last executing test programs: 22.791941965s ago: executing program 4 (id=5664): bpf$PROG_LOAD(0x5, 0x0, 0x0) r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000003c0)=0x874, 0x4) setsockopt$inet_tcp_TCP_MD5SIG(r0, 0x6, 0xe, &(0x7f0000000200)={@in={{0x2, 0x0, @loopback}}, 0x0, 0x0, 0x49, 0x0, "58f0a57b2acd7844503dbda53e49dbbe1d5780225329be44531493386d0314b2350f91c6404fcec90e0ab0c335d2b780da772de206ba8139f981b853ea3ff9119a8abb5e7d709d1d078737c76de57e27"}, 0xd8) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @multicast1}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) setsockopt$sock_int(r0, 0x1, 0x6, &(0x7f0000000600)=0x6, 0x4) sendto$inet(r0, &(0x7f0000000700)="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", 0xfe6a, 0x40040, 0x0, 0xfffffffffffffe93) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYRES32=r0], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000001b40)={&(0x7f00000006c0)='mm_lru_insertion\x00', r1}, 0x10) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x5, 0x4, 0x8, 0x5}, 0x48) bpf$PROG_LOAD(0x5, 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000280)) r2 = bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000500)={0x11, 0x7, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0xd, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x90) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socket$igmp6(0xa, 0x3, 0x2) socket$packet(0x11, 0x3, 0x300) syz_emit_ethernet(0x2b, &(0x7f0000000000)=ANY=[@ANYBLOB="4656c28dd60001471367c34f968007b075ec6b"], &(0x7f0000000080)={0x0, 0x4, [0xbec, 0xdbe, 0x631, 0x6c0]}) mkdir(&(0x7f0000001280)='./file0\x00', 0xa0) openat$fuse(0xffffffffffffff9c, &(0x7f0000000680), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000000400)=ANY=[@ANYRESOCT=r3, @ANYBLOB, @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) 15.828055122s ago: executing program 4 (id=5678): ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000000)={'gre0\x00', &(0x7f00000002c0)={'syztnl1\x00', 0x0, 0x0, 0x0, 0x0, 0x0, {{0x31, 0x4, 0x0, 0x0, 0xc4, 0x67, 0x0, 0x0, 0x0, 0x0, @dev, @remote, {[@timestamp={0x44, 0x18, 0x0, 0x0, 0x9, [0x401, 0x5, 0x0, 0x0, 0x0]}, @timestamp_prespec={0x44, 0x44, 0xc0, 0x3, 0x1, [{@private=0xa010102}, {@multicast1}, {@remote, 0x8000}, {@dev={0xac, 0x14, 0x14, 0x35}, 0x65c}, {@rand_addr=0x64010100}, {@empty}, {@multicast1, 0xffd200}, {@private=0xa010100, 0x7}]}, @timestamp_prespec={0x44, 0x3c, 0x0, 0x3, 0x8, [{@loopback}, {@remote}, {@multicast2, 0xb}, {@private=0xa010100}, {@rand_addr=0x64010101}, {@broadcast, 0x52b1}, {@multicast2}]}, @noop, @noop, @end, @rr={0x7, 0x13, 0x0, [@remote, @multicast1, @private=0xa010102, @remote]}]}}}}}) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='hugetlb.2MB.usage_in_bytes\x00', 0x275a, 0x0) write$binfmt_script(r2, &(0x7f0000000240), 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x280000b, 0x28011, r2, 0x0) r3 = dup(r1) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000080)={0x0, 0x2, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000300)=[@text64={0x40, 0x0}], 0xffff, 0x0, 0x0, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000200)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0) syz_open_dev$vbi(&(0x7f0000000000), 0x1, 0x2) ioctl$KVM_RUN(r4, 0xae80, 0x0) 15.428832691s ago: executing program 2 (id=5682): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) ioctl$AUTOFS_DEV_IOCTL_ISMOUNTPOINT(0xffffffffffffffff, 0xc018937e, 0x0) sched_setscheduler(0x0, 0x2, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) prlimit64(0x0, 0x0, &(0x7f0000000140)={0x8}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x1, &(0x7f00000003c0)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = syz_open_dev$usbfs(&(0x7f0000000100), 0x76, 0x101b01) ioctl$USBDEVFS_DISCONNECT_CLAIM(0xffffffffffffffff, 0x5522, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) ioctl$USBDEVFS_DISCONNECT_CLAIM(r3, 0x8108551b, &(0x7f00000006c0)={0x0, 0x0, "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"}) ioctl$USBDEVFS_SETINTERFACE(r3, 0x80045510, &(0x7f0000000000)) madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0x0) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) madvise(&(0x7f000055f000/0x2000)=nil, 0x2000, 0x16) r4 = syz_open_procfs$pagemap(0xffffffffffffffff, 0x0) ioctl$PAGEMAP_SCAN(r4, 0xc0606610, &(0x7f00000001c0)={0x60, 0x0, &(0x7f00001b8000/0x2000)=nil, &(0x7f000064f000/0x2000)=nil, 0x0, &(0x7f00000003c0)=[{}], 0x1}) move_pages(0x0, 0x1efe, &(0x7f0000000080), 0x0, &(0x7f0000000040), 0x0) mkdir(&(0x7f0000000400)='./file1\x00', 0x0) 14.444063959s ago: executing program 3 (id=5683): ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000000)={'gre0\x00', &(0x7f00000002c0)={'syztnl1\x00', 0x0, 0x0, 0x0, 0x0, 0x0, {{0x31, 0x4, 0x0, 0x0, 0xc4, 0x67, 0x0, 0x0, 0x0, 0x0, @dev, @remote, {[@timestamp={0x44, 0x18, 0x0, 0x0, 0x9, [0x401, 0x5, 0x0, 0x0, 0x0]}, @timestamp_prespec={0x44, 0x44, 0xc0, 0x3, 0x1, [{@private=0xa010102}, {@multicast1}, {@remote, 0x8000}, {@dev, 0x65c}, {@rand_addr=0x64010100}, {@empty}, {@multicast1, 0xffd200}, {@private=0xa010100, 0x7}]}, @timestamp_prespec={0x44, 0x3c, 0x0, 0x3, 0x0, [{@loopback}, {@remote}, {@multicast2, 0xb}, {@private=0xa010100}, {@rand_addr=0x64010101}, {@broadcast, 0x52b1}, {@multicast2}]}, @noop, @noop, @end, @rr={0x7, 0x13, 0x0, [@remote, @multicast1, @private=0xa010102, @remote]}]}}}}}) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='hugetlb.2MB.usage_in_bytes\x00', 0x275a, 0x0) write$binfmt_script(r2, &(0x7f0000000240), 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x280000b, 0x28011, r2, 0x0) r3 = dup(r1) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000080)={0x0, 0x2, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000300)=[@text64={0x40, 0x0}], 0xffff, 0x0, 0x0, 0x0) ioctl$KVM_REGISTER_COALESCED_MMIO(r1, 0x4010ae67, &(0x7f00000001c0)={0x0, 0xd000}) ioctl$KVM_RUN(r4, 0xae80, 0x0) 13.473165709s ago: executing program 2 (id=5684): socket$nl_route(0x10, 0x3, 0x0) openat$capi20(0xffffffffffffff9c, &(0x7f0000000000), 0x501, 0x0) syz_io_uring_setup(0x231, &(0x7f0000000080)={0x0, 0x0, 0x10100}, &(0x7f0000000000), &(0x7f0000000140)) r0 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000040), 0xffffffffffffffff) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_802154(r2, 0x8933, &(0x7f0000000140)={'wpan1\x00', 0x0}) sendmsg$NL802154_CMD_DEL_SEC_DEVKEY(r1, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000180)=ANY=[@ANYBLOB='L\x00\x00\x00', @ANYRES16=r0, @ANYBLOB="010000000000000000002600000008000300", @ANYRES32=r3, @ANYBLOB="30002f80"], 0x4c}}, 0x0) socket$netlink(0x10, 0x3, 0x0) openat$fuse(0xffffffffffffff9c, &(0x7f0000002000), 0x2, 0x0) r4 = timerfd_create(0x8, 0x0) timerfd_settime(r4, 0x0, &(0x7f0000000080)={{0x77359400}, {0x0, 0x989680}}, 0x0) r5 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x20040, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f00000001c0)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r6 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r6, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r7, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r8, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r8, &(0x7f00000001c0)=[{{&(0x7f0000000240)=@rc, 0x80, &(0x7f0000001000)=[{&(0x7f0000000300)=""/184, 0xb8}, {&(0x7f0000000e80)=""/255, 0xff}, {&(0x7f0000000640)=""/86, 0x56}, {&(0x7f0000000780)=""/98, 0x62}, {&(0x7f0000001100)=""/94, 0x5e}], 0x5, &(0x7f0000001080)=""/114, 0x72}, 0x8}], 0x3fffffffffffde7, 0x40000002, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000240)=ANY=[], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000003c0)={&(0x7f0000000f80)='ext4_es_remove_extent\x00', r5}, 0x10) socket$inet6(0xa, 0x2, 0x0) mmap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x2132, 0xffffffffffffffff, 0x0) mprotect(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x100000f) 13.463942719s ago: executing program 4 (id=5685): pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) creat(&(0x7f0000000400)='./bus\x00', 0x0) lsetxattr$security_ima(&(0x7f0000000140)='./bus\x00', &(0x7f00000000c0), &(0x7f00000001c0)=ANY=[@ANYBLOB="03020000e8ffffffffdbf9c7dfcadb1f2d4b8b09cb4a51c1f84f4c3a5e1c57a6617133343e21879c2aa1d5369eff736a0be072dae88c9b120de8985968685e0155b5dcfcc5cf0bfb3cb935a58cdf2eb1516db6c24b2084b2e1805b07f2a5644759367f5361"], 0x9, 0x0) openat$vmci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000000)='fd\x00') r2 = memfd_create(&(0x7f0000000340)='D\xa3\xd5Wj\x00\x00x0\xc1\xac\x1a\x1a\vG\xa9~vB\xbc\t\x00\x00\x00VoA\xaa\xbc\xee[\xe1\xa2\xe0\xff\x04\x00\x00\x00\\i\xcf\t\xb0\xa9 +H/\x1a\xe7\x95\xce\"\"\xbd\xf9!\xfd\xa4\xcaN\x84\xadS\x8bqE\x99\x01t\xb1\x1f|\x99PL\x92\x8f\xc2\xf9\xcd\x8cj\x03X\x05\x17mwI\xf0\x01\xe5z\xcdJ)\xc7\xfa)\xaa}\xef\xbb\xf5\xcd\xb1o5\x18\xd6\v\x85q\x98\x9bB\xb9\xea\xe7\xff\x7f\x00\x00T\xc0\xd2\t?\bpBl\xf4*8\xc6\xe5\x06P\xc11\f^\x7f\x8e\xc1\xd1Wra\x19)\xe3\x8f\xd9\x9f\x15\x1e\xf2\x18\r\xad\b\xe0\x96NH\x85\r+\xfc\xb3\xdd\xddhg \x03\xa7\x92\xff\x00+h\xb7@#K\x9cMY\xd3\x9b\b-G\xb1\xdaS\x81\xb2\x93\xb83\x8a\x94*\x8d\\\b\xff/\xa1\xc0\xf9&\xd3M\xf6\n\xff\x83k\xe6\rDa\x16\xbd\x1a\xb2w\b', 0x0) write(r2, &(0x7f00000000c0)="6963e64243ea486da3a74e3deec6fc5bb9650b5de56946c568f95d22467190ba406d59a5958d6f156c9c8a2ac4677b00000000000000000000200000f8bf54da33", 0x41) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x1, 0x11, r2, 0x0) r3 = dup3(r1, r0, 0x0) fchdir(r3) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='hugetlb.2MB.usage_in_bytes\x00', 0x275a, 0x0) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x416d, 0x0) 13.167828895s ago: executing program 4 (id=5687): r0 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) ioctl$KVM_SET_REGS(r0, 0x4090ae82, &(0x7f0000000380)={[0x2, 0xffff, 0x5, 0x0, 0x5, 0x6, 0x5793f0b8, 0x8, 0x5, 0x8, 0x4, 0x2, 0x30, 0x6, 0x9, 0x7], 0x4000, 0x32054}) socket(0x0, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000080)={'ip6tnl0\x00'}) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1801000000000000000000004b64ffec850000006d000000670000000500000095"], &(0x7f0000000100)='GPL\x00', 0x7, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, 0x2}, 0xf0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000240)='tlb_flush\x00', r1}, 0x10) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = getpid() process_vm_readv(r2, &(0x7f0000008400)=[{&(0x7f0000000300)=""/54, 0x7ffff000}, {&(0x7f0000006180)=""/152, 0x98}], 0x2, &(0x7f0000008640)=[{&(0x7f0000008480)=""/95, 0x7ffff000}], 0x286, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x0, 0x0, 0x0, &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x1}, 0x90) r3 = creat(&(0x7f0000000000)='./file0\x00', 0xd931d3864d39ddd8) write$binfmt_elf32(0xffffffffffffffff, &(0x7f0000000040)=ANY=[], 0x69) close(r3) execve(&(0x7f0000000180)='./file0\x00', 0x0, 0x0) syz_emit_vhci(&(0x7f00000002c0)=@HCI_VENDOR_PKT={0xff, 0x1}, 0x2) rename(&(0x7f0000000080)='./file0\x00', &(0x7f0000000540)='./file1\x00') r4 = syz_open_dev$tty1(0xc, 0x4, 0x1) r5 = dup(r4) ioctl$TIOCL_SETSEL(r5, 0x541c, &(0x7f0000001900)={0x2, {0xc, 0xa00, 0x0, 0x101, 0x100}}) unshare(0x20000400) socket$inet_smc(0x2b, 0x1, 0x0) ppoll(0x0, 0x0, 0x0, 0x0, 0x0) socket$l2tp(0x2, 0x2, 0x73) socket$inet6_sctp(0xa, 0x1, 0x84) syz_80211_inject_frame(&(0x7f0000000000)=@device_b, &(0x7f0000000180)=ANY=[@ANYBLOB="883909003859d63f6e3de70411000000ffffffffffff5600b800da58dd00007c1d01b7b7875f4767f4b533e6bd8859a2eb88a5ead25cdca950e8453e8fcefe44a8e0498aee41e1"], 0x47) r6 = socket$inet_smc(0x2b, 0x1, 0x0) setsockopt$inet_int(0xffffffffffffffff, 0x0, 0x6, &(0x7f0000001700)=0x5945, 0x4) bind$inet(r6, &(0x7f0000000140)={0x2, 0x4e22, @multicast2}, 0x10) connect$inet(r6, &(0x7f0000000000)={0x2, 0x4e22, @local}, 0x10) sendto$inet(r6, &(0x7f0000000040), 0x0, 0x801, 0x0, 0x0) 12.907202093s ago: executing program 3 (id=5688): prctl$PR_SET_MM_MAP(0x21, 0xe, &(0x7f0000000740)={&(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffa000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000400000/0xc00000)=nil, &(0x7f000085b000/0x1000)=nil, &(0x7f0000c65000/0x3000)=nil, &(0x7f00008d1000/0x1000)=nil, &(0x7f0000ff1000/0x2000)=nil, &(0x7f00006bd000/0x2000)=nil, &(0x7f0000f86000/0x3000)=nil, 0x0}, 0x68) r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000100)='mountinfo\x00') ioctl$KVM_REGISTER_COALESCED_MMIO(0xffffffffffffffff, 0x4010ae67, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) setsockopt$packet_fanout(0xffffffffffffffff, 0x107, 0x12, 0x0, 0x0) ioctl$AUTOFS_DEV_IOCTL_CATATONIC(0xffffffffffffffff, 0xc0189379, &(0x7f0000000380)={{0x1, 0x1, 0x18}, './file0\x00'}) ioctl$SNDRV_PCM_IOCTL_HW_REFINE(0xffffffffffffffff, 0xc2604110, 0x0) r2 = socket$inet_mptcp(0x2, 0x1, 0x106) getsockopt$inet_int(r2, 0x0, 0x33, 0x0, 0x0) r3 = syz_open_dev$vim2m(&(0x7f00000001c0), 0x7fff, 0x2) gettid() timer_create(0x0, 0x0, 0x0) mremap(&(0x7f000061d000/0x1000)=nil, 0x1000, 0x3000, 0x4, &(0x7f0000ffb000/0x3000)=nil) ioctl$BINDER_GET_NODE_INFO_FOR_REF(r0, 0xc018620c, &(0x7f0000000000)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) ioctl$vim2m_VIDIOC_DQBUF(r3, 0xc0585611, &(0x7f0000000200)=@overlay={0x0, 0x1, 0x4, 0x0, 0x0, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "12848098"}}) ioctl$vim2m_VIDIOC_QBUF(r3, 0xc058560f, &(0x7f0000000140)=@multiplanar_mmap={0x0, 0x0, 0x4, 0x0, 0x0, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "a730b801"}, 0x0, 0x1, {0x0}, 0xffffff7f}) r4 = socket$inet6_mptcp(0xa, 0x1, 0x106) setsockopt$inet6_tcp_TCP_CONGESTION(0xffffffffffffffff, 0x6, 0xd, &(0x7f0000000080)='cdg\x00', 0x4) r5 = gettid() mq_notify(0xffffffffffffffff, &(0x7f0000001300)={0x0, 0x14, 0x0, @tid=r5}) connect$inet6(r4, &(0x7f0000000040)={0xa, 0x3, 0x0, @loopback}, 0x1c) bpf$MAP_CREATE(0x0, &(0x7f00000000c0), 0x48) 12.447923117s ago: executing program 2 (id=5690): bpf$PROG_LOAD(0x5, &(0x7f0000000c40)={0x0, 0xb, &(0x7f0000000180)=ANY=[@ANYRESOCT], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x0, 0xfffffffc, 0x0, 0x8000}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000040)=0x10001) r0 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) preadv(r0, &(0x7f0000000240)=[{&(0x7f0000033a80)=""/102386, 0xfffffd6e}], 0x1, 0x0, 0x0) r1 = socket$inet(0x2, 0x1, 0x0) setsockopt$sock_int(r1, 0x1, 0xf, &(0x7f0000356ffc)=0xffffffffffffff40, 0x4) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x33, &(0x7f00000a2000)={0x1, &(0x7f0000f07000)=[{0x6}]}, 0x10) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x33, &(0x7f00000a2000)={0x1, &(0x7f0000f07000)=[{0x6}]}, 0x10) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0xa, 0x1, 0x40, 0x20}, 0x48) accept4$netrom(0xffffffffffffffff, &(0x7f0000000180)={{0x3, @rose}, [@null, @default, @bcast, @rose, @remote, @null, @bcast, @netrom]}, 0x0, 0x0) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, 0x0) r2 = openat$sysctl(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sys/vm/drop_caches\x00', 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r3 = getpid() sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f0000000200)=ANY=[@ANYBLOB="b700000081000000bfa30000000000000703000000feffff720af0fff8ffffff71a4f0ff0000000071100000000000001d400500000000004704000001ed00000f030000000000001d44000000000000620a00fe000000007203000000000000b5000000000000009500000000000000023bc065b58111c6dfa041b63af4a3912435f1a864a710aad58db6a693002e7f3be361917adef6ee1c8a2a4f8ef1e50becb19bc461e91a7168c50000000190f32050e436fe275daf51efd601b6bf01c8e8b1b526375ec4dd6fcd82e4fe51bef7af9aa0d7d600c095199fe3ff3128e599b0eaebbdbd732c9cc00eec363e4a8f6456e2cc21557c0afc646cb7798b3e6440c2fbdb00a3e35208b0bb0d2cd829e654400e2438ec649dc74a28610643a98d9ec21ead2ed51b104d4d91af25b845d8a7925c3109b151b8b9f75dd08d123deda88c658d42ecbf28bf7076c15b463bebc72f526d8e8afcb913466aaa7f6df70252e79166d858fcd0e06dd31af9612f2460d0b11008e59a5923906f88b53987ad1714e72ba7a54f0c33d39000d06a59ff616236fd9aa58f2477184b6a89adaf17b0a6041bdef728d236619074d6ebdfd1f5089048ddff6da40f9411fe722631cb467600ade70063e5291569b33d21dae356e1c51f03a801be8189679a16da18ec0ae564162a27afea62d84f3a10746443d6438e957d419c6bc6ea9f2bca4464f56e24e6d2105bd901204a1deeed4155617572652d950a001928b0b0c3dc2869f478341d02d0f5ad94b081fcd507acb4b9c65fee9d5a17f48a7382f13d000000225d85ae49cee383dc5049076b989b40000000000000da60d2ae20cfb91d6a49964757cdf538f9ce2bdb1ab062cd54e67011d355d84ce97bb0c6b4a595e487efbb2d71cde2c140952f9a0f0bc6980fe78683ac5c0c31032599ddd71063be9261b2e1aab1675b34a22048ef8c126aeef5f510a8f1aded94a129e4aec6f8d9ab06faffc3a15d96c2ea3e2e04cfe031b2875353193f82ade69d0540059fe6c7fe7cd8697502c7596566d674e425da5e87e59602a9f6590521d31d3804b3e0a1053abdc31282dfb15eb6841bb64a1b304502dda787343ce3c953992e4a982f3c48153baae244e7bf37548c7f1a4cad2422ee965a38f7defbd2160242b104e20dc2d9b0c35608d402ccdd9069bd50b994fda7a9de44028d6112a0c2d21b2dc98816106dec28eaeb883418f562ae00003ea96d07000000374d6eed826416050000000bfe9b4a9c5a90ff59d54d1f92ecc4e95dd2d18383117c039862198899b212c55318294270a1ad10c80fef7c24d47afce829ba0f85da6d888f18ea40ab959f6074ab2a40d85d15017ab513cdc6c0e57fb1c1ca571380d7b4ead35a385e0b4a26b702396df7e0c1e02b6e4114f244a9bf93f04bf072f0861f7580e69db384ac7eeedcf2ba1a9508f9d6aba582a896a9f1ffa968eacea75caf822a7a63ba34015ea5aacb1188883ad2a3b1832371fe5bc621426d1ed0a4a99702cc1b6912a1e717d29135753208165b9cdbae2ed9dc7358f0ebadde0b727f27feeb744ddcc536cbae315c7d1fe1399562ba6824840bd2951680f6f2f9a6a8346962a350845ffa0d829e4f79adc287906943408e6df3c391e97ba48db0a5adbfd03aac93df8866fb010aec0e92bed1fe39af169d2a466f0db6f3d9436a7d55fc30511d00e10000c95265b2bd83d64a532869d701723fedcbada1ee7baa5b6a686b50f0937f778af083e055f6138a757ebd0ed91124a6b244f9acf41ac5d73a008364e0606a594817031fc2f52c8785fe0721719b3d654026c6ea08b83b123145ab5703dad844ceb201ddeb6dc5f6a903792283c42efc54fa84323afc4c10eff462c8843187f1dd48ef3fa293774d582956ff0f40b10ca94f6feeb2893c17888e1cdba94a6ea80c33ead5722c3293a493f1479531dd88261458f40d31fe8df15efaaeea831555877f9538d6ee6ba65893ff1f908ba7554ba583fef3ec7932f5954f31a878e2fae6691d1aee1da02ba516467df3e7d1daac43738012e4fee18a22da19fcdb4c2890cda1f96b952511e3a69d694d625e0b2f808890205f3a6da2819d2f9e77c7c64affa54fec0136cbafa5f6f096753b639a924599c1f69219927ea5301fff0a6063d427f0688430754c02180d61542c2571f983e9673560000000000000000005a7b57f03ca91a01ba2e30ca99e8ebc15ecb4d91675767999d146aef7799738b292fd640dfef6b04d086f737a159d7e0c6e4d81ad64a8bbca48568325b2969e2b15f36b788bce5ccdbaf75c94cb93499f6947a967a7bce14c6de4e7c0660d80010f5c653d22d490cba8c2a4ab595bf4238f18ca428dafc7ac96d404607a0000000051a2104f22e6db5a62b5089c1b45282d38864daa3ae81d6bebf5088a2a12dd1a1b14d948aa911cf50968d1d2867b91b7d120617d12d91db2633d6864da40b54783a17aaeb6737c323f9f88e354cc98dcfe23ad01bd1c61563e69ffe1c2c73e16e1461173f359e93d2c5e424c17998809ec8f0232b3955e052a4cecd89008f70314a0bdd491ec86a4555d89fe0120f64c62e8e3ed8bcb45202c3d4bbec8d722824c0ebca8db1ea4a003d2fbdc1f9be78537756ab5bbe4fe9af5d785d0128171c90d9900ce2532b0f9d01c4b45294fbba468df3e1b583cb4e62e754598e47df6bd06431c94bc5d047899fd219f448bf9189c65c9d91eda6b52a373803a9efe44f86909bc90addb7b9aee813df534aac4b3a51cc87e068cd84990453f006694d461b76a58d88cf0f520310a1e80dc18cde98d662eee077515d0a881192292469d2d25115be3cfb8243266d87047f601fa88a0da36b9f302e8262395174328f2482d14008de83070744f143fdec90ba5a82668d5fac114c13955ad6dca5db2231d8ba14c54c47ed04a4b4ace17e357e1d6432399f87a7a14245bbd796a09313b247b95d37ff40a404bdad74bd20000000000000000000099fef7cd7af3ce64a92f95d89d125b1e641240d7e5e27a3d1f7684448c3e3822d617e205061298b939a191be4b48e169bde2cae3accc5bd40a2968b59c93d35f8e42366fdef9a2abae1cf01ce68abff28861aac8302d268569dd42e194e330c7aaa54ebbcefd23f21ce8153b9926e12e925cb56119df72c7533a48d028ad0c74e2a9478fa3be18a1a2b65079cc1c00000000000000f59dd19e8d525206c0a728cfd42193abe8130bc01a2d69841f3d7799ac04bdc590bb1c89b9c695f163e57343c9bfb59909433c9001c5f8b23e38534a538fc933cac6c2a92d038df638a0da26df9fb857bd414c2cd69985e8053e3dfa41614d7c74d04d8c2471041d17c730fad28395f8d4688898cd58b9d600c851626529bb58aa364b55e73f053450665e7b94ed1012fd7a8139166fd5e59c84f4ab279b1b99c028db4cb9680c8035f967db18de738844da7e260a830c1ffa49f5af3c15423a0e315acb82a3e89218cb314e68fda4d94aa1d815babc13b9fd336d205c5913ef67cf0216e2d81e6127bd9d7fab28800eaab2355992f8ce4cd38add4b272c0bee4076ca4847ffa691cf78fb7ec212bad3bef29f577ea7119b7f3025b3d977ff7c91024cf71126233cb8791c3c5a7bd32cb8d3ca303a671a9339e77a00000000"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0xfffffffffffffd00}, 0x48) writev(r2, &(0x7f00000000c0)=[{&(0x7f0000000140)='2', 0x1}], 0x1) r6 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000000), 0x8502, 0x0) write$sndseq(r6, &(0x7f00000005c0)=[{0x6, 0x0, 0x0, 0x0, @time, {0x6}, {}, @ext={0x0, 0x0}}, {0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @raw32}, {0x0, 0x0, 0x0, 0x0, @time, {}, {}, @raw8={"272be5806cd46d7b9ff797a0"}}], 0x54) openat$iommufd(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) 9.329714355s ago: executing program 2 (id=5694): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20000008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000500)=0x4) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000400)='sched_switch\x00', r3}, 0x10) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000002c80)={0x3, 0xc, &(0x7f0000000540)=ANY=[@ANYRESHEX, @ANYBLOB="03387adc0f2e5f952bb5361c9b5746a20d2db10e034c3c8720876f763323fb674ad8d483e8d488272346a3027202537adb971a38d3d9e414d82bc1ebb265d67dd24a2d4105a87a6b0aebba6e3486a9a6580fae000069190ce74b608019e5d616b35bc96bbe248750f20fa0e020906b41d20adbed2bc5fd0a2830bf4757dc9680d1aa3cd50c6b3f460063aacfa7513137f1a1470176e6fd7274e28dc4bd9727da7917932a79afb8a5ddd40123ac7a73da1c25419148209bcda92af29f76187d9939141050656f545828ade7f3ddde73020d02b580559e087de493", @ANYBLOB="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", @ANYRES32=r2, @ANYRES64=r1], &(0x7f0000000380)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x37}, 0x90) r4 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ethtool(&(0x7f00000003c0), r4) getsockopt$inet_pktinfo(0xffffffffffffffff, 0x0, 0x8, 0x0, &(0x7f00000004c0)) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$SO_BINDTODEVICE(r6, 0x1, 0x19, &(0x7f0000000440)='wlan0\x00', 0x10) setsockopt$sock_int(r6, 0x1, 0x3c, &(0x7f00000000c0)=0x200, 0x4) sendto$inet(r6, 0x0, 0x0, 0x20008802, &(0x7f0000000180)={0x2, 0x4e21, @multicast2}, 0x10) sendto$inet(r6, &(0x7f0000000100)='J', 0xfdbe, 0x4004084, 0x0, 0x11000a00) socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000300)={'syz_tun\x00'}) sendmsg$nl_route(r5, 0x0, 0x400c000) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'dummy0\x00'}) socket$packet(0x11, 0x2, 0x300) r7 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r7, 0x8933, &(0x7f0000000100)={'batadv_slave_0\x00', 0x0}) r9 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_add_memb(r9, 0x107, 0x1, &(0x7f0000000340)={r8, 0x1, 0x6, @local}, 0x10) 8.029762038s ago: executing program 2 (id=5696): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000040)) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={0x0}, 0x10) socket$inet_udp(0x2, 0x2, 0x0) write$FUSE_INIT(0xffffffffffffffff, 0x0, 0x0) r3 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) connect$inet6(r3, &(0x7f0000000000)={0xa, 0x0, 0x0, @mcast2}, 0x1c) r4 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000280)='/proc/tty/drivers\x00', 0x0, 0x0) syz_emit_ethernet(0x72, &(0x7f0000000380)={@multicast, @local, @val={@void, {0x8100, 0x0, 0x1, 0x3}}, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, '\x00', 0x38, 0x3a, 0x0, @dev, @mcast2, {[], @time_exceed={0x3, 0x0, 0x0, 0x0, '\x00', {0x0, 0x6, "fd9063", 0x0, 0x2f, 0x0, @dev, @dev={0xfe, 0x80, '\x00', 0x2d}, [@hopopts]}}}}}}}, 0x0) read$FUSE(r4, &(0x7f0000004280)={0x2020}, 0x2020) preadv2(r4, &(0x7f0000000180)=[{&(0x7f0000000080)=""/67, 0x43}], 0x1, 0x0, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) fsopen(&(0x7f0000000280)='sysv\x00', 0x1) setsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) r5 = syz_genetlink_get_family_id$devlink(&(0x7f0000000100), 0xffffffffffffffff) r6 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$DEVLINK_CMD_TRAP_GROUP_SET(r6, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000300)={0x4c, r5, 0x1, 0x0, 0x0, {0x41}, [{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0xd}, {0x5, 0x87}}]}, 0x4c}}, 0x0) syz_usb_connect(0x0, 0x24, &(0x7f0000000040)={{0x12, 0x1, 0x0, 0x2, 0x46, 0xcf, 0x10, 0x4dd, 0x8002, 0xfcb6, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0xff, 0x2, 0x1}}]}}]}}, 0x0) 6.71816224s ago: executing program 0 (id=5697): ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000000)={'gre0\x00', &(0x7f00000002c0)={'syztnl1\x00', 0x0, 0x0, 0x0, 0x0, 0x0, {{0x31, 0x4, 0x0, 0x0, 0xc4, 0x67, 0x0, 0x0, 0x0, 0x0, @dev, @remote, {[@timestamp={0x44, 0x18, 0x0, 0x0, 0x9, [0x401, 0x5, 0x0, 0x0, 0x0]}, @timestamp_prespec={0x44, 0x44, 0xc0, 0x3, 0x1, [{@private=0xa010102}, {@multicast1}, {@remote, 0x8000}, {@dev={0xac, 0x14, 0x14, 0x35}, 0x65c}, {@rand_addr=0x64010100}, {@empty}, {@multicast1, 0xffd200}, {@private=0xa010100, 0x7}]}, @timestamp_prespec={0x44, 0x3c, 0x0, 0x3, 0x8, [{@loopback}, {@remote}, {@multicast2, 