last executing test programs: 19m54.652896428s ago: executing program 32 (id=11): openat$vicodec1(0xffffffffffffff9c, 0x0, 0x2, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000004c0), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r3, 0x0, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x1, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0xfffffffc}, 0x0) r4 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) r5 = syz_open_dev$dri(&(0x7f00000008c0), 0xd21, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r5, 0xc04064a0, &(0x7f00000001c0)={0x0, &(0x7f00000000c0)=[0x0], 0x0, 0x0, 0xfc5e, 0x1}) ioctl$DRM_IOCTL_MODE_GETCRTC(r5, 0xc06864a1, &(0x7f00000003c0)={0x0, 0x0, r6, 0x0}) ioctl$DRM_IOCTL_MODE_GETFB2(r5, 0xc06864ce, &(0x7f0000000440)={r7, 0x0, 0x0, 0x0, 0x0, [0x0]}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r4, 0xc02064b2, &(0x7f0000000140)={0x3ff, 0x2, 0xb5}) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r4, 0xc00c642d, &(0x7f0000000080)={r8, 0x0, 0xffffffffffffffff}) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r5, 0xc00c642d, 0x0) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r5, 0xc00c642e, &(0x7f0000000300)={0x0, 0x0, r9}) r10 = userfaultfd(0x80801) mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x3000002, 0x5d031, 0xffffffffffffffff, 0x0) ioctl$UFFDIO_API(r10, 0xc018aa3f, &(0x7f0000000080)={0xaa, 0x100}) ioctl$UFFDIO_COPY(r10, 0xc028aa03, &(0x7f0000000000)={&(0x7f0000800000/0x800000)=nil, &(0x7f0000d76000/0x3000)=nil, 0x800000}) ioctl$IOC_PR_REGISTER(0xffffffffffffffff, 0x401870c8, &(0x7f0000000080)={0x0, 0x3, 0x1}) ioctl$KVM_SET_MSRS(0xffffffffffffffff, 0x4008ae89, &(0x7f00000000c0)=ANY=[@ANYBLOB="01000000000000002100004000000000ff"]) ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0) 19m54.352603899s ago: executing program 33 (id=13): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) openat$6lowpan_control(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0x80000000e) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) mkdir(&(0x7f00000002c0)='./file0\x00', 0x0) mount(0x0, 0x0, &(0x7f0000000240)='devtmpfs\x00', 0x800, 0x0) ioctl$TCSETS(0xffffffffffffffff, 0x40045431, &(0x7f0000000dc0)={0xfffffffe, 0x0, 0x0, 0xfff, 0xa, "0062ba7d82000000160000000000f738096304"}) mount(&(0x7f0000000080)=@loop={'/dev/loop', 0x0}, &(0x7f00000001c0)='./cgroup\x00', &(0x7f0000000180)='ufs\x00', 0x1a0c099, 0x0) r2 = socket$kcm(0x2d, 0x2, 0x0) ioctl$sock_kcm_SIOCKCMCLONE(r2, 0x89e2, &(0x7f0000000100)={r2}) bind$xdp(r3, &(0x7f0000000080)={0x2d, 0x0, 0x0, 0xc}, 0x10) close(r2) r4 = syz_open_pts(0xffffffffffffffff, 0x80) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000480)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a05000000000000000000010000000900010073797a300000000040000000030a01020000000000000000010000000900010073797a30000000000900030073797a3000000000140004800800024000000000080001400000"], 0xf0}}, 0x0) r6 = dup3(r4, 0xffffffffffffffff, 0x80000) mount$overlay(0x0, &(0x7f0000001340)='./file0\x00', &(0x7f00000000c0), 0x0, &(0x7f00000003c0)={[{@lowerdir={'lowerdir', 0x3d, './file0'}, 0x3a}], [], 0x2f}) open$dir(0x0, 0x0, 0x0) ioctl$DRM_IOCTL_GET_CLIENT(r6, 0xc0286405, 0x0) waitid(0x1, 0x0, &(0x7f0000000000), 0x80000000, 0x0) getdents64(0xffffffffffffffff, &(0x7f0000000300)=""/152, 0x98) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f00000002c0)={'bridge_slave_0\x00'}) 19m54.191848474s ago: executing program 34 (id=5): r0 = socket$inet_tcp(0x2, 0x1, 0x0) r1 = open(&(0x7f0000000000)='./file0\x00', 0x2, 0x17a) setsockopt$XDP_RX_RING(r1, 0x11b, 0x2, &(0x7f0000000080)=0x200000, 0x4) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x804e20}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r5 = socket$netlink(0x10, 0x3, 0x9) sendmsg$NFT_BATCH(r5, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000700)={{0x14, 0x3f3}, [], {0x14, 0x3e9}}, 0x28}}, 0x0) mprotect(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x1) r6 = syz_open_dev$radio(&(0x7f0000000000), 0xffffffffffffffff, 0x2) ioctl$VIDIOC_S_EXT_CTRLS(r6, 0xc0205647, &(0x7f0000000200)={0xf000000, 0x1, 0x0, 0xffffffffffffffff, 0x0, &(0x7f00000001c0)={0x98f903, 0x0, '\x00', @string=0x0}}) r7 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000440), 0x4e0781, 0x0) r8 = ioctl$KVM_CREATE_VM(r7, 0xae01, 0x0) ioctl$KVM_CREATE_GUEST_MEMFD(r8, 0xc040aed4, 0x0) connect$inet(r0, &(0x7f0000000040)={0x2, 0x4e04, @dev={0xac, 0x14, 0x14, 0x59}}, 0x10) syz_usb_connect(0x2, 0x36, 0x0, &(0x7f00000004c0)={0x0, 0x0, 0x0, 0x0}) getsockname$packet(0xffffffffffffffff, &(0x7f0000000140)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, 0x0) shutdown(r0, 0x1) setsockopt$inet_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f00000003c0)=0x2, 0x4) recvmmsg(r0, &(0x7f00000005c0)=[{{0x0, 0x0, 0x0}}], 0x1, 0x40000142, 0x0) 15m13.915852296s ago: executing program 2 (id=206): prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="06000000040000"], 0x48) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000400007b8af8ff00000000bfa200000000000007020000fcffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000340)={&(0x7f0000000400)='sched_switch\x00', r4}, 0x18) syz_usb_connect$cdc_ncm(0x3, 0x87, 0x0, 0x0) r5 = fsopen(&(0x7f00000001c0)='ramfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r5, 0x6, 0x0, 0x0, 0x0) getpid() r6 = fsmount(r5, 0x0, 0x0) fchdir(r6) r7 = open(&(0x7f0000000040)='./bus\x00', 0x143142, 0x80) ftruncate(r7, 0x2007ffb) sendfile(r7, r7, 0x0, 0x1000000201005) 15m9.165173555s ago: executing program 2 (id=210): r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x2040, 0x0) fcntl$setlease(r0, 0x400, 0x0) io_uring_setup(0x1694, &(0x7f0000000080)={0x0, 0x0, 0x1000, 0x0, 0x0, 0x0, r0}) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x80000}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r1}, 0x18) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) fremovexattr(r0, &(0x7f0000000400)=@random={'security.', ':\'\x00'}) capset(&(0x7f0000000000)={0x20080522}, 0x0) syz_open_dev$sg(&(0x7f00000060c0), 0x0, 0x0) syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) socket$inet6_sctp(0xa, 0x1, 0x84) socket$inet6(0xa, 0x2, 0x0) r4 = open(&(0x7f0000000180)='./bus\x00', 0x14927e, 0x0) ioctl$FICLONERANGE(r4, 0x4020940d, &(0x7f0000000040)={{r4}, 0x401, 0x2, 0x7}) socket$phonet_pipe(0x23, 0x5, 0x2) setgroups(0x0, 0x0) prctl$PR_SET_SECUREBITS(0x1c, 0x1d) setuid(0xee01) 15m6.714539813s ago: executing program 2 (id=212): openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/custom1\x00', 0x802, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) bpf$MAP_CREATE(0x0, 0x0, 0x50) semctl$IPC_STAT(0x0, 0x0, 0x2, 0x0) mount$afs(0x0, &(0x7f00000001c0)='./file0\x00', &(0x7f00000002c0), 0x0, 0x0) renameat2(0xffffffffffffff9c, &(0x7f0000000140)='./file0\x00', 0xffffffffffffff9c, &(0x7f0000000600)='./file5\x00', 0x2) r1 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r1, 0x8933, &(0x7f0000000000)={'vcan0\x00', 0x0}) bind$can_j1939(r1, &(0x7f00000000c0)={0x1d, r2}, 0x18) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, 0x0, 0x0) sendmsg$NFT_BATCH(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000000)={0x0}, 0x1, 0x0, 0x0, 0x4000850}, 0x24000000) write$UHID_INPUT(0xffffffffffffffff, &(0x7f0000002080)={0xfc, {"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", 0x1000}}, 0x1006) ioctl$VIDIOC_SUBSCRIBE_EVENT(0xffffffffffffffff, 0x4020565a, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) r5 = socket$inet_mptcp(0x2, 0x1, 0x106) bind$inet(r5, &(0x7f0000000080)={0x2, 0x4e24, @multicast1}, 0x10) connect$inet(r5, &(0x7f00000009c0)={0x2, 0x4e24, @dev={0xac, 0x14, 0x14, 0x21}}, 0x10) writev(r5, &(0x7f0000000200)=[{&(0x7f00000000c0)='X', 0x8030000}], 0x1) r6 = syz_open_dev$usbmon(&(0x7f0000000240), 0x8, 0x0) ioctl$MON_IOCT_RING_SIZE(r6, 0x9204, 0xc397e) 15m4.715155819s ago: executing program 2 (id=213): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SET_MM(0x23, 0x5, &(0x7f0000351000/0x2000)=nil) r4 = syz_open_procfs(0x0, 0x0) preadv(r4, &(0x7f00000000c0)=[{&(0x7f0000000640)=""/4112, 0x1010}], 0x1, 0x4000, 0x0) r5 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x20, 0x10, &(0x7f0000000580)=ANY=[@ANYRES32=r5], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x73cea2d47785b264, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='cpuacct.usage_sys\x00', 0x275a, 0x0) fcntl$lock(r6, 0x26, 0x0) fcntl$lock(r6, 0x26, &(0x7f0000000280)={0x1, 0x0, 0x2f, 0x9}) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x10, &(0x7f0000000580)=ANY=[], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r8 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000040), 0x182800, 0x0) ioctl$RTC_AIE_ON(r8, 0x7001) ioctl$RTC_UIE_ON(r8, 0x7003) ioctl$RTC_AIE_OFF(r8, 0x7002) mincore(&(0x7f0000352000/0x1000)=nil, 0x1000, &(0x7f0000000340)=""/207) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000280)='sched_switch\x00', r7}, 0x18) socket$inet_udp(0x2, 0x2, 0x0) getsockopt$sock_buf(r3, 0x1, 0x6, 0x0, &(0x7f0000000300)) r9 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r9, 0x0, 0x0) 15m1.976779452s ago: executing program 2 (id=215): creat(0x0, 0xecf86c37d53049cc) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f00000002c0)=ANY=[], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x3, '\x00', 0x0, 0x2}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) mount$fuse(0x0, 0x0, 0x0, 0x2018081, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NLBL_CIPSOV4_C_ADD(0xffffffffffffffff, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)={0x28, 0x0, 0x1, 0x0, 0x0, {}, [@NLBL_CIPSOV4_A_TAGLST={0x4}, @NLBL_CIPSOV4_A_MTYPE={0x8, 0x2, 0x1}, @NLBL_CIPSOV4_A_DOI={0x8}]}, 0x28}}, 0x0) bpf$MAP_CREATE(0x300000000000000, &(0x7f00000003c0)=@base={0x18, 0x4, 0x2000041, 0x0, 0x1, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x4002, 0x5}, 0x50) r4 = epoll_create1(0x0) r5 = fcntl$dupfd(r4, 0x2, 0xffffffffffffffff) r6 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000000c0)={0x16, 0x3, &(0x7f0000000080)=@framed, &(0x7f0000000040)='GPL\x00'}, 0x80) r7 = epoll_create1(0x0) r8 = fcntl$dupfd(r7, 0x2, 0xffffffffffffffff) bpf$BPF_PROG_ATTACH(0x8, &(0x7f0000000140)={@cgroup=r8, r6, 0x11, 0x0, r8}, 0x14) bpf$BPF_PROG_ATTACH(0x9, &(0x7f0000000140)={@cgroup=r5, r6, 0x11, 0x0, r5}, 0x11) sendmsg$nl_generic(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)=ANY=[@ANYBLOB="340000003e000900000000000008000003000000040004001c000180180010"], 0x34}}, 0x84) 15m0.596578167s ago: executing program 2 (id=217): r0 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r0, 0xae41, 0x400) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000300)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0xfffffffffefffff6, 0x20031, 0xffffffffffffffff, 0x0) r3 = syz_open_dev$media(&(0x7f00000000c0), 0x9, 0x0) ioctl$MEDIA_IOC_G_TOPOLOGY(r3, 0xc0487c04, &(0x7f0000001080)={0x0, 0x0, 0x0, 0x0, 0x249249249249269, 0x0, &(0x7f0000003080), 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_open_procfs$namespace(0x0, &(0x7f0000000000)='ns/pid\x00') sendmsg(r2, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0xb4c, 0x9, 0x6, 0x0, 0x3}, 0x0) r4 = socket(0x21, 0x800, 0x2) openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) r5 = openat$dma_heap(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) setsockopt$MRT6_ADD_MFC_PROXY(r4, 0x29, 0xd2, &(0x7f0000000380)={{0xa, 0x4e21, 0x3, @private2={0xfc, 0x2, '\x00', 0x1}, 0xff}, {0xa, 0x4e23, 0x5, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x4}, 0xffffffffffffffff, {[0x2, 0x5, 0x401, 0x4, 0x0, 0x8, 0xfff, 0x400]}}, 0x5c) ioctl$MEDIA_IOC_DEVICE_INFO(r5, 0xc1007c00, &(0x7f0000000080)) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r6, 0x8933, &(0x7f0000000100)={'wlan0\x00', 0x0}) r9 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r9, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000200)=ANY=[@ANYBLOB="74010000170001000000000000000000fc0000000000000000000000000000100000000000000000fe80000000000000000000000000000000002001000000000000000000000000000100"/101, @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0], 0x174}}, 0x0) sendmsg$NL80211_CMD_SET_TX_BITRATE_MASK(r6, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000180)={0x28, r7, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r8}, @void}}, [@NL80211_ATTR_TX_RATES={0xc, 0x5a, 0x0, 0x1, [@NL80211_BAND_6GHZ={0x8, 0x3, 0x0, 0x1, [@NL80211_TXRATE_LEGACY={0x4}]}]}]}, 0x28}}, 0x0) ioctl$SW_SYNC_IOC_CREATE_FENCE(0xffffffffffffffff, 0xc0285700, 0x0) syz_open_procfs(0xffffffffffffffff, 0x0) mkdir(&(0x7f00000020c0)='./file0\x00', 0x82) openat$fuse(0xffffffffffffff9c, &(0x7f0000000040), 0x42, 0x0) 14m57.537182212s ago: executing program 35 (id=207): rename(0x0, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x820040, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, &(0x7f0000000640)="430fc73f0f2390b9800000c00f3235010000000f300f20d835080000000f22d8c4e18173f53866baf80cb83879e487ef66bafc0cec66b88e008ec02d1aa80000460f1c460041ae", 0x47}], 0x1, 0x74, 0x0, 0x0) getsockopt$sock_buf(0xffffffffffffffff, 0x1, 0x0, 0x0, &(0x7f0000000240)) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000005c0)={0x0, 0x0, 0x0, 0x0, 0x1, 0x2}, 0x28) ioctl$KVM_RUN(r2, 0xae80, 0x0) connect$unix(0xffffffffffffffff, 0x0, 0x0) openat$binder_debug(0xffffffffffffff9c, 0x0, 0x0, 0x0) syz_io_uring_setup(0x1e1e, 0x0, &(0x7f0000000040), &(0x7f0000000000)) socket$inet6_tcp(0xa, 0x1, 0x0) connect$vsock_stream(0xffffffffffffffff, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000540)={0x3, 0x3, &(0x7f0000000480)=ANY=[@ANYBLOB="180000000000001000000000000000009500000000000000"], &(0x7f0000000500)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_ATTACH(0x8, &(0x7f0000000140)=ANY=[@ANYRES32=0x1, @ANYRES32=r4, @ANYBLOB="2e00000010"], 0x20) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000140)={@fallback, 0xffffffffffffffff, 0x7}, 0x20) socket$nl_sock_diag(0x10, 0x3, 0x4) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x2e, 0x0, 0x0) getpriority(0x2, 0x0) r5 = syz_open_dev$sndpcmp(&(0x7f0000000340), 0x0, 0x0) ioctl$SNDRV_PCM_IOCTL_HW_PARAMS(r5, 0xc2604110, 0x0) 14m45.420029228s ago: executing program 36 (id=217): r0 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r0, 0xae41, 0x400) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000300)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0xfffffffffefffff6, 0x20031, 0xffffffffffffffff, 0x0) r3 = syz_open_dev$media(&(0x7f00000000c0), 0x9, 0x0) ioctl$MEDIA_IOC_G_TOPOLOGY(r3, 0xc0487c04, &(0x7f0000001080)={0x0, 0x0, 0x0, 0x0, 0x249249249249269, 0x0, &(0x7f0000003080), 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_open_procfs$namespace(0x0, &(0x7f0000000000)='ns/pid\x00') sendmsg(r2, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0xb4c, 0x9, 0x6, 0x0, 0x3}, 0x0) r4 = socket(0x21, 0x800, 0x2) openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) r5 = openat$dma_heap(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) setsockopt$MRT6_ADD_MFC_PROXY(r4, 0x29, 0xd2, &(0x7f0000000380)={{0xa, 0x4e21, 0x3, @private2={0xfc, 0x2, '\x00', 0x1}, 0xff}, {0xa, 0x4e23, 0x5, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x4}, 0xffffffffffffffff, {[0x2, 0x5, 0x401, 0x4, 0x0, 0x8, 0xfff, 0x400]}}, 0x5c) ioctl$MEDIA_IOC_DEVICE_INFO(r5, 0xc1007c00, &(0x7f0000000080)) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r6, 0x8933, &(0x7f0000000100)={'wlan0\x00', 0x0}) r9 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r9, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000200)=ANY=[@ANYBLOB="74010000170001000000000000000000fc0000000000000000000000000000100000000000000000fe80000000000000000000000000000000002001000000000000000000000000000100"/101, @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0], 0x174}}, 0x0) sendmsg$NL80211_CMD_SET_TX_BITRATE_MASK(r6, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000180)={0x28, r7, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r8}, @void}}, [@NL80211_ATTR_TX_RATES={0xc, 0x5a, 0x0, 0x1, [@NL80211_BAND_6GHZ={0x8, 0x3, 0x0, 0x1, [@NL80211_TXRATE_LEGACY={0x4}]}]}]}, 0x28}}, 0x0) ioctl$SW_SYNC_IOC_CREATE_FENCE(0xffffffffffffffff, 0xc0285700, 0x0) syz_open_procfs(0xffffffffffffffff, 0x0) mkdir(&(0x7f00000020c0)='./file0\x00', 0x82) openat$fuse(0xffffffffffffff9c, &(0x7f0000000040), 0x42, 0x0) 11m56.396335763s ago: executing program 5 (id=285): socket$nl_netfilter(0x10, 0x3, 0xc) socket$netlink(0x10, 0x3, 0x0) getpid() openat$ptmx(0xffffffffffffff9c, 0x0, 0x0, 0x0) r0 = openat$comedi(0xffffffffffffff9c, &(0x7f00000029c0)='/dev/comedi4\x00', 0x600, 0x0) ioctl$COMEDI_BUFCONFIG(r0, 0x8020640d, &(0x7f0000000040)={0x1, 0x3, 0x10}) r1 = socket$inet_icmp(0x2, 0x2, 0x1) setsockopt$IP_VS_SO_SET_STOPDAEMON(r1, 0x0, 0x48c, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8000}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x2) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) bpf$PROG_LOAD(0x5, 0x0, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) syz_open_dev$usbfs(&(0x7f0000000040), 0x400000001ff, 0x101381) unshare(0x2040600) openat(0xffffffffffffffff, 0x0, 0x0, 0xd0) setsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x1b, 0x0, 0x0) r3 = add_key(&(0x7f00000001c0)='big_key\x00', &(0x7f0000000200)={'syz', 0x1}, &(0x7f0000002240)="d790b0c9", 0x4, 0xfffffffffffffffe) syz_emit_ethernet(0x76, &(0x7f0000000040)=ANY=[@ANYRES8], 0x0) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$sock_inet6_SIOCDELRT(r4, 0x890c, &(0x7f0000005fc0)={@remote, @mcast2, @mcast2, 0x4, 0x8000, 0x40, 0x400, 0x1000, 0x1cc0014}) pipe2$watch_queue(&(0x7f0000000000)={0xffffffffffffffff}, 0x80) keyctl$KEYCTL_WATCH_KEY(0x20, r3, r5, 0x26) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r6, &(0x7f00000012c0)={0x0, 0x0, 0x0}, 0x0) keyctl$update(0x2, r3, &(0x7f0000000240)="ac", 0x1) 11m54.924507914s ago: executing program 5 (id=286): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000200)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) socket$inet_smc(0x2b, 0x1, 0x0) setsockopt$inet6_opts(0xffffffffffffffff, 0x29, 0x40, &(0x7f00000001c0)=ANY=[@ANYBLOB="000a000000000fd60730000000000a0000000000000000000000000000000000000000000000000000000d00000000000000000000ef60fc4bd8ecc4e3200000000006004dee00000000000032acaace3269d4"], 0xd0060) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0xb, &(0x7f0000000380)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020000000000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000300)='rcu_utilization\x00', r3}, 0x10) r4 = inotify_init1(0x400) inotify_add_watch(r4, &(0x7f0000000200)='.\x00', 0x10000002) r5 = syz_create_resource$binfmt(&(0x7f0000000040)='./file1\x00') r6 = openat$binfmt(0xffffffffffffff9c, r5, 0x42, 0x1ff) r7 = openat$binfmt(0xffffffffffffff9c, r5, 0x2, 0x0) write(r7, &(0x7f0000000000)='\x00', 0x1) copy_file_range(r6, 0x0, r7, 0x0, 0x2, 0x0) syz_emit_ethernet(0x32, &(0x7f00000009c0)={@link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x1}, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x1f}, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x24, 0x0, 0x2, 0x0, 0x11, 0x0, @empty, @empty}, {0x0, 0x7, 0x10, 0x0, @gue={{0x2, 0x1, 0x3, 0xfd, 0x100, @val=0x80}}}}}}}, 0x0) r8 = shmget(0x1, 0x3000, 0x1, &(0x7f0000ff9000/0x3000)=nil) read$qrtrtun(0xffffffffffffffff, &(0x7f00000004c0)=""/57, 0x39) fsopen(&(0x7f0000000000)='msdos\x00', 0x1) read$FUSE(0xffffffffffffffff, &(0x7f0000002140)={0x2020, 0x0, 0x0, 0x0, 0x0}, 0x2020) syz_fuse_handle_req(0xffffffffffffffff, &(0x7f0000004300)="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", 0x2000, &(0x7f0000000d00)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) mount$fuse(0x0, &(0x7f00000002c0)='./cgroup\x00', &(0x7f0000000340), 0x888000, &(0x7f0000000400)={{}, 0x2c, {'rootmode', 0x3d, 0x2000}, 0x2c, {}, 0x2c, {'group_id', 0x3d, r9}}) shmat(r8, &(0x7f0000ff9000/0x1000)=nil, 0x4000) shmctl$IPC_RMID(r8, 0x0) 11m53.070905477s ago: executing program 5 (id=288): r0 = syz_open_dev$dri(&(0x7f00000002c0), 0xbcae, 0x434842) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r0, 0xc04064a0, &(0x7f0000000200)={0x0, &(0x7f0000000140)=[0x0], &(0x7f0000000180)=[0x0], 0x0, 0x0, 0x1, 0x1}) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(r0, 0xc01864c6, 0x0) r1 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r1, &(0x7f0000000080)={0x2, 0x4e21, @broadcast}, 0x10) connect$inet(r1, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10) r2 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) getsockopt$bt_hci(r2, 0x0, 0x3, 0x0, &(0x7f0000000100)) setsockopt$inet_tcp_TCP_CONGESTION(r1, 0x6, 0xd, &(0x7f00000000c0)='bbr\x00', 0x4) sendto$inet(r1, &(0x7f0000000000), 0xffffffffffffff94, 0x0, 0x0, 0x0) recvfrom$inet(r1, &(0x7f0000000080)=""/8, 0xfffffffffffffd0b, 0x720, 0x0, 0xfffffffffffffd25) openat$sndseq(0xffffffffffffff9c, &(0x7f0000000040), 0x1) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) getpid() r3 = bpf$MAP_CREATE(0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB="0e00000004000000040000000c"], 0x48) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000300)=@bpf_lsm={0xe, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="660a000004000000611150000000000085000000000000004000"], &(0x7f0000000080)='syzkaller\x00'}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000640)={0xb, 0xd, &(0x7f0000000040)=ANY=[@ANYBLOB="18010000000000010000000000000000040000006d00078018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x27, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) sched_setscheduler(0x0, 0x1, &(0x7f0000000100)=0x2) sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bce) openat$full(0xffffffffffffff9c, &(0x7f0000000000), 0x100, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r4 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r4, &(0x7f0000002000)=""/102400, 0x19000) mprotect(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0) quotactl_fd$Q_SETINFO(0xffffffffffffffff, 0xffffffff80000601, 0x0, 0x0) socket$kcm(0x21, 0x2, 0x2) gettid() 11m50.61724894s ago: executing program 9 (id=226): r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x2040, 0x0) fcntl$setlease(r0, 0x400, 0x0) io_uring_setup(0x1694, &(0x7f0000000080)={0x0, 0x0, 0x1000, 0x0, 0x0, 0x0, r0}) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x80000}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r1}, 0x18) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) fremovexattr(r0, &(0x7f0000000400)=@random={'security.', ':\'\x00'}) capset(&(0x7f0000000000)={0x20080522}, 0x0) syz_open_dev$sg(&(0x7f00000060c0), 0x0, 0x0) syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) socket$inet6_sctp(0xa, 0x1, 0x84) socket$inet6(0xa, 0x2, 0x0) r5 = open(&(0x7f0000000180)='./bus\x00', 0x14927e, 0x0) ioctl$FICLONERANGE(r5, 0x4020940d, &(0x7f0000000040)={{r5}, 0x401, 0x2, 0x7}) socket$phonet_pipe(0x23, 0x5, 0x2) setgroups(0x0, 0x0) setuid(0xee01) 11m49.199222135s ago: executing program 9 (id=292): sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x4004800) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) connect$inet6(r0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f0000000040), 0x4) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x100008b}, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000180)=0x1400200bce) sched_setscheduler(0x0, 0x1, &(0x7f0000002200)=0x1) r1 = syz_open_dev$MSR(&(0x7f0000000200), 0x6c6c9c9e, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x0) mount(0x0, &(0x7f0000003c40)='./file0\x00', &(0x7f0000000080)='hugetlbfs\x00', 0x101c008, 0x0) openat$dir(0xffffffffffffff9c, &(0x7f0000000140)='./file0\x00', 0x482321cb74c946b6, 0x0) read$msr(r1, &(0x7f000001b5c0)=""/102368, 0x18fe0) r2 = getpid() r3 = socket$alg(0x26, 0x5, 0x0) bind$alg(r3, &(0x7f0000000940)={0x26, 'aead\x00', 0x0, 0x0, 'aegis128\x00'}, 0x58) setsockopt$ALG_SET_KEY(r3, 0x117, 0x1, &(0x7f0000000080)="ab553fec94248c32e27d04000000288a", 0x10) r4 = accept$alg(r3, 0x0, 0x0) r5 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x11, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="180100001c0000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f00000000c0)='sys_enter\x00', r5}, 0x10) r6 = memfd_secret(0x0) futimesat(r6, 0x0, 0x0) sendmsg$alg(r4, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000180)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}, 0x0) write$binfmt_script(r4, &(0x7f0000000600), 0xfec8) recvmmsg(r4, &(0x7f00000008c0)=[{{0x0, 0x0, &(0x7f00000005c0)=[{&(0x7f0000000300)=""/225, 0xe1}, {&(0x7f0000000400)=""/41, 0x29}, {&(0x7f0000000440)=""/123, 0x7b}, {&(0x7f00000004c0)=""/203, 0xcb}], 0x4, 0x0, 0x0, 0x2000000}}], 0x1, 0xcb, 0x0) move_pages(r2, 0x1, &(0x7f00000003c0)=[&(0x7f0000ffb000/0x2000)=nil], 0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, 0x0) dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(0xffffffffffffffff, 0x4018620d, &(0x7f00000002c0)={0x73622a85, 0x10a, 0x2}) 11m47.932106046s ago: executing program 8 (id=293): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x9}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xa, 0x4, 0xffd, 0x7}, 0x48) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000900)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000180)='sched_switch\x00', r4}, 0x10) mkdirat(0xffffffffffffff9c, 0x0, 0x0) r5 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000000), 0x2002, 0x0) sendmmsg$unix(r1, 0x0, 0x0, 0x10) sched_setparam(r0, &(0x7f0000000040)=0x1) ioctl$SNDCTL_DSP_SETFMT(r5, 0xc0045005, 0x0) mmap$dsp(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x3, 0x12, r5, 0x0) unlink(0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) capset(&(0x7f0000000000)={0x19980330}, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, 