last executing test programs: 12m41.023941812s ago: executing program 32 (id=453): r0 = syz_open_dev$sndctrl(&(0x7f0000000000), 0x1, 0x0) r1 = accept(0xffffffffffffffff, &(0x7f0000000040)=@nl=@unspec, &(0x7f00000000c0)=0x80) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000840)={0x0, 0x5, &(0x7f0000000100)=@framed={{0x18, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x1}, [@map_fd={0x18, 0x1, 0x1, 0x0, 0x1}]}, &(0x7f0000000140)='GPL\x00', 0x2, 0xda, &(0x7f0000000180)=""/218, 0xf6054b9c49695e00, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000780)={0x3, 0x1}, 0x8, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000007c0)=[0x1, r0, 0x1, 0x1, 0x1]}, 0x94) setsockopt$sock_attach_bpf(r1, 0x1, 0x32, &(0x7f0000000900)=r2, 0x4) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0) r3 = syz_open_dev$tty20(0xc, 0x4, 0x1) r4 = socket$alg(0x26, 0x5, 0x0) bind$alg(r4, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-camellia-aesni\x00'}, 0x58) sendmsg$kcm(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000001c80)=[{&(0x7f0000000600)="23e8d32682044b1aea93aa4555b24dafb496d785d0dbf07b4316168cc5a6a8dd21f376d97d75ce4960fc9312fb9bdc83b7949c4f2a43ab467980eeb1b152c47e352bd726a5133cd8015eb017ad81487f280481d1f9c4c0ce0b6b9fea711f5c639afeb7d2d788954750788986380c0a98ee1f118b24199ede4094292b9f6b62dd2a1913cc58fd7a3ac49f633632ac7e8c521596401e51844dae173a238d87f07168a59c64c68f5c5b64581739ebbd9df4b0834a26e2190aab93a140b21dbae9762b89d98b48399d1a365f028649b8f106c6c9d9b19b39bdbbca9022dffb05d58c9fee01cf88", 0xe5}, {&(0x7f0000000940)="447ee3b4212bcf35d142a87fda51c05cb118230e7a8a5a6f798db6e01cacb544f783a87cf17cd21e4338f7de5c6650ac158eb6002be85f5b8ac59e399b42e5ce19a463fabafee56ad00b8ab03fd98a9dd0bcec9910762b65bfd84af48626bb83398890ed03555a7cfe19ad55a4acb18418366625066bad998fcec03d8e2299d8cb46dab90d5af855a252620a4263866013764f842f4f887a7b264257fe4b2bea9d83d004caa5907778082b6720553e7a5f069c4d19cf4198d0eaf78b190abd3b78aa8e27fec3aac72bbf1a0877b9786d9741a6d1dcaed3466123bf3946ac5b582c6333e11971a5fbc6388416e8a9595bf8faac17", 0xf4}, {&(0x7f0000000a40)="8f02e3565c52b0383438d682e9cec9094f652e51e7f42678ebc6cd97fd941160dac5cd0d308a6c3cdbeb0581a389241e31c4c1a3c7abb00e34d43f71680a0dcff53558527d9a680a7b19d151801ceb713158d845ef407bf9a371b48e7f6ac0702843f9790c371494ced6dcc0d3114240afe13b182d361f3171c48c7811ec2880ff0265c73f3856f6dacb8316d99d42336a6bbe3c81a438269e71efb8db01d1d2d31720ab6b3ef7985caf53d23bc3ecd7a4bed188d07f39dc9bf0474e3af67cb61d8c4504697f065527e14f1c761e50139194aac59785aaa8ac9707f2c2fc7a", 0xdf}, {&(0x7f0000000540)="7ac19d79dbd587f797c6100b33847253c4b3bfdb880c8f8ea479386ad5ac110de0863105748dd4c6bb2847ea8e6b2ecfdfc189b63f0c5f64a864c24880df3743f4cf78a1d1cb1e5a96d57cad2c", 0x4d}, {&(0x7f0000000700)="1ebbfa809aed1fe935bf788625d5ba4ea092b3d1c3d4cacd94c6adf2e4564b2d80bcce66c257c4e27a16b51a407df5e40a6bb8f7e0c12d90e56c8490cbaffe39f9cdf808a45a7f667252ca016ca9b7c06ba1dd5dc86085f5dcc755484863496628abb0efb358af8c0373652cde4a", 0x6e}, {0x0}, {0x0}, {0x0}], 0x8, &(0x7f0000001d00)=[{0x18, 0x109, 0x400, "df"}, {0xd0, 0x88, 0x101, "d5bf05e7729cfa9f9355fe9def836b05ede6f32877b284065ca11fc037ed04497d3106656f151acf318533b157e5578ec8c44fc3c765a13ba5e17708b493de3d70865cdec15b0c98bbbd21577673ec006b1eb5f59a50bf27d344ef928f2b8254b67ce224dabed9e17fa490bbfcacea439ce56c4c109944afbb9c6b11b66d6d2b0602a7e27322491b13a7ca28e04914b864f8e1df07a843cea5a1e6a2cb1444e2974113923f089931af26352852f4c74850d70d4757dbe2f318"}, {0x90, 0x119, 0x0, "773e8e4df532d20f3c2f81f71ffb9cb18647f3351b5f678a5fe7e77a3be5aa8780a852fcd0e246eb3911827e9318699078038001c587f0b8200727c0909172bb699348b2a6a652995d09e4fb00c97a881e183bc8a344da683f281d5b995f0e7c3f8d3b4fb198eafe1366c5ce255b471ec1a4b0310eecb90c49"}, {0x20, 0x0, 0x8, "185f99848be7001ec8"}, {0x18, 0x52, 0x40000000, "b126e7"}, {0x60, 0x108, 0x7, "fa2200eb483cbe7f12c99314532740cde9a519987833fe8f12e197d59b0c6c815b87b16c714dbbb1c0e119f2228ee8350fde9e8f2e9f7bb8248ea0cc4e973365c3e4a06b93fd0f5764"}], 0x210}, 0x0) setsockopt$ALG_SET_KEY(r4, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r5 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000300)={'ip6_vti0\x00'}) sendto$packet(r5, 0x0, 0x0, 0x0, 0x0, 0x0) r6 = accept4(r4, 0x0, 0x0, 0x800) sendmmsg$alg(r6, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048"}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r6, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) write$binfmt_misc(r3, &(0x7f0000000240), 0xfffffecc) 11m19.010795643s ago: executing program 33 (id=952): connect$unix(0xffffffffffffffff, &(0x7f0000000300)=@abs, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f00000bd000), 0x318, 0x0) ioctl$sock_SIOCSIFVLAN_SET_VLAN_EGRESS_PRIORITY_CMD(0xffffffffffffffff, 0x8983, 0x0) r0 = syz_io_uring_setup(0x876, &(0x7f0000000140)={0x0, 0x114df, 0x0, 0x0, 0x89}, &(0x7f0000000240)=0x0, &(0x7f0000000200)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) r3 = io_uring_register$IORING_REGISTER_PERSONALITY(r0, 0x9, 0x0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f00000002c0)=@IORING_OP_WRITE_FIXED={0x5, 0x0, 0x0, @fd, 0x4, 0x0, 0x2, 0x0, 0x1, {0x0, r3}}) io_uring_enter(r0, 0x3516, 0xaddf, 0x2, 0x0, 0x1517f) 11m1.254680701s ago: executing program 34 (id=1062): socket$inet6(0xa, 0x80002, 0x88) bpf$MAP_CREATE(0x0, 0x0, 0x0) r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0xb, &(0x7f00000004c0)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020000000000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f00000000c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) close(r0) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r1, 0x0) recvmmsg(r0, &(0x7f00000055c0), 0x400023c, 0x300, 0x0) 8m48.47367411s ago: executing program 7 (id=1510): prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(0x0, 0x2, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0600000004000000ff0f000007"], 0x48) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000400007b8af8ff00000000bfa200000000000007020000fcffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000340)={&(0x7f0000000400)='sched_switch\x00', r3}, 0x18) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000640)={0x3, &(0x7f0000000300)=[{0x15, 0x1, 0x0, 0xffffffff}, {0x54, 0xfe}, {0x6, 0x0, 0x0, 0xfff}]}) 8m39.840709551s ago: executing program 7 (id=1525): socket$nl_route(0x10, 0x3, 0x0) socket(0x400000000010, 0x3, 0x0) r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x25, &(0x7f0000000200)=0x474c, 0x4) bind$inet(r0, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x10) connect$inet(r0, &(0x7f0000000480)={0x2, 0x4e22, @multicast1}, 0x10) sendmmsg(r0, &(0x7f0000007fc0), 0x800001d, 0x0) r1 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000800000000bf91000000000000b702000043e7b5538500000085000000b70000000000000095"], &(0x7f0000000180)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x23, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x11, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000120000002400000008000000850000000500000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x8000}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000140)='kmem_cache_free\x00', r2}, 0x10) ppoll(&(0x7f0000000500)=[{r1}], 0x1, 0x0, 0x0, 0x0) pselect6(0x40, &(0x7f00000001c0)={0x0, 0x0, 0x3, 0x8000000000, 0x1}, 0x0, &(0x7f00000002c0)={0x3ff, 0x0, 0x0, 0x3, 0x0, 0x0, 0x7fffffff, 0xfffffffffffffffc}, 0x0, 0x0) 8m36.548520404s ago: executing program 7 (id=1532): prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f0000000340)=0x8000000000002) sched_setscheduler(r0, 0x2, &(0x7f0000000240)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f066bbee3, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f00000002c0)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r3}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x7}}]}, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x3a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r4}, 0x10) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0x13, &(0x7f0000000080)=ANY=[@ANYBLOB="18080000000000000000000002000000851000000600000018020000", @ANYRES32, @ANYBLOB="00000000000000006600020000000000180000000000000000000000000000009500040000000000360a020000000000180100002020782500000000002020207b1a20fe00000000bfa100000000000007010000f8ffffffb702000008000000b50a000000000000850000000600000095000000000000"], &(0x7f0000000000)='GPL\x00', 0x2, 0xde, &(0x7f0000000340)=""/222}, 0x94) 8m34.645934587s ago: executing program 7 (id=1536): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000002200)=0x1) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = syz_io_uring_setup(0x2, &(0x7f0000000180)={0x0, 0x289b, 0x10000, 0x1, 0x31f}, 0x0, 0x0) io_uring_register$IORING_UNREGISTER_EVENTFD(r0, 0x5, 0x0, 0x0) r1 = syz_open_dev$MSR(&(0x7f0000000200), 0x0, 0x0) read$msr(r1, &(0x7f0000010200)=""/102400, 0x19000) openat$sequencer(0xffffffffffffff9c, 0x0, 0x0, 0x0) r2 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$IP_VS_SO_SET_ADD(r2, 0x0, 0x482, &(0x7f0000000040)={0x84, @dev={0xac, 0x14, 0x14, 0x7}, 0x4e24, 0x3, 'lblc\x00', 0x25, 0x4, 0x38}, 0x2c) r3 = socket$kcm(0xa, 0x2, 0x0) sendmsg$sock(r3, &(0x7f0000000400)={&(0x7f0000000580)=@in6={0x2, 0x4e22, 0x0, @dev}, 0x80, 0x0, 0x0, &(0x7f0000000000)=[@mark={{0x14, 0x1, 0x24, 0x3}}], 0x18}, 0x0) 8m33.629273734s ago: executing program 7 (id=1537): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000740)=ANY=[@ANYBLOB="180000", @ANYBLOB], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={0x0}, 0x18) bpf$ITER_CREATE(0xb, &(0x7f0000000100), 0x0) r3 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000040)='/sys/power/resume', 0x141b82, 0x0) write$cgroup_int(r3, &(0x7f0000000000)=0x10000000000700, 0xfffffd65) 8m31.470835432s ago: executing program 7 (id=1539): setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x210000000013, 0x0, 0x0) bind$inet(0xffffffffffffffff, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000000)=0x2) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000032680)=""/102392, 0x18ff8) socket(0x10, 0x803, 0x0) openat$sequencer2(0xffffffffffffff9c, 0x0, 0x202, 0x0) connect$unix(0xffffffffffffffff, 0x0, 0x0) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/partitions\x00', 0x0, 0x0) r2 = openat$sysctl(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sys/vm/drop_caches\x00', 0x1, 0x0) sendfile(r2, r1, &(0x7f00000000c0)=0x58, 0x10) 8m16.314452993s ago: executing program 35 (id=1539): setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x210000000013, 0x0, 0x0) bind$inet(0xffffffffffffffff, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000000)=0x2) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000032680)=""/102392, 0x18ff8) socket(0x10, 0x803, 0x0) openat$sequencer2(0xffffffffffffff9c, 0x0, 0x202, 0x0) connect$unix(0xffffffffffffffff, 0x0, 0x0) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/partitions\x00', 0x0, 0x0) r2 = openat$sysctl(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sys/vm/drop_caches\x00', 0x1, 0x0) sendfile(r2, r1, &(0x7f00000000c0)=0x58, 0x10) 7m45.290762381s ago: executing program 6 (id=1608): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r1) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$tipc(&(0x7f0000000080), r2) sendmsg$TIPC_CMD_ENABLE_BEARER(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c657230"], 0x38}}, 0x0) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x305200, 0x0) close(r4) r5 = socket$unix(0x1, 0x1, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000440)=@newqdisc={0x58, 0x24, 0x4ee4e6a52ff56541, 0x70bd2c, 0xffffffff, {0x0, 0x0, 0x0, r7, {0x0, 0xb}, {0xffff, 0xffff}, {0xffff}}, [@qdisc_kind_options=@q_sfb={{0x8}, {0x2c, 0x2, @TCA_SFB_PARMS={0x28, 0x1, {0xa, 0x7f61, 0x1, 0xc5, 0xe23, 0x3, 0x1, 0x7fff, 0x1}}}}]}, 0x58}, 0x1, 0x0, 0x0, 0x20008001}, 0x0) ioctl$SIOCSIFHWADDR(r4, 0x8922, &(0x7f0000002280)={'syzkaller0\x00', @random="2b0100004ec6"}) 7m40.436862637s ago: executing program 6 (id=1617): socket$nl_generic(0x10, 0x3, 0x10) socket$nl_netfilter(0x10, 0x3, 0xc) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_RECV(0xffffffffffffffff, 0xc0502100, 0x0) sched_setattr(0x0, &(0x7f0000000200)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffdfffffffffe, 0xfa11, 0x4}, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFQNL_MSG_CONFIG(0xffffffffffffffff, &(0x7f0000000380)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x44}, 0x0) setsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x23, &(0x7f0000000740)={@multicast2, @loopback}, 0xc) syz_open_procfs(0x0, 0x0) preadv(0xffffffffffffffff, &(0x7f0000001b80)=[{&(0x7f00000003c0)=""/107, 0x6b}], 0x100000000000016f, 0x62, 0xfd4c) r2 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)=ANY=[@ANYBLOB="300000001000010800000004fcffffff00004c00", @ANYRES32=0x0, @ANYBLOB="c90002000005000008001b000000000005001000050010"], 0x30}, 0x1, 0xffffa888}, 0x20000880) 7m32.877604021s ago: executing program 6 (id=1625): pipe2$9p(&(0x7f0000001900), 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0xb, 0x8, 0xc, 0xffffbfff, 0x1, 0x1}, 0x48) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) r0 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r0}, &(0x7f0000bbdffc)) pipe2(&(0x7f0000000040), 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) rt_sigaction(0xd, &(0x7f0000000180)={&(0x7f0000000000)="ca00d1c441ef196ec866400fe2de0fae4e0afaf2466ff00fc01ec422e10399c5c1202063df", 0xdc000006, 0x0, {[0x2]}}, 0x0, 0x8, &(0x7f0000000300)) poll(&(0x7f0000000040)=[{0xffffffffffffffff, 0x80cd}], 0x1, 0x7) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cpuacct.usage_percpu\x00', 0x275a, 0x0) write$UHID_CREATE2(r2, &(0x7f0000000040)=ANY=[], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x88fd537e5c114b6e, 0x12, r2, 0x0) ioctl$KVM_X86_SETUP_MCE(r2, 0x4008ae9c, &(0x7f0000000000)={0x14, 0xa7f084dd5657bbbf, 0x14}) sendmmsg$inet6(r1, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0) 7m30.510849368s ago: executing program 6 (id=1628): write$cgroup_pid(0xffffffffffffffff, &(0x7f00000001c0), 0x12) accept4(0xffffffffffffffff, 0x0, 0x0, 0x800) openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) r0 = getpid() r1 = syz_pidfd_open(r0, 0x0) setns(r1, 0x24020000) syz_open_procfs(0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) mount$bind(&(0x7f0000000200)='.\x00', &(0x7f00000004c0)='./file0\x00', 0x0, 0x2125099, 0x0) mount$bind(0x0, 0x0, 0x0, 0x2a05404, 0x0) mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0) syz_clone(0xb21e0000, 0x0, 0x0, 0x0, 0x0, 0x0) r2 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r2, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) umount2(&(0x7f0000000040)='.\x00', 0x2) 7m28.205924306s ago: executing program 6 (id=1630): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socket(0x10, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000007000000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2b, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x94) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r3}, 0x10) r4 = socket(0x1000000000000010, 0x80802, 0x0) sendmsg(r4, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f00000004c0)="5500000018007fd500fe01b2a4a280930a06000000a843089100fe800c0008000800113f080000002d000f009b2c136ef75afb83de448daa72540d8102d2c55327c43ab82286ef1fdd20642383656d4d2449155037", 0x55}], 0x1}, 0x0) 7m26.48693299s ago: executing program 6 (id=1632): openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x901800, 0x0) syz_open_procfs$namespace(0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket(0x10, 0x3, 0x0) syz_open_dev$I2C(0x0, 0x0, 0x189802) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f0000000300)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$unix(r2, &(0x7f0000000d80)={0x0, 0x0, &(0x7f00000010c0), 0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="14000000000000000100000001"], 0x18}, 0xc800) recvmmsg(r3, &(0x7f0000001140), 0x700, 0x2, 0x0) ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(0xffffffffffffffff, 0x4020ae46, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) 7m10.850649444s ago: executing program 36 (id=1632): openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x901800, 0x0) syz_open_procfs$namespace(0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket(0x10, 0x3, 0x0) syz_open_dev$I2C(0x0, 0x0, 0x189802) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f0000000300)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$unix(r2, &(0x7f0000000d80)={0x0, 0x0, &(0x7f00000010c0), 0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="14000000000000000100000001"], 0x18}, 0xc800) recvmmsg(r3, &(0x7f0000001140), 0x700, 0x2, 0x0) ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(0xffffffffffffffff, 0x4020ae46, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) 6m58.903078588s ago: executing program 4 (id=1661): r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @local}, 0x10) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0xa, 0x31, 0xffffffffffffffff, 0x0) r1 = socket$inet_smc(0x2b, 0x1, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x7) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x48c00, 0x0) r2 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r2, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) socket(0x10, 0x80002, 0x0) r3 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r3}, &(0x7f0000bbdffc)) listen(r1, 0x0) 6m57.49286046s ago: executing program 4 (id=1662): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r1) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$tipc(&(0x7f0000000080), r2) sendmsg$TIPC_CMD_ENABLE_BEARER(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c657230"], 0x38}}, 0x0) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x305200, 0x0) close(r4) r5 = socket$unix(0x1, 0x1, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000440)=@newqdisc={0x58, 0x24, 0x4ee4e6a52ff56541, 0x70bd2c, 0xffffffff, {0x0, 0x0, 0x0, r7, {0x0, 0xb}, {0xffff, 0xffff}, {0xffff}}, [@qdisc_kind_options=@q_sfb={{0x8}, {0x2c, 0x2, @TCA_SFB_PARMS={0x28, 0x1, {0xa, 0x7f61, 0x1, 0xc5, 0xe23, 0x3, 0x1, 0x7fff, 0x1}}}}]}, 0x58}, 0x1, 0x0, 0x0, 0x20008001}, 0x0) 6m51.905146446s ago: executing program 4 (id=1666): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000740)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32, @ANYBLOB="0000000000000000b703000000e00000850000001b000000b700000000fa00"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000400)={{r3}, &(0x7f0000000200), &(0x7f0000000340)}, 0x20) syz_open_procfs$namespace(0x0, 0x0) r4 = syz_open_procfs$namespace(0x0, &(0x7f0000000280)='ns/net\x00') bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000480)={@cgroup=r4, 0x11, 0x0, 0x0, 0x0, 0x1000000, 0x0, 0x0, 0x0, 0x0}, 0x40) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000640)={@cgroup=r5, 0x24, 0x0, 0xffff, &(0x7f0000000000)=[0x0], 0x40e8, 0x0, 0x0, 0x0, 0x0}, 0x40) 6m50.293441939s ago: executing program 4 (id=1668): setsockopt$inet_mreq(0xffffffffffffffff, 0x0, 0x23, &(0x7f0000000000)={@multicast1=0xe0000300, @local}, 0x8) r0 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, 0x0, 0x0) syz_open_procfs(0xffffffffffffffff, 0x0) socket$nl_route(0x10, 0x3, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x6) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000002540)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000012c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x2, '\x00', 0x0, 0x0}, 0x50) syz_emit_ethernet(0x0, 0x0, 0x0) syz_open_dev$video(&(0x7f0000000380), 0xfc, 0x26444) socket$packet(0x11, 0x2, 0x300) 6m48.616392341s ago: executing program 4 (id=1669): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r0, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r1, 0x220c) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r2, 0x3) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r3, 0x0) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r4, 0x0) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r5, 0x7) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r6, 0x0) r7 = socket$inet_tcp(0x2, 0x1, 0x0) listen(r7, 0x7f) r8 = socket$nl_sock_diag(0x10, 0x3, 0x4) sendmsg$DCCPDIAG_GETSOCK(r8, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000001c0)=ANY=[@ANYBLOB="4c00000012000301000000000000000000009db7000000000000010004000000000000000000000000000000000000000000000000000000691d0f76e77044d1eb94e56239e4"], 0x4c}, 0x1, 0x0, 0x0, 0x20000000}, 0x800) 6m48.476392903s ago: executing program 4 (id=1670): socket$nl_route(0x10, 0x3, 0x0) mknod$loop(0x0, 0xfff, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x7) r0 = open$dir(0x0, 0x418000, 0x88) name_to_handle_at(r0, &(0x7f00000000c0)='./file0\x00', &(0x7f00000001c0)=@GFS2_LARGE_FH_SIZE={0x20, 0x8, {{0x6, 0x100, 0xc, 0x6d71d0c1}, {0x33e, 0xb86, 0x800, 0x80}}}, &(0x7f0000000240), 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, 0x0) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) openat$binder_debug(0xffffffffffffff9c, &(0x7f00000002c0)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0) execve(&(0x7f00000190c0)='./file0\x00', 0x0, 0x0) mount(0x0, 0x0, 0x0, 0x1c3425, 0x0) ioctl$vim2m_VIDIOC_S_CTRL(0xffffffffffffffff, 0xc008561c, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x4000000) sendmsg$NFT_BATCH(r3, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000002c0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWRULE={0x80, 0x6, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x1}, [@NFTA_RULE_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_RULE_EXPRESSIONS={0x54, 0x4, 0x0, 0x1, [{0x50, 0x1, 0x0, 0x1, @target={{0xb}, @val={0x40, 0x2, 0x0, 0x1, [@NFTA_TARGET_REV={0x8, 0x2, 0x1, 0x0, 0x1}, @NFTA_TARGET_INFO={0x2c, 0x3, "7339f2f10455afb9fdd672bad09dfb78c7699c74e891a0c700"/40}, @NFTA_TARGET_NAME={0x8, 0x1, 'TEE\x00'}]}}}]}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0xa8}, 0x1, 0x0, 0x0, 0x4000850}, 0x24000840) ioctl$SIOCSIFHWADDR(r2, 0x8923, &(0x7f00000000c0)={'syz_tun\x00', @random="0163014030d9"}) 6m32.881567058s ago: executing program 37 (id=1670): socket$nl_route(0x10, 0x3, 0x0) mknod$loop(0x0, 0xfff, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x7) r0 = open$dir(0x0, 0x418000, 0x88) name_to_handle_at(r0, &(0x7f00000000c0)='./file0\x00', &(0x7f00000001c0)=@GFS2_LARGE_FH_SIZE={0x20, 0x8, {{0x6, 0x100, 0xc, 0x6d71d0c1}, {0x33e, 0xb86, 0x800, 0x80}}}, &(0x7f0000000240), 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, 0x0) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) openat$binder_debug(0xffffffffffffff9c, &(0x7f00000002c0)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0) execve(&(0x7f00000190c0)='./file0\x00', 0x0, 0x0) mount(0x0, 0x0, 0x0, 0x1c3425, 0x0) ioctl$vim2m_VIDIOC_S_CTRL(0xffffffffffffffff, 0xc008561c, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x4000000) sendmsg$NFT_BATCH(r3, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000002c0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWRULE={0x80, 0x6, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x1}, [@NFTA_RULE_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_RULE_EXPRESSIONS={0x54, 0x4, 0x0, 0x1, [{0x50, 0x1, 