0xb}, {@private=0xa010100}, {@rand_addr=0x64010101}, {@broadcast, 0x52b1}, {@multicast2}]}, @noop, @noop, @end, @rr={0x7, 0x13, 0x0, [@remote, @multicast1, @private=0xa010102, @remote]}]}}}}}) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='hugetlb.2MB.usage_in_bytes\x00', 0x275a, 0x0) write$binfmt_script(r2, &(0x7f0000000240), 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x280000b, 0x28011, r2, 0x0) r3 = dup(r1) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000080)={0x0, 0x2, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000300)=[@text64={0x40, 0x0}], 0xffff, 0x0, 0x0, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000200)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0) syz_open_dev$vbi(&(0x7f0000000000), 0x1, 0x2) ioctl$KVM_RUN(r4, 0xae80, 0x0) 6.662654133s ago: executing program 4 (id=5698): ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000000)={'gre0\x00', &(0x7f00000002c0)={'syztnl1\x00', 0x0, 0x0, 0x0, 0x0, 0x0, {{0x31, 0x4, 0x0, 0x0, 0xc4, 0x67, 0x0, 0x0, 0x0, 0x0, @dev, @remote, {[@timestamp={0x44, 0x18, 0x0, 0x0, 0x9, [0x401, 0x5, 0x0, 0x0, 0x0]}, @timestamp_prespec={0x44, 0x44, 0xc0, 0x3, 0x1, [{@private=0xa010102}, {@multicast1}, {@remote, 0x8000}, {@dev, 0x65c}, {@rand_addr=0x64010100}, {@empty}, {@multicast1, 0xffd200}, {@private=0xa010100, 0x7}]}, @timestamp_prespec={0x44, 0x3c, 0x0, 0x3, 0x0, [{@loopback}, {@remote}, {@multicast2, 0xb}, {@private=0xa010100}, {@rand_addr=0x64010101}, {@broadcast, 0x52b1}, {@multicast2}]}, @noop, @noop, @end, @rr={0x7, 0x13, 0x0, [@remote, @multicast1, @private=0xa010102, @remote]}]}}}}}) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='hugetlb.2MB.usage_in_bytes\x00', 0x275a, 0x0) write$binfmt_script(r2, &(0x7f0000000240), 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x280000b, 0x28011, r2, 0x0) r3 = dup(r1) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000080)={0x0, 0x2, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000300)=[@text64={0x40, 0x0}], 0xffff, 0x0, 0x0, 0x0) ioctl$KVM_REGISTER_COALESCED_MMIO(r1, 0x4010ae67, &(0x7f00000001c0)={0x0, 0xd000}) ioctl$KVM_RUN(r4, 0xae80, 0x0) 6.459752835s ago: executing program 1 (id=5699): mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) socket$nl_generic(0x10, 0x3, 0x10) socketpair$unix(0x1, 0x0, 0x0, 0x0) openat$nullb(0xffffffffffffff9c, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000040)=0x9) r0 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./file1\x00', 0x1458c2, 0x0) r1 = openat$random(0xffffffffffffff9c, 0x0, 0x0, 0x0) sendfile(r0, r1, 0x0, 0x15) r2 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) preadv(r2, &(0x7f0000000240)=[{&(0x7f0000033a80)=""/102386, 0xfffffd6e}], 0x1, 0x0, 0x0) syz_io_uring_setup(0x110, &(0x7f0000000140)={0x0, 0x0, 0x80, 0x3, 0x0, 0x0, r0}, &(0x7f00000002c0), 0x0) r3 = openat$6lowpan_enable(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) msync(&(0x7f0000ff7000/0x3000)=nil, 0x3000, 0x0) write$6lowpan_enable(r3, &(0x7f0000000080)='1', 0x1) socket$inet6_sctp(0xa, 0x5, 0x84) syz_emit_ethernet(0x4a, &(0x7f0000000000)=ANY=[], 0x0) r4 = openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000640), 0x0, 0x0) r5 = openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r6, 0x29, 0x40, &(0x7f00000001c0)=@raw={'raw\x00', 0x3c1, 0x3, 0x4c8, 0x2e0, 0x9403, 0x3002, 0x0, 0x2c0, 0x3f8, 0x3d8, 0x3d8, 0x3f8, 0x3d8, 0x3, 0x0, {[{{@uncond, 0x0, 0x298, 0x2e0, 0x0, {}, [@common=@inet=@recent0={{0xf8}, {0x0, 0x0, 0x1, 0x0, 'syz0\x00'}}, @common=@inet=@recent0={{0xf8}, {0x0, 0x80, 0x1, 0x0, 'syz0\x00'}}]}, @common=@inet=@TEE={0x48, 'TEE\x00', 0x1, {@ipv4=@loopback, 'virt_wifi0\x00'}}}, {{@uncond, 0x0, 0xd0, 0x118, 0x0, {}, [@inet=@rpfilter={{0x28}}]}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 'syz1\x00'}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x528) ioctl$SW_SYNC_IOC_CREATE_FENCE(r5, 0xc0285700, &(0x7f0000000800)={0x0, "5660359c3245d1c42317afad7d48ed51000000000000000100"}) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f00000007c0)={&(0x7f0000000700)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000780)={&(0x7f0000000840)=ANY=[@ANYBLOB="2c00000002060102000000000000000007000000050004000200000005000100072dceae5f000100074925cb467b2b20ac429d54a00f23790ccc43b01e8234ac0d404a0f460236acad8b236900a702c8f7a000000000000000000000000000f7a97f3615e82e07a4ccd81e43b91abaf98a504a4d274b0b17f6fa94437563778eeca03996c8e9c1bbc65157984504033572ae7587b5ccfeba2702b8c6250ff31960705ddc9145c3f1d8f53af70d61751d22e86ccb05a1"], 0x2c}, 0x1, 0x0, 0x0, 0x20000000}, 0x4004) ioctl$SYNC_IOC_MERGE(0xffffffffffffffff, 0xc0303e03, 0x0) close_range(r4, 0xffffffffffffffff, 0x0) shmget$private(0x0, 0x3000, 0x16001b20, &(0x7f0000ffd000/0x3000)=nil) r7 = socket(0x1d, 0x2, 0x6) setsockopt$ALG_SET_AEAD_AUTHSIZE(r7, 0x6a, 0x2, 0x20000000, 0x0) mmap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x2, 0x2010, r7, 0x17111000) 6.384788451s ago: executing program 3 (id=5700): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000008000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000082000000950000"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f00000006c0)='sched_switch\x00', r4}, 0x10) syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) bind$bt_sco(0xffffffffffffffff, &(0x7f0000000080)={0x1f, @none}, 0x8) bind$bt_hci(0xffffffffffffffff, 0x0, 0x0) openat$binderfs(0xffffffffffffff9c, &(0x7f00000005c0)='./binderfs/binder0\x00', 0x0, 0x0) msync(&(0x7f0000952000/0x2000)=nil, 0x87abbe8d1cc6ad9, 0x6) kexec_load(0x0, 0x1, &(0x7f00000002c0)=[{0x0, 0x0, 0x0, 0x10000}], 0x0) 5.147081729s ago: executing program 3 (id=5701): r0 = syz_usb_connect$printer(0x0, 0x2d, &(0x7f00000004c0)=ANY=[@ANYBLOB="12010000000000202505a8a440000102030109021b00010100000009040000010701010009050102"], 0x0) syz_usb_control_io$printer(r0, 0x0, &(0x7f0000000b40)={0x34, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000b00)={0x20, 0x0, 0x1}}) r1 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) r2 = syz_io_uring_setup(0x4ea1, &(0x7f00000002c0)={0x0, 0x0, 0x10100}, &(0x7f0000000080), &(0x7f00000000c0)=0x0) syz_io_uring_setup(0x5da, &(0x7f0000000400), &(0x7f0000000940)=0x0, &(0x7f0000000000)) syz_io_uring_submit(r4, r3, &(0x7f00000001c0)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd=r1}) io_uring_enter(r2, 0x1d2d, 0x0, 0x0, 0x0, 0x0) sendmsg$IPCTNL_MSG_CT_DELETE(0xffffffffffffffff, 0x0, 0x0) mkdir(0x0, 0x0) pipe2(0x0, 0x0) r5 = openat$fuse(0xffffffffffffff9c, 0x0, 0x2, 0x0) write$FUSE_NOTIFY_INVAL_ENTRY(0xffffffffffffffff, 0x0, 0x26) splice(0xffffffffffffffff, 0x0, r5, 0x0, 0x0, 0x0) preadv(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) r6 = socket$inet6_dccp(0xa, 0x6, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r6, 0x29, 0x40, 0x0, 0x0) getsockname$packet(0xffffffffffffffff, 0x0, 0x0) 4.874027465s ago: executing program 4 (id=5702): r0 = openat2(0xffffffffffffff9c, &(0x7f0000000200)='./file0/file0\x00', 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000980)={0x18, 0x3, &(0x7f00000019c0)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f00000000c0)='syzkaller\x00'}, 0x90) r4 = syz_open_dev$sndctrl(&(0x7f0000000000), 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_RAWMIDI_NEXT_DEVICE(r4, 0xc0045520, &(0x7f0000000040)=0xfffffffc) r5 = openat$zero(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) preadv(r5, &(0x7f0000000080)=[{&(0x7f0000000100)=""/254, 0xfffffc47}, {&(0x7f0000000200)=""/171, 0xab}, {&(0x7f00000002c0)=""/243, 0xe2}], 0x50, 0x0, 0x0) rt_sigprocmask(0x0, &(0x7f000078b000)={[0xfffffffffffffffd]}, 0x0, 0x8) r6 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, 0x0, &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={0x0, r6}, 0x10) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) munlockall() bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000100)={&(0x7f0000000840)=ANY=[@ANYRES16=r0], &(0x7f0000000280)=""/101, 0x90, 0x65, 0x0, 0x8}, 0x20) 4.777648894s ago: executing program 0 (id=5703): mkdirat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000003c0)='blkio.throttle.io_service_bytes_recursive\x00', 0x275a, 0x0) socket(0x10, 0x2, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20000008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000040)=0x10001) r0 = openat$hwrng(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) preadv(r0, &(0x7f0000000240)=[{&(0x7f0000033a80)=""/102386, 0xfffffd6e}], 0x1, 0x0, 0x0) bpf$BPF_PROG_ATTACH(0x8, 0x0, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, 0x0) prlimit64(0x0, 0x8, 0x0, 0x0) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0xfffffffffefffff6, 0x20031, 0xffffffffffffffff, 0x0) r1 = userfaultfd(0x80001) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000000000)) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f0000000140)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x4}) ioctl$UFFDIO_COPY(r1, 0xc028aa03, &(0x7f0000000080)={&(0x7f00006c6000/0x400000)=nil, &(0x7f000018b000/0x3000)=nil, 0x400000, 0x0, 0x18100}) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) bpf$ENABLE_STATS(0x20, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0x5, &(0x7f00000097c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000140)='GPL\x00'}, 0x90) ioctl$SIOCSIFHWADDR(r2, 0x89f0, &(0x7f0000000900)={'bridge0\x00', @random='\x00\x00\x00 \x00'}) openat$nullb(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r3 = socket$kcm(0x10, 0x2, 0x0) sendmsg$inet(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000200)="1700000072006bcd9e3fe3dc6e08000007230000040200", 0x17}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x0) syz_emit_ethernet(0x3e, &(0x7f0000002c40)=ANY=[@ANYBLOB="aaaaaaaaaaaa00000000000008004500003000000000002f907800000190780000000045000000000000000000000000000000e0000002"], 0x0) openat$nullb(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) mq_open(0x0, 0x0, 0x0, 0x0) 4.720928545s ago: executing program 1 (id=5704): r0 = openat2(0xffffffffffffff9c, &(0x7f0000000200)='./file0/file0\x00', &(0x7f0000000700)={0x0, 0xc2, 0x3}, 0x18) r1 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x23, 0x800000000004, @tid=r1}, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000200)) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000000), 0x651, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r5 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000980)={0x18, 0x3, &(0x7f00000019c0)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f00000000c0)='syzkaller\x00'}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000080)='contention_end\x00', r5}, 0x10) r6 = syz_open_dev$sndctrl(&(0x7f0000000000), 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_RAWMIDI_NEXT_DEVICE(r6, 0xc0045520, &(0x7f0000000040)=0xfffffffc) r7 = openat$zero(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) preadv(r7, &(0x7f0000000080)=[{&(0x7f0000000100)=""/254, 0xfffffc47}, {&(0x7f0000000200)=""/171, 0xab}, {&(0x7f00000002c0)=""/243, 0xe2}], 0x50, 0x0, 0x0) rt_sigprocmask(0x0, &(0x7f000078b000)={[0xfffffffffffffffd]}, 0x0, 0x8) r8 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, 0x0, &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={0x0, r8}, 0x10) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) munlockall() bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000100)={&(0x7f0000000840)=ANY=[@ANYRES16=r0], &(0x7f0000000280)=""/101, 0x90, 0x65, 0x0, 0x8}, 0x20) 3.39498238s ago: executing program 1 (id=5705): r0 = socket$inet6_sctp(0xa, 0x801, 0x84) r1 = openat$cgroup(0xffffffffffffffff, &(0x7f0000000080)='syz1\x00', 0x200002, 0x0) r2 = openat$cgroup_ro(r1, &(0x7f0000000040)='blkio.throttle.io_service_bytes_recursive\x00', 0x275a, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000005e00)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$F2FS_IOC_MOVE_RANGE(r3, 0x541b, &(0x7f0000000000)={0xffffffffffffffff}) pipe2(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x800) write$P9_RGETLOCK(r6, &(0x7f00000000c0)=ANY=[], 0xffffff6a) pipe2(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) splice(r5, 0x0, r7, 0x0, 0xfffd, 0x0) close_range(r4, 0xffffffffffffffff, 0x0) write$binfmt_script(r2, &(0x7f0000000100), 0xfecc) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x12, r2, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) r8 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000040), 0x42, 0x0) mount$fuse(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r8, @ANYBLOB=',rootmode=0000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r8, &(0x7f00000021c0)={0x2020, 0x0, 0x0, 0x0, 0x0}, 0x2020) syz_fuse_handle_req(r8, &(0x7f0000006280)="382c1fedaf023bd55640c316e44c011327f97924e5d5aac258e1e9fcc3cffdcf5f122c531cfa765707f6a50737c263545180dc10a69056b9deca02cc4be9d32a61c296609f783cc29340d5b7cc6e5131f7f51a47ab78febd6816a0659e028b99ace9ba3d1e8fee7949b4aa018ab813ce9e82da65eb7726cbd554a005b10415c9cba49179d75c558fda1e000eb35a5a9ac6bb7f4748e7bc56bcfd6d4d4cd1efef20d8b6a6deeddef38571289bb76f4d360bf36976244ebdc1533c2a4137d908165f48676b9f836aa2dc55d88579b908e91021b240cd64df75c16b643d8ef612fcfcbe064e4f404c1d82cd562b1d998dc3880cea8c973035b67b0b5e6d258b883bf936a731fccd463755a2720052b27cdd6bb8aff9838e88d993631288c2724aa377c977df238ca6061091da4b303a59472aadb97f44850c5eb4cf20b8a03a48b836c55b065e98f8ebd5c270483864c5f34862bd223e5df209b0cdc2fa4ea718b186d7c7716532af6b1d8ebc1eca23b7d2439340f1b906ad0aab6cbf0c7e716f8b6e26168e53ce83211a69048e2fa208ce49e4fa75db7adcd1954e72bd926529cbd2919f55d12cea56ac71729a7c3c31bfd05fd646f36e1e093bbd76038b9aa43536e2320415f7e44df57a3f3da057020f4a4032dc2f5dd6b9215af91917abfc0247817536762693a405908267bbcf16f24cada76f604933970c4dc6acbcac02df7a6bddd993336a226890081aea7b782f56bc0f3c334923a524f189fa13ff6f91c3e2f9bea34899e4e883e97a1debe3b192940c383b93174a330c0d2467ec845d8c14184c89c3980b042078a03e394f96ca8deea0c31d19c7687ff60c1013e7fd1f674f6d247933484a73e4a7474fba3fabfffcac470ff5084d068b7feec8f316e570e65dec305db4005173f7cee2c6c10c4b36bc1ea98862eb1c36507803cc6a91df4499ee183d6f126b063f2be49721c0edd84acdcfea536c4cd6119d08d6dea98b9cf4d5e2e868bde6be00bb9f6843b711481e7b3cc2b9a29580f042b620ceb4dbba0a3984edb1d82268ad737146c3bec6c8be1e327c4fa172ddce39aabe36ca0254855d3e3cb90835e87e1c0ae20dd2e4e2012851f5be5e92d23ff4f292d877be28afbf9eebfffbfc7602b41ce880b27622c62382be5a504dc077702fe7e06f99e35b7888b099178a372abdf4b00d6976a0af7cbe791416628e9e2bc67448cd72bfea6d0a546f6ada8049be8df153b6ce60d3fbad52c6ac5dfca71992f2310922df1f39ed1606992752bcb947101ec49fef2be2f88e118421091431179bfc876851955416955d245b646fb43df614cc4f0282f7e022ed3dd46654e644961df8875f3d7d7d3b07e2296aa13455db1a71e97d56fa82ec94d47df23d722b2bd76acd9f9becff5ddd23a724af924b856ab3ae509685155682ff4bdffb139d3c19545d1c9aea088828c1140d5a0b6b698f96a04948f47b4777767e387419c03f19ef05e8f7f90c9fea399dd07297f701dc19aa9b570d96570d59f5158eaeb01e300127ac98edb726c3ead2b57c478621348d160943a5ac1fbde6de36f3d7bfd32a78475033e3e7e1e1a51f7d781aa4f6cb05dcaef23390b07960f3d594482d1fb435af8d031b94923b4a95d71a92fc4385c6155a1bb251374912a74bb9a93ea49c32dceb79ee7b039332fcc2474d80ae668a750914b26eddfedc1b6775829c3b167c1bbc27fc2a286c61217baea3a084411df433a64d7385880e6da85869286bc08a584769875837ede54874c11f38ed3722a18abd45746149fa59f79db25fb51649f7483faec28569ed058a0bdfaabefc062ca8ea6ad45bf5759725aa62e249131b33951e2bdce3055d357ff3138204f62b37236434bcc54180ba8e1329b8c5b6b7d4b5d5dbfa473030c2a289fff573ddf7c9e5cbcb6907c836c8a1ee2605bdec36e29c6681e16628f2cf5c53fdbacca60e5a497885d8a53f74775e716aac7d6e8a2d8c6e901f8fab75d7f689b031add22a5776b186d9efe3890b0d48497addb21ea971d3a463eb4fd44ad209ae5a4b0e13d28c6838689019f5c09bee0ec2c97bd8495f761f07de47d85c64250373eff1e5dcefb8d44ff1d5ca5dc9954096d18d64fc146d93647a1fb0612962a07946305f7a8329611569bb0fee5ca5d9bb3574a07336dfd4dbd185a55fc9acdaa97481664c7a3f1fd0afc23d545a704f76c8b684656a2567a5dc3d1ee0385a003dfcbbfc988990a11871b8825073f11f3e596ec4cbd310649299e9e9a569215eae227964086a3aeb327c477b10bdb6263c0ec83a1364d0d45392c8dc4322ad5a9095548c7f2a90e2c858dca72a4376133dd3bcabf752428424c3dfdd45eaf6686c88971825849905e82de9a18a65a539cf61affad7f06368ac9cdab53e8754cf6bae6ac927ec177fc320d22d0b3da9c88284c45563066f4f194a35387238b592048dcf58873c9307cf803e3badf0ad53222825a172e00a4c678b3b6aa1785c92841b98a3be17c6becbae8dc6fc1bd3a14516780c4bf372a565a89cb8d136aa268721bfe9a988e94eb2d9ada00cd44b4815bff09d2273776a483d10e4b902fe10d3b7e5abb70bb899ed2eebabc739a2826cfe8613430210e8d9055600f61293290c767c104e881985c5db9442e0421c8013c46c70ac4719fc709b6a4d061b9d61e43914f4e2fdcea52f49086001ee848fa3a3b187229e556dc6cdb612261e57f81833fff4cf5b87fe4a6644996b5813af2e223f6bcdfa60934d195dab4413659aadac5879e0a2bbcd7074d2a2572cad5a8c57e54c658d6ef8e5ec12a18a5e3b639528931f9edb8b48f558beac97e4a361107217fde4f6cdb3977bf6153137a0de01f4537d172466e33c4a144678eac1d66f3739421592bb29aa1a82d79905c92ded53294b99b32bda357f9e5c54c0446cef03f9094920a8f12cf9b20a0532d8bf3807a5cd8cda48c65c1d076ead4f4294e2611be2bf259f1c130ddf4dd529d91bc89c5e00976d6426529515455d9beb4e5e8017f0462e5df4564b80f30c8d1dc5f5952bb8ebec67e9ac32d9bea7766b13299bbd795e086574826d67e8995ceec28b5e9f4910b2406dde7e4f0785173d955186f8cac8e0bf1998334fe9038cb6c1d2a78748d608e6931094946d69fa39a1a975e76cddb0760e5f385116c504863df0e0e46577f56f3651c2933de50072783752d48b72e160b00bd43504968e4c10eaa78b3d817efbb5e0801c807ad6706f40b0ee2a6d7b8c1380160052cdccb92d85da00612f2c117f4a7c478d1542ce4bb2b1a98d51080244256bb81195095249fabf5c8145dd2877726a3460fab386fae85ea817ae9727af519788a9e609e2c7af7b05dafa86e46acaa0d4db68a8ca1f3141a9a9f30913c9cfee4ee77b07c173701e6ac1782f7c0fcd04ec8dc857d63385e5334d2c6257b026bd1693c1a5873fcb0f47758516a252a36d192e223bde5ac01172e34b219b1973357f46191841490cce974753e16585f52c76302c1f0dca863e173490ef04562f7be29a89075b1edbbd6aca69ac55a657679853044a932ae0a1680703cd63360408d5b95b3cf88aac3647a4e7f9e0aa164f6ea15caa3d7a322a135838e21148ce3e2c6094df711e1b9929cecd2849fc8853b9577e7b2746856b2765ee9d25f76c5c1dd2eb50a6637445d14769dd50f89de41750f5386b62bb11bc40771290bff2688066979a9287ef3bdbc03c147a63fa65de0093a8e051fee9bd1b6cb6b08e854d786de031d5b7725b8c425d1fe449496e4ba2a7c074b1776a27b3e12120a909800ff2c0a0170e3a2ab3bf287428b3ce2e2cc4e2033a69a1e7f2079a2433b65f82baee57fc56a7f61e120951af47eeae897bdce10567a0ca23bedd75b0d5bcd1762082bd49e50260b1f70321f8d9b189093a8911f41b85ba9837c9d2ce20d714bf5031aff30c1e8980eb78b9443b42b4540f5bd199d24a11a4000f85a61378dd6639712e136b0f22ba72e9611e7622dd63ab955ace811a940205067f4436a835d9697e5c05b9172769d09f5b5ed476baff9a02d25ec9ddb649d14329c98d5cccd3e8aede4148560a464f3ebf72c871400ee9fb3c080ad237de65483cc828fb7afab7accd4cd6662cfe4aec487e36fb0acdda8dafae7d87691be9de4b606409b4017fe0acfa096e70d3eb6c910a9892133ee009a5469aff6de342615650237a4b56d713cec4cbe9e4a6c1ec8e7e8ffd56335d2396221b88e9a0c80612647917dcfc70f7e4a379d7be34e4370df2bfa3c1be04e8da937c6be893ff236578a8006ea09cfb2f9834e695010ebddf7521c3452ded726d8e4ecd30fc64369a555daf78339a297312e3de18a8ec54f0ea2c08a5539666913bddf24e3aee03d96675a69dc0fe359db6ed5cd8ffcc6fb3d5ea8e10cd2c6ec8f0309ab88f70d46cbe94d97e8fb9f63fcae87614fdedb83d0974a4ab3a7444591cbc7b801d9f8720d0bb97af6c6f7ddbae27266c60ad327085c5b04e33523628f5925bd15364398a6d76a257289fc6dd5512f1cd3a6352bc9b5801edcb517519185dc57f2c14627f21c98afb94a477a437cd8a3a48a37e76d1b31ddf29576abcaf16c9d2a2c22ea33e0c144bcfa13d556cda8de376e22625f7aec285289f18b75855f041e6e8c6582e9bc923d0b1c488f1a2b7969b5327978d2c762e9a657fff6902d5cd8708a8e1132b8146001b456ec33645ec4205b6e6e1430c38f3107c2fdbb3ad02d6856104c6a7fe7fc6d654af773e3da3453d0ffbb217feafd7490f2ab83ca7f50fc89f3ed3adff4e61ffdb62d50fb91ba4072a18a800492d8eea8a8f1114f91b150c725f5082520ae5aca257c42cdf35f30700a697f299fa5b02ca4c5cc8bb2972672c76a72efb89b8b1ae3ce10cb9c5a1f3bf975ee430a2f22a7124a733c83a9e7e8c1c49f824d4d57a30b7626e670ccf6ad3d547930a99e48fe17fae0a0568a090df479ecd2d1897d625b7921543c81d8e0badd93917e2265c50ecd2f343a9cc542d86890062c305084b12c1c6c6c32c5379d0f0c1af0703d9560b23f1109bd8fcaa77bb0777cd06ae3344ca53e67c8f749627711182b4a323b267894c1fe5b549181b60f92008a9eaf520a8b372e2e60e9353c46a68bd83aeb0e82ce226d1a268a288a3b3869f4bd279a85e9ed1a803cda7155f97f22c3bd36c6ab0a33fb57fdba1807557797dc8b85e9d73ef2da20769fd5d8b5928a6a14b3dde35b77b1924f6e0671b3d9059f9909f8139b9a0baf5e21a0161363ec9b6277a9e6c7bc5483575607d2c3762bf5be86a3c0d1e47c62856bb9691eea45f491ad34c73ddee85ac578ba491de427709626b8fa6d5766615d301650d4f1b606acefe1a49ede6972c561878237c913f81ec39a6ffc4c17e0c1f10c9de8aed2e157a22636f8646f3d78fd29b9a7bbc43ab7b7e8ed9ad2c583e57727b2bd9e7a124706ae25b9326883fbd18d534865c5155e1781e42173095c8db6e0fc9237e48a7c1a24d7698f458caad66c1ef8d8e386e4737a18be478c124ca0030b41ae22104cbd1e2aa336c59b0acafbb40e0def248804230a0f59082bb35c183c482906c8d45e73a5020f10428696dc4048ad8ee7cf5fbb41c735ac05633f1937e1aec67a309ba58bde0afb0829520eeae6084a0c8928950ad25966950608e087e7565f1aae5787b5107395dd39bb50c18e3f8890bec7298795213e28cadfd22972bd99e7ad3aec85762fee9ce414aa89308d8d412190adf2703b2888aebee775d531e846af311e1dac7ff5ffc993c5ac2035fc3a8453184d2d692155eaa641a2fa415a0d38dfb2d99de15cde91e9e104859f17e784a27fcf79e5c43174a6af10f4b6882ada6ce4b1285c0fdeaf661f80f2be78351f3d363143c5c21ac447d57829e949212c5525a939b7f51bece42bb372ce7e8cf370f9c3591b0fbce47d420ccc3958116fbe8cc7dbfdb45cbd350227ce48a395782668fedc203d812bbbc322f6d475b9d2cdd28964344fd29f9bb954704ba383a1db119f68f89b37d2aaa7f86a18dbf7435fc39f3eddb1644f2e10460f8f32ea90983eb6b7ea941c6d0f94165408999d548caa84ff46c38d86d1419602784d22e1a54e881f71df4cbe943acded1d18ffb8db8765bec4be8feea691aafbf137a6cd42f1fff228e27b6b82fcd486663a8dd7c91a562c05b3e6de94ef6f8711c1e023e1ca2020f452ba0ea83ac5f64ba5c4c766471eade35889930c38e6ea18ae96fe74dcd0fd304cc1cfac04082fd59fcfd735742e95b2f33b07fe018d23ee2400d91532b08bff3bea8304a6e941fcd0c58391a6a2f5c1aefb9e61c08a62914eb638f192ae3ad55a3203ae31945fb2d32fafad0dc28e11bce85797cacbfbda6b6a3d4ce680c0f0569c8292970b02926be030bff5c4d62e93a5f2ce6eb606494d640b6669c2f8370964c0676a586f06480739043d30c5d83d1aa3395fecc3d2f068fd0fde71baab4c26bca0192334c8e28dbe97212c931a8a089ebd7f10d63729a2185dd669cf2569c498cf2e89014b1bd60e44f8026397f61c36bc447b040ef6e944f140bf876a3e8ec6a0ce521d20f96f2b106740400f9136ceb9217b43839cc7557568b749d66bf7488a720e18d25f5dc81c928950e32006558558243e2c002422ef729197c718ede15990fbde8dfb5cd08beec0a1e8cdcdd474193c7869e4556803511088c9f323924d82c540fabc29231da2cb0a4aa3f998232f3452d7e7e26ce5de5198403c71203d0ff4a544fb97bf52f61038b61c4370be5619c9711f5f613a735edfd5eb881344cb2aef5e6aad12983e35c0ac93b6a9d29f2891129bc03da2030960f35958c6766c46b1498cc326cf8942b60a7debb27604897ee84c8458d0368a152e425ca346b5e929a22e6cf1dbfd15377089b8e2a9052e084435ac7e3d0bafecf7a4532bdad29883adac4b75ff764ff64ae7b5600836c0ca5a43eb0469a886c21f4c4fcaf9771e985c8355a2dcdb178c08664a9dda356e0f50791c90ba0c94a2336e8b995259de8a68a9d7ed4d35aea75bbde772c0b9281d907e2f4eaabc1fc4f492dc761f3a1f881e2eabcbbf120f03e143962fcb247cddff91ba9dffee9ffb471c73a59c2b5f19e297cf27d10474049b8b446f31ba33e2d955d4acf213720f7490af581797a806aa46a2e107dd79108ed179e9e3cf3dbc3e14939eb546690b1adea764db66fedb74424b6d4b64911b1ddbb0e0913268211ca3ca100d504a330ca7008e5981071bdac88d445e950cb8b8d4451b020ccc22670639d36baee55c30d55a204cf17434504b7eb0ab7dc1881a02579c7bb7967b8406994b446130eb3271a465792b7b99bce8028235864ba14c27eb0d4a1a4d45b20e9ba38936aa4ce5ccff19cc6346b91b36776198cc702c984fa547ddcd6ded7151fed93dfccd08d5da74884122c649170f994fb5eafc1f662b6185a78a8da314e5742124665bd56fd88c1091d93d4f2d4d59c730793f832b5d61f8fdb0697b1a16caae9a62ac4b1d796c9e003d88b1de3626609bc2b56add42752361540001eb0faea64218663313a273b77ca91028786737a1417050a3bf1476ca841fc9c6c366af214b9d0cd1578f0bfdf085e7ad2ca4531d062d99005f4017bed4634a883b2a29b7c7bd74e29430e799e63cfc2a9d1428d201a16f91eff77f2cbf759286c0208910b3a4dec4d172c8cdf8c268d008473d68d497174b692e342a7a02aa53e64130e2b8cfab79e398cb31c32343ff741f0067909e7e1ad6aeafa82efa6b8afeb7a4a46d48b967d0fb6b701a76510b99ccc7ee5f8de307e09b3a7ccf11fd209cf21402e83cad1b6bb5f66afcb612ea266a8850fc4bf2543bba7666460fd88db849de13d3c52b72e1b6e6c452dc3ac224f20407e44909f7f8f4fc3d57284b29300d74d11cab87ba0da9b8845d80dc1e3096cb5dc8411c5786a9c24edbe9870fba22f5379fe16b97b022ca02f5e329bc6e828e7035bf91985c9bfe4da82478b102f1515530883d0da0fe983f468c69e4cede1b219540ddf3b41e1adb5923f93a3f20b2de186aac8a70976c5a93ae5116c91b9dc47544cffca0926369f050f38573c2674ac91eca23e279ac8dab712e752c63959f77c578544e38b3dd4e9f55baf5bde26c1685fabef020cefc99932ecbc66d6840223ec0d37a2897e727a0e1d51233181c5f8079257994f0a3a83aabba189f84499923dde93356c330854a0bc4e8c21e01979688d8213ad442c98cc8e3b43fbb76e043e1c3b296fec481c0c9bc2413cb41f4a141efc27d8d3d602d715228c94d2abc18cafde56f2f500eeb33e103b4b7efc424168c2002ca64181938b45d13ea35a0df6496f5222bc7c35f5e43c3293128e2d20aaf01c939fe7b30e656e73961ed17f5f30a4016120993569e54e47d745d4a0b83e1a637d59784794c619176d1f44e791e6baee751e07a5d75147d783cd9518226178bac8063ffe80e1039d6df6d68522f29740a2880e0e60959af462b6d4cfca81c8535c29a1a3ab9e2cf1e9fe40d8617eab67f4d7e623c29feec5f7e2be4f0f3a24632e680b99070ea2c4f9beca376cbe243bdbf7ab6529e920b59723d0934adc1820e988663c9398fd3e939aea005b15f86d0d2f33d3507b79b58e418bf99abc2bf2e07193ae2dc6378ec021acfd7b9327b0cfa4c4f5d5e0e544ccc3567693436a3dbda2c1611c56a5b9c05b43bb6885246a6691063e0a6e0fe3b37cdfadc42564ddbe68e940e218335c7211561fcc9f3a3fdf68126b66a16546c0a7e889faff0b4089a7f9a6f74ceebafdb4cae66530