last executing test programs: 4m48.703868964s ago: executing program 32 (id=1414): socket$nl_generic(0x10, 0x3, 0x10) openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x88842, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) mq_open(&(0x7f0000000240)='/dev/video#\x00', 0x40, 0x80, &(0x7f0000000300)={0xfffffffffffffffb, 0x4, 0x3ff, 0x2}) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000000)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) r2 = syz_io_uring_setup(0x12e, &(0x7f0000000340)={0x0, 0x5cb1, 0x2, 0x3, 0xfffffffd}, &(0x7f0000000140)=0x0, &(0x7f0000000280)) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) r4 = syz_open_dev$sndctrl(&(0x7f00000000c0), 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_UNLOCK(r4, 0xc4c85513, &(0x7f0000000b80)={0x7, 0x0, 0x2008, 0x7, 'syz1\x00', 0x900005}) syz_memcpy_off$IO_URING_METADATA_GENERIC(r3, 0x4, &(0x7f0000000080)=0x200, 0x0, 0x4) io_uring_enter(r2, 0x1e76, 0xf728, 0x5, 0x0, 0x0) mremap(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x1000, 0x3, &(0x7f0000ffa000/0x1000)=nil) io_uring_register$IORING_REGISTER_IOWQ_AFF(r2, 0x11, &(0x7f0000000040)="732fbfdb019d7da37edad2e06a44164ecdaa2c0071e55d0f2412f7561e683df8bf8bec", 0x23) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000007, 0x40032, 0xffffffffffffffff, 0x40000000) r5 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TUNSETOFFLOAD(r5, 0xc004743e, 0x110e22fff6) r6 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000080), 0x1, 0x0) ioctl$TUNSETOFFLOAD(r6, 0x4004743d, 0x110e22ffe6) r7 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r7, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000001c0)=ANY=[@ANYBLOB="400000001000030400"/20, @ANYRES32=0x0, @ANYBLOB="00000000000000001800128008000100707070000c00028008000100", @ANYRES8=r6], 0x40}, 0x1, 0x0, 0x0, 0x20040000}, 0x0) r8 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r8) ioctl$DRM_IOCTL_SYNCOBJ_HANDLE_TO_FD_SYNC_FILE(0xffffffffffffffff, 0xc01064c1, &(0x7f0000000100)) ptrace$poke(0x4, r8, &(0x7f0000002040), 0x8000400000000006) 4m45.895353407s ago: executing program 1 (id=1421): mkdir(&(0x7f0000000400)='./file0\x00', 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f00000000c0), 0x42, 0x0) mount$fuse(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=0000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) r1 = openat$fuse(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) syz_mount_image$fuse(&(0x7f0000000040), &(0x7f0000000000)='./file0\x00', 0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r1, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0], 0x0, 0x0, 0x0) mount$fuse(0x0, &(0x7f0000000280)='./file0\x00', 0x0, 0x100000, 0x0) openat$fuse(0xffffffffffffff9c, &(0x7f0000000040), 0x42, 0x0) mount$fuse(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000002140)=ANY=[]) r2 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r2, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000300)='./file0\x00', 0x0) mount$fuse(0x0, &(0x7f0000000000)='./file0\x00', 0x0, 0x84000, 0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000)=0x2eb4, 0x2000007ff) 4m44.962595508s ago: executing program 1 (id=1424): r0 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) write$UHID_CREATE2(r0, 0x0, 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x88fd537e5c114b6e, 0x11, r0, 0x0) ioctl$KVM_X86_SETUP_MCE(r0, 0x4008ae9c, 0x0) sendmmsg$inet6(0xffffffffffffffff, 0x0, 0x0, 0x4) r1 = syz_usb_connect$printer(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000000030020f003176c400000000001090224725100000000090400001207010300090501020000000000090582020002"], 0x0) syz_usb_disconnect(r1) r2 = syz_usb_connect(0x0, 0x24, &(0x7f0000000440)=ANY=[], 0x0) syz_usb_control_io$cdc_ecm(r2, 0x0, 0x0) syz_usb_ep_write$ath9k_ep1(r2, 0x82, 0x44, &(0x7f00000001c0)=ANY=[]) syz_open_dev$char_usb(0xc, 0xb4, 0x1000) read$FUSE(0xffffffffffffffff, 0x0, 0x0) 4m44.588594014s ago: executing program 1 (id=1425): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000640), 0xffffffffffffffff) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8933, &(0x7f0000000480)={'wlan1\x00', 0x0}) r7 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000004c0)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r7, @ANYBLOB="010000000000000000003700000008000300", @ANYRES32=r6, @ANYBLOB="08002600901500000800570080"], 0x2c}}, 0x80) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f0000000100)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r2, &(0x7f0000000440)={0x0, 0xf0, &(0x7f0000000400)={&(0x7f0000000000)=ANY=[@ANYBLOB="98030000", @ANYRES16=r3, @ANYBLOB="010028057000fcdbdf253b00000008000300", @ANYRES32=r8, @ANYBLOB="04008e00080057001b0a000004006c000500190107000000080026006c090000560333"], 0x398}}, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)={0x24, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r9}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x2}]}, 0x24}}, 0x0) 4m44.391877243s ago: executing program 33 (id=1425): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000640), 0xffffffffffffffff) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8933, &(0x7f0000000480)={'wlan1\x00', 0x0}) r7 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000004c0)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r7, @ANYBLOB="010000000000000000003700000008000300", @ANYRES32=r6, @ANYBLOB="08002600901500000800570080"], 0x2c}}, 0x80) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f0000000100)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r2, &(0x7f0000000440)={0x0, 0xf0, &(0x7f0000000400)={&(0x7f0000000000)=ANY=[@ANYBLOB="98030000", @ANYRES16=r3, @ANYBLOB="010028057000fcdbdf253b00000008000300", @ANYRES32=r8, @ANYBLOB="04008e00080057001b0a000004006c000500190107000000080026006c090000560333"], 0x398}}, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)={0x24, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r9}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x2}]}, 0x24}}, 0x0) 4m41.685949793s ago: executing program 2 (id=1434): close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) openat$vcsa(0xffffffffffffff9c, &(0x7f0000000140), 0x80002, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x1, 0x4, &(0x7f0000000100)=ANY=[@ANYBLOB="183f0000000000000000000003000000950000000000000095"], &(0x7f00000003c0)='GPL\x00', 0x1, 0x0, 0x0, 0x0, 0x6, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x6}, 0x94) 4m41.453915592s ago: executing program 2 (id=1435): r0 = syz_usb_connect(0x3, 0x36, &(0x7f0000000040)=ANY=[@ANYBLOB="1201000014da2108ab12a390eb1e000000010902240001b30000"], 0x0) syz_usb_ep_write$ath9k_ep2(r0, 0x83, 0x8, &(0x7f0000000200)=ANY=[@ANYBLOB="bcea"]) r1 = syz_open_dev$evdev(&(0x7f00000000c0), 0x40, 0x0) r2 = syz_open_dev$evdev(&(0x7f00000000c0), 0x40, 0x0) ioctl$EVIOCSFF(r2, 0x40304580, &(0x7f00000001c0)={0x51, 0xffff, 0x560c, {0x803, 0x5d5}, {0xfffa, 0x2}, @period={0x59, 0x2, 0x4, 0x6d, 0x9ee, {0x2, 0xb, 0xfffb, 0xa}, 0x0, 0x0}}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) ioctl$EVIOCSFF(r1, 0x40304580, &(0x7f00000001c0)={0x51, 0xffff, 0x560c, {0x803, 0x5d4}, {0xfffa, 0x2}, @period={0x59, 0x2, 0x4, 0x6d, 0x9ee, {0x2, 0xb, 0xfffb, 0xb}, 0x0, 0x0}}) 4m40.842549169s ago: executing program 34 (id=1437): r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000300)=ANY=[@ANYBLOB="400000002000010027bd7000000000000a002040000000070000000014000200fe8800"/45], 0x40}, 0x1, 0x0, 0x0, 0x24048844}, 0x8040) sendmsg$nl_route(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000c80)={&(0x7f0000000300)=ANY=[@ANYBLOB='\\\x00\x00\x00!'], 0x5c}}, 0x0) 4m40.062938034s ago: executing program 2 (id=1439): r0 = timerfd_create(0x0, 0x800) timerfd_settime(r0, 0x3, 0x0, 0x0) timerfd_settime(r0, 0x1, &(0x7f0000000140)={{}, {0x77359400}}, 0x0) 4m39.960897668s ago: executing program 2 (id=1440): mkdir(&(0x7f0000000400)='./file0\x00', 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f00000000c0), 0x42, 0x0) mount$fuse(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=0000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) r1 = openat$fuse(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) syz_mount_image$fuse(&(0x7f0000000040), &(0x7f0000000000)='./file0\x00', 0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r1, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0], 0x0, 0x0, 0x0) mount$fuse(0x0, &(0x7f0000000280)='./file0\x00', 0x0, 0x100000, 0x0) openat$fuse(0xffffffffffffff9c, &(0x7f0000000040), 0x42, 0x0) mount$fuse(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000002140)=ANY=[]) r2 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r2, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000300)='./file0\x00', 0x0) r3 = syz_open_procfs(0x0, &(0x7f00000000c0)='mountinfo\x00') sendfile(r3, r3, &(0x7f0000000000)=0x2eb4, 0x2000007ff) 4m39.062947677s ago: executing program 2 (id=1442): ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r0) socket$nl_generic(0x10, 0x3, 0x10) ioctl$SIOCSIFHWADDR(r0, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000600)=@newqdisc={0x78, 0x24, 0x4ee4e6a52ff56541, 0x1, 0x25dfdbfd, {0x0, 0x0, 0x0, r2, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x48, 0x2, {{0x3, 0x3, 0x6361, 0x7, 0xffffffff, 0x3}, [@TCA_NETEM_SLOT={0x2c, 0xc, {0x4, 0x3dde, 0xb9, 0x7ff, 0x5, 0xffffffffffffffff}}]}}}]}, 0x78}, 0x1, 0x0, 0x0, 0x40088c1}, 0x4000) sendmsg$nl_route_sched(r1, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000080)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70b926, 0x25dfdc01, {0x0, 0x0, 0x0, r2, {0x0, 0xd}, {0xffff, 0xb}, {0xffff, 0xffe0}}, [@qdisc_kind_options=@q_fq_codel={{0xd}, {0x4}}]}, 0x38}, 0x1, 0x0, 0x0, 0x240040e0}, 0x4890) r3 = socket$packet(0x11, 0x3, 0x300) sendto$packet(r3, &(0x7f00000005c0)="bad330fbc9b55400040000ea0756", 0xe, 0x40, &(0x7f00000001c0)={0x11, 0x88a8, r2, 0x1, 0xd8, 0x6, @multicast}, 0x14) 4m38.391393357s ago: executing program 2 (id=1444): r0 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) write$UHID_CREATE2(r0, 0x0, 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x88fd537e5c114b6e, 0x11, r0, 0x0) ioctl$KVM_X86_SETUP_MCE(r0, 0x4008ae9c, 0x0) sendmmsg$inet6(0xffffffffffffffff, 0x0, 0x0, 0x4) r1 = syz_usb_connect$printer(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000000030020f003176c400000000001090224725100000000090400001207010300090501020000000000090582020002"], 0x0) syz_usb_disconnect(r1) r2 = syz_usb_connect(0x0, 0x24, &(0x7f0000000440)=ANY=[], 0x0) syz_usb_control_io$cdc_ecm(r2, 0x0, 0x0) syz_usb_ep_write$ath9k_ep1(r2, 0x82, 0x44, &(0x7f00000001c0)=ANY=[]) r3 = dup2(0xffffffffffffffff, 0xffffffffffffffff) read$FUSE(r3, 0x0, 0x0) 4m37.890243399s ago: executing program 35 (id=1444): r0 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) write$UHID_CREATE2(r0, 0x0, 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x88fd537e5c114b6e, 0x11, r0, 0x0) ioctl$KVM_X86_SETUP_MCE(r0, 0x4008ae9c, 0x0) sendmmsg$inet6(0xffffffffffffffff, 0x0, 0x0, 0x4) r1 = syz_usb_connect$printer(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000000030020f003176c400000000001090224725100000000090400001207010300090501020000000000090582020002"], 0x0) syz_usb_disconnect(r1) r2 = syz_usb_connect(0x0, 0x24, &(0x7f0000000440)=ANY=[], 0x0) syz_usb_control_io$cdc_ecm(r2, 0x0, 0x0) syz_usb_ep_write$ath9k_ep1(r2, 0x82, 0x44, &(0x7f00000001c0)=ANY=[]) r3 = dup2(0xffffffffffffffff, 0xffffffffffffffff) read$FUSE(r3, 0x0, 0x0) 4m14.870599871s ago: executing program 5 (id=1520): socketpair$unix(0x1, 0x3, 0x0, 0x0) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@abs, 0x6e) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f0000000140)={0x2, &(0x7f0000000000)=[{0xb1, 0x2, 0xfd, 0x5ae9}, {0x6, 0x0, 0x7, 0x7}]}, 0x10) sendmmsg$inet(r0, &(0x7f0000002c40)=[{{0x0, 0x0, &(0x7f0000000e80)=[{&(0x7f0000000a80)="2a73ed35", 0x732a}], 0x1}}], 0x400000000000292, 0x0) 4m14.633439201s ago: executing program 5 (id=1522): syz_open_dev$tty1(0xc, 0x4, 0x1) socket$kcm(0x10, 0x7, 0x0) openat$audio(0xffffffffffffff9c, &(0x7f0000000040), 0x4a0000, 0x0) pipe2(0x0, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f0000000300)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg(r1, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) sched_setattr(0x0, 0x0, 0x0) r2 = openat$kvm(0xffffffffffffff9c, 0x0, 0x20000, 0x0) ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r3 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r3}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000400)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) r4 = mq_open(&(0x7f0000000380)='eth0\x00#\x13\xaeu\xe0\xfbu0*\xf3\x11i\xdd\xd9\xc6\x87\xde\xbf_\xa0\xf6\xdfk\xbf.