0x10001}) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f0000000c00)=ANY=[@ANYBLOB="b7000000ff020000bfa3000000000000070300c0f0ffffff620af0fff8ffffff71a4f0ff000000002d040200000000001d400200000000004604000001ed000062030000000000001d440000000000007a0a00fe00ffffffc303000051000000b5000000000000009500000000000000023bc065b58111c6dfa041b63af4a3912435f1a864a710e4d58db6a693002e7f3be361917adef6ee1c8a2a4f8ef1e50becb19bc461e91a7168c50000000190f32050e436fe275daf51efd601b6bf01c8e8b1b526375ec4dd6fcd82e4fee5bef7af9aa0d7d600c095199fe3ff3128e599b0eaebbdbd732c9cc00eec363e4a8f6456e2cc21557c0afc646cb7798b3e6440c2fbdb00c37dfca3e35208b0bb0d2cd829e654400e2438ec649dc74a28610643a98d9ec21ead2ed51b104d4d91af25b845d8a7925c3109b151b8b9f75dd08d123deda88c658d42ecbf28bf7076c15b463bebba2c598b4fc72f526d8e8afcb913466aaa7f6df70252e79166d858fcd0e06dd31af9612f2460d0b11008e59a5923906f88b53987ad1714e72ba7a54f0c33d39000d06a59ff616236fd9aa58f2477184b6a89adaf17b0a6041bdef728d236619074d6ebdfd1f5089048ddff6da40f9411fe722631cb467600ade70063e5291569b33d21dae356e1c51f03a801be8189679a16da18ec0ae564162a27afea62d84f3a10746443d6438e959532e0617d419c6bc6ea9f2bca4464f56e24e6d2105bd901204a1deeed4155617572652d950ad31928b0b0c3dc2869f478341d02d0f5ad94b081fcd507acb4b9c65fee9d5a17f48a7382f13d000000225d85ae49cee383dc5049076b989b40000000000000da60d2ae20cfb91d6a49964757cdf538f9ce2bdb1ab062cd54e67011d355d84ce97bb0c6b4a595e487efbb2d71cde2c140952f9a0f0bc6980fe78683ac5c0c31032599ddd71063be9261b2e1aab1675b34a22048ef8c126aeef5f510a8f1aded94a129e4aec6f8d9ab06faffc3a15d96c2ea3e2e04cfe031b2875353193f82ade69d0540059fe6c7fe7cd8697502c7596566d674e425da5e87e59602a9f6590521d31d3804b3e0a1053abdc31282dfb15eb6841bb64a1b304502dda787343ce3c953992e4a982f3c48153baae244e7bf37548c7f1a4cad2422ee965a38f7defbd2160242b104e20dc2d9b0c35608d402ccdd9069bd50b994fda7a9de44028d6112a0c2d21b2dc98816106dec28eaeb883418f562ae00003ea96d10f172c0374d6eed826416050000000bfe9b4a9c5a90ff59d54d1f92ecc4e95dd2d18383117c039862198899b212c55318294270a1ad10c80fef7c24d47afce829ba0f85da6d888f18ea40ab959f6074ab2a40d85d15017ab513cdc6c0e57fb1c1ca571380d7b4ead35a385e0b4a26b702396df7e0465f2f994114f244a9bf93f04bf072f0861f7580e69db384ac7eeedcf2ba1a9508f9d6aba582a896a9f1ffa968eacea75caf822a7a63ba34015ea5aacb1188883ad2a3b1832371fe5bc621426d1ed0a4a99702cc1b6912a1e717d29135753208165b9cdbae2ed9dc7358f0ebadde0b727f27feeb744ddcc536cbae315c7d1fe1399562ba6824840b08000000f6f2f9a6a8346962a350845ffa0d829e4f79adc287906943408e6df3c3bfd03aac93df8866fb010aec0e92bed1fe39af169d2a466f0db6f3d9436a7d55fc30511d00000000c95265b2bd83d64a532869d701723fedcbada1ee7baa5b6a686b50f0937f778af083e055f6138a757ebd0ed93517a6b244f9acf41ac5d73a008364e0606a594817031fc2f52c8785fe0721719b3d654026c6ea08b83b123145ab5703dad844ceb201ddeb6dc5f6a903792283c42efc54fa84323afc4c10eff462c8843187f1dd48ef3fa293774d582956ff0f40b10ca94f6feeb2893c17888e1cdba94a6ea80c33ead5722c3293a493f1479531dd88261458f40d31fe8df15efaaeea831555877f9538d6ee6ba65893ff1f908ba7554ba583fef3ec7932f5954f31a878e2fae6691d1aee1da02ba516467df3e7d1daac43738012e4fee18a22da19fcdb4c2890cda1f96b952511e3a69d694d625e0b2f808890205f3a6da2819d2f9e77c7c64affa54fec0136cbafa5f62e96753b639a924599c1f69219927ea5301fff0a6063d427f0688430754c02180d61542c25000000000000000005a7b57f03ca91a01ba2e30ca99e8ebc15ecb4d91675767999d146aef7799738b292fd640dfef6b04d086f737a159d7e0c6e4d81ad64a8bbca48568325b2969e2b15f36b788bce5ccdbaf75c94cb93499f6947a967a7bce14c6de4e7c0660d80010f5c653d22d49030a8c2a4ab595bf4238f18ca428dafc7ac96d404607a0000000051a2104f22e6db5a62b5089c1b45282d38864daa3ae81d6b0968d1d2867b91b7d120617d12d91db2633d6864da40b54783a17aaeb6737c323f9f98e354cc98dcfe23ad01bd1c61563e69ffe1c2c73e1661261173f359e93d2c5e424c17998809ec8f0232b3955e052a4cecd89008f70314a0bdd491ec86a4555d89fe0120f64c62e8e3ed8bcb45202c3d4bbec8d722824c0ebca8db1ea4a003d2fbdc1f9be78537756ab5bbe4fe9af5d785d0128171c90d9900ce2532b0f9d01c4b45294fbba468df3e1b393cb4e62e754598e47df6bd06431c94bc5d047899fd219f448bf9189c65c9d91eda6b52a373803a9efe44f86909bc90addb7b9aee813df534aac4b3093c91b8068cd849904568916694d461b76a58d88cf0f520310a1e9fdc18cde98d662eee077515d0a8811922929e085392ab3d1311b8243266d87047f601fa88a0da36b9f302e82623951743283070744f143fdec90ba5a82668d5fac114c13955ad6dca5db2231d8ba14c54c47ed04a4b4ace17e357e1d6432399f87a7a14245bbd796a09313b247b95d37ff40a404bdad74bd20000000000000000000099fef7cd7af3ce64a92f95d89d125b1e641240d7e5e27a3d1f7684448c3e3822d617e205061298b939a191be4b48e169bde2cae3accc5bd40a2968b59c93d35f8e42366fdef9a2abae1cf01ce68abff28861aac8302d268569dd42e194e330c7aaa54ebbcefd23f21ce8153b9926e12e925cb56119df72c7533a48d028ad0c74e2a9478fa3be18a1a2b65079cc1c7bc46dd12305a1ae9dd19e8d525206c0a728cfd42193abe8130b51d6c9b94c5513df2d85e8c01a2d69841f3d7799ac04bdc590bb1c89b9c695f163e57343c9bfb59909433c9001c5f8b23e"], &(0x7f00000001c0)='GPL\x00', 0x3, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x94) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) ioctl$CEC_ADAP_S_LOG_ADDRS(0xffffffffffffffff, 0xc05c6104, &(0x7f00000001c0)={"f2efe21e", 0x0, 0x6, 0x4d, 0x0, 0x1ff, "2179d46fd08e3c0ced34c7d0c7e6d7", "7ca24a13", '\x00', "a2d1d4a2", ["1af0b1ba1cb8fd54c9c9b587", "bed0f3d6ce7a5f7389827f04", "33af343c60abc64f2fdc9ddf", "9b3842fc63849f62b6eb1c3c"]}) r6 = syz_open_dev$cec(0x0, 0x0, 0xc0b02) ioctl$CEC_TRANSMIT(r6, 0xc0386105, 0x0) ioctl$CEC_TRANSMIT(r6, 0xc0386105, &(0x7f0000000140)={0x100000000, 0x800, 0xf, 0x80000001, 0xfe1c, 0x6, "72aba977db089b65fdfdc5bd97abc350", 0x74, 0x3, 0xa7, 0x7, 0x8, 0x7, 0x29}) 11m47.660177869s ago: executing program 5 (id=295): bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000240)={&(0x7f0000000080)='sched_switch\x00'}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = fsopen(&(0x7f0000000040)='fuseblk\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r3, 0x1, &(0x7f0000000580)='\xc1J\xaf\xfd,\x86\xbc\xa9\x02\xf2\xf6\xe2\xcd\x9f\xf6\x83\xeb\xba_6\xfdR\xd0\x8d\xc1\xf6.$w\xab|*`\x11H+^\xbb\x8ar\xb1\x8ec\xec,\xd5\xfd,\xce`\x9f\x92\xb4\xbe\x06?\xaa\x16Q\x94\x15\xbe\x80E\x9c\x93Hq?<(+\xceb0\xcc\xad\xdd\x1c\xee\x19\x1b\x91Z\x85\xb7\x04\xe7\xaf\xe0W,G\xc8\xc0\xbcR\x90\x17\x19@m\xa5\x19\x16i\xc8\x99)\xa5\xb0\xba\xbc\xe0rV\x06\xd0B\x0f\xcdF\xbc\x8e\x8a^%8k\x849S\x15=kxS\x1c\xc1\xdaT\x9c\b\xb6\xd8\xa0st~\xf1\x93\xb8\xba\xa5gV\x18F\x8f\xe4b\xdc\x19_P\x81\xa4\xc3\\g\x11\xd1\xc8 U\xba\x03\xc9\xf17\x88\r\xb99]\xdfM\xc8AQB\xc3\xf0\xf7t\xee\x95&w\xc3;', &(0x7f0000000180), 0x0) fsconfig$FSCONFIG_SET_STRING(r3, 0x1, &(0x7f0000000380)='{:\'@-\x00', &(0x7f0000000140)='\x00k\x00\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r3, 0x1, &(0x7f00000000c0)='fuseblk\x00', &(0x7f0000000b80)='fuseblk\x00', 0x0) close(r3) r4 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000080)='/proc/cpuinfo\x00', 0x0, 0x0) pread64(r4, &(0x7f00000000c0)=""/83, 0x4da, 0x0) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_CONGESTION(r5, 0x6, 0xd, &(0x7f0000000280)='cubic\x00', 0x6) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1801000000002000000000000000000018190000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000002400000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x90) r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="170000000000000004000000ff"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008000000000000000000018110000", @ANYRES32=r6, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008001500b7040000000000008500000058"], 0x0}, 0x94) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000300)='sys_enter\x00', r7}, 0x10) syz_open_procfs(0x0, 0x0) 11m45.620082386s ago: executing program 8 (id=296): r0 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x2, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x1) r4 = openat$nullb(0xffffffffffffff9c, 0x0, 0x4000000004002, 0x0) r5 = dup(r4) fadvise64(r4, 0x4, 0x4, 0x1) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb, 0x13, r5, 0x2000) ioctl$KVM_PRE_FAULT_MEMORY(r3, 0xc040aed5, &(0x7f00000000c0)={0xf000, 0x118000}) ioctl$IOMMU_IOAS_ALLOC(r0, 0x3b81, &(0x7f00000004c0)={0xc, 0x0, 0x0}) ioctl$IOMMU_IOAS_MAP$PAGES(r0, 0x3b85, &(0x7f00000000c0)={0x28, 0x7, r6, 0x0, &(0x7f0000ffb000/0x4000)=nil, 0x4000}) ioctl$IOMMU_TEST_OP_CREATE_ACCESS(r0, 0x3ba0, &(0x7f00000001c0)={0x48, 0x5, r6, 0x0, 0xffffffffffffffff}) ioctl$IOMMU_TEST_OP_MOCK_DOMAIN_FLAGS(r0, 0x3ba0, &(0x7f0000000100)={0x48, 0x2, r6, 0x0, 0x0, 0x0, 0x0}) ioctl$IOMMU_HWPT_ALLOC$TEST(r0, 0x3b89, &(0x7f00000003c0)={0x28, 0x2, r8, r6, 0x0, 0x0, 0xdead, 0x4, &(0x7f0000000180)}) ioctl$IOMMU_TEST_OP_ACCESS_RW(r0, 0x3ba0, &(0x7f0000000300)={0x48, 0x8, r7, 0x0, 0x2fff, 0x1, &(0x7f0000000380)="9b", 0x5}) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) sched_setscheduler(0x0, 0x1, 0x0) getpid() r9 = add_key$user(&(0x7f0000000380), 0x0, 0x0, 0x0, 0xfffffffffffffffe) r10 = add_key$user(0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd) r11 = syz_usb_connect$hid(0x2, 0x36, &(0x7f0000000240)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40, 0x4f3, 0x755, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x40, 0xb1, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x0, 0x1, 0x0, {0x9, 0x21, 0x101, 0x0, 0x1, {0x22, 0x5}}, {{{0x9, 0x5, 0x81, 0x3, 0x3ff, 0xc}}}}}]}}]}}, 0x0) syz_usb_control_io(r11, 0x0, 0x0) syz_usb_control_io(r11, 0x0, 0x0) r12 = syz_open_dev$hidraw(&(0x7f0000000280), 0x82, 0x2) ioctl$HIDIOCGFEATURE(r12, 0xc0404807, 0x0) r13 = add_key$user(&(0x7f0000006400), &(0x7f0000006c00)={'syz', 0x3}, &(0x7f0000000840)="3e12d23d346cfdeb1716f738274bc1c03bee4423fa20837e6e86b86592e9be8351aabbd6e24f37d5095f839fa4a3507df4f7526f2440e7988da94ccd868dd8741d1e43eba0b67b516be14a8b51a75bfd611b2d7ae6a21d056c2c5116a416a76b1a03dc55ea62d43c809e0ed6e56163fdab317afd5c34d61436", 0x79, 0xfffffffffffffffe) keyctl$dh_compute(0x17, &(0x7f0000000100)={r9, r10, r13}, 0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000040)={'sha256\x00'}}) 11m43.143220951s ago: executing program 5 (id=297): bpf$PROG_LOAD(0x5, 0x0, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) socket$inet6_tcp(0xa, 0x1, 0x0) r0 = socket$inet6_udplite(0xa, 0x2, 0x88) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() syz_open_dev$usbfs(&(0x7f00000001c0), 0x8, 0x80) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = fsopen(&(0x7f0000000280)='ceph\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r4, 0x1, 0x0, 0x0, 0x0) fsconfig$FSCONFIG_CMD_CREATE(r4, 0x6, 0x0, 0x0, 0x0) utimensat(0xffffffffffffff9c, &(0x7f00000003c0)='.\x00', 0x0, 0x0) r5 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$VT_RESIZEX(r5, 0x560a, &(0x7f00000006c0)={0x4, 0x0, 0x0, 0x0, 0x132, 0x3}) bind$bt_hci(0xffffffffffffffff, &(0x7f0000000040)={0x1f, 0x0, 0x1}, 0x6) mount(0x0, &(0x7f0000000100)='.\x00', 0x0, 0x1000080, 0x0) ioctl$sock_SIOCETHTOOL(r0, 0x89f1, &(0x7f0000000400)={'ip6gre0\x00', &(0x7f0000000f00)=@ethtool_per_queue_op={0x4b, 0xf, [0x2000f68f, 0x8, 0x9, 0x10001ff, 0x0, 0x4, 0xe97, 0x4, 0x6, 0xecbf, 0xff, 0x101, 0x7, 0x203, 0x3d, 0x5e, 0x1000, 0x1, 0xf557, 0x2, 0x5, 0x7c, 0xce, 0x2, 0x7f, 0xe52c, 0x918, 0x80000000, 0x1, 0xe9c4, 0xcd8, 0x6c, 0x6, 0x7, 0xd, 0x7, 0x81, 0x6, 0x6, 0x3, 0x3, 0xfffffffc, 0xfd2, 0x6, 0x8, 0x800, 0xfffff801, 0x2b, 0xa, 0x0, 0x6, 0x8, 0x5, 0x0, 0x6, 0x8, 0x23, 0xff, 0x3, 0x10, 0x3, 0xffffffff, 0x6, 0x6000000, 0xd1, 0xf, 0x4, 0xa, 0x0, 0x3ff, 0x80000000, 0x8000, 0x3, 0x5, 0x2, 0x0, 0x2, 0x9, 0x80, 0x800004, 0x2, 0x0, 0xd, 0x6, 0x3, 0x8, 0x10, 0x1, 0xfffffffc, 0x9, 0x7ff, 0x7, 0x2, 0xbde, 0x37, 0x9, 0x4, 0x1, 0x9, 0x6, 0x7fff, 0x1, 0x704, 0x33e4, 0x401, 0x5, 0x7fff, 0x8, 0x100, 0x3, 0xfffffffd, 0x2, 0x6, 0x8, 0x6, 0x7, 0x200, 0x9, 0xe, 0x81, 0x0, 0x4, 0x5, 0x5, 0x8, 0x3, 0x1, 0xfffffffa]}}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)) bpf$MAP_CREATE_TAIL_CALL(0x9, 0x0, 0x50) syz_usb_connect$uac1(0x0, 0x98, 0x0, &(0x7f0000000600)={0x0, 0x0, 0x0, 0x0, 0x5, [{0x0, 0x0}, {0x0, 0x0}, {0x0, 0x0}, {0x0, 0x0}, {0x2, &(0x7f00000000c0)=ANY=[@ANYBLOB="00001cc86acd7fedecf95b35f6f0ed5f1d20a4e5d4f159db9d0f1ca508bb3cdd13099eda72ee41329e0e0770a6a4e98ec4630095cd6d7ebf48ef3aa04f"]}]}) 11m43.017680246s ago: executing program 9 (id=298): r0 = socket$inet_sctp(0x2, 0x1, 0x84) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000006c0)={0x18, 0xb, &(0x7f0000000640)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020000000000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f00000004c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000002c0)='contention_begin\x00', r1, 0x0, 0xd}, 0x18) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xb, 0x20018d}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000540)=0x4) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) r2 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r2, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) socket(0x2, 0x80805, 0x0) unlinkat$binderfs_device(0xffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00') r3 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$PIO_SCRNMAP(r3, 0x4b41, &(0x7f00000005c0)) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, 0x0, 0x4054) setsockopt$IP_VS_SO_SET_ADD(r0, 0x0, 0x482, &(0x7f0000000040)={0x84, @dev={0xac, 0x14, 0x14, 0x13}, 0x4e20, 0x3, 'wrr\x00', 0x1, 0x2, 0x6e}, 0x2c) syz_open_procfs(0xffffffffffffffff, 0x0) openat(0xffffffffffffff9c, 0x0, 0x8c2, 0x1ff) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@abs, 0x6e) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r5, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x76dc) connect$inet6(r5, 0x0, 0x0) setsockopt$inet6_tcp_TCP_ULP(r5, 0x6, 0x1f, &(0x7f00000000c0), 0x4) r6 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r6}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) splice(r5, 0x0, 0xffffffffffffffff, 0x0, 0xaf4, 0x0) 11m39.995283489s ago: executing program 9 (id=300): syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x48e01) r0 = timerfd_create(0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) setns(0xffffffffffffffff, 0x24020000) syz_io_uring_setup(0x47a8, 0x0, &(0x7f0000000180), 0x0) syz_init_net_socket$bt_hidp(0x1f, 0x3, 0x6) r4 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='net/fib_triestat\x00') lseek(r4, 0x10000000005, 0x0) timerfd_settime(r0, 0x3, &(0x7f0000000140), 0x0) clock_adjtime(0x0, &(0x7f0000000000)={0xffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3b9ac9ff, 0x0, 0x0, 0x0, 0x0, 0x2}) timerfd_settime(r0, 0x3, &(0x7f0000000000)={{0x77359400}, {0x77359400}}, 0x0) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000003c0)=@updpolicy={0x17c, 0x19, 0x1, 0x0, 0x0, {{@in6=@private2={0xfc, 0x2, '\x00', 0x1}, @in6=@empty, 0x0, 0x3, 0x0, 0x0, 0xa, 0x0, 0x20, 0x8}, {0x0, 0x100000000000000, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x1d}, {0x0, 0x2, 0x0, 0x2dd}}, [@tmpl={0xc4, 0x5, [{{@in=@loopback, 0x0, 0x2b}, 0x0, @in=@dev={0xac, 0x14, 0x14, 0xc}, 0x0, 0x0, 0x0, 0xff}, {{@in6=@private2, 0x0, 0x32}, 0x0, @in6=@empty, 0x3502, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc}, {{@in6=@empty, 0x0, 0x2b}, 0x0, @in6=@private0, 0x0, 0x1}]}]}, 0x17c}}, 0x0) ioctl$VIDIOC_S_OUTPUT(0xffffffffffffffff, 0xc004562f, &(0x7f00000000c0)=0x1) r5 = syz_io_uring_setup(0x70ca, &(0x7f0000000080)={0x0, 0x0, 0x11100, 0x3, 0x17d}, &(0x7f0000000100)=0x0, &(0x7f00000003c0)=0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000200)={0x6, 0x4, &(0x7f0000000680)=ANY=[@ANYBLOB], &(0x7f0000000000)='GPL\x00', 0x4, 0xb, &(0x7f0000000080)=""/11, 0x41000, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xb}, 0x94) syz_io_uring_submit(r6, r7, 0x0) kexec_load(0x5, 0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x19, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x29, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x94) io_uring_enter(r5, 0x4d10, 0x2, 0x2, 0x0, 0x0) 11m39.889298937s ago: executing program 5 (id=301): r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x2040, 0x0) fcntl$setlease(r0, 0x400, 0x0) io_uring_setup(0x1694, &(0x7f0000000080)={0x0, 0x0, 0x1000, 0x0, 0x0, 0x0, r0}) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x80000}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r1}, 0x18) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) getpid() mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) fremovexattr(r0, &(0x7f0000000400)=@random={'security.', ':\'\x00'}) capset(&(0x7f0000000000)={0x20080522}, 0x0) syz_open_dev$sg(&(0x7f00000060c0), 0x0, 0x0) syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) socket$inet6_sctp(0xa, 0x1, 0x84) socket$inet6(0xa, 0x2, 0x0) r4 = open(&(0x7f0000000180)='./bus\x00', 0x14927e, 0x0) ioctl$FICLONERANGE(r4, 0x4020940d, &(0x7f0000000040)={{r4}, 0x401, 0x2, 0x7}) socket$phonet_pipe(0x23, 0x5, 0x2) setgroups(0x0, 0x0) prctl$PR_SET_SECUREBITS(0x1c, 0x1d) setuid(0xee01) 11m38.852173604s ago: executing program 8 (id=302): openat$iommufd(0xffffffffffffff9c, 0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000600)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb(camellia)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000c18000)="ad56b6c5910fae9d6dcd3292ea54c7b6ef915d564c90c200", 0x18) r1 = accept4(r0, 0x0, 0x0, 0x0) sendmsg$alg(r1, &(0x7f0000003540)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000240)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}, 0x34000041) syz_genetlink_get_family_id$ethtool(&(0x7f00000004c0), r1) sendmsg$ETHTOOL_MSG_PRIVFLAGS_SET(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000680)=ANY=[], 0x434}, 0x1, 0x0, 0x0, 0x10}, 0x40000) r2 = syz_open_dev$MSR(&(0x7f0000000540), 0x0, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) mkdir(&(0x7f0000000100)='./file0\x00', 0x10) mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000040)='devpts\x00', 0x3000005, 0x0) chroot(&(0x7f0000000200)='./file0\x00') umount2(&(0x7f0000000000)='./file0\x00', 0x0) mmap$xdp(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x0, 0x42031, 0xffffffffffffffff, 0x0) r3 = syz_open_dev$vim2m(&(0x7f0000000000), 0x6, 0x2) ioctl$vim2m_VIDIOC_S_FMT(r3, 0xc0d05605, &(0x7f0000000140)={0x1, @pix_mp={0x0, 0x0, 0x38415261}}) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r4, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r4, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000300)={{0x14}, [@NFT_MSG_NEWSET={0x3c, 0x12, 0xa, 0x9, 0x0, 0x0, {0x2}, [@NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_KEY_TYPE={0x8}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_FLAGS={0x8, 0x3, 0x1, 0x0, 0x1}]}, @NFT_MSG_DELOBJ={0x34, 0x14, 0xa, 0x3, 0x0, 0x0, {0x2}, [@NFTA_OBJ_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_OBJ_TYPE={0x8, 0x3, 0x1, 0x0, 0x1}, @NFTA_OBJ_NAME={0x9, 0x2, 'syz1\x00'}]}], {0x14}}, 0x98}}, 0x0) socket$nl_rdma(0x10, 0x3, 0x14) socket$key(0xf, 0x3, 0x2) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt(r5, 0x1, 0x10000000000009, 0x0, 0x0) syz_open_procfs(0x0, 0x0) 11m37.579506104s ago: executing program 9 (id=304): prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = bpf$PROG_LOAD(0x5, 0x0, 0x0) unshare(0x22020400) r4 = socket$inet_sctp(0x2, 0x1, 0x84) r5 = memfd_secret(0x80000) setsockopt$inet_tcp_TCP_FASTOPEN_KEY(r5, 0x6, 0x21, &(0x7f00000001c0)="04ae602cccc8cd48815d3a83b0704bf7", 0x10) setsockopt$EBT_SO_SET_ENTRIES(r4, 0x0, 0x80, &(0x7f0000000680)=@broute={'broute\x00', 0x20, 0x0, 0x90, [0x0, 0x0, 0x0, 0x0, 0x0, 0x200000000080], 0x0, 0x0, &(0x7f0000000080)=[{0x0, '\x00', 0x0, 0xfffffffffffffffe}, {0x0, '\x00', 0x0, 0xfffffffffffffffc}, {0x0, '\x00', 0x0, 0xffffffffffffffff}]}, 0x108) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000140)='sched_switch\x00', r3}, 0x10) getrlimit(0x6, &(0x7f0000000000)) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r6 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)={0x2, 0x4, 0x8, 0x1, 0x80, 0x1, 0x0, '\x00', 0x0, 0x0}, 0x48) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000040)={r6, 0xffffffffffffffff}, 0x4) r8 = bpf$PROG_LOAD(0x5, &(0x7f0000000640)={0x1f, 0x11, &(0x7f00000000c0)=@framed={{0x18, 0x0, 0x0, 0x0, 0x2}, [@call={0x85, 0x0, 0x0, 0xe}, @snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x7}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r7}}]}, &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x10, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000200)={r8}, 0xc) r9 = socket$inet6(0xa, 0x3, 0xff) connect$inet6(r9, &(0x7f0000000200)={0xa, 0x4e22, 0x0, @empty}, 0x1c) r10 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) r11 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x50) r12 = bpf$PROG_LOAD(0x5, &(0x7f0000000780)={0x3, 0x8, &(0x7f0000000180)=@framed={{}, [@call={0x85, 0x0, 0x0, 0x7}, @ringbuf_query={{0x18, 0x1, 0x1, 0x0, r11}}]}, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000004c0)={r12, 0x18000000000002a0, 0xe, 0x0, &(0x7f00000002c0)="d2ff03076003008cb89e08f086dd", 0x0, 0x1d5ae, 0x60000000, 0x0, 0x0, 0x0, 0x0}, 0x50) listen(r10, 0x3842) listen(r10, 0x80) 11m35.59156507s ago: executing program 8 (id=305): r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x25, &(0x7f0000000200)=0x474c, 0x4) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='cgroup.controllers\x00', 0x275a, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000001100)={0x6, 0xb, &(0x7f00000002c0)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020782500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000005000000b7030000fcffffff850000007300000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x21, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000800)=@base={0x19, 0x4, 0x8, 0x2, 0x0, 0x1}, 0x50) syz_emit_ethernet(0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x5, 0x8b}, 0x0) syz_emit_ethernet(0x0, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000100)=0x2) sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bce) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000002000)=""/102400, 0x19000) r4 = openat$sysfs(0xffffffffffffff9c, 0x0, 0x3816c2, 0x2) r5 = syz_init_net_socket$bt_bnep(0x1f, 0x3, 0x4) ioctl$sock_bt_bnep_BNEPGETCONNINFO(r5, 0x800442d3, &(0x7f0000000340)={0x9, 0x2, 0x3, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x3}, 'veth1_to_bond\x00'}) bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f00000000c0)={0x3, 0x4, 0x4, 0xa, 0x0, 0xffffffffffffffff, 0x6, '\x00', 0x0, 0xffffffffffffffff, 0x5, 0x3}, 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000100)={{r2}, &(0x7f0000000080), &(0x7f00000000c0)=r1}, 0x20) bind$inet(r0, &(0x7f0000000240)={0x2, 0x0, @local}, 0x6f) connect$inet(r0, &(0x7f0000000480)={0x2, 0x0, @multicast2}, 0x10) sendmmsg(r0, &(0x7f0000007fc0), 0x800001d, 0x300) setsockopt$inet_int(r0, 0x0, 0x19, &(0x7f0000000180)=0x1f5, 0x4) recvmmsg(r0, &(0x7f0000000040), 0x291962b, 0x45833af92e4b39ff, 0x0) write$P9_RVERSION(r4, &(0x7f00000004c0)=ANY=[@ANYBLOB="130000120085c19522fc624b923030327bf175145a90e4cb2f4f3dacd0102ab6159e3a3c7b25ec7081ca6ace4200dfb7b6767734dc41f6944e821de2181ba753f20b701c4266aeb8006d6c4ec1530609"], 0x13) r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=@base={0x7, 0x4, 0x8, 0xff}, 0x50) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000740)=ANY=[@ANYBLOB="180000000000000000000000000000001809c995", @ANYRES32=r6, @ANYBLOB="0000000000000000b703000000000000850000001b000000b7000000000000009500000000000000"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f0000000080)='sched_switch\x00', r7}, 0x18) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000300)={r6, &(0x7f0000000040)="aa0e18ac18275abdb580ef353a9d95981befb666f5858428", &(0x7f0000000380)=@buf="183417d33edd66e82e574c8bcb24746b937685ff5956c558e36c5f6bcb8b7bb53205e59a10096b827872d0b72d4b1de6330a6bd2f3b22ba2d2c091dab36d8fdc18ec6db45a3df3e754999fefe3bdae9457fa316cfd28c0584b865f230c87045d9a56e54b4bd28854b7158064e4562374f00e2ad4afcc1110121cd5b192f1af0c5dc7b55976", 0x1}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xe, 0x5f, &(0x7f0000001300)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0x143}, 0x48) 11m25.717874806s ago: executing program 8 (id=308): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x11, 0xb, &(0x7f00000009c0)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x33, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000040)='kfree\x00', r0}, 0x18) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0) mount$fuse(0x0, 0x0, 0x0, 0x0, 0x0) openat$fuse(0xffffffffffffff9c, 0x0, 0x42, 0x0) mount$fuse(0x0, 0x0, 0x0, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ethtool(0x0, 0xffffffffffffffff) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f00000003c0)={0x4, 0x80100008b}, 0x0) sched_setaffinity(0x0, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000002200)=0x1) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000002700)=""/102392, 0x18ff8) r2 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$batadv(&(0x7f0000000080), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r2, 0x8933, &(0x7f0000000000)) r3 = openat$sw_sync_info(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) close(r3) r4 = syz_open_dev$dri(&(0x7f0000000000), 0x1ff, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r4, 0xc04064a0, &(0x7f0000000200)={0x0, &(0x7f0000000100)=[0x0], 0x0, 0x0, 0x0, 0x1}) ioctl$DRM_IOCTL_MODE_SETCRTC(r3, 0xc06864a2, &(0x7f0000000740)={0x0, 0x0, r5, 0x0, 0x6, 0x0, 0x0, 0x0, {0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, 0xfffffffe, "65366a50432b7ee2c7feddd91df868e7cfc6fa7272f3bf0a71b5d0c19323a260"}}) r6 = syz_open_dev$dri(&(0x7f0000000080), 0x1, 0x0) ioctl$DRM_IOCTL_SET_CLIENT_CAP(r6, 0x4010640d, &(0x7f0000000000)={0x3, 0x2}) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r6, 0xc04064a0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000440)=[0x0], 0x0, 0x0, 0x0, 0x1}) ioctl$DRM_IOCTL_MODE_GETCONNECTOR(r6, 0xc05064a7, &(0x7f00000010c0)={0x0, 0x0, &(0x7f0000000300)=[0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000540), 0x0, 0x5, 0x0, 0x0, r7}) syz_open_dev$audion(&(0x7f0000000040), 0x2, 0x0) r8 = bpf$MAP_CREATE(0x0, &(0x7f00000018c0)=ANY=[@ANYBLOB="0a000000d2cf00003d36000002"], 0x48) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000100), 0x0, 0x3, r8}, 0x38) 11m23.623984496s ago: executing program 37 (id=301): r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x2040, 0x0) fcntl$setlease(r0, 0x400, 0x0) io_uring_setup(0x1694, &(0x7f0000000080)={0x0, 0x0, 0x1000, 0x0, 0x0, 0x0, r0}) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x80000}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r1}, 0x18) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) getpid() mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) fremovexattr(r0, &(0x7f0000000400)=@random={'security.', ':\'\x00'}) capset(&(0x7f0000000000)={0x20080522}, 0x0) syz_open_dev$sg(&(0x7f00000060c0), 0x0, 0x0) syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) socket$inet6_sctp(0xa, 0x1, 0x84) socket$inet6(0xa, 0x2, 0x0) r4 = open(&(0x7f0000000180)='./bus\x00', 0x14927e, 0x0) ioctl$FICLONERANGE(r4, 0x4020940d, &(0x7f0000000040)={{r4}, 0x401, 0x2, 0x7}) socket$phonet_pipe(0x23, 0x5, 0x2) setgroups(0x0, 0x0) prctl$PR_SET_SECUREBITS(0x1c, 