0x0, 0x1, @target={{0xb}, @val={0x40, 0x2, 0x0, 0x1, [@NFTA_TARGET_REV={0x8, 0x2, 0x1, 0x0, 0x1}, @NFTA_TARGET_INFO={0x2c, 0x3, "7339f2f10455afb9fdd672bad09dfb78c7699c74e891a0c700"/40}, @NFTA_TARGET_NAME={0x8, 0x1, 'TEE\x00'}]}}}]}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0xa8}, 0x1, 0x0, 0x0, 0x4000850}, 0x24000840) ioctl$SIOCSIFHWADDR(r2, 0x8923, &(0x7f00000000c0)={'syz_tun\x00', @random="0163014030d9"}) 5m16.882599989s ago: executing program 5 (id=1754): r0 = syz_open_dev$sndctrl(&(0x7f0000001440), 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20000008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setscheduler(r1, 0x1, &(0x7f0000000200)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) r4 = openat$sndtimer(0xffffffffffffff9c, &(0x7f00000000c0), 0x2200) ioctl$SNDRV_TIMER_IOCTL_SELECT(r4, 0x40345410, &(0x7f0000000300)={{0x0, 0x2}}) r5 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000080), 0x0) r6 = socket$inet6(0xa, 0x1, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r6, 0x29, 0x20, &(0x7f0000000180)={@private2, 0x800, 0x0, 0x2, 0x1}, 0x20) close_range(r5, 0xffffffffffffffff, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x20000080) r7 = socket(0x10, 0x803, 0x0) sendto(r7, &(0x7f0000000740)="120000001200e7ef00", 0x9, 0x0, 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_PCM_INFO(r0, 0xc1205531, &(0x7f0000000340)={0x0, 0x4, 0x0, 0x8002, '\x00', '\x00', '\x00', 0x4, 0xfffffffe, 0x100, 0x0, "abd206a1ebd7cedfd17ebd65400ed41b"}) getsockopt$IP_SET_OP_GET_BYNAME(r7, 0x1, 0x53, &(0x7f0000000000)={0x6, 0x7, 'syz2\x00'}, &(0x7f0000000080)=0x28) r8 = socket$inet(0x2, 0x4000000000000001, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1) setsockopt$sock_int(r8, 0x1, 0x29, &(0x7f0000000100)=0xac05, 0x4) 5m15.962730098s ago: executing program 5 (id=1755): timer_create(0x3, 0x0, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000580)=0x2) sched_setaffinity(0x0, 0xfffffffffffffdc5, &(0x7f00000002c0)=0x800002) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) read$msr(r0, &(0x7f00000292c0)=""/102400, 0x19000) bind$alg(0xffffffffffffffff, 0x0, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, 0x0, 0x0) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) write$RDMA_USER_CM_CMD_SET_OPTION(0xffffffffffffffff, 0x0, 0x0) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x0, 0x5d032, 0xffffffffffffffff, 0x0) r2 = userfaultfd(0x80001) ioctl$UFFDIO_API(r2, 0xc018aa3f, &(0x7f0000000100)) syz_clone3(&(0x7f0000000340)={0x20220080, 0x0, 0x0, 0x0, {0x1f}, 0x0, 0x0, 0x0, 0x0}, 0x58) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r1, 0x4018620d, &(0x7f00000000c0)={0x73622a85, 0x110b, 0x8000000000002}) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000200)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, 0x0) dup3(r3, r1, 0x0) 5m13.850277513s ago: executing program 5 (id=1757): openat$comedi(0xffffffffffffff9c, 0x0, 0x2, 0x0) connect$netlink(0xffffffffffffffff, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) bind$802154_raw(0xffffffffffffffff, 0x0, 0x0) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xffffd000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x11, 0x5, &(0x7f00000002c0)=ANY=[@ANYBLOB="18050000000000fe000000004b64ffec850000007d000000040000000700000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r3}, 0xc) r4 = memfd_create(&(0x7f00000000c0)='[\v\xdbX\xae[\x1a\xa9\xfd\xfa\xad\xd1md\xc8\x85HX\xa9%\f\x1ae\xe0\x00\x00\x00\x00\xfbU\x00\x00\x00\x00\x00\x00\x00\xe2\xc6a\x9f\xe8\xf1\xb3\x86\xe2+Op\xd0\xa2\x82\x1eb;(\xb5\xe1jS\xd6\x91%||\xa0\x8ez\xadT\xc8\f\xe5\x89\xbf3:\x99\x1e\xac`\xc3\xcf\xd3\xae\xd2\a\x11\xa9\xa5^\xff\xf5\x95\xd2q#\xc6\xca\x97\x9d\xcb\x1e\x80\xd6\xd5%N&\xf8#\x80z8Z\xd2}\xf5\xe4\x9f5\x9b\x01\xf9t\xbb\x1er\x14\xdb\xd3\xcd\xfd\xbdnC\xec', 0x4) execveat(r4, &(0x7f0000000000)='\x00', 0x0, 0x0, 0x1000) r5 = socket$unix(0x1, 0x5, 0x0) bind$unix(r5, &(0x7f0000000140)=@abs={0x1}, 0x6e) mkdirat(0xffffffffffffff9c, 0x0, 0x0) mount$bind(&(0x7f00000002c0)='.\x00', 0x0, 0x0, 0x101091, 0x0) mount(0x0, &(0x7f0000000100)='.\x00', &(0x7f0000000000)='vxfs\x00', 0x1000080, 0x0) 5m11.813922781s ago: executing program 5 (id=1759): io_uring_setup(0x437a, &(0x7f00000002c0)={0x0, 0x698c, 0x40, 0x2, 0xfffffffe}) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x102}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs={0x0, 0x0, 0xfffffffe}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0xa) listen(r0, 0x0) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) r5 = bpf$MAP_CREATE(0x0, &(0x7f00000023c0)=ANY=[@ANYBLOB="1200000004000000080000000b"], 0x48) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000740)=ANY=[@ANYRES32=r5, @ANYRES32=r4, @ANYBLOB='\a'], 0x10) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000500)={r5, &(0x7f00000003c0), &(0x7f00000004c0)=@tcp6=r0}, 0x20) epoll_create1(0x0) r6 = socket(0x1e, 0x5, 0x0) listen(r6, 0x0) accept$packet(r6, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, &(0x7f0000000140)=0x14) sendmsg$tipc(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) sendmsg$tipc(0xffffffffffffffff, &(0x7f0000000640)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000}, 0x0) 5m10.3972854s ago: executing program 5 (id=1760): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="07000000040000000800000001"], 0x48) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000740)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r3, @ANYBLOB="0000000000000000b703000000e00000850000001b000000b700000000fa000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f0000000080)='sched_switch\x00', r4}, 0x18) r5 = bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000400)={{r5}, &(0x7f0000000200), 0x0}, 0x20) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000040)='mm_page_alloc\x00', r6}, 0x10) bpf$ITER_CREATE(0xb, &(0x7f0000000100), 0x0) syz_open_procfs$namespace(0x0, 0x0) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f00000005c0)={0xffffffffffffffff, 0x0, 0x24, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0xa) r7 = syz_open_procfs$namespace(0x0, &(0x7f0000000280)='ns/net\x00') bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000480)={@cgroup=r7, 0x11, 0x0, 0x0, 0x0, 0x1000000, 0x0, 0x0, 0x0, 0x0}, 0x40) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000640)={@cgroup=r8, 0x24, 0x0, 0xffff, &(0x7f0000000000), 0x0, 0x0, 0x0, 0x0, 0x0}, 0x40) 5m8.70500149s ago: executing program 5 (id=1763): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000009c0)=ANY=[@ANYBLOB="440000001000010400894e934fb2a0e22f709030", @ANYRES32=0x0, @ANYBLOB="00000000000000001c0012800e00010069703665727370616e00"], 0x44}}, 0x40000c0) 4m53.235141s ago: executing program 38 (id=1763): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000009c0)=ANY=[@ANYBLOB="440000001000010400894e934fb2a0e22f709030", @ANYRES32=0x0, @ANYBLOB="00000000000000001c0012800e00010069703665727370616e00"], 0x44}}, 0x40000c0) 1m35.01761187s ago: executing program 3 (id=2895): bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x2c, &(0x7f0000000000)='/proc/sys/\x00et/\x00\x00v4\x00\x00s/\x92ync_\x00le\xf44\x8cm\xa0\x8dN\xd4\xa2\x88\x00\xd1l,'}, 0x30) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) fchdir(r0) r1 = openat(0xffffffffffffff9c, &(0x7f0000004280)='.\x00', 0x0, 0x0) getdents64(r1, &(0x7f0000000500)=""/40, 0x5a) getdents64(r1, 0xfffffffffffffffe, 0x29) 1m34.883786568s ago: executing program 3 (id=2897): r0 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000001440)={'vcan0\x00', 0x0}) bind$can_j1939(r0, &(0x7f0000000140)={0x1d, r1, 0x0, {0x1, 0x1, 0x4}, 0x1}, 0x18) setsockopt$sock_int(r0, 0x1, 0x6, &(0x7f0000000040)=0x5, 0x4) sendmsg$inet(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000000)="81b641f1f3843704b6", 0x9}], 0x1}, 0x48005) readv(r0, &(0x7f0000000700)=[{0x0}, {&(0x7f00000001c0)=""/154, 0x9a}], 0x2) 1m33.102336258s ago: executing program 3 (id=2912): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x101, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x2) ioctl$KVM_SET_CPUID2(r2, 0x4008ae90, &(0x7f0000000140)=ANY=[@ANYRES16=r2]) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_SET_CPUID2(r2, 0x4008ae90, &(0x7f0000000040)=ANY=[@ANYRES32=r2]) 1m31.796214282s ago: executing program 3 (id=2920): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) mount$bind(&(0x7f0000000100)='.\x00', &(0x7f0000000300)='./file0/../file0\x00', 0x0, 0x2151090, 0x0) mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0) mount$bind(&(0x7f0000000040)='./file0\x00', &(0x7f00000000c0)='./file0/file0\x00', 0x0, 0xab101a, 0x0) mount$bind(0x0, &(0x7f00000003c0)='./file0/file0\x00', 0x0, 0x80000, 0x0) mount_setattr(0xffffffffffffff9c, &(0x7f0000000000)='./file0/../file0\x00', 0x900, &(0x7f0000000080)={0x8, 0x1, 0x40000}, 0x20) 1m31.613515177s ago: executing program 3 (id=2923): r0 = socket$inet_udp(0x2, 0x2, 0x0) r1 = socket(0x10, 0x80002, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000001c0)={'bridge0\x00', 0x0}) r3 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000040)={'bridge_slave_0\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000002c0)=ANY=[@ANYBLOB="380000005400e50026bd7000ffffffff07000000", @ANYRES32=r2, @ANYBLOB="20000100", @ANYRES32=r4, @ANYBLOB="01030300ff"], 0x38}}, 0x0) 1m30.372747152s ago: executing program 3 (id=2935): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="0200000004000000080000000100000080"], 0x48) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000040)={r0}, 0x4) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x18, &(0x7f00000001c0)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000000000018230000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70500000000000085000000a5000000180100002020640500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000a50000000800000095"], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f0000000700)='signal_generate\x00', r1}, 0x18) r2 = gettid() rt_sigqueueinfo(r2, 0x11, &(0x7f00000003c0)={0x3d, 0x2c, 0x2}) 1m29.865443442s ago: executing program 39 (id=2935): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="0200000004000000080000000100000080"], 0x48) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000040)={r0}, 0x4) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x18, &(0x7f00000001c0)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000000000018230000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70500000000000085000000a5000000180100002020640500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000a50000000800000095"], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f0000000700)='signal_generate\x00', r1}, 0x18) r2 = gettid() rt_sigqueueinfo(r2, 0x11, &(0x7f00000003c0)={0x3d, 0x2c, 0x2}) 6.298918947s ago: executing program 8 (id=3404): r0 = socket$can_raw(0x1d, 0x3, 0x1) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000080)={'vxcan1\x00', 0x0}) bind$can_raw(r0, &(0x7f00000005c0), 0x10) read(r0, &(0x7f00000027c0)=""/4073, 0xfe9) setsockopt$SO_TIMESTAMP(r0, 0x1, 0x1d, &(0x7f0000000040)=0x56e40e99, 0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x6, 0x8031, 0xffffffffffffffff, 0x6a855000) sendmsg$can_raw(r0, &(0x7f0000000240)={&(0x7f0000000780)={0x1d, r1}, 0x10, &(0x7f00000003c0)={&(0x7f0000000500)=@can={{0x2, 0x0, 0x1, 0x1}, 0x2, 0x3f57955e7be81d83, 0x0, 0x0, "f97003b8750e5566"}, 0x10}}, 0x4008051) 4.839781298s ago: executing program 9 (id=3412): r0 = syz_usb_connect(0x0, 0x36, &(0x7f0000000040)={{0x12, 0x1, 0x0, 0xf2, 0x30, 0x39, 0x20, 0x2c42, 0x1202, 0x8540, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x10, 0x0, [{{0x9, 0x4, 0xc, 0x2, 0x2, 0xc1, 0x7f, 0xc, 0x0, [], [{{0x9, 0x5, 0x2, 0x2, 0x200, 0x2}}, {{0x9, 0x5, 0x82, 0x2, 0x200}}]}}]}}]}}, 0x0) syz_usb_control_io$uac1(r0, 0x0, 0x0) syz_usb_control_io$printer(r0, 0x0, &(0x7f0000000c80)={0x34, &(0x7f0000000480)={0x40, 0xb, 0x1, "e4"}, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$printer(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, &(0x7f0000000500)={0x44, &(0x7f0000000000)={0x20, 0x3, 0x2, "e35d"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 4.820643754s ago: executing program 0 (id=3413): r0 = syz_usb_connect(0x2, 0x3f, &(0x7f00000007c0)=ANY=[@ANYBLOB="11010000733336088dee1adb23610000000109022d0001100000000904000003fe03010009cd8d1f000200000009050502000000001009058b1e20"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) r1 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) openat$nullb(0xffffffffffffff9c, &(0x7f0000000040), 0x1401, 0x0) ioctl$FS_IOC_GETVERSION(r1, 0xc0105b08, &(0x7f0000000040)) 4.766805984s ago: executing program 8 (id=3414): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x40241, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000000)={'syzkaller1\x00', 0xc201}) r2 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000000240)={'syzkaller1\x00', @link_local}) write$tun(r1, &(0x7f0000000240)=ANY=[@ANYBLOB="000086dd0500c00108005400000060"], 0xfdef) 4.610182316s ago: executing program 2 (id=3416): setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x26, &(0x7f0000000000)=0x2, 0x4) r0 = socket$inet6_sctp(0xa, 0x5, 0x84) r1 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r1, 0x84, 0x14, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f00000001c0)=0x8) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f0000000080)={0x0, 0x10, &(0x7f00000001c0)=[@in={0x2, 0x4e21, @rand_addr=0x64010100}]}, &(0x7f0000000140)=0x10) getsockopt$inet_sctp_SCTP_RECONFIG_SUPPORTED(r1, 0x84, 0x75, &(0x7f00000002c0)={r2, 0x20000}, &(0x7f0000000300)=0x8) setsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(r0, 0x84, 0x72, &(0x7f0000000340)={r3, 0x9, 0x30}, 0xc) 4.426574269s ago: executing program 1 (id=3417): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket(0x400000000010, 0x3, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2d, 0xffffffff, {0x0, 0x0, 0x0, r3, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x1, 0xf}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x28}}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000001300)=@newtfilter={0x3c, 0x2c, 0xd27, 0x70bd28, 0x25dfdbfd, {0x0, 0x0, 0x0, r3, {0x0, 0x7}, {}, {0xa, 0x1}}, [@filter_kind_options=@f_bpf={{0x8}, {0x10, 0x2, [@TCA_BPF_FD={0x8}, @TCA_BPF_POLICE={0x4}]}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x80}, 0x40010) 3.993218774s ago: executing program 8 (id=3418): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r1, 0x8933, &(0x7f0000000040)) sendmsg$nl_route(r0, 0x0, 0x0) r2 = socket$pppl2tp(0x18, 0x1, 0x1) ioctl$SIOCSIFMTU(r2, 0x8922, &(0x7f0000000080)={'dummy0\x00'}) 3.770660923s ago: executing program 1 (id=3419): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file0/file0\x00', 0x1c0) r0 = landlock_create_ruleset(&(0x7f00000000c0)={0x100}, 0x18, 0x0) r1 = openat$dir(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x200000, 0x0) landlock_add_rule$LANDLOCK_RULE_PATH_BENEATH(r0, 0x1, &(0x7f0000000140)={0x100, r1}, 0x0) landlock_restrict_self(r0, 0x0) mknodat(0xffffffffffffff9c, &(0x7f0000000300)='./file0/file0/file0\x00', 0x81c0, 0x0) 3.745708218s ago: executing program 8 (id=3420): r0 = socket$inet6(0xa, 0x80002, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0x20000008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) socket$packet(0x11, 0x3, 0x300) io_submit(0x0, 0x0, &(0x7f0000001300)) r1 = getpid() sched_setscheduler(r1, 0x1, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0xb, &(0x7f0000000380)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020000000000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f0000000300)='rcu_utilization\x00', r4}, 0x18) sendmmsg$inet6(0xffffffffffffffff, 0x0, 0x0, 0x4001c00) setsockopt$sock_linger(r0, 0x1, 0x3c, 0x0, 0x0) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x4e26, 0xfffffffc, @ipv4={'\x00', '\xff\xff', @local}}, 0x1c) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) setpriority(0x2, 0x0, 0x100) 3.681848443s ago: executing program 2 (id=3421): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0b00000007000000080000000800000005"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB, @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r1}, 0x10) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) mknodat$loop(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x6000, 0x1) r2 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x101000, 0x0) fsync(r2) 3.621418257s ago: executing program 1 (id=3422): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000280)=[@text64={0x40, 0x0}], 0x1, 0x61, 0x0, 0x0) ioctl$KVM_SET_NESTED_STATE(r2, 0x4080aebf, &(0x7f0000005700)={{0x0, 0x0, 0x80, {0x100000, 0x2, 0x2}}, "cb31455c9e9d288a70a2a6bb8068fd95dd041cf5b177a3bffe992dfbbdf959487337b92336ce1de32e7695c411c0bf9f852d2d71192f33001fd51f5b396a55cb98699a09d21648c4cb30d9d7e3e397c7a3c041c76c72385a46c48c5302848c3696facce956952c2a85822ddf20434ccee5806294ed563ff3a972cddf6ef16ddace933d8a5adea40cd3ad40c9873c29368838e815ff59723519154856b2d5cd9cd79a97af85a08dada1175817886e5f9e7aa3dca783a44c667a4806826570ec6acb57d65efc313a384e11fb633dee17ee600145f2cb3103384606140021be766fcb7fa029f0513bbb466177ca1068192550bbf4e6f5694aec747a16e27688a988fa595bca1761b8e88a7dbcaeaf97a8b7b53058b1faf880dd6f1b6eb4c7beb0582b4007f1a67db1352407adbe1456bf762c94fd825b9419d74f63cdeb6c6976de1890d773f0c8088d2bd48a838cf5b87f5ddf926352960fb978874b0f175acfa55ddfe84de3fc9f75b58bf7a35f33d3c43ed5e3224e92751fa1b43f94f64b681163ef1360a3f3bb7403afc67a188b2104b45c5814aaa9e218552498bf85f4b221d9acc32a331f5f8c109cc9f335ff4e418ab30b54b99d5376cd928c431fc8211fcbaf64716afdc4b6d0417e04d5723e4675d282b36bef3a3a19e855029ec7c33830a6df19332b63e9d8a0f22d96ac230c67657a4e7f7afab91dc0ce751b68980e5a4f6d9d6d9b98802ba9d8576640eea61b8c308a1745df61560e56108bececa3016d93246fdc8b768634e8319b1ffde103c07378f8f4927baba05e992a4b5af0958a7e495e7ce53f7917451d15a963ca14f5cdc4563775688b6533a4b97e0f84b0a33c30077b20805c1f42cc7815efada97ad59ac486bc9e0ee386b49cb97b47fbf8f919f06c75a49636795054b5ebee3e91602c90d7f4db49220affe56d56b96e4f662b2bf36dae482ffc7ba21cbc55e21b73309d6b7aa5509defcb77c236e43b579c61eae5c8d8f8fa71ad876b96069f2e4352c8aaf16e299d21edf5434c0cd9b25cdc9210fb0de759b1dd3fc7fe4c7118bbde72a5617dff21f7a5036448fba7fe41aaee0c289cd076d757e47b0713b236f6f141ba0112c9312b3ec853aabafdf1eb2cbb517d2d7352725f557214d27d9a340af0128fc960a4ea64c933b0d8dd226b6e024471aaac8a7074b2a8695ab990fabba5bf315d246fbfe4260f1fffe54814e33b6235c5b4095437298858909bcbd40a8a7f1ac752b06b7b1775bce0a5bca19b0a5c2fa8dbf87b55ae0a43c5086422e5bacb94047e150451f5996420b0d4a697f59decb49900b2b9c13aade536933e14d672c21a35cb68572c3de02f3147414eff4b8674b91f7aebf35f056a8d388f67f8ef7cfaf6b28fe745831ef41def1839791647016932c70685752851327f1837d2f1e9d8f93443eefed2317119c8152ca451a5d3aeb253fb484283f52e5db9f61f059ad3c217a860ee0571d254483501b00699208c7fa5571cf58b9715c954115bc2db0af28361938bb95ced7370c8cbb6141ef62fdbf369dfc4eccd98ab9886d79a52cbf91a27dd0f4b29940492e860fb94654dea54fad6290570760e3b59a0cf28053732472dc313b5fedfc583fc702a880971dc61286370aaf167810455cce7654dc4325a41d9d1944abcdc4d81378f1e96a8f94cd95b886a01f086e379601504219d57d531ba34e1ba0905785fb629c61f6b940a652cdee9dbef12b7fcde087b92816db3386a5769049ba00788e31de4ddbb8b56de1fbe3a5e671728effda7cfd0b650cf5df2faf22470812efbbb548e47cbf36c64e05a7877820f08948ceedb35e12a4a143ee0101a7bf0a00a4062b50c39020669700adf739a6f75352a45fd1373d3e85c3867170373f0c7a794d8590f4c22ae62d438ec365b0f6a15cb2ffe0fc6f57185e1760761bd4370027c01dfad0502f00b6898115df3c530d0b0b4a64e623fd580b528a733e4c881cf5843a975a97f92a7833527887c79fa8eec82b9526a15c6c5f2972083ce8aec735810580ffa4ea2cef4823aee044dd70927f7c07bba18b930006aa86ae7399ac6b4c24bc9d6a6ab0c5b428d7255d4d983eadf97e10c1b00867da29ac981acb453073a37236e7ae808e7759b2e0cffc3ec43afb1e95cd090a7d4b9225a0e3cbebfe49b93846ab603891e2da7d85a04bf42d12d16a97c965bc4911d3ba7a9ca505794d8744fef00a436089de67aa8b480070230dfb002eb91edaff428d4908a87afae418dff7ca59aefe1ad8f6935f309fe7985c2310881659c60a66a5e50242497ba1cd5d2bd79496ccd23f9fd901afc6622829cb3701caa50f96e09e3b23bfa3181b74ec7dae2e42c9caab43e49ae1d922a1a1eb3682de026323d9215fcec42c54401a1af81450830a4b784ed1c7922734bf3632409147680dd3fabcef296353705bb5c0e650e12905a05db1e7923923a96ddc783fc1ed46e2010416c37d9d149ad73e808bd6e4464f62893024a8501803b6c88fc55c8bbc1da7cbf580b5a81fb7c61455ae3a8aaec303fba12e0f2b51ed5e8bd31db40e8bdbd00e7b1ddd364766c974d813d86fc88a27bf82bba60c62e5f0f6af6bda3390f8e72a2811baf3d6325e70d9a3b59cab1abe95290ecb87985567e1243504c038de9d4d100ea64eec45208cd8d2474e646f7d81eed6d59b8b0859552b6fc088d874cde3e75ee30243dc9d88ed5b577851a5bd9e2a453287025777fcac19ac33e1c94b4ad272f1055b16b842a6bd6168fb45f1f74ed2467020df5431068a5f2cbeaa6ac1841308c7c9f752aa06927f91fdf18ef9d9e942367e5ecac0abf4d3b8fc7b80238c0e7faf2ea7d3f5271028fc558a44799bde63168becc67c5531e843336fb16ab618d37f95a91937b824bf896b044146bc3a5e264a8f23ddd00729cd9aa56d9a9a24b7ab96ae021b193d8874d03ff4b723d86b7564e550378599c3e0c7a2b3d447ad76eb4cd699733d970a5ab218429a1af81df9c8013d6d16a6bcb019f6ace4461cdaa785d20ea027cfa53d521bb91ad2c04aaa6c0f268b14924803977633280c7b7beb14c88fae542b7a13e96253259e7296e37276da88891c14664340e84ae732edbd71e67047e476735b220ca231de31a380ece372db632ec3cb3ef5ac97ec41148febd2acb15cde1ee5e990ea0aaa95c2df39e2111dd1185d14a194e22d34fda8f54e99d3a73e5a231682c726d40816e048c1d059bf3bb9ee2b5f895365d95aa28f6adbf6e16469926b4d8ee7f04c7dbafaa444df5b88596c17874f0efe35e5ada1a69634f4b430f852d33b032f823c5deb54f47a7a4adb1adf56d5440b7a917580004c13e0b36c8e0a203a2be3f8fffd9efef3af19389a12c67859d4381ac0a02da18e25931b41216b731de25e1245482c84d45de1cddbce2109322a3428bff692012573fe9efd02109dbf35c5d3a287dec105cf3f1a2e50100cc08c7b4759766d25d0f7b42c3ea8bf8101e61159a2ba7602e9c7947cf936ac39bf59b24084709fd61d704bbdba7d282aac778b7ec1dcaf984527c8112d56e75ab774d1598d9816abc77b0e693880beca5f330c626774ab5cb6967fb0ea8e14efce120947092c3b6f8a22f07cad22e971418092481fcad36ecf0cfd6bc3864115b8507c13554584f1f6fee5ee07eb6a091638d8e7781c1c006166e0f987f9f4de535e9f3df1db8c9328e9a19a73c76059ab4edfe9eda7f16cc6b869229bafb179d194e20ccc6f9338183b673de8138ddab9a0907278f6eaacc55bf59a450ebc10e0b88c82d9f0deca86ff771f46509250fde94e0c94256b77616d099862ddc9b341838d634a9dc4b55a88fcc6248901135f6aa76365433e7e534e0e5ae8eec2a63df62c3e244a40481189ff54122698c7e2da2c829b2eec9efc9894ee05be04ae6dd48406eaace17827e38bf38b414059aded0343e0711a8d864ff41a8d9ed40fb2aa1a3f4014f691cd0e8af62445a021820ff03afa8a192ee255862f306851df1de96ce36cafb6a60b7069db7aa96fd1ffb2fb01e6247f770304dffe4b1c8d0eeb336dd6806d6ab5d418953b1cae7cbbf53766b61e4aad5cfce8255b78af26f9bd11283a9c7d12cd63b82cd2b506fd4061d1e16fc7c713d80763c3b0aa0faadcd9b7d676101aad80e1ca00369297e1f714003ab8d0b545c335014a522a25a767950963ef821425b79b521076166d0df3ef358c7d60d99cc85463c186e8faf16af79785680382e4cc93f6594f8c4461e0988c08717640df24a5f357db22432fcae21702dc792d201212fb3791e0164bb3d433a8268ec96df73766fdba42965e00e619246cba5d96eb853a7c22c34d2fe5e5d3f3ccf9c627d069517b743cd07f6f7b444074bb9a50269f2e03309c58930e56a9583eb00c37fbcdd391972261f41756c10c8899fcd036e2017e088ef9e6ec31f795d55b3bba214c53c98fc9318e4ade0e7e6fd259aa277fed54c27e5210787a5f6937f56fdbe1da5113f059061ca590ddf536a55cb91ac6ed41cb9c0418b115b29f5e823c1b0ee7c2b3982087763545b34e2c945d587ebce69bbe299a7f52b674f351977370fc700474bc15d7e6ef98c14258ecf401a4f3bba1a9aa76c5ab0b8819fe6efe3fba1899909e5e48554299150ee272451b56142d12ae2bb4942db430239701d494917f2c939a6fb9d98d4751a6f2c4537ec870342d223343a9bd7b8d8c99aff8cbfa298395551185f35dec120228073a1e496a58b59d9ac5986249a7c6db9398395cbf341c08ee910700e2daa042dba1846fef59c72ce872bba2046a14fcf9a47a5686d62bfba76309a9865c26e5fa41dd872fc749fdc57953105ace4978f9eb788c8d061c853ad0313e51e732c5d7bc05e752443c8e99b8e81c688befdb5b14c3cc2f96eb8ce8290303e483992fcbece1ff278d0dc036ad437b6cbc695c7741ba4556e242146d40843c73deaf8fceba40e4a4acd739b3031848b17a210a1ff0dc1908b77c4bb94543af52e1fe2a090c8f217428d02336303f7952c3ddefa7c81850676e7f4cc3d32c3937281fa5ab279c3fe39f92ba077dadb8c2c3df17cc511bd33c41cb161d24aea154f0f5902c94b56fe072d321a983668bd9f4838878e66ec44cb233d7d0ca908a794c844ff8b3ba4c57f6c5fc2f3a54db448b013f0c4998bbc6ed0409b3368391cb28c6df4a909fff90f308ff38c758ff7d8a2920bc221236d89b3b76de44e8ce649b32f5135a0217ba9036a8edddee97d7ba15f2c21fb7d3cae3eb6ef09dd03eed650489c83b5ba5dd9daf7a86cf0544fb8a58e46b860e3e42e10cd6f1c4f81179eb2c3ba611793a32abb4c0768db90e8bdd1694efaa9c2b45c89d203fdfb8b926b6a0d666d91b93065a83184fc2065961f2308056241b66f427c0f0aabc75852c90f0624cf036d537032ca8d73325d2ae2a79a7292c240c34584bb881fe5d468a051cbc0bde061f9eddfb758cd2dfba296eef549e5c4ede097111216a0ec60f90e8d6f5dd843c82e15f505f8c74e854ba9cd386249d552978eb8135a5f8c79c3ceb8dd5828b0218ffe40f375d6cf3ff2f47c276c8169ab98336582a852c1535018fb2306aca6b8c9f9e38d64c66a722762b76c69d4ca6c14bd6992549e4eec17287fce194467f972d9200c3d1ac4fd4a8f2620e2e4281d28c099946ed90789ba122705326390d3e058ceed24044e542efb36416272eadf6304f30efa0b7bc1ae5be92fe50e591ee6f725726e917ec113506920beb2aa53b39f1d76b31500", "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"}) ioctl$KVM_RUN(r2, 