\"\xa6\xc0#p\xcd\x1c/\xa6\xf2\xbcyL\x85a\xb5\xbb~+>\xbc\x93\xf8\xab\x9a3\x85l\x1d\x15\x11\x1a{@!2\xb6!\xae\xf79k\x90\x88\v8I$\xfdQ\x1d\x90=r\xd8\xc0\xd8\t/\x8dv\xb8\x93\xc3C\xae\x9dc\xd1T\xdd\x14\xd3A=z\xee\xbd/X\xbemOX)s\x94\xde\xbe_\v\x01\xbe\xeb\bLTrw\x88\x9e0\t\xc6\xe2\x9c\xed\\\xd8[\xc8\x04 \xf3\xac]V\x1d:\xfc\xc3\x9e\x02\ax\xef\xfe\x1c.TT\x01\x00\x00\x00a%\xdcQ\xb3CuT\xcc7\x8avs\xb2\a\xfe\xb3j*\xad\x18I\xcc\xe9\xaa{]\xef\xb7\xf2\xee*\xf95\bJt\xd0s\xc4\xaa\xc8\x13~\xb2\xf20\xbdf\xdb\xaeG\xe3\xfb\xef\x94\xef:Q\x1b\xe3\xa3\xa4}\xef`e\xcdL\xab\xdb\r\xf2y\x9fg1\xf4\t\x18i/!\x13\xf1,\x8cu\xaa\xbf~)\x94\x1b2\x93\x86\xe7\x9a\xf2j\xa8\x96\xa6\xa2\xfcN\x81\xafTh\xb3\x1bo:\xe8\vq7S\xe4H\xf3L\xa0\x9c\x97B\x12\x10\x9d\xaa\x7fq\x06\xb9(\xf6\x1c\x83\xb1J\xec\x926\xb5a0\xa0B\xae|\x00\x17\xc0\xa3\xd5\xf9\xaa\x98/\xa4v\xe4)I\xf3+[e\x95\x89\x99\xca\x8e\xc5\xd3\\T\xf0\x1a|5\xfff\xff\x99\xa4\xbb\x9e#oR\xa4\xf1\xba\x04c\xb3-\xf7R\xb85\xb5\xdb\xe9?\xfa/\xdf\xb4R\xbfx=\v_j\x8e\xb0\'\xf4\xe5\xff!\xe1\xbf\x82e\xb1\x9b\x8d\xf3L\t\xd21\x9cbwV\xc8\xcc\xe4\x96M_w\xbc\xdf9\b\r\xf6\x95\xae\xb5,\x92\x8c\xc0DQm\x80\xd1w\xa2\x1a\x12Z\xe5\xf4H\xf7D\n\x96J\x93\xfb\xf0$\x9f\xf7\xa2\xae$O\xa3\xb6\xf5\x98\xd3\v\x00\x86\xa5\x8b\x81\x04\xaf\x03s\xe5\x86>\x0e\xa6\xe6\x1aV\x17\x8b\xed\xa7\'\xd0\r_\xe8,XVR\x13\xe5%\xb9\x88\xb8W@D\'\x17A\xc8\x80\x02J\xd4V\x00wH(\xc5v\f\xc9\xb6\xdf..$\xe6P(_\xf1\'\xc1:\xa3\xcb\xd9\xd1\xc7\x13\x99Md\x1dc\xf1\'j\x03!\x13\xd1\xb8\xbf\xe6\xb2M\b/\rp\xa5\x00\x00\x00\x00', 0x40, 0x9, 0x0) fcntl$setlease(r4, 0x400, 0x0) mq_open(&(0x7f00000005c0)='eth0\x00\xdd\xad4=2k\xf1\x05\x9b\x91y\xe1;F\xa2\x8df\xe9\x04\x00\x00\x00\x00\x0078z=\x8f\xd5F\xa4AR\xc7\x9f.\xdc\xdb\"A\x16\xd8\x19\xf1lZ\xc8\x93\xda\xf2\xc9\xe8h[u8\xc6\xfa\x9ep\xbe\a\xe2\xbb\r\xf1\xc7\xee\xe1\xbd\x1e\xdf\xe1\x9c\x19\xda\xd3\x94EL\xca\x88\x85\xd1\x02\xd9L\x90\xeb%/\xb1\xeb\x11uP7\x1f\xd9b\xc3V\x88\xd1\x1f\xc8\x94\xebF\xf8\x88\xf0\xac.\x94\xfc\v\xb1W\xef~+n\xb1\x9b\x02n]xr\xb3\x80\xbc>\xe8XX\xe6\x12\xf3\xc9\xd5\xf8\xd1\x8d\xcb9\xbf\xb0(<\xeb\x92\x8a\x16\xb7\x11^\xb6\xb7n\xd5\xb5\x00[\xdf\x94\x00\r\x95\x17\xa1h\xf8\x00\x00\x00\"\xa0\x05\xcc^\x90c\xc9}\xb8\ny\xf4\xe1\xb4.\xa4\a\x05\xbb}\x91\xf4C\xf5O\xf1a\x12\b\x86\xa16\xbb}C\xc9\x1d\\\xedD\x14\xb1w\x1e\xa0\xc1E\xb5\xf8\xab\xfb\xd9\x93\xb8vJ\x85p\xb5n\x1b\xe4\xd5g\xae\xe4\xeb\xca\xae\x1bs\xd4\xf0\xc0\xdag\x19R4\xd4\xd4\x04\xfc\x04Zb\xf6\xba\xf8B\xf6YU\xcd\xf2\xdb\xb5\xa2\xda\xdf\x8dD\xef`\x13\x15$\xceq\xd7j\xd7\xe3V\xf2\xa2\x95\xcf\x18T\xf1\xb0\xf3\xf8O', 0x1, 0x0, 0x0) 4m13.045471431s ago: executing program 5 (id=1525): r0 = syz_usb_connect$printer(0x0, 0x36, &(0x7f00000000c0)=ANY=[@ANYBLOB="1201000000030020f003176c400000000001090224725100000000090400001207010300090501020000000000090582020002"], 0x0) syz_usb_disconnect(r0) r1 = syz_usb_connect(0x0, 0x4a, &(0x7f0000000080)=ANY=[], 0x0) syz_usb_control_io(r1, 0x0, 0x0) syz_usb_ep_write$ath9k_ep1(r1, 0x82, 0x4, &(0x7f0000000040)=ANY=[]) sendmmsg$sock(0xffffffffffffffff, &(0x7f0000005580)=[{{0x0, 0x0, &(0x7f0000005480)=[{&(0x7f0000002000)="c2", 0x1}], 0x1}}], 0x1, 0x10) readv(0xffffffffffffffff, &(0x7f0000000340)=[{&(0x7f0000002180)=""/4082, 0x1}], 0x1) 4m9.936982328s ago: executing program 5 (id=1535): mkdir(&(0x7f0000000400)='./file0\x00', 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f00000000c0), 0x42, 0x0) mount$fuse(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=0000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) r1 = openat$fuse(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) syz_mount_image$fuse(&(0x7f0000000040), &(0x7f0000000000)='./file0\x00', 0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r1, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0], 0x0, 0x0, 0x0) mount$fuse(0x0, &(0x7f0000000280)='./file0\x00', 0x0, 0x100000, 0x0) openat$fuse(0xffffffffffffff9c, &(0x7f0000000040), 0x42, 0x0) r2 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r2, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000300)='./file0\x00', 0x0) mount$fuse(0x0, &(0x7f0000000000)='./file0\x00', 0x0, 0x84000, 0x0) r3 = syz_open_procfs(0x0, &(0x7f00000000c0)='mountinfo\x00') sendfile(r3, r3, &(0x7f0000000000)=0x2eb4, 0x2000007ff) 4m9.317421555s ago: executing program 7 (id=1541): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) socket$kcm(0x11, 0x200000000000002, 0x300) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000a00)=ANY=[@ANYBLOB="140000001000010000000000000000000300000a50000000060a010400000000000000000a0000010900010073797a310000000024000480200001800700010063740000140002800800014000000001080002400000000a0900020073797a320000000014000000110001"], 0x78}, 0x1, 0x0, 0x0, 0x4008091}, 0x24000000) r1 = socket$kcm(0xa, 0x3, 0x3a) sendmsg$kcm(r1, &(0x7f0000000080)={&(0x7f0000000000)=@l2tp6={0xa, 0x0, 0x0, @loopback={0x0, 0xac14140c}}, 0x80, &(0x7f00000000c0)=[{&(0x7f0000000140)="8bcd", 0xffe3}], 0x1, 0x0, 0x0, 0x900}, 0x60) 4m9.080522375s ago: executing program 7 (id=1542): mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x0, 0x50, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f0000000300)=@abs={0x0, 0x0, 0x4e25}, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = socket$inet6(0xa, 0x800000000000002, 0x0) setsockopt$sock_linger(r2, 0x1, 0x3c, &(0x7f0000000180)={0x200000000000001}, 0x8) sendto$inet6(r2, 0x0, 0x0, 0x4c881, &(0x7f0000000540)={0xa, 0x4e24, 0x10, @mcast2}, 0x1c) sendmmsg$inet6(r2, 0x0, 0x0, 0x400c404) exit(0xfe) sendmmsg$inet6(r2, &(0x7f0000004740)=[{{&(0x7f00000004c0)={0xa, 0x4e21, 0x0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x10001}, 0x1c, &(0x7f00000007c0)}}, {{&(0x7f0000000800)={0xa, 0x4e21, 0xfffffffe, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x1}, 0x1c, &(0x7f0000000c40)=[{&(0x7f0000000840)="11b1bfad69c9e86215472a62a9773cd45edddf1fe28799b805943daeac8c4c3a22b571b37c290e338dd4b545648fb3ee6693b661eb024687", 0x38}, {&(0x7f00000024c0)="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", 0x628}, {0x0}, {&(0x7f00000034c0)}, {0x0}, {0x0}, {&(0x7f0000000c00)}], 0x7}}, {{0x0, 0x0, &(0x7f00000045c0)=[{&(0x7f0000000e80)="73359c7aef6c8c46c16b02df643c244001ccb84a8f1ca6395a76f2bece75531a08f89ec1474622da43892ee1a02c355c5634564dd9cf67a6cb36b72e51d985bb023808ded7b261784e71ce39f6857c71887c085a520dccdd658561f7a4a5fa76d43fa855a716e315d7cd9771c4f64fc0a5eeee5fca2a2e84f6f6f5c397f812d38c7343ed5118ead79d58903a07573b73377b750938eb61d2ae8bf98b33c92fd6360590382cf64b65ab54688714c146da89312abb727fe5febd996fe20892b60cc9af7fba8f1a0161489a84d03c0a176ce6", 0xd1}, {0x0}, {0x0}, {0x0}, {&(0x7f00000044c0)="597a6b789cd5110caaa8e68623b0d55cfdff26cc78f16da427c07a314759cf6ca6867f2cda685d0f6a6723b953cb682580a11d0f01f7d7c16d7fb344aea09f9c6aa7639fc31813f85abae92cc838632e169851ff784e77c611e47d0a0269651bb766f9668aa38a809267f6afb294fecbee8cc4383ea66e5b9209ee2b3e19bef5d6ae6c155fbaecb16cb9f1d8d954cdfb7595b8c54d27674b518377ad919e", 0x9e}], 0x5, &(0x7f00000048c0)=ANY=[@ANYBLOB="40000000000000002900000037000000ff0400000000000007180000000304ff00800400000000000000000000000000000000010005020c5f040100280000000000000029000000040000000001000000000000000100050200ff04"], 0x80}}, {{0x0, 0x0, &(0x7f0000004700)=[{&(0x7f00000046c0)="e5dbe94c6d46969f", 0x8}], 0x1}}], 0x4, 0x48c0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) write$USERIO_CMD_SEND_INTERRUPT(0xffffffffffffffff, 0x0, 0x0) ioctl$DRM_IOCTL_SET_CLIENT_CAP(0xffffffffffffffff, 0x4010640d, &(0x7f0000000000)={0x3, 0x2}) r3 = syz_open_procfs(0x0, &(0x7f0000002340)='fdinfo\x00') getdents(r3, &(0x7f0000000000)=""/43, 0x2b) getdents64(r3, 0x0, 0x0) r4 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_ADD_MFC_PROXY(r4, 0x0, 0xd2, &(0x7f0000000000)={@remote, @multicast1, 0x4, "d30f388c52647612d91de4353d68b0fa00", 0x0, 0x0, 0x4000000, 0x8}, 0x3c) setsockopt$MRT_ADD_MFC(r4, 0x0, 0xcc, &(0x7f0000000280)={@broadcast, @multicast1, 0x0, "7ea97ddb2ac127ffa5b7216fe75ebaa2855a422a8bf8ec7caf003751804500", 0x0, 0xfffffffd, 0x4, 0xfffffffe}, 0x3c) setsockopt$MRT_ADD_MFC(r4, 0x0, 0xcc, &(0x7f0000000200)={@empty, @private, 0x0, "606b177019716ea6ff1f4d7ed79c31e2e0f1da00000000230000002000", 0x1, 0x0, 0x3}, 0x3c) r5 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_ADD_MFC_PROXY(r5, 0x0, 0xd2, &(0x7f0000000200)={@empty, @multicast2=0xe000031f, 0x0, "ff00000058b274e6d845167fefe428970548fc3c7b00000000000000fcff00", 0xb2, 0xb, 0x6, 0x6}, 0x3c) setsockopt$MRT_FLUSH(r4, 0x0, 0xd4, &(0x7f00000003c0)=0xa, 0x4) madvise(&(0x7f00002a3000/0x2000)=nil, 0x2000, 0xc) socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_MSG_GETRULE(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000100)={0x20, 0x7, 0xa, 0x201, 0x0, 0x0, {0x1, 0x0, 0x8}, [@NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}]}, 0x20}, 0x1, 0x0, 0x0, 0x40000}, 0x20000000) 4m9.008400028s ago: executing program 5 (id=1543): syz_usb_connect$hid(0x0, 0x0, 0x0, 0x0) r0 = shmget$private(0x0, 0x800000, 0x54003f00, &(0x7f0000800000/0x800000)=nil) shmat(r0, &(0x7f0000000000/0x4000)=nil, 0xbbdccba4532b703b) r1 = socket$nl_route(0x10, 0x3, 0x0) socket$inet_udp(0x2, 0x2, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)) madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0xe) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) mbind(&(0x7f0000001000/0x800000)=nil, 0x800000, 0x0, 0x0, 0x0, 0x2) r2 = syz_clone(0x12c180, 0x0, 0x0, 0x0, 0x0, 0x0) openat$pidfd(0xffffffffffffff9c, &(0x7f0000000040), 0x141000, 0x0) syz_open_procfs(r2, &(0x7f0000000000)='net/if_inet6\x00') add_key(&(0x7f0000000180)='rxrpc\x00', 0x0, &(0x7f0000000200)="d397e21e0152b281fc2623c841205afa5d22545fe0e72e9053", 0x19, 0xffffffffffffffff) sendmsg$nl_route(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000400)={&(0x7f00000002c0)=ANY=[@ANYBLOB="4c0000002000010026bd7000fcdbdf250a1400070f0000022500010014000100fe8000110000000000000000000000221400030076657468315f"], 0x4c}, 0x1, 0x0, 0x0, 0x5}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) r3 = userfaultfd(0x801) ioctl$UFFDIO_API(r3, 0xc018aa3f, &(0x7f00000000c0)={0xaa, 0x5}) ioctl$UFFDIO_CONTINUE(r3, 0xc020aa08, &(0x7f0000000080)={{&(0x7f0000400000/0xc00000)=nil, 0xc00000}}) syz_clone(0x42080000, 0x0, 0x0, 0x0, 0x0, 0x0) 4m8.718578481s ago: executing program 5 (id=1544): r0 = syz_usb_connect(0x3, 0x36, &(0x7f0000000040)=ANY=[@ANYBLOB="1201000014da2108ab12a390eb1e000000010902240001b30000040904410017ff5d810009050f1f0104000000"], 0x0) syz_usb_ep_write$ath9k_ep2(r0, 0x83, 0x8, &(0x7f0000000200)=ANY=[@ANYBLOB="bcea"]) r1 = syz_open_dev$evdev(&(0x7f00000000c0), 0x40, 0x0) r2 = syz_open_dev$evdev(&(0x7f00000000c0), 0x40, 0x0) ioctl$EVIOCSFF(r2, 0x40304580, &(0x7f00000001c0)={0x51, 0xffff, 0x560c, {0x803, 0x5d5}, {0xfffa, 0x2}, @period={0x59, 0x2, 0x4, 0x6d, 0x9ee, {0x2, 0xb, 0xfffb, 0xa}, 0x0, 0x0}}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) ioctl$EVIOCSFF(r1, 0x40304580, &(0x7f00000001c0)={0x51, 0xffff, 0x560c, {0x803, 0x5d4}, {0xfffa, 0x2}, @period={0x59, 0x2, 0x4, 0x6d, 0x9ee, {0x2, 0xb, 0xfffb, 0xb}, 0x0, 0x0}}) 4m7.885721338s ago: executing program 36 (id=1544): r0 = syz_usb_connect(0x3, 0x36, &(0x7f0000000040)=ANY=[@ANYBLOB="1201000014da2108ab12a390eb1e000000010902240001b30000040904410017ff5d810009050f1f0104000000"], 0x0) syz_usb_ep_write$ath9k_ep2(r0, 0x83, 0x8, &(0x7f0000000200)=ANY=[@ANYBLOB="bcea"]) r1 = syz_open_dev$evdev(&(0x7f00000000c0), 0x40, 0x0) r2 = syz_open_dev$evdev(&(0x7f00000000c0), 0x40, 0x0) ioctl$EVIOCSFF(r2, 0x40304580, &(0x7f00000001c0)={0x51, 0xffff, 0x560c, {0x803, 0x5d5}, {0xfffa, 0x2}, @period={0x59, 0x2, 0x4, 0x6d, 0x9ee, {0x2, 0xb, 0xfffb, 0xa}, 0x0, 0x0}}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) ioctl$EVIOCSFF(r1, 0x40304580, &(0x7f00000001c0)={0x51, 0xffff, 0x560c, {0x803, 0x5d4}, {0xfffa, 0x2}, @period={0x59, 0x2, 0x4, 0x6d, 0x9ee, {0x2, 0xb, 0xfffb, 0xb}, 0x0, 0x0}}) 4m7.328790642s ago: executing program 7 (id=1549): r0 = socket(0x400000000010, 0x3, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000940)={&(0x7f00000013c0)=ANY=[@ANYBLOB="640000001000030400"/20, @ANYRES32=0x0, @ANYBLOB="e5fda988000000002800128009000100766c616e00000000180002800c000200200000001f000000060001000000000008000500", @ANYRES32=r1, @ANYBLOB='\b\x00\n\x00', @ANYRES32, @ANYBLOB="0a000100000070"], 0x64}, 0x1, 0x0, 0x0, 0x8811}, 0x0) 4m6.739623018s ago: executing program 7 (id=1551): mkdir(&(0x7f0000000400)='./file0\x00', 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f00000000c0), 0x42, 0x0) mount$fuse(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=0000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) r1 = openat$fuse(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) syz_mount_image$fuse(&(0x7f0000000040), &(0x7f0000000000)='./file0\x00', 0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r1, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0], 