0x1d) setuid(0xee01) 11m23.258310107s ago: executing program 8 (id=314): shutdown(0xffffffffffffffff, 0x0) setsockopt$inet_sctp6_SCTP_EVENTS(0xffffffffffffffff, 0x84, 0xb, 0x0, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(0xffffffffffffffff, 0x84, 0x6f, 0x0, &(0x7f0000000140)) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000009c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x20, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r0, 0x0, 0xfffffffffffffffe}, 0x18) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x1, 0x32, &(0x7f00000000c0), 0x4) sendmsg$unix(0xffffffffffffffff, 0x0, 0x884) r4 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r4, &(0x7f0000000080)={0x1f, 0xffff, 0x3}, 0x6) write(r4, &(0x7f0000000040)="0d000000010001", 0x7) 11m21.313382167s ago: executing program 38 (id=304): prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = bpf$PROG_LOAD(0x5, 0x0, 0x0) unshare(0x22020400) r4 = socket$inet_sctp(0x2, 0x1, 0x84) r5 = memfd_secret(0x80000) setsockopt$inet_tcp_TCP_FASTOPEN_KEY(r5, 0x6, 0x21, &(0x7f00000001c0)="04ae602cccc8cd48815d3a83b0704bf7", 0x10) setsockopt$EBT_SO_SET_ENTRIES(r4, 0x0, 0x80, &(0x7f0000000680)=@broute={'broute\x00', 0x20, 0x0, 0x90, [0x0, 0x0, 0x0, 0x0, 0x0, 0x200000000080], 0x0, 0x0, &(0x7f0000000080)=[{0x0, '\x00', 0x0, 0xfffffffffffffffe}, {0x0, '\x00', 0x0, 0xfffffffffffffffc}, {0x0, '\x00', 0x0, 0xffffffffffffffff}]}, 0x108) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000140)='sched_switch\x00', r3}, 0x10) getrlimit(0x6, &(0x7f0000000000)) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r6 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)={0x2, 0x4, 0x8, 0x1, 0x80, 0x1, 0x0, '\x00', 0x0, 0x0}, 0x48) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000040)={r6, 0xffffffffffffffff}, 0x4) r8 = bpf$PROG_LOAD(0x5, &(0x7f0000000640)={0x1f, 0x11, &(0x7f00000000c0)=@framed={{0x18, 0x0, 0x0, 0x0, 0x2}, [@call={0x85, 0x0, 0x0, 0xe}, @snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x7}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r7}}]}, &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x10, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000200)={r8}, 0xc) r9 = socket$inet6(0xa, 0x3, 0xff) connect$inet6(r9, &(0x7f0000000200)={0xa, 0x4e22, 0x0, @empty}, 0x1c) r10 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) r11 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x50) r12 = bpf$PROG_LOAD(0x5, &(0x7f0000000780)={0x3, 0x8, &(0x7f0000000180)=@framed={{}, [@call={0x85, 0x0, 0x0, 0x7}, @ringbuf_query={{0x18, 0x1, 0x1, 0x0, r11}}]}, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000004c0)={r12, 0x18000000000002a0, 0xe, 0x0, &(0x7f00000002c0)="d2ff03076003008cb89e08f086dd", 0x0, 0x1d5ae, 0x60000000, 0x0, 0x0, 0x0, 0x0}, 0x50) listen(r10, 0x3842) listen(r10, 0x80) 11m5.114571857s ago: executing program 39 (id=314): shutdown(0xffffffffffffffff, 0x0) setsockopt$inet_sctp6_SCTP_EVENTS(0xffffffffffffffff, 0x84, 0xb, 0x0, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(0xffffffffffffffff, 0x84, 0x6f, 0x0, &(0x7f0000000140)) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000009c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x20, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r0, 0x0, 0xfffffffffffffffe}, 0x18) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x1, 0x32, &(0x7f00000000c0), 0x4) sendmsg$unix(0xffffffffffffffff, 0x0, 0x884) r4 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r4, &(0x7f0000000080)={0x1f, 0xffff, 0x3}, 0x6) write(r4, &(0x7f0000000040)="0d000000010001", 0x7) 2m9.707608342s ago: executing program 4 (id=1608): r0 = socket$inet6_udp(0xa, 0x2, 0x0) bind$inet6(r0, &(0x7f0000000000)={0xa, 0xe22, 0x0, @empty, 0x2}, 0x1c) connect$inet6(r0, &(0x7f0000000140)={0xa, 0x4e20, 0x4, @remote, 0xb}, 0x1c) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000240)='xfrm0\x00', 0x10) syz_emit_ethernet(0x7e, &(0x7f0000000300)={@multicast, @local, @void, {@ipv6={0x86dd, @udp={0x0, 0x6, "010100", 0x48, 0x11, 0x0, @remote, @local, {[], {0x4e20, 0xe22, 0x48, 0x0, @wg=@cookie={0x3, 0x2, "88c73ba1f267636d01dbe5712c1c941e1cdafbbb43f09c70", "e13808ca72381f41e5fff9620915b6f78670dfaf9a2038083179cf6b7931c9b4"}}}}}}}, 0x0) 2m9.516926917s ago: executing program 4 (id=1611): r0 = openat$kvm(0x0, &(0x7f0000000040), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_CPUID2(r2, 0x4048aecb, &(0x7f0000000480)=ANY=[@ANYBLOB="070000000000000007000000ffffffff"]) ioctl$KVM_RUN(r2, 0xae80, 0x0) 2m8.985457459s ago: executing program 4 (id=1614): r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, &(0x7f0000000040)={0x1, &(0x7f00000000c0)=[{0x6, 0x0, 0x0, 0x7fc00100}]}) syz_usbip_server_init(0xaa7f3cec63cbb9d) fsetxattr$trusted_overlay_nlink(r0, &(0x7f00000001c0), &(0x7f0000000200)={'U+', 0x10001}, 0x16, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r0, 0xc0502100, &(0x7f0000000340)={0x0}) ioctl$SECCOMP_IOCTL_NOTIF_SEND(r0, 0xc0182101, &(0x7f0000000180)={r1, 0x0, 0x7f}) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r0, 0xc0502100, &(0x7f0000000540)={0x0}) socket$nl_generic(0x10, 0x3, 0x10) syz_emit_ethernet(0x0, 0x0, 0x0) socket$inet6_sctp(0xa, 0x2, 0x84) socket$inet_sctp(0x2, 0x1, 0x84) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@abs, 0x6e) r3 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r3, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty, 0x7}, 0x1c) listen(r3, 0xfffffffc) r4 = socket$inet_mptcp(0x2, 0x1, 0x106) connect$inet(r4, &(0x7f0000000000)={0x2, 0x4e22, @local}, 0x10) r5 = socket$nl_generic(0x10, 0x3, 0x10) setsockopt$inet_buf(0xffffffffffffffff, 0x0, 0x8008000000010, 0x0, 0x0) r6 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_DEL_ADDR(r5, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000240)={0x28, r6, 0x7, 0x0, 0x0, {}, [@MPTCP_PM_ATTR_ADDR={0x14, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @local}]}]}, 0x28}}, 0x0) r7 = syz_init_net_socket$rose(0xb, 0x5, 0x0) connect$rose(r7, &(0x7f0000000200)=@short={0xb, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0x2}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, 0x1, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}}, 0x1c) r8 = socket$nl_generic(0x10, 0x3, 0x10) r9 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r8, &(0x7f0000000400)={0x0, 0x1802, &(0x7f00000003c0)={&(0x7f00000004c0)={0x30, r9, 0x1, 0x70bd2c, 0x0, {}, [@MPTCP_PM_ATTR_ADDR={0x1c, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @dev={0xac, 0x14, 0x14, 0x1c}}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x3}]}]}, 0x30}, 0x1, 0xff07}, 0x2000000) ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r0, 0x40182103, &(0x7f0000000080)={r2, 0x3, r0}) r10 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff7ff9}]}) close_range(r10, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000000040)=ANY=[], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_msg}, 0x94) 2m5.8192322s ago: executing program 4 (id=1622): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x9}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7"], &(0x7f0000000900)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000180)='sched_switch\x00', r3}, 0x10) mkdirat(0xffffffffffffff9c, 0x0, 0x0) r4 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000000), 0x2002, 0x0) sendmmsg$unix(r1, 0x0, 0x0, 0x10) mmap$dsp(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x3, 0x12, r4, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) r5 = syz_open_dev$cec(&(0x7f0000000100), 0x0, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) ioctl$CEC_ADAP_S_LOG_ADDRS(r5, 0xc05c6104, &(0x7f00000001c0)={"f2efe21e", 0x0, 0x6, 0x4d, 0x0, 0x1ff, "2179d46fd08e3c0ced34c7d0c7e6d7", "7ca24a13", '\x00', "a2d1d4a2", ["1af0b1ba1cb8fd54c9c9b587", "bed0f3d6ce7a5f7389827f04", "33af343c60abc64f2fdc9ddf", "9b3842fc63849f62b6eb1c3c"]}) syz_open_dev$cec(0x0, 0x0, 0xc0b02) 2m4.280615131s ago: executing program 4 (id=1624): r0 = syz_open_dev$admmidi(&(0x7f0000000140), 0x20, 0x0) r1 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x49783, 0x0) readv(r0, &(0x7f0000000400)=[{&(0x7f0000000380)=""/128, 0x80}], 0x1) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x4) ioctl$SNDCTL_SEQ_PANIC(r1, 0x5111) 2m3.963575709s ago: executing program 4 (id=1626): r0 = socket$inet_udp(0x2, 0x2, 0x0) r1 = socket$netlink(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$devlink(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_RATE_NEW(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000300)={0x34, r2, 0x1, 0x0, 0x25dfdbfb, {0x25}, [@handle=@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}]}, 0x34}, 0x1, 0x0, 0x0, 0x41}, 0x8000) setsockopt$inet_IP_XFRM_POLICY(r0, 0x0, 0x11, &(0x7f00000002c0)={{{@in6=@mcast1, @in=@multicast1, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0xee01}, {0x10000, 0x0, 0x0, 0x0, 0xfffffffffffffffc, 0x0, 0x0, 0xfffffffffffffffd}, {0x0, 0x8, 0x0, 0x8}, 0x0, 0x0, 0x1, 0x0, 0x1}, {{@in=@initdev={0xac, 0x1e, 0x1, 0x0}, 0x2, 0x6c}, 0x0, @in=@empty, 0x0, 0x5, 0x0, 0xb7}}, 0xe8) 1m47.720294911s ago: executing program 40 (id=1626): r0 = socket$inet_udp(0x2, 0x2, 0x0) r1 = socket$netlink(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$devlink(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_RATE_NEW(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000300)={0x34, r2, 0x1, 0x0, 0x25dfdbfb, {0x25}, [@handle=@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}]}, 0x34}, 0x1, 0x0, 0x0, 0x41}, 0x8000) setsockopt$inet_IP_XFRM_POLICY(r0, 0x0, 0x11, &(0x7f00000002c0)={{{@in6=@mcast1, @in=@multicast1, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0xee01}, {0x10000, 0x0, 0x0, 0x0, 0xfffffffffffffffc, 0x0, 0x0, 0xfffffffffffffffd}, {0x0, 0x8, 0x0, 0x8}, 0x0, 0x0, 0x1, 0x0, 0x1}, {{@in=@initdev={0xac, 0x1e, 0x1, 0x0}, 0x2, 0x6c}, 0x0, @in=@empty, 0x0, 0x5, 0x0, 0xb7}}, 0xe8) 11.066507663s ago: executing program 6 (id=1917): r0 = socket$pppoe(0x18, 0x1, 0x0) connect$pppoe(r0, &(0x7f0000000080)={0x18, 0x0, {0xfffe, @local, 'geneve0\x00'}}, 0x1e) r1 = socket$pppoe(0x18, 0x1, 0x0) connect$pppoe(r1, &(0x7f0000000080)={0x18, 0x0, {0xfffe, @local, 'veth1_virt_wifi\x00'}}, 0x1e) r2 = socket$pppoe(0x18, 0x1, 0x0) connect$pppoe(r2, &(0x7f0000000080)={0x18, 0x0, {0xfffe, @local, 'ip6tnl0\x00'}}, 0x1e) close(0x3) 10.770123752s ago: executing program 0 (id=1919): r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x2040, 0x0) fcntl$setlease(r0, 0x400, 0x0) io_uring_setup(0x1694, &(0x7f0000000080)={0x0, 0x0, 0x1000, 0x0, 0x0, 0x0, r0}) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x80000}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r1}, 0x18) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) fremovexattr(r0, &(0x7f0000000400)=@random={'security.', ':\'\x00'}) capset(&(0x7f0000000000)={0x20080522}, 0x0) syz_open_dev$sg(&(0x7f00000060c0), 0x0, 0x0) syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) socket$inet6_sctp(0xa, 0x1, 0x84) socket$inet6(0xa, 0x2, 0x0) r5 = open(&(0x7f0000000180)='./bus\x00', 0x14927e, 0x0) ioctl$FICLONERANGE(r5, 0x4020940d, &(0x7f0000000040)={{r5}, 0x401, 0x2, 0x7}) socket$phonet_pipe(0x23, 0x5, 0x2) setgroups(0x0, 0x0) prctl$PR_SET_SECUREBITS(0x1c, 0x1d) setuid(0xee01) 9.235679389s ago: executing program 6 (id=1921): r0 = socket$key(0xf, 0x3, 0x2) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000001f40)={&(0x7f00000004c0)=@updpolicy={0xfc, 0x19, 0x1, 0x0, 0x0, {{@in6=@rand_addr=' \x01\x00', @in=@local, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, {0x0, 0xa9, 0x0, 0x0, 0x0, 0xffffffffffffffff}, {0x0, 0xa00, 0x40800000000000, 0x800000000000000}}, [@tmpl={0x44, 0x5, [{{@in=@local, 0x0, 0x3c}, 0x0, @in=@broadcast, 0x0, 0x0, 0x3}]}]}, 0xfc}}, 0x0) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r2, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000980)={&(0x7f0000000740)=ANY=[@ANYBLOB="18010000210001000000000000000000fc020000000000000000000000000000ff0200000000000000000000000000014e210000000000000a00000000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="00000000000000009c001100ac"], 0x118}}, 0x44) sendmsg$key(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000240)=ANY=[@ANYBLOB="021600000a0000000000000000000000080012000007a18208"], 0x50}}, 0x0) 9.234304048s ago: executing program 3 (id=1922): r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) syz_genetlink_get_family_id$netlbl_unlabel(0x0, 0xffffffffffffffff) sendmsg$NLBL_UNLABEL_C_STATICADD(0xffffffffffffffff, 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000100)=0x3) r1 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000340), 0x0, 0x0) ioctl$PPPIOCATTCHAN(r1, 0x40047438, &(0x7f0000000300)=0x1) ioctl$BTRFS_IOC_WAIT_SYNC(r1, 0x80047458, &(0x7f0000000080)) 9.118553477s ago: executing program 1 (id=1924): ioctl$KVM_SET_MSRS(0xffffffffffffffff, 0x4008ae89, &(0x7f0000000000)=ANY=[@ANYBLOB="010000000000000002"]) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=ANY=[@ANYBLOB="1c000000180011"], 0x1c}}, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="1400000007"], 0x50) pwrite64(0xffffffffffffffff, &(0x7f0000000000)='L', 0x1, 0x7) r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000040)={0x1f, 0xffff, 0x3}, 0x6) write$binfmt_misc(r0, &(0x7f0000000000), 0xd) 9.061439309s ago: executing program 0 (id=1925): r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r0, 0x107, 0xf, &(0x7f0000000240)=0x2, 0x4) setsockopt$packet_rx_ring(r0, 0x107, 0x5, &(0x7f0000000040)=@req3={0x1000, 0x3a, 0x1000, 0x3a}, 0x1c) r1 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r1, 0x107, 0xf, &(0x7f0000000000)=0x9, 0x4) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000300)={'wg0\x00', 0x0}) sendto$packet(r1, &(0x7f0000000180)="0b03feff4f00021202004788aa96a13bb1000011000088ca1a00", 0x1fffc, 0x0, &(0x7f0000000140)={0x11, 0x0, r2}, 0x14) 8.900393343s ago: executing program 3 (id=1926): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000380), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = dup(r1) ioctl$KVM_REGISTER_COALESCED_MMIO(r2, 0x4010ae67, &(0x7f00000000c0)={0x0, 0xc000}) ioctl$KVM_REGISTER_COALESCED_MMIO(r2, 0x4010ae67, &(0x7f0000000080)={0x4}) ioctl$KVM_UNREGISTER_COALESCED_MMIO(r2, 0x4010ae68, &(0x7f0000000400)={0xeeef0004, 0x2000, 0x1}) 8.581774664s ago: executing program 1 (id=1927): setsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000040)={{{@in6=@empty, @in=@remote, 0x0, 0x0, 0xfffc, 0x0, 0x0, 0x0, 0x80}, {0x0, 0x0, 0x0, 0x2000000000000, 0x0, 0x0, 0x0, 0x3}, {0x0, 0x0, 0x10000000}, 0x0, 0x0, 0x2}, {{@in=@initdev={0xac, 0x1e, 0x0, 0x0}}, 0x0, @in=@private, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}}, 0xe8) r0 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r0, &(0x7f0000f5dfe4)={0xa, 0x4e20, 0x0, @empty}, 0x1c) recvmmsg(r0, &(0x7f0000000040), 0x400000000000284, 0x2b, 0x0) setsockopt$inet6_int(r0, 0x29, 0x4a, &(0x7f0000000040)=0x7, 0x4) setsockopt$inet6_int(r0, 0x29, 0x4d, &(0x7f0000000180)=0x8, 0x4) sendto$inet6(r0, 0x0, 0x0, 0x0, &(0x7f0000000300)={0xa, 0x4e20, 0x0, @mcast1}, 0x1c) 8.268460012s ago: executing program 7 (id=1928): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x9}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xa, 0x4, 0xffd, 0x7}, 0x48) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000", @ANYRES32=r3, @ANYBLOB], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={0x0, r4}, 0x18) sendmmsg$unix(r1, 0x0, 0x0, 0x10) sched_setparam(r0, &(0x7f0000000040)=0x1) ioctl$SNDCTL_DSP_SETFMT(0xffffffffffffffff, 0xc0045005, 0x0) unlink(0x0) 8.198882691s ago: executing program 0 (id=1929): r0 = socket$inet_tcp(0x2, 0x1, 0x0) sendmmsg$inet6(0xffffffffffffffff, 0x0, 0x0, 0x40) shutdown(0xffffffffffffffff, 0x1) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000180)={'syz_tun\x00', 0x0}) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x6, 0x5, &(0x7f0000000040)=ANY=[@ANYBLOB="180200000004000000000000000000008500000036000000850000000700000095"], &(0x7f0000000400)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x61, '\x00', 0x0, @xdp=0x25, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xa}, 0x94) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000100)={r2, r1, 0x25, 0x0, @val=@tracing}, 0x40) syz_emit_ethernet(0xc01, &(0x7f0000001500)=ANY=[], 0x0) 8.198083459s ago: executing program 6 (id=1930): bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r0 = mq_open(&(0x7f0000000a00)='eth0\x00#\x13\xaeu\xe0\xfbu0*\xf3\x11i\xdd\xd9\xc6\x87\xde\xbf_\xa0\xf6\xdfk\xbf.\"\xa6\xc0#p\xcd\x1c/\xa6\xf2\xbcyL\x85a\xb5\xbb~+>\xbc\x93\xf8\xab\x9a3\x85l\x1d\x15\x11\x1a{@!2\xb6!\xae\xf79k\x90\x88\v8I$\xfdQ\x1d\x90=r\xd8\xc0\xd8\t/\x8dv\xd3\xa7\xd8J\xfd\x94#KT\xdd\x14\xd3\xe1\xbe_$A=z\xee\xbd/X\xbemOX)s\x94\xde\xbe_\x88N\xb8\xde\xeb)\xcd\xc56m\n\v\x01\xbe\xeb\xbb\x91\x11z\xc2|d\x1b\x04\xd2\xf9yx\xb2\x1b\bLTrw\x88|0\t\xc6\xe2\x9c\xed\\\xd8[\xc8\x04 \xf3\xac]V\x1d:\xfc\xc3\x9e\x02\ax\xef\xfe\x1c.TT\xcf\xbf\xf5\x80a%\xdcQ\xb3CuT\xcc\x02\xea\x91\xe8\xd8\x01YZy\xe6!\x89\x9c\xd1\xa6\x167\x8avs\xb2\a\xfe\xb3j*\xad\x18I\xcc\xe9\xaa{]\xef\xb7\xf2\xee*\xf95\bJt\xd0s\xc4\xaa\xc8\x13~\xb2\xf20\xbdf\xdb\xaeG\xe3\xfb\xef\x94\xef:Q\x1b\xe3\xa3\xa4}\xef`e\xcdL\xab\xdb\r\xf2y\x9fg1\xf4\t\x18i/!\x13\xf1,\x8cu\xaa\xbf~)\x94\x1b2\x93\x86\xe7\x9a\xf2j\xa8\x96\xa6\xa2\xfcN\x81\xafTh\xb3\x1bo:\xe8\vq7S\xe4H\xf3L\xa0\x9c\x97B\x12\x10\x9d\xaa\x7fq\x06\xb9(\xf6\x1c\x83\xb1[\x84\x10aF\x9b\xda\xeb\xc4*\x02q\xb2\x92\x00\x8cv\xac AN\xb9\xaa\x81W\x97Te\x81\x98L\xfe\x97+u\xd3^\xb1\xf0\xe0\x1f\xbd\a\xbb\xe5\x18\x9ds\x12ha\x00\xeb\x84\x99\xc6\x0f\xf1\xd5LD\xa87\xa0DQ\x8a2\x16!8,\xbc%$\xf1\xf2\xd6\x9cy\xecK\xda\xc5\xdc\xfa\xdd\xf6\b\xc6\xb4\x14\x16\x9c\x7f\x92\x85\xb0\xa2%:\xf0\xf4\x150\x0f\xb4\xa6d\xb4\xe4L\x19W\xd5\x90\xf7l\x1b\xfe\xde\vh\x97=m\x82.\xac\vh\xfe\x84Q}\x838/\x83\xebP\xbe\xd6+:\xceE\\\x95\xd4\xac\x92\x87\xd7\x98\x97\xe3\xec\xad\xd5\xac\x80C\x84R\x88r^g\xbaQ(\x9a>\xe2\xba\xa8=\x17\f04\x8f\x1f\xf2\x88*@v\xe7\xd1\xee\xb3\xc2\x8dT\xda\x81g\xd9\x1a:hzW6s)x\x06\xae\x11\xf2\x1e\xcd\v\xe5L\x19\x96s\xbc\x9e\xf4\x10$\r\xa4\xd8\xa2\xa2\xfcM\xc5R3~$\xc0\xa5n\x9a W\xb1e\xcc<$\xf5#G\xce\xafUD\x9dA\xf24\xf6\xb5\xef\xe2z\xcf\x9eN\x92\xac\x81{\xe6\xbd\xd7\x16\xe6F\xe2\x9e\x91%\x94\v\xb9\xdc\xd6\x87\x8f\xcd\xc1\xb05\x81\x81\xf8\xe9X\xe8Kt9@\xf4\xe1\xa6=\xc9\xe1:p4\nP[f\x1d\xfd\xfa\x839\x8d\x0e\xd1\xf9\xa0\xd2^E\xe5\xedo.\xaa\xf2\xb4\xcdn\x14\f\xcd\x83_yk\xda\xc5\x89\xf0Z\xea\x1d\xbd\xc00\v\xa3\xb3\xbe\xe6\x8b\x18/\xa8\xaaY\xf2\x89\x0f\x9enOOr\x00\xb2\x01\x1f:Z\xb8\xee;\xe3;\x8aPV\xce\xee\xf8[\x16\n\xe6:z\xb8\x1dvk\a{\xc1\x14\xd9+\xdb\t\x11\x90y\xe8\\\xe6\xfc\xca\xb4\xcbC\xd6\xd0\xbeC\xce\xc0L\xdb\xcd\xb3\x907c\xb4\xa6\xce\xdb[\xce\x122N\xa3\xc7Q<\x1a\xa5\xb3)\xc5\x98\x84\x8a\x82\x19\xb0\t\xac\x10\\\x8c\xbe\xcb\raIYe[\xa8\xc4\xac\x0e\xbb\x0f\b^\xdag\xe2\xa9\"\xf5h\'\xcf\xd9\x1b\xef\xe3\xe7y\x82\x1e\xca\x7f\x02 \xcf\x9e\xe0\xd9TM\xb9\n\xa9\xad3\x91\xa5\xe6!\xcd\xa2\xa4\x14\x12\xf9\xbf\xa8b\xcec:\xd7\'\f\f\x957\xc9}\r\xa6\xaa\x0f\xca\x96\xeb\x00\x00\x00\x00\x00', 0x42, 0x1f0, 0x0) mq_timedsend(r0, 0x0, 0x0, 0x0, 0x0) mq_timedsend(r0, 0x0, 0x0, 0x6, 0x0) mq_timedsend(r0, 0x0, 0x0, 0x0, 0x0) mq_unlink(&(0x7f0000000000)='eth0\x00') close(r0) 8.191380656s ago: executing program 1 (id=1931): unshare(0x20020000) mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000000240)='binfmt_misc\x00', 0x0, 0x0) open_tree(0xffffffffffffff9c, &(0x7f0000000100)='\x00', 0x89901) poll(0x0, 0x0, 0x90f0) r0 = open(&(0x7f0000000000)='.\x00', 0x800, 0x0) unlinkat(r0, &(0x7f0000000280)='./file0\x00', 0x200) 8.026147307s ago: executing program 3 (id=1932): socket(0x1e, 0x4, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000180)=0x100000001, 0x4) connect$inet6(r0, &(0x7f0000000200)={0xa, 0x0, 0x0, @loopback}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f0000000540), 0x3c) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x1, &(0x7f0000000040)=@gcm_256={{0x304, 0x36}, "1a88ef816c4b42ed", "a5fdeb69a751e94df50ad7e9fb434d1665e9298b01e49419567b443803cf578f", "6d02cd81", "066580001e00"}, 0x38) close(0x4) 6.924417717s ago: executing program 3 (id=1933): r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) readv(r0, &(0x7f0000000000)=[{&(0x7f0000001200)=""/150, 0x96}], 0x1) ioctl$TCSETS(r0, 0x5402, &(0x7f00000014c0)={0xfffffffd, 0xffffffcb, 0x1c02, 0x2, 0x7f, "cc33101d3f0000002000"}) ioctl$TCSETS(r0, 0x40045431, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x9, 0x0, "000080f100df000000a7d9de16c708db7200"}) r1 = syz_open_pts(r0, 0x42) r2 = dup3(r1, r0, 0x0) write$UHID_INPUT(r2, &(0x7f00000001c0)={0xd, {"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", 0x1000}}, 0xffffff5c) 6.791415566s ago: executing program 7 (id=1934): openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000200)='./binderfs/binder0\x00', 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)) r0 = socket(0x1, 0x803, 0x0) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="1c0000001500010300000000000000000c00000008000100", @ANYRES32=r0], 0x1c}}, 0x4000000) sendmsg$NLBL_UNLABEL_C_STATICADD(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000100)={0x0}, 0x8, 0x3000000000002}, 0x6b7e369c4a37b0ea) 6.655685779s ago: executing program 6 (id=1935): r0 = socket$nl_audit(0x10, 0x3, 0x9) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$team(&(0x7f0000000080), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000040)={'team0\x00', 0x0}) r4 = socket(0x2, 0x3, 0x1) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000040)={'team_slave_1\x00', 0x0}) sendmsg$TEAM_CMD_OPTIONS_SET(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)={0x5c, r2, 0x1, 0x70bd28, 0x25dfdbff, {}, [{{0x8, 0x1, r3}, {0x40, 0x2, 0x0, 0x1, [{0x3c, 0x1, @user_linkup={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r5}}}]}}]}, 0x5c}, 0x1, 0x0, 0x0, 0x400}, 0x4040014) 6.654801101s ago: executing program 1 (id=1936): r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x2040, 0x0) fcntl$setlease(r0, 0x400, 0x0) io_uring_setup(0x1694, &(0x7f0000000080)={0x0, 0x0, 0x1000, 0x0, 0x0, 0x0, r0}) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x80000}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r1}, 0x18) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) fremovexattr(r0, &(0x7f0000000400)=@random={'security.', ':\'\x00'}) capset(&(0x7f0000000000)={0x20080522}, 0x0) syz_open_dev$sg(&(0x7f00000060c0), 0x0, 0x0) syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) socket$inet6_sctp(0xa, 0x1, 0x84) socket$inet6(0xa, 0x2, 0x0) r5 = open(&(0x7f0000000180)='./bus\x00', 0x14927e, 0x0) ioctl$FICLONERANGE(r5, 0x4020940d, &(0x7f0000000040)={{r5}, 0x401, 0x2, 0x7}) socket$phonet_pipe(0x23, 0x5, 0x2) setgroups(0x0, 0x0) prctl$PR_SET_SECUREBITS(0x1c, 0x1d) setuid(0xee01) 6.56084722s ago: executing program 0 (id=1937): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000140)={0xa, 0x4e22}, 0x1c) listen(r0, 0x0) syz_emit_ethernet(0x4a, &(0x7f00000001c0)={@local, @remote, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "0a8435", 0x14, 0x6, 0x1, @remote, @local, {[], {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0x5, 0x2}}}}}}}, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) connect$inet6(r1, &(0x7f0000000080)={0xa, 0x4e22, 0x7, @ipv4={'\x00', '\xff\xff', @empty}}, 0x1c) syz_emit_ethernet(0x36, &(0x7f0000000040)={@local, @empty, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x9, 0x28, 0x0, 0x0, 0x0, 0x6, 0x0, @remote, @dev={0xac, 0x14, 0x14, 0xa}}, {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x6, 0x5, 0x2, 0xfffe}}}}}}, 0x0) 6.170794741s ago: executing program 7 (id=1938): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x76dc) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x0, 0x7}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f00000002c0), 0x4) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f0000000000)=0x1, 0x4) write$binfmt_script(r0, &(0x7f0000000140)={'#! ', './file0', [], 0xa, "b4c6"}, 0xd) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x2, &(0x7f0000000500)=@gcm_256={{0x303}, "2a4001011f891d5b", "11682d84dd05bb63ae661f051e1e79ceafeaa60a5bd1dc83db142ade2bd907fd", "fd6ed24e", "d4e9e1c90d89691c"}, 0x38) 6.162227486s ago: executing program 6 (id=1939): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_IRQCHIP(r1, 0x4020aeb2, &(0x7f0000000740)={0x0, 0x12c, @pic={0x0, 0x0, 0x0, 0x0, 0x1}}) 4.984057809s ago: executing program 7 (id=1940): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000000)={'team_slave_0\x00', 0x0}) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000080)={'team0\x00', 0x0}) r5 = syz_genetlink_get_family_id$team(&(0x7f0000000100), 0xffffffffffffffff) sendmsg$TEAM_CMD_OPTIONS_SET(r1, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000380)={0x60, r5, 0x809, 0x0, 0x0, {}, [{{0x8, 0x1, r4}, {0x44, 0x2, 0x0, 0x1, [{0x40, 0x1, @queue_id={{{0x24}, {0x5}, {0x8, 0x4, 0x3}}, {0x8, 0x6, r3}}}]}}]}, 0x60}}, 0x0) 4.982491095s ago: executing program 0 (id=1941): timer_create(0x0, &(0x7f0000000080)={0x0, 0x11, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000000)) r0 = socket(0x1d, 0x2, 0x6) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f00000004c0)={'vcan0\x00', 0x0}) bind$can_j1939(r0, &(0x7f00000000c0)={0x1d, r1, 0x8000000000000003, {}, 0xfd}, 0x18) sendmsg$nl_route_sched(r0, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000900)=@deltaction={0x14, 0x31, 0x200, 0x70bd2a, 0x25dfdbff}, 0x14}, 0x1, 0x0, 0x0, 0x4008805}, 0x480c5) close(r0) timer_settime(0x0, 0x0, &(0x7f0000000240)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) 4.981934s ago: executing program 1 (id=1942): ioctl$SG_SET_KEEP_ORPHAN(0xffffffffffffffff, 0x2287, &(0x7f0000003680)=0xfff) r0 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r0, 0x3b81, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x143102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r2 = socket$inet6(0xa, 0x1, 0x8010000000000084) bind$inet6(r2, &(0x7f00000000c0)={0xa, 0x4e21, 0x0, @empty}, 0x1c) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) bind$netlink(r3, &(0x7f0000000200)={0x10, 0x0, 0x0, 0x80065c9}, 0xc) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r4, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010600000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff1b000000020000000900010073797a30000001000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r4, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)={{0x14}, [@NFT_MSG_NEWSET={0x34, 