last executing test programs: 13.538521519s ago: executing program 1 (id=2775): r0 = socket(0x28, 0x5, 0x0) bind$vsock_stream(r0, &(0x7f0000000040), 0x10) listen(r0, 0x0) r1 = socket(0x28, 0x5, 0x0) connect$vsock_stream(r1, &(0x7f0000000080), 0x10) sendmsg$kcm(r1, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000880)=[{&(0x7f00000001c0)="a2", 0x1f}], 0x10}, 0x8010) close(r1) socket$kcm(0xa, 0x2, 0x73) close(0x3) 13.433495481s ago: executing program 1 (id=2776): r0 = socket$inet_udp(0x2, 0x2, 0x0) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) setsockopt$WPAN_WANTLQI(0xffffffffffffffff, 0x0, 0x3, 0x0, 0x0) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000100)=0x2) sched_setaffinity(0x0, 0x8, &(0x7f0000000240)=0x1000400000bce) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, &(0x7f0000000040)={'dummy0\x00', &(0x7f00000000c0)=@ethtool_coalesce={0xe, 0x5, 0x3, 0xb, 0x7fffffff, 0x7, 0x8, 0x4, 0x400, 0x7, 0x1, 0x7, 0xa4c, 0x88e38000, 0x10, 0x7, 0x1ff, 0x7, 0x3, 0x3, 0x7, 0x9d, 0x8}}) r2 = syz_open_dev$loop(0x0, 0x2, 0x0) write$binfmt_misc(0xffffffffffffffff, &(0x7f0000000000)="18", 0x1) write$binfmt_misc(0xffffffffffffffff, 0x0, 0x0) r3 = creat(&(0x7f0000000100)='./file0\x00', 0xd931d3864d39ddc4) lchown(0x0, 0x0, 0xee01) write$RDMA_USER_CM_CMD_LISTEN(r3, 0x0, 0x0) ioctl$LOOP_CONFIGURE(r2, 0x4c0a, &(0x7f0000000400)={0xffffffffffffffff, 0x0, {0x2a00, 0x80010000, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x1c, "fee8a2ab78fc979fd1e00d96072000001ea89de2b7fb0000e60080b8785d96000100", "2809e8dbe108598948224ad54afac11d875397bdb22d0000b420a1a93c5240f45f819e01177d3d458dd4992861ac00", "90be8b1c551265406c7f306003d8a0f4bd00"}}) r4 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r4, &(0x7f0000002000)=""/102400, 0x19000) r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ieee802154(&(0x7f00000001c0), r5) sendmsg$IEEE802154_ADD_IFACE(r5, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={0x0, 0x28}, 0x1, 0x0, 0x0, 0x4000}, 0x0) setsockopt$IP_VS_SO_SET_STARTDAEMON(0xffffffffffffffff, 0x0, 0x48b, 0x0, 0x0) pipe2(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) vmsplice(r6, &(0x7f0000000540)=[{&(0x7f0000000100)="7927393059dab7272a83ffa61044", 0xe}, {&(0x7f0000000440)="f9", 0x1}, {&(0x7f0000000480)='w\\', 0x2}], 0x3, 0xc) r7 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) setsockopt$bt_l2cap_L2CAP_LM(r7, 0x6, 0x3, &(0x7f0000000040)=0x1, 0x4) r8 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000180), r1) sendmsg$NLBL_MGMT_C_ADD(r1, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f00000006c0)={0x114, r8, 0xe701ac47a3d23ecd, 0x0, 0x2, {}, [@NLBL_MGMT_A_PROTOCOL={0x8, 0x2, 0x5}, @NLBL_MGMT_A_DOMAIN={0xce, 0x1, 'C\xec\xf8\xa0w\x15|\xd8\xbcs\xe1\xb93\x14\xcd\xcb\xb6\xb9\xbb\x84\xe5\xbc\xdb\x7f\x9a\xf2\xea\xcc\x91:v@\xe83-\x1d\xaagQl\x7f\tKt\fc\x1f\x17]\xd5\xd0\xf0\xa8\xeb\xd2g\x92\x04\x02\v\x00od\xe6,\xd3@I\x17\xf3\xbees0\xad\xc6\xbf/*\xb6(o\x91t\x12\x93UK\xf4@n\xdc\xdc\x8a7y\x81FY\xbe\xbbc\xd2\xc3\x01\xa5\xe2V\x8c\xb3im~\xd2V\xdaG\xbdbF\xc8n\x86\xac\x9c\xfb\xda\xe2&\"\xb4:\x13\xe9\tc\x85\xb4\xcb\x17\xbfm\x846\xe7\x7fp\x9eCdb\xad;\xa2\x8fs\xbf6\xe8\xe3Xg3&\xe2 \xd6\n\x9d=~=\xe5\xdc\x90\a\xe7M\x9c<\x93/\xaf\x89\x06+\x96]\xb5+\xee\xff8^D*\xdb\xb8\xd8t\x80\xd4'}, @NLBL_MGMT_A_IPV6ADDR={0x14, 0x5, @private1}, @NLBL_MGMT_A_IPV6MASK={0x14, 0x6, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}]}, 0x114}}, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000040)={0x1f, 0x4, &(0x7f0000000140)=ANY=[@ANYBLOB="9fcf4fca4f0000000000000000000000000089660a626498"], &(0x7f00000000c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x13, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) setsockopt$ARPT_SO_SET_REPLACE(r0, 0x0, 0x60, &(0x7f0000000440)={'filter\x00', 0x4, 0x4, 0x3c8, 0xe8, 0x0, 0x0, 0x2e0, 0x2e0, 0x2e0, 0x4, 0x0, {[{{@uncond, 0xc0, 0xe8}, @unspec=@STANDARD={0x28, '\x00', 0x0, 0x1d0}}, {{@arp={@multicast2, @initdev={0xac, 0x1e, 0x0, 0x0}, 0xff000000, 0xff, 0xd, 0x5, {@empty, {[0xff, 0x0, 0xff]}}, {@empty, {[0xff, 0x0, 0x0, 0x0, 0x0, 0xff]}}, 0x6, 0x8a2d, 0x1000, 0x100, 0xa, 0xc, 'sit0\x00', 'team0\x00', {0xff}, {}, 0x0, 0x290}, 0xc0, 0xe8}, @unspec=@NFQUEUE1={0x28, 'NFQUEUE\x00', 0x1, {0x0, 0xff03}}}, {{@arp={@multicast2, @multicast1, 0x0, 0x0, 0x0, 0x0, {}, {@mac=@link_local}, 0x0, 0x40, 0x0, 0x0, 0x0, 0x0, 'xfrm0\x00', 'pim6reg\x00'}, 0xc0, 0x110}, @mangle={0x50, 'mangle\x00', 0x0, {@mac=@local, @empty, @initdev={0xac, 0x1e, 0x0, 0x0}, @broadcast, 0x1}}}], {{'\x00', 0xc0, 0xe8}, {0x28}}}}, 0x418) 12.15979878s ago: executing program 4 (id=2779): bpf$MAP_CREATE(0x0, 0x0, 0x48) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8e}, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@file={0x0, './file0/file0\x00'}, 0x6e) r1 = syz_open_dev$tty1(0xc, 0x4, 0x1) r2 = dup(r1) write$UHID_INPUT(r2, &(0x7f0000001040)={0xfc, {"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", 0x1000}}, 0x1006) 11.836781506s ago: executing program 4 (id=2781): r0 = socket$packet(0x11, 0x3, 0x300) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0xc0000, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) bpf$BPF_PROG_ATTACH(0x8, &(0x7f0000000040)={@cgroup, 0xffffffffffffffff, 0xc, 0x0, 0x0, @void, @value}, 0x20) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x6, 0x4c831, 0xffffffffffffffff, 0x9fbfb000) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, 0x0) syz_kvm_setup_cpu$x86(r2, 0xffffffffffffffff, &(0x7f0000893000/0x18000)=nil, &(0x7f0000000100)=[@textreal={0x8, &(0x7f00000000c0)="0f20c06635000001000f22c00f01c36565d86b6766660f388129a5660fd9430d0f3a0fcc35f20f38f14029f20fc24686490ebc", 0x33}], 0x1, 0x9, 0x0, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) preadv(r2, 0x0, 0x0, 0x4, 0x1000) ioctl$KVM_RUN(r3, 0xae80, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000080)={'veth0\x00', 0x0}) setsockopt$packet_add_memb(r0, 0x107, 0x1, &(0x7f00000004c0)={r4, 0x3, 0x6, @broadcast}, 0x10) gettid() sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f0000000680)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) close(0xffffffffffffffff) ptrace$ARCH_GET_UNTAG_MASK(0x1e, 0x0, &(0x7f0000000440), 0x4001) bpf$PROG_LOAD(0x5, 0x0, 0x0) shmget$private(0x0, 0x4000, 0x0, &(0x7f0000ffa000/0x4000)=nil) 10.727285213s ago: executing program 0 (id=2783): socket$nl_netfilter(0x10, 0x3, 0xc) socket$inet6_sctp(0xa, 0x801, 0x84) socket$inet6_sctp(0xa, 0x1, 0x84) socket$nl_generic(0x10, 0x3, 0x10) socket$igmp(0x2, 0x3, 0x2) socket$nl_route(0x10, 0x3, 0x0) syz_usb_connect$hid(0x2, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000000000010bd2835090000000000010902"], 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) socket$inet6_sctp(0xa, 0x1, 0x84) fsopen(&(0x7f0000000180)='hugetlbfs\x00', 0x1) r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000013c0)=ANY=[@ANYBLOB="640000001000030400"/20, @ANYRES32=0x0, @ANYBLOB="e5fda988000000002800128009000100766c616e00000000180002800c000200060000001f000000060001000000", @ANYRES32=r0, @ANYBLOB='\b\x00\n\x00', @ANYRES32, @ANYBLOB="0a000100000070"], 0x64}}, 0x0) 8.625341766s ago: executing program 3 (id=2786): r0 = openat$proc_mixer(0xffffffffffffff9c, &(0x7f0000000380)='/proc/asound/card1/oss_mixer\x00', 0x1, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) 8.624219076s ago: executing program 2 (id=2787): mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) prlimit64(0x0, 0xe, &(0x7f00000007c0)={0xc, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)=ANY=[], 0x48) r2 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r2, 0x84, 0x9, &(0x7f0000000200)={0x0, @in6={{0xa, 0x0, 0x0, @empty}}, 0x0, 0x0, 0x0, 0x0, 0x8a}, 0x9c) sendto$inet6(r2, &(0x7f0000847fff)='X', 0x34000, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) fallocate(r1, 0x11, 0x9, 0xfffffffffffffffd) shutdown(r2, 0x2) r3 = socket$kcm(0x10, 0x3, 0x10) sendmsg$kcm(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000580)="1400000016000b63d25a80648c2594f90f24fc6083c8d9250b92cf9a817a6aa8724e6c3a0ec73217f300bfcf6d0b3570ab6a5c3bdf75cd8ff41f8a97a968d068342bb5e5f5b7fca4207f24", 0x4b}], 0x1}, 0x4004) mkdir(0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={0x0, 0xffffffffffffffff, 0x0, 0x8000000000000000}, 0x18) add_key(0x0, 0x0, &(0x7f0000000100), 0x0, 0xffffffffffffffff) r4 = openat$dir(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x0, 0x11a) mknodat(r4, &(0x7f00000003c0)='./file0\x00', 0x0, 0x0) chdir(&(0x7f00000000c0)='./bus\x00') openat(0xffffffffffffff9c, &(0x7f0000000380)='.\x00', 0x0, 0x0) r5 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x0, 0x0) getdents64(r5, &(0x7f0000000f80)=""/4096, 0x1000) 8.420613599s ago: executing program 3 (id=2788): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)=@newlink={0x3c, 0x10, 0x403, 0xfffefffc, 0x3d, {0x0, 0x0, 0x0, 0x0, 0x88adfda5}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @geneve={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_GENEVE_DF={0x5, 0xd, 0x1}]}}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x4004}, 0x4804) 7.395574105s ago: executing program 2 (id=2789): setsockopt$inet6_tcp_TCP_ULP(0xffffffffffffffff, 0x6, 0x1f, 0x0, 0x0) setsockopt$inet6_tcp_TLS_TX(0xffffffffffffffff, 0x11a, 0x1, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x1, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x16, 0xb, &(0x7f0000000180)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x27, '\x00', 0x0, @fallback=0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000080)='mm_page_free\x00', r1}, 0x10) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3000003, 0x4008032, r0, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x100000a, 0x12, 0xffffffffffffffff, 0x0) r2 = gettid() r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x9, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x18, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100000, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000300)={&(0x7f0000000340)='kfree\x00', r3}, 0x10) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r4, 0x29, 0x40, &(0x7f0000000c80)=@raw={'raw\x00', 0x3c1, 0x3, 0x4c0, 0x2e0, 0x940c, 0x3002, 0x2e0, 0x2c0, 0x3f0, 0x3d8, 0x3d8, 0x3f0, 0x3d8, 0x3, 0x0, {[{{@uncond, 0x0, 0x298, 0x2e0, 0x4001, {}, [@common=@inet=@recent0={{0xf8}, {0x0, 0x4001, 0x1, 0x3, 'syz0\x00'}}, @common=@inet=@recent0={{0xf8}, {0x0, 0x0, 0x2, 0x0, 'syz0\x00'}}]}, @common=@inet=@TEE={0x48, 'TEE\x00', 0x1, {@ipv4=@loopback, 'virt_wifi0\x00'}}}, {{@uncond, 0x0, 0xd0, 0x110, 0x0, {}, [@inet=@rpfilter={{0x28}}]}, @common=@unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz1\x00', 0x1, 0xbe, {0x565159d7}}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x520) openat2$dir(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', &(0x7f0000000280)={0x40, 0x3, 0x1}, 0x18) process_vm_writev(r2, &(0x7f0000000440), 0x0, &(0x7f0000121000)=[{&(0x7f0000217f28)=""/231, 0xe7}], 0x1, 0x0) mbind(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x0, 0x0, 0x0, 0x2) syz_mount_image$ext4(&(0x7f0000000780)='ext4\x00', &(0x7f00000000c0)='./file0\x00', 0xa00008, &(0x7f0000000140)={[{@min_batch_time={'min_batch_time', 0x3d, 0xd}}, {@mb_optimize_scan={'mb_optimize_scan', 0x3d, 0x1}}, {@noblock_validity}]}, 0x1, 0x7ad, &(0x7f00000007c0)="$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") r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x541082, 0x0) ioctl$TUNSETLINK(r5, 0x400454cc, 0x0) r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000000340), 0x302, 0x0) ioctl$TUNSETIFF(r6, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$RDMA_NLDEV_CMD_RES_CQ_GET(0xffffffffffffffff, 0x0, 0xc0) r7 = socket$nl_route(0x10, 0x3, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000380)=ANY=[@ANYRESDEC=r5, @ANYBLOB="5e20a48cc0d4e0016d113f34a8acf365866ea8f8aae368353e9fd582ae573b194c689e242e0c4422daf3708a0810970f65a61baf21769d56fd93793fe745f85b708467870c668a0b7d48759b7712fe19ac2113f08ec0", @ANYRESHEX=r7, @ANYRESHEX=r5], 0x48) bpf$MAP_CREATE(0x0, 0x0, 0x48) 7.335915626s ago: executing program 3 (id=2790): r0 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r0, &(0x7f0000000040)={0x2, 0x4e20, @empty}, 0x10) r1 = socket$inet_udp(0x2, 0x2, 0x0) socket$inet(0x2, 0x1, 0x0) bind$inet(r1, &(0x7f0000000080)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x28}}, 0x10) r2 = socket$netlink(0x10, 0x3, 0x0) openat$ptmx(0xffffffffffffff9c, 0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) getpid() sched_setaffinity(0x0, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000000), 0x651, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, 0x0, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f0000000080)='sched_switch\x00', r3}, 0x10) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) r5 = syz_genetlink_get_family_id$ipvs(&(0x7f00000001c0), r2) sendmsg$IPVS_CMD_GET_DAEMON(r2, &(0x7f00000003c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000280)={&(0x7f0000000640)={0xa4, r5, 0x200, 0x70bd26, 0x25dfdbfe, {}, [@IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x9}, @IPVS_CMD_ATTR_DAEMON={0x14, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0x4e20}, @IPVS_DAEMON_ATTR_STATE={0x8}]}, @IPVS_CMD_ATTR_SERVICE={0x44, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_SCHED_NAME={0x8, 0x6, 'sed\x00'}, @IPVS_SVC_ATTR_SCHED_NAME={0x7, 0x6, 'lc\x00'}, @IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv4=@multicast2}, @IPVS_SVC_ATTR_NETMASK={0x8, 0x9, 0x2c}, @IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv4=@initdev={0xac, 0x1e, 0x0, 0x0}}]}, @IPVS_CMD_ATTR_DEST={0x14, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_TUN_PORT={0x6, 0xe, 0x4e21}, @IPVS_DEST_ATTR_L_THRESH={0x8, 0x6, 0x1}]}, @IPVS_CMD_ATTR_SERVICE={0x4}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0xfffffffe}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x3}]}, 0xa4}, 0x1, 0x0, 0x0, 0x40000}, 0x20000004) sendmsg$NFT_BATCH(r4, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000004c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01010000000000000000020000000900010073797a300000000040000000030a09020000000000000000020000000900010073797a30000000000900030073797a3200000000140004800800014000000000080002400000000014000000110001"], 0x88}}, 0x0) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r6, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000003bc0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWRULE={0x60, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2, 0x0, 0x2}, [@NFTA_RULE_EXPRESSIONS={0x34, 0x4, 0x0, 0x1, [{0x30, 0x1, 0x0, 0x1, @target={{0xb}, @val={0x20, 0x2, 0x0, 0x1, [@NFTA_TARGET_REV={0x8, 0x2, 0x1, 0x0, 0x1}, @NFTA_TARGET_INFO={0x8, 0x3, "02b51112"}, @NFTA_TARGET_NAME={0xc, 0x1, 'NFQUEUE\x00'}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x88}}, 0x0) 7.184980188s ago: executing program 4 (id=2791): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) syz_open_dev$sg(&(0x7f0000007700), 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x9, 0x9}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)=ANY=[@ANYBLOB="680000000206010100000000000000000000000005000100070000000900020073797a30000000001c00078005001500100000000800124000000000080008400000202113000300686173683a6e65742c6966616365"], 0x68}}, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r2, 0x0, 0xc000) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) syz_open_dev$MSR(&(0x7f0000000380), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_ATOMIC(0xffffffffffffffff, 0xc03864bc, 0x0) syz_open_dev$midi(0x0, 0xba4, 0x206080) syz_open_dev$sg(0x0, 0x0, 0x1a3c82) bind$inet6(r1, 0x0, 0x0) syz_emit_ethernet(0x0, 0x0, 0x0) r3 = syz_genetlink_get_family_id$netlbl_cipso(&(0x7f0000000bc0), r0) sendmsg$NLBL_CIPSOV4_C_ADD(r0, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000040)=ANY=[@ANYBLOB="d0000000", @ANYRES16=r3, @ANYBLOB="010000000000000000000100000008000100000000000400048008000c8004000b800800020001000000a00008801c000780080077144ebb0000080006"], 0xd0}}, 0x0) 6.723057505s ago: executing program 0 (id=2792): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$BTRFS_IOC_ADD_DEV(0xffffffffffffffff, 0x5000940a, &(0x7f0000000100)={{}, "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"}) r1 = openat$ttyS3(0xffffffffffffff9c, 0x0, 0x2, 0x0) ioctl$TCSETA(r1, 0x5406, &(0x7f00000000c0)={0xa2, 0xcff, 0x8, 0x7, 0x1, "b4dc017afe2b917b"}) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) r3 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_inet_SIOCSIFADDR(r3, 0x8916, &(0x7f0000000000)={'veth1_to_team\x00', {0x2, 0x4e24, @loopback=0x7f000000}}) write$uinput_user_dev(0xffffffffffffffff, 0x0, 0x0) write(0xffffffffffffffff, 0x0, 0x0) r4 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_EVENTS(r4, 0x84, 0xb, &(0x7f0000000180)={0x4, 0xfd, 0x1, 0x6, 0x0, 0xfd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x58, 0x0, 0x96}, 0xe) shutdown(r4, 0x1) read(r4, 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_INFO(0xffffffffffffffff, 0xc08c5334, &(0x7f0000001100)={0x8, 0xc, 0x0, 'queue0\x00', 0x9}) fsopen(&(0x7f0000000100)='ecryptfs\x00', 0x0) 6.696499616s ago: executing program 4 (id=2793): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x19, 0x4, 0x8, 0x8, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000000)=ANY=[@ANYRESOCT, @ANYRES32=r1], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) shutdown(0xffffffffffffffff, 0x1) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20008b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x3) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r4 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r4, &(0x7f0000001a40)=""/102392, 0x18ff8) add_key(0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffa) add_key$fscrypt_provisioning(0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe) add_key(0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffb) r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000000)={0x14, 0x15, 0x301, 0x0, 0x0, {0x1}}, 0x14}}, 0x0) sendmsg$NLBL_UNLABEL_C_STATICADD(r5, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000100)={0x0}, 0x8, 0x3000000000002}, 0x0) getsockopt$sock_cred(r3, 0x1, 0x11, &(0x7f0000000040), &(0x7f0000000080)=0xc) sendmsg$netlink(r2, 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r6, 0x8923, &(0x7f00000000c0)={'bond_slave_0\x00', @random="0163013110ff"}) getdents(0xffffffffffffffff, &(0x7f0000001fc0)=""/184, 0xb8) socket$igmp(0x2, 0x3, 0x2) socket$inet(0x2, 0x3, 0x2) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000001540)=[{&(0x7f00000000c0)="48000000140081fb7059ae08060c040002ff0f03f1cd823010a7ce9000000000000ec000006fabca3b4e7d06a6bd7c00000000030000068a562ad6e74703c48f93bc2a0200000046", 0x48}], 0x1}, 0x4000000) r7 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000100)={&(0x7f0000000640)=ANY=[@ANYBLOB="9feb010018000000000000003400000034000000060000000400000000000007000000000000000000000001050000018000000000000000010000851000000000000000020000000000000000000100da"], 0x0, 0x52, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x28) bpf$BPF_GET_BTF_INFO(0xf, &(0x7f0000000480)={r7, 0x20, &(0x7f0000000440)={&(0x7f0000001340)=""/4092, 0xffc, 0x0, 0x0}}, 0x10) 5.550632154s ago: executing program 1 (id=2794): mremap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x3000, 0x3, &(0x7f0000ffd000/0x3000)=nil) r0 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000040), 0x8002, 0x0) pwritev(r0, &(0x7f00000000c0)=[{&(0x7f0000001fc0)}], 0x1, 0x42, 0xfffffffd) 5.482229674s ago: executing program 3 (id=2795): r0 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x100008b}, 0x0) sched_setaffinity(0x0, 0x11, &(0x7f0000000180)=0x1400200bce) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x1) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000002700)=""/102392, 0x18ff8) r2 = openat$procfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) setsockopt$inet6_group_source_req(0xffffffffffffffff, 0x29, 0x2e, &(0x7f0000000200)={0x1, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x7}}}, {{0xa, 0x4e22, 0x0, @private2}}}, 0x108) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000001300)={&(0x7f0000000240)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x20, 0x20, 0x6, [@func_proto={0x0, 0x1, 0x0, 0xd, 0x0, [{0x4, 0x3}]}, @enum]}, {0x0, [0x0, 0x0, 0x0, 0x5f]}}, 0x0, 0x3e, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x28) ioctl$SNDRV_CTL_IOCTL_SUBSCRIBE_EVENTS(r2, 0xc0045516, 0x0) r3 = syz_open_procfs(0x0, &(0x7f00000003c0)='net/mcfilter6\x00') preadv(r3, &(0x7f00000000c0)=[{&(0x7f0000000580)=""/128, 0x80}], 0x1, 0x5f, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$devlink(0x0, 0xffffffffffffffff) sendmsg$DEVLINK_CMD_RATE_GET(r4, &(0x7f0000000700)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000000)={0x34, r5, 0x303, 0x0, 0x0, {0x3d}, [@handle=@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}]}, 0x34}}, 0x0) r6 = open_tree(0xffffffffffffff9c, &(0x7f0000000200)='\x00', 0x81c01) move_mount(r6, 0x0, r0, 0x0, 0x46) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0006}]}) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0xb, 0x0, &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r7 = add_key$user(&(0x7f00000002c0), 0x0, &(0x7f0000000280)="d25a9850a9d77f1068", 0x9, 0xfffffffffffffffe) r8 = add_key$user(&(0x7f00000003c0), &(0x7f0000000440), &(0x7f00000000c0), 0xc9, 0xfffffffffffffffd) keyctl$dh_compute(0x17, &(0x7f0000000140)={r7, r8, r7}, 0x0, 0x0, 0x0) 5.412160516s ago: executing program 4 (id=2796): mkdir(&(0x7f0000000400)='./file0\x00', 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={0x0, 0xffffffffffffffff, 0x0, 0xd}, 0x18) io_uring_setup(0x479, &(0x7f0000000ac0)={0x0, 0xfffefffe, 0x2, 0x2, 0x4800020}) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000180), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000002140)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x4000}}) read$FUSE(r0, &(0x7f0000006840)={0x2020, 0x0, 0x0, 0x0}, 