0x0, 0x0, 0x0) mount$fuse(0x0, &(0x7f0000000280)='./file0\x00', 0x0, 0x100000, 0x0) openat$fuse(0xffffffffffffff9c, &(0x7f0000000040), 0x42, 0x0) r2 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r2, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000300)='./file0\x00', 0x0) mount$fuse(0x0, &(0x7f0000000000)='./file0\x00', 0x0, 0x84000, 0x0) r3 = syz_open_procfs(0x0, &(0x7f00000000c0)='mountinfo\x00') sendfile(r3, r3, &(0x7f0000000000)=0x2eb4, 0x2000007ff) 4m5.711635713s ago: executing program 7 (id=1552): r0 = io_uring_setup(0x178e, &(0x7f0000000040)={0x0, 0xcc85, 0x400, 0x0, 0x252}) syz_usb_connect(0x2, 0x2d, &(0x7f0000000a00)=ANY=[@ANYBLOB="120100000c9768405e0483020b9901e4020109021b000100000000090400fb015c291d00090509"], 0x0) r1 = syz_open_dev$audion(&(0x7f0000000000), 0x3, 0x1) write$sequencer(r1, &(0x7f0000000300)=ANY=[], 0xffaa) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r3, 0xae60) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x2) ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f0000000200)={0x0, 0x0, 0xf000, 0x2000, &(0x7f0000f9a000/0x2000)=nil}) ioctl$KVM_SET_VCPU_EVENTS(r4, 0x4400ae8f, &(0x7f0000000000)=@arm64={0x8, 0x2, 0x2, '\x00', 0x2}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000f9a000/0x18000)=nil, &(0x7f0000000280)=[@text64={0x40, 0x0}], 0x54, 0x8, &(0x7f0000000380)=[@flags={0x3, 0x18c244}], 0x10000000000000c5) close_range(r0, 0xffffffffffffffff, 0x0) 4m5.156733687s ago: executing program 7 (id=1555): socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x2) socket$netlink(0x10, 0x3, 0x0) io_submit(0x0, 0x0, 0x0) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) ioctl$KVM_SET_VCPU_EVENTS(r2, 0x4040aea0, &(0x7f0000000080)=@x86={0x9, 0x5, 0x1c, 0x0, 0xffffffa0, 0x2, 0xff, 0x80, 0x8c, 0xfd, 0x6, 0xa7, 0x0, 0x0, 0x8, 0x1f, 0x5, 0x8, 0xd, '\x00', 0x8, 0x7679c3fe}) 4m4.693508828s ago: executing program 37 (id=1555): socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x2) socket$netlink(0x10, 0x3, 0x0) io_submit(0x0, 0x0, 0x0) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) ioctl$KVM_SET_VCPU_EVENTS(r2, 0x4040aea0, &(0x7f0000000080)=@x86={0x9, 0x5, 0x1c, 0x0, 0xffffffa0, 0x2, 0xff, 0x80, 0x8c, 0xfd, 0x6, 0xa7, 0x0, 0x0, 0x8, 0x1f, 0x5, 0x8, 0xd, '\x00', 0x8, 0x7679c3fe}) 2m22.427806202s ago: executing program 6 (id=1941): openat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x40042, 0x1) madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0xa) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) openat$vimc1(0xffffffffffffff9c, 0x0, 0x2, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000080)={'bridge0\x00', 0x0}) sendmsg$nl_route(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000280)=ANY=[@ANYBLOB="3c000000100005ff00000000000000000000004a", @ANYRES32=0x0, @ANYBLOB="0000b7a9191d00001c00128009000100626f6e24000000000c00028071f302006d8fba750086b6d9aa82f064998592345a3272cddd5a4fbae16c6ac656aa7a931e53594b5d5060ed7fa5fe5af54c568520d64ee35e3cf1d1c710fd7dfd6ef6f3af07f9cede5e1644ecec1f0b51d63dc0337bc861a07200"/128, @ANYRES32=r3, @ANYBLOB], 0x3c}, 0x1, 0x0, 0x0, 0x45844}, 0x0) sendmsg(r1, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0xb49, 0x9, 0x8, 0x0, 0x3}, 0x0) shutdown(0xffffffffffffffff, 0x0) waitid(0x2, 0x0, 0x0, 0x2, 0x0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000003c0)=ANY=[@ANYBLOB="14000000100001001f38a30f000000000000000a20000000000a05000000000000000000050000000900010073797a30000000002c000000030a0c010000000000000000050000000900010073797a30000000000900030073797a300000000088000000060a010400000000000000000500000008000b400000000038000480240001800b00010074756e6e656c000014000280080001400000000108000240000000091000018008000100647570000400028034000480300001800e000100636f6e6e6c696d69740000001c0002800800024000000000080002400000000008000240000000011400000011"], 0xfc}}, 0x0) r5 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000000380), 0x0, 0x0) read$FUSE(r5, &(0x7f00000021c0)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r5, &(0x7f0000000040)={0x50, 0x0, r6, {0x7, 0x1f, 0x0, 0xc82480, 0x2, 0x0, 0xd, 0x0, 0x0, 0x0, 0x10, 0x5}}, 0x50) r7 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r7, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=ANY=[@ANYBLOB="5000000010000104000000000000000000000200", @ANYRES32=0x0, @ANYBLOB="00000001000000000500210008b30000140003007465616d30"], 0x50}, 0x1, 0x0, 0x0, 0x400c8a1}, 0x0) mremap(&(0x7f0000c23000/0x2000)=nil, 0x2000, 0x3000, 0x6, &(0x7f0000c5b000/0x3000)=nil) 2m20.847054341s ago: executing program 6 (id=1948): r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000080), 0x42202) ioctl$FS_IOC_ENABLE_VERITY(r0, 0x40806685, 0x0) 2m20.728440246s ago: executing program 6 (id=1951): r0 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000000), 0x402, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1000007, 0x38011, r0, 0x0) io_uring_setup(0x4126, &(0x7f0000000080)={0x0, 0xa753, 0x1000, 0x0, 0x80243}) 2m20.558470084s ago: executing program 6 (id=1953): mkdir(&(0x7f0000000400)='./file0\x00', 0x0) r0 = openat$fuse(0xffffffffffffff9c, 0x0, 0x42, 0x0) mount$fuse(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=0000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) r1 = openat$fuse(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) syz_mount_image$fuse(&(0x7f0000000040), &(0x7f0000000000)='./file0\x00', 0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r1, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0], 0x0, 0x0, 0x0) mount$fuse(0x0, &(0x7f0000000280)='./file0\x00', 0x0, 0x100000, 0x0) mount$fuse(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000002140)=ANY=[]) r2 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r2, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000300)='./file0\x00', 0x0) mount$fuse(0x0, &(0x7f0000000000)='./file0\x00', 0x0, 0x84000, 0x0) r3 = syz_open_procfs(0x0, &(0x7f00000000c0)='mountinfo\x00') sendfile(r3, r3, &(0x7f0000000000)=0x2eb4, 0x2000007ff) 2m19.603236056s ago: executing program 6 (id=1963): r0 = syz_usb_connect$printer(0x0, 0x36, 0x0, 0x0) syz_usb_disconnect(r0) r1 = syz_usb_connect(0x0, 0x4a, &(0x7f0000000080)=ANY=[], 0x0) syz_usb_control_io(r1, 0x0, 0x0) syz_usb_ep_write$ath9k_ep1(r1, 0x82, 0x4, &(0x7f0000000040)=ANY=[]) sendmmsg$sock(0xffffffffffffffff, &(0x7f0000005580)=[{{0x0, 0x0, &(0x7f0000005480)=[{&(0x7f0000002000)="c2", 0x1}], 0x1}}], 0x1, 0x10) r2 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) readv(r2, &(0x7f0000000340)=[{&(0x7f0000002180)=""/4082, 0x1}], 0x1) 2m18.948684944s ago: executing program 6 (id=1964): r0 = socket$inet(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000300)={'bond0\x00', 0x0}) r2 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r2, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0xf0b, 0x70bd2b, 0x0, {0x0, 0x0, 0x12, r1, {}, {0xffff, 0xffff}, {0x2, 0x1}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x6, 0x1}}}]}, 0x38}}, 0x0) 2m18.36203374s ago: executing program 38 (id=1964): r0 = socket$inet(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000300)={'bond0\x00', 0x0}) r2 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r2, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0xf0b, 0x70bd2b, 0x0, {0x0, 0x0, 0x12, r1, {}, {0xffff, 0xffff}, {0x2, 0x1}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x6, 0x1}}}]}, 0x38}}, 0x0) 1m45.625088409s ago: executing program 9 (id=2141): r0 = socket$inet6_mptcp(0xa, 0x1, 0x106) connect$inet6(r0, &(0x7f0000000280)={0xa, 0x0, 0x0, @dev, 0x4}, 0x1c) pselect6(0x40, &(0x7f00000002c0)={0x4, 0xffff, 0x645b, 0x5, 0x854c, 0x5, 0x67, 0x5}, 0x0, &(0x7f00000005c0)={0x9, 0x6, 0x3, 0x6, 0xd, 0x10000, 0x4, 0x5}, 0x0, 0x0) 1m44.616832003s ago: executing program 9 (id=2148): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(r0, 0x84, 0x76, &(0x7f0000000200)={0x0, 0x7}, 0x8) setsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(r0, 0x84, 0x75, &(0x7f0000000340)={0x0, 0xcc}, 0x8) socket$inet6(0xa, 0x802, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) quotactl$Q_QUOTAON(0xffffffff80000202, &(0x7f0000000040), 0x0, 0x0) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r3 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000002800), 0x2, 0x0) ioctl$VHOST_VSOCK_SET_GUEST_CID(r3, 0x4008af60, 0x0) r4 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r4, &(0x7f0000001500)={0x28, 0x4000, 0x0, @my=0x1}, 0x10) setsockopt$SO_VM_SOCKETS_BUFFER_MAX_SIZE(r4, 0x28, 0x2, &(0x7f0000000000)=0x3, 0x8) r5 = socket(0x1e, 0x4, 0x0) r6 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$ETHTOOL_MSG_CHANNELS_SET(r6, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000004c0)={0x14, 0x0, 0x205, 0x0, 0x2}, 0x14}}, 0x4000) connect$tipc(r5, &(0x7f0000000040)=@id={0x1e, 0x3, 0x2, {0x4e20}}, 0x10) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x19) 1m43.55472642s ago: executing program 9 (id=2153): mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f0000000000)={0x0, 0x6}, 0x4) setsockopt$packet_fanout_data(r0, 0x107, 0x16, 0x0, 0x0) 1m43.420577946s ago: executing program 9 (id=2155): mkdir(&(0x7f0000000400)='./file0\x00', 0x0) openat$fuse(0xffffffffffffff9c, &(0x7f00000000c0), 0x42, 0x0) mount$fuse(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000002100), 0x0, 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) syz_mount_image$fuse(&(0x7f0000000040), &(0x7f0000000000)='./file0\x00', 0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0], 0x0, 0x0, 0x0) mount$fuse(0x0, &(0x7f0000000280)='./file0\x00', 0x0, 0x100000, 0x0) mount$fuse(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000002140)=ANY=[]) r1 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r1, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000300)='./file0\x00', 0x0) mount$fuse(0x0, &(0x7f0000000000)='./file0\x00', 0x0, 0x84000, 0x0) r2 = syz_open_procfs(0x0, &(0x7f00000000c0)='mountinfo\x00') sendfile(r2, r2, &(0x7f0000000000)=0x2eb4, 0x2000007ff) 1m42.439095139s ago: executing program 9 (id=2165): semctl$SEM_INFO(0x0, 0x2, 0x13, &(0x7f0000000000)=""/94) 1m41.860466914s ago: executing program 9 (id=2172): r0 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000380)={&(0x7f0000000080)=ANY=[@ANYBLOB="9feb010018000000000000001c0000001c00000003000000010000000000000e0200000000000000000000000000000604000000002e"], 0x0, 0x37}, 0x28) bpf$BPF_GET_BTF_INFO(0xf, &(0x7f0000003980)={r0, 0x20, &(0x7f00000002c0)={0x0, 0x0, 0x0, &(0x7f0000002b00)=""/171, 0xab}}, 0x10) 1m41.357371496s ago: executing program 39 (id=2172): r0 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000380)={&(0x7f0000000080)=ANY=[@ANYBLOB="9feb010018000000000000001c0000001c00000003000000010000000000000e0200000000000000000000000000000604000000002e"], 0x0, 0x37}, 0x28) bpf$BPF_GET_BTF_INFO(0xf, &(0x7f0000003980)={r0, 0x20, &(0x7f00000002c0)={0x0, 0x0, 0x0, &(0x7f0000002b00)=""/171, 0xab}}, 0x10) 1m29.036273618s ago: executing program 1 (id=2173): mkdir(&(0x7f0000000400)='./file0\x00', 0x0) openat$fuse(0xffffffffffffff9c, &(0x7f00000000c0), 0x42, 0x0) mount$fuse(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000002100), 0x0, 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) syz_mount_image$fuse(&(0x7f0000000040), &(0x7f0000000000)='./file0\x00', 0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0], 0x0, 0x0, 0x0) mount$fuse(0x0, &(0x7f0000000280)='./file0\x00', 0x0, 0x100000, 0x0) mount$fuse(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000002140)=ANY=[]) r1 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r1, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000300)='./file0\x00', 0x0) mount$fuse(0x0, &(0x7f0000000000)='./file0\x00', 0x0, 0x84000, 0x0) r2 = syz_open_procfs(0x0, &(0x7f00000000c0)='mountinfo\x00') sendfile(r2, r2, &(0x7f0000000000)=0x2eb4, 0x2000007ff) 1m28.088140379s ago: executing program 1 (id=2263): r0 = socket$inet6(0xa, 0x80002, 0x88) setsockopt$inet6_udp_int(r0, 0x11, 0xb, &(0x7f0000001380)=0x57, 0x4) 1m25.12079033s ago: executing program 1 (id=2282): sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="4c00000010001fff00"/20, @ANYRES32=0x0, @ANYBLOB="00000000000000002c00128009000100626f6e64"], 0x4c}}, 0x20000000) r0 = socket(0x10, 0x3, 0x0) sendmmsg$alg(r0, &(0x7f0000000140), 0x4924b68, 0x0) 1m24.096676314s ago: executing program 40 (id=2282): sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="4c00000010001fff00"/20, @ANYRES32=0x0, @ANYBLOB="00000000000000002c00128009000100626f6e64"], 0x4c}}, 0x20000000) r0 = socket(0x10, 0x3, 0x0) sendmmsg$alg(r0, &(0x7f0000000140), 0x4924b68, 0x0) 9.859323927s ago: executing program 4 (id=2528): listen(0xffffffffffffffff, 0xb0d1) socket$key(0xf, 0x3, 0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x400000000008d}, 