0xae80, 0x0) 3.031952648s ago: executing program 1 (id=3423): r0 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_int(r0, 0x29, 0x35, &(0x7f0000000000)=0x8000, 0x4) setsockopt$inet6_IPV6_HOPOPTS(r0, 0x29, 0x36, &(0x7f0000000140)=ANY=[], 0x8) bind$inet6(r0, &(0x7f0000f5dfe4)={0xa, 0x4e20, 0x0, @empty}, 0x1c) setsockopt$inet6_IPV6_DSTOPTS(r0, 0x29, 0x3b, &(0x7f0000000080)=ANY=[], 0x8) recvmmsg(r0, &(0x7f0000000040), 0x400000000000284, 0x2, 0x0) sendto$inet6(r0, 0x0, 0x0, 0x0, &(0x7f0000000300)={0xa, 0x4e20, 0x0, @mcast1}, 0x1c) 2.884954645s ago: executing program 2 (id=3424): r0 = socket(0xa, 0x1, 0x0) r1 = socket(0xa, 0x1, 0x0) setsockopt$sock_int(r1, 0x1, 0xf, &(0x7f0000000040)=0x9, 0x4) bind$inet6(r1, &(0x7f0000000480)={0xa, 0xe64, 0x3, @ipv4={'\x00', '\xff\xff', @empty}, 0x2}, 0x1c) setsockopt$sock_int(r0, 0x1, 0xf, &(0x7f0000000040)=0x9, 0x4) bind$inet6(r0, &(0x7f0000000140)={0xa, 0xe64, 0xb, @empty, 0x1}, 0x1c) sendto$inet6(r0, 0x0, 0x0, 0x24000881, &(0x7f0000000100)={0xa, 0x4e24, 0x3, @loopback, 0x80000000}, 0x1c) 2.598831245s ago: executing program 2 (id=3425): r0 = socket$inet6(0xa, 0x80002, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0x20000008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) socket$packet(0x11, 0x3, 0x300) io_submit(0x0, 0x0, &(0x7f0000001300)) r1 = getpid() sched_setscheduler(r1, 0x1, &(0x7f0000000200)=0x7) socketpair$unix(0x1, 0x2, 0x0, 0x0) connect$unix(0xffffffffffffffff, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0xb, &(0x7f0000000380)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020000000000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f0000000300)='rcu_utilization\x00', r2}, 0x18) sendmmsg$inet6(0xffffffffffffffff, 0x0, 0x0, 0x4001c00) setsockopt$sock_linger(r0, 0x1, 0x3c, 0x0, 0x0) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x4e26, 0xfffffffc, @ipv4={'\x00', '\xff\xff', @local}}, 0x1c) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) setpriority(0x2, 0x0, 0x100) 2.570572493s ago: executing program 1 (id=3426): r0 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r0, &(0x7f0000002c80)={0xa, 0x14e24}, 0x1c) connect$inet6(r0, &(0x7f00000002c0)={0xa, 0x4e24}, 0x1c) recvmmsg(r0, &(0x7f0000000440)=[{{0x0, 0x0, &(0x7f0000000600)=[{&(0x7f0000000040)=""/47, 0x2f}, {&(0x7f0000001e40)=""/104, 0x63}], 0x2}, 0x2}], 0x1, 0x1, 0x0) sendmmsg$inet6(r0, &(0x7f0000000780)=[{{0x0, 0x0, &(0x7f0000000640)=[{&(0x7f0000000000)='3', 0x1}], 0x1}}, {{0x0, 0x0, &(0x7f0000000240)=[{&(0x7f00000004c0)="b458b09a7bc6afad62c3f97125bc54bad5b9f64492fb3237f80678f40515a15a9bc7f8f9c9244e7fe0c328f6457f6d457effb6e3090a2f0e0a47d7c95dddc94d4d0ca124", 0x44}], 0x1}}], 0x2, 0x20e8086) sendmmsg(r0, &(0x7f00000092c0), 0x4ff, 0x0) 2.517652972s ago: executing program 2 (id=3427): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000100)={0xa, 0x4e22}, 0x1c) listen(r0, 0x3) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000040)='syz_tun\x00', 0x10) r1 = socket$netlink(0x10, 0x3, 0x4) writev(r1, &(0x7f00000000c0)=[{&(0x7f0000012380)="580000001500add427323b470c47b45602067fffffff81004e220700000000000000a8002000eaa57b00090080020efffeffe809020000ff0004f03a007357ac8ddc1fdd00000000000004ffffffe7ee0000000044c60000", 0x58}], 0x1) 2.411781093s ago: executing program 2 (id=3428): r0 = syz_usb_connect(0x0, 0x36, &(0x7f0000000080)={{0x12, 0x1, 0x141, 0x48, 0x13, 0x44, 0x20, 0x424, 0x7500, 0x69ee, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x10, 0x0, [{{0x9, 0x4, 0xb8, 0x7, 0x2, 0x96, 0xd1, 0xca, 0x0, [], [{{0x9, 0x5, 0x6, 0x2, 0x200, 0xd, 0x0, 0x6}}, {{0x9, 0x5, 0x82, 0x2, 0x200, 0x0, 0x1, 0x10}}]}}]}}]}}, 0x0) syz_usb_control_io$uac1(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000900)={0x84, &(0x7f00000003c0)={0x0, 0x17, 0x4, "abe763a8"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) syz_usb_control_io$uac1(r0, 0x0, &(0x7f0000000640)={0x44, &(0x7f0000000540)={0x0, 0x9, 0x4, "fd980000"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, &(0x7f0000000fc0)={0x84, &(0x7f0000000300)={0x40, 0xb, 0x4, "ecae0aac"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) 2.271960292s ago: executing program 9 (id=3429): r0 = socket$inet6(0xa, 0x80002, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0x20000008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) socket$packet(0x11, 0x3, 0x300) io_submit(0x0, 0x0, &(0x7f0000001300)) r1 = getpid() sched_setscheduler(r1, 0x1, &(0x7f0000000200)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f0000000300)='rcu_utilization\x00', r4}, 0x18) sendmmsg$inet6(0xffffffffffffffff, 0x0, 0x0, 0x4001c00) setsockopt$sock_linger(r0, 0x1, 0x3c, 0x0, 0x0) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x4e26, 0xfffffffc, @ipv4={'\x00', '\xff\xff', @local}}, 0x1c) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) setpriority(0x2, 0x0, 0x100) 1.014790928s ago: executing program 9 (id=3430): r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) fchown(r0, 0x0, 0xee01) fchmodat(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0xfffffffb) r1 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000000240)={0x0, 0x0}, &(0x7f0000000280)=0x5) setuid(r2) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x14e174135c0b87af) 982.504798ms ago: executing program 0 (id=3431): openat$kvm(0xffffffffffffff9c, 0x0, 0x2, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cpuacct.usage_sys\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x1, 0x10012, r0, 0x0) munmap(&(0x7f0000001000/0x3000)=nil, 0x3000) mremap(&(0x7f00007ff000/0x4000)=nil, 0x4000, 0x4000, 0x7, &(0x7f0000580000/0x4000)=nil) r1 = syz_init_net_socket$nfc_llcp(0x27, 0x2, 0x1) setsockopt$nfc_llcp_NFC_LLCP_RW(r1, 0x118, 0x0, &(0x7f0000000040)=0x20004, 0x4) 792.442633ms ago: executing program 1 (id=3432): openat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x40042, 0x21) mount$fuse(0x0, 0x0, 0x0, 0x0, &(0x7f0000002140)={{}, 0x2c, {'rootmode', 0x3d, 0x8000}}) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f00000000c0), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000000100), 0x0, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=00000000000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',']) syz_fuse_handle_req(r0, &(0x7f0000008380)="000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000080000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000dc4e00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ba045abcd5dfc67d000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000230000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000050000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000209bfd66eea210560000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000020000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000040000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001354c4b600", 0x2000, &(0x7f00000062c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) ppoll(0x0, 0x0, 0x0, 0x0, 0x0) close(r0) 757.0433ms ago: executing program 0 (id=3433): r0 = syz_io_uring_setup(0x110, &(0x7f00000000c0)={0x0, 0x10, 0x0, 0x3, 0x80}, &(0x7f0000000180)=0x0, &(0x7f0000000280)=0x0) io_uring_register$IORING_REGISTER_FILES(r0, 0x2, &(0x7f0000000300)=[0xffffffffffffffff], 0x1) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r1, r2, &(0x7f00000002c0)=@IORING_OP_FILES_UPDATE={0x14, 0x0, 0x0, 0x0, 0xffffffffffffffff, &(0x7f0000000040), 0x1b}) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r3, 0x0) io_uring_enter(r0, 0x47f6, 0x0, 0x0, 0x0, 0x0) 678.825607ms ago: executing program 9 (id=3434): sched_setscheduler(0x0, 0x1, 0x0) sendmsg$NFQNL_MSG_CONFIG(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x8040}, 0x4004000) r0 = creat(&(0x7f0000000580)='./bus\x00', 0x0) r1 = fanotify_init(0xf00, 0x2) fanotify_mark(r1, 0x105, 0x8971, r0, 0x0) readv(r1, &(0x7f0000000280)=[{&(0x7f0000000200), 0x3c}], 0x4c) rename(&(0x7f0000000100)='./bus\x00', &(0x7f0000000140)='./file1\x00') 507.473662ms ago: executing program 0 (id=3435): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000240)=0x100000001, 0x59) connect$inet6(r0, &(0x7f0000000200)={0xa, 0xffff, 0xba, @loopback}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f0000000040), 0x1e) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x2, &(0x7f0000000080)=@gcm_128={{0x303}, "ba28597967d1b54c", "9712b0d86846b5ecc522bc6f13a6e30c", "ea0292da", "9e87dc79f4c04982"}, 0x28) close(r0) 330.701459ms ago: executing program 8 (id=3436): mkdirat(0xffffffffffffff9c, &(0x7f0000002000)='./file0\x00', 0x0) r0 = landlock_create_ruleset(&(0x7f0000000140)={0x4000}, 0x18, 0x0) landlock_restrict_self(r0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000640)='.\x00', 0x0, 0x0) renameat2(r1, &(0x7f00000001c0)='./file0\x00', r1, &(0x7f0000000200)='.\x02\x00', 0x4) renameat2(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', r1, &(0x7f00000000c0)='.\x02\x00', 0x2) 321.137307ms ago: executing program 0 (id=3437): r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r1 = dup(r0) r2 = syz_io_uring_setup(0x10e, &(0x7f0000000180)={0x0, 0x8d2dc, 0x0, 0x2}, &(0x7f00000003c0)=0x0, &(0x7f0000000140)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r3, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r3, r4, &(0x7f00000002c0)=@IORING_OP_ACCEPT={0xd, 0x40, 0x5, r1, 0x0, 0x0, 0x0, 0x80000}) io_uring_enter(r2, 0x47f5, 0x0, 0x0, 0x0, 0x0) 258.824005ms ago: executing program 9 (id=3438): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000280)={0x0, 0x1b, &(0x7f0000000080)=ANY=[@ANYBLOB="180000000200000000000000ffff000018110000", @ANYRES32=0x1, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000030380000500000085200000010000008520000003000000181100", @ANYRES32, @ANYBLOB="0000000000000000b7080000020000007b8af8ff00000000bfa20000000000000900000000000000b703000008000000b70400000000000085"], 0x0, 0x8, 0x0, 0x0, 0x41000, 0x64, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x3}, 0x94) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f00000000c0)="d8000000140081044e81f782db44b9040a1d080211000000040000a118000200ff05140100000e1208000f0100810401a80016ea1f000840042e5f54c92011148ed08734843cb12b00000803600cfab94dcf5c04", 0x54}], 0x1, 0x0, 0x0, 0x7400}, 0x0) syz_emit_ethernet(0x2a, &(0x7f0000000100)=ANY=[@ANYBLOB="bbbbbbbbbbbb8a0a63cdec5908060001080006"], 0x0) r0 = socket$packet(0x11, 0x3, 0x300) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f0000000080)={'batadv0\x00', 0x0}) sendto$packet(r0, &(0x7f0000000100)="f257a8ea7bc273dfaeab96850806", 0x2a, 0x0, &(0x7f0000000200)={0x11, 0x0, r1, 0x1, 0x0, 0x6, @link_local}, 0x14) 175.325102ms ago: executing program 8 (id=3439): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f00000004c0)={0x26, 'hash\x00', 0x0, 0x0, 'cmac(aes-aesni)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r1 = accept4(r0, 0x0, 0x0, 0x800) sendmsg$RDMA_NLDEV_CMD_STAT_GET(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000300)=ANY=[], 0xfffffdb6}, 0x1, 0x0, 0x0, 0x20000040}, 0x200008c1) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r2, 0x0) 136.594933ms ago: executing program 0 (id=3440): bpf$PROG_LOAD(0x5, 0x0, 0x0) r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0) write$P9_RVERSION(0xffffffffffffffff, 0x0, 0x0) bind$bt_l2cap(r0, &(0x7f0000000000)={0x1f, 0x0, @any, 0x4, 0x1}, 0xe) listen(r0, 0x90004) syz_emit_vhci(&(0x7f0000000140)=ANY=[@ANYBLOB="043e130100c90001"], 0x16) ppoll(&(0x7f00000000c0)=[{r0, 0x60}], 0x1, 0x0, 0x0, 0x0) 0s ago: executing program 9 (id=3441): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) r1 = socket(0x10, 0x80003, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000300)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_prio={{0x9}, {0x18, 0x2, {0xf, "0000000000000000000100000e00"}}}]}, 0x48}, 0x1, 0x0, 0x0, 0x2000000}, 0x40000) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f00000000c0), 0x4) sendmsg$nl_generic(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000080)=ANY=[], 0x78}}, 0x0) kernel console output (not intermixed with test programs): o 778 [ 771.919284][ C0] vkms_vblank_simulate: vblank timer overrun [ 771.926105][T13035] syz.0.2400 calls setitimer() with new_value NULL pointer. Misfeature support will be removed [ 771.951167][ T8387] usb 10-1: config 0 interface 0 altsetting 0 bulk endpoint 0x6 has invalid maxpacket 1023 [ 771.951201][ T8387] usb 10-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xBA, changing to 0x8A [ 771.951227][ T8387] usb 10-1: config 0 interface 0 altsetting 0 bulk endpoint 0x8A has invalid maxpacket 121 [ 771.954502][ T8387] usb 10-1: New USB device found, idVendor=2294, idProduct=425b, bcdDevice=a2.10 [ 771.954544][ T8387] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 771.954563][ T8387] usb 10-1: Product: syz [ 771.954577][ T8387] usb 10-1: Manufacturer: syz [ 771.954593][ T8387] usb 10-1: SerialNumber: syz [ 772.029015][ T8387] usb 10-1: config 0 descriptor?? [ 772.029985][T13021] raw-gadget.0 gadget.9: fail, usb_ep_enable returned -22 [ 772.030124][T13021] raw-gadget.0 gadget.9: fail, usb_ep_enable returned -22 [ 772.030996][ T37] kauditd_printk_skb: 1 callbacks suppressed [ 772.031012][ T37] audit: type=1326 audit(1762725906.748:597): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=13034 comm="syz.0.2400" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f374cbaf6c9 code=0x7ffc0000 [ 772.031198][ T37] audit: type=1326 audit(1762725906.748:598): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=13034 comm="syz.0.2400" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f374cbaf6c9 code=0x7ffc0000 [ 772.032704][ T37] audit: type=1326 audit(1762725906.748:599): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=13034 comm="syz.0.2400" exe="/root/syz-executor" sig=0 arch=c000003e syscall=334 compat=0 ip=0x7f374cbaf6c9 code=0x7ffc0000 [ 772.032767][ T37] audit: type=1326 audit(1762725906.748:600): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=13034 comm="syz.0.2400" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f374cbaf6c9 code=0x7ffc0000 [ 772.034700][ T8387] usb 10-1: ucan: probing device on interface #0 [ 772.035436][ T37] audit: type=1326 audit(1762725906.748:601): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=13034 comm="syz.0.2400" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f374cbaf6c9 code=0x7ffc0000 [ 772.035888][ T37] audit: type=1326 audit(1762725906.748:602): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=13034 comm="syz.0.2400" exe="/root/syz-executor" sig=0 arch=c000003e syscall=46 compat=0 ip=0x7f374cbaf6c9 code=0x7ffc0000 [ 772.036195][ T37] audit: type=1326 audit(1762725906.748:603): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=13034 comm="syz.0.2400" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f374cbaf6c9 code=0x7ffc0000 [ 772.087373][ T37] audit: type=1326 audit(1762725906.748:604): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=13034 comm="syz.0.2400" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f374cbaf6c9 code=0x7ffc0000 [ 772.441713][ T8387] usb 10-1: ucan: device reported invalid tx-fifo size [ 772.441755][ T8387] usb 10-1: ucan: probe failed; try to update the device firmware [ 772.633823][ C0] vkms_vblank_simulate: vblank timer overrun [ 772.663170][T11678] usb 10-1: USB disconnect, device number 8 [ 772.797597][T12876] team0: Port device team_slave_0 added [ 773.026832][T13043] tipc: Enabling of bearer rejected, already enabled [ 773.094174][T13046] macsec2: entered allmulticast mode [ 773.094201][T13046] macvlan1: entered allmulticast mode [ 773.094216][T13046] veth1_vlan: entered allmulticast mode [ 773.254806][ C0] vkms_vblank_simulate: vblank timer overrun [ 773.283085][T13046] macvlan1: left allmulticast mode [ 773.283109][T13046] veth1_vlan: left allmulticast mode [ 773.459776][T12876] team0: Port device team_slave_1 added [ 773.541507][T13054] vcan0: tx drop: invalid da for name 0x00000000000000c8 [ 773.625255][T13056] input: syz1 as /devices/virtual/input/input26 [ 773.732485][ C0] vkms_vblank_simulate: vblank timer overrun [ 773.852981][ C0] vkms_vblank_simulate: vblank timer overrun [ 774.288398][T12379] hsr_slave_0: left promiscuous mode [ 774.337889][T12379] hsr_slave_1: left promiscuous mode [ 774.339023][T12379] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 774.339052][T12379] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 774.439001][ C0] vkms_vblank_simulate: vblank timer overrun [ 774.495793][T12379] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 774.495823][T12379] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 774.531231][T12379] batman_adv: batadv0: Interface deactivated: macsec1 [ 774.531268][T12379] batman_adv: batadv0: Removing interface: macsec1 [ 774.682188][T12379] batadv_slave_0: left promiscuous mode [ 774.682467][T12379] veth1_macvtap: left promiscuous mode [ 774.682569][T12379] veth0_macvtap: left promiscuous mode [ 774.703503][T12379] veth1_vlan: left promiscuous mode [ 774.703817][T12379] veth0_vlan: left promiscuous mode [ 775.453793][ C0] vkms_vblank_simulate: vblank timer overrun [ 775.596732][ T8405] usb 9-1: new high-speed USB device number 4 using dummy_hcd [ 775.666818][ C0] vkms_vblank_simulate: vblank timer overrun [ 775.733392][ C0] vkms_vblank_simulate: vblank timer overrun [ 775.746785][ T8405] usb 9-1: Using ep0 maxpacket: 32 [ 775.749306][ T8405] usb 9-1: config 0 has an invalid interface number: 85 but max is 0 [ 775.749335][ T8405] usb 9-1: config 0 has no interface number 0 [ 775.749384][ T8405] usb 9-1: config 0 interface 85 altsetting 7 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 775.749405][ T8405] usb 9-1: config 0 interface 85 has no altsetting 0 [ 775.752382][ T8405] usb 9-1: New USB device found, idVendor=05ac, idProduct=0219, bcdDevice=f0.72 [ 775.752413][ T8405] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 775.752427][ T8405] usb 9-1: Product: syz [ 775.752437][ T8405] usb 9-1: Manufacturer: syz [ 775.752447][ T8405] usb 9-1: SerialNumber: syz [ 775.800536][ T8405] usb 9-1: config 0 descriptor?? [ 776.353839][ C0] vkms_vblank_simulate: vblank timer overrun [ 776.419419][ T8405] appletouch 9-1:0.85: Geyser mode initialized. [ 776.422642][ T8405] input: appletouch as /devices/platform/dummy_hcd.8/usb9/9-1/9-1:0.85/input/input27 [ 776.623126][T11678] usb 9-1: USB disconnect, device number 4 [ 776.749672][T11678] appletouch 9-1:0.85: input: appletouch disconnected [ 776.794075][ C0] vkms_vblank_simulate: vblank timer overrun [ 776.851772][ C0] vkms_vblank_simulate: vblank timer overrun [ 776.953406][ C0] vkms_vblank_simulate: vblank timer overrun [ 777.006656][ C0] vkms_vblank_simulate: vblank timer overrun [ 777.125675][ C0] vkms_vblank_simulate: vblank timer overrun [ 777.251485][ C0] vkms_vblank_simulate: vblank timer overrun [ 777.336077][ C0] vkms_vblank_simulate: vblank timer overrun [ 777.602789][ C0] vkms_vblank_simulate: vblank timer overrun [ 777.834701][ C0] vkms_vblank_simulate: vblank timer overrun [ 778.008166][ C0] vkms_vblank_simulate: vblank timer overrun [ 778.079569][T12379] team0 (unregistering): Port device team_slave_1 removed [ 778.186511][ C0] vkms_vblank_simulate: vblank timer overrun [ 778.272745][ C0] vkms_vblank_simulate: vblank timer overrun [ 778.377548][T12379] team0 (unregistering): Port device team_slave_0 removed [ 778.476116][ C0] vkms_vblank_simulate: vblank timer overrun [ 778.542602][ C0] vkms_vblank_simulate: vblank timer overrun [ 778.616015][ C0] vkms_vblank_simulate: vblank timer overrun [ 778.672068][ C0] vkms_vblank_simulate: vblank timer overrun [ 778.890994][ C0] vkms_vblank_simulate: vblank timer overrun [ 779.206411][ C0] vkms_vblank_simulate: vblank timer overrun [ 779.284874][ C0] vkms_vblank_simulate: vblank timer overrun [ 779.628008][ C0] vkms_vblank_simulate: vblank timer overrun [ 779.725790][ C0] vkms_vblank_simulate: vblank timer overrun [ 779.772844][ C0] vkms_vblank_simulate: vblank timer overrun [ 779.819642][ C0] vkms_vblank_simulate: vblank timer overrun [ 779.871370][ C0] vkms_vblank_simulate: vblank timer overrun [ 779.932906][ C0] vkms_vblank_simulate: vblank timer overrun [ 780.118072][ C0] vkms_vblank_simulate: vblank timer overrun [ 780.232156][ C0] vkms_vblank_simulate: vblank timer overrun [ 780.453575][ C0] vkms_vblank_simulate: vblank timer overrun [ 780.656131][ C0] vkms_vblank_simulate: vblank timer overrun [ 780.708891][ C0] vkms_vblank_simulate: vblank timer overrun [ 781.178136][T12876] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 781.178150][T12876] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 781.178179][T12876] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 781.233348][T13090] syzkaller0: entered promiscuous mode [ 781.233377][T13090] syzkaller0: entered allmulticast mode [ 781.240112][T12876] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 781.240130][T12876] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 781.240165][T12876] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 781.424181][ C0] vkms_vblank_simulate: vblank timer overrun [ 781.748854][ C0] vkms_vblank_simulate: vblank timer overrun [ 782.040622][ C0] vkms_vblank_simulate: vblank timer overrun [ 782.086923][ C0] vkms_vblank_simulate: vblank timer overrun [ 782.140307][T12876] hsr_slave_0: entered promiscuous mode [ 782.141887][T12876] hsr_slave_1: entered promiscuous mode [ 782.143007][T12876] debugfs: 'hsr0' already