0x12, 0xa, 0x201, 0x0, 0x0, {0x2}, [@NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_FLAGS={0x8, 0x3, 0x1, 0x0, 0xa}]}], {0x14}}, 0x5c}}, 0x0) connect$inet6(r2, &(0x7f0000000000)={0xa, 0x4e21, 0x0, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x14}}}, 0x1c) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r2, 0x84, 0x9, &(0x7f0000000300)={0x0, @in6={{0xa, 0x0, 0x0, @empty}}, 0x0, 0x0, 0x318, 0x1, 0x24}, 0x9c) 4.92884825s ago: executing program 3 (id=1943): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x2, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000002140)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x4000}}) read$FUSE(r0, &(0x7f00000021c0)={0x2020, 0x0, 0x0, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r0, &(0x7f0000004200)={0x50, 0x0, r1, {0x7, 0x29, 0xfffffffe, 0x2045404a, 0x0, 0x40, 0x2, 0x0, 0x0, 0x0, 0x20, 0x76}}, 0x50) newfstatat(0xffffffffffffff9c, &(0x7f0000000300)='./file0/file1aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0, 0x7800) syz_fuse_handle_req(r0, &(0x7f0000006280)="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", 0x2000, &(0x7f0000000d00)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000080)={0x10, 0xfffffffffffffffe, 0x4000000a74e, {0x1, 0x0, 0x0, 0xffff, 0xfffffff8, 0x84, {0x4, 0x5, 0x7, 0x80000000, 0xfff, 0xffff, 0x7d59, 0x7fff, 0x4, 0x2000, 0x7f, r2, r3, 0x78002, 0xff}}}, 0x0, 0x0, 0x0, 0x0, 0x0}) 1.874655369s ago: executing program 7 (id=1944): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x9}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xa, 0x4, 0xffd, 0x7}, 0x48) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000", @ANYRES32=r3, @ANYBLOB], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={0x0, r4}, 0x18) sendmmsg$unix(r1, 0x0, 0x0, 0x10) sched_setparam(r0, &(0x7f0000000040)=0x1) ioctl$SNDCTL_DSP_SETFMT(0xffffffffffffffff, 0xc0045005, 0x0) unlink(0x0) 1.874214835s ago: executing program 3 (id=1945): timer_create(0x0, 0x0, 0x0) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) ioctl$KVM_CAP_EXIT_HYPERCALL(0xffffffffffffffff, 0x4068aea3, &(0x7f0000000040)={0x79, 0x0, 0xc}) syz_usb_connect(0x2, 0x36, &(0x7f0000000040)=ANY=[@ANYBLOB="1201100153a42908f00a71729188010203010902", @ANYRESDEC], 0x0) ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x2) syz_usb_connect(0x2, 0x68, &(0x7f0000000640)=ANY=[@ANYBLOB], 0x0) syz_emit_vhci(&(0x7f0000001b40)=@HCI_ACLDATA_PKT={0x2, {0xc9, 0x2, 0x0, 0xc}, @l2cap_cid_le_signaling={{0x8}, @l2cap_ecred_reconf_req={{0x19, 0x31, 0x4}, {0x2, 0x6}}}}, 0x11) 1.578006185s ago: executing program 1 (id=1946): r0 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000140)={'veth1_to_bond\x00'}) socket$key(0xf, 0x3, 0x2) socket$nl_xfrm(0x10, 0x3, 0x6) socket$packet(0x11, 0x2, 0x300) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB="0b0000000800000002009b154ebd9e2902c81cd6bb7d58091100000400000005000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32], 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000380)={{r4, 0xffffffffffffffff}, &(0x7f0000000040), &(0x7f0000000300)}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xe, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000f14c01000000000000eeff0018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b7080000020000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000030000009500000000000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000640)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1c, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r6}, 0x10) r7 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r7, 0x6, 0x210000000013, &(0x7f00000000c0)=0x100000001, 0x4) bind$inet(r7, &(0x7f0000000080)={0x2, 0x4e21, @multicast1}, 0x10) connect$inet(r7, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r7, 0x6, 0x16, &(0x7f0000000000)=[@mss, @sack_perm, @window={0x3, 0x7}, @mss={0x2, 0xfff}, @window={0x3, 0x0, 0x401}, @window], 0x20000000000000e4) setsockopt$inet_tcp_TCP_REPAIR(r7, 0x6, 0x13, &(0x7f00000001c0), 0x4) sendto$inet(r7, &(0x7f0000000000), 0xffffffffffffff94, 0xb, 0x0, 0x0) recvfrom$inet(r7, &(0x7f0000000080)=""/8, 0xfffffffffffffd0b, 0xc9100120, 0x0, 0xfffffffffffffd25) gettid() 408.887658ms ago: executing program 0 (id=1947): r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000000140)) ioctl$VHOST_SET_FEATURES(r0, 0x4008af00, &(0x7f0000000080)=0x200000000) r1 = dup2(r0, r0) write$vhost_msg_v2(r1, &(0x7f0000000600)={0x2, 0x0, {&(0x7f00000001c0)=""/128, 0x80, 0x0, 0x2, 0x2}}, 0x48) ioctl$VHOST_VSOCK_SET_RUNNING(r1, 0x4004af61, &(0x7f0000000380)=0x1) 386.747005ms ago: executing program 6 (id=1948): r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000000c0)=0xf) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$TCFLSH(r1, 0x400455c8, 0x2) ioctl$TIOCSETD(r1, 0x5412, &(0x7f0000000140)=0xffffffc0) ioctl$TIOCSTI(r1, 0x5412, &(0x7f00000001c0)) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000040)=0x14) 0s ago: executing program 7 (id=1949): r0 = syz_open_dev$dri(&(0x7f0000000080), 0x1, 0x0) ioctl$DRM_IOCTL_SET_CLIENT_CAP(r0, 0x4010640d, &(0x7f0000000000)={0x3, 0x2}) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r0, 0xc01064b5, &(0x7f0000000140)={&(0x7f00000006c0)=[0x0], 0x1}) ioctl$DRM_IOCTL_MODE_GETPLANE(r0, 0xc02064b6, &(0x7f00000003c0)={r1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_SETCRTC(r0, 0xc06864a2, &(0x7f0000000400)={0x0, 0x0, r2, 0x0, 0x0, 0x0, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "b4bc323ef77d1f000071849800000000deff00000000e6ffffff00"}}) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r0, 0xc01064b5, &(0x7f0000000180)={&(0x7f00000000c0)=[0x0], 0x1}) ioctl$DRM_IOCTL_MODE_SETPLANE(r0, 0xc03064b7, &(0x7f0000000a00)={r4, r2, r3, 0x0, 0x1, 0x0, 0x0, 0x0, 0x3, 0x1, 0x3, 0x800000}) kernel console output (not intermixed with test programs): m109_toggle_buzzer_sync: usb_control_msg() failed -19 [ 1036.595660][T11029] IPVS: sync thread started: state = BACKUP, mcast_ifn = hsr0, syncid = 4, id = 0 [ 1038.057690][T11046] netlink: 47 bytes leftover after parsing attributes in process `syz.1.960'. [ 1040.758704][ T8446] usb 1-1: new low-speed USB device number 12 using dummy_hcd [ 1040.919514][ T8446] usb 1-1: config 0 has an invalid interface number: 55 but max is 0 [ 1040.919545][ T8446] usb 1-1: config 0 has no interface number 0 [ 1040.919602][ T8446] usb 1-1: config 0 interface 55 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 1040.919630][ T8446] usb 1-1: config 0 interface 55 altsetting 0 endpoint 0xE has invalid maxpacket 32, setting to 8 [ 1040.919661][ T8446] usb 1-1: config 0 interface 55 altsetting 0 has an endpoint descriptor with address 0xAB, changing to 0x8B [ 1040.919687][ T8446] usb 1-1: config 0 interface 55 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 10 [ 1040.919712][ T8446] usb 1-1: config 0 interface 55 altsetting 0 endpoint 0x8B has invalid maxpacket 120, setting to 8 [ 1040.919739][ T8446] usb 1-1: config 0 interface 55 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 2 [ 1040.919793][ T8446] usb 1-1: New USB device found, idVendor=0f11, idProduct=1080, bcdDevice=fc.6a [ 1040.919816][ T8446] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1040.951512][ T8446] usb 1-1: config 0 descriptor?? [ 1040.955742][T11098] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 1040.955967][T11098] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 1041.052477][ T8446] ldusb 1-1:0.55: LD USB Device #0 now attached to major 180 minor 0 [ 1041.272395][ T5909] usb 1-1: USB disconnect, device number 12 [ 1041.297918][T11115] ALSA: mixer_oss: invalid OSS volume 'A1é4ó1Ø=w”ÄVe]' [ 1041.297944][T11115] ALSA: mixer_oss: invalid OSS volume 'ÊÒ±BËÂì;T`¿@$™¿¾E÷ócXÆMYdŸè,' [ 1041.297985][T11115] ALSA: mixer_oss: invalid OSS volume 'b«Ž@hé#' [ 1041.298015][T11115] ALSA: mixer_oss: invalid OSS volume '•‘h4¿–ÐX¬„S4v=0_>¤&äÏ' [ 1041.298053][T11115] ALSA: mixer_oss: invalid OSS volume '|œ/"tj' [ 1041.298067][T11115] ALSA: mixer_oss: invalid OSS volume '-z5²Šc^÷Jƒå6$̹' [ 1041.298100][T11115] ALSA: mixer_oss: invalid OSS volume '0ÉóT„®°yòÝäî¬ó‰´ª‡—‚j–P&†³aït' [ 1041.298115][T11115] ALSA: mixer_oss: invalid OSS volume '÷|á¥ó~‚\' [ 1041.298161][T11115] ALSA: mixer_oss: invalid OSS volume '­É@ô^3bÉœ‘}˜ÔG$º#\Ä("/øoúLÛ' [ 1041.298173][T11115] ALSA: mixer_oss: invalid OSS volume '' [ 1041.361509][ T5909] ldusb 1-1:0.55: LD USB Device #0 now disconnected [ 1041.597261][ T5924] usb 8-1: new high-speed USB device number 26 using dummy_hcd [ 1041.761681][ T5924] usb 8-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 16 [ 1041.761715][ T5924] usb 8-1: config 0 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 64 [ 1041.766670][ T5924] usb 8-1: New USB device found, idVendor=0a46, idProduct=9621, bcdDevice=4f.32 [ 1041.766703][ T5924] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1041.766725][ T5924] usb 8-1: Product: syz [ 1041.766740][ T5924] usb 8-1: Manufacturer: syz [ 1041.766756][ T5924] usb 8-1: SerialNumber: syz [ 1042.005833][T11126] netlink: 'syz.6.986': attribute type 1 has an invalid length. [ 1042.005859][T11126] netlink: 144 bytes leftover after parsing attributes in process `syz.6.986'. [ 1042.005889][T11126] netlink: 36 bytes leftover after parsing attributes in process `syz.6.986'. [ 1042.119687][ T5924] usb 8-1: config 0 descriptor?? [ 1042.124268][T11117] raw-gadget.0 gadget.7: fail, usb_ep_enable returned -22 [ 1042.124460][T11117] raw-gadget.0 gadget.7: fail, usb_ep_enable returned -22 [ 1042.511749][T11117] raw-gadget.0 gadget.7: fail, usb_ep_enable returned -22 [ 1042.511872][T11117] raw-gadget.0 gadget.7: fail, usb_ep_enable returned -22 [ 1042.735629][T11138] netlink: 12 bytes leftover after parsing attributes in process `syz.1.991'. [ 1042.918077][ T5924] dm9601: No valid MAC address in EEPROM, using 00:00:00:00:00:00 [ 1043.119792][ T5924] dm9601 8-1:0.0 (unnamed net_device) (uninitialized): Error reading chip ID [ 1043.146274][ T5924] usb 8-1: USB disconnect, device number 26 [ 1043.187339][T10578] udevd[10578]: setting owner of /dev/bus/usb/008/026 to uid=0, gid=0 failed: No such file or directory [ 1043.668661][T11154] overlayfs: failed to resolve './file0': -2 [ 1045.836952][T11172] usb 5-1: new high-speed USB device number 8 using dummy_hcd [ 1046.230157][T11172] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1046.230188][T11172] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1046.230231][T11172] usb 5-1: New USB device found, idVendor=054c, idProduct=0df2, bcdDevice=d6.af [ 1046.230252][T11172] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1046.425422][T11193] overlayfs: failed to resolve './file0': -2 [ 1046.669077][T11172] usb 5-1: config 0 descriptor?? [ 1047.213086][ T9637] usb 8-1: new high-speed USB device number 27 using dummy_hcd [ 1047.376959][ T9637] usb 8-1: Using ep0 maxpacket: 8 [ 1047.379467][ T9637] usb 8-1: New USB device found, idVendor=0ccd, idProduct=0039, bcdDevice=90.7b [ 1047.379495][ T9637] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1047.425387][T11172] hid_parser_main: 3 callbacks suppressed [ 1047.425419][T11172] playstation 0003:054C:0DF2.0011: unknown main item tag 0x0 [ 1047.425450][T11172] playstation 0003:054C:0DF2.0011: unknown main item tag 0x0 [ 1047.425475][T11172] playstation 0003:054C:0DF2.0011: unknown main item tag 0x0 [ 1047.425500][T11172] playstation 0003:054C:0DF2.0011: unknown main item tag 0x0 [ 1047.425525][T11172] playstation 0003:054C:0DF2.0011: unknown main item tag 0x0 [ 1047.576930][ T3636] usb 2-1: new high-speed USB device number 10 using dummy_hcd [ 1047.710006][T11172] playstation 0003:054C:0DF2.0011: hidraw0: USB HID v1.01 Device [HID 054c:0df2] on usb-dummy_hcd.4-1/input0 [ 1047.727084][ T3636] usb 2-1: Using ep0 maxpacket: 32 [ 1047.730589][ T9637] pvrusb2: Hardware description: Terratec Grabster AV400 [ 1047.730609][ T9637] pvrusb2: ********** [ 1047.730618][ T9637] pvrusb2: ***WARNING*** Support for this device (Terratec Grabster AV400) is experimental. [ 1047.730647][ T9637] pvrusb2: Important functionality might not be entirely working. [ 1047.730657][ T9637] pvrusb2: Please consider contacting the driver author to help with further stabilization of the driver. [ 1047.730670][ T9637] pvrusb2: ********** [ 1048.248565][ T2367] pvrusb2: Invalid write control endpoint [ 1048.301541][ T9637] usb 8-1: USB disconnect, device number 27 [ 1048.583547][T11172] playstation 0003:054C:0DF2.0011: Invalid byte count transferred, expected 20 got 0 [ 1048.583584][T11172] playstation 0003:054C:0DF2.0011: Failed to retrieve DualSense pairing info: -22 [ 1048.583636][T11172] playstation 0003:054C:0DF2.0011: Failed to get MAC address from DualSense [ 1048.587628][T11172] playstation 0003:054C:0DF2.0011: Failed to create dualsense. [ 1048.668539][ T3636] usb 2-1: config 0 has an invalid interface number: 51 but max is 0 [ 1048.668569][ T3636] usb 2-1: config 0 has no interface number 0 [ 1048.691380][T11172] playstation 0003:054C:0DF2.0011: probe with driver playstation failed with error -22 [ 1048.728739][ T3636] usb 2-1: New USB device found, idVendor=061d, idProduct=c150, bcdDevice=ce.6f [ 1048.728771][ T3636] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1048.728793][ T3636] usb 2-1: Product: syz [ 1048.728807][ T3636] usb 2-1: Manufacturer: syz [ 1048.728822][ T3636] usb 2-1: SerialNumber: syz [ 1048.808453][T10693] usb 5-1: USB disconnect, device number 8 [ 1048.840867][ T3636] usb 2-1: config 0 descriptor?? [ 1048.900510][ T3636] quatech2 2-1:0.51: Quatech 2nd gen USB to Serial Driver converter detected [ 1049.014710][ T2367] pvrusb2: Invalid write control endpoint [ 1049.014726][ T2367] pvrusb2: ***WARNING*** Detected a wedged cx25840 chip; the device will not work. [ 1049.014736][ T2367] pvrusb2: ***WARNING*** Try power cycling the pvrusb2 device. [ 1049.014745][ T2367] pvrusb2: ***WARNING*** Disabling further access to the device to prevent other foul-ups. [ 1049.014755][ T2367] pvrusb2: Device being rendered inoperable [ 1049.056721][T11216] pvrusb2: Attempted to execute control transfer when device not ok [ 1049.092694][ T2367] cx25840 1-0044: Unable to detect h/w, assuming cx23887 [ 1049.092766][ T2367] cx25840 1-0044: cx23887 A/V decoder found @ 0x88 (pvrusb2_a) [ 1049.111769][T11216] pvrusb2: Attempted to execute control transfer when device not ok [ 1049.138256][ T3636] usb 2-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB0 [ 1049.172133][ T2367] pvrusb2: Attached sub-driver cx25840 [ 1049.172150][ T2367] pvrusb2: ***WARNING*** pvrusb2 device hardware appears to be jammed and I can't clear it. [ 1049.172161][ T2367] pvrusb2: You might need to power cycle the pvrusb2 device in order to recover. [ 1049.174107][ T3636] usb 2-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB1 [ 1049.345575][T11215] fido_id[11215]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.4/usb5/report_descriptor': No such file or directory [ 1049.576244][ C1] usb 2-1: qt2_read_bulk_callback - non-zero urb status: -71 [ 1049.578591][ T5924] usb 2-1: USB disconnect, device number 10 [ 1049.652100][ T5924] quatech-serial ttyUSB0: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB0 [ 1049.727975][ T5924] quatech-serial ttyUSB1: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB1 [ 1049.732786][ T5924] quatech2 2-1:0.51: device disconnected [ 1050.576967][ T3636] usb 8-1: new high-speed USB device number 28 using dummy_hcd [ 1050.768368][T11255] overlayfs: failed to resolve './file0': -2 [ 1050.980968][ T3636] usb 8-1: Using ep0 maxpacket: 8 [ 1051.214343][ T3636] usb 8-1: New USB device found, idVendor=047d, idProduct=5003, bcdDevice=2f.8c [ 1051.214376][ T3636] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1051.214398][ T3636] usb 8-1: Product: syz [ 1051.214413][ T3636] usb 8-1: Manufacturer: syz [ 1051.214428][ T3636] usb 8-1: SerialNumber: syz [ 1051.285086][ T3636] usb 8-1: config 0 descriptor?? [ 1051.307020][ T3636] gspca_main: se401-2.14.0 probing 047d:5003 [ 1051.606914][ T9637] usb 1-1: new high-speed USB device number 13 using dummy_hcd [ 1051.759939][ T9637] usb 1-1: config 0 has no interfaces? [ 1051.767518][ T9637] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 1051.767554][ T9637] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1051.767575][ T9637] usb 1-1: Product: syz [ 1051.767589][ T9637] usb 1-1: Manufacturer: syz [ 1051.767603][ T9637] usb 1-1: SerialNumber: syz [ 1051.807319][ T9637] usb 1-1: config 0 descriptor?? [ 1052.014954][ T3636] input: se401 as /devices/platform/dummy_hcd.7/usb8/8-1/input/input14 [ 1052.036778][ T9637] usb 1-1: USB disconnect, device number 13 [ 1052.797125][ T8446] usb 8-1: USB disconnect, device number 28 [ 1053.616979][ T3636] usb 5-1: new high-speed USB device number 9 using dummy_hcd [ 1053.768276][ T3636] usb 5-1: Using ep0 maxpacket: 16 [ 1053.771378][ T3636] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1053.771410][ T3636] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1053.771433][ T3636] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 1053.771483][ T3636] usb 5-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 1053.771507][ T3636] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1053.826962][ T5947] usb 8-1: new high-speed USB device number 29 using dummy_hcd [ 1053.876617][ T3636] usb 5-1: config 0 descriptor?? [ 1053.998360][ T5947] usb 8-1: config 0 has an invalid interface number: 3 but max is 0 [ 1053.998391][ T5947] usb 8-1: config 0 has no interface number 0 [ 1053.998554][ T5947] usb 8-1: config 0 interface 3 altsetting 0 endpoint 0xD has an invalid bInterval 104, changing to 10 [ 1053.998585][ T5947] usb 8-1: config 0 interface 3 altsetting 0 endpoint 0xD has invalid wMaxPacketSize 0 [ 1054.044868][ T5947] usb 8-1: New USB device found, idVendor=1660, idProduct=1921, bcdDevice=1f.84 [ 1054.044896][ T5947] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1054.044916][ T5947] usb 8-1: Product: syz [ 1054.044929][ T5947] usb 8-1: Manufacturer: syz [ 1054.044943][ T5947] usb 8-1: SerialNumber: syz [ 1054.196064][ T5947] usb 8-1: config 0 descriptor?? [ 1054.422779][ T3636] microsoft 0003:045E:07DA.0012: unknown main item tag 0x0 [ 1054.423584][ T3636] microsoft 0003:045E:07DA.0012: unknown main item tag 0x0 [ 1054.423630][ T3636] microsoft 0003:045E:07DA.0012: unknown main item tag 0x0 [ 1054.424076][ T3636] microsoft 0003:045E:07DA.0012: unknown main item tag 0x0 [ 1054.424106][ T3636] microsoft 0003:045E:07DA.0012: unknown main item tag 0x0 [ 1054.424132][ T3636] microsoft 0003:045E:07DA.0012: unknown main item tag 0x0 [ 1054.424157][ T3636] microsoft 0003:045E:07DA.0012: unknown main item tag 0x0 [ 1054.424577][ T3636] microsoft 0003:045E:07DA.0012: unknown main item tag 0x0 [ 1054.424608][ T3636] microsoft 0003:045E:07DA.0012: unknown main item tag 0x0 [ 1054.424634][ T3636] microsoft 0003:045E:07DA.0012: unknown main item tag 0x0 [ 1054.588252][ T5947] dvb-usb: found a 'Medion CTX1921 DVB-T USB' in warm state. [ 1054.668300][ T5947] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 1054.674470][ T5947] dvbdev: DVB: registering new adapter (Medion CTX1921 DVB-T USB) [ 1054.674637][ T5947] usb 8-1: media controller created [ 1054.775832][ T3636] input: HID 045e:07da as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/0003:045E:07DA.0012/input/input15 [ 1054.812721][ T5947] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 1054.917102][ T3636] microsoft 0003:045E:07DA.0012: input,hidraw0: USB HID v0.00 Device [HID 045e:07da] on usb-dummy_hcd.4-1/input0 [ 1054.952950][ T3636] usb 5-1: USB disconnect, device number 9 [ 1055.324658][ T5947] DVB: Unable to find symbol dib7000p_attach() [ 1055.324676][ T5947] dvb-usb: no frontend was attached by 'Medion CTX1921 DVB-T USB' [ 1055.391387][T11302] fido_id[11302]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.4/usb5/5-1/report_descriptor': No such file or directory [ 1055.487000][ T9637] usb 7-1: new high-speed USB device number 23 using dummy_hcd [ 1055.639425][ T9637] usb 7-1: Using ep0 maxpacket: 8 [ 1055.738156][T11316] overlayfs: failed to resolve './file0': -2 [ 1056.224807][ T9637] usb 7-1: New USB device found, idVendor=047d, idProduct=5003, bcdDevice=2f.8c [ 1056.224840][ T9637] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1056.224861][ T9637] usb 7-1: Product: syz [ 1056.224876][ T9637] usb 7-1: Manufacturer: syz [ 1056.224890][ T9637] usb 7-1: SerialNumber: syz [ 1056.272653][ T9637] usb 7-1: config 0 descriptor?? [ 1056.307566][ T9637] gspca_main: se401-2.14.0 probing 047d:5003 [ 1056.426936][ T5947] rc_core: IR keymap rc-dib0700-rc5 not found [ 1056.426959][ T5947] Registered IR keymap rc-empty [ 1056.427623][ T5947] dvb-usb: could not initialize remote control. [ 1056.427635][ T5947] dvb-usb: Medion CTX1921 DVB-T USB successfully initialized and connected. [ 1056.452978][ T5947] dib0700: There's no endpoint for remote controller [ 1057.425794][ T9637] gspca_se401: ExtraFeatures: 24 [ 1057.491058][ T3636] usb 8-1: USB disconnect, device number 29 [ 1057.695592][ T9637] input: se401 as /devices/platform/dummy_hcd.6/usb7/7-1/input/input17 [ 1057.789791][ T3636] dvb-usb: Medion CTX1921 DVB-T USB successfully deinitialized and disconnected. [ 1057.827386][ T9637] usb 7-1: USB disconnect, device number 23 [ 1058.088809][T10693] usb 5-1: new high-speed USB device number 10 using dummy_hcd [ 1058.249822][T10693] usb 5-1: Using ep0 maxpacket: 16 [ 1058.256988][T10693] usb 5-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xF3, changing to 0x83 [ 1058.257021][T10693] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 1058.265814][T10693] usb 5-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 1058.265847][T10693] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1058.265868][T10693] usb 5-1: Product: syz [ 1058.265884][T10693] usb 5-1: Manufacturer: syz [ 1058.265899][T10693] usb 5-1: SerialNumber: syz [ 1058.284441][T10693] usb 5-1: config 0 descriptor?? [ 1058.302132][T10693] em28xx 5-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0) [ 1058.302174][T10693] em28xx 5-1:0.0: Audio interface 0 found (Vendor Class) [ 1058.917055][T10693] em28xx 5-1:0.0: chip ID is em2882/3 [ 1059.165026][T11361] netlink: 20 bytes leftover after parsing attributes in process `syz.6.1052'. [ 1059.244470][T10693] em28xx 5-1:0.0: Config register raw data: 0xfffffffb [ 1059.244921][T10693] em28xx 5-1:0.0: AC97 chip type couldn't be determined [ 1059.244937][T10693] em28xx 5-1:0.0: No AC97 audio processor [ 1059.442897][T11366] overlayfs: failed to resolve './file0': -2 [ 1060.089020][T10693] usb 5-1: USB disconnect, device number 10 [ 1060.107115][T10693] em28xx 5-1:0.0: Disconnecting em28xx [ 1060.197503][T10693] em28xx 5-1:0.0: Freeing device [ 1062.137948][T11399] netlink: 8 bytes leftover after parsing attributes in process `syz.6.1061'. [ 1062.138218][T11399] netlink: 'syz.6.1061': attribute type 5 has an invalid length. [ 1062.196973][ T8446] usb 8-1: new full-speed USB device number 30 using dummy_hcd [ 1062.565412][T11406] netlink: 'syz.0.1067': attribute type 11 has an invalid length. [ 1062.761447][T11410] overlayfs: failed to resolve './file0': -2 [ 1063.163591][ T8446] usb 8-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1063.163650][ T8446] usb 8-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xBE, changing to 0x8E [ 1063.163676][ T8446] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x8E has an invalid bInterval 0, changing to 10 [ 1063.163700][ T8446] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x8E has invalid wMaxPacketSize 0 [ 1063.163721][ T8446] usb 8-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 1063.253220][ T8446] usb 8-1: New USB device found, idVendor=10c5, idProduct=819a, bcdDevice=e4.46 [ 1063.253253][ T8446] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=35 [ 1063.253275][ T8446] usb 8-1: Product: syz [ 1063.253290][ T8446] usb 8-1: Manufacturer: syz [ 1063.253306][ T8446] usb 8-1: SerialNumber: syz [ 1063.353137][ T8446] usb 8-1: config 0 descriptor?? [ 1063.675547][ T8446] radio-si470x 8-1:0.0: DeviceID=0xc8c8 ChipID=0xc500 [ 1063.887010][ T8446] radio-si470x 8-1:0.0: software version 200, hardware version 200 [ 1064.109834][T11421] overlayfs: failed to resolve './file0': -2 [ 1064.675343][ C0] vkms_vblank_simulate: vblank timer overrun [ 1064.678209][ T8446] radio-si470x 8-1:0.0: si470x_set_report: usb_control_msg returned -110 [ 1064.678279][ T8446] radio-si470x 8-1:0.0: submitting int urb failed (-90) [ 1064.678749][ T8446] radio-si470x 8-1:0.0: si470x_set_report: usb_control_msg returned -32 [ 1064.682226][ T8446] radio-si470x 8-1:0.0: probe with driver radio-si470x failed with error -22 [ 1064.750527][ T8446] usb 8-1: USB disconnect, device number 30 [ 1064.932704][ C0] vkms_vblank_simulate: vblank timer overrun [ 1065.176172][T11432] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1066.136829][ C0] vkms_vblank_simulate: vblank timer overrun [ 1066.151184][T11456] netlink: 20 bytes leftover after parsing attributes in process `syz.6.1079'. [ 1066.269267][T11463] openvswitch: netlink: IP tunnel attribute has 12 unknown bytes. [ 1066.544592][ C0] vkms_vblank_simulate: vblank timer overrun [ 1066.685561][ T1321] ieee802154 phy0 wpan0: encryption failed: -22 [ 1067.034980][ C0] vkms_vblank_simulate: vblank timer overrun [ 1067.162738][T11469] loop8: detected capacity change from 0 to 8 [ 1067.190466][T11469] Dev loop8: unable to read RDB block 8 [ 1067.190519][T11469] loop8: unable to read partition table [ 1067.190752][T11469] loop8: partition table beyond EOD, truncated [ 1067.190787][T11469] loop_reread_partitions: partition scan of loop8 (þ被xü^>Ñà– ) failed (rc=-5) [ 1067.364137][T11476] overlayfs: failed to resolve './file0': -2 [ 1067.812604][ C0] vkms_vblank_simulate: vblank timer overrun [ 1067.988033][ C0] vkms_vblank_simulate: vblank timer overrun [ 1068.027380][T11486] netlink: 'syz.7.1090': attribute type 2 has an invalid length. [ 1068.067365][ T5924] usb 7-1: new high-speed USB device number 24 using dummy_hcd [ 1068.227752][ T5924] usb 7-1: Using ep0 maxpacket: 8 [ 1068.245453][ T5924] usb 7-1: config 0 has an invalid interface number: 1 but max is 0 [ 1068.245498][ T5924] usb 7-1: config 0 has no