0x0) syz_init_net_socket$nfc_llcp(0x27, 0x2, 0x1) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) openat$vnet(0xffffffffffffff9c, 0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$MSR(&(0x7f0000000240), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) syz_open_dev$audion(&(0x7f0000000380), 0x6, 0x40740) r1 = openat$rtc(0xffffffffffffff9c, &(0x7f00000003c0), 0x80000, 0x0) ioctl$RTC_UIE_ON(r1, 0x7003) ioctl$RTC_SET_TIME(r1, 0x4024700a, &(0x7f0000000040)={0x10, 0x2e, 0x8, 0x11, 0x5, 0x2c000, 0x0, 0x134, 0xffffffffffffffff}) bind$netlink(0xffffffffffffffff, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) mkdir(&(0x7f0000000440)='./file1\x00', 0x0) mount(0x0, &(0x7f0000000240)='./file1\x00', &(0x7f0000000000)='tmpfs\x00', 0x0, &(0x7f00000001c0)='usrquota') r2 = openat$comedi(0xffffff9c, &(0x7f0000000440)='/dev/comedi0\x00', 0x101001, 0x0) ioctl$COMEDI_DEVCONFIG(r2, 0x40946400, &(0x7f0000000540)={'pcl711\x00', [0x6, 0x8000000, 0x3, 0x5, 0x2f, 0x4, 0x7, 0x5, 0x1000, 0x1, 0x3, 0x8500, 0x200009, 0x4, 0x79, 0xffff, 0xffffffa8, 0x7ffffffa, 0x2e6a, 0x3, 0x7, 0x0, 0xa, 0xe2df, 0x746f, 0x8, 0x1, 0x3, 0x0, 0xffff, 0x200]}) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x2) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x349a53d2, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) syz_genetlink_get_family_id$ethtool(0x0, 0xffffffffffffffff) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) 8.487153017s ago: executing program 8 (id=2531): r0 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000080), 0x100, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) ioctl$TIOCSPGRP(0xffffffffffffffff, 0x5410, 0x0) syz_clone(0x0, 0x0, 0x0, &(0x7f0000000280), &(0x7f0000000300), 0x0) vmsplice(r0, &(0x7f0000e79000)=[{&(0x7f0000000480)}], 0x1, 0x0) mremap(&(0x7f000020e000/0x2000)=nil, 0x2000, 0x400000, 0x3, &(0x7f000082a000/0x400000)=nil) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x1) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) r2 = add_key$user(&(0x7f0000000040), 0x0, &(0x7f0000000080)='\x00', 0x1, 0xfffffffffffffffb) keyctl$KEYCTL_WATCH_KEY(0x20, r2, 0xffffffffffffffff, 0x100000000000f7) r3 = openat$cuse(0xffffffffffffff9c, &(0x7f0000000200), 0x2, 0x0) write$FUSE_NOTIFY_INVAL_ENTRY(r3, &(0x7f0000000380)=ANY=[@ANYRESOCT], 0x2c) read$watch_queue(0xffffffffffffffff, 0x0, 0x0) getpid() syz_open_dev$sndctrl(&(0x7f0000000440), 0x0, 0x0) r4 = openat$audio(0xffffffffffffff9c, &(0x7f0000000140), 0x40000000040201, 0x0) syz_open_dev$sndpcmp(&(0x7f00000003c0), 0x1, 0xb0c65) write$RDMA_USER_CM_CMD_CREATE_ID(r4, &(0x7f0000000500)={0x0, 0xfffffffffffffd83, 0xfa00, {0x0, 0x0}}, 0xfdbc) 6.59674354s ago: executing program 4 (id=2533): sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x24020854}, 0x11) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x2) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) readv(0xffffffffffffffff, 0x0, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000280)={{0x14}, [@NFT_MSG_NEWRULE={0x6c, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2, 0x0, 0x8}, [@NFTA_RULE_EXPRESSIONS={0x40, 0x4, 0x0, 0x1, [{0x3c, 0x1, 0x0, 0x1, @match={{0xa}, @val={0x2c, 0x2, 0x0, 0x1, [@NFTA_MATCH_NAME={0xd, 0x1, 'connmark\x00'}, @NFTA_MATCH_INFO={0x10, 0x3, "a62a1a4094b2c56d78942e97"}, @NFTA_MATCH_REV={0x8, 0x2, 0x1, 0x0, 0x1}]}}}]}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x9}}}, 0x94}}, 0xe040) close(r2) madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0xa) fsopen(0x0, 0x0) r3 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000240)='sched_switch\x00', r3, 0x0, 0xffffffff}, 0x18) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r5 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r5, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$tun(r4, &(0x7f0000001940)={@val={0x1c, 0xf5}, @val, @mpls={[{}], @ipv6=@tipc_packet={0x9, 0x6, "d528ac", 0x44, 0x6, 0x1, @mcast1, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', {[], @name_distributor={{0x44, 0x0, 0x0, 0x0, 0x1, 0xa, 0xb, 0x2, 0x5, 0x0, 0x1, 0x6, 0x1, 0x3, 0x4e23, 0x4e24, 0x3}, [{0x12, 0x4, 0x10001, 0xffffff49, 0x6, 0x5, 0x2, 0xf}]}}}}}, 0x7e) 4.960765202s ago: executing program 8 (id=2535): socket$nl_route(0x10, 0x3, 0x0) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000240)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0xfffffff9}, 0x50) openat(0xffffffffffffff9c, &(0x7f0000000100)='.\x00', 0x301a22, 0x1a) socket$inet_sctp(0x2, 0x5, 0x84) socket$inet_sctp(0x2, 0x1, 0x84) openat(0xffffffffffffff9c, &(0x7f0000000380)='./file0\x00', 0x40, 0x0) pipe2$9p(&(0x7f00000001c0), 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000240)) socket(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000180)) openat$fuse(0xffffffffffffff9c, &(0x7f00000000c0), 0x42, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="02000000040000000500000002"], 0x48) socket$nl_route(0x10, 0x3, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) socket$nl_route(0x10, 0x3, 0x0) fsopen(&(0x7f0000000100)='ramfs\x00', 0x0) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x1f, 0x10, &(0x7f0000000040)=ANY=[@ANYBLOB="1800000005000000000000008000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b702000000000000850000008600000018010000", @ANYRES32, @ANYBLOB="0000000000000000b7080000050000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000200000085000000a600000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x11}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000500)={r0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x48) 4.912301664s ago: executing program 0 (id=2537): prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0x20000008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000200)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0xb, &(0x7f0000000380)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020000000000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x2}, 0x94) r3 = socket$inet6(0xa, 0x3, 0xff) connect$inet6(r3, &(0x7f0000000480)={0xa, 0xfffe, 0x3, @loopback, 0xfff}, 0x1b) r4 = dup2(r3, r3) sendmmsg$unix(r4, &(0x7f0000008380), 0x400000000000174, 0x4008890) 4.879475676s ago: executing program 4 (id=2538): sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x24020854}, 0x11) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x2) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) readv(0xffffffffffffffff, 0x0, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000280)={{0x14}, [@NFT_MSG_NEWRULE={0x6c, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2, 0x0, 0x8}, [@NFTA_RULE_EXPRESSIONS={0x40, 0x4, 0x0, 0x1, [{0x3c, 0x1, 0x0, 0x1, @match={{0xa}, @val={0x2c, 0x2, 0x0, 0x1, [@NFTA_MATCH_NAME={0xd, 0x1, 'connmark\x00'}, @NFTA_MATCH_INFO={0x10, 0x3, "a62a1a4094b2c56d78942e97"}, @NFTA_MATCH_REV={0x8, 0x2, 0x1, 0x0, 0x1}]}}}]}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x9}}}, 0x94}}, 0xe040) close(r2) madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0xa) fsopen(0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={0x0, 0xffffffffffffffff, 0x0, 0xffffffff}, 0x18) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r4 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r4, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) 4.737100912s ago: executing program 8 (id=2540): capset(0x0, &(0x7f0000000200)={0x200002, 0x200003, 0x801, 0x4, 0x7}) r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000000)={0x2, 0x4e20, @empty}, 0x10) setsockopt$sock_int(r0, 0x1, 0x3c, &(0x7f0000000040)=0x1, 0xfff0) connect$inet(r0, &(0x7f0000000080)={0x2, 0x4e20, @loopback}, 0x10) sendmmsg$inet(r0, &(0x7f0000006040)=[{{0x0, 0x0, &(0x7f0000000700)=[{&(0x7f00000000c0)='\x00', 0x1}], 0x1}}, {{0x0, 0x0, &(0x7f0000001d00)=[{&(0x7f0000000140)="19", 0x1}], 0x1}}], 0x2, 0x608d8d0) 3.63866183s ago: executing program 0 (id=2541): listen(0xffffffffffffffff, 0xb0d1) socket$key(0xf, 0x3, 0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x400000000008d}, 0x0) syz_init_net_socket$nfc_llcp(0x27, 0x2, 0x1) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) openat$vnet(0xffffffffffffff9c, 0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$MSR(&(0x7f0000000240), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) syz_open_dev$audion(&(0x7f0000000380), 0x6, 0x40740) r1 = openat$rtc(0xffffffffffffff9c, &(0x7f00000003c0), 0x80000, 0x0) ioctl$RTC_UIE_ON(r1, 0x7003) ioctl$RTC_SET_TIME(r1, 0x4024700a, &(0x7f0000000040)={0x10, 0x2e, 0x8, 0x11, 0x5, 0x2c000, 0x0, 0x134, 0xffffffffffffffff}) bind$netlink(0xffffffffffffffff, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) mkdir(&(0x7f0000000440)='./file1\x00', 0x0) mount(0x0, &(0x7f0000000240)='./file1\x00', &(0x7f0000000000)='tmpfs\x00', 0x0, &(0x7f00000001c0)='usrquota') r2 = openat$comedi(0xffffff9c, &(0x7f0000000440)='/dev/comedi0\x00', 0x101001, 0x0) ioctl$COMEDI_DEVCONFIG(r2, 0x40946400, &(0x7f0000000540)={'pcl711\x00', [0x6, 0x8000000, 0x3, 0x5, 0x2f, 0x4, 0x7, 0x5, 0x1000, 0x1, 0x3, 0x8500, 0x200009, 0x4, 0x79, 0xffff, 0xffffffa8, 0x7ffffffa, 0x2e6a, 0x3, 0x7, 0x0, 0xa, 0xe2df, 0x746f, 0x8, 0x1, 0x3, 0x0, 0xffff, 0x200]}) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x2) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x349a53d2, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) syz_genetlink_get_family_id$ethtool(0x0, 0xffffffffffffffff) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) 3.596892872s ago: executing program 3 (id=2542): r0 = syz_open_dev$usbmon(&(0x7f0000000000), 0x80000001, 0x82002) r1 = syz_io_uring_setup(0x49c, &(0x7f0000000400)={0x0, 0x7078, 0x0, 0x0, 0x284}, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r2, r3, &(0x7f00000002c0)=@IORING_OP_WRITEV={0x2, 0x0, 0x4007, @fd=r0, 0x0, 0x0}) io_uring_enter(r1, 0x3516, 0x0, 0x4, 0x0, 0x0) 3.588919783s ago: executing program 8 (id=2543): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100088}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbee2, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) ioctl$sock_inet_SIOCSIFPFLAGS(0xffffffffffffffff, 0x8934, &(0x7f0000000040)={'virt_wifi0\x00', 0x1}) socket$isdn_base(0x22, 0x3, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000003c0)=@newlink={0x3c, 0x12, 0xff05, 0x40000, 0x4, {0x0, 0x0, 0x4a00, 0x0, 0x2045, 0x2000}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @ipip={{0x9}, {0x4}}}, @IFLA_TARGET_NETNSID={0x8, 0x2e, 0x3}]}, 0x3c}}, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)=@ipv6_newnexthop={0x1c, 0x68, 0x5fb9a818fb7378e9, 0x0, 0x0, {}, [@NHA_BLACKHOLE={0x4}]}, 0x1c}, 0x1, 0x0, 0x0, 0x8000000}, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x24008000}, 0x4000) sendmsg$nl_route(r5, 0x0, 0x4010) 2.119626137s ago: executing program 8 (id=2544): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000000)={0x26, 'hash\x00', 0x0, 0x0, 'wp256-generic\x00'}, 0x58) r1 = accept4$alg(r0, 0x0, 0x0, 0x0) sendmmsg$sock(r1, &(0x7f0000002480)=[{{0x0, 0x0, &(0x7f0000001780)=[{&(0x7f0000000340)="8224aca5f41b9e0ec5e7a706c919e7c0e343f0cd0a779c17e7f992396b09252009d2d12e9475a57ec39f71417044cf4151af34ac1dfd5d87cdd80bc4c24478821f64d4d971bbc1fc7bdd181a839344917165bb9cd0fa568aac55d8e38ee30fd3a9bc63e2656b6941c812e6ea0692ec276deb2b7b817906cf8c5429a42164e8bb521e216e554d509a0fd0d86729b5f4b9a01fb336bef1be8a68a628452b83a7", 0x9f}, {0x0}, {&(0x7f00000005c0)="f2b314c96d500b66f7fd46493862d9eb11d188464208592330ac482436286448", 0x20}], 0x3}}], 0x1, 0x0) mount$fuse(0x0, &(0x7f0000000280)='./file0\x00', 0x0, 0x100000, 0x0) syz_open_dev$loop(&(0x7f0000000100), 0xf01c, 0x0) sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000000740)=[{{0x0, 0x0, &(0x7f0000000300)=[{&(0x7f00000002c0)="36c1fefc4a84cb34adfedaf4648e", 0xe}], 0x1, &(0x7f0000000b40)=[@hoplimit={{0x14, 0x29, 0x34, 0x4}}, @hoplimit={{0x14, 0x29, 0x34, 0xfffffffd}}, @dstopts_2292={{0x128, 0x29, 0x4, {0x4, 0x21, '\x00', [@calipso={0x7, 0x10, {0x1, 0x2, 0x9, 0x9f, [0x8]}}, @generic={0xfe, 0x72, "f4a4a3142ee1e12b9826287997a6b33d89f3d60da1641d9fe3896c3c1b6c130ef4f01be8f5836d417874540898619050b14420ab124b11de36afb16ef4fc1cf3f4e4fa0e647cd1b07b068d3894180b6aa7527a4a8252f6836a0d67a7782c675a838ea989e567e4774de1f52d188e0b0888c5"}, @generic={0x80, 0x14, "09e12e5f0b6bdcf72f2ec7008a15fa88b025e0ad"}, @calipso={0x7, 0x40, {0x1, 0xe, 0x7a, 0x8001, [0x5, 0x9, 0x4, 0x6, 0x4, 0x400, 0xb]}}, @ra={0x5, 0x2, 0xa7e}, @pad1, @ra={0x5, 0x2, 0xbf4}, @hao={0xc9, 0x10, @private2}, @generic={0x93, 0x11, "e80ee304ecb784ec4655260cecea14e498"}]}}}, @hoplimit={{0x14}}, @hopopts={{0x1d0, 0x29, 0x36, {0x5e, 0x36, '\x00', [@generic={0xff, 0x45, "50d650847249ad288702ebd0d654b985e8908defb7ec6c5ff115c58e128b9e3a21c34b45ef9de99984e143ca7c3509a971b2ec429ee1edc0bb903fe94b32c28f70dac43574"}, @pad1, @pad1, @padn={0x1, 