last executing test programs: 4m19.505019302s ago: executing program 1 (id=334): r0 = syz_usb_connect$hid(0x2, 0x36, &(0x7f0000000280)=ANY=[@ANYBLOB="12010000000000085e0495000000000000010902240001000080070904000004030000000921faff09012207000905810300"], 0x0) socket$inet(0x2, 0x2, 0x6a113fc2) r1 = socket$inet(0x2, 0x2, 0x1) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000480)=ANY=[@ANYBLOB="4c00000002060108000034e40000000000000000050001000600000005000400000000000900020073797a3100000000050005000200000c12000300686173683a6e65742c706f7274"], 0x4c}}, 0x2) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r3, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000001c0)=ANY=[@ANYBLOB="50000000090601020000000000000000020000000900020073797a31000000000500010007000000280007800c00018008000140ffffffff0500070084000000060004404e22000006000540"], 0x50}, 0x1, 0x0, 0x0, 0x10000082}, 0x80) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_LIST(r4, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)=ANY=[@ANYBLOB="1c000000070601080000001e000000000a0000040500010007"], 0x1c}, 0x1, 0x0, 0x0, 0x20000005}, 0x80) r5 = syz_usb_connect(0x0, 0x36, &(0x7f0000000040)={{0x12, 0x1, 0x0, 0xf2, 0x30, 0x39, 0x20, 0x2c42, 0x1202, 0x8540, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x10, 0x0, [{{0x9, 0x4, 0xc, 0x2, 0x2, 0xc1, 0x7f, 0xc, 0x0, [], [{{0x9, 0x5, 0x2, 0x2, 0x200, 0x2}}, {{0x9, 0x5, 0x82, 0x2, 0x200}}]}}]}}]}}, 0x0) syz_usb_control_io$printer(r5, 0x0, 0x0) syz_usb_control_io(r5, 0x0, 0x0) close_range(r1, 0xffffffffffffffff, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f00000002c0)={0x24, 0x0, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="0022e4ffe1f4bb5b449c77efa52266df5a3bc6071459"], 0x0}, 0x0) 4m16.881611913s ago: executing program 1 (id=350): socket$nl_generic(0x10, 0x3, 0x10) (async) r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000100)={'wlan0\x00'}) sendmsg$NL80211_CMD_SET_REG(r0, &(0x7f0000001500)={&(0x7f0000001280), 0xc, &(0x7f00000014c0)={&(0x7f0000001300)=ANY=[@ANYBLOB="a4010000", @ANYRES16=0x0, @ANYBLOB="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"/414], 0x1a4}, 0x1, 0x0, 0x0, 0x2fa4a2503612c705}, 0x0) sendmsg$NL80211_CMD_SET_TX_BITRATE_MASK(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000000)=ANY=[], 0x30}, 0x1, 0x0, 0x0, 0x40000}, 0x0) (async) sendmsg$NL80211_CMD_SET_TX_BITRATE_MASK(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000000)=ANY=[], 0x30}, 0x1, 0x0, 0x0, 0x40000}, 0x0) memfd_create(&(0x7f00000009c0)='y\x105\xfb\xf7u\x83%:r\xc2\xb9x\xa4q\xc1\xea_\x8cZ7\xe7a\x9b\x11x\x0e\xa1\xcf\x1a\x98S7\xc9\x00\x00\x00\x00\x00\x00\a\x00\x00\x00\x00\x00\x00\x04\x879\xa24\xa9am\xde\xb2\xd3\xcbZJoa\xc4\x1acB\xaa\xc1\xfb Q\xd4\xf4\x01\xa52\xe2DG\xd4\xbd{\x9f\xa9\x97\x9b@\xdbU\xb1\xe1br\xb6\x008\xe3\x10\xff\xc2\x9d\r2\x9e\x8e\x04sW\x1b\xb7\xb3\xa2\xc9&@\xca\xda\xdc\xe2/\x97X\xac\b\xb0\xc2<\x80E\x1a\xbc\xc7W\xda9VsA\xaf\xc6\x90i\xa1\xb5M\xa2\x85\xa6y\xc4J\xf1\xf7\xfcD\x95\xe3\xeb\xc7\xbc\x91\xb0\xa8\x9eo\xebF(\x9dL\x01vRk\xaacB\x04\xa7I\v\x86EZ\x96\xd5\x14O\xf8\xb5C\x1f\xb6b8b\x06A2@D\\\xe8R\xe4\xcd\xec\xcc\xd1\x0fre\xe86\xcd\xeb\xc4$\x98\x06J\xd6dD\x8d_U`ji{\xab\x97\xaf;l\x1f\xaf\xb38U\xcb\xfa\xb3j\x92\f\x81\xa0\xa2-g\b\x99\x0e\x8d\x8d\x16\x05\x00\x00\x00\x00\x00\x00\x00\'\x93\xef\x1d\xa0H\xd9\xbd\xd9\xaf\x12$\x8d\x16%\x8b\x00\x88\xd1\x1eQB\x18\xc1-\xc4\x8fK\xf8\xfa\xb6\xf8\v;\xaa\x8fW\xcc\n\x17\x7f\x98\xb7\xcdqV\xd4\xf0)\xfa\x0fG\xc8\xbf\xfd\xe8>K\f\xcd+\xb0\x99Q\xba/\xa8\xb9`k\b\xd1\xcc\xfc\xeaA\"\v=\x83fC\x90%\xa1d\x91\xf8:\x16<\xad\xc2\x18\xdf\x01\xe2\x96\xfcj\xe9\xa4\x065m\x03\x05Np\xda\"\xf1\xb6\xbcP\x8fP\x8d\x89%\xf2\x12T\xd0\xc3\x15W\x9c\x87\x1b\x8c\xc9\xd9\xc6\xad\x96-d\xa2wFB\xcaB\xa5\x15\xf8,\x04\x1c*\xd98\x8bG\x90\x81`\x03\xe0\xde\x9c\x9a\x0f\x1b\x8f\xd2%*&$Wc\xb3\xa6\xc4TK1}2\xb3\xab\xf4\xb7\xb7\x85\apa\xaf\x1c\x10i\xb9\x9f\x06\xff4%\"7f \x0e\xf5Bk\r\xac\"\x13tNx\xc0$\x85\x9f', 0x3) (async) r1 = memfd_create(&(0x7f00000009c0)='y\x105\xfb\xf7u\x83%:r\xc2\xb9x\xa4q\xc1\xea_\x8cZ7\xe7a\x9b\x11x\x0e\xa1\xcf\x1a\x98S7\xc9\x00\x00\x00\x00\x00\x00\a\x00\x00\x00\x00\x00\x00\x04\x879\xa24\xa9am\xde\xb2\xd3\xcbZJoa\xc4\x1acB\xaa\xc1\xfb Q\xd4\xf4\x01\xa52\xe2DG\xd4\xbd{\x9f\xa9\x97\x9b@\xdbU\xb1\xe1br\xb6\x008\xe3\x10\xff\xc2\x9d\r2\x9e\x8e\x04sW\x1b\xb7\xb3\xa2\xc9&@\xca\xda\xdc\xe2/\x97X\xac\b\xb0\xc2<\x80E\x1a\xbc\xc7W\xda9VsA\xaf\xc6\x90i\xa1\xb5M\xa2\x85\xa6y\xc4J\xf1\xf7\xfcD\x95\xe3\xeb\xc7\xbc\x91\xb0\xa8\x9eo\xebF(\x9dL\x01vRk\xaacB\x04\xa7I\v\x86EZ\x96\xd5\x14O\xf8\xb5C\x1f\xb6b8b\x06A2@D\\\xe8R\xe4\xcd\xec\xcc\xd1\x0fre\xe86\xcd\xeb\xc4$\x98\x06J\xd6dD\x8d_U`ji{\xab\x97\xaf;l\x1f\xaf\xb38U\xcb\xfa\xb3j\x92\f\x81\xa0\xa2-g\b\x99\x0e\x8d\x8d\x16\x05\x00\x00\x00\x00\x00\x00\x00\'\x93\xef\x1d\xa0H\xd9\xbd\xd9\xaf\x12$\x8d\x16%\x8b\x00\x88\xd1\x1eQB\x18\xc1-\xc4\x8fK\xf8\xfa\xb6\xf8\v;\xaa\x8fW\xcc\n\x17\x7f\x98\xb7\xcdqV\xd4\xf0)\xfa\x0fG\xc8\xbf\xfd\xe8>K\f\xcd+\xb0\x99Q\xba/\xa8\xb9`k\b\xd1\xcc\xfc\xeaA\"\v=\x83fC\x90%\xa1d\x91\xf8:\x16<\xad\xc2\x18\xdf\x01\xe2\x96\xfcj\xe9\xa4\x065m\x03\x05Np\xda\"\xf1\xb6\xbcP\x8fP\x8d\x89%\xf2\x12T\xd0\xc3\x15W\x9c\x87\x1b\x8c\xc9\xd9\xc6\xad\x96-d\xa2wFB\xcaB\xa5\x15\xf8,\x04\x1c*\xd98\x8bG\x90\x81`\x03\xe0\xde\x9c\x9a\x0f\x1b\x8f\xd2%*&$Wc\xb3\xa6\xc4TK1}2\xb3\xab\xf4\xb7\xb7\x85\apa\xaf\x1c\x10i\xb9\x9f\x06\xff4%\"7f \x0e\xf5Bk\r\xac\"\x13tNx\xc0$\x85\x9f', 0x3) r2 = openat$vsock(0xffffffffffffff9c, &(0x7f00000000c0), 0x2500, 0x0) ioctl$UFFDIO_API(r2, 0xc018aa3f, &(0x7f0000001240)={0xaa, 0x4c}) ftruncate(r1, 0xffff) socket$kcm(0x10, 0x3, 0x10) (async) r3 = socket$kcm(0x10, 0x3, 0x10) sendmsg$kcm(r3, &(0x7f0000000000)={0x0, 0xffffff0a, &(0x7f0000000080)=[{&(0x7f0000000040)="c01803001d000b63d25a80648c2594f90124fc60100c030002000000053582c137153e370248078000f01700d1bd", 0x33fe0}], 0x1, 0x0, 0x0, 0x4000}, 0x3500000000000000) fcntl$addseals(r1, 0x409, 0x7) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x142) (async) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x142) r4 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x2, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000001540)=ANY=[]) (async) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000001540)=ANY=[]) mount$overlay(0x0, &(0x7f0000000000)='./file0/file1\x00', 0x0, 0x2000, 0x0) read$FUSE(r4, &(0x7f00000021c0)={0x2020, 0x0, 0x0, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r4, &(0x7f0000000240)={0x50, 0x0, r5, {0x7, 0x2b, 0x0, 0x39800c41, 0x0, 0x0, 0x401, 0x3, 0x0, 0x0, 0x2}}, 0x50) syz_fuse_handle_req(r4, &(0x7f0000004200)="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", 0x2000, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000004c0)={0x90, 0x0, 0x101, {0x6, 0x1000, 0x7, 0x1, 0x8005, 0x3, {0x6, 0x200, 0x100, 0x10001, 0x8, 0xfd, 0x800, 0x8, 0xfffffffe, 0xc000, 0x2, r6, r7, 0xfffe, 0x6}}}, 0x0, 0x0, 0x0, 0x0, 0x0}) mkdirat(0xffffffffffffff9c, &(0x7f0000000280)='./file0/file1\x00', 0x1c0) r8 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TUNSETIFF(r8, 0x400454ca, &(0x7f00000008c0)={'dvmrp0\x00', 0x2}) ioctl$TUNATTACHFILTER(r8, 0x401054d5, &(0x7f0000000180)={0x1, &(0x7f0000000000)=[{0x30, 0x0, 0x0, 0xffffffff}]}) (async) ioctl$TUNATTACHFILTER(r8, 0x401054d5, &(0x7f0000000180)={0x1, &(0x7f0000000000)=[{0x30, 0x0, 0x0, 0xffffffff}]}) openat$vmci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) (async) r9 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) r10 = openat$vicodec1(0xffffffffffffff9c, &(0x7f0000000740), 0x2, 0x0) ioctl$VIDIOC_S_AUDIO(r10, 0x40345622, &(0x7f0000000780)={0xd, "521f5b436b6ac41dc8d18e8cb6df21dfb062bef1edd4e9e88a1fd8d9b1d8d071", 0x2}) (async) ioctl$VIDIOC_S_AUDIO(r10, 0x40345622, &(0x7f0000000780)={0xd, "521f5b436b6ac41dc8d18e8cb6df21dfb062bef1edd4e9e88a1fd8d9b1d8d071", 0x2}) ioctl$IOCTL_VMCI_VERSION2(r9, 0x7a7, &(0x7f0000000000)=0x90000) ioctl$IOCTL_VMCI_INIT_CONTEXT(r9, 0x7a0, &(0x7f0000000100)={@host}) ioctl$IOCTL_VMCI_CTX_SET_CPT_STATE(r9, 0x7cb, &(0x7f0000000140)={&(0x7f0000000240)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x322198b4, 0x0, 0x0, 0x0, 0x0, 0x100, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xbd2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x1000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0xeffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8], 0x0, 0x400}) dup(r9) (async) dup(r9) 4m16.798733023s ago: executing program 1 (id=351): modify_ldt$write(0x1, &(0x7f0000000000)={0x4000c33, 0x0, 0x4000, 0x1, 0x2, 0x0, 0x0, 0x0, 0x1}, 0x10) syz_clone(0x440c5000, 0x0, 0x0, 0x0, 0x0, 0x0) 4m16.578733909s ago: executing program 1 (id=355): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) r0 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$SOUND_MIXER_WRITE_RECSRC(r0, 0xc0044dff, &(0x7f0000000040)=0x7fffffff) r1 = getgid() ioctl$DRM_IOCTL_GET_CLIENT(0xffffffffffffffff, 0xc0286405, &(0x7f0000000180)={0x4, 0x4, {0xffffffffffffffff}, {0xffffffffffffffff}, 0x2, 0x3}) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000540)=ANY=[@ANYBLOB="640000001e0005"], 0x64}}, 0x0) r4 = shmget$private(0x0, 0x1000, 0x0, &(0x7f0000003000/0x1000)=nil) socket$unix(0x1, 0x1, 0x0) r5 = socket$unix(0x1, 0x1, 0x0) bind$unix(r5, &(0x7f0000000300)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) listen(r5, 0x0) r6 = socket$unix(0x1, 0x1, 0x0) connect$unix(r6, &(0x7f0000000280)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) r7 = syz_open_procfs(0x0, &(0x7f0000000000)='fdinfo/4\x00') preadv(r7, &(0x7f0000001240)=[{&(0x7f0000000040)=""/18, 0x12}], 0x1, 0x0, 0x0) shmat(r4, &(0x7f0000ffa000/0x3000)=nil, 0x4000) shmctl$IPC_RMID(r4, 0x0) mount$9p_unix(&(0x7f0000000000)='./file0\x00', &(0x7f00000000c0)='./file0\x00', &(0x7f0000000140), 0x2008, &(0x7f0000000280)=ANY=[@ANYBLOB='trans=unix,cache=mmap,dfltgid=', @ANYRESHEX=r1, @ANYBLOB=',noxattr,access=', @ANYRESDEC=r2, @ANYBLOB=',fsmagic=0x0000000000000007,smackfshat=\'{*,defcontext?staff_u,context=system_u,subj_user=%&[-#,\x00']) r8 = syz_open_dev$dri(&(0x7f00000008c0), 0xd21, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r8, 0xc04064a0, &(0x7f00000001c0)={0x0, &(0x7f00000000c0)=[0x0], 0x0, 0x0, 0x0, 0x1}) ioctl$DRM_IOCTL_MODE_GETGAMMA(r8, 0xc02064a4, &(0x7f0000000240)={r9, 0x0, 0x0, 0x0, 0x0}) mount$tmpfs(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000100), 0x0, 0x0) mount$tmpfs(0x0, &(0x7f0000002040)='./file0\x00', &(0x7f0000002200), 0x1000000, 0x0) mount$bind(&(0x7f0000000040)='.\x00', &(0x7f0000000080)='./file0\x00', 0x0, 0x2a05004, 0x0) mount$fuseblk(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x24000, 0x0) mount$bind(&(0x7f0000000240)='.\x00', &(0x7f00000001c0)='./file0\x00', 0x0, 0x1a8584c, 0x0) 4m16.442541702s ago: executing program 1 (id=356): r0 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_int(r0, 0x107, 0xa, &(0x7f0000000080)=0x2, 0x4) setsockopt$packet_rx_ring(r0, 0x107, 0x5, &(0x7f0000000140)=@req3={0x1000, 0x3a, 0x1000, 0x3a, 0x7ff, 0x7fff, 0x3}, 0x1c) r1 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000040), 0x40800, 0x0) preadv2(r1, &(0x7f0000000080)=[{&(0x7f0000001200)=""/4096, 0x1fee00}], 0x2, 0x0, 0x0, 0x0) 4m16.059140889s ago: executing program 1 (id=360): r0 = accept(0xffffffffffffffff, &(0x7f0000000340)=@qipcrtr, &(0x7f00000003c0)=0x80) connect$l2tp(r0, &(0x7f0000000400)={0x2, 0x0, @local, 0x1}, 0x10) sendto$inet6(r0, &(0x7f00000000c0)="07239cb6ad5580711ac0c75e8f90e6b10662d66954dbdc99b5156ecf7c3972ee675af66b76a15686b51125556aca770a2cef246d6387e6496550ef03e7cac3629fc7261ad32cd5e9453e691826447442a0d93934345b5b404136fe75fdce42c9442660f46d1fd496a63a0a1438c8b60f1922f79737", 0x75, 0x4000080, &(0x7f0000000540)={0xa, 0x4e23, 0x9, @loopback, 0x40}, 0x1c) ioctl$sock_SIOCSIFVLAN_SET_VLAN_FLAG_CMD(r0, 0x8983, &(0x7f0000000080)={0x7, 'macsec0\x00', {0x44ca}, 0x9}) r1 = openat$sw_sync(0xffffffffffffff9c, &(0x7f00000003c0), 0x0, 0x0) r2 = openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000ac0), 0x400, 0x0) ioctl$SW_SYNC_IOC_CREATE_FENCE(r2, 0xc0285700, &(0x7f0000000b00)={0x4, "abacd211119ca94c633774262eb5ab2c7b9c5cff6ce78185d8c4dc064744e042", 0xffffffffffffffff}) ioctl$SW_SYNC_IOC_CREATE_FENCE(r1, 0xc0285700, &(0x7f0000000f40)={0x8, "b546baa5cc590d3033de259c2996817bb959ebab028deda525e19bdeffafde25", 0xffffffffffffffff}) r5 = socket(0x10, 0x3, 0x0) sendmsg$nl_generic(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000200)=ANY=[@ANYBLOB="640000001900010000000000fbdbdf251d01090050000f804c00248045002c802cd00b29a0cf37847597780a5a323c11703c85210bfb54a5f579eedc8326e6a99f7fdef66a32771b71876e0eb6dcc33910220ffd5cd1d1a8c1dcfd0e961f2fdde9"], 0x64}, 0x1, 0x0, 0x0, 0x5}, 0x0) ioctl$SYNC_IOC_MERGE(r3, 0xc0303e03, &(0x7f0000000780)={"d1ed39d88b014076ab94c1fb10628c46d2e681cdb9e581a38ebb0ddd5f307e56", r4, 0xffffffffffffffff}) close_range(r1, r2, 0x0) ppoll(&(0x7f00000000c0)=[{r6, 0xa040}], 0x1, &(0x7f0000000140), 0x0, 0x0) r7 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) ioctl$VHOST_SET_VRING_ADDR(r7, 0x4028af11, &(0x7f0000000300)={0x3, 0x0, &(0x7f0000000440)=""/194, &(0x7f0000000140)=""/133, &(0x7f0000000200)=""/217, 0x3000}) syz_usb_connect$cdc_ecm(0x0, 0x4d, &(0x7f0000000000)=ANY=[@ANYRESDEC=0x0], 0x0) 4m15.833139799s ago: executing program 32 (id=360): r0 = accept(0xffffffffffffffff, &(0x7f0000000340)=@qipcrtr, &(0x7f00000003c0)=0x80) connect$l2tp(r0, &(0x7f0000000400)={0x2, 0x0, @local, 0x1}, 0x10) sendto$inet6(r0, &(0x7f00000000c0)="07239cb6ad5580711ac0c75e8f90e6b10662d66954dbdc99b5156ecf7c3972ee675af66b76a15686b51125556aca770a2cef246d6387e6496550ef03e7cac3629fc7261ad32cd5e9453e691826447442a0d93934345b5b404136fe75fdce42c9442660f46d1fd496a63a0a1438c8b60f1922f79737", 0x75, 0x4000080, &(0x7f0000000540)={0xa, 0x4e23, 0x9, @loopback, 0x40}, 0x1c) ioctl$sock_SIOCSIFVLAN_SET_VLAN_FLAG_CMD(r0, 0x8983, &(0x7f0000000080)={0x7, 'macsec0\x00', {0x44ca}, 0x9}) r1 = openat$sw_sync(0xffffffffffffff9c, &(0x7f00000003c0), 0x0, 0x0) r2 = openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000ac0), 0x400, 0x0) ioctl$SW_SYNC_IOC_CREATE_FENCE(r2, 0xc0285700, &(0x7f0000000b00)={0x4, "abacd211119ca94c633774262eb5ab2c7b9c5cff6ce78185d8c4dc064744e042", 0xffffffffffffffff}) ioctl$SW_SYNC_IOC_CREATE_FENCE(r1, 0xc0285700, &(0x7f0000000f40)={0x8, "b546baa5cc590d3033de259c2996817bb959ebab028deda525e19bdeffafde25", 0xffffffffffffffff}) r5 = socket(0x10, 0x3, 0x0) sendmsg$nl_generic(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000200)=ANY=[@ANYBLOB="640000001900010000000000fbdbdf251d01090050000f804c00248045002c802cd00b29a0cf37847597780a5a323c11703c85210bfb54a5f579eedc8326e6a99f7fdef66a32771b71876e0eb6dcc33910220ffd5cd1d1a8c1dcfd0e961f2fdde9"], 0x64}, 0x1, 0x0, 0x0, 0x5}, 0x0) ioctl$SYNC_IOC_MERGE(r3, 0xc0303e03, &(0x7f0000000780)={"d1ed39d88b014076ab94c1fb10628c46d2e681cdb9e581a38ebb0ddd5f307e56", r4, 0xffffffffffffffff}) close_range(r1, r2, 0x0) ppoll(&(0x7f00000000c0)=[{r6, 0xa040}], 0x1, &(0x7f0000000140), 0x0, 0x0) r7 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) ioctl$VHOST_SET_VRING_ADDR(r7, 0x4028af11, &(0x7f0000000300)={0x3, 0x0, &(0x7f0000000440)=""/194, &(0x7f0000000140)=""/133, &(0x7f0000000200)=""/217, 0x3000}) syz_usb_connect$cdc_ecm(0x0, 0x4d, &(0x7f0000000000)=ANY=[@ANYRESDEC=0x0], 0x0) 11.127049049s ago: executing program 3 (id=2125): socket$nl_netfilter(0x10, 0x3, 0xc) (async) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000008c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) fsopen(&(0x7f0000000180)='bpf\x00', 0x0) (async) r1 = fsopen(&(0x7f0000000180)='bpf\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r1, 0x6, 0x0, 0x0, 0x0) fsmount(r1, 0x1, 0x0) (async) r2 = fsmount(r1, 0x1, 0x0) fchdir(r2) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x88) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000400)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}]}) (async) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000400)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}]}) sendmsg$NFT_BATCH(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000940)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a40000000060a0b040000000000000000020000001400048010000180090001006d617371000000000900010073797a30000000000900020073797a320000000014000000110001"], 0x68}, 0x1, 0x0, 0x0, 0x20000805}, 0x0) (async) sendmsg$NFT_BATCH(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000940)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a40000000060a0b040000000000000000020000001400048010000180090001006d617371000000000900010073797a30000000000900020073797a320000000014000000110001"], 0x68}, 0x1, 0x0, 0x0, 0x20000805}, 0x0) r3 = socket$kcm(0x2, 0x3, 0x84) sendmsg$inet(r3, &(0x7f0000001000)={&(0x7f0000000000)={0x2, 0x0, @multicast2}, 0x10, &(0x7f0000000080)=[{&(0x7f0000001640)="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", 0x5d3}, {&(0x7f0000000600)="3001fb90647586f4601659c5ad2644b99bfd65452e947b394c96c29278d097c5f170d77283a744139d2ce2a2f4bb5bb37e7396e7bac14056f25d17145e73bc2461b20ea3fce771f1b32d1585e8a456763cfafcf7189145a6e261af6232014cbf8a0f898bf6d14136874b6a1fd7caf8ec9966b0419be0420dc6e247d1a44f038ae29eb4bc67d6a04e80dfb7715ebafaa20fcbc57ade23cba05da1fbe4bba675b742472eebaabf356adc99866930e146125a272cef5baf5dfad4a28a01208d9908183ab2085a781e531f1bed4ac9c245ec19be383047656a7d857d364e6f69eccea5aca3964f", 0xe5}, {&(0x7f0000000cc0)="79dfe4263f037de282e588f3c773eca5f0c383e7425d1573aa90a44223bfeced3ff85afe9d0c0b3b5a7ed7fcdb96a3934fe7af73ee25d5d36ba42e2a858c3d134299abc0393e031db435ae156e55eb2b2b2e2300e0706dfc5c4ec73ba929ffe8a7bb7ce55d95fb6e58560c45d96a58a13aa944b98c481a82927ec071b272b4592616116116527fd2dbc0dfd58c572f714f6852063afc8358fb33ccb8a95460b32b4e26bea604e534d8983790b5e2a180fed88108b0f5a499d5f80b4e4047d9ecc03d21856a4ec0d0d41496d99dddfa9098d327d9559e82fceb2b1b1c", 0xdc}, {&(0x7f0000000b00)="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", 0x1a9}, {&(0x7f0000000700)="15c84609b06c6d85a5ca6f3a9a242f214aee4e7093161b717090c0c852a05393abd8992d91576f57bbd3488e85d8456d6c6c09de5c5228ee18819665861f01a2823a7cfa8e9260a5fe3921638db2dc5156149f86916810f913a944e1c8cd7fccb63f37900c5b287016e512b050ca214125b2217260c9ce3019e88b80985402ff7ca34be17e0dbda4f028cec9973a2b9eed83eee86f35f2c0adf50a04296e99c0f709fb3990aa5d0e74a125971357630b6f3eb4fb4064c42c2b2519a1c77824df6f0653fb116149fcb5c7e46fce32b1de7f511951d4b1ae47781250afdb11680684c1d2854810a90dbe10016823346663fdf1df6200a0dc3cafe8ec225fda", 0xfe}, {&(0x7f0000000800)="3a0846cacd7448e2015cc9a09c5f5608265e1e", 0x13}], 0x6, &(0x7f0000000580)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @local, @loopback}}}], 0x20}, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f0000000140)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48}}]}}, 0x0) openat$comedi(0xffffff9c, &(0x7f0000000040)='/dev/comedi3\x00', 0x2000, 0x0) (async) r5 = openat$comedi(0xffffff9c, &(0x7f0000000040)='/dev/comedi3\x00', 0x2000, 0x0) ioctl$COMEDI_INSN(r5, 0x8028640c, &(0x7f0000000000)={0x4000000, 0x92ff, 0x0, 0x0, 0x80000000}) syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) (async) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f0000000080)={'wlan0\x00'}) (async) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f0000000080)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_JOIN_MESH(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000300)={0x5c, r6, 0x105, 0x70bd2a, 0x25dfdbf8, {{}, {@val={0x8, 0x3, r7}, @void}}, [@NL80211_ATTR_MESH_ID={0xa}, @NL80211_ATTR_BEACON_INTERVAL={0x8, 0xc, @random=0x20000003}, @NL80211_ATTR_MESH_CONFIG={0x2c, 0x23, 0x0, 0x1, [@NL80211_MESHCONF_SYNC_OFFSET_MAX_NEIGHBOR={0x8, 0x15, 0x4a}, @NL80211_MESHCONF_AUTO_OPEN_PLINKS={0x5, 0x7, 0x6}, @NL80211_MESHCONF_SYNC_OFFSET_MAX_NEIGHBOR={0x8, 0x15, 0x201d}, @NL80211_MESHCONF_HWMP_PREQ_MIN_INTERVAL={0x6, 0xc, 0x5}, @NL80211_MESHCONF_RSSI_THRESHOLD={0x8, 0x14, 0xffffffffffffff2f}]}]}, 0x5c}, 0x1, 0x0, 0x0, 0x20048050}, 0x4000000) openat$rfkill(0xffffffffffffff9c, &(0x7f0000000040), 0x801, 0x0) r8 = fsopen(&(0x7f0000000100)='mqueue\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r8, 0x6, 0x0, 0x0, 0x0) fsmount(r8, 0x1, 0x0) (async) r9 = fsmount(r8, 0x1, 0x0) r10 = openat(r9, &(0x7f0000000040)='./file1\x00', 0x141242, 0xc9) r11 = socket$inet_udp(0x2, 0x2, 0x0) getsockopt$inet_int(r11, 0x0, 0x31, 0x0, &(0x7f0000000080)) ioctl$VIDIOC_SUBDEV_G_FRAME_INTERVAL(r10, 0xc0305615, &(0x7f0000000000)={0x0, {0xb, 0xff}}) fadvise64(r11, 0x5, 0x1, 0x5) openat$rfkill(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) (async) openat$rfkill(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) 10.226366148s ago: executing program 3 (id=2132): openat$vnet(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000040), 0x6) r1 = socket(0xa, 0x3, 0x3a) r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(r2, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-camellia-asm\x00'}, 0x58) setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r3 = socket$packet(0x11, 0x3, 0x300) r4 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000100)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0) ioctl$VHOST_SET_VRING_ADDR(r4, 0x4028af11, &(0x7f0000000140)={0x1, 0x0, 0x0, &(0x7f0000000280)=""/164, &(0x7f0000000100)=""/47, 0xf000}) ioctl$VHOST_SET_MEM_TABLE(r4, 0x4008af03, &(0x7f0000000700)) r5 = dup(r3) ioctl$VHOST_NET_SET_BACKEND(r4, 0x4008af30, &(0x7f0000000000)={0x1, r5}) setsockopt$MRT6_ADD_MFC(r1, 0x29, 0xcc, &(0x7f0000000000)={{0xa, 0x0, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x809}, {0xa, 0x8, 0x0, @empty}, 0x6, {[0x0, 0x1, 0xfffffffe, 0x0, 0xffffffff, 0x8]}}, 0x5c) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$HCIINQUIRY(0xffffffffffffffff, 0x400448ca, 0x0) bind$bt_hci(0xffffffffffffffff, &(0x7f0000000040)={0x1f, 0x0, 0x1}, 0x6) setsockopt$MRT6_ADD_MFC(r1, 0x29, 0xcc, &(0x7f00000001c0)={{0xa, 0x0, 0x0, @remote}, {0xa, 0x4e22, 0x0, @mcast1}}, 0x5c) setsockopt$MRT6_ADD_MFC(r1, 0x29, 0xcc, &(0x7f0000000000)={{0xa, 0x0, 0x0, @private2}, {0xa, 0x0, 0x0, @empty}, 0x0, {[0x0, 0x0, 0x0, 0x0, 0x89f, 0x10000]}}, 0x5c) setsockopt$MRT6_FLUSH(r1, 0x29, 0xd4, &(0x7f0000000340)=0x6, 0x4) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x3, 0x20000000ec071, 0xffffffffffffffff, 0x7b0f2000) ioctl$sock_bt_hci(r0, 0x800448d7, 0x0) 6.362340702s ago: executing program 4 (id=2155): r0 = socket$netlink(0x10, 0x3, 0x14) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)=ANY=[@ANYBLOB="14000000100001000000000000000c000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)={{0x14}, [@NFT_MSG_NEWRULE={0x50, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x24, 0x4, 0x0, 0x1, [{0x20, 0x1, 