a9b6876b1710b79069496ae71d5ba00de8e68fa57c3a409d3a6fbf87298f31a82a379ea3888689901119b2c1ff5956fc0181c497f0d5adac827ca77c0ae1af06c3aa0012bce0364f91381fcb85eba00887212d9d12cc342f30a7a13f360a4ed9434b9ace6e1ad15f4ac938a550b7daabe5bf03b5aebd4d7baf590e8f9f28198ec0a35ebd715c9743f4dc6454034aac4a18045cd7c965bf0de14f3a90657706d25eb47152eca1cc7ee96910851ab48fd22c77bb09286fb17669dd88655694552678d671c5f6621e6ae2c699dad5ab49ea98d1ae9329d3cc46b10b9a21801dc9004ed4ca0784f6dba45a7010915c6a3dc9c71213b56be981882efa196b697439d855fe358a95ade507873a39faf60c4f2831d65cc8ecaa9bfd62a8ecc4f414a410600ba20bdb721e7cd0cd814db4493921c4bdd7855797ebf803a73783405e8afbfd63a15dcc5abafcf45ac17c1cc320c9694003785951a75066ff5863b217d15af6fd403442e91e7b06b4753757586bc6940b51d9cceffcd5fcb8c00e2b72a971eb874712c40e52e770120fe35e6aaae1e11dcd00611dfbc435dddaa52c64c857b10cdb43fa8b05aed2d931f8df74b12a358d1d7cecf4b06f42e227dabd8772b40e076e666e5158d12c010159f9a0716d47625ed7018afa1ba8756184db30c14157a600e2667a4e45fc3f4c251a1bd9f4f32e455db6b1bc13331a91bd8fd7fe657996b6d8ab41c966cdfbbd70e2fcb8a31613a0f6ebb1038bc048957db55e91739298676306f719abe01624cb72b93908ee1f738c4bbd8a51d942dfd86d80e97361a426eaf1bd39513fc34f200d3b5e953b870a9b03c3a6a9b7f10e8b6382f3ca7ff1ab1b8811e11099d0e676be5325ba4186a2bc6e838658ebc53b9ec6880096fe33afda5f567f0deeaf79bf68816eabf2af1f38e872bbd563188f1ac50d716d8ce13089e1976c8cfc54a86090cd6d4f78deaaed0f2fba3556741968032e4ef476d05b8b97bd53fa387b8877929732577311bd1d23bbcd082b3a91a081122e3211a61fd03399cdeff80dca65ce877bd945b37dca482687309536d0b19d20ed38a9648131ff8230a57c43a0ac711eaa2adc34a0df475db73343556014043723307987d897590a1ce6525a226b28ff482a45412b9037d23dcbb67b37a5e93bba88dcb827f7822762e4c1ead43c43ab49b086745a92d37246674b582fb8954613b3937011a048e9ca2de3f1eb0598b2aa24a0dcb998c6240f44b98595da8a636386c5e3917d2f8c0057266d13efe7ffaac554d6b906724b4e83b52632ba1ef27c6c0e940ceb92a36eaf302594abdde5d7dbad905a8ada88e8d28b55b85a776227644db813ecd62daac1eacbab70c16ff5e200c8a9287b939350b2f88ab3ea3c081edfbb24822c76a33e1b3b1df00b2bf4104fdfa680ee2e5e02ccd2b2f6ca97de2ce621f778564dd45a0ac72fb0264e4b23c5c6e06d25aff17388a41e5e33e3d2b9324b9a0f30a02ee43544ae5ab476a46a93d85eda215326c45bb4dffd9bea409fd04523910a86183a0b03a052c0c22fadb62216dea93f3b95ff53a863144110c3473d4c05d39dd8136209c811b44de92ac63467fd514b748b76796ea16329263dbc0740bf8fe0d0ef5add510794c46b51a6386fdd3bbaded99905458170d1730b697ac0aac3ab9c8d47054640f57c88b7f4192f10ae394c25a13fb1f82ed1af56cc59ace39bbc9981a272cb77ad9d1c69eaf07581705d869687256a71f9c205f415afa3097efaa181ff2cb8f23459e7fbcdfef40cf4e74b0756aa56e2fe7d9981f27f6987185abb5b56753343c337e7570b900f07a710832bce233032de7443c2f32152782b79a92aee101cb1f5663b46caf068becafea95a1ec6e5306ce3a8b611b2a99274ee431ed22619ad8517c486534e106cb792b6ad70dbb53e73aefbd81138541560d9e5b8d9a0ff1982bf6bedf7e71c94638bd11c68c31ecd49d77e63b19fcbc0076e32c6e598e497a0ab546b7fe7987791cdac866b92823a424e4c480acd30f2059d9f9fc46e42882cba81fa80c30c941d0913e8e677bddb8609301b2806b977f9796630168c4449aad8f6503385f17307ab015207384c55da1123e24c7c6ea50e70b4ac039b155271a48759cacfb61554cd7e57a732e7d6e5b0c6f68fdae987af62977c2deb5633c8d55847114c094410002d47b00ecfaaa5eb9c34101e7de63452d26df77994f1a1d457448a9d4acd0bbeca5c2278c406edfe841a01ef7294346e3dc4953cb6f15c61f3f796b83397c0d2f10ff1841ce3456443aba74bc666b98cecc1759f8bdc8cbfd2c19ff2a57ac4524c6d5cf8fe33fd54789e3992f64d35926f0661171dd343ee42113b0f79ed142d328e7ac4968081e04b25b1a279a3fdaa07b78a0ce443fd72fb026a20acda3240339ef36cd156c93d7dc937ccc9e031f61c76f2af8972287033f74f90030bc36d04dcaa842ea773d116b25773458053d89b5b30583fe1194662c91bbc59a95fec4a4eb1481c8623e5aff0d48b7979c1f15bc55cee72dc536d68ba0fbfeb98c0fc8838bbdee38405782b25a0bd2fa501aa82d0b97b857d48c2548624869fed43bbe8599361ea8db3a6c86df42da6c8c8ad40c989db6bf860d5fa5219f6fc667c8076936fec1fb46ef6e2e677ff404cf17c2d478424c8e01b2cbb4f3bb6526d773db7bae4a5d26a50d081c6e2f16ad1f36e7d3b7e79a9f39a389b438ea150c14bdeec8dcd46488ab6eca454c3e5a2eddc", 0x2000, &(0x7f0000001dc0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000100)={0x90, 0x0, 0x0, {0x80000000004, 0x0, 0x0, 0x0, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000}}}, 0x0, 0x0, 0x0, 0x0}) write$FUSE_INIT(r8, &(0x7f0000004200)={0x50, 0x0, r9}, 0x50) mount$fuse(0x0, &(0x7f0000000080)='./file0/../file0/file0\x00', &(0x7f00000000c0), 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r8, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=r10]) getsockopt$bt_hci(r0, 0x84, 0x0, &(0x7f00000010c0)=""/4111, &(0x7f0000000000)=0x100f) 3.167906658s ago: executing program 0 (id=5706): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20000008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000500)=0x4) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000400)='sched_switch\x00', r3}, 0x10) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000002c80)={0x3, 0xc, &(0x7f0000000540)=ANY=[@ANYRESHEX, @ANYBLOB="03387adc0f2e5f952bb5361c9b5746a20d2db10e034c3c8720876f763323fb674ad8d483e8d488272346a3027202537adb971a38d3d9e414d82bc1ebb265d67dd24a2d4105a87a6b0aebba6e3486a9a6580fae000069190ce74b608019e5d616b35bc96bbe248750f20fa0e020906b41d20adbed2bc5fd0a2830bf4757dc9680d1aa3cd50c6b3f460063aacfa7513137f1a1470176e6fd7274e28dc4bd9727da7917932a79afb8a5ddd40123ac7a73da1c25419148209bcda92af29f76187d9939141050656f545828ade7f3ddde73020d02b580559e087de493", @ANYBLOB="f39165bb9602c4cc8a39225d98c83bbb927c9fac99498a7577a508bbe618a40fedf22b7c5c5fae3d527d67a745a9c8cd09cca6d5403a26cbfef8e0b0212b9679bca86a45b462dd94734d67036973a605f0ae026a694ffddd19591562e6f80453122c82155ed3b0beeb6286ec92b8459f7fe8faa609c8b330495bdee239328ea2c247b155fc0ddfc798525afee2aab7ccfb239957f530e6814c1b8a9d63e3aad556b2e0fda4095154746b0f0f88bd779d4c048aadd80d8e25e44069e9d9fa2a3e725ac4ad454ab70bbc109fbb78450a8d39965f648d519ba22be01e2d5634a28e05164ae2664d3dc9c7450b963a0c2d80194f42d1c6aac3e920953a2e2931b7e5bc2ab781d5d25ecb1084e9129bd00629551721a8de9191ba337012cbd80faa0cde5fab94e993f032b4f095f52e93563e010720cd6e1ede51060470594be80a0e5864a3d445ee53011eb6cb3eb7e94e9a7dff3920bce160d8e379232158d644e8edba4eb285745d26774ba71355a29239b5dfc29323b46118c6444389240c9554cddf7e265c40e54e888ffeeb10eb4091eefecfd1dc6b8313ea93baa4d6b72d9fa1834abd9d99325884a09666357d10ebdbff2c4b078fc3bf89fa15b568976b789db61d9695246d0f3ec9167f9d34c495fc97e115a054eb972c4c7ce18d8320f7b9ff936a8dbe10e3fa08769fff0071779a715690e2caf80d7018764387db542ef6004db546a83787a7b7bc14a740c4e25e6ce35d5ea9d482778af8c42ec011977176b3ee52098431304bedab05ec1ffa714db404bd967be40f926498b63748d793a00f9eb10126fecebb8ea407685c4082afa88edac964f6fd36582a870c6b412ce3bbcf2381aeea1206d6bbe99492d7658c67e7fc0fe9d5cc7f068e2bfab17f2ce15b1ef2d2f2b4952deb8933edd99f2073b5be61820be44668402016a764fd3a59448333ba00f760519723177dbd1e4ea3edb30d9b764bb29a027d5e3ad123185d148b1eb74eae220fe6a76ead36eb61985c275f4855b66a1cac50b22bd687ddadecdd227f1b84ea864b5e8b44501b1a5356889b73405dff85a6d982aad5c8297b6efa99331e6c798028ff00fe78a03381ae26c2d5ce1cc810a1960fd17e373c221929a716b4909317467009384e4b2ed1db413feeabb0114f7944e0a77b2511bb2f1a51fb5f422a1b289ea4e4b86127d672d64975eb469308e9b7d5bf4d186b3a307d613894757be748f3fa8e35c1594d8c9a61b53be15a24d2afca94a070361120507bed419dc6627535218239b3864daeca3dd023f9b9068736713efc3103c348faacb4842a9a12a7f7096441e1fd737900659392e4708373effa5c65aad99d5673276ac2ed975aad581ff0748702dbf0374080cf15f366990bb3040204cadfbeb8674496dd466808bd3bf3bcc586ac7fc949a5920618a42b2216b8e4f19f6510f422cdccc4fd95ebdb579395b1c756c6758a5df2a8678e3690976c7716575017434a30e40de5de903ecbd4677bce1e37ba7e92aee1dc0ff8d3f32a30074ac13b68ff50d1a5b887ee7945521f1696684b11e44a08d05ba05faf79f913af62748cb87e81fd92fe501d91f89aa1ab854f978f2735ba0c0073ac77b40b26a6370c3cdea3e5e66c2d48d0d79cea8e11bdeb15dee6f7d1512f2afa2b6c6959cd5396ec60cb63cef1b448ab8e9fce7e7fe0ac5222c410ab8260f33d2f0375a66ec4b9439d81137da5ea473e5d838c33ca364085538310408e6d9ee8d853d170a0685dfae30a32356542deefccf98da322787f9d203b7328dd4587881e649ff1f71eca30b383499df258afc7439fd3d732958d181d8f98197e5f0013491628b6ae0edbe1e52dd90c14b74e35a53ece57d8aeb377778b9fe74f29912f4369a15b4429bafb59399a179867286d831843464b5aa14ad6dc40add02b5e6071231b1a49910463e54403b6815184a05faef29a4630109a4e8e4c9dc5a39fe62d6377d1ddce9f783ea6dcc64d2346e4b5b003575477124d7bcc4f95f7bca78db17f170fa0cced0667d94639fb6d58c89f1025cb81a3c66c35d5b7aa62fa9e00804dece7eab9112ab45b5986266aa9e737bd3936ffbc5053a552bdf5d8c9bcf609f123fc6adc57900140c5ae06f0e2d30a5b8c84f7ee162737b42d2cee6bc914610af5bea7e6c07a4ad5c09dc3f0ed7f9283a581ef6b97cb9546162d0d76cb9ec29f047db0d0eb0040885185b1d80c58323a8ab0b889ff132265fdeeff7a505ae9a940d222b76d6cdfbb227d2eb7314e6b362667e1f1a88445ffcca12f3c934a843cfd35e5b06b956ca4a805ab66163ab804b9cce29f577aed4237ab1e10881537cb2609f1964753e57f725982a433deb201caf3a0fc0659f7d154bda35d1c1ad7e0e10ba116b37a4dcb9df54e7fab20d2039e2da60818feeab1e217949ccc08429823d42df52f7febb6d349a8b3182ff81bef986c3a50a151e91665869916209b43e4df6e0cf82ff78b382a23219a9392f47f34ba56f13676f81116de30ea0e4073b459d78dda77f39b831fe0371658b42f89749f5338e23f5b8042fdb62d1c82072a1445a8ae354ca8c4bb1855b429224ed3cfb4f0553e8451c8e0f34fc1e5ac03aa2b191683e31d559b6231dd6a1c53764c634aa1558ea852e4ffc3b54050b20a281e85ac215c078f9cbff9de04d6e957142fca73c9882505be2764ab796050e0ba67dbbe813da7c74f4c626c452d530523feb7a50ebfdf8567c18314d47648535c0f1c5bf75f9391e8ec25cbcba0321b262d65436189578e796e20addf1c44ed1ee7beaa6bfd43ee686468193d2bb735326a043d907e0d385399ed489a459270edcd660bb28f472db06489cc7dccd19e9a3957815973fb462130e7caae4b12aa041f01a75c5810bc310d8436f98a1e653e35fd9efa0f4caa46e5197f3797a6a017742eb17dec3e98e1a7aca79d65dabc3e29d096fb54880a9d9d85d44cbe1a464b3eab0c80567e49ffcfd0d522cb403987a219303dbb974a818acefbf2cc274935f3490a1ca06368efa7f0b034d2d4588c17891d77b6a21dbdaa35c57dc676edd5c400b6740a11778a6fff7104ab9adb9173f1dad1a3a3a5b54ec7b3c62ed694d845b62511ee7b01029579b5633fad6ebb3e00c5df3d5f5f321729b8154fdc30510cded1d8ce2eff9324d436e79721feba0086162559407a998674f02e75f7dd3e24014c9175fe7f92d63d20274c475c638dc96c64aa609beb53c1a5e655acb2a93c4f0afca73f993b6faf93eb814eb0d8aa281aa64609f2d4c6aa503e3b22423a6c2b2c1de5c61ff4ef9932ae2fb3953983ae7e52cfd654fe6740c3c839a8be9cac35c8c6f2e0c035c0be1f68dfb29a7b06949d42f74e905fde00bbe4623ff5925f2ff3a731561a6a62c1e553a6fcb0bed44682ed5bfbe4abed5e1eccb7d9fe6dd2bf3852c35f67d9d500eaee9f1549bd8ab555f4f85bda577ebec156b0af4506aa8975bdeff83e07e62c31d019a422f722e70cb3ba415f01c54bb906164ad58d40ea2121e6ccfc1f2cf62e8efea6f15f1b7fa75afed3ed26f8cf4d963878db6695be0854cd208fc6fcf2b91d817a1bdbf6c90f0b70fa654116ea12976fa0a46c7fe8c1ccf83c4988101e8c451971d3e00f7fb1945335b8085b1c8fb0306f6d9897559317e93572563cdfe87cf67155ac3faabbab2a1d1ab8e1373478419fa0639f8f610d9afd87b88733be8f99d843f7f32d8f3cc13801f11c8b6d6a7a89b6ba7caef0f552b4809ee414f94503c87e2b8ffd2a03f3dc9c0083e1f87dfa471324ec86c46f2bf3dd8b5794fb83a67317273d68bb8cdacefd045eaa4ca809e56088689636ac73415ba92853e18c97e937e71fdac730543a79c9d6e21efdf763d915402d03ac16233107f276808bda6fd6ed165d61d8c4048aa754f273f404ec7cb55fd1f4b26b755d5c2669d4f931130a4e577090abf772d6de8db0b8e8f3155261921bdbfe8772fdfbbacb4e5144de5be26c45c8fe2c586f61b1c834db2249c3e0bee1587fc352c9dddc910427d12e296d1fae7aec5863cff8ca2d0d5d74d3af79ad8b3b31a9a9b0f0f6025f80bf9e032d2c0cf40b6e36e8da792d1a143c4c827f47fe29377c5b7471a0af77eeb92b6161e2965437ff45884649345335684502ea56bc1a0fca13d08b99b69028308f8097d36bd9944580f144cc1b5d352c6510c45d062eae6d9b03bec37e122b5ba460671c05d92dfa04a13aaae33843cb8c7c97171381f8876fa4dc8abb35c5faa821ae5cc21a5ea8fbce1e6610423765d8dca8ac4eb025382bdd5fa73fe112094ea9066bb5c6ec0e45cddb1be7bf85a97619b4d8cc", @ANYRES32=r2, @ANYRES64=r1], &(0x7f0000000380)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x37}, 0x90) r4 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ethtool(&(0x7f00000003c0), r4) getsockopt$inet_pktinfo(0xffffffffffffffff, 0x0, 0x8, 0x0, &(0x7f00000004c0)) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$SO_BINDTODEVICE(r6, 0x1, 0x19, &(0x7f0000000440)='wlan0\x00', 0x10) setsockopt$sock_int(r6, 0x1, 0x3c, &(0x7f00000000c0)=0x200, 0x4) sendto$inet(r6, 0x0, 0x0, 0x20008802, &(0x7f0000000180)={0x2, 0x4e21, @multicast2}, 0x10) sendto$inet(r6, &(0x7f0000000100)='J', 0xfdbe, 0x4004084, 0x0, 0x11000a00) socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000300)={'syz_tun\x00'}) sendmsg$nl_route(r5, 0x0, 0x400c000) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'dummy0\x00'}) socket$packet(0x11, 0x2, 0x300) r7 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r7, 0x8933, &(0x7f0000000100)={'batadv_slave_0\x00', 0x0}) r9 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_add_memb(r9, 0x107, 0x1, &(0x7f0000000340)={r8, 0x1, 0x6, @local}, 0x10) 3.075914408s ago: executing program 1 (id=5707): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) ioctl$AUTOFS_DEV_IOCTL_ISMOUNTPOINT(0xffffffffffffffff, 0xc018937e, 0x0) sched_setscheduler(0x0, 0x2, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) prlimit64(0x0, 0x0, &(0x7f0000000140)={0x8}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x1, &(0x7f00000003c0)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = syz_open_dev$usbfs(&(0x7f0000000100), 0x76, 0x101b01) ioctl$USBDEVFS_DISCONNECT_CLAIM(0xffffffffffffffff, 0x5522, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) ioctl$USBDEVFS_DISCONNECT_CLAIM(r3, 0x8108551b, &(0x7f00000006c0)={0x0, 0x0, "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"}) ioctl$USBDEVFS_SETINTERFACE(r3, 0x80045510, &(0x7f0000000000)) madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0x0) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) madvise(&(0x7f000055f000/0x2000)=nil, 0x2000, 0x16) r4 = syz_open_procfs$pagemap(0xffffffffffffffff, 0x0) ioctl$PAGEMAP_SCAN(r4, 0xc0606610, &(0x7f00000001c0)={0x60, 0x0, &(0x7f00001b8000/0x2000)=nil, &(0x7f000064f000/0x2000)=nil, 0x0, &(0x7f00000003c0)=[{}], 0x1}) move_pages(0x0, 0x1efe, &(0x7f0000000080), 0x0, &(0x7f0000000040), 0x0) mkdir(&(0x7f0000000400)='./file1\x00', 0x0) 2.154265551s ago: executing program 0 (id=5708): r0 = socket$nl_route(0x10, 0x3, 0x0) pipe(&(0x7f0000000180)={0xffffffffffffffff}) ioctl$BTRFS_IOC_QGROUP_LIMIT(r1, 0x8030942b, &(0x7f00000001c0)={0x5, {0x24, 0x0, 0x2, 0x0, 0x3ff}}) r2 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r3 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) setsockopt$inet6_MCAST_LEAVE_GROUP(r2, 0x29, 0x2d, &(0x7f0000000080)={0x5, {{0xa, 0x4e23, 0xe03d, @dev={0xfe, 0x80, '\x00', 0x37}, 0x5}}}, 0x88) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x1, 0x0) ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) ioctl$IOMMU_TEST_OP_ACCESS_RW(r3, 0x3b66, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000000)={'bridge0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000a40)=@getstats={0x1c, 0x5e, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, r5}}, 0x1c}, 0x1, 0xba01}, 0x0) 1.157543411s ago: executing program 1 (id=5709): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFQNL_MSG_CONFIG(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000180)={0x24, 0x2, 0x3, 0x101, 0x0, 0x0, {}, [@NFQA_CFG_MASK={0x8}, @NFQA_CFG_FLAGS={0x8, 0x5, 0x1, 0x0, 0x22}]}, 0x24}}, 0x0) 987.472269ms ago: executing program 0 (id=5710): r0 = socket$netlink(0x10, 0x3, 0x0) (async) r1 = socket(0x10, 0x2, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000140), 0x24}}, 0x0) (async) syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), r1) (async) getsockname$qrtr(r1, &(0x7f0000000640), &(0x7f0000000680)=0xc) lsetxattr(&(0x7f0000000580)='./file0\x00', &(0x7f00000005c0)=@known='trusted.overlay.impure\x00', &(0x7f0000000600)=']\x00', 0x2, 0x2) (async) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000001c0)={'wlan0\x00'}) (async) r2 = openat$dlm_plock(0xffffffffffffff9c, &(0x7f0000000000), 0x41, 0x0) syz_open_dev$dri(&(0x7f0000000100), 0x0, 0x0) ioctl$DRM_IOCTL_SET_VERSION(r2, 0xc0106407, &(0x7f0000000000)={0x1, 0x2, 0x1, 0xffffffff}) (async) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) (async) sched_setaffinity(0x0, 0x8, &(0x7f0000000040)=0x10001) (async) r3 = openat$hwrng(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) preadv(r3, &(0x7f0000000240)=[{&(0x7f0000033a80)=""/102386, 0xfffffd6e}], 0x1, 0x0, 0x0) (async) r4 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) close(r3) (async) socket$nl_netfilter(0x10, 0x3, 0xc) (async) r5 = socket$netlink(0x10, 0x3, 0x0) writev(r5, &(0x7f0000000200)=[{&(0x7f0000000080)="580000001400192340834b00000d8c560a067f0200ff000000000000000058000b4824ca945f64009400ff0325010ebc000000000000008000f0fffeffe809005300fff5dd000000100001000a0c10000000010000000000", 0x58}], 0x1) (async) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f000000c2c0)={0x0, 0x0, 0x0}, 0x400c840) (async) r6 = open(0x0, 0x14507e, 0x0) ioctl$VHOST_SET_VRING_ERR(0xffffffffffffffff, 0x4008af22, &(0x7f0000000000)={0x0, r6}) ioctl$VHOST_SET_VRING_ADDR(r4, 0x4028af11, &(0x7f0000000280)={0x0, 0x0, 0x0, &(0x7f0000000500)=""/73, 0x0}) r7 = syz_open_dev$usbfs(&(0x7f0000000040), 0x80000000003, 0x101301) ioctl$USBDEVFS_FREE_STREAMS(r7, 0x802c550a, &(0x7f0000000000)=ANY=[@ANYBLOB="0200a006002a17006000000002000020d3"]) (async) mremap(&(0x7f00003d8000/0x3000)=nil, 0x3000, 0x400000, 0x3, &(0x7f0000000000/0x400000)=nil) (async) ioctl$USBDEVFS_REAPURBNDELAY(r7, 0x4008550c, 0x0) (async) ioctl$VHOST_VSOCK_SET_RUNNING(r4, 0x4004af61, &(0x7f0000000300)) (async) ioctl$VHOST_SET_VRING_KICK(r4, 0x4008af20, &(0x7f00000000c0)) mkdir(0x0, 0x0) 984.322337ms ago: executing program 3 (id=5711): r0 = socket(0x10, 0xa, 0x0) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0, 0x0}, &(0x7f0000cab000)=0xc) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20000008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) r5 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r5}, 0x10) syz_open_procfs(0x0, &(0x7f00000000c0)='task\x00') fchdir(0xffffffffffffffff) mount(0x0, &(0x7f0000000080)='.\x00', &(0x7f0000000000)='proc\x00', 0x0, 0x0) fcntl$getownex(0xffffffffffffffff, 0x10, &(0x7f0000000140)) r6 = syz_open_procfs(0x0, 0x0) ioctl$FS_IOC_GET_ENCRYPTION_KEY_STATUS(r6, 0x6612, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) setregid(r1, 0xffffffffffffffff) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) bind$unix(r7, &(0x7f0000000180)=@file={0x0, './file1\x00'}, 0x6e) mount(&(0x7f00000003c0)=@loop={'/dev/loop', 0x0}, &(0x7f0000000140)='./file0\x00', &(0x7f0000000100)='udf\x00', 0x0, 0x0) quotactl$Q_SETINFO(0x0, &(0x7f0000000000)=@loop={'/dev/loop', 0x0}, 0xee00, 0x0) bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f0000000040)={0xffffffffffffffff}, 0x4) socket$alg(0x26, 0x5, 0x0) 967.247819ms ago: executing program 1 (id=5712): r0 = syz_open_dev$video4linux(&(0x7f00000000c0), 0x20000006, 0x200880) r1 = openat$ptp0(0xffffffffffffff9c, &(0x7f0000000000), 0x80800, 0x0) r2 = memfd_create(&(0x7f0000000200)='\xf3\xd9\x00\x00\x918\xc0y\x01c\x1fnux\x00sV\a\x01\x00l \xed\xd7\x8e\x7f\x89\xb8\xc5;~\x04\x03~K\xf9P\x84\x9d\x15\xa4=\xfa\x81\f\x1et\x10\x0e\xcf', 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r3 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)) sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r6 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x6, 0x4, 0xfff, 0x7}, 0x48) bpf$PROG_LOAD(0x5, 0x0, 0x0) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r6, @ANYBLOB="0000000000000000b7080000000400007b8af8ff00000000bfa200000000000007020000fcffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000340)={&(0x7f0000000300)='sched_switch\x00', r7}, 0x10) creat(&(0x7f0000000240)='./bus\x00', 0x0) socket$nl_route(0x10, 0x3, 0x0) ioctl$F2FS_IOC_MOVE_RANGE(0xffffffffffffffff, 0xc020f509, &(0x7f0000000180)={0xffffffffffffffff, 0x4, 0x0, 0x4}) syz_genetlink_get_family_id$gtp(&(0x7f0000000240), 0xffffffffffffffff) socket(0x10, 0x0, 0x0) r8 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCETHTOOL(r8, 0x8946, &(0x7f0000000680)={'veth0_to_team\x00', &(0x7f0000000500)=@ethtool_cmd={0x1}}) pwrite64(r2, 0x0, 0x0, 0x2000) lseek(r2, 0x0, 0x4) ioctl$PTP_SYS_OFFSET_PRECISE(r1, 0xc0403d08, &(0x7f0000000040)) syz_usb_connect(0x0, 0x36, &(0x7f0000000200)={{0x12, 0x1, 0x0, 0xb1, 0x87, 0xa8, 0x8, 0x711, 0x210, 0xba13, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x2, 0x24, 0x2c, 0x82, 0x0, [], [{{0x9, 0x5, 0x4, 0x2}}, {{0x9, 0x5, 0x8, 0x2}}]}}]}}]}}, 0x0) syz_usb_control_io$hid(0xffffffffffffffff, 0x0, 0x0) ioctl$VIDIOC_DQEVENT(r0, 0x80885659, 0x0) 907.277563ms ago: executing program 2 (id=5713): ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000000)={'gre0\x00', &(0x7f00000002c0)={'syztnl1\x00', 0x0, 0x0, 0x0, 0x0, 0x0, {{0x31, 0x4, 0x0, 0x0, 0xc4, 0x67, 0x0, 0x0, 0x0, 0x0, @dev, @remote, {[@timestamp={0x44, 0x18, 0x0, 0x0, 0x9, [0x401, 0x5, 0x0, 0x0, 0x0]}, @timestamp_prespec={0x44, 0x44, 0xc0, 0x3, 0x1, [{@private=0xa010102}, {@multicast1}, {@remote, 0x8000}, {@dev, 0x65c}, {@rand_addr=0x64010100}, {@empty}, {@multicast1, 0xffd200}, {@private=0xa010100, 0x7}]}, @timestamp_prespec={0x44, 0x3c, 0x0, 0x3, 0x0, [{@loopback}, {@remote}, {@multicast2, 0xb}, {@private=0xa010100}, {@rand_addr=0x64010101}, {@broadcast, 0x52b1}, {@multicast2}]}, @noop, @noop, @end, @rr={0x7, 0x13, 0x0, [@remote, @multicast1, @private=0xa010102, @remote]}]}}}}}) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='hugetlb.2MB.usage_in_bytes\x00', 0x275a, 0x0) write$binfmt_script(r2, &(0x7f0000000240), 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x280000b, 0x28011, r2, 0x0) r3 = dup(r1) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000080)={0x0, 0x2, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000300)=[@text64={0x40, 0x0}], 0xffff, 0x0, 0x0, 0x0) syz_open_dev$vbi(&(0x7f0000000000), 0x1, 0x2) ioctl$KVM_RUN(r4, 0xae80, 0x0) 64.898122ms ago: executing program 3 (id=5714): ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000000)={'gre0\x00', &(0x7f00000002c0)={'syztnl1\x00', 0x0, 0x0, 0x0, 0x0, 0x0, {{0x31, 0x4, 0x0, 0x0, 0xc4, 0x67, 0x0, 0x0, 0x0, 0x0, @dev, @remote, {[@timestamp={0x44, 0x18, 0x0, 0x0, 0x9, [0x401, 0x5, 0x0, 0x0, 0x0]}, @timestamp_prespec={0x44, 0x44, 0xc0, 0x3, 0x1, [{@private=0xa010102}, {@multicast1}, {@remote, 0x8000}, {@dev={0xac, 0x14, 0x14, 0x35}, 0x65c}, {@rand_addr=0x64010100}, {@empty}, {@multicast1, 0xffd200}, {@private=0xa010100, 0x7}]}, @timestamp_prespec={0x44, 0x3c, 0x0, 0x3, 0x8, [{@loopback}, {@remote}, {@multicast2, 0xb}, {@private=0xa010100}, {@rand_addr=0x64010101}, {@broadcast, 0x52b1}, {@multicast2}]}, @noop, @noop, @end, @rr={0x7, 0x13, 0x0, [@remote, @multicast1, @private=0xa010102, @remote]}]}}}}}) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='hugetlb.2MB.usage_in_bytes\x00', 0x275a, 0x0) write$binfmt_script(r2, &(0x7f0000000240), 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x280000b, 0x28011, r2, 0x0) r3 = dup(r1) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000080)={0x0, 0x2, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000300)=[@text64={0x40, 0x0}], 0xffff, 0x0, 0x0, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000200)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0) syz_open_dev$vbi(&(0x7f0000000000), 0x1, 0x2) ioctl$KVM_RUN(r4, 0xae80, 0x0) 0s ago: executing program 0 (id=5715): r0 = openat2(0xffffffffffffff9c, &(0x7f0000000200)='./file0/file0\x00', &(0x7f0000000700)={0x0, 0xc2, 0x3}, 0x18) r1 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x23, 0x800000000004, @tid=r1}, &(0x7f0000bbdffc)) prctl$PR_SCHED_CORE(0x3e, 0x0, 0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000200)) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000000), 0x651, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r5 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000980)={0x18, 0x3, &(0x7f00000019c0)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f00000000c0)='syzkaller\x00'}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000080)='contention_end\x00', r5}, 0x10) r6 = syz_open_dev$sndctrl(&(0x7f0000000000), 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_RAWMIDI_NEXT_DEVICE(r6, 0xc0045520, &(0x7f0000000040)=0xfffffffc) r7 = openat$zero(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) preadv(r7, &(0x7f0000000080)=[{&(0x7f0000000100)=""/254, 0xfffffc47}, {&(0x7f0000000200)=""/171, 0xab}, {&(0x7f00000002c0)=""/243, 0xe2}], 0x50, 0x0, 0x0) rt_sigprocmask(0x0, &(0x7f000078b000)={[0xfffffffffffffffd]}, 0x0, 0x8) r8 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, 0x0, &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={0x0, r8}, 0x10) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) munlockall() bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000100)={&(0x7f0000000840)=ANY=[@ANYRES16=r0], &(0x7f0000000280)=""/101, 0x90, 0x65, 0x0, 0x8}, 0x20) kernel console output (not intermixed with test programs): parsing attributes in process `syz.4.4942'. [ 2170.173291][T25403] VFS: could not find a valid V7 on nullb0. [ 2170.493595][T25410] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 2172.039599][T25424] xt_CT: You must specify a L4 protocol and not use inversions on it [ 2174.040897][ T944] usb 2-1: new high-speed USB device number 88 using dummy_hcd [ 2174.127044][T25445] VFS: could not find a valid V7 on