0x8, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, @calipso={0x7, 0x38, {0x3, 0xc, 0x0, 0xfff, [0x2, 0x4, 0x966, 0x7, 0x1, 0x1]}}, @calipso={0x7, 0x10, {0x0, 0x2, 0x7, 0x6, [0x7fff]}}, @generic={0x8, 0xe2, "c8a110995d439fbfac9716a99c357bcb2d59a850490739734f6b321d19b3754df39cc2dc26cf263cbebbddb9a7f17b6771f74c46623f9e38bd23e6f0a2fd3a9a017f66738394aca44d1a9f0b35d9df0a964360ab0900a5e6fcac1cd41c91c97f6826ff706c41edc4e00205bbb53218ed58a1122d993b55a1b9a870a17e7869e3fc704b388202add651f628963a90fea5d8196d5e0373fd13584ae57b4f1c03d4f67005cdb5938591d5ea712014e358ea0808807873fd7290c6d4f033de64c7e86ab309f93fd8146e6672c844ca0c43cde3afb3f9b0e9c19b929779fe65f579221b81"}, @calipso={0x7, 0x20, {0x3, 0x6, 0x3, 0x7, [0x0, 0x8000, 0xffffffffffffff04]}}, @generic={0x1, 0x8, "2bdb86d1ce6a20c2"}]}}}, @rthdrdstopts={{0x20, 0x29, 0x37, {0x73, 0x0, '\x00', [@pad1]}}}, @rthdr={{0x18}}, @rthdr_2292={{0x38, 0x29, 0x39, {0x3a, 0x4, 0x2, 0x70, 0x0, [@mcast1, @mcast2]}}}], 0x3b0}}], 0x1, 0x810) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r4 = socket$alg(0x26, 0x5, 0x0) bind$alg(r4, &(0x7f0000000380)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-cast5-avx\x00'}, 0x58) setsockopt$ALG_SET_KEY(r4, 0x117, 0x1, &(0x7f00000004c0)="2c385a7af3be", 0x6) r5 = accept4(r4, 0x0, 0x0, 0x800) sendmmsg$alg(r5, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048", 0x4d}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11", 0xce}], 0x3, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r5, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f0000000840)={0x1fe, 0x2, 0x3000, 0x2000, &(0x7f0000003000/0x2000)=nil}) r6 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x2) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r6, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000100)=[@text32={0x20, &(0x7f00000000c0)="650f340f3566b842000f00d8b805000000b9a00000000f01c13e0f070fde460b0f0130670f01c2f2360f217a0f07", 0x2e}], 0x1, 0x11, 0x0, 0x0) pwritev(0xffffffffffffffff, &(0x7f0000000b00)=[{&(0x7f0000001880)="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", 0xf91}], 0x1, 0x1, 0x2) syz_kvm_setup_cpu$x86(r3, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000180)=[@text64={0x40, 0x0}], 0x1, 0x18, 0x0, 0x0) ioctl$KVM_RUN(r6, 0xae80, 0x0) 1.859862508s ago: executing program 0 (id=2545): syz_mount_image$ext4(&(0x7f00000004c0)='ext4\x00', &(0x7f00000000c0)='./file0\x00', 0x0, &(0x7f0000000100), 0x2, 0x522, &(0x7f00000006c0)="$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") openat(0xffffffffffffff9c, &(0x7f0000000040)='./bus\x00', 0x141242, 0x1) mount(&(0x7f0000000280)=@loop={'/dev/loop', 0x0}, &(0x7f0000005500)='./bus\x00', 0x0, 0x1045802, 0x0) r0 = open(&(0x7f0000000000)='./bus\x00', 0x8000, 0xa0) ioctl$LOOP_SET_STATUS64(r0, 0x4c04, &(0x7f0000000540)={0x0, 0x0, 0x0, 0x7fffffffffffffff, 0x8005, 0x0, 0x0, 0x3, 0xd, "ef359f413bb93852f7d6a4ae6dddfbd1ce5d29c2ee5e5ca9000ff8ee09e737ff0edf110ff4117639c2eb4b78c660e677df701905b9aafab4afaaf755a3f6a004", "036c47c6780820d1cbf7966d61fdcf335263bd9bffbcc2542ded71038259ca171ce1a311ef54ec32d71e14ef3dc177e9b48b00", "f28359738e229a4c66810000000000d300e6d602000000000000000000000001", [0x204]}) open(&(0x7f0000000080)='.\x00', 0x518282, 0x78e22799f4a46e8e) 1.846894419s ago: executing program 3 (id=2546): listen(0xffffffffffffffff, 0xb0d1) socket$key(0xf, 0x3, 0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x400000000008d}, 0x0) syz_init_net_socket$nfc_llcp(0x27, 0x2, 0x1) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) openat$vnet(0xffffffffffffff9c, 0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$MSR(&(0x7f0000000240), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) syz_open_dev$audion(&(0x7f0000000380), 0x6, 0x40740) r1 = openat$rtc(0xffffffffffffff9c, &(0x7f00000003c0), 0x80000, 0x0) ioctl$RTC_UIE_ON(r1, 0x7003) ioctl$RTC_SET_TIME(r1, 0x4024700a, &(0x7f0000000040)={0x10, 0x2e, 0x8, 0x11, 0x5, 0x2c000, 0x0, 0x134, 0xffffffffffffffff}) bind$netlink(0xffffffffffffffff, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) mkdir(&(0x7f0000000440)='./file1\x00', 0x0) mount(0x0, &(0x7f0000000240)='./file1\x00', &(0x7f0000000000)='tmpfs\x00', 0x0, &(0x7f00000001c0)='usrquota') r2 = openat$comedi(0xffffff9c, &(0x7f0000000440)='/dev/comedi0\x00', 0x101001, 0x0) ioctl$COMEDI_DEVCONFIG(r2, 0x40946400, &(0x7f0000000540)={'pcl711\x00', [0x6, 0x8000000, 0x3, 0x5, 0x2f, 0x4, 0x7, 0x5, 0x1000, 0x1, 0x3, 0x8500, 0x200009, 0x4, 0x79, 0xffff, 0xffffffa8, 0x7ffffffa, 0x2e6a, 0x3, 0x7, 0x0, 0xa, 0xe2df, 0x746f, 0x8, 0x1, 0x3, 0x0, 0xffff, 0x200]}) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x2) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) syz_open_dev$MSR(&(0x7f00000001c0), 0x349a53d2, 0x0) syz_genetlink_get_family_id$ethtool(0x0, 0xffffffffffffffff) socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) 1.8188974s ago: executing program 4 (id=2547): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000280)={0xa, 0x4e22, 0xd, @loopback, 0x6}, 0x1c) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000080)=0x40, 0x4) connect$inet6(r0, &(0x7f0000000140)={0xa, 0x4e22, 0x23, @loopback, 0x23}, 0x1c) r1 = dup(r0) sendmmsg$inet(r1, &(0x7f000000d4c0)=[{{0x0, 0x0, &(0x7f00000009c0)}}], 0x1, 0x95) syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), r1) read$FUSE(r1, &(0x7f00000075c0)={0x2020}, 0x2020) 1.424614378s ago: executing program 0 (id=2548): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0xb, &(0x7f0000000640)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020000000000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f00000004c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000300)='rcu_utilization\x00', r0}, 0x10) sendmsg$kcm(0xffffffffffffffff, 0x0, 0x0) r1 = syz_open_dev$usbfs(&(0x7f00000001c0), 0x800000001fe, 0x2) r2 = dup(r1) ioctl$USBDEVFS_CONTROL(r2, 0xc0185500, &(0x7f0000000040)={0x23, 0x3, 0x12, 0x5, 0x0, 0x0, 0x0}) 1.177518658s ago: executing program 4 (id=2549): sendmsg$NLBL_CIPSOV4_C_ADD(0xffffffffffffffff, 0x0, 0x800) socket$nl_xfrm(0x10, 0x3, 0x6) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000540)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1801000000000066000000004b64ffec850000006d000000c50000000500000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r0}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bind$inet6(0xffffffffffffffff, 0x0, 0x0) r4 = syz_open_dev$vim2m(&(0x7f0000000000), 0x7, 0x2) ioctl$vim2m_VIDIOC_S_FMT(r4, 0xc0d05605, &(0x7f0000000980)={0x1, @pix_mp={0x8d2, 0x0, 0x34325852, 0x0, 0x4, [{0x0, 0xfffffffd}, {0x0, 0x7}, {0x0, 0x80000}, {0xffff7fff}, {0x8}, {0x0, 0x19c}, {0xfffffffc, 0x80001}]}}) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000000), 0x4) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) r5 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000000), 0x180300, 0x0) ioctl$FBIOPUT_VSCREENINFO(r5, 0x4601, &(0x7f0000000040)={0x191, 0x78, 0xa0, 0x3f, 0x32, 0x1c0, 0x0, 0x0, {}, {}, {}, {}, 0x0, 0x40, 0x0, 0x0, 0x0, 0x6, 0x1, 0x1, 0x0, 0xfffffffd, 0x0, 0x8, 0x4, 0x0, 0x2, 0xa}) 1.13570362s ago: executing program 3 (id=2550): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_mreq(r0, 0x29, 0x14, &(0x7f0000000000)={@private0}, 0x14) 1.088846282s ago: executing program 0 (id=2551): capset(0x0, &(0x7f0000000200)={0x200002, 0x200003, 0x801, 0x4, 0x7}) r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000000)={0x2, 0x4e20, @empty}, 0x10) setsockopt$sock_int(r0, 0x1, 0x3c, &(0x7f0000000040)=0x1, 0xfff0) connect$inet(r0, &(0x7f0000000080)={0x2, 0x4e20, @loopback}, 0x10) sendmmsg$inet(r0, &(0x7f0000006040)=[{{0x0, 0x0, &(0x7f0000000700)=[{&(0x7f00000000c0)='\x00', 0x1}], 0x1}}, {{0x0, 0x0, &(0x7f0000001d00)=[{&(0x7f0000000140)="19", 0x1}], 0x1}}], 0x2, 0x608d8d0) 906.349881ms ago: executing program 3 (id=2552): r0 = add_key$fscrypt_provisioning(&(0x7f0000000300), &(0x7f0000000340)={'syz', 0x2}, &(0x7f0000000240)=ANY=[@ANYBLOB="0100000000000000"], 0x29, 0xffffffffffffffff) keyctl$set_timeout(0xf, r0, 0x3) 806.663375ms ago: executing program 3 (id=2553): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$fou(&(0x7f0000000040), 0xffffffffffffffff) bpf$MAP_CREATE(0x0, &(0x7f0000001e80)=ANY=[@ANYBLOB="0b000000080000000c000000ffffffff01"], 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xd, &(0x7f0000000240)=ANY=[], &(0x7f0000000000)='syzkaller\x00', 0x8, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x23, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={&(0x7f0000000180)='kfree\x00', r2}, 0x10) sendmsg$FOU_CMD_ADD(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000300)={0x1c, r1, 0x1, 0x70bd25, 0x21dfdbfb, {}, [@FOU_ATTR_LOCAL_V4={0x8, 0x6, @rand_addr=0x64010100}]}, 0x1c}, 0x1, 0x0, 0x0, 0xc0d4}, 0x4000000) 701.140499ms ago: executing program 8 (id=2554): socket$nl_route(0x10, 0x3, 0x0) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000240)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0xfffffff9}, 0x50) openat(0xffffffffffffff9c, &(0x7f0000000100)='.\x00', 0x301a22, 0x1a) socket$inet_sctp(0x2, 0x5, 0x84) socket$inet_sctp(0x2, 0x1, 0x84) openat(0xffffffffffffff9c, &(0x7f0000000380)='./file0\x00', 0x40, 0x0) pipe2$9p(&(0x7f00000001c0), 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000240)) socket(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000180)) openat$fuse(0xffffffffffffff9c, &(0x7f00000000c0), 0x42, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="02000000040000000500000002"], 0x48) socket$nl_route(0x10, 0x3, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) socket$nl_route(0x10, 0x3, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x1f, 0x10, &(0x7f0000000040)=ANY=[@ANYBLOB="1800000005000000000000008000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000000000000850000008600000018010000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000050000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000200000085000000a600000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x11}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000500)={r1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x48) 58.851237ms ago: executing program 0 (id=2555): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x48) r3 = creat(&(0x7f0000000000)='./file0\x00', 0xd931d3864d39dcdb) r4 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r4}, &(0x7f0000bbdffc)) close(r3) r5 = open(&(0x7f0000000000)='./file0\x00', 0x0, 0x1a1) fcntl$setlease(r5, 0x400, 0x1) r6 = memfd_create(&(0x7f0000000180)='[\v\xdbX\xae[\x1a\xa9\xfd\xfa\xad\xd1md\xc8\x85HX\xa9%\f\x1ae\xe0\x00\x00\x00\x00\xfb\xff\x00\x00\x81\x9eG\xd9,\xe2\xc6a\x9f\xe8\xf1\xb3\x86\xe2+Op\xd0\xa2\x82\x1eb;(\xb5\xe1jS\xd6\x91%||\xa0\x8ez\xadT\xc8\f\xe5\x89\xbf3:\x99\x1e\xac`\xc3\xcf\xd3\xae\xd2\a\x11\xa9\xa5^\xff\xf5\x95\xd2q#\xc6\xca\x97\x9d\xcb\x1e\x80\xd6\xd5%N&\xf8#\x80z8Z\xd2}\xf5\xe4\x9f5\x9b\x01\xf9t\xbb\x1er\x14\xdb\xd3\xcd\xfd\xbdnC\xecz\xabq\x95t*T9\xa9\b X \x04\"\x17\xbf\xcb\xccF\xda\xcf\xdd^\xa0\x15\xc0\xcb^h>\x1b\xb5d\xc7\x7f0\x9a&\xb0\x12#\x9c`\xa6\xed\x05\x95g\a\xccYb\xaf\xe9\xb6G?\x9f\xf5\xfe\xc1\xc0JJ\xc8\xd9d\x80\x13\x8fX\xb4\x19\xc4\\\xcb\x89-)\x90\x01\v\xac^\xdbBQ|\xaej;\x92\\\xf8u\x19Y\xee\x99EI\xf1t\xadn<\x9b\xc9\x87\xd0\xa7\x1a\x81\xb9\xc87sq\xd7\x15\xd6\x91O\x9c\x99!9>\xff\xa8\xfa\xe6=d\xcf\xca\xa9\xc61!