0x0, 0x1, @ct={{0x7}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_CT_DREG={0x8, 0x1, 0x1, 0x0, 0x1}, @NFTA_CT_KEY={0x8, 0x2, 0x1, 0x0, 0x11}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x78}}, 0x0) r2 = socket$inet_icmp_raw(0x2, 0x3, 0x1) sendto$inet(r2, &(0x7f0000000040)='\f\x00', 0x1c, 0x0, &(0x7f0000000340), 0x10) r3 = openat$vicodec0(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$VIDIOC_S_FMT(r3, 0xc0d05605, &(0x7f0000000100)={0xa, @pix_mp={0x1ff, 0x0, 0x34324d59, 0x2, 0x2, [{0x9, 0x4}, {0x7, 0x2}, {0x91a, 0x9}, {0x7fffffff, 0x1}, {0x7, 0x3}, {0x6, 0x2}, {0x7fffffff, 0x74e5}, {0x8, 0x7}], 0x98, 0x1, 0x0, 0x0, 0x3}}) timer_create(0x0, &(0x7f00000001c0)={0x0, 0x11, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000000)) r4 = socket$vsock_stream(0x28, 0x1, 0x0) bind$vsock_stream(r4, &(0x7f0000000040)={0x28, 0x0, 0x2710}, 0x10) r5 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCSLCKTRMIOS(r5, 0x5457, 0x0) listen(r4, 0x6) r6 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r6, &(0x7f0000000640)={0x28, 0x0, 0x2710}, 0x10) r7 = dup(r6) write$6lowpan_enable(r7, &(0x7f0000000000)='0', 0xfffffd2c) timer_settime(0x0, 0x0, &(0x7f0000000240)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000001200)={&(0x7f00000004c0)={0x38, 0x1403, 0x1, 0x70bd2c, 0x0, "", [{{0x9, 0x2, 'syz2\x00'}, {0x8, 0x41, 'rxe\x00'}, {0x14, 0x33, 'lo\x00'}}]}, 0x38}, 0x1, 0x0, 0x0, 0x20000854}, 0x0) 3.242752157s ago: executing program 3 (id=2133): getresuid(&(0x7f0000000000), &(0x7f0000000040), &(0x7f0000000100)=0x0) quotactl_fd$Q_GETFMT(0xffffffffffffffff, 0xffffffff80000401, r0, &(0x7f0000000240)) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r2, 0x10e, 0xc, &(0x7f0000000140)={0x6}, 0x10) write(r2, &(0x7f0000000000)="1c0000001a005f0214f9f407000904001f000000ff02000200000000", 0x1c) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f00000002c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r3, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000640)={&(0x7f0000000680)={0x94, r4, 0x1, 0x70bd2a, 0x25dfdbfe, {{}, {@val={0x8, 0x3, r5}, @void}}, [@NL80211_ATTR_FRAME={0x72, 0x33, @beacon={{{}, {0xdde}, @broadcast, @device_a, @initial, {0x0, 0x8}}, 0x101, @default, 0x4502, @val, @val, @val={0x3, 0x1, 0xe}, @val={0x4, 0x6, {0xa, 0x97, 0x0, 0xffff}}, @val={0x6, 0x2, 0x1}, @val={0x5, 0x3, {0x5, 0x99}}, @void, @void, @val={0x3c, 0x4, {0x1, 0x80, 0x2c, 0x1c}}, @val={0x2d, 0x1a, {0x2, 0x0, 0x3, 0x0, {0x2, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x3}, 0x7, 0x3, 0x4}}, @val={0x72, 0x6}, @void, @val={0x76, 0x6, {0x5, 0x5, 0x21, 0xb}}}}, @NL80211_ATTR_TX_NO_CCK_RATE={0x4}]}, 0x94}, 0x1, 0x0, 0x0, 0x880}, 0x0) r6 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) socket$kcm(0x29, 0x2, 0x0) r7 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000180), r6) sendmsg$IEEE802154_LLSEC_ADD_KEY(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r7, @ANYBLOB="0706000000000000000027000000050031000400000008000200", @ANYRES32=r6], 0x24}, 0x1, 0x0, 0x0, 0x20004080}, 0x24060884) r8 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r8, &(0x7f0000001ac0)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f00000000c0)=ANY=[@ANYBLOB="640000001700010300000000fbdbdf2552"], 0x64}], 0x1}, 0x840) r9 = openat$procfs(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/keys\x00', 0x0, 0x0) preadv(r9, &(0x7f0000000240), 0x0, 0x7fff, 0x0) syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000340), r1) mkdirat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x0) openat$dir(0xffffffffffffff9c, &(0x7f0000002180)='./file0\x00', 0x0, 0x0) r10 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000800), r1) sendmsg$IEEE802154_ADD_IFACE(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000180)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r10, @ANYBLOB="eb7a2bbd7000fcdbdf2521000000f0c15cd46613c863a91e0835fb09001f0070687931000000002c0005000200aaaaaaaaaaaa0500200000000000"], 0x34}, 0x1, 0x0, 0x0, 0x4000010}, 0x40882) 3.152484757s ago: executing program 3 (id=2166): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x8, 0x2133, 0x18, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x64, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x0, 0x3, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x7}}, {{{0x9, 0x5, 0x81, 0x3, 0x200, 0x0, 0x0, 0x4}}}}}]}}]}}, 0x0) r1 = syz_open_dev$dri(&(0x7f0000000180), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_REVOKE_LEASE(r1, 0xc00464c9, &(0x7f0000000040)) syz_usb_control_io$hid(r0, 0x0, 0x0) newfstatat(0xffffffffffffff9c, &(0x7f0000000080)='.\x00', &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0}, 0x4000) r3 = syz_open_dev$tty1(0xc, 0x4, 0x3) r4 = dup(r3) write$UHID_INPUT(r4, &(0x7f0000000300)={0xd, {"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", 0x1000}}, 0x1006) setresuid(r2, r2, 0x0) syz_usb_control_io(r0, &(0x7f00000000c0)={0x2c, &(0x7f0000000040)={0x0, 0x6, 0x8, {0x8, 0x23, "3d91419da546"}}, 0x0, 0x0, 0x0, 0x0}, 0x0) accept4(0xffffffffffffffff, 0x0, 0x0, 0x800) 2.291541777s ago: executing program 2 (id=2173): syz_usb_connect$uac1(0x5, 0x71, &(0x7f0000000000)=ANY=[@ANYBLOB="12011003000000406b1d010140000102030109025f0003010130080904000000010100000a2401c7000001020000"], &(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, 0x4, [{0x27, &(0x7f0000000040)=@string={0x27, 0x3, "46853d571f63f85834bdf7ec5f291062927b01ce0bf88614fcf0fd562a964f8843341c2384"}}, {0x4, &(0x7f0000000080)=@lang_id={0x4, 0x3, 0x443}}, {0xf8, &(0x7f0000000140)=@string={0xf8, 0x3, "a16d45cac3491dc2e18ff9217ce20f540a4d2281cbf4c87ff619508b254bf3b82b817d6b194a50862804002d5924623eb357e02ec48bb2c0225b0b4a8f4be692733f7350dfbb2312f9ace08c98e14ace779c1679169bf67853208b8ec1bf258f5efeed4300f4ffdd2546e734258fd22dd7bd48b07a15517152022fcde5565ae548ad63479e65dee303147e8dfb330edb1f8dd8c9d5040ca2bed9cc64e61b5e167b5cc52ffd621947aa3fe93ce3a35d74c5b1e55bc52f955fe572f2db62c8c656e5d51c20cc349da0d313125a6ca64f20d6f4958685beb052394f969fa7b7222e03b749b8e671f48f07eded45728e89a23054680e1091"}}, {0x4, &(0x7f0000000240)=@lang_id={0x4, 0x3, 0x40d}}]}) 1.67539394s ago: executing program 4 (id=2176): openat$vnet(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000040), 0x6) r1 = socket(0xa, 0x3, 0x3a) r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(r2, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-camellia-asm\x00'}, 0x58) setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r3 = socket$packet(0x11, 0x3, 0x300) ioctl$int_in(0xffffffffffffffff, 0x40000000af01, 0x0) openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000100)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0) ioctl$VHOST_SET_VRING_ADDR(0xffffffffffffffff, 0x4028af11, &(0x7f0000000140)={0x1, 0x0, 0x0, &(0x7f0000000280)=""/164, &(0x7f0000000100)=""/47, 0xf000}) ioctl$VHOST_SET_MEM_TABLE(0xffffffffffffffff, 0x4008af03, &(0x7f0000000700)) r4 = dup(r3) ioctl$VHOST_NET_SET_BACKEND(0xffffffffffffffff, 0x4008af30, &(0x7f0000000000)={0x1, r4}) setsockopt$MRT6_ADD_MFC(r1, 0x29, 0xcc, &(0x7f0000000000)={{0xa, 0x0, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x809}, {0xa, 0x8, 0x0, @empty}, 0x6, {[0x0, 0x1, 0xfffffffe, 0x0, 0xffffffff, 0x8]}}, 0x5c) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$HCIINQUIRY(0xffffffffffffffff, 0x400448ca, 0x0) bind$bt_hci(0xffffffffffffffff, &(0x7f0000000040)={0x1f, 0x0, 0x1}, 0x6) setsockopt$MRT6_ADD_MFC(r1, 0x29, 0xcc, &(0x7f00000001c0)={{0xa, 0x0, 0x0, @remote}, {0xa, 0x4e22, 0x0, @mcast1}}, 0x5c) setsockopt$MRT6_ADD_MFC(r1, 0x29, 0xcc, &(0x7f0000000000)={{0xa, 0x0, 0x0, @private2}, {0xa, 0x0, 0x0, @empty}, 0x0, {[0x0, 0x0, 0x0, 0x0, 0x89f, 0x10000]}}, 0x5c) setsockopt$MRT6_FLUSH(r1, 0x29, 0xd4, &(0x7f0000000340)=0x6, 0x4) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x3, 0x20000000ec071, 0xffffffffffffffff, 0x7b0f2000) ioctl$sock_bt_hci(r0, 0x800448d7, 0x0) 1.602497604s ago: executing program 2 (id=2177): r0 = syz_open_dev$video4linux(&(0x7f0000000000), 0x0, 0x0) r1 = fsopen(&(0x7f0000000000)='configfs\x00', 0x1) fsconfig$FSCONFIG_CMD_CREATE(r1, 0x6, 0x0, 0x0, 0x0) (async) r2 = fsmount(r1, 0x0, 0x5) fchdir(r2) (async) r3 = open(&(0x7f00000000c0)='.\x00', 0x0, 0x0) r4 = openat$zero(0xffffffffffffff9c, &(0x7f0000000040), 0x80000, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x10012, r4, 0x0) (async) getdents(r3, 0x0, 0x0) (async) ioctl$VIDIOC_SUBDEV_S_FMT(r0, 0xc0305602, &(0x7f00000000c0)={0x1, 0x0, {0x0, 0x1}}) 1.600277317s ago: executing program 2 (id=2178): pipe(&(0x7f00000000c0)={0xffffffffffffffff}) r1 = openat$cuse(0xffffff9c, &(0x7f0000000180), 0x2, 0x0) r2 = socket$kcm(0x29, 0x2, 0x0) ioctl$sock_kcm_SIOCKCMUNATTACH(r2, 0x89e1, 0x0) splice(r0, 0x0, r1, 0x0, 0x2000, 0x6) r3 = syz_usb_connect$hid(0x0, 0x3f, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40, 0x1b96, 0xb, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x2d, 0x1, 0x0, 0x1, 0x80, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x0, 0x5, 0x4, {0x9, 0x21, 0x2006, 0x5, 0x1, {0x22, 0x5f7}}, {{{0x9, 0x5, 0x81, 0x3, 0x0, 0xf, 0x0, 0x1}}, [{{0x9, 0x5, 0x2, 0x3, 0x20, 0x3, 0x1, 0x5}}]}}}]}}]}}, 0x0) syz_usb_control_io(r3, 0x0, 0x0) syz_usb_control_io$hid(r3, &(0x7f0000000340)={0x24, 0x0, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="00220508"], 0x0}, 0x0) pipe(&(0x7f00000000c0)) (async) openat$cuse(0xffffff9c, &(0x7f0000000180), 0x2, 0x0) (async) socket$kcm(0x29, 0x2, 0x0) (async) ioctl$sock_kcm_SIOCKCMUNATTACH(r2, 0x89e1, 0x0) (async) splice(r0, 0x0, r1, 0x0, 0x2000, 0x6) (async) syz_usb_connect$hid(0x0, 0x3f, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40, 0x1b96, 0xb, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x2d, 0x1, 0x0, 0x1, 0x80, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x0, 0x5, 0x4, {0x9, 0x21, 0x2006, 0x5, 0x1, {0x22, 0x5f7}}, {{{0x9, 0x5, 0x81, 0x3, 0x0, 0xf, 0x0, 0x1}}, [{{0x9, 0x5, 0x2, 0x3, 0x20, 0x3, 0x1, 0x5}}]}}}]}}]}}, 0x0) (async) syz_usb_control_io(r3, 0x0, 0x0) (async) syz_usb_control_io$hid(r3, &(0x7f0000000340)={0x24, 0x0, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="00220508"], 0x0}, 0x0) (async) 1.592892817s ago: executing program 4 (id=2179): openat$vnet(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) bind$bt_hci(0xffffffffffffffff, &(0x7f0000000040), 0x6) r0 = socket(0xa, 0x3, 0x3a) setsockopt$ALG_SET_KEY(0xffffffffffffffff, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) ioctl$VHOST_SET_VRING_ADDR(0xffffffffffffffff, 0x4028af11, &(0x7f0000000140)={0x1, 0x0, 0x0, &(0x7f0000000280)=""/164, &(0x7f0000000100)=""/47, 0xf000}) dup(0xffffffffffffffff) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$HCIINQUIRY(r1, 0x400448ca, 0x0) bind$bt_hci(r1, &(0x7f0000000040)={0x1f, 0x0, 0x1}, 0x6) setsockopt$MRT6_FLUSH(r0, 0x29, 0xd4, &(0x7f0000000340)=0x6, 0x4) ioctl$sock_bt_hci(0xffffffffffffffff, 0x800448d7, 0x0) 1.545381074s ago: executing program 4 (id=2180): socket(0x10, 0x3, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r1 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000040)={'syzkaller1\x00', @link_local}) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) write$tun(r0, &(0x7f0000000280)={@val={0x0, 0x800}, @val={0x1, 0x0, 0x0, 0x0, 0x3d}, @mpls={[], @ipv4=@tcp={{0x6, 0x4, 0x0, 0x0, 0x40, 0x0, 0x0, 0x0, 0x84, 0x0, @empty=0x3fffffff, @local}, {{0x0, 0x0, 0x41424344, 0x41424344, 0x0, 0x2, 0xb, 0x0, 0x0, 0x0, 0x4, {[@window={0xa, 0x3}, @timestamp={0x5, 0x2}, @generic={0x0, 0x2, "d58838068b91"}]}}}}}}, 0x4e) 1.453719097s ago: executing program 4 (id=2181): mknodat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0, 0x0) pipe2$9p(0x0, 0x0) write$P9_RVERSION(0xffffffffffffffff, &(0x7f0000000300)=ANY=[@ANYBLOB="1500000065ffff017f000e0800395032303030"], 0x15) r0 = dup(0xffffffffffffffff) write$FUSE_BMAP(r0, &(0x7f0000000100)={0x18, 0x0, 0x0, {0x1}}, 0x18) write$FUSE_DIRENTPLUS(r0, &(0x7f00000003c0)=ANY=[@ANYBLOB="b0"], 0xb0) mount$9p_fd(0x0, &(0x7f00000002c0)='./file0\x00', &(0x7f0000000080), 0x0, &(0x7f0000000400)={'trans=fd,', {}, 0x2c, {'wfdno', 0x3d, r0}, 0x2c, {[{@cache_fscache}]}}) mount$9p_fd(0x0, &(0x7f0000000180)='./file0\x00', 0x0, 0x1044a0, 0x0) 1.38853157s ago: executing program 4 (id=2182): r0 = syz_usb_connect(0x2, 0x24, &(0x7f0000000140)=ANY=[@ANYRESOCT=0x0], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) (async, rerun: 32) pipe(&(0x7f00000045c0)={0xffffffffffffffff}) (rerun: 32) r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(r2, &(0x7f0000000080)={0x26, 'skcipher\x00', 0x0, 0x0, 'cts(cbc(aes))\x00'}, 0x58) (async) setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, &(0x7f0000c18000)="ad56b6c5910fae9d6dcd3292ea54c7b6ef915d564c90c200", 0x18) (async) r3 = accept4(r2, 0x0, 0x0, 0x0) splice(r1, 0x0, r3, 0x0, 0x2, 0xe) (async) write$P9_RVERSION(r1, &(0x7f0000000080)={0x13, 0x65, 0xffff, 0xf, 0x6, '9P2000'}, 0x13) (async) syz_usb_connect$hid(0x6, 0x36, &(0x7f0000000000)={{0x12, 0x1, 0x300, 0x0, 0x0, 0x0, 0x8, 0x56a, 0xb7, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x1, 0x4, 0x40, 0x0, [{{0x9, 0x4, 0x0, 0x9, 0x1, 0x3, 0x1, 0x1, 0xdd, {0x9, 0x21, 0x7f, 0x5, 0x1, {0x22, 0xb18}}, {{{0x9, 0x5, 0x81, 0x3, 0x40, 0x0, 0x8, 0xee}}}}}]}}]}}, &(0x7f00000001c0)={0xa, &(0x7f0000000040)={0xa, 0x6, 0x0, 0x5, 0x7, 0x2a, 0x10}, 0xd2, &(0x7f00000002c0)={0x5, 0xf, 0xd2, 0x3, [@wireless={0xb, 0x10, 0x1, 0xc, 0x80, 0x5, 0x70, 0x9, 0xe}, @wireless={0xb, 0x10, 0x1, 0x0, 0x4, 0x1, 0x18, 0x9, 0x81}, @generic={0xb7, 0x10, 0x4, "6f7280a069f3172f209ba1b36144b126f7eaeeab7eaba4a710804e0db095a2e4c361f814b0bed5d827dd9f1bab958e141d745379331c839ef08e32da594730ac82d009257c2246024cf16ca7e53bb03be48fa0721fb1fdbd72860ee1df5219509216b5cec54afef3633953e2f4cd40d882dbbecbf190ffde60f473327b3f0c90b2e906f098646e2826cb6beec9fa318c81b4e250e5f016fb1d6187965c4bc98006d3a213341f39ea0483b20a3f1110964c67cf02"}]}, 0x3, [{0x4, &(0x7f00000000c0)=@lang_id={0x4, 0x3, 0xc01}}, {0x84, &(0x7f0000000200)=@string={0x84, 0x3, "be12cc68d7435278ff6cb34bfcc14552104aa9f3d505f3c39d389402d1a009befaf520cab95989d6a73717849c9f721ca428119a1690e0432f47d2f6143f0a4b7e15df63d7e41ed791e97977aba1f7660e5e88eda02af73fe39ec307e6464afbfb60a9ace0baabeb025581705458ad12a1a6cbca7f4a898bd439b8078d19b78ff3e1"}}, {0x4, &(0x7f0000000180)=@lang_id={0x4, 0x3, 0x804}}]}) 1.337315937s ago: executing program 3 (id=2183): getresuid(&(0x7f0000000000), &(0x7f0000000040), &(0x7f0000000100)=0x0) quotactl_fd$Q_GETFMT(0xffffffffffffffff, 0xffffffff80000401, r0, &(0x7f0000000240)) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r2, 0x10e, 0xc, &(0x7f0000000140)={0x6}, 0x10) write(r2, &(0x7f0000000000)="1c0000001a005f0214f9f407000904001f000000ff02000200000000", 0x1c) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f00000002c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r3, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000640)={&(0x7f0000000680)={0x94, r4, 0x1, 0x70bd2a, 0x25dfdbfe, {{}, {@val={0x8, 0x3, r5}, @void}}, [@NL80211_ATTR_FRAME={0x72, 0x33, @beacon={{{}, {0xdde}, @broadcast, @device_a, @initial, {0x0, 0x8}}, 0x101, @default, 0x4502, @val, @val, @val={0x3, 0x1, 0xe}, @val={0x4, 0x6, {0xa, 0x97, 0x0, 0xffff}}, @val={0x6, 0x2, 0x1}, @val={0x5, 0x3, {0x5, 0x99}}, @void, @void, @val={0x3c, 0x4, {0x1, 0x80, 0x2c, 0x1c}}, @val={0x2d, 0x1a, {0x2, 0x0, 0x3, 0x0, {0x2, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x3}, 0x7, 0x3, 0x4}}, @val={0x72, 0x6}, @void, @val={0x76, 0x6, {0x5, 0x5, 0x21, 0xb}}}}, @NL80211_ATTR_TX_NO_CCK_RATE={0x4}]}, 0x94}, 0x1, 0x0, 0x0, 0x880}, 0x0) r6 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) socket$kcm(0x29, 0x2, 0x0) r7 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000180), r6) sendmsg$IEEE802154_LLSEC_ADD_KEY(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r7, @ANYBLOB="0706000000000000000027000000050031000400000008000200", @ANYRES32=r6], 0x24}, 0x1, 0x0, 0x0, 0x20004080}, 0x24060884) r8 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r8, &(0x7f0000001ac0)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f00000000c0)=ANY=[@ANYBLOB="640000001700010300000000fbdbdf2552"], 0x64}], 0x1}, 0x840) openat$procfs(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/keys\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x0) openat$dir(0xffffffffffffff9c, &(0x7f0000002180)='./file0\x00', 0x0, 0x0) r9 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000800), r1) sendmsg$IEEE802154_ADD_IFACE(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000180)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r9, @ANYBLOB="eb7a2bbd7000fcdbdf2521000000f0c15cd46613c863a91e0835fb09001f0070687931000000002c0005000200aaaaaaaaaaaa0500200000000000"], 0x34}, 0x1, 0x0, 0x0, 0x4000010}, 0x40882) 1.267753254s ago: executing program 3 (id=2184): creat(&(0x7f0000000000)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x182) syz_usb_connect(0x0, 0x36, &(0x7f0000000080)=ANY=[@ANYBLOB="120100000cb78a405e0483020b990102030109022400010000000009040000025c291d0009050900000000000009050b"], 0x0) pipe2$9p(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r1, &(0x7f0000000080)=ANY=[@ANYBLOB="1500000065ffff0180000008003950323030302e4c"], 0x15) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) syz_open_dev$vim2m(&(0x7f0000000140), 0x8, 0x2) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x19) r2 = dup(r1) write$FUSE_BMAP(r2, &(0x7f0000000100)={0x18}, 0x18) write$FUSE_DIRENTPLUS(r2, &(0x7f0000000000)=ANY=[@ANYBLOB="38010000fe0000"], 0x138) mount$9p_fd(0x0, &(0x7f0000000200)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', &(0x7f0000000340), 0x0, &(0x7f0000000640)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@noxattr}]}}) 990.681274ms ago: executing program 2 (id=2185): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f00000001c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb(aes-generic)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000480)="b19ccccf84f531d9ec214627c11430c1", 0x20) r1 = accept$alg(r0, 0x0, 0x0) r2 = eventfd(0x5) r3 = fcntl$dupfd(r1, 0x0, r2) syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), r3) epoll_create1(0x0) 509.379766ms ago: executing program 0 (id=2187): openat$vnet(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000040), 0x6) r1 = socket(0xa, 0x3, 0x3a) r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(r2, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-camellia-asm\x00'}, 0x58) setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r3 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) ioctl$int_in(r3, 0x40000000af01, 0x0) openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000100)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0) ioctl$VHOST_SET_VRING_ADDR(r3, 0x4028af11, &(0x7f0000000140)={0x1, 0x0, 0x0, &(0x7f0000000280)=""/164, &(0x7f0000000100)=""/47, 0xf000}) ioctl$VHOST_SET_MEM_TABLE(r3, 0x4008af03, &(0x7f0000000700)) r4 = dup(0xffffffffffffffff) ioctl$VHOST_NET_SET_BACKEND(r3, 0x4008af30, &(0x7f0000000000)={0x1, r4}) setsockopt$MRT6_ADD_MFC(r1, 0x29, 0xcc, &(0x7f0000000000)={{0xa, 0x0, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x809}, {0xa, 0x8, 0x0, @empty}, 0x6, {[0x0, 0x1, 0xfffffffe, 0x0, 0xffffffff, 0x8]}}, 0x5c) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$HCIINQUIRY(0xffffffffffffffff, 0x400448ca, 0x0) bind$bt_hci(0xffffffffffffffff, &(0x7f0000000040)={0x1f, 0x0, 0x1}, 0x6) setsockopt$MRT6_ADD_MFC(r1, 0x29, 0xcc, &(0x7f00000001c0)={{0xa, 0x0, 0x0, @remote}, {0xa, 0x4e22, 0x0, @mcast1}}, 0x5c) setsockopt$MRT6_ADD_MFC(r1, 0x29, 0xcc, &(0x7f0000000000)={{0xa, 0x0, 0x0, @private2}, {0xa, 0x0, 0x0, @empty}, 0x0, {[0x0, 0x0, 0x0, 0x0, 0x89f, 0x10000]}}, 0x5c) setsockopt$MRT6_FLUSH(r1, 0x29, 0xd4, &(0x7f0000000340)=0x6, 0x4) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x3, 0x20000000ec071, 0xffffffffffffffff, 0x7b0f2000) ioctl$sock_bt_hci(r0, 0x800448d7, 0x0) 398.434138ms ago: executing program 0 (id=2188): openat$vnet(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) bind$bt_hci(0xffffffffffffffff, &(0x7f0000000040), 0x6) r0 = socket(0xa, 0x3, 0x3a) setsockopt$ALG_SET_KEY(0xffffffffffffffff, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) ioctl$VHOST_SET_VRING_ADDR(0xffffffffffffffff, 0x4028af11, &(0x7f0000000140)={0x1, 0x0, 0x0, &(0x7f0000000280)=""/164, &(0x7f0000000100)=""/47, 0xf000}) dup(0xffffffffffffffff) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$HCIINQUIRY(r1, 0x400448ca, 0x0) bind$bt_hci(r1, &(0x7f0000000040)={0x1f, 0x0, 0x1}, 0x6) setsockopt$MRT6_FLUSH(r0, 0x29, 0xd4, &(0x7f0000000340)=0x6, 0x4) ioctl$sock_bt_hci(0xffffffffffffffff, 0x800448d7, 0x0) 379.948642ms ago: executing program 0 (id=2189): syz_fuse_handle_req(0xffffffffffffffff, &(0x7f0000006180)="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", 0x2000, 0x0) r0 = syz_open_dev$dri(&(0x7f0000000000), 0x6375, 0x0) ioctl$DRM_IOCTL_WAIT_VBLANK(r0, 0xc018643a, &(0x7f00000002c0)) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x200, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, 0x0}], 0x1, 0x64, 0x0, 0x0) ioctl$KVM_CREATE_PIT2(r2, 0x4040ae77, &(0x7f0000000080)={0x2}) ioctl$SNDRV_SEQ_IOCTL_CREATE_PORT(0xffffffffffffffff, 0xc0a85320, &(0x7f00000000c0)={{0x80}, 'port0\x00', 0xd3, 0x140043, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}) ioctl$KVM_RUN(r3, 0xae80, 0x0) ioctl$KVM_GET_NESTED_STATE(r3, 0xc080aebe, &(0x7f000000a100)={{0x0, 0x0, 0xfffffffffffffcfd}}) r4 = syz_open_dev$sndctrl(&(0x7f0000000000), 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_ADD(r4, 0xc1105517, 0x0) r5 = openat$6lowpan_control(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) newfstatat(0xffffffffffffff9c, &(0x7f0000001580)='.