exists in 'hsr' [ 782.143032][T12876] Cannot create hsr debugfs directory [ 782.167803][ C0] vkms_vblank_simulate: vblank timer overrun [ 782.335628][ C0] vkms_vblank_simulate: vblank timer overrun [ 782.458079][ C0] vkms_vblank_simulate: vblank timer overrun [ 782.608444][T13124] netlink: 312 bytes leftover after parsing attributes in process `syz.8.2433'. [ 782.808616][ C0] vkms_vblank_simulate: vblank timer overrun [ 782.960073][T13133] openvswitch: netlink: nsh attribute has 65288 unknown bytes. [ 782.960118][T13133] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 783.033283][ C0] vkms_vblank_simulate: vblank timer overrun [ 783.126894][T11678] usb 1-1: new high-speed USB device number 13 using dummy_hcd [ 783.147441][T13134] tipc: Enabled bearer , priority 0 [ 783.148336][T13134] syzkaller0: entered promiscuous mode [ 783.148358][T13134] syzkaller0: entered allmulticast mode [ 783.246875][T13134] tipc: Resetting bearer [ 783.279024][T11678] usb 1-1: config 17 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 783.279066][T11678] usb 1-1: config 17 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 783.279090][T11678] usb 1-1: config 17 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 783.279127][T11678] usb 1-1: New USB device found, idVendor=0458, idProduct=5003, bcdDevice= 0.00 [ 783.279147][T11678] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 783.315465][T13130] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 783.331971][T13132] tipc: Resetting bearer [ 783.421360][ C0] vkms_vblank_simulate: vblank timer overrun [ 783.460249][T13132] tipc: Disabling bearer [ 784.013862][T13154] gtp0: entered promiscuous mode [ 784.013888][T13154] gtp0: entered allmulticast mode [ 784.344949][T11678] aiptek 1-1:17.0: Aiptek using 400 ms programming speed [ 784.354377][T11678] input: Aiptek as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:17.0/input/input28 [ 784.598704][ C0] aiptek 1-1:17.0: aiptek_irq - usb_submit_urb failed with result -19 [ 784.598981][T11678] usb 1-1: USB disconnect, device number 13 [ 785.230547][T12876] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 785.326650][ T8382] usb 4-1: new high-speed USB device number 36 using dummy_hcd [ 785.371986][ C0] vkms_vblank_simulate: vblank timer overrun [ 785.403549][T12876] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 785.465562][T12876] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 785.489505][ T8382] usb 4-1: Using ep0 maxpacket: 8 [ 785.492173][ T8382] usb 4-1: config 0 has an invalid interface number: 55 but max is 0 [ 785.492202][ T8382] usb 4-1: config 0 has no interface number 0 [ 785.492257][ T8382] usb 4-1: config 0 interface 55 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 785.492283][ T8382] usb 4-1: config 0 interface 55 altsetting 0 has an endpoint descriptor with address 0xAB, changing to 0x8B [ 785.492312][ T8382] usb 4-1: config 0 interface 55 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 785.492341][ T8382] usb 4-1: config 0 interface 55 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 2 [ 785.492388][ T8382] usb 4-1: New USB device found, idVendor=0f11, idProduct=1080, bcdDevice=fc.6a [ 785.492413][ T8382] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 785.590698][T12876] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 785.594656][ T8382] usb 4-1: config 0 descriptor?? [ 785.617536][ T8382] ldusb 4-1:0.55: LD USB Device #0 now attached to major 180 minor 0 [ 785.766951][T11678] usb 10-1: new high-speed USB device number 9 using dummy_hcd [ 785.807704][T12876] 8021q: adding VLAN 0 to HW filter on device bond0 [ 785.860926][ T5889] usb 4-1: USB disconnect, device number 36 [ 785.861782][T12876] 8021q: adding VLAN 0 to HW filter on device team0 [ 785.871380][ T5889] ldusb 4-1:0.55: LD USB Device #0 now disconnected [ 785.895913][T12382] bridge0: port 1(bridge_slave_0) entered blocking state [ 785.896135][T12382] bridge0: port 1(bridge_slave_0) entered forwarding state [ 785.925445][T11678] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 785.925457][T12411] bridge0: port 2(bridge_slave_1) entered blocking state [ 785.925481][T11678] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 785.934137][T11678] usb 10-1: New USB device found, idVendor=256c, idProduct=006d, bcdDevice= 0.00 [ 785.934176][T11678] usb 10-1: New USB device strings: Mfr=2, Product=0, SerialNumber=0 [ 785.934203][T11678] usb 10-1: Manufacturer: syz [ 785.961249][T11678] usb 10-1: config 0 descriptor?? [ 785.983737][T12411] bridge0: port 2(bridge_slave_1) entered forwarding state [ 786.137790][ C0] vkms_vblank_simulate: vblank timer overrun [ 786.241403][T13192] vcan0: tx drop: invalid da for name 0x0000020000000003 [ 786.529605][ T37] audit: type=1326 audit(1762725921.248:605): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=13200 comm="syz.0.2463" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f374cbaf6c9 code=0x7ffc0000 [ 786.529780][ T37] audit: type=1326 audit(1762725921.248:606): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=13200 comm="syz.0.2463" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f374cbaf6c9 code=0x7ffc0000 [ 786.534306][ T37] audit: type=1326 audit(1762725921.248:607): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=13200 comm="syz.0.2463" exe="/root/syz-executor" sig=0 arch=c000003e syscall=334 compat=0 ip=0x7f374cbaf6c9 code=0x7ffc0000 [ 786.534628][ T37] audit: type=1326 audit(1762725921.248:608): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=13200 comm="syz.0.2463" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f374cbaf6c9 code=0x7ffc0000 [ 786.534961][ T37] audit: type=1326 audit(1762725921.248:609): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=13200 comm="syz.0.2463" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f374cbaf6c9 code=0x7ffc0000 [ 786.535480][ T37] audit: type=1326 audit(1762725921.248:610): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=13200 comm="syz.0.2463" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f374cbaf6c9 code=0x7ffc0000 [ 786.535905][ T37] audit: type=1326 audit(1762725921.248:611): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=13200 comm="syz.0.2463" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f374cbaf6c9 code=0x7ffc0000 [ 786.915928][T12876] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 787.036914][T11678] uclogic 0003:256C:006D.001F: failed retrieving string descriptor #100: -71 [ 787.036981][T11678] uclogic 0003:256C:006D.001F: failed retrieving pen parameters: -71 [ 787.037002][T11678] uclogic 0003:256C:006D.001F: failed probing pen v1 parameters: -71 [ 787.037066][T11678] uclogic 0003:256C:006D.001F: failed probing parameters: -71 [ 787.037192][T11678] uclogic 0003:256C:006D.001F: probe with driver uclogic failed with error -71 [ 787.069506][T11678] usb 10-1: USB disconnect, device number 9 [ 787.836109][T12876] veth0_vlan: entered promiscuous mode [ 787.874491][T12876] veth1_vlan: entered promiscuous mode [ 788.016064][T12876] veth0_macvtap: entered promiscuous mode [ 788.031155][T12876] veth1_macvtap: entered promiscuous mode [ 788.086079][T12876] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 788.130888][T12876] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 788.182205][T12394] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 788.182778][T12394] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 788.182866][T12394] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 788.182977][T12394] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 789.893103][T13231] netlink: 20 bytes leftover after parsing attributes in process `syz.3.2472'. [ 789.988502][T13228] bond1: entered promiscuous mode [ 790.261953][T13235] kvm: requested 4190 ns i8254 timer period limited to 200000 ns [ 790.410683][T12405] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 790.410707][T12405] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 790.475982][T12405] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 790.476003][T12405] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 791.272677][ T37] audit: type=1326 audit(1762725925.988:612): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=13249 comm="syz.0.2480" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f374cbaf6c9 code=0x7fc00000 [ 791.481320][ T37] audit: type=1326 audit(1762725926.198:613): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=13257 comm="syz.1.2483" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f10f4a3f6c9 code=0x0 [ 791.886656][T11678] usb 9-1: new high-speed USB device number 5 using dummy_hcd [ 792.945444][ T37] audit: type=1326 audit(1762725927.658:614): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=13249 comm="syz.0.2480" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f374cbaf6c9 code=0x7fc00000 [ 793.016693][T11678] usb 9-1: Using ep0 maxpacket: 32 [ 793.095600][T11678] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 793.095638][T11678] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 793.095680][T11678] usb 9-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 793.095705][T11678] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 793.153563][T11678] usb 9-1: config 0 descriptor?? [ 793.186865][T11678] hub 9-1:0.0: USB hub found [ 793.386308][T11678] hub 9-1:0.0: 1 port detected [ 793.997860][ T8405] hub 9-1:0.0: hub_ext_port_status failed (err = 0) [ 794.216597][T11678] usb 10-1: new high-speed USB device number 10 using dummy_hcd [ 794.327142][T11667] usb 9-1: USB disconnect, device number 5 [ 794.390091][T11678] usb 10-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 794.390131][T11678] usb 10-1: config 1 has an invalid descriptor of length 255, skipping remainder of the config [ 794.390153][T11678] usb 10-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 794.390213][T11678] usb 10-1: config 1 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 794.390242][T11678] usb 10-1: config 1 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 255, changing to 11 [ 794.390273][T11678] usb 10-1: config 1 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 794.444477][T11678] usb 10-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 794.444512][T11678] usb 10-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 794.444535][T11678] usb 10-1: Product: syz [ 794.444551][T11678] usb 10-1: Manufacturer: syz [ 794.496141][T13302] raw-gadget.1 gadget.9: fail, usb_ep_enable returned -22 [ 794.506955][T11678] cdc_wdm 10-1:1.0: skipping garbage [ 794.506976][T11678] cdc_wdm 10-1:1.0: skipping garbage [ 794.509270][T11678] cdc_wdm 10-1:1.0: cdc-wdm0: USB WDM device [ 794.509289][T11678] cdc_wdm 10-1:1.0: Unknown control protocol [ 794.712888][T11667] usb 10-1: USB disconnect, device number 10 [ 794.773138][T13315] Bluetooth: MGMT ver 1.23 [ 794.850025][T13319] netlink: 'syz.8.2504': attribute type 10 has an invalid length. [ 795.382381][T13319] bond0: (slave wlan1): Enslaving as an active interface with an up link [ 795.433242][T13316] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 795.508707][ T5819] Bluetooth: hci2: command 0x0406 tx timeout [ 796.859528][T13364] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 796.890298][T13365] tipc: Started in network mode [ 796.890333][T13365] tipc: Node identity 9e5d4c55b951, cluster identity 4711 [ 796.890558][T13365] tipc: Enabled bearer , priority 0 [ 796.924830][T13365] syzkaller0: entered promiscuous mode [ 796.924859][T13365] syzkaller0: entered allmulticast mode [ 797.000803][T13365] tipc: Resetting bearer [ 797.046810][T13361] tipc: Resetting bearer [ 797.246304][T13361] tipc: Disabling bearer [ 799.127016][ T8382] usb 9-1: new high-speed USB device number 6 using dummy_hcd [ 799.286826][ T8382] usb 9-1: Using ep0 maxpacket: 16 [ 799.293036][ T8382] usb 9-1: New USB device found, idVendor=2001, idProduct=4002, bcdDevice=df.bf [ 799.293072][ T8382] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 799.309920][ T8382] usb 9-1: config 0 descriptor?? [ 799.897739][ T37] audit: type=1326 audit(1762725934.618:615): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=13436 comm="syz.3.2546" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1f4551f6c9 code=0x7ffc0000 [ 799.897802][ T37] audit: type=1326 audit(1762725934.618:616): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=13436 comm="syz.3.2546" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1f4551f6c9 code=0x7ffc0000 [ 799.904309][ T37] audit: type=1326 audit(1762725934.618:617): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=13436 comm="syz.3.2546" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1f4551f6c9 code=0x7ffc0000 [ 799.904972][ T37] audit: type=1326 audit(1762725934.618:618): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=13436 comm="syz.3.2546" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1f4551f6c9 code=0x7ffc0000 [ 799.938513][ T37] audit: type=1326 audit(1762725934.658:619): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=13436 comm="syz.3.2546" exe="/root/syz-executor" sig=0 arch=c000003e syscall=101 compat=0 ip=0x7f1f4551f6c9 code=0x7ffc0000 [ 799.941222][ T37] audit: type=1326 audit(1762725934.658:620): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=13436 comm="syz.3.2546" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1f4551f6c9 code=0x7ffc0000 [ 799.945751][ T37] audit: type=1326 audit(1762725934.658:621): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=13436 comm="syz.3.2546" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1f4551f6c9 code=0x7ffc0000 [ 799.963792][ T37] audit: type=1326 audit(1762725934.668:622): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=13436 comm="syz.3.2546" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1f4551f6c9 code=0x7ffc0000 [ 799.973706][ T37] audit: type=1326 audit(1762725934.678:623): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=13436 comm="syz.3.2546" exe="/root/syz-executor" sig=0 arch=c000003e syscall=428 compat=0 ip=0x7f1f4551f6c9 code=0x7ffc0000 [ 799.974543][ T37] audit: type=1326 audit(1762725934.688:624): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=13436 comm="syz.3.2546" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1f4551f6c9 code=0x7ffc0000 [ 800.330148][T13443] netlink: 80 bytes leftover after parsing attributes in process `syz.9.2549'. [ 800.378118][ T8382] pegasus 9-1:0.0: probe with driver pegasus failed with error -71 [ 800.400898][ T8382] usb 9-1: USB disconnect, device number 6 [ 800.423614][T13443] netlink: 80 bytes leftover after parsing attributes in process `syz.9.2549'. [ 800.816959][ C0] vkms_vblank_simulate: vblank timer overrun [ 800.924178][ C0] vkms_vblank_simulate: vblank timer overrun [ 801.851653][ C0] vkms_vblank_simulate: vblank timer overrun [ 802.121507][ C0] vkms_vblank_simulate: vblank timer overrun [ 802.306291][T13469] FAT-fs (loop1): unable to read boot sector [ 802.706906][ T8387] usb 4-1: new high-speed USB device number 37 using dummy_hcd [ 802.867339][ T8387] usb 4-1: Using ep0 maxpacket: 16 [ 802.869796][ T8387] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 802.869834][ T8387] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 802.869885][ T8387] usb 4-1: New USB device found, idVendor=054c, idProduct=05c4, bcdDevice= 0.00 [ 802.869911][ T8387] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 802.930068][ T8387] usb 4-1: config 0 descriptor?? [ 803.347325][ C0] vkms_vblank_simulate: vblank timer overrun [ 803.441280][ T8387] playstation 0003:054C:05C4.0020: hidraw0: USB HID v0.00 Device [HID 054c:05c4] on usb-dummy_hcd.3-1/input0 [ 803.628352][ T8387] playstation 0003:054C:05C4.0020: Invalid byte count transferred, expected 16 got 0 [ 803.628383][ T8387] playstation 0003:054C:05C4.0020: Failed to retrieve DualShock4 pairing info: -22 [ 803.628439][ T8387] playstation 0003:054C:05C4.0020: Failed to get MAC address from DualShock4 [ 803.628457][ T8387] playstation 0003:054C:05C4.0020: Failed to create dualshock4. [ 803.633257][ T8387] playstation 0003:054C:05C4.0020: probe with driver playstation failed with error -22 [ 803.764408][T13496] 9pnet_fd: Insufficient options for proto=fd [ 803.857252][ T8387] libceph: connect (1)[c::]:6789 error -101 [ 803.857470][ T8387] libceph: mon0 (1)[c::]:6789 connect error [ 803.864043][ T8382] usb 4-1: USB disconnect, device number 37 [ 803.899253][ T8387] libceph: connect (1)[c::]:6789 error -101 [ 803.899460][ T8387] libceph: mon0 (1)[c::]:6789 connect error [ 804.158374][ T8382] libceph: connect (1)[c::]:6789 error -101 [ 804.158585][ T8382] libceph: mon0 (1)[c::]:6789 connect error [ 804.656006][T13501] ceph: No mds server is up or the cluster is laggy [ 804.671363][ T8387] libceph: connect (1)[c::]:6789 error -101 [ 804.671578][ T8387] libceph: mon0 (1)[c::]:6789 connect error [ 804.708030][ T8382] usb 2-1: new high-speed USB device number 11 using dummy_hcd [ 804.913101][ T8382] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 804.913163][ T8382] usb 2-1: config 1 interface 1 altsetting 1 bulk endpoint 0x82 has invalid maxpacket 1024 [ 804.913193][ T8382] usb 2-1: config 1 interface 1 altsetting 1 endpoint 0x3 has invalid wMaxPacketSize 0 [ 804.920318][ T8382] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 804.920351][ T8382] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 804.920371][ T8382] usb 2-1: Product: syz [ 804.920385][ T8382] usb 2-1: Manufacturer: syz [ 804.920400][ T8382] usb 2-1: SerialNumber: syz [ 804.995179][ T8382] cdc_mbim 2-1:1.0: skipping garbage [ 805.150569][T13507] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 805.887251][T13507] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 806.663698][ T8382] cdc_mbim 2-1:1.0: bind() failure [ 806.688194][ T8382] cdc_ncm 2-1:1.1: probe with driver cdc_ncm failed with error -71 [ 806.689122][ T8382] cdc_mbim 2-1:1.1: probe with driver cdc_mbim failed with error -71 [ 806.690978][ T8382] usbtest 2-1:1.1: probe with driver usbtest failed with error -71 [ 806.729449][ T8382] usb 2-1: USB disconnect, device number 11 [ 808.015086][ T1229] usb 4-1: new high-speed USB device number 38 using dummy_hcd [ 808.218809][ T1229] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 808.218848][ T1229] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 808.218890][ T1229] usb 4-1: New USB device found, idVendor=256c, idProduct=006e, bcdDevice= 0.00 [ 808.218915][ T1229] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 808.270723][ T1229] usb 4-1: config 0 descriptor?? [ 808.686966][T11667] usb 1-1: new high-speed USB device number 14 using dummy_hcd [ 808.846664][T11667] usb 1-1: Using ep0 maxpacket: 32 [ 808.855992][T11667] usb 1-1: config 0 has an invalid interface number: 51 but max is 0 [ 808.856022][T11667] usb 1-1: config 0 has no interface number 0 [ 808.890527][T11667] usb 1-1: New USB device found, idVendor=061d, idProduct=c150, bcdDevice=ce.6f [ 808.890791][T11667] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 808.890815][T11667] usb 1-1: Product: syz [ 808.890831][T11667] usb 1-1: Manufacturer: syz [ 808.890848][T11667] usb 1-1: SerialNumber: syz [ 808.923367][ T1229] usb 4-1: string descriptor 0 read error: -71 [ 808.924013][ T1229] uclogic 0003:256C:006E.0021: failed retrieving string descriptor #200: -71 [ 808.924077][ T1229] uclogic 0003:256C:006E.0021: failed retrieving pen parameters: -71 [ 808.924101][ T1229] uclogic 0003:256C:006E.0021: failed probing pen v2 parameters: -71 [ 808.924160][ T1229] uclogic 0003:256C:006E.0021: failed probing parameters: -71 [ 808.924298][ T1229] uclogic 0003:256C:006E.0021: probe with driver uclogic failed with error -71 [ 808.935217][T11667] usb 1-1: config 0 descriptor?? [ 808.969365][T11667] quatech2 1-1:0.51: Quatech 2nd gen USB to Serial Driver converter detected [ 808.997462][ T1229] usb 4-1: USB disconnect, device number 38 [ 809.193947][T11667] usb 1-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB0 [ 809.224494][T11667] usb 1-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB1 [ 809.436615][T11678] usb 10-1: new high-speed USB device number 11 using dummy_hcd [ 809.589198][T11678] usb 10-1: Using ep0 maxpacket: 16 [ 809.591599][T11678] usb 10-1: config 0 has an invalid interface number: 8 but max is 0 [ 809.591626][T11678] usb 10-1: config 0 has no interface number 0 [ 809.591677][T11678] usb 10-1: config 0 interface 8 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 809.591708][T11678] usb 10-1: config 0 interface 8 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0 [ 809.594109][T11678] usb 10-1: New USB device found, idVendor=0d8c, idProduct=000e, bcdDevice=8e.8f [ 809.594140][T11678] usb 10-1: New USB device strings: Mfr=0, Product=24, SerialNumber=3 [ 809.594162][T11678] usb 10-1: Product: syz [ 809.594178][T11678] usb 10-1: SerialNumber: syz [ 809.603491][ C1] usb 1-1: qt2_read_bulk_callback - non-zero urb status: -71 [ 809.605118][ T1229] usb 1-1: USB disconnect, device number 14 [ 809.615903][ T1229] quatech-serial ttyUSB0: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB0 [ 809.627352][ T1229] quatech-serial ttyUSB1: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB1 [ 809.628289][ T1229] quatech2 1-1:0.51: device disconnected [ 809.715714][T11678] usb 10-1: config 0 descriptor?? [ 809.730835][T11678] cm109 10-1:0.8: invalid payload size 0, expected 4 [ 809.734083][T11678] input: CM109 USB driver as /devices/platform/dummy_hcd.9/usb10/10-1/10-1:0.8/input/input29 [ 809.952206][ C0] cm109 10-1:0.8: cm109_urb_ctl_callback: usb_submit_urb (urb_irq) failed -90 [ 810.528884][ C0] cm109_urb_ctl_callback: 382 callbacks suppressed [ 810.528911][ C0] cm109 10-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 810.529375][ C0] cm109 10-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 810.529825][ C0] cm109 10-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 810.530297][ C0] cm109 10-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 810.530803][ C0] cm109 10-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 810.531248][ C0] cm109 10-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 810.531683][ C0] cm109 10-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 810.532152][ C0] cm109 10-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 810.532511][ C0] cm109 10-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 810.532796][ C0] cm109 10-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 810.534844][ T1229] usb 10-1: USB disconnect, device number 11 [ 810.534958][ C0] cm109 10-1:0.8: cm109_submit_buzz_toggle: usb_submit_urb (urb_ctl) failed -19 [ 810.668953][T13591] netlink: 96 bytes leftover after parsing attributes in process `syz.8.2613'. [ 810.678757][ T1229] cm109 10-1:0.8: cm109_toggle_buzzer_sync: usb_control_msg() failed -19 [ 811.073209][T13601] netlink: 'syz.1.2618': attribute type 1 has an invalid length. [ 811.387358][T13614] overlayfs: "xino" feature enabled using 3 upper inode bits. [ 811.402209][T13614] overlayfs: "xino" feature enabled using 3 upper inode bits. [ 811.616627][ T8405] usb 10-1: new high-speed USB device number 