USB disconnect, device number 17 [ 251.053840][ T3079] lo speed is unknown, defaulting to 1000 [ 251.109817][ T3079] syz0: Port: 1 Link ACTIVE [ 251.307865][ T5986] ft260 0003:0403:6030.0001: unknown main item tag 0x0 [ 251.485036][ T5986] ft260 0003:0403:6030.0001: chip code: 6424 8183 [ 251.542228][ T5900] usb 5-1: new high-speed USB device number 18 using dummy_hcd [ 251.685732][ T5986] ft260 0003:0403:6030.0001: USB HID v0.00 Device [HID 0403:6030] on usb-dummy_hcd.3-1/input0 [ 251.739959][ T5900] usb 5-1: Using ep0 maxpacket: 8 [ 251.747335][ T5900] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 251.775991][ T5900] usb 5-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 251.934102][ T5986] ft260 0003:0403:6030.0001: failed to retrieve status: -32, no wakeup [ 251.935798][ T5900] usb 5-1: New USB device found, idVendor=1557, idProduct=7720, bcdDevice=b7.eb [ 251.935823][ T5900] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 251.943881][ T5986] ft260 0003:0403:6030.0001: failed to retrieve status: -32 [ 251.944934][ T5986] ft260 0003:0403:6030.0001: failed to reset I2C controller: -71 [ 251.949215][ T5900] usb 5-1: config 0 descriptor?? [ 251.965978][ T5986] usb 4-1: USB disconnect, device number 12 [ 252.325410][ T7335] netlink: set zone limit has 4 unknown bytes [ 254.297053][ T5900] usb 5-1: USB disconnect, device number 18 [ 254.569870][ T7353] netlink: 16 bytes leftover after parsing attributes in process `syz.0.416'. [ 254.691906][ T7351] Bluetooth: hci0: Opcode 0x0401 failed: -4 [ 255.629748][ T5986] usb 1-1: new full-speed USB device number 20 using dummy_hcd [ 255.949523][ T1301] ieee802154 phy0 wpan0: encryption failed: -22 [ 255.971255][ T1301] ieee802154 phy1 wpan1: encryption failed: -22 [ 256.089500][ T5986] usb 1-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 256.104092][ T5986] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 256.113469][ T5986] usb 1-1: Product: syz [ 256.118047][ T5986] usb 1-1: Manufacturer: syz [ 256.126871][ T5986] usb 1-1: SerialNumber: syz [ 256.136404][ T5986] usb 1-1: config 0 descriptor?? [ 256.156424][ T7372] netlink: 'syz.1.420': attribute type 4 has an invalid length. [ 256.200676][ T7372] netlink: 'syz.1.420': attribute type 4 has an invalid length. [ 256.348326][ T5986] usb 1-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 257.530842][ T5911] usb 3-1: new high-speed USB device number 31 using dummy_hcd [ 257.921325][ T5911] usb 3-1: Using ep0 maxpacket: 32 [ 258.429479][ T5911] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 258.469151][ T5911] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 258.492063][ T5911] usb 3-1: New USB device found, idVendor=0403, idProduct=6030, bcdDevice= 0.00 [ 258.502409][ T5911] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 258.517467][ T5911] usb 3-1: config 0 descriptor?? [ 258.724938][ T5986] dvb_usb_rtl28xxu 1-1:0.0: probe with driver dvb_usb_rtl28xxu failed with error -32 [ 259.169147][ T5911] ft260 0003:0403:6030.0002: unknown main item tag 0x0 [ 259.334873][ T5911] ft260 0003:0403:6030.0002: chip code: 6424 8183 [ 259.560578][ T5911] ft260 0003:0403:6030.0002: USB HID v0.00 Device [HID 0403:6030] on usb-dummy_hcd.2-1/input0 [ 259.758129][ T5911] ft260 0003:0403:6030.0002: failed to retrieve status: -32, no wakeup [ 259.785369][ T5900] usb 1-1: USB disconnect, device number 20 [ 259.829983][ T5911] ft260 0003:0403:6030.0002: failed to retrieve status: -32 [ 259.846998][ T5911] ft260 0003:0403:6030.0002: failed to reset I2C controller: -71 [ 259.859852][ T5986] usb 5-1: new high-speed USB device number 19 using dummy_hcd [ 259.916087][ T5911] usb 3-1: USB disconnect, device number 31 [ 260.032369][ T5986] usb 5-1: Using ep0 maxpacket: 8 [ 260.046387][ T5986] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 260.078072][ T5986] usb 5-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 260.096995][ T5986] usb 5-1: New USB device found, idVendor=1557, idProduct=7720, bcdDevice=b7.eb [ 260.110724][ T5986] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 260.136148][ T5986] usb 5-1: config 0 descriptor?? [ 260.499747][ T5870] usb 1-1: new high-speed USB device number 21 using dummy_hcd [ 261.591798][ T5870] usb 1-1: config 0 has no interfaces? [ 261.671596][ T5870] usb 1-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b [ 261.729403][ T5870] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 261.796536][ T5870] usb 1-1: Product: syz [ 261.815311][ T5870] usb 1-1: Manufacturer: syz [ 261.820592][ T5870] usb 1-1: SerialNumber: syz [ 261.850985][ T5870] usb 1-1: config 0 descriptor?? [ 262.084726][ T7416] netlink: 'syz.2.434': attribute type 4 has an invalid length. [ 262.108403][ T7416] netlink: 'syz.2.434': attribute type 4 has an invalid length. [ 262.212360][ T7402] pimreg: entered allmulticast mode [ 262.227217][ T7402] pimreg: left allmulticast mode [ 263.331160][ T5934] usb 5-1: USB disconnect, device number 19 [ 265.476798][ T5934] usb 3-1: new full-speed USB device number 32 using dummy_hcd [ 265.645977][ T7441] team_slave_1: entered promiscuous mode [ 265.808487][ T5986] usb 1-1: USB disconnect, device number 21 [ 265.914384][ T5934] usb 3-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 265.923826][ T5934] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 265.934568][ T5934] usb 3-1: Product: syz [ 265.944592][ T5934] usb 3-1: Manufacturer: syz [ 265.996136][ T5934] usb 3-1: SerialNumber: syz [ 266.160289][ T5934] usb 3-1: config 0 descriptor?? [ 266.372961][ T5934] usb 3-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 268.099686][ T3079] usb 2-1: new high-speed USB device number 14 using dummy_hcd [ 268.301402][ T5934] dvb_usb_rtl28xxu 3-1:0.0: probe with driver dvb_usb_rtl28xxu failed with error -32 [ 268.419839][ T3079] usb 2-1: Using ep0 maxpacket: 16 [ 268.422234][ T3079] usb 2-1: config 7 has an invalid descriptor of length 0, skipping remainder of the config [ 268.513183][ T7464] netlink: 'syz.3.447': attribute type 4 has an invalid length. [ 268.598234][ T7464] netlink: 'syz.3.447': attribute type 4 has an invalid length. [ 268.909719][ T3079] usb 2-1: config 7 interface 0 altsetting 5 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 268.987917][ T3079] usb 2-1: config 7 interface 0 altsetting 5 endpoint 0x81 has invalid wMaxPacketSize 0 [ 269.040026][ T3079] usb 2-1: config 7 interface 0 altsetting 5 has 1 endpoint descriptor, different from the interface descriptor's value: 5 [ 269.096396][ T3079] usb 2-1: config 7 interface 0 has no altsetting 0 [ 269.130343][ T3079] usb 2-1: New USB device found, idVendor=0458, idProduct=5010, bcdDevice= 0.00 [ 269.164638][ T3079] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 269.237033][ T7469] netlink: 'syz.0.449': attribute type 4 has an invalid length. [ 269.322346][ T7471] netlink: 'syz.0.449': attribute type 4 has an invalid length. [ 269.357931][ T43] lo speed is unknown, defaulting to 1000 [ 269.368707][ T43] syz0: Port: 1 Link DOWN [ 269.407193][ T5934] usb 3-1: USB disconnect, device number 32 [ 269.482606][ T5900] lo speed is unknown, defaulting to 1000 [ 269.498755][ T5900] syz0: Port: 1 Link ACTIVE [ 269.825687][ T3079] usbhid 2-1:7.0: can't add hid device: -71 [ 269.836210][ T3079] usbhid 2-1:7.0: probe with driver usbhid failed with error -71 [ 269.942301][ T7482] 9pnet_fd: Insufficient options for proto=fd [ 269.954865][ T7482] siw: device registration error -23 [ 270.591506][ T3079] usb 2-1: USB disconnect, device number 14 [ 276.172921][ T7506] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 277.960034][ T5986] usb 1-1: new full-speed USB device number 22 using dummy_hcd [ 278.520124][ T5986] usb 1-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 278.553774][ T5986] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 278.593973][ T5986] usb 1-1: Product: syz [ 278.598242][ T5986] usb 1-1: Manufacturer: syz [ 278.628997][ T5986] usb 1-1: SerialNumber: syz [ 278.659342][ T5986] usb 1-1: config 0 descriptor?? [ 280.189814][ T5986] usb 1-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 281.793716][ T5986] dvb_usb_rtl28xxu 1-1:0.0: probe with driver dvb_usb_rtl28xxu failed with error -32 [ 282.444999][ T43] usb 1-1: USB disconnect, device number 22 [ 282.999665][ T7545] lo speed is unknown, defaulting to 1000 [ 284.022265][ T7553] trusted_key: syz.4.471 sent an empty control message without MSG_MORE. [ 285.240044][ T7560] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 289.835438][ T7584] netlink: 'syz.4.475': attribute type 4 has an invalid length. [ 290.306063][ T5951] usb 2-1: new high-speed USB device number 15 using dummy_hcd [ 290.422322][ T7574] netlink: 'syz.4.475': attribute type 4 has an invalid length. [ 290.687212][ T5951] usb 2-1: unable to read config index 0 descriptor/start: -61 [ 291.540546][ T5951] usb 2-1: can't read configurations, error -61 [ 291.679776][ T5951] usb 2-1: new high-speed USB device number 16 using dummy_hcd [ 297.070642][ T7615] netlink: 8 bytes leftover after parsing attributes in process `syz.1.489'. [ 298.172791][ T7615] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 298.222948][ T7615] Bluetooth: hci2: Opcode 0x0406 failed: -4 [ 298.282622][ T7615] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 298.324305][ T7615] Bluetooth: hci1: Opcode 0x0406 failed: -4 [ 298.350705][ T7615] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 298.362358][ T7615] Bluetooth: hci3: Opcode 0x0406 failed: -4 [ 298.379031][ T7615] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 298.391299][ T7615] Bluetooth: hci4: Opcode 0x0406 failed: -4 [ 300.159996][ T5832] Bluetooth: hci2: command 0x0406 tx timeout [ 300.299753][ T5832] Bluetooth: hci1: command 0x0406 tx timeout [ 300.385006][ T5832] Bluetooth: hci4: command 0x0406 tx timeout [ 300.393871][ T5832] Bluetooth: hci3: command 0x0406 tx timeout [ 300.902183][ T7646] netlink: 'syz.1.496': attribute type 4 has an invalid length. [ 300.993566][ T7646] netlink: 'syz.1.496': attribute type 4 has an invalid length. [ 302.065807][ T7652] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 302.082014][ T43] usb 4-1: new high-speed USB device number 13 using dummy_hcd [ 302.270775][ T5832] Bluetooth: hci2: command 0x0406 tx timeout [ 302.380573][ T5832] Bluetooth: hci1: command 0x0406 tx timeout [ 302.468968][ T5830] Bluetooth: hci3: command 0x0406 tx timeout [ 302.475163][ T51] Bluetooth: hci4: command 0x0406 tx timeout [ 302.690329][ T43] usb 4-1: Using ep0 maxpacket: 16 [ 302.730983][ T43] usb 4-1: config 1 contains an unexpected descriptor of type 0x1, skipping [ 302.754004][ T43] usb 4-1: config 1 has an invalid descriptor of length 1, skipping remainder of the config [ 302.794578][ T43] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 302.847124][ T43] usb 4-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 302.876354][ T43] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 302.913679][ T43] usb 4-1: Product: syz [ 302.917927][ T43] usb 4-1: Manufacturer: syz [ 302.942312][ T43] usb 4-1: SerialNumber: syz [ 304.892892][ T43] usb 4-1: 0:2 : does not exist [ 306.122296][ T5900] usb 3-1: new high-speed USB device number 33 using dummy_hcd [ 306.692147][ T5900] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 306.777088][ T5900] usb 3-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 306.833299][ T5900] usb 3-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 306.854011][ T5900] usb 3-1: Product: syz [ 306.858270][ T5900] usb 3-1: Manufacturer: syz [ 306.868156][ T5951] usb 4-1: USB disconnect, device number 13 [ 306.879145][ T5900] usb 3-1: SerialNumber: syz [ 306.932525][ T5900] usb 3-1: config 0 descriptor?? [ 307.111033][ T7680] input: syz0 as /devices/virtual/input/input9 [ 307.552507][ T5900] snd-usb-audio 3-1:0.0: probe with driver snd-usb-audio failed with error -22 [ 307.712170][ T7682] tipc: Started in network mode [ 307.748739][ T7682] tipc: Node identity 4, cluster identity 4711 [ 307.782852][ T7609] udevd[7609]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 307.810910][ T7682] tipc: Node number set to 4 [ 308.781008][ T7692] netlink: 'syz.2.504': attribute type 1 has an invalid length. [ 309.932187][ T7696] netlink: 'syz.4.511': attribute type 4 has an invalid length. [ 309.986079][ T7697] netlink: 'syz.4.511': attribute type 4 has an invalid length. [ 310.508014][ T7699] binder: 7698:7699 ioctl c0306201 200000000540 returned -22 [ 310.520093][ T7699] binder: 7698:7699 ioctl c0306201 200000000640 returned -22 [ 310.778974][ T7701] input: syz0 as /devices/virtual/input/input10 [ 310.997047][ T5900] usb 3-1: USB disconnect, device number 33 [ 313.573267][ T7706] syz.4.515 (7706): drop_caches: 2 [ 315.589720][ T3079] usb 5-1: new high-speed USB device number 20 using dummy_hcd [ 315.789679][ T3079] usb 5-1: Using ep0 maxpacket: 8 [ 315.884410][ T3079] usb 5-1: config index 0 descriptor too short (expected 301, got 45) [ 315.933762][ T3079] usb 5-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 315.999784][ T3079] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 316.013882][ T3079] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 316.024123][ T3079] usb 5-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 316.044378][ T3079] usb 5-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 316.055521][ T3079] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 316.432304][ T7727] netlink: 16402 bytes leftover after parsing attributes in process `syz.0.519'. [ 316.464972][ T3079] usb 5-1: usb_control_msg returned -71 [ 316.480319][ T3079] usbtmc 5-1:16.0: can't read capabilities [ 316.487800][ T7724] netlink: 16402 bytes leftover after parsing attributes in process `syz.0.519'. [ 316.574481][ T3079] usb 5-1: USB disconnect, device number 20 [ 317.355142][ T1301] ieee802154 phy0 wpan0: encryption failed: -22 [ 317.379207][ T1301] ieee802154 phy1 wpan1: encryption failed: -22 [ 317.751975][ T7738] binder: 7737:7738 ioctl c0306201 200000000540 returned -22 [ 317.762114][ T7738] binder: 7737:7738 ioctl c0306201 200000000640 returned -22 [ 318.056630][ T7740] netlink: 'syz.0.525': attribute type 4 has an invalid length. [ 318.070672][ T5461] lo speed is unknown, defaulting to 1000 [ 318.078356][ T5461] syz0: Port: 1 Link DOWN [ 318.089781][ T7740] netlink: 'syz.0.525': attribute type 4 has an invalid length. [ 318.100642][ T3079] lo speed is unknown, defaulting to 1000 [ 318.106719][ T3079] syz0: Port: 1 Link ACTIVE [ 318.119483][ T7742] input: syz0 as /devices/virtual/input/input11 [ 318.801083][ T7746] netlink: 'syz.0.526': attribute type 4 has an invalid length. [ 321.099219][ T7768] netlink: 'syz.4.531': attribute type 4 has an invalid length. [ 321.291977][ T7768] netlink: 'syz.4.531': attribute type 4 has an invalid length. [ 321.662017][ T7760] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 321.673839][ T7773] binder: 7772:7773 ioctl c0306201 200000000540 returned -22 [ 321.690145][ T7773] binder: 7772:7773 ioctl c0306201 200000000640 returned -22 [ 324.524655][ T7785] netlink: 'syz.0.539': attribute type 4 has an invalid length. [ 324.535433][ T5870] lo speed is unknown, defaulting to 1000 [ 324.541695][ T5870] syz0: Port: 1 Link DOWN [ 324.552739][ T7785] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 324.615518][ T7788] input: syz0 as /devices/virtual/input/input12 [ 329.017167][ T7807] binder: 7806:7807 ioctl c0306201 200000000540 returned -22 [ 329.032971][ T7807] binder: 7806:7807 ioctl c0306201 200000000640 returned -22 [ 329.416125][ T7813] syz.4.548 (7813): drop_caches: 2 [ 329.497681][ T7811] netlink: 8 bytes leftover after parsing attributes in process `syz.1.547'. [ 331.091755][ T7811] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 331.117478][ T7811] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 331.126475][ T7811] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 331.133791][ T7811] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 332.629694][ T5832] Bluetooth: hci2: command 0x0406 tx timeout [ 333.189818][ T5832] Bluetooth: hci4: command 0x0406 tx timeout [ 333.195974][ T5832] Bluetooth: hci3: command 0x0406 tx timeout [ 333.202139][ T5830] Bluetooth: hci1: command 0x0406 tx timeout [ 334.060174][ T7829] netlink: 'syz.1.551': attribute type 4 has an invalid length. [ 334.073317][ T7829] netlink: 'syz.1.551': attribute type 4 has an invalid length. [ 334.857809][ T7829] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 338.944737][ T7868] 9pnet_fd: Insufficient options for proto=fd [ 338.957555][ T7868] siw: device registration error -23 [ 340.103229][ T5900] usb 2-1: new high-speed USB device number 17 using dummy_hcd [ 340.271802][ T5900] usb 2-1: config 27 has an invalid descriptor of length 0, skipping remainder of the config [ 340.315983][ T5900] usb 2-1: config 27 has 0 interfaces, different from the descriptor's value: 1 [ 340.363044][ T5900] usb 2-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 340.423738][ T5900] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 340.724702][ T5900] usb 2-1: USB disconnect, device number 17 [ 341.414262][ T51] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 341.426309][ T51] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 341.434854][ T51] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 341.446187][ T51] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 341.467879][ T51] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 341.704075][ T7885] lo speed is unknown, defaulting to 1000 [ 343.499854][ T51] Bluetooth: hci4: command tx timeout [ 344.646862][ T7909] input: syz0 as /devices/virtual/input/input15 [ 345.160119][ T7917] kvm: kvm [7916]: vcpu0, guest rIP: 0x18e Unhandled WRMSR(0x186) = 0x80 [ 345.372910][ T1154] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 345.433698][ T7885] chnl_net:caif_netlink_parms(): no params data found [ 345.620485][ T51] Bluetooth: hci4: command tx timeout [ 345.926470][ T7921] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 346.118455][ T1154] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 347.187455][ T1154] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 348.139823][ T51] Bluetooth: hci4: command tx timeout [ 350.135470][ T1154] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 350.187005][ T7885] bridge0: port 1(bridge_slave_0) entered blocking state [ 350.195298][ T7885] bridge0: port 1(bridge_slave_0) entered disabled state [ 350.220299][ T51] Bluetooth: hci4: command tx timeout [ 350.263690][ T7885] bridge_slave_0: entered allmulticast mode [ 350.291992][ T7885] bridge_slave_0: entered promiscuous mode [ 350.347227][ T7885] bridge0: port 2(bridge_slave_1) entered blocking state [ 350.366594][ T7885] bridge0: port 2(bridge_slave_1) entered disabled state [ 350.395351][ T7885] bridge_slave_1: entered allmulticast mode [ 350.418530][ T7885] bridge_slave_1: entered promiscuous mode [ 350.530913][ T7967] netlink: 'syz.4.591': attribute type 4 has an invalid length. [ 350.594654][ T7968] netlink: 'syz.4.591': attribute type 4 has an invalid length. [ 350.855766][ T7970] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 351.481329][ T7885] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 352.541923][ T7885] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 354.054622][ T7885] team0: Port device team_slave_0 added [ 354.184215][ T7885] team0: Port device team_slave_1 added [ 354.253623][ T1154] bridge_slave_1: left allmulticast mode [ 354.347348][ T1154] bridge_slave_1: left promiscuous mode [ 354.355881][ T1154] bridge0: port 