0x2020) syz_fuse_handle_req(r0, &(0x7f00000042c0)="9ab1446569aa24b774753c9e994c09c24df9d42fa5a228e469b44cecf6f9f5ce5f77c93b1895aaac9cf34b37415f11fe22d6fa0162aa743b242e8fe0a8659e32fb543d7969d6513136a9f332a8074f8ee1e445277ddd5859eb5ac3321eb710be880a441031da9b31f791d54fb3c97cd8ee92b00cbf962be8eb5fd0b7cab207645f59cf87a8c41e2739dd8386b6bb84b627cbf5e09bac876ad4b215f0e510a853c5e8b9f7822b26771d72972290a1f9a6f0a46942be0d0eb7aa5145ff368863b14e9845926088f9f92d554e572926290dc6e6b574aea8c500fbe5697f881c0cec48282c6d07619248da0c3b9aa6f7c778525d1760051e4ba8ef31d3c8d3e1d4214ffa5261ce1fdbc12eba889968137f5c06fea233000296cf18df494b4e7b1bee7dc2f3751c37415d46f6d7ffb3d0f788f2100ee41266e6fba75b61af22e1d7b286507ff100cc34ed28d5a2c8be3231446874bbbde6f3c367ca802d64192ffcce1ea41b2cbc57f7500fc4f8f12fe02690c1c9785bbc35542b59d05600783cf4f4633b374101d8ed395303392b238d198f9f68c8ae928cbf3b558deec6d38ebaa526e749ac4e47dd5b838ec34f2820a1134252ae60159d4e030cf5e5d6f8de799a31e12ae57cfe5a1a3ded525c6e71271271d35a0056265362387a361f21ea0f4b6d46f6a83a8512687e43b31e11b1396d6e9e49cf42b693732e226b55d21a1203022f6be9f8ecccb68de3bf4ce99689514bd752f4e60bd2f8e376d7fae5b5fc8db0f53db8c52746671e361b9319419c1b3f3168b4797ebd2d118ee42dda4bc59dd0251236195c8cdafc0546354eeb28f4c7e71e8245a6ccaddfb858f61039c0ccf5acd924680aab38dd061fc7b123f24ac7f3d3c0cee43b61045bb1efea25af86088a0591f166e2f11ea4089860893b17ca5e3d99ec75131268e2e4e290c2bf15e4dde23284e4bdf6e549c096ce221d9c8a6c0fc78aa6a1c8b547c0e10738de2a1e8663e03ab0ce4594e244989f75b6672de1eee97ba7e6467a0da51c0e75d5866c405b03c4744d8d3fbb01eddba5a0361662269154c2f0e61a9433982eb904ff562896cbfa692eb1e6c644fcf6cbc103a76b712af706a47608d3e2f5d54d47d8e9906ab37ddf04004d32ce00200fc3c274666aeb618b27424d87b6a4b0262de4436b9e6f150bc798394c298b25a2c318fbe786185464057c0bcfcd1917230d78ee1a49eca12068fa676852c1099096c6cb98dfda27fedac41826516e42cc116f0cbb68f0f810418258dc5a65c0e1ada296176e17f8d762894c80542a79383cc1674a4f3d6520633ce80baba214c20628899f9ac826484c887713aed9c5caf13b40a598cb1e81f7b18dae39efc22dc99ff497e11f158edc2716ebe3bcd593691aa26523efc168e1394ab439c9a9270575ef34eeee9084b0a31b2d81d47c964ac61e600f75d9321d7474dde45bb8d0cc46510488ab68486d3ba6cc9c3ddb6f66f2e5d251ee285121e1645a2f5167fc5fb8ac4491c0d9d0423c7a8452efea2f5a30096a0fa47173f3a68500a5c755ea939c838d3be126a87ff6baa5a1fba638a5c64767d17f04201b935fcb1cb6afa175594f410f2ff773194c703e623876051e46bb0850a5016e65f8fa34b96bafdfe851a0756fe26fb63d52113c0935b0867f7dc8a94d887484b15e8f92b6a316a22c04a985cc94e432cd43f44001bcdbd48efcd463c402d3d181298e96db60fdb714b82e146567af5ae3fc0c3f9d241471b4d129f928d286f780facb1e84434610ab3379dfff0f64d57b4a1c2e96c98b693de952d26773d24e7a95eddbc450f79932d5332d27991c7bfbd3bc35bfeb9496fbebccb5e4c35c368e021dea643cb292d794d3d3bbcc960f989bef09763dc73d83cbf907485635265e81f87b712d958a66719230fc6466615a0e3bb998d48159e9e9c51959354a545966bcffa298c7673b4d32b991c886a997236642c0f104f6795feab9f48d0ffc74667f3f3e82473ac892ad25f4b13029b0b27fb1d86991ddc42bbc3fe584ed364e769f3bc72ed8749e7a654ec1a2ec7a01bd2d5caccdc6241a1b1ef2726db54d2c34ab47020b4c729b5994b43deb00ad959950e0051d2c0f27217397055e78f1dd3bd867a45e06c2134ae8981021aae881cc7b2049fe7c82d2127ec81d6430c8116355c8d0ab8b9291c688ed9b8dbb1ed6f1a99bb58a1be8d5737acbf9461b142c8982f52481195d35ef82aed4fa52385ea4ed00a739d01cad7af9f7c27d357748e24f28d22065ccb37300e8f5d8dae5ca79af7a50edc3e05184d1a2a6d59784d5ceeb1f1550a44ea03bee4dc5c27eb78f0032593c7d082e59211f83a8b91aa78bfb7e959328ee63af26a37b79ce5e5139eeebd12e28b2a26ad2fcbdca652524d036b324782d54247a48b9f8200b2d6d2c091c41366d677e3be6e136cec6c3080d608849135c6e3c7d695d2e226ae1ce999d730d7f79116ab85762e55a3e5a66a690ce0a4bb4fd1560c796e2797414b544ef78e29d55e4853fdbf3362085a65c46105f32c360a0a9867b984a5d0297fe0b06a45684ac801a8e66294cef6e5f3c48648884fbb2422fa00488df33a9a0ff1039c81f1939f2cd2f5fe8aa805af2d2332ac37244ed4a7b50265af8062752b0c16511e5f25e8aa2b60645675bc826557bb75474ca4787f6b584b2f83bc25192579104aa0baae79f396df0d31121f90db9acea9695ee0fe0c22df4db503ec8b2437b05f5d35a65722fa82eebd2aff4bcd3316a5cffc4b31913fd02f82130c77f320bf04bf8fa873d0e3f62122d6a5f87d3e908bedafed4a3cb6d9f73ff546f5a2b74a2493b1753e89b682352bb3166563518dcb190c7b3d9fd667c57978a670b192641a674dc92c2401d067b6767aa632ce32a401175c98200a52ab5d80dffa719746d0bff8a84bac4a56e0ab8124fc332b64ea662d01e1b73231a6638f01cf4d699448da228c16951149c8d3dab9a7e3be9a16c7d1ffb061818f8f9cb2b42739fae4a0d70c0701c8dceee785d36ef6413162de1917df01c693ef3e1f517e7fc46245209fee52f5c6a2f50ab3f56d67d1cd987282b24071d8ebb1bc5cd635957b2a7ad92d0650abd5bbc24b75885b6119592a3d715392718e52f9124c4ac95be3582abba4ac3a4049ee49fa8ceb9b59d4e1e2a069c9d482879fd8d27d5ac22ef870542453be22c2ec4ebf1472c19fbfb56aa0a3671297b020e3fe49d201a82a04420e90bda43691dacf92347bcbcae3742cc4abad4c8010c0afa15278795d4d76c482461ae78f30569e1dcf87b9b150d07a2bd81676ec6022422d490759ae1e861a6c4cd1f733bd772d60975a59356c385a4a390429f3d2131e7f616015261df6db3cc3ec261a53be10c4f197e71878984fee00e6d1069f79825194b7af434fb6bb86db18e11977f82928be35054543060cea94ebb4015d061f20f8454e056e7b6e4f9a1621ef2377d77659c20bf358c817519f1801be15ae3b5b42adfab367777a6789635a0dcdd1f2b97edecea0210768af67601d1b95a8850dddb6b1f4b0c2f52c835b0833d81966ad19e49ceb9dc9c729cd8334bc3ee5bb8c74186f5cc3e765b9fdd91d79baaab3d2ab64c15d655d1af7de9cf8d5d7c1baef24577843ce142331743b45b06104b6d0d4392e61ca8c07507ff5f831bbf720854db4debf64182aaebf899ba57626a48748fc2dcf016013d575595d24d383eef2da0ff0c9f6fe9c64b186cd4617e3f37635d7dacb58ec297f3ddb48ce4a5e00cc127267e18a1fdf209e098f2cb2e9c0630d15ec9b867b2b95ecf82ad2c0ba39df9c4d36d492bc9a55c4b767da966e4fd7f4d2fef5e91d0575177c05d240b50757031c76333d43bcc828ab2f0376e29d12d1261ce104a8ea488091326bc451c120c8c04d3e64835c893f55b312e248ad8fc1c32429d68e6b67bf45ab8a1cc3db22f9f01a2266b8349046d3d3e081eaa7f7020c73c0762d11a33b517b8f081da3c61ef63e1d40cd87d69c7ac7491fb61bb57c1fe2d218aff6d39b3e1fc847f0ed894e2f0b4d6a4ad03ba42e28bb1dfab645081f548e64ceb8ce15d2214bd66a14fe594aa447c3537eb493299fef0f9326236ea5dae44e23b34801fe06ee16c79545feaf2528421d6e7f9a256a7914d86bd053dc33c8c2043ba73714f5ff5f0507097a56c40b2190e77877d43be849ee2ac129e582930ced06d359eebb49eda4edb13819f91cecc449c9613d9659906179f8fefa34fecb7d21cdaf09a1ce8d094421da80796c97c02fc56171aaba53fd8a7f55de059044717df164f3571028f16995d51fc8829534cdf58dd134def1e43a34e4f5f372fa8e19d3b85881e99ecd45faa4fccfdb47e094ab06955f3960fac71294dd965f24a97cff36b9966cf1a4c3e96c3e14a3951dcc8a3e9371f7e1ae9df77ddb1a99172174adbee8ea57a0c9872a6d677c2875da88a6a7234bebf68a3cc0532a9809a4de4b4d419bff67b0ba825a7ae6e999087155378357ae67e2dd98697f1d10ffa4497dde6582571670456db995228b97d0ecb2fb30c2ba6c16038c40059815c56b35666cc1c5090f6c38e0f4c12abf79919951b85a2734d32dd12b239912d541f9163387a4aa0be0b7a12d9c6b56dbcf1e9aadcfd72e2664a84d6c5147c72bffe7c3560ccd8c447b748dcd26cc9ca2a85cded742a8dccdfd8e78c96e78d405a19faab9e57183b37583f94b3d416b2920c6b746427ed75c08dc3be02720c1edc4743229153c48f1239b222b9fe2e21c0ae28122bc44f9dc78a59f3485ac8057eb21f0857bcfea2d9ebbbcc197e7880d81515bb1cb7192d97c4258c09926d137e245977db40812b253f99a504bb68137d8d73ca4e7c808d50f1dcc600e6a6db90238ff44e075932fe668c066e6988a6a8b4a8485120c8e4d6511268a75d8f9b0f06689aac8cd621e90c62af1e59aa9efe928e9ea098661b408a2825c4f9aac1efd9d54d163a651054b9ab32719d2be3b176f6795ddad0f1310b9237181689f2f9dd34a41d4d4cd2d7569bf56e6a80bc24d90df3bdde0f9649e699f4ef70c4f3faf9553a231215416bba26c29f17861e0f265e9641b2307ed43d6fde23a378669f4ade874e54c20a5e902205dcaa79a3e8584a3f78a86e703451115a1717df882507c607297afac0a056a0f3509a57502fd2ffff6035d04b91f72f5e1a69ddafaf80f7b2f7a13f38c683988436585e6bc7fc2da328449675c234ec0acf5294ce06c72442beba15e65d6a3e1b5dc3c8f115e1005798383f79b0194f6b7d4b1b32371acbf22340af6e5ee3ea840f7ed451226daef3041fc194e051af2fb450022b394c774273b9575c974c324ecd7268435176ee28c54bb54c8e829232ca636f3bdef60ed460b5ff425936626dd16a3f436f08a863582a79f393378f60f6c8ecdd13d83073bfda2e9f8d0c74a841021cbb8c148e70bfc585627449cdd9fb3045db3ea08a96108b52ee8a4f5048a5d910355789f4bb85c1362955e267e719581c38a2648eaa0b516db6277d2ee3c6e1e1090df3f53a31b747d99887e337dadddab16a297d9e56797007a3d18ce333311c70bb1bf45bdae517ffc589419af643773bb30a1fbff7ecd4a8ae7456a608fe73547c2eda4f070d57dc70b65d867526c946a435ea581497da18646ce569eaf6ccf3474cd6e7aa3d6d4732836ff4167c9153757ce58a34864be6d479f7b4ea1d6480b9ac16c5bff346a74e74133234744df867e16b3d2f1f7db4b21b89019b520917ef863e60f52999d6946b9e09cb60054f49d8a255f02e4b62fff6e6adb9a167ea70a177d00b26f56e29b63138a2ebc30b956161a4ab25d5da1c207c3f762714f651341ae771e17d84fa1c86685f2fcb0a128c2e1208d1930e7ff0d8d55299154112af574b881be8b69cc1721d548ad4dc02632e184c47f9b394bf4a834e60fbead8c8bfbf5087f8454513b0b086ac97bbbb9aa342af9def758fe88f1e4570e65f93fd4a9868665d08fac0cf6ebde786995c433504ca01cdf83311aaae20cc76f819a4344a8ee4e26c1094cb00d2c8a67c733fffcd89e97534cacb08a64d75e8594fa31f0dcfcafb0d1bc184c7067fec6a48ddefd580d4d9a4128d8f70f6fc6562da683904766e982ecd0286064db6844131bb7962a0a497f7b97fefad88a0b128bdf8cca774b1c32cb4af259bfebccda036e7e4ea8962838dbb5c04ffab0a2f1481848a27f06171645daf5246a2e563f3ed60097a9d7023d6ba5c8a58d39f733b12baf0863d82c427460f51cf9e3f77281a42221725b7bb75c2116ab31f704661f090d3eeddd2aa6efc619946b4933c398b635fd04ba3758294965c568997e1ef44b0562804e6c64558f6cfa87662a988c321a856ead51c848528a4954f9ff1948d517d67bc11db66801648848bfb7ee12296428bc3ffec863e9c77ff31ee386197679adab2a0e93bbe0c66ffe9c4b09b636f6216faa373aa8271678cc57ad46898222df7e2d8b14a5b70130596c0430997c4c04d9b5187fd9bb26b71fd19aacc8e08a3239f0eebca7b2873062a19f327a4a282012ebf9898a5ab6310b8623c864d4dada3ded00ad201ce8f3973f90396f5edc1ba466e16247fe6b0ee98acfd53792cc0fea33647b841596655b8d9efbc14b50fe0b588e4c41e2cbd0a700529e7ca91122d3d1b26e52bf44a0c9fe37cdbc352357f13b2adc68e78a00f6dc88a8e6ea54bd0b2c8276f9e1bfebc8655a1f47b72c25ffa97f4463630cc21428ca3bb381a6d3171d28bb946f746f820247bf3f7bb69caaeb5c47026ca9997e586e657a9e1569312bb443299ef4cfeacc9aaf4fc3aaa4a77a21579234d2aab6fd0234398ae07ca7c57ac6d6a51e025744b1430abce27f7f9b0d0e45c051e34d20db95cadcc0e4e327dbd979166b33e39a3951d0b8dd62c0d1542b69583cfc07b127243cac4b052cb29ccb3592972698fa4cd84633d222d78b8741d5f903f8636d95cddfe2ef13829df9ce32705edfda51ded2f0ef38f60a33a2e00373107eef56a01acb5e05d849279b5987343c8bbc73ea660ceaf7c9b90c0a8e1412ff3f517cef8fe604d7a26e085170a76e1bf43f5d1bb77ee771fe841d59fe2cc2874d25bf991b4af6bf9ffe1bfbf3a5587006b60bab5bdfd5a3192e82d474ecab0ab656967856c84cba9469c5823c1d1bf104d2a21c071bb08b2a137883dd9c8f545d6958db8efa45263ae303de76e70f2f6a10e1858e6654004f2a099dc31950ee730c465e0a1822935e309d41650fba489aa3050eedbf3f058d24d1f04fc340966e42d72052d84a66789ccf75000c3fc83b8842badd6b22ddaaaf53ed34e25c1b638e3630d66a7903405052902cf8e7395d54679e2f4a2bf7c8c89b0dc38969376ea164fe97b37b1172e6e8f05a929aa373108e891a64e38e18b432a115a44d754811e03c4f4ae7c525a6b9b92aab0d16967ee1a64eeeb2207c094f6aa96f126d058eff22435a4ae76c31f888ee13b327d2cab4ab5a56abf4cae88c583dd67129271708aa17f4f10886ead0e12734314bd4a49e64349beba4abdf94a1fb23a72cf7e16b5af2f1706d9646a5ff7dbf5c7b1cb2c3781346167b15d4625841d9f3d14392db1d39101d37175c42c522229db0708544058d75cebf3e399cd443d1b943c6f3017a898bd49836a8d92519deb810712aed76602682ef0df2be270734eeda7f289a76f4684baf75702a1ac3da005e62b83f794b934cf882db5d50e5ed4aca868e300d690c0b10daf0a47486e9f49d1b08eac6cf5090ddd2443b1459b2df86ab3447b2b5c6afe8aadb410de6a84b640e326eb882832d1a9cb12e0b8f13aef579f404af8631cdd5a30a031dad19cdf247575dd223229330f19fe4d88c51242217397acf66b86c743de283d5df7212fce59af17eb702eccab192f56f054a33709d41841e4a39638e02b4210559593f9b5c44fd22d9da637ef1a3a0a41c40469990dc4beec30a05b67931c0560d9a59fa875f3e26fd1eb32655aa30c7a1cd3d541716fdaacdda206328f3cbc8f16fc2be26690f18963a16febbaf2cb6c199330579ca067c60b54cbdd211c1350e066448fb50ae28ed58788ac98f0ded3414c8735ab90639916e26ab29102cc2609035e56d9b9d2dbc98118835bcf0e437c77052efe2293d9f19b7197aa1b94b10997b0b1efdef251de8945a97fec885f032c3bee2447335230b866d7aef515b04664d0c59e18233f9a229969e3e17d69716413ca3bc55f5959e340627ea803f7b26f4a74295b295344a3685287093998a1ce75b1ed5d730c9aec812617b4c200a0250c9ef8ef7d2fcfc59ef97422eca746bc6451a5b77307d14c1cfa0ea2c8eb7cf7819644577a6456efec0af058a0e3c8ec371019009462bfe174a11368b57fbe3090208a57b2236b97edc32cda5c6fc988cbaaf91c4020a06a7ad45519eaa761e045fc84d3219b287206282347a031ef1e7b7dbc67de738fa8f9fe71c44201fd1d548f8aebe93bf502d64d4b5f470a419e3fcd87f0616b9813048311ed20ac2efd7f18dcd6889542208b50c28c8c0700f73fa33a964e38d699819cab2098c6ff081266721cdced87ff41948c84037485f30d38a99eeeb3ff4c3049742a29eb09bb35c358e732546267c165a62fee9e25abdafdb8a48785bd432d160797e7a41d580f59d7d8e59b3e6b954d39f86db33b8f7cabde43e8e04cac1fcf9aa6fdbe4326e0d9c782d9a630055b36f85c2b8efebf18f42ef14ee5eb1d33ca322db69704f8bb90bf30eb05908b8d8ed169580923f53a6539cc3b55baa47718053d2ff103c23d90f9cb49ddc7d759950f605bafabcb7953c042c0523b84da994529a87ad68fc6f0709fd7af5fc20e53a17d3f5fd4d25fc5ff6598c6ddfc34668a08ee5e066d81a65e7979c50c08febf76dc5a3a405f551bb8449d94ea0dfdad6dd6dd6d6e4486f4ae1d2523c05f46198d8af4da12873ebdf7d6b5f2d0f1b2d29759ab0d78e34ae6f17b7ab83518cf8b18836ea5630ee934e5ecc123f0d3fe6b803ae1f735d65dcadcaaf6660e02ecad0290f6ead0594733a10b2b1654a44244424fa8b3180b551ac401828203e61603b017106e2256f01b9f26db33897167d9defb54ddfe49334150574493895370bad46cc658667aa9a8ed333c86f112b2a542936af92e2f933254b6fb0b1a599eec3bf2e476ae6714e2486dd31b29e4d26838d84bd7a62c62beab3ba71642278ecaf2e50d70670d9fdff105019791d36321bc57fdfd8f65f2ea1cb188035ecabf6140e777b7e6d2177ac29e9a1a2f87dd54d96184bb1a855bd9efdadfc606f13621f40e07cd8be9c2435c8c90b4ccba5eb7ddcf8cf1f76617c9a9e011abf4a63ffe31df63ecacb8b1d2d653e613cb399ce079392f9ca2e226c60b6e8103447c24c1f80d42e1ee747997602ae3ccff8f9f98ce9b56f6f3e3c0ba507df8b2169539cfc946c42da72644feb9b3b582ce332f8b2eda02192958194903d17b3e9b4bd60d08cd9a7989d946ece6d8dc01d6b66a7851bb11e4b075d38081d3ce7bf1875fec9daf47a589abdb72763c9747b83a28389238b0279c8e41db6521130420851acac463664a97be2190aff921923475f2c1f8a87d1169229e5f10dd0a92221e61358b156020f2c9ca2cb6580743a8d5e3c59e6fd97a7a246211450c7c62f1891cedb434102f8794d81c1caf2c1b4ae18b7c4b9c88de5c51da33e3343cef76da0d00341c2e60c4562c162e41a7efa8290cc9061f3d6a592d5f104c5018f31bcaf912bdd37370fbf8fedf0aa9026c1142299197d67ab026756927b5864ea42c45a82c23c275697d31a1b7900670c9a3c967d12974543c11f20c367a336bea9b9ebe480f9c806528138dff35c5f56b1199b75748e9c5cf50e6a32397dc3eeb04c3636c0848a5e13df8a9758bacea231f34cba13b466360b0dec69f74f8bf9a2dcf3dd94fa3a7d27e8caae00240559d75875ef9c619416593ca0072e7f38caae5a530c62dbe00e38c12cb8b924d63fca4d5c3a4c8f50e8f4f86fc1fe2b163219c46c21eb783e587e18e07ab7e1927a646c4f154c5000cb65ce9528457c3c66f43d9ab7d61580df0ecfb31cb38e4cbcdc3dafcca57311abec6b74048c8b74505ba678a4db07ed7243c70a821aee66a487bf91fd273418f8ef657d1eeb9ea6f095d47641e9f9fa30599e8b9c6b4453a1a5e8afd86fcafb46dd095fa4a98a2b26470e2c799b08c6000f5c3c4e28961463724377f37813f3922484fda986eb7c93ae8365baf648acbb344ca7e044d7ba93e7ba35c31085f3f99c5fdb2f9f2845f00b8590395e8ff730b86f5dd7f52297b8ecd5d5a6bb452bcd12b98d6adb27e7ef0e84b9567c66093ca3edab7e64ac4f56360501d81823ea2b1595f934c5f61c8558304c16154109a983a2af8725c7af91b5bc57e555768aa8115236a6ccc921d472b608eb6b82c4ba3747d79027d7856fae5369aa325df6a76138a5b41a94377eeeb251087e0b8510d8890e3f7a0cffaeddb9d2c29bc89f952489f82ee2e2b485cd297e6d30683701623cf73ee9ee606baeae9c3afba287eff57731b9cfaf034b1f56c8b31a32a1078c4fcab298c3f925a8e7cacceb9edf7ba2e54d31033a25462021e4a3c0bf5af341b462ee4417024da7c12c7f385de3af129aef1338a9c1fd68323d07ff47ec8bcca66b44300624d02c9202a2d093c3c85fd922b57b3bd14162c8ca5690734b7e4e4b8980b73a8e9908a9fa3dd508b30e3b1e1fd4ec388affa27c4bc26ca2820e0a902d51ff94984e8894fa5fca7b8704b7600ca6d6b1b1527ea999fcdf8fe3b290ec0036cad222f92cf8a5a54d0fa91de6e74ef61f60a233c9f15fdc86226c3f688de15ed8f0c3f1bc3afcad87cee47a19384afc6a804f197339ebce4aca211dbe0504a000755d18f20c4ecacd4123acdff7653cbb26456499495662508c8186afb883f5481c6bdf88cf137e263bde9d62f054573e0d1454cc119c95d4d9011332bd77682f79debcf5c21f0be7e9a83a58cec34e7cfb17a8122e030669228e4d3d9e274a678c5b77e6180aacc2fa8eb9952c5b04de6b2c7bee591badab96a3c3248c275b5b8faf5394eacc427a840570033be5006c33ce2d2c6e54f08681c3f74ad2fe54bca6dc62a9d84f6c58509c1e5dd5cfcc7a358493d428de48dfc1bc3f74154801c97e6aae38445045320b4cf66c1e56eb6ea2c1218de65f120b463c5cfb9255b3a25eb6e848cbd977f0605d71c561c2a754f5761c31f84101ee8178782cc8cf70b41a2204c5cb2f3134d572327fe4bbc1792249dfcf0ae7ba5d81fb5ae4a7978d044085f3b7f2e398c05733e2bf456cae898f8b5a81e9c79179bb5ca716713fce643dabe21eaee4386e646e25ad3adc5a4ad40f9bd6743f5f742efb1a674ffdbd2ced56c646ae590eb8f10283b47f57e6f96ad76adebecb24df74020b096fdee3c8d780d563a915f73c8b0246b861cd3a8580d5cf75798e8cf1c5875724661a39277e7165fe48ed8d5e6a20d68239f626fe8ea434a4e6e03ea434ec68c4b92a0fc2af15a135d6cbaeeca39a0c1896dab33daac", 0x2000, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) write$FUSE_INIT(r0, &(0x7f0000004200)={0x50, 0x0, r1}, 0x50) syz_fuse_handle_req(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000006780)={0x90, 0x0, 0x0, {0x0, 0x0, 0x0, 0x8, 0x80000, 0x5, {0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0x0, 0x4, 0x0, 0x0, 0xd, 0x0, 0x0, 0x800000}}}, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_fuse_handle_req(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000006780)={0x90, 0x0, 0x3, {0x5, 0x0, 0x2, 0xfffffffffffffffc, 0x0, 0x0, {0x0, 0x2000000000, 0x0, 0x2, 0x0, 0x0, 0x4, 0x4, 0x4, 0x2000, 0x7, r2, 0x0, 0xf0ee, 0xffffffff}}}, 0x0, 0x0, 0x0, 0x0, 0x0}) open(&(0x7f00000001c0)='./file0/file0\x00', 0x1800, 0x20) 5.365572326s ago: executing program 1 (id=2797): exit(0x0) r0 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000200)='/sys/power/disk', 0x1a1081, 0x18) io_uring_setup(0x75b0, 0x0) openat$sndseq(0xffffffffffffff9c, &(0x7f0000000300), 0x480) prlimit64(0x0, 0xe, &(0x7f00000003c0)={0x7, 0xab}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f0000000040)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) r1 = syz_open_dev$MSR(&(0x7f0000000000), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) bpf$PROG_LOAD(0x5, &(0x7f0000000a80)={0x4, 0x0, 0x0, &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0xd, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) pwritev(r0, &(0x7f0000000180)=[{&(0x7f0000000080)='2', 0x1}], 0x1, 0x0, 0x0) 5.332725997s ago: executing program 0 (id=2798): syz_open_dev$vim2m(&(0x7f0000000000), 0x7, 0x2) r0 = socket$nl_generic(0x10, 0x3, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './bus\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$IPVS_CMD_FLUSH(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000080)={0x14, r4, 0x1, 0x70bd29, 0x25dfdbfb}, 0x14}, 0x1, 0x0, 0x0, 0x40000c0}, 0x40000) 3.567467434s ago: executing program 0 (id=2799): write$binfmt_elf32(0xffffffffffffffff, 0x0, 0x58) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) r1 = socket$inet6_mptcp(0xa, 0x1, 0x106) ioperm(0x0, 0x2, 0x7e) mknodat$loop(0xffffffffffffff9c, &(0x7f0000000140)='./file0\x00', 0x1000, 0x1) r2 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r2}, &(0x7f0000bbdffc)) openat2$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040)={0x40, 0x22, 0x14}, 0x18) timer_settime(0x0, 0x0, &(0x7f0000000340)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[], 0x30}, 0x1, 0x0, 0x0, 0x4000000}, 0x4000850) sendto$inet6(r1, 0x0, 0x0, 0x20004041, 0x0, 0x0) connect$inet6(r1, &(0x7f0000000280)={0xa, 0x0, 0x0, @dev={0xfe, 0x80, '\x00', 0x19}, 0x7}, 0x1c) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$mptcp(&(0x7f00000002c0), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r3, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f00000001c0)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r4, @ANYBLOB='\t\x00\x00\x00\x00\x00\x00\x00\x00\x00'], 0x28}}, 0x0) listen(r1, 0x0) 3.414222937s ago: executing program 1 (id=2800): mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) prlimit64(0x0, 0xe, &(0x7f00000007c0)={0xc, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)=ANY=[], 0x48) r2 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r2, 0x84, 0x9, &(0x7f0000000200)={0x0, @in6={{0xa, 0x0, 0x0, @empty}}, 0x0, 0x0, 0x0, 0x0, 0x8a}, 0x9c) sendto$inet6(r2, &(0x7f0000847fff)='X', 0x34000, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) fallocate(r1, 0x11, 0x9, 0xfffffffffffffffd) shutdown(r2, 0x2) r3 = socket$kcm(0x10, 0x3, 0x10) sendmsg$kcm(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000580)="1400000016000b63d25a80648c2594f90f24fc6083c8d9250b92cf9a817a6aa8724e6c3a0ec73217f300bfcf6d0b3570ab6a5c3bdf75cd8ff41f8a97a968d068342bb5e5f5b7fca4207f24", 0x4b}], 0x1}, 0x4004) mkdir(0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={0x0, 0xffffffffffffffff, 0x0, 0x8000000000000000}, 0x18) add_key(0x0, 0x0, &(0x7f0000000100), 0x0, 0xffffffffffffffff) r4 = openat$dir(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x0, 0x11a) mknodat(r4, &(0x7f00000003c0)='./file0\x00', 0x0, 0x0) chdir(&(0x7f00000000c0)='./bus\x00') openat(0xffffffffffffff9c, &(0x7f0000000380)='.