interface number 0 [ 1068.245547][ T5924] usb 7-1: config 0 interface 1 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 1068.245591][ T5924] usb 7-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 1068.245615][ T5924] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1068.318238][ T5924] usb 7-1: config 0 descriptor?? [ 1068.351926][T11492] netlink: 12 bytes leftover after parsing attributes in process `syz.7.1094'. [ 1068.410097][ T5924] iowarrior 7-1:0.1: IOWarrior product=0x1512, serial= interface=1 now attached to iowarrior0 [ 1068.551647][ T5924] usb 7-1: USB disconnect, device number 24 [ 1069.120338][T11512] openvswitch: netlink: IP tunnel attribute has 12 unknown bytes. [ 1070.058648][T11525] program syz.7.1103 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 1070.158794][T11528] netlink: 260 bytes leftover after parsing attributes in process `syz.1.1104'. [ 1070.687202][T11540] netlink: 3 bytes leftover after parsing attributes in process `syz.4.1109'. [ 1070.753418][ T3636] usb 2-1: new low-speed USB device number 11 using dummy_hcd [ 1070.900026][ T3636] usb 2-1: config 0 has an invalid interface number: 1 but max is 0 [ 1070.900056][ T3636] usb 2-1: config 0 has no interface number 0 [ 1070.900113][ T3636] usb 2-1: config 0 interface 1 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 10 [ 1070.900142][ T3636] usb 2-1: config 0 interface 1 altsetting 0 endpoint 0x82 has invalid maxpacket 159, setting to 8 [ 1070.900184][ T3636] usb 2-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 1070.900209][ T3636] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1070.981771][ T3636] usb 2-1: config 0 descriptor?? [ 1070.984623][T11535] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 1071.039292][ T3636] iowarrior 2-1:0.1: IOWarrior product=0x1512, serial= interface=1 now attached to iowarrior0 [ 1071.268226][ C1] iowarrior 2-1:0.1: iowarrior_callback - usb_submit_urb failed with result -1 [ 1071.294136][ T3636] usb 2-1: USB disconnect, device number 11 [ 1072.140848][ C1] vkms_vblank_simulate: vblank timer overrun [ 1072.640447][ C1] vkms_vblank_simulate: vblank timer overrun [ 1073.375274][T11583] netlink: 12 bytes leftover after parsing attributes in process `syz.7.1117'. [ 1074.383396][ C1] vkms_vblank_simulate: vblank timer overrun [ 1074.643360][ C1] vkms_vblank_simulate: vblank timer overrun [ 1075.297001][ T5924] usb 1-1: new high-speed USB device number 14 using dummy_hcd [ 1075.452602][ T5924] usb 1-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 1075.452638][ T5924] usb 1-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 1075.452687][ T5924] usb 1-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 1075.452709][ T5924] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1075.552645][T11607] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 1075.607931][ T5924] usb 1-1: Quirk or no altset; falling back to MIDI 1.0 [ 1075.975197][ T5947] kernel write not supported for file /dsp (pid: 5947 comm: kworker/1:6) [ 1077.314050][ T5924] usb 1-1: USB disconnect, device number 14 [ 1079.164065][T11658] overlayfs: failed to resolve './file0': -2 [ 1080.969494][ T3636] usb 8-1: new high-speed USB device number 31 using dummy_hcd [ 1081.136997][ T3636] usb 8-1: Using ep0 maxpacket: 16 [ 1081.139565][ T3636] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1081.139597][ T3636] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1081.139633][ T3636] usb 8-1: New USB device found, idVendor=6161, idProduct=4d15, bcdDevice= 0.00 [ 1081.139653][ T3636] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1081.145469][ T3636] usb 8-1: config 0 descriptor?? [ 1081.435862][T11684] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1081.454685][T11684] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1081.699268][ T3636] hid (null): unknown global tag 0xc [ 1081.699325][ T3636] hid (null): invalid report_count 47589 [ 1081.914278][ T3636] usb 8-1: string descriptor 0 read error: -71 [ 1081.940194][ T3636] usb 8-1: Max retries (5) exceeded reading string descriptor 200 [ 1081.940281][ T3636] letsketch 0003:6161:4D15.0013: probe with driver letsketch failed with error -32 [ 1081.980707][ T3636] usb 8-1: USB disconnect, device number 31 [ 1082.277202][T11708] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1155'. [ 1082.580922][T11712] netdevsim netdevsim1 netdevsim0: entered promiscuous mode [ 1084.151122][T11733] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1164'. [ 1085.379491][ T31] usb 8-1: new high-speed USB device number 32 using dummy_hcd [ 1085.540106][ T31] usb 8-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1085.540134][ T31] usb 8-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 1085.545937][ T31] usb 8-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 1085.545965][ T31] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 1085.545986][ T31] usb 8-1: SerialNumber: syz [ 1085.826111][ T31] usb 8-1: 0:2 : does not exist [ 1085.836962][ T6937] usb 1-1: new high-speed USB device number 15 using dummy_hcd [ 1085.917393][ T31] usb 8-1: USB disconnect, device number 32 [ 1085.987012][ T6937] usb 1-1: Using ep0 maxpacket: 8 [ 1085.989650][ T6937] usb 1-1: config index 0 descriptor too short (expected 301, got 45) [ 1085.989716][ T6937] usb 1-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 1085.989740][ T6937] usb 1-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 1085.989763][ T6937] usb 1-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 1085.989788][ T6937] usb 1-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 1085.989832][ T6937] usb 1-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 1085.989855][ T6937] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1086.412607][ T6937] usb 1-1: GET_CAPABILITIES returned 0 [ 1086.412658][ T6937] usbtmc 1-1:16.0: can't read capabilities [ 1087.434519][T10578] udevd[10578]: error opening ATTR{/sys/devices/platform/dummy_hcd.7/usb8/8-1/8-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1087.595366][ T9637] usb 1-1: USB disconnect, device number 15 [ 1087.735934][T11784] netlink: 60 bytes leftover after parsing attributes in process `syz.7.1179'. [ 1087.737251][T11784] netlink: 60 bytes leftover after parsing attributes in process `syz.7.1179'. [ 1087.738000][T11784] netlink: 60 bytes leftover after parsing attributes in process `syz.7.1179'. [ 1088.417825][T11798] comedi comedi3: rti800: I/O port conflict (0x1,16) [ 1093.034405][T11844] netlink: 'syz.4.1198': attribute type 5 has an invalid length. [ 1093.197037][ T5947] usb 8-1: new high-speed USB device number 33 using dummy_hcd [ 1093.360962][ T5947] usb 8-1: Using ep0 maxpacket: 32 [ 1093.366360][ T5947] usb 8-1: unable to get BOS descriptor or descriptor too short [ 1093.384169][ T5947] usb 8-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1093.409514][ T5947] usb 8-1: New USB device found, idVendor=17ef, idProduct=7000, bcdDevice=a1.ec [ 1093.409544][ T5947] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1093.409562][ T5947] usb 8-1: Product: syz [ 1093.409576][ T5947] usb 8-1: Manufacturer: syz [ 1093.409589][ T5947] usb 8-1: SerialNumber: syz [ 1093.534107][ T5947] usb 8-1: config 0 descriptor?? [ 1093.776511][ T5947] usb 8-1: USB disconnect, device number 33 [ 1094.496996][ T6330] usb 2-1: new high-speed USB device number 12 using dummy_hcd [ 1094.577047][ T9637] usb 1-1: new high-speed USB device number 16 using dummy_hcd [ 1094.649387][ T6330] usb 2-1: config 0 has an invalid interface number: 1 but max is 0 [ 1094.649415][ T6330] usb 2-1: config 0 has no interface number 0 [ 1094.668030][ T6330] usb 2-1: New USB device found, idVendor=18b4, idProduct=fffb, bcdDevice=dc.7b [ 1094.668086][ T6330] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1094.668111][ T6330] usb 2-1: Product: syz [ 1094.668128][ T6330] usb 2-1: Manufacturer: syz [ 1094.668145][ T6330] usb 2-1: SerialNumber: syz [ 1094.685056][ T6330] usb 2-1: config 0 descriptor?? [ 1094.736947][ T9637] usb 1-1: Using ep0 maxpacket: 16 [ 1094.741336][ T9637] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1094.741451][ T9637] usb 1-1: New USB device found, idVendor=04d8, idProduct=00dd, bcdDevice= 0.00 [ 1094.741473][ T9637] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1094.785888][ T9637] usb 1-1: config 0 descriptor?? [ 1094.924437][ T6330] usb 2-1: dvb_usb_v2: found a 'E3C EC168 reference design' in warm state [ 1095.055056][ T6330] usb 2-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 1095.060372][ T6330] dvbdev: DVB: registering new adapter (E3C EC168 reference design) [ 1095.060444][ T6330] usb 2-1: media controller created [ 1095.150138][T11864] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1207'. [ 1095.337427][ T6330] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 1095.350319][ T9637] mcp2221 0003:04D8:00DD.0014: USB HID v0.05 Device [HID 04d8:00dd] on usb-dummy_hcd.0-1/input0 [ 1095.727557][ T6330] i2c i2c-1: ec100: i2c rd failed=-71 reg=33 [ 1096.069163][ T6330] usb 2-1: USB disconnect, device number 12 [ 1096.111903][ T9637] usb 1-1: USB disconnect, device number 16 [ 1096.890926][ T38] audit: type=1326 audit(2000000198.250:114): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=11882 comm="syz.0.1215" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fd0a54feba9 code=0x0 [ 1099.876947][ T6330] usb 5-1: new high-speed USB device number 11 using dummy_hcd [ 1100.037980][ T6330] usb 5-1: Using ep0 maxpacket: 16 [ 1100.040969][ T6330] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1100.041025][ T6330] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 1100.041054][ T6330] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 1100.041076][ T6330] usb 5-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 1100.041099][ T6330] usb 5-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 1100.043318][ T6330] usb 5-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 1100.043346][ T6330] usb 5-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 1100.043366][ T6330] usb 5-1: Manufacturer: syz [ 1100.080601][ T6330] usb 5-1: config 0 descriptor?? [ 1100.519460][ T6330] rc_core: IR keymap rc-hauppauge not found [ 1100.519481][ T6330] Registered IR keymap rc-empty [ 1100.519690][ T6330] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 1100.538743][ T6330] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 1100.587209][ T6330] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/rc/rc0 [ 1100.601332][ T6330] input: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/rc/rc0/input18 [ 1100.650318][ T6330] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 1100.670411][ T6330] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 1100.687133][ T6330] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 1100.707766][ T6330] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 1100.730183][ T6330] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 1100.747157][ T6330] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 1100.766956][ T6330] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 1100.790489][ T6330] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 1100.807287][ T6330] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 1100.827071][ T6330] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 1100.955471][ T6330] mceusb 5-1:0.0: Registered 424242424242 with mce emulator interface version 1 [ 1100.955497][ T6330] mceusb 5-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active) [ 1101.018758][ T6330] usb 5-1: USB disconnect, device number 11 [ 1101.976527][T11928] overlayfs: failed to resolve './file0': -2 [ 1102.410395][ T59] Bluetooth: hci0: unexpected event for opcode 0x203e [ 1103.401580][T11961] program syz.1.1237 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 1103.784754][T11973] IPv6: Can't replace route, no match found [ 1104.133131][T11980] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1244'. [ 1106.427381][T12001] netlink: 36 bytes leftover after parsing attributes in process `syz.7.1249'. [ 1109.024670][ T989] usb 5-1: new full-speed USB device number 12 using dummy_hcd [ 1110.471074][ T989] usb 5-1: config index 0 descriptor too short (expected 156, got 27) [ 1110.471123][ T989] usb 5-1: too many endpoints for config 0 interface 0 altsetting 191: 144, using maximum allowed: 30 [ 1110.471168][ T989] usb 5-1: config 0 interface 0 altsetting 191 endpoint 0x87 has an invalid bInterval 0, changing to 10 [ 1110.471195][ T989] usb 5-1: config 0 interface 0 altsetting 191 endpoint 0x87 has invalid maxpacket 255, setting to 64 [ 1110.471221][ T989] usb 5-1: config 0 interface 0 altsetting 191 has 1 endpoint descriptor, different from the interface descriptor's value: 144 [ 1110.471247][ T989] usb 5-1: config 0 interface 0 has no altsetting 0 [ 1110.476417][ T989] usb 5-1: New USB device found, idVendor=0f11, idProduct=1021, bcdDevice=86.66 [ 1110.476447][ T989] usb 5-1: New USB device strings: Mfr=85, Product=120, SerialNumber=172 [ 1110.476468][ T989] usb 5-1: Product: syz [ 1110.476483][ T989] usb 5-1: Manufacturer: syz [ 1110.476497][ T989] usb 5-1: SerialNumber: syz [ 1110.490663][ T989] usb 5-1: config 0 descriptor?? [ 1110.493583][T12050] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 1110.516985][ T989] ldusb 5-1:0.0: Interrupt out endpoint not found (using control endpoint instead) [ 1110.608851][ T989] ldusb 5-1:0.0: LD USB Device #0 now attached to major 180 minor 0 [ 1112.369723][ T5901] usb 5-1: USB disconnect, device number 12 [ 1112.396025][ T5901] ldusb 5-1:0.0: LD USB Device #0 now disconnected [ 1113.855862][T12097] macvlan0: entered promiscuous mode [ 1113.916017][T12097] netlink: 'syz.1.1274': attribute type 1 has an invalid length. [ 1113.916041][T12097] netlink: 'syz.1.1274': attribute type 2 has an invalid length. [ 1115.005102][T12118] overlayfs: failed to resolve './file0': -2 [ 1115.610169][T12117] erspan0: entered promiscuous mode [ 1118.898980][ T6937] usb 7-1: new high-speed USB device number 25 using dummy_hcd [ 1119.066882][ T6937] usb 7-1: Using ep0 maxpacket: 8 [ 1119.069331][ T6937] usb 7-1: New USB device found, idVendor=0ccd, idProduct=0039, bcdDevice=90.7b [ 1119.069360][ T6937] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1119.127113][ T6937] pvrusb2: Hardware description: Terratec Grabster AV400 [ 1119.127132][ T6937] pvrusb2: ********** [ 1119.127138][ T6937] pvrusb2: ***WARNING*** Support for this device (Terratec Grabster AV400) is experimental. [ 1119.127149][ T6937] pvrusb2: Important functionality might not be entirely working. [ 1119.127171][ T6937] pvrusb2: Please consider contacting the driver author to help with further stabilization of the driver. [ 1119.127182][ T6937] pvrusb2: ********** [ 1119.324078][ T2367] pvrusb2: Invalid write control endpoint [ 1119.513703][T12156] /dev/nullb0: Can't open blockdev [ 1119.545508][T12142] pvrusb2: Invalid write control endpoint [ 1119.552795][ T6330] usb 7-1: USB disconnect, device number 25 [ 1119.721474][ T2367] pvrusb2: Invalid write control endpoint [ 1119.721491][ T2367] pvrusb2: ***WARNING*** Detected a wedged cx25840 chip; the device will not work. [ 1119.721501][ T2367] pvrusb2: ***WARNING*** Try power cycling the pvrusb2 device. [ 1119.721509][ T2367] pvrusb2: ***WARNING*** Disabling further access to the device to prevent other foul-ups. [ 1119.721520][ T2367] pvrusb2: Device being rendered inoperable [ 1119.721603][ T2367] cx25840 1-0044: Unable to detect h/w, assuming cx23887 [ 1119.721668][ T2367] cx25840 1-0044: cx23887 A/V decoder found @ 0x88 (pvrusb2_a) [ 1119.724818][ T2367] pvrusb2: Attached sub-driver cx25840 [ 1119.724831][ T2367] pvrusb2: ***WARNING*** pvrusb2 device hardware appears to be jammed and I can't clear it. [ 1119.724841][ T2367] pvrusb2: You might need to power cycle the pvrusb2 device in order to recover. [ 1120.850213][T12181] I/O error, dev loop13, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 1120.850454][T12181] FAT-fs (loop13): unable to read boot sector [ 1124.070286][T12220] loop8: detected capacity change from 0 to 8 [ 1124.107943][T12220] Dev loop8: unable to read RDB block 8 [ 1124.108013][T12220] loop8: unable to read partition table [ 1124.108379][T12220] loop8: partition table beyond EOD, truncated [ 1124.108420][T12220] loop_reread_partitions: partition scan of loop8 (þ被xü^>Ñà– ) failed (rc=-5) [ 1124.456378][T12223] overlayfs: failed to resolve './file0': -2 [ 1127.026963][T10693] usb 7-1: new high-speed USB device number 26 using dummy_hcd [ 1127.187368][T10693] usb 7-1: Using ep0 maxpacket: 8 [ 1127.192045][T10693] usb 7-1: config index 0 descriptor too short (expected 301, got 45) [ 1127.192213][T10693] usb 7-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 1127.192236][T10693] usb 7-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 1127.192259][T10693] usb 7-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 1127.192282][T10693] usb 7-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 1127.192323][T10693] usb 7-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 1127.192345][T10693] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1127.612855][T10693] usb 7-1: usb_control_msg returned -32 [ 1127.612903][T10693] usbtmc 7-1:16.0: can't read capabilities [ 1127.836899][T12270] overlayfs: failed to resolve './file0': -2 [ 1128.418396][ T1321] ieee802154 phy0 wpan0: encryption failed: -22 [ 1129.659418][T12272] usb 7-1: USB disconnect, device number 26 [ 1130.059103][T12293] sd 0:0:1:0: device reset [ 1131.380154][T12310] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1132.809488][T12339] netlink: 'syz.0.1340': attribute type 29 has an invalid length. [ 1132.825735][T12339] netlink: 'syz.0.1340': attribute type 29 has an invalid length. [ 1132.831799][T12339] netlink: 500 bytes leftover after parsing attributes in process `syz.0.1340'. [ 1135.490158][T12364] netlink: 'syz.4.1345': attribute type 2 has an invalid length. [ 1135.490182][T12364] netlink: 137592 bytes leftover after parsing attributes in process `syz.4.1345'. [ 1135.640489][T12370] netlink: 8 bytes leftover after parsing attributes in process `syz.7.1348'. [ 1135.640521][T12370] netlink: 20 bytes leftover after parsing attributes in process `syz.7.1348'. [ 1135.692286][T12370] netlink: 8 bytes leftover after parsing attributes in process `syz.7.1348'. [ 1135.692319][T12370] netlink: 20 bytes leftover after parsing attributes in process `syz.7.1348'. [ 1135.975322][T12375] IPVS: lc: UDP 224.0.0.2:0 - no destination available [ 1136.106143][ T5924] IPVS: starting estimator thread 0... [ 1136.294115][T12381] IPVS: using max 8 ests per chain, 19200 per kthread [ 1137.507297][T12396] netlink: 36 bytes leftover after parsing attributes in process `syz.4.1357'. [ 1138.726680][ T38] audit: type=1400 audit(2000000240.070:115): lsm=SMACK fn=smack_socket_sock_rcv_skb action=denied subject="*" object="_" requested=w pid=12407 comm="syz.0.1359" src=1 dest=20000 netif=wpan0 [ 1140.586945][ T3636] usb 7-1: new high-speed USB device number 27 using dummy_hcd [ 1140.743266][ T3636] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1140.743302][ T3636] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1140.743325][ T3636] usb 7-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 1140.743369][ T3636] usb 7-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 1140.743391][ T3636] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1140.930192][ T3636] usb 7-1: config 0 descriptor?? [ 1141.529779][ T3636] plantronics 0003:047F:FFFF.0015: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.6-1/input0 [ 1141.573410][T12451] IPVS: lc: UDP 224.0.0.2:0 - no destination available [ 1141.881326][ T989] usb 7-1: USB disconnect, device number 27 [ 1142.064561][T12454] fido_id[12454]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.6/usb7/report_descriptor': No such file or directory [ 1142.496820][ C1] vkms_vblank_simulate: vblank timer overrun [ 1142.650848][ C1] vkms_vblank_simulate: vblank timer overrun [ 1143.152345][ C1] vkms_vblank_simulate: vblank timer overrun [ 1144.235105][ C1] vkms_vblank_simulate: vblank timer overrun [ 1144.330605][ C1] vkms_vblank_simulate: vblank timer overrun [ 1144.385566][ C1] vkms_vblank_simulate: vblank timer overrun [ 1144.453076][ C1] vkms_vblank_simulate: vblank timer overrun [ 1145.078761][ C1] vkms_vblank_simulate: vblank timer overrun [ 1145.443782][T12501] netlink: 12 bytes leftover after parsing attributes in process `syz.6.1385'. [ 1145.444416][T12501] openvswitch: netlink: Message has 4 unknown bytes. [ 1145.447308][ C1] vkms_vblank_simulate: vblank timer overrun [ 1145.734108][ C1] vkms_vblank_simulate: vblank timer overrun [ 1145.983854][ C1] vkms_vblank_simulate: vblank timer overrun [ 1146.296931][ T31] usb 5-1: new high-speed USB device number 13 using dummy_hcd [ 1146.446987][ T31] usb 5-1: Using ep0 maxpacket: 16 [ 1146.449699][ T31] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1146.449731][ T31] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1146.449770][ T31] usb 5-1: New USB device found, idVendor=5543, idProduct=0004, bcdDevice= 0.00 [ 1146.449791][ T31] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1146.464127][ T31] usb 5-1: config 0 descriptor?? [ 1146.646935][T11172] usb 1-1: new high-speed USB device number 17 using dummy_hcd [ 1146.806969][T11172] usb 1-1: Using ep0 maxpacket: 8 [ 1146.813532][T11172] usb 1-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 56832, setting to 1024 [ 1146.813622][T11172] usb 1-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024 [ 1146.813647][T11172] usb 1-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 1146.813670][T11172] usb 1-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 1146.813712][T11172] usb 1-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 1146.813789][T11172] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1147.015900][ T31] uclogic 0003:5543:0004.0016: item fetching failed at offset 3/5 [ 1147.026103][ T31] uclogic 0003:5543:0004.0016: parse failed [ 1147.029439][ T31] uclogic 0003:5543:0004.0016: probe with driver uclogic failed with error -22 [ 1147.123081][T11172] usb 1-1: GET_CAPABILITIES returned 0 [ 1147.123133][T11172] usbtmc 1-1:16.0: can't read capabilities [ 1147.182251][ T31] usb 5-1: USB disconnect, device number 13 [ 1147.356897][ T9637] usb 2-1: new high-speed USB device number 13 using dummy_hcd [ 1147.506870][ T9637] usb 2-1: Using ep0 maxpacket: 8 [ 1147.509764][ T9637] usb 2-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 1147.509806][ T9637] usb 2-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 1147.509829][ T9637] usb 2-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 1147.509853][ T9637] usb 2-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 1147.509896][ T9637] usb 2-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 1147.509918][ T9637] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1148.648830][T11172] usb 1-1: USB disconnect, device number 17 [ 1148.721452][T12540] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 1148.721631][ T5916] IPVS: starting estimator thread 0... [ 1148.785855][ T9637] usb 2-1: GET_CAPABILITIES returned 0 [ 1148.785901][ T9637] usbtmc 2-1:16.0: can't read capabilities [ 1148.826891][T12544] IPVS: using max 7 ests per chain, 16800 per kthread [ 1149.648937][ T989] usb 2-1: USB disconnect, device number 13 [ 1150.322592][T12567] overlayfs: failed to resolve './file0': -2 [ 1151.077094][T11172] usb 7-1: new full-speed USB device number 28 using dummy_hcd [ 1151.285269][T11172] usb 7-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 1151.285386][T11172] usb 7-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 1151.285431][T11172] usb 7-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 1151.285455][T11172] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1151.656476][T11172] usb 7-1: GET_CAPABILITIES returned 0 [ 1151.656525][T11172] usbtmc 7-1:16.0: can't read capabilities [ 1151.903160][ T31] usb 7-1: USB disconnect, device number 28 [ 1152.346191][T12591] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 1152.346361][T12591] Bluetooth: hci4: Opcode 0x0406 failed: -4 [ 1152.529617][T12591] Bluetooth: hci4: Opcode 0x0406 failed: -4 [ 1152.628609][T12591] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 1152.628773][T12591] Bluetooth: hci3: Opcode 0x0406 failed: -4 [ 1152.779909][T12591] Bluetooth: hci3: Opcode 0x0406 failed: -4 [ 1152.861183][T12591] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 1152.861320][T12591] Bluetooth: hci0: Opcode 0x0406 failed: -4 [ 1153.227959][ T9637] usb 2-1: new high-speed USB device number 14 using dummy_hcd [ 1153.247010][ T8417] usb 5-1: new high-speed USB device number 14 using dummy_hcd [ 1153.343868][ T38] audit: type=1326 audit(2000000254.680:116): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=12622 comm="syz.6.1417" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f9646d2eba9 code=0x0 [ 1153.368656][ T989] usb 8-1: new high-speed USB device number 34 using dummy_hcd [ 1153.376990][ T9637] usb 2-1: Using ep0 maxpacket: 32 [ 1153.380124][ T9637] usb 2-1: config 0 has an invalid interface number: 51 but max is 0 [ 1153.380150][ T9637] usb 2-1: config 0 has no interface number 0 [ 1153.396906][ T8417] usb 5-1: Using ep0 maxpacket: 8 [ 1153.410471][ T8417] usb 5-1: unable to get BOS descriptor or descriptor too short [ 1153.423693][ T9637] usb 2-1: New USB device found, idVendor=061d, idProduct=c150, bcdDevice=ce.6f [ 1153.423723][ T9637] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1153.423743][ T9637] usb 2-1: Product: syz [ 1153.423758][ T9637] usb 2-1: Manufacturer: syz [ 1153.423772][ T9637] usb 2-1: SerialNumber: syz [ 1153.464373][ T8417] usb 5-1: config 6 has an invalid interface number: 207 but max is 0 [ 1153.464402][ T8417] usb 5-1: config 6 has no interface number 0 [ 1153.464455][ T8417] usb 5-1: config 6 interface 207 has no altsetting 0 [ 1153.487550][ T8417] usb 5-1: New USB device found, idVendor=0bb4, idProduct=0a3a, bcdDevice=97.6f [ 1153.487581][ T8417] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1153.487604][ T8417] usb 5-1: Product: syz [ 1153.487620][ T8417] usb 5-1: Manufacturer: syz [ 1153.487634][ T8417] usb 5-1: SerialNumber: syz [ 1153.551541][ T9637] usb 2-1: config 0 descriptor?? [ 1153.585774][ T9637] quatech2 2-1:0.51: Quatech 2nd gen USB to Serial Driver converter detected [ 1153.606952][ T989] usb 8-1: Using ep0 maxpacket: 32 [ 1153.612261][ T989] usb 8-1: config 0 has an invalid interface number: 67 but max is 0 [ 1153.612289][ T989] usb 8-1: config 0 has no interface number 0 [ 1153.649141][ T989] usb 8-1: New USB device found, idVendor=0424, idProduct=9901, bcdDevice=c2.57 [ 1153.649174][ T989] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1153.649206][ T989] usb 8-1: Product: syz [ 1153.649221][ T989] usb 8-1: Manufacturer: syz [ 1153.649235][ T989] usb 8-1: SerialNumber: syz [ 1153.714389][ T989] usb 8-1: config 0 descriptor?? [ 1153.811875][ T989] smsc95xx v2.0.0 [ 1153.841330][ T9637] usb 2-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB0 [ 1153.907172][ T8417] usb 5-1: USB disconnect, device number 14 [ 1154.097376][ T9637] usb 2-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB1 [ 1154.366195][T12635] overlayfs: failed to resolve './file0': -2 [ 1154.388778][ T59] Bluetooth: hci4: command 0x0406 tx timeout [ 1154.806045][ T59] Bluetooth: hci3: command 0x0406 tx timeout [ 1154.877109][ T59] Bluetooth: hci0: command 0x0419 tx timeout [ 1155.022152][ T989] smsc95xx 8-1:0.67 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000030: -32 [ 1155.022184][ T989] smsc95xx 8-1:0.67 (unnamed net_device) (uninitialized): Error reading E2P_CMD [ 1155.091971][ C0] usb 2-1: qt2_read_bulk_callback - non-zero urb status: -71 [ 1155.103279][ T9637] usb 2-1: USB disconnect, device number 14 [ 1155.221677][ T9637] quatech-serial ttyUSB0: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB0 [ 1155.384580][ T9637] quatech-serial ttyUSB1: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB1 [ 1155.410649][ T9637] quatech2 2-1:0.51: device disconnected [ 1155.492649][ T989] smsc95xx 8-1:0.67 (unnamed net_device) (uninitialized): Failed to write reg index 0x00000108: -71 [ 1155.492970][ T989] smsc95xx 8-1:0.67: probe with driver smsc95xx failed with error -71 [ 1155.537241][ T989] usb 8-1: USB disconnect, device number 34 [ 1155.726967][ T8417] usb 5-1: new high-speed USB device number 15 using dummy_hcd [ 1155.806831][ T3636] usb 7-1: new high-speed USB device number 29 using dummy_hcd [ 1155.895392][ T8417] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1155.895428][ T8417] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1155.895452][ T8417] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 1155.895496][ T8417] usb 5-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 1155.895520][ T8417] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1155.912901][ T8417] usb 5-1: config 0 descriptor?? [ 1155.956852][ T3636] usb 7-1: Using ep0 maxpacket: 16 [ 1155.959515][ T3636] usb 7-1: config 0 interface 0 altsetting 2 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1155.959542][ T3636] usb 7-1: config 0 interface 0 has no altsetting 0 [ 1155.959578][ T3636] usb 7-1: New USB device found, idVendor=060b, idProduct=500a, bcdDevice= 0.00 [ 1155.959600][ T3636] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1155.989517][ T3636] usb 7-1: config 0 descriptor?? [ 1156.464225][ T8417] plantronics 0003:047F:FFFF.0017: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.4-1/input0 [ 1156.466941][ T59] Bluetooth: hci4: command 0x0406 tx timeout [ 1156.539470][ T3636] hid (null): report_id 55783 is invalid [ 1156.572861][ T3636] cougar 0003:060B:500A.0018: usage count exceeds max: fixing up report descriptor [ 1156.576321][ T3636] cougar 0003:060B:500A.0018: unexpected long global item [ 1156.601688][ T3636] cougar 0003:060B:500A.0018: parse failed [ 1156.601803][ T3636] cougar 0003:060B:500A.0018: probe with driver cougar failed with error -22 [ 1156.773702][ T3636] usb 5-1: USB disconnect, device number 15 [ 1156.866861][ T59] Bluetooth: hci3: command 0x0406 tx timeout [ 1156.933487][T12663] fido_id[12663]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.4/usb5/report_descriptor': No such file or directory [ 1156.946959][ T59] Bluetooth: hci0: command 0x0419 tx timeout [ 1157.005817][ T989] usb 7-1: USB disconnect, device number 29 [ 1157.746865][ T989] usb 1-1: new high-speed USB device number 18 using dummy_hcd [ 1157.926959][ T989] usb 1-1: Using ep0 maxpacket: 32 [ 1157.929433][ T989] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1157.929488][ T989] usb 1-1: config 0 interface 0 altsetting 16 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1157.929533][ T989] usb 1-1: config 0 interface 0 altsetting 16 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1157.929568][ T989] usb 1-1: config 0 interface 0 altsetting 16 has 1 endpoint descriptor, different from the interface descriptor's value: 5 [ 1157.929593][ T989] usb 1-1: config 0 interface 0 has no altsetting 0 [ 1157.929626][ T989] usb 1-1: New USB device found, idVendor=044f, idProduct=b65d, bcdDevice= 0.00 [ 1157.929647][ T989] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1157.965896][ T989] usb 1-1: config 0 descriptor?? [ 1158.772644][ T59] Bluetooth: hci4: command 0x0406 tx timeout [ 1158.946993][ T59] Bluetooth: hci3: command 0x0406 tx timeout [ 1159.158896][ T989] hid-thrustmaster 0003:044F:B65D.0019: reserved main item tag 0xd [ 1159.168515][ T989] hid-thrustmaster 0003:044F:B65D.0019: hidraw0: USB HID v0.00 Device [HID 044f:b65d] on usb-dummy_hcd.0-1/input0 [ 1159.169033][ T989] hid-thrustmaster 0003:044F:B65D.0019: Wrong number of endpoints? [ 1159.421324][ C0] hid-thrustmaster 0003:044F:B65D.0019: URB to get model id failed with error -71 [ 1159.422543][T11172] usb 1-1: USB disconnect, device number 18 [ 1159.812369][T12694] fido_id[12694]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.0/usb1/report_descriptor': No such file or directory [ 1160.546437][T11172] usb 1-1: new high-speed USB device number 19 using dummy_hcd [ 1160.728257][T11172] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1160.728293][T11172] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1160.728335][T11172] usb 1-1: New USB device found, idVendor=1e7d, idProduct=2cf6, bcdDevice= 0.00 [ 1160.728360][T11172] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1160.759089][T11172] usb 1-1: config 0 descriptor?? [ 1161.274014][T11172] hid_parser_main: 5 callbacks suppressed [ 1161.274042][T11172] pyra 0003:1E7D:2CF6.001A: unknown main item tag 0x2 [ 1161.274074][T11172] pyra 0003:1E7D:2CF6.001A: unknown global tag 0xc [ 1161.274090][T11172] pyra 0003:1E7D:2CF6.001A: item 0 2 1 12 parsing failed [ 1161.307299][T11172] pyra 0003:1E7D:2CF6.001A: parse failed [ 1161.307379][T11172] pyra 0003:1E7D:2CF6.001A: probe with driver pyra failed with error -22 [ 1161.501042][ T989] usb 1-1: USB disconnect, device number 19 [ 1161.625494][T12730] overlayfs: failed to resolve './file0': -2 [ 1163.706882][ T989] usb 1-1: new high-speed USB device number 20 using dummy_hcd [ 1163.866965][ T989] usb 1-1: Using ep0 maxpacket: 16 [ 1163.906413][ T989] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1163.906467][ T989] usb 1-1: New USB device found, idVendor=04d8, idProduct=00dd, bcdDevice= 0.00 [ 1163.906491][ T989] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1164.011098][ T989] usb 1-1: config 0 descriptor?? [ 1164.533645][ T989] mcp2221 0003:04D8:00DD.001B: USB HID v0.05 Device [HID 04d8:00dd] on usb-dummy_hcd.0-1/input0 [ 1164.941388][ T989] usb 1-1: USB disconnect, device number 20 [ 1165.716628][ T6330] usb 8-1: new high-speed USB device number 35 using dummy_hcd [ 1166.030179][ T6330] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1166.030278][ T6330] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1166.030615][ T6330] usb 8-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 1166.030850][ T6330] usb 8-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 1166.036208][ T6330] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1166.259160][ T6330] usb 8-1: config 0 descriptor?? [ 1167.013616][T12786] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1459'. [ 1167.013692][T12786] openvswitch: netlink: Message has 4 unknown bytes. [ 1167.690247][ T6330] plantronics 0003:047F:FFFF.001C: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.7-1/input0 [ 1168.022846][ T3636] usb 8-1: USB disconnect, device number 35 [ 1168.773424][ T6330] usb 2-1: new high-speed USB device number 15 using dummy_hcd [ 1168.884554][T12793] fido_id[12793]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.7/usb8/report_descriptor': No such file or directory [ 1168.920261][ T6330] usb 2-1: Using ep0 maxpacket: 32 [ 1168.925363][ T6330] usb 2-1: config index 0 descriptor too short (expected 29220, got 36) [ 1168.925397][ T6330] usb 2-1: config 0 has too many interfaces: 81, using maximum allowed: 32 [ 1168.925417][ T6330] usb 2-1: config 0 has 1 interface, different from the descriptor's value: 81 [ 1168.925471][ T6330] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 1168.925493][ T6330] usb 2-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 1168.925516][ T6330] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 1168.925537][ T6330] usb 2-1: config 0 interface 0 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 0 [ 1168.925559][ T6330] usb 2-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 1168.925600][ T6330] usb 2-1: New USB device found, idVendor=03f0, idProduct=6c17, bcdDevice= 0.40 [ 1168.925621][ T6330] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1169.052812][ T6330] usb 2-1: config 0 descriptor?? [ 1169.322388][T12810] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1466'. [ 1169.340250][ T6330] usblp 2-1:0.0: usblp0: USB Bidirectional printer dev 15 if 0 alt 0 proto 3 vid 0x03F0 pid 0x6C17 [ 1169.588898][T12817] netlink: 24 bytes leftover after parsing attributes in process `syz.4.1468'. [ 1169.588944][T12817] netlink: 48 bytes leftover after parsing attributes in process `syz.4.1468'. [ 1169.596937][ T6330] usb 2-1: USB disconnect, device number 15 [ 1169.694147][ T6330] usblp0: removed [ 1171.190178][T12832] overlayfs: failed to resolve './file0': -2 [ 1173.065796][T12844] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1473'. [ 1173.065903][T12844] openvswitch: netlink: Message has 4 unknown bytes. [ 1177.016834][ T989] usb 1-1: new high-speed USB device number 21 using dummy_hcd [ 1177.176874][ T989] usb 1-1: Using ep0 maxpacket: 16 [ 1177.190294][ T989] usb 1-1: New USB device found, idVendor=05d1, idProduct=2001, bcdDevice=10.00 [ 1177.190323][ T989] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1177.190342][ T989] usb 1-1: Product: syz [ 1177.190356][ T989] usb 1-1: Manufacturer: syz [ 1177.190368][ T989] usb 1-1: SerialNumber: syz [ 1177.261626][ T989] usb 1-1: config 0 descriptor?? [ 1177.329993][ T989] ftdi_sio 1-1:0.0: FTDI USB Serial Device converter detected [ 1177.331781][ T989] usb 1-1: Detected FT-X [ 1177.583049][ T989] ftdi_sio ttyUSB0: Unable to read latency timer: -32 [ 1177.703357][T12920] overlayfs: failed to resolve './file0': -2 [ 1178.177119][ T989] usb 1-1: FTDI USB Serial Device converter now attached to ttyUSB0 [ 1178.396984][T12928] netlink: 'syz.7.1496': attribute type 8 has an invalid length. [ 1178.397008][T12928] netlink: 4 bytes leftover after parsing attributes in process `syz.7.1496'. [ 1178.457979][ T31] usb 1-1: USB disconnect, device number 21 [ 1178.540806][T12928] bond0: entered promiscuous mode [ 1178.540846][T12928] bond_slave_0: entered promiscuous mode [ 1178.541084][T12928] bond_slave_1: entered promiscuous mode [ 1178.576047][T12928] bond0: left promiscuous mode [ 1178.576071][T12928] bond_slave_0: left promiscuous mode [ 1178.576627][T12928] bond_slave_1: left promiscuous mode [ 1178.697075][ T6937] usb 2-1: new high-speed USB device number 16 using dummy_hcd [ 1178.700667][ T31] ftdi_sio ttyUSB0: FTDI USB Serial Device converter now disconnected from ttyUSB0 [ 1178.704794][ T31] ftdi_sio 1-1:0.0: device disconnected [ 1178.858739][ T6937] usb 2-1: config 0 has an invalid interface number: 1 but max is 0 [ 1178.858768][ T6937] usb 2-1: config 0 has no interface number 0 [ 1178.858818][ T6937] usb 2-1: config 0 interface 1 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1178.858846][ T6937] usb 2-1: config 0 interface 1 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1178.858886][ T6937] usb 2-1: New USB device found, idVendor=041e, idProduct=2801, bcdDevice= 0.00 [ 1178.858911][ T6937] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1178.881948][ T6937] usb 2-1: config 0 descriptor?? [ 1179.967814][ T6937] prodikeys 0003:041E:2801.001D: unknown main item tag 0x0 [ 1179.967853][ T6937] prodikeys 0003:041E:2801.001D: unknown main item tag 0x0 [ 1180.003336][ T6937] prodikeys 0003:041E:2801.001D: hidraw0: USB HID v0.00 Device [HID 041e:2801] on usb-dummy_hcd.1-1/input1 [ 1180.005749][ T6937] hid_prodikeys: hid-prodikeys: failed to find output report [ 1180.005749][ T6937] [ 1180.182621][ T6937] usb 2-1: USB disconnect, device number 16 [ 1180.352507][T12956] fido_id[12956]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.1/usb2/report_descriptor': No such file or directory [ 1182.020416][T11172] usb 1-1: new high-speed USB device number 22 using dummy_hcd [ 1182.174091][T11172] usb 1-1: Using ep0 maxpacket: 8 [ 1182.181564][T11172] usb 1-1: config index 0 descriptor too short (expected 301, got 45) [ 1182.181626][T11172] usb 1-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 1182.181651][T11172] usb 1-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 1182.181680][T11172] usb 1-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 1182.181707][T11172] usb 1-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 1182.181759][T11172] usb 1-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 1182.181785][T11172] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1183.121614][T11172] usb 1-1: usb_control_msg returned -32 [ 1183.121674][T11172] usbtmc 1-1:16.0: can't read capabilities [ 1184.772908][T13017] overlayfs: failed to resolve './file0': -2 [ 1184.988044][ T6330] kernel write not supported for file bpf-prog (pid: 6330 comm: kworker/0:7) [ 1185.565200][ T989] usb 1-1: USB disconnect, device number 22 [ 1189.362952][ T1321] ieee802154 phy0 wpan0: encryption failed: -22 [ 1189.370237][T13063] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1189.421667][T13065] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1529'. [ 1189.421696][T13065] netlink: 16 bytes leftover after parsing attributes in process `syz.4.1529'. [ 1191.631269][T13089] netlink: 'syz.0.1536': attribute type 1 has an invalid length. [ 1192.096885][ T989] usb 5-1: new low-speed USB device number 16 using dummy_hcd [ 1192.259543][ T989] usb 5-1: config 0 has no interfaces? [ 1192.259595][ T989] usb 5-1: New USB device found, idVendor=04b4, idProduct=de61, bcdDevice= 0.00 [ 1192.259618][ T989] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1192.311781][ T989] usb 5-1: config 0 descriptor?? [ 1192.555477][T13093] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1538'. [ 1192.591888][ T989] usb 5-1: USB disconnect, device number 16 [ 1192.960074][T13117] overlayfs: failed to resolve './file0': -2 [ 1193.592436][T13129] Bluetooth: MGMT ver 1.23 [ 1193.592545][T13129] Bluetooth: hci0: service_discovery: expected 4 bytes, got 7 bytes [ 1193.687070][ T8417] usb 7-1: new high-speed USB device number 30 using dummy_hcd [ 1193.846868][ T8417] usb 7-1: Using ep0 maxpacket: 16 [ 1193.887484][ T8417] usb 7-1: New USB device found, idVendor=09c0, idProduct=0201, bcdDevice= a.a4 [ 1193.887515][ T8417] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1193.887535][ T8417] usb 7-1: Product: syz [ 1193.887550][ T8417] usb 7-1: Manufacturer: syz [ 1193.887564][ T8417] usb 7-1: SerialNumber: syz [ 1193.926063][ T8417] usb 7-1: config 0 descriptor?? [ 1193.975983][ T8417] dvb-usb: found a 'Genpix 8PSK-to-USB2 Rev.1 DVB-S receiver' in warm state. [ 1194.191289][ T8417] gp8psk: usb in 128 operation failed. [ 1194.224109][ T8417] gp8psk: usb in 137 operation failed. [ 1194.224154][ T8417] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 1194.226018][ T8417] dvbdev: DVB: registering new adapter (Genpix 8PSK-to-USB2 Rev.1 DVB-S receiver) [ 1194.226081][ T8417] usb 7-1: media controller created [ 1194.366930][ T6043] usb 5-1: new high-speed USB device number 17 using dummy_hcd [ 1194.382383][ T8417] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 1194.490530][ T8417] gp8psk_fe: Frontend revision 1 attached [ 1194.491987][ T8417] usb 7-1: DVB: registering adapter 1 frontend 0 (Genpix DVB-S)... [ 1194.494306][ T8417] dvbdev: dvb_create_media_entity: media entity 'Genpix DVB-S' registered. [ 1194.558337][ T6043] usb 5-1: config 0 has an invalid interface number: 255 but max is 0 [ 1194.558369][ T6043] usb 5-1: config 0 has no interface number 0 [ 1194.558421][ T6043] usb 5-1: too many endpoints for config 0 interface 255 altsetting 255: 255, using maximum allowed: 30 [ 1194.558472][ T6043] usb 5-1: config 0 interface 255 altsetting 255 has 0 endpoint descriptors, different from the interface descriptor's value: 255 [ 1194.558503][ T6043] usb 5-1: config 0 interface 255 has no altsetting 0 [ 1194.558542][ T6043] usb 5-1: New USB device found, idVendor=0bda, idProduct=0177, bcdDevice=7d.0b [ 1194.558565][ T6043] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1194.578314][ T6043] usb 5-1: config 0 descriptor?? [ 1194.603174][ T6043] ums-realtek 5-1:0.255: USB Mass Storage device detected [ 1195.307915][T13146] overlayfs: failed to resolve './file0': -2 [ 1195.481459][ T6043] usb 5-1: USB disconnect, device number 17 [ 1195.677217][ T8417] gp8psk: usb in 138 operation failed. [ 1195.677244][ T8417] dvb-usb: Genpix 8PSK-to-USB2 Rev.1 DVB-S receiver successfully initialized and connected. [ 1195.677258][ T8417] gp8psk: found Genpix USB device pID = 201 (hex) [ 1195.933364][ T6043] usb 7-1: USB disconnect, device number 30 [ 1196.450624][ T6043] dvb-usb: Genpix 8PSK-to-USB2 Rev.1 DVB-S receive successfully deinitialized and disconnected. [ 1196.506845][T12272] usb 5-1: new high-speed USB device number 18 using dummy_hcd [ 1196.562808][T10693] IPVS: starting estimator thread 0... [ 1196.657229][T13168] IPVS: using max 7 ests per chain, 16800 per kthread [ 1196.659883][T12272] usb 5-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 1196.659915][T12272] usb 5-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 1196.659955][T12272] usb 5-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 1196.659977][T12272] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1196.715295][T13161] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 1196.733158][T12272] usb 5-1: Quirk or no altset; falling back to MIDI 1.0 [ 1196.815901][T13166] tipc: Started in network mode [ 1196.815940][T13166] tipc: Node identity ac1414aa, cluster identity 3 [ 1196.865966][T13166] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 1196.866220][T13166] tipc: Enabled bearer , priority 10 [ 1196.952133][T12272] usb 5-1: USB disconnect, device number 18 [ 1197.000299][ C1] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 1197.075223][T10582] udevd[10582]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:27.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1197.136973][ C1] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 1197.276793][ C1] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 1197.603595][ C1] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 1197.744862][ C1] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 1197.924910][T10693] tipc: Node number set to 2886997162 [ 1198.058769][ C1] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 1198.331470][ C1] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 1198.857700][ C1] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 1199.483895][ T6043] usb 7-1: new high-speed USB device number 31 using dummy_hcd [ 1199.497955][T10693] usb 8-1: new high-speed USB device number 36 using dummy_hcd [ 1199.511894][T13228] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1199.536876][T12272] usb 2-1: new high-speed USB device number 17 using dummy_hcd [ 1199.639823][ T6043] usb 7-1: config 220 has an invalid interface number: 76 but max is 2 [ 1199.639853][ T6043] usb 7-1: config 220 contains an unexpected descriptor of type 0x2, skipping [ 1199.639872][ T6043] usb 7-1: config 220 has an invalid descriptor of length 13, skipping remainder of the config [ 1199.639893][ T6043] usb 7-1: config 220 has no interface number 2 [ 1199.639986][ T6043] usb 7-1: config 220 interface 1 altsetting 5 has 0 endpoint descriptors, different from the interface descriptor's value: 12 [ 1199.640014][ T6043] usb 7-1: config 220 interface 0 has no altsetting 0 [ 1199.640032][ T6043] usb 7-1: config 220 interface 76 has no altsetting 0 [ 1199.640069][ T6043] usb 7-1: config 220 interface 1 has no altsetting 0 [ 1199.656826][T10693] usb 8-1: Using ep0 maxpacket: 8 [ 1199.703127][ T6043] usb 7-1: New USB device found, idVendor=8086, idProduct=0b07, bcdDevice=6c.b9 [ 1199.703162][ T6043] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1199.703184][ T6043] usb 7-1: Product: syz [ 1199.703200][ T6043] usb 7-1: Manufacturer: syz [ 1199.703216][ T6043] usb 7-1: SerialNumber: syz [ 1199.706850][T12272] usb 2-1: Using ep0 maxpacket: 8 [ 1199.722929][T12272] usb 2-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 56832, setting to 1024 [ 1199.722965][T12272] usb 2-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024 [ 1199.722991][T12272] usb 2-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 1199.723015][T12272] usb 2-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 1199.723060][T12272] usb 2-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 1199.723082][T12272] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1199.867442][T10693] usb 8-1: New USB device found, idVendor=10c4, idProduct=8244, bcdDevice=dc.00 [ 1199.867521][T10693] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1199.867539][T10693] usb 8-1: Product: syz [ 1199.867551][T10693] usb 8-1: Manufacturer: syz [ 1199.867564][T10693] usb 8-1: SerialNumber: syz [ 1199.916887][ C1] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 1200.005301][T10693] usb 8-1: config 0 descriptor?? [ 1200.058714][T10693] radio-usb-si4713 8-1:0.0: Si4713 development board discovered: (10C4:8244) [ 1200.086420][T12272] usb 2-1: GET_CAPABILITIES returned 0 [ 1200.092503][T12272] usbtmc 2-1:16.0: can't read capabilities [ 1200.174783][ T6043] usb 7-1: selecting invalid altsetting 0 [ 1200.222514][ T6043] usb 7-1: Found UVC 7.01 device syz (8086:0b07) [ 1200.222549][ T6043] usb 7-1: No valid video chain found. [ 1200.286915][ T6043] usb 7-1: selecting invalid altsetting 0 [ 1200.286959][ T6043] usbtest 7-1:220.1: probe with driver usbtest failed with error -22 [ 1200.325025][ T8417] usb 2-1: USB disconnect, device number 17 [ 1200.424176][ T6043] usb 7-1: USB disconnect, device number 31 [ 1200.713772][T10693] radio-usb-si4713 8-1:0.0: probe with driver radio-usb-si4713 failed with error -71 [ 1200.714402][T10693] usbhid 8-1:0.0: couldn't find an input interrupt endpoint [ 1200.742611][T10693] usb 8-1: USB disconnect, device number 36 [ 1201.994107][ C1] net_ratelimit: 1 callbacks suppressed [ 1201.994131][ C1] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 1202.517530][T13260] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1580'. [ 1202.847785][T11172] usb 7-1: new high-speed USB device number 32 using dummy_hcd [ 1203.017361][T11172] usb 7-1: Using ep0 maxpacket: 32 [ 1203.026919][ C1] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 1203.069680][T11172] usb 7-1: config index 0 descriptor too short (expected 44, got 36) [ 1203.069710][T11172] usb 7-1: config 0 has an invalid interface number: 126 but max is 0 [ 1203.069732][T11172] usb 7-1: config 0 has no interface number 0 [ 1203.069784][T11172] usb 7-1: config 0 interface 126 altsetting 16 bulk endpoint 0x6 has invalid maxpacket 1023 [ 1203.069809][T11172] usb 7-1: config 0 interface 126 altsetting 16 endpoint 0x82 has invalid wMaxPacketSize 0 [ 1203.069831][T11172] usb 7-1: config 0 interface 126 altsetting 16 bulk endpoint 0x82 has invalid maxpacket 0 [ 1203.070193][T11172] usb 7-1: config 0 interface 126 has no altsetting 0 [ 1203.193805][T11172] usb 7-1: New USB device found, idVendor=09c4, idProduct=0011, bcdDevice=b0.1c [ 1203.193839][T11172] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1203.193860][T11172] usb 7-1: Product: syz [ 1203.193875][T11172] usb 7-1: Manufacturer: syz [ 1203.193889][T11172] usb 7-1: SerialNumber: syz [ 1203.277172][T11172] usb 7-1: config 0 descriptor?? [ 1203.278314][T13263] raw-gadget.0 gadget.6: fail, usb_ep_enable returned -22 [ 1203.366984][T13278] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1586'. [ 1203.432259][T13278] batadv_slave_0: entered promiscuous mode [ 1203.455025][T13278] batadv_slave_1: entered promiscuous mode [ 1203.466180][T13278] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1203.466202][T13278] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1203.485235][T13278] debugfs: 'hsr1' already exists in 'hsr' [ 1203.485267][T13278] Cannot create hsr debugfs directory [ 1203.811946][T11172] ir_usb 7-1:0.126: IR Dongle converter detected [ 1204.031646][T13263] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1204.054110][T13263] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1204.066879][ C1] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 1204.092911][T11172] usb 7-1: IR Dongle converter now attached to ttyUSB0 [ 1204.329461][T13294] 9pnet_fd: Insufficient options for proto=fd [ 1204.502006][ T9637] usb 7-1: USB disconnect, device number 32 [ 1205.108730][ C1] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 1205.557593][ T9637] ir-usb ttyUSB0: IR Dongle converter now disconnected from ttyUSB0 [ 1205.558537][ T9637] ir_usb 7-1:0.126: device disconnected [ 1205.866162][T13301] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1592'. [ 1206.040716][T13306] syzkaller1: entered promiscuous mode [ 1206.040750][T13306] syzkaller1: entered allmulticast mode [ 1206.146786][ C1] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 