2(bridge_slave_1) entered disabled state [ 354.377480][ T1154] bridge_slave_0: left allmulticast mode [ 354.383642][ T1154] bridge_slave_0: left promiscuous mode [ 354.389605][ T1154] bridge0: port 1(bridge_slave_0) entered disabled state [ 356.593494][ T1154] bridge0 (unregistering): left promiscuous mode [ 356.779687][ T43] usb 3-1: new high-speed USB device number 34 using dummy_hcd [ 357.226344][ T1154] bond0 (unregistering): left promiscuous mode [ 357.236817][ T1154] bond_slave_0: left promiscuous mode [ 357.254981][ T8014] xt_hashlimit: size too large, truncated to 1048576 [ 357.283879][ T43] usb 3-1: Using ep0 maxpacket: 8 [ 357.311149][ T8016] netlink: 'syz.1.604': attribute type 33 has an invalid length. [ 357.339894][ T8016] netlink: 152 bytes leftover after parsing attributes in process `syz.1.604'. [ 357.356666][ T1154] bond_slave_1: left promiscuous mode [ 357.390306][ T43] usb 3-1: New USB device found, idVendor=1557, idProduct=7720, bcdDevice=b7.eb [ 357.413826][ T43] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 357.442363][ T1154] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 357.444920][ T43] usb 3-1: config 0 descriptor?? [ 357.544511][ T1154] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 357.565957][ T1154] bond0 (unregistering): Released all slaves [ 357.693525][ T43] asix 3-1:0.0 (unnamed net_device) (uninitialized): Failed to read reg index 0x0000: -32 [ 357.784343][ T43] asix 3-1:0.0: probe with driver asix failed with error -32 [ 357.816698][ T8005] tipc: Started in network mode [ 357.822413][ T8005] tipc: Node identity 4, cluster identity 4711 [ 357.844977][ T8005] tipc: Node number set to 4 [ 357.879918][ T7885] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 358.031667][ T7885] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 358.109806][ T7885] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 358.124750][ T1154] tipc: Left network mode [ 358.282483][ T7885] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 358.341268][ T7885] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 358.586186][ T7885] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 359.980275][ T5461] usb 3-1: USB disconnect, device number 34 [ 360.199388][ T7885] hsr_slave_0: entered promiscuous mode [ 360.215243][ T7885] hsr_slave_1: entered promiscuous mode [ 360.229080][ T7885] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 360.255951][ T7885] Cannot create hsr debugfs directory [ 360.309150][ T1154] hsr_slave_0: left promiscuous mode [ 360.327583][ T1154] hsr_slave_1: left promiscuous mode [ 360.417279][ T1154] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 360.454404][ T1154] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 360.572282][ T8038] netlink: 'syz.2.610': attribute type 4 has an invalid length. [ 360.805025][ T8040] netlink: 'syz.2.610': attribute type 4 has an invalid length. [ 360.828962][ T8041] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 361.024906][ T1154] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 361.073662][ T1154] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 361.235554][ T1154] veth1_macvtap: left promiscuous mode [ 361.255686][ T1154] veth0_macvtap: left promiscuous mode [ 361.281770][ T1154] veth1_vlan: left promiscuous mode [ 361.327523][ T1154] veth0_vlan: left promiscuous mode [ 363.179876][ T8068] netlink: 'syz.0.616': attribute type 4 has an invalid length. [ 363.308575][ T8069] netlink: 'syz.0.616': attribute type 4 has an invalid length. [ 363.638496][ T8065] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 364.322384][ T1154] team0 (unregistering): Port device team_slave_1 removed [ 364.423841][ T1154] team0 (unregistering): Port device team_slave_0 removed [ 365.017507][ T8080] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 366.133647][ T5951] lo speed is unknown, defaulting to 1000 [ 366.188711][ T5951] syz0: Port: 1 Link ACTIVE [ 366.226657][ T43] usb 2-1: new high-speed USB device number 18 using dummy_hcd [ 366.559834][ T43] usb 2-1: Using ep0 maxpacket: 8 [ 366.589230][ T43] usb 2-1: New USB device found, idVendor=1557, idProduct=7720, bcdDevice=b7.eb [ 366.608875][ T43] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 366.790994][ T43] usb 2-1: config 0 descriptor?? [ 367.245811][ T43] asix 2-1:0.0 (unnamed net_device) (uninitialized): Failed to read reg index 0x0000: -32 [ 367.337399][ T43] asix 2-1:0.0 (unnamed net_device) (uninitialized): Error reading PHY_ID register: ffffffe0 [ 367.556223][ T43] asix 2-1:0.0: probe with driver asix failed with error -32 [ 367.940338][ T7885] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 368.003898][ T7885] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 368.149353][ T7885] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 368.493470][ T7885] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 369.451053][ T5934] usb 2-1: USB disconnect, device number 18 [ 369.974315][ T7885] 8021q: adding VLAN 0 to HW filter on device bond0 [ 370.015181][ T7885] 8021q: adding VLAN 0 to HW filter on device team0 [ 370.314741][ T1154] bridge0: port 1(bridge_slave_0) entered blocking state [ 370.322978][ T1154] bridge0: port 1(bridge_slave_0) entered forwarding state [ 370.661228][ T8136] netlink: 'syz.1.628': attribute type 4 has an invalid length. [ 370.886463][ T60] bridge0: port 2(bridge_slave_1) entered blocking state [ 370.893714][ T60] bridge0: port 2(bridge_slave_1) entered forwarding state [ 370.954230][ T8142] netlink: 'syz.0.629': attribute type 4 has an invalid length. [ 371.021273][ T8138] netlink: 'syz.0.629': attribute type 4 has an invalid length. [ 371.060956][ T5934] lo speed is unknown, defaulting to 1000 [ 371.104552][ T43] lo speed is unknown, defaulting to 1000 [ 371.112413][ T8131] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 371.256356][ T7885] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 373.030352][ T43] usb 5-1: new high-speed USB device number 21 using dummy_hcd [ 373.380695][ T43] usb 5-1: Using ep0 maxpacket: 8 [ 373.380818][ T8170] netlink: 'syz.2.633': attribute type 4 has an invalid length. [ 373.487291][ T43] usb 5-1: config index 0 descriptor too short (expected 301, got 45) [ 373.597590][ T43] usb 5-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 373.739682][ T43] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 373.876912][ T8161] netlink: 'syz.2.633': attribute type 4 has an invalid length. [ 373.893317][ T43] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 373.905332][ T8161] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 373.929820][ T43] usb 5-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 373.941992][ T7885] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 373.959889][ T43] usb 5-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 373.997200][ T43] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 374.855697][ T43] usb 5-1: usb_control_msg returned -71 [ 374.904673][ T43] usbtmc 5-1:16.0: can't read capabilities [ 374.940541][ T5951] usb 2-1: new high-speed USB device number 19 using dummy_hcd [ 374.957657][ T43] usb 5-1: USB disconnect, device number 21 [ 375.099802][ T5951] usb 2-1: Using ep0 maxpacket: 8 [ 375.315903][ T5951] usb 2-1: New USB device found, idVendor=1557, idProduct=7720, bcdDevice=b7.eb [ 375.337719][ T5951] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 375.357861][ T5951] usb 2-1: config 0 descriptor?? [ 375.463813][ T8190] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 376.281639][ T5951] asix 2-1:0.0 (unnamed net_device) (uninitialized): Failed to read reg index 0x0000: -32 [ 376.371633][ T8186] netlink: 'syz.0.638': attribute type 4 has an invalid length. [ 376.469459][ T5934] lo speed is unknown, defaulting to 1000 [ 376.646068][ T8198] netlink: 'syz.0.638': attribute type 4 has an invalid length. [ 376.659625][ T5951] asix 2-1:0.0 (unnamed net_device) (uninitialized): Error reading PHY_ID register: ffffffe0 [ 376.671700][ T5934] syz0: Port: 1 Link DOWN [ 376.686054][ T5951] asix 2-1:0.0: probe with driver asix failed with error -32 [ 376.787126][ T5934] lo speed is unknown, defaulting to 1000 [ 376.807165][ T5934] syz0: Port: 1 Link ACTIVE [ 376.968256][ T8182] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 377.019484][ T7885] veth0_vlan: entered promiscuous mode [ 377.063121][ T7885] veth1_vlan: entered promiscuous mode [ 377.740429][ T8210] syz.2.641 (8210): drop_caches: 2 [ 378.482110][ T7885] veth0_macvtap: entered promiscuous mode [ 378.579681][ T5870] usb 2-1: USB disconnect, device number 19 [ 378.613119][ T7885] veth1_macvtap: entered promiscuous mode [ 378.805174][ T1301] ieee802154 phy0 wpan0: encryption failed: -22 [ 378.812052][ T1301] ieee802154 phy1 wpan1: encryption failed: -22 [ 378.878165][ T7885] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 378.892711][ T7885] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 378.903955][ T7885] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 378.912877][ T7885] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 379.149808][ T5870] usb 2-1: new high-speed USB device number 20 using dummy_hcd [ 379.316373][ T7885] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 379.602819][ T7885] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 379.614682][ T5870] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 379.657835][ T5870] usb 2-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 379.772383][ T5870] usb 2-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 379.793539][ T5870] usb 2-1: Product: syz [ 379.799663][ T5870] usb 2-1: Manufacturer: syz [ 379.804176][ T8230] Zero length message leads to an empty skb [ 379.826151][ T8223] Bluetooth: MGMT ver 1.23 [ 379.834447][ T5870] usb 2-1: SerialNumber: syz [ 379.865229][ T5870] usb 