nullb0. [ 2174.251127][ T944] usb 2-1: Using ep0 maxpacket: 8 [ 2174.272227][ T944] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x4 has invalid wMaxPacketSize 0 [ 2174.333143][ T944] usb 2-1: config 0 interface 0 altsetting 0 bulk endpoint 0x4 has invalid maxpacket 0 [ 2174.372175][ T944] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x8 has invalid wMaxPacketSize 0 [ 2174.390910][ T944] usb 2-1: config 0 interface 0 altsetting 0 bulk endpoint 0x8 has invalid maxpacket 0 [ 2174.422614][ T944] usb 2-1: New USB device found, idVendor=0711, idProduct=0210, bcdDevice=ba.13 [ 2174.442516][ T944] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2174.755202][ T944] usb 2-1: Product: syz [ 2174.759560][ T944] usb 2-1: Manufacturer: syz [ 2174.764445][ T944] usb 2-1: SerialNumber: syz [ 2174.858785][ T944] usb 2-1: config 0 descriptor?? [ 2174.892341][ T944] mct_u232 2-1:0.0: MCT U232 converter detected [ 2174.910468][ T944] mct_u232 ttyUSB0: expected endpoint missing [ 2174.955834][T25459] netlink: 'syz.4.4953': attribute type 21 has an invalid length. [ 2175.004602][T25459] netlink: 'syz.4.4953': attribute type 20 has an invalid length. [ 2175.742850][T25474] netlink: 'syz.3.4957': attribute type 21 has an invalid length. [ 2175.764446][T25474] netlink: 'syz.3.4957': attribute type 20 has an invalid length. [ 2175.773978][T21687] usb 1-1: new high-speed USB device number 80 using dummy_hcd [ 2175.987217][T21687] usb 1-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 2176.011690][T21687] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 2176.022155][T21687] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 2176.031277][T21687] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 2176.047478][T21687] usb 1-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 2176.057362][T25478] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 2176.067432][T21687] usb 1-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 2176.076491][T21687] usb 1-1: Product: syz [ 2176.080736][T21687] usb 1-1: Manufacturer: syz [ 2176.092327][T21687] cdc_wdm 1-1:1.0: skipping garbage [ 2176.099118][T21687] cdc_wdm 1-1:1.0: skipping garbage [ 2176.119042][T21687] cdc_wdm 1-1:1.0: cdc-wdm0: USB WDM device [ 2176.129732][T21687] cdc_wdm 1-1:1.0: Unknown control protocol [ 2176.329161][T19312] usb 2-1: USB disconnect, device number 88 [ 2176.378789][T19312] mct_u232 2-1:0.0: device disconnected [ 2176.393054][ C0] cdc_wdm 1-1:1.0: nonzero urb status received: -71 [ 2176.399672][ C0] cdc_wdm 1-1:1.0: wdm_int_callback - 0 bytes [ 2176.406033][ C0] cdc_wdm 1-1:1.0: nonzero urb status received: -71 [ 2176.412621][ C0] cdc_wdm 1-1:1.0: wdm_int_callback - 0 bytes [ 2176.418937][ C0] cdc_wdm 1-1:1.0: nonzero urb status received: -71 [ 2176.425525][ C0] cdc_wdm 1-1:1.0: wdm_int_callback - 0 bytes [ 2176.431920][ C0] cdc_wdm 1-1:1.0: nonzero urb status received: -71 [ 2176.438535][ C0] cdc_wdm 1-1:1.0: wdm_int_callback - 0 bytes [ 2176.444833][ C0] cdc_wdm 1-1:1.0: nonzero urb status received: -71 [ 2176.451417][ C0] cdc_wdm 1-1:1.0: wdm_int_callback - 0 bytes [ 2176.457705][ C0] cdc_wdm 1-1:1.0: nonzero urb status received: -71 [ 2176.464285][ C0] cdc_wdm 1-1:1.0: wdm_int_callback - 0 bytes [ 2176.470561][ C0] cdc_wdm 1-1:1.0: nonzero urb status received: -71 [ 2176.477141][ C0] cdc_wdm 1-1:1.0: wdm_int_callback - 0 bytes [ 2176.483422][ C0] cdc_wdm 1-1:1.0: nonzero urb status received: -71 [ 2176.489999][ C0] cdc_wdm 1-1:1.0: wdm_int_callback - 0 bytes [ 2176.496275][ C0] cdc_wdm 1-1:1.0: nonzero urb status received: -71 [ 2176.502858][ C0] cdc_wdm 1-1:1.0: wdm_int_callback - 0 bytes [ 2176.509139][ C0] cdc_wdm 1-1:1.0: nonzero urb status received: -71 [ 2176.515720][ C0] cdc_wdm 1-1:1.0: wdm_int_callback - 0 bytes [ 2176.532888][T21687] usb 1-1: USB disconnect, device number 80 [ 2176.532965][ C0] cdc_wdm 1-1:1.0: wdm_int_callback - usb_submit_urb failed with result -19 [ 2176.953829][T25495] xt_CT: You must specify a L4 protocol and not use inversions on it [ 2177.213531][T19312] usb 2-1: new high-speed USB device number 89 using dummy_hcd [ 2179.273973][T19312] usb 2-1: config 0 has no interfaces? [ 2179.286393][T19312] usb 2-1: New USB device found, idVendor=05ac, idProduct=022a, bcdDevice= 0.00 [ 2179.308824][T19312] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2179.339655][T19312] usb 2-1: config 0 descriptor?? [ 2179.495648][T25506] netlink: 16 bytes leftover after parsing attributes in process `syz.3.4964'. [ 2179.498701][T25507] overlayfs: missing 'lowerdir' [ 2179.515140][T25506] netlink: 40 bytes leftover after parsing attributes in process `syz.3.4964'. [ 2180.004833][T19312] usb 2-1: USB disconnect, device number 89 [ 2180.126634][T25506] bond5: entered allmulticast mode [ 2180.135282][T25506] 8021q: adding VLAN 0 to HW filter on device bond5 [ 2181.650921][T17178] usb 3-1: new high-speed USB device number 76 using dummy_hcd [ 2182.041140][T17178] usb 3-1: Using ep0 maxpacket: 16 [ 2182.069674][T17178] usb 3-1: New USB device found, idVendor=04dd, idProduct=8002, bcdDevice=fc.b6 [ 2182.106041][T17178] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2182.122970][T17178] usb 3-1: Product: syz [ 2182.127183][T17178] usb 3-1: Manufacturer: syz [ 2182.267474][T17178] usb 3-1: SerialNumber: syz [ 2182.306443][T17178] usb 3-1: config 0 descriptor?? [ 2182.469346][T17178] safe_serial 3-1:0.0: safe_serial converter detected [ 2182.941526][T17178] usb 3-1: safe_serial converter now attached to ttyUSB0 [ 2183.283872][T25551] xt_CT: You must specify a L4 protocol and not use inversions on it [ 2183.471113][T19312] usb 4-1: new high-speed USB device number 72 using dummy_hcd [ 2183.694307][T19312] usb 4-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 2183.742079][T19312] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 2183.767118][T19312] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 2183.776984][T19312] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 2183.784284][T25554] overlayfs: missing 'lowerdir' [ 2183.809400][T19312] usb 4-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 2183.819057][T19312] usb 4-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 2183.831015][T19312] usb 4-1: Product: syz [ 2183.840954][T19312] usb 4-1: Manufacturer: syz [ 2183.876637][T19312] cdc_wdm 4-1:1.0: skipping garbage [ 2183.885844][T19312] cdc_wdm 4-1:1.0: skipping garbage [ 2183.906477][T19312] cdc_wdm 4-1:1.0: cdc-wdm0: USB WDM device [ 2183.921742][T19312] cdc_wdm 4-1:1.0: Unknown control protocol [ 2184.171264][T14754] usb 3-1: USB disconnect, device number 76 [ 2184.213166][T14754] safe_serial ttyUSB0: safe_serial converter now disconnected from ttyUSB0 [ 2184.250627][T14754] safe_serial 3-1:0.0: device disconnected [ 2184.554658][ C1] wdm_int_callback: 50 callbacks suppressed [ 2184.554682][ C1] cdc_wdm 4-1:1.0: nonzero urb status received: -71 [ 2184.567193][ C1] wdm_int_callback: 50 callbacks suppressed [ 2184.567209][ C1] cdc_wdm 4-1:1.0: wdm_int_callback - 0 bytes [ 2184.579497][ C1] cdc_wdm 4-1:1.0: nonzero urb status received: -71 [ 2184.586124][ C1] cdc_wdm 4-1:1.0: wdm_int_callback - 0 bytes [ 2184.592478][ C1] cdc_wdm 4-1:1.0: nonzero urb status received: -71 [ 2184.599064][ C1] cdc_wdm 4-1:1.0: wdm_int_callback - 0 bytes [ 2184.605397][ C1] cdc_wdm 4-1:1.0: nonzero urb status received: -71 [ 2184.611983][ C1] cdc_wdm 4-1:1.0: wdm_int_callback - 0 bytes [ 2184.618307][ C1] cdc_wdm 4-1:1.0: nonzero urb status received: -71 [ 2184.624897][ C1] cdc_wdm 4-1:1.0: wdm_int_callback - 0 bytes [ 2184.631303][ C1] cdc_wdm 4-1:1.0: nonzero urb status received: -71 [ 2184.637928][ C1] cdc_wdm 4-1:1.0: wdm_int_callback - 0 bytes [ 2184.644316][ C1] cdc_wdm 4-1:1.0: nonzero urb status received: -71 [ 2184.650942][ C1] cdc_wdm 4-1:1.0: wdm_int_callback - 0 bytes [ 2184.657284][ C1] cdc_wdm 4-1:1.0: nonzero urb status received: -71 [ 2184.663867][ C1] cdc_wdm 4-1:1.0: wdm_int_callback - 0 bytes [ 2184.670182][ C1] cdc_wdm 4-1:1.0: nonzero urb status received: -71 [ 2184.676766][ C1] cdc_wdm 4-1:1.0: wdm_int_callback - 0 bytes [ 2184.683076][ C1] cdc_wdm 4-1:1.0: nonzero urb status received: -71 [ 2184.689665][ C1] cdc_wdm 4-1:1.0: wdm_int_callback - 0 bytes [ 2184.724044][T17178] usb 4-1: USB disconnect, device number 72 [ 2184.724227][ C1] cdc_wdm 4-1:1.0: wdm_int_callback - usb_submit_urb failed with result -19 [ 2185.358515][T25570] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 2188.329614][T25602] netlink: 16 bytes leftover after parsing attributes in process `syz.2.4990'. [ 2188.647886][T25606] xt_CT: You must specify a L4 protocol and not use inversions on it [ 2189.673400][T18691] Bluetooth: hci4: unexpected event for opcode 0x2019 [ 2189.855048][T25617] netlink: 20 bytes leftover after parsing attributes in process `syz.0.4993'. [ 2189.911104][T21687] usb 3-1: new high-speed USB device number 77 using dummy_hcd [ 2190.286152][T21687] usb 3-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 2190.300865][T21687] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 2190.325438][T21687] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 2190.336981][T21687] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 2190.374398][T21687] usb 3-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 2190.389559][T21687] usb 3-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 2190.402374][T21687] usb 3-1: Product: syz [ 2190.406585][T21687] usb 3-1: Manufacturer: syz [ 2190.425917][T21687] cdc_wdm 3-1:1.0: skipping garbage [ 2190.434804][T21687] cdc_wdm 3-1:1.0: skipping garbage [ 2190.451482][T21687] cdc_wdm 3-1:1.0: cdc-wdm0: USB WDM device [ 2190.457418][T21687] cdc_wdm 3-1:1.0: Unknown control protocol [ 2190.742677][T25632] batadv_slave_0: entered promiscuous mode [ 2190.749526][T25631] batadv_slave_0: left promiscuous mode [ 2190.752469][T23964] usb 3-1: USB disconnect, device number 77 [ 2190.755167][ C1] wdm_int_callback: 131 callbacks suppressed [ 2190.755186][ C1] cdc_wdm 3-1:1.0: nonzero urb status received: -71 [ 2190.773559][ C1] wdm_int_callback: 131 callbacks suppressed [ 2190.773578][ C1] cdc_wdm 3-1:1.0: wdm_int_callback - 0 bytes [ 2190.785633][ C1] cdc_wdm 3-1:1.0: wdm_int_callback - usb_submit_urb failed with result -19 [ 2191.026678][ T944] usb 4-1: new high-speed USB device number 73 using dummy_hcd [ 2191.191221][T25640] netlink: 'syz.1.4999': attribute type 21 has an invalid length. [ 2191.199152][T25640] netlink: 'syz.1.4999': attribute type 20 has an invalid length. [ 2191.207747][T25640] IPv6: NLM_F_CREATE should be specified when creating new route [ 2191.273156][ T944] usb 4-1: config 0 has no interfaces? [ 2191.288529][ T944] usb 4-1: New USB device found, idVendor=05ac, idProduct=022a, bcdDevice= 0.00 [ 2191.315621][ T944] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2191.338349][ T944] usb 4-1: config 0 descriptor?? [ 2191.888559][T25650] netlink: 16 bytes leftover after parsing attributes in process `syz.2.5002'. [ 2191.917489][T23964] usb 4-1: USB disconnect, device number 73 [ 2191.934097][T25650] netlink: 16 bytes leftover after parsing attributes in process `syz.2.5002'. [ 2192.360089][T25658] xt_CT: You must specify a L4 protocol and not use inversions on it [ 2194.328108][T18691] Bluetooth: hci4: Controller not accepting commands anymore: ncmd = 0 [ 2194.339160][T18691] Bluetooth: hci4: Injecting HCI hardware error event [ 2194.352459][T24935] Bluetooth: hci4: hardware error 0x00 [ 2194.542924][T25675] batadv_slave_0: entered promiscuous mode [ 2194.549361][T25674] batadv_slave_0: left promiscuous mode [ 2196.581216][T24935] Bluetooth: hci4: Opcode 0x0c03 failed: -110 [ 2196.990109][T25694] netlink: 16 bytes leftover after parsing attributes in process `syz.4.5015'. [ 2197.004908][ T944] usb 4-1: new high-speed USB device number 74 using dummy_hcd [ 2197.012952][T25694] netlink: 16 bytes leftover after parsing attributes in process `syz.4.5015'. [ 2197.252675][ T944] usb 4-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 2197.275230][ T944] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 2197.315377][ T944] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 2197.336348][ T944] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 2197.349849][T25699] xt_CT: You must specify a L4 protocol and not use inversions on it [ 2197.377490][ T944] usb 4-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 2197.420930][ T944] usb 4-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 2197.454296][ T944] usb 4-1: Product: syz [ 2197.458500][ T944] usb 4-1: Manufacturer: syz [ 2197.517965][ T944] cdc_wdm 4-1:1.0: skipping garbage [ 2197.530897][ T944] cdc_wdm 4-1:1.0: skipping garbage [ 2197.548736][ T944] cdc_wdm 4-1:1.0: cdc-wdm0: USB WDM device [ 2197.560942][ T944] cdc_wdm 4-1:1.0: Unknown control protocol [ 2198.339363][ C0] cdc_wdm 4-1:1.0: nonzero urb status received: -71 [ 2198.346009][ C0] cdc_wdm 4-1:1.0: wdm_int_callback - 0 bytes [ 2198.352437][ C0] cdc_wdm 4-1:1.0: nonzero urb status received: -71 [ 2198.359072][ C0] cdc_wdm 4-1:1.0: wdm_int_callback - 0 bytes [ 2198.365476][ C0] cdc_wdm 4-1:1.0: nonzero urb status received: -71 [ 2198.372088][ C0] cdc_wdm 4-1:1.0: wdm_int_callback - 0 bytes [ 2198.378410][ C0] cdc_wdm 4-1:1.0: nonzero urb status received: -71 [ 2198.385016][ C0] cdc_wdm 4-1:1.0: wdm_int_callback - 0 bytes [ 2198.391319][ C0] cdc_wdm 4-1:1.0: nonzero urb status received: -71 [ 2198.397924][ C0] cdc_wdm 4-1:1.0: wdm_int_callback - 0 bytes [ 2198.404226][ C0] cdc_wdm 4-1:1.0: nonzero urb status received: -71 [ 2198.410832][ C0] cdc_wdm 4-1:1.0: wdm_int_callback - 0 bytes [ 2198.417133][ C0] cdc_wdm 4-1:1.0: nonzero urb status received: -71 [ 2198.423826][ C0] cdc_wdm 4-1:1.0: wdm_int_callback - 0 bytes [ 2198.430244][ C0] cdc_wdm 4-1:1.0: nonzero urb status received: -71 [ 2198.436860][ C0] cdc_wdm 4-1:1.0: wdm_int_callback - 0 bytes [ 2198.443309][ C0] cdc_wdm 4-1:1.0: nonzero urb status received: -71 [ 2198.449944][ C0] cdc_wdm 4-1:1.0: wdm_int_callback - 0 bytes [ 2198.456364][ C0] cdc_wdm 4-1:1.0: nonzero urb status received: -71 [ 2198.462981][ C0] cdc_wdm 4-1:1.0: wdm_int_callback - 0 bytes [ 2198.537002][ T53] usb 4-1: USB disconnect, device number 74 [ 2198.537004][ C0] cdc_wdm 4-1:1.0: wdm_int_callback - usb_submit_urb failed with result -19 [ 2198.904889][T25708] xt_CT: You must specify a L4 protocol and not use inversions on it [ 2199.810094][T25717] VFS: could not find a valid V7 on nullb0. [ 2201.611515][T25740] netlink: 16 bytes leftover after parsing attributes in process `syz.3.5026'. [ 2201.649069][T25740] netlink: 16 bytes leftover after parsing attributes in process `syz.3.5026'. [ 2203.247744][T25756] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 2205.794538][T25774] xt_CT: You must specify a L4 protocol and not use inversions on it [ 2208.974604][T25795] netlink: 16 bytes leftover after parsing attributes in process `syz.3.5039'. [ 2209.027095][T25787] overlayfs: missing 'lowerdir' [ 2209.099641][T25795] netlink: 16 bytes leftover after parsing attributes in process `syz.3.5039'. [ 2209.810903][ T53] usb 3-1: new high-speed USB device number 78 using dummy_hcd [ 2210.023162][ T53] usb 3-1: config 0 has no interfaces? [ 2210.039308][ T53] usb 3-1: New USB device found, idVendor=05ac, idProduct=022a, bcdDevice= 0.00 [ 2210.077067][ T53] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2210.183060][ T53] usb 3-1: config 0 descriptor?? [ 2210.722318][ T53] usb 3-1: USB disconnect, device number 78 [ 2212.372358][T25823] overlayfs: missing 'lowerdir' [ 2212.700140][T25831] netlink: 'syz.2.5048': attribute type 21 has an invalid length. [ 2212.709731][T25831] netlink: 'syz.2.5048': attribute type 20 has an invalid length. [ 2213.744690][T25845] netlink: 16 bytes leftover after parsing attributes in process `syz.1.5052'. [ 2213.769423][T25845] netlink: 16 bytes leftover after parsing attributes in process `syz.1.5052'. [ 2213.963067][T25841] overlayfs: missing 'lowerdir' [ 2214.309926][T25855] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 2214.570949][T25858] netlink: 8 bytes leftover after parsing attributes in process `syz.1.5054'. [ 2217.013575][T25887] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 2217.402950][T25896] netlink: 16 bytes leftover after parsing attributes in process `syz.2.5064'. [ 2217.464537][T25896] netlink: 16 bytes leftover after parsing attributes in process `syz.2.5064'. [ 2217.569849][T25891] overlayfs: missing 'lowerdir' [ 2217.851609][T25898] netlink: 'syz.1.5065': attribute type 21 has an invalid length. [ 2217.904576][T25898] netlink: 168 bytes leftover after parsing attributes in process `syz.1.5065'. [ 2218.681287][T17084] usb 3-1: new high-speed USB device number 79 using dummy_hcd [ 2218.970886][T17084] usb 3-1: Using ep0 maxpacket: 8 [ 2218.999467][T17084] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x4 has invalid wMaxPacketSize 0 [ 2219.067342][T17084] usb 3-1: config 0 interface 0 altsetting 0 bulk endpoint 0x4 has invalid maxpacket 0 [ 2219.089065][T17084] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x8 has invalid wMaxPacketSize 0 [ 2219.101708][T17084] usb 3-1: config 0 interface 0 altsetting 0 bulk endpoint 0x8 has invalid maxpacket 0 [ 2219.117685][T17084] usb 3-1: New USB device found, idVendor=0711, idProduct=0210, bcdDevice=ba.13 [ 2219.136635][T17084] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2219.156256][T17084] usb 3-1: Product: syz [ 2219.160626][T17084] usb 3-1: Manufacturer: syz [ 2219.166782][T17084] usb 3-1: SerialNumber: syz [ 2219.185627][T17084] usb 3-1: config 0 descriptor?? [ 2219.193214][T17084] mct_u232 3-1:0.0: MCT U232 converter detected [ 2219.203750][T17084] mct_u232 ttyUSB0: expected endpoint missing [ 2220.629525][T25925] netlink: 'syz.0.5072': attribute type 21 has an invalid length. [ 2220.678951][T25925] netlink: 168 bytes leftover after parsing attributes in process `syz.0.5072'. [ 2220.964497][T14754] usb 3-1: USB disconnect, device number 79 [ 2220.995221][T14754] mct_u232 3-1:0.0: device disconnected [ 2221.538598][T25942] netlink: 8 bytes leftover after parsing attributes in process `syz.4.5077'. [ 2221.613361][T25942] netlink: 8 bytes leftover after parsing attributes in process `syz.4.5077'. [ 2229.454549][T25972] overlayfs: missing 'lowerdir' [ 2230.579348][T25996] netlink: 8 bytes leftover after parsing attributes in process `syz.0.5091'. [ 2230.658139][T25994] netlink: 'syz.2.5089': attribute type 21 has an invalid length. [ 2230.671717][T25994] netlink: 168 bytes leftover after parsing attributes in process `syz.2.5089'. [ 2230.721248][T25996] netlink: 8 bytes leftover after parsing attributes in process `syz.0.5091'. [ 2232.016722][T25998] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 2232.128120][T26011] overlayfs: missing 'lowerdir' [ 2232.323595][T26022] netlink: 16 bytes leftover after parsing attributes in process `syz.0.5095'. [ 2232.356907][T26022] netlink: 32 bytes leftover after parsing attributes in process `syz.0.5095'. [ 2232.934158][T26022] bond1: entered allmulticast mode [ 2232.949831][T26030] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 2233.076398][T26022] 8021q: adding VLAN 0 to HW filter on device bond1 [ 2234.681409][T24935] Bluetooth: hci2: command 0x0406 tx timeout [ 2235.021489][T18691] Bluetooth: Wrong link type (-71) [ 2236.531043][T26056] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 2237.940248][T26074] netlink: 'syz.2.5107': attribute type 21 has an invalid length. [ 2237.966816][T26074] netlink: 168 bytes leftover after parsing attributes in process `syz.2.5107'. [ 2238.198775][T26081] netlink: 16 bytes leftover after parsing attributes in process `syz.0.5109'. [ 2238.234983][T26081] netlink: 24 bytes leftover after parsing attributes in process `syz.0.5109'. [ 2238.802123][T26081] bond2: entered allmulticast mode [ 2238.886251][T26081] 8021q: adding VLAN 0 to HW filter on device bond2 [ 2239.121497][T26087] xt_CT: You must specify a L4 protocol and not use inversions on it [ 2239.831695][T26106] VFS: could not find a valid V7 on nullb0. [ 2242.477607][T26117] overlayfs: missing 'lowerdir' [ 2243.469054][ T53] usb 4-1: new high-speed USB device number 75 using dummy_hcd [ 2243.705763][T26135] xt_CT: You must specify a L4 protocol and not use inversions on it [ 2243.761258][ T53] usb 4-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 2243.782827][ T53] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 2243.839041][ T53] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 2243.876850][ T53] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 2243.956606][ T53] usb 4-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 2244.012854][ T53] usb 4-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 2244.023187][ T53] usb 4-1: Product: syz [ 2244.027386][ T53] usb 4-1: Manufacturer: syz [ 2244.049704][ T53] cdc_wdm 4-1:1.0: skipping garbage [ 2244.063116][ T53] cdc_wdm 4-1:1.0: skipping garbage [ 2244.078386][ T53] cdc_wdm 4-1:1.0: cdc-wdm0: USB WDM device [ 2244.086847][ T53] cdc_wdm 4-1:1.0: Unknown control protocol [ 2244.769702][ C1] wdm_int_callback: 303 callbacks suppressed [ 2244.769726][ C1] cdc_wdm 4-1:1.0: nonzero urb status received: -71 [ 2244.770543][T23964] usb 4-1: USB disconnect, device number 75 [ 2244.775739][ C1] wdm_int_callback: 303 callbacks suppressed [ 2244.775759][ C1] cdc_wdm 4-1:1.0: wdm_int_callback - 0 bytes [ 2244.775783][ C1] cdc_wdm 4-1:1.0: wdm_int_callback - usb_submit_urb failed with result -19 [ 2248.588635][T26171] netlink: 'syz.3.5130': attribute type 21 has an invalid length. [ 2248.669823][T26171] netlink: 168 bytes leftover after parsing attributes in process `syz.3.5130'. [ 2248.873256][T26155] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 2249.368554][T26184] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 2249.831421][T26190] overlayfs: missing 'lowerdir' [ 2249.982497][T26198] xt_CT: You must specify a L4 protocol and not use inversions on it [ 2250.182519][T26203] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 2252.077633][T26217] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 2252.431783][T26221] netlink: 16 bytes leftover after parsing attributes in process `syz.1.5141'. [ 2252.467437][T26222] xt_CT: You must specify a L4 protocol and not use inversions on it [ 2252.493413][T26221] netlink: 24 bytes leftover after parsing attributes in process `syz.1.5141'. [ 2253.599168][T26221] bond1: entered allmulticast mode [ 2253.654300][T26221] 8021q: adding VLAN 0 to HW filter on device bond1 [ 2254.918368][T26241] batadv_slave_0: entered promiscuous mode [ 2255.029235][T26238] batadv_slave_0: left promiscuous mode [ 2255.218451][ T9] usb 3-1: new high-speed USB device number 80 using dummy_hcd [ 2255.417613][T26247] kvm: kvm [26246]: vcpu0, guest rIP: 0x18e Unhandled WRMSR(0xc2) = 0xfe [ 2255.454367][T26247] kvm: kvm [26246]: vcpu0, guest rIP: 0x18e Unhandled WRMSR(0xc2) = 0x8fe [ 2255.470998][ T9] usb 3-1: Using ep0 maxpacket: 32 [ 2255.485819][ T9] usb 3-1: New USB device found, idVendor=174f, idProduct=6a31, bcdDevice=26.3f [ 2255.506013][ T9] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2255.530823][ T9] usb 3-1: Product: syz [ 2255.541007][ T9] usb 3-1: Manufacturer: syz [ 2255.556724][ T9] usb 3-1: SerialNumber: syz [ 2255.573529][ T9] usb 3-1: config 0 descriptor?? [ 2255.593716][ T9] gspca_main: stk1135-2.14.0 probing 174f:6a31 [ 2255.609729][T26254] xt_CT: You must specify a L4 protocol and not use inversions on it [ 2256.163850][ T9] gspca_stk1135: reg_w 0x2 err -110 [ 2256.170081][ T9] gspca_stk1135: serial bus timeout: status=0x00 [ 2256.191002][ T9] gspca_stk1135: Sensor write failed [ 2256.212424][ T9] gspca_stk1135: serial bus timeout: status=0x00 [ 2256.228610][ T9] gspca_stk1135: Sensor write failed [ 2256.246897][ T9] gspca_stk1135: serial bus timeout: status=0x00 [ 2256.263710][ T9] gspca_stk1135: Sensor read failed [ 2256.280915][ T9] gspca_stk1135: serial bus timeout: status=0x00 [ 2256.306261][ T9] gspca_stk1135: Sensor read failed [ 2256.326350][ T9] gspca_stk1135: Detected sensor type unknown (0x0) [ 2256.345031][ T9] gspca_stk1135: serial bus timeout: status=0x00 [ 2256.370575][ T9] gspca_stk1135: Sensor read failed [ 2256.387788][ T9] gspca_stk1135: serial bus timeout: status=0x00 [ 2256.543312][ T9] gspca_stk1135: Sensor read failed [ 2256.549133][ T9] gspca_stk1135: serial bus timeout: status=0x00 [ 2256.555646][ T9] gspca_stk1135: Sensor write failed [ 2256.561436][ T9] gspca_stk1135: serial bus timeout: status=0x00 [ 2256.567756][ T9] gspca_stk1135: Sensor write failed [ 2256.574808][ T9] stk1135 3-1:0.0: probe with driver stk1135 failed with error -110 [ 2257.381624][T14754] usb 3-1: USB disconnect, device number 80 [ 2257.650328][T26274] netlink: 16 bytes leftover after parsing attributes in process `syz.3.5152'. [ 2257.661103][T26274] netlink: 24 bytes leftover after parsing attributes in process `syz.3.5152'. [ 2257.763663][T17178] usb 2-1: new low-speed USB device number 90 using dummy_hcd [ 2258.894211][T17178] usb 