\xc6P\x13\xd0\x88gZ\xbe\xdfl\xfa\xff\xb0m;d07tx\xbb\xabd\xe5\x16\xc4\xae\xf0', 0x0) write$binfmt_script(r6, &(0x7f0000000340)={'#! ', './file0'}, 0xb) execveat(r6, &(0x7f0000000000)='\x00', 0x0, 0x0, 0x1000) 4.72669ms ago: executing program 3 (id=2556): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000280)={0x18, 0x5, &(0x7f0000000040)=ANY=[@ANYBLOB="180100002100000000000000000000008500000075000000a50000002300000095"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f00000001c0)='mmap_lock_acquire_returned\x00', r0}, 0x10) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000000000)='-', 0x1}, 0x68) 0s ago: executing program 4 (id=2557): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000280)={0xa, 0x4e22, 0xd, @loopback, 0x6}, 0x1c) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000080)=0x40, 0x4) connect$inet6(r0, &(0x7f0000000140)={0xa, 0x4e22, 0x23, @loopback, 0x23}, 0x1c) r1 = dup(r0) sendmmsg$inet(r1, &(0x7f000000d4c0)=[{{0x0, 0x0, &(0x7f00000009c0)=[{&(0x7f0000000380)="9e3b074a8988e293861a347e432f5979dc366a208834c6d2a000bc8c67a48d77135afb45fe124800911b188a404dbb73455a75862204ea9a0fedea6988408c58e85ba4d1a4e491a6de5c60edba18f1b7ea7a08a5561df73ef826a79dfde7e6cc23a80962e8d56d361457f106add67ca5afe80d98e7c92de1156ebb54c01283942ac9b13d6f04ae52bb40a3d35dc6340f126aeffdb8db0f61c11e854198723ba5eddf5f06a860", 0xa6}, {&(0x7f00000002c0)="5bea410000008000000000", 0xb}], 0x2}}], 0x1, 0x95) syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), r1) read$FUSE(r1, &(0x7f00000075c0)={0x2020}, 0x2020) kernel console output (not intermixed with test programs): st mode [ 418.789494][ T1301] bridge_slave_0: left promiscuous mode [ 418.795188][ T1301] bridge0: port 1(bridge_slave_0) entered disabled state [ 418.824250][ T1301] veth1_macvtap: left promiscuous mode [ 418.830804][ T1301] veth0_macvtap: left promiscuous mode [ 418.836465][ T1301] veth1_vlan: left promiscuous mode [ 418.842414][ T1301] veth0_vlan: left promiscuous mode [ 419.625356][ T1301] team0 (unregistering): Port device team_slave_1 removed [ 419.795486][ T1301] team0 (unregistering): Port device team_slave_0 removed [ 419.947935][ T1301] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 420.005751][ T1301] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 420.197953][T10857] usb 5-1: new high-speed USB device number 7 using dummy_hcd [ 420.287873][ T5794] Bluetooth: hci3: command tx timeout [ 420.400680][T10857] usb 5-1: Using ep0 maxpacket: 32 [ 420.408904][T10857] usb 5-1: config index 0 descriptor too short (expected 29220, got 36) [ 420.419135][T10857] usb 5-1: config 0 has too many interfaces: 81, using maximum allowed: 32 [ 420.428051][T10857] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 81 [ 420.437264][T10857] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 420.447061][T10857] usb 5-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 420.457159][T10857] usb 5-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 420.472179][T10857] usb 5-1: New USB device found, idVendor=03f0, idProduct=6c17, bcdDevice= 0.40 [ 420.481423][T10857] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 420.492327][T10857] usb 5-1: config 0 descriptor?? [ 420.711060][T10857] usblp 5-1:0.0: usblp0: USB Bidirectional printer dev 7 if 0 alt 0 proto 3 vid 0x03F0 pid 0x6C17 [ 420.745855][T10857] usb 5-1: USB disconnect, device number 7 [ 420.746297][ T1301] bond0 (unregistering): Released all slaves [ 420.756239][T10857] usblp0: removed [ 420.931529][T11212] 8021q: adding VLAN 0 to HW filter on device team0 [ 420.970914][ T11] bridge0: port 1(bridge_slave_0) entered blocking state [ 420.978185][ T11] bridge0: port 1(bridge_slave_0) entered forwarding state [ 421.004383][ T2920] bridge0: port 2(bridge_slave_1) entered blocking state [ 421.011635][ T2920] bridge0: port 2(bridge_slave_1) entered forwarding state [ 421.097110][T11169] 8021q: adding VLAN 0 to HW filter on device bond0 [ 421.135460][T11169] 8021q: adding VLAN 0 to HW filter on device team0 [ 421.200661][ T11] bridge0: port 1(bridge_slave_0) entered blocking state [ 421.207852][ T11] bridge0: port 1(bridge_slave_0) entered forwarding state [ 421.292666][ T11] bridge0: port 2(bridge_slave_1) entered blocking state [ 421.299890][ T11] bridge0: port 2(bridge_slave_1) entered forwarding state [ 421.338080][T10857] usb 5-1: new high-speed USB device number 8 using dummy_hcd [ 421.423583][ T1301] IPVS: stop unused estimator thread 0... [ 421.533537][T10857] usb 5-1: Using ep0 maxpacket: 32 [ 421.533726][T11344] program syz.6.1576 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 421.553881][T10857] usb 5-1: config index 0 descriptor too short (expected 29220, got 36) [ 421.571023][T10857] usb 5-1: config 0 has too many interfaces: 81, using maximum allowed: 32 [ 421.607043][T10857] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 81 [ 421.635173][T10857] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 421.655288][T10857] usb 5-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 421.675426][T10857] usb 5-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 421.783852][T10857] usb 5-1: New USB device found, idVendor=03f0, idProduct=6c17, bcdDevice= 0.40 [ 421.819225][T10857] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 421.846359][T10857] usb 5-1: config 0 descriptor?? [ 421.922343][T11169] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 421.994622][T11212] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 422.072169][T10857] usblp 5-1:0.0: usblp0: USB Bidirectional printer dev 8 if 0 alt 0 proto 3 vid 0x03F0 pid 0x6C17 [ 422.301251][T10857] usb 5-1: USB disconnect, device number 8 [ 422.331776][T10857] usblp0: removed [ 422.671115][T11169] veth0_vlan: entered promiscuous mode [ 422.706576][T11169] veth1_vlan: entered promiscuous mode [ 422.812399][T11169] veth0_macvtap: entered promiscuous mode [ 422.866189][T11169] veth1_macvtap: entered promiscuous mode [ 422.882743][T11344] syz.6.1576 (11344): drop_caches: 2 [ 422.891374][T11212] veth0_vlan: entered promiscuous mode [ 422.915669][T11169] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 422.984027][T11169] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 423.025559][T11169] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 423.057666][T11169] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 423.077729][T11169] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 423.099067][T11169] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 423.119614][T11169] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 423.153776][T11169] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 423.207849][T11169] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 423.224824][T11169] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 423.264177][T11169] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 423.274386][T11169] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 423.286177][T11169] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 423.299340][T11169] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 423.307687][T11212] veth1_vlan: entered promiscuous mode [ 423.349853][T11169] netdevsim netdevsim8 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 423.358887][T11169] netdevsim netdevsim8 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 423.383188][T11169] netdevsim netdevsim8 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 423.403020][T11169] netdevsim netdevsim8 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 423.537028][T11212] veth0_macvtap: entered promiscuous mode [ 423.581229][T11212] veth1_macvtap: entered promiscuous mode [ 423.656594][T11212] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 423.694133][T11212] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 423.718790][T11212] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 423.771545][T11212] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 423.781870][T11212] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 423.792962][T11212] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 423.805336][T11212] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 423.827770][T11212] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 423.845995][T11212] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 423.861977][ T11] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 423.890028][T11212] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 423.902770][T11212] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 423.907434][ T11] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 423.913415][T11212] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 423.937705][T11212] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 423.967641][T11212] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 423.993611][T11212] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 424.014514][T11212] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 424.025635][T11212] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 424.051035][T11212] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 424.130283][T11212] netdevsim netdevsim9 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 424.149944][T11212] netdevsim netdevsim9 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 424.168755][T11212] netdevsim netdevsim9 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 424.192504][T11212] netdevsim netdevsim9 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 424.306091][ T42] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 424.354374][ T42] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 424.415603][T11222] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 424.450000][T11222] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 424.531625][T11222] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 424.553849][T11222] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 425.937734][ T5898] usb 10-1: new high-speed USB device number 2 using dummy_hcd [ 426.037781][T10757] usb 7-1: new high-speed USB device number 9 using dummy_hcd [ 426.140851][ T5898] usb 10-1: Using ep0 maxpacket: 8 [ 426.158799][ T5898] usb 10-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 426.184075][ T5898] usb 10-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 426.205985][ T5898] usb 10-1: config 16 interface 0 altsetting 0 has an invalid endpoint with address 0x0, skipping [ 426.237873][T10757] usb 7-1: Using ep0 maxpacket: 32 [ 426.244131][ T5898] usb 10-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 426.268053][T10757] usb 7-1: config index 0 descriptor too short (expected 29220, got 36) [ 426.276457][T10757] usb 7-1: config 0 has too many interfaces: 81, using maximum allowed: 32 [ 426.284541][ T5898] usb 10-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 426.306246][T10757] usb 7-1: config 0 has 1 interface, different from the descriptor's value: 81 [ 426.318855][ T5898] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 426.333258][T10757] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 426.342770][ T5898] usbtmc 10-1:16.0: bulk endpoints not found [ 426.378226][T10757] usb 7-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 426.417605][T10757] usb 7-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 426.467583][T10757] usb 7-1: New USB device found, idVendor=03f0, idProduct=6c17, bcdDevice= 0.40 [ 426.505053][T10757] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 426.540010][T10757] usb 7-1: config 0 descriptor?? [ 426.782118][T10757] usblp 7-1:0.0: usblp0: USB Bidirectional printer dev 9 if 0 alt 0 proto 3 vid 0x03F0 pid 0x6C17 [ 426.842341][T10757] usb 7-1: USB disconnect, device number 9 [ 426.880640][T10757] usblp0: removed [ 427.437694][T10757] usb 7-1: new high-speed USB device number 10 using dummy_hcd [ 427.539620][ T28] kauditd_printk_skb: 32 callbacks suppressed [ 427.539636][ T28] audit: type=1326 audit(1763671995.031:87): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11476 comm="syz.4.1587" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f07ae98f749 code=0x7ffc0000 [ 427.616874][ T28] audit: type=1326 audit(1763671995.031:88): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11476 comm="syz.4.1587" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f07ae98f749 code=0x7ffc0000 [ 427.657715][T10757] usb 7-1: Using ep0 maxpacket: 32 [ 427.681753][ T28] audit: type=1326 audit(1763671995.061:89): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11476 comm="syz.4.1587" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f07ae98f749 code=0x7ffc0000 [ 427.706399][T10757] usb 7-1: config index 0 descriptor too short (expected 29220, got 36) [ 427.726080][T10757] usb 7-1: config 0 has too many interfaces: 81, using maximum allowed: 32 [ 427.735596][ T28] audit: type=1326 audit(1763671995.061:90): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11476 comm="syz.4.1587" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f07ae98f749 code=0x7ffc0000 [ 427.767538][T10757] usb 7-1: config 0 has 1 interface, different from the descriptor's value: 81 [ 427.787090][T10757] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 427.805206][T10757] usb 7-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 427.826318][T10757] usb 7-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 427.887368][T10757] usb 7-1: New USB device found, idVendor=03f0, idProduct=6c17, bcdDevice= 0.40 [ 427.933488][T10757] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 427.970935][T10757] usb 7-1: config 0 descriptor?? [ 428.090439][T11492] netlink: 16 bytes leftover after parsing attributes in process `syz.4.1591'. [ 428.193189][T10757] usblp 7-1:0.0: usblp0: USB Bidirectional printer dev 10 if 0 alt 0 proto 3 vid 0x03F0 pid 0x6C17 [ 428.307632][ T5898] usb 9-1: new high-speed USB device number 2 using dummy_hcd [ 428.393809][T10757] usb 7-1: USB disconnect, device number 10 [ 428.418414][T10757] usblp0: removed [ 428.457847][ T5898] usb 9-1: device descriptor read/64, error -71 [ 428.656016][T10856] usb 10-1: USB disconnect, device number 2 [ 428.730123][ T5898] usb 9-1: new high-speed USB device number 