2-1: config 0 descriptor?? [ 379.987883][ T5870] snd-usb-audio 2-1:0.0: probe with driver snd-usb-audio failed with error -22 [ 380.375701][ T60] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 380.388666][ T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 380.407767][ T60] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 380.472261][ T8239] netlink: 'syz.1.644': attribute type 1 has an invalid length. [ 381.075253][ T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 381.182813][ T7873] udevd[7873]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 381.566636][ T8246] random: crng reseeded on system resumption [ 382.594317][ T5951] usb 2-1: USB disconnect, device number 20 [ 383.060047][ T3079] usb 6-1: new high-speed USB device number 2 using dummy_hcd [ 383.459955][ T3079] usb 6-1: Using ep0 maxpacket: 32 [ 383.506322][ T3079] usb 6-1: unable to get BOS descriptor or descriptor too short [ 383.566771][ T3079] usb 6-1: config 128 has an invalid interface number: 127 but max is 3 [ 383.639742][ T3079] usb 6-1: config 128 has an invalid descriptor of length 0, skipping remainder of the config [ 383.726504][ T3079] usb 6-1: config 128 has 1 interface, different from the descriptor's value: 4 [ 383.894558][ T3079] usb 6-1: config 128 has no interface number 0 [ 384.080549][ T3079] usb 6-1: config 128 interface 127 altsetting 14 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 385.931122][ T3079] usb 6-1: config 128 interface 127 has no altsetting 0 [ 385.939461][ T3079] usb 6-1: string descriptor 0 read error: -71 [ 385.946118][ T3079] usb 6-1: New USB device found, idVendor=0582, idProduct=295c, bcdDevice=d4.55 [ 385.955368][ T3079] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 386.029795][ T3079] usb 6-1: can't set config #128, error -71 [ 386.052833][ T3079] usb 6-1: USB disconnect, device number 2 [ 386.274980][ T8281] syz.2.652 (8281): drop_caches: 2 [ 387.486402][ T8287] netlink: 20 bytes leftover after parsing attributes in process `syz.0.654'. [ 388.188065][ T3079] usb 6-1: new high-speed USB device number 3 using dummy_hcd [ 388.519813][ T3079] usb 6-1: Using ep0 maxpacket: 8 [ 388.547722][ T3079] usb 6-1: New USB device found, idVendor=1557, idProduct=7720, bcdDevice=b7.eb [ 389.271653][ T3079] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 389.343993][ T3079] usb 6-1: config 0 descriptor?? [ 389.390051][ T3079] usb 6-1: can't set config #0, error -71 [ 389.426160][ T3079] usb 6-1: USB disconnect, device number 3 [ 391.243179][ T8325] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 392.010169][ T8326] netlink: 'syz.4.662': attribute type 4 has an invalid length. [ 392.212100][ T8327] netlink: 'syz.4.662': attribute type 4 has an invalid length. [ 392.889762][ T5911] usb 3-1: new high-speed USB device number 35 using dummy_hcd [ 392.932662][ T8317] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 393.103254][ T5911] usb 3-1: Using ep0 maxpacket: 32 [ 393.158673][ T5911] usb 3-1: unable to get BOS descriptor or descriptor too short [ 393.222393][ T5911] usb 3-1: config 128 has an invalid interface number: 127 but max is 3 [ 393.222439][ T5911] usb 3-1: config 128 has an invalid descriptor of length 0, skipping remainder of the config [ 393.222461][ T5911] usb 3-1: config 128 has 1 interface, different from the descriptor's value: 4 [ 393.222515][ T5911] usb 3-1: config 128 has no interface number 0 [ 393.222718][ T5911] usb 3-1: config 128 interface 127 altsetting 14 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 393.222761][ T5911] usb 3-1: config 128 interface 127 has no altsetting 0 [ 393.307663][ T5911] usb 3-1: New USB device found, idVendor=0582, idProduct=295c, bcdDevice=d4.55 [ 393.307743][ T5911] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 393.307800][ T5911] usb 3-1: Product: syz [ 393.307851][ T5911] usb 3-1: Manufacturer: syz [ 393.307902][ T5911] usb 3-1: SerialNumber: syz [ 394.208527][ T5911] usb 3-1: can't set config #128, error -71 [ 394.237256][ T5911] usb 3-1: USB disconnect, device number 35 [ 395.991249][ T8361] netlink: 'syz.0.669': attribute type 4 has an invalid length. [ 396.105976][ T8361] netlink: 'syz.0.669': attribute type 4 has an invalid length. [ 396.233445][ T8361] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 396.450740][ T5900] lo speed is unknown, defaulting to 1000 [ 396.807707][ T5900] lo speed is unknown, defaulting to 1000 [ 399.848102][ T8381] syz.2.676 (8381): drop_caches: 2 [ 401.644480][ T8391] input: syz1 as /devices/virtual/input/input19 [ 401.795733][ T8390] xt_hashlimit: size too large, truncated to 1048576 [ 401.850689][ T8388] netlink: 'syz.4.677': attribute type 33 has an invalid length. [ 401.858533][ T8388] netlink: 152 bytes leftover after parsing attributes in process `syz.4.677'. [ 405.596822][ T8427] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 407.603015][ T8423] netlink: 'syz.0.687': attribute type 4 has an invalid length. [ 407.615105][ T5886] lo speed is unknown, defaulting to 1000 [ 407.649601][ T5886] syz0: Port: 1 Link DOWN [ 407.823651][ T5886] usb 6-1: new high-speed USB device number 4 using dummy_hcd [ 408.147110][ T5886] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 408.249112][ T5886] usb 6-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 408.291484][ T5886] usb 6-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 408.563561][ T8450] overlayfs: missing 'lowerdir' [ 409.229666][ T5886] usb 6-1: Product: syz [ 409.264665][ T5886] usb 6-1: Manufacturer: syz [ 409.269352][ T5886] usb 6-1: SerialNumber: syz [ 409.538167][ T5886] usb 6-1: config 0 descriptor?? [ 410.321784][ T8465] netlink: 'syz.5.689': attribute type 1 has an invalid length. [ 411.128939][ T8448] netlink: 'syz.2.691': attribute type 4 has an invalid length. [ 411.227060][ T5886] snd-usb-audio 6-1:0.0: probe with driver snd-usb-audio failed with error -22 [ 411.447766][ T8471] 9pnet_fd: Insufficient options for proto=fd [ 412.037394][ T5886] usb 6-1: USB disconnect, device number 4 [ 412.087127][ T7873] udevd[7873]: error opening ATTR{/sys/devices/platform/dummy_hcd.5/usb6/6-1/6-1:0.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 413.859709][ T5886] usb 6-1: new high-speed USB device number 5 using dummy_hcd [ 413.938103][ T8491] netlink: 16402 bytes leftover after parsing attributes in process `syz.0.699'. [ 413.991637][ T8490] netlink: 16402 bytes leftover after parsing attributes in process `syz.0.699'. [ 414.049481][ T5886] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 414.119047][ T5886] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 414.139361][ T5886] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 414.196520][ T5886] usb 6-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 414.228853][ T5886] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 414.772434][ T5886] usb 6-1: config 0 descriptor?? [ 415.620170][ T5886] usbhid 6-1:0.0: can't add hid device: -71 [ 415.626275][ T5886] usbhid 6-1:0.0: probe with driver usbhid failed with error -71 [ 415.799164][ T8521] overlayfs: missing 'lowerdir' [ 416.652603][ T5886] usb 6-1: USB disconnect, device number 5 [ 419.822466][ T8536] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 424.574778][ T8578] overlayfs: missing 'lowerdir' [ 425.515349][ T5900] usb 3-1: new high-speed USB device number 36 using dummy_hcd [ 425.620071][ T8591] No such timeout policy "syz0" [ 425.682477][ T5900] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 425.738621][ T5900] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 425.776196][ T5900] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 425.829189][ T5900] usb 3-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 425.865421][ T5900] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 426.567427][ T5900] usb 3-1: config 0 descriptor?? [ 426.969951][ T8602] netlink: 16402 bytes leftover after parsing attributes in process `syz.5.723'. [ 426.992236][ T8600] netlink: 16402 bytes leftover after parsing attributes in process `syz.5.723'. [ 427.284407][ T5900] usbhid 3-1:0.0: can't add hid device: -71 [ 427.326601][ T5900] usbhid 3-1:0.0: probe with driver usbhid failed with error -71 [ 429.415111][ T5900] usb 3-1: USB disconnect, device number 36 [ 431.237875][ T8623] tty tty4: ldisc open failed (-12), clearing slot 3 [ 434.343544][ T5900] usb 6-1: new high-speed USB device number 6 using dummy_hcd [ 434.799659][ T5900] usb 6-1: Using ep0 maxpacket: 32 [ 434.862146][ T5900] usb 6-1: unable to get BOS descriptor or descriptor too short [ 434.909844][ T5900] usb 6-1: config 128 has an invalid interface number: 127 but max is 3 [ 434.938715][ T5900] usb 6-1: config 128 has an invalid descriptor of length 0, skipping remainder of the config [ 434.997373][ T5900] usb 6-1: config 128 has 1 interface, different from the descriptor's value: 4 [ 435.060458][ T5900] usb 6-1: config 128 has no interface number 0 [ 435.073448][ T5900] usb 6-1: config 128 interface 127 altsetting 14 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 435.135357][ T5900] usb 6-1: config 128 interface 127 has no altsetting 0 [ 435.344496][ T5900] usb 6-1: New USB device found, idVendor=0582, idProduct=295c, bcdDevice=d4.55 [ 435.378116][ T5900] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 435.389064][ T5900] usb 6-1: Product: syz [ 435.396379][ T5900] usb 6-1: Manufacturer: syz [ 435.408142][ T5900] usb 6-1: SerialNumber: syz [ 435.666008][ T8647] netlink: 'syz.2.733': attribute type 4 has an invalid length. [ 435.699720][ T8647] netlink: 'syz.2.733': attribute type 4 has an invalid length. [ 436.095295][ T5900] usb 6-1: USB disconnect, device number 6 [ 436.134744][ T7873] udevd[7873]: error opening ATTR{/sys/devices/platform/dummy_hcd.5/usb6/6-1/6-1:128.127/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 