12 using dummy_hcd [ 811.776598][ T8405] usb 10-1: Using ep0 maxpacket: 32 [ 811.778710][ T8405] usb 10-1: config index 0 descriptor too short (expected 35577, got 27) [ 811.778739][ T8405] usb 10-1: config 1 has too many interfaces: 92, using maximum allowed: 32 [ 811.778763][ T8405] usb 10-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 811.778785][ T8405] usb 10-1: config 1 has 1 interface, different from the descriptor's value: 92 [ 811.778810][ T8405] usb 10-1: config 1 has no interface number 0 [ 811.778862][ T8405] usb 10-1: config 1 interface 1 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 17 [ 811.778909][ T8405] usb 10-1: New USB device found, idVendor=0e41, idProduct=5051, bcdDevice=d5.e8 [ 811.778945][ T8405] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 811.894814][ T8405] snd_usb_pod 10-1:1.1: Line 6 Pocket POD found [ 812.288613][ T8405] snd_usb_pod 10-1:1.1: set_interface failed [ 812.289443][ T8405] snd_usb_pod 10-1:1.1: Line 6 Pocket POD now disconnected [ 812.289672][ T8405] snd_usb_pod 10-1:1.1: probe with driver snd_usb_pod failed with error -71 [ 812.294458][ T8405] usb 10-1: USB disconnect, device number 12 [ 813.072832][ T8405] IPVS: starting estimator thread 0... [ 813.166682][T13655] IPVS: using max 8 ests per chain, 19200 per kthread [ 813.270003][T13663] netlink: 124 bytes leftover after parsing attributes in process `syz.8.2642'. [ 813.270049][T13663] netlink: 4 bytes leftover after parsing attributes in process `syz.8.2642'. [ 813.416811][ T5889] usb 1-1: new high-speed USB device number 15 using dummy_hcd [ 813.417348][ T8405] usb 2-1: new high-speed USB device number 12 using dummy_hcd [ 813.637044][ T8405] usb 2-1: Using ep0 maxpacket: 8 [ 813.663621][ T5889] usb 1-1: Using ep0 maxpacket: 32 [ 813.765532][ T5889] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 813.766235][ T5889] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 813.788240][ T8405] usb 2-1: config index 0 descriptor too short (expected 301, got 45) [ 813.788304][ T8405] usb 2-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 813.788327][ T8405] usb 2-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 813.788352][ T8405] usb 2-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 813.788376][ T8405] usb 2-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 813.788417][ T8405] usb 2-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 813.788439][ T8405] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 813.797554][ T5889] usb 1-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 813.797587][ T5889] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 813.895147][ T5889] usb 1-1: config 0 descriptor?? [ 813.929170][ T1321] ieee802154 phy0 wpan0: encryption failed: -22 [ 813.929234][ T1321] ieee802154 phy1 wpan1: encryption failed: -22 [ 813.982821][ T5889] hub 1-1:0.0: USB hub found [ 814.145223][ T5889] hub 1-1:0.0: 1 port detected [ 814.570209][ T5889] usb 1-1: USB disconnect, device number 15 [ 814.633846][T13680] tipc: Enabled bearer , priority 0 [ 814.635085][T13680] syzkaller0: entered promiscuous mode [ 814.635110][T13680] syzkaller0: entered allmulticast mode [ 814.767967][T13679] tipc: Resetting bearer [ 814.776643][T11667] usb 4-1: new high-speed USB device number 39 using dummy_hcd [ 814.957796][T11667] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 814.957828][T11667] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 814.957853][T11667] usb 4-1: config 1 has no interface number 0 [ 814.957912][T11667] usb 4-1: config 1 interface 1 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 814.958645][T13679] tipc: Disabling bearer [ 814.961490][T11667] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 814.961521][T11667] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 814.961544][T11667] usb 4-1: Product: syz [ 814.961560][T11667] usb 4-1: Manufacturer: syz [ 814.961576][T11667] usb 4-1: SerialNumber: syz [ 814.984899][T11667] usb 4-1: selecting invalid altsetting 1 [ 815.593231][T13697] tipc: Enabled bearer , priority 0 [ 815.610202][T11667] usb 4-1: selecting invalid altsetting 1 [ 815.610264][T11667] cdc_ncm 4-1:1.1: bind() failure [ 815.613729][T13697] syzkaller0: entered promiscuous mode [ 815.613757][T13697] syzkaller0: entered allmulticast mode [ 815.644366][T13697] tipc: Resetting bearer [ 815.677393][T13696] tipc: Resetting bearer [ 815.813256][T11678] usb 4-1: USB disconnect, device number 39 [ 815.818864][T13696] tipc: Disabling bearer [ 815.986771][ T5819] Bluetooth: hci3: command 0x0406 tx timeout [ 816.056621][ T5889] usb 9-1: new full-speed USB device number 7 using dummy_hcd [ 816.112552][T13703] netlink: 'syz.9.2660': attribute type 1 has an invalid length. [ 816.112577][T13703] netlink: 'syz.9.2660': attribute type 2 has an invalid length. [ 816.209278][ T5889] usb 9-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 816.209315][ T5889] usb 9-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 816.209363][ T5889] usb 9-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 816.209389][ T5889] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 816.227826][ T8387] usb 2-1: USB disconnect, device number 12 [ 816.399997][T13707] tipc: Enabled bearer , priority 0 [ 816.402265][T13707] syzkaller0: entered promiscuous mode [ 816.402295][T13707] syzkaller0: entered allmulticast mode [ 816.477155][ T5889] usb 9-1: usb_control_msg returned -32 [ 816.477208][ T5889] usbtmc 9-1:16.0: can't read capabilities [ 816.604736][ T5889] usb 9-1: USB disconnect, device number 7 [ 816.651711][T13706] tipc: Resetting bearer [ 816.842454][T13723] loop8: detected capacity change from 0 to 8 [ 816.844237][T13723] Dev loop8: unable to read RDB block 8 [ 816.844291][T13723] loop8: unable to read partition table [ 816.844504][T13723] loop8: partition table beyond EOD, truncated [ 816.844519][T13723] loop_reread_partitions: partition scan of loop8 (þ被xü^>Ñà– ) failed (rc=-5) [ 816.899351][T13706] tipc: Disabling bearer [ 817.460790][T13742] netlink: 24 bytes leftover after parsing attributes in process `syz.0.2677'. [ 817.856393][T13767] netlink: 20 bytes leftover after parsing attributes in process `syz.1.2690'. [ 817.896683][ T8405] usb 9-1: new high-speed USB device number 8 using dummy_hcd [ 817.993652][T13771] 9p: Unknown access argument 18446744073709551615: -34 [ 818.013146][T13773] netdevsim netdevsim1: Direct firmware load for @ failed with error -2 [ 818.013191][T13773] netdevsim netdevsim1: Falling back to sysfs fallback for: @ [ 818.058156][ T8405] usb 9-1: Using ep0 maxpacket: 16 [ 818.065467][ T8405] usb 9-1: New USB device found, idVendor=06be, idProduct=a232, bcdDevice=33.f3 [ 818.065507][ T8405] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 818.065530][ T8405] usb 9-1: Product: syz [ 818.065546][ T8405] usb 9-1: Manufacturer: syz [ 818.065564][ T8405] usb 9-1: SerialNumber: syz [ 818.092468][ T8405] usb 9-1: config 0 descriptor?? [ 818.333580][T13779] genirq: Flags mismatch irq 4. 00202000 (pcl816) vs. 00202080 (ttyS0) [ 818.335163][T13779] comedi comedi3: comedi_config --init_data is deprecated [ 818.577178][ T8405] dvb-usb: found a 'AME DTV-5100 USB2.0 DVB-T' in warm state. [ 818.587273][ T8405] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 818.588545][ T8405] dvbdev: DVB: registering new adapter (AME DTV-5100 USB2.0 DVB-T) [ 818.588618][ T8405] usb 9-1: media controller created [ 818.680496][ T8405] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 818.782741][ T8405] zl10353_read_register: readreg error (reg=127, ret==0) [ 818.782805][ T8405] dvb-usb: no frontend was attached by 'AME DTV-5100 USB2.0 DVB-T' [ 818.782821][ T8405] dvb-usb: AME DTV-5100 USB2.0 DVB-T successfully initialized and connected. [ 818.791494][ T8405] usb 9-1: USB disconnect, device number 8 [ 818.816688][ T8382] usb 1-1: new high-speed USB device number 16 using dummy_hcd [ 818.926901][ T8405] dvb-usb: AME DTV-5100 USB2.0 DVB-T successfully deinitialized and disconnected. [ 818.976618][ T8382] usb 1-1: Using ep0 maxpacket: 32 [ 818.979081][ T8382] usb 1-1: config 0 has no interfaces? [ 818.979121][ T8382] usb 1-1: New USB device found, idVendor=0fd9, idProduct=0021, bcdDevice=29.40 [ 818.979148][ T8382] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 818.985693][ T8382] usb 1-1: config 0 descriptor?? [ 819.837956][ T8405] usb 1-1: USB disconnect, device number 16 [ 820.020764][T13811] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2708'. [ 820.150484][T13811] vlan2: entered allmulticast mode [ 820.150960][T13811] bridge0: port 3(vlan2) entered blocking state [ 820.151329][T13811] bridge0: port 3(vlan2) entered disabled state [ 820.155113][T13811] vlan2: entered promiscuous mode [ 820.651967][T13824] netlink: 20 bytes leftover after parsing attributes in process `syz.8.2715'. [ 821.946766][ T8387] usb 9-1: new high-speed USB device number 9 using dummy_hcd [ 822.039783][T13841] netlink: 20 bytes leftover after parsing attributes in process `syz.0.2722'. [ 822.042374][T13843] netlink: 16 bytes leftover after parsing attributes in process `syz.9.2723'. [ 822.126613][ T8387] usb 9-1: Using ep0 maxpacket: 16 [ 822.153635][ T8387] usb 9-1: config 0 interface 0 altsetting 2 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 822.153673][ T8387] usb 9-1: config 0 interface 0 altsetting 2 endpoint 0x81 has invalid wMaxPacketSize 0 [ 822.153698][ T8387] usb 9-1: config 0 interface 0 has no altsetting 0 [ 822.153737][ T8387] usb 9-1: New USB device found, idVendor=0458, idProduct=0138, bcdDevice= 0.00 [ 822.153762][ T8387] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 822.215104][ T8387] usb 9-1: config 0 descriptor?? [ 822.702142][ T8387] kye 0003:0458:0138.0022: unknown main item tag 0x0 [ 822.702473][ T8387] kye 0003:0458:0138.0022: reserved main item tag 0xd [ 822.702507][ T8387] kye 0003:0458:0138.0022: reserved main item tag 0xe [ 822.702610][ T8387] kye 0003:0458:0138.0022: unknown main item tag 0x3 [ 822.702704][ T8387] kye 0003:0458:0138.0022: unexpected long global item [ 822.703628][ T8387] kye 0003:0458:0138.0022: parse failed [ 822.703715][ T8387] kye 0003:0458:0138.0022: probe with driver kye failed with error -22 [ 822.922094][ T8405] usb 9-1: USB disconnect, device number 9 [ 823.069627][T13858] batadv_slave_1: entered promiscuous mode [ 823.084188][T13857] batadv_slave_1: left promiscuous mode [ 823.612833][ T8405] Process accounting resumed [ 823.718132][T13872] Process accounting resumed [ 823.897514][ T37] kauditd_printk_skb: 9 callbacks suppressed [ 823.897533][ T37] audit: type=1326 audit(1762725958.618:634): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=13878 comm="syz.1.2738" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f10f4a3f6c9 code=0x0 [ 824.657029][ T8405] usb 1-1: new high-speed USB device number 17 using dummy_hcd [ 824.770835][T13896] loop2: detected capacity change from 0 to 7 [ 824.811446][T13896] Dev loop2: unable to read RDB block 7 [ 824.811501][T13896] loop2: AHDI p1 p2 p3 [ 824.811533][T13896] loop2: partition table partially beyond EOD, truncated [ 824.811648][T13896] loop2: p1 start 1601398130 is beyond EOD, truncated [ 824.811669][T13896] loop2: p2 start 1702059890 is beyond EOD, truncated [ 824.867287][ T8405] usb 1-1: Using ep0 maxpacket: 32 [ 824.870187][ T8405] usb 1-1: config 0 interface 0 has no altsetting 0 [ 824.873338][ T8405] usb 1-1: New USB device found, idVendor=16d0, idProduct=10b8, bcdDevice=de.8e [ 824.873370][ T8405] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 824.873392][ T8405] usb 1-1: Product: syz [ 824.873408][ T8405] usb 1-1: Manufacturer: syz [ 824.873424][ T8405] usb 1-1: SerialNumber: syz [ 824.911763][ T8405] usb 1-1: config 0 descriptor?? [ 825.330105][ T8405] gs_usb 1-1:0.0: Configuring for 1 interfaces [ 825.748020][ T8405] gs_usb 1-1:0.0: Disabling termination support for channel 0 (-EPROTO) [ 825.775719][ T8405] usb 1-1: USB disconnect, device number 17 [ 826.241494][ T8387] kernel write not supported for file bpf-prog (pid: 8387 comm: kworker/1:10) [ 826.466769][T11678] usb 2-1: new high-speed USB device number 13 using dummy_hcd [ 826.634390][T11678] usb 2-1: Using ep0 maxpacket: 8 [ 826.640657][T11678] usb 2-1: config 179 has an invalid interface number: 65 but max is 0 [ 826.640693][T11678] usb 2-1: config 179 has no interface number 0 [ 826.640752][T11678] usb 2-1: config 179 interface 65 altsetting 0 endpoint 0xF has an invalid bInterval 0, changing to 7 [ 826.640787][T11678] usb 2-1: config 179 interface 65 altsetting 0 endpoint 0xF has invalid maxpacket 1025, setting to 1024 [ 826.640827][T11678] usb 2-1: config 179 interface 65 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 826.640861][T11678] usb 2-1: config 179 interface 65 altsetting 0 endpoint 0x83 has invalid maxpacket 41728, setting to 1024 [ 826.640896][T11678] usb 2-1: config 179 interface 65 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 23 [ 826.640956][T11678] usb 2-1: New USB device found, idVendor=12ab, idProduct=90a3, bcdDevice=1e.eb [ 826.640984][T11678] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 826.675963][T13915] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 826.913545][T13923] loop6: detected capacity change from 0 to 524287999 [ 826.968849][T13915] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 826.969212][T13915] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 827.246202][ C0] xpad 2-1:179.65: xpad_irq_out - usb_submit_urb failed with result -19 [ 827.246214][T11667] usb 2-1: USB disconnect, device number 13 [ 827.246344][ C0] xpad 2-1:179.65: xpad_irq_in - usb_submit_urb failed with result -19 [ 829.548920][T11678] usb 1-1: new high-speed USB device number 18 using dummy_hcd [ 830.449151][T11678] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 830.449189][T11678] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 830.449213][T11678] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 830.449258][T11678] usb 1-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 830.449283][T11678] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 830.467152][T11678] usb 1-1: config 0 descriptor?? [ 830.914686][T11678] plantronics 0003:047F:FFFF.0023: unknown main item tag 0x0 [ 830.914727][T11678] plantronics 0003:047F:FFFF.0023: unknown main item tag 0x0 [ 830.914757][T11678] plantronics 0003:047F:FFFF.0023: unknown main item tag 0x0 [ 830.914786][T11678] plantronics 0003:047F:FFFF.0023: unknown main item tag 0x0 [ 830.914814][T11678] plantronics 0003:047F:FFFF.0023: unknown main item tag 0x0 [ 830.914841][T11678] plantronics 0003:047F:FFFF.0023: unknown main item tag 0x0 [ 830.946602][T11678] plantronics 0003:047F:FFFF.0023: unknown main item tag 0x0 [ 830.946637][T11678] plantronics 0003:047F:FFFF.0023: unknown main item tag 0x0 [ 830.946665][T11678] plantronics 0003:047F:FFFF.0023: unknown main item tag 0x0 [ 830.955956][T11678] plantronics 0003:047F:FFFF.0023: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.0-1/input0 [ 831.182279][ T8405] usb 1-1: USB disconnect, device number 18 [ 831.466616][T11678] usb 10-1: new high-speed USB device number 13 using dummy_hcd [ 831.576588][ T8387] usb 4-1: new high-speed USB device number 40 using dummy_hcd [ 831.616598][T11678] usb 10-1: Using ep0 maxpacket: 32 [ 831.620031][T11678] usb 10-1: config index 0 descriptor too short (expected 35577, got 27) [ 831.620062][T11678] usb 10-1: config 1 has too many interfaces: 92, using maximum allowed: 32 [ 831.620086][T11678] usb 10-1: config 1 has 1 interface, different from the descriptor's value: 92 [ 831.620110][T11678] usb 10-1: config 1 has no interface number 0 [ 831.620163][T11678] usb 10-1: config 1 interface 1 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 831.620193][T11678] usb 10-1: config 1 interface 1 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 17 [ 831.620241][T11678] usb 10-1: New USB device found, idVendor=0e41, idProduct=5051, bcdDevice=d5.e8 [ 831.620267][T11678] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 831.644444][T11678] snd_usb_pod 10-1:1.1: Line 6 Pocket POD found [ 831.786589][ T8387] usb 4-1: Using ep0 maxpacket: 8 [ 831.789189][ T8387] usb 4-1: config index 0 descriptor too short (expected 301, got 45) [ 831.789251][ T8387] usb 4-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 831.789277][ T8387] usb 4-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 831.789305][ T8387] usb 4-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 831.789332][ T8387] usb 4-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 831.789379][ T8387] usb 4-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 831.789405][ T8387] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 831.905162][T11678] snd_usb_pod 10-1:1.1: Line 6 Pocket POD now attached [ 831.930297][T14020] netlink: 'syz.0.2801': attribute type 3 has an invalid length. [ 832.362360][T11678] usb 10-1: USB disconnect, device number 13 [ 832.367305][T11678] snd_usb_pod 10-1:1.1: Line 6 Pocket POD now disconnected [ 833.352800][T14046] syzkaller1: entered promiscuous mode [ 833.352826][T14046] syzkaller1: entered allmulticast mode [ 834.142968][T14068] netlink: 'syz.8.2821': attribute type 4 has an invalid length. [ 834.417240][ T5889] usb 4-1: USB disconnect, device number 40 [ 834.678000][T14088] loop7: detected capacity change from 16383 to 0 [ 834.946711][ T5889] usb 4-1: new high-speed USB device number 41 using dummy_hcd [ 835.070358][T14098] "syz.8.2833" (14098) uses obsolete ecb(arc4) skcipher [ 835.108229][ T5889] usb 4-1: Using ep0 maxpacket: 8 [ 835.123098][ T5889] usb 4-1: New USB device found, idVendor=04a5, idProduct=3003, bcdDevice=3a.b2 [ 835.123133][ T5889] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 835.123157][ T5889] usb 4-1: Product: syz [ 835.123174][ T5889] usb 4-1: Manufacturer: syz [ 835.123191][ T5889] usb 4-1: SerialNumber: syz [ 835.145181][ T5889] usb 4-1: config 0 descriptor?? [ 835.380890][ T5889] gspca_main: sunplus-2.14.0 probing 04a5:3003 [ 835.677072][T14106] netlink: 'syz.9.2836': attribute type 4 has an invalid length. [ 835.677096][T14106] netlink: 152 bytes leftover after parsing attributes in process `syz.9.2836'. [ 835.705907][T14106] .`: renamed from bond0 (while UP) [ 836.725941][ T5889] gspca_sunplus: reg_w_riv err -110 [ 836.726332][ T5889] sunplus 4-1:0.0: probe with driver sunplus failed with error -110 [ 836.782107][ T5889] usb 4-1: USB disconnect, device number 41 [ 836.876758][T11678] usb 1-1: new full-speed USB device number 19 using dummy_hcd [ 837.023638][T14127] netlink: 8 bytes leftover after parsing attributes in process `syz.9.2843'. [ 837.023663][T14127] netlink: 12 bytes leftover after parsing attributes in process `syz.9.2843'. [ 837.023693][T14127] netlink: 'syz.9.2843': attribute type 6 has an invalid length. [ 837.044685][T14127] netlink: 8 bytes leftover after parsing attributes in process `syz.9.2843'. [ 837.044714][T14127] netlink: 12 bytes leftover after parsing attributes in process `syz.9.2843'. [ 837.044741][T14127] netlink: 'syz.9.2843': attribute type 6 has an invalid length. [ 837.048995][T11678] usb 1-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 837.049036][T11678] usb 1-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 837.049091][T11678] usb 1-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 837.049122][T11678] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 837.064907][T12408] netdevsim netdevsim9 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 837.066045][T12408] netdevsim netdevsim9 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 837.077651][T12390] netdevsim netdevsim9 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 837.105430][T12390] netdevsim netdevsim9 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 837.281566][T11678] usb 1-1: usb_control_msg returned -32 [ 837.281618][T11678] usbtmc 1-1:16.0: can't read capabilities [ 837.326808][ T8405] usb 9-1: new high-speed USB device number 10 using dummy_hcd [ 837.446614][ T8387] usb 10-1: new high-speed USB device number 14 using dummy_hcd [ 837.476630][ T8405] usb 9-1: Using ep0 maxpacket: 32 [ 837.479017][ T8405] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 837.479048][ T8405] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 837.479099][ T8405] usb 9-1: New USB device found, idVendor=1e7d, idProduct=2d5a, bcdDevice= 0.00 [ 837.479115][ T8405] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 837.482931][ T8405] usb 9-1: config 0 descriptor?? [ 837.626591][ T8387] usb 10-1: Using ep0 maxpacket: 32 [ 837.631987][ T8387] usb 10-1: config 1 interface 0 altsetting 32 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 837.632025][ T8387] usb 10-1: config 1 interface 0 altsetting 32 bulk endpoint 0x3 has invalid maxpacket 1024 [ 837.632061][ T8387] usb 10-1: config 1 interface 0 altsetting 32 has 3 endpoint descriptors, different from the interface descriptor's value: 22 [ 837.632093][ T8387] usb 10-1: config 1 interface 0 has no altsetting 0 [ 837.634292][ T8387] usb 10-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 837.634322][ T8387] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 837.634344][ T8387] usb 10-1: SerialNumber: syz [ 837.727405][T14130] raw-gadget.2 gadget.9: fail, usb_ep_enable returned -22 [ 837.738986][ T8387] cdc_acm 10-1:1.0: Control and data interfaces are not separated! [ 838.036275][ T8387] cdc_acm 10-1:1.0: ttyACM0: USB ACM device [ 838.058467][ T8405] savu 0003:1E7D:2D5A.0024: hiddev1,hidraw0: USB HID v0.00 Device [HID 1e7d:2d5a] on usb-dummy_hcd.8-1/input0 [ 838.058932][ T8387] usb 10-1: USB disconnect, device number 14 [ 838.216151][ T8405] usb 9-1: USB disconnect, device number 10 [ 838.973141][ T8405] usb 1-1: USB disconnect, device number 19 [ 839.736682][ T8382] usb 9-1: new high-speed USB device number 11 using dummy_hcd [ 839.897569][ T8382] usb 9-1: Using ep0 maxpacket: 32 [ 839.900076][ T8382] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 839.900111][ T8382] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 839.900155][ T8382] usb 9-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 839.900181][ T8382] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 839.950871][ T8382] usb 9-1: config 0 descriptor?? [ 839.954948][ T8382] hub 9-1:0.0: USB hub found [ 839.966605][ T8387] usb 1-1: new high-speed USB device number 20 using dummy_hcd [ 840.106651][ T8405] usb 10-1: new high-speed USB device number 15 using dummy_hcd [ 840.126644][ T8387] usb 1-1: Using ep0 maxpacket: 32 [ 840.130271][ T8387] usb 1-1: New USB device found, idVendor=0fd9, idProduct=0021, bcdDevice=29.40 [ 840.130297][ T8387] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 840.162977][ T8387] usb 1-1: config 0 descriptor?? [ 840.171659][ T8382] hub 9-1:0.0: 25 ports detected [ 840.180618][ T8382] hub 9-1:0.0: insufficient power available to use all downstream ports [ 840.266642][ T8405] usb 10-1: Using ep0 maxpacket: 32 [ 840.274203][ T8405] usb 10-1: config 0 has an invalid interface number: 230 but max is 0 [ 840.274232][ T8405] usb 10-1: config 0 has no interface number 