\x00', &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0}, 0x0) setresuid(0x0, r6, 0x0) quotactl_fd$Q_GETINFO(r5, 0xffffffff80000500, r6, &(0x7f0000000180)) 180.632827ms ago: executing program 0 (id=2190): socket(0x10, 0x3, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) socket$kcm(0x2, 0xa, 0x2) write$uinput_user_dev(0xffffffffffffffff, &(0x7f00000000c0)={'syz0\x00', {0xfff7, 0xc, 0x100, 0x81}, 0x1d, [0x7b, 0xb7e2, 0x3, 0x9, 0x100, 0x3, 0x1, 0x7, 0x9, 0x2, 0x7, 0xa, 0x3, 0x0, 0x7f, 0xd, 0x7fff, 0x6, 0x6, 0x5, 0x6, 0x6, 0x7, 0x6, 0xff, 0x2, 0xa5f2b87a, 0x409, 0x0, 0xfc75, 0x8, 0x9, 0x4, 0x2, 0xffffffff, 0x81, 0xfffff765, 0x2, 0x3, 0x6, 0xa, 0x2, 0x5, 0x0, 0x3ff, 0x6, 0x7, 0x8000, 0xfffffffd, 0x80, 0x8, 0x8, 0x9, 0x7, 0x101, 0xc3c, 0x1733, 0x7fff, 0x7ffc, 0x1, 0x6, 0x5, 0x1, 0x4], [0x8, 0x3, 0x8, 0x8, 0x0, 0x8, 0x4, 0x0, 0x24, 0x10, 0x6, 0x7, 0x8, 0xe62, 0xffffff73, 0x1000, 0x6, 0x13e5, 0x3, 0x3, 0x1000, 0x7, 0x1, 0x3b40, 0x4, 0x1000, 0x5, 0x7fff, 0x8, 0x5a, 0xffff2503, 0x7fffffff, 0x6995, 0x1, 0x80000000, 0x8, 0xdab, 0x5, 0x2, 0x76c4, 0xfffffffd, 0x5, 0x4, 0x10000, 0xd, 0x2, 0x9, 0x10, 0x4000e, 0x9, 0x7, 0xa, 0x9, 0x3, 0x8, 0x3, 0x2, 0x3a6, 0x0, 0xc0d, 0xfffffffd, 0x9, 0xc, 0xfffffffb], [0x3, 0x6, 0x6, 0x9, 0x1000, 0x0, 0x80000000, 0x5, 0x7f, 0xa, 0xfc, 0x1000, 0xf1, 0x6, 0x6, 0x10000, 0x72, 0xc, 0x633, 0xd, 0x7, 0x6, 0x80000000, 0x6, 0x0, 0x7, 0x8, 0x2ef3adcb, 0x10, 0x2, 0x8, 0x8, 0x74, 0x4, 0x7, 0x7ff, 0xfffffff2, 0x63, 0x7, 0x2, 0x3, 0xfffffff3, 0x20a7fd9e, 0xfffffffd, 0x2, 0xa1, 0x0, 0x9d, 0x7, 0xa8a, 0x2, 0x6, 0x77, 0x8, 0x1ff, 0x7, 0x7, 0x2, 0x0, 0x2, 0x8, 0x2, 0x3, 0x5], [0x4, 0x4, 0x5, 0x8000, 0x493e, 0x3, 0x35ff4447, 0x7, 0x5, 0x5, 0x5d3a, 0x5, 0x5, 0x3ff, 0xb88f, 0xffff0000, 0x9, 0xf7df, 0x2, 0x10, 0x8, 0x2, 0xff, 0x6, 0x4, 0x4, 0x200, 0x0, 0x7, 0x4e6, 0x8, 0x40000000, 0x5ef, 0x8000, 0xc, 0x41, 0x400, 0x1, 0x5, 0x0, 0x9a8, 0x99f, 0x231, 0x3ff, 0x8, 0x1, 0xffff0001, 0x1, 0x1, 0x10, 0x8, 0x5396, 0x6161, 0x9, 0x101, 0x206, 0x8, 0x431, 0x6, 0x5, 0x4, 0x7b, 0x7fc, 0x9]}, 0x45c) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) write$tun(r0, &(0x7f0000000280)={@val={0x0, 0x800}, @val={0x1, 0x0, 0x0, 0x0, 0x3d}, @mpls={[], @ipv4=@tcp={{0x6, 0x4, 0x0, 0x0, 0x40, 0x0, 0x0, 0x0, 0x84, 0x0, @empty=0x3fffffff, @local}, {{0x0, 0x0, 0x41424344, 0x41424344, 0x0, 0x2, 0xb, 0x0, 0x0, 0x0, 0x4, {[@window={0xa, 0x3}, @timestamp={0x5, 0x2}, @generic={0x0, 0x2, "d58838068b91"}]}}}}}}, 0x4e) 126.346643ms ago: executing program 2 (id=2191): mknodat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0, 0x0) pipe2$9p(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r1, 0x0, 0x15) r2 = dup(r1) write$FUSE_BMAP(r2, &(0x7f0000000100)={0x18, 0x0, 0x0, {0x1}}, 0x18) write$FUSE_DIRENTPLUS(r2, &(0x7f00000003c0)=ANY=[@ANYBLOB="b0"], 0xb0) mount$9p_fd(0x0, &(0x7f00000002c0)='./file0\x00', &(0x7f0000000080), 0x0, &(0x7f0000000400)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r2}, 0x2c, {[{@cache_fscache}]}}) mount$9p_fd(0x0, &(0x7f0000000180)='./file0\x00', 0x0, 0x1044a0, 0x0) 99.566432ms ago: executing program 2 (id=2192): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x8, 0x2133, 0x18, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x64, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x0, 0x3, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x7}}, {{{0x9, 0x5, 0x81, 0x3, 0x200, 0x0, 0x0, 0x4}}}}}]}}]}}, 0x0) r1 = syz_open_dev$dri(&(0x7f0000000180), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_REVOKE_LEASE(r1, 0xc00464c9, &(0x7f0000000040)) syz_usb_control_io$hid(r0, 0x0, 0x0) newfstatat(0xffffffffffffff9c, &(0x7f0000000080)='.\x00', &(0x7f0000000100), 0x4000) r2 = syz_open_dev$tty1(0xc, 0x4, 0x3) r3 = dup(r2) write$UHID_INPUT(r3, &(0x7f0000000300)={0xd, {"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", 0x1000}}, 0x1006) syz_usb_control_io(r0, &(0x7f00000000c0)={0x2c, &(0x7f0000000040)={0x0, 0x6, 0x8, {0x8, 0x23, "3d91419da546"}}, 0x0, 0x0, 0x0, 0x0}, 0x0) accept4(0xffffffffffffffff, 0x0, 0x0, 0x800) 63.621474ms ago: executing program 0 (id=2193): getresuid(&(0x7f0000000000), &(0x7f0000000040), &(0x7f0000000100)=0x0) quotactl_fd$Q_GETFMT(0xffffffffffffffff, 0xffffffff80000401, r0, &(0x7f0000000240)) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r2, 0x10e, 0xc, &(0x7f0000000140)={0x6}, 0x10) write(r2, &(0x7f0000000000)="1c0000001a005f0214f9f407000904001f000000ff02000200000000", 0x1c) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f00000002c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r3, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000640)={&(0x7f0000000680)={0x94, r4, 0x1, 0x70bd2a, 0x25dfdbfe, {{}, {@val={0x8, 0x3, r5}, @void}}, [@NL80211_ATTR_FRAME={0x72, 0x33, @beacon={{{}, {0xdde}, @broadcast, @device_a, @initial, {0x0, 0x8}}, 0x101, @default, 0x4502, @val, @val, @val={0x3, 0x1, 0xe}, @val={0x4, 0x6, {0xa, 0x97, 0x0, 0xffff}}, @val={0x6, 0x2, 0x1}, @val={0x5, 0x3, {0x5, 0x99}}, @void, @void, @val={0x3c, 0x4, {0x1, 0x80, 0x2c, 0x1c}}, @val={0x2d, 0x1a, {0x2, 0x0, 0x3, 0x0, {0x2, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x3}, 0x7, 0x3, 0x4}}, @val={0x72, 0x6}, @void, @val={0x76, 0x6, {0x5, 0x5, 0x21, 0xb}}}}, @NL80211_ATTR_TX_NO_CCK_RATE={0x4}]}, 0x94}, 0x1, 0x0, 0x0, 0x880}, 0x0) r6 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) socket$kcm(0x29, 0x2, 0x0) r7 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000180), r6) sendmsg$IEEE802154_LLSEC_ADD_KEY(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r7, @ANYBLOB="0706000000000000000027000000050031000400000008000200", @ANYRES32=r6], 0x24}, 0x1, 0x0, 0x0, 0x20004080}, 0x24060884) r8 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r8, &(0x7f0000001ac0)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f00000000c0)=ANY=[@ANYBLOB="640000001700010300000000fbdbdf2552"], 0x64}], 0x1}, 0x840) mkdirat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x0) openat$dir(0xffffffffffffff9c, &(0x7f0000002180)='./file0\x00', 0x0, 0x0) r9 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000800), r1) sendmsg$IEEE802154_ADD_IFACE(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000180)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r9, @ANYBLOB="eb7a2bbd7000fcdbdf2521000000f0c15cd46613c863a91e0835fb09001f0070687931000000002c0005000200aaaaaaaaaaaa0500200000000000"], 0x34}, 0x1, 0x0, 0x0, 0x4000010}, 0x40882) 0s ago: executing program 0 (id=2194): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) (async) pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) r4 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r4, 0x3b81, &(0x7f0000000140)={0xc, 0x0, 0x0}) ioctl$IOMMU_HWPT_ALLOC$TEST(r4, 0x3b89, &(0x7f00000002c0)={0x28, 0x3, 0x0, r5, 0x0, 0x0, 0xdead, 0x0, 0x0}) (async) write$P9_RVERSION(r3, &(0x7f0000000080)=ANY=[@ANYBLOB="1500000065ffff097b000008003950323030302e4c"], 0x15) (async) r6 = dup(r3) write$FUSE_BMAP(r6, &(0x7f0000000100)={0x18}, 0x18) (async) write$FUSE_DIRENTPLUS(r6, &(0x7f0000002100)=ANY=[@ANYBLOB="b0000000000000001659ec0889419429aa5db97288b0f8a87ea8e66d9a8b"], 0xb0) (async) write$FUSE_DIRENTPLUS(r6, &(0x7f0000000140)=ANY=[@ANYBLOB="10"], 0x10) (async) write$FUSE_NOTIFY_RETRIEVE(r6, &(0x7f0000000200)={0x30, 0x5, 0x0, {0x0, 0xfffffffffffffffd, 0x5, 0xfffffff8}}, 0x30) write$FUSE_DIRENTPLUS(r6, &(0x7f00000002c0)=ANY=[], 0xb0) (async) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) mount$9p_fd(0x0, &(0x7f00000003c0)='./file0\x00', &(0x7f0000000b80), 0x0, &(0x7f0000000580)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r2, @ANYBLOB=',wfdno=', @ANYRESHEX=r6, @ANYBLOB=',posixacl']) bind$inet6(r1, &(0x7f00000000c0)={0xa, 0x4e20, 0xdb88, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x17f}, 0x1c) (async) mknod(&(0x7f00000001c0)='./file0\x00', 0x1, 0x4) setsockopt$inet_sctp6_SCTP_ADAPTATION_LAYER(r1, 0x84, 0x7, &(0x7f0000000180)={0x9}, 0x4) (async) listen(r1, 0x4) (async) sendmmsg$inet6(r0, &(0x7f0000003c40)=[{{&(0x7f0000000080)={0xa, 0x4e23, 0x0, @loopback}, 0x1c, &(0x7f0000000240)=[{&(0x7f0000000140)='j', 0x1}], 0x1}}], 0x1, 0x0) (async) r7 = syz_open_dev$dri(&(0x7f0000000080), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_CREATEPROPBLOB(r7, 0xc01064bd, &(0x7f0000000180)={0x0}) (async) pipe2(&(0x7f0000000000)={0x0, 0x0}, 0x0) setsockopt$packet_fanout(0xffffffffffffffff, 0x107, 0x12, &(0x7f0000000040)={0x0, 0x6}, 0x4) (async) close_range(r8, r8, 0x0) kernel console output (not intermixed with test programs): 94287][ T9] usb 3-1: config 0 interface 126 altsetting 0 endpoint 0xA has invalid maxpacket 512, setting to 64 [ 157.009511][ T9] usb 3-1: config 0 interface 126 altsetting 0 endpoint 0x4 has invalid maxpacket 14444, setting to 1024 [ 157.021466][ T9] usb 3-1: config 0 interface 126 altsetting 0 bulk endpoint 0x4 has invalid maxpacket 1024 [ 157.032748][ T9] usb 3-1: config 0 interface 126 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 4 [ 157.046323][ T9] usb 3-1: New USB device found, idVendor=0763, idProduct=1015, bcdDevice=56.88 [ 157.060005][ T9] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 157.072401][ T9] usb 3-1: config 0 descriptor?? [ 157.078381][ T7817] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 157.090366][ T7817] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 157.103890][ T9] usb 3-1: Quirk or no altset; falling back to MIDI 1.0 [ 157.214509][ T5934] usb 5-1: new full-speed USB device number 11 using dummy_hcd [ 157.301483][ T9] usb 3-1: USB disconnect, device number 49 [ 157.365790][ T5934] usb 5-1: New USB device found, idVendor=09c0, idProduct=0203, bcdDevice=d3.43 [ 157.376329][ T5934] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 157.388094][ T5934] usb 5-1: config 0 descriptor?? [ 157.403810][ T5934] dvb-usb: found a 'Genpix SkyWalker-1 DVB-S receiver' in warm state. [ 157.600525][ T7846] netlink: 'syz.0.504': attribute type 10 has an invalid length. [ 157.611161][ T7846] team0: Device ipvlan1 failed to register rx_handler [ 158.002161][ T5934] gp8psk: usb in 138 operation failed. [ 158.008189][ T5934] dvb-usb: This USB2.0 device cannot be run on a USB1.1 port. (it lacks a hardware PID filter) [ 158.020801][ T5934] dvb-usb: Genpix SkyWalker-1 DVB-S receiver error while loading driver (-19) [ 158.031938][ T5934] usb 5-1: USB disconnect, device number 11 [ 158.619260][ T7869] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 159.190418][ T7866] mmap: syz.3.510 (7866) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 159.570121][ T7927] fuse: Bad value for 'fd' [ 159.734590][ T5986] usb 3-1: new high-speed USB device number 50 using dummy_hcd [ 159.780058][ T7935] overlayfs: failed to resolve './file1/file0': -2 [ 159.897191][ T5986] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 159.907389][ T5986] usb 3-1: New USB device found, idVendor=1532, idProduct=010e, bcdDevice= 0.00 [ 159.916624][ T5986] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 159.931868][ T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!! [ 159.933406][ T5986] usb 3-1: config 0 descriptor?? [ 160.310405][ T0] NOHZ tick-stop error: local softirq work is pending, handler #100!!! [ 160.353753][ T7919] netlink: 'syz.2.524': attribute type 10 has an invalid length. [ 160.374535][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 160.466750][ T7948] netlink: 'syz.4.533': attribute type 1 has an invalid length. [ 160.475557][ T7948] netlink: 'syz.4.533': attribute type 2 has an invalid length. [ 160.480604][ T7919] bond0: (slave wlan1): Enslaving as an active interface with an up link [ 160.629093][ T5986] razer 0003:1532:010E.000C: hidraw0: USB HID v0.00 Device [HID 1532:010e] on usb-dummy_hcd.2-1/input0 [ 160.833305][ T5986] usb 3-1: USB disconnect, device number 50 [ 161.178866][ T7973] netlink: 8 bytes leftover after parsing attributes in process `syz.3.540'. [ 161.450741][ T7981] CIFS: Unable to determine destination address [ 161.727152][ T983] usb 5-1: new high-speed USB device number 13 using dummy_hcd [ 161.888139][ T983] usb 5-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 161.897324][ T983] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 161.907182][ T983] usb 5-1: Product: syz [ 161.911367][ T983] usb 5-1: Manufacturer: syz [ 161.916051][ T983] usb 5-1: SerialNumber: syz [ 161.926133][ T983] usb 5-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 161.944157][ T5913] usb 5-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 162.594423][ T5986] usb 3-1: new full-speed USB device number 51 using dummy_hcd [ 162.700473][ T7993] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 162.709447][ T7993] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 162.907270][ T5986] usb 3-1: unable to get BOS descriptor or descriptor too short [ 162.939094][ T5986] usb 3-1: not running at top speed; connect to a high speed hub [ 163.028345][ T5913] ath9k_htc 5-1:1.0: ath9k_htc: Target is unresponsive [ 163.039452][ T5913] ath9k_htc: Failed to initialize the device [ 163.052915][ T5986] usb 3-1: config 13 has an invalid interface number: 120 but max is 0 [ 163.068297][ T5986] usb 3-1: config 13 has no interface number 0 [ 163.074739][ T5986] usb 3-1: config 13 interface 120 has no altsetting 0 [ 163.090039][ T5913] usb 5-1: ath9k_htc: USB layer deinitialized [ 163.133978][ T983] usb 5-1: USB disconnect, device number 13 [ 163.176258][ T5986] usb 3-1: New USB device found, idVendor=1604, idProduct=8005, bcdDevice=a1.c9 [ 163.206256][ T5986] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 163.267897][ T5986] usb 3-1: Product: syz [ 163.272055][ T5986] usb 3-1: Manufacturer: syz [ 163.296192][ T5986] usb 3-1: SerialNumber: syz [ 163.796670][ T5986] usb 3-1: USB disconnect, device number 51 [ 164.505615][ T5986] usb 3-1: new high-speed USB device number 52 using dummy_hcd [ 164.674423][ T5986] usb 3-1: Using ep0 maxpacket: 16 [ 164.684991][ T5986] usb 3-1: New USB device found, idVendor=05d1, idProduct=2001, bcdDevice= 2.00 [ 164.696621][ T5986] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 164.711607][ T5986] usb 3-1: config 0 descriptor?? [ 164.721464][ T5986] ftdi_sio 3-1:0.0: FTDI USB Serial Device converter detected [ 164.764363][ T5867] usb 5-1: new high-speed USB device number 14 using dummy_hcd [ 164.921444][ T8005] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 164.934586][ T5867] usb 5-1: Using ep0 maxpacket: 32 [ 164.940109][ T8005] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 164.949960][ T5867] usb 5-1: New USB device found, idVendor=0fd9, idProduct=0025, bcdDevice=29.40 [ 164.959653][ T5867] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 164.970819][ T5986] usb 3-1: Detected FT232A [ 164.976896][ T5867] usb 5-1: config 0 descriptor?? [ 164.992284][ T5986] usb 3-1: FTDI USB Serial Device converter now attached to ttyUSB0 [ 165.006164][ T5986] usb 3-1: USB disconnect, device number 52 [ 165.017998][ T5986] ftdi_sio ttyUSB0: FTDI USB Serial Device converter now disconnected from ttyUSB0 [ 165.028768][ T5986] ftdi_sio 3-1:0.0: device disconnected [ 165.118645][ C0] vcan0: j1939_tp_rxtimer: 0xffff88807d924000: rx timeout, send abort [ 165.192280][ T5867] dvb-usb: found a 'Elgato EyeTV Sat' in cold state, will try to load a firmware [ 165.204298][ T5867] usb 5-1: Direct firmware load for dvb-usb-az6027-03.fw failed with error -2 [ 165.213177][ T5867] usb 5-1: Falling back to sysfs fallback for: dvb-usb-az6027-03.fw [ 165.393903][ T8021] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 165.402809][ T8021] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 165.518962][ T8029] vhci_hcd vhci_hcd.0: pdev(2) rhport(0) sockfd(6) [ 165.525711][ T8029] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 165.536468][ T8029] vhci_hcd vhci_hcd.0: Device attached [ 165.626913][ C0] vcan0: j1939_tp_rxtimer: 0xffff88807d924000: abort rx timeout. Force session deactivation [ 165.774216][ T5913] usb 37-1: new low-speed USB device number 2 using vhci_hcd [ 165.796502][ T5986] usb 3-1: new high-speed USB device number 53 using dummy_hcd [ 165.964176][ T5986] usb 3-1: Using ep0 maxpacket: 16 [ 165.970768][ T5986] usb 3-1: config 0 has no interfaces? [ 165.976611][ T5986] usb 3-1: New USB device found, idVendor=0955, idProduct=7214, bcdDevice=ed.00 [ 165.985789][ T5986] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 165.996645][ T5986] usb 3-1: config 0 descriptor?? [ 166.206328][ T983] usb 3-1: USB disconnect, device number 53 [ 166.212322][ T8030] vhci_hcd: connection closed [ 166.214666][ T12] vhci_hcd: stop threads [ 166.225818][ T12] vhci_hcd: release socket [ 166.231339][ T12] vhci_hcd: disconnect device [ 166.274259][ T5913] vhci_hcd: vhci_device speed not set [ 166.833371][ T8039] IPVS: ip_vs_add_dest(): lower threshold is higher than upper threshold [ 166.846781][ T8039] IPVS: nq: FWM 3 0x00000003 - no destination available [ 167.398754][ T8050] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 167.412676][ T8050] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 167.636396][ T983] usb 3-1: new high-speed USB device number 54 using dummy_hcd [ 167.660504][ T8060] netlink: 8 bytes leftover after parsing attributes in process `syz.0.569'. [ 167.774601][ T983] usb 3-1: device descriptor read/64, error -71 [ 168.024262][ T983] usb 3-1: new high-speed USB device number 55 using dummy_hcd [ 168.154855][ T983] usb 3-1: device descriptor read/64, error -71 [ 168.264713][ T983] usb usb3-port1: attempt power cycle [ 168.558662][ T8088] netlink: 'syz.0.579': attribute type 10 has an invalid length. [ 168.575707][ T8088] 8021q: adding VLAN 0 to HW filter on device team0 [ 168.583802][ T8088] bond0: (slave team0): Enslaving as an active interface with an up link [ 168.604338][ T983] usb 3-1: new high-speed USB device number 56 using dummy_hcd [ 168.625922][ T983] usb 3-1: device descriptor read/8, error -71 [ 168.864730][ T983] usb 3-1: new high-speed USB device number 57 using dummy_hcd [ 168.897184][ T983] usb 3-1: device descriptor read/8, error -71 [ 169.014562][ T983] usb usb3-port1: unable to enumerate USB device [ 169.151745][ T8094] netlink: 40 bytes leftover after parsing attributes in process `syz.0.582'. [ 169.166283][ T8094] netlink: 40 bytes leftover after parsing attributes in process `syz.0.582'. [ 169.857175][ T8105] overlayfs: missing 'lowerdir' [ 170.595806][ T8127] netlink: 10 bytes leftover after parsing attributes in process `syz.3.595'. [ 170.871594][ T8143] netlink: 72 bytes leftover after parsing attributes in process `syz.3.601'. [ 170.883929][ T8143] netlink: 72 bytes leftover after parsing attributes in process `syz.3.601'. [ 171.058676][ T5874] Bluetooth: hci2: ACL packet for unknown connection handle 201 [ 171.140112][ T8163] netlink: 8 bytes leftover after parsing attributes in process `syz.3.608'. [ 171.611784][ T8179] 9pnet: Found fid 0 not clunked [ 171.847308][ T8195] netlink: 'syz.3.618': attribute type 6 has an invalid length. [ 171.943987][ T8203] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 171.955438][ T8203] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 171.966803][ T8203] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 171.980349][ T8203] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 171.992447][ T8203] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 172.004050][ T8203] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 172.017090][ T8203] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 172.029668][ T8203] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 172.041358][ T8203] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 172.053032][ T8203] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 172.065063][ T8203] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 172.076551][ T8203] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 172.079493][ T8201] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 172.088494][ T8203] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 172.108720][ T8203] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 172.121648][ T8203] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 172.133564][ T8203] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 172.148329][ T8203] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 172.159235][ T8203] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 172.169277][ T5934] usb 3-1: new high-speed USB device number 58 using dummy_hcd [ 172.171622][ T8203] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 172.189414][ T8203] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 172.201125][ T8203] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 172.212979][ T8203] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 172.225166][ T8203] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 172.237553][ T8203] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 172.249670][ T8203] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 172.262216][ T8203] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 172.273939][ T8203] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 172.286133][ T8203] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 172.297044][ T8203] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 172.309234][ T8203] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 172.320798][ T8203] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 172.333828][ T8203] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 172.334067][ T5934] usb 3-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 172.348062][ T8203] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 172.355736][ T5934] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 172.378906][ T5934] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0 [ 172.379786][ T8203] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 172.392834][ T5934] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 172.416426][ T5934] usb 3-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 172.423440][ T8203] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 172.428082][ T5934] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 172.448298][ T8203] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 172.454879][ T5934] usb 3-1: config 0 descriptor?? [ 172.485259][ T8203] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 172.500307][ T8203] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 172.512180][ T8203] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 172.525768][ T8203] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 172.537520][ T8203] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 172.549550][ T8203] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 172.560889][ T8203] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 172.572174][ T8203] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 172.583312][ T8203] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 172.595011][ T8203] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 172.606689][ T8203] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 172.617968][ T8203] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 172.630728][ T8203] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 172.642183][ T8203] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 172.653285][ T8203] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 172.665530][ T8203] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 172.676944][ T8203] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 172.688594][ T8203] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 172.699886][ T8203] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 172.711313][ T8203] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 172.722567][ T8203] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 172.733918][ T8203] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 172.745938][ T8203] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 172.757226][ T8203] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 172.768655][ T8203] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 172.780007][ T8203] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 172.791207][ T8203] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 172.802505][ T8203] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 172.814251][ T8203] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 172.890819][ T5934] plantronics 0003:047F:FFFF.000D: ignoring exceeding usage max [ 172.911063][ T5934] plantronics 0003:047F:FFFF.000D: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.2-1/input0 [ 173.100222][ T5986] usb 3-1: USB disconnect, device number 58 [ 173.301195][ T8215] netlink: 'syz.3.624': attribute type 10 has an invalid length. [ 173.309507][ T8215] netlink: 152 bytes leftover after parsing attributes in process `syz.3.624'. [ 173.381825][ T8219] netlink: 'syz.3.626': attribute type 10 has an invalid length. [ 173.412649][ T8219] bond0: (slave wlan1): Enslaving as an active interface with an up link [ 173.717164][ T8237] netlink: 4 bytes leftover after parsing attributes in process `syz.0.631'. [ 173.976149][ T5986] usb 3-1: new full-speed USB device number 59 using dummy_hcd [ 174.160451][ T5986] usb 3-1: config 0 has an invalid interface number: 3 but max is 0 [ 174.170024][ T5986] usb 3-1: config 0 has no interface number 0 [ 174.176259][ T5986] usb 3-1: config 0 interface 3 has no altsetting 0 [ 174.189049][ T5986] usb 3-1: New USB device found, idVendor=0525, idProduct=2888, bcdDevice=53.69 [ 174.214185][ T5986] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 174.222212][ T5986] usb 3-1: Product: syz [ 174.246517][ T5986] usb 3-1: Manufacturer: syz [ 174.255625][ T5986] usb 3-1: SerialNumber: syz [ 174.272001][ T5986] usb 3-1: config 0 descriptor?? [ 174.483865][ T5986] cdc_subset 3-1:0.3: probe with driver cdc_subset failed with error -22 [ 174.687578][ T5986] usb 3-1: USB disconnect, device number 59 [ 175.374872][ T8290] tmpfs: Bad value for 'mpol' [ 175.629972][ T8294] netlink: 16 bytes leftover after parsing attributes in process `syz.2.649'. [ 175.848930][ T8299] netlink: 'syz.0.651': attribute type 21 has an invalid length. [ 175.867977][ T8299] netlink: 'syz.0.651': attribute type 6 has an invalid length. [ 175.879358][ T8299] netlink: 132 bytes leftover after parsing attributes in process `syz.0.651'. [ 177.043224][ C1] vcan0: j1939_tp_rxtimer: 0xffff8880572a9000: rx timeout, send abort [ 177.551486][ C1] vcan0: j1939_tp_rxtimer: 0xffff8880572a9000: abort rx timeout. Force session deactivation [ 177.746922][ C1] vcan0: j1939_tp_rxtimer: 0xffff8880572a8c00: rx timeout, send abort [ 177.755228][ C1] vcan0: j1939_tp_rxtimer: 0xffff8880572a8800: rx timeout, send abort [ 177.763845][ C1] vcan0: j1939_xtp_rx_abort_one: 0xffff8880572a8c00: 0x00000: (3) A timeout occurred and this is the connection abort to close the session. [ 177.779310][ C1] vcan0: j1939_xtp_rx_abort_one: 0xffff8880572a8800: 0x00000: (3) A timeout occurred and this is the connection abort to close the session. [ 177.827935][ T8310] syzkaller1: entered promiscuous mode [ 177.833478][ T8310] syzkaller1: entered allmulticast mode [ 177.849599][ T8310] vhci_hcd vhci_hcd.0: pdev(2) rhport(0) sockfd(7) [ 177.856131][ T8310] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) [ 177.864747][ T8310] vhci_hcd vhci_hcd.0: Device attached [ 177.960851][ T8311] vhci_hcd: connection closed [ 177.962384][ T79] vhci_hcd: stop threads [ 177.971704][ T79] vhci_hcd: release socket [ 177.977219][ T79] vhci_hcd: disconnect device [ 178.594377][ T5914] libceph: connect (1)[c::]:6789 error -101 [ 178.601013][ T5914] libceph: mon0 (1)[c::]:6789 connect error [ 178.804195][ T5986] usb 3-1: new high-speed USB device number 60 using dummy_hcd [ 178.868199][ T5914] libceph: connect (1)[c::]:6789 error -101 [ 178.874380][ T5914] libceph: mon0 (1)[c::]:6789 connect error [ 178.966252][ T5986] usb 3-1: config 0 has an invalid interface number: 156 but max is 0 [ 178.974557][ T5986] usb 3-1: config 0 has no interface number 0 [ 178.980897][ T5986] usb 3-1: config 0 interface 156 altsetting 0 endpoint 0x3 has an invalid bInterval 0, changing to 7 [ 178.991882][ T5986] usb 3-1: config 0 interface 156 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 179.001724][ T5986] usb 3-1: config 0 interface 156 altsetting 0 endpoint 0xF has invalid wMaxPacketSize 0 [ 179.011592][ T5986] usb 3-1: New USB device found, idVendor=abcd, idProduct=cdee, bcdDevice=d6.b9 [ 179.020688][ T5986] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 179.030947][ T5986] usb 3-1: config 0 descriptor?? [ 179.040863][ T5986] gspca_main: spca561-2.14.0 probing abcd:cdee [ 179.240980][ T5986] spca561 3-1:0.156: probe with driver spca561 failed with error -22 [ 179.249838][ T5986] usb 3-1: Quirk or no altset; falling back to MIDI 1.0 [ 179.257261][ T5986] usb 3-1: MIDIStreaming interface descriptor not found [ 179.330636][ T5986] usb 3-1: USB disconnect, device number 60 [ 179.384630][ T5914] libceph: connect (1)[c::]:6789 error -101 [ 179.399373][ T5914] libceph: mon0 (1)[c::]:6789 connect error [ 179.412782][ T8319] ceph: No mds server is up or the cluster is laggy [ 179.783823][ T5874] Bluetooth: hci3: unexpected event for opcode 0x200b [ 180.386643][ T8355] IPVS: set_ctl: invalid protocol: 59 224.0.0.2:20001 [ 182.406817][ T8402] netlink: 'syz.0.686': attribute type 11 has an invalid length. [ 183.109193][ T8416] netlink: 48 bytes leftover after parsing attributes in process `syz.0.691'. [ 183.756106][ T8426] netlink: 76 bytes leftover after parsing attributes in process `syz.0.695'. [ 184.993983][ T8447] cifs: Bad value for 'port' [ 185.061027][ T8453] netlink: 32 bytes leftover after parsing attributes in process `syz.0.704'. [ 185.169635][ T8461] netlink: 'syz.0.708': attribute type 21 has an invalid length. [ 185.178483][ T8461] netlink: 128 bytes leftover after parsing attributes in process `syz.0.708'. [ 186.598316][ T8480] netlink: 'syz.4.715': attribute type 11 has an invalid length. [ 186.638820][ T8480] netlink: 'syz.4.715': attribute type 1 has an invalid length. [ 186.648316][ T8480] netlink: 5624 bytes leftover after parsing attributes in process `syz.4.715'. [ 187.014377][ T8507] dvmrp0: entered allmulticast mode [ 187.403168][ T8515] nfs4: Unknown parameter ''#\' [ 187.498212][ T8522] veth0_vlan: left promiscuous mode [ 187.652985][ T8532] netlink: 'syz.2.732': attribute type 21 has an invalid length. [ 187.662796][ T8532] netlink: 128 bytes leftover after parsing attributes in process `syz.2.732'. [ 187.721047][ T8538] netlink: 'syz.2.734': attribute type 46 has an invalid length. [ 188.110876][ T8544] netlink: 60 bytes leftover after parsing attributes in process `syz.0.736'. [ 188.122310][ T8544] PKCS7: Unknown OID: [5] (bad) [ 188.127474][ T8544] PKCS7: Only support pkcs7_signedData type [ 188.308566][ T8554] netlink: 4 bytes leftover after parsing attributes in process `syz.3.741'. [ 188.369556][ T8560] sctp: [Deprecated]: syz.3.744 (pid 8560) Use of int in max_burst socket option. [ 188.369556][ T8560] Use struct sctp_assoc_value instead [ 188.930780][ T8568] 9pnet_fd: Insufficient options for proto=fd [ 188.985230][ T8573] netlink: 8 bytes leftover after parsing attributes in process `syz.0.748'. [ 188.997434][ T8574] netlink: 8 bytes leftover after parsing attributes in process `syz.0.748'. [ 189.071437][ T8583] netlink: 56 bytes leftover after parsing attributes in process `syz.0.751'. [ 189.210789][ T8588] netlink: 408 bytes leftover after parsing attributes in process `syz.3.753'. [ 189.251483][ T8590] sctp: [Deprecated]: syz.3.754 (pid 8590) Use of struct sctp_assoc_value in delayed_ack socket option. [ 189.251483][ T8590] Use struct sctp_sack_info instead [ 189.471182][ T30] audit: type=1326 audit(1757382780.551:7): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8599 comm="syz.2.757" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f499b38ebe9 code=0x0 [ 190.989712][ T8627] syz.0.766 calls setitimer() with new_value NULL pointer. Misfeature support will be removed [ 192.459800][ T8640] ceph: No source [ 192.601334][ T8651] 9pnet_fd: Insufficient options for proto=fd [ 192.680126][ T8654] trusted_key: encrypted_key: insufficient parameters specified [ 193.027872][ T8669] netlink: 32 bytes leftover after parsing attributes in process `syz.4.781'. [ 193.099634][ T8672] netlink: 15 bytes leftover after parsing attributes in process `syz.4.782'. [ 193.113828][ T8672] netlink: 5 bytes leftover after parsing attributes in process `syz.4.782'. [ 193.124153][ T8672] netlink: 5 bytes leftover after parsing attributes in process `syz.4.782'. [ 193.132933][ T8672] netlink: 5 bytes leftover after parsing attributes in process `syz.4.782'. [ 193.292272][ T8683] overlayfs: upper fs does not support RENAME_WHITEOUT. [ 193.315797][ T8683] overlayfs: failed to set xattr on upper [ 193.336160][ T8683] overlayfs: ...falling back to redirect_dir=nofollow. [ 193.359108][ T8683] overlayfs: ...falling back to index=off. [ 193.369040][ T8683] overlayfs: ...falling back to uuid=null. [ 193.375076][ T8683] overlayfs: ...falling back to xino=off. [ 193.440328][ T8694] __nla_validate_parse: 1 callbacks suppressed [ 193.440345][ T8694] netlink: 100 bytes leftover after parsing attributes in process `syz.4.790'. [ 193.463489][ T8694] netlink: 8 bytes leftover after parsing attributes in process `syz.4.790'. [ 193.468439][ T8696] 9pnet_fd: Insufficient options for proto=fd [ 193.524176][ T8698] __vm_enough_memory: pid: 8698, comm: syz.4.792, bytes: 21199982366720 not enough memory for the allocation [ 193.540773][ T5874] Bluetooth: hci1: ISO packet for unknown connection handle 1280 [ 193.593832][ T8701] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 193.605337][ T8701] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 194.240457][ T1304] ieee802154 phy0 wpan0: encryption failed: -22 [ 194.247446][ T1304] ieee802154 phy1 wpan1: encryption failed: -22 [ 194.468503][ T5874] Bluetooth: hci2: ACL packet for unknown connection handle 200 [ 194.587280][ T30] audit: type=1326 audit(1757382785.671:8): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8737 comm="syz.0.809" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f8a0578ebe9 code=0x0 [ 195.601583][ T8757] tipc: Started in network mode [ 195.607834][ T8757] tipc: Node identity aaaaaaaaaa33, cluster identity 4711 [ 195.617181][ T8757] tipc: Enabled bearer , priority 2 [ 195.870214][ T8773] tmpfs: Unknown parameter 'appraise_type' [ 195.987041][ T8779] netlink: 4 bytes leftover after parsing attributes in process `syz.2.822'. [ 196.309905][ T8790] netlink: 100 bytes leftover after parsing attributes in process `syz.2.827'. [ 196.658922][ T8803] netlink: 'syz.4.831': attribute type 10 has an invalid length. [ 196.667933][ T8801] netlink: 'syz.4.831': attribute type 10 has an invalid length. [ 196.712223][ T8803] bond0: (slave wlan1): Enslaving as an active interface with an up link [ 196.737655][ T980] tipc: Node number set to 10070698 [ 197.038418][ T8826] netlink: 28 bytes leftover after parsing attributes in process `syz.2.839'. [ 197.127484][ T8832] dvmrp1: entered allmulticast mode [ 197.498343][ T8842] netlink: 164 bytes leftover after parsing attributes in process `syz.0.844'. [ 197.690156][ T8854] netlink: 'syz.3.848': attribute type 2 has an invalid length. [ 197.742982][ T8857] overlayfs: upper fs does not support RENAME_WHITEOUT. [ 197.751854][ T8857] overlayfs: failed to set xattr on upper [ 197.758497][ T8857] overlayfs: ...falling back to redirect_dir=nofollow. [ 197.767655][ T8857] overlayfs: ...falling back to index=off. [ 197.773493][ T8857] overlayfs: ...falling back to uuid=null. [ 198.163349][ T8868] fuse: Bad value for 'fd' [ 199.082672][ T30] audit: type=1800 audit(6048785089.161:9): pid=8904 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.863" name="SYSV00000000" dev="hugetlbfs" ino=0 res=0 errno=0 [ 199.783998][ T8920] netlink: 16 bytes leftover after parsing attributes in process `syz.2.869'. [ 199.992263][ T8938] 9p filesystem being mounted at /213/file0 supports timestamps until 2106-02-07 (0xffffffff) [ 200.009991][ T8924] 9pnet_fd: Insufficient options for proto=fd [ 200.552168][ T8950] netlink: 45 bytes leftover after parsing attributes in process `syz.0.880'. [ 202.920524][ T9037] netlink: 212396 bytes leftover after parsing attributes in process `syz.3.909'. [ 202.929923][ T9037] openvswitch: netlink: Port 65537 exceeds max allowable 65535 [ 203.002528][ T9041] netlink: 4 bytes leftover after parsing attributes in process `syz.4.910'. [ 203.292405][ T9059] sit0: entered promiscuous mode [ 203.302679][ T9059] netlink: 'syz.2.916': attribute type 1 has an invalid length. [ 203.310832][ T9059] netlink: 1 bytes leftover after parsing attributes in process `syz.2.916'. [ 203.351779][ T9061] netlink: 'syz.2.917': attribute type 10 has an invalid length. [ 203.530570][ T9070] netlink: 'syz.2.919': attribute type 21 has an invalid length. [ 203.538646][ T9070] netlink: 8 bytes leftover after parsing attributes in process `syz.2.919'. [ 203.550428][ T9070] netlink: 'syz.2.919': attribute type 21 has an invalid length. [ 203.558918][ T9070] netlink: 8 bytes leftover after parsing attributes in process `syz.2.919'. [ 203.844650][ T9079] overlayfs: failed to clone lowerpath [ 203.869962][ T9079] overlayfs: failed to clone upperpath [ 205.857983][ T9126] overlayfs: missing 'lowerdir' [ 206.035151][ T9128] netlink: 60 bytes leftover after parsing attributes in process `syz.3.937'. [ 206.046492][ T9128] netlink: 16 bytes leftover after parsing attributes in process `syz.3.937'. [ 206.171165][ T9133] netlink: 68 bytes leftover after parsing attributes in process `syz.3.939'. [ 206.726987][ T9140] netlink: 140 bytes leftover after parsing attributes in process `syz.0.941'. [ 207.030354][ T9151] netlink: 28 bytes leftover after parsing attributes in process `syz.3.945'. [ 207.908507][ T9181] netlink: 57 bytes leftover after parsing attributes in process `syz.0.955'. [ 208.213628][ T9201] netlink: 'syz.3.963': attribute type 29 has an invalid length. [ 208.222619][ T9201] netlink: 'syz.3.963': attribute type 29 has an invalid length. [ 208.235161][ T9201] netlink: 500 bytes leftover after parsing attributes in process `syz.3.963'. [ 208.316497][ T9204] syzkaller0: entered promiscuous mode [ 208.322496][ T9204] syzkaller0: entered allmulticast mode [ 208.334230][ T9203] syzkaller0: left allmulticast mode [ 208.353571][ T9203] syzkaller0: left promiscuous mode [ 210.881956][ T9280] netlink: 5092 bytes leftover after parsing attributes in process `syz.2.991'. [ 211.848333][ T9312] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1000'. [ 211.890895][ T9317] smc: net device bridge0 applied user defined pnetid SYZ0 [ 212.461973][ T9323] netlink: 'syz.2.1004': attribute type 30 has an invalid length. [ 212.533561][ T9327] netlink: 'syz.2.1004': attribute type 10 has an invalid length. [ 212.549096][ T9327] bridge0: port 2(bridge_slave_1) entered disabled state [ 212.558069][ T9327] bridge0: port 1(bridge_slave_0) entered disabled state [ 212.579808][ T9327] bridge0: port 2(bridge_slave_1) entered blocking state [ 212.587067][ T9327] bridge0: port 2(bridge_slave_1) entered forwarding state [ 212.595562][ T9327] bridge0: port 1(bridge_slave_0) entered blocking state [ 212.602775][ T9327] bridge0: port 1(bridge_slave_0) entered forwarding state [ 212.620942][ T9327] bond0: (slave bridge0): Enslaving as an active interface with an up link [ 215.218098][ T9379] overlayfs: failed to clone upperpath [ 215.234261][ T9379] netlink: 92 bytes leftover after parsing attributes in process `syz.3.1019'. [ 221.495610][ T30] audit: type=1800 audit(6048785112.588:10): pid=9458 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.1044" name="file1" dev="tmpfs" ino=1520 res=0 errno=0 [ 222.231112][ T9477] overlayfs: failed to resolve './file2': -2 [ 222.821898][ T9491] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1055'. [ 223.101667][ T9509] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1062'. [ 223.112693][ T9509] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1062'. [ 223.148097][ T9511] IPVS: Unknown mcast interface: nicvf0 [ 223.522245][ T9520] netlink: 36 bytes leftover after parsing attributes in process `syz.0.1066'. [ 223.534598][ T9520] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1066'. [ 223.544865][ T9520] netlink: 36 bytes leftover after parsing attributes in process `syz.0.1066'. [ 223.556922][ T9520] netlink: 36 bytes leftover after parsing attributes in process `syz.0.1066'. [ 223.857214][ T9530] 9pnet_fd: Insufficient options for proto=fd [ 224.358713][ T9534] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 224.806026][ T9543] netlink: 'syz.2.1073': attribute type 46 has an invalid length. [ 224.842189][ T9543] netlink: 44 bytes leftover after parsing attributes in process `syz.2.1073'. [ 224.861441][ T9543] bridge0: port 1(bridge_slave_0) entered disabled state [ 224.912137][ T9543] bridge_slave_0 (unregistering): left allmulticast mode [ 224.929815][ T9543] bridge_slave_0 (unregistering): left promiscuous mode [ 224.940001][ T9543] bridge0: port 1(bridge_slave_0) entered disabled state [ 225.148671][ T9553] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1076'. [ 226.312334][ T30] audit: type=1326 audit(6048785117.398:11): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9582 comm="syz.4.1086" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f19dcd8ebe9 code=0x50000 [ 226.353149][ T30] audit: type=1326 audit(6048785117.398:12): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9582 comm="syz.4.1086" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f19dcd8ebe9 code=0x50000 [ 226.376859][ T30] audit: type=1326 audit(6048785117.398:13): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9582 comm="syz.4.1086" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f19dcd8ebe9 code=0x50000 [ 226.427205][ T30] audit: type=1326 audit(6048785117.438:14): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9582 comm="syz.4.1086" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f19dcd8ebe9 code=0x50000 [ 226.486000][ T30] audit: type=1326 audit(6048785117.438:15): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9582 comm="syz.4.1086" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f19dcd8ebe9 code=0x50000 [ 226.549171][ T30] audit: type=1326 audit(6048785117.438:16): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9582 comm="syz.4.1086" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f19dcd8ebe9 code=0x50000 [ 226.571571][ T30] audit: type=1326 audit(6048785117.438:17): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9582 comm="syz.4.1086" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f19dcd8ebe9 code=0x50000 [ 226.594042][ T30] audit: type=1326 audit(6048785117.438:18): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9582 comm="syz.4.1086" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f19dcd8ebe9 code=0x50000 [ 226.616395][ T30] audit: type=1326 audit(6048785117.438:19): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9582 comm="syz.4.1086" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f19dcd8ebe9 code=0x50000 [ 226.638727][ T30] audit: type=1326 audit(6048785117.438:20): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9582 comm="syz.4.1086" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f19dcd8ebe9 code=0x50000 [ 226.669039][ T30] audit: type=1326 audit(6048785117.438:21): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9582 comm="syz.4.1086" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f19dcd8ebe9 code=0x50000 [ 226.695976][ T30] audit: type=1326 audit(6048785117.438:22): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9582 comm="syz.4.1086" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f19dcd8ebe9 code=0x50000 [ 226.721559][ T30] audit: type=1326 audit(6048785117.438:23): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9582 comm="syz.4.1086" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f19dcd8ebe9 code=0x50000 [ 226.747210][ T30] audit: type=1326 audit(6048785117.438:24): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9582 comm="syz.4.1086" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f19dcd8ebe9 code=0x50000 [ 226.777734][ T30] audit: type=1326 audit(6048785117.438:25): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9582 comm="syz.4.1086" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f19dcd8ebe9 code=0x50000 [ 227.018818][ T9594] netlink: 20 bytes leftover after parsing attributes in process `syz.3.1089'. [ 227.462193][ T9599] overlay: filesystem on ./bus is read-only [ 228.301730][ T9625] netlink: 'syz.2.1100': attribute type 10 has an invalid length. [ 228.600096][ T9633] netlink: 'syz.3.1103': attribute type 5 has an invalid length. [ 229.246824][ T9643] tmpfs: Unknown parameter 'dligR' [ 230.066720][ T5867] dvb-usb: did not find the firmware file 'dvb-usb-az6027-03.fw' (status -110). You can use /scripts/get_dvb_firmware to get the firmware [ 230.109373][ T5867] dvb_usb_az6027 5-1:0.0: probe with driver dvb_usb_az6027 failed with error -110 [ 230.133951][ T5867] usb 5-1: USB disconnect, device number 14 [ 230.355282][ T9676] netlink: 57 bytes leftover after parsing attributes in process `syz.2.1119'. [ 230.646661][ T5874] Bluetooth: hci2: adv larger than maximum supported [ 230.646712][ T5874] Bluetooth: hci2: adv larger than maximum supported [ 230.657818][ T5874] Bluetooth: hci2: Malformed LE Event: 0x0d [ 230.689981][ T9689] bridge0: entered promiscuous mode [ 230.698546][ T9689] bridge0: entered allmulticast mode [ 230.745834][ T9693] Can not set IPV6_FL_F_REFLECT if flowlabel_consistency sysctl is enable [ 230.814374][ T5934] usb 5-1: new full-speed USB device number 15 using dummy_hcd [ 230.974686][ T5934] usb 5-1: config index 0 descriptor too short (expected 52, got 45) [ 230.987677][ T5934] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 