436.173479][ T8642] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 437.781472][ T8659] No such timeout policy "syz0" [ 440.149292][ T8677] netlink: 'syz.4.740': attribute type 4 has an invalid length. [ 440.254758][ T1301] ieee802154 phy0 wpan0: encryption failed: -22 [ 440.255717][ T8677] netlink: 'syz.4.740': attribute type 4 has an invalid length. [ 440.275940][ T1301] ieee802154 phy1 wpan1: encryption failed: -22 [ 440.300993][ T8677] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 441.138153][ T8683] syz.5.741 (8683): drop_caches: 2 [ 443.633582][ T5900] usb 5-1: new high-speed USB device number 22 using dummy_hcd [ 443.843179][ T5900] usb 5-1: Using ep0 maxpacket: 32 [ 443.881661][ T5900] usb 5-1: unable to get BOS descriptor or descriptor too short [ 443.915123][ T5900] usb 5-1: config 128 has an invalid interface number: 127 but max is 3 [ 443.939665][ T5900] usb 5-1: config 128 has an invalid descriptor of length 0, skipping remainder of the config [ 443.969689][ T5900] usb 5-1: config 128 has 1 interface, different from the descriptor's value: 4 [ 443.978905][ T5900] usb 5-1: config 128 has no interface number 0 [ 444.043472][ T5900] usb 5-1: config 128 interface 127 altsetting 14 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 444.085361][ T5900] usb 5-1: config 128 interface 127 has no altsetting 0 [ 444.168543][ T5900] usb 5-1: New USB device found, idVendor=0582, idProduct=295c, bcdDevice=d4.55 [ 444.468251][ T5900] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 444.661130][ T5900] usb 5-1: Product: syz [ 444.684371][ T5900] usb 5-1: Manufacturer: syz [ 444.785765][ T5900] usb 5-1: SerialNumber: syz [ 445.675888][ T8724] No such timeout policy "syz0" [ 447.641370][ T5900] usb 5-1: USB disconnect, device number 22 [ 447.698105][ T8736] syz.1.753 uses obsolete (PF_INET,SOCK_PACKET) [ 448.008818][ T8746] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 448.619017][ T7873] udevd[7873]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:128.127/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 452.176392][ T8770] lo speed is unknown, defaulting to 1000 [ 455.662250][ T8788] netlink: 16402 bytes leftover after parsing attributes in process `syz.2.763'. [ 455.905397][ T8791] vhci_hcd vhci_hcd.0: pdev(0) rhport(0) sockfd(9) [ 455.912118][ T8791] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 455.973186][ T8802] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 456.545390][ T8791] vhci_hcd vhci_hcd.0: Device attached [ 457.157891][ T5900] usb 33-1: new low-speed USB device number 2 using vhci_hcd [ 457.159065][ T5934] usb 1-1: new high-speed USB device number 23 using dummy_hcd [ 457.769714][ T5934] usb 1-1: Using ep0 maxpacket: 16 [ 457.869894][ T5951] usb 2-1: new high-speed USB device number 21 using dummy_hcd [ 458.361623][ T5934] usb 1-1: device descriptor read/all, error -71 [ 458.377749][ T8799] vhci_hcd: connection reset by peer [ 458.444905][ T3016] vhci_hcd: stop threads [ 458.470219][ T5951] usb 2-1: Using ep0 maxpacket: 32 [ 458.479956][ T3016] vhci_hcd: release socket [ 458.488543][ T3016] vhci_hcd: disconnect device [ 458.504184][ T5951] usb 2-1: unable to get BOS descriptor or descriptor too short [ 458.515858][ T5951] usb 2-1: config 128 has an invalid interface number: 127 but max is 3 [ 458.529010][ T5951] usb 2-1: config 128 has an invalid descriptor of length 0, skipping remainder of the config [ 458.575266][ T5951] usb 2-1: config 128 has 1 interface, different from the descriptor's value: 4 [ 459.305878][ T8821] syz.5.769 (8821): drop_caches: 2 [ 459.701243][ T5951] usb 2-1: config 128 has no interface number 0 [ 459.707623][ T5951] usb 2-1: config 128 interface 127 altsetting 14 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 459.721078][ T5951] usb 2-1: config 128 interface 127 has no altsetting 0 [ 459.771442][ T5951] usb 2-1: string descriptor 0 read error: -71 [ 459.799694][ T5951] usb 2-1: New USB device found, idVendor=0582, idProduct=295c, bcdDevice=d4.55 [ 459.842003][ T5951] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 459.949721][ T5951] usb 2-1: can't set config #128, error -71 [ 460.002161][ T5951] usb 2-1: USB disconnect, device number 21 [ 460.319698][ T8834] netlink: 'syz.4.770': attribute type 4 has an invalid length. [ 460.520356][ T5911] usb 3-1: new high-speed USB device number 37 using dummy_hcd [ 460.541548][ T8836] netlink: 'syz.4.770': attribute type 4 has an invalid length. [ 461.074818][ T5911] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 461.585441][ T5911] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 461.626709][ T5911] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 461.661022][ T5911] usb 3-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 461.826314][ T5911] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 461.885277][ T5911] usb 3-1: config 0 descriptor?? [ 462.289735][ T5900] vhci_hcd: vhci_device speed not set [ 462.830531][ T5911] usbhid 3-1:0.0: can't add hid device: -71 [ 462.839324][ T5911] usbhid 3-1:0.0: probe with driver usbhid failed with error -71 [ 462.894172][ T5911] usb 3-1: USB disconnect, device number 37 [ 466.254280][ T8865] netlink: 'syz.0.778': attribute type 4 has an invalid length. [ 466.383212][ T5900] usb 5-1: new high-speed USB device number 23 using dummy_hcd [ 466.597526][ T5900] usb 5-1: Using ep0 maxpacket: 32 [ 466.694121][ T5900] usb 5-1: unable to get BOS descriptor or descriptor too short [ 466.938998][ T5900] usb 5-1: config 128 has an invalid interface number: 127 but max is 3 [ 466.980385][ T5900] usb 5-1: config 128 has an invalid descriptor of length 0, skipping remainder of the config [ 467.051401][ T5900] usb 5-1: config 128 has 1 interface, different from the descriptor's value: 4 [ 467.078030][ T5900] usb 5-1: config 128 has no interface number 0 [ 467.088170][ T5900] usb 5-1: config 128 interface 127 altsetting 14 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 467.168437][ T8885] netlink: 'syz.1.782': attribute type 4 has an invalid length. [ 467.233648][ T5900] usb 5-1: config 128 interface 127 has no altsetting 0 [ 467.414596][ T8885] netlink: 'syz.1.782': attribute type 4 has an invalid length. [ 467.756883][ T5900] usb 5-1: New USB device found, idVendor=0582, idProduct=295c, bcdDevice=d4.55 [ 467.806374][ T5900] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 467.821750][ T5900] usb 5-1: Product: syz [ 467.826558][ T5900] usb 5-1: Manufacturer: syz [ 467.830910][ T8882] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 467.868607][ T5900] usb 5-1: SerialNumber: syz [ 468.246187][ T5900] usb 5-1: USB disconnect, device number 23 [ 468.378886][ T7873] udevd[7873]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:128.127/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 468.874081][ T8895] random: crng reseeded on system resumption [ 471.429666][ T5900] usb 1-1: new full-speed USB device number 25 using dummy_hcd [ 471.622002][ T5900] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 471.689416][ T5900] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 471.746220][ T5900] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a5, bcdDevice= 0.40 [ 471.778459][ T5900] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 471.825597][ T5900] usb 1-1: SerialNumber: syz [ 472.421380][ T5900] cdc_ether 1-1:1.0: probe with driver cdc_ether failed with error -22 [ 472.485545][ T5900] usb-storage 1-1:1.0: USB Mass Storage device detected [ 472.552661][ T5900] usb-storage 1-1:1.0: Quirks match for vid 0525 pid a4a5: 10000 [ 472.589590][ T5934] usb 3-1: new high-speed USB device number 38 using dummy_hcd [ 472.795747][ T5900] scsi host1: usb-storage 1-1:1.0 [ 473.911212][ T5934] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 473.949846][ T5934] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 476.180728][ T5900] usb 5-1: new high-speed USB device number 24 using dummy_hcd [ 476.479665][ T5934] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 476.575866][ T5934] usb 3-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 476.848638][ T5900] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 477.039622][ T5951] usb 2-1: new high-speed USB device number 22 using dummy_hcd [ 477.059576][ T5934] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 477.092150][ T5900] usb 5-1: config 0 has no interfaces? [ 477.116797][ T5934] usb 3-1: config 0 descriptor?? [ 477.133924][ T5934] usb 3-1: can't set config #0, error -71 [ 477.143466][ T5900] usb 5-1: string descriptor 0 read error: -71 [ 477.194936][ T5900] usb 5-1: New USB device found, idVendor=0fc5, idProduct=1227, bcdDevice=da.8e [ 477.211670][ T5934] usb 3-1: USB disconnect, device number 38 [ 477.253682][ T5900] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 477.269739][ T5951] usb 2-1: Using ep0 maxpacket: 32 [ 477.297792][ T5951] usb 2-1: unable to get BOS descriptor or descriptor too short [ 477.321901][ T5900] usb 5-1: config 0 descriptor?? [ 477.345659][ T5951] usb 2-1: config 128 has an invalid interface number: 127 but max is 3 [ 477.364472][ T5900] usb 5-1: can't set config #0, error -71 [ 477.410866][ T5951] usb 2-1: config 128 has an invalid descriptor of length 0, skipping remainder of the config [ 477.426595][ T5900] usb 5-1: USB disconnect, device number 24 [ 477.640771][ T5911] usb 1-1: USB disconnect, device number 25 [ 477.656055][ T5951] usb 2-1: config 128 has 1 interface, different from the descriptor's value: 4 [ 477.673659][ T5951] usb 2-1: config 128 has no interface number 0 [ 477.680078][ T5951] usb 2-1: config 128 interface 127 altsetting 14 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 477.693667][ T5951] usb 2-1: config 128 interface 127 has no altsetting 0 [ 478.481820][ T8950] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 478.489177][ T5951] usb 2-1: string descriptor 0 read error: -71 [ 478.500214][ T8950] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 478.539964][ T5951] usb 2-1: New USB device found, idVendor=0582, idProduct=295c, bcdDevice=d4.55 [ 478.549088][ T5951] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 478.585689][ T8950] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 478.620635][ T8950] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 478.631348][ T8950] Bluetooth: hci4: Opcode 0x0406 failed: -4 [ 478.685271][ T5951] usb 2-1: can't set config #128, error -71 [ 478.698256][ T8950] Bluetooth: hci4: Opcode 0x0406 failed: -4 [ 478.719786][ T5951] usb 2-1: USB disconnect, device number 22 [ 478.799773][ T5911] usb 1-1: new high-speed USB device number 26 using dummy_hcd [ 479.001599][ T5911] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 479.027344][ T5911] usb 1-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 479.236707][ T8967] netlink: 'syz.4.799': attribute type 4 has an invalid length. [ 479.269088][ T5911] usb 1-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 479.329561][ T5911] usb 1-1: Product: syz [ 479.347160][ T5911] usb 1-1: Manufacturer: syz [ 479.368370][ T8972] netlink: 'syz.4.799': attribute type 4 has an invalid length. [ 479.382767][ T5911] usb 1-1: SerialNumber: syz [ 479.420404][ T51] Bluetooth: hci2: command 0x0406 tx timeout [ 479.448586][ T5911] usb 1-1: config 0 descriptor?? [ 479.583866][ T5911] snd-usb-audio 1-1:0.0: probe with driver snd-usb-audio failed with error -22 [ 479.740204][ T8962] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 479.832902][ T7873] udevd[7873]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 480.258239][ T8983] netlink: 'syz.0.795': attribute type 1 has an invalid length. [ 480.539897][ T51] Bluetooth: hci1: command 0x0406 tx timeout [ 480.620916][ T51] Bluetooth: hci3: command 0x0406 tx timeout [ 480.699927][ T51] Bluetooth: hci4: command 0x0c1a tx timeout [ 481.129971][ T8990] netlink: 16402 bytes leftover after parsing attributes in process `syz.2.805'. [ 481.690566][ T5461] usb 1-1: USB disconnect, device number 26 [ 482.714942][ T5900] usb 2-1: new high-speed USB device number 23 using dummy_hcd [ 482.858691][ T51] Bluetooth: hci4: command 0x0c1a tx timeout [ 483.783903][ T5900] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 483.796113][ T5900] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 483.806639][ T5900] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 484.644769][ T5900] usb 2-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 484.721686][ T5900] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 484.796602][ T5900] usb 2-1: config 0 descriptor?? [ 484.962341][ T5832] Bluetooth: hci4: command 0x0c1a tx timeout [ 485.220489][ T5900] usb 2-1: can't set config #0, error -71 [ 485.270568][ T5900] usb 2-1: USB disconnect, device number 23 [ 485.625598][ T5986] usb 6-1: new high-speed USB device number 7 using dummy_hcd [ 486.101634][ T5986] usb 6-1: Using ep0 maxpacket: 16 [ 486.108534][ T5986] usb 6-1: config 1 contains an unexpected descriptor of type 0x1, skipping [ 486.355656][ T5986] usb 6-1: config 1 has an invalid descriptor of length 1, skipping remainder of the config [ 486.367549][ T5986] usb 6-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 486.405885][ T5986] usb 6-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 486.418988][ T5986] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 486.464219][ T5986] usb 6-1: Product: syz [ 486.486694][ T5986] usb 6-1: Manufacturer: syz [ 486.501741][ T5986] usb 6-1: SerialNumber: syz [ 486.534515][ T9030] netlink: 'syz.0.810': attribute type 4 has an invalid length. [ 486.926824][ T5986] usb 6-1: 0:2 : does not exist [ 487.019759][ T51] Bluetooth: hci4: command 0x0c1a tx timeout [ 488.483498][ T5461] usb 6-1: USB disconnect, device number 7 [ 490.762734][ T9077] 9pnet_fd: Insufficient options for proto=fd [ 490.781694][ T9077] siw: device registration error -23 [ 494.000675][ T9102] netlink: 'syz.0.830': attribute type 4 has an invalid length. [ 494.073159][ T5934] lo speed is unknown, defaulting to 1000 [ 494.109749][ T5934] syz0: Port: 1 Link ACTIVE [ 494.767318][ T9112] syz.0.832 (9112): drop_caches: 2 [ 500.690097][ T9151] netlink: 'syz.0.842': attribute type 4 has an invalid length. [ 501.171933][ T9156] lo speed is unknown, defaulting to 1000 [ 501.730133][ T1301] ieee802154 phy0 wpan0: encryption failed: -22 [ 501.736535][ T1301] ieee802154 phy1 wpan1: encryption failed: -22 [ 501.969458][ T9147] vhci_hcd vhci_hcd.0: pdev(2) rhport(0) sockfd(9) [ 501.976059][ T9147] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 502.065875][ T9147] vhci_hcd vhci_hcd.0: Device attached [ 502.329592][ T5900] usb 6-1: new high-speed USB device number 8 using dummy_hcd [ 502.339612][ T5934] usb 3-1: new high-speed USB device number 39 using dummy_hcd [ 502.376817][ T5986] usb 37-1: new low-speed USB device number 2 using vhci_hcd [ 503.110353][ T9160] vhci_hcd: connection reset by peer [ 503.137453][ T4415] vhci_hcd: stop threads [ 503.219629][ T4415] vhci_hcd: release socket [ 503.251783][ T4415] vhci_hcd: disconnect device [ 503.289272][ T5900] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 503.362382][ T5900] usb 6-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 503.895161][ T5900] usb 6-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 504.010846][ T9182] netlink: zone id is out of range [ 504.022620][ T9182] netlink: zone id is out of range [ 504.030672][ T9182] netlink: zone id is out of range [ 504.040104][ T9182] netlink: zone id is out of range [ 504.049440][ T9182] netlink: zone id is out of range [ 504.054822][ T9182] netlink: zone id is out of range [ 504.073825][ T5900] usb 6-1: Product: syz [ 504.152537][ T5900] usb 6-1: Manufacturer: syz [ 504.251780][ T9182] netlink: set zone limit has 4 unknown bytes [ 504.551995][ T5900] usb 6-1: SerialNumber: syz [ 505.134496][ T5900] usb 6-1: config 0 descriptor?? [ 505.299794][ T5900] usb 6-1: can't set config #0, error -71 [ 505.333327][ T5900] usb 6-1: USB disconnect, device number 8 [ 508.449874][ T5986] vhci_hcd: vhci_device speed not set [ 509.041403][ T9204] netlink: 20 bytes leftover after parsing attributes in process `syz.5.852'. [ 509.222994][ T9214] 9pnet_fd: Insufficient options for proto=fd [ 509.241085][ T9214] siw: device registration error -23 [ 512.989815][ T9239] syz.0.862 (9239): drop_caches: 2 [ 515.766646][ T9251] netlink: 'syz.4.864': attribute type 4 has an invalid length. [ 516.160472][ T9252] netlink: 'syz.4.864': attribute type 4 has an invalid length. [ 516.255648][ T9256] overlayfs: option "workdir=./bus" is useless in a non-upper mount, ignore [ 516.295915][ T9256] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent [ 517.250828][ T9248] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 518.079371][ T9270] input: syz0 as /devices/virtual/input/input21 [ 519.805463][ T9283] 9pnet_fd: Insufficient options for proto=fd [ 519.824906][ T9283] siw: device registration error -23 [ 521.646632][ T30] audit: type=1326 audit(1750649231.313:3): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9292 comm="syz.4.875" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fca1358e929 code=0x7ffc0000 [ 521.677176][ T30] audit: type=1326 audit(1750649231.313:4): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9292 comm="syz.4.875" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fca1358e929 code=0x7ffc0000 [ 521.753815][ T30] audit: type=1326 audit(1750649231.313:5): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9292 comm="syz.4.875" exe="/root/syz-executor" sig=0 arch=c000003e syscall=222 compat=0 ip=0x7fca1358e929 code=0x7ffc0000 [ 521.775087][ C0] vkms_vblank_simulate: vblank timer overrun [ 521.933554][ T30] audit: type=1326 audit(1750649231.313:6): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9292 comm="syz.4.875" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fca1358e929 code=0x7ffc0000 [ 521.954852][ C0] vkms_vblank_simulate: vblank timer overrun [ 522.641277][ T30] audit: type=1326 audit(1750649231.313:7): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9292 comm="syz.4.875" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fca1358e929 code=0x7ffc0000 [ 522.759809][ T30] audit: type=1326 audit(1750649231.313:8): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9292 comm="syz.4.875" exe="/root/syz-executor" sig=0 arch=c000003e syscall=223 compat=0 ip=0x7fca1358e929 code=0x7ffc0000 [ 522.983341][ T30] audit: type=1326 audit(1750649231.343:9): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9292 comm="syz.4.875" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7fca1352ab19 code=0x7ffc0000 [ 523.061894][ T30] audit: type=1326 audit(1750649231.343:10): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9292 comm="syz.4.875" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7fca1352ab19 code=0x7ffc0000 [ 523.270809][ T9301] syz.1.879 (9301): drop_caches: 2 [ 524.329591][ T30] audit: type=1326 audit(1750649231.343:11): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9292 comm="syz.4.875" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7fca1352ab19 code=0x7ffc0000 [ 524.352925][ T30] audit: type=1326 audit(1750649231.343:12): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9292 comm="syz.4.875" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7fca1352ab19 code=0x7ffc0000 [ 528.329431][ T9325] 9pnet_fd: Insufficient options for proto=fd [ 528.349224][ T9325] siw: device registration error -23 [ 529.400805][ T9329] syz.4.885 (9329): drop_caches: 2 [ 532.103402][ T9351] 9pnet_fd: Insufficient options for proto=fd [ 533.578569][ T9359] netlink: 'syz.2.892': attribute type 4 has an invalid length. [ 534.008535][ T9350] vhci_hcd vhci_hcd.0: pdev(4) rhport(0) sockfd(8) [ 534.015133][ T9350] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 534.169768][ T9350] vhci_hcd vhci_hcd.0: Device attached [ 534.208648][ T9359] netlink: 'syz.2.892': attribute type 4 has an invalid length. [ 534.419623][ T5934] usb 41-1: new low-speed USB device number 2 using vhci_hcd [ 534.841566][ T5900] usb 5-1: new high-speed USB device number 25 using dummy_hcd [ 535.121057][ T9345] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 535.399710][ T5900] usb 5-1: Using ep0 maxpacket: 16 [ 535.495014][ T9369] siw: device registration error -23 [ 536.585512][ T5900] usb 5-1: device descriptor read/all, error -71 [ 536.940341][ T9360] vhci_hcd: connection reset by peer [ 536.950961][ T6588] vhci_hcd: stop threads [ 536.975610][ T6588] vhci_hcd: release socket [ 537.005500][ T6588] vhci_hcd: disconnect device [ 540.219723][ T5934] vhci_hcd: vhci_device speed not set [ 545.649650][ T5870] usb 6-1: new high-speed USB device number 9 using dummy_hcd [ 545.873603][ T5870] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 546.034148][ T5870] usb 6-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 546.257488][ T5870] usb 6-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 546.286505][ T5870] usb 6-1: Product: syz [ 546.314610][ T5870] usb 6-1: Manufacturer: syz [ 546.319868][ T5870] usb 6-1: SerialNumber: syz [ 546.335362][ T5870] usb 6-1: config 0 descriptor?? [ 546.601389][ T5870] snd-usb-audio 6-1:0.0: probe with driver snd-usb-audio failed with error -22 [ 546.997711][ T9454] netlink: 'syz.5.915': attribute type 1 has an invalid length. [ 548.428817][ T9439] udevd[9439]: error opening ATTR{/sys/devices/platform/dummy_hcd.5/usb6/6-1/6-1:0.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 548.735899][ T5870] usb 6-1: USB disconnect, device number 9 [ 550.256454][ T9471] netlink: 16 bytes leftover after parsing attributes in process `syz.1.921'. [ 550.269885][ T9471] netlink: 16 bytes leftover after parsing attributes in process `syz.1.921'. [ 553.170221][ T5934] usb 3-1: new high-speed USB device number 40 using dummy_hcd [ 553.951067][ T5934] usb 3-1: Using ep0 maxpacket: 16 [ 554.589622][ T5934] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 554.605368][ T5934] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 554.685098][ T5934] usb 3-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 554.762231][ T5934] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 554.877704][ T5934] usb 3-1: Product: syz [ 554.942441][ T5934] usb 3-1: Manufacturer: syz [ 555.037388][ T5934] usb 3-1: SerialNumber: syz [ 555.724674][ T5934] usb 3-1: can't set config #1, error -71 [ 555.739174][ T5934] usb 3-1: USB disconnect, device number 40 [ 557.429590][ T5934] usb 2-1: new high-speed USB device number 24 using dummy_hcd [ 559.155463][ T5934] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 559.260492][ T5893] usb 6-1: new high-speed USB device number 10 using dummy_hcd [ 559.466329][ T5893] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 559.590360][ T5893] usb 6-1: config 0 has no interfaces? [ 559.676776][ T5893] usb 6-1: New USB device found, idVendor=0fc5, idProduct=1227, bcdDevice=da.8e [ 559.751794][ T5893] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 559.850070][ T5893] usb 6-1: Product: syz [ 559.904645][ T5893] usb 6-1: Manufacturer: syz [ 559.956012][ T5893] usb 6-1: SerialNumber: syz [ 560.133385][ T5893] usb 6-1: config 0 descriptor?? [ 560.339425][ T5934] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 560.349436][ T5934] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 560.362724][ T5934] usb 2-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 560.371962][ T5934] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 560.397194][ T5934] usb 2-1: config 0 descriptor?? [ 560.476701][ T5934] usb 2-1: can't set config #0, error -71 [ 560.484479][ T5934] usb 2-1: USB disconnect, device number 24 [ 561.202866][ T9528] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 561.239564][ T9528] Bluetooth: hci2: Error when powering off device on rfkill (-4) [ 561.292959][ T9528] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 561.299018][ T9528] Bluetooth: hci1: Error when powering off device on rfkill (-4) [ 561.351962][ T9528] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 561.357952][ T9528] Bluetooth: hci3: Error when powering off device on rfkill (-4) [ 561.426900][ T9528] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 561.485749][ T9543] vhci_hcd vhci_hcd.0: pdev(4) rhport(0) sockfd(9) [ 561.490043][ T9528] Bluetooth: hci4: Error when powering off device on rfkill (-4) [ 561.492331][ T9543] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 561.524909][ T9543] vhci_hcd vhci_hcd.0: Device attached [ 561.769562][ T5934] usb 41-1: new low-speed USB device number 3 using vhci_hcd [ 562.139805][ T3079] usb 5-1: new high-speed USB device number 27 using dummy_hcd [ 562.649578][ T3079] usb 5-1: Using ep0 maxpacket: 16 [ 562.937227][ T3079] usb 5-1: New USB device found, idVendor=05d1, idProduct=2001, bcdDevice= 9.00 [ 563.227479][ T1301] ieee802154 phy0 wpan0: encryption failed: -22 [ 563.236566][ T1301] ieee802154 phy1 wpan1: encryption failed: -22 [ 563.861884][ T3079] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 563.872599][ T3079] usb 5-1: Product: syz [ 563.876948][ T3079] usb 5-1: Manufacturer: syz [ 563.879929][ T5900] usb 6-1: USB disconnect, device number 10 [ 563.883240][ T3079] usb 5-1: SerialNumber: syz [ 563.964055][ T3079] usb 5-1: config 0 descriptor?? [ 563.986161][ T3079] ftdi_sio 5-1:0.0: FTDI USB Serial Device converter detected [ 564.006643][ T3079] usb 5-1: Detected FT232H [ 565.245662][ T3079] ftdi_sio ttyUSB0: Unable to read latency timer: -71 [ 565.252842][ T9544] vhci_hcd: connection reset by peer [ 565.259970][ T1154] vhci_hcd: stop threads [ 565.260584][ T3079] ftdi_sio ttyUSB0: Unable to write latency timer: -71 [ 565.290645][ T1154] vhci_hcd: release socket [ 565.307380][ T3079] ftdi_sio 5-1:0.0: GPIO initialisation failed: -71 [ 565.337478][ T1154] vhci_hcd: disconnect device [ 565.354413][ T3079] usb 5-1: FTDI USB Serial Device converter now attached to ttyUSB0 [ 565.458916][ T3079] usb 5-1: USB disconnect, device number 27 [ 565.538170][ T9573] netlink: 16402 bytes leftover after parsing attributes in process `syz.0.951'. [ 566.520246][ T3079] ftdi_sio ttyUSB0: FTDI USB Serial Device converter now disconnected from ttyUSB0 [ 566.580174][ T3079] ftdi_sio 5-1:0.0: device disconnected [ 567.569642][ T5934] vhci_hcd: vhci_device speed not set [ 569.457987][ T30] kauditd_printk_skb: 98 callbacks suppressed [ 569.458007][ T30] audit: type=1326 audit(1750649279.123:111): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9587 comm="syz.1.956" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd2d698e929 code=0x7ffc0000 [ 569.619612][ T30] audit: type=1326 audit(1750649279.123:112): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9587 comm="syz.1.956" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd2d698e929 code=0x7ffc0000 [ 569.700135][ T30] audit: type=1326 audit(1750649279.163:113): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9587 comm="syz.1.956" exe="/root/syz-executor" sig=0 arch=c000003e syscall=223 compat=0 ip=0x7fd2d698e929 code=0x7ffc0000 [ 569.980957][ T30] audit: type=1326 audit(1750649279.163:114): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9587 comm="syz.1.956" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd2d698e929 code=0x7ffc0000 [ 570.085810][ T30] audit: type=1326 audit(1750649279.163:115): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9587 comm="syz.1.956" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd2d698e929 code=0x7ffc0000 [ 570.666750][ T30] audit: type=1326 audit(1750649279.163:116): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9587 comm="syz.1.956" exe="/root/syz-executor" sig=0 arch=c000003e syscall=334 compat=0 ip=0x7fd2d698e929 code=0x7ffc0000 [ 570.704011][ T30] audit: type=1326 audit(1750649279.163:117): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9587 comm="syz.1.956" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd2d698e929 code=0x7ffc0000 [ 570.894089][ T9603] netlink: 'syz.5.957': attribute type 4 has an invalid length. [ 571.079934][ T9603] netlink: 'syz.5.957': attribute type 4 has an invalid length. [ 571.503540][ T9609] syz.4.962 (9609): drop_caches: 2 [ 572.459303][ T9597] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 575.558059][ T9624] ================================================================== [ 575.566227][ T9624] BUG: KASAN: slab-use-after-free in rose_get_neigh+0x391/0x990 [ 575.573938][ T9624] Read of size 1 at addr ffff88806dd64030 by task syz.0.967/9624 [ 575.581691][ T9624] [ 575.584063][ T9624] CPU: 1 UID: 0 PID: 9624 Comm: syz.0.967 Not tainted 6.16.0-rc2-syzkaller-00378-gb67ec639010f #0 PREEMPT(full) [ 575.584085][ T9624] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 575.584100][ T9624] Call Trace: [ 575.584109][ T9624] [ 575.584117][ T9624] dump_stack_lvl+0x189/0x250 [ 575.584142][ T9624] ? __virt_addr_valid+0x1c8/0x5c0 [ 575.584156][ T9624] ? rcu_is_watching+0x15/0xb0 [ 575.584177][ T9624] ? __kasan_check_byte+0x12/0x40 [ 575.584196][ T9624] ? __pfx_dump_stack_lvl+0x10/0x10 [ 575.584216][ T9624] ? rcu_is_watching+0x15/0xb0 [ 575.584237][ T9624] ? lock_release+0x4b/0x3e0 [ 575.584259][ T9624] ? __virt_addr_valid+0x1c8/0x5c0 [ 575.584272][ T9624] ? __virt_addr_valid+0x4a5/0x5c0 [ 575.584287][ T9624] print_report+0xd2/0x2b0 [ 575.584305][ T9624] ? rose_get_neigh+0x391/0x990 [ 575.584331][ T9624] kasan_report+0x118/0x150 [ 575.584360][ T9624] ? rose_get_neigh+0x391/0x990 [ 575.584389][ T9624] rose_get_neigh+0x391/0x990 [ 575.584412][ T9624] rose_connect+0x416/0x10a0 [ 575.584429][ T9624] ? __pfx_smack_socket_connect+0x10/0x10 [ 575.584455][ T9624] ? __might_fault+0xb0/0x130 [ 575.584471][ T9624] ? __pfx_rose_connect+0x10/0x10 [ 575.584496][ T9624] ? tomoyo_socket_connect_permission+0x164/0x290 [ 575.584522][ T9624] ? bpf_lsm_socket_connect+0x9/0x20 [ 575.584541][ T9624] __sys_connect+0x316/0x440 [ 575.584557][ T9624] ? __pfx___sys_connect+0x10/0x10 [ 575.584577][ T9624] ? rcu_is_watching+0x15/0xb0 [ 575.584601][ T9624] __x64_sys_connect+0x7a/0x90 [ 575.584615][ T9624] do_syscall_64+0xfa/0x3b0 [ 575.584639][ T9624] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 575.584653][ T9624] ? asm_sysvec_reschedule_ipi+0x1a/0x20 [ 575.584668][ T9624] ? clear_bhb_loop+0x60/0xb0 [ 575.584685][ T9624] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 575.584699][ T9624] RIP: 0033:0x7ff89a38e929 [ 575.584718][ T9624] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 575.584732][ T9624] RSP: 002b:00007ff89b139038 EFLAGS: 00000246 ORIG_RAX: 000000000000002a [ 575.584752][ T9624] RAX: ffffffffffffffda RBX: 00007ff89a5b5fa0 RCX: 00007ff89a38e929 [ 575.584764][ T9624] RDX: 000000000000001c RSI: 0000200000000040 RDI: 0000000000000009 [ 575.584774][ T9624] RBP: 00007ff89a410b39 R08: 0000000000000000 R09: 0000000000000000 [ 575.584783][ T9624] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 575.584792][ T9624] R13: 0000000000000000 R14: 00007ff89a5b5fa0 R15: 00007ffe467e3aa8 [ 575.584811][ T9624] [ 575.584816][ T9624] [ 575.836604][ T9624] Allocated by task 9391: [ 575.840948][ T9624] kasan_save_track+0x3e/0x80 [ 575.845650][ T9624] __kasan_kmalloc+0x93/0xb0 [ 575.850277][ T9624] __kmalloc_cache_noprof+0x230/0x3d0 [ 575.855691][ T9624] rose_add_node+0x23a/0xde0 [ 575.860311][ T9624] rose_rt_ioctl+0xa48/0xfb0 [ 575.864948][ T9624] rose_ioctl+0x3ce/0x8b0 [ 575.869294][ T9624] sock_do_ioctl+0xdc/0x300 [ 575.873825][ T9624] sock_ioctl+0x576/0x790 [ 575.878174][ T9624] __se_sys_ioctl+0xfc/0x170 [ 575.882779][ T9624] do_syscall_64+0xfa/0x3b0 [ 575.887309][ T9624] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 575.893220][ T9624] [ 575.895554][ T9624] Freed by task 9624: [ 575.899546][ T9624] kasan_save_track+0x3e/0x80 [ 575.904244][ T9624] kasan_save_free_info+0x46/0x50 [ 575.909286][ T9624] __kasan_slab_free+0x62/0x70 [ 575.914068][ T9624] kfree+0x18e/0x440 [ 575.917973][ T9624] rose_rt_device_down+0x66d/0x6c0 [ 575.923120][ T9624] rose_device_event+0x603/0x6a0 [ 575.928124][ T9624] notifier_call_chain+0x1b3/0x3e0 [ 575.933285][ T9624] __dev_notify_flags+0x18d/0x2e0 [ 575.938348][ T9624] netif_change_flags+0xe8/0x1a0 [ 575.943302][ T9624] dev_change_flags+0x130/0x260 [ 575.948169][ T9624] dev_ioctl+0x7b4/0x1150 [ 575.952527][ T9624] sock_do_ioctl+0x22c/0x300 [ 575.957162][ T9624] sock_ioctl+0x576/0x790 [ 575.961513][ T9624] __se_sys_ioctl+0xfc/0x170 [ 575.966133][ T9624] do_syscall_64+0xfa/0x3b0 [ 575.970688][ T9624] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 575.976604][ T9624] [ 575.978941][ T9624] The buggy address belongs to the object at ffff88806dd64000 [ 575.978941][ T9624] which belongs to the cache kmalloc-512 of size 512 [ 575.993102][ T9624] The buggy address is located 48 bytes inside of [ 575.993102][ T9624] freed 512-byte region [ffff88806dd64000, ffff88806dd64200) [ 576.006832][ T9624] [ 576.009170][ T9624] The buggy address belongs to the physical page: [ 576.015694][ T9624] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0xffff88806dd67800 pfn:0x6dd64 [ 576.025829][ T9624] head: order:2 mapcount:0 entire_mapcount:0 nr_pages_mapped:0 pincount:0 [ 576.034347][ T9624] flags: 0xfff00000000240(workingset|head|node=0|zone=1|lastcpupid=0x7ff) [ 576.042903][ T9624] page_type: f5(slab) [ 576.046909][ T9624] raw: 00fff00000000240 ffff88801a441c80 ffffea0000c78910 ffffea0000a0a410 [ 576.055516][ T9624] raw: ffff88806dd67800 000000000010000b 00000000f5000000 0000000000000000 [ 576.064124][ T9624] head: 00fff00000000240 ffff88801a441c80 ffffea0000c78910 ffffea0000a0a410 [ 576.072809][ T9624] head: ffff88806dd67800 000000000010000b 00000000f5000000 0000000000000000 [ 576.081510][ T9624] head: 00fff00000000002 ffffea0001b75901 00000000ffffffff 00000000ffffffff [ 576.090235][ T9624] head: ffffffffffffffff 0000000000000000 00000000ffffffff 0000000000000004 [ 576.099034][ T9624] page dumped because: kasan: bad access detected [ 576.105486][ T9624] page_owner tracks the page as allocated [ 576.111233][ T9624] page last allocated via order 2, migratetype Unmovable, gfp_mask 0xd20c0(__GFP_IO|__GFP_FS|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP|__GFP_NOMEMALLOC), pid 3016, tgid 3016 (kworker/u8:7), ts 92454419561, free_ts 92418110533 [ 576.132624][ T9624] post_alloc_hook+0x240/0x2a0 [ 576.137435][ T9624] get_page_from_freelist+0x21d5/0x22b0 [ 576.143006][ T9624] __alloc_frozen_pages_noprof+0x181/0x370 [ 576.148832][ T9624] alloc_pages_mpol+0x232/0x4a0 [ 576.153701][ T9624] allocate_slab+0x8a/0x3b0 [ 576.158231][ T9624] ___slab_alloc+0xbfc/0x1480 [ 576.162929][ T9624] __kmalloc_cache_noprof+0x296/0x3d0 [ 576.168318][ T9624] __ipv6_dev_mc_inc+0x420/0xaf0 [ 576.173277][ T9624] addrconf_dad_work+0x3d0/0x14b0 [ 576.178315][ T9624] process_scheduled_works+0xade/0x17b0 [ 576.183886][ T9624] worker_thread+0x8a0/0xda0 [ 576.188493][ T9624] kthread+0x70e/0x8a0 [ 576.192659][ T9624] ret_from_fork+0x3fc/0x770 [ 576.197305][ T9624] ret_from_fork_asm+0x1a/0x30 [ 576.202180][ T9624] page last free pid 5900 tgid 5900 stack trace: [ 576.208524][ T9624] __free_frozen_pages+0xc65/0xe60 [ 576.213671][ T9624] stack_depot_save_flags+0x445/0x900 [ 576.219069][ T9624] kasan_save_track+0x4f/0x80 [ 576.223764][ T9624] __kasan_kmalloc+0x93/0xb0 [ 576.228379][ T9624] __kmalloc_noprof+0x27a/0x4f0 [ 576.233259][ T9624] cfg80211_inform_single_bss_data+0x905/0x1ac0 [ 576.239526][ T9624] cfg80211_inform_bss_data+0x1fb/0x3b20 [ 576.245178][ T9624] cfg80211_inform_bss_frame_data+0x3d7/0x730 [ 576.251270][ T9624] ieee80211_bss_info_update+0x746/0x9e0 [ 576.256925][ T9624] ieee80211_scan_rx+0x593/0xa20 [ 576.261886][ T9624] ieee80211_rx_list+0x22fc/0x2d80 [ 576.267025][ T9624] ieee80211_rx_napi+0x1a8/0x3d0 [ 576.271980][ T9624] ieee80211_handle_queued_frames+0xe8/0x1f0 [ 576.277979][ T9624] tasklet_action_common+0x369/0x580 [ 576.283303][ T9624] handle_softirqs+0x286/0x870 [ 576.288088][ T9624] do_softirq+0xec/0x180 [ 576.292354][ T9624] [ 576.294687][ T9624] Memory state around the buggy address: [ 576.300326][ T9624] ffff88806dd63f00: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 576.308406][ T9624] ffff88806dd63f80: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 576.316483][ T9624] >ffff88806dd64000: fa fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 576.324552][ T9624] ^ [ 576.330192][ T9624] ffff88806dd64080: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 576.338280][ T9624] ffff88806dd64100: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 576.346379][ T9624] ================================================================== [ 576.354596][ T9624] Kernel panic - not syncing: KASAN: panic_on_warn set ... [ 576.361860][ T9624] CPU: 1 UID: 0 PID: 9624 Comm: syz.0.967 Not tainted 6.16.0-rc2-syzkaller-00378-gb67ec639010f #0 PREEMPT(full) [ 576.373776][ T9624] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 576.383843][ T9624] Call Trace: [ 576.387128][ T9624] [ 576.390081][ T9624] dump_stack_lvl+0x99/0x250 [ 576.394691][ T9624] ? __asan_memcpy+0x40/0x70 [ 576.399309][ T9624] ? __pfx_dump_stack_lvl+0x10/0x10 [ 576.404563][ T9624] ? __pfx__printk+0x10/0x10 [ 576.409180][ T9624] panic+0x2db/0x790 [ 576.413102][ T9624] ? __pfx_panic+0x10/0x10 [ 576.417553][ T9624] ? check_panic_on_warn+0x75/0xb0 [ 576.422686][ T9624] ? rose_get_neigh+0x391/0x990 [ 576.427554][ T9624] check_panic_on_warn+0x89/0xb0 [ 576.432503][ T9624] ? rose_get_neigh+0x391/0x990 [ 576.437370][ T9624] end_report+0x78/0x160 [ 576.441624][ T9624] kasan_report+0x129/0x150 [ 576.446137][ T9624] ? rose_get_neigh+0x391/0x990 [ 576.451006][ T9624] rose_get_neigh+0x391/0x990 [ 576.455696][ T9624] rose_connect+0x416/0x10a0 [ 576.460296][ T9624] ? __pfx_smack_socket_connect+0x10/0x10 [ 576.466062][ T9624] ? __might_fault+0xb0/0x130 [ 576.470762][ T9624] ? __pfx_rose_connect+0x10/0x10 [ 576.475800][ T9624] ? tomoyo_socket_connect_permission+0x164/0x290 [ 576.482235][ T9624] ? bpf_lsm_socket_connect+0x9/0x20 [ 576.487536][ T9624] __sys_connect+0x316/0x440 [ 576.492139][ T9624] ? __pfx___sys_connect+0x10/0x10 [ 576.497360][ T9624] ? rcu_is_watching+0x15/0xb0 [ 576.502165][ T9624] __x64_sys_connect+0x7a/0x90 [ 576.506966][ T9624] do_syscall_64+0xfa/0x3b0 [ 576.511496][ T9624] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 576.517590][ T9624] ? asm_sysvec_reschedule_ipi+0x1a/0x20 [ 576.523232][ T9624] ? clear_bhb_loop+0x60/0xb0 [ 576.527923][ T9624] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 576.533841][ T9624] RIP: 0033:0x7ff89a38e929 [ 576.538300][ T9624] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 576.557935][ T9624] RSP: 002b:00007ff89b139038 EFLAGS: 00000246 ORIG_RAX: 000000000000002a [ 576.566376][ T9624] RAX: ffffffffffffffda RBX: 00007ff89a5b5fa0 RCX: 00007ff89a38e929 [ 576.574469][ T9624] RDX: 000000000000001c RSI: 0000200000000040 RDI: 0000000000000009 [ 576.582537][ T9624] RBP: 00007ff89a410b39 R08: 0000000000000000 R09: 0000000000000000 [ 576.590531][ T9624] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 576.598520][ T9624] R13: 0000000000000000 R14: 00007ff89a5b5fa0 R15: 00007ffe467e3aa8 [ 576.606513][ T9624] [ 576.609917][ T9624] Kernel Offset: disabled [ 576.614344][ T9624] Rebooting in 86400 seconds..