2-1: config 1 contains an unexpected descriptor of type 0x1, skipping [ 2258.914869][T17178] usb 2-1: config 1 has an invalid descriptor of length 1, skipping remainder of the config [ 2258.934301][T17178] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 2258.959342][T17178] usb 2-1: string descriptor 0 read error: -22 [ 2258.968311][T17178] usb 2-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 2258.977890][T17178] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2258.992139][T26274] bond6: entered allmulticast mode [ 2259.001396][T26274] 8021q: adding VLAN 0 to HW filter on device bond6 [ 2259.007701][T17178] usb 2-1: 0:2 : does not exist [ 2259.019225][T26288] batadv_slave_0: entered promiscuous mode [ 2259.025616][ T53] usb 3-1: new high-speed USB device number 81 using dummy_hcd [ 2259.299364][ T53] usb 3-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 2259.347398][T26282] batadv_slave_0: left promiscuous mode [ 2259.364048][ T53] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 2259.510852][ T53] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 2259.951318][T17178] usb 4-1: new high-speed USB device number 76 using dummy_hcd [ 2260.260956][ T53] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 2260.278505][ T53] usb 3-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 2260.289252][ T53] usb 3-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 2260.297385][ T53] usb 3-1: Product: syz [ 2260.301669][ T53] usb 3-1: Manufacturer: syz [ 2260.310999][T17178] usb 4-1: Using ep0 maxpacket: 8 [ 2260.313006][ T53] cdc_wdm 3-1:1.0: skipping garbage [ 2260.321355][ T53] cdc_wdm 3-1:1.0: skipping garbage [ 2260.337040][ T53] cdc_wdm 3-1:1.0: cdc-wdm0: USB WDM device [ 2260.337331][T17178] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x4 has invalid wMaxPacketSize 0 [ 2260.357702][ T53] cdc_wdm 3-1:1.0: Unknown control protocol [ 2260.370827][T17178] usb 4-1: config 0 interface 0 altsetting 0 bulk endpoint 0x4 has invalid maxpacket 0 [ 2260.400984][T17178] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x8 has invalid wMaxPacketSize 0 [ 2260.402920][ T53] usb 2-1: USB disconnect, device number 90 [ 2260.410818][T17178] usb 4-1: config 0 interface 0 altsetting 0 bulk endpoint 0x8 has invalid maxpacket 0 [ 2260.474959][T17178] usb 4-1: New USB device found, idVendor=0711, idProduct=0210, bcdDevice=ba.13 [ 2260.513788][T17178] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2260.541610][T17178] usb 4-1: Product: syz [ 2260.548185][T17178] usb 4-1: Manufacturer: syz [ 2260.553489][T17178] usb 4-1: SerialNumber: syz [ 2260.569579][T17178] usb 4-1: config 0 descriptor?? [ 2260.595855][T17178] mct_u232 4-1:0.0: MCT U232 converter detected [ 2260.615231][T17178] mct_u232 ttyUSB0: expected endpoint missing [ 2260.695866][T26300] batadv_slave_0: entered promiscuous mode [ 2261.353051][T26297] batadv_slave_0: left promiscuous mode [ 2261.691622][ C1] cdc_wdm 3-1:1.0: nonzero urb status received: -71 [ 2261.698269][ C1] cdc_wdm 3-1:1.0: wdm_int_callback - 0 bytes [ 2261.699878][T17178] usb 3-1: USB disconnect, device number 81 [ 2261.704346][ C1] cdc_wdm 3-1:1.0: wdm_int_callback - usb_submit_urb failed with result -19 [ 2261.908900][T26304] kvm: kvm [26303]: vcpu0, guest rIP: 0x18e Unhandled WRMSR(0xc2) = 0xfe [ 2261.923322][T26304] kvm: kvm [26303]: vcpu0, guest rIP: 0x18e Unhandled WRMSR(0xc2) = 0x8fe [ 2261.954459][T26311] xt_CT: You must specify a L4 protocol and not use inversions on it [ 2262.272659][T17178] usb 4-1: USB disconnect, device number 76 [ 2262.285885][T17178] mct_u232 4-1:0.0: device disconnected [ 2265.004956][T26337] batadv_slave_0: entered promiscuous mode [ 2265.026512][T26336] batadv_slave_0: entered promiscuous mode [ 2265.034362][T26315] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 2265.083867][T26341] netlink: 16 bytes leftover after parsing attributes in process `syz.2.5171'. [ 2265.094885][T14754] usb 2-1: new low-speed USB device number 91 using dummy_hcd [ 2265.105825][T26341] netlink: 24 bytes leftover after parsing attributes in process `syz.2.5171'. [ 2265.290123][T26341] bond4: entered allmulticast mode [ 2265.297294][T26341] 8021q: adding VLAN 0 to HW filter on device bond4 [ 2265.305436][T14754] usb 2-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 2265.318091][T14754] usb 2-1: config 1 has no interface number 1 [ 2265.331105][T26330] batadv_slave_0: left promiscuous mode [ 2265.366317][T14754] usb 2-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0 [ 2265.438798][T26334] batadv_slave_0: left promiscuous mode [ 2265.449231][T14754] usb 2-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 0, changing to 4 [ 2265.647210][T14754] usb 2-1: config 1 interface 2 altsetting 1 endpoint 0x82 has invalid maxpacket 512, setting to 0 [ 2267.368337][T14754] usb 2-1: string descriptor 0 read error: -71 [ 2267.390078][T14754] usb 2-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 2267.443352][T14754] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2267.512731][T14754] usb 2-1: can't set config #1, error -71 [ 2267.552951][T14754] usb 2-1: USB disconnect, device number 91 [ 2267.641140][T26363] netlink: 'syz.3.5174': attribute type 21 has an invalid length. [ 2267.720842][T26363] netlink: 'syz.3.5174': attribute type 20 has an invalid length. [ 2268.147617][T26367] kvm: kvm [26365]: vcpu0, guest rIP: 0x18e Unhandled WRMSR(0xc2) = 0xfe [ 2268.196756][T26367] kvm: kvm [26365]: vcpu0, guest rIP: 0x18e Unhandled WRMSR(0xc2) = 0x8fe [ 2268.499243][T26381] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 2269.295316][T26396] batadv_slave_0: entered promiscuous mode [ 2269.374986][T26397] xt_CT: You must specify a L4 protocol and not use inversions on it [ 2269.582303][T26388] batadv_slave_0: left promiscuous mode [ 2269.852159][T26405] batadv_slave_0: entered promiscuous mode [ 2270.488725][T26401] batadv_slave_0: left promiscuous mode [ 2270.727326][T26409] netlink: 16 bytes leftover after parsing attributes in process `syz.3.5187'. [ 2270.771721][T26409] netlink: 24 bytes leftover after parsing attributes in process `syz.3.5187'. [ 2270.895368][T26409] bond7: entered allmulticast mode [ 2270.901285][T26409] 8021q: adding VLAN 0 to HW filter on device bond7 [ 2271.050917][T17178] usb 2-1: new low-speed USB device number 92 using dummy_hcd [ 2271.066784][T26424] VFS: could not find a valid V7 on nullb0. [ 2271.076539][T26413] kvm: kvm [26412]: vcpu0, guest rIP: 0x18e Unhandled WRMSR(0xc2) = 0xfe [ 2271.106187][T26413] kvm: kvm [26412]: vcpu0, guest rIP: 0x18e Unhandled WRMSR(0xc2) = 0x8fe [ 2271.264341][T17178] usb 2-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 2271.275437][T17178] usb 2-1: config 1 has no interface number 1 [ 2271.287828][T17178] usb 2-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0 [ 2271.317145][T17178] usb 2-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 0, changing to 4 [ 2271.404408][T17178] usb 2-1: config 1 interface 2 altsetting 1 endpoint 0x82 has invalid maxpacket 512, setting to 0 [ 2271.434814][T17178] usb 2-1: string descriptor 0 read error: -22 [ 2271.451393][T17178] usb 2-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 2271.460668][T17178] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2271.511990][T17178] usb 2-1: low speed audio streaming not supported [ 2271.759516][T17178] usb 2-1: USB disconnect, device number 92 [ 2272.780930][T26351] udevd[26351]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 2273.949731][T26444] netlink: 'syz.0.5196': attribute type 21 has an invalid length. [ 2273.985642][T26444] netlink: 168 bytes leftover after parsing attributes in process `syz.0.5196'. [ 2274.215093][T26456] xt_CT: You must specify a L4 protocol and not use inversions on it [ 2276.271309][T26473] netlink: 'syz.0.5202': attribute type 21 has an invalid length. [ 2276.296912][T26473] netlink: 'syz.0.5202': attribute type 20 has an invalid length. [ 2276.511553][T19312] usb 3-1: new high-speed USB device number 82 using dummy_hcd [ 2277.022378][T19312] usb 3-1: unable to read config index 0 descriptor/start: -61 [ 2277.030038][T19312] usb 3-1: can't read configurations, error -61 [ 2277.442741][T19312] usb 3-1: new high-speed USB device number 83 using dummy_hcd [ 2277.725816][T19312] usb 3-1: unable to read config index 0 descriptor/start: -61 [ 2277.749315][T26486] netlink: 'syz.4.5205': attribute type 21 has an invalid length. [ 2277.757441][T19312] usb 3-1: can't read configurations, error -61 [ 2277.772156][T19312] usb usb3-port1: attempt power cycle [ 2277.965016][T26486] netlink: 168 bytes leftover after parsing attributes in process `syz.4.5205'. [ 2278.258985][T26491] netlink: 'syz.1.5207': attribute type 21 has an invalid length. [ 2278.267165][T26491] netlink: 168 bytes leftover after parsing attributes in process `syz.1.5207'. [ 2278.270910][T19312] usb 3-1: new high-speed USB device number 84 using dummy_hcd [ 2278.321152][T19312] usb 3-1: unable to read config index 0 descriptor/start: -61 [ 2278.331757][T19312] usb 3-1: can't read configurations, error -61 [ 2278.451056][T26504] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 2278.491184][T19312] usb 3-1: new high-speed USB device number 85 using dummy_hcd [ 2278.822728][T19312] usb 3-1: unable to read config index 0 descriptor/start: -61 [ 2278.838921][T19312] usb 3-1: can't read configurations, error -61 [ 2278.858453][T19312] usb usb3-port1: unable to enumerate USB device [ 2281.229335][T26528] xt_CT: You must specify a L4 protocol and not use inversions on it [ 2281.262698][T26518] netlink: 'syz.3.5211': attribute type 21 has an invalid length. [ 2281.280051][T26518] netlink: 168 bytes leftover after parsing attributes in process `syz.3.5211'. [ 2281.480919][ T9] usb 5-1: new high-speed USB device number 90 using dummy_hcd [ 2281.646796][T26535] netlink: 'syz.0.5216': attribute type 21 has an invalid length. [ 2281.656119][T26535] netlink: 'syz.0.5216': attribute type 20 has an invalid length. [ 2281.731012][ T9] usb 5-1: Using ep0 maxpacket: 32 [ 2281.748054][ T9] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 2281.778923][ T9] usb 5-1: config 1 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 2281.871261][ T9] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40 [ 2282.070070][ T9] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2282.135800][ T9] usb 5-1: Product: syz [ 2282.149716][ T9] usb 5-1: Manufacturer: syz [ 2282.177798][ T9] usb 5-1: SerialNumber: syz [ 2282.692100][T26537] netlink: 'syz.2.5218': attribute type 21 has an invalid length. [ 2282.700335][ T9] usblp 5-1:1.0: usblp0: USB Unidirectional printer dev 90 if 0 alt 0 proto 1 vid 0x0525 pid 0xA4A8 [ 2282.719156][T26537] netlink: 168 bytes leftover after parsing attributes in process `syz.2.5218'. [ 2283.023431][ T9] usb 5-1: USB disconnect, device number 90 [ 2283.039189][ T9] usblp0: removed [ 2295.382345][T26583] xt_CT: You must specify a L4 protocol and not use inversions on it [ 2295.931351][T26588] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 2298.548084][T24935] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 2298.561302][T24935] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 2298.584276][T24935] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 2298.607198][T24935] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 2298.620092][T24935] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 2298.629476][T24935] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 2298.728969][T26618] batadv_slave_0: entered promiscuous mode [ 2298.840922][ T53] usb 5-1: new high-speed USB device number 91 using dummy_hcd [ 2299.322154][ T53] usb 5-1: config 0 has no interfaces? [ 2299.337106][ T53] usb 5-1: New USB device found, idVendor=05ac, idProduct=022a, bcdDevice= 0.00 [ 2299.364443][ T53] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2299.374421][T26612] batadv_slave_0: left promiscuous mode [ 2299.429233][ T53] usb 5-1: config 0 descriptor?? [ 2299.994174][T23964] usb 5-1: USB disconnect, device number 91 [ 2300.279613][T18316] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2300.354363][T26610] chnl_net:caif_netlink_parms(): no params data found [ 2300.608609][T18316] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2300.671575][T24935] Bluetooth: hci0: command tx timeout [ 2301.045459][T18316] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2301.239206][T18316] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2301.298624][T26644] xt_CT: You must specify a L4 protocol and not use inversions on it [ 2301.709049][T26610] bridge0: port 1(bridge_slave_0) entered blocking state [ 2301.801199][T26610] bridge0: port 1(bridge_slave_0) entered disabled state [ 2301.821052][T26610] bridge_slave_0: entered allmulticast mode [ 2301.846407][T26610] bridge_slave_0: entered promiscuous mode [ 2301.887593][T26610] bridge0: port 2(bridge_slave_1) entered blocking state [ 2301.940224][T26610] bridge0: port 2(bridge_slave_1) entered disabled state [ 2301.979624][T26610] bridge_slave_1: entered allmulticast mode [ 2302.041985][T26610] bridge_slave_1: entered promiscuous mode [ 2302.751178][T24935] Bluetooth: hci0: command tx timeout [ 2303.385954][T26610] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 2303.960950][T26610] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 2304.211299][T26667] netlink: 'syz.1.5246': attribute type 21 has an invalid length. [ 2304.256808][T26667] netlink: 'syz.1.5246': attribute type 20 has an invalid length. [ 2304.464890][T26610] team0: Port device team_slave_0 added [ 2304.585336][T26665] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 2304.719176][T26610] team0: Port device team_slave_1 added [ 2304.794621][T18316] bridge_slave_1: left allmulticast mode [ 2304.800410][T18316] bridge_slave_1: left promiscuous mode [ 2304.811283][T18316] bridge0: port 2(bridge_slave_1) entered disabled state [ 2304.831040][T24935] Bluetooth: hci0: command tx timeout [ 2304.840729][T18316] bridge_slave_0: left allmulticast mode [ 2304.854342][T18316] bridge_slave_0: left promiscuous mode [ 2304.861181][T18316] bridge0: port 1(bridge_slave_0) entered disabled state [ 2305.551274][ T9] usb 5-1: new high-speed USB device number 92 using dummy_hcd [ 2305.970886][ T9] usb 5-1: Using ep0 maxpacket: 8 [ 2305.992998][ T9] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x4 has invalid wMaxPacketSize 0 [ 2306.034846][ T9] usb 5-1: config 0 interface 0 altsetting 0 bulk endpoint 0x4 has invalid maxpacket 0 [ 2306.072805][ T9] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x8 has invalid wMaxPacketSize 0 [ 2306.109759][ T9] usb 5-1: config 0 interface 0 altsetting 0 bulk endpoint 0x8 has invalid maxpacket 0 [ 2306.143346][ T9] usb 5-1: New USB device found, idVendor=0711, idProduct=0210, bcdDevice=ba.13 [ 2306.186449][T26687] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 2306.196426][ T9] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2306.216711][ T9] usb 5-1: Product: syz [ 2306.221021][ T9] usb 5-1: Manufacturer: syz [ 2306.225642][ T9] usb 5-1: SerialNumber: syz [ 2306.303812][ T9] usb 5-1: config 0 descriptor?? [ 2306.331591][ T9] mct_u232 5-1:0.0: MCT U232 converter detected [ 2306.342158][ T9] mct_u232 ttyUSB0: expected endpoint missing [ 2306.518660][T26694] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 2306.911335][T24935] Bluetooth: hci0: command tx timeout [ 2307.868177][T18316] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 2307.880844][T18316] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 2307.892856][T18316] bond0 (unregistering): Released all slaves [ 2307.914884][T18316] bond1 (unregistering): Released all slaves [ 2308.183402][T18316] bond2 (unregistering): Released all slaves [ 2308.426710][T18316] bond3 (unregistering): Released all slaves [ 2308.618399][T18316] bond4 (unregistering): Released all slaves [ 2308.856538][T18316] bond5 (unregistering): Released all slaves [ 2309.063051][T18316] bond6 (unregistering): Released all slaves [ 2309.238732][T18316] bond7 (unregistering): Released all slaves [ 2309.404889][T17084] usb 5-1: USB disconnect, device number 92 [ 2309.429108][T17084] mct_u232 5-1:0.0: device disconnected [ 2309.435443][T26610] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 2309.435464][T26610] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 2309.435494][T26610] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 2309.441168][T26610] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 2309.573210][T26610] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 2309.673824][T26610] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 2310.140612][T26709] xt_CT: You must specify a L4 protocol and not use inversions on it [ 2316.453414][T26610] hsr_slave_0: entered promiscuous mode [ 2317.515448][T26610] hsr_slave_1: entered promiscuous mode [ 2317.590878][T26610] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 2317.605568][T26610] Cannot create hsr debugfs directory [ 2319.402938][T18691] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 2319.414606][T18691] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 2319.424173][T18691] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 2319.433998][T18691] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 2319.443153][T18691] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 2319.450323][T18316] hsr_slave_0: left promiscuous mode [ 2319.457025][T18691] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 2319.525511][T18316] hsr_slave_1: left promiscuous mode [ 2319.628932][T18316] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 2319.651381][T18316] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 2319.689391][T18316] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 2319.720994][T18316] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 2319.849928][T18316] veth1_macvtap: left promiscuous mode [ 2319.871971][T18316] veth0_macvtap: left promiscuous mode [ 2319.889724][T18316] veth1_vlan: left promiscuous mode [ 2319.905032][T18316] veth0_vlan: left promiscuous mode [ 2321.551694][T24935] Bluetooth: hci1: command tx timeout [ 2323.021856][T26785] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 2323.268605][T18316] team0 (unregistering): Port device team_slave_1 removed [ 2323.372999][T18316] team0 (unregistering): Port device team_slave_0 removed [ 2323.631552][T24935] Bluetooth: hci1: command tx timeout [ 2325.727341][T24935] Bluetooth: hci1: command tx timeout [ 2325.858109][T23964] usb 3-1: new low-speed USB device number 86 using dummy_hcd [ 2325.959926][T26799] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 2326.093701][T23964] usb 3-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 2326.128882][T23964] usb 3-1: config 1 has no interface number 1 [ 2326.168277][T23964] usb 3-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0 [ 2326.227404][T23964] usb 3-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 0, changing to 4 [ 2326.263052][T23964] usb 3-1: config 1 interface 2 altsetting 1 endpoint 0x82 has invalid wMaxPacketSize 0 [ 2326.309851][T23964] usb 3-1: string descriptor 0 read error: -22 [ 2326.320568][T23964] usb 3-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 2326.355700][T26812] overlayfs: missing 'lowerdir' [ 2326.358772][T23964] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2326.513485][T23964] usb 3-1: low speed audio streaming not supported [ 2326.729238][T23964] usb 3-1: USB disconnect, device number 86 [ 2327.034939][T26797] udevd[26797]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 2327.418581][T18316] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2327.635505][T26753] chnl_net:caif_netlink_parms(): no params data found [ 2327.791770][T24935] Bluetooth: hci1: command tx timeout [ 2327.849560][T18316] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2328.142539][T18316] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2328.474448][T18316] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2328.736286][T26753] bridge0: port 1(bridge_slave_0) entered blocking state [ 2328.762139][T26753] bridge0: port 1(bridge_slave_0) entered disabled state [ 2328.795530][T26753] bridge_slave_0: entered allmulticast mode [ 2328.824862][T26753] bridge_slave_0: entered promiscuous mode [ 2328.853807][T26610] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 2328.875532][T26610] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 2328.894662][T26610] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 2328.918491][T26753] bridge0: port 2(bridge_slave_1) entered blocking state [ 2328.948673][T26753] bridge0: port 2(bridge_slave_1) entered disabled state [ 2328.971114][T26753] bridge_slave_1: entered allmulticast mode [ 2329.000714][T26753] bridge_slave_1: entered promiscuous mode [ 2329.094471][T26610] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 2329.186449][T26850] netlink: 8 bytes leftover after parsing attributes in process `syz.2.5279'. [ 2329.362043][T26753] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 2329.417377][T26753] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 2329.665289][T26753] team0: Port device team_slave_0 added [ 2329.765165][T26753] team0: Port device team_slave_1 added [ 2330.102778][T18316] bridge_slave_1: left allmulticast mode [ 2330.127244][T18316] bridge_slave_1: left promiscuous mode [ 2330.155674][T18316] bridge0: port 2(bridge_slave_1) entered disabled state [ 2330.228806][T18316] bridge_slave_0: left allmulticast mode [ 2330.244945][T18316] bridge_slave_0: left promiscuous mode [ 2330.250870][T18316] bridge0: port 1(bridge_slave_0) entered disabled state [ 2332.375436][T21687] usb 1-1: new high-speed USB device number 81 using dummy_hcd [ 2332.391424][T18316] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 2332.423527][T18316] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 2332.454008][T18316] bond0 (unregistering): Released all slaves [ 2332.583011][T21687] usb 1-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 2332.612997][T21687] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 2332.644617][T21687] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 2332.664653][T21687] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 2332.708763][T21687] usb 1-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 2332.734859][T21687] usb 1-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 2332.764718][T18316] bond1 (unregistering): Released all slaves [ 2332.782866][T21687] usb 1-1: Product: syz [ 2332.787282][T21687] usb 1-1: Manufacturer: syz [ 2332.828123][T26753] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 2332.845779][T21687] cdc_wdm 1-1:1.0: skipping garbage [ 2332.853352][T26753] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 2332.890935][T21687] cdc_wdm 1-1:1.0: skipping garbage [ 2332.915210][T21687] cdc_wdm 1-1:1.0: cdc-wdm0: USB WDM device [ 2332.942007][T21687] cdc_wdm 1-1:1.0: Unknown control protocol [ 2332.959518][T26753] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 2333.021323][T26753] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 2333.028368][T26753] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 2333.058685][T26753] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 2333.341734][ C0] cdc_wdm 1-1:1.0: nonzero urb status received: -71 [ 2333.342407][ T53] usb 1-1: USB disconnect, device number 81 [ 2333.348347][ C0] cdc_wdm 1-1:1.0: wdm_int_callback - 0 bytes [ 2333.348369][ C0] cdc_wdm 1-1:1.0: wdm_int_callback - usb_submit_urb failed with result -19 [ 2333.589948][T26753] hsr_slave_0: entered promiscuous mode [ 2333.617102][T26753] hsr_slave_1: entered promiscuous mode [ 2333.633871][T26753] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 2333.658889][T26753] Cannot create hsr debugfs directory [ 2334.914807][T18316] hsr_slave_0: left promiscuous mode [ 2334.934634][T18316] hsr_slave_1: left promiscuous mode [ 2334.946569][T18316] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 2334.954874][T18316] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 2334.977980][T18316] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 2334.985645][T18316] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 2335.070471][T18316] veth1_macvtap: left promiscuous mode [ 2335.091049][T18316] veth0_macvtap: left promiscuous mode [ 2335.102447][T18316] veth1_vlan: left promiscuous mode [ 2335.121094][T18316] veth0_vlan: left promiscuous mode [ 2335.288925][T26929] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 2335.770262][T26935] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 2337.226503][T18316] team0 (unregistering): Port device team_slave_1 removed [ 2337.350038][T18316] team0 (unregistering): Port device team_slave_0 removed [ 2337.954970][T26948] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 2338.651669][T26941] netlink: 8 bytes leftover after parsing attributes in process `syz.2.5291'. [ 2339.065567][T26610] 8021q: adding VLAN 0 to HW filter on device bond0 [ 2339.173989][T26953] overlayfs: missing 