\x00', 0x0, 0x0) r5 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x0, 0x0) getdents64(r5, &(0x7f0000000f80)=""/4096, 0x1000) 3.329516928s ago: executing program 2 (id=2801): r0 = socket$packet(0x11, 0x3, 0x300) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0xc0000, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) bpf$BPF_PROG_ATTACH(0x8, &(0x7f0000000040)={@cgroup, 0xffffffffffffffff, 0xc, 0x0, 0x0, @void, @value}, 0x20) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x6, 0x4c831, 0xffffffffffffffff, 0x9fbfb000) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, 0x0) syz_kvm_setup_cpu$x86(r2, 0xffffffffffffffff, &(0x7f0000893000/0x18000)=nil, &(0x7f0000000100)=[@textreal={0x8, &(0x7f00000000c0)="0f20c06635000001000f22c00f01c36565d86b6766660f388129a5660fd9430d0f3a0fcc35f20f38f14029f20fc24686490ebc", 0x33}], 0x1, 0x9, 0x0, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) preadv(r2, 0x0, 0x0, 0x4, 0x1000) ioctl$KVM_RUN(r3, 0xae80, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000080)={'veth0\x00', 0x0}) setsockopt$packet_add_memb(r0, 0x107, 0x1, &(0x7f00000004c0)={r4, 0x3, 0x6, @broadcast}, 0x10) gettid() sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f0000000680)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) close(0xffffffffffffffff) ptrace$ARCH_GET_UNTAG_MASK(0x1e, 0x0, &(0x7f0000000440), 0x4001) bpf$PROG_LOAD(0x5, 0x0, 0x0) shmget$private(0x0, 0x4000, 0x0, &(0x7f0000ffa000/0x4000)=nil) 3.302995708s ago: executing program 3 (id=2802): socket$nl_netfilter(0x10, 0x3, 0xc) socket$inet6_sctp(0xa, 0x801, 0x84) socket$inet6_sctp(0xa, 0x1, 0x84) socket$nl_generic(0x10, 0x3, 0x10) socket$igmp(0x2, 0x3, 0x2) socket$nl_route(0x10, 0x3, 0x0) syz_usb_connect$hid(0x2, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000000000010bd2835090000000000010902"], 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) socket$inet6_sctp(0xa, 0x1, 0x84) fsopen(&(0x7f0000000180)='hugetlbfs\x00', 0x1) r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000013c0)=ANY=[@ANYBLOB="640000001000030400"/20, @ANYRES32=0x0, @ANYBLOB="e5fda988000000002800128009000100766c616e00000000180002800c000200060000001f000000060001000000", @ANYRES32=r0, @ANYBLOB='\b\x00\n\x00', @ANYRES32, @ANYBLOB="0a000100000070"], 0x64}}, 0x0) 2.274791635s ago: executing program 1 (id=2803): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) syz_open_dev$sg(&(0x7f0000007700), 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x9, 0x9}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)=ANY=[@ANYBLOB="680000000206010100000000000000000000000005000100070000000900020073797a30000000001c00078005001500100000000800124000000000080008400000202113000300686173683a6e65742c6966616365"], 0x68}}, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r2, 0x0, 0xc000) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) read$msr(0xffffffffffffffff, &(0x7f0000019680)=""/102392, 0x18ff8) ioctl$DRM_IOCTL_MODE_ATOMIC(0xffffffffffffffff, 0xc03864bc, 0x0) syz_open_dev$midi(0x0, 0xba4, 0x206080) syz_open_dev$sg(0x0, 0x0, 0x1a3c82) bind$inet6(r1, 0x0, 0x0) syz_emit_ethernet(0x0, 0x0, 0x0) r3 = syz_genetlink_get_family_id$netlbl_cipso(&(0x7f0000000bc0), r0) sendmsg$NLBL_CIPSOV4_C_ADD(r0, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000040)=ANY=[@ANYBLOB="d0000000", @ANYRES16=r3, @ANYBLOB="010000000000000000000100000008000100000000000400048008000c8004000b800800020001000000a00008801c000780080077144ebb0000080006"], 0xd0}}, 0x0) 2.222436315s ago: executing program 4 (id=2804): syz_usb_connect(0x0, 0x36, &(0x7f00000000c0)=ANY=[@ANYBLOB="120100008010bd40820514009dbb0000000109022400011b00000009040000022a3e740009058bff7f000010"], 0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r1 = dup(r0) write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c) r2 = syz_io_uring_setup(0x239, &(0x7f0000000740)={0x0, 0x1c2a, 0x10100, 0x0, 0x0, 0x0, r1}, &(0x7f0000000180)=0x0, &(0x7f00000001c0)=0x0) syz_io_uring_submit(r3, r4, &(0x7f0000000040)=@IORING_OP_POLL_ADD={0x6, 0x2, 0x0, @fd=r0, 0x0, 0x0, 0x0, {}, 0x1}) io_uring_enter(r2, 0x2ded, 0x4000, 0x0, 0x0, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000280), 0x86001, 0x0) 1.608408365s ago: executing program 0 (id=2806): r0 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r0, &(0x7f0000000040)={0x2, 0x4e20, @empty}, 0x10) r1 = socket$inet_udp(0x2, 0x2, 0x0) socket$inet(0x2, 0x1, 0x0) bind$inet(r1, &(0x7f0000000080)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x28}}, 0x10) r2 = socket$netlink(0x10, 0x3, 0x0) openat$ptmx(0xffffffffffffff9c, 0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) getpid() sched_setaffinity(0x0, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000000), 0x651, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, 0x0, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f0000000080)='sched_switch\x00', r3}, 0x10) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) r5 = syz_genetlink_get_family_id$ipvs(&(0x7f00000001c0), r2) sendmsg$IPVS_CMD_GET_DAEMON(r2, &(0x7f00000003c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000280)={&(0x7f0000000640)={0xa4, r5, 0x200, 0x70bd26, 0x25dfdbfe, {}, [@IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x9}, @IPVS_CMD_ATTR_DAEMON={0x14, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0x4e20}, @IPVS_DAEMON_ATTR_STATE={0x8}]}, @IPVS_CMD_ATTR_SERVICE={0x44, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_SCHED_NAME={0x8, 0x6, 'sed\x00'}, @IPVS_SVC_ATTR_SCHED_NAME={0x7, 0x6, 'lc\x00'}, @IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv4=@multicast2}, @IPVS_SVC_ATTR_NETMASK={0x8, 0x9, 0x2c}, @IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv4=@initdev={0xac, 0x1e, 0x0, 0x0}}]}, @IPVS_CMD_ATTR_DEST={0x14, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_TUN_PORT={0x6, 0xe, 0x4e21}, @IPVS_DEST_ATTR_L_THRESH={0x8, 0x6, 0x1}]}, @IPVS_CMD_ATTR_SERVICE={0x4}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0xfffffffe}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x3}]}, 0xa4}, 0x1, 0x0, 0x0, 0x40000}, 0x20000004) sendmsg$NFT_BATCH(r4, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000004c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01010000000000000000020000000900010073797a300000000040000000030a09020000000000000000020000000900010073797a30000000000900030073797a3200000000140004800800014000000000080002400000000014000000110001"], 0x88}}, 0x0) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r6, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000003bc0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWRULE={0x60, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2, 0x0, 0x2}, [@NFTA_RULE_EXPRESSIONS={0x34, 0x4, 0x0, 0x1, [{0x30, 0x1, 0x0, 0x1, @target={{0xb}, @val={0x20, 0x2, 0x0, 0x1, [@NFTA_TARGET_REV={0x8, 0x2, 0x1, 0x0, 0x1}, @NFTA_TARGET_INFO={0x8, 0x3, "02b51112"}, @NFTA_TARGET_NAME={0xc, 0x1, 'NFQUEUE\x00'}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x88}}, 0x0) 1.486160347s ago: executing program 2 (id=2807): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x19, 0x4, 0x8, 0x8, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000000)=ANY=[@ANYRESOCT, @ANYRES32=r1], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) shutdown(0xffffffffffffffff, 0x1) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20008b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x3) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r4 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r4, &(0x7f0000001a40)=""/102392, 0x18ff8) add_key(0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffa) add_key$fscrypt_provisioning(0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe) add_key(0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffb) r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000000)={0x14, 0x15, 0x301, 0x0, 0x0, {0x1}}, 0x14}}, 0x0) sendmsg$NLBL_UNLABEL_C_STATICADD(r5, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000100)={0x0}, 0x8, 0x3000000000002}, 0x0) getsockopt$sock_cred(r3, 0x1, 0x11, &(0x7f0000000040), &(0x7f0000000080)=0xc) sendmsg$netlink(r2, &(0x7f0000001280)={0x0, 0x0, 0x0}, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r6, 0x8923, &(0x7f00000000c0)={'bond_slave_0\x00', @random="0163013110ff"}) getdents(0xffffffffffffffff, &(0x7f0000001fc0)=""/184, 0xb8) socket$igmp(0x2, 0x3, 0x2) socket$inet(0x2, 0x3, 0x2) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000001540)=[{&(0x7f00000000c0)="48000000140081fb7059ae08060c040002ff0f03f1cd823010a7ce9000000000000ec000006fabca3b4e7d06a6bd7c00000000030000068a562ad6e74703c48f93bc2a0200000046", 0x48}], 0x1}, 0x4000000) r7 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000100)={&(0x7f0000000640)=ANY=[@ANYBLOB="9feb010018000000000000003400000034000000060000000400000000000007000000000000000000000001050000018000000000000000010000851000000000000000020000000000000000000100da"], 0x0, 0x52, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x28) bpf$BPF_GET_BTF_INFO(0xf, &(0x7f0000000480)={r7, 0x20, &(0x7f0000000440)={&(0x7f0000001340)=""/4092, 0xffc, 0x0, 0x0}}, 0x10) 759.612478ms ago: executing program 3 (id=2808): r0 = openat$zero(0xffffffffffffff9c, &(0x7f00000003c0), 0x303100, 0x0) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000300)=@bpf_lsm={0xd, 0x16, &(0x7f0000000480)=@raw=[@kfunc={0x85, 0x0, 0x2, 0x0, 0x1}, @func={0x85, 0x0, 0x1, 0x0, 0x8}, @exit, @jmp={0x5, 0x0, 0x1, 0x2, 0x1, 0x18, 0xfffffffffffffff0}, @btf_id={0x18, 0xa, 0x3, 0x0, 0x1}, @btf_id={0x18, 0x3, 0x3, 0x0, 0x3}, @alu={0x7, 0x0, 0x0, 0x0, 0x8, 0x30, 0x8}, @snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x3}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r0}}], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x1b, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r1 = socket$inet6_mptcp(0xa, 0x1, 0x106) listen(r1, 0xfffffffc) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r2 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r2, 0x1, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, 0x0, 0x0) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000ac0)=ANY=[@ANYBLOB="1800000000000000000000000000000018010000786c6c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000fdffffff850000002d00000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0xa, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) inotify_add_watch(0xffffffffffffffff, 0x0, 0x42000773) r5 = socket(0x10, 0x2, 0x0) write(r5, &(0x7f0000000040)="1c0000001a009b8a140000003b9b301f00"/28, 0x1c) recvmmsg(r5, &(0x7f0000002ec0), 0x400000000000ec0, 0x2, &(0x7f00000001c0)={0x77359400}) 418.523523ms ago: executing program 0 (id=2809): syz_open_dev$vim2m(&(0x7f0000000000), 0x7, 0x2) r0 = socket$nl_generic(0x10, 0x3, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './bus\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$IPVS_CMD_FLUSH(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000080)={0x14, r4, 0x1, 0x70bd29, 0x25dfdbfb}, 0x14}, 0x1, 0x0, 0x0, 0x40000c0}, 0x40000) 71.487459ms ago: executing program 2 (id=2810): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f00000000c0)={0x73622a85, 0x110b, 0x8000000000002}) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000200)='./binderfs/binder0\x00', 0x800, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=[@increfs], 0x0, 0x0, 0x0}) dup3(r1, r0, 0x0) r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000000)='./binderfs/binder0\x00', 0x802, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r2, 0x4018620d, &(0x7f0000000040)={0x73622a85, 0x10a}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000640)={0x8, 0x0, &(0x7f0000000540)=[@increfs={0x40046304, 0x1}], 0x0, 0x0, 0x0}) 0s ago: executing program 2 (id=2811): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000003c0)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r0}, 0x18) prlimit64(0x0, 0xe, &(0x7f0000000180)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) mkdirat(0xffffffffffffff9c, 0x0, 0x0) open(&(0x7f0000000300)='.\x00', 0x0, 0x0) open(0x0, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./bus\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000400)='./file1\x00', 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) mount(&(0x7f0000000000)=@nullb, &(0x7f00000001c0)='.\x00', &(0x7f0000000080)='adfs\x00', 0x218800, 0x0) mkdirat(0xffffffffffffff9c, 0x0, 0x0) mount$bind(&(0x7f0000000100)='.\x00', &(0x7f0000000280)='./file1/file0\x00', 0x0, 0x201008, 0x0) chdir(&(0x7f0000001180)='./bus\x00') r4 = open(0x0, 0x0, 0x0) renameat2(r4, &(0x7f0000000100)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38//file0\x00', r4, &(0x7f00000002c0)='./file0\x00', 0x2) kernel console output (not intermixed with test programs): 105][ T9553] overlayfs: failed to resolve './file1': -2 [ 632.183935][ T8669] sysfs: cannot create duplicate filename '/devices/virtual/bluetooth/hci1/hci1:201' [ 632.195907][ T8669] CPU: 0 PID: 8669 Comm: kworker/u5:2 Not tainted 6.1.141-syzkaller #0 [ 632.204206][ T8669] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 632.214282][ T8669] Workqueue: hci1 hci_rx_work [ 632.218992][ T8669] Call Trace: [ 632.222465][ T8669] [ 632.225407][ T8669] dump_stack_lvl+0x168/0x22e [ 632.230123][ T8669] ? show_regs_print_info+0x12/0x12 [ 632.235341][ T8669] ? load_image+0x3b0/0x3b0 [ 632.239952][ T8669] sysfs_create_dir_ns+0x252/0x280 [ 632.245081][ T8669] ? hci_rx_work+0x3eb/0xd40 [ 632.249714][ T8669] ? sysfs_warn_dup+0xa0/0xa0 [ 632.254533][ T8669] ? do_raw_spin_unlock+0x11d/0x230 [ 632.259819][ T8669] kobject_add_internal+0x6b8/0xc80 [ 632.265035][ T8669] kobject_add+0x152/0x210 [ 632.269473][ T8669] ? kobject_init+0x1d0/0x1d0 [ 632.274255][ T8669] ? klist_children_get+0x50/0x50 [ 632.279308][ T8669] ? get_device_parent+0x121/0x3f0 [ 632.284473][ T8669] device_add+0x483/0xfb0 [ 632.288961][ T8669] ? kmem_cache_free+0xf7/0x290 [ 632.293860][ T8669] hci_conn_add_sysfs+0xd1/0x1e0 [ 632.298860][ T8669] le_conn_complete_evt+0xd1d/0x1320 [ 632.304332][ T8669] ? hci_le_big_info_adv_report_evt+0x310/0x310 [ 632.310655][ T8669] ? asm_sysvec_reschedule_ipi+0x16/0x20 [ 632.316417][ T8669] ? __mutex_unlock_slowpath+0x19e/0x6a0 [ 632.322072][ T8669] ? skb_pull_data+0xf7/0x200 [ 632.326851][ T8669] hci_le_conn_complete_evt+0x183/0x440 [ 632.332427][ T8669] ? hci_remote_host_features_evt+0x270/0x270 [ 632.338712][ T8669] hci_event_packet+0x791/0x1210 [ 632.343680][ T8669] ? bis_list+0x280/0x280 [ 632.348033][ T8669] ? _raw_spin_unlock_irqrestore+0xaa/0x100 [ 632.354044][ T8669] ? kcov_remote_start+0x4c7/0x7e0 [ 632.359274][ T8669] ? lec_tx_timeout+0xc0/0x1c0 [ 632.364080][ T8669] ? hci_send_to_monitor+0x9c/0x4a0 [ 632.369320][ T8669] hci_rx_work+0x3eb/0xd40 [ 632.373788][ T8669] ? _raw_spin_unlock+0x40/0x40 [ 632.378659][ T8669] ? process_one_work+0x7a1/0x1160 [ 632.383886][ T8669] process_one_work+0x898/0x1160 [ 632.388887][ T8669] ? worker_detach_from_pool+0x240/0x240 [ 632.394561][ T8669] ? _raw_spin_lock_irq+0xab/0xe0 [ 632.399615][ T8669] ? _raw_spin_lock_irqsave+0xf0/0xf0 [ 632.405021][ T8669] ? kthread_data+0x4b/0xc0 [ 632.409650][ T8669] worker_thread+0xaa2/0x1250 [ 632.414367][ T8669] ? __kthread_parkme+0x162/0x1c0 [ 632.419424][ T8669] kthread+0x29d/0x330 [ 632.423526][ T8669] ? worker_clr_flags+0x1a0/0x1a0 [ 632.428856][ T8669] ? kthread_blkcg+0xd0/0xd0 [ 632.433497][ T8669] ret_from_fork+0x1f/0x30 [ 632.437946][ T8669] [ 632.446353][ T8669] kobject_add_internal failed for hci1:201 with -EEXIST, don't try to register things with the same name in the same directory. [ 632.460033][ T8669] Bluetooth: hci1: failed to register connection device [ 632.589101][ T9214] usb 1-1: new high-speed USB device number 12 using dummy_hcd [ 632.800997][ T9214] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 632.833149][ T9214] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 632.858411][ T9214] usb 1-1: New USB device found, idVendor=0d8c, idProduct=0022, bcdDevice= 0.00 [ 632.876662][ T9214] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 632.887700][ T9214] usb 1-1: config 0 descriptor?? [ 633.507937][ T9214] usbhid 1-1:0.0: can't add hid device: -71 [ 633.525036][ T9214] usbhid: probe of 1-1:0.0 failed with error -71 [ 633.578005][ T9214] usb 1-1: USB disconnect, device number 12 [ 635.992640][ T9597] Process accounting resumed [ 636.808981][ T4508] usb 5-1: new high-speed USB device number 15 using dummy_hcd [ 636.918178][ T9606] xt_recent: hitcount (16385) is larger than allowed maximum (255) [ 636.929287][ T9214] usb 2-1: new high-speed USB device number 15 using dummy_hcd [ 637.001523][ T4508] usb 5-1: Using ep0 maxpacket: 32 [ 637.011634][ T4508] usb 5-1: config 0 has an invalid interface number: 10 but max is 0 [ 637.021169][ T4508] usb 5-1: config 0 has no interface number 0 [ 637.031585][ T4508] usb 5-1: New USB device found, idVendor=061d, idProduct=c140, bcdDevice=3e.bc [ 637.047478][ T4508] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 637.077989][ T4508] usb 5-1: Product: syz [ 637.096198][ T4508] usb 5-1: Manufacturer: syz [ 637.109310][ T4508] usb 5-1: SerialNumber: syz [ 637.120260][ T9214] usb 2-1: Using ep0 maxpacket: 32 [ 637.133137][ T9214] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x4 has an invalid bInterval 52, changing to 7 [ 637.154861][ T4508] usb 5-1: config 0 descriptor?? [ 637.179217][ T4508] hub 5-1:0.10: bad descriptor, ignoring hub [ 637.189402][ T9214] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x4 has invalid maxpacket 9272, setting to 1024 [ 637.218099][ T4508] hub: probe of 5-1:0.10 failed with error -5 [ 637.250305][ T4508] quatech2 5-1:0.10: Quatech 2nd gen USB to Serial Driver converter detected [ 637.264241][ T9214] usb 2-1: New USB device found, idVendor=13b1, idProduct=0042, bcdDevice=58.16 [ 637.289090][ T9214] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 637.297455][ T9214] usb 2-1: Product: syz [ 637.308988][ T9214] usb 2-1: Manufacturer: syz [ 637.316738][ T9214] usb 2-1: SerialNumber: syz [ 637.342781][ T9214] usb 2-1: config 0 descriptor?? [ 637.374099][ T4508] usb 5-1: qt2_attach - failed to power on unit: -71 [ 637.392869][ T4508] quatech2: probe of 5-1:0.10 failed with error -71 [ 637.454344][ T9214] usb 2-1: Warning: ath10k USB support is incomplete, don't expect anything to work! [ 637.469823][ T4508] usb 5-1: USB disconnect, device number 15 [ 637.570394][ T4789] usb 2-1: Failed to submit usb control message: -71 [ 637.570457][ T9214] usb 2-1: USB disconnect, device number 15 [ 637.586035][ T4789] usb 2-1: unable to send the bmi data to the device: -71 [ 637.593526][ T4789] usb 2-1: unable to get target info from device [ 637.601335][ T4789] usb 2-1: could not get target info (-71) [ 637.610810][ T4789] usb 2-1: could not probe fw (-71) [ 637.781583][ T9614] loop0: detected capacity change from 0 to 2048 [ 637.850328][ T9614] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: none. [ 637.885356][ T9614] EXT4-fs (loop0): unmounting filesystem. [ 640.488359][ T9634] overlayfs: failed to resolve './file1': -2 [ 640.899118][ T4451] usb 4-1: new high-speed USB device number 12 using dummy_hcd [ 641.333782][ T8761] Bluetooth: hci5: Frame reassembly failed (-84) [ 641.921170][ T4451] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 641.939974][ T4451] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 641.950977][ T4451] usb 4-1: New USB device found, idVendor=0d8c, idProduct=0022, bcdDevice= 0.00 [ 641.960934][ T4451] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 641.980695][ T4451] usb 4-1: config 0 descriptor?? [ 642.457130][ T4451] usbhid 4-1:0.0: can't add hid device: -71 [ 642.486364][ T4451] usbhid: probe of 4-1:0.0 failed with error -71 [ 642.527036][ T4451] usb 4-1: USB disconnect, device number 12 [ 643.269516][ T8669] Bluetooth: hci5: Opcode 0x1003 failed: -110 [ 643.460681][ T9662] CIFS: No dialect specified on mount. Default has changed to a more secure dialect, SMB2.1 or later (e.g. SMB3.1.1), from CIFS (SMB1). To use the less secure SMB1 dialect to access old servers which do not support SMB3.1.1 (or even SMB3 or SMB2.1) specify vers=1.0 on mount. [ 643.489300][ T9662] CIFS: VFS: CIFS mount error: No usable UNC path provided in device string! [ 644.240245][ T9674] overlayfs: failed to resolve './file1': -2 [ 648.754071][ T9707] netlink: 'syz.1.1494': attribute type 1 has an invalid length. [ 648.855502][ T9711] overlayfs: failed to resolve './file0': -2 [ 648.858745][ T9709] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1494'. [ 648.914003][ T9709] bond1 (unregistering): Released all slaves [ 648.958943][ T9214] usb 4-1: new high-speed USB device number 13 using dummy_hcd [ 649.039914][ T9716] I/O error, dev loop0, sector 2 op 0x0:(READ) flags 0x800 phys_seg 1 prio class 2 [ 649.051414][ T9716] hfsplus: unable to find HFS+ superblock [ 649.170350][ T9214] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 649.909212][ T8669] Bluetooth: hci5: Opcode 0x1003 failed: -110 [ 650.160837][ T9214] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 650.171794][ T9214] usb 4-1: New USB device found, idVendor=0d8c, idProduct=0022, bcdDevice= 0.00 [ 650.181029][ T9214] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 650.192268][ T9214] usb 4-1: config 0 descriptor?? [ 650.610411][ T9726] netlink: 40 bytes leftover after parsing attributes in process `syz.2.1501'. [ 650.854249][ T9214] cm6533_jd 0003:0D8C:0022.0012: unknown main item tag 0x0 [ 650.900259][ T9214] cm6533_jd 0003:0D8C:0022.0012: unknown main item tag 0x0 [ 650.914190][ T9214] input: HID 0d8c:0022 as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/0003:0D8C:0022.0012/input/input12 [ 650.935189][ T9214] cm6533_jd 0003:0D8C:0022.0012: input,hiddev0,hidraw0: USB HID v0.00 Device [HID 0d8c:0022] on usb-dummy_hcd.3-1/input0 [ 651.070107][ T9214] usb 4-1: USB disconnect, device number 13 [ 651.641533][ T9730] fido_id[9730]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.3/usb4/report_descriptor': No such file or directory [ 653.836025][ T9753] overlayfs: failed to resolve './file0': -2 [ 654.393812][ T9761] overlayfs: failed to resolve './file1': -2 [ 655.419034][ T4508] usb 3-1: new high-speed USB device number 17 using dummy_hcd [ 655.484569][ T4323] Bluetooth: hci5: Frame reassembly failed (-84) [ 655.609110][ T4508] usb 3-1: Using ep0 maxpacket: 32 [ 655.625468][ T4508] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 655.683151][ T4508] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 655.756151][ T4508] usb 3-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 655.773171][ T4508] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 655.826234][ T4508] usb 3-1: config 0 descriptor?? [ 655.845098][ T4508] hub 3-1:0.0: USB hub found [ 656.047284][ T4508] hub 3-1:0.0: 1 port detected [ 656.350030][ T9773] I/O error, dev loop0, sector 2 op 0x0:(READ) flags 0x800 phys_seg 1 prio class 2 [ 656.361133][ T9773] hfsplus: unable to find HFS+ superblock [ 657.188994][ T8669] Bluetooth: hci5: Opcode 0x1003 failed: -110 [ 657.489635][ T4500] hub 3-1:0.0: activate --> -90 [ 658.569235][ T4500] usb 3-1-port1: cannot disable (err = -71) [ 658.580622][ T4453] usb 3-1: USB disconnect, device number 17 [ 659.121706][ T9797] overlayfs: failed to resolve './file0': -2 [ 660.119826][ T9798] device veth0 entered promiscuous mode [ 661.316326][ T9815] netlink: 48 bytes leftover after parsing attributes in process `syz.3.1525'. [ 662.437159][ T9824] netlink: 'syz.3.1529': attribute type 1 has an invalid length. [ 662.585706][ T9828] bond1: (slave ip6gretap1): Enslaving as a backup interface with an up link [ 662.700100][ T9788] device veth0 left promiscuous mode [ 667.194058][ T9870] netlink: 'syz.1.1541': attribute type 1 has an invalid length. [ 667.769350][ T9875] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1541'. [ 667.804761][ T9875] bond1 (unregistering): Released all slaves [ 667.935577][ T9887] netlink: 'syz.3.1546': attribute type 