1207.186785][ C1] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 1208.226945][ C1] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 1209.266949][ C1] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 1209.547582][T13354] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1209.837123][ T5924] usb 1-1: new high-speed USB device number 23 using dummy_hcd [ 1210.000208][ T5924] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1210.000243][ T5924] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1210.000284][ T5924] usb 1-1: New USB device found, idVendor=0fc5, idProduct=b080, bcdDevice= 0.00 [ 1210.000308][ T5924] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1210.036290][ T5924] usb 1-1: config 0 descriptor?? [ 1210.316794][ C1] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 1210.517885][ T5924] hid-led 0003:0FC5:B080.001E: unknown main item tag 0x0 [ 1210.517922][ T5924] hid-led 0003:0FC5:B080.001E: unknown main item tag 0x0 [ 1210.517950][ T5924] hid-led 0003:0FC5:B080.001E: unknown main item tag 0x0 [ 1211.347107][ C1] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 1211.836521][T10693] usb 1-1: USB disconnect, device number 23 [ 1212.386864][ C1] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 1213.036420][T13409] netlink: 4 bytes leftover after parsing attributes in process `syz.6.1619'. [ 1213.514035][ C1] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 1214.546857][ C1] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 1215.794675][ C1] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 1217.029632][ C1] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 1218.067839][ C1] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 1219.218406][ C1] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 1219.240299][ T38] audit: type=1326 audit(2000000320.580:117): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=13458 comm="syz.7.1632" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7fb3d73eada9 code=0x7ffc0000 [ 1219.240781][ T38] audit: type=1326 audit(2000000320.600:118): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=13458 comm="syz.7.1632" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb3d744eba9 code=0x7ffc0000 [ 1219.241619][ T38] audit: type=1326 audit(2000000320.600:119): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=13458 comm="syz.7.1632" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7fb3d73eada9 code=0x7ffc0000 [ 1219.242051][ T38] audit: type=1326 audit(2000000320.600:120): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=13458 comm="syz.7.1632" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb3d744eba9 code=0x7ffc0000 [ 1219.242690][ T38] audit: type=1326 audit(2000000320.600:121): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=13458 comm="syz.7.1632" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb3d744eba9 code=0x7ffc0000 [ 1219.248230][ T38] audit: type=1326 audit(2000000320.600:122): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=13458 comm="syz.7.1632" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb3d744eba9 code=0x7ffc0000 [ 1219.249021][ T38] audit: type=1326 audit(2000000320.610:123): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=13458 comm="syz.7.1632" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7fb3d73eada9 code=0x7ffc0000 [ 1219.249484][ T38] audit: type=1326 audit(2000000320.610:124): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=13458 comm="syz.7.1632" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb3d744eba9 code=0x7ffc0000 [ 1219.249923][ T38] audit: type=1326 audit(2000000320.610:125): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=13458 comm="syz.7.1632" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb3d744eba9 code=0x7ffc0000 [ 1219.250778][ T38] audit: type=1326 audit(2000000320.610:126): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=13458 comm="syz.7.1632" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7fb3d73eada9 code=0x7ffc0000 [ 1219.873352][T13434] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1220.226812][ C1] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 1221.266799][ C1] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 1221.417890][T13479] netlink: 4 bytes leftover after parsing attributes in process `syz.7.1637'. [ 1221.478866][T13483] Bluetooth: hci0: invalid length 0, exp 2 for type 9 [ 1222.641207][ C1] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 1222.915445][T13434] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1223.416946][ T3636] usb 7-1: new high-speed USB device number 33 using dummy_hcd [ 1223.666858][ C1] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 1223.696759][ T3636] usb 7-1: Using ep0 maxpacket: 8 [ 1224.699943][ T3636] usb 7-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 1224.699972][ T3636] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1224.699999][ T3636] usb 7-1: Product: syz [ 1224.700012][ T3636] usb 7-1: Manufacturer: syz [ 1224.700025][ T3636] usb 7-1: SerialNumber: syz [ 1224.707059][ C1] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 1224.771169][ T3636] usb 7-1: config 0 descriptor?? [ 1224.875649][T13434] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1225.145843][ T3636] usb 7-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 1225.923024][ C1] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 1230.704018][T13434] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1230.999290][ C1] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 1231.156616][ T3636] dvb_usb_rtl28xxu 7-1:0.0: probe with driver dvb_usb_rtl28xxu failed with error -32 [ 1231.427465][ T5916] usb 7-1: USB disconnect, device number 33 [ 1231.866825][ T6043] usb 2-1: new high-speed USB device number 18 using dummy_hcd [ 1232.016808][ T6043] usb 2-1: Using ep0 maxpacket: 16 [ 1232.025522][ T6043] usb 2-1: New USB device found, idVendor=17ef, idProduct=721e, bcdDevice=de.06 [ 1232.025564][ T6043] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1232.025585][ T6043] usb 2-1: Product: syz [ 1232.025599][ T6043] usb 2-1: Manufacturer: syz [ 1232.025615][ T6043] usb 2-1: SerialNumber: syz [ 1232.043647][ T6043] r8152-cfgselector 2-1: Unknown version 0x0000 [ 1232.146059][ C1] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 1233.789671][ C1] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 1233.809949][ T6043] r8152-cfgselector 2-1: Unknown version 0x7cf0 [ 1233.810613][ T6043] r8152-cfgselector 2-1: bad CDC descriptors [ 1234.051737][ T6043] r8152-cfgselector 2-1: USB disconnect, device number 18 [ 1234.215220][T13555] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 1234.350362][ T5841] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 1234.369052][ T5841] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 1234.371899][ T5841] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 1234.373223][ T5841] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 1234.374666][ T5841] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 1234.866977][ C1] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 1234.908574][T12854] netdevsim netdevsim4 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1235.056979][T12855] netdevsim netdevsim4 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1235.907613][ C1] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 1236.505911][ T59] Bluetooth: hci2: command tx timeout [ 1236.793751][ T3601] netdevsim netdevsim4 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1236.946940][ C1] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 1237.265320][ T2801] netdevsim netdevsim4 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1237.986867][ C1] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 1238.406842][ T6043] usb 8-1: new high-speed USB device number 37 using dummy_hcd [ 1238.546838][ T59] Bluetooth: hci2: command tx timeout [ 1238.549679][T13559] chnl_net:caif_netlink_parms(): no params data found [ 1238.557003][ T31] usb 7-1: new high-speed USB device number 34 using dummy_hcd [ 1238.578595][ T6043] usb 8-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1238.578627][ T6043] usb 8-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 1238.580282][ T6043] usb 8-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 1238.580310][ T6043] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 1238.580330][ T6043] usb 8-1: SerialNumber: syz [ 1238.729207][T13600] syz.0.1663 (13600): drop_caches: 2 [ 1238.782102][ T31] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1238.782137][ T31] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1238.782160][ T31] usb 7-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 1238.782202][ T31] usb 7-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 1238.782224][ T31] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1238.843634][ T31] usb 7-1: config 0 descriptor?? [ 1239.036801][ C1] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 1239.075667][ T6043] usb 8-1: 0:2 : does not exist [ 1239.287163][ T6043] usb 8-1: USB disconnect, device number 37 [ 1239.440610][ T31] plantronics 0003:047F:FFFF.001F: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.6-1/input0 [ 1239.513198][T10578] udevd[10578]: error opening ATTR{/sys/devices/platform/dummy_hcd.7/usb8/8-1/8-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1239.771572][ C1] raw-gadget.1 gadget.6: ignoring, device is not running [ 1239.808987][ T31] usb 7-1: USB disconnect, device number 34 [ 1240.069120][T13623] fido_id[13623]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.6/usb7/report_descriptor': No such file or directory [ 1240.202476][ C1] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 1240.756236][ T59] Bluetooth: hci2: command tx timeout [ 1240.786854][T13631] block nbd1: Attempted send on invalid socket [ 1240.786882][T13631] I/O error, dev nbd1, sector 6 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 1 [ 1240.786983][T13631] ADFS-fs (nbd1): error: unable to read block 3, try 0 [ 1241.267288][ C1] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 1242.132448][T13559] bridge0: port 1(bridge_slave_0) entered blocking state [ 1242.147108][T13559] bridge0: port 1(bridge_slave_0) entered disabled state [ 1242.147419][T13559] bridge_slave_0: entered allmulticast mode [ 1242.160976][T13559] bridge_slave_0: entered promiscuous mode [ 1242.175570][T13559] bridge0: port 2(bridge_slave_1) entered blocking state [ 1242.175723][T13559] bridge0: port 2(bridge_slave_1) entered disabled state [ 1242.176002][T13559] bridge_slave_1: entered allmulticast mode [ 1242.196396][T13559] bridge_slave_1: entered promiscuous mode [ 1242.306759][ C1] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 1242.789099][ T59] Bluetooth: hci2: command tx timeout [ 1242.916863][ T6043] usb 1-1: new high-speed USB device number 24 using dummy_hcd [ 1243.069411][ T6043] usb 1-1: Using ep0 maxpacket: 16 [ 1243.072268][ T6043] usb 1-1: config 0 has no interfaces? [ 1243.072304][ T6043] usb 1-1: New USB device found, idVendor=0763, idProduct=1015, bcdDevice=56.88 [ 1243.072328][ T6043] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1243.132106][ T6043] usb 1-1: config 0 descriptor?? [ 1243.357074][ C1] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 1243.382038][ T6043] usb 1-1: USB disconnect, device number 24 [ 1244.049274][ C0] vkms_vblank_simulate: vblank timer overrun [ 1244.396774][ C1] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 1245.426854][ C1] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 1246.476758][ C1] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 1247.516833][ C1] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 1248.546888][ C1] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 1248.889533][T13559] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1248.910968][T13559] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1248.966809][ T5924] usb 1-1: new full-speed USB device number 25 using dummy_hcd [ 1249.528472][ T5924] usb 1-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 1249.528590][ T5924] usb 1-1: config 1 has no interface number 1 [ 1249.529272][ T5924] usb 1-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0 [ 1249.530397][ T5924] usb 1-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 0, changing to 4 [ 1250.336484][ T5924] usb 1-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 1250.336577][ T5924] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1250.336931][ T5924] usb 1-1: Product: syz [ 1250.337007][ T5924] usb 1-1: Manufacturer: syz [ 1250.337050][ T5924] usb 1-1: SerialNumber: syz [ 1250.340457][ C1] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 1250.637964][ T5924] usb 1-1: 2:1 : UAC_AS_GENERAL descriptor not found [ 1250.759555][ T5924] usb 1-1: USB disconnect, device number 25 [ 1250.856938][ T1321] ieee802154 phy0 wpan0: encryption failed: -22 [ 1250.863749][T13698] udevd[13698]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1251.348609][ C1] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 1252.353319][T13559] team0: Port device team_slave_0 added [ 1252.386996][ C1] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 1252.406607][T13559] team0: Port device team_slave_1 added [ 1252.876166][T13559] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1252.876186][T13559] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1252.876230][T13559] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1252.896887][T10693] usb 7-1: new high-speed USB device number 35 using dummy_hcd [ 1252.905288][T13559] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1252.905311][T13559] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1252.905347][T13559] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1253.063959][T10693] usb 7-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1253.063986][T10693] usb 7-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 1253.094427][T10693] usb 7-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 1253.094456][T10693] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 1253.094483][T10693] usb 7-1: SerialNumber: syz [ 1253.344319][T13726] syzkaller1: entered promiscuous mode [ 1253.344352][T13726] syzkaller1: entered allmulticast mode [ 1253.426962][ C1] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 1254.311025][T10693] usb 7-1: 0:2 : does not exist [ 1254.409799][T10693] usb 7-1: USB disconnect, device number 35 [ 1254.466908][ C1] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 1254.525818][T13698] udevd[13698]: error opening ATTR{/sys/devices/platform/dummy_hcd.6/usb7/7-1/7-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1254.941983][T13559] hsr_slave_0: entered promiscuous mode [ 1254.948902][T13559] hsr_slave_1: entered promiscuous mode [ 1254.955097][T13559] debugfs: 'hsr0' already exists in 'hsr' [ 1254.955129][T13559] Cannot create hsr debugfs directory [ 1255.507292][ C1] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 1256.777885][ C1] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 1257.832502][ C1] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 1258.619261][ T6330] usb 8-1: new high-speed USB device number 38 using dummy_hcd [ 1258.776854][ T6330] usb 8-1: Using ep0 maxpacket: 32 [ 1258.780185][ T6330] usb 8-1: New USB device found, idVendor=041e, idProduct=403c, bcdDevice=cc.d7 [ 1258.780212][ T6330] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1258.854228][ T6330] usb 8-1: config 0 descriptor?? [ 1258.877134][ C1] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 1258.928264][ T6330] gspca_main: sq930x-2.14.0 probing 041e:403c [ 1259.553968][T13798] overlayfs: failed to resolve './file0': -2 [ 1259.916742][ C1] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 1260.396741][ T6330] gspca_sq930x: reg_w 0105 bf00 failed -71 [ 1260.396845][ T6330] sq930x 8-1:0.0: probe with driver sq930x failed with error -71 [ 1260.416008][ T6330] usb 8-1: USB disconnect, device number 38 [ 1260.946824][ C1] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 1261.986778][ C1] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 1262.798673][T13841] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1717'. [ 1263.026792][ C1] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 1263.116789][T13848] loop9: detected capacity change from 0 to 7 [ 1263.138798][T13848] Dev loop9: unable to read RDB block 7 [ 1263.138847][T13848] loop9: unable to read partition table [ 1263.139104][T13848] loop9: partition table beyond EOD, truncated [ 1263.139164][T13848] loop_reread_partitions: partition scan of loop9 (þ被xü—ŸÑà– ) failed (rc=-5) [ 1263.306891][ T3636] usb 8-1: new full-speed USB device number 39 using dummy_hcd [ 1263.463545][ T3636] usb 8-1: config 0 has an invalid interface number: 128 but max is 0 [ 1263.463573][ T3636] usb 8-1: config 0 has no interface number 0 [ 1263.466860][ T3636] usb 8-1: New USB device found, idVendor=20b7, idProduct=1540, bcdDevice=b7.5a [ 1263.466889][ T3636] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1263.466909][ T3636] usb 8-1: Product: syz [ 1263.466924][ T3636] usb 8-1: Manufacturer: syz [ 1263.466938][ T3636] usb 8-1: SerialNumber: syz [ 1263.629495][ T3636] usb 8-1: config 0 descriptor?? [ 1263.960365][T13865] input: syz1 as /devices/virtual/input/input20 [ 1264.077705][ C1] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 1264.140128][T13866] TCP: request_sock_subflow_v6: Possible SYN flooding on port [fe80::aa]:20002. Sending cookies. [ 1264.284772][T13782] udevd[13782]: setting owner of /dev/input/event4 to uid=0, gid=104 failed: No such file or directory [ 1264.720602][ T3636] usb 8-1: non-Atmel transceiver xxxx8de1 [ 1264.921570][ T3636] usb 8-1: Firmware version (0.0) predates our first public release. [ 1264.921600][ T3636] usb 8-1: Please update to version 0.2 or newer [ 1264.923743][ T3636] usb 8-1: atusb_probe: initialization failed, error = -19 [ 1264.997662][ T3636] usb 8-1: USB disconnect, device number 39 [ 1265.109187][ C1] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 1265.414335][T13559] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 1266.148099][ C1] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 1266.502168][T13559] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 1266.664908][T13559] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 1266.801204][T13559] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 1267.011543][T13896] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1735'. [ 1267.186889][ C1] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 1267.726376][T13916] overlayfs: failed to resolve './file0': -2 [ 1267.918621][T13914] pim6reg1: entered promiscuous mode [ 1267.918655][T13914] pim6reg1: entered allmulticast mode [ 1268.053018][T13559] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1268.097865][T13559] 8021q: adding VLAN 0 to HW filter on device team0 [ 1268.118260][ T6950] bridge0: port 1(bridge_slave_0) entered blocking state [ 1268.118506][ T6950] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1268.164376][ T6950] bridge0: port 2(bridge_slave_1) entered blocking state [ 1268.166925][ T6950] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1268.226847][ C1] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 1269.266791][ C1] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 1270.383479][ C1] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 1270.881568][ C0] vkms_vblank_simulate: vblank timer overrun [ 1271.016101][ C0] vkms_vblank_simulate: vblank timer overrun [ 1271.445176][ C1] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 1271.853314][ C0] vkms_vblank_simulate: vblank timer overrun [ 1271.968306][T13949] netlink: 'syz.0.1747': attribute type 4 has an invalid length. [ 1272.019741][T13950] netlink: 'syz.0.1747': attribute type 4 has an invalid length. [ 1272.046840][T12272] usb 8-1: new high-speed USB device number 40 using dummy_hcd [ 1272.215288][T12272] usb 8-1: config 1 has an invalid interface number: 7 but max is 0 [ 1272.215316][T12272] usb 8-1: config 1 has no interface number 0 [ 1272.215357][T12272] usb 8-1: config 1 interface 7 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024 [ 1272.215380][T12272] usb 8-1: config 1 interface 7 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 1023 [ 1272.215404][T12272] usb 8-1: config 1 interface 7 altsetting 0 has a duplicate endpoint with address 0x5, skipping [ 1272.269583][T12272] usb 8-1: New USB device found, idVendor=1199, idProduct=68a3, bcdDevice= 0.00 [ 1272.269618][T12272] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1272.269648][T12272] usb 8-1: Product: syz [ 1272.269664][T12272] usb 8-1: Manufacturer: syz [ 1272.269679][T12272] usb 8-1: SerialNumber: syz [ 1272.356280][T13946] raw-gadget.0 gadget.7: fail, usb_ep_enable returned -22 [ 1272.356433][T13946] raw-gadget.0 gadget.7: fail, usb_ep_enable returned -22 [ 1272.389214][T12272] usb 8-1: Expected 3 endpoints, found: 2 [ 1272.466746][ C1] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 1272.576278][ T6330] usb 8-1: USB disconnect, device number 40 [ 1273.424099][ C0] vkms_vblank_simulate: vblank timer overrun [ 1273.507090][ C1] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 1273.527328][ C0] vkms_vblank_simulate: vblank timer overrun [ 1273.954383][T13559] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1274.443095][ C0] vkms_vblank_simulate: vblank timer overrun [ 1274.718800][ C1] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 1274.849705][ C0] vkms_vblank_simulate: vblank timer overrun [ 1275.386967][ C0] vkms_vblank_simulate: vblank timer overrun [ 1275.542504][ C0] vkms_vblank_simulate: vblank timer overrun [ 1275.746829][ C1] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 1275.835826][T13559] veth0_vlan: entered promiscuous mode [ 1275.895374][T13559] veth1_vlan: entered promiscuous mode [ 1276.045446][T13559] veth0_macvtap: entered promiscuous mode [ 1276.066771][T13559] veth1_macvtap: entered promiscuous mode [ 1276.118416][T13559] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1276.182527][T13559] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1276.235454][ T3573] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1276.257341][ T3573] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1276.264852][T12858] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1276.394931][T12858] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1276.466263][T13995] netlink: 'syz.6.1759': attribute type 1 has an invalid length. [ 1276.797028][ C1] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 1277.694079][T13995] 8021q: adding VLAN 0 to HW filter on device bond1 [ 1277.826799][ C1] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 1278.356012][T13999] bond1: (slave geneve2): making interface the new active one [ 1278.384146][T13999] bond1: (slave geneve2): Enslaving as an active interface with an up link [ 1278.676871][T10693] usb 8-1: new high-speed USB device number 41 using dummy_hcd [ 1278.836856][T10693] usb 8-1: Using ep0 maxpacket: 32 [ 1278.845864][T10693] usb 8-1: config 0 has an invalid interface number: 156 but max is 0 [ 1278.845893][T10693] usb 8-1: config 0 has no interface number 0 [ 1278.846038][T10693] usb 8-1: config 0 interface 156 altsetting 2 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 1278.846074][T10693] usb 8-1: config 0 interface 156 has no altsetting 0 [ 1278.861264][T10693] usb 8-1: New USB device found, idVendor=2040, idProduct=6500, bcdDevice=1c.9d [ 1278.861294][T10693] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1278.861315][T10693] usb 8-1: Product: syz [ 1278.861488][T10693] usb 8-1: Manufacturer: syz [ 1278.861503][T10693] usb 8-1: SerialNumber: syz [ 1278.866745][ C1] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 1278.868541][ T3573] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1278.868564][ T3573] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1278.978326][T10693] usb 8-1: config 0 descriptor?? [ 1279.299039][T10693] em28xx 8-1:0.156: New device syz syz @ 480 Mbps (2040:6500, interface 156, class 156) [ 1279.299079][T10693] em28xx 8-1:0.156: Video interface 156 found: isoc [ 1279.357293][T10693] em28xx 8-1:0.156: unknown em28xx chip ID (0) [ 1279.369965][ T2801] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1279.369988][ T2801] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1279.415870][T14033] bridge0: port 3(ipvlan2) entered blocking state [ 1279.437305][T14033] bridge0: port 3(ipvlan2) entered disabled state [ 1279.440481][T14033] ipvlan2: entered allmulticast mode [ 1279.440499][T14033] bridge0: entered allmulticast mode [ 1279.469631][T14033] ipvlan2: left allmulticast mode [ 1279.469653][T14033] bridge0: left allmulticast mode [ 1279.506131][T10693] em28xx 8-1:0.156: reading from i2c device at 0xa0 failed (error=-5) [ 1279.506171][T10693] em28xx 8-1:0.156: board has no eeprom [ 1279.608159][T10693] em28xx 8-1:0.156: Identified as Hauppauge WinTV HVR 900 (card=10) [ 1279.608210][T10693] em28xx 8-1:0.156: analog set to isoc mode. [ 1279.964528][ C1] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 1280.437947][T11172] em28xx 8-1:0.156: Registering V4L2 extension [ 1280.607287][T10693] usb 8-1: USB disconnect, device number 41 [ 1280.609761][T10693] em28xx 8-1:0.156: Disconnecting em28xx [ 1280.968377][T14045] IPVS: length: 129 != 8 [ 1281.026732][ C1] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 1281.086829][T11172] em28xx 8-1:0.156: Config register raw data: 0xffffffed [ 1281.086860][T11172] em28xx 8-1:0.156: AC97 chip type couldn't be determined [ 1281.086873][T11172] em28xx 8-1:0.156: No AC97 audio processor [ 1281.086890][T11172] em28xx 8-1:0.156: em28xx_v4l2_init: Error while setting audio - error [-19]! [ 1281.087321][T11172] em28xx 8-1:0.156: Binding DVB extension [ 1281.087750][T11172] em28xx 8-1:0.156: no endpoint for DVB mode and transfer type 0 [ 1281.087766][T11172] em28xx 8-1:0.156: failed to pre-allocate USB transfer buffers for DVB. [ 1281.087817][T11172] em28xx 8-1:0.156: Registering input extension [ 1281.095900][T10693] em28xx 8-1:0.156: Closing input extension [ 1281.287513][T14051] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1775'. [ 1281.577310][T14058] overlayfs: failed