0 [ 840.274295][ T8405] usb 10-1: config 0 interface 230 has no altsetting 0 [ 840.290203][ T8405] usb 10-1: New USB device found, idVendor=0781, idProduct=0005, bcdDevice= 0.05 [ 840.290236][ T8405] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 840.290261][ T8405] usb 10-1: Product: syz [ 840.290279][ T8405] usb 10-1: Manufacturer: syz [ 840.290297][ T8405] usb 10-1: SerialNumber: syz [ 840.310351][ T8405] usb 10-1: config 0 descriptor?? [ 840.320463][ T8405] ums-usbat 10-1:0.230: USB Mass Storage device detected [ 840.344077][ T8405] ums-usbat 10-1:0.230: Quirks match for vid 0781 pid 0005: 1 [ 840.391021][ T8387] dvb-usb: found a 'Elgato EyeTV DTT' in warm state. [ 840.407599][ T8387] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 840.411703][ T8387] dvbdev: DVB: registering new adapter (Elgato EyeTV DTT) [ 840.411777][ T8387] usb 1-1: media controller created [ 840.505588][ T8387] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 840.690061][ T8387] DVB: Unable to find symbol dib7000p_attach() [ 840.690080][ T8387] dvb-usb: no frontend was attached by 'Elgato EyeTV DTT' [ 840.797106][ T8382] usb 9-1: USB disconnect, device number 11 [ 840.858996][ T8387] rc_core: IR keymap rc-dib0700-rc5 not found [ 840.859017][ T8387] Registered IR keymap rc-empty [ 840.859425][ T8387] dvb-usb: could not initialize remote control. [ 840.859437][ T8387] dvb-usb: Elgato EyeTV DTT successfully initialized and connected. [ 841.720050][ T8387] usb 1-1: USB disconnect, device number 20 [ 841.821846][ T8387] dvb-usb: Elgato EyeTV DTT successfully deinitialized and disconnected. [ 844.296607][ T8422] usb 9-1: new full-speed USB device number 12 using dummy_hcd [ 844.360324][ T8405] ums-usbat 10-1:0.230: probe with driver ums-usbat failed with error -5 [ 844.417810][ T8405] usb 10-1: USB disconnect, device number 15 [ 844.469297][ T8422] usb 9-1: New USB device found, idVendor=055f, idProduct=d001, bcdDevice=88.92 [ 844.469331][ T8422] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 844.482419][ T8422] gspca_main: nw80x-2.14.0 probing 055f:d001 [ 845.098677][ T8422] gspca_nw80x: reg_w err -71 [ 845.098799][ T8422] nw80x 9-1:3.0: probe with driver nw80x failed with error -71 [ 845.109985][ T8422] usb 9-1: USB disconnect, device number 12 [ 845.234621][ T37] audit: type=1326 audit(1762725979.948:635): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=14250 comm="syz.1.2891" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f10f4a3f6c9 code=0x7fc00000 [ 845.234685][ T37] audit: type=1326 audit(1762725979.948:636): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=14250 comm="syz.1.2891" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f10f4a3f6c9 code=0x7fc00000 [ 845.234739][ T37] audit: type=1326 audit(1762725979.948:637): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=14250 comm="syz.1.2891" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f10f4a3f6c9 code=0x7fc00000 [ 845.234790][ T37] audit: type=1326 audit(1762725979.948:638): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=14250 comm="syz.1.2891" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f10f4a3f6c9 code=0x7fc00000 [ 845.234842][ T37] audit: type=1326 audit(1762725979.948:639): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=14250 comm="syz.1.2891" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f10f4a3f6c9 code=0x7fc00000 [ 845.234894][ T37] audit: type=1326 audit(1762725979.948:640): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=14250 comm="syz.1.2891" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f10f4a3f6c9 code=0x7fc00000 [ 845.234947][ T37] audit: type=1326 audit(1762725979.948:641): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=14250 comm="syz.1.2891" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f10f4a3f6c9 code=0x7fc00000 [ 845.234998][ T37] audit: type=1326 audit(1762725979.948:642): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=14250 comm="syz.1.2891" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f10f4a3f6c9 code=0x7fc00000 [ 845.235049][ T37] audit: type=1326 audit(1762725979.948:643): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=14250 comm="syz.1.2891" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f10f4a3f6c9 code=0x7fc00000 [ 845.235103][ T37] audit: type=1326 audit(1762725979.948:644): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=14250 comm="syz.1.2891" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f10f4a3f6c9 code=0x7fc00000 [ 848.746663][ T8405] usb 10-1: new high-speed USB device number 16 using dummy_hcd [ 848.901202][ T8405] usb 10-1: Using ep0 maxpacket: 8 [ 848.903782][ T8405] usb 10-1: config 0 has an invalid interface number: 55 but max is 0 [ 848.903811][ T8405] usb 10-1: config 0 has no interface number 0 [ 848.903859][ T8405] usb 10-1: config 0 interface 55 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 848.903884][ T8405] usb 10-1: config 0 interface 55 altsetting 0 has an endpoint descriptor with address 0xAB, changing to 0x8B [ 848.903910][ T8405] usb 10-1: config 0 interface 55 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 848.903938][ T8405] usb 10-1: config 0 interface 55 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 2 [ 848.903984][ T8405] usb 10-1: New USB device found, idVendor=0f11, idProduct=1080, bcdDevice=fc.6a [ 848.904009][ T8405] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 848.927842][ T8405] usb 10-1: config 0 descriptor?? [ 848.995136][ T8405] ldusb 10-1:0.55: LD USB Device #0 now attached to major 180 minor 0 [ 849.112334][T14328] netlink: 'syz.8.2922': attribute type 5 has an invalid length. [ 849.286624][T14249] usb 10-1: USB disconnect, device number 16 [ 849.300804][T14249] ldusb 10-1:0.55: LD USB Device #0 now disconnected [ 850.586577][ T8387] usb 2-1: new full-speed USB device number 14 using dummy_hcd [ 850.748935][ T8387] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 850.748965][ T8387] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 850.754861][ T8387] usb 2-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 850.754917][ T8387] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 850.754939][ T8387] usb 2-1: Product: syz [ 850.754955][ T8387] usb 2-1: Manufacturer: syz [ 850.754971][ T8387] usb 2-1: SerialNumber: syz [ 851.024828][ T8387] usb 2-1: 0:2 : does not exist [ 851.046852][ T8387] usb 2-1: 5:0: failed to get current value for ch 0 (-22) [ 851.097983][ T8387] usb 2-1: USB disconnect, device number 14 [ 851.726274][ T5819] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 851.737978][ T5819] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 851.745904][ T5819] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 851.750703][ T5819] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 851.751748][ T5819] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 851.922839][T14379] loop3: detected capacity change from 0 to 7 [ 851.970560][T14379] Dev loop3: unable to read RDB block 7 [ 851.970592][T14379] loop3: AHDI p1 [ 851.970624][T14379] loop3: partition table partially beyond EOD, truncated [ 852.438306][T14372] chnl_net:caif_netlink_parms(): no params data found [ 852.466724][T11667] usb 1-1: new high-speed USB device number 21 using dummy_hcd [ 852.576694][ T8422] usb 2-1: new high-speed USB device number 15 using dummy_hcd [ 852.629523][T11667] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 852.629559][T11667] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 852.629603][T11667] usb 1-1: New USB device found, idVendor=10c4, idProduct=ea90, bcdDevice= 0.00 [ 852.629628][T11667] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 852.679473][T11667] usb 1-1: config 0 descriptor?? [ 852.726675][ T8422] usb 2-1: Using ep0 maxpacket: 16 [ 852.731257][ T8422] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 852.731286][ T8422] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 852.752349][ T8422] usb 2-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 852.752386][ T8422] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 852.752412][ T8422] usb 2-1: Product: syz [ 852.752428][ T8422] usb 2-1: Manufacturer: syz [ 852.752446][ T8422] usb 2-1: SerialNumber: syz [ 852.806627][ T8387] usb 9-1: new high-speed USB device number 13 using dummy_hcd [ 852.926731][T14372] bridge0: port 1(bridge_slave_0) entered blocking state [ 852.927029][T14372] bridge0: port 1(bridge_slave_0) entered disabled state [ 852.927674][T14372] bridge_slave_0: entered allmulticast mode [ 852.932989][T14372] bridge_slave_0: entered promiscuous mode [ 852.967562][ T8387] usb 9-1: device descriptor read/64, error -71 [ 852.985448][T14372] bridge0: port 2(bridge_slave_1) entered blocking state [ 852.985789][T14372] bridge0: port 2(bridge_slave_1) entered disabled state [ 852.986287][T14372] bridge_slave_1: entered allmulticast mode [ 853.011673][ T8422] usb 2-1: 0:2 : does not exist [ 853.014299][T14372] bridge_slave_1: entered promiscuous mode [ 853.022234][ T8422] usb 2-1: 5:0: failed to get current value for ch 0 (-22) [ 853.062665][ T8422] usb 2-1: USB disconnect, device number 15 [ 853.113111][T11667] cp2112 0003:10C4:EA90.0025: unknown main item tag 0x0 [ 853.129066][T11667] cp2112 0003:10C4:EA90.0025: hidraw0: USB HID v0.00 Device [HID 10c4:ea90] on usb-dummy_hcd.0-1/input0 [ 853.216751][ T8387] usb 9-1: new high-speed USB device number 14 using dummy_hcd [ 853.280485][T14372] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 853.285550][T14372] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 853.304987][T11667] cp2112 0003:10C4:EA90.0025: Part Number: 0x1A Device Version: 0xC4 [ 853.376734][ T8387] usb 9-1: device descriptor read/64, error -71 [ 853.490287][ T8387] usb usb9-port1: attempt power cycle [ 853.503711][T11667] cp2112 0003:10C4:EA90.0025: error requesting SMBus config [ 853.515629][T11667] cp2112 0003:10C4:EA90.0025: probe with driver cp2112 failed with error -32 [ 853.534932][T11667] usb 1-1: USB disconnect, device number 21 [ 853.590722][T14372] team0: Port device team_slave_0 added [ 853.596259][T14372] team0: Port device team_slave_1 added [ 853.819361][T14372] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 853.819388][T14372] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 853.819418][T14372] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 853.821978][T14372] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 853.821994][T14372] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 853.822024][T14372] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 853.826680][ T62] Bluetooth: hci1: command tx timeout [ 853.896655][ T8387] usb 9-1: new high-speed USB device number 15 using dummy_hcd [ 854.130160][ C0] vkms_vblank_simulate: vblank timer overrun [ 854.231923][ T8387] usb 9-1: device descriptor read/8, error -71 [ 854.277083][ C0] vkms_vblank_simulate: vblank timer overrun [ 854.496734][ T8387] usb 9-1: new high-speed USB device number 16 using dummy_hcd [ 854.522729][ T8387] usb 9-1: device descriptor read/8, error -71 [ 854.627042][ T8387] usb usb9-port1: unable to enumerate USB device [ 854.657896][T14372] hsr_slave_0: entered promiscuous mode [ 854.659422][T14372] hsr_slave_1: entered promiscuous mode [ 854.660476][T14372] debugfs: 'hsr0' already exists in 'hsr' [ 854.660502][T14372] Cannot create hsr debugfs directory [ 855.126577][ T1229] usb 1-1: new high-speed USB device number 22 using dummy_hcd [ 855.286612][ T1229] usb 1-1: Using ep0 maxpacket: 32 [ 855.289189][ T1229] usb 1-1: config 0 has an invalid interface number: 12 but max is 0 [ 855.289217][ T1229] usb 1-1: config 0 has no interface number 0 [ 855.289254][ T1229] usb 1-1: config 0 interface 12 has no altsetting 0 [ 855.292476][ T1229] usb 1-1: New USB device found, idVendor=2c42, idProduct=1202, bcdDevice=85.40 [ 855.292509][ T1229] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 855.292531][ T1229] usb 1-1: Product: syz [ 855.292548][ T1229] usb 1-1: Manufacturer: syz [ 855.292564][ T1229] usb 1-1: SerialNumber: syz [ 855.395005][ T1229] usb 1-1: config 0 descriptor?? [ 855.404087][ T1229] f81534 1-1:0.12: required endpoints missing [ 855.629858][ T1229] usb 1-1: USB disconnect, device number 22 [ 855.906822][ T62] Bluetooth: hci1: command tx timeout [ 856.816289][T14432] kernel profiling enabled (shift: 63) [ 856.816309][T14432] profiling shift: 63 too large [ 856.911308][T14435] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2965'. [ 856.911333][T14435] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2965'. [ 856.944701][T14435] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2965'. [ 856.944729][T14435] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2965'. [ 856.946717][T12390] netdevsim netdevsim0 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 856.951033][T12382] netdevsim netdevsim0 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 856.951089][T12382] netdevsim netdevsim0 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 856.951134][T12382] netdevsim netdevsim0 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 857.116689][ T1229] usb 2-1: new high-speed USB device number 16 using dummy_hcd [ 857.283535][ T1229] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 857.283564][ T1229] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 857.332104][ T1229] usb 2-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 857.332137][ T1229] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 857.332160][ T1229] usb 2-1: SerialNumber: syz [ 857.789546][ T1229] usb 2-1: 0:2 : does not exist [ 857.988071][ T62] Bluetooth: hci1: command tx timeout [ 858.086161][ T1229] usb 2-1: USB disconnect, device number 16 [ 858.200200][ T8387] usb 9-1: new high-speed USB device number 17 using dummy_hcd [ 858.200205][ T8405] usb 1-1: new high-speed USB device number 23 using dummy_hcd [ 858.366662][ T8405] usb 1-1: Using ep0 maxpacket: 8 [ 858.374090][ T8405] usb 1-1: New USB device found, idVendor=0ccd, idProduct=0039, bcdDevice=90.7b [ 858.374124][ T8405] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 858.425443][ T8387] usb 9-1: Using ep0 maxpacket: 8 [ 858.445901][ T8387] usb 9-1: New USB device found, idVendor=0c45, idProduct=613a, bcdDevice=c4.6d [ 858.445935][ T8387] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 858.445958][ T8387] usb 9-1: Product: syz [ 858.445974][ T8387] usb 9-1: Manufacturer: syz [ 858.445990][ T8387] usb 9-1: SerialNumber: syz [ 858.500177][ T8387] usb 9-1: config 0 descriptor?? [ 858.512573][ T8405] pvrusb2: Hardware description: Terratec Grabster AV400 [ 858.512600][ T8405] pvrusb2: ********** [ 858.512608][ T8405] pvrusb2: ***WARNING*** Support for this device (Terratec Grabster AV400) is experimental. [ 858.512622][ T8405] pvrusb2: Important functionality might not be entirely working. [ 858.512632][ T8405] pvrusb2: Please consider contacting the driver author to help with further stabilization of the driver. [ 858.512645][ T8405] pvrusb2: ********** [ 858.560916][ T8387] gspca_main: sonixj-2.14.0 probing 0c45:613a [ 858.922856][ T2368] pvrusb2: Invalid write control endpoint [ 859.101322][ T8405] usb 1-1: USB disconnect, device number 23 [ 859.140282][ T8387] gspca_sonixj: reg_w1 err -110 [ 859.140389][ T8387] sonixj 9-1:0.0: probe with driver sonixj failed with error -110 [ 859.565147][ T2368] pvrusb2: Invalid write control endpoint [ 859.565164][ T2368] pvrusb2: ***WARNING*** Detected a wedged cx25840 chip; the device will not work. [ 859.565176][ T2368] pvrusb2: ***WARNING*** Try power cycling the pvrusb2 device. [ 859.565185][ T2368] pvrusb2: ***WARNING*** Disabling further access to the device to prevent other foul-ups. [ 859.565197][ T2368] pvrusb2: Device being rendered inoperable [ 859.580410][ T2368] cx25840 2-0044: Unable to detect h/w, assuming cx23887 [ 859.580512][ T2368] cx25840 2-0044: cx23887 A/V decoder found @ 0x88 (pvrusb2_a) [ 859.582470][T11667] usb 9-1: USB disconnect, device number 17 [ 859.605858][ T2368] pvrusb2: Attached sub-driver cx25840 [ 859.605891][ T2368] pvrusb2: ***WARNING*** pvrusb2 device hardware appears to be jammed and I can't clear it. [ 859.605915][ T2368] pvrusb2: You might need to power cycle the pvrusb2 device in order to recover. [ 859.736681][T14249] usb 2-1: new full-speed USB device number 17 using dummy_hcd [ 859.857225][T14372] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 859.881890][T14372] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 859.891785][T14249] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 859.891823][T14249] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 5 [ 859.891886][T14249] usb 2-1: New USB device found, idVendor=046d, idProduct=005c, bcdDevice= 0.00 [ 859.891921][T14249] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 859.911797][T14249] usb 2-1: config 0 descriptor?? [ 859.997172][T14372] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 860.051186][T14372] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 860.066649][ T62] Bluetooth: hci1: command tx timeout [ 860.277321][ T8405] usb 1-1: new high-speed USB device number 24 using dummy_hcd [ 860.412624][T14249] hid-generic 0003:046D:005C.0026: hidraw0: USB HID v0.00 Device [HID 046d:005c] on usb-dummy_hcd.1-1/input0 [ 860.429619][ T8405] usb 1-1: Using ep0 maxpacket: 16 [ 860.432730][ T8405] usb 1-1: config 0 has an invalid interface number: 214 but max is 0 [ 860.432759][ T8405] usb 1-1: config 0 has no interface number 0 [ 860.432812][ T8405] usb 1-1: config 0 interface 214 altsetting 0 endpoint 0x83 has invalid wMaxPacketSize 0 [ 860.436808][ T8405] usb 1-1: New USB device found, idVendor=0596, idProduct=0001, bcdDevice= 5.f5 [ 860.436840][ T8405] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 860.436862][ T8405] usb 1-1: Product: syz [ 860.436878][ T8405] usb 1-1: Manufacturer: syz [ 860.436894][ T8405] usb 1-1: SerialNumber: syz [ 860.529480][ T8405] usb 1-1: config 0 descriptor?? [ 861.068185][ T8422] usb 2-1: USB disconnect, device number 17 [ 861.249470][T14372] 8021q: adding VLAN 0 to HW filter on device bond0 [ 861.368674][T14372] 8021q: adding VLAN 0 to HW filter on device team0 [ 861.402521][T12390] bridge0: port 1(bridge_slave_0) entered blocking state [ 861.402749][T12390] bridge0: port 1(bridge_slave_0) entered forwarding state [ 861.441887][T12390] bridge0: port 2(bridge_slave_1) entered blocking state [ 861.443951][T12390] bridge0: port 2(bridge_slave_1) entered forwarding state [ 861.472796][ T8405] usbtouchscreen 1-1:0.214: probe with driver usbtouchscreen failed with error -71 [ 861.489125][ T8405] usb 1-1: USB disconnect, device number 24 [ 862.213990][ T37] kauditd_printk_skb: 2 callbacks suppressed [ 862.214010][ T37] audit: type=1326 audit(1762725996.928:647): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=14500 comm="syz.1.2986" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f10f4a3f6c9 code=0x7ffc0000 [ 862.214061][ T37] audit: type=1326 audit(1762725996.928:648): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=14500 comm="syz.1.2986" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f10f4a3f6c9 code=0x7ffc0000 [ 862.214106][ T37] audit: type=1326 audit(1762725996.928:649): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=14500 comm="syz.1.2986" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f10f4a3f6c9 code=0x7ffc0000 [ 862.348271][T14372] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 862.441506][T14372] veth0_vlan: entered promiscuous mode [ 862.462924][T14372] veth1_vlan: entered promiscuous mode [ 862.524956][T14372] veth0_macvtap: entered promiscuous mode [ 862.547521][T14372] veth1_macvtap: entered promiscuous mode [ 862.592827][T14372] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 862.613610][T14372] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 862.639218][T12400] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 862.936262][T12400] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 862.945270][T12400] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 862.950877][T12400] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 863.460088][T12379] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 863.460110][T12379] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 863.938818][T12408] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 863.938843][T12408] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 868.095545][T11667] usb 1-1: new full-speed USB device number 25 using dummy_hcd [ 868.269574][T11667] usb 1-1: New USB device found, idVendor=09c0, idProduct=0203, bcdDevice=d3.43 [ 868.269620][T11667] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 868.280856][T11667] usb 1-1: config 0 descriptor?? [ 868.289855][T11667] dvb-usb: found a 'Genpix SkyWalker-1 DVB-S receiver' in warm state. [ 868.557216][T11667] gp8psk: usb in 128 operation failed. [ 868.792634][T11667] gp8psk: usb in 146 operation failed. [ 868.792655][T11667] gp8psk: failed to get FW version [ 868.793654][T11667] gp8psk: usb in 149 operation failed. [ 868.793670][T11667] gp8psk: failed to get FPGA version [ 869.002785][T11667] gp8psk: usb out operation failed. [ 869.002805][T11667] dvb-usb: This USB2.0 device cannot be run on a USB1.1 port. (it lacks a hardware PID filter) [ 869.002848][T11667] dvb-usb: Genpix SkyWalker-1 DVB-S receiver error while loading driver (-19) [ 869.021382][T11667] usb 1-1: USB disconnect, device number 25 [ 870.676234][T14619] IPv4: Oversized IP packet from 127.202.26.0 [ 872.376641][ T5882] usb 3-1: new high-speed USB device number 10 using dummy_hcd [ 872.534581][ T5882] usb 3-1: Using ep0 maxpacket: 8 [ 872.546178][ T5882] usb 3-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 872.546210][ T5882] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 872.546232][ T5882] usb 3-1: Product: syz [ 872.546248][ T5882] usb 3-1: Manufacturer: syz [ 872.546265][ T5882] usb 3-1: SerialNumber: syz [ 872.588815][ T5882] usb 3-1: config 0 descriptor?? [ 872.798974][ T5882] usb 3-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 872.916655][T14249] usb 9-1: new full-speed USB device number 18 using dummy_hcd [ 873.072445][T14249] usb 9-1: unable to get BOS descriptor or descriptor too short [ 873.073914][T14249] usb 9-1: not running at top speed; connect to a high speed hub [ 873.098379][T14249] usb 9-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 873.098409][T14249] usb 9-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 873.129074][T14249] usb 9-1: string descriptor 0 read error: -22 [ 873.129704][T14249] usb 9-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 873.129735][T14249] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 873.211617][T14249] usb 9-1: 0:2 : does not exist [ 873.224859][T14654] netlink: 476 bytes leftover after parsing attributes in process `syz.0.3045'. [ 873.364953][T14656] netlink: 40 bytes leftover after parsing attributes in process `syz.0.3047'. [ 873.646569][ T8387] usb 10-1: new high-speed USB device number 17 using dummy_hcd [ 873.813671][ T5882] dvb_usb_rtl28xxu 3-1:0.0: probe with driver dvb_usb_rtl28xxu failed with error -71 [ 