3 using dummy_hcd [ 428.897839][ T5898] usb 9-1: device descriptor read/64, error -71 [ 429.088436][ T5898] usb usb9-port1: attempt power cycle [ 429.217663][T10757] usb 7-1: new high-speed USB device number 11 using dummy_hcd [ 429.427886][T10757] usb 7-1: Using ep0 maxpacket: 8 [ 429.443645][T10757] usb 7-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 429.462084][T10757] usb 7-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 429.492592][T10757] usb 7-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 429.497666][ T5898] usb 9-1: new high-speed USB device number 4 using dummy_hcd [ 429.539644][T10757] usb 7-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 429.548467][ T5898] usb 9-1: device descriptor read/8, error -71 [ 429.593616][T10757] usb 7-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 429.627730][T10757] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 429.827788][ T5898] usb 9-1: new high-speed USB device number 5 using dummy_hcd [ 429.871632][ T5898] usb 9-1: device descriptor read/8, error -71 [ 429.884041][T10757] usb 7-1: GET_CAPABILITIES returned 0 [ 429.894125][T10757] usbtmc 7-1:16.0: can't read capabilities [ 430.008274][ T5898] usb usb9-port1: unable to enumerate USB device [ 430.106264][T10757] usb 7-1: USB disconnect, device number 11 [ 430.938490][T10757] usb 7-1: new full-speed USB device number 12 using dummy_hcd [ 431.139892][T10757] usb 7-1: unable to get BOS descriptor or descriptor too short [ 431.159950][T10757] usb 7-1: not running at top speed; connect to a high speed hub [ 431.188003][T10757] usb 7-1: config 247 has an invalid interface number: 145 but max is 0 [ 431.206636][T10757] usb 7-1: config 247 has no interface number 0 [ 431.225280][T10757] usb 7-1: config 247 interface 145 has no altsetting 0 [ 431.245424][T10757] usb 7-1: New USB device found, idVendor=0f11, idProduct=1033, bcdDevice=92.a7 [ 431.267819][T10757] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 431.317524][T10757] usb 7-1: Product: syz [ 431.321741][T10757] usb 7-1: Manufacturer: syz [ 431.326365][T10757] usb 7-1: SerialNumber: syz [ 431.564573][T10757] ldusb 7-1:247.145: Interrupt in endpoint not found [ 431.581082][T10757] usbhid 7-1:247.145: couldn't find an input interrupt endpoint [ 431.605775][T10757] usb 7-1: USB disconnect, device number 12 [ 431.661104][ T1740] usb 9-1: new high-speed USB device number 6 using dummy_hcd [ 431.787866][ T5795] usb 5-1: new high-speed USB device number 9 using dummy_hcd [ 431.878065][ T1740] usb 9-1: Using ep0 maxpacket: 8 [ 431.901935][ T1740] usb 9-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 431.923149][ T1740] usb 9-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 431.943812][ T1740] usb 9-1: config 16 interface 0 altsetting 0 endpoint 0x8B has invalid wMaxPacketSize 0 [ 431.975189][ T1740] usb 9-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 0 [ 431.988208][ T5795] usb 5-1: Using ep0 maxpacket: 32 [ 432.000216][ T1740] usb 9-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 432.015335][ T1740] usb 9-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 432.027558][ T5795] usb 5-1: config index 0 descriptor too short (expected 29220, got 36) [ 432.035947][ T5795] usb 5-1: config 0 has too many interfaces: 81, using maximum allowed: 32 [ 432.048997][ T1740] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 432.057262][ T5795] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 81 [ 432.067806][ T5795] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 432.091273][ T1740] usbtmc: probe of 9-1:16.0 failed with error -22 [ 432.137900][ T5795] usb 5-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 432.154981][ T5795] usb 5-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 432.188138][ T5795] usb 5-1: New USB device found, idVendor=03f0, idProduct=6c17, bcdDevice= 0.40 [ 432.200128][ T5795] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 432.237647][ T27] usb 10-1: new high-speed USB device number 3 using dummy_hcd [ 432.246193][ T5795] usb 5-1: config 0 descriptor?? [ 432.430796][ T27] usb 10-1: config 0 has no interfaces? [ 432.441089][ T27] usb 10-1: New USB device found, idVendor=046d, idProduct=0823, bcdDevice=39.48 [ 432.452638][ T27] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 432.470206][ T5795] usblp 5-1:0.0: usblp0: USB Bidirectional printer dev 9 if 0 alt 0 proto 3 vid 0x03F0 pid 0x6C17 [ 432.487789][ T27] usb 10-1: Product: syz [ 432.493495][ T27] usb 10-1: Manufacturer: syz [ 432.507914][ T5795] usb 5-1: USB disconnect, device number 9 [ 432.514058][ T27] usb 10-1: SerialNumber: syz [ 432.525744][ T27] usb 10-1: config 0 descriptor?? [ 432.534910][ T5795] usblp0: removed [ 432.677867][ T1740] usb 7-1: new high-speed USB device number 13 using dummy_hcd [ 432.761303][T11597] 8021q: VLANs not supported on caif0 [ 432.769846][ T5898] usb 10-1: USB disconnect, device number 3 [ 432.897537][ T1740] usb 7-1: Using ep0 maxpacket: 8 [ 432.914346][ T1740] usb 7-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 432.926318][ T1740] usb 7-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 432.940722][ T1740] usb 7-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 432.960082][ T1740] usb 7-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 432.981025][ T1740] usb 7-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 432.993843][ T1740] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 433.079005][ T5795] usb 5-1: new high-speed USB device number 10 using dummy_hcd [ 433.219710][ T1740] usb 7-1: GET_CAPABILITIES returned 0 [ 433.231055][ T1740] usbtmc 7-1:16.0: can't read capabilities [ 433.278000][ T5795] usb 5-1: Using ep0 maxpacket: 32 [ 433.295222][ T5795] usb 5-1: config index 0 descriptor too short (expected 29220, got 36) [ 433.323303][ T5795] usb 5-1: config 0 has too many interfaces: 81, using maximum allowed: 32 [ 433.347816][ T5795] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 81 [ 433.367120][ T5795] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 433.388747][ T5795] usb 5-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 433.407425][ T5795] usb 5-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 433.428427][ T1740] usb 7-1: USB disconnect, device number 13 [ 433.452771][ T5795] usb 5-1: New USB device found, idVendor=03f0, idProduct=6c17, bcdDevice= 0.40 [ 433.468894][ T5795] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 433.488798][ T5795] usb 5-1: config 0 descriptor?? [ 433.677673][ T5898] usb 10-1: new high-speed USB device number 4 using dummy_hcd [ 433.704811][ T5795] usblp 5-1:0.0: usblp0: USB Bidirectional printer dev 10 if 0 alt 0 proto 3 vid 0x03F0 pid 0x6C17 [ 433.827617][ T5898] usb 10-1: device descriptor read/64, error -71 [ 433.909194][T10858] usb 5-1: USB disconnect, device number 10 [ 433.920493][T10858] usblp0: removed [ 434.107725][ T5898] usb 10-1: new high-speed USB device number 5 using dummy_hcd [ 434.267755][ T5898] usb 10-1: device descriptor read/64, error -71 [ 434.405646][ T5898] usb usb10-port1: attempt power cycle [ 434.415359][T10858] usb 9-1: USB disconnect, device number 6 [ 434.867563][ T5898] usb 10-1: new high-speed USB device number 6 using dummy_hcd [ 434.898317][ T5898] usb 10-1: device descriptor read/8, error -71 [ 435.167843][ T5898] usb 10-1: new high-speed USB device number 7 using dummy_hcd [ 435.208421][ T5898] usb 10-1: device descriptor read/8, error -71 [ 435.338675][ T5898] usb usb10-port1: unable to enumerate USB device [ 436.327783][ T5898] usb 9-1: new high-speed USB device number 7 using dummy_hcd [ 436.539439][ T5898] usb 9-1: config index 0 descriptor too short (expected 239, got 27) [ 436.547886][ T5898] usb 9-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 436.558465][ T5898] usb 9-1: config 0 has no interfaces? [ 436.568611][ T5898] usb 9-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 436.577986][ T5898] usb 9-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 436.586183][ T5898] usb 9-1: Product: syz [ 436.595945][ T5898] usb 9-1: Manufacturer: syz [ 436.605148][ T5898] usb 9-1: SerialNumber: syz [ 436.624245][ T5898] usb 9-1: config 0 descriptor?? [ 436.840851][ T1740] usb 9-1: USB disconnect, device number 7 [ 436.898169][ T5795] usb 10-1: new high-speed USB device number 8 using dummy_hcd [ 437.107841][ T5795] usb 10-1: Using ep0 maxpacket: 8 [ 437.115383][ T5795] usb 10-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 437.126113][ T5795] usb 10-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 437.136626][ T5795] usb 10-1: config 16 interface 0 altsetting 0 endpoint 0x8B has invalid wMaxPacketSize 0 [ 437.147032][ T5795] usb 10-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 0 [ 437.157404][ T5795] usb 10-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 437.174997][ T5795] usb 10-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 437.184565][ T5795] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 437.200765][ T5795] usbtmc: probe of 10-1:16.0 failed with error -22 [ 437.428601][ T1740] usb 9-1: new high-speed USB device number 8 using dummy_hcd [ 437.629141][ T1740] usb 9-1: config index 0 descriptor too short (expected 239, got 27) [ 437.637772][ T1740] usb 9-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 437.656805][ T1740] usb 9-1: config 0 has no interfaces? [ 437.690269][ T1740] usb 9-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 437.699628][ T1740] usb 9-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 437.711290][ T1740] usb 9-1: Product: syz [ 437.715506][ T1740] usb 9-1: Manufacturer: syz [ 437.736030][ T1740] usb 9-1: SerialNumber: syz [ 437.750303][ T1740] usb 9-1: config 0 descriptor?? [ 437.770237][T11698] xt_CT: You must specify a L4 protocol and not use inversions on it [ 438.617656][ T1740] usb 5-1: new high-speed USB device number 11 using dummy_hcd [ 438.807835][ T1740] usb 5-1: Using ep0 maxpacket: 8 [ 438.821844][ T1740] usb 5-1: New USB device found, idVendor=04a5, idProduct=3003, bcdDevice=3a.b2 [ 438.838552][ T1740] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 438.855512][ T1740] usb 5-1: Product: syz [ 438.863775][ T1740] usb 5-1: Manufacturer: syz [ 438.874781][ T1740] usb 5-1: SerialNumber: syz [ 438.885285][ T1740] usb 5-1: config 0 descriptor?? [ 439.112232][ T5898] usb 9-1: USB disconnect, device number 8 [ 439.154726][ T1740] gspca_main: sunplus-2.14.0 probing 04a5:3003 [ 439.176946][ T1740] gspca_sunplus: reg_w_riv err -71 [ 439.210115][ T1740] sunplus: probe of 5-1:0.0 failed with error -71 [ 439.242980][ T1740] usb 5-1: USB disconnect, device number 11 [ 439.526686][ T1740] usb 10-1: USB disconnect, device number 8 [ 440.262584][T11750] $Hÿ: renamed from bond0 [ 440.270288][T11750] $Hÿ: entered promiscuous mode [ 440.275597][T11750] bond_slave_0: entered promiscuous mode [ 440.282702][T11750] bond_slave_1: entered promiscuous mode [ 440.373740][ T1284] ieee802154 phy0 wpan0: encryption failed: -22 [ 440.381589][ T1284] ieee802154 phy1 wpan1: encryption failed: -22 [ 440.478056][ T5795] usb 9-1: new high-speed USB device number 9 using dummy_hcd [ 440.667780][ T5795] usb 9-1: Using ep0 maxpacket: 8 [ 440.675876][ T5795] usb 9-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 440.696741][ T5795] usb 9-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 440.725435][ T5795] usb 9-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 440.745397][T11772] program syz.9.1637 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 440.754977][ T5795] usb 9-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 440.796743][ T5795] usb 9-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 440.808593][ T5795] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 440.859355][T11770] netlink: 20 bytes leftover after parsing attributes in process `syz.6.1636'. [ 441.047802][ T5795] usb 9-1: GET_CAPABILITIES returned 0 [ 441.055793][ T5795] usbtmc 9-1:16.0: can't read capabilities [ 441.253519][ T5795] usb 9-1: USB disconnect, device number 9 [ 442.250621][T11795] netlink: 12 bytes leftover after parsing attributes in process `syz.9.1642'. [ 442.267804][ T5795] usb 9-1: new high-speed USB device number 10 using dummy_hcd [ 442.287418][T11795] netlink: 4 bytes leftover after parsing attributes in process `syz.9.1642'. [ 442.368718][T11795] team0: Port device team_slave_1 removed [ 442.477686][ T5795] usb 9-1: Using ep0 maxpacket: 8 [ 442.496104][ T5795] usb 9-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 442.517552][ T5795] usb 9-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 442.556725][ T5795] usb 9-1: config 16 interface 0 altsetting 0 endpoint 0x8B has invalid wMaxPacketSize 0 [ 442.592115][ T5795] usb 