230.998698][ T5934] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 1023, setting to 64 [ 231.013424][ T5934] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 4 [ 231.028878][ T5934] usb 5-1: New USB device found, idVendor=2006, idProduct=0118, bcdDevice= 0.00 [ 231.039168][ T5934] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 231.053268][ T5934] usb 5-1: config 0 descriptor?? [ 231.059127][ T9685] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 231.494824][ T5934] hkems 0003:2006:0118.000E: unknown global tag 0xe [ 231.503301][ T5934] hkems 0003:2006:0118.000E: item 0 1 1 14 parsing failed [ 231.511330][ T5934] hkems 0003:2006:0118.000E: parse failed [ 231.527150][ T5934] hkems 0003:2006:0118.000E: probe with driver hkems failed with error -22 [ 231.688860][ T5934] usb 5-1: USB disconnect, device number 15 [ 231.977884][ T30] kauditd_printk_skb: 56 callbacks suppressed [ 231.977900][ T30] audit: type=1326 audit(6048785123.068:82): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9717 comm="syz.3.1135" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f83c078ebe9 code=0x7fc00000 [ 232.021578][ T30] audit: type=1326 audit(6048785123.098:83): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9717 comm="syz.3.1135" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f83c078ebe9 code=0x7fc00000 [ 232.047109][ T30] audit: type=1326 audit(6048785123.098:84): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9717 comm="syz.3.1135" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f83c078ebe9 code=0x7fc00000 [ 232.078975][ T30] audit: type=1326 audit(6048785123.098:85): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9717 comm="syz.3.1135" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f83c078ebe9 code=0x7fc00000 [ 232.104418][ T30] audit: type=1326 audit(6048785123.098:86): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9717 comm="syz.3.1135" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f83c078ebe9 code=0x7fc00000 [ 232.133359][ T30] audit: type=1326 audit(6048785123.098:87): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9717 comm="syz.3.1135" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f83c078ebe9 code=0x7fc00000 [ 232.158470][ T30] audit: type=1326 audit(6048785123.098:88): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9717 comm="syz.3.1135" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f83c078ebe9 code=0x7fc00000 [ 232.183909][ T30] audit: type=1326 audit(6048785123.098:89): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9717 comm="syz.3.1135" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f83c078ebe9 code=0x7fc00000 [ 232.211710][ T9724] netlink: 36 bytes leftover after parsing attributes in process `syz.3.1137'. [ 232.231015][ T30] audit: type=1326 audit(6048785123.098:90): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9717 comm="syz.3.1135" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f83c078ebe9 code=0x7fc00000 [ 232.262916][ T30] audit: type=1326 audit(6048785123.098:91): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9717 comm="syz.3.1135" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f83c078ebe9 code=0x7fc00000 [ 232.813022][ T980] usb 5-1: new high-speed USB device number 16 using dummy_hcd [ 232.942949][ T980] usb 5-1: device descriptor read/64, error -71 [ 233.192945][ T980] usb 5-1: new high-speed USB device number 17 using dummy_hcd [ 233.333091][ T980] usb 5-1: device descriptor read/64, error -71 [ 233.453864][ T980] usb usb5-port1: attempt power cycle [ 233.812879][ T980] usb 5-1: new high-speed USB device number 18 using dummy_hcd [ 233.853399][ T980] usb 5-1: device descriptor read/8, error -71 [ 234.103101][ T980] usb 5-1: new high-speed USB device number 19 using dummy_hcd [ 234.143264][ T980] usb 5-1: device descriptor read/8, error -71 [ 234.253255][ T980] usb usb5-port1: unable to enumerate USB device [ 235.964327][ T9811] Unsupported ieee802154 address type: 0 [ 236.128437][ T9816] input: syz0 as /devices/virtual/input/input16 [ 236.248014][ T9818] syzkaller1: entered promiscuous mode [ 236.253773][ T9818] syzkaller1: entered allmulticast mode [ 236.261736][ T9818] PF_CAN: dropped non conform CAN FD skbuff: dev type 65534, len 40 [ 236.271476][ T9818] netlink: 24 bytes leftover after parsing attributes in process `syz.4.1173'. [ 236.344309][ T9818] team0: Port device team_slave_0 removed [ 236.658841][ T9830] IPVS: set_ctl: invalid protocol: 255 10.1.1.1:20004 [ 237.743114][ T980] usb 5-1: new high-speed USB device number 20 using dummy_hcd [ 238.162915][ T980] usb 5-1: device descriptor read/64, error -71 [ 238.178822][ T9860] kAFS: unable to lookup cell '(,c' [ 238.412834][ T980] usb 5-1: new high-speed USB device number 21 using dummy_hcd [ 238.559262][ T9876] 9pnet_fd: Insufficient options for proto=fd [ 238.567027][ T980] usb 5-1: config 192 has an invalid descriptor of length 0, skipping remainder of the config [ 238.583238][ T980] usb 5-1: config 192 has no interfaces? [ 238.595683][ T980] usb 5-1: New USB device found, idVendor=13ec, idProduct=0006, bcdDevice= 0.00 [ 238.613363][ T980] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 238.831262][ T9850] netlink: 260 bytes leftover after parsing attributes in process `syz.4.1183'. [ 238.844277][ T9885] netdevsim netdevsim3 : renamed from netdevsim0 (while UP) [ 238.855545][ T980] usb 5-1: string descriptor 0 read error: -71 [ 238.876973][ T980] usb 5-1: USB disconnect, device number 21 [ 238.929808][ T9889] netlink: 'syz.0.1195': attribute type 2 has an invalid length. [ 238.939718][ T9889] netlink: 'syz.0.1195': attribute type 1 has an invalid length. [ 239.755783][ T9922] devtmpfs: Cannot enable quota on remount [ 239.976277][ T9934] netlink: 'syz.0.1209': attribute type 2 has an invalid length. [ 240.012866][ T5914] usb 5-1: new full-speed USB device number 22 using dummy_hcd [ 240.184876][ T5914] usb 5-1: unable to get BOS descriptor or descriptor too short [ 240.193682][ T5914] usb 5-1: not running at top speed; connect to a high speed hub [ 240.202676][ T5914] usb 5-1: config 5 has an invalid interface number: 215 but max is 0 [ 240.211552][ T5914] usb 5-1: config 5 has no interface number 0 [ 240.217929][ T5914] usb 5-1: config 5 interface 215 altsetting 3 endpoint 0xF has invalid maxpacket 512, setting to 64 [ 240.229068][ T5914] usb 5-1: config 5 interface 215 has no altsetting 0 [ 240.239247][ T5914] usb 5-1: New USB device found, idVendor=1163, idProduct=0100, bcdDevice=dc.ba [ 240.248742][ T5914] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 240.257090][ T5914] usb 5-1: Product: syz [ 240.261262][ T5914] usb 5-1: Manufacturer: syz [ 240.267309][ T5914] usb 5-1: SerialNumber: syz [ 240.284912][ T9922] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 240.501420][ T5914] cypress_m8 5-1:5.215: DeLorme Earthmate USB converter detected [ 240.513691][ T5914] usb 5-1: DeLorme Earthmate USB converter now attached to ttyUSB0 [ 240.531531][ T5914] usb 5-1: USB disconnect, device number 22 [ 240.560619][ T5914] earthmate ttyUSB0: DeLorme Earthmate USB converter now disconnected from ttyUSB0 [ 240.586345][ T5914] cypress_m8 5-1:5.215: device disconnected [ 240.901831][ T9963] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1217'. [ 241.539805][ T9989] usb usb5: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 241.698090][ T5874] Bluetooth: hci1: unexpected event for opcode 0x0000 [ 241.790714][ T30] kauditd_printk_skb: 58 callbacks suppressed [ 241.790729][ T30] audit: type=1326 audit(6048785132.878:150): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9999 comm="syz.2.1231" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f499b38ebe9 code=0x0 [ 243.314453][ T980] usb 5-1: new high-speed USB device number 23 using dummy_hcd [ 243.472817][ T980] usb 5-1: Using ep0 maxpacket: 8 [ 243.484453][ T980] usb 5-1: unable to get BOS descriptor or descriptor too short [ 243.496080][ T980] usb 5-1: config 1 interface 0 has no altsetting 0 [ 243.515476][ T980] usb 5-1: New USB device found, idVendor=05ac, idProduct=024e, bcdDevice= 0.40 [ 243.532825][ T980] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 243.540841][ T980] usb 5-1: Product: syz [ 243.548668][ T980] usb 5-1: Manufacturer: syz [ 243.554401][ T980] usb 5-1: SerialNumber: syz [ 243.783167][ T980] input: bcm5974 as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:1.0/input/input17 [ 243.800253][ T5222] bcm5974 5-1:1.0: could not read from device [ 243.819015][ T5222] bcm5974 5-1:1.0: could not read from device [ 243.836989][ T980] usb 5-1: USB disconnect, device number 23 [ 244.555254][T10085] tmpfs: Bad value for 'mpol' [ 244.563998][T10085] syzkaller1: entered promiscuous mode [ 244.569534][T10085] syzkaller1: entered allmulticast mode [ 244.831715][T10092] overlayfs: missing 'workdir' [ 246.373917][T10101] bond0: entered promiscuous mode [ 246.378987][T10101] : entered promiscuous mode [ 246.394173][T10101] bond_slave_1: entered promiscuous mode [ 246.400139][T10101] batadv0: entered promiscuous mode [ 246.405776][T10101] mac80211_hwsim hwsim6 wlan1: entered promiscuous mode [ 246.736936][T10112] fuse: Unknown parameter 'root'' [ 247.008587][T10123] atomic_op ffff88807e50d198 conn xmit_atomic 0000000000000000 [ 247.412205][T10130] netlink: 'syz.2.1267': attribute type 27 has an invalid length. [ 247.464663][T10126] tmpfs: Bad value for 'mpol' [ 247.510517][T10130] sit0: left promiscuous mode [ 247.573942][T10130] bridge0: port 2(bridge_slave_1) entered disabled state [ 247.595713][ T5986] usb 5-1: new high-speed USB device number 24 using dummy_hcd [ 247.605123][T10130] bridge0: left allmulticast mode [ 247.631030][T10130] bond0: left promiscuous mode [ 247.646703][T10130] : left promiscuous mode [ 247.667163][T10130] bond_slave_1: left promiscuous mode [ 247.684002][T10130] batadv0: left promiscuous mode [ 247.699686][T10130] mac80211_hwsim hwsim6 wlan1: left promiscuous mode [ 247.723456][T10130] bridge0: left promiscuous mode [ 247.742969][ T5986] usb 5-1: device descriptor read/64, error -71 [ 247.997518][T10130] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 248.012917][ T5986] usb 5-1: new high-speed USB device number 25 using dummy_hcd [ 248.054693][T10130] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 248.163354][ T5986] usb 5-1: device descriptor read/64, error -71 [ 248.283279][ T5986] usb usb5-port1: attempt power cycle [ 248.464622][ T3543] netdevsim netdevsim2 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 248.477890][ T3543] netdevsim netdevsim2 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 248.499892][ T3543] netdevsim netdevsim2 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 248.520350][ T3543] netdevsim netdevsim2 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 248.643020][ T5986] usb 5-1: new high-speed USB device number 26 using dummy_hcd [ 248.659530][T10138] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1270'. [ 248.676365][ T5986] usb 5-1: device descriptor read/8, error -71 [ 248.922886][ T5986] usb 5-1: new high-speed USB device number 27 using dummy_hcd [ 248.953599][ T5986] usb 5-1: device descriptor read/8, error -71 [ 249.064949][ T5986] usb usb5-port1: unable to enumerate USB device [ 250.091311][T10156] netlink: 24 bytes leftover after parsing attributes in process `syz.3.1275'. [ 250.957473][T10184] overlayfs: upper fs does not support RENAME_WHITEOUT. [ 250.964795][T10184] overlayfs: failed to set xattr on upper [ 250.970555][T10184] overlayfs: ...falling back to redirect_dir=nofollow. [ 250.977500][T10184] overlayfs: ...falling back to index=off. [ 250.983389][T10184] overlayfs: ...falling back to uuid=null. [ 251.040831][T10185] overlayfs: overlay with incompat feature 'volatile' cannot be mounted [ 251.646863][ T30] audit: type=1326 audit(6048785142.738:151): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10195 comm="syz.4.1287" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f19dcd8ebe9 code=0x0 [ 252.283373][ T5914] usb 5-1: new high-speed USB device number 28 using dummy_hcd [ 252.297572][T10217] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1293'. [ 252.432872][ T5914] usb 5-1: Using ep0 maxpacket: 16 [ 252.443034][ T5914] usb 5-1: config 15 has too many interfaces: 92, using maximum allowed: 32 [ 252.453103][ T5914] usb 5-1: config 15 has an invalid descriptor of length 0, skipping remainder of the config [ 252.464567][ T5914] usb 5-1: config 15 has 0 interfaces, different from the descriptor's value: 92 [ 252.476860][ T5914] usb 5-1: New USB device found, idVendor=0545, idProduct=8080, bcdDevice= 0.01 [ 252.486432][ T5914] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 252.494805][ T5914] usb 5-1: Product: syz [ 252.499118][ T5914] usb 5-1: Manufacturer: syz [ 252.504305][ T5914] usb 5-1: SerialNumber: syz [ 252.842592][T10229] : renamed from bond_slave_0 (while UP) [ 252.960530][T10234] 9pnet_fd: Insufficient options for proto=fd [ 253.162497][T10241] No source specified [ 253.185245][ T30] audit: type=1800 audit(6048785144.278:152): pid=10241 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.1301" name="nullb0" dev="tmpfs" ino=2194 res=0 errno=0 [ 253.297418][T10247] netlink: 'syz.2.1303': attribute type 2 has an invalid length. [ 253.319447][T10247] netlink: 16126 bytes leftover after parsing attributes in process `syz.2.1303'. [ 253.356165][T10251] netlink: 'syz.3.1305': attribute type 2 has an invalid length. [ 253.364139][T10251] netlink: 'syz.3.1305': attribute type 1 has an invalid length. [ 253.655643][T10265] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1311'. [ 253.719147][T10268] 9pnet: p9_errstr2errno: server reported unknown error @ [ 253.888724][T10270] netlink: 'syz.2.1313': attribute type 39 has an invalid length. [ 254.662346][ T5914] usb 5-1: USB disconnect, device number 28 [ 255.482850][ T5986] usb 5-1: new high-speed USB device number 29 using dummy_hcd [ 255.632998][ T5986] usb 5-1: Using ep0 maxpacket: 32 [ 255.641587][ T5986] usb 5-1: config 0 has an invalid interface number: 12 but max is 0 [ 255.651628][ T5986] usb 5-1: config 0 has no interface number 0 [ 255.659505][ T5986] usb 5-1: config 0 interface 12 has no altsetting 0 [ 255.676425][ T1304] ieee802154 phy0 wpan0: encryption failed: -22 [ 255.685416][ T1304] ieee802154 phy1 wpan1: encryption failed: -22 [ 255.699884][ T5986] usb 5-1: New USB device found, idVendor=2c42, idProduct=1202, bcdDevice=85.40 [ 255.715678][ T5986] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 255.724977][ T5986] usb 5-1: Product: syz [ 255.729143][ T5986] usb 5-1: Manufacturer: syz [ 255.736533][ T5986] usb 5-1: SerialNumber: syz [ 255.749750][ T5986] usb 5-1: config 0 descriptor?? [ 255.771843][T10329] netlink: 72 bytes leftover after parsing attributes in process `syz.0.1331'. [ 255.977640][ T5986] f81534 5-1:0.12: f81534_set_register: reg: 1002 data: 3 failed: -71 [ 255.999240][ T5986] f81534 5-1:0.12: f81534_find_config_idx: read failed: -71 [ 256.029747][ T5986] f81534 5-1:0.12: f81534_calc_num_ports: find idx failed: -71 [ 256.043421][ T5986] f81534 5-1:0.12: probe with driver f81534 failed with error -71 [ 256.085479][ T5986] usb 5-1: USB disconnect, device number 29 [ 256.206700][T10335] overlay: Unknown parameter 'smackfshat' [ 257.222882][ T5934] usb 5-1: new high-speed USB device number 30 using dummy_hcd [ 257.375756][ T5934] usb 5-1: config 0 has an invalid interface number: 83 but max is 0 [ 257.392778][ T5934] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 257.408559][ T5934] usb 5-1: config 0 has no interface number 0 [ 257.414924][ T5934] usb 5-1: New USB device found, idVendor=0b48, idProduct=2003, bcdDevice=39.61 [ 257.428003][ T5934] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 257.448031][ T5934] usb 5-1: config 0 descriptor?? [ 257.465292][ T5934] ttusbir 5-1:0.83: cannot find expected altsetting [ 257.664603][ T980] usb 5-1: USB disconnect, device number 30 [ 258.074905][T10416] fuse: Bad value for 'group_id' [ 258.080010][T10416] fuse: Bad value for 'group_id' [ 258.323172][T10420] overlayfs: failed to clone lowerpath [ 258.762821][ T983] usb 5-1: new high-speed USB device number 31 using dummy_hcd [ 258.892921][ T983] usb 5-1: device descriptor read/64, error -71 [ 258.914891][T10418] netlink: 'syz.3.1365': attribute type 4 has an invalid length. [ 258.947460][T10418] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 259.134050][ T983] usb 5-1: new high-speed USB device number 32 using dummy_hcd [ 259.283322][ T983] usb 5-1: device descriptor read/64, error -71 [ 259.321316][T10453] netlink: 96 bytes leftover after parsing attributes in process `syz.3.1376'. [ 259.334257][T10453] netlink: 16 bytes leftover after parsing attributes in process `syz.3.1376'. [ 259.395868][ T983] usb usb5-port1: attempt power cycle [ 259.495693][T10457] netlink: 'syz.0.1377': attribute type 10 has an invalid length. [ 259.503808][T10457] netlink: 2 bytes leftover after parsing attributes in process `syz.0.1377'. [ 259.513288][T10457] team0: entered promiscuous mode [ 259.518333][T10457] team_slave_0: entered promiscuous mode [ 259.524742][T10457] team_slave_1: entered promiscuous mode [ 259.531842][T10457] bond0: (slave team0): Releasing backup interface [ 259.742861][ T983] usb 5-1: new high-speed USB device number 33 using dummy_hcd [ 259.773790][ T983] usb 5-1: device descriptor read/8, error -71 [ 260.012929][ T983] usb 5-1: new high-speed USB device number 34 using dummy_hcd [ 260.035242][ T983] usb 5-1: device descriptor read/8, error -71 [ 260.143453][ T983] usb usb5-port1: unable to enumerate USB device [ 260.375441][T10482] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1386'. [ 261.511506][T10505] overlayfs: failed to clone lowerpath [ 261.832106][T10523] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1400'. [ 262.012923][ T5913] usb 5-1: new high-speed USB device number 35 using dummy_hcd [ 262.142929][ T5913] usb 5-1: device descriptor read/64, error -71 [ 262.299314][T10536] overlay: Unknown parameter 'smackfstransmute' [ 262.393638][ T5913] usb 5-1: new high-speed USB device number 36 using dummy_hcd [ 262.552847][ T5913] usb 5-1: device descriptor read/64, error -71 [ 262.673062][ T5913] usb usb5-port1: attempt power cycle [ 263.023237][ T5913] usb 5-1: new high-speed USB device number 37 using dummy_hcd [ 263.054542][ T5913] usb 5-1: device descriptor read/8, error -71 [ 263.292891][ T5913] usb 5-1: new high-speed USB device number 38 using dummy_hcd [ 263.323488][ T5913] usb 5-1: device descriptor read/8, error -71 [ 263.434115][ T5913] usb usb5-port1: unable to enumerate USB device [ 264.097376][T10602] overlayfs: option "volatile" is meaningless in a non-upper mount, ignoring it. [ 264.114285][T10602] overlayfs: missing 'lowerdir' [ 264.142157][T10604] netlink: 'syz.2.1426': attribute type 40 has an invalid length. [ 265.226057][T10642] netlink: 32 bytes leftover after parsing attributes in process `syz.4.1440'. [ 265.318750][ T30] audit: type=1326 audit(6048785156.408:153): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10646 comm="syz.4.1443" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f19dcd8ebe9 code=0x0 [ 265.486923][T10652] PKCS7: Unknown OID: [5] (bad) [ 265.501960][T10652] PKCS7: Only support pkcs7_signedData type [ 265.663305][ T5906] usb 5-1: new high-speed USB device number 39 using dummy_hcd [ 265.814454][ T5906] usb 5-1: config 220 has an invalid interface number: 76 but max is 2 [ 265.834685][ T5906] usb 5-1: config 220 contains an unexpected descriptor of type 0x2, skipping [ 265.856542][ T5906] usb 5-1: config 220 has an invalid descriptor of length 0, skipping remainder of the config [ 265.882879][ T5906] usb 5-1: config 220 has no interface number 2 [ 265.890161][T10663] overlayfs: failed to clone lowerpath [ 265.900175][ T5906] usb 5-1: config 220 interface 1 altsetting 5 has 0 endpoint descriptors, different from the interface descriptor's value: 12 [ 265.918436][ T5906] usb 5-1: config 220 interface 0 has no altsetting 0 [ 265.929757][ T5906] usb 5-1: config 220 interface 76 has no altsetting 0 [ 265.937051][ T5906] usb 5-1: config 220 interface 1 has no altsetting 0 [ 265.949826][ T5906] usb 5-1: New USB device found, idVendor=8086, idProduct=0b07, bcdDevice=6c.b9 [ 265.959510][ T5906] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 265.971039][ T5906] usb 5-1: Product: syz [ 265.975548][ T5906] usb 5-1: Manufacturer: syz [ 265.980289][ T5906] usb 5-1: SerialNumber: syz [ 267.102695][T10683] overlayfs: failed to clone lowerpath [ 267.224598][T10686] netlink: 'syz.3.1460': attribute type 4 has an invalid length. [ 268.394367][ T5906] uvcvideo 5-1:220.1: Unknown video format 00000000-0000-0000-0000-000000000000 [ 268.434034][ T5906] usb 5-1: Found UVC 7.01 device syz (8086:0b07) [ 268.451065][ T5906] usb 5-1: No valid video chain found. [ 268.464249][ T5906] usb 5-1: selecting invalid altsetting 0 [ 268.473170][T10702] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1466'. [ 268.477048][T10701] netlink: 'syz.0.1465': attribute type 29 has an invalid length. [ 268.500368][ T5906] usb 5-1: selecting invalid altsetting 0 [ 268.509192][T10701] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1465'. [ 268.514391][ T5906] usbtest 5-1:220.1: probe with driver usbtest failed with error -22 [ 268.538932][ T5906] usb 5-1: USB disconnect, device number 39 [ 268.588429][T10702] syzkaller1: entered promiscuous mode [ 268.594139][T10702] syzkaller1: entered allmulticast mode [ 268.748143][T10709] overlayfs: failed to clone lowerpath [ 269.052855][ T5906] usb 5-1: new high-speed USB device number 40 using dummy_hcd [ 269.071593][ T30] audit: type=1800 audit(6048785160.158:154): pid=10721 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.1472" name="nullb0" dev="tmpfs" ino=2062 res=0 errno=0 [ 269.227031][ T5906] usb 5-1: config index 0 descriptor too short (expected 3133, got 61) [ 269.239593][ T5906] usb 5-1: config 0 has an invalid interface number: 156 but max is 1 [ 269.260854][ T5906] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 269.277452][ T5906] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 2 [ 269.291629][ T5906] usb 5-1: config 0 has no interface number 0 [ 269.304966][ T5906] usb 5-1: config 0 interface 156 altsetting 0 has an endpoint descriptor with address 0xF5, changing to 0x85 [ 269.321417][ T5906] usb 5-1: config 0 interface 156 altsetting 0 endpoint 0x85 has invalid wMaxPacketSize 