873.819082][ T8387] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 873.819135][ T8387] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 873.819164][ T8387] usb 10-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 873.819216][ T8387] usb 10-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 873.819245][ T8387] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 873.825450][ T8387] usb 10-1: config 0 descriptor?? [ 873.903972][ T5882] usb 3-1: USB disconnect, device number 10 [ 874.259986][T14249] usb 9-1: 5:0: failed to get current value for ch 0 (-22) [ 874.281321][T14249] usb 9-1: 5:0: cannot get min/max values for control 3 (id 5) [ 874.283213][ T8387] plantronics 0003:047F:FFFF.0027: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.9-1/input0 [ 874.311547][T14249] usb 9-1: 5:0: failed to get current value for ch 1 (-22) [ 874.372255][T14249] usb 9-1: 5:0: cannot get min/max values for control 3 (id 5) [ 874.385902][T14249] usb 9-1: USB disconnect, device number 18 [ 874.481867][ T8387] usb 10-1: USB disconnect, device number 17 [ 874.881335][T14690] "syz.0.3062" (14690) uses obsolete ecb(arc4) skcipher [ 875.277168][ T1229] usb 3-1: new high-speed USB device number 11 using dummy_hcd [ 875.358984][ T1321] ieee802154 phy0 wpan0: encryption failed: -22 [ 875.359065][ T1321] ieee802154 phy1 wpan1: encryption failed: -22 [ 875.528791][ T1229] usb 3-1: config 220 has an invalid interface number: 76 but max is 2 [ 875.528824][ T1229] usb 3-1: config 220 contains an unexpected descriptor of type 0x2, skipping [ 875.528845][ T1229] usb 3-1: config 220 has an invalid descriptor of length 0, skipping remainder of the config [ 875.528867][ T1229] usb 3-1: config 220 has no interface number 2 [ 875.528950][ T1229] usb 3-1: config 220 interface 1 altsetting 5 has 0 endpoint descriptors, different from the interface descriptor's value: 12 [ 875.528981][ T1229] usb 3-1: config 220 interface 0 has no altsetting 0 [ 875.529001][ T1229] usb 3-1: config 220 interface 76 has no altsetting 0 [ 875.529022][ T1229] usb 3-1: config 220 interface 1 has no altsetting 0 [ 875.747475][ T1229] usb 3-1: New USB device found, idVendor=8086, idProduct=0b07, bcdDevice=6c.b9 [ 875.747509][ T1229] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 875.747531][ T1229] usb 3-1: Product: syz [ 875.747547][ T1229] usb 3-1: Manufacturer: syz [ 875.747563][ T1229] usb 3-1: SerialNumber: syz [ 876.034911][ T1229] uvcvideo 3-1:220.0: Found UVC 7.01 device syz (8086:0b07) [ 876.034953][ T1229] uvcvideo 3-1:220.0: No valid video chain found. [ 876.035019][ T1229] usb 3-1: selecting invalid altsetting 0 [ 876.129859][ T1229] usb 3-1: selecting invalid altsetting 0 [ 876.130028][ T1229] usbtest 3-1:220.1: probe with driver usbtest failed with error -22 [ 876.158409][ T1229] usb 3-1: USB disconnect, device number 11 [ 876.428989][T14722] netlink: 104 bytes leftover after parsing attributes in process `syz.9.3075'. [ 877.106811][T14728] block nbd9: shutting down sockets [ 877.220013][T14721] syz.8.3076 (14721) used greatest stack depth: 16024 bytes left [ 878.236947][T14739] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 878.290257][T14745] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3085'. [ 878.290292][T14745] netlink: 28 bytes leftover after parsing attributes in process `syz.1.3085'. [ 878.292229][T14745] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3085'. [ 878.292255][T14745] netlink: 28 bytes leftover after parsing attributes in process `syz.1.3085'. [ 878.907383][ T8387] usb 9-1: new full-speed USB device number 19 using dummy_hcd [ 879.801881][ T8387] usb 9-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 879.801916][ T8387] usb 9-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 879.801962][ T8387] usb 9-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 879.801988][ T8387] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 880.061494][ T8387] usb 9-1: usb_control_msg returned -32 [ 880.061552][ T8387] usbtmc 9-1:16.0: can't read capabilities [ 881.513087][ T8405] usb 1-1: new high-speed USB device number 26 using dummy_hcd [ 881.666606][ T8405] usb 1-1: Using ep0 maxpacket: 32 [ 881.669263][ T8405] usb 1-1: config 0 has an invalid interface number: 12 but max is 0 [ 881.669292][ T8405] usb 1-1: config 0 has no interface number 0 [ 881.669355][ T8405] usb 1-1: config 0 interface 12 has no altsetting 0 [ 881.674017][ T8405] usb 1-1: New USB device found, idVendor=2c42, idProduct=1202, bcdDevice=85.40 [ 881.674048][ T8405] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 881.674068][ T8405] usb 1-1: Product: syz [ 881.674084][ T8405] usb 1-1: Manufacturer: syz [ 881.674099][ T8405] usb 1-1: SerialNumber: syz [ 881.709077][ T8405] usb 1-1: config 0 descriptor?? [ 881.762562][ T8387] usb 9-1: USB disconnect, device number 19 [ 882.364363][T14839] use of bytesused == 0 is deprecated and will be removed in the future, [ 882.364380][T14839] use the actual size instead. [ 883.691558][ T8405] f81534 1-1:0.12: f81534_set_register: reg: 1002 data: 0 failed: -71 [ 883.691622][ T8405] f81534 1-1:0.12: f81534_find_config_idx: read failed: -71 [ 883.691642][ T8405] f81534 1-1:0.12: f81534_calc_num_ports: find idx failed: -71 [ 883.691740][ T8405] f81534 1-1:0.12: probe with driver f81534 failed with error -71 [ 883.776619][ T8405] usb 1-1: USB disconnect, device number 26 [ 884.166575][T14249] usb 3-1: new high-speed USB device number 12 using dummy_hcd [ 884.336588][T14249] usb 3-1: Using ep0 maxpacket: 8 [ 884.342641][T14249] usb 3-1: New USB device found, idVendor=0c45, idProduct=613e, bcdDevice=c4.6d [ 884.342674][T14249] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 884.342697][T14249] usb 3-1: Product: syz [ 884.342713][T14249] usb 3-1: Manufacturer: syz [ 884.342730][T14249] usb 3-1: SerialNumber: syz [ 884.347218][T14249] usb 3-1: config 0 descriptor?? [ 884.403311][T14249] gspca_main: sonixj-2.14.0 probing 0c45:613e [ 884.488760][ T8405] usb 9-1: new full-speed USB device number 20 using dummy_hcd [ 884.930081][ T8405] usb 9-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 884.930272][ T8405] usb 9-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 885.008756][ T8405] usb 9-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 885.008790][ T8405] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 885.008814][ T8405] usb 9-1: Product: syz [ 885.008830][ T8405] usb 9-1: Manufacturer: syz [ 885.008967][ T8405] usb 9-1: SerialNumber: syz [ 885.468432][T14249] gspca_sonixj: reg_w1 err -71 [ 885.516753][T14249] sonixj 3-1:0.0: probe with driver sonixj failed with error -71 [ 885.539677][ T8405] usb 9-1: 0:2 : does not exist [ 885.546673][T14249] usb 3-1: USB disconnect, device number 12 [ 885.566224][ T8405] usb 9-1: 5:0: failed to get current value for ch 0 (-22) [ 885.624557][ T8405] usb 9-1: USB disconnect, device number 20 [ 887.140043][ T8386] usb 1-1: new high-speed USB device number 27 using dummy_hcd [ 887.302329][ T8386] usb 1-1: New USB device found, idVendor=09c0, idProduct=0203, bcdDevice=d3.32 [ 887.302363][ T8386] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 887.321594][ T8386] usb 1-1: config 0 descriptor?? [ 887.336150][ T8386] dvb-usb: found a 'Genpix SkyWalker-1 DVB-S receiver' in warm state. [ 887.436598][ T8405] usb 9-1: new full-speed USB device number 21 using dummy_hcd [ 887.533092][ T8386] gp8psk: usb in 128 operation failed. [ 887.536898][ T8386] gp8psk: usb in 137 operation failed. [ 887.536922][ T8386] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 887.541147][ T8386] dvbdev: DVB: registering new adapter (Genpix SkyWalker-1 DVB-S receiver) [ 887.541215][ T8386] usb 1-1: media controller created [ 887.612770][ T8405] usb 9-1: config 0 has an invalid interface number: 41 but max is 0 [ 887.612800][ T8405] usb 9-1: config 0 has no interface number 0 [ 887.612860][ T8405] usb 9-1: config 0 interface 41 has no altsetting 0 [ 887.644044][ T8386] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 887.647462][ T8405] usb 9-1: New USB device found, idVendor=0fe6, idProduct=9800, bcdDevice=d1.9a [ 887.647488][ T8405] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 887.647507][ T8405] usb 9-1: Product: syz [ 887.647520][ T8405] usb 9-1: Manufacturer: syz [ 887.647532][ T8405] usb 9-1: SerialNumber: syz [ 887.698782][ T8405] usb 9-1: config 0 descriptor?? [ 887.726551][ T8386] gp8psk_fe: Frontend attached [ 887.726621][ T8386] usb 1-1: DVB: registering adapter 2 frontend 0 (Genpix DVB-S)... [ 887.727672][ T8386] dvbdev: dvb_create_media_entity: media entity 'Genpix DVB-S' registered. [ 887.946611][ T8386] gp8psk: usb in 138 operation failed. [ 887.946633][ T8386] dvb-usb: Genpix SkyWalker-1 DVB-S receiver successfully initialized and connected. [ 887.946649][ T8386] gp8psk: found Genpix USB device pID = 203 (hex) [ 887.951432][ T8386] usb 1-1: USB disconnect, device number 27 [ 888.316634][ T8386] dvb-usb: Genpix SkyWalker-1 DVB-S receiver successfully deinitialized and disconnected. [ 888.646583][ T8387] usb 3-1: new high-speed USB device number 13 using dummy_hcd [ 888.756836][ T8405] CoreChips 9-1:0.41: probe with driver CoreChips failed with error -71 [ 888.763568][ T8405] usb 9-1: USB disconnect, device number 21 [ 888.802410][ T8387] usb 3-1: config index 0 descriptor too short (expected 45, got 36) [ 888.802475][ T8387] usb 3-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 888.802503][ T8387] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 888.802531][ T8387] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 888.802558][ T8387] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 888.802604][ T8387] usb 3-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 888.802649][ T8387] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 888.886177][ T8387] usb 3-1: config 0 descriptor?? [ 888.892250][T14915] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 889.588581][ T8387] plantronics 0003:047F:FFFF.0028: reserved main item tag 0xd [ 889.616605][ T8387] plantronics 0003:047F:FFFF.0028: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.2-1/input0 [ 889.720316][ T8387] usb 3-1: USB disconnect, device number 13 [ 890.786704][ T8405] usb 3-1: new high-speed USB device number 14 using dummy_hcd [ 890.951873][ T8405] usb 3-1: New USB device found, idVendor=9710, idProduct=7730, bcdDevice=96.33 [ 890.951906][ T8405] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 890.982575][ T8405] usb 3-1: config 0 descriptor?? [ 891.547862][ T37] audit: type=1326 audit(1762726026.258:650): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=14965 comm="syz.0.3177" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f374cbaf6c9 code=0x7fc00000 [ 891.704178][T14973] netlink: 4 bytes leftover after parsing attributes in process `syz.9.3180'. [ 891.802830][T14973] veth1_macvtap: left promiscuous mode [ 892.181596][ T37] audit: type=1326 audit(1762726026.898:651): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=14965 comm="syz.0.3177" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f374cbaf6c9 code=0x7fc00000 [ 892.182749][ T37] audit: type=1326 audit(1762726026.898:652): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=14965 comm="syz.0.3177" exe="/root/syz-executor" sig=0 arch=c000003e syscall=222 compat=0 ip=0x7f374cbaf6c9 code=0x7fc00000 [ 892.183522][ T37] audit: type=1326 audit(1762726026.898:653): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=14965 comm="syz.0.3177" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f374cbaf6c9 code=0x7fc00000 [ 892.185692][ T37] audit: type=1326 audit(1762726026.898:654): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=14965 comm="syz.0.3177" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f374cbaf6c9 code=0x7fc00000 [ 892.205531][ T37] audit: type=1326 audit(1762726026.898:655): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=14965 comm="syz.0.3177" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f374cbaf6c9 code=0x7fc00000 [ 892.205597][ T37] audit: type=1326 audit(1762726026.908:656): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=14965 comm="syz.0.3177" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f374cbaf6c9 code=0x7fc00000 [ 892.218739][ T37] audit: type=1326 audit(1762726026.908:657): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=14965 comm="syz.0.3177" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f374cbaf6c9 code=0x7fc00000 [ 892.218800][ T37] audit: type=1326 audit(1762726026.908:658): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=14965 comm="syz.0.3177" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f374cbaf6c9 code=0x7fc00000 [ 892.227111][ T8387] usb 2-1: new high-speed USB device number 18 using dummy_hcd [ 892.240916][ T37] audit: type=1326 audit(1762726026.908:659): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=14965 comm="syz.0.3177" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f374cbaf6c9 code=0x7fc00000 [ 892.282120][ T8405] usb 3-1: Cannot set autoneg [ 892.282408][ T8405] MOSCHIP usb-ethernet driver 3-1:0.0: probe with driver MOSCHIP usb-ethernet driver failed with error -71 [ 892.376518][ T8387] usb 2-1: Using ep0 maxpacket: 32 [ 892.379813][ T8387] usb 2-1: config 0 has an invalid interface number: 85 but max is 0 [ 892.379845][ T8387] usb 2-1: config 0 has no interface number 0 [ 892.379887][ T8387] usb 2-1: config 0 interface 85 has no altsetting 0 [ 892.384285][ T8387] usb 2-1: New USB device found, idVendor=05ac, idProduct=0219, bcdDevice=f0.72 [ 892.384327][ T8387] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 892.384353][ T8387] usb 2-1: Product: syz [ 892.384369][ T8387] usb 2-1: Manufacturer: syz [ 892.384387][ T8387] usb 2-1: SerialNumber: syz [ 892.497033][ T8405] usb 3-1: USB disconnect, device number 14 [ 892.497679][ T8387] usb 2-1: config 0 descriptor?? [ 892.524449][ T8387] appletouch 2-1:0.85: Could not find int-in endpoint [ 892.530516][ T8387] appletouch 2-1:0.85: probe with driver appletouch failed with error -5 [ 892.551344][ T8387] usbhid 2-1:0.85: couldn't find an input interrupt endpoint [ 892.681293][T15001] netlink: 24 bytes leftover after parsing attributes in process `syz.9.3190'. [ 892.682245][T15001] netlink: 24 bytes leftover after parsing attributes in process `syz.9.3190'. [ 893.566678][T14249] usb 2-1: USB disconnect, device number 18 [ 894.636757][ T8405] usb 9-1: new high-speed USB device number 22 using dummy_hcd [ 894.641149][T15033] binder: 15032:15033 ioctl c0306201 2000000001c0 returned -14 [ 894.789418][ T8405] usb 9-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 894.789447][ T8405] usb 9-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 894.791420][ T8405] usb 9-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 894.792219][ T8405] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=67 [ 894.792244][ T8405] usb 9-1: SerialNumber: syz [ 895.070377][ T8405] usb 9-1: 0:2 : does not exist [ 895.116793][ T8405] usb 9-1: USB disconnect, device number 22 [ 895.444863][T15050] netlink: 40 bytes leftover after parsing attributes in process `syz.2.3207'. [ 897.544433][ T9] usb 3-1: new high-speed USB device number 15 using dummy_hcd [ 897.706530][ T9] usb 3-1: Using ep0 maxpacket: 8 [ 897.729691][ T9] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40 [ 897.729724][ T9] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 897.729754][ T9] usb 3-1: Product: syz [ 897.729770][ T9] usb 3-1: Manufacturer: syz [ 897.729786][ T9] usb 3-1: SerialNumber: syz [ 898.028890][ T9] usblp 3-1:1.0: usblp0: USB Unidirectional printer dev 15 if 0 alt 0 proto 1 vid 0x0525 pid 0xA4A8 [ 898.235620][ T9] usb 3-1: USB disconnect, device number 15 [ 898.260842][ T9] usblp0: removed [ 899.785523][ T1229] usb 9-1: new high-speed USB device number 23 using dummy_hcd [ 899.946962][ T1229] usb 9-1: Using ep0 maxpacket: 32 [ 899.950402][ T1229] usb 9-1: config 0 has an invalid interface number: 172 but max is 0 [ 899.950432][ T1229] usb 9-1: config 0 has no interface number 0 [ 899.950485][ T1229] usb 9-1: config 0 interface 172 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 899.957582][ T1229] usb 9-1: New USB device found, idVendor=06f8, idProduct=301b, bcdDevice=bb.39 [ 899.957633][ T1229] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 899.957676][ T1229] usb 9-1: Product: syz [ 899.957694][ T1229] usb 9-1: Manufacturer: syz [ 899.957713][ T1229] usb 9-1: SerialNumber: syz [ 899.969134][ T1229] usb 9-1: config 0 descriptor?? [ 899.976133][ T1229] gspca_main: gspca_pac7302-2.14.0 probing 06f8:301b [ 900.859939][ T1229] input: gspca_pac7302 as /devices/platform/dummy_hcd.8/usb9/9-1/input/input34 [ 901.097405][ C1] gspca_pac7302 9-1:0.172: URB error -71, resubmitting [ 901.097651][ C1] gspca_pac7302 9-1:0.172: URB error -71, resubmitting [ 901.097926][ C1] gspca_pac7302 9-1:0.172: URB error -71, resubmitting [ 901.098161][ C1] gspca_pac7302 9-1:0.172: URB error -71, resubmitting [ 901.098383][ C1] gspca_pac7302 9-1:0.172: URB error -71, resubmitting [ 901.098618][ C1] gspca_pac7302 9-1:0.172: URB error -71, resubmitting [ 901.098854][ C1] gspca_pac7302 9-1:0.172: URB error -71, resubmitting [ 901.099086][ C1] gspca_pac7302 9-1:0.172: URB error -71, resubmitting [ 901.099261][ T8405] usb 9-1: USB disconnect, device number 23 [ 901.099329][ C1] gspca_pac7302 9-1:0.172: URB error -71, resubmitting [ 901.099346][ C1] gspca_main: Resubmit URB failed with error -19 [ 901.279272][ C0] vkms_vblank_simulate: vblank timer overrun [ 901.429859][T15132] usb usb1: usbfs: interface 0 claimed by hub while 'syz.1.3241' sets config #1 [ 901.790167][ T37] kauditd_printk_skb: 66 callbacks suppressed [ 901.790187][ T37] audit: type=1326 audit(1762726036.508:726): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=15144 comm="syz.8.3246" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f95af75f6c9 code=0x7ffc0000 [ 901.790253][ T37] audit: type=1326 audit(1762726036.508:727): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=15144 comm="syz.8.3246" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f95af75f6c9 code=0x7ffc0000 [ 901.866567][ T37] audit: type=1326 audit(1762726036.578:728): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=15144 comm="syz.8.3246" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f95af75f6c9 code=0x7ffc0000 [ 901.867437][ T37] audit: type=1326 audit(1762726036.588:729): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=15144 comm="syz.8.3246" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f95af75f6c9 code=0x7ffc0000 [ 901.867490][ T37] audit: type=1326 audit(1762726036.588:730): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=15144 comm="syz.8.3246" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f95af75f6c9 code=0x7ffc0000 [ 901.871497][ T37] audit: type=1326 audit(1762726036.588:731): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=15144 comm="syz.8.3246" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f95af7615e7 code=0x7ffc0000 [ 901.871551][ T37] audit: type=1326 audit(1762726036.588:732): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=15144 comm="syz.8.3246" exe="/root/syz-executor" sig=0 arch=c000003e syscall=44 compat=0 ip=0x7f95af76155c code=0x7ffc0000 [ 901.871601][ T37] audit: type=1326 audit(1762726036.588:733): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=15144 comm="syz.8.3246" exe="/root/syz-executor" sig=0 arch=c000003e syscall=45 compat=0 ip=0x7f95af761494 code=0x7ffc0000 [ 901.871649][ T37] audit: type=1326 audit(1762726036.588:734): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=15144 comm="syz.8.3246" exe="/root/syz-executor" sig=0 arch=c000003e syscall=45 compat=0 ip=0x7f95af761494 code=0x7ffc0000 [ 901.871697][ T37] audit: type=1326 audit(1762726036.588:735): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=15144 comm="syz.8.3246" exe="/root/syz-executor" sig=0 arch=c000003e syscall=3 compat=0 ip=0x7f95af75e32a code=0x7ffc0000 [ 902.044657][T15155] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3250'. [ 902.086593][T11667] usb 3-1: new high-speed USB device number 16 using dummy_hcd [ 902.172119][ C0] vkms_vblank_simulate: vblank timer overrun [ 902.260169][T11667] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 902.260204][T11667] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 902.260229][T11667] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 902.260278][T11667] usb 3-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 902.260302][T11667] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 902.273890][T11667] usb 3-1: config 0 descriptor?? [ 902.751951][ C0] vkms_vblank_simulate: vblank timer overrun [ 902.909342][ C0] vkms_vblank_simulate: vblank timer overrun [ 903.226724][T15155] hsr_slave_1 (unregistering): left promiscuous mode [ 903.326620][ T8387] usb 1-1: new high-speed USB device number 28 using dummy_hcd [ 903.380474][T11667] plantronics 0003:047F:FFFF.0029: unknown main item tag 0x0 [ 903.380517][T11667] plantronics 0003:047F:FFFF.0029: unknown main item tag 0x0 [ 903.380548][T11667] plantronics 0003:047F:FFFF.0029: unknown main item tag 0x0 [ 903.380577][T11667] plantronics 0003:047F:FFFF.0029: unknown main item tag 0x0 [ 903.380607][T11667] plantronics 0003:047F:FFFF.0029: unknown main item tag 0x0 [ 903.380637][T11667] plantronics 0003:047F:FFFF.0029: unknown main item tag 0x0 [ 903.380666][T11667] plantronics 0003:047F:FFFF.0029: unknown main item tag 0x0 [ 903.380695][T11667] plantronics 0003:047F:FFFF.0029: unknown main item tag 0x0 [ 903.380725][T11667] plantronics 0003:047F:FFFF.0029: unknown main item tag 0x0 [ 903.380754][T11667] plantronics 0003:047F:FFFF.0029: unknown main item tag 0x0 [ 903.401666][T11667] plantronics 0003:047F:FFFF.0029: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.2-1/input0 [ 903.479424][ T8387] usb 1-1: Using ep0 maxpacket: 32 [ 903.482031][ T8387] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 903.482066][ T8387] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 903.482108][ T8387] usb 1-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 903.482142][ T8387] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 903.495204][ T8387] usb 1-1: config 0 descriptor?? [ 903.515390][ T8387] hub 1-1:0.0: USB hub found [ 903.634074][ T8405] usb 3-1: USB disconnect, device number 16 [ 903.786890][ T8387] hub 1-1:0.0: 1 port detected [ 904.253989][ C0] vkms_vblank_simulate: vblank timer overrun [ 904.439596][ C0] vkms_vblank_simulate: vblank timer overrun [ 904.679960][ C0] vkms_vblank_simulate: vblank timer overrun [ 904.803781][ C0] vkms_vblank_simulate: vblank timer overrun [ 905.160587][ T8387] hub 1-1:0.0: activate --> -90 [ 905.257839][ C0] vkms_vblank_simulate: vblank timer overrun [ 905.563922][ T8387] usb 1-1-port1: cannot reset (err = -71) [ 905.564343][ T8387] usb 1-1-port1: cannot reset (err = -71) [ 905.564363][ T8387] usb 1-1-port1: Cannot enable. Maybe the USB cable is bad? [ 905.564781][ T8387] usb 1-1-port1: cannot disable (err = -71) [ 905.565296][ T8387] usb 1-1-port1: cannot reset (err = -71) [ 905.565621][ T8387] usb 1-1-port1: cannot reset (err = -71) [ 905.565640][ T8387] usb 1-1-port1: Cannot enable. Maybe the USB cable is bad? [ 905.565983][ T8387] usb 1-1-port1: cannot disable (err = -71) [ 905.566050][ T8387] usb 1-1-port1: attempt power cycle [ 905.624462][T11667] usb 1-1: USB disconnect, device number 28 [ 905.756832][ T8405] usb 9-1: new high-speed USB device number 24 using dummy_hcd [ 905.911179][ T8405] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 905.911214][ T8405] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 905.911238][ T8405] usb 9-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 905.911283][ T8405] usb 9-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 905.911308][ T8405] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 905.937554][ T8405] usb 9-1: config 0 descriptor?? [ 906.000464][T15207] hub 2-0:1.0: USB hub found [ 906.003863][T15207] hub 2-0:1.0: 1 port detected [ 906.405847][ T8405] plantronics 0003:047F:FFFF.002A: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.8-1/input0 [ 909.368513][T15247] loop3: detected capacity change from 0 to 7 [ 909.389549][T15247] Dev loop3: unable to read RDB block 7 [ 909.389610][T15247] loop3: unable to read partition table [ 909.389858][T15247] loop3: partition table beyond EOD, truncated [ 909.389879][T15247] loop_reread_partitions: partition scan of loop3 (þ被xü—ŸÑà– ) failed (rc=-5) [ 909.741519][ T5882] usb 9-1: USB disconnect, device number 24 [ 910.692558][ T8405] usb 10-1: new high-speed USB device number 18 using dummy_hcd [ 910.876825][ T8405] usb 10-1: Using ep0 maxpacket: 32 [ 910.879358][ T8405] usb 10-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 910.879384][ T8405] usb 10-1: config 0 has no interfaces? [ 910.879415][ T8405] usb 10-1: New USB device found, idVendor=056a, idProduct=0004, bcdDevice= 0.00 [ 910.879444][ T8405] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 910.885611][ T8405] usb 10-1: config 0 descriptor?? [ 911.035261][T15274] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 911.140556][ T8405] usb 10-1: USB disconnect, device number 18 [ 913.524252][ T8405] usb 9-1: new high-speed USB device number 25 using dummy_hcd [ 913.686574][ T8405] usb 9-1: Using ep0 maxpacket: 8 [ 913.691160][ T8405] usb 9-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 913.691216][ T8405] usb 9-1: config 0 interface 0 altsetting 5 has 0 endpoint descriptors, different from the interface descriptor's value: 2 [ 913.691246][ T8405] usb 9-1: config 0 interface 0 has no altsetting 0 [ 913.691282][ T8405] usb 9-1: New USB device found, idVendor=5543, idProduct=0042, bcdDevice= 0.00 [ 913.691307][ T8405] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 913.758691][ T8405] usb 9-1: config 0 descriptor?? [ 913.776688][ T8405] usbhid 9-1:0.0: couldn't find an input interrupt endpoint [ 915.063633][T11667] usb 9-1: USB disconnect, device number 25 [ 917.637050][ T8386] usb 1-1: new full-speed USB device number 33 using dummy_hcd [ 917.801311][ T8386] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 917.801343][ T8386] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 5 [ 917.801391][ T8386] usb 1-1: New USB device found, idVendor=046d, idProduct=005c, bcdDevice= 0.00 [ 917.801416][ T8386] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 917.855538][ T8386] usb 1-1: config 0 descriptor?? [ 918.382155][ T8386] hid-generic 0003:046D:005C.002B: hidraw0: USB HID v0.00 Device [HID 046d:005c] on usb-dummy_hcd.0-1/input0 [ 918.596660][ T5889] usb 1-1: USB disconnect, device number 33 [ 920.126694][ T9] usb 10-1: new high-speed USB device number 19 using dummy_hcd [ 920.276569][ T9] usb 10-1: Using ep0 maxpacket: 8 [ 920.279278][ T9] usb 10-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 56832, setting to 1024 [ 920.279317][ T9] usb 10-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024 [ 920.279346][ T9] usb 10-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 920.279372][ T9] usb 10-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 920.279432][ T9] usb 10-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 920.279459][ T9] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 920.574946][ T9] usb 10-1: usb_control_msg returned -32 [ 920.575008][ T9] usbtmc 10-1:16.0: can't read capabilities [ 920.840307][ T8405] usb 3-1: new high-speed USB device number 17 using dummy_hcd [ 920.986562][ T8405] usb 3-1: Using ep0 maxpacket: 16 [ 920.989477][ T8405] usb 3-1: config 1 has an invalid interface number: 161 but max is 2 [ 920.989607][ T8405] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 920.989630][ T8405] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 920.989653][ T8405] usb 3-1: config 1 has no interface number 0 [ 920.992918][ T8405] usb 3-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.53 [ 920.992949][ T8405] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 920.992970][ T8405] usb 3-1: Product: syz [ 920.992984][ T8405] usb 3-1: Manufacturer: syz [ 920.992998][ T8405] usb 3-1: SerialNumber: syz [ 921.276357][ T8405] usb 3-1: 161:2 : does not exist [ 921.276539][ T8405] usb 3-1: unit 9 not found! [ 921.291522][ T8405] usb 3-1: 4:161: cannot get min/max values for control 1 (id 4) [ 921.305410][ T8405] usb 3-1: 4:161: cannot get min/max values for control 2 (id 4) [ 921.321964][ T8405] usb 3-1: 4:161: cannot get min/max values for control 3 (id 4) [ 921.335137][ T8405] usb 3-1: 4:161: cannot get min/max values for control 4 (id 4) [ 921.351641][ T8405] usb 3-1: 4:161: cannot get min/max values for control 5 (id 4) [ 921.382654][ T8405] usb 3-1: USB disconnect, device number 17 [ 923.282782][ T8405] usb 10-1: USB disconnect, device number 19 [ 923.303618][T15436] netlink: 28 bytes leftover after parsing attributes in process `syz.0.3353'. [ 923.303649][T15436] netlink: 28 bytes leftover after parsing attributes in process `syz.0.3353'. [ 923.367664][T15436] netlink: 28 bytes leftover after parsing attributes in process `syz.0.3353'. [ 923.367696][T15436] netlink: 28 bytes leftover after parsing attributes in process `syz.0.3353'. [ 925.868491][ T8386] usb 9-1: new high-speed USB device number 26 using dummy_hcd [ 926.039597][ T8386] usb 9-1: Using ep0 maxpacket: 32 [ 926.042201][ T8386] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 926.042236][ T8386] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 926.042280][ T8386] usb 9-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 926.042306][ T8386] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 926.057669][ T8386] usb 9-1: config 0 descriptor?? [ 926.120199][ T8386] hub 9-1:0.0: USB hub found [ 926.280644][ T8386] hub 9-1:0.0: 1 port detected [ 926.869801][ T5889] usb 10-1: new high-speed USB device number 20 using dummy_hcd [ 927.005788][ T8387] hub 9-1:0.0: activate --> -90 [ 927.327324][ T5889] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 927.327364][ T5889] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 927.327390][ T5889] usb 10-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 927.327439][ T5889] usb 10-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 927.327465][ T5889] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 927.394019][ T5889] usb 10-1: config 0 descriptor?? [ 927.678996][ T8387] usb 9-1-port1: cannot reset (err = -71) [ 927.679506][ T8387] usb 9-1-port1: cannot reset (err = -71) [ 927.679527][ T8387] usb 9-1-port1: Cannot enable. Maybe the USB cable is bad? [ 927.680031][ T8387] usb 9-1-port1: cannot disable (err = -71) [ 927.680689][ T8387] usb 9-1-port1: cannot reset (err = -71) [ 927.681209][ T8387] usb 9-1-port1: cannot reset (err = -71) [ 927.681227][ T8387] usb 9-1-port1: Cannot enable. Maybe the USB cable is bad? [ 927.683937][ T8387] usb 9-1-port1: cannot disable (err = -71) [ 927.684012][ T8387] usb 9-1-port1: attempt power cycle [ 927.796009][ T8405] usb 9-1: USB disconnect, device number 26 [ 928.422375][ T5889] hid_parser_main: 5 callbacks suppressed [ 928.422400][ T5889] plantronics 0003:047F:FFFF.002C: unknown main item tag 0x0 [ 928.422437][ T5889] plantronics 0003:047F:FFFF.002C: unknown main item tag 0x0 [ 928.422467][ T5889] plantronics 0003:047F:FFFF.002C: unknown main item tag 0x0 [ 928.422496][ T5889] plantronics 0003:047F:FFFF.002C: unknown main item tag 0x0 [ 928.422526][ T5889] plantronics 0003:047F:FFFF.002C: unknown main item tag 0x0 [ 928.422555][ T5889] plantronics 0003:047F:FFFF.002C: unknown main item tag 0x0 [ 928.422585][ T5889] plantronics 0003:047F:FFFF.002C: unknown main item tag 0x0 [ 928.422613][ T5889] plantronics 0003:047F:FFFF.002C: unknown main item tag 0x0 [ 928.422643][ T5889] plantronics 0003:047F:FFFF.002C: unknown main item tag 0x0 [ 928.422672][ T5889] plantronics 0003:047F:FFFF.002C: unknown main item tag 0x0 [ 928.520857][ T5889] plantronics 0003:047F:FFFF.002C: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.9-1/input0 [ 928.620417][T15484] input: syz1 as /devices/virtual/input/input35 [ 928.760477][ T8387] usb 10-1: USB disconnect, device number 20 [ 929.686587][ T1229] usb 10-1: new high-speed USB device number 21 using dummy_hcd [ 929.859482][ T1229] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 929.859521][ T1229] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 929.859566][ T1229] usb 10-1: New USB device found, idVendor=10c4, idProduct=ea90, bcdDevice= 0.00 [ 929.859657][ T1229] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 929.899209][ T1229] usb 10-1: config 0 descriptor?? [ 930.040554][ C1] vcan0: j1939_tp_rxtimer: 0xffff8880413eb000: rx timeout, send abort [ 930.050804][ C1] vcan0: j1939_xtp_rx_abort_one: 0xffff8880413eb000: 0x2f000: (3) A timeout occurred and this is the connection abort to close the session. [ 930.163067][T15504] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3392'. [ 930.367951][ T1229] cp2112 0003:10C4:EA90.002D: hidraw0: USB HID v0.00 Device [HID 10c4:ea90] on usb-dummy_hcd.9-1/input0 [ 930.548017][ T1229] cp2112 0003:10C4:EA90.002D: Part Number: 0x1A Device Version: 0xC4 [ 930.752377][ T1229] cp2112 0003:10C4:EA90.002D: error requesting SMBus config [ 930.816199][ T1229] cp2112 0003:10C4:EA90.002D: probe with driver cp2112 failed with error -32 [ 930.884869][ T1229] usb 10-1: USB disconnect, device number 21 [ 931.310361][ T5889] usb 3-1: new high-speed USB device number 18 using dummy_hcd [ 931.469376][ T5889] usb 3-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 931.469410][ T5889] usb 3-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config [ 931.469433][ T5889] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 931.469497][ T5889] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 52, changing to 9 [ 931.469528][ T5889] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8241, setting to 1024 [ 931.471915][ T5889] usb 3-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 931.471948][ T5889] usb 3-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 931.471971][ T5889] usb 3-1: Product: syz [ 931.471988][ T5889] usb 3-1: Manufacturer: syz [ 931.562886][ T5889] cdc_wdm 3-1:1.0: skipping garbage [ 931.562908][ T5889] cdc_wdm 3-1:1.0: skipping garbage [ 931.577385][ T5889] cdc_wdm 3-1:1.0: cdc-wdm0: USB WDM device [ 931.577412][ T5889] cdc_wdm 3-1:1.0: Unknown control protocol [ 932.331479][ T8387] usb 3-1: USB disconnect, device number 18 [ 935.974259][T15584] netlink: 12 bytes leftover after parsing attributes in process `syz.8.3414'. [ 936.228464][T14249] usb 10-1: new high-speed USB device number 22 using dummy_hcd [ 936.236622][ T8387] usb 1-1: new full-speed USB device number 34 using dummy_hcd [ 936.409034][ T8387] usb 1-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 936.409069][ T8387] usb 1-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 936.409117][ T8387] usb 1-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 936.409142][ T8387] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 936.457656][T14249] usb 10-1: Using ep0 maxpacket: 32 [ 936.465563][T14249] usb 10-1: config 0 has an invalid interface number: 12 but max is 0 [ 936.465595][T14249] usb 10-1: config 0 has no interface number 0 [ 936.465654][T14249] usb 10-1: config 0 interface 12 has no altsetting 0 [ 936.496825][T14249] usb 10-1: New USB device found, idVendor=2c42, idProduct=1202, bcdDevice=85.40 [ 936.496858][T14249] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 936.496882][T14249] usb 10-1: Product: syz [ 936.496899][T14249] usb 10-1: Manufacturer: syz [ 936.496914][T14249] usb 10-1: SerialNumber: syz [ 936.502842][T14249] usb 10-1: config 0 descriptor?? [ 936.659373][ T8387] usb 1-1: usb_control_msg returned -32 [ 936.659426][ T8387] usbtmc 1-1:16.0: can't read capabilities [ 936.800528][ T1321] ieee802154 phy0 wpan0: encryption failed: -22 [ 936.800608][ T1321] ieee802154 phy1 wpan1: encryption failed: -22 [ 937.789620][T14249] f81534 10-1:0.12: f81534_get_register: reg: 1003 failed: -71 [ 937.789676][T14249] f81534 10-1:0.12: f81534_find_config_idx: read failed: -71 [ 937.789696][T14249] f81534 10-1:0.12: f81534_calc_num_ports: find idx failed: -71 [ 937.789794][T14249] f81534 10-1:0.12: probe with driver f81534 failed with error -71 [ 937.840726][T14249] usb 10-1: USB disconnect, device number 22 [ 938.158423][ C0] vkms_vblank_simulate: vblank timer overrun [ 938.657330][T14249] usb 3-1: new high-speed USB device number 19 using dummy_hcd [ 938.804939][ C0] vkms_vblank_simulate: vblank timer overrun [ 939.046993][T14249] usb 3-1: Using ep0 maxpacket: 32 [ 939.500006][ C0] vkms_vblank_simulate: vblank timer overrun [ 939.554126][T14249] usb 3-1: config 0 has an invalid interface number: 184 but max is 0 [ 939.554158][T14249] usb 3-1: config 0 has no interface number 0 [ 939.554216][T14249] usb 3-1: config 0 interface 184 has no altsetting 0 [ 939.606301][ C0] vkms_vblank_simulate: vblank timer overrun [ 939.638544][T14249] usb 3-1: New USB device found, idVendor=0424, idProduct=7500, bcdDevice=69.ee [ 939.638578][T14249] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 939.638600][T14249] usb 3-1: Product: syz [ 939.638616][T14249] usb 3-1: Manufacturer: syz [ 939.638633][T14249] usb 3-1: SerialNumber: syz [ 939.648769][T14249] usb 3-1: config 0 descriptor?? [ 939.687865][T14249] smsc75xx v1.0.0 [ 939.695994][ T8387] usb 1-1: USB disconnect, device number 34 [ 940.289976][T14249] smsc75xx 3-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000040: -32 [ 940.290008][T14249] smsc75xx 3-1:0.184 (unnamed net_device) (uninitialized): Error reading E2P_CMD [ 940.733183][ T62] sysfs: cannot create duplicate filename '/devices/virtual/bluetooth/hci2/hci2:201' [ 940.733213][ T62] CPU: 0 UID: 0 PID: 62 Comm: kworker/u9:0 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 940.733240][ T62] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 940.733255][ T62] Workqueue: hci2 hci_rx_work [ 940.733285][ T62] Call Trace: [ 940.733294][ T62] [ 940.733304][ T62] dump_stack_lvl+0x189/0x250 [ 940.733345][ T62] ? __pfx_dump_stack_lvl+0x10/0x10 [ 940.733379][ T62] ? __pfx_[ 940.733379][ T62] ? __pfx__printk+0x10/0x10 [ 940.733410][ T62] ? kernfs_path_from_node+0x2c/0x280 [ 940.733450][ T62] ? kernfs_path_from_node+0x243/0x280 [ 940.733473][ T62] ? kernfs_path_from_node+0x2c/0x280 [ 940.733515][ T62] sysfs_create_dir_ns+0x259/0x280 [ 940.733536][ T62] ? __pfx_rt_mutex_slowunlock+0x10/0x10 [ 940.733562][ T62] ? __pfx_sysfs_create_dir_ns+0x10/0x10 [ 940.733588][ T62] ? rt_spin_unlock+0x161/0x200 [ 940.733616][ T62] kobject_add_internal+0x5a5/0xb50 [ 940.733665][ T62] kobject_add+0x155/0x220 [ 940.733706][ T62] ? __pfx_kobject_add+0x10/0x10 [ 940.733750][ T62] ? get_device_parent+0x370/0x3a0 [ 940.733786][ T62] device_add+0x408/0xb50 [ 940.733821][ T62] hci_conn_add_sysfs+0xd5/0x1e0 [ 940.733849][ T62] le_conn_complete_evt+0xf39/0x1500 [ 940.733898][ T62] ? __pfx_le_conn_complete_evt+0x10/0x10 [ 940.733942][ T62] ? _raw_spin_unlock_irqrestore+0x85/0x110 [ 940.733974][ T62] ? lockdep_hardirqs_on+0x9c/0x150 [ 940.734041][ T62] ? skb_pull_data+0xfb/0x200 [ 940.734080][ T62] hci_le_conn_complete_evt+0x187/0x450 [ 940.734120][ T62] hci_event_packet+0x78f/0x1200 [ 940.734168][ T62] ? __pfx_hci_le_meta_evt+0x10/0x10 [ 940.734210][ T62] ? __pfx_hci_event_packet+0x10/0x10 [ 940.734249][ T62] ? hci_send_to_monitor+0xe2/0x570 [ 940.734287][ T62] hci_rx_work+0x46a/0xe80 [ 940.734324][ T62] ? process_scheduled_works+0x9ef/0x17b0 [ 940.734358][ T62] process_scheduled_works+0xae1/0x17b0 [ 940.734447][ T62] ? __pfx_process_scheduled_works+0x10/0x10 [ 940.734500][ T62] worker_thread+0x8a0/0xda0 [ 940.734564][ T62] kthread+0x711/0x8a0 [ 940.734604][ T62] ? __pfx_worker_thread+0x10/0x10 [ 940.734634][ T62] ? __pfx_kthread+0x10/0x10 [ 940.734666][ T62] ? rt_spin_unlock+0x150/0x200 [ 940.734699][ T62] ? rt_spin_unlock+0x161/0x200 [ 940.734725][ T62] ? __pfx_kthread+0x10/0x10 [ 940.734762][ T62] ret_from_fork+0x4bc/0x870 [ 940.734795][ T62] ? __pfx_ret_from_fork+0x10/0x10 [ 940.734833][ T62] ? __switch_to_asm+0x39/0x70 [ 940.734857][ T62] ? __switch_to_asm+0x33/0x70 [ 940.734879][ T62] ? __pfx_kthread+0x10/0x10 [ 940.734917][ T62] ret_from_fork_asm+0x1a/0x30 [ 940.734964][ T62] [ 940.735404][ T62] kobject: kobject_add_internal failed for hci2:201 with -EEXIST, don't try to register things with the same name in the same directory. [ 940.735450][ T62] Bluetooth: hci2: failed to register connection device [ 940.838374][ T62] ================================================================== [ 940.838394][ T62] BUG: KASAN: wild-memory-access in l2cap_connect_cfm+0x656/0x1040 [ 940.838439][ T62] Read of size 4 at addr deacfffffffffc0c by task kworker/u9:0/62 [ 940.838463][ T62] [ 940.838477][ T62] CPU: 0 UID: 0 PID: 62 Comm: kworker/u9:0 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 940.838505][ T62] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 940.838523][ T62] Workqueue: hci2 hci_rx_work [ 940.838549][ T62] Call Trace: [ 940.838558][ T62] [ 940.838568][ T62] dump_stack_lvl+0x189/0x250 [ 940.838609][ T62] ? __pfx_dump_stack_lvl+0x10/0x10 [ 940.838645][ T62] ? _raw_spin_lock_irqsave+0xb3/0xf0 [ 940.838682][ T62] ? __virt_addr_valid+0x7c/0x5c0 [ 940.838722][ T62] ? l2cap_connect_cfm+0x656/0x1040 [ 940.838756][ T62] kasan_report+0x118/0x150 [ 940.838793][ T62] ? l2cap_connect_cfm+0x656/0x1040 [ 940.838833][ T62] kasan_check_range+0x2b0/0x2c0 [ 940.838870][ T62] l2cap_connect_cfm+0x656/0x1040 [ 940.838912][ T62] ? __pfx_l2cap_connect_cfm+0x10/0x10 [ 940.838949][ T62] ? mutex_lock_nested+0x154/0x1d0 [ 940.838974][ T62] ? hci_connect_cfm+0x2c/0x140 [ 940.839004][ T62] ? __pfx_l2cap_connect_cfm+0x10/0x10 [ 940.839048][ T62] hci_connect_cfm+0x95/0x140 [ 940.839081][ T62] le_conn_complete_evt+0xfb8/0x1500 [ 940.839123][ T62] ? __pfx_le_conn_complete_evt+0x10/0x10 [ 940.839154][ T62] ? _raw_spin_unlock_irqrestore+0x85/0x110 [ 940.839187][ T62] ? lockdep_hardirqs_on+0x9c/0x150 [ 940.839224][ T62] ? skb_pull_data+0xfb/0x200 [ 940.839260][ T62] hci_le_conn_complete_evt+0x187/0x450 [ 940.839296][ T62] hci_event_packet+0x78f/0x1200 [ 940.839323][ T62] ? __pfx_hci_le_meta_evt+0x10/0x10 [ 940.839355][ T62] ? __pfx_hci_event_packet+0x10/0x10 [ 940.839386][ T62] ? hci_send_to_monitor+0xe2/0x570 [ 940.839422][ T62] hci_rx_work+0x46a/0xe80 [ 940.839451][ T62] ? process_scheduled_works+0x9ef/0x17b0 [ 940.839482][ T62] process_scheduled_works+0xae1/0x17b0 [ 940.839528][ T62] ? __pfx_process_scheduled_works+0x10/0x10 [ 940.839579][ T62] worker_thread+0x8a0/0xda0 [ 940.839644][ T62] kthread+0x711/0x8a0 [ 940.839681][ T62] ? __pfx_worker_thread+0x10/0x10 [ 940.839745][ T62] ? __pfx_kthread+0x10/0x10 [ 940.839779][ T62] ? rt_spin_unlock+0x150/0x200 [ 940.839809][ T62] ? rt_spin_unlock+0x161/0x200 [ 940.839834][ T62] ? __pfx_kthread+0x10/0x10 [ 940.839870][ T62] ret_from_fork+0x4bc/0x870 [ 940.839900][ T62] ? __pfx_ret_from_fork+0x10/0x10 [ 940.839930][ T62] ? __switch_to_asm+0x39/0x70 [ 940.839953][ T62] ? __switch_to_asm+0x33/0x70 [ 940.839977][ T62] ? __pfx_kthread+0x10/0x10 [ 940.840021][ T62] ret_from_fork_asm+0x1a/0x30 [ 940.840058][ T62] [ 940.840067][ T62] ================================================================== [ 940.842494][ T62] Kernel panic - not syncing: KASAN: panic_on_warn set ... [ 940.842517][ T62] CPU: 0 UID: 0 PID: 62 Comm: kworker/u9:0 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 940.842544][ T62] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 940.842559][ T62] Workqueue: hci2 hci_rx_work [ 940.842592][ T62] Call Trace: [ 940.842600][ T62] [ 940.842610][ T62] dump_stack_lvl+0x99/0x250 [ 940.842649][ T62] ? __asan_memcpy+0x40/0x70 [ 940.842677][ T62] ? __pfx_dump_stack_lvl+0x10/0x10 [ 940.842714][ T62] ? __pfx__printk+0x10/0x10 [ 940.842752][ T62] vpanic+0x237/0x6d0 [ 940.842773][ T62] ? __pfx_vpanic+0x10/0x10 [ 940.842794][ T62] ? preempt_schedule+0xae/0xc0 [ 940.842826][ T62] ? __pfx_preempt_schedule+0x10/0x10 [ 940.842861][ T62] panic+0xb9/0xc0 [ 940.842883][ T62] ? __pfx_panic+0x10/0x10 [ 940.842907][ T62] ? _raw_spin_unlock_irqrestore+0xfd/0x110 [ 940.842947][ T62] ? l2cap_connect_cfm+0x656/0x1040 [ 940.842981][ T62] check_panic_on_warn+0x89/0xb0 [ 940.843004][ T62] ? l2cap_connect_cfm+0x656/0x1040 [ 940.843049][ T62] end_report+0x78/0x160 [ 940.843080][ T62] kasan_report+0x129/0x150 [ 940.843113][ T62] ? l2cap_connect_cfm+0x656/0x1040 [ 940.843151][ T62] kasan_check_range+0x2b0/0x2c0 [ 940.843186][ T62] l2cap_connect_cfm+0x656/0x1040 [ 940.843228][ T62] ? __pfx_l2cap_connect_cfm+0x10/0x10 [ 940.843266][ T62] ? mutex_lock_nested+0x154/0x1d0 [ 940.843291][ T62] ? hci_connect_cfm+0x2c/0x140 [ 940.843320][ T62] ? __pfx_l2cap_connect_cfm+0x10/0x10 [ 940.843356][ T62] hci_connect_cfm+0x95/0x140 [ 940.843388][ T62] le_conn_complete_evt+0xfb8/0x1500 [ 940.843430][ T62] ? __pfx_le_conn_complete_evt+0x10/0x10 [ 940.843463][ T62] ? _raw_spin_unlock_irqrestore+0x85/0x110 [ 940.843499][ T62] ? lockdep_hardirqs_on+0x9c/0x150 [ 940.843535][ T62] ? skb_pull_data+0xfb/0x200 [ 940.843572][ T62] hci_le_conn_complete_evt+0x187/0x450 [ 940.843607][ T62] hci_event_packet+0x78f/0x1200 [ 940.843635][ T62] ? __pfx_hci_le_meta_evt+0x10/0x10 [ 940.843666][ T62] ? __pfx_hci_event_packet+0x10/0x10 [ 940.843696][ T62] ? hci_send_to_monitor+0xe2/0x570 [ 940.843731][ T62] hci_rx_work+0x46a/0xe80 [ 940.843761][ T62] ? process_scheduled_works+0x9ef/0x17b0 [ 940.843792][ T62] process_scheduled_works+0xae1/0x17b0 [ 940.843839][ T62] ? __pfx_process_scheduled_works+0x10/0x10 [ 940.843879][ T62] worker_thread+0x8a0/0xda0 [ 940.843925][ T62] kthread+0x711/0x8a0 [ 940.843963][ T62] ? __pfx_worker_thread+0x10/0x10 [ 940.843991][ T62] ? __pfx_kthread+0x10/0x10 [ 940.844033][ T62] ? rt_spin_unlock+0x150/0x200 [ 940.844062][ T62] ? rt_spin_unlock+0x161/0x200 [ 940.844089][ T62] ? __pfx_kthread+0x10/0x10 [ 940.844126][ T62] ret_from_fork+0x4bc/0x870 [ 940.844156][ T62] ? __pfx_ret_from_fork+0x10/0x10 [ 940.844188][ T62] ? __switch_to_asm+0x39/0x70 [ 940.844211][ T62] ? __switch_to_asm+0x33/0x70 [ 940.844235][ T62] ? __pfx_kthread+0x10/0x10 [ 940.844271][ T62] ret_from_fork_asm+0x1a/0x30 [ 940.844306][ T62] [ 940.844651][ T62] Kernel Offset: disabled