1 has an invalid length. [ 672.058960][ T9214] usb 5-1: new high-speed USB device number 16 using dummy_hcd [ 672.096137][ T9919] vcan0: tx drop: invalid da for name 0x00000000000000c7 [ 672.288991][ T9214] usb 5-1: Using ep0 maxpacket: 16 [ 672.295898][ T9214] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 672.317133][ T9214] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 672.340425][ T9214] usb 5-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 672.358556][ T9932] netlink: 48 bytes leftover after parsing attributes in process `syz.1.1561'. [ 672.378100][ T9214] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 672.393296][ T9214] usb 5-1: Product: syz [ 672.397552][ T9214] usb 5-1: Manufacturer: syz [ 672.404083][ T9214] usb 5-1: SerialNumber: syz [ 672.596985][ T9935] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1562'. [ 672.717052][ T9214] usb 5-1: 0:2 : does not exist [ 673.370741][ T9214] usb 5-1: 5:0: failed to get current value for ch 0 (-22) [ 673.430036][ T9214] usb 5-1: USB disconnect, device number 16 [ 674.760517][ T7528] udevd[7528]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 676.959924][ T9959] vcan0: tx drop: invalid da for name 0x00000000000000c7 [ 677.050745][ T9968] netlink: 48 bytes leftover after parsing attributes in process `syz.2.1573'. [ 678.500630][ T9985] netlink: 'syz.4.1579': attribute type 1 has an invalid length. [ 678.702782][ T9985] netlink: 28 bytes leftover after parsing attributes in process `syz.4.1579'. [ 679.625232][ T9985] bond1 (unregistering): Released all slaves [ 682.734337][T10011] vcan0: tx drop: invalid da for name 0x00000000000000c7 [ 683.214009][T10025] netlink: 48 bytes leftover after parsing attributes in process `syz.3.1588'. [ 685.485427][T10046] netlink: 'syz.4.1595': attribute type 1 has an invalid length. [ 685.939164][ T1274] ieee802154 phy0 wpan0: encryption failed: -22 [ 685.945803][ T1274] ieee802154 phy1 wpan1: encryption failed: -22 [ 687.074857][T10059] vcan0: tx drop: invalid da for name 0x00000000000000c7 [ 687.389541][T10060] netlink: 28 bytes leftover after parsing attributes in process `syz.4.1595'. [ 688.163391][T10082] I/O error, dev loop0, sector 2 op 0x0:(READ) flags 0x800 phys_seg 1 prio class 2 [ 688.173203][T10082] hfsplus: unable to find HFS+ superblock [ 692.492009][T10109] vcan0: tx drop: invalid da for name 0x00000000000000c7 [ 695.158573][T10132] I/O error, dev loop0, sector 2 op 0x0:(READ) flags 0x800 phys_seg 1 prio class 2 [ 695.168334][T10132] hfsplus: unable to find HFS+ superblock [ 696.733454][T10140] netlink: 'syz.4.1621': attribute type 11 has an invalid length. [ 696.752658][T10140] netlink: 199836 bytes leftover after parsing attributes in process `syz.4.1621'. [ 696.849751][T10144] I/O error, dev loop3, sector 2 op 0x0:(READ) flags 0x800 phys_seg 1 prio class 2 [ 696.859937][T10144] hfsplus: unable to find HFS+ superblock [ 697.776790][T10140] tmpfs: Bad value for 'mpol' [ 698.147232][T10149] vcan0: tx drop: invalid da for name 0x00000000000000c7 [ 700.847144][T10179] netlink: 'syz.0.1636': attribute type 1 has an invalid length. [ 701.042828][T10186] bond1: (slave ip6gretap1): Enslaving as a backup interface with an up link [ 701.106157][T10179] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1636'. [ 701.178936][ T4446] usb 5-1: new high-speed USB device number 17 using dummy_hcd [ 701.249506][T10179] bond1 (unregistering): (slave ip6gretap1): Releasing backup interface [ 701.390682][ T4446] usb 5-1: Using ep0 maxpacket: 32 [ 702.038094][ T4446] usb 5-1: New USB device found, idVendor=041e, idProduct=400b, bcdDevice=3e.e7 [ 702.606973][ T4446] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 702.706985][ T4446] usb 5-1: config 0 descriptor?? [ 702.768144][ T4446] gspca_main: sunplus-2.14.0 probing 041e:400b [ 702.810411][T10179] bond1 (unregistering): Released all slaves [ 703.639816][ T4446] gspca_sunplus: reg_w_riv err -71 [ 703.645132][ T4446] sunplus: probe of 5-1:0.0 failed with error -71 [ 703.718897][ T4446] usb 5-1: USB disconnect, device number 17 [ 706.666918][T10221] overlayfs: missing 'lowerdir' [ 708.665259][T10245] netlink: 'syz.3.1656': attribute type 1 has an invalid length. [ 708.967458][T10245] 8021q: adding VLAN 0 to HW filter on device bond3 [ 709.663179][T10252] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1656'. [ 710.482813][T10261] overlayfs: missing 'lowerdir' [ 710.855586][T10252] bond3 (unregistering): Released all slaves [ 710.895008][T10262] netlink: 'syz.1.1661': attribute type 1 has an invalid length. [ 710.948674][T10266] 8021q: adding VLAN 0 to HW filter on device bond1 [ 712.423486][T10288] kvm: vcpu 2: requested lapic timer restore with starting count register 0x390=1812281087 (231971979136 ns) > initial count (128 ns). Using initial count to start timer. [ 712.832883][T10302] overlayfs: missing 'lowerdir' [ 713.142808][T10300] overlayfs: failed to resolve './file1': -2 [ 713.939881][ T4446] usb 3-1: new high-speed USB device number 18 using dummy_hcd [ 715.268920][ T4446] usb 3-1: Using ep0 maxpacket: 32 [ 715.277029][ T4446] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x4 has an invalid bInterval 52, changing to 7 [ 715.300950][ T4446] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x4 has invalid maxpacket 9272, setting to 1024 [ 715.328316][ T4446] usb 3-1: New USB device found, idVendor=13b1, idProduct=0042, bcdDevice=58.16 [ 715.348926][ T4446] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 715.357005][ T4446] usb 3-1: Product: syz [ 715.379166][ T4446] usb 3-1: Manufacturer: syz [ 715.383858][ T4446] usb 3-1: SerialNumber: syz [ 715.405303][ T4446] usb 3-1: config 0 descriptor?? [ 715.441692][ T4446] usb 3-1: Warning: ath10k USB support is incomplete, don't expect anything to work! [ 715.568953][ T4508] usb 5-1: new high-speed USB device number 18 using dummy_hcd [ 715.618515][ T4400] usb 3-1: Failed to submit usb control message: -71 [ 715.618733][ T4446] usb 3-1: USB disconnect, device number 18 [ 715.636878][ T4400] usb 3-1: unable to send the bmi data to the device: -71 [ 715.652549][ T4400] usb 3-1: unable to get target info from device [ 715.670542][ T4400] usb 3-1: could not get target info (-71) [ 715.689262][ T4400] usb 3-1: could not probe fw (-71) [ 715.759218][ T4508] usb 5-1: Using ep0 maxpacket: 32 [ 715.777820][ T4508] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 715.883459][ T4508] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 715.909127][ T4508] usb 5-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 715.918699][ T4508] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 715.931152][ T4508] usb 5-1: config 0 descriptor?? [ 715.940406][ T4508] hub 5-1:0.0: USB hub found [ 716.202565][ T4508] hub 5-1:0.0: 1 port detected [ 717.237569][T10342] tipc: New replicast peer: fe80:0000:0000:0000:0000:0000:0000:00aa [ 717.280840][T10342] tipc: Enabled bearer , priority 10 [ 717.698731][ T9037] usb 5-1: USB disconnect, device number 18 [ 717.835435][T10349] overlayfs: missing 'lowerdir' [ 718.422997][ T9037] tipc: Node number set to 1725313905 [ 718.973914][T10367] I/O error, dev loop3, sector 2 op 0x0:(READ) flags 0x800 phys_seg 1 prio class 2 [ 718.984250][T10367] hfsplus: unable to find HFS+ superblock [ 720.234778][T10370] fuse: Bad value for 'fd' [ 720.319177][ T8669] Bluetooth: hci5: Opcode 0x1003 failed: -110 [ 720.388748][ C0] Unknown status report in ack skb [ 721.514683][T10386] netlink: 48 bytes leftover after parsing attributes in process `syz.4.1698'. [ 721.751771][T10392] overlayfs: missing 'lowerdir' [ 722.201025][T10397] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 722.213337][T10397] overlayfs: "xino" feature enabled using 2 upper inode bits. [ 724.442525][T10412] fuse: Bad value for 'fd' [ 725.159363][ T9214] usb 3-1: new high-speed USB device number 19 using dummy_hcd [ 725.429375][ T9214] usb 3-1: Using ep0 maxpacket: 16 [ 725.513147][ T9214] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 725.698996][ T9214] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 725.910617][ T9214] usb 3-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 725.942975][ T9214] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 725.959066][ T9214] usb 3-1: Product: syz [ 726.661712][ T9214] usb 3-1: Manufacturer: syz [ 726.666439][ T9214] usb 3-1: SerialNumber: syz [ 726.879842][ T9214] usb 3-1: 0:2 : does not exist [ 726.981590][ T9214] usb 3-1: 5:0: failed to get current value for ch 0 (-22) [ 727.007679][T10437] overlayfs: missing 'lowerdir' [ 727.059475][ T9214] usb 3-1: USB disconnect, device number 19 [ 727.440726][T10004] udevd[10004]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 728.709017][ T8669] Bluetooth: hci5: Opcode 0x1003 failed: -110 [ 729.188865][T10455] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1717'. [ 729.746931][T10457] fuse: Bad value for 'fd' [ 731.602921][T10473] overlayfs: option "workdir=./bus" is useless in a non-upper mount, ignore [ 732.333544][T10473] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent [ 732.845588][T10486] device veth0 entered promiscuous mode [ 735.319666][T10482] device veth0 left promiscuous mode [ 735.740335][T10504] netlink: 'syz.0.1731': attribute type 1 has an invalid length. [ 735.926695][T10504] 8021q: adding VLAN 0 to HW filter on device bond1 [ 738.028988][ T4451] usb 2-1: new high-speed USB device number 16 using dummy_hcd [ 738.230491][ T4451] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 738.253911][ T4451] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 738.259122][ T4500] usb 5-1: new high-speed USB device number 19 using dummy_hcd [ 738.313820][ T4451] usb 2-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 738.328899][ T4451] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=67 [ 738.367926][ T4451] usb 2-1: SerialNumber: syz [ 738.459207][ T4500] usb 5-1: Using ep0 maxpacket: 32 [ 738.471302][ T4500] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 738.485389][ T4500] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 738.500518][ T4500] usb 5-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 738.510913][ T4500] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 738.535243][ T4500] usb 5-1: config 0 descriptor?? [ 738.598018][ T4500] hub 5-1:0.0: USB hub found [ 738.608765][ T4451] usb 2-1: 0:2 : does not exist [ 738.658454][T10532] loop0: detected capacity change from 0 to 164 [ 738.763824][ T4451] usb 2-1: USB disconnect, device number 16 [ 738.797853][ T4500] hub 5-1:0.0: 1 port detected [ 738.820295][T10530] I/O error, dev loop0, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 739.393994][T10537] I/O error, dev loop3, sector 2 op 0x0:(READ) flags 0x800 phys_seg 1 prio class 1 [ 739.403548][T10537] hfsplus: unable to find HFS+ superblock [ 739.416580][ T4500] hub 5-1:0.0: activate --> -90 [ 739.624280][ T4500] hub 5-1:0.0: hub_ext_port_status failed (err = 0) [ 739.949761][ T4500] usb 5-1: USB disconnect, device number 19 [ 740.234831][T10543] xt_recent: hitcount (16385) is larger than allowed maximum (255) [ 744.301712][ T14] usb 5-1: new high-speed USB device number 20 using dummy_hcd [ 744.819008][ T14] usb 5-1: Using ep0 maxpacket: 32 [ 744.898185][ T14] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x4 has an invalid bInterval 52, changing to 7 [ 744.958958][ T14] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x4 has invalid maxpacket 9272, setting to 1024 [ 744.991019][ T14] usb 5-1: New USB device found, idVendor=13b1, idProduct=0042, bcdDevice=58.16 [ 745.072414][ T14] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 745.130147][ T14] usb 5-1: Product: syz [ 745.134448][ T14] usb 5-1: Manufacturer: syz [ 745.179052][ T14] usb 5-1: SerialNumber: syz [ 745.205301][ T14] usb 5-1: config 0 descriptor?? [ 745.809686][ T14] usb 5-1: Warning: ath10k USB support is incomplete, don't expect anything to work! [ 745.971132][ T4789] usb 5-1: Failed to submit usb control message: -71 [ 745.979410][ T4500] usb 5-1: USB disconnect, device number 20 [ 746.011764][ T4789] usb 5-1: unable to send the bmi data to the device: -71 [ 746.039613][ T4789] usb 5-1: unable to get target info from device [ 746.046373][ T4789] usb 5-1: could not get target info (-71) [ 746.054660][ T4789] usb 5-1: could not probe fw (-71) [ 747.351211][ T1274] ieee802154 phy0 wpan0: encryption failed: -22 [ 747.360912][ T1274] ieee802154 phy1 wpan1: encryption failed: -22 [ 750.373023][T10621] I/O error, dev loop0, sector 2 op 0x0:(READ) flags 0x800 phys_seg 1 prio class 1 [ 750.382810][T10621] hfsplus: unable to find HFS+ superblock [ 750.888955][ T4300] usb 2-1: new high-speed USB device number 17 using dummy_hcd [ 751.078901][ T4300] usb 2-1: Using ep0 maxpacket: 32 [ 751.087459][ T4300] usb 2-1: New USB device found, idVendor=041e, idProduct=400b, bcdDevice=3e.e7 [ 751.115170][ T4300] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 751.148931][ T128] usb 4-1: new high-speed USB device number 14 using dummy_hcd [ 751.179820][ T4300] usb 2-1: config 0 descriptor?? [ 751.216625][ T4300] gspca_main: sunplus-2.14.0 probing 041e:400b [ 751.379055][ T128] usb 4-1: Using ep0 maxpacket: 32 [ 751.392034][ T128] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 751.800934][ T4300] gspca_sunplus: reg_r err -71 [ 751.809637][ T4300] sunplus: probe of 2-1:0.0 failed with error -71 [ 751.832086][ T4300] usb 2-1: USB disconnect, device number 17 [ 752.004793][ T128] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 752.058904][ T128] usb 4-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 752.068042][ T128] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 752.108450][ T128] usb 4-1: config 0 descriptor?? [ 752.208325][ T128] hub 4-1:0.0: USB hub found [ 752.386122][ T128] hub 4-1:0.0: 1 port detected [ 752.569011][ T8698] usb 5-1: new high-speed USB device number 21 using dummy_hcd [ 752.795946][T10639] I/O error, dev loop0, sector 2 op 0x0:(READ) flags 0x800 phys_seg 1 prio class 1 [ 752.805481][T10639] hfsplus: unable to find HFS+ superblock [ 752.939035][ T8698] usb 5-1: Using ep0 maxpacket: 32 [ 752.948605][ T8698] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x4 has an invalid bInterval 52, changing to 7 [ 752.991026][ T8698] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x4 has invalid maxpacket 9272, setting to 1024 [ 753.012278][ T8698] usb 5-1: New USB device found, idVendor=13b1, idProduct=0042, bcdDevice=58.16 [ 753.022015][ T8698] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 753.031290][ T8698] usb 5-1: Product: syz [ 753.051857][ T8698] usb 5-1: Manufacturer: syz [ 753.068599][ T8698] usb 5-1: SerialNumber: syz [ 753.152513][ T8698] usb 5-1: config 0 descriptor?? [ 753.187988][ T8698] usb 5-1: Warning: ath10k USB support is incomplete, don't expect anything to work! [ 753.381285][ T8698] usb 4-1: USB disconnect, device number 14 [ 753.396494][ T4323] usb 5-1: Failed to submit usb control message: -71 [ 753.406034][ T4323] usb 5-1: unable to send the bmi data to the device: -71 [ 753.407616][ T4508] usb 5-1: USB disconnect, device number 21 [ 753.433076][ T4323] usb 5-1: unable to get target info from device [ 753.456897][ T4323] usb 5-1: could not get target info (-71) [ 753.461128][T10646] xt_recent: hitcount (16385) is larger than allowed maximum (255) [ 753.496438][ T4323] usb 5-1: could not probe fw (-71) [ 755.045816][T10669] netlink: 'syz.4.1784': attribute type 1 has an invalid length. [ 755.319103][T10672] 8021q: adding VLAN 0 to HW filter on device bond2 [ 756.107983][T10678] netlink: 28 bytes leftover after parsing attributes in process `syz.4.1784'. [ 756.798962][ T4508] usb 3-1: new high-speed USB device number 20 using dummy_hcd [ 756.878692][T10686] loop4: detected capacity change from 0 to 164 [ 756.920820][T10529] I/O error, dev loop4, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 757.029199][ T4508] usb 3-1: Using ep0 maxpacket: 32 [ 757.036154][ T4508] usb 3-1: New USB device found, idVendor=041e, idProduct=400b, bcdDevice=3e.e7 [ 757.049018][ T4508] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 757.060787][ T4508] usb 3-1: config 0 descriptor?? [ 757.071797][ T4508] gspca_main: sunplus-2.14.0 probing 041e:400b [ 758.445473][ T4508] gspca_sunplus: reg_r err -71 [ 758.452734][ T4508] sunplus: probe of 3-1:0.0 failed with error -71 [ 758.477133][ T4508] usb 3-1: USB disconnect, device number 20 [ 758.650714][T10698] netlink: 48 bytes leftover after parsing attributes in process `syz.4.1792'. [ 760.009182][ T128] usb 3-1: new high-speed USB device number 21 using dummy_hcd [ 760.742283][T10720] loop3: detected capacity change from 0 to 164 [ 760.878873][ T128] usb 3-1: Using ep0 maxpacket: 32 [ 761.463671][ T128] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x4 has an invalid bInterval 52, changing to 7 [ 761.638984][ T128] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x4 has invalid maxpacket 9272, setting to 1024 [ 765.821128][T10739] netlink: 48 bytes leftover after parsing attributes in process `syz.4.1803'. [ 767.233895][ T128] usb 3-1: string descriptor 0 read error: -32 [ 767.759295][ T128] usb 3-1: New USB device found, idVendor=13b1, idProduct=0042, bcdDevice=58.16 [ 767.768403][ T128] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 768.004112][ T128] usb 3-1: config 0 descriptor?? [ 768.076312][ T128] usb 3-1: can't set config #0, error -32 [ 768.446019][T10754] netlink: 'syz.4.1810': attribute type 1 has an invalid length. [ 768.507941][T10754] 8021q: adding VLAN 0 to HW filter on device bond3 [ 768.531605][T10754] netlink: 28 bytes leftover after parsing attributes in process `syz.4.1810'. [ 770.548933][ T4451] usb 3-1: USB disconnect, device number 21 [ 772.152075][T10754] bond3 (unregistering): Released all slaves [ 775.172447][T10816] netlink: 'syz.2.1828': attribute type 1 has an invalid length. [ 775.842460][T10820] 8021q: adding VLAN 0 to HW filter on device bond1 [ 775.872653][T10823] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1828'. [ 776.873755][T10823] bond1 (unregistering): Released all slaves [ 777.468904][ T4508] usb 1-1: new high-speed USB device number 13 using dummy_hcd [ 778.624371][ T4508] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 778.687797][ T4508] usb 1-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 778.709027][ T4508] usb 1-1: New USB device found, idVendor=0d8c, idProduct=0022, bcdDevice= 0.00 [ 778.718304][ T4508] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 778.753119][ T4508] usb 1-1: config 0 descriptor?? [ 778.785012][ T4508] usbhid 1-1:0.0: couldn't find an input interrupt endpoint [ 779.482846][T10861] netlink: 'syz.4.1840': attribute type 1 has an invalid length. [ 782.383259][ T4508] usb 1-1: USB disconnect, device number 13 [ 783.550001][T10896] netlink: 48 bytes leftover after parsing attributes in process `syz.2.1849'. [ 783.685237][T10899] xt_l2tp: v2 sid > 0xffff: 262144 [ 784.395051][T10903] netlink: 'syz.4.1852': attribute type 1 has an invalid length. [ 786.668271][T10929] vcan0: tx drop: invalid da for name 0x00000000000000c7 [ 787.728720][T10935] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1862'. [ 787.877364][T10937] tmpfs: Bad value for 'mpol' [ 789.305287][T10950] netlink: 168 bytes leftover after parsing attributes in process `syz.4.1868'. [ 791.378888][ T14] usb 4-1: new full-speed USB device number 15 using dummy_hcd [ 792.341557][ T14] usb 4-1: config 0 has no interfaces? [ 792.347230][ T14] usb 4-1: New USB device found, idVendor=28bd, idProduct=0935, bcdDevice= 0.00 [ 792.361333][ T14] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 792.371913][ T14] usb 4-1: config 0 descriptor?? [ 792.507164][T10982] netlink: 28 bytes leftover after parsing attributes in process `syz.4.1880'. [ 792.582806][ T4453] usb 4-1: USB disconnect, device number 15 [ 792.891486][T10987] netlink: 168 bytes leftover after parsing attributes in process `syz.1.1881'. [ 793.579051][ T14] usb 5-1: new high-speed USB device number 22 using dummy_hcd [ 793.778990][ T14] usb 5-1: Using ep0 maxpacket: 32 [ 793.790979][ T14] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 794.197339][ T14] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 794.215938][ T14] usb 5-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 794.233769][ T14] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 794.246922][ T14] usb 5-1: config 0 descriptor?? [ 794.306119][ T14] hub 5-1:0.0: USB hub found [ 795.228502][ T14] hub 5-1:0.0: config failed, can't read hub descriptor (err -22) [ 795.484865][ T14] usbhid 5-1:0.0: can't add hid device: -71 [ 795.505889][ T14] usbhid: probe of 5-1:0.0 failed with error -71 [ 795.553491][ T14] usb 5-1: USB disconnect, device number 22 [ 797.448999][ T14] usb 5-1: new high-speed USB device number 23 using dummy_hcd [ 797.633630][T11027] vcan0: tx drop: invalid da for name 0x00000000000000c7 [ 797.641241][ T14] usb 5-1: Using ep0 maxpacket: 16 [ 797.669061][ T4500] usb 1-1: new full-speed USB device number 14 using dummy_hcd [ 798.429716][ T14] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 798.476420][ T14] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 798.512179][ T14] usb 5-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 798.535644][ T14] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 798.554473][ T14] usb 5-1: Product: syz [ 798.558715][ T14] usb 5-1: Manufacturer: syz [ 798.576200][ T14] usb 5-1: SerialNumber: syz [ 798.867559][ T4500] usb 1-1: config 0 has no interfaces? [ 799.626492][ T4500] usb 1-1: New USB device found, idVendor=28bd, idProduct=0935, bcdDevice= 0.00 [ 799.638356][ T4500] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 799.658480][ T4500] usb 1-1: config 0 descriptor?? [ 799.771679][T11033] overlayfs: option "workdir=./bus" is useless in a non-upper mount, ignore [ 799.787423][T11033] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent [ 799.829960][ T14] usb 5-1: 0:2 : does not exist [ 799.843130][ T14] usb 5-1: 5:0: failed to get current value for ch 0 (-22) [ 799.925591][ T14] usb 5-1: USB disconnect, device number 23 [ 800.911313][ T4500] usb 1-1: USB