'lowerdir' [ 2339.203256][T26610] 8021q: adding VLAN 0 to HW filter on device team0 [ 2339.454457][T14172] bridge0: port 1(bridge_slave_0) entered blocking state [ 2339.461671][T14172] bridge0: port 1(bridge_slave_0) entered forwarding state [ 2339.551958][T26959] 9pnet_fd: Insufficient options for proto=fd [ 2339.906309][T17084] bridge0: port 2(bridge_slave_1) entered blocking state [ 2339.913573][T17084] bridge0: port 2(bridge_slave_1) entered forwarding state [ 2340.724975][T26753] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 2340.774376][T26753] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 2340.826093][T26753] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 2340.950545][T26753] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 2342.839782][T26610] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 2342.937913][T26753] 8021q: adding VLAN 0 to HW filter on device bond0 [ 2343.074937][T26753] 8021q: adding VLAN 0 to HW filter on device team0 [ 2343.237037][T23964] bridge0: port 1(bridge_slave_0) entered blocking state [ 2343.244518][T23964] bridge0: port 1(bridge_slave_0) entered forwarding state [ 2343.305420][T23964] bridge0: port 2(bridge_slave_1) entered blocking state [ 2343.312594][T23964] bridge0: port 2(bridge_slave_1) entered forwarding state [ 2343.452808][T27004] netlink: 8 bytes leftover after parsing attributes in process `syz.0.5301'. [ 2343.458030][T26753] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 2343.613348][T26610] veth0_vlan: entered promiscuous mode [ 2343.651913][T26610] veth1_vlan: entered promiscuous mode [ 2343.939521][T26610] veth0_macvtap: entered promiscuous mode [ 2343.997361][T26610] veth1_macvtap: entered promiscuous mode [ 2344.077706][T26610] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 2344.144187][T26610] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2344.195217][T26610] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 2344.257030][T26610] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2344.331353][T26610] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 2344.369585][T26610] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2344.387225][T26610] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 2344.398629][T26610] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2344.434146][T26610] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 2344.517605][T26610] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 2344.543102][T26610] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2344.563642][T26610] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 2344.590012][T26610] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2344.620681][T26610] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 2344.633258][T26610] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2344.655751][T26610] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 2344.666788][T26610] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2344.682871][T26610] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 2344.735216][T26610] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 2344.749498][T26610] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 2344.767493][T26610] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 2344.777600][T26610] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 2345.052788][T25960] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 2345.075175][T25960] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 2345.137251][T26753] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 2345.164591][T25960] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 2345.207121][T25960] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 2345.318478][T26753] veth0_vlan: entered promiscuous mode [ 2345.346145][T26753] veth1_vlan: entered promiscuous mode [ 2345.415324][T26753] veth0_macvtap: entered promiscuous mode [ 2345.425201][T26753] veth1_macvtap: entered promiscuous mode [ 2345.486154][T26753] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 2345.502707][T26753] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2345.516214][T26753] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 2345.528316][T26753] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2345.560084][T26753] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 2345.585081][T26753] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2345.609878][T26753] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 2345.643099][T26753] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2345.671211][T26753] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 2345.705703][T26753] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2345.732635][T26753] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 2345.805296][T26753] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 2345.851331][T26753] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2345.872866][T26753] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 2345.938408][T26753] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2345.959553][T26753] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 2345.980865][T26753] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2346.008046][T26753] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 2346.054999][T26753] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2346.104421][T26753] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 2346.138966][T26753] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2346.166146][T26753] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 2346.219529][T26753] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 2346.263019][T26753] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 2346.295147][T26753] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 2346.305762][T26753] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 2347.682037][T25960] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 2347.738648][T25960] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 2347.767915][T27040] xt_CT: You must specify a L4 protocol and not use inversions on it [ 2348.736972][T18311] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 2348.745304][T18311] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 2351.001079][T18691] Bluetooth: hci1: command 0x0405 tx timeout [ 2351.647984][T27050] overlayfs: missing 'lowerdir' [ 2354.239033][T27094] xt_CT: You must specify a L4 protocol and not use inversions on it [ 2354.250659][T27098] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 2354.493934][T27101] netlink: 20 bytes leftover after parsing attributes in process `syz.4.5317'. [ 2355.525151][T27114] batadv_slave_0: entered promiscuous mode [ 2356.165228][T27111] batadv_slave_0: left promiscuous mode [ 2360.229824][T27144] netlink: 'syz.0.5328': attribute type 21 has an invalid length. [ 2360.280094][T27144] netlink: 168 bytes leftover after parsing attributes in process `syz.0.5328'. [ 2360.559749][T27156] batadv_slave_0: entered promiscuous mode [ 2361.214957][T27153] batadv_slave_0: left promiscuous mode [ 2362.415432][T27178] overlayfs: missing 'lowerdir' [ 2362.800276][T27182] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 2364.607766][T17084] usb 3-1: new high-speed USB device number 87 using dummy_hcd [ 2364.870981][T17084] usb 3-1: Using ep0 maxpacket: 8 [ 2364.880091][T17084] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x4 has invalid wMaxPacketSize 0 [ 2364.921038][T17084] usb 3-1: config 0 interface 0 altsetting 0 bulk endpoint 0x4 has invalid maxpacket 0 [ 2364.947522][T17084] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x8 has invalid wMaxPacketSize 0 [ 2364.959139][T17084] usb 3-1: config 0 interface 0 altsetting 0 bulk endpoint 0x8 has invalid maxpacket 0 [ 2364.978901][T17084] usb 3-1: New USB device found, idVendor=0711, idProduct=0210, bcdDevice=ba.13 [ 2364.996757][T17084] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2365.150203][T17084] usb 3-1: Product: syz [ 2365.859960][T17084] usb 3-1: Manufacturer: syz [ 2365.864773][T17084] usb 3-1: SerialNumber: syz [ 2365.922172][T17084] usb 3-1: config 0 descriptor?? [ 2365.967193][T17084] mct_u232 3-1:0.0: MCT U232 converter detected [ 2365.999464][T17084] mct_u232 ttyUSB0: expected endpoint missing [ 2366.681589][T27208] batadv_slave_0: entered promiscuous mode [ 2366.874667][T27203] batadv_slave_0: left promiscuous mode [ 2367.085957][T27214] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 2369.358558][ T53] usb 3-1: USB disconnect, device number 87 [ 2369.406403][ T53] mct_u232 3-1:0.0: device disconnected [ 2369.507793][T27206] kvm: kvm [27205]: vcpu0, guest rIP: 0x18e Unhandled WRMSR(0xc2) = 0xfe [ 2369.560344][T27206] kvm: kvm [27205]: vcpu0, guest rIP: 0x18e Unhandled WRMSR(0xc2) = 0x8fe [ 2372.825561][T27262] overlayfs: missing 'lowerdir' [ 2374.206773][T27270] VFS: could not find a valid V7 on nullb0. [ 2377.275813][T27285] netlink: 16 bytes leftover after parsing attributes in process `syz.0.5361'. [ 2377.559762][ T53] usb 4-1: new high-speed USB device number 77 using dummy_hcd [ 2378.657869][ T53] usb 4-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 2378.932241][ T53] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 2379.000928][ T53] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 2379.009969][ T53] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 2379.125611][ T53] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 2379.183528][ T53] usb 4-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 2379.213323][ T53] usb 4-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 2379.247402][ T53] usb 4-1: Product: syz [ 2379.262639][ T53] usb 4-1: Manufacturer: syz [ 2379.310472][ T53] cdc_wdm 4-1:1.0: skipping garbage [ 2379.330088][T27302] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 2379.360065][ T53] cdc_wdm 4-1:1.0: skipping garbage [ 2379.411309][ T53] cdc_wdm 4-1:1.0: cdc-wdm0: USB WDM device [ 2379.430924][ T53] cdc_wdm 4-1:1.0: Unknown control protocol [ 2379.589453][ T53] usb 4-1: USB disconnect, device number 77 [ 2380.777974][T27325] netlink: 'syz.4.5368': attribute type 21 has an invalid length. [ 2380.800083][T27325] netlink: 'syz.4.5368': attribute type 20 has an invalid length. [ 2381.393519][T27321] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 2381.956146][T27343] VFS: could not find a valid V7 on nullb0. [ 2382.458700][T27346] netlink: 'syz.0.5373': attribute type 21 has an invalid length. [ 2382.501012][T27346] netlink: 'syz.0.5373': attribute type 20 has an invalid length. [ 2382.701781][T27348] netlink: 16 bytes leftover after parsing attributes in process `syz.4.5374'. [ 2384.510546][T27369] netlink: 'syz.4.5378': attribute type 21 has an invalid length. [ 2384.750832][T27369] netlink: 'syz.4.5378': attribute type 20 has an invalid length. [ 2385.193547][T27358] kvm: kvm [27357]: vcpu0, guest rIP: 0x18e Unhandled WRMSR(0xc2) = 0xfe [ 2385.244517][T27358] kvm: kvm [27357]: vcpu0, guest rIP: 0x18e Unhandled WRMSR(0xc2) = 0x8fe [ 2385.723288][T14754] usb 1-1: new high-speed USB device number 82 using dummy_hcd [ 2387.528343][T14754] usb 1-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 2387.571789][T14754] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 2387.683989][T14754] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 2387.706671][T14754] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 2387.736902][T14754] usb 1-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 2387.753954][T14754] usb 1-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 2387.763378][T14172] usb 3-1: new high-speed USB device number 88 using dummy_hcd [ 2387.778982][T14754] usb 1-1: Product: syz [ 2387.793586][T14754] usb 1-1: Manufacturer: syz [ 2387.808772][T14754] cdc_wdm 1-1:1.0: skipping garbage [ 2387.816033][T17178] usb 2-1: new high-speed USB device number 93 using dummy_hcd [ 2387.816995][T14754] cdc_wdm 1-1:1.0: skipping garbage [ 2387.872014][T14754] cdc_wdm 1-1:1.0: cdc-wdm0: USB WDM device [ 2387.881485][T14754] cdc_wdm 1-1:1.0: Unknown control protocol [ 2387.970917][T14172] usb 3-1: Using ep0 maxpacket: 16 [ 2388.002151][T14172] usb 3-1: New USB device found, idVendor=04dd, idProduct=8002, bcdDevice=fc.b6 [ 2388.032134][T14172] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2388.058791][T14172] usb 3-1: Product: syz [ 2388.078827][T14172] usb 3-1: Manufacturer: syz [ 2388.097913][T17178] usb 2-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 2388.100808][T14172] usb 3-1: SerialNumber: syz [ 2388.139919][ C1] cdc_wdm 1-1:1.0: nonzero urb status received: -71 [ 2388.146544][ C1] cdc_wdm 1-1:1.0: wdm_int_callback - 0 bytes [ 2388.152813][ C1] cdc_wdm 1-1:1.0: nonzero urb status received: -71 [ 2388.159405][ C1] cdc_wdm 1-1:1.0: wdm_int_callback - 0 bytes [ 2388.165729][ C1] cdc_wdm 1-1:1.0: nonzero urb status received: -71 [ 2388.172314][ C1] cdc_wdm 1-1:1.0: wdm_int_callback - 0 bytes [ 2388.178705][ C1] cdc_wdm 1-1:1.0: nonzero urb status received: -71 [ 2388.185328][ C1] cdc_wdm 1-1:1.0: wdm_int_callback - 0 bytes [ 2388.191625][ C1] cdc_wdm 1-1:1.0: nonzero urb status received: -71 [ 2388.198201][ C1] cdc_wdm 1-1:1.0: wdm_int_callback - 0 bytes [ 2388.204443][ C1] cdc_wdm 1-1:1.0: nonzero urb status received: -71 [ 2388.211041][ C1] cdc_wdm 1-1:1.0: wdm_int_callback - 0 bytes [ 2388.217386][ C1] cdc_wdm 1-1:1.0: nonzero urb status received: -71 [ 2388.223970][ C1] cdc_wdm 1-1:1.0: wdm_int_callback - 0 bytes [ 2388.230264][ C1] cdc_wdm 1-1:1.0: nonzero urb status received: -71 [ 2388.236848][ C1] cdc_wdm 1-1:1.0: wdm_int_callback - 0 bytes [ 2388.243154][ C1] cdc_wdm 1-1:1.0: nonzero urb status received: -71 [ 2388.249738][ C1] cdc_wdm 1-1:1.0: wdm_int_callback - 0 bytes [ 2388.256028][ C1] cdc_wdm 1-1:1.0: nonzero urb status received: -71 [ 2388.262610][ C1] cdc_wdm 1-1:1.0: wdm_int_callback - 0 bytes [ 2388.273615][T14172] usb 3-1: config 0 descriptor?? [ 2388.285078][T14172] safe_serial 3-1:0.0: safe_serial converter detected [ 2388.295239][ C1] cdc_wdm 1-1:1.0: wdm_int_callback - usb_submit_urb failed with result -19 [ 2388.321580][T14172] usb 3-1: safe_serial converter now attached to ttyUSB0 [ 2388.330835][ T53] usb 1-1: USB disconnect, device number 82 [ 2388.345377][T17178] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 2388.474325][T17178] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 2388.514366][T17178] usb 2-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 2388.529464][T14754] usb 3-1: USB disconnect, device number 88 [ 2388.552742][T17178] usb 2-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 2388.570642][T17178] usb 2-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 2388.597211][T14754] safe_serial ttyUSB0: safe_serial converter now disconnected from ttyUSB0 [ 2388.605112][T17178] usb 2-1: Product: syz [ 2388.630377][T17178] usb 2-1: Manufacturer: syz [ 2388.644216][T14754] safe_serial 3-1:0.0: device disconnected [ 2388.702982][T17178] cdc_wdm 2-1:1.0: skipping garbage [ 2388.730523][T17178] cdc_wdm 2-1:1.0: probe with driver cdc_wdm failed with error -22 [ 2390.982545][T17178] usb 2-1: USB disconnect, device number 93 [ 2391.223375][T27423] xt_CT: You must specify a L4 protocol and not use inversions on it [ 2392.298351][T27433] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 2394.765795][T17084] usb 2-1: new high-speed USB device number 94 using dummy_hcd [ 2394.992274][T17084] usb 2-1: Using ep0 maxpacket: 8 [ 2395.030118][T17084] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x4 has invalid wMaxPacketSize 0 [ 2395.043548][T17084] usb 2-1: config 0 interface 0 altsetting 0 bulk endpoint 0x4 has invalid maxpacket 0 [ 2395.053369][T17084] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x8 has invalid wMaxPacketSize 0 [ 2395.064740][T17084] usb 2-1: config 0 interface 0 altsetting 0 bulk endpoint 0x8 has invalid maxpacket 0 [ 2395.110610][T17084] usb 2-1: New USB device found, idVendor=0711, idProduct=0210, bcdDevice=ba.13 [ 2395.130005][T17084] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2395.150238][T17084] usb 2-1: Product: syz [ 2395.171520][T17084] usb 2-1: Manufacturer: syz [ 2395.176168][T17084] usb 2-1: SerialNumber: syz [ 2395.241737][T17084] usb 2-1: config 0 descriptor?? [ 2395.279661][T17084] mct_u232 2-1:0.0: MCT U232 converter detected [ 2395.301298][T17084] mct_u232 ttyUSB0: expected endpoint missing [ 2395.382523][T27462] netlink: 20 bytes leftover after parsing attributes in process `syz.0.5401'. [ 2395.489688][T14754] usb 3-1: new high-speed USB device number 89 using dummy_hcd [ 2395.683820][T14754] usb 3-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 2395.785510][T14754] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 2395.826118][T14754] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 2395.842331][T14754] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 2395.859250][T14754] usb 3-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 2395.868611][T14754] usb 3-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 2395.876813][T14754] usb 3-1: Product: syz [ 2395.881202][T14754] usb 3-1: Manufacturer: syz [ 2395.923648][T14754] cdc_wdm 3-1:1.0: skipping garbage [ 2395.929000][T14754] cdc_wdm 3-1:1.0: skipping garbage [ 2395.964279][T14754] cdc_wdm 3-1:1.0: cdc-wdm0: USB WDM device [ 2395.970376][T14754] cdc_wdm 3-1:1.0: Unknown control protocol [ 2395.976490][T14172] usb 5-1: new high-speed USB device number 93 using dummy_hcd [ 2396.171173][T14172] usb 5-1: Using ep0 maxpacket: 16 [ 2396.197561][T14172] usb 5-1: New USB device found, idVendor=04dd, idProduct=8002, bcdDevice=fc.b6 [ 2396.206866][T14172] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2396.215271][T14172] usb 5-1: Product: syz [ 2396.219681][T14172] usb 5-1: Manufacturer: syz [ 2396.224709][T14172] usb 5-1: SerialNumber: syz [ 2396.247735][ C1] wdm_int_callback: 73 callbacks suppressed [ 2396.247760][ C1] cdc_wdm 3-1:1.0: nonzero urb status received: -71 [ 2396.249374][T17084] usb 3-1: USB disconnect, device number 89 [ 2396.253665][ C1] wdm_int_callback: 73 callbacks suppressed [ 2396.253683][ C1] cdc_wdm 3-1:1.0: wdm_int_callback - 0 bytes [ 2396.253702][ C1] cdc_wdm 3-1:1.0: wdm_int_callback - usb_submit_urb failed with result -19 [ 2396.316583][T14172] usb 5-1: config 0 descriptor?? [ 2396.335109][T14172] safe_serial 5-1:0.0: safe_serial converter detected [ 2396.876703][T14754] usb 2-1: USB disconnect, device number 94 [ 2396.917498][T14172] usb 5-1: safe_serial converter now attached to ttyUSB1 [ 2396.937440][T14754] mct_u232 2-1:0.0: device disconnected [ 2397.303044][T27473] xt_CT: You must specify a L4 protocol and not use inversions on it [ 2399.085336][T21687] usb 5-1: USB disconnect, device number 93 [ 2399.103541][T21687] safe_serial ttyUSB1: safe_serial converter now disconnected from ttyUSB1 [ 2399.175119][T21687] safe_serial 5-1:0.0: device disconnected [ 2401.343764][T27504] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 2401.480946][T27501] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 2401.523596][T27512] netlink: 'syz.0.5411': attribute type 21 has an invalid length. [ 2401.547394][T27512] netlink: 'syz.0.5411': attribute type 20 has an invalid length. [ 2401.799830][T27513] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 2401.855119][ T53] usb 3-1: new low-speed USB device number 90 using dummy_hcd [ 2402.054548][ T53] usb 3-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 2402.086424][ T53] usb 3-1: config 1 has no interface number 1 [ 2402.125927][ T53] usb 3-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0 [ 2402.222980][ T53] usb 3-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 0, changing to 4 [ 2402.299866][ T53] usb 3-1: config 1 interface 2 altsetting 1 endpoint 0x82 has invalid wMaxPacketSize 0 [ 2402.413800][ T53] usb 3-1: string descriptor 0 read error: -22 [ 2402.420439][ T53] usb 3-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 2402.429548][ T53] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2402.496231][ T53] usb 3-1: low speed audio streaming not supported [ 2402.773677][ T53] usb 3-1: USB disconnect, device number 90 [ 2405.236731][T17084] usb 1-1: new high-speed USB device number 83 using dummy_hcd [ 2405.463026][T17084] usb 1-1: Using ep0 maxpacket: 8 [ 2405.477219][T17084] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x4 has invalid wMaxPacketSize 0 [ 2405.498385][T27536] VFS: could not find a valid V7 on nullb0. [ 2405.525731][T17084] usb 1-1: config 0 interface 0 altsetting 0 bulk endpoint 0x4 has invalid maxpacket 0 [ 2405.560317][T17084] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x8 has invalid wMaxPacketSize 0 [ 2405.590643][T17084] usb 1-1: config 0 interface 0 altsetting 0 bulk endpoint 0x8 has invalid maxpacket 0 [ 2405.616041][T17084] usb 1-1: New USB device found, idVendor=0711, idProduct=0210, bcdDevice=ba.13 [ 2405.625573][T17084] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2405.633949][T17084] usb 1-1: Product: syz [ 2405.657867][T17084] usb 1-1: Manufacturer: syz [ 2405.664213][T17084] usb 1-1: SerialNumber: syz [ 2405.691639][T17084] usb 1-1: config 0 descriptor?? [ 2405.722101][T17084] mct_u232 1-1:0.0: MCT U232 converter detected [ 2405.743016][T17084] mct_u232 ttyUSB0: expected endpoint missing [ 2405.820945][T21687] usb 3-1: new high-speed USB device number 91 using dummy_hcd [ 2405.873906][T27541] xt_CT: You must specify a L4 protocol and not use inversions on it [ 2406.003441][T21687] usb 3-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 2406.026964][T21687] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 2406.061001][T21687] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 2406.106166][T21687] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 2406.129589][T21687] usb 3-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 2406.138888][T21687] usb 3-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 2406.429045][T21687] usb 3-1: Product: syz [ 2406.451255][T21687] usb 3-1: Manufacturer: syz [ 2406.467417][T21687] cdc_wdm 3-1:1.0: skipping garbage [ 2406.474218][T21687] cdc_wdm 3-1:1.0: skipping garbage [ 2406.484984][T21687] cdc_wdm 3-1:1.0: cdc-wdm0: USB WDM device [ 2406.491491][T21687] cdc_wdm 3-1:1.0: Unknown control protocol [ 2406.521288][T17178] usb 5-1: new high-speed USB device number 94 using dummy_hcd [ 2409.187001][T17178] usb 5-1: Using ep0 maxpacket: 16 [ 2409.446710][T14754] usb 1-1: USB disconnect, device number 83 [ 2409.457991][T14754] mct_u232 1-1:0.0: device disconnected [ 2409.491987][ T53] usb 3-1: USB disconnect, device number 91 [ 2409.539782][T17178] usb 5-1: device descriptor read/all, error -71 [ 2409.755070][T27564] batadv_slave_0: entered promiscuous mode [ 2410.406240][T27556] batadv_slave_0: left promiscuous mode [ 2410.515597][T27560] VFS: could not find a valid V7 on nullb0. [ 2410.902552][T27561] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 2414.098549][T27592] overlayfs: missing 'lowerdir' [ 2414.911429][T14754] usb 2-1: new high-speed USB device number 95 using dummy_hcd [ 2415.101038][T14754] usb 2-1: Using ep0 maxpacket: 8 [ 2415.112431][T14754] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x4 has invalid wMaxPacketSize 0 [ 2415.141034][T14754] usb 2-1: config 0 interface 0 altsetting 0 bulk endpoint 0x4 has invalid maxpacket 0 [ 2415.171015][T14754] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x8 has invalid wMaxPacketSize 0 [ 2415.198269][T14754] usb 2-1: config 0 interface 0 altsetting 0 bulk endpoint 0x8 has invalid maxpacket 0 [ 2415.242675][T14754] usb 2-1: New USB device found, idVendor=0711, idProduct=0210, bcdDevice=ba.13 [ 2415.260210][T14754] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2415.287217][T14754] usb 2-1: Product: syz [ 2415.295072][T14754] usb 2-1: Manufacturer: syz [ 2415.299707][T14754] usb 2-1: SerialNumber: syz [ 2415.442013][T27611] batadv_slave_0: entered promiscuous mode [ 2416.074468][T27606] batadv_slave_0: left promiscuous mode [ 2416.158153][T14754] usb 2-1: config 0 descriptor?? [ 2416.175010][T14754] mct_u232 2-1:0.0: MCT U232 converter detected [ 2416.204687][T14754] mct_u232 ttyUSB0: expected endpoint missing [ 2416.361147][ T944] usb 1-1: new high-speed USB device number 84 using dummy_hcd [ 2416.562943][ T944] usb 1-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 2416.657469][ T944] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 2416.854591][ T944] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 2416.986150][ T944] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 2417.051083][ T944] usb 1-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 2417.088687][ T944] usb 1-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 2417.122699][ T944] usb 1-1: Product: syz [ 2417.128705][ T944] usb 1-1: Manufacturer: syz [ 2417.156588][ T944] cdc_wdm 1-1:1.0: skipping garbage [ 2417.500914][ T944] cdc_wdm 1-1:1.0: skipping garbage [ 2417.573226][T17178] usb 2-1: USB disconnect, device number 95 [ 2417.625511][T17178] mct_u232 2-1:0.0: device