0 [ 269.332646][ T5906] usb 5-1: config 0 interface 156 altsetting 0 endpoint 0x3 has an invalid bInterval 0, changing to 7 [ 269.347583][ T5906] usb 5-1: config 0 interface 156 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 269.357978][ T5906] usb 5-1: config 0 interface 156 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 269.374417][ T5906] usb 5-1: New USB device found, idVendor=abcd, idProduct=cdee, bcdDevice= 5.b9 [ 269.385339][ T5906] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 269.403751][ T5906] usb 5-1: config 0 descriptor?? [ 269.416709][ T5906] gspca_main: spca561-2.14.0 probing abcd:cdee [ 269.615440][ T5906] spca561 5-1:0.156: probe with driver spca561 failed with error -22 [ 269.628257][ T5906] usb 5-1: Quirk or no altset; falling back to MIDI 1.0 [ 269.635747][ T5906] usb 5-1: MIDIStreaming interface descriptor not found [ 269.706484][ T5906] usb 5-1: USB disconnect, device number 40 [ 270.833696][T10761] netlink: 'syz.0.1484': attribute type 10 has an invalid length. [ 270.871752][T10761] bond0: (slave wlan1): Enslaving as an active interface with an up link [ 271.322973][ T5986] usb 5-1: new high-speed USB device number 41 using dummy_hcd [ 271.513644][ T5986] usb 5-1: Using ep0 maxpacket: 32 [ 271.526405][ T5986] usb 5-1: New USB device found, idVendor=084f, idProduct=0001, bcdDevice=e0.b8 [ 271.540760][ T5986] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 271.550425][ T5986] usb 5-1: Product: syz [ 271.552447][T10784] netlink: 703 bytes leftover after parsing attributes in process `syz.3.1494'. [ 271.557968][ T5986] usb 5-1: Manufacturer: syz [ 271.569827][ T5986] usb 5-1: SerialNumber: syz [ 271.584641][ T5986] empeg 5-1:1.0: empeg converter detected [ 272.515744][ T30] audit: type=1800 audit(6048785163.598:155): pid=10807 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.1503" name="nullb0" dev="tmpfs" ino=2194 res=0 errno=0 [ 273.102851][ T5869] Bluetooth: hci1: command 0x0405 tx timeout [ 273.979868][T10839] 9pnet_fd: Insufficient options for proto=fd [ 274.073685][ T5986] empeg 5-1:1.0: probe with driver empeg failed with error -71 [ 274.149858][ T5986] usb 5-1: USB disconnect, device number 41 [ 274.543108][ T5986] usb 5-1: new high-speed USB device number 42 using dummy_hcd [ 274.773214][ T5986] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x7 has invalid wMaxPacketSize 0 [ 274.798480][ T5986] usb 5-1: config 0 interface 0 altsetting 0 bulk endpoint 0x7 has invalid maxpacket 0 [ 274.818643][ T5986] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x89 has invalid wMaxPacketSize 0 [ 274.848525][ T5986] usb 5-1: config 0 interface 0 altsetting 0 bulk endpoint 0x89 has invalid maxpacket 0 [ 274.865086][T10864] netlink: 20 bytes leftover after parsing attributes in process `syz.3.1523'. [ 274.871808][ T5986] usb 5-1: New USB device found, idVendor=2040, idProduct=4900, bcdDevice=4d.8b [ 274.893029][ T5986] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 274.903221][T10865] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1522'. [ 274.912266][T10865] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1522'. [ 274.932945][ T5986] usb 5-1: config 0 descriptor?? [ 275.024086][T10865] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1522'. [ 275.079597][T10865] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1522'. [ 275.098831][T10865] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1522'. [ 275.117418][T10865] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1522'. [ 275.136521][T10865] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1522'. [ 275.143215][T10851] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 275.154538][T10865] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1522'. [ 275.173613][T10865] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1522'. [ 275.176704][T10851] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 275.542873][ T30] audit: type=1326 audit(6048785166.318:156): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10868 comm="syz.3.1524" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f83c078ebe9 code=0x0 [ 275.648644][T10851] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 275.658754][T10873] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 275.691824][T10851] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 275.716115][T10873] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 275.845453][ T5986] hdpvr 5-1:0.0: firmware version 0x0 dated [ 275.859677][ T5986] hdpvr 5-1:0.0: untested firmware, the driver might not work. [ 275.984172][ T5986] hdpvr 5-1:0.0: device init failed [ 275.989484][ T5986] hdpvr 5-1:0.0: probe with driver hdpvr failed with error -12 [ 276.063289][ T5986] usb 5-1: USB disconnect, device number 42 [ 276.064470][T10877] overlayfs: failed to resolve './file0': -2 [ 276.115024][T10880] overlayfs: failed to resolve './file0': -2 [ 276.399629][T10892] tipc: Failed to remove unknown binding: 66,1,1/0:125099702/125099704 [ 276.476809][T10892] tipc: Failed to remove unknown binding: 66,1,1/0:125099702/125099704 [ 276.510063][T10895] futex_wake_op: syz.3.1530 tries to shift op by -1; fix this program [ 276.812868][ T5906] usb 5-1: new high-speed USB device number 43 using dummy_hcd [ 276.983096][ T5906] usb 5-1: Using ep0 maxpacket: 16 [ 276.990369][ T5906] usb 5-1: unable to read config index 0 descriptor/start: -61 [ 277.012804][ T5906] usb 5-1: can't read configurations, error -61 [ 277.163154][ T5906] usb 5-1: new high-speed USB device number 44 using dummy_hcd [ 277.368306][ T5906] usb 5-1: Using ep0 maxpacket: 16 [ 277.393142][ T5906] usb 5-1: unable to read config index 0 descriptor/start: -61 [ 277.401016][ T5906] usb 5-1: can't read configurations, error -61 [ 277.412133][ T5906] usb usb5-port1: attempt power cycle [ 277.773056][ T5906] usb 5-1: new high-speed USB device number 45 using dummy_hcd [ 277.794177][ T5906] usb 5-1: Using ep0 maxpacket: 16 [ 277.801704][ T5906] usb 5-1: unable to read config index 0 descriptor/start: -61 [ 277.812220][ T5906] usb 5-1: can't read configurations, error -61 [ 277.942888][ T5906] usb 5-1: new high-speed USB device number 46 using dummy_hcd [ 277.973536][ T5906] usb 5-1: Using ep0 maxpacket: 16 [ 277.981771][ T5906] usb 5-1: unable to read config index 0 descriptor/start: -61 [ 277.992116][ T5906] usb 5-1: can't read configurations, error -61 [ 278.010223][ T5906] usb usb5-port1: unable to enumerate USB device [ 278.073270][T10924] overlayfs: failed to clone lowerpath [ 278.125219][T10926] overlayfs: failed to clone upperpath [ 278.998883][T10945] overlayfs: failed to clone lowerpath [ 279.185102][T10953] sctp: [Deprecated]: syz.3.1554 (pid 10953) Use of int in max_burst socket option. [ 279.185102][T10953] Use struct sctp_assoc_value instead [ 280.072974][ T5913] usb 5-1: new high-speed USB device number 47 using dummy_hcd [ 280.232930][ T5913] usb 5-1: Using ep0 maxpacket: 32 [ 280.244840][ T5913] usb 5-1: config 192 has an invalid interface number: 102 but max is 0 [ 280.256720][ T5913] usb 5-1: config 192 has an invalid descriptor of length 1, skipping remainder of the config [ 280.270716][ T5913] usb 5-1: config 192 has no interface number 0 [ 280.280254][ T5913] usb 5-1: config 192 interface 102 altsetting 7 has 0 endpoint descriptors, different from the interface descriptor's value: 13 [ 280.296169][ T5913] usb 5-1: config 192 interface 102 has no altsetting 0 [ 280.308408][ T5913] usb 5-1: New USB device found, idVendor=0403, idProduct=ef50, bcdDevice=fc.10 [ 280.318557][ T5913] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 280.329140][ T5913] usb 5-1: Product: 鵔➁竾뻺酹땧魘㻉؂돭㎑唫ᱝ͓࿘猐҄ꇝ쾙썇㕵쩙ꂩ屧ⲉ켐ᰭ旗箛畮憧༃꘦郋맚ɬﶗꀈ귥뫙鵄膛踴팒黼Ϥ鶦響◳絩皭ꔧⱃ怫٢둫킅ꊝ迧泯痓ഄ敮鸷摗Ӆ큈泮⿂巭춶ޖ렂拳歮尊9벢徸㏺暇鐧駌恘謜漣柲㢿룇׽▆得㱝Ỷ儹쐋囊烐篺㴽恡퓿 [ 280.364502][ T5913] usb 5-1: Manufacturer: 㠚緝㕍谫뛂鈡呬ᳮ㕟䆎上嗹杞峲鈡䎯煉챘몳ࡍ䱆폔ꋋꞵ屪ꩌ䜛繩抂㏑坑ᇵ䔭뒜٪財債ꤽ淍톗槓ꀌ곲䟵略™ㆶﺴᦘ冀숳쭢늼憓샂뀛㭯覿᫟耠ᙪ挦땒툽騏㘊性逪ઋ낥㥸딡厓䗪나鄳 [ 280.398044][ T5913] usb 5-1: SerialNumber: 㐉 [ 280.564245][T10968] overlayfs: failed to clone lowerpath [ 280.619119][T10963] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 280.637430][T10963] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 280.658031][ T5913] ftdi_sio 5-1:192.102: FTDI USB Serial Device converter detected [ 280.669177][ T5913] ftdi_sio ttyUSB0: unknown device type: 0xfc10 [ 280.681466][ T5913] usb 5-1: USB disconnect, device number 47 [ 280.697283][ T5913] ftdi_sio 5-1:192.102: device disconnected [ 281.452851][ T5986] usb 5-1: new high-speed USB device number 48 using dummy_hcd [ 281.602988][ T5986] usb 5-1: Using ep0 maxpacket: 32 [ 281.610311][ T5986] usb 5-1: config 155 has an invalid descriptor of length 0, skipping remainder of the config [ 281.625389][ T5986] usb 5-1: config 155 interface 0 altsetting 0 has an endpoint descriptor with address 0xE2, changing to 0x82 [ 281.637702][ T5986] usb 5-1: config 155 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 281.649310][ T5986] usb 5-1: config 155 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 11 [ 281.665781][ T5986] usb 5-1: New USB device found, idVendor=15c2, idProduct=ffdc, bcdDevice=bd.30 [ 281.675387][ T5986] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 281.683887][ T5986] usb 5-1: Product: syz [ 281.688281][ T5986] usb 5-1: Manufacturer: syz [ 281.693335][ T5986] usb 5-1: SerialNumber: syz [ 281.717037][ C0] imon 5-1:155.0: imon usb_rx_callback_intf0: status(-71) [ 281.732667][ T5986] input: iMON Panel, Knob and Mouse(15c2:ffdc) as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:155.0/input/input19 [ 281.927824][ T5986] imon:send_packet: packet tx failed (-71) [ 281.963011][ T5986] imon 5-1:155.0: panel buttons/knobs setup failed [ 281.972587][ T5986] imon 5-1:155.0: Unknown 0xffdc device, defaulting to VFD and iMON IR [ 281.987166][ T5986] (id 0x00) [ 282.052815][ T5986] rc_core: IR keymap rc-imon-pad not found [ 282.058658][ T5986] Registered IR keymap rc-empty [ 282.065168][ T5986] imon 5-1:155.0: Looks like you're trying to use an IR protocol this device does not support [ 282.075911][ T5986] imon 5-1:155.0: Unsupported IR protocol specified, overriding to iMON IR protocol [ 282.092908][ T5986] imon:send_packet: packet tx failed (-71) [ 282.112937][ T5986] imon 5-1:155.0: remote input dev register failed [ 282.119730][ T5986] imon 5-1:155.0: imon_init_intf0: rc device setup failed [ 282.146808][ T5986] imon 5-1:155.0: unable to initialize intf0, err 0 [ 282.154446][ T5986] imon:imon_probe: failed to initialize context! [ 282.160787][ T5986] imon 5-1:155.0: unable to register, err -19 [ 282.173486][ T5986] usb 5-1: USB disconnect, device number 48 [ 282.668814][T10995] openvswitch: netlink: Missing key (keys=40, expected=10000000) [ 282.862818][ T5913] usb 5-1: new high-speed USB device number 49 using dummy_hcd [ 283.002917][ T5913] usb 5-1: device descriptor read/64, error -71 [ 283.242878][ T5913] usb 5-1: new high-speed USB device number 50 using dummy_hcd [ 283.422909][ T5913] usb 5-1: device descriptor read/64, error -71 [ 283.543276][ T5913] usb usb5-port1: attempt power cycle [ 283.882882][ T5913] usb 5-1: new high-speed USB device number 51 using dummy_hcd [ 283.913540][ T5913] usb 5-1: device descriptor read/8, error -71 [ 284.152940][ T5913] usb 5-1: new high-speed USB device number 52 using dummy_hcd [ 284.176241][ T5913] usb 5-1: device descriptor read/8, error -71 [ 284.303325][ T5913] usb usb5-port1: unable to enumerate USB device [ 284.412517][T11041] __nla_validate_parse: 26 callbacks suppressed [ 284.412536][T11041] netlink: 184 bytes leftover after parsing attributes in process `syz.0.1587'. [ 286.483061][ T5906] usb 5-1: new high-speed USB device number 53 using dummy_hcd [ 286.642855][ T5906] usb 5-1: Using ep0 maxpacket: 32 [ 286.655689][ T5906] usb 5-1: config 1 interface 0 has no altsetting 0 [ 286.665762][ T5906] usb 5-1: New USB device found, idVendor=0eef, idProduct=7207, bcdDevice= 0.40 [ 286.681912][ T5906] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 286.690829][ T5906] usb 5-1: Product: syz [ 286.695121][ T5906] usb 5-1: Manufacturer: syz [ 286.699752][ T5906] usb 5-1: SerialNumber: syz [ 286.800800][T11099] tipc: Enabled bearer , priority 10 [ 286.927719][ T5906] usbhid 5-1:1.0: can't add hid device: -71 [ 286.933871][ T5906] usbhid 5-1:1.0: probe with driver usbhid failed with error -71 [ 286.953035][ T5906] usb 5-1: USB disconnect, device number 53 [ 288.159996][T11116] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 288.216640][T11117] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 289.023287][ T5906] usb 5-1: new high-speed USB device number 54 using dummy_hcd [ 289.231873][ T5986] libceph: connect (1)[c::]:6789 error -101 [ 289.238109][ T5906] usb 5-1: Using ep0 maxpacket: 8 [ 289.271020][ T5986] libceph: mon0 (1)[c::]:6789 connect error [ 289.277699][ T5906] usb 5-1: config 0 has an invalid interface number: 124 but max is 0 [ 289.310762][ T5906] usb 5-1: config 0 has no interface number 0 [ 289.317396][ T980] libceph: connect (1)[c::]:6789 error -101 [ 289.337477][T11148] netlink: 32 bytes leftover after parsing attributes in process `syz.2.1620'. [ 289.351739][ T980] libceph: mon0 (1)[c::]:6789 connect error [ 289.369962][ T5906] usb 5-1: New USB device found, idVendor=0a5c, idProduct=2033, bcdDevice=72.01 [ 289.408764][ T5906] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 289.432896][ T30] audit: type=1326 audit(6048785436.484:157): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11141 comm="syz.2.1620" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f499b38ebe9 code=0x0 [ 289.465892][ T5906] usb 5-1: Product: syz [ 289.480410][ T5906] usb 5-1: Manufacturer: syz [ 289.496922][ T5906] usb 5-1: SerialNumber: syz [ 289.583276][ T5986] libceph: connect (1)[c::]:6789 error -101 [ 289.589516][ T5986] libceph: mon0 (1)[c::]:6789 connect error [ 289.625795][ T5906] usb 5-1: config 0 descriptor?? [ 289.653349][ T5986] libceph: connect (1)[c::]:6789 error -101 [ 289.659425][ T5986] libceph: mon0 (1)[c::]:6789 connect error [ 289.850930][T11133] netlink: 16 bytes leftover after parsing attributes in process `syz.4.1618'. [ 289.866873][ T5913] usb 5-1: USB disconnect, device number 54 [ 290.002715][T11142] ceph: No mds server is up or the cluster is laggy [ 290.004102][T11145] ceph: No mds server is up or the cluster is laggy [ 290.509494][T11183] netlink: 44 bytes leftover after parsing attributes in process `syz.0.1632'. [ 290.522136][T11183] netlink: 'syz.0.1632': attribute type 6 has an invalid length. [ 290.530462][T11183] netlink: 'syz.0.1632': attribute type 5 has an invalid length. [ 290.538684][T11183] netlink: 'syz.0.1632': attribute type 4 has an invalid length. [ 290.693118][ T5913] usb 5-1: new high-speed USB device number 55 using dummy_hcd [ 290.869797][ T5913] usb 5-1: config 220 has an invalid interface number: 76 but max is 2 [ 290.878251][ T5913] usb 5-1: config 220 has an invalid descriptor of length 0, skipping remainder of the config [ 290.888966][ T5913] usb 5-1: config 220 has no interface number 2 [ 290.895528][ T5913] usb 5-1: config 220 interface 1 altsetting 5 has 0 endpoint descriptors, different from the interface descriptor's value: 12 [ 290.909100][ T5913] usb 5-1: config 220 interface 0 has no altsetting 0 [ 290.916123][ T5913] usb 5-1: config 220 interface 76 has no altsetting 0 [ 290.923297][ T5913] usb 5-1: config 220 interface 1 has no altsetting 0 [ 290.932284][ T5913] usb 5-1: New USB device found, idVendor=8086, idProduct=0b07, bcdDevice=6c.b9 [ 290.941933][ T5913] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 290.950213][ T5913] usb 5-1: Product: syz [ 290.954785][ T5913] usb 5-1: Manufacturer: syz [ 290.959445][ T5913] usb 5-1: SerialNumber: syz [ 291.206291][ T5913] usb 5-1: selecting invalid altsetting 0 [ 291.223264][ T5913] usb 5-1: Found UVC 7.01 device syz (8086:0b07) [ 291.229645][ T5913] usb 5-1: No valid video chain found. [ 291.266830][ T5913] usb 5-1: selecting invalid altsetting 0 [ 291.272611][ T5913] usbtest 5-1:220.1: probe with driver usbtest failed with error -22 [ 291.291405][ T5913] usb 5-1: USB disconnect, device number 55 [ 291.933154][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 292.004485][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 292.213638][T11231] ptrace attach of "./syz-executor exec"[5865] was attempted by "./syz-executor exec"[11231] [ 292.929833][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 293.023275][ T0] NOHZ tick-stop error: local softirq work is pending, handler #08!!! [ 293.097791][T11231] dns_resolver: Unsupported server list version (0) [ 293.343754][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 293.352632][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 293.363869][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 295.424325][T11288] fuse: Bad value for 'rootmode' [ 295.453350][ T30] audit: type=1326 audit(6048785442.484:158): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11284 comm="syz.3.1663" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f83c078ebe9 code=0x7ffc0000 [ 295.546353][ T30] audit: type=1326 audit(6048785442.484:159): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11284 comm="syz.3.1663" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f83c078ebe9 code=0x7ffc0000 [ 295.618202][ T30] audit: type=1326 audit(6048785442.494:160): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11284 comm="syz.3.1663" exe="/root/syz-executor" sig=0 arch=c000003e syscall=206 compat=0 ip=0x7f83c078ebe9 code=0x7ffc0000 [ 295.743504][ T30] audit: type=1326 audit(6048785442.494:161): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11284 comm="syz.3.1663" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f83c078ebe9 code=0x7ffc0000 [ 295.807302][ T30] audit: type=1326 audit(6048785442.494:162): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11284 comm="syz.3.1663" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f83c078ebe9 code=0x7ffc0000 [ 296.053133][ T30] audit: type=1326 audit(6048785442.504:163): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11284 comm="syz.3.1663" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f83c078ebe9 code=0x7ffc0000 [ 296.167648][ T30] audit: type=1326 audit(6048785442.504:164): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11284 comm="syz.3.1663" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f83c078ebe9 code=0x7ffc0000 [ 296.479028][T11317] tipc: Can't bind to reserved service type 2 [ 296.826677][T11321] netlink: 168 bytes leftover after parsing attributes in process `syz.3.1675'. [ 296.849639][ T30] audit: type=1326 audit(6048785442.514:165): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11284 comm="syz.3.1663" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f83c078ebe9 code=0x7ffc0000 [ 296.962849][ T30] audit: type=1326 audit(6048785442.514:166): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11284 comm="syz.3.1663" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f83c078ebe9 code=0x7ffc0000 [ 297.072805][ T30] audit: type=1326 audit(6048785442.514:167): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11284 comm="syz.3.1663" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f83c078ebe9 code=0x7ffc0000 [ 297.142837][ T5906] usb 5-1: new high-speed USB device number 56 using dummy_hcd [ 297.296666][ T5906] usb 5-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 297.305918][ T5906] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 297.369036][ T5906] usb 5-1: Product: syz [ 297.378716][ T5906] usb 5-1: Manufacturer: syz [ 297.385626][ T5906] usb 5-1: SerialNumber: syz [ 297.401342][ T5906] usb 5-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 297.416473][ T5867] usb 5-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 297.812428][ T5906] usb 5-1: USB disconnect, device number 56 [ 298.473570][ T5867] ath9k_htc 5-1:1.0: ath9k_htc: Target is unresponsive [ 298.483171][ T5867] ath9k_htc: Failed to initialize the device [ 298.501623][ T5906] usb 5-1: ath9k_htc: USB layer deinitialized [ 299.271070][T11355] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 299.280910][T11355] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 299.290737][T11355] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 300.459169][T11361] netlink: 168 bytes leftover after parsing attributes in process `syz.0.1686'. [ 301.183005][ T5869] Bluetooth: hci2: command 0x0c1a tx timeout [ 301.343093][ T5869] Bluetooth: hci3: command 0x0406 tx timeout [ 301.343100][ T5874] Bluetooth: hci1: command 0x0405 tx timeout [ 301.797862][T11371] IPv6: Can't replace route, no match found [ 305.515323][ T30] kauditd_printk_skb: 29 callbacks suppressed [ 305.515340][ T30] audit: type=1326 audit(6048785452.604:197): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11430 comm="syz.4.1711" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f19dcd8ebe9 code=0x7ffc0000 [ 305.740999][ T30] audit: type=1326 audit(6048785452.604:198): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11430 comm="syz.4.1711" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f19dcd8ebe9 code=0x7ffc0000 [ 305.881951][ T30] audit: type=1326 audit(6048785452.634:199): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11430 comm="syz.4.1711" exe="/root/syz-executor" sig=0 arch=c000003e syscall=273 compat=0 ip=0x7f19dcd8ebe9 code=0x7ffc0000 [ 305.945186][ T30] audit: type=1326 audit(6048785452.634:200): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11430 comm="syz.4.1711" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f19dcd8ebe9 code=0x7ffc0000 [ 306.021968][ T30] audit: type=1326 audit(6048785452.634:201): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11430 comm="syz.4.1711" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f19dcd8ebe9 code=0x7ffc0000 [ 312.556284][ T3565] bridge0: port 2(bridge_slave_1) entered disabled state [ 312.823173][T11565] netlink: 620 bytes leftover after parsing attributes in process `syz.4.1766'. [ 313.545021][T11597] input: syz1 as /devices/virtual/input/input21 [ 316.252212][T11642] binder: 11641:11642 unknown command 0 [ 316.261757][T11642] binder: 11641:11642 ioctl c0306201 200000000080 returned -22 [ 316.557516][ T30] audit: type=1326 audit(6048785463.624:202): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11629 comm="syz.3.1792" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f83c078ebe9 code=0x0 [ 317.119215][ T1304] ieee802154 phy0 wpan0: encryption failed: -22 [ 317.125647][ T1304] ieee802154 phy1 wpan1: encryption failed: -22 [ 317.262886][ T5934] usb 5-1: new high-speed USB device number 57 using dummy_hcd [ 317.442855][ T5934] usb 5-1: Using ep0 maxpacket: 32 [ 317.462215][ T5934] usb 5-1: config 0 interface 0 altsetting 0 bulk endpoint 0x85 has invalid maxpacket 1024 [ 317.503230][ T5934] usb 5-1: New USB device found, idVendor=12d8, idProduct=0001, bcdDevice=de.79 [ 317.512363][ T5934] usb 5-1: New USB device strings: Mfr=1, Product=236, SerialNumber=2 [ 317.531238][ T5934] usb 5-1: Product: syz [ 317.562871][ T5934] usb 5-1: Manufacturer: syz [ 317.576839][ T5934] usb 5-1: SerialNumber: syz [ 317.597733][ T5934] usb 5-1: config 0 descriptor?? [ 317.613655][T11664] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 317.970419][T11664] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 318.196227][T11664] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 318.236137][ T5906] usb 5-1: USB disconnect, device number 57 [ 318.822833][ T5906] usb 5-1: new high-speed USB device number 58 using dummy_hcd [ 319.042862][ T5906] usb 5-1: Using ep0 maxpacket: 8 [ 319.049686][ T5906] usb 5-1: config 1 interface 0 altsetting 8 has 2 endpoint descriptors, different from the interface descriptor's value: 1 [ 319.062963][ T5906] usb 5-1: config 1 interface 0 has no altsetting 0 [ 319.099965][ T5906] usb 5-1: New USB device found, idVendor=1e7d, idProduct=319c, bcdDevice= 0.40 [ 319.109195][ T5906] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 319.198832][ T5906] usb 5-1: Product: syz [ 319.212768][ T5906] usb 5-1: Manufacturer: syz [ 319.217405][ T5906] usb 5-1: SerialNumber: syz [ 319.240366][ T5906] usb 5-1: rejected 1 configuration due to insufficient available bus power [ 319.302053][ T5906] usb 5-1: no configuration chosen from 1 choice [ 320.236418][ T5934] usb 5-1: USB disconnect, device number 58 [ 320.322567][T11716] netlink: 'syz.4.1817': attribute type 1 has an invalid length. [ 320.347086][T11716] netlink: 180 bytes leftover after parsing attributes in process `syz.4.1817'. [ 323.386764][ T30] audit: type=1326 audit(6048785470.474:203): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11719 comm=6C2586CE36DB0CCF197CC94F7FCE8F exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f19dcd8ebe9 code=0x7ffc0000 [ 323.476076][ T30] audit: type=1326 audit(6048785470.514:204): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11719 comm=6C2586CE36DB0CCF197CC94F7FCE8F exe="/root/syz-executor" sig=0 arch=c000003e syscall=300 compat=0 ip=0x7f19dcd8ebe9 code=0x7ffc0000 [ 323.546115][ T30] audit: type=1326 audit(6048785470.514:205): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11719 comm=6C2586CE36DB0CCF197CC94F7FCE8F exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f19dcd8ebe9 code=0x7ffc0000 [ 324.185754][T11736] netlink: 156 bytes leftover after parsing attributes in process `syz.2.1826'. [ 330.844035][T11841] sctp: [Deprecated]: syz.2.1863 (pid 11841) Use of int in max_burst socket option deprecated. [ 330.844035][T11841] Use struct sctp_assoc_value instead [ 334.079466][T11877] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1873'. [ 337.894352][ T30] audit: type=1326 audit(6048785484.974:206): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11899 comm="syz.4.1881" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f19dcd8ebe9 code=0x0 [ 338.579481][T11918] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1889'. [ 338.589444][T11918] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1889'. [ 338.598782][T11918] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1889'. [ 340.473194][T11977] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1908'. [ 340.802286][ T30] audit: type=1326 audit(6048785487.864:207): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11980 comm="syz.4.1912" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f19dcd8ebe9 code=0x7ffc0000 [ 340.892920][ T30] audit: type=1326 audit(6048785487.864:208): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11980 comm="syz.4.1912" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f19dcd8ebe9 code=0x7ffc0000 [ 340.965381][ T30] audit: type=1326 audit(6048785487.864:209): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11980 comm="syz.4.1912" exe="/root/syz-executor" sig=0 arch=c000003e syscall=300 compat=0 ip=0x7f19dcd8ebe9 code=0x7ffc0000 [ 341.072534][ T30] audit: type=1326 audit(6048785487.864:210): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11980 comm="syz.4.1912" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f19dcd8ebe9 code=0x7ffc0000 [ 341.169965][ T30] audit: type=1326 audit(6048785487.864:211): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11980 comm="syz.4.1912" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f19dcd8ebe9 code=0x7ffc0000 [ 343.890086][ T30] audit: type=1326 audit(6048785490.974:212): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12011 comm="syz.4.1923" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f19dcd8ebe9 code=0x7fc00000 [ 344.542853][ T5934] usb 5-1: new high-speed USB device number 59 using dummy_hcd [ 344.732933][ T5934] usb 5-1: Using ep0 maxpacket: 32 [ 344.764976][ T5934] usb 5-1: config 0 interface 0 altsetting 9 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 344.779569][ T5934] usb 5-1: config 0 interface 0 has no altsetting 0 [ 344.813344][ T5934] usb 5-1: New USB device found, idVendor=0c70, idProduct=f00e, bcdDevice= 0.00 [ 344.870092][ T5934] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 344.974518][ T5934] usb 5-1: config 0 descriptor?? [ 345.034927][T12055] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1937'. [ 345.474634][ T5934] usbhid 5-1:0.0: can't add hid device: -71 [ 345.480997][ T5934] usbhid 5-1:0.0: probe with driver usbhid failed with error -71 [ 345.511523][ T5934] usb 5-1: USB disconnect, device number 59 [ 349.705134][ T5869] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 349.716584][ T5869] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 349.725419][ T5869] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 349.745457][ T5879] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 349.753138][ T5879] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 350.508418][T12138] chnl_net:caif_netlink_parms(): no params data found [ 351.496753][T12138] bridge0: port 1(bridge_slave_0) entered blocking state [ 351.510971][T12138] bridge0: port 1(bridge_slave_0) entered disabled state [ 351.552969][T12138] bridge_slave_0: entered allmulticast mode [ 351.560764][T12138] bridge_slave_0: entered promiscuous mode [ 351.637524][T12138] bridge0: port 2(bridge_slave_1) entered blocking state [ 351.644822][T12138] bridge0: port 2(bridge_slave_1) entered disabled state [ 351.855813][ T5879] Bluetooth: hci4: command tx timeout [ 352.444359][T12138] bridge_slave_1: entered allmulticast mode [ 352.474591][T12138] bridge_slave_1: entered promiscuous mode [ 352.667462][T12138] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 352.699161][T12138] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 352.854071][T12138] team0: Port device team_slave_0 added [ 352.880532][T12138] team0: Port device team_slave_1 added [ 352.989945][T12138] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 353.012541][T12138] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 353.050395][T12138] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 353.064992][T12138] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 353.071952][T12138] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 353.102538][T12138] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 353.221657][T12138] hsr_slave_0: entered promiscuous mode [ 353.241718][T12138] hsr_slave_1: entered promiscuous mode [ 353.253978][T12138] debugfs: 'hsr0' already exists in 'hsr' [ 353.269985][T12138] Cannot create hsr debugfs directory [ 353.563882][T12138] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 353.805241][T12138] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 353.907733][ T5879] Bluetooth: hci4: command tx timeout [ 353.945029][T12138] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 354.342703][T12138] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 354.816888][T12138] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 354.854278][T12138] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 354.871672][T12227] netlink: 'syz.2.1995': attribute type 11 has an invalid length. [ 354.942227][T12138] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 354.997208][T12138] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 355.211908][T12138] 8021q: adding VLAN 0 to HW filter on device bond0 [ 355.256338][T12138] 8021q: adding VLAN 0 to HW filter on device team0 [ 355.317685][ T79] bridge0: port 1(bridge_slave_0) entered blocking state [ 355.324820][ T79] bridge0: port 1(bridge_slave_0) entered forwarding state [ 355.519275][ T3565] bridge0: port 2(bridge_slave_1) entered blocking state [ 355.526490][ T3565] bridge0: port 2(bridge_slave_1) entered forwarding state [ 355.995844][ T5879] Bluetooth: hci4: command tx timeout [ 356.136193][T12138] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 356.238035][T12138] veth0_vlan: entered promiscuous mode [ 356.287420][T12138] veth1_vlan: entered promiscuous mode [ 356.436997][T12138] veth0_macvtap: entered promiscuous mode [ 356.486565][T12138] veth1_macvtap: entered promiscuous mode [ 356.554256][T12138] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 356.569027][T12138] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 356.628938][ T3543] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 356.655531][ T3543] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 356.677209][ T3543] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 356.722422][ T3543] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 356.887587][ T3565] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 356.907805][ T3565] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 356.958977][ T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 356.982688][ T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 358.084149][ T5879] Bluetooth: hci4: command tx timeout [ 358.510071][T12294] program syz.4.2014 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 358.583401][ T30] audit: type=1326 audit(6048785505.654:213): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12296 comm="syz.2.2016" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f499b38ebe9 code=0x7ffc0000 [ 358.621852][ T30] audit: type=1326 audit(6048785505.654:214): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12296 comm="syz.2.2016" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f499b38ebe9 code=0x7ffc0000 [ 358.662884][ T30] audit: type=1326 audit(6048785505.654:215): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12296 comm="syz.2.2016" exe="/root/syz-executor" sig=0 arch=c000003e syscall=56 compat=0 ip=0x7f499b38ebe9 code=0x7ffc0000 [ 358.717248][ T30] audit: type=1326 audit(6048785505.694:216): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12296 comm="syz.2.2016" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f499b38ebe9 code=0x7ffc0000 [ 358.757563][ T30] audit: type=1326 audit(6048785505.694:217): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12299 comm="syz.2.2016" exe="/root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f499b3c14a5 code=0x7ffc0000 [ 358.867943][ T30] audit: type=1326 audit(6048785505.734:218): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12296 comm="syz.2.2016" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f499b38ebe9 code=0x7ffc0000 [ 358.926055][ T30] audit: type=1326 audit(6048785505.774:219): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12296 comm="syz.2.2016" exe="/root/syz-executor" sig=0 arch=c000003e syscall=101 compat=0 ip=0x7f499b38ebe9 code=0x7ffc0000 [ 359.001881][ T30] audit: type=1326 audit(6048785505.774:220): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12296 comm="syz.2.2016" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f499b38ebe9 code=0x7ffc0000 [ 359.032037][ T30] audit: type=1326 audit(6048785505.774:221): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12296 comm="syz.2.2016" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f499b38ebe9 code=0x7ffc0000 [ 359.084940][T12312] netlink: 28 bytes leftover after parsing attributes in process `syz.4.2017'. [ 359.169370][ T30] audit: type=1326 audit(6048785506.064:222): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12308 comm="syz.2.2020" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f499b38ebe9 code=0x7ffc0000 [ 362.333560][ T5867] usb 5-1: new high-speed USB device number 60 using dummy_hcd [ 362.483643][ T5867] usb 5-1: Using ep0 maxpacket: 16 [ 362.499179][ T5867] usb 5-1: config 0 interface 0 altsetting 44 endpoint 0x83 has invalid wMaxPacketSize 0 [ 362.517151][ T5867] usb 5-1: config 0 interface 0 altsetting 44 has 1 endpoint descriptor, different from the interface descriptor's value: 17 [ 362.530745][ T5867] usb 5-1: config 0 interface 0 has no altsetting 0 [ 362.540138][ T5867] usb 5-1: New USB device found, idVendor=134c, idProduct=0002, bcdDevice=ec.7e [ 362.549699][ T5867] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 362.559900][ T5867] usb 5-1: Product: syz [ 362.572783][ T5867] usb 5-1: Manufacturer: syz [ 362.577397][ T5867] usb 5-1: SerialNumber: syz [ 362.585462][ T5867] usb 5-1: config 0 descriptor?? [ 362.597085][ T5867] input: syz syz as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/input/input22 [ 362.754215][T12364] netlink: 'syz.2.2037': attribute type 4 has an invalid length. [ 363.086880][ T5867] usb 5-1: USB disconnect, device number 60 [ 365.737252][ T30] kauditd_printk_skb: 18 callbacks suppressed [ 365.737269][ T30] audit: type=1326 audit(6048785512.824:241): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12407 comm="syz.2.2051" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f499b38ebe9 code=0x7ffc0000 [ 365.832284][ T30] audit: type=1326 audit(6048785512.824:242): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12407 comm="syz.2.2051" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f499b38ebe9 code=0x7ffc0000 [ 365.929503][ T30] audit: type=1326 audit(6048785512.864:243): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12407 comm="syz.2.2051" exe="/root/syz-executor" sig=0 arch=c000003e syscall=70 compat=0 ip=0x7f499b38ebe9 code=0x7ffc0000 [ 366.352963][ T983] usb 5-1: new high-speed USB device number 61 using dummy_hcd [ 366.504980][ T983] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 366.525030][ T983] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 366.596384][ T983] usb 5-1: New USB device found, idVendor=0d8c, idProduct=0022, bcdDevice= 0.00 [ 366.617236][ T983] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 366.640081][ T983] usb 5-1: config 0 descriptor?? [ 367.128734][ T983] cm6533_jd 0003:0D8C:0022.000F: unknown main item tag 0x0 [ 367.173206][ T983] cm6533_jd 0003:0D8C:0022.000F: unknown main item tag 0x0 [ 367.216653][ T983] input: HID 0d8c:0022 as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/0003:0D8C:0022.000F/input/input23 [ 367.261479][ T983] cm6533_jd 0003:0D8C:0022.000F: input,hiddev0,hidraw0: USB HID v0.00 Device [HID 0d8c:0022] on usb-dummy_hcd.4-1/input0 [ 367.333749][ T983] usb 5-1: USB disconnect, device number 61 [ 367.469855][T12428] fido_id[12428]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.4/usb5/report_descriptor': No such file or directory [ 367.660999][T12433] syz_tun: entered allmulticast mode [ 368.242837][ T5906] usb 5-1: new high-speed USB device number 62 using dummy_hcd [ 368.382858][ T5906] usb 5-1: device descriptor read/64, error -71 [ 368.532912][ T5867] usb 1-1: new high-speed USB device number 22 using dummy_hcd [ 368.560118][T12447] hsr_slave_0: hsr_addr_subst_dest: Unknown node [ 368.567115][T12447] hsr_slave_1: hsr_addr_subst_dest: Unknown node [ 368.633199][ T5906] usb 5-1: new high-speed USB device number 63 using dummy_hcd [ 368.703902][ T5867] usb 1-1: Using ep0 maxpacket: 32 [ 368.716048][ T5867] usb 1-1: config index 0 descriptor too short (expected 156, got 27) [ 368.724979][ T5867] usb 1-1: too many endpoints for config 0 interface 0 altsetting 191: 144, using maximum allowed: 30 [ 368.737635][ T5867] usb 1-1: config 0 interface 0 altsetting 191 endpoint 0x87 has an invalid bInterval 0, changing to 7 [ 368.764792][ T5867] usb 1-1: config 0 interface 0 altsetting 191 has 1 endpoint descriptor, different from the interface descriptor's value: 144 [ 368.784582][ T5906] usb 5-1: device descriptor read/64, error -71 [ 368.852657][ T5867] usb 1-1: config 0 interface 0 has no altsetting 0 [ 368.877434][ T5867] usb 1-1: New USB device found, idVendor=0f11, idProduct=1021, bcdDevice=86.66 [ 368.886879][ T5867] usb 1-1: New USB device strings: Mfr=85, Product=120, SerialNumber=172 [ 368.905608][ T5906] usb usb5-port1: attempt power cycle [ 368.911082][ T5867] usb 1-1: Product: syz [ 368.924042][ T5867] usb 1-1: Manufacturer: syz [ 368.932386][ T5867] usb 1-1: SerialNumber: syz [ 368.953464][ T5867] usb 1-1: config 0 descriptor?? [ 368.981625][ T5867] ldusb 1-1:0.0: Interrupt out endpoint not found (using control endpoint instead) [ 369.057157][ T5867] ldusb 1-1:0.0: LD USB Device #0 now attached to major 180 minor 0 [ 369.315897][ T5934] usb 1-1: USB disconnect, device number 22 [ 369.349745][ T5934] ldusb 1-1:0.0: LD USB Device #0 now disconnected [ 369.382826][ T5906] usb 5-1: new high-speed USB device number 64 using dummy_hcd [ 369.439184][ T5906] usb 5-1: device descriptor read/8, error -71 [ 369.693008][ T5906] usb 5-1: new high-speed USB device number 65 using dummy_hcd [ 369.723354][ T5906] usb 5-1: device descriptor read/8, error -71 [ 369.842882][ T5906] usb usb5-port1: unable to enumerate USB device [ 370.370404][T12461] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2068'. [ 370.750872][T12465] tipc: Enabling of bearer rejected, failed to enable media [ 370.877812][T12470] tipc: Enabling of bearer rejected, failed to enable media [ 371.515422][T12482] overlayfs: missing 'lowerdir' [ 373.956062][T12528] netlink: 64 bytes leftover after parsing attributes in process `syz.0.2092'. [ 376.454484][T12560] ptrace attach of "./syz-executor exec"[12138] was attempted by "./syz-executor exec"[12560] [ 376.506091][T12560] dns_resolver: Unsupported server list version (0) [ 378.550360][ T1304] ieee802154 phy0 wpan0: encryption failed: -22 [ 378.556942][ T1304] ieee802154 phy1 wpan1: encryption failed: -22 [ 379.629223][T12601] netlink: 44 bytes leftover after parsing attributes in process `syz.2.2119'. [ 379.660680][T12601] netlink: 'syz.2.2119': attribute type 6 has an invalid length. [ 379.691486][T12601] netlink: 'syz.2.2119': attribute type 5 has an invalid length. [ 379.729630][T12601] netlink: 'syz.2.2119': attribute type 4 has an invalid length. [ 380.183471][ T5914] usb 1-1: new high-speed USB device number 23 using dummy_hcd [ 380.266295][T12615] overlayfs: failed to clone upperpath [ 380.274567][T12616] overlayfs: failed to clone upperpath [ 380.308657][T12616] kernel read not supported for file /file1 (pid: 12616 comm: syz.3.2125) [ 380.319916][ T30] audit: type=1800 audit(6048785527.414:244): pid=12616 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.2125" name="file1" dev="mqueue" ino=31443 res=0 errno=0 [ 380.353553][ T5914] usb 1-1: Using ep0 maxpacket: 8 [ 380.360803][ T5914] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 380.392960][ T5914] usb 1-1: New USB device found, idVendor=2133, idProduct=0018, bcdDevice= 0.00 [ 380.402149][ T5914] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 380.423953][ T5914] usb 1-1: config 0 descriptor?? [ 380.657820][T12627] netlink: 65051 bytes leftover after parsing attributes in process `syz.4.2129'. [ 380.880654][ T5914] viewsonic 0003:2133:0018.0010: unknown main item tag 0x2 [ 380.898326][ T5914] viewsonic 0003:2133:0018.0010: item fetching failed at offset 6/7 [ 380.913049][ T5934] usb 5-1: new full-speed USB device number 66 using dummy_hcd [ 380.921042][T12633] netlink: 44 bytes leftover after parsing attributes in process `syz.2.2131'. [ 380.921932][ T5914] viewsonic 0003:2133:0018.0010: probe with driver viewsonic failed with error -22 [ 380.935584][T12633] netlink: 'syz.2.2131': attribute type 6 has an invalid length. [ 380.986577][T12633] netlink: 'syz.2.2131': attribute type 5 has an invalid length. [ 381.014143][T12633] netlink: 'syz.2.2131': attribute type 4 has an invalid length. [ 381.072979][ T5906] usb 1-1: USB disconnect, device number 23 [ 381.106152][ T5934] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 381.120601][ T5934] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 381.160600][ T5934] usb 5-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 381.177849][ T5934] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 381.202061][ T5934] usb 5-1: Product: syz [ 381.218231][ T5934] usb 5-1: Manufacturer: syz [ 381.228352][ T5934] usb 5-1: SerialNumber: syz [ 381.461078][ T5934] usb 5-1: 0:2 : does not exist [ 381.477855][ T5934] usb 5-1: 5:0: failed to get current value for ch 0 (-22) [ 381.543340][ T5934] usb 5-1: USB disconnect, device number 66 [ 381.680462][T12038] udevd[12038]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 381.718000][ T5874] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 381.732058][ T5874] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 381.740636][ T5874] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 381.750560][ T5874] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 381.758330][ T5874] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 382.042814][ T9] usb 1-1: new high-speed USB device number 24 using dummy_hcd [ 382.077572][T12651] chnl_net:caif_netlink_parms(): no params data found [ 382.223779][ T9] usb 1-1: config 0 interface 0 altsetting 32 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 382.234988][ T9] usb 1-1: config 0 interface 0 has no altsetting 0 [ 382.241808][ T9] usb 1-1: New USB device found, idVendor=045e, idProduct=00f9, bcdDevice= 0.00 [ 382.258054][ T9] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 382.275669][ T9] usb 1-1: config 0 descriptor?? [ 382.340501][T12651] bridge0: port 1(bridge_slave_0) entered blocking state [ 382.363227][T12651] bridge0: port 1(bridge_slave_0) entered disabled state [ 382.370933][T12651] bridge_slave_0: entered allmulticast mode [ 382.379633][T12651] bridge_slave_0: entered promiscuous mode [ 382.413054][T12651] bridge0: port 2(bridge_slave_1) entered blocking state [ 382.420323][T12651] bridge0: port 2(bridge_slave_1) entered disabled state [ 382.428065][T12651] bridge_slave_1: entered allmulticast mode [ 382.436567][T12651] bridge_slave_1: entered promiscuous mode [ 382.556535][T12651] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 382.581755][T12651] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 382.670384][T12651] team0: Port device team_slave_0 added [ 382.691539][ T9] microsoft 0003:045E:00F9.0011: unknown main item tag 0x0 [ 382.702417][T12651] team0: Port device team_slave_1 added [ 382.702851][ T9] microsoft 0003:045E:00F9.0011: unknown main item tag 0x0 [ 382.733646][ T9] microsoft 0003:045E:00F9.0011: unknown main item tag 0x0 [ 382.747307][ T9] microsoft 0003:045E:00F9.0011: unknown main item tag 0x0 [ 382.763417][ T9] microsoft 0003:045E:00F9.0011: unknown main item tag 0x0 [ 382.766427][T12651] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 382.778360][ T9] microsoft 0003:045E:00F9.0011: unknown main item tag 0x0 [ 382.779097][T12651] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 382.794171][ T9] microsoft 0003:045E:00F9.0011: unknown main item tag 0x0 [ 382.811765][ C1] vkms_vblank_simulate: vblank timer overrun [ 382.817940][T12651] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 382.848043][T12651] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 382.857295][T12651] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 382.861942][ T9] microsoft 0003:045E:00F9.0011: hidraw0: USB HID v0.00 Device [HID 045e:00f9] on usb-dummy_hcd.0-1/input0 [ 382.908824][T12651] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 382.956010][ T5934] usb 5-1: new high-speed USB device number 67 using dummy_hcd [ 382.963783][ T9] microsoft 0003:045E:00F9.0011: no inputs found [ 382.963803][ T9] microsoft 0003:045E:00F9.0011: could not initialize ff, continuing anyway [ 382.994705][ T9] usb 1-1: USB disconnect, device number 24 [ 383.051527][T12678] fido_id[12678]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.0/usb1/1-1/report_descriptor': No such file or directory [ 383.099450][T12651] hsr_slave_0: entered promiscuous mode [ 383.112279][T12651] hsr_slave_1: entered promiscuous mode [ 383.119778][T12651] debugfs: 'hsr0' already exists in 'hsr' [ 383.130804][T12651] Cannot create hsr debugfs directory [ 383.148471][T10581] syz_tun (unregistering): left allmulticast mode [ 383.163066][ T5934] usb 5-1: Using ep0 maxpacket: 8 [ 383.172972][ T5934] usb 5-1: New USB device found, idVendor=110a, idProduct=1450, bcdDevice=62.cb [ 383.182367][ T5934] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 383.192593][ T5934] usb 5-1: Product: syz [ 383.197221][ T5934] usb 5-1: Manufacturer: syz [ 383.201821][ T5934] usb 5-1: SerialNumber: syz [ 383.349514][T12651] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 383.414345][T12651] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 383.515900][T12651] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 383.615098][ T5934] mxuport 5-1:254.0: mxuport_recv_ctrl_urb - short read (0 / 4) [ 383.625025][T12651] netdevsim netdevsim3  (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 383.636037][ T5934] mxuport 5-1:254.0: probe with driver mxuport failed with error -5 [ 383.713266][ T9] usb 1-1: new high-speed USB device number 25 using dummy_hcd [ 383.756276][ T3543] bridge_slave_1: left allmulticast mode [ 383.761991][ T3543] bridge_slave_1: left promiscuous mode [ 383.773590][ T3543] bridge0: port 2(bridge_slave_1) entered disabled state [ 383.785678][ T3543] bridge_slave_0: left allmulticast mode [ 383.791333][ T3543] bridge_slave_0: left promiscuous mode [ 383.798045][ T3543] bridge0: port 1(bridge_slave_0) entered disabled state [ 383.823345][ T5874] Bluetooth: hci0: command tx timeout [ 383.831008][T12674] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 383.842401][T12674] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 383.853803][ T5914] usb 5-1: USB disconnect, device number 67 [ 383.872964][ T9] usb 1-1: Using ep0 maxpacket: 8 [ 383.886439][ T9] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 383.899404][ T9] usb 1-1: New USB device found, idVendor=2133, idProduct=0018, bcdDevice= 0.00 [ 383.908785][ T9] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 383.935505][ T9] usb 1-1: config 0 descriptor?? [ 384.258838][ T3543] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 384.270514][ T3543] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 384.281562][ T3543] bond0 (unregistering): (slave batadv0): Releasing backup interface [ 384.295618][ T3543] bond0 (unregistering): (slave wlan1): Releasing backup interface [ 384.318834][ T3543] bond0 (unregistering): Released all slaves [ 384.395844][ T9] viewsonic 0003:2133:0018.0012: unknown main item tag 0x2 [ 384.416786][ T9] viewsonic 0003:2133:0018.0012: item fetching failed at offset 6/7 [ 384.460538][ T9] viewsonic 0003:2133:0018.0012: probe with driver viewsonic failed with error -22 [ 384.518037][T12651] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 384.532604][T12651] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 384.545624][T12651] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 384.580347][ T9] usb 1-1: USB disconnect, device number 25 [ 384.590672][T12651] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 384.766560][ T3543] hsr_slave_0: left promiscuous mode [ 384.767239][ T5874] Bluetooth: hci1: unexpected event for opcode 0x2010 [ 384.780633][ T3543] hsr_slave_1: left promiscuous mode [ 384.786892][ T5874] Bluetooth: hci1: SCO packet for unknown connection handle 2414 [ 384.789572][ T3543] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 384.810957][ T3543] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 384.819511][ T3543] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 384.827161][ T3543] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 384.859316][ T3543] veth0_macvtap: left promiscuous mode [ 384.865939][ T3543] veth1_vlan: left promiscuous mode [ 385.596021][ T3543] team0 (unregistering): Port device team_slave_1 removed [ 385.660251][ T3543] team0 (unregistering): Port device team_slave_0 removed [ 386.300885][T12713] lo speed is unknown, defaulting to 1000 [ 386.353574][T12713] lo speed is unknown, defaulting to 1000 [ 386.396513][T12651] 8021q: adding VLAN 0 to HW filter on device bond0 [ 386.433044][T12713] lo speed is unknown, defaulting to 1000 [ 386.471081][T12651] 8021q: adding VLAN 0 to HW filter on device team0 [ 386.525996][ T1170] bridge0: port 1(bridge_slave_0) entered blocking state [ 386.533202][ T1170] bridge0: port 1(bridge_slave_0) entered forwarding state [ 386.622283][ T1170] bridge0: port 2(bridge_slave_1) entered blocking state [ 386.629478][ T1170] bridge0: port 2(bridge_slave_1) entered forwarding state [ 386.765789][ T3543] IPVS: stop unused estimator thread 0... [ 387.091690][T12713] infiniband syz2: set active [ 387.097439][T12713] infiniband syz2: added lo [ 387.104604][ T5914] lo speed is unknown, defaulting to 1000 [ 387.116356][T12651] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 387.192989][ T5934] usb 1-1: new full-speed USB device number 26 using dummy_hcd [ 387.202379][T12651] veth0_vlan: entered promiscuous mode [ 387.227135][T12651] veth1_vlan: entered promiscuous mode [ 387.270886][T12713] RDS/IB: syz2: added [ 387.276997][T12713] smc: adding ib device syz2 with port count 1 [ 387.284804][T12713] smc: ib device syz2 port 1 has no pnetid [ 387.296412][ T5914] lo speed is unknown, defaulting to 1000 [ 387.305668][T12651] veth0_macvtap: entered promiscuous mode [ 387.325896][T12713] lo speed is unknown, defaulting to 1000 [ 387.335420][T12651] veth1_macvtap: entered promiscuous mode [ 387.370554][ T5934] usb 1-1: unable to get BOS descriptor or descriptor too short [ 387.376427][T12651] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 387.383732][ T5934] usb 1-1: not running at top speed; connect to a high speed hub [ 387.399835][ T5934] usb 1-1: config 1 interface 0 has no altsetting 0 [ 387.410862][T12651] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 387.424224][ T5934] usb 1-1: string descriptor 0 read error: -22 [ 387.433244][ T5934] usb 1-1: New USB device found, idVendor=05ac, idProduct=0247, bcdDevice= 0.40 [ 387.445663][ T1170] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 387.453298][ T5934] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 387.505150][ T1170] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 387.515278][ T5934] input: bcm5974 as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.0/input/input25 [ 387.546504][ T1170] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 387.576592][T12742] 9pnet_fd: Insufficient options for proto=fd [ 387.587216][ T1170] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 387.716493][ T5222] bcm5974 1-1:1.0: could not read from device [ 387.764068][ T5222] bcm5974 1-1:1.0: could not read from device [ 387.770800][ T5934] usb 1-1: USB disconnect, device number 26 [ 387.798652][ T3543] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 387.811711][T12744] overlayfs: failed to clone upperpath [ 387.817709][ T3543] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 387.826595][T12356] bcm5974 1-1:1.0: could not read from device [ 387.889881][T12356] udevd[12356]: Error opening device "/dev/input/event4": No such file or directory [ 387.898785][ T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 387.909416][ T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 387.916923][T12356] udevd[12356]: Unable to EVIOCGABS device "/dev/input/event4" [ 387.917029][T12356] udevd[12356]: Unable to EVIOCGABS device "/dev/input/event4" [ 387.917129][T12356] udevd[12356]: Unable to EVIOCGABS device "/dev/input/event4" [ 387.917223][T12356] udevd[12356]: Unable to EVIOCGABS device "/dev/input/event4" [ 388.036809][T12746] netlink: 32 bytes leftover after parsing attributes in process `syz.3.2133'. [ 388.131622][T12713] lo speed is unknown, defaulting to 1000 [ 388.326001][T12713] lo speed is unknown, defaulting to 1000 [ 388.343277][ T9] usb 4-1: new high-speed USB device number 40 using dummy_hcd [ 388.503022][ T9] usb 4-1: Using ep0 maxpacket: 8 [ 388.527329][ T9] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 388.564267][ T9] usb 4-1: New USB device found, idVendor=2133, idProduct=0018, bcdDevice= 0.00 [ 388.604810][ T9] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 388.627307][ T9] usb 4-1: config 0 descriptor?? [ 388.742165][T12713] lo speed is unknown, defaulting to 1000 [ 388.788111][T12766] 9pnet_fd: Insufficient options for proto=fd [ 388.821511][T12767] overlayfs: upper fs does not support file handles, falling back to index=off. [ 388.832138][T12767] overlayfs: NFS export requires "index=on", falling back to nfs_export=off. [ 389.089637][ T9] viewsonic 0003:2133:0018.0013: unknown main item tag 0x2 [ 389.111161][ T9] viewsonic 0003:2133:0018.0013: item fetching failed at offset 6/7 [ 389.121112][ T9] viewsonic 0003:2133:0018.0013: probe with driver viewsonic failed with error -22 [ 389.148736][T12774] netlink: 32 bytes leftover after parsing attributes in process `syz.0.2174'. [ 389.305679][ T5914] usb 4-1: USB disconnect, device number 40 [ 389.311501][T12713] lo speed is unknown, defaulting to 1000 [ 389.602997][ T5934] usb 1-1: new full-speed USB device number 27 using dummy_hcd [ 389.775715][ T5934] usb 1-1: unable to get BOS descriptor or descriptor too short [ 389.785803][ T5934] usb 1-1: not running at top speed; connect to a high speed hub [ 389.791122][T12790] 9pnet_fd: Insufficient options for proto=fd [ 389.797022][ T5934] usb 1-1: config 33 has an invalid descriptor of length 1, skipping remainder of the config [ 389.816727][ T5934] usb 1-1: config 33 has 0 interfaces, different from the descriptor's value: 9 [ 389.837718][ T5934] usb 1-1: string descriptor 0 read error: -22 [ 389.845832][ T5934] usb 1-1: New USB device found, idVendor=05ac, idProduct=0247, bcdDevice= 0.40 [ 389.864324][ T5934] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 389.928566][T12794] netlink: 32 bytes leftover after parsing attributes in process `syz.3.2183'. [ 390.088070][ T9] usb 1-1: USB disconnect, device number 27 [ 390.094277][ T5906] usb 5-1: new full-speed USB device number 68 using dummy_hcd [ 390.214623][ T5914] usb 4-1: new high-speed USB device number 41 using dummy_hcd [ 390.232969][ T5906] usb 5-1: device descriptor read/64, error -71 [ 390.375766][ T5914] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x9 has invalid wMaxPacketSize 0 [ 390.385642][ T5914] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0xB has an invalid bInterval 97, changing to 7 [ 390.396802][ T5914] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0xB has invalid maxpacket 24929, setting to 1024 [ 390.409894][ T5914] usb 4-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 390.419496][ T5914] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 390.427569][ T5914] usb 4-1: Product: syz [ 390.431726][ T5914] usb 4-1: Manufacturer: syz [ 390.436563][ T5914] usb 4-1: SerialNumber: syz [ 390.447230][ T5914] usb 4-1: config 0 descriptor?? [ 390.455674][ T5914] usb 4-1: 0:0 : invalid sync pipe. bmAttributes 61, bLength 9, bSynchAddress 61 [ 390.472946][ T5906] usb 5-1: new full-speed USB device number 69 using dummy_hcd [ 390.615270][ T5906] usb 5-1: device descriptor read/64, error -71 [ 390.726935][ T5906] usb usb5-port1: attempt power cycle [ 390.941665][ T5914] usb 4-1: USB disconnect, device number 41 [ 390.970366][T12367] udevd[12367]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 391.097626][ T5906] usb 5-1: new full-speed USB device number 70 using dummy_hcd [ 391.123788][ T5906] usb 5-1: device descriptor read/8, error -71 [ 391.193629][T12818] netlink: 32 bytes leftover after parsing attributes in process `syz.0.2193'. [ 391.251771][T12820] ------------[ cut here ]------------ [ 391.259530][T12820] WARNING: mm/page_alloc.c:5129 at __alloc_frozen_pages_noprof+0x2c8/0x370, CPU#0: syz.0.2194/12820 [ 391.271466][T12820] Modules linked in: [ 391.276740][T12820] CPU: 0 UID: 0 PID: 12820 Comm: syz.0.2194 Not tainted syzkaller #0 PREEMPT(full) [ 391.286457][T12820] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 391.296935][T12820] RIP: 0010:__alloc_frozen_pages_noprof+0x2c8/0x370 [ 391.304190][T12820] Code: 74 10 4c 89 e7 89 54 24 0c e8 04 66 0d 00 8b 54 24 0c 49 83 3c 24 00 0f 85 a5 fe ff ff e9 a6 fe ff ff c6 05 9a 5f b8 0d 01 90 <0f> 0b 90 e9 18 ff ff ff a9 00 00 08 00 48 8b 4c 24 10 4c 8d 44 24 [ 391.323813][ C0] vkms_vblank_simulate: vblank timer overrun [ 391.330839][T12820] RSP: 0018:ffffc9001964f880 EFLAGS: 00010246 [ 391.337028][T12820] RAX: ffffc9001964f800 RBX: 000000000000001c RCX: 0000000000000000 [ 391.345848][T12820] RDX: 0000000000000000 RSI: 0000000000000000 RDI: ffffc9001964f8e8 [ 391.354077][T12820] RBP: ffffc9001964f970 R08: ffffc9001964f8e7 R09: 0000000000000000 [ 391.362403][T12820] R10: ffffc9001964f8c0 R11: fffff520032c9f1d R12: 0000000000000000 [ 391.370791][T12820] R13: 1ffff920032c9f14 R14: 0000000000040d40 R15: dffffc0000000000 [ 391.379081][T12820] FS: 00007f64d404a6c0(0000) GS:ffff8881257b3000(0000) knlGS:0000000000000000 [ 391.388052][T12820] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 391.394695][T12820] CR2: 0000200000002100 CR3: 000000006e8f2000 CR4: 00000000003526f0 [ 391.402674][T12820] Call Trace: [ 391.405998][T12820] [ 391.408946][T12820] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 391.415324][T12820] ? p9_client_clunk+0x1b6/0x250 [ 391.420270][T12820] alloc_pages_mpol+0x232/0x4a0 [ 391.426315][T12820] ___kmalloc_large_node+0x5f/0x1b0 [ 391.431532][T12820] __kmalloc_large_node_noprof+0x18/0x90 [ 391.437231][T12820] __kmalloc_noprof+0x4bd/0x7f0 [ 391.442116][T12820] ? v9fs_fid_get_acl+0x4f/0x100 [ 391.447127][T12820] ? __pfx_v9fs_cache_inode_get_cookie+0x10/0x10 [ 391.453493][T12820] v9fs_fid_get_acl+0x4f/0x100 [ 391.458411][T12820] v9fs_get_acl+0x11b/0x360 [ 391.463348][T12820] v9fs_inode_from_fid_dotl+0x221/0x2b0 [ 391.468913][T12820] v9fs_mount+0x6eb/0xa50 [ 391.473706][T12820] ? __pfx_v9fs_mount+0x10/0x10 [ 391.478572][T12820] legacy_get_tree+0xfa/0x1a0 [ 391.483363][T12820] ? __pfx_v9fs_mount+0x10/0x10 [ 391.488236][T12820] vfs_get_tree+0x8f/0x2b0 [ 391.492656][T12820] do_new_mount+0x302/0xa10 [ 391.497218][T12820] ? apparmor_capable+0x137/0x1b0 [ 391.502337][T12820] ? __pfx_do_new_mount+0x10/0x10 [ 391.507445][T12820] ? ns_capable+0x8a/0xf0 [ 391.511779][T12820] ? path_mount+0x61c/0xfe0 [ 391.516348][T12820] ? kmem_cache_free+0x19a/0x690 [ 391.521291][T12820] __se_sys_mount+0x313/0x410 [ 391.526067][T12820] ? __pfx___se_sys_mount+0x10/0x10 [ 391.531273][T12820] ? do_syscall_64+0xbe/0xfa0 [ 391.536010][T12820] ? __x64_sys_mount+0x20/0xc0 [ 391.540797][T12820] do_syscall_64+0xfa/0xfa0 [ 391.545362][T12820] ? lockdep_hardirqs_on+0x9c/0x150 [ 391.550569][T12820] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 391.556679][T12820] ? clear_bhb_loop+0x60/0xb0 [ 391.561493][T12820] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 391.567837][T12820] RIP: 0033:0x7f64d318ebe9 [ 391.572683][T12820] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 391.592363][ C0] vkms_vblank_simulate: vblank timer overrun [ 391.598429][T12820] RSP: 002b:00007f64d404a038 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 391.606917][T12820] RAX: ffffffffffffffda RBX: 00007f64d33c5fa0 RCX: 00007f64d318ebe9 [ 391.614924][T12820] RDX: 0000200000000b80 RSI: 00002000000003c0 RDI: 0000000000000000 [ 391.622952][T12820] RBP: 00007f64d3211e19 R08: 0000200000000580 R09: 0000000000000000 [ 391.630950][T12820] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 391.638943][T12820] R13: 00007f64d33c6038 R14: 00007f64d33c5fa0 R15: 00007ffd82e14a48 [ 391.646997][T12820] [ 391.650022][T12820] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 391.657308][T12820] CPU: 0 UID: 0 PID: 12820 Comm: syz.0.2194 Not tainted syzkaller #0 PREEMPT(full) [ 391.666675][T12820] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 391.676731][T12820] Call Trace: [ 391.680013][T12820] [ 391.682947][T12820] dump_stack_lvl+0x99/0x250 [ 391.687549][T12820] ? __asan_memcpy+0x40/0x70 [ 391.692151][T12820] ? __pfx_dump_stack_lvl+0x10/0x10 [ 391.697346][T12820] ? __pfx__printk+0x10/0x10 [ 391.701944][T12820] vpanic+0x237/0x6d0 [ 391.705910][T12820] ? __pfx_vpanic+0x10/0x10 [ 391.710419][T12820] ? is_bpf_text_address+0x292/0x2b0 [ 391.715689][T12820] ? is_bpf_text_address+0x26/0x2b0 [ 391.720877][T12820] panic+0xb9/0xc0 [ 391.724584][T12820] ? __pfx_panic+0x10/0x10 [ 391.728999][T12820] __warn+0x334/0x4c0 [ 391.732965][T12820] ? __alloc_frozen_pages_noprof+0x2c8/0x370 [ 391.738931][T12820] ? __alloc_frozen_pages_noprof+0x2c8/0x370 [ 391.744897][T12820] report_bug+0x2be/0x4f0 [ 391.749214][T12820] ? __alloc_frozen_pages_noprof+0x2c8/0x370 [ 391.755181][T12820] ? __alloc_frozen_pages_noprof+0x2c8/0x370 [ 391.761150][T12820] ? __alloc_frozen_pages_noprof+0x2ca/0x370 [ 391.767114][T12820] handle_bug+0x84/0x160 [ 391.771343][T12820] exc_invalid_op+0x1a/0x50 [ 391.775841][T12820] asm_exc_invalid_op+0x1a/0x20 [ 391.780675][T12820] RIP: 0010:__alloc_frozen_pages_noprof+0x2c8/0x370 [ 391.787250][T12820] Code: 74 10 4c 89 e7 89 54 24 0c e8 04 66 0d 00 8b 54 24 0c 49 83 3c 24 00 0f 85 a5 fe ff ff e9 a6 fe ff ff c6 05 9a 5f b8 0d 01 90 <0f> 0b 90 e9 18 ff ff ff a9 00 00 08 00 48 8b 4c 24 10 4c 8d 44 24 [ 391.806840][T12820] RSP: 0018:ffffc9001964f880 EFLAGS: 00010246 [ 391.812893][T12820] RAX: ffffc9001964f800 RBX: 000000000000001c RCX: 0000000000000000 [ 391.820846][T12820] RDX: 0000000000000000 RSI: 0000000000000000 RDI: ffffc9001964f8e8 [ 391.828810][T12820] RBP: ffffc9001964f970 R08: ffffc9001964f8e7 R09: 0000000000000000 [ 391.836766][T12820] R10: ffffc9001964f8c0 R11: fffff520032c9f1d R12: 0000000000000000 [ 391.844723][T12820] R13: 1ffff920032c9f14 R14: 0000000000040d40 R15: dffffc0000000000 [ 391.852695][T12820] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 391.859031][T12820] ? p9_client_clunk+0x1b6/0x250 [ 391.863954][T12820] alloc_pages_mpol+0x232/0x4a0 [ 391.868794][T12820] ___kmalloc_large_node+0x5f/0x1b0 [ 391.873981][T12820] __kmalloc_large_node_noprof+0x18/0x90 [ 391.879599][T12820] __kmalloc_noprof+0x4bd/0x7f0 [ 391.884434][T12820] ? v9fs_fid_get_acl+0x4f/0x100 [ 391.889357][T12820] ? __pfx_v9fs_cache_inode_get_cookie+0x10/0x10 [ 391.895676][T12820] v9fs_fid_get_acl+0x4f/0x100 [ 391.900431][T12820] v9fs_get_acl+0x11b/0x360 [ 391.904923][T12820] v9fs_inode_from_fid_dotl+0x221/0x2b0 [ 391.910457][T12820] v9fs_mount+0x6eb/0xa50 [ 391.914774][T12820] ? __pfx_v9fs_mount+0x10/0x10 [ 391.919617][T12820] legacy_get_tree+0xfa/0x1a0 [ 391.924282][T12820] ? __pfx_v9fs_mount+0x10/0x10 [ 391.929117][T12820] vfs_get_tree+0x8f/0x2b0 [ 391.933522][T12820] do_new_mount+0x302/0xa10 [ 391.938009][T12820] ? apparmor_capable+0x137/0x1b0 [ 391.943023][T12820] ? __pfx_do_new_mount+0x10/0x10 [ 391.948034][T12820] ? ns_capable+0x8a/0xf0 [ 391.952347][T12820] ? path_mount+0x61c/0xfe0 [ 391.956835][T12820] ? kmem_cache_free+0x19a/0x690 [ 391.961763][T12820] __se_sys_mount+0x313/0x410 [ 391.966429][T12820] ? __pfx___se_sys_mount+0x10/0x10 [ 391.971618][T12820] ? do_syscall_64+0xbe/0xfa0 [ 391.976284][T12820] ? __x64_sys_mount+0x20/0xc0 [ 391.981038][T12820] do_syscall_64+0xfa/0xfa0 [ 391.985533][T12820] ? lockdep_hardirqs_on+0x9c/0x150 [ 391.990716][T12820] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 391.996762][T12820] ? clear_bhb_loop+0x60/0xb0 [ 392.001421][T12820] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 392.007294][T12820] RIP: 0033:0x7f64d318ebe9 [ 392.011701][T12820] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 392.031291][T12820] RSP: 002b:00007f64d404a038 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 392.039693][T12820] RAX: ffffffffffffffda RBX: 00007f64d33c5fa0 RCX: 00007f64d318ebe9 [ 392.047652][T12820] RDX: 0000200000000b80 RSI: 00002000000003c0 RDI: 0000000000000000 [ 392.055606][T12820] RBP: 00007f64d3211e19 R08: 0000200000000580 R09: 0000000000000000 [ 392.063563][T12820] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 392.071518][T12820] R13: 00007f64d33c6038 R14: 00007f64d33c5fa0 R15: 00007ffd82e14a48 [ 392.079488][T12820] [ 392.082755][T12820] Kernel Offset: disabled [ 392.087062][T12820] Rebooting in 86400 seconds..