disconnect, device number 14 [ 801.505994][T10529] udevd[10529]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 803.797783][ T4500] usb 5-1: new high-speed USB device number 24 using dummy_hcd [ 804.022478][ T4500] usb 5-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 804.058115][T11068] vcan0: tx drop: invalid da for name 0x00000000000000c7 [ 804.257781][ T4500] usb 5-1: New USB device found, idVendor=0d8c, idProduct=0022, bcdDevice= 0.00 [ 806.684339][T11074] overlayfs: option "workdir=./bus" is useless in a non-upper mount, ignore [ 806.857956][T11074] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent [ 807.764839][ T4500] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 807.774745][ T4500] usb 5-1: config 0 descriptor?? [ 807.783726][ T4500] usb 5-1: can't set config #0, error -71 [ 807.790666][ T4500] usb 5-1: USB disconnect, device number 24 [ 808.790988][ T1274] ieee802154 phy0 wpan0: encryption failed: -22 [ 808.797360][ T1274] ieee802154 phy1 wpan1: encryption failed: -22 [ 808.999007][ T9037] usb 1-1: new full-speed USB device number 15 using dummy_hcd [ 809.214588][ T9037] usb 1-1: config 0 has no interfaces? [ 809.232198][ T9037] usb 1-1: New USB device found, idVendor=28bd, idProduct=0935, bcdDevice= 0.00 [ 809.305132][ T9037] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 809.782685][ T9037] usb 1-1: config 0 descriptor?? [ 811.280933][ T4448] usb 1-1: USB disconnect, device number 15 [ 811.341072][T11111] overlayfs: option "workdir=./bus" is useless in a non-upper mount, ignore [ 811.449155][T11111] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent [ 811.638937][ T4446] usb 4-1: new high-speed USB device number 16 using dummy_hcd [ 812.597861][ T4446] usb 4-1: Using ep0 maxpacket: 16 [ 812.652390][ T4446] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 812.668867][ T4446] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 812.713795][ T4446] usb 4-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 812.723669][ T4446] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 812.732440][ T4446] usb 4-1: Product: syz [ 812.736896][ T4446] usb 4-1: Manufacturer: syz [ 812.742957][ T4446] usb 4-1: SerialNumber: syz [ 812.994963][ T4446] usb 4-1: 0:2 : does not exist [ 813.013399][ T4446] usb 4-1: 5:0: failed to get current value for ch 0 (-22) [ 813.196401][ T4446] usb 4-1: USB disconnect, device number 16 [ 814.121323][T10529] udevd[10529]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 814.178882][T11129] overlayfs: missing 'lowerdir' [ 816.755351][ T9214] usb 1-1: new full-speed USB device number 16 using dummy_hcd [ 817.552726][T11164] netlink: 168 bytes leftover after parsing attributes in process `syz.1.1942'. [ 818.032848][ T9214] usb 1-1: config 0 has no interfaces? [ 818.039583][ T9214] usb 1-1: New USB device found, idVendor=28bd, idProduct=0935, bcdDevice= 0.00 [ 818.059226][ T9214] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 818.073984][ T9214] usb 1-1: config 0 descriptor?? [ 818.287823][ T9214] usb 1-1: USB disconnect, device number 16 [ 818.384139][T11173] netlink: 48 bytes leftover after parsing attributes in process `syz.1.1945'. [ 818.608911][ T14] usb 5-1: new high-speed USB device number 25 using dummy_hcd [ 819.266118][ T14] usb 5-1: Using ep0 maxpacket: 16 [ 819.274505][ T14] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 819.318283][ T14] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 819.377105][ T14] usb 5-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 819.416043][ T14] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 819.450777][ T14] usb 5-1: Product: syz [ 820.347128][ T14] usb 5-1: Manufacturer: syz [ 820.352270][ T14] usb 5-1: SerialNumber: syz [ 820.578223][ T14] usb 5-1: 0:2 : does not exist [ 820.599233][ T14] usb 5-1: 5:0: failed to get current value for ch 0 (-22) [ 821.477583][ T14] usb 5-1: USB disconnect, device number 25 [ 821.783604][T10529] udevd[10529]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 821.994895][T11200] I/O error, dev loop4, sector 2 op 0x0:(READ) flags 0x800 phys_seg 1 prio class 2 [ 822.004788][T11200] hfsplus: unable to find HFS+ superblock [ 823.588076][T11208] device veth0 entered promiscuous mode [ 823.828701][T11194] device veth0 left promiscuous mode [ 823.991633][T11221] netlink: 168 bytes leftover after parsing attributes in process `syz.0.1956'. [ 824.898931][ T4500] usb 3-1: new full-speed USB device number 22 using dummy_hcd [ 825.114516][ T4500] usb 3-1: config 0 has no interfaces? [ 825.124882][ T4500] usb 3-1: New USB device found, idVendor=28bd, idProduct=0935, bcdDevice= 0.00 [ 825.145877][ T4500] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 825.171337][ T4500] usb 3-1: config 0 descriptor?? [ 826.297307][ T4448] usb 3-1: USB disconnect, device number 22 [ 828.106751][T11252] netlink: 48 bytes leftover after parsing attributes in process `syz.2.1967'. [ 828.268933][ T4500] usb 1-1: new high-speed USB device number 17 using dummy_hcd [ 828.510590][ T4500] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 828.555622][ T4500] usb 1-1: New USB device found, idVendor=0d8c, idProduct=0022, bcdDevice= 0.00 [ 829.040677][ T4500] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 829.087431][ T4500] usb 1-1: config 0 descriptor?? [ 829.106840][ T4500] usbhid 1-1:0.0: couldn't find an input interrupt endpoint [ 829.839016][ T4446] usb 3-1: new full-speed USB device number 23 using dummy_hcd [ 829.962840][T11269] xt_recent: hitcount (16385) is larger than allowed maximum (255) [ 830.202870][ T4446] usb 3-1: config 0 has no interfaces? [ 830.218929][ T4446] usb 3-1: New USB device found, idVendor=28bd, idProduct=0935, bcdDevice= 0.00 [ 830.228143][ T4446] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 830.299498][ T4446] usb 3-1: config 0 descriptor?? [ 830.492547][T11286] overlayfs: option "workdir=./bus" is useless in a non-upper mount, ignore [ 830.519237][T11286] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent [ 830.537519][ T9037] usb 3-1: USB disconnect, device number 23 [ 831.386757][ T9037] usb 1-1: USB disconnect, device number 17 [ 833.473276][T11320] overlayfs: option "workdir=./bus" is useless in a non-upper mount, ignore [ 833.537708][T11320] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent [ 834.466993][T11325] xt_recent: hitcount (16385) is larger than allowed maximum (255) [ 834.476970][ T4500] usb 1-1: new full-speed USB device number 18 using dummy_hcd [ 834.529159][ T4448] usb 5-1: new high-speed USB device number 26 using dummy_hcd [ 834.648595][T11343] netlink: 48 bytes leftover after parsing attributes in process `syz.1.2001'. [ 834.669357][ T4500] usb 1-1: config 0 has no interfaces? [ 834.674912][ T4500] usb 1-1: New USB device found, idVendor=28bd, idProduct=0935, bcdDevice= 0.00 [ 834.708951][ T4448] usb 5-1: device descriptor read/64, error -71 [ 834.818715][ T4500] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 834.989017][ T4448] usb 5-1: new high-speed USB device number 27 using dummy_hcd [ 835.044939][ T4500] usb 1-1: config 0 descriptor?? [ 835.159027][ T4448] usb 5-1: device descriptor read/64, error -71 [ 835.299715][ T4448] usb usb5-port1: attempt power cycle [ 835.374338][T11336] loop3: detected capacity change from 0 to 2048 [ 835.417948][ T4500] usb 1-1: USB disconnect, device number 18 [ 835.511691][T11336] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: none. [ 835.582045][T11336] EXT4-fs (loop3): unmounting filesystem. [ 835.769109][ T4448] usb 5-1: new high-speed USB device number 28 using dummy_hcd [ 836.448115][ T4448] usb 5-1: device descriptor read/8, error -71 [ 836.729005][ T4448] usb 5-1: new high-speed USB device number 29 using dummy_hcd [ 836.790394][ T4448] usb 5-1: device descriptor read/8, error -71 [ 837.029690][ T4448] usb usb5-port1: unable to enumerate USB device [ 837.715084][T11378] netlink: 'syz.4.2013': attribute type 1 has an invalid length. [ 838.570981][T11390] 8021q: adding VLAN 0 to HW filter on device bond5 [ 841.703569][T11423] netlink: 168 bytes leftover after parsing attributes in process `syz.4.2025'. [ 843.628891][ T4508] usb 5-1: new high-speed USB device number 30 using dummy_hcd [ 843.726637][T11437] netlink: 48 bytes leftover after parsing attributes in process `syz.2.2030'. [ 843.819228][ T4508] usb 5-1: Using ep0 maxpacket: 16 [ 843.828414][ T4508] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 843.865219][ T4508] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 843.908682][ T4508] usb 5-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 843.919403][ T4508] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 843.927953][ T4508] usb 5-1: Product: syz [ 843.934807][ T4508] usb 5-1: Manufacturer: syz [ 843.940971][ T4508] usb 5-1: SerialNumber: syz [ 845.016113][ T4508] usb 5-1: 0:2 : does not exist [ 845.033717][ T4508] usb 5-1: 5:0: failed to get current value for ch 0 (-22) [ 845.136885][ T4508] usb 5-1: USB disconnect, device number 30 [ 845.381312][T10529] udevd[10529]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 847.602497][T11475] netlink: 48 bytes leftover after parsing attributes in process `syz.4.2043'. [ 849.879127][ T9214] usb 5-1: new high-speed USB device number 31 using dummy_hcd [ 850.088986][ T9214] usb 5-1: Using ep0 maxpacket: 16 [ 850.098294][ T9214] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 850.198985][ T9214] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 850.259117][ T9214] usb 5-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 850.297615][ T9214] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 850.328920][ T9214] usb 5-1: Product: syz [ 850.333303][ T9214] usb 5-1: Manufacturer: syz [ 850.366336][ T9214] usb 5-1: SerialNumber: syz [ 851.277526][ T9214] usb 5-1: 0:2 : does not exist [ 851.285734][ T9214] usb 5-1: 5:0: failed to get current value for ch 0 (-22) [ 851.330944][ T9214] usb 5-1: USB disconnect, device number 31 [ 851.339806][T11507] device veth0 entered promiscuous mode [ 852.379584][T10529] udevd[10529]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 852.697023][T11499] device veth0 left promiscuous mode [ 852.728473][T11516] netlink: 48 bytes leftover after parsing attributes in process `syz.4.2056'. [ 854.055805][ T4451] usb 2-1: new high-speed USB device number 18 using dummy_hcd [ 854.248996][ T4451] usb 2-1: Using ep0 maxpacket: 16 [ 854.259084][ T4451] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 854.345830][ T4451] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 854.389420][ T8669] Bluetooth: hci5: Opcode 0x1003 failed: -110 [ 854.396515][ T4270] Bluetooth: hci5: command 0x1003 tx timeout [ 854.577676][ T4451] usb 2-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 854.699648][ T4451] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 854.833419][ T4451] usb 2-1: Product: syz [ 854.962023][ T4451] usb 2-1: Manufacturer: syz [ 854.966715][ T4451] usb 2-1: SerialNumber: syz [ 855.504742][ T4451] usb 2-1: 0:2 : does not exist [ 855.517484][ T4451] usb 2-1: 5:0: failed to get current value for ch 0 (-22) [ 855.579212][ T4451] usb 2-1: USB disconnect, device number 18 [ 855.854753][T11550] netlink: 'syz.2.2069': attribute type 1 has an invalid length. [ 855.895269][T10529] udevd[10529]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 856.229014][ T4451] usb 1-1: new high-speed USB device number 19 using dummy_hcd [ 856.559944][ T4451] usb 1-1: Using ep0 maxpacket: 16 [ 856.595265][ T4451] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 856.744268][ T4451] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 856.919784][ T4451] usb 1-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 857.017515][T11557] xt_recent: hitcount (16385) is larger than allowed maximum (255) [ 857.031668][ T4451] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 857.057853][ T4451] usb 1-1: Product: syz [ 857.072239][ T4451] usb 1-1: Manufacturer: syz [ 857.086612][ T4451] usb 1-1: SerialNumber: syz [ 858.035856][ T4304] Bluetooth: hci5: Frame reassembly failed (-84) [ 858.052972][ T4451] usb 1-1: 0:2 : does not exist [ 858.084901][ T4451] usb 1-1: 5:0: failed to get current value for ch 0 (-22) [ 858.160313][ T4451] usb 1-1: USB disconnect, device number 19 [ 858.557562][T10529] udevd[10529]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 859.024910][T11585] loop4: detected capacity change from 0 to 2048 [ 860.069097][ T8669] Bluetooth: hci5: command 0x1003 tx timeout [ 860.078534][ T4270] Bluetooth: hci5: Opcode 0x1003 failed: -110 [ 860.814038][T11603] netlink: 'syz.1.2082': attribute type 1 has an invalid length. [ 861.006876][T11607] netlink: 'syz.0.2083': attribute type 1 has an invalid length. [ 861.676202][T11615] 8021q: adding VLAN 0 to HW filter on device bond2 [ 861.705136][T11613] netlink: 28 bytes leftover after parsing attributes in process `syz.0.2083'. [ 862.025937][T11619] I/O error, dev loop4, sector 2 op 0x0:(READ) flags 0x800 phys_seg 1 prio class 1 [ 862.035480][T11619] hfsplus: unable to find HFS+ superblock [ 862.580657][T11613] bond2 (unregistering): Released all slaves [ 863.976891][T11635] overlayfs: missing 'workdir' [ 864.398887][ T9214] usb 5-1: new high-speed USB device number 32 using dummy_hcd [ 865.876992][ T9214] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 865.999440][T11642] vcan0: tx drop: invalid da for name 0x00000000000000c7 [ 866.007195][ T9214] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 866.062605][ T9214] usb 5-1: New USB device found, idVendor=0d8c, idProduct=0022, bcdDevice= 0.00 [ 866.108675][T11646] netlink: 'syz.0.2096': attribute type 1 has an invalid length. [ 866.143581][ T9214] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 866.209808][ T9214] usb 5-1: config 0 descriptor?? [ 866.543511][ T4508] usb 4-1: new high-speed USB device number 17 using dummy_hcd [ 866.664071][ T9214] usbhid 5-1:0.0: can't add hid device: -71 [ 866.690352][ T9214] usbhid: probe of 5-1:0.0 failed with error -71 [ 866.739326][ T4508] usb 4-1: Using ep0 maxpacket: 16 [ 866.883067][ T4508] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 866.922763][ T9214] usb 5-1: USB disconnect, device number 32 [ 867.115911][ T4508] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 867.375324][ T4508] usb 4-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 867.407321][ T4508] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 867.441145][ T4508] usb 4-1: Product: syz [ 867.448597][ T4508] usb 4-1: Manufacturer: syz [ 867.468865][ T4508] usb 4-1: SerialNumber: syz [ 867.703335][ T4508] usb 4-1: 0:2 : does not exist [ 867.909288][ T9037] usb 3-1: new full-speed USB device number 24 using dummy_hcd [ 868.214030][ T4508] usb 4-1: 5:0: failed to get current value for ch 0 (-22) [ 868.249075][ T4508] usb 4-1: USB disconnect, device number 17 [ 868.390419][ T9037] usb 3-1: config 0 has no interfaces? [ 868.395980][ T9037] usb 3-1: New USB device found, idVendor=28bd, idProduct=0935, bcdDevice= 0.00 [ 868.410424][ T9037] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 868.428127][ T9037] usb 3-1: config 0 descriptor?? [ 869.100098][T10529] udevd[10529]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 869.266515][T11671] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2106'. [ 869.287605][T11671] device vlan2 entered promiscuous mode [ 869.296236][T11671] device bridge0 entered promiscuous mode [ 869.583066][ T9037] usb 3-1: USB disconnect, device number 24 [ 870.276445][ T1274] ieee802154 phy0 wpan0: encryption failed: -22 [ 870.338240][ T1274] ieee802154 phy1 wpan1: encryption failed: -22 [ 870.463931][T11703] netlink: 'syz.4.2116': attribute type 1 has an invalid length. [ 874.282612][T11733] vcan0: tx drop: invalid da for name 0x00000000000000c7 [ 875.160381][T11752] netlink: 'syz.3.2131': attribute type 1 has an invalid length. [ 876.027202][T11763] device veth0 entered promiscuous mode [ 876.127773][T11765] MTD: Attempt to mount non-MTD device "/dev/nullb0" [ 876.175778][T11765] /dev/nullb0: Can't open blockdev [ 876.800024][T11758] device veth0 left promiscuous mode [ 877.143088][ T14] usb 4-1: new high-speed USB device number 18 using dummy_hcd [ 877.369362][ T14] usb 4-1: Using ep0 maxpacket: 32 [ 877.386961][ T14] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 877.465641][ T14] usb 4-1: config 0 has no interfaces? [ 877.557644][ T14] usb 4-1: New USB device found, idVendor=041e, idProduct=400b, bcdDevice=3e.e7 [ 877.662494][ T14] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 877.799554][ T14] usb 4-1: config 0 descriptor?? [ 880.421312][ T14] usb 4-1: USB disconnect, device number 18 [ 881.896993][T11827] I/O error, dev loop4, sector 2 op 0x0:(READ) flags 0x800 phys_seg 1 prio class 2 [ 882.840920][T11827] hfsplus: unable to find HFS+ superblock [ 887.253060][T11850] kvm: pic: non byte write [ 887.389158][ T4508] usb 3-1: new high-speed USB device number 25 using dummy_hcd [ 887.880858][ T4508] usb 3-1: Using ep0 maxpacket: 32 [ 887.900283][ T4508] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 887.918851][ T4508] usb 3-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 887.938860][ T4508] usb 3-1: New USB device found, idVendor=041e, idProduct=400b, bcdDevice=3e.e7 [ 887.947995][ T4508] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 887.974736][ T4508] usb 3-1: config 0 descriptor?? [ 888.077121][ T4453] usb 3-1: USB disconnect, device number 25 [ 889.271115][ T4270] Bluetooth: hci4: Invalid handle: 0x20c9 > 0x0eff [ 892.658912][ T9214] usb 3-1: new high-speed USB device number 26 using dummy_hcd [ 892.949105][ T9214] usb 3-1: Using ep0 maxpacket: 32 [ 892.963801][ T9214] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 893.021514][ T9214] usb 3-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 893.313968][ T9214] usb 3-1: New USB device found, idVendor=041e, idProduct=400b, bcdDevice=3e.e7 [ 893.558838][ T9214] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 893.580285][ T9214] usb 3-1: config 0 descriptor?? [ 893.852435][T11925] kvm: pic: non byte write [ 895.413163][ T4451] usb 3-1: USB disconnect, device number 26 [ 895.442356][ T4508] usb 5-1: new high-speed USB device number 33 using dummy_hcd [ 896.438931][ T4508] usb 5-1: Using ep0 maxpacket: 32 [ 896.448042][T11953] vcan0: tx drop: invalid da for name 0x00000000000000c7 [ 896.477842][ T4508] usb 5-1: unable to get BOS descriptor or descriptor too short [ 896.998127][ T4508] usb 5-1: config 128 has an invalid interface number: 127 but max is 3 [ 897.007830][ T4508] usb 5-1: config 128 has an invalid descriptor of length 0, skipping remainder of the config [ 897.020580][ T4508] usb 5-1: config 128 has 1 interface, different from the descriptor's value: 4 [ 897.030242][ T4508] usb 5-1: config 128 has no interface number 0 [ 897.036561][ T4508] usb 5-1: config 128 interface 127 altsetting 14 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 897.129631][ T4508] usb 5-1: config 128 interface 127 has no altsetting 0 [ 897.167344][ T4508] usb 5-1: New USB device found, idVendor=0582, idProduct=295c, bcdDevice=d4.55 [ 897.214556][ T4508] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 897.223207][ T4508] usb 5-1: Product: syz [ 897.227743][ T4508] usb 5-1: Manufacturer: syz [ 897.232922][ T4508] usb 5-1: SerialNumber: syz [ 898.295343][ T4508] usb 5-1: USB disconnect, device number 33 [ 900.469755][T10529] udevd[10529]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:128.127/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 901.609086][ T4509] usb 5-1: new high-speed USB device number 34 using dummy_hcd [ 902.928920][ T4509] usb 5-1: Using ep0 maxpacket: 16 [ 902.945420][ T4509] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 903.193417][ T4509] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 903.245704][ T4509] usb 5-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 903.265182][ T4509] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 903.286359][ T4509] usb 5-1: Product: syz [ 903.301306][ T4509] usb 5-1: Manufacturer: syz [ 903.306053][ T4509] usb 5-1: SerialNumber: syz [ 904.803783][ T4509] usb 5-1: 0:2 : does not exist [ 904.859534][ T4509] usb 5-1: 5:0: failed to get current value for ch 0 (-22) [ 904.887245][ T4509] usb 5-1: USB disconnect, device number 34 [ 905.650060][T10529] udevd[10529]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 905.791166][T12022] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2205'. [ 906.579143][ T4509] usb 5-1: new high-speed USB device number 35 using dummy_hcd [ 906.851623][ T1077] block nbd1: Attempted send on invalid socket [ 906.938918][ T1077] I/O error, dev nbd1, sector 0 op 0x0:(READ) flags 0x800 phys_seg 1 prio class 2 [ 906.989924][T12035] SQUASHFS error: Failed to read block 0x0: -5 [ 906.997160][T12035] unable to read squashfs_super_block [ 907.037703][ T4509] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 907.053817][ T4509] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 907.067229][ T4509] usb 5-1: New USB device found, idVendor=0d8c, idProduct=0022, bcdDevice= 0.00 [ 907.102065][ T4509] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 907.308306][ T4509] usb 5-1: config 0 descriptor?? [ 908.214004][ T4509] usbhid 5-1:0.0: can't add hid device: -71 [ 908.230359][ T4509] usbhid: probe of 5-1:0.0 failed with error -71 [ 908.652825][ T4509] usb 5-1: USB disconnect, device number 35 [ 911.362608][T12082] ubi: mtd0 is already attached to ubi31 [ 912.334072][T12074] device veth0 entered promiscuous mode [ 913.140003][T12070] device veth0 left promiscuous mode [ 914.028861][ T4509] usb 3-1: new high-speed USB device number 27 using dummy_hcd [ 915.034420][ T4508] usb 5-1: new high-speed USB device number 36 using dummy_hcd [ 915.071370][ T4509] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 915.088820][ T4509] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 915.099260][ T4509] usb 3-1: New USB device found, idVendor=0d8c, idProduct=0022, bcdDevice= 0.00 [ 915.883332][ T4509] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 915.898670][ T4509] usb 3-1: config 0 descriptor?? [ 915.978953][ T4508] usb 