disconnected [ 2417.644357][ T944] cdc_wdm 1-1:1.0: cdc-wdm0: USB WDM device [ 2417.650292][ T944] cdc_wdm 1-1:1.0: Unknown control protocol [ 2417.778790][ T944] usb 1-1: USB disconnect, device number 84 [ 2417.962453][T21687] usb 5-1: new high-speed USB device number 96 using dummy_hcd [ 2418.205505][T21687] usb 5-1: Using ep0 maxpacket: 16 [ 2419.051153][T21687] usb 5-1: device descriptor read/all, error -71 [ 2419.402211][T27638] netlink: 'syz.1.5441': attribute type 21 has an invalid length. [ 2419.436333][T27638] netlink: 'syz.1.5441': attribute type 20 has an invalid length. [ 2419.467006][T27638] IPv6: NLM_F_CREATE should be specified when creating new route [ 2419.671188][T27631] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 2420.890944][T21687] usb 2-1: new high-speed USB device number 96 using dummy_hcd [ 2421.128971][T27663] batadv_slave_0: entered promiscuous mode [ 2421.160852][T21687] usb 2-1: Using ep0 maxpacket: 32 [ 2421.706733][T27659] batadv_slave_0: left promiscuous mode [ 2421.854546][T21687] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 2421.877656][T21687] usb 2-1: config 1 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 2421.924240][T21687] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40 [ 2421.937499][T21687] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2421.964158][T21687] usb 2-1: Product: syz [ 2421.993377][T21687] usb 2-1: Manufacturer: syz [ 2421.998022][T21687] usb 2-1: SerialNumber: syz [ 2423.127111][T17178] usb 5-1: new high-speed USB device number 98 using dummy_hcd [ 2423.188454][T21687] usblp 2-1:1.0: usblp0: USB Unidirectional printer dev 96 if 0 alt 0 proto 1 vid 0x0525 pid 0xA4A8 [ 2423.429822][T17178] usb 5-1: Using ep0 maxpacket: 8 [ 2423.648292][T17178] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x4 has invalid wMaxPacketSize 0 [ 2423.666409][T17178] usb 5-1: config 0 interface 0 altsetting 0 bulk endpoint 0x4 has invalid maxpacket 0 [ 2423.676591][T17178] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x8 has invalid wMaxPacketSize 0 [ 2423.686590][T17178] usb 5-1: config 0 interface 0 altsetting 0 bulk endpoint 0x8 has invalid maxpacket 0 [ 2424.169584][T17178] usb 5-1: New USB device found, idVendor=0711, idProduct=0210, bcdDevice=ba.13 [ 2424.180282][T27667] Bluetooth: hci0: command 0x0406 tx timeout [ 2424.215095][T17178] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2424.249158][T17178] usb 5-1: Product: syz [ 2424.260953][T17178] usb 5-1: Manufacturer: syz [ 2424.265552][T17178] usb 5-1: SerialNumber: syz [ 2424.292087][T17178] usb 5-1: config 0 descriptor?? [ 2424.327339][T17178] mct_u232 5-1:0.0: MCT U232 converter detected [ 2424.357474][T17178] mct_u232 ttyUSB0: expected endpoint missing [ 2424.384287][T27682] netlink: 16 bytes leftover after parsing attributes in process `syz.2.5452'. [ 2424.397271][T27682] netlink: 24 bytes leftover after parsing attributes in process `syz.2.5452'. [ 2424.498900][ T944] usb 2-1: USB disconnect, device number 96 [ 2424.558814][T27682] bond5: entered allmulticast mode [ 2424.566822][T27682] 8021q: adding VLAN 0 to HW filter on device bond5 [ 2424.578965][T27657] usblp0: removed [ 2425.805069][T19312] usb 5-1: USB disconnect, device number 98 [ 2425.816284][T19312] mct_u232 5-1:0.0: device disconnected [ 2426.016667][T27711] batadv_slave_0: entered promiscuous mode [ 2426.614468][T27705] batadv_slave_0: left promiscuous mode [ 2426.802929][T27703] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 2428.706402][T27731] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 2429.470373][T27740] fuse: Bad value for 'fd' [ 2429.780177][T27745] netlink: 'syz.1.5466': attribute type 21 has an invalid length. [ 2430.611609][T27745] netlink: 'syz.1.5466': attribute type 20 has an invalid length. [ 2430.623083][T27747] batadv_slave_0: entered promiscuous mode [ 2430.629183][T27747] batadv_slave_0: left promiscuous mode [ 2432.021062][ T944] usb 3-1: new high-speed USB device number 92 using dummy_hcd [ 2432.811168][ T944] usb 3-1: Using ep0 maxpacket: 8 [ 2432.837120][ T944] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x4 has invalid wMaxPacketSize 0 [ 2433.204372][ T944] usb 3-1: config 0 interface 0 altsetting 0 bulk endpoint 0x4 has invalid maxpacket 0 [ 2433.216018][ T944] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x8 has invalid wMaxPacketSize 0 [ 2433.240396][ T944] usb 3-1: config 0 interface 0 altsetting 0 bulk endpoint 0x8 has invalid maxpacket 0 [ 2433.253816][ T944] usb 3-1: New USB device found, idVendor=0711, idProduct=0210, bcdDevice=ba.13 [ 2433.443704][T27771] batadv_slave_0: entered promiscuous mode [ 2433.557011][T27764] batadv_slave_0: left promiscuous mode [ 2434.130873][ T944] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2434.324759][ T944] usb 3-1: Product: syz [ 2434.328983][ T944] usb 3-1: Manufacturer: syz [ 2434.447317][ T944] usb 3-1: SerialNumber: syz [ 2434.494306][ T944] usb 3-1: config 0 descriptor?? [ 2434.526952][ T944] usb 3-1: can't set config #0, error -71 [ 2434.578319][ T944] usb 3-1: USB disconnect, device number 92 [ 2435.251390][T27776] overlayfs: missing 'lowerdir' [ 2435.326117][T27789] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 2435.336191][T14754] usb 4-1: new high-speed USB device number 78 using dummy_hcd [ 2435.581034][T14754] usb 4-1: Using ep0 maxpacket: 16 [ 2435.660268][T14754] usb 4-1: New USB device found, idVendor=04dd, idProduct=8002, bcdDevice=fc.b6 [ 2435.669873][T14754] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2435.686696][T14754] usb 4-1: Product: syz [ 2435.696910][T14754] usb 4-1: Manufacturer: syz [ 2435.705700][T14754] usb 4-1: SerialNumber: syz [ 2435.792529][T14754] usb 4-1: config 0 descriptor?? [ 2435.860577][T14754] safe_serial 4-1:0.0: safe_serial converter detected [ 2435.888311][T14754] usb 4-1: safe_serial converter now attached to ttyUSB0 [ 2442.069581][T27830] batadv_slave_0: entered promiscuous mode [ 2442.615206][T27825] batadv_slave_0: left promiscuous mode [ 2443.450946][ T53] usb 1-1: new high-speed USB device number 85 using dummy_hcd [ 2443.670887][ T53] usb 1-1: Using ep0 maxpacket: 8 [ 2443.693283][ T53] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x4 has invalid wMaxPacketSize 0 [ 2443.713462][ T53] usb 1-1: config 0 interface 0 altsetting 0 bulk endpoint 0x4 has invalid maxpacket 0 [ 2443.741340][ T53] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x8 has invalid wMaxPacketSize 0 [ 2443.773670][ T53] usb 1-1: config 0 interface 0 altsetting 0 bulk endpoint 0x8 has invalid maxpacket 0 [ 2443.814194][ T53] usb 1-1: New USB device found, idVendor=0711, idProduct=0210, bcdDevice=ba.13 [ 2443.835335][ T53] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2443.858201][ T53] usb 1-1: Product: syz [ 2443.880523][ T53] usb 1-1: Manufacturer: syz [ 2443.891636][T21687] usb 4-1: USB disconnect, device number 78 [ 2443.899324][ T53] usb 1-1: SerialNumber: syz [ 2443.937182][ T53] usb 1-1: config 0 descriptor?? [ 2443.947520][T21687] safe_serial ttyUSB0: safe_serial converter now disconnected from ttyUSB0 [ 2443.973151][ T53] mct_u232 1-1:0.0: MCT U232 converter detected [ 2444.016834][ T53] mct_u232 ttyUSB1: expected endpoint missing [ 2444.017566][T21687] safe_serial 4-1:0.0: device disconnected [ 2444.687760][T24935] Bluetooth: hci1: command 0x0405 tx timeout [ 2445.290283][ T53] usb 1-1: USB disconnect, device number 85 [ 2445.309406][ T53] mct_u232 1-1:0.0: device disconnected [ 2445.521547][T27849] binder: 27847:27849 ioctl c0306201 200003c0 returned -22 [ 2445.608512][T27844] overlayfs: missing 'lowerdir' [ 2445.696918][T27855] binder: BINDER_SET_CONTEXT_MGR already set [ 2445.711529][T27855] binder: 27847:27855 ioctl 4018620d 20000100 returned -16 [ 2445.791033][T27855] binder: BINDER_SET_CONTEXT_MGR already set [ 2445.801404][T27855] binder: 27847:27855 ioctl 4018620d 20000040 returned -16 [ 2445.856898][T27855] netlink: 16 bytes leftover after parsing attributes in process `syz.1.5491'. [ 2445.866953][T27855] netlink: 24 bytes leftover after parsing attributes in process `syz.1.5491'. [ 2446.147804][T27855] bond1: entered allmulticast mode [ 2446.154213][T27855] 8021q: adding VLAN 0 to HW filter on device bond1 [ 2446.313560][T27859] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 2447.348782][T27870] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 2447.853170][T27885] batadv_slave_0: entered promiscuous mode [ 2448.490606][T27878] batadv_slave_0: left promiscuous mode [ 2451.106512][T14754] usb 2-1: new high-speed USB device number 97 using dummy_hcd [ 2452.527687][ T944] usb 3-1: new high-speed USB device number 93 using dummy_hcd [ 2452.535384][T14754] usb 2-1: device not accepting address 97, error -71 [ 2453.799084][T27907] xt_CT: You must specify a L4 protocol and not use inversions on it [ 2454.163987][ T944] usb 3-1: device not accepting address 93, error -71 [ 2454.784789][T27920] batadv_slave_0: entered promiscuous mode [ 2454.922862][T27912] batadv_slave_0: left promiscuous mode [ 2455.262068][T27926] batadv_slave_0: entered promiscuous mode [ 2455.895760][T27923] batadv_slave_0: left promiscuous mode [ 2461.650391][T27964] netlink: 16 bytes leftover after parsing attributes in process `syz.3.5518'. [ 2462.041151][T21687] usb 5-1: new high-speed USB device number 99 using dummy_hcd [ 2462.223595][T27966] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 2462.361113][T21687] usb 5-1: Using ep0 maxpacket: 8 [ 2462.383786][T21687] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x4 has invalid wMaxPacketSize 0 [ 2462.434532][T21687] usb 5-1: config 0 interface 0 altsetting 0 bulk endpoint 0x4 has invalid maxpacket 0 [ 2462.482337][T21687] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x8 has invalid wMaxPacketSize 0 [ 2462.514765][T21687] usb 5-1: config 0 interface 0 altsetting 0 bulk endpoint 0x8 has invalid maxpacket 0 [ 2462.733612][T21687] usb 5-1: New USB device found, idVendor=0711, idProduct=0210, bcdDevice=ba.13 [ 2462.771038][T21687] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2462.796717][T21687] usb 5-1: Product: syz [ 2463.566642][T21687] usb 5-1: Manufacturer: syz [ 2463.587669][T21687] usb 5-1: SerialNumber: syz [ 2463.655057][T21687] usb 5-1: config 0 descriptor?? [ 2463.688835][T21687] mct_u232 5-1:0.0: MCT U232 converter detected [ 2463.708533][T21687] mct_u232 ttyUSB0: expected endpoint missing [ 2464.346723][T27975] VFS: could not find a valid V7 on nullb0. [ 2464.910273][T27982] netlink: 'syz.1.5521': attribute type 21 has an invalid length. [ 2464.994691][T17178] usb 5-1: USB disconnect, device number 99 [ 2465.004119][T17178] mct_u232 5-1:0.0: device disconnected [ 2465.012351][T27982] netlink: 'syz.1.5521': attribute type 20 has an invalid length. [ 2468.368994][T28004] netlink: 20 bytes leftover after parsing attributes in process `syz.3.5526'. [ 2470.511318][T27667] Bluetooth: hci0: Controller not accepting commands anymore: ncmd = 0 [ 2470.521806][T27667] Bluetooth: hci0: Injecting HCI hardware error event [ 2470.531081][T27667] Bluetooth: hci0: hardware error 0x00 [ 2471.394651][T28033] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 2471.410925][T19312] usb 2-1: new high-speed USB device number 99 using dummy_hcd [ 2471.772191][T19312] usb 2-1: Using ep0 maxpacket: 8 [ 2471.782409][T19312] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x4 has invalid wMaxPacketSize 0 [ 2471.795286][T19312] usb 2-1: config 0 interface 0 altsetting 0 bulk endpoint 0x4 has invalid maxpacket 0 [ 2471.813154][T19312] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x8 has invalid wMaxPacketSize 0 [ 2471.822941][T19312] usb 2-1: config 0 interface 0 altsetting 0 bulk endpoint 0x8 has invalid maxpacket 0 [ 2472.445939][T19312] usb 2-1: New USB device found, idVendor=0711, idProduct=0210, bcdDevice=ba.13 [ 2472.659811][T19312] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2472.701119][T19312] usb 2-1: Product: syz [ 2472.727493][T19312] usb 2-1: Manufacturer: syz [ 2472.743968][T19312] usb 2-1: SerialNumber: syz [ 2472.782991][T19312] usb 2-1: config 0 descriptor?? [ 2472.814376][T19312] mct_u232 2-1:0.0: MCT U232 converter detected [ 2472.883445][T19312] mct_u232 ttyUSB0: expected endpoint missing [ 2473.391620][T27667] Bluetooth: hci0: Opcode 0x0c03 failed: -110 [ 2476.061309][ T53] usb 2-1: USB disconnect, device number 99 [ 2476.074764][ T53] mct_u232 2-1:0.0: device disconnected [ 2476.701817][T28068] netlink: 20 bytes leftover after parsing attributes in process `syz.1.5538'. [ 2476.942574][ T53] usb 1-1: new high-speed USB device number 86 using dummy_hcd [ 2478.964465][ T53] usb 1-1: unable to read config index 0 descriptor/start: -61 [ 2478.992395][ T53] usb 1-1: can't read configurations, error -61 [ 2479.477002][ T53] usb 1-1: new high-speed USB device number 87 using dummy_hcd [ 2480.271005][T27667] Bluetooth: hci1: Controller not accepting commands anymore: ncmd = 0 [ 2480.300984][T27667] Bluetooth: hci1: Injecting HCI hardware error event [ 2480.311276][T24935] Bluetooth: hci1: hardware error 0x00 [ 2482.091068][T14172] usb 4-1: new high-speed USB device number 79 using dummy_hcd [ 2482.704199][T24935] Bluetooth: hci1: Opcode 0x0c03 failed: -110 [ 2483.315230][T14172] usb 4-1: Using ep0 maxpacket: 8 [ 2483.323474][T14172] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x4 has invalid wMaxPacketSize 0 [ 2483.353551][T14172] usb 4-1: config 0 interface 0 altsetting 0 bulk endpoint 0x4 has invalid maxpacket 0 [ 2483.382176][T14172] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x8 has invalid wMaxPacketSize 0 [ 2483.401249][T14172] usb 4-1: config 0 interface 0 altsetting 0 bulk endpoint 0x8 has invalid maxpacket 0 [ 2483.433334][T14172] usb 4-1: New USB device found, idVendor=0711, idProduct=0210, bcdDevice=ba.13 [ 2483.450825][T14172] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2483.597069][T14172] usb 4-1: Product: syz [ 2483.601880][T14172] usb 4-1: Manufacturer: syz [ 2483.606772][T14172] usb 4-1: SerialNumber: syz [ 2483.620537][T14172] usb 4-1: config 0 descriptor?? [ 2483.634019][T14172] usb 4-1: can't set config #0, error -71 [ 2483.636039][T28119] netlink: 20 bytes leftover after parsing attributes in process `syz.4.5551'. [ 2483.650888][T14172] usb 4-1: USB disconnect, device number 79 [ 2485.062045][T28117] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 2486.719886][T14172] usb 5-1: new high-speed USB device number 100 using dummy_hcd [ 2487.229847][T19312] usb 2-1: new high-speed USB device number 100 using dummy_hcd [ 2487.448959][T14172] usb 5-1: unable to read config index 0 descriptor/start: -61 [ 2487.503952][T14172] usb 5-1: can't read configurations, error -61 [ 2487.802265][T14172] usb 5-1: new high-speed USB device number 101 using dummy_hcd [ 2487.847847][T19312] usb 2-1: Using ep0 maxpacket: 16 [ 2487.902747][T19312] usb 2-1: New USB device found, idVendor=04dd, idProduct=8002, bcdDevice=fc.b6 [ 2487.999317][T19312] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2488.053615][T14172] usb 5-1: unable to read config index 0 descriptor/start: -61 [ 2488.083848][T19312] usb 2-1: Product: syz [ 2488.740905][T14172] usb 5-1: can't read configurations, error -61 [ 2488.747833][T19312] usb 2-1: Manufacturer: syz [ 2488.752551][T19312] usb 2-1: SerialNumber: syz [ 2488.758031][T14172] usb usb5-port1: attempt power cycle [ 2488.783782][T19312] usb 2-1: config 0 descriptor?? [ 2488.792559][T19312] safe_serial 2-1:0.0: safe_serial converter detected [ 2488.803758][T19312] usb 2-1: safe_serial converter now attached to ttyUSB0 [ 2489.501131][T14172] usb 5-1: new high-speed USB device number 102 using dummy_hcd [ 2490.485240][T14172] usb 5-1: device descriptor read/8, error -71 [ 2490.690996][T17178] usb 4-1: new high-speed USB device number 80 using dummy_hcd [ 2490.840676][ T9] usb 2-1: USB disconnect, device number 100 [ 2490.854175][ T9] safe_serial ttyUSB0: safe_serial converter now disconnected from ttyUSB0 [ 2490.868719][T17178] usb 4-1: device descriptor read/64, error -71 [ 2490.902436][ T9] safe_serial 2-1:0.0: device disconnected [ 2491.104300][T28190] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 2491.157425][T17178] usb 4-1: new high-speed USB device number 81 using dummy_hcd [ 2491.360959][T17178] usb 4-1: device descriptor read/64, error -71 [ 2491.424802][T28195] netlink: 20 bytes leftover after parsing attributes in process `syz.1.5567'. [ 2491.514619][T17178] usb usb4-port1: attempt power cycle [ 2491.970975][T17178] usb 4-1: new high-speed USB device number 82 using dummy_hcd [ 2492.064926][T17178] usb 4-1: device descriptor read/8, error -71 [ 2492.400706][T28205] netlink: 16 bytes leftover after parsing attributes in process `syz.4.5570'. [ 2492.423100][T28205] netlink: 24 bytes leftover after parsing attributes in process `syz.4.5570'. [ 2492.646136][T28205] bond1: entered allmulticast mode [ 2492.667857][T28205] 8021q: adding VLAN 0 to HW filter on device bond1 [ 2493.838583][T28218] netlink: 'syz.2.5572': attribute type 21 has an invalid length. [ 2493.846768][T28218] netlink: 'syz.2.5572': attribute type 20 has an invalid length. [ 2494.326414][T28226] netlink: 20 bytes leftover after parsing attributes in process `syz.4.5575'. [ 2496.579891][T17178] usb 1-1: new high-speed USB device number 88 using dummy_hcd [ 2496.629431][T28249] netlink: 20 bytes leftover after parsing attributes in process `syz.2.5579'. [ 2497.045855][T17178] usb 1-1: unable to read config index 0 descriptor/start: -61 [ 2497.287933][T17178] usb 1-1: can't read configurations, error -61 [ 2497.571058][T17084] usb 4-1: new high-speed USB device number 84 using dummy_hcd [ 2497.855961][T17178] usb 1-1: new high-speed USB device number 89 using dummy_hcd [ 2497.961468][T17084] usb 4-1: Using ep0 maxpacket: 8 [ 2499.422815][T17084] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x4 has invalid wMaxPacketSize 0 [ 2499.577254][T17084] usb 4-1: config 0 interface 0 altsetting 0 bulk endpoint 0x4 has invalid maxpacket 0 [ 2499.723005][T17178] usb 1-1: device descriptor read/all, error -71 [ 2499.734053][T17178] usb usb1-port1: attempt power cycle [ 2499.739757][T17084] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x8 has invalid wMaxPacketSize 0 [ 2499.783665][T17084] usb 4-1: config 0 interface 0 altsetting 0 bulk endpoint 0x8 has invalid maxpacket 0 [ 2500.015773][T17084] usb 4-1: string descriptor 0 read error: -71 [ 2500.781816][T17084] usb 4-1: New USB device found, idVendor=0711, idProduct=0210, bcdDevice=ba.13 [ 2500.790951][T17084] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2500.811087][T17084] usb 4-1: config 0 descriptor?? [ 2500.851021][T17084] usb 4-1: can't set config #0, error -71 [ 2500.881643][T17084] usb 4-1: USB disconnect, device number 84 [ 2502.108757][T28281] netlink: 'syz.3.5585': attribute type 21 has an invalid length. [ 2502.118628][T28281] netlink: 'syz.3.5585': attribute type 20 has an invalid length. [ 2502.872114][T28281] IPv6: NLM_F_CREATE should be specified when creating new route [ 2502.880468][T28290] batadv_slave_0: entered promiscuous mode [ 2502.886892][T28290] batadv_slave_0: left promiscuous mode [ 2502.978339][T28286] overlayfs: missing 'lowerdir' [ 2505.390229][T28311] netlink: 20 bytes leftover after parsing attributes in process `syz.3.5593'. [ 2506.811430][T17084] usb 4-1: new high-speed USB device number 85 using dummy_hcd [ 2507.250848][T17084] usb 4-1: Using ep0 maxpacket: 8 [ 2507.578798][T28327] VFS: could not find a valid V7 on nullb0. [ 2507.598428][T17084] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x4 has invalid wMaxPacketSize 0 [ 2507.662081][T17084] usb 4-1: config 0 interface 0 altsetting 0 bulk endpoint 0x4 has invalid maxpacket 0 [ 2507.682718][T17084] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x8 has invalid wMaxPacketSize 0 [ 2507.709635][T17084] usb 4-1: config 0 interface 0 altsetting 0 bulk endpoint 0x8 has invalid maxpacket 0 [ 2507.751369][T17084] usb 4-1: New USB device found, idVendor=0711, idProduct=0210, bcdDevice=ba.13 [ 2507.770903][T28160] usb 2-1: new high-speed USB device number 101 using dummy_hcd [ 2507.799894][T17084] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2507.845103][T17084] usb 4-1: Product: syz [ 2507.884760][T17084] usb 4-1: Manufacturer: syz [ 2507.890628][T17084] usb 4-1: SerialNumber: syz [ 2507.910013][T17084] usb 4-1: config 0 descriptor?? [ 2507.920220][T28338] netlink: 'syz.2.5600': attribute type 21 has an invalid length. [ 2507.928528][T28338] netlink: 'syz.2.5600': attribute type 20 has an invalid length. [ 2507.931864][T17084] mct_u232 4-1:0.0: MCT U232 converter detected [ 2507.966904][T17084] mct_u232 ttyUSB0: expected endpoint missing [ 2508.010934][T28160] usb 2-1: unable to read config index 0 descriptor/start: -61 [ 2508.026677][T28160] usb 2-1: can't read configurations, error -61 [ 2508.211010][T28160] usb 2-1: new high-speed USB device number 102 using dummy_hcd [ 2508.251526][T28342] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 2508.425090][T28160] usb 2-1: unable to read config index 0 descriptor/start: -61 [ 2508.436343][T28160] usb 2-1: can't read configurations, error -61 [ 2508.450019][T28160] usb usb2-port1: attempt power cycle [ 2508.881230][T28160] usb 2-1: new high-speed USB device number 103 using dummy_hcd [ 2509.045041][T28351] netlink: 16 bytes leftover after parsing attributes in process `syz.2.5602'. [ 2509.092688][T28351] netlink: 24 bytes leftover after parsing attributes in process `syz.2.5602'. [ 2509.111200][T28160] usb 2-1: device not accepting address 103, error -71 [ 2509.238620][T17178] usb 4-1: USB disconnect, device number 85 [ 2509.248755][T17178] mct_u232 4-1:0.0: device disconnected [ 2509.651736][T28363] program syz.3.5605 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 2509.661765][T28363] sd 0:0:1:0: ioctl_internal_command: ILLEGAL REQUEST asc=0x20 ascq=0x0 [ 2510.512712][T28351] bond6: entered allmulticast mode [ 2510.542349][T28351] 8021q: adding VLAN 0 to HW filter on device bond6 [ 2512.769056][T28390] FAULT_INJECTION: forcing a failure. [ 2512.769056][T28390] name failslab, interval 1, probability 0, space 0, times 0 [ 2513.870944][T28390] CPU: 0 UID: 0 PID: 28390 Comm: syz.0.5613 Not tainted 6.11.0-rc1-syzkaller-00293-gdefaf1a2113a #0 [ 2513.881761][T28390] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/27/2024 [ 2513.891832][T28390] Call Trace: [ 2513.895123][T28390] [ 2513.898066][T28390] dump_stack_lvl+0x16c/0x1f0 [ 2513.902780][T28390] should_fail_ex+0x497/0x5b0 [ 2513.907483][T28390] ? fs_reclaim_acquire+0xae/0x160 [ 2513.912616][T28390] should_failslab+0xc2/0x120 [ 2513.917330][T28390] kmem_cache_alloc_lru_noprof+0x72/0x2f0 [ 2513.923076][T28390] ? sock_alloc_inode+0x25/0x1c0 [ 2513.928037][T28390] ? __pfx_sock_alloc_inode+0x10/0x10 [ 2513.933520][T28390] sock_alloc_inode+0x25/0x1c0 [ 2513.938314][T28390] alloc_inode+0x5d/0x230 [ 2513.942669][T28390] sock_alloc+0x40/0x280 [ 2513.946932][T28390] __sock_create+0xc0/0x800 [ 2513.951467][T28390] __sys_socket+0x14f/0x260 [ 2513.955998][T28390] ? __pfx___sys_socket+0x10/0x10 [ 2513.961047][T28390] ? ksys_write+0x1ab/0x260 [ 2513.965578][T28390] ? __pfx_ksys_write+0x10/0x10 [ 2513.970445][T28390] __x64_sys_socket+0x72/0xb0 [ 2513.975145][T28390] ? lockdep_hardirqs_on+0x7c/0x110 [ 2513.980361][T28390] do_syscall_64+0xcd/0x250 [ 2513.984891][T28390] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 2513.990815][T28390] RIP: 0033:0x7f3352f779f9 [ 2513.995245][T28390] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 2514.014877][T28390] RSP: 002b:00007f3353e31048 EFLAGS: 00000246 ORIG_RAX: 0000000000000029 [ 2514.023313][T28390] RAX: ffffffffffffffda RBX: 00007f3353105f80 RCX: 00007f3352f779f9 [ 2514.031305][T28390] RDX: 0000000000000000 RSI: 0000000000000003 RDI: 0000840000000002 [ 2514.039291][T28390] RBP: 00007f3353e310a0 R08: 0000000000000000 R09: 0000000000000000 [ 2514.047280][T28390] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 2514.055266][T28390] R13: 000000000000000b R14: 00007f3353105f80 R15: 00007ffd635486c8 [ 2514.063343][T28390] [ 2514.122060][T28390] socket: no more sockets [ 2514.243415][T28397] ecryptfs_parse_options: eCryptfs: unrecognized option [&@] [ 2514.287591][T28397] ecryptfs_parse_options: You must supply at least one valid auth tok signature as a mount parameter; see the eCryptfs README [ 2514.318465][T28397] Error parsing options; rc = [-22] [ 2515.433048][ T944] usb 5-1: new high-speed USB device number 104 using dummy_hcd [ 2515.636237][ T944] usb 5-1: unable to read config index 0 descriptor/start: -61 [ 2515.821756][ T944] usb 5-1: can't read configurations, error -61 [ 2516.041274][ T944] usb 5-1: new high-speed USB device number 105 using dummy_hcd [ 2516.697753][T28428] FAULT_INJECTION: forcing a failure. [ 2516.697753][T28428] name failslab, interval 1, probability 0, space 0, times 0 [ 2516.712069][T28428] CPU: 1 UID: 0 PID: 28428 Comm: syz.3.5621 Not tainted 6.11.0-rc1-syzkaller-00293-gdefaf1a2113a #0 [ 