to resolve './file0': -2 [ 1281.766439][T10693] em28xx 8-1:0.156: Freeing device [ 1281.801418][T14061] netlink: 'syz.3.1649': attribute type 9 has an invalid length. [ 1281.801440][T14061] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1649'. [ 1282.241921][ C1] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 1282.956551][T14061] netlink: 'syz.3.1649': attribute type 9 has an invalid length. [ 1282.956576][T14061] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1649'. [ 1282.957229][ T3573] netdevsim netdevsim3 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 1283.266749][ C1] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 1283.274342][T12858] netdevsim netdevsim3 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 1283.303986][T12858] netdevsim netdevsim3 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 1283.305734][T12858] netdevsim netdevsim3 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 1284.306824][ C1] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 1284.427464][T14092] vivid-001: disconnect [ 1284.898544][T14090] vivid-001: reconnect [ 1287.479714][T14104] overlayfs: failed to resolve './file0': -2 [ 1287.885933][ C1] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 1288.162152][T14096] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1288.489698][T14117] netlink: 'syz.7.1800': attribute type 1 has an invalid length. [ 1288.786164][T14117] 8021q: adding VLAN 0 to HW filter on device bond3 [ 1288.948777][ C1] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 1289.052669][T14122] bond3: (slave ip6erspan0): making interface the new active one [ 1289.087218][T14122] bond3: (slave ip6erspan0): Enslaving as an active interface with an up link [ 1289.508352][T14140] syzkaller1: entered promiscuous mode [ 1289.508386][T14140] syzkaller1: entered allmulticast mode [ 1289.531546][T14140] PF_CAN: dropped non conform CAN skbuff: dev type 280, len 324 [ 1290.064759][ C1] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 1291.106765][ C1] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 1291.967177][ C1] vkms_vblank_simulate: vblank timer overrun [ 1291.983051][ T38] kauditd_printk_skb: 84 callbacks suppressed [ 1291.983070][ T38] audit: type=1326 audit(2000000393.340:211): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=14179 comm="syz.0.1820" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd0a54feba9 code=0x7ffc0000 [ 1291.983431][ T38] audit: type=1326 audit(2000000393.340:212): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=14179 comm="syz.0.1820" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd0a54feba9 code=0x7ffc0000 [ 1292.039684][ T38] audit: type=1326 audit(2000000393.400:213): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=14179 comm="syz.0.1820" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fd0a54feba9 code=0x7ffc0000 [ 1292.039748][ T38] audit: type=1326 audit(2000000393.400:214): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=14179 comm="syz.0.1820" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd0a54feba9 code=0x7ffc0000 [ 1292.040963][ T38] audit: type=1326 audit(2000000393.400:215): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=14179 comm="syz.0.1820" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd0a54feba9 code=0x7ffc0000 [ 1292.070215][ T38] audit: type=1326 audit(2000000393.430:216): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=14179 comm="syz.0.1820" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fd0a54feba9 code=0x7ffc0000 [ 1292.070282][ T38] audit: type=1326 audit(2000000393.430:217): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=14179 comm="syz.0.1820" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd0a54feba9 code=0x7ffc0000 [ 1292.070342][ T38] audit: type=1326 audit(2000000393.430:218): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=14179 comm="syz.0.1820" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd0a54feba9 code=0x7ffc0000 [ 1292.133323][ T38] audit: type=1326 audit(2000000393.490:219): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=14179 comm="syz.0.1820" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7fd0a54fd510 code=0x7ffc0000 [ 1292.133383][ T38] audit: type=1326 audit(2000000393.490:220): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=14179 comm="syz.0.1820" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd0a54feba9 code=0x7ffc0000 [ 1292.158791][ C1] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 1292.891216][ C1] vkms_vblank_simulate: vblank timer overrun [ 1293.014491][ C1] vkms_vblank_simulate: vblank timer overrun [ 1293.101908][ C1] vkms_vblank_simulate: vblank timer overrun [ 1293.133768][ C1] vkms_vblank_simulate: vblank timer overrun [ 1293.174480][ C1] vkms_vblank_simulate: vblank timer overrun [ 1293.207094][ C1] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 1293.229569][ C1] vkms_vblank_simulate: vblank timer overrun [ 1293.282579][ C1] vkms_vblank_simulate: vblank timer overrun [ 1293.320680][ C1] vkms_vblank_simulate: vblank timer overrun [ 1293.374518][ C1] vkms_vblank_simulate: vblank timer overrun [ 1293.426072][ C1] vkms_vblank_simulate: vblank timer overrun [ 1293.836450][T14206] veth0: entered promiscuous mode [ 1293.861865][T14200] veth0: left promiscuous mode [ 1294.236718][ C1] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 1294.556184][ C1] vkms_vblank_simulate: vblank timer overrun [ 1294.893113][ C1] vkms_vblank_simulate: vblank timer overrun [ 1298.657278][ C1] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 1299.666776][ C1] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 1300.707506][ C1] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 1301.746737][ C1] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 1304.234874][ C1] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 1304.436947][T10693] usb 7-1: new high-speed USB device number 36 using dummy_hcd [ 1304.538186][ T5909] usb 8-1: new high-speed USB device number 42 using dummy_hcd [ 1304.586746][T10693] usb 7-1: Using ep0 maxpacket: 8 [ 1304.591327][T10693] usb 7-1: config index 0 descriptor too short (expected 301, got 45) [ 1304.591392][T10693] usb 7-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 1304.591416][T10693] usb 7-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 1304.591440][T10693] usb 7-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 1304.591465][T10693] usb 7-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 1304.591510][T10693] usb 7-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 1304.591533][T10693] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1304.709159][ T5909] usb 8-1: Using ep0 maxpacket: 32 [ 1304.716488][ T5909] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1304.716542][ T5909] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1304.716581][ T5909] usb 8-1: New USB device found, idVendor=1e7d, idProduct=2d5a, bcdDevice= 0.00 [ 1304.719234][ T5909] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1304.783418][ T5909] usb 8-1: config 0 descriptor?? [ 1305.294518][ C1] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 1306.062149][ T5909] usbhid 8-1:0.0: can't add hid device: -71 [ 1306.064558][ T5909] usbhid 8-1:0.0: probe with driver usbhid failed with error -71 [ 1306.072524][ T5909] usb 8-1: USB disconnect, device number 42 [ 1306.316751][ C1] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 1307.402444][ C1] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 1307.589248][T10693] usb 7-1: usb_control_msg returned -71 [ 1307.589315][T10693] usbtmc 7-1:16.0: can't read capabilities [ 1307.706745][T10693] usb 7-1: USB disconnect, device number 36 [ 1307.956877][ T5909] usb 2-1: new high-speed USB device number 19 using dummy_hcd [ 1308.036870][ T3636] usb 4-1: new high-speed USB device number 3 using dummy_hcd [ 1308.188845][ T3636] usb 4-1: Using ep0 maxpacket: 16 [ 1308.193161][ T3636] usb 4-1: config 0 has an invalid interface number: 1 but max is 0 [ 1308.193190][ T3636] usb 4-1: config 0 has no interface number 0 [ 1308.193236][ T3636] usb 4-1: config 0 interface 1 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1308.193263][ T3636] usb 4-1: config 0 interface 1 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1308.193397][ T3636] usb 4-1: New USB device found, idVendor=28bd, idProduct=0071, bcdDevice= 0.00 [ 1308.193421][ T3636] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1308.385391][ T8417] usb 1-1: new high-speed USB device number 26 using dummy_hcd [ 1308.396997][ T5909] usb 2-1: Using ep0 maxpacket: 16 [ 1308.405251][ T5909] usb 2-1: config 1 contains an unexpected descriptor of type 0x2, skipping [ 1308.405280][ T5909] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1308.405301][ T5909] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 1308.412938][ T5909] usb 2-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 1308.412972][ T5909] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1308.412996][ T5909] usb 2-1: Product: syz [ 1308.413012][ T5909] usb 2-1: Manufacturer: syz [ 1308.413029][ T5909] usb 2-1: SerialNumber: syz [ 1308.577991][ T8417] usb 1-1: Using ep0 maxpacket: 8 [ 1309.384579][ C1] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 1309.438621][ T3636] usb 4-1: config 0 descriptor?? [ 1309.464213][ T8417] usb 1-1: New USB device found, idVendor=10c4, idProduct=8244, bcdDevice=dc.00 [ 1309.464299][ T8417] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1309.464319][ T8417] usb 1-1: Product: syz [ 1309.464333][ T8417] usb 1-1: Manufacturer: syz [ 1309.464346][ T8417] usb 1-1: SerialNumber: syz [ 1309.642172][ T8417] usb 1-1: config 0 descriptor?? [ 1309.817148][ T5909] usb 2-1: 0:2 : does not exist [ 1309.956460][ T8417] radio-usb-si4713 1-1:0.0: Si4713 development board discovered: (10C4:8244) [ 1310.075175][ T3636] uclogic 0003:28BD:0071.0020: pen parameters not found [ 1310.075204][ T3636] uclogic 0003:28BD:0071.0020: interface is invalid, ignoring [ 1310.300473][ T3636] usb 4-1: USB disconnect, device number 3 [ 1310.346779][ T989] usb 8-1: new high-speed USB device number 43 using dummy_hcd [ 1310.386782][ C1] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 1310.506776][ T989] usb 8-1: Using ep0 maxpacket: 16 [ 1310.533404][ T989] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1310.533440][ T989] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1310.533464][ T989] usb 8-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 1310.533904][ T989] usb 8-1: New USB device found, idVendor=0955, idProduct=7214, bcdDevice=ed.00 [ 1310.533929][ T989] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1310.624385][ T8417] radio-usb-si4713 1-1:0.0: probe with driver radio-usb-si4713 failed with error -71 [ 1310.628499][ T989] usb 8-1: config 0 descriptor?? [ 1310.631329][ T8417] usbhid 1-1:0.0: couldn't find an input interrupt endpoint [ 1310.749629][ T5909] usb 2-1: 1:0: failed to get current value for ch 0 (-22) [ 1310.754709][ T8417] usb 1-1: USB disconnect, device number 26 [ 1311.098162][ T5909] usb 2-1: USB disconnect, device number 19 [ 1311.112499][ T989] shield 0003:0955:7214.0021: unknown main item tag 0x0 [ 1311.112541][ T989] shield 0003:0955:7214.0021: unknown main item tag 0x0 [ 1311.112569][ T989] shield 0003:0955:7214.0021: unknown main item tag 0x0 [ 1311.112597][ T989] shield 0003:0955:7214.0021: unknown main item tag 0x0 [ 1311.112621][ T989] shield 0003:0955:7214.0021: unknown main item tag 0x0 [ 1311.166207][ T989] input: HID 0955:7214 Haptics as /devices/virtual/input/input22 [ 1311.312310][T14321] random: crng reseeded on system resumption [ 1311.426849][ C1] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 1311.470371][T14339] fuse: Bad value for 'fd' [ 1311.541060][T14322] udevd[14322]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1312.016912][ T989] shield 0003:0955:7214.0021: Registered Thunderstrike controller [ 1312.017316][ T989] shield 0003:0955:7214.0021: : USB HID v0.00 Device [HID 0955:7214] on usb-dummy_hcd.7-1/input0 [ 1312.250082][ T1321] ieee802154 phy0 wpan0: encryption failed: -22 [ 1312.331297][ T5909] shield 0003:0955:7214.0021: Failed to output Thunderstrike HOSTCMD request HID report due to -EPROTO [ 1312.333115][ T5909] shield 0003:0955:7214.0021: Failed to output Thunderstrike HOSTCMD request HID report due to -EPROTO [ 1312.335659][ T3636] usb 8-1: USB disconnect, device number 43 [ 1312.337668][ T5909] shield 0003:0955:7214.0021: Failed to output Thunderstrike HOSTCMD request HID report due to -EPROTO [ 1312.466778][ C1] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 1313.909438][ C1] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 1314.596842][ T989] usb 4-1: new full-speed USB device number 4 using dummy_hcd [ 1314.776262][ T989] usb 4-1: New USB device found, idVendor=056e, idProduct=4010, bcdDevice=20.1c [ 1314.776297][ T989] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1314.811083][ T989] usb 4-1: config 0 descriptor?? [ 1314.823914][T14372] netlink: 'syz.0.1871': attribute type 12 has an invalid length. [ 1314.823936][T14372] netlink: 'syz.0.1871': attribute type 29 has an invalid length. [ 1314.823950][T14372] netlink: 148 bytes leftover after parsing attributes in process `syz.0.1871'. [ 1314.823994][T14372] netlink: 'syz.0.1871': attribute type 2 has an invalid length. [ 1314.824007][T14372] netlink: 'syz.0.1871': attribute type 3 has an invalid length. [ 1314.824020][T14372] netlink: 3 bytes leftover after parsing attributes in process `syz.0.1871'. [ 1314.947078][ C1] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 1315.455990][T14385] sctp: [Deprecated]: syz.7.1874 (pid 14385) Use of int in max_burst socket option deprecated. [ 1315.455990][T14385] Use struct sctp_assoc_value instead [ 1315.856962][ T3636] usb 1-1: new high-speed USB device number 27 using dummy_hcd [ 1315.987671][ C1] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 1316.016918][ T3636] usb 1-1: Using ep0 maxpacket: 32 [ 1316.021674][ T3636] usb 1-1: config 0 interface 0 has no altsetting 0 [ 1316.026181][ T3636] usb 1-1: New USB device found, idVendor=16d0, idProduct=10b8, bcdDevice=de.8e [ 1316.026210][ T3636] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1316.026232][ T3636] usb 1-1: Product: syz [ 1316.026248][ T3636] usb 1-1: Manufacturer: syz [ 1316.026263][ T3636] usb 1-1: SerialNumber: syz [ 1316.214592][ T3636] usb 1-1: config 0 descriptor?? [ 1316.383733][ T989] pegasus 4-1:0.0: can't reset MAC [ 1316.384094][ T989] pegasus 4-1:0.0: probe with driver pegasus failed with error -5 [ 1316.430053][ T989] usb 4-1: USB disconnect, device number 4 [ 1316.682079][ T3636] gs_usb 1-1:0.0: Configuring for 2 interfaces [ 1317.029614][ T38] kauditd_printk_skb: 7 callbacks suppressed [ 1317.029634][ T38] audit: type=1326 audit(2000000418.390:228): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=14403 comm="syz.1.1878" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f2d7e3eeba9 code=0x0 [ 1317.036927][ C1] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 1317.328014][ T3636] gs_usb 1-1:0.0: Disabling termination support for channel 1 (-EPROTO) [ 1317.395868][T14411] netlink: 'syz.7.1879': attribute type 10 has an invalid length. [ 1317.437155][ T3636] usb 1-1: USB disconnect, device number 27 [ 1317.462005][T14411] veth1_macvtap: left promiscuous mode [ 1318.400600][ C1] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 1318.833113][T14429] option changes via remount are deprecated (pid=14426 comm=syz.0.1884) [ 1318.916791][ T8417] usb 2-1: new full-speed USB device number 20 using dummy_hcd [ 1318.928179][T14428] llcp: nfc_llcp_send_ui_frame: Could not allocate PDU (error=-512) [ 1319.070033][ T8417] usb 2-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 1319.070068][ T8417] usb 2-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 1319.070126][ T8417] usb 2-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 1319.070152][ T8417] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1319.222271][T14428] llcp: nfc_llcp_send_ui_frame: Could not allocate PDU (error=-512) [ 1319.859145][ C1] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 1320.282102][ T8417] usb 2-1: usb_control_msg returned -32 [ 1320.282152][ T8417] usbtmc 2-1:16.0: can't read capabilities [ 1320.876733][ C1] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 1321.907337][ C1] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 1322.591147][ T6937] usb 2-1: USB disconnect, device number 20 [ 1322.776794][T11172] usb 1-1: new full-speed USB device number 28 using dummy_hcd [ 1322.946775][ C1] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 1322.964171][T11172] usb 1-1: New USB device found, idVendor=17e9, idProduct=8b4e, bcdDevice=9c.08 [ 1322.964199][T11172] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1323.005224][T11172] usb 1-1: config 0 descriptor?? [ 1323.095270][T14490] TCP: tcp_parse_options: Illegal window scaling value 236 > 14 received [ 1323.264111][T11172] udl 1-1:0.0: [drm] Unrecognized vendor firmware descriptor [ 1323.312020][T11172] [drm] Initialized udl 0.0.1 for 1-1:0.0 on minor 2 [ 1323.312046][T11172] [drm] Initialized udl on minor 2 [ 1324.838989][ C1] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 1324.853153][T11172] udl 1-1:0.0: [drm] *ERROR* Read EDID byte 1 failed err ffffffb9 [ 1324.905294][T11172] udl 1-1:0.0: [drm] Cannot find any crtc or sizes [ 1325.032724][T10693] udl 1-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffb9 [ 1325.055018][T11172] usb 1-1: USB disconnect, device number 28 [ 1325.056139][T10693] udl 1-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffed [ 1325.056310][T10693] udl 1-1:0.0: [drm] Cannot find any crtc or sizes [ 1325.918805][ C1] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 1326.947127][ C1] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 1327.116734][ T8417] usb 1-1: new high-speed USB device number 29 using dummy_hcd [ 1327.256876][T11172] usb 4-1: new high-speed USB device number 5 using dummy_hcd [ 1327.289660][ T8417] usb 1-1: config 0 has an invalid interface number: 255 but max is 0 [ 1327.289690][ T8417] usb 1-1: config 0 has no interface number 0 [ 1327.289721][ T8417] usb 1-1: too many endpoints for config 0 interface 255 altsetting 255: 255, using maximum allowed: 30 [ 1327.289764][ T8417] usb 1-1: config 0 interface 255 altsetting 255 has 0 endpoint descriptors, different from the interface descriptor's value: 255 [ 1327.289792][ T8417] usb 1-1: config 0 interface 255 has no altsetting 0 [ 1327.289825][ T8417] usb 1-1: New USB device found, idVendor=0bda, idProduct=0177, bcdDevice=7d.0b [ 1327.289847][ T8417] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1327.366833][ T8417] usb 1-1: config 0 descriptor?? [ 1327.385605][ T8417] ums-realtek 1-1:0.255: USB Mass Storage device detected [ 1327.406740][ T8446] usb 8-1: new high-speed USB device number 44 using dummy_hcd [ 1327.406864][T11172] usb 4-1: Using ep0 maxpacket: 32 [ 1327.409586][T11172] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1327.409619][T11172] usb 4-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 1327.445071][T11172] usb 4-1: New USB device found, idVendor=05ac, idProduct=020f, bcdDevice= 0.22 [ 1327.445117][T11172] usb 4-1: New USB device strings: Mfr=1, Product=130, SerialNumber=131 [ 1327.445138][T11172] usb 4-1: Product: syz [ 1327.445224][T11172] usb 4-1: Manufacturer: syz [ 1327.445240][T11172] usb 4-1: SerialNumber: syz [ 1327.561072][ T8446] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1327.561108][ T8446] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1327.561131][ T8446] usb 8-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 1327.561175][ T8446] usb 8-1: New USB device found, idVendor=0079, idProduct=0011, bcdDevice= 0.00 [ 1327.561209][ T8446] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1327.680014][ T8417] usb 1-1: USB disconnect, device number 29 [ 1327.699763][T11172] input: appletouch as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/input/input23 [ 1327.723538][ T8446] usb 8-1: config 0 descriptor?? [ 1327.884285][ C1] appletouch 4-1:1.0: atp_complete: usb_submit_urb failed with result -1 [ 1327.947218][T11172] usb 4-1: USB disconnect, device number 5 [ 1327.986737][ C1] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 1328.166214][ T8446] dragonrise 0003:0079:0011.0022: invalid report_count -326368751 [ 1328.166242][ T8446] dragonrise 0003:0079:0011.0022: item 0 4 1 9 parsing failed [ 1328.227182][ T8446] dragonrise 0003:0079:0011.0022: parse failed [ 1328.227276][ T8446] dragonrise 0003:0079:0011.0022: probe with driver dragonrise failed with error -22 [ 1328.233462][T11172] appletouch 4-1:1.0: input: appletouch disconnected [ 1328.390264][ T8446] usb 8-1: USB disconnect, device number 44 [ 1329.027605][ C1] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 1330.066706][ C1] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 1330.542972][T14583] netlink: 44 bytes leftover after parsing attributes in process `syz.6.1921'. [ 1331.106917][ C1] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 1332.146893][ C1] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 1333.187293][ C1] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 1334.237030][ C1] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 1335.278258][ C1] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 1336.317088][ C1] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 1337.346701][ C1] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 1338.575187][ C1] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 1339.132943][T14674] Oops: general protection fault, probably for non-canonica[ 1339.132943][T14674] Oops: general protection fault, probably for non-canonical address 0xdffffc0000000087: 0000 [#1] SMP KASAN PTI [ 1339.132972][T14674] KASAN: null-ptr-deref in range [0x0000000000000438-0x000000000000043f] [ 1339.133000][T14674] CPU: 1 UID: 0 PID: 14674 Comm: syz.6.1948 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 1339.133030][T14674] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 1339.133047][T14674] RIP: 0010:h5_recv+0x146/0x910 [ 1339.133077][T14674] Code: 18 48 c1 ea 03 48 89 54 24 28 48 89 d8 48 c1 e8 03 48 89 44 24 50 44 89 64 24 14 48 b8 00 00 00 00 00 fc ff df 48 8b 4c 24 30 <80> 3c 01 00 74 08 4c 89 ef e8 fc 06 35 fa 4d 8b 65 00 31 ff 4c 89 [ 1339.133097][T14674] RSP: 0018:ffffc900097f7c40 EFLAGS: 00010202 [ 1339.133117][T14674] RAX: dffffc0000000000 RBX: 0000000000000428 RCX: 0000000000000087 [ 1339.133132][T14674] RDX: 0000000000000086 RSI: 0000000000000001 RDI: 0000000000000000 [ 1339.133157][T14674] RBP: ffffc900097f7d60 R08: 0000000000000000 R09: 0000000000000000 [ 1339.133170][T14674] R10: dffffc0000000000 R11: ffffffff87e8a080 R12: 0000000000000001 [ 1339.133184][T14674] R13: 0000000000000438 R14: ffff888037c7a010 R15: ffffc900097f7e00 [ 1339.133198][T14674] FS: 00007f9644f6d6c0(0000) GS:ffff8881269bc000(0000) knlGS:0000000000000000 [ 1339.133215][T14674] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 1339.133228][T14674] CR2: 00007f9644f6cf98 CR3: 0000000068784000 CR4: 00000000003526f0 [ 1339.133245][T14674] Call Trace: [ 1339.133253][T14674] [ 1339.133266][T14674] ? __pfx_h5_recv+0x10/0x10 [ 1339.133286][T14674] ? rcu_read_lock_any_held+0xb3/0x120 [ 1339.133307][T14674] ? __pfx_rcu_read_lock_any_held+0x10/0x10 [ 1339.133325][T14674] ? _raw_spin_unlock_irqrestore+0xad/0x110 [ 1339.133357][T14674] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 1339.133393][T14674] hci_uart_tty_receive+0x191/0x220 [ 1339.133423][T14674] ? __pfx_hci_uart_tty_receive+0x10/0x10 [ 1339.133453][T14674] tiocsti+0x23c/0x2c0 [ 1339.133474][T14674] ? __pfx_tiocsti+0x10/0x10 [ 1339.133492][T14674] ? __fget_files+0x2a/0x420 [ 1339.133520][T14674] ? __fget_files+0x3a6/0x420 [ 1339.133549][T14674] ? __fget_files+0x2a/0x420 [ 1339.133578][T14674] tty_ioctl+0x62c/0xde0 [ 1339.133597][T14674] ? __pfx_tty_ioctl+0x10/0x10 [ 1339.133616][T14674] __se_sys_ioctl+0xfc/0x170 [ 1339.133650][T14674] do_syscall_64+0xfa/0x3b0 [ 1339.133666][T14674] ? lockdep_hardirqs_on+0x9c/0x150 [ 1339.133693][T14674] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1339.133712][T14674] ? clear_bhb_loop+0x60/0xb0 [ 1339.133750][T14674] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1339.133769][T14674] RIP: 0033:0x7f9646d2eba9 [ 1339.133785][T14674] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1339.133815][T14674] RSP: 002b:00007f9644f6d038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1339.133833][T14674] RAX: ffffffffffffffda RBX: 00007f9646f76090 RCX: 00007f9646d2eba9 [ 1339.133847][T14674] RDX: 0000200000000140 RSI: 0000000000005412 RDI: 0000000000000004 [ 1339.133877][T14674] RBP: 00007f9646db1e19 R08: 0000000000000000 R09: 0000000000000000 [ 1339.133889][T14674] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1339.133901][T14674] R13: 00007f9646f76128 R14: 00007f9646f76090 R15: 00007ffe089cdfb8 [ 1339.133930][T14674] [ 1339.133940][T14674] Modules linked in: [ 1339.133971][T14674] ---[ end trace 0000000000000000 ]--- [ 1339.142375][T14674] RIP: 0010:h5_recv+0x146/0x910 [ 1339.142415][T14674] Code: 18 48 c1 ea 03 48 89 54 24 28 48 89 d8 48 c1 e8 03 48 89 44 24 50 44 89 64 24 14 48 b8 00 00 00 00 00 fc ff df 48 8b 4c 24 30 <80> 3c 01 00 74 08 4c 89 ef e8 fc 06 35 fa 4d 8b 65 00 31 ff 4c 89 [ 1339.142440][T14674] RSP: 0018:ffffc900097f7c40 EFLAGS: 00010202 [ 1339.142461][T14674] RAX: dffffc0000000000 RBX: 0000000000000428 RCX: 0000000000000087 [ 1339.142478][T14674] RDX: 0000000000000086 RSI: 0000000000000001 RDI: 0000000000000000 [ 1339.142493][T14674] RBP: ffffc900097f7d60 R08: 0000000000000000 R09: 0000000000000000 [ 1339.142511][T14674] R10: dffffc0000000000 R11: ffffffff87e8a080 R12: 0000000000000001 [ 1339.142528][T14674] R13: 0000000000000438 R14: ffff888037c7a010 R15: ffffc900097f7e00 [ 1339.142545][T14674] FS: 00007f9644f6d6c0(0000) GS:ffff8881269bc000(0000) knlGS:0000000000000000 [ 1339.142564][T14674] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 1339.142581][T14674] CR2: 00007f9644f6cf98 CR3: 0000000068784000 CR4: 00000000003526f0 [ 1339.142604][T14674] Kernel panic - not syncing: Fatal exception [ 1339.143024][T14674] Kernel Offset: disabled