5-1: Using ep0 maxpacket: 32 [ 915.986704][ T4508] usb 5-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 916.568340][ T4508] usb 5-1: New USB device found, idVendor=041e, idProduct=400b, bcdDevice=3e.e7 [ 916.590747][ T4508] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 916.614788][ T4508] usb 5-1: config 0 descriptor?? [ 916.652504][ T4509] usbhid 3-1:0.0: can't add hid device: -71 [ 916.670543][ T4509] usbhid: probe of 3-1:0.0 failed with error -71 [ 917.205915][ T4509] usb 3-1: USB disconnect, device number 27 [ 917.323320][ T4500] usb 5-1: USB disconnect, device number 36 [ 917.689390][ T4508] usb 1-1: new high-speed USB device number 20 using dummy_hcd [ 918.209062][ T4508] usb 1-1: Using ep0 maxpacket: 32 [ 918.217843][ T4508] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 918.239684][ T4508] usb 1-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 918.253640][ T4508] usb 1-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 918.278948][ T4508] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 918.308485][ T4508] usb 1-1: config 0 descriptor?? [ 918.328438][ T4508] hub 1-1:0.0: bad descriptor, ignoring hub [ 918.334870][ T4508] hub: probe of 1-1:0.0 failed with error -5 [ 918.343433][ T4508] usbhid 1-1:0.0: couldn't find an input interrupt endpoint [ 918.485435][T12145] device veth0 entered promiscuous mode [ 919.659730][T12140] device veth0 left promiscuous mode [ 921.221799][T12163] xt_l2tp: v2 sid > 0xffff: 262144 [ 921.245437][ T9214] usb 1-1: USB disconnect, device number 20 [ 921.482652][ T4509] usb 2-1: new high-speed USB device number 19 using dummy_hcd [ 921.751472][ T4509] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 921.806897][ T4509] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 921.847145][ T4509] usb 2-1: New USB device found, idVendor=0d8c, idProduct=0022, bcdDevice= 0.00 [ 921.858256][ T4509] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 921.882367][ T4509] usb 2-1: config 0 descriptor?? [ 922.009615][ T1077] block nbd4: Attempted send on invalid socket [ 922.016195][ T1077] I/O error, dev nbd4, sector 0 op 0x0:(READ) flags 0x800 phys_seg 1 prio class 2 [ 922.103833][T12170] SQUASHFS error: Failed to read block 0x0: -5 [ 922.110859][T12170] unable to read squashfs_super_block [ 922.169115][ T9214] usb 1-1: new high-speed USB device number 21 using dummy_hcd [ 922.241023][T12174] netlink: 48 bytes leftover after parsing attributes in process `syz.3.2250'. [ 922.614992][T12173] netlink: 28 bytes leftover after parsing attributes in process `syz.2.2251'. [ 922.617198][ T4509] cm6533_jd 0003:0D8C:0022.0013: unknown main item tag 0x0 [ 922.716186][ T4509] cm6533_jd 0003:0D8C:0022.0013: unknown main item tag 0x0 [ 923.005348][ T9214] usb 1-1: Using ep0 maxpacket: 32 [ 923.016435][ T4509] cm6533_jd 0003:0D8C:0022.0013: unknown main item tag 0x0 [ 923.028030][ T4509] cm6533_jd 0003:0D8C:0022.0013: unknown main item tag 0x0 [ 923.040568][ T9214] usb 1-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 923.065653][ T4509] cm6533_jd 0003:0D8C:0022.0013: unknown main item tag 0x0 [ 923.094470][ T9214] usb 1-1: New USB device found, idVendor=041e, idProduct=400b, bcdDevice=3e.e7 [ 923.124739][ T4509] cm6533_jd 0003:0D8C:0022.0013: No inputs registered, leaving [ 923.146599][ T9214] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 923.163394][ T4509] cm6533_jd 0003:0D8C:0022.0013: hiddev0,hidraw0: USB HID v0.00 Device [HID 0d8c:0022] on usb-dummy_hcd.1-1/input0 [ 923.192009][ T9214] usb 1-1: config 0 descriptor?? [ 923.257856][ T4509] usb 2-1: USB disconnect, device number 19 [ 923.520250][T12181] fido_id[12181]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.1/usb2/report_descriptor': No such file or directory [ 924.579252][ T9214] usb 1-1: USB disconnect, device number 21 [ 926.478059][T12208] device veth0 entered promiscuous mode [ 927.036336][T12219] xt_l2tp: v2 sid > 0xffff: 262144 [ 927.630713][T12201] device veth0 left promiscuous mode [ 927.844962][T12223] netlink: 48 bytes leftover after parsing attributes in process `syz.1.2262'. [ 931.670759][ T1274] ieee802154 phy0 wpan0: encryption failed: -22 [ 931.677181][ T1274] ieee802154 phy1 wpan1: encryption failed: -22 [ 934.681830][ T4451] usb 5-1: new high-speed USB device number 37 using dummy_hcd [ 934.889250][ T4451] usb 5-1: Using ep0 maxpacket: 16 [ 934.919673][T12266] netlink: 48 bytes leftover after parsing attributes in process `syz.0.2275'. [ 934.929215][ T4451] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 934.929246][ T4451] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 934.932444][ T4451] usb 5-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 934.971116][ T4451] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 934.980842][ T4451] usb 5-1: Product: syz [ 934.985297][ T4451] usb 5-1: Manufacturer: syz [ 934.991363][ T4451] usb 5-1: SerialNumber: syz [ 935.280809][ T4451] usb 5-1: 0:2 : does not exist [ 935.331852][ T4451] usb 5-1: 5:0: failed to get current value for ch 0 (-22) [ 935.604460][ T4451] usb 5-1: USB disconnect, device number 37 [ 936.103496][T10529] udevd[10529]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 936.251703][ T4269] Bluetooth: hci5: command 0x1003 tx timeout [ 936.261134][ T4270] Bluetooth: hci5: Opcode 0x1003 failed: -110 [ 937.365717][T12290] netlink: 20 bytes leftover after parsing attributes in process `syz.1.2282'. [ 941.090159][ T4508] usb 4-1: new high-speed USB device number 19 using dummy_hcd [ 941.929735][T12329] I/O error, dev loop0, sector 2 op 0x0:(READ) flags 0x800 phys_seg 1 prio class 2 [ 941.939342][ T4508] usb 4-1: Using ep0 maxpacket: 16 [ 941.946468][ T4508] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 942.076372][ T4508] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 942.100452][ T4508] usb 4-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 942.645081][ T4508] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 942.653232][ T4508] usb 4-1: Product: syz [ 942.657428][ T4508] usb 4-1: Manufacturer: syz [ 942.662246][ T4508] usb 4-1: SerialNumber: syz [ 942.779658][T12329] hfsplus: unable to find HFS+ superblock [ 942.934244][ T4508] usb 4-1: 0:2 : does not exist [ 942.987529][ T4508] usb 4-1: 5:0: failed to get current value for ch 0 (-22) [ 943.027415][ T4508] usb 4-1: USB disconnect, device number 19 [ 943.254368][T10529] udevd[10529]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 946.748820][T12272] usb 5-1: new high-speed USB device number 38 using dummy_hcd [ 946.874717][T12373] block device autoloading is deprecated and will be removed. [ 947.218976][ T4508] usb 3-1: new high-speed USB device number 28 using dummy_hcd [ 947.439003][ T4508] usb 3-1: Using ep0 maxpacket: 32 [ 947.451312][ T4508] usb 3-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 947.585484][ T4508] usb 3-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 947.682872][ T4508] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 947.812048][ T4508] usb 3-1: config 0 descriptor?? [ 947.861236][ T4508] hub 3-1:0.0: bad descriptor, ignoring hub [ 947.885611][ T4508] hub: probe of 3-1:0.0 failed with error -5 [ 948.058571][T12377] vcan0: tx drop: invalid da for name 0x00000000000000c7 [ 948.065929][T12272] usb 5-1: Using ep0 maxpacket: 16 [ 948.073750][T12272] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 948.103068][T12272] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 948.134035][ T4508] usbhid 3-1:0.0: couldn't find an input interrupt endpoint [ 948.243904][T12272] usb 5-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 948.256916][T12272] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 948.265214][T12272] usb 5-1: Product: syz [ 948.270364][T12272] usb 5-1: Manufacturer: syz [ 948.275231][T12272] usb 5-1: SerialNumber: syz [ 949.080439][T12272] usb 5-1: 0:2 : does not exist [ 949.090255][T12272] usb 5-1: 5:0: failed to get current value for ch 0 (-22) [ 949.108291][T12272] usb 5-1: USB disconnect, device number 38 [ 949.380550][T10529] udevd[10529]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 949.579127][ T4451] usb 2-1: new high-speed USB device number 20 using dummy_hcd [ 949.810698][ T4451] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 949.851335][ T4451] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 949.898383][ T4451] usb 2-1: New USB device found, idVendor=0d8c, idProduct=0022, bcdDevice= 0.00 [ 949.951343][ T4451] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 949.983048][ T4451] usb 2-1: config 0 descriptor?? [ 950.355992][T12403] xt_l2tp: v2 sid > 0xffff: 262144 [ 950.588255][ T4451] cm6533_jd 0003:0D8C:0022.0014: unknown main item tag 0x0 [ 950.608256][ T4451] cm6533_jd 0003:0D8C:0022.0014: unknown main item tag 0x0 [ 950.626723][ T4451] cm6533_jd 0003:0D8C:0022.0014: unknown main item tag 0x0 [ 950.641169][ T4451] cm6533_jd 0003:0D8C:0022.0014: No inputs registered, leaving [ 950.659584][ T4509] usb 3-1: USB disconnect, device number 28 [ 950.713503][ T4451] cm6533_jd 0003:0D8C:0022.0014: hiddev0,hidraw0: USB HID v0.00 Device [HID 0d8c:0022] on usb-dummy_hcd.1-1/input0 [ 950.873658][ T4451] usb 2-1: USB disconnect, device number 20 [ 950.997768][T12414] MTD: Attempt to mount non-MTD device "/dev/nullb0" [ 951.209652][T12414] cramfs: wrong magic [ 951.756100][T12419] fido_id[12419]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.1/usb2/report_descriptor': No such file or directory [ 952.208981][ T4509] usb 4-1: new high-speed USB device number 20 using dummy_hcd [ 952.398982][ T4509] usb 4-1: Using ep0 maxpacket: 16 [ 952.411927][ T4509] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 952.426349][ T4509] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 952.452829][ T4509] usb 4-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 952.466530][ T4509] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 952.475019][ T4509] usb 4-1: Product: syz [ 952.480122][ T4509] usb 4-1: Manufacturer: syz [ 952.485365][ T4509] usb 4-1: SerialNumber: syz [ 952.743323][ T4509] usb 4-1: 0:2 : does not exist [ 952.761862][ T4509] usb 4-1: 5:0: failed to get current value for ch 0 (-22) [ 952.795781][ T4509] usb 4-1: USB disconnect, device number 20 [ 954.318974][T12450] xt_l2tp: v2 sid > 0xffff: 262144 [ 956.342983][T12464] I/O error, dev loop3, sector 2 op 0x0:(READ) flags 0x800 phys_seg 1 prio class 2 [ 956.376231][T12464] hfsplus: unable to find HFS+ superblock [ 957.674220][T12478] mkiss: ax0: crc mode is auto. [ 958.518118][T12490] xt_l2tp: v2 sid > 0xffff: 262144 [ 959.336379][T12495] kvm: pic: non byte write [ 960.619743][T12506] xt_connbytes: Forcing CT accounting to be enabled [ 960.626607][T12506] Cannot find set identified by id 0 to match [ 964.749316][ T1077] block nbd2: Attempted send on invalid socket [ 964.755884][ T1077] I/O error, dev nbd2, sector 0 op 0x0:(READ) flags 0x800 phys_seg 1 prio class 2 [ 964.782768][T12540] SQUASHFS error: Failed to read block 0x0: -5 [ 964.790332][T12540] unable to read squashfs_super_block [ 964.949840][T12272] usb 4-1: new full-speed USB device number 21 using dummy_hcd [ 965.239696][T12272] usb 4-1: config 150 has an invalid interface number: 204 but max is 1 [ 965.249279][T12272] usb 4-1: config 150 has no interface number 0 [ 965.257534][T12272] usb 4-1: config 150 interface 204 has no altsetting 0 [ 965.268643][T12272] usb 4-1: config 150 interface 1 has no altsetting 0 [ 965.289212][T12272] usb 4-1: New USB device found, idVendor=04e2, idProduct=1424, bcdDevice=c7.eb [ 965.299218][T12272] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 965.318014][T12272] usb 4-1: Product: syz [ 965.324734][T12272] usb 4-1: Manufacturer: syz [ 965.332116][T12272] usb 4-1: SerialNumber: syz [ 965.588613][T12272] xr_serial 4-1:150.204: xr_serial converter detected [ 966.279776][T12272] xr_serial ttyUSB0: Failed to set reg 0x0d: -71 [ 966.294516][T12272] xr_serial: probe of ttyUSB0 failed with error -71 [ 966.321460][T12272] usb 4-1: USB disconnect, device number 21 [ 966.332435][T12272] xr_serial 4-1:150.204: device disconnected [ 967.031513][T12571] I/O error, dev loop0, sector 2 op 0x0:(READ) flags 0x800 phys_seg 1 prio class 2 [ 967.135382][T12571] hfsplus: unable to find HFS+ superblock [ 968.375748][T12539] usb 4-1: new full-speed USB device number 22 using dummy_hcd [ 968.590352][T12539] usb 4-1: config 0 has no interfaces? [ 968.596519][T12539] usb 4-1: New USB device found, idVendor=28bd, idProduct=0935, bcdDevice= 0.00 [ 968.630874][T12539] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 968.655242][T12539] usb 4-1: config 0 descriptor?? [ 968.902039][T12582] netlink: 20 bytes leftover after parsing attributes in process `syz.3.2370'. [ 968.932940][T12582] device vlan2 entered promiscuous mode [ 968.979433][ T4446] usb 4-1: USB disconnect, device number 22 [ 969.018825][T12539] usb 1-1: new high-speed USB device number 22 using dummy_hcd [ 969.502069][T12539] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 969.581551][T12539] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 969.605568][T12539] usb 1-1: New USB device found, idVendor=0d8c, idProduct=0022, bcdDevice= 0.00 [ 969.615813][T12539] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 969.628268][T12539] usb 1-1: config 0 descriptor?? [ 970.047159][T12539] cm6533_jd 0003:0D8C:0022.0015: unknown main item tag 0x0 [ 970.066096][T12539] cm6533_jd 0003:0D8C:0022.0015: unknown main item tag 0x0 [ 970.089858][T12539] cm6533_jd 0003:0D8C:0022.0015: unknown main item tag 0x0 [ 970.127927][T12539] cm6533_jd 0003:0D8C:0022.0015: No inputs registered, leaving [ 970.166775][T12539] cm6533_jd 0003:0D8C:0022.0015: hiddev0,hidraw0: USB HID v0.00 Device [HID 0d8c:0022] on usb-dummy_hcd.0-1/input0 [ 970.249956][T12539] usb 1-1: USB disconnect, device number 22 [ 970.584937][T12604] fido_id[12604]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.0/usb1/report_descriptor': No such file or directory [ 971.042586][T12610] netlink: 40 bytes leftover after parsing attributes in process `syz.1.2378'. [ 971.468818][ T4451] usb 2-1: new full-speed USB device number 21 using dummy_hcd [ 971.670505][ T4451] usb 2-1: config 150 has an invalid interface number: 204 but max is 1 [ 971.746878][ T4451] usb 2-1: config 150 has no interface number 0 [ 971.762030][ T4451] usb 2-1: config 150 interface 204 has no altsetting 0 [ 971.769626][ T4451] usb 2-1: config 150 interface 1 has no altsetting 0 [ 971.784747][ T4451] usb 2-1: New USB device found, idVendor=04e2, idProduct=1424, bcdDevice=c7.eb [ 971.795082][ T4451] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 972.495697][ T4451] usb 2-1: Product: syz [ 972.500072][ T4451] usb 2-1: Manufacturer: syz [ 972.509073][ T4451] usb 2-1: SerialNumber: syz [ 972.729658][ T4451] xr_serial 2-1:150.204: xr_serial converter detected [ 972.997065][ T4500] usb 1-1: new full-speed USB device number 23 using dummy_hcd [ 973.523028][ T4500] usb 1-1: config 0 has no interfaces? [ 973.529019][ T4500] usb 1-1: New USB device found, idVendor=28bd, idProduct=0935, bcdDevice= 0.00 [ 973.540209][ T4451] xr_serial ttyUSB0: Failed to set reg 0x0c: -71 [ 973.540749][ T4500] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 973.546805][ T4451] xr_serial: probe of ttyUSB0 failed with error -71 [ 973.563288][ T4500] usb 1-1: config 0 descriptor?? [ 973.663342][ T4451] usb 2-1: USB disconnect, device number 21 [ 973.678533][ T4451] xr_serial 2-1:150.204: device disconnected [ 974.529616][T12630] netlink: 20 bytes leftover after parsing attributes in process `syz.0.2387'. [ 974.651925][T12630] device vlan3 entered promiscuous mode [ 974.678967][T12630] device bridge0 entered promiscuous mode [ 974.757071][ T4446] usb 1-1: USB disconnect, device number 23 [ 974.761908][T12648] netlink: 24 bytes leftover after parsing attributes in process `syz.1.2391'. [ 975.499794][T12661] xt_l2tp: v2 sid > 0xffff: 262144 [ 978.184584][T12685] netlink: 24 bytes leftover after parsing attributes in process `syz.4.2405'. [ 978.416728][T12691] netlink: 28 bytes leftover after parsing attributes in process `syz.0.2406'. [ 980.908916][ T4500] usb 2-1: new high-speed USB device number 22 using dummy_hcd [ 981.036166][ T8698] usb 5-1: new high-speed USB device number 39 using dummy_hcd [ 981.095358][ T1077] block nbd3: Attempted send on invalid socket [ 981.107585][ T1077] I/O error, dev nbd3, sector 0 op 0x0:(READ) flags 0x800 phys_seg 1 prio class 2 [ 981.143312][T12721] SQUASHFS error: Failed to read block 0x0: -5 [ 981.150243][T12721] unable to read squashfs_super_block [ 981.201497][ T4500] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 981.221924][ T4500] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 981.281319][ T4500] usb 2-1: New USB device found, idVendor=0d8c, idProduct=0022, bcdDevice= 0.00 [ 981.293769][ T4500] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 981.333324][ T4500] usb 2-1: config 0 descriptor?? [ 981.418076][ T8698] usb 5-1: Using ep0 maxpacket: 16 [ 981.434165][ T8698] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 981.548193][ T8698] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 981.637010][ T8698] usb 5-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 981.770602][ T8698] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 981.779655][ T8698] usb 5-1: Product: syz [ 981.784237][ T8698] usb 5-1: Manufacturer: syz [ 981.789029][ T8698] usb 5-1: SerialNumber: syz [ 981.847616][ T4500] cm6533_jd 0003:0D8C:0022.0016: unknown main item tag 0x0 [ 981.858634][ T4500] cm6533_jd 0003:0D8C:0022.0016: unknown main item tag 0x0 [ 981.904054][ T4500] input: HID 0d8c:0022 as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/0003:0D8C:0022.0016/input/input13 [ 981.956357][ T4500] cm6533_jd 0003:0D8C:0022.0016: input,hiddev0,hidraw0: USB HID v0.00 Device [HID 0d8c:0022] on usb-dummy_hcd.1-1/input0 [ 982.003738][ T8698] usb 5-1: 0:2 : does not exist [ 982.042323][ T4500] usb 2-1: USB disconnect, device number 22 [ 982.067923][ T8698] usb 5-1: 5:0: failed to get current value for ch 0 (-22) [ 982.171595][ T8698] usb 5-1: USB disconnect, device number 39 [ 982.409905][T12736] I/O error, dev loop3, sector 2 op 0x0:(READ) flags 0x800 phys_seg 1 prio class 2 [ 983.111528][T10529] udevd[10529]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 983.157310][T12736] hfsplus: unable to find HFS+ superblock [ 983.641793][T12733] fido_id[12733]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.1/usb2/report_descriptor': No such file or directory [ 985.778171][T12756] netlink: 28 bytes leftover after parsing attributes in process `syz.3.2424'. [ 986.709638][T12772] xt_l2tp: v2 sid > 0xffff: 262144 [ 987.814527][T12780] netlink: 16 bytes leftover after parsing attributes in process `syz.1.2431'. [ 988.117112][T12770] xt_recent: hitcount (16385) is larger than allowed maximum (255) [ 988.398643][ T4446] usb 3-1: new high-speed USB device number 29 using dummy_hcd [ 988.682588][ T9231] Bluetooth: (null): Invalid header checksum [ 988.696521][ T9231] Bluetooth: (null): Invalid header checksum [ 988.879624][ T4446] usb 3-1: Using ep0 maxpacket: 16 [ 988.899195][ T4446] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 988.927807][ T4446] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 988.963674][ T4446] usb 3-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 988.993447][ T4446] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 989.023247][ T4446] usb 3-1: Product: syz [ 989.042429][ T4446] usb 3-1: Manufacturer: syz [ 989.055685][ T4446] usb 3-1: SerialNumber: syz [ 989.303784][ T4446] usb 3-1: 0:2 : does not exist [ 989.306292][T12793] loop4: detected capacity change from 0 to 2048 [ 989.337153][ T4446] usb 3-1: 5:0: failed to get current value for ch 0 (-22) [ 989.424465][ T4446] usb 3-1: USB disconnect, device number 29 [ 989.434846][T12793] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none. [ 989.470643][T12793] EXT4-fs (loop4): unmounting filesystem. [ 989.774960][T10529] udevd[10529]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 990.076361][T12798] lo speed is unknown, defaulting to 1000 [ 992.121685][T12818] xt_l2tp: v2 sid > 0xffff: 262144 [ 992.363383][T12822] netlink: 16 bytes leftover after parsing attributes in process `syz.4.2444'. [ 992.722683][T12828] binder: 12827:12828 ioctl c0306201 200000001440 returned -11 [ 992.920762][ T8698] usb 5-1: new full-speed USB device number 40 using dummy_hcd [ 993.154902][ T8698] usb 5-1: config 0 has no interfaces? [ 993.185232][ T8698] usb 5-1: New USB device found, idVendor=28bd, idProduct=0935, bcdDevice= 0.00 [ 993.219483][ T8698] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 993.312799][ T8698] usb 5-1: config 0 descriptor?? [ 993.446974][ T1274] ieee802154 phy0 wpan0: encryption failed: -22 [ 993.453467][ T1274] ieee802154 phy1 wpan1: encryption failed: -22 [ 993.584531][T12826] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2446'. [ 993.656733][T12826] device vlan2 entered promiscuous mode [ 993.694715][T12826] device bridge0 entered promiscuous mode [ 993.747319][ T8698] usb 5-1: USB disconnect, device number 40 [ 995.968832][T12836] xt_recent: hitcount (16385) is larger than allowed maximum (255) [ 998.147290][T12862] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2458'. [ 998.298915][T12860] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2457'. [ 1001.002853][T12889] MTD: Attempt to mount non-MTD device "/dev/nullb0" [ 1001.081876][T12889] cramfs: wrong magic [ 1003.162183][T12905] tmpfs: Unknown parameter 'grpquota' [ 1003.851735][T12915] xt_l2tp: v2 sid > 0xffff: 262144 [ 1005.412968][T12917] xt_recent: hitcount (16385) is larger than allowed maximum (255) [ 1005.867312][T12930] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2476'. [ 1005.963207][ T4451] usb 1-1: new high-speed USB device number 24 using dummy_hcd [ 1006.200145][ T4451] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1006.226136][ T4451] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1006.258438][ T4451] usb 1-1: New USB device found, idVendor=0d8c, idProduct=0022, bcdDevice= 0.00 [ 1009.452130][ T4451] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1009.476558][ T4451] usb 1-1: config 0 descriptor?? [ 1009.514166][ T4451] usb 1-1: can't set config #0, error -71 [ 1009.531174][ T4451] usb 1-1: USB disconnect, device number 24 [ 1011.693444][T12970] device veth0 entered promiscuous mode [ 1011.714924][T12539] usb 3-1: new high-speed USB device number 30 using dummy_hcd [ 1011.930245][T12539] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1011.965261][T12539] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1011.977065][T12539] usb 3-1: New USB device found, idVendor=0d8c, idProduct=0022, bcdDevice= 0.00 [ 1012.029228][T12539] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1013.000365][T12539] usb 3-1: config 0 descriptor?? [ 1013.011192][T12963] device veth0 left promiscuous mode [ 1013.197245][T12982] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2492'. [ 1013.472562][T12539] cm6533_jd 0003:0D8C:0022.0017: unknown main item tag 0x0 [ 1013.493760][T12539] cm6533_jd 0003:0D8C:0022.0017: unknown main item tag 0x0 [ 1013.520121][T12539] input: HID 0d8c:0022 as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/0003:0D8C:0022.0017/input/input14 [ 1013.584986][T12539] cm6533_jd 0003:0D8C:0022.0017: input,hiddev0,hidraw0: USB HID v0.00 Device [HID 0d8c:0022] on usb-dummy_hcd.2-1/input0 [ 1013.720803][T12539] usb 3-1: USB disconnect, device number 30 [ 1013.956594][T12992] fido_id[12992]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.2/usb3/report_descriptor': No such file or directory [ 1013.988501][T12993] I/O error, dev loop3, sector 2 op 0x0:(READ) flags 0x800 phys_seg 1 prio class 2 [ 1014.072544][T12993] hfsplus: unable to find HFS+ superblock [ 1019.455137][T13038] netlink: 128 bytes leftover after parsing attributes in process `syz.2.2506'. [ 1019.465079][T13038] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2506'. [ 1020.666226][ T4500] usb 4-1: new high-speed USB device number 23 using dummy_hcd [ 1020.889221][ T4500] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1020.913700][ T4500] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1020.966216][ T4500] usb 4-1: New USB device found, idVendor=0d8c, idProduct=0022, bcdDevice= 0.00 [ 1021.018435][ T4500] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1021.053344][ T4500] usb 4-1: config 0 descriptor?? [ 1021.529589][T13058] netlink: 28 bytes leftover after parsing attributes in process `syz.4.2513'. [ 1021.674114][ T4500] cm6533_jd 0003:0D8C:0022.0018: unknown main item tag 0x0 [ 1021.874952][ T4500] cm6533_jd 0003:0D8C:0022.0018: unknown main item tag 0x0 [ 1022.385449][ T4500] input: HID 0d8c:0022 as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/0003:0D8C:0022.0018/input/input15 [ 1022.403873][ T4500] cm6533_jd 0003:0D8C:0022.0018: input,hiddev0,hidraw0: USB HID v0.00 Device [HID 0d8c:0022] on usb-dummy_hcd.3-1/input0 [ 1022.434754][ T4500] usb 4-1: USB disconnect, device number 23 [ 1023.269129][T13059] fido_id[13059]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.3/usb4/report_descriptor': No such file or directory [ 1029.332876][ T4500] usb 1-1: new high-speed USB device number 25 using dummy_hcd [ 1029.536167][ T4500] usb 1-1: Using ep0 maxpacket: 16 [ 1029.549525][ T4500] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1029.575282][ T4500] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 1029.626090][ T4500] usb 1-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 1029.663604][ T4500] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1029.721223][ T4500] usb 1-1: Product: syz [ 1029.741598][ T4500] usb 1-1: Manufacturer: syz [ 1029.750559][ T4500] usb 1-1: SerialNumber: syz [ 1029.825512][T13118] xt_l2tp: v2 sid > 0xffff: 262144 [ 1030.000363][ T4500] usb 1-1: 0:2 : does not exist [ 1030.095489][ T4500] usb 1-1: 5:0: failed to get current value for ch 0 (-22) [ 1030.103078][ T4451] usb 3-1: new high-speed USB device number 31 using dummy_hcd [ 1030.147844][ T4500] usb 1-1: USB disconnect, device number 25 [ 1030.174261][T10529] udevd[10529]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1030.295405][ T4451] usb 3-1: Using ep0 maxpacket: 16 [ 1030.315995][ T4451] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1030.326906][ T4451] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 1030.481647][ T4451] usb 3-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 1030.492694][ T4451] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1030.841742][ T4451] usb 3-1: Product: syz [ 1030.846139][ T4451] usb 3-1: Manufacturer: syz [ 1030.900458][ T4451] usb 3-1: SerialNumber: syz [ 1031.614962][ T4451] usb 3-1: 0:2 : does not exist [ 1031.646661][ T4451] usb 3-1: 5:0: failed to get current value for ch 0 (-22) [ 1031.820584][ T4451] usb 3-1: USB disconnect, device number 31 [ 1031.901299][T10529] udevd[10529]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1033.005988][ T26] audit: type=1326 audit(1749706269.476:234): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13129 comm="syz.4.2536" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f96c098e929 code=0x7fc00000 [ 1033.033645][T13142] device veth0 entered promiscuous mode [ 1033.293352][ T26] audit: type=1326 audit(1749706269.504:235): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13129 comm="syz.4.2536" exe="/root/syz-executor" sig=0 arch=c000003e syscall=10 compat=0 ip=0x7f96c098e929 code=0x7fc00000 [ 1033.319290][ T26] audit: type=1326 audit(1749706269.504:236): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13129 comm="syz.4.2536" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f96c098e929 code=0x7fc00000 [ 1033.347625][ T26] audit: type=1326 audit(1749706269.504:237): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13129 comm="syz.4.2536" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f96c098e929 code=0x7fc00000 [ 1033.406095][ T26] audit: type=1326 audit(1749706269.504:238): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13129 comm="syz.4.2536" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f96c098e929 code=0x7fc00000 [ 1033.428681][ T26] audit: type=1326 audit(1749706269.504:239): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13129 comm="syz.4.2536" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f96c098e929 code=0x7fc00000 [ 1033.452222][ T26] audit: type=1326 audit(1749706269.504:240): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13129 comm="syz.4.2536" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f96c098e929 code=0x7fc00000 [ 1033.485085][T13136] device veth0 left promiscuous mode [ 1033.618022][T13149] netlink: 128 bytes leftover after parsing attributes in process `syz.0.2541'. [ 1033.638501][ T26] audit: type=1326 audit(1749706269.504:241): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13129 comm="syz.4.2536" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f96c098e929 code=0x7fc00000 [ 1033.678284][T13149] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2541'. [ 1033.728843][ T26] audit: type=1326 audit(1749706269.504:242): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13129 comm="syz.4.2536" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f96c098e929 code=0x7fc00000 [ 1033.780258][ T26] audit: type=1326 audit(1749706269.504:243): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13129 comm="syz.4.2536" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f96c098e929 code=0x7fc00000 [ 1033.996450][ T4446] usb 5-1: new high-speed USB device number 41 using dummy_hcd [ 1034.231462][ T4446] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1034.430470][ T4446] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1034.584628][ T4446] usb 5-1: New USB device found, idVendor=0d8c, idProduct=0022, bcdDevice= 0.00 [ 1034.717817][ T4446] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1034.827839][ T125] usb 1-1: new high-speed USB device number 26 using dummy_hcd [ 1034.897087][ T4446] usb 5-1: config 0 descriptor?? [ 1035.030968][ T125] usb 1-1: Using ep0 maxpacket: 16 [ 1035.050370][ T125] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1035.071920][ T125] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 1035.094362][ T125] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 1035.137971][ T125] usb 1-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 1035.176395][ T125] usb 1-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 1035.363920][ T4446] cm6533_jd 0003:0D8C:0022.0019: unknown main item tag 0x0 [ 1035.372295][ T4446] cm6533_jd 0003:0D8C:0022.0019: unknown main item tag 0x0 [ 1035.404503][ T4446] input: HID 0d8c:0022 as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/0003:0D8C:0022.0019/input/input16 [ 1035.712140][ T125] usb 1-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 1035.714252][ T4446] cm6533_jd 0003:0D8C:0022.0019: input,hiddev0,hidraw0: USB HID v0.00 Device [HID 0d8c:0022] on usb-dummy_hcd.4-1/input0 [ 1035.799825][ T125] usb 1-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 1035.827141][ T125] usb 1-1: Manufacturer: syz [ 1035.853441][ T125] usb 1-1: config 0 descriptor?? [ 1035.893033][ T4509] usb 5-1: USB disconnect, device number 41 [ 1036.000295][T13178] fido_id[13178]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.4/usb5/report_descriptor': No such file or directory [ 1036.335536][ T4500] usb 2-1: new high-speed USB device number 23 using dummy_hcd [ 1036.720192][ T125] rc_core: IR keymap rc-hauppauge not found [ 1036.727240][ T125] Registered IR keymap rc-empty [ 1036.748258][ T125] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 1036.791845][ T4500] usb 2-1: config 0 has an invalid interface number: 187 but max is 0 [ 1036.803275][ T4500] usb 2-1: config 0 has no interface number 0 [ 1036.815655][ T125] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 1036.823174][ T4500] usb 2-1: config 0 interface 187 altsetting 0 bulk endpoint 0x6 has invalid maxpacket 1023 [ 1036.862228][ T125] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX (2040:b138) as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/rc/rc0 [ 1036.886336][ T4500] usb 2-1: New USB device found, idVendor=0c72, idProduct=000c, bcdDevice=22.4e [ 1036.904199][ T125] input: Conexant Hybrid TV (cx231xx) MCE IR no TX (2040:b138) as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/rc/rc0/input17 [ 1036.921614][ T4500] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1036.990884][ T4500] usb 2-1: Product: syz [ 1037.007706][ T4500] usb 2-1: Manufacturer: syz [ 1037.429637][T13196] tmpfs: Unknown parameter 'usrquota' [ 1037.572683][ T4500] usb 2-1: SerialNumber: syz [ 1037.580095][ T125] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 1037.959229][T13200] xt_l2tp: v2 sid > 0xffff: 262144 [ 1037.964076][ T4500] usb 2-1: config 0 descriptor?? [ 1037.971017][T13182] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 1038.061858][ T125] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 1038.111270][ T125] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 1038.153466][ T125] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 1038.195557][ T125] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 1038.251768][ T125] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 1038.292113][ T125] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 1038.345115][ T125] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 1038.387897][ T125] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 1038.914051][ T125] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 1038.960853][ T125] mceusb 1-1:0.0: Registered with mce emulator interface version 1 [ 1038.979315][T13210] device veth0 entered promiscuous mode [ 1038.991219][ T125] mceusb 1-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active) [ 1039.045631][ T125] usb 1-1: USB disconnect, device number 26 [ 1039.251919][T13202] device veth0 left promiscuous mode [ 1040.048428][ T4451] usb 2-1: USB disconnect, device number 23 [ 1040.168279][T13225] netlink: 224 bytes leftover after parsing attributes in process `syz.1.2562'. [ 1041.280600][T13230] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2564'. [ 1041.338129][T13234] netlink: 28 bytes leftover after parsing attributes in process `syz.0.2564'. [ 1041.725598][ T4500] usb 4-1: new high-speed USB device number 24 using dummy_hcd [ 1042.397983][ T4500] usb 4-1: Using ep0 maxpacket: 16 [ 1042.412203][ T4500] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1042.477811][ T4500] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 1042.562211][ T4500] usb 4-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 1042.578926][ T4500] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1042.587022][ T4500] usb 4-1: Product: syz [ 1042.597931][ T4500] usb 4-1: Manufacturer: syz [ 1042.610543][ T4500] usb 4-1: SerialNumber: syz [ 1042.862169][ T4500] usb 4-1: 0:2 : does not exist [ 1043.009470][ T4500] usb 4-1: 5:0: failed to get current value for ch 0 (-22) [ 1043.050415][ T4500] usb 4-1: USB disconnect, device number 24 [ 1043.871637][T13249] device veth0 entered promiscuous mode [ 1044.057117][T13248] device veth0 left promiscuous mode [ 1044.076210][T10529] udevd[10529]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1044.176636][T13240] syz.1.2566 (13240) used greatest stack depth: 17952 bytes left [ 1045.657479][ T4446] usb 5-1: new high-speed USB device number 42 using dummy_hcd [ 1046.226300][ T4446] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1046.252868][ T4446] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1046.279021][ T4446] usb 5-1: New USB device found, idVendor=0d8c, idProduct=0022, bcdDevice= 0.00 [ 1046.294278][ T4446] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1047.325600][ T4446] usb 5-1: config 0 descriptor?? [ 1048.363641][ T4446] cm6533_jd 0003:0D8C:0022.001A: unknown main item tag 0x0 [ 1048.371214][ T4446] cm6533_jd 0003:0D8C:0022.001A: unknown main item tag 0x0 [ 1048.390633][ T4446] input: HID 0d8c:0022 as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/0003:0D8C:0022.001A/input/input18 [ 1048.454561][ T4446] cm6533_jd 0003:0D8C:0022.001A: input,hiddev0,hidraw0: USB HID v0.00 Device [HID 0d8c:0022] on usb-dummy_hcd.4-1/input0 [ 1048.607842][ T4500] usb 5-1: USB disconnect, device number 42 [ 1049.643585][T13296] fido_id[13296]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.4/usb5/report_descriptor': No such file or directory [ 1049.867321][T13305] device veth0 entered promiscuous mode [ 1049.987155][T12539] usb 2-1: new high-speed USB device number 24 using dummy_hcd [ 1050.240452][T12539] usb 2-1: Using ep0 maxpacket: 16 [ 1050.313824][ T1077] block nbd4: Attempted send on invalid socket [ 1050.320790][ T1077] I/O error, dev nbd4, sector 0 op 0x0:(READ) flags 0x800 phys_seg 1 prio class 2 [ 1050.349126][T13308] SQUASHFS error: Failed to read block 0x0: -5 [ 1050.355958][T13308] unable to read squashfs_super_block [ 1050.416615][T12539] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1050.434022][T12539] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 1050.462027][T12539] usb 2-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 1050.824589][T12539] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1050.877604][T13303] device veth0 left promiscuous mode [ 1050.885136][T12539] usb 2-1: Product: syz [ 1050.913865][T12539] usb 2-1: Manufacturer: syz [ 1050.945333][T12539] usb 2-1: SerialNumber: syz [ 1051.215510][T12539] usb 2-1: 0:2 : does not exist [ 1051.231256][T12539] usb 2-1: 5:0: failed to get current value for ch 0 (-22) [ 1051.290680][T12539] usb 2-1: USB disconnect, device number 24 [ 1051.624644][T13317] I/O error, dev loop0, sector 2 op 0x0:(READ) flags 0x800 phys_seg 1 prio class 2 [ 1051.635399][T13317] hfsplus: unable to find HFS+ superblock [ 1053.323417][T10529] udevd[10529]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1056.358145][T13357] device veth0 entered promiscuous mode [ 1056.995662][T13354] device veth0 left promiscuous mode [ 1058.022099][T13372] binder_alloc: 13369: binder_alloc_buf, no vma [ 1058.092478][T13372] binder: 13369:13372 ioctl c0306201 200000001440 returned -11 [ 1058.433011][ T128] usb 2-1: new high-speed USB device number 25 using dummy_hcd [ 1058.828597][ T128] usb 2-1: Using ep0 maxpacket: 16 [ 1058.893095][ T128] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1058.938716][ T128] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 1059.006594][ T128] usb 2-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 1059.125365][ T128] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1059.131975][ T1274] ieee802154 phy0 wpan0: encryption failed: -22 [ 1059.140096][ T1274] ieee802154 phy1 wpan1: encryption failed: -22 [ 1059.285491][ T128] usb 2-1: Product: syz [ 1059.290496][ T128] usb 2-1: Manufacturer: syz [ 1059.295316][ T128] usb 2-1: SerialNumber: syz [ 1060.135009][ T128] usb 2-1: 0:2 : does not exist [ 1060.301846][ T128] usb 2-1: 5:0: failed to get current value for ch 0 (-22) [ 1060.359246][ T128] usb 2-1: USB disconnect, device number 25 [ 1060.982325][T10529] udevd[10529]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1062.299696][T13417] 8021q: adding VLAN 0 to HW filter on device bond7 [ 1062.308896][T13417] netlink: 28 bytes leftover after parsing attributes in process `syz.4.2616'. [ 1063.186219][T13417] bond7 (unregistering): Released all slaves [ 1064.638276][T13439] vcan0: tx drop: invalid da for name 0x00000000000000c7 [ 1066.708793][ T8698] usb 3-1: new high-speed USB device number 32 using dummy_hcd [ 1066.910478][ T8698] usb 3-1: Using ep0 maxpacket: 16 [ 1066.933279][ T8698] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1067.019461][ T8698] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 1067.077961][ T8698] usb 3-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 1067.121824][ T8698] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1067.697248][ T8698] usb 3-1: Product: syz [ 1067.736408][ T8698] usb 3-1: Manufacturer: syz [ 1067.747843][ T8698] usb 3-1: SerialNumber: syz [ 1067.991328][ T8698] usb 3-1: 0:2 : does not exist [ 1068.049727][ T8698] usb 3-1: 5:0: failed to get current value for ch 0 (-22) [ 1068.057378][T12539] usb 4-1: new high-speed USB device number 25 using dummy_hcd [ 1068.289783][T12539] usb 4-1: Using ep0 maxpacket: 32 [ 1068.392263][T12539] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x4 has an invalid bInterval 52, changing to 7 [ 1068.476663][T12539] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x4 has invalid maxpacket 9272, setting to 1024 [ 1068.511927][ T8698] usb 3-1: USB disconnect, device number 32 [ 1068.569435][T12539] usb 4-1: New USB device found, idVendor=13b1, idProduct=0042, bcdDevice=58.16 [ 1068.610168][T12539] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1068.659769][T12539] usb 4-1: Product: syz [ 1068.674598][T12539] usb 4-1: Manufacturer: syz [ 1068.715401][T12539] usb 4-1: SerialNumber: syz [ 1068.729185][T12539] usb 4-1: config 0 descriptor?? [ 1068.760637][T12539] usb 4-1: Warning: ath10k USB support is incomplete, don't expect anything to work! [ 1068.814409][T10529] udevd[10529]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1068.934572][T13477] ALSA: mixer_oss: invalid OSS volume 'ިc">#a6\9/[\' [ 1069.024311][T12007] usb 4-1: Failed to submit usb control message: -71 [ 1069.026137][ T8698] usb 4-1: USB disconnect, device number 25 [ 1069.032921][T12007] usb 4-1: unable to send the bmi data to the device: -71 [ 1069.046310][T13477] ALSA: mixer_oss: invalid OSS volume 'F4|׃|t@' [ 1069.054805][T12007] usb 4-1: unable to get target info from device [ 1069.063086][T12007] usb 4-1: could not get target info (-71) [ 1069.065374][T13477] ALSA: mixer_oss: invalid OSS volume 'GJJ³ 0xffff: 262144 [ 1092.086847][ T125] usb 5-1: Using ep0 maxpacket: 16 [ 1092.099458][ T125] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1092.167413][ T125] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 1092.215170][ T8698] usb 3-1: new high-speed USB device number 34 using dummy_hcd [ 1092.243981][ T125] usb 5-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 1092.277336][ T125] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1092.308102][ T125] usb 5-1: Product: syz [ 1092.325135][ T125] usb 5-1: Manufacturer: syz [ 1092.345738][ T125] usb 5-1: SerialNumber: syz [ 1092.454611][ T8698] usb 3-1: New USB device found, idVendor=0813, idProduct=0001, bcdDevice=3a.08 [ 1092.498884][ T8698] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1092.600999][ T8698] usb 3-1: config 0 descriptor?? [ 1092.618535][ T125] usb 5-1: 0:2 : does not exist [ 1092.699809][ T125] usb 5-1: 5:0: failed to get current value for ch 0 (-22) [ 1092.747478][ T8698] gspca_main: cpia1-2.14.0 probing 0813:0001 [ 1092.892489][ T125] usb 5-1: USB disconnect, device number 44 [ 1093.153545][ T8698] cpia1 3-1:0.0: unexpected state after lo power cmd: 00 [ 1093.221332][T10529] udevd[10529]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1093.635647][ T8698] gspca_cpia1: usb_control_msg 02, error -71 [ 1093.664673][T13687] netlink: 128 bytes leftover after parsing attributes in process `syz.1.2689'. [ 1093.674267][T13687] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2689'. [ 1094.026578][ T8698] cpia1 3-1:0.0: only firmware version 1 is supported (got: 0) [ 1094.060363][ T8698] usb 3-1: USB disconnect, device number 34 [ 1094.483542][T13692] I/O error, dev loop4, sector 2 op 0x0:(READ) flags 0x800 phys_seg 1 prio class 2 [ 1094.493832][T13692] hfsplus: unable to find HFS+ superblock [ 1097.507261][T13713] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1097.550707][T13713] device batadv_slave_0 entered promiscuous mode [ 1097.573320][ T125] usb 5-1: new high-speed USB device number 45 using dummy_hcd [ 1097.794769][ T125] usb 5-1: Using ep0 maxpacket: 32 [ 1097.802451][ T125] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x4 has an invalid bInterval 52, changing to 7 [ 1098.327931][ T125] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x4 has invalid maxpacket 9272, setting to 1024 [ 1098.374061][ T125] usb 5-1: New USB device found, idVendor=13b1, idProduct=0042, bcdDevice=58.16 [ 1098.383290][ T125] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1098.403965][ T125] usb 5-1: Product: syz [ 1098.408447][ T125] usb 5-1: Manufacturer: syz [ 1098.416881][ T125] usb 5-1: SerialNumber: syz [ 1098.432774][ T125] usb 5-1: config 0 descriptor?? [ 1098.458124][ T125] usb 5-1: Warning: ath10k USB support is incomplete, don't expect anything to work! [ 1098.515053][T13724] xt_CT: No such helper "snmp" [ 1098.722543][T13735] overlayfs: missing 'lowerdir' [ 1099.593499][ T9] usb 5-1: Failed to submit usb control message: -110 [ 1099.601109][ T9] usb 5-1: unable to send the bmi data to the device: -110 [ 1099.609574][ T125] usb 5-1: USB disconnect, device number 45 [ 1099.660552][ T9] usb 5-1: unable to get target info from device [ 1099.677359][ T4508] usb 2-1: new high-speed USB device number 26 using dummy_hcd [ 1099.684147][ T9] usb 5-1: could not get target info (-110) [ 1099.714651][T13737] tipc: Enabling of bearer rejected, failed to enable media [ 1099.724388][ T9] usb 5-1: could not probe fw (-110) [ 1099.837644][T13740] I/O error, dev loop0, sector 2 op 0x0:(READ) flags 0x800 phys_seg 1 prio class 2 [ 1099.847486][T13740] hfsplus: unable to find HFS+ superblock [ 1099.925426][ T4508] usb 2-1: New USB device found, idVendor=0813, idProduct=0001, bcdDevice=3a.08 [ 1100.808809][ T4508] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1100.831147][ T4508] usb 2-1: config 0 descriptor?? [ 1100.856056][ T4508] gspca_main: cpia1-2.14.0 probing 0813:0001 [ 1101.753133][ T4508] cpia1 2-1:0.0: unexpected state after lo power cmd: 01 [ 1102.253279][ T4508] gspca_cpia1: usb_control_msg 02, error -71 [ 1102.266213][ T4508] gspca_cpia1: usb_control_msg 05, error -71 [ 1102.788145][ T4508] cpia1 2-1:0.0: unexpected systemstate: 01 [ 1102.820768][ T4508] usb 2-1: USB disconnect, device number 26 [ 1104.376000][T13772] netlink: 128 bytes leftover after parsing attributes in process `syz.4.2717'. [ 1104.387474][T13772] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2717'. [ 1105.685237][ T4500] usb 3-1: new high-speed USB device number 35 using dummy_hcd [ 1105.685300][ T125] usb 1-1: new high-speed USB device number 30 using dummy_hcd [ 1105.900760][ T4500] usb 3-1: config 0 has an invalid interface number: 187 but max is 0 [ 1106.689385][ T4500] usb 3-1: config 0 has no interface number 0 [ 1106.696613][ T4500] usb 3-1: config 0 interface 187 altsetting 0 bulk endpoint 0x6 has invalid maxpacket 1023 [ 1106.719193][ T4500] usb 3-1: New USB device found, idVendor=0c72, idProduct=000c, bcdDevice=22.4e [ 1106.746974][ T4500] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1106.755636][ T4500] usb 3-1: Product: syz [ 1106.760006][ T4500] usb 3-1: Manufacturer: syz [ 1106.764691][ T4500] usb 3-1: SerialNumber: syz [ 1106.778887][ T4500] usb 3-1: config 0 descriptor?? [ 1106.785702][T13779] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 1106.981262][ T125] usb 1-1: Using ep0 maxpacket: 32 [ 1107.779614][ T125] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x4 has an invalid bInterval 52, changing to 7 [ 1107.820401][ T125] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x4 has invalid maxpacket 9272, setting to 1024 [ 1108.662582][ T125] usb 1-1: string descriptor 0 read error: -71 [ 1108.672025][ T125] usb 1-1: New USB device found, idVendor=13b1, idProduct=0042, bcdDevice=58.16 [ 1108.830505][ T125] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1108.959175][ T125] usb 1-1: config 0 descriptor?? [ 1109.262270][ T125] usb 1-1: can't set config #0, error -71 [ 1109.269928][ T125] usb 1-1: USB disconnect, device number 30 [ 1109.896946][ T4500] usb 3-1: USB disconnect, device number 35 [ 1110.864295][T13820] netlink: 128 bytes leftover after parsing attributes in process `syz.3.2730'. [ 1110.907849][T13820] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2730'. [ 1110.958777][ T1077] block nbd0: Attempted send on invalid socket [ 1111.079704][ T1077] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x800 phys_seg 1 prio class 2 [ 1111.094893][T13814] SQUASHFS error: Failed to read block 0x0: -5 [ 1111.101529][T13814] unable to read squashfs_super_block [ 1111.177750][T13823] IPVS: ip_vs_add_dest(): server weight less than zero [ 1112.051636][T13830] netlink: 'syz.0.2734': attribute type 1 has an invalid length. [ 1112.101407][T13830] 8021q: adding VLAN 0 to HW filter on device bond3 [ 1112.238811][T13830] netlink: 28 bytes leftover after parsing attributes in process `syz.0.2734'. [ 1113.427358][T13844] netlink: 48 bytes leftover after parsing attributes in process `syz.4.2736'. [ 1114.176277][T13852] xt_l2tp: v2 sid > 0xffff: 262144 [ 1114.187246][T13830] bond3 (unregistering): Released all slaves [ 1114.900615][ T4451] usb 2-1: new high-speed USB device number 27 using dummy_hcd [ 1115.167883][ T4451] usb 2-1: Using ep0 maxpacket: 32 [ 1115.212503][ T4508] usb 4-1: new high-speed USB device number 26 using dummy_hcd [ 1115.302892][ T4451] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x4 has an invalid bInterval 52, changing to 7 [ 1115.314234][ T4451] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x4 has invalid maxpacket 9272, setting to 1024 [ 1115.345060][ T4451] usb 2-1: New USB device found, idVendor=13b1, idProduct=0042, bcdDevice=58.16 [ 1115.420057][ T4451] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1115.446564][ T4451] usb 2-1: Product: syz [ 1115.451828][ T4451] usb 2-1: Manufacturer: syz [ 1115.463934][ T4451] usb 2-1: SerialNumber: syz [ 1115.481213][ T4451] usb 2-1: config 0 descriptor?? [ 1115.504926][ T4508] usb 4-1: config 0 has an invalid interface number: 187 but max is 0 [ 1115.545445][ T4508] usb 4-1: config 0 has no interface number 0 [ 1115.558814][ T4451] usb 2-1: Warning: ath10k USB support is incomplete, don't expect anything to work! [ 1115.584871][ T4508] usb 4-1: config 0 interface 187 altsetting 0 bulk endpoint 0x6 has invalid maxpacket 1023 [ 1115.620005][ T4508] usb 4-1: New USB device found, idVendor=0c72, idProduct=000c, bcdDevice=22.4e [ 1115.634293][ T4508] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1115.643132][ T4508] usb 4-1: Product: syz [ 1115.649105][ T4508] usb 4-1: Manufacturer: syz [ 1115.654160][ T4508] usb 4-1: SerialNumber: syz [ 1115.674314][ T4508] usb 4-1: config 0 descriptor?? [ 1115.680771][T13855] raw-gadget.1 gadget.3: fail, usb_ep_enable returned -22 [ 1115.828695][ T5196] usb 2-1: Failed to submit usb control message: -71 [ 1115.844194][ T4508] usb 2-1: USB disconnect, device number 27 [ 1115.852370][ T5196] usb 2-1: unable to send the bmi data to the device: -71 [ 1115.880568][ T5196] usb 2-1: unable to get target info from device [ 1115.880628][ T5196] usb 2-1: could not get target info (-71) [ 1115.880712][ T5196] usb 2-1: could not probe fw (-71) [ 1117.908823][T13872] xt_recent: hitcount (16385) is larger than allowed maximum (255) [ 1117.995399][ T4451] usb 4-1: USB disconnect, device number 26 [ 1118.207581][ T1077] block nbd0: Attempted send on invalid socket [ 1118.214182][ T1077] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x800 phys_seg 1 prio class 2 [ 1118.278929][T13880] SQUASHFS error: Failed to read block 0x0: -5 [ 1118.285364][T13880] unable to read squashfs_super_block [ 1118.604969][T13887] I/O error, dev loop3, sector 2 op 0x0:(READ) flags 0x800 phys_seg 1 prio class 2 [ 1118.615190][T13887] hfsplus: unable to find HFS+ superblock [ 1120.223425][T13895] ALSA: mixer_oss: invalid OSS volume 'ިc">#a6\9/[\' [ 1120.511986][T13895] ALSA: mixer_oss: invalid OSS volume 'F4|׃|t@' [ 1120.521288][T12539] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 1120.522097][T13895] ALSA: mixer_oss: invalid OSS volume 'GJJ³ 0xffff: 262144 [ 1127.673163][T13941] xt_recent: hitcount (16385) is larger than allowed maximum (255) [ 1131.585942][T13982] I/O error, dev loop4, sector 2 op 0x0:(READ) flags 0x800 phys_seg 1 prio class 2 [ 1131.596324][T13982] hfsplus: unable to find HFS+ superblock [ 1134.385095][T14005] device veth0 entered promiscuous mode [ 1134.517869][ T4300] usb 1-1: new full-speed USB device number 31 using dummy_hcd [ 1135.694441][ T4300] usb 1-1: config 0 has no interfaces? [ 1135.700405][ T4300] usb 1-1: New USB device found, idVendor=28bd, idProduct=0935, bcdDevice= 0.00 [ 1135.772568][ T4300] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1135.848000][ T4300] usb 1-1: config 0 descriptor?? [ 1135.900538][T13994] device veth0 left promiscuous mode [ 1136.838867][T14004] netlink: 28 bytes leftover after parsing attributes in process `syz.0.2783'. [ 1136.888581][T14020] device geneve2 entered promiscuous mode [ 1136.904950][T12539] usb 1-1: USB disconnect, device number 31 [ 1137.480710][T14027] netlink: 128 bytes leftover after parsing attributes in process `syz.4.2791'. [ 1137.489900][T14027] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2791'. [ 1137.635294][T14022] xt_recent: hitcount (16385) is larger than allowed maximum (255) [ 1142.176111][T14075] netlink: 128 bytes leftover after parsing attributes in process `syz.1.2803'. [ 1142.185448][T14075] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2803'. [ 1142.236434][ T4508] usb 4-1: new full-speed USB device number 28 using dummy_hcd [ 1142.323988][T14074] device veth0 entered promiscuous mode [ 1142.445009][ T4508] usb 4-1: config 0 has no interfaces? [ 1142.453122][T14062] device veth0 left promiscuous mode [ 1142.466259][ T4508] usb 4-1: New USB device found, idVendor=28bd, idProduct=0935, bcdDevice= 0.00 [ 1142.502134][ T4508] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1142.547501][ T8698] usb 5-1: new high-speed USB device number 46 using dummy_hcd [ 1142.601695][ T4508] usb 4-1: config 0 descriptor?? [ 1142.751494][ T8698] usb 5-1: config 27 has an invalid descriptor of length 0, skipping remainder of the config [ 1142.767370][ T8698] usb 5-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 1142.813774][ T8698] usb 5-1: config 27 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 1142.852521][T14068] netlink: 28 bytes leftover after parsing attributes in process `syz.3.2802'. [ 1142.878564][ T8698] usb 5-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 1142.887684][ T8698] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1142.944689][ T4508] usb 4-1: USB disconnect, device number 28 [ 1142.966061][ T8698] usb 5-1: invalid MIDI out EP 0 [ 1143.238327][ T4270] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 1143.253165][ T4270] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 1143.262854][ T4270] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 1143.271326][ T4270] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 1143.278068][ T8698] snd-usb-audio: probe of 5-1:27.0 failed with error -22 [ 1143.287955][ T4270] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3 [ 1143.295550][ T4270] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 1143.355173][T14086] lo speed is unknown, defaulting to 1000 [ 1143.427858][T10042] udevd[10042]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:27.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1145.080146][ C1] ------------[ cut here ]------------ [ 1145.086485][ C1] refcount_t: addition on 0; use-after-free. [ 1145.093358][ C1] WARNING: CPU: 1 PID: 14102 at lib/refcount.c:25 refcount_warn_saturate+0xff/0x1a0 [ 1145.103016][ C1] Modules linked in: [ 1145.107083][ C1] CPU: 1 PID: 14102 Comm: syz.2.2811 Not tainted 6.1.141-syzkaller #0 [ 1145.115477][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 1145.125785][ C1] RIP: 0010:refcount_warn_saturate+0xff/0x1a0 [ 1145.132005][ C1] Code: 09 01 48 c7 c7 a0 d2 be 8a e8 ad 30 45 fd 0f 0b eb e0 e8 f4 1d 79 fd c6 05 fa 72 e2 09 01 48 c7 c7 e0 d1 be 8a e8 91 30 45 fd <0f> 0b eb c4 e8 d8 1d 79 fd c6 05 df 72 e2 09 01 48 c7 c7 40 d2 be [ 1145.152010][ C1] RSP: 0018:ffffc900001e0828 EFLAGS: 00010246 [ 1145.158272][ C1] RAX: 7099c2e234b6a900 RBX: 0000000000000002 RCX: ffff88802c961dc0 [ 1145.166508][ C1] RDX: 0000000000000100 RSI: 0000000000000000 RDI: 0000000000000002 [ 1145.174638][ C1] RBP: ffffc900001e0990 R08: dffffc0000000000 R09: fffff5200003c095 [ 1145.182933][ C1] R10: fffff5200003c095 R11: 1ffff9200003c094 R12: ffff888073259c40 [ 1145.191062][ C1] R13: dffffc0000000000 R14: 0000000000000002 R15: ffff888057437448 [ 1145.199159][ C1] FS: 00007fbecfdcf6c0(0000) GS:ffff8880b8f00000(0000) knlGS:0000000000000000 [ 1145.208233][ C1] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 1145.215162][ C1] CR2: 0000001b2da16ff8 CR3: 000000005d02c000 CR4: 00000000003506e0 [ 1145.223293][ C1] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 1145.231404][ C1] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 1145.239441][ C1] Call Trace: [ 1145.242837][ C1] [ 1145.245768][ C1] tipc_crypto_xmit+0x17a9/0x2300 [ 1145.250994][ C1] ? tipc_crypto_do_cmd+0xde0/0xde0 [ 1145.256351][ C1] tipc_bearer_xmit_skb+0x242/0x3f0 [ 1145.261737][ C1] ? tipc_bearer_xmit_skb+0xa6/0x3f0 [ 1145.267152][ C1] ? tipc_bearer_min_mtu+0x1c0/0x1c0 [ 1145.272608][ C1] tipc_disc_timeout+0x568/0x6b0 [ 1145.277662][ C1] ? tipc_disc_init_msg+0x570/0x570 [ 1145.283013][ C1] call_timer_fn+0x1a0/0x670 [ 1145.287984][ C1] ? tipc_disc_init_msg+0x570/0x570 [ 1145.293314][ C1] ? call_timer_fn+0xc1/0x670 [ 1145.298195][ C1] ? __run_timers+0x7c0/0x7c0 [ 1145.302971][ C1] ? _raw_spin_unlock_irq+0x1f/0x40 [ 1145.308508][ C1] ? lockdep_hardirqs_on+0x94/0x140 [ 1145.313951][ C1] ? tipc_disc_init_msg+0x570/0x570 [ 1145.319358][ C1] __run_timers+0x525/0x7c0 [ 1145.323946][ C1] ? detach_timer+0x350/0x350 [ 1145.328738][ C1] ? lock_chain_count+0x20/0x20 [ 1145.333722][ C1] run_timer_softirq+0x63/0xf0 [ 1145.338596][ C1] handle_softirqs+0x2a1/0x920 [ 1145.343419][ C1] ? __irq_exit_rcu+0x12f/0x220 [ 1145.348360][ C1] ? do_softirq+0x200/0x200 [ 1145.352932][ C1] __irq_exit_rcu+0x12f/0x220 [ 1145.357664][ C1] ? irq_exit_rcu+0x20/0x20 [ 1145.362267][ C1] irq_exit_rcu+0x5/0x20 [ 1145.366554][ C1] sysvec_apic_timer_interrupt+0xa0/0xc0 [ 1145.372355][ C1] [ 1145.375333][ C1] [ 1145.378289][ C1] asm_sysvec_apic_timer_interrupt+0x16/0x20 [ 1145.384340][ C1] RIP: 0010:kasan_check_range+0xd/0x290 [ 1145.390415][ C1] Code: c3 0f 0b b8 ea ff ff ff c3 0f 0b b8 ea ff ff ff c3 00 00 cc cc 00 00 cc cc 00 00 cc cc b0 01 48 85 f6 0f 84 a4 01 00 00 41 57 <41> 56 53 49 89 f8 49 01 f0 0f 82 57 02 00 00 49 89 f8 49 c1 e8 2f [ 1145.410365][ C1] RSP: 0018:ffffc90003227a50 EFLAGS: 00000202 [ 1145.416595][ C1] RAX: ffffffff88123201 RBX: 0000000000000010 RCX: ffffffff88123231 [ 1145.425855][ C1] RDX: 0000000000000001 RSI: 0000000000000010 RDI: ffffc90003227d70 [ 1145.433939][ C1] RBP: 0000000000000000 R08: 0000000000000000 R09: fffff52000644f63 [ 1145.441961][ C1] R10: fffff52000644f63 R11: 1ffff92000644f5c R12: ffffc90003227d20 [ 1145.450154][ C1] R13: dffffc0000000000 R14: ffffc90003227d70 R15: 1ffff92000644f58 [ 1145.458338][ C1] ? ___sys_recvmsg+0x3e1/0x510 [ 1145.463240][ C1] ? ___sys_recvmsg+0x411/0x510 [ 1145.468199][ C1] memset+0x1e/0x40 [ 1145.472045][ C1] ___sys_recvmsg+0x411/0x510 [ 1145.476820][ C1] ? __sys_recvmsg+0x270/0x270 [ 1145.481652][ C1] ? __lock_acquire+0x7c50/0x7c50 [ 1145.486765][ C1] ? __might_fault+0xc2/0x120 [ 1145.491485][ C1] ? __might_fault+0xa6/0x120 [ 1145.496201][ C1] do_recvmmsg+0x359/0x7d0 [ 1145.500730][ C1] ? __sys_recvmmsg+0x280/0x280 [ 1145.505640][ C1] ? do_futex+0x310/0x320 [ 1145.510060][ C1] ? __lock_acquire+0x7c50/0x7c50 [ 1145.515125][ C1] ? rcu_read_lock_sched_held+0x86/0xf0 [ 1145.520816][ C1] ? __se_sys_futex+0x14a/0x440 [ 1145.525757][ C1] __x64_sys_recvmmsg+0x18d/0x240 [ 1145.531094][ C1] ? do_recvmmsg+0x7d0/0x7d0 [ 1145.535762][ C1] ? lockdep_hardirqs_on+0x94/0x140 [ 1145.541066][ C1] do_syscall_64+0x4c/0xa0 [ 1145.545535][ C1] ? clear_bhb_loop+0x60/0xb0 [ 1145.550257][ C1] ? clear_bhb_loop+0x60/0xb0 [ 1145.555019][ C1] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1145.560969][ C1] RIP: 0033:0x7fbecef8e929 [ 1145.565499][ C1] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1145.585305][ C1] RSP: 002b:00007fbecfdcf038 EFLAGS: 00000246 ORIG_RAX: 000000000000012b [ 1145.593827][ C1] RAX: ffffffffffffffda RBX: 00007fbecf1b6080 RCX: 00007fbecef8e929 [ 1145.602114][ C1] RDX: 0000000000010106 RSI: 00002000000000c0 RDI: 0000000000000006 [ 1145.610160][ C1] RBP: 00007fbecf010b39 R08: 0000000000000000 R09: 0000000000000000 [ 1145.618194][ C1] R10: 0000000000000002 R11: 0000000000000246 R12: 0000000000000000 [ 1145.626316][ C1] R13: 0000000000000000 R14: 00007fbecf1b6080 R15: 00007ffc58aa7c48 [ 1145.634451][ C1] [ 1145.637587][ C1] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 1145.644895][ C1] CPU: 1 PID: 14102 Comm: syz.2.2811 Not tainted 6.1.141-syzkaller #0 [ 1145.653081][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 1145.663174][ C1] Call Trace: [ 1145.666490][ C1] [ 1145.669368][ C1] dump_stack_lvl+0x168/0x22e [ 1145.674113][ C1] ? memcpy+0x3c/0x60 [ 1145.678156][ C1] ? show_regs_print_info+0x12/0x12 [ 1145.683411][ C1] ? load_image+0x3b0/0x3b0 [ 1145.687965][ C1] panic+0x2c9/0x710 [ 1145.691899][ C1] ? bpf_jit_dump+0xd0/0xd0 [ 1145.696458][ C1] __warn+0x2f8/0x4f0 [ 1145.700487][ C1] ? refcount_warn_saturate+0xff/0x1a0 [ 1145.705994][ C1] ? refcount_warn_saturate+0xff/0x1a0 [ 1145.711514][ C1] report_bug+0x2ba/0x4f0 [ 1145.715884][ C1] ? refcount_warn_saturate+0xff/0x1a0 [ 1145.721387][ C1] handle_bug+0x3a/0x70 [ 1145.725585][ C1] exc_invalid_op+0x16/0x40 [ 1145.730136][ C1] asm_exc_invalid_op+0x16/0x20 [ 1145.735135][ C1] RIP: 0010:refcount_warn_saturate+0xff/0x1a0 [ 1145.741375][ C1] Code: 09 01 48 c7 c7 a0 d2 be 8a e8 ad 30 45 fd 0f 0b eb e0 e8 f4 1d 79 fd c6 05 fa 72 e2 09 01 48 c7 c7 e0 d1 be 8a e8 91 30 45 fd <0f> 0b eb c4 e8 d8 1d 79 fd c6 05 df 72 e2 09 01 48 c7 c7 40 d2 be [ 1145.761118][ C1] RSP: 0018:ffffc900001e0828 EFLAGS: 00010246 [ 1145.767333][ C1] RAX: 7099c2e234b6a900 RBX: 0000000000000002 RCX: ffff88802c961dc0 [ 1145.775436][ C1] RDX: 0000000000000100 RSI: 0000000000000000 RDI: 0000000000000002 [ 1145.783546][ C1] RBP: ffffc900001e0990 R08: dffffc0000000000 R09: fffff5200003c095 [ 1145.791583][ C1] R10: fffff5200003c095 R11: 1ffff9200003c094 R12: ffff888073259c40 [ 1145.799689][ C1] R13: dffffc0000000000 R14: 0000000000000002 R15: ffff888057437448 [ 1145.807708][ C1] ? refcount_warn_saturate+0xff/0x1a0 [ 1145.813216][ C1] tipc_crypto_xmit+0x17a9/0x2300 [ 1145.818283][ C1] ? tipc_crypto_do_cmd+0xde0/0xde0 [ 1145.823506][ C1] tipc_bearer_xmit_skb+0x242/0x3f0 [ 1145.828747][ C1] ? tipc_bearer_xmit_skb+0xa6/0x3f0 [ 1145.834186][ C1] ? tipc_bearer_min_mtu+0x1c0/0x1c0 [ 1145.839496][ C1] tipc_disc_timeout+0x568/0x6b0 [ 1145.844455][ C1] ? tipc_disc_init_msg+0x570/0x570 [ 1145.849679][ C1] call_timer_fn+0x1a0/0x670 [ 1145.854298][ C1] ? tipc_disc_init_msg+0x570/0x570 [ 1145.859534][ C1] ? call_timer_fn+0xc1/0x670 [ 1145.864228][ C1] ? __run_timers+0x7c0/0x7c0 [ 1145.868922][ C1] ? _raw_spin_unlock_irq+0x1f/0x40 [ 1145.874138][ C1] ? lockdep_hardirqs_on+0x94/0x140 [ 1145.879347][ C1] ? tipc_disc_init_msg+0x570/0x570 [ 1145.884580][ C1] __run_timers+0x525/0x7c0 [ 1145.889118][ C1] ? detach_timer+0x350/0x350 [ 1145.893819][ C1] ? lock_chain_count+0x20/0x20 [ 1145.898704][ C1] run_timer_softirq+0x63/0xf0 [ 1145.903575][ C1] handle_softirqs+0x2a1/0x920 [ 1145.908363][ C1] ? __irq_exit_rcu+0x12f/0x220 [ 1145.913321][ C1] ? do_softirq+0x200/0x200 [ 1145.917860][ C1] __irq_exit_rcu+0x12f/0x220 [ 1145.922558][ C1] ? irq_exit_rcu+0x20/0x20 [ 1145.927084][ C1] irq_exit_rcu+0x5/0x20 [ 1145.931338][ C1] sysvec_apic_timer_interrupt+0xa0/0xc0 [ 1145.936993][ C1] [ 1145.939930][ C1] [ 1145.942871][ C1] asm_sysvec_apic_timer_interrupt+0x16/0x20 [ 1145.948862][ C1] RIP: 0010:kasan_check_range+0xd/0x290 [ 1145.954533][ C1] Code: c3 0f 0b b8 ea ff ff ff c3 0f 0b b8 ea ff ff ff c3 00 00 cc cc 00 00 cc cc 00 00 cc cc b0 01 48 85 f6 0f 84 a4 01 00 00 41 57 <41> 56 53 49 89 f8 49 01 f0 0f 82 57 02 00 00 49 89 f8 49 c1 e8 2f [ 1145.974236][ C1] RSP: 0018:ffffc90003227a50 EFLAGS: 00000202 [ 1145.980324][ C1] RAX: ffffffff88123201 RBX: 0000000000000010 RCX: ffffffff88123231 [ 1145.988308][ C1] RDX: 0000000000000001 RSI: 0000000000000010 RDI: ffffc90003227d70 [ 1145.996288][ C1] RBP: 0000000000000000 R08: 0000000000000000 R09: fffff52000644f63 [ 1146.004285][ C1] R10: fffff52000644f63 R11: 1ffff92000644f5c R12: ffffc90003227d20 [ 1146.012286][ C1] R13: dffffc0000000000 R14: ffffc90003227d70 R15: 1ffff92000644f58 [ 1146.020292][ C1] ? ___sys_recvmsg+0x3e1/0x510 [ 1146.025196][ C1] ? ___sys_recvmsg+0x411/0x510 [ 1146.030248][ C1] memset+0x1e/0x40 [ 1146.034069][ C1] ___sys_recvmsg+0x411/0x510 [ 1146.038864][ C1] ? __sys_recvmsg+0x270/0x270 [ 1146.043759][ C1] ? __lock_acquire+0x7c50/0x7c50 [ 1146.048804][ C1] ? __might_fault+0xc2/0x120 [ 1146.053497][ C1] ? __might_fault+0xa6/0x120 [ 1146.058188][ C1] do_recvmmsg+0x359/0x7d0 [ 1146.062629][ C1] ? __sys_recvmmsg+0x280/0x280 [ 1146.067520][ C1] ? do_futex+0x310/0x320 [ 1146.071885][ C1] ? __lock_acquire+0x7c50/0x7c50 [ 1146.076932][ C1] ? rcu_read_lock_sched_held+0x86/0xf0 [ 1146.082605][ C1] ? __se_sys_futex+0x14a/0x440 [ 1146.087503][ C1] __x64_sys_recvmmsg+0x18d/0x240 [ 1146.092605][ C1] ? do_recvmmsg+0x7d0/0x7d0 [ 1146.097299][ C1] ? lockdep_hardirqs_on+0x94/0x140 [ 1146.102531][ C1] do_syscall_64+0x4c/0xa0 [ 1146.106972][ C1] ? clear_bhb_loop+0x60/0xb0 [ 1146.111668][ C1] ? clear_bhb_loop+0x60/0xb0 [ 1146.116355][ C1] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1146.122277][ C1] RIP: 0033:0x7fbecef8e929 [ 1146.126815][ C1] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1146.146664][ C1] RSP: 002b:00007fbecfdcf038 EFLAGS: 00000246 ORIG_RAX: 000000000000012b [ 1146.155120][ C1] RAX: ffffffffffffffda RBX: 00007fbecf1b6080 RCX: 00007fbecef8e929 [ 1146.163113][ C1] RDX: 0000000000010106 RSI: 00002000000000c0 RDI: 0000000000000006 [ 1146.171103][ C1] RBP: 00007fbecf010b39 R08: 0000000000000000 R09: 0000000000000000 [ 1146.179193][ C1] R10: 0000000000000002 R11: 0000000000000246 R12: 0000000000000000 [ 1146.187174][ C1] R13: 0000000000000000 R14: 00007fbecf1b6080 R15: 00007ffc58aa7c48 [ 1146.195178][ C1] [ 1146.198537][ C1] Kernel Offset: disabled [ 1146.203010][ C1] Rebooting in 86400 seconds..