2516.722870][T28428] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/27/2024 [ 2516.732937][T28428] Call Trace: [ 2516.736214][T28428] [ 2516.739191][T28428] dump_stack_lvl+0x116/0x1f0 [ 2516.743890][T28428] should_fail_ex+0x497/0x5b0 [ 2516.748581][T28428] ? __pfx_lock_release+0x10/0x10 [ 2516.753614][T28428] should_failslab+0xc2/0x120 [ 2516.758298][T28428] kmem_cache_alloc_noprof+0x6e/0x2f0 [ 2516.763674][T28428] ? __sigqueue_alloc+0x244/0x6b0 [ 2516.768700][T28428] __sigqueue_alloc+0x244/0x6b0 [ 2516.773556][T28428] __send_signal_locked+0x74b/0x11c0 [ 2516.778850][T28428] force_sig_info_to_task+0x31d/0x660 [ 2516.784231][T28428] force_sig_fault+0xc5/0x110 [ 2516.788915][T28428] ? __pfx_force_sig_fault+0x10/0x10 [ 2516.794299][T28428] ? fixup_vdso_exception+0x34b/0x400 [ 2516.799685][T28428] __bad_area_nosemaphore+0x30d/0x6a0 [ 2516.805069][T28428] ? lock_mm_and_find_vma+0xa6/0x6a0 [ 2516.810358][T28428] do_user_addr_fault+0x920/0x13f0 [ 2516.815477][T28428] ? trace_irq_disable.constprop.0+0xe4/0x130 [ 2516.821548][T28428] exc_page_fault+0x5c/0xc0 [ 2516.826060][T28428] asm_exc_page_fault+0x26/0x30 [ 2516.830917][T28428] RIP: 0033:0x7f1c40c476a7 [ 2516.835329][T28428] Code: c4 0f 85 83 03 00 00 48 8b 04 24 89 5c 24 14 c6 80 d0 00 00 00 01 80 3d 42 e0 de 00 00 74 12 48 8b 04 24 48 8b 80 a8 00 00 00 <48> c7 00 00 00 00 00 48 8b 1c 24 48 c7 83 88 00 00 00 ff ff ff ff [ 2516.854940][T28428] RSP: 002b:00007f1c41ada070 EFLAGS: 00010202 [ 2516.861007][T28428] RAX: 0000000000000000 RBX: 0000000000000006 RCX: 0000000000000000 [ 2516.869321][T28428] RDX: 00007f1c41ada0a0 RSI: 00007f1c41ada0a0 RDI: 00007f1c41ada0a0 [ 2516.877291][T28428] RBP: 00007f1c41ada0a0 R08: 0000000000000000 R09: 00007f1c41ad9e07 [ 2516.885259][T28428] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000001 [ 2516.893227][T28428] R13: 000000000000006e R14: 00007f1c40f06208 R15: 00007ffdc4842aa8 [ 2516.901206][T28428] [ 2517.082147][ T944] usb 5-1: unable to read config index 0 descriptor/start: -61 [ 2517.401442][ T944] usb 5-1: can't read configurations, error -61 [ 2517.450131][ T944] usb usb5-port1: attempt power cycle [ 2518.205149][T28442] netlink: 16 bytes leftover after parsing attributes in process `syz.4.5626'. [ 2518.221384][T28442] netlink: 24 bytes leftover after parsing attributes in process `syz.4.5626'. [ 2518.475493][T28442] bond2: entered allmulticast mode [ 2518.485682][T28442] 8021q: adding VLAN 0 to HW filter on device bond2 [ 2518.497681][T28443] netlink: 16 bytes leftover after parsing attributes in process `syz.1.5627'. [ 2518.515575][T28443] netlink: 24 bytes leftover after parsing attributes in process `syz.1.5627'. [ 2518.679742][T28449] overlayfs: missing 'lowerdir' [ 2518.908546][T28443] bond2: entered allmulticast mode [ 2519.639313][T28443] 8021q: adding VLAN 0 to HW filter on device bond2 [ 2520.415433][T28463] xt_CT: You must specify a L4 protocol and not use inversions on it [ 2520.714941][T28467] VFS: could not find a valid V7 on nullb0. [ 2521.371146][ T29] audit: type=1400 audit(1722780247.503:681): avc: denied { ioctl } for pid=28475 comm="syz.3.5636" path="socket:[113879]" dev="sockfs" ino=113879 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_tcpdiag_socket permissive=1 [ 2521.701468][ T5277] usb 2-1: new high-speed USB device number 105 using dummy_hcd [ 2521.893694][ T5277] usb 2-1: unable to read config index 0 descriptor/start: -61 [ 2521.911716][ T5277] usb 2-1: can't read configurations, error -61 [ 2522.071054][ T5277] usb 2-1: new high-speed USB device number 106 using dummy_hcd [ 2523.204715][ T5277] usb 2-1: unable to read config index 0 descriptor/start: -61 [ 2523.236363][ T5277] usb 2-1: can't read configurations, error -61 [ 2523.297697][ T5277] usb usb2-port1: attempt power cycle [ 2527.707602][T28511] ubi0: attaching mtd0 [ 2527.711816][T28511] ubi0 error: ubi_attach_mtd_dev: bad VID header (7) or data offsets (71) [ 2527.723028][T28510] batadv_slave_0: entered promiscuous mode [ 2527.895750][T28517] xt_CT: You must specify a L4 protocol and not use inversions on it [ 2527.944645][T28505] batadv_slave_0: left promiscuous mode [ 2528.411533][T28528] FAULT_INJECTION: forcing a failure. [ 2528.411533][T28528] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 2528.468846][T28528] CPU: 0 UID: 0 PID: 28528 Comm: syz.4.5649 Not tainted 6.11.0-rc1-syzkaller-00293-gdefaf1a2113a #0 [ 2528.479739][T28528] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/27/2024 [ 2528.489789][T28528] Call Trace: [ 2528.493149][T28528] [ 2528.496065][T28528] dump_stack_lvl+0x16c/0x1f0 [ 2528.500740][T28528] should_fail_ex+0x497/0x5b0 [ 2528.505422][T28528] _copy_from_user+0x30/0xf0 [ 2528.510005][T28528] copy_msghdr_from_user+0x99/0x160 [ 2528.515199][T28528] ? __pfx_copy_msghdr_from_user+0x10/0x10 [ 2528.521006][T28528] ? find_held_lock+0x2d/0x110 [ 2528.525764][T28528] ___sys_recvmsg+0xdc/0x1a0 [ 2528.530345][T28528] ? __pfx____sys_recvmsg+0x10/0x10 [ 2528.535540][T28528] ? __fget_light+0x173/0x210 [ 2528.540211][T28528] __sys_recvmsg+0x114/0x1e0 [ 2528.544797][T28528] ? __pfx___sys_recvmsg+0x10/0x10 [ 2528.549919][T28528] do_syscall_64+0xcd/0x250 [ 2528.554427][T28528] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 2528.560321][T28528] RIP: 0033:0x7fbecd7779f9 [ 2528.564728][T28528] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 2528.584334][T28528] RSP: 002b:00007fbece535048 EFLAGS: 00000246 ORIG_RAX: 000000000000002f [ 2528.592743][T28528] RAX: ffffffffffffffda RBX: 00007fbecd905f80 RCX: 00007fbecd7779f9 [ 2528.600706][T28528] RDX: 0000000000000000 RSI: 0000000020000240 RDI: 0000000000000004 [ 2528.608667][T28528] RBP: 00007fbece5350a0 R08: 0000000000000000 R09: 0000000000000000 [ 2528.616627][T28528] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 2528.624588][T28528] R13: 000000000000000b R14: 00007fbecd905f80 R15: 00007fffa37a6948 [ 2528.632552][T28528] [ 2528.799630][T28525] netlink: 'syz.0.5646': attribute type 21 has an invalid length. [ 2528.819775][T28525] netlink: 168 bytes leftover after parsing attributes in process `syz.0.5646'. [ 2530.811005][T14754] usb 4-1: new high-speed USB device number 86 using dummy_hcd [ 2531.024098][T14754] usb 4-1: unable to read config index 0 descriptor/start: -61 [ 2531.042548][T14754] usb 4-1: can't read configurations, error -61 [ 2531.142315][T28565] FAULT_INJECTION: forcing a failure. [ 2531.142315][T28565] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 2531.191735][T28565] CPU: 0 UID: 0 PID: 28565 Comm: syz.0.5658 Not tainted 6.11.0-rc1-syzkaller-00293-gdefaf1a2113a #0 [ 2531.200904][T14754] usb 4-1: new high-speed USB device number 87 using dummy_hcd [ 2531.202524][T28565] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/27/2024 [ 2531.202543][T28565] Call Trace: [ 2531.202555][T28565] [ 2531.202565][T28565] dump_stack_lvl+0x16c/0x1f0 [ 2531.231045][T28565] should_fail_ex+0x497/0x5b0 [ 2531.235765][T28565] _copy_from_user+0x30/0xf0 [ 2531.240388][T28565] copy_msghdr_from_user+0x99/0x160 [ 2531.245618][T28565] ? __pfx_copy_msghdr_from_user+0x10/0x10 [ 2531.251454][T28565] ? find_held_lock+0x2d/0x110 [ 2531.256254][T28565] ? __pfx___lock_acquire+0x10/0x10 [ 2531.261477][T28565] ___sys_sendmsg+0xff/0x1e0 [ 2531.266097][T28565] ? __pfx____sys_sendmsg+0x10/0x10 [ 2531.271326][T28565] ? ksys_write+0x21c/0x260 [ 2531.275859][T28565] ? __fget_light+0x173/0x210 [ 2531.280575][T28565] __sys_sendmsg+0x117/0x1f0 [ 2531.285190][T28565] ? __pfx___sys_sendmsg+0x10/0x10 [ 2531.290316][T28565] do_syscall_64+0xcd/0x250 [ 2531.294826][T28565] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 2531.300728][T28565] RIP: 0033:0x7f3352f779f9 [ 2531.305139][T28565] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 2531.324745][T28565] RSP: 002b:00007f3353e31048 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 2531.333160][T28565] RAX: ffffffffffffffda RBX: 00007f3353105f80 RCX: 00007f3352f779f9 [ 2531.341147][T28565] RDX: 0000000000000000 RSI: 0000000020000480 RDI: 0000000000000004 [ 2531.349128][T28565] RBP: 00007f3353e310a0 R08: 0000000000000000 R09: 0000000000000000 [ 2531.357099][T28565] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 2531.365068][T28565] R13: 000000000000000b R14: 00007f3353105f80 R15: 00007ffd635486c8 [ 2531.373068][T28565] [ 2531.411570][ T5277] usb 2-1: new high-speed USB device number 108 using dummy_hcd [ 2531.476754][T14754] usb 4-1: unable to read config index 0 descriptor/start: -61 [ 2531.484948][T14754] usb 4-1: can't read configurations, error -61 [ 2531.500098][T14754] usb usb4-port1: attempt power cycle [ 2531.621074][ T5277] usb 2-1: Using ep0 maxpacket: 32 [ 2531.628982][ T5277] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 2531.667988][ T5277] usb 2-1: config 1 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 2531.708769][ T5277] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40 [ 2531.718327][ T5277] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2531.727472][ T5277] usb 2-1: Product: syz [ 2531.738691][ T5277] usb 2-1: Manufacturer: syz [ 2531.746402][ T5277] usb 2-1: SerialNumber: syz [ 2531.879670][T28572] xt_CT: You must specify a L4 protocol and not use inversions on it [ 2531.911025][T14754] usb 4-1: new high-speed USB device number 88 using dummy_hcd [ 2531.974394][T14754] usb 4-1: unable to read config index 0 descriptor/start: -61 [ 2531.987908][T14754] usb 4-1: can't read configurations, error -61 [ 2532.085538][ T5277] usblp 2-1:1.0: usblp0: USB Unidirectional printer dev 108 if 0 alt 0 proto 1 vid 0x0525 pid 0xA4A8 [ 2532.160996][T14754] usb 4-1: new high-speed USB device number 89 using dummy_hcd [ 2532.372093][T14754] usb 4-1: unable to read config index 0 descriptor/start: -61 [ 2532.380261][T14754] usb 4-1: can't read configurations, error -61 [ 2532.400178][T14754] usb usb4-port1: unable to enumerate USB device [ 2533.360747][T28160] usb 2-1: USB disconnect, device number 108 [ 2533.386844][T28563] usblp0: removed [ 2533.885820][T28592] FAULT_INJECTION: forcing a failure. [ 2533.885820][T28592] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 2533.900459][T28592] CPU: 0 UID: 0 PID: 28592 Comm: syz.3.5665 Not tainted 6.11.0-rc1-syzkaller-00293-gdefaf1a2113a #0 [ 2533.911251][T28592] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/27/2024 [ 2533.921333][T28592] Call Trace: [ 2533.924614][T28592] [ 2533.927541][T28592] dump_stack_lvl+0x16c/0x1f0 [ 2533.932235][T28592] should_fail_ex+0x497/0x5b0 [ 2533.936926][T28592] _copy_from_user+0x30/0xf0 [ 2533.941535][T28592] move_addr_to_kernel+0x68/0x160 [ 2533.946581][T28592] __sys_connect+0xbd/0x170 [ 2533.951184][T28592] ? __pfx___sys_connect+0x10/0x10 [ 2533.956310][T28592] __x64_sys_connect+0x72/0xb0 [ 2533.961080][T28592] ? lockdep_hardirqs_on+0x7c/0x110 [ 2533.966285][T28592] do_syscall_64+0xcd/0x250 [ 2533.970793][T28592] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 2533.976703][T28592] RIP: 0033:0x7f1c40d779f9 [ 2533.981118][T28592] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 2534.000729][T28592] RSP: 002b:00007f1c41afb048 EFLAGS: 00000246 ORIG_RAX: 000000000000002a [ 2534.009151][T28592] RAX: ffffffffffffffda RBX: 00007f1c40f06130 RCX: 00007f1c40d779f9 [ 2534.017122][T28592] RDX: 0000000000000048 RSI: 0000000020000040 RDI: 0000000000000008 [ 2534.025090][T28592] RBP: 00007f1c41afb0a0 R08: 0000000000000000 R09: 0000000000000000 [ 2534.033058][T28592] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 2534.041023][T28592] R13: 000000000000006e R14: 00007f1c40f06130 R15: 00007ffdc4842aa8 [ 2534.048994][T28592] [ 2534.436000][ T5277] usb 1-1: new high-speed USB device number 91 using dummy_hcd [ 2534.690306][T28594] fuse: Unknown parameter '0000000000000000000001000000000000000000000' [ 2534.710859][ T5277] usb 1-1: Using ep0 maxpacket: 8 [ 2534.751545][ T5277] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x8D has an invalid bInterval 42, changing to 9 [ 2534.798171][ T5277] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 2534.821756][ T5277] usb 1-1: config 0 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 2534.832910][ T5277] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x8B has invalid wMaxPacketSize 0 [ 2534.843931][ T5277] usb 1-1: New USB device found, idVendor=05ac, idProduct=8215, bcdDevice=8f.58 [ 2534.862187][ T5277] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2534.889249][ T5277] usb 1-1: config 0 descriptor?? [ 2536.164030][ T5277] usb 1-1: USB disconnect, device number 91 [ 2536.212659][T28601] overlayfs: missing 'lowerdir' [ 2537.761588][T28614] xt_CT: You must specify a L4 protocol and not use inversions on it [ 2537.808823][T28620] FAULT_INJECTION: forcing a failure. [ 2537.808823][T28620] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 2537.850245][T28620] CPU: 0 UID: 0 PID: 28620 Comm: syz.0.5673 Not tainted 6.11.0-rc1-syzkaller-00293-gdefaf1a2113a #0 [ 2537.861044][T28620] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/27/2024 [ 2537.871100][T28620] Call Trace: [ 2537.874379][T28620] [ 2537.877313][T28620] dump_stack_lvl+0x16c/0x1f0 [ 2537.882007][T28620] should_fail_ex+0x497/0x5b0 [ 2537.886700][T28620] _copy_from_user+0x30/0xf0 [ 2537.891320][T28620] copy_msghdr_from_user+0x99/0x160 [ 2537.896545][T28620] ? __pfx_copy_msghdr_from_user+0x10/0x10 [ 2537.902366][T28620] ? find_held_lock+0x2d/0x110 [ 2537.907148][T28620] ? __pfx___lock_acquire+0x10/0x10 [ 2537.912353][T28620] ___sys_sendmsg+0xff/0x1e0 [ 2537.916956][T28620] ? __pfx____sys_sendmsg+0x10/0x10 [ 2537.922180][T28620] ? ksys_write+0x21c/0x260 [ 2537.926685][T28620] ? __fget_light+0x173/0x210 [ 2537.931378][T28620] __sys_sendmsg+0x117/0x1f0 [ 2537.935980][T28620] ? __pfx___sys_sendmsg+0x10/0x10 [ 2537.941109][T28620] do_syscall_64+0xcd/0x250 [ 2537.945619][T28620] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 2537.951524][T28620] RIP: 0033:0x7f3352f779f9 [ 2537.955937][T28620] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 2537.975547][T28620] RSP: 002b:00007f3353e31048 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 2537.983965][T28620] RAX: ffffffffffffffda RBX: 00007f3353105f80 RCX: 00007f3352f779f9 [ 2537.991945][T28620] RDX: 0000000000000000 RSI: 00000000200002c0 RDI: 0000000000000003 [ 2537.999921][T28620] RBP: 00007f3353e310a0 R08: 0000000000000000 R09: 0000000000000000 [ 2538.007889][T28620] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 2538.015863][T28620] R13: 000000000000000b R14: 00007f3353105f80 R15: 00007ffd635486c8 [ 2538.023837][T28620] [ 2539.222797][T28632] batadv_slave_0: entered promiscuous mode [ 2539.673694][T28628] batadv_slave_0: left promiscuous mode [ 2544.079077][T28689] FAULT_INJECTION: forcing a failure. [ 2544.079077][T28689] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 2544.113068][T28685] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 2544.146733][T28689] CPU: 0 UID: 0 PID: 28689 Comm: syz.1.5689 Not tainted 6.11.0-rc1-syzkaller-00293-gdefaf1a2113a #0 [ 2544.157553][T28689] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/27/2024 [ 2544.167622][T28689] Call Trace: [ 2544.170911][T28689] [ 2544.173843][T28689] dump_stack_lvl+0x16c/0x1f0 [ 2544.178607][T28689] should_fail_ex+0x497/0x5b0 [ 2544.183284][T28689] _copy_from_user+0x30/0xf0 [ 2544.187870][T28689] copy_msghdr_from_user+0x99/0x160 [ 2544.193080][T28689] ? __pfx_copy_msghdr_from_user+0x10/0x10 [ 2544.198891][T28689] ? find_held_lock+0x2d/0x110 [ 2544.203652][T28689] ? __pfx___lock_acquire+0x10/0x10 [ 2544.208843][T28689] ___sys_sendmsg+0xff/0x1e0 [ 2544.213430][T28689] ? __pfx____sys_sendmsg+0x10/0x10 [ 2544.218631][T28689] ? ksys_write+0x21c/0x260 [ 2544.223123][T28689] ? __fget_light+0x173/0x210 [ 2544.227799][T28689] __sys_sendmsg+0x117/0x1f0 [ 2544.232388][T28689] ? __pfx___sys_sendmsg+0x10/0x10 [ 2544.237501][T28689] do_syscall_64+0xcd/0x250 [ 2544.242001][T28689] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 2544.247885][T28689] RIP: 0033:0x7fe1eb3779f9 [ 2544.252285][T28689] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 2544.271879][T28689] RSP: 002b:00007fe1ec0b3048 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 2544.280280][T28689] RAX: ffffffffffffffda RBX: 00007fe1eb505f80 RCX: 00007fe1eb3779f9 [ 2544.288236][T28689] RDX: 0000000000000000 RSI: 00000000200002c0 RDI: 0000000000000003 [ 2544.296196][T28689] RBP: 00007fe1ec0b30a0 R08: 0000000000000000 R09: 0000000000000000 [ 2544.304151][T28689] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 2544.312108][T28689] R13: 000000000000000b R14: 00007fe1eb505f80 R15: 00007ffc60656458 [ 2544.320063][T28689] [ 2544.937329][T28692] syz.2.5690 (28692): drop_caches: 2 [ 2545.110231][T28695] bond0: entered promiscuous mode [ 2545.120294][T28695] bond_slave_0: entered promiscuous mode [ 2545.165894][T28695] bond_slave_1: entered promiscuous mode [ 2547.498179][T28712] batadv_slave_0: entered promiscuous mode [ 2548.009757][T28705] batadv_slave_0: left promiscuous mode [ 2549.833087][T28697] bond0: left promiscuous mode [ 2549.861022][ T9] usb 3-1: new high-speed USB device number 95 using dummy_hcd [ 2549.870647][T28697] bond_slave_0: left promiscuous mode [ 2549.892358][T28697] bond_slave_1: left promiscuous mode [ 2550.060952][ T9] usb 3-1: Using ep0 maxpacket: 16 [ 2550.112750][ T9] usb 3-1: New USB device found, idVendor=04dd, idProduct=8002, bcdDevice=fc.b6 [ 2550.122239][ T9] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2550.130301][ T9] usb 3-1: Product: syz [ 2550.134638][ T9] usb 3-1: Manufacturer: syz [ 2550.139268][ T9] usb 3-1: SerialNumber: syz [ 2550.155987][ T9] usb 3-1: config 0 descriptor?? [ 2550.191230][ T9] safe_serial 3-1:0.0: safe_serial converter detected [ 2550.400211][ T9] usb 3-1: safe_serial converter now attached to ttyUSB0 [ 2551.389778][T28740] xt_CT: You must specify a L4 protocol and not use inversions on it [ 2551.698224][T14754] usb 4-1: new high-speed USB device number 90 using dummy_hcd [ 2552.126137][T14754] usb 4-1: Using ep0 maxpacket: 32 [ 2552.147514][T14754] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 2552.333897][T14754] usb 4-1: config 1 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 2552.844171][T14754] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40 [ 2552.869185][T14754] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2552.899295][T14754] usb 4-1: Product: syz [ 2553.033530][T14754] usb 4-1: Manufacturer: syz [ 2553.038183][T14754] usb 4-1: SerialNumber: syz [ 2553.281542][T14754] usblp 4-1:1.0: usblp0: USB Unidirectional printer dev 90 if 0 alt 0 proto 1 vid 0x0525 pid 0xA4A8 [ 2553.564471][T28765] batadv_slave_0: entered promiscuous mode [ 2554.201311][T28761] batadv_slave_0: left promiscuous mode [ 2554.467002][T28259] usb 4-1: USB disconnect, device number 90 [ 2554.868493][T28259] usblp0: removed [ 2555.137057][T17178] usb 3-1: USB disconnect, device number 95 [ 2555.191017][T17178] safe_serial ttyUSB0: safe_serial converter now disconnected from ttyUSB0 [ 2555.268667][T17178] safe_serial 3-1:0.0: device disconnected [ 2557.900991][T28788] jump_label: Fatal kernel bug, unexpected op at vcpu_mmio_read+0x85/0x3f0 [ffffffff81115ae5] (e9 9b 01 00 00 != 0f 1f 44 00 00)) size:5 type:1 [ 2557.917153][T28788] ------------[ cut here ]------------ [ 2557.922675][T28788] kernel BUG at arch/x86/kernel/jump_label.c:73! [ 2557.929036][T28788] Oops: invalid opcode: 0000 [#1] PREEMPT SMP KASAN PTI [ 2557.936085][T28788] CPU: 0 UID: 0 PID: 28788 Comm: syz.2.5713 Not tainted 6.11.0-rc1-syzkaller-00293-gdefaf1a2113a #0 [ 2557.946865][T28788] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/27/2024 [ 2557.956928][T28788] RIP: 0010:__jump_label_patch+0x378/0x400 [ 2557.962763][T28788] Code: 48 c7 c3 60 40 24 93 e8 c6 7c 59 00 45 89 e1 49 89 d8 4c 89 f1 41 55 4c 89 f2 4c 89 f6 48 c7 c7 20 38 46 8b e8 f9 ef 39 00 90 <0f> 0b e8 a1 7c 59 00 90 0f 0b e8 99 7c 59 00 90 0f 0b 48 c7 c7 30 [ 2557.982382][T28788] RSP: 0018:ffffc90003a9faa0 EFLAGS: 00010282 [ 2557.988463][T28788] RAX: 000000000000008d RBX: ffffffff8b466eaa RCX: ffffffff816b0039 [ 2557.996444][T28788] RDX: 0000000000000000 RSI: ffffffff816b9416 RDI: 0000000000000005 [ 2558.004427][T28788] RBP: ffffc90003a9fae8 R08: 0000000000000005 R09: 0000000000000000 [ 2558.012402][T28788] R10: 0000000080000000 R11: 0000000000052498 R12: 0000000000000005 [ 2558.020373][T28788] R13: 0000000000000001 R14: ffffffff81115ae5 R15: 00000000000000da [ 2558.028347][T28788] FS: 000055557f56a500(0000) GS:ffff8880b9200000(0000) knlGS:0000000000000000 [ 2558.037281][T28788] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 2558.043872][T28788] CR2: 0000000021000000 CR3: 0000000063e40000 CR4: 00000000003526f0 [ 2558.051852][T28788] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 2558.059826][T28788] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 2558.067805][T28788] Call Trace: [ 2558.071086][T28788] [ 2558.074111][T28788] ? show_regs+0x8c/0xa0 [ 2558.078373][T28788] ? die+0x36/0xa0 [ 2558.082108][T28788] ? do_trap+0x232/0x430 [ 2558.086365][T28788] ? __jump_label_patch+0x378/0x400 [ 2558.091575][T28788] ? __jump_label_patch+0x378/0x400 [ 2558.096782][T28788] ? do_error_trap+0xf4/0x230 [ 2558.101468][T28788] ? __jump_label_patch+0x378/0x400 [ 2558.106682][T28788] ? handle_invalid_op+0x34/0x40 [ 2558.111628][T28788] ? __jump_label_patch+0x378/0x400 [ 2558.116838][T28788] ? exc_invalid_op+0x2e/0x50 [ 2558.121526][T28788] ? asm_exc_invalid_op+0x1a/0x20 [ 2558.126569][T28788] ? vcpu_mmio_read+0x85/0x3f0 [ 2558.131348][T28788] ? __wake_up_klogd.part.0+0x99/0xf0 [ 2558.136731][T28788] ? vprintk+0x86/0xa0 [ 2558.140798][T28788] ? __jump_label_patch+0x378/0x400 [ 2558.146014][T28788] arch_jump_label_transform_queue+0x7e/0x120 [ 2558.152099][T28788] __jump_label_update+0x125/0x420 [ 2558.157223][T28788] jump_label_update+0x1d7/0x400 [ 2558.162170][T28788] __static_key_slow_dec_cpuslocked.part.0+0x4e/0x90 [ 2558.168861][T28788] static_key_slow_dec+0x7c/0xc0 [ 2558.173811][T28788] kvm_free_lapic+0x184/0x1c0 [ 2558.178499][T28788] kvm_arch_vcpu_destroy+0x110/0x2a0 [ 2558.183807][T28788] kvm_destroy_vcpus+0x114/0x2a0 [ 2558.188843][T28788] ? __pfx_kvm_destroy_vcpus+0x10/0x10 [ 2558.194312][T28788] ? kvm_arch_destroy_vm+0x2dc/0x490 [ 2558.199617][T28788] kvm_arch_destroy_vm+0x2ec/0x490 [ 2558.204746][T28788] ? __pfx_kvm_arch_destroy_vm+0x10/0x10 [ 2558.210395][T28788] kvm_put_kvm+0x510/0xb80 [ 2558.214906][T28788] ? __pfx_kvm_vm_release+0x10/0x10 [ 2558.220108][T28788] kvm_vm_release+0x42/0x60 [ 2558.224617][T28788] __fput+0x408/0xbb0 [ 2558.228608][T28788] task_work_run+0x14e/0x250 [ 2558.233216][T28788] ? __pfx_task_work_run+0x10/0x10 [ 2558.238338][T28788] ? __pkru_allows_pkey+0x52/0xb0 [ 2558.243377][T28788] syscall_exit_to_user_mode+0x27b/0x2a0 [ 2558.249021][T28788] do_syscall_64+0xda/0x250 [ 2558.253536][T28788] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 2558.259446][T28788] RIP: 0033:0x7faa99b779f9 [ 2558.263868][T28788] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 2558.283484][T28788] RSP: 002b:00007ffdafb1a4b8 EFLAGS: 00000246 ORIG_RAX: 00000000000001b4 [ 2558.291903][T28788] RAX: 0000000000000000 RBX: 000000000027019e RCX: 00007faa99b779f9 [ 2558.299877][T28788] RDX: 0000000000000000 RSI: 000000000000001e RDI: 0000000000000003 [ 2558.307848][T28788] RBP: 00007ffdafb1a590 R08: 0000000000000001 R09: 00007ffdafb1a79f [ 2558.315821][T28788] R10: 00007faa99a00000 R11: 0000000000000246 R12: 0000000000000032 [ 2558.323796][T28788] R13: 00007ffdafb1a5b0 R14: 00007ffdafb1a5d0 R15: ffffffffffffffff [ 2558.331778][T28788] [ 2558.334797][T28788] Modules linked in: [ 2558.340241][T28160] usb 2-1: new high-speed USB device number 109 using dummy_hcd [ 2558.357417][T28788] ---[ end trace 0000000000000000 ]--- [ 2558.363661][T28788] RIP: 0010:__jump_label_patch+0x378/0x400 [ 2558.371068][T28788] Code: 48 c7 c3 60 40 24 93 e8 c6 7c 59 00 45 89 e1 49 89 d8 4c 89 f1 41 55 4c 89 f2 4c 89 f6 48 c7 c7 20 38 46 8b e8 f9 ef 39 00 90 <0f> 0b e8 a1 7c 59 00 90 0f 0b e8 99 7c 59 00 90 0f 0b 48 c7 c7 30 [ 2558.392260][T28788] RSP: 0018:ffffc90003a9faa0 EFLAGS: 00010282 [ 2558.398353][T28788] RAX: 000000000000008d RBX: ffffffff8b466eaa RCX: ffffffff816b0039 [ 2558.421785][T28788] RDX: 0000000000000000 RSI: ffffffff816b9416 RDI: 0000000000000005 [ 2558.429859][T28788] RBP: ffffc90003a9fae8 R08: 0000000000000005 R09: 0000000000000000 [ 2558.437960][T28788] R10: 0000000080000000 R11: 0000000000052498 R12: 0000000000000005 [ 2558.446181][T28788] R13: 0000000000000001 R14: ffffffff81115ae5 R15: 00000000000000da [ 2558.454191][T28788] FS: 000055557f56a500(0000) GS:ffff8880b9200000(0000) knlGS:0000000000000000 [ 2558.465567][T28788] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 2558.473673][T28788] CR2: 00007f1c40ed3178 CR3: 0000000063e40000 CR4: 00000000003526f0 [ 2558.481693][T28788] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 2558.489658][T28788] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 2558.497677][T28788] Kernel panic - not syncing: Fatal exception [ 2558.503951][T28788] Kernel Offset: disabled [ 2558.508258][T28788] Rebooting in 86400 seconds..