9-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 0 [ 442.602157][ T5795] usb 9-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 442.624535][ T5795] usb 9-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 442.645873][ T5795] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 442.669259][ T5795] usbtmc: probe of 9-1:16.0 failed with error -22 [ 443.311755][T11820] netlink: 20 bytes leftover after parsing attributes in process `syz.4.1647'. [ 445.000472][ T5898] usb 9-1: USB disconnect, device number 10 [ 445.695982][T11856] bridge0: port 2(bridge_slave_1) entered disabled state [ 445.703486][T11856] bridge0: port 1(bridge_slave_0) entered disabled state [ 447.106404][T11856] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 447.222141][T11856] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 447.798157][T11856] netdevsim netdevsim8 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 447.807151][T11856] netdevsim netdevsim8 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 447.820270][T11856] netdevsim netdevsim8 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 447.861023][T11856] netdevsim netdevsim8 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 448.448041][T10757] usb 7-1: new high-speed USB device number 14 using dummy_hcd [ 448.510433][T10858] usb 9-1: new high-speed USB device number 11 using dummy_hcd [ 448.660891][T10757] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 448.701712][T10757] usb 7-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 448.717883][T10858] usb 9-1: Using ep0 maxpacket: 8 [ 448.728703][T10858] usb 9-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 448.743781][T10858] usb 9-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 448.778022][T10858] usb 9-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 448.778709][T10757] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 448.799520][T10858] usb 9-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 448.819408][T10757] usb 7-1: config 0 descriptor?? [ 448.862885][T10858] usb 9-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 448.894486][T10858] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 449.143852][T10858] usb 9-1: usb_control_msg returned -32 [ 449.155553][T10858] usbtmc 9-1:16.0: can't read capabilities [ 449.364536][T10757] usbhid 7-1:0.0: can't add hid device: -71 [ 449.389390][T10757] usbhid: probe of 7-1:0.0 failed with error -71 [ 449.414477][T10757] usb 7-1: USB disconnect, device number 14 [ 449.861411][T11924] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1669'. [ 449.957626][T10757] usb 7-1: new high-speed USB device number 15 using dummy_hcd [ 450.320805][T10757] usb 7-1: Using ep0 maxpacket: 32 [ 450.342226][T10757] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 450.375098][T10757] usb 7-1: New USB device found, idVendor=0f11, idProduct=1021, bcdDevice= 0.40 [ 450.493086][T10757] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 450.605744][T10757] usb 7-1: config 0 descriptor?? [ 450.640121][T10757] ldusb 7-1:0.0: Interrupt out endpoint not found (using control endpoint instead) [ 450.654853][T10757] ldusb 7-1:0.0: LD USB Device #1 now attached to major 180 minor 1 [ 451.248835][ T1740] usb 9-1: USB disconnect, device number 11 [ 452.575935][ T1740] usb 7-1: USB disconnect, device number 15 [ 452.622380][ T1740] ldusb 7-1:0.0: LD USB Device #1 now disconnected [ 452.850283][T11985] netlink: 20 bytes leftover after parsing attributes in process `syz.8.1677'. [ 454.665113][ C0] vcan0: j1939_tp_rxtimer: 0xffff88807971ac00: rx timeout, send abort [ 454.675125][ C0] vcan0: j1939_xtp_rx_abort_one: 0xffff88807971ac00: 0x00000: (3) A timeout occurred and this is the connection abort to close the session. [ 454.706747][ C1] vcan0: j1939_tp_rxtimer: 0xffff88807b19f000: rx timeout, send abort [ 455.215188][ C1] vcan0: j1939_tp_rxtimer: 0xffff88807b19f000: abort rx timeout. Force session deactivation [ 455.447764][T10857] usb 7-1: new high-speed USB device number 16 using dummy_hcd [ 455.639207][T10857] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 455.671322][T10857] usb 7-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 455.707656][T10857] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 455.768629][T10857] usb 7-1: config 0 descriptor?? [ 455.866102][T12069] netlink: 20 bytes leftover after parsing attributes in process `syz.8.1692'. [ 456.462438][T10857] usbhid 7-1:0.0: can't add hid device: -71 [ 456.507886][T10857] usbhid: probe of 7-1:0.0 failed with error -71 [ 456.578923][T10857] usb 7-1: USB disconnect, device number 16 [ 457.107646][T10857] usb 7-1: new high-speed USB device number 17 using dummy_hcd [ 457.368737][T10857] usb 7-1: Using ep0 maxpacket: 32 [ 457.393437][T10857] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 457.437284][T10857] usb 7-1: New USB device found, idVendor=0f11, idProduct=1021, bcdDevice= 0.40 [ 457.480825][T10857] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 457.516434][T10857] usb 7-1: config 0 descriptor?? [ 457.604055][T10857] ldusb 7-1:0.0: Interrupt out endpoint not found (using control endpoint instead) [ 457.626602][T10857] ldusb 7-1:0.0: LD USB Device #0 now attached to major 180 minor 0 [ 458.102157][T12117] program syz.8.1695 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 459.133963][T12102] syz.8.1695 (12102): drop_caches: 2 [ 459.475452][T12142] lo speed is unknown, defaulting to 1000 [ 459.522712][T12142] lo speed is unknown, defaulting to 1000 [ 459.548887][T12142] lo speed is unknown, defaulting to 1000 [ 459.583341][T12142] iwpm_register_pid: Unable to send a nlmsg (client = 2) [ 459.628177][T12142] infiniband syz2: RDMA CMA: cma_listen_on_dev, error -98 [ 459.740081][ T5898] usb 7-1: USB disconnect, device number 17 [ 459.751298][ T5898] ldusb 7-1:0.0: LD USB Device #0 now disconnected [ 459.765042][T12142] lo speed is unknown, defaulting to 1000 [ 459.787636][ T23] usb 10-1: new high-speed USB device number 9 using dummy_hcd [ 459.792365][T12142] lo speed is unknown, defaulting to 1000 [ 459.841940][T12142] lo speed is unknown, defaulting to 1000 [ 459.867205][T12142] lo speed is unknown, defaulting to 1000 [ 459.882880][T12142] lo speed is unknown, defaulting to 1000 [ 459.893069][T12142] lo speed is unknown, defaulting to 1000 [ 459.903192][T12142] lo speed is unknown, defaulting to 1000 [ 460.021357][ T23] usb 10-1: Using ep0 maxpacket: 8 [ 460.092930][ T23] usb 10-1: config 0 has an invalid interface number: 122 but max is 0 [ 460.144649][ T23] usb 10-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 460.200431][T12159] Driver unsupported XDP return value 0 on prog (id 19) dev N/A, expect packet loss! [ 460.211715][ T23] usb 10-1: config 0 has no interface number 0 [ 460.239637][ T23] usb 10-1: config 0 interface 122 altsetting 0 endpoint 0xA has invalid maxpacket 512, setting to 64 [ 460.268049][ T23] usb 10-1: config 0 interface 122 altsetting 0 bulk endpoint 0x8 has invalid maxpacket 8 [ 460.322031][T12154] netlink: 20 bytes leftover after parsing attributes in process `syz.6.1703'. [ 460.331106][ T23] usb 10-1: config 0 interface 122 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 8 [ 460.339946][ T23] usb 10-1: New USB device found, idVendor=1286, idProduct=2046, bcdDevice= 5.b7 [ 460.454626][ T23] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 460.552695][ T23] usb 10-1: Product: syz [ 460.637622][ T23] usb 10-1: Manufacturer: syz [ 460.669261][ T23] usb 10-1: SerialNumber: syz [ 460.699620][ T23] usb 10-1: config 0 descriptor?? [ 460.738565][T12144] raw-gadget.1 gadget.9: fail, usb_ep_enable returned -22 [ 460.907810][T10857] usb 9-1: new high-speed USB device number 12 using dummy_hcd [ 461.004732][ T23] usb 10-1: NFC: intf ffff88802ebea000 id ffffffff8d63b620 [ 461.053031][ T23] usb 10-1: USB disconnect, device number 9 [ 461.117996][T10857] usb 9-1: Using ep0 maxpacket: 16 [ 461.155129][T10857] usb 9-1: config 0 has an invalid interface number: 8 but max is 0 [ 461.205059][T10857] usb 9-1: config 0 has no interface number 0 [ 461.240578][T10857] usb 9-1: config 0 interface 8 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 461.285966][T10857] usb 9-1: New USB device found, idVendor=0d8c, idProduct=000e, bcdDevice=8e.8f [ 461.305546][T10857] usb 9-1: New USB device strings: Mfr=0, Product=24, SerialNumber=3 [ 461.324905][T10857] usb 9-1: Product: syz [ 461.333849][T10857] usb 9-1: SerialNumber: syz [ 461.351755][T10857] usb 9-1: config 0 descriptor?? [ 461.367325][T10857] usbhid 9-1:0.8: couldn't find an input interrupt endpoint [ 461.603007][T10857] usb 9-1: USB disconnect, device number 12 [ 461.957646][T10858] usb 10-1: new high-speed USB device number 10 using dummy_hcd [ 461.981476][T12200] program syz.6.1712 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 462.185070][T10858] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 462.398704][T10858] usb 10-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 462.440360][T12225] netdevsim netdevsim8 netdevsim0: entered allmulticast mode [ 462.461881][T10858] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 462.556423][ T28] audit: type=1326 audit(1763672030.041:91): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12229 comm="syz.8.1716" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f84c8d8f749 code=0x0 [ 462.588914][T10858] usb 10-1: config 0 descriptor?? [ 463.688052][T10858] usbhid 10-1:0.0: can't add hid device: -71 [ 463.725818][T10858] usbhid: probe of 10-1:0.0 failed with error -71 [ 463.902287][T10858] usb 10-1: USB disconnect, device number 10 [ 463.983249][T12258] netlink: 20 bytes leftover after parsing attributes in process `syz.8.1719'. [ 464.349067][T10858] usb 10-1: new high-speed USB device number 11 using dummy_hcd [ 464.597846][T10858] usb 10-1: Using ep0 maxpacket: 32 [ 464.653672][T10858] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 464.668422][T10858] usb 10-1: New USB device found, idVendor=0f11, idProduct=1021, bcdDevice= 0.40 [ 464.678484][T10858] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 464.850383][T10858] usb 10-1: config 0 descriptor?? [ 465.578006][T10857] usb 5-1: new high-speed USB device number 12 using dummy_hcd [ 465.758169][T10857] usb 5-1: Using ep0 maxpacket: 16 [ 465.783072][T10858] usb 10-1: can't set config #0, error -71 [ 465.859765][T10857] usb 5-1: config 0 has an invalid interface number: 8 but max is 0 [ 465.888232][T10858] usb 10-1: USB disconnect, device number 11 [ 465.902979][T10857] usb 5-1: config 0 has no interface number 0 [ 465.915505][T10857] usb 5-1: config 0 interface 8 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 465.940250][T10857] usb 5-1: config 0 interface 8 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0 [ 465.983661][T10857] usb 5-1: New USB device found, idVendor=0d8c, idProduct=000e, bcdDevice=8e.8f [ 465.997328][T10857] usb 5-1: New USB device strings: Mfr=0, Product=24, SerialNumber=3 [ 466.010086][T10857] usb 5-1: Product: syz [ 466.014269][T10857] usb 5-1: SerialNumber: syz [ 466.048332][T10857] usb 5-1: config 0 descriptor?? [ 466.069536][T10857] cm109 5-1:0.8: invalid payload size 0, expected 4 [ 466.089785][T10857] input: CM109 USB driver as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.8/input/input15 [ 466.322900][T12304] netlink: 8 bytes leftover after parsing attributes in process `syz.8.1724'. [ 466.383820][ C0] cm109 5-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 466.391070][ C0] cm109 5-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 466.399849][ C0] cm109 5-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 466.407125][ C0] cm109 5-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 466.414456][ C0] cm109 5-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 466.423081][ C0] cm109 5-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 466.430299][ C0] cm109 5-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 466.437548][ C0] cm109 5-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 466.444687][ C0] cm109 5-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 466.451808][ C0] cm109 5-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 466.463052][T10857] usb 5-1: USB disconnect, device number 12 [ 466.469016][ C0] cm109 5-1:0.8: cm109_submit_buzz_toggle: usb_submit_urb (urb_ctl) failed -19 [ 466.503630][T10857] cm109 5-1:0.8: cm109_toggle_buzzer_sync: usb_control_msg() failed -19 [ 466.727416][T12309] usb usb1: check_ctrlrecip: process 12309 (syz.9.1726) requesting ep 01 but needs 81 [ 467.515547][T12200] syz.6.1712 (12200): drop_caches: 2 [ 467.707705][T12327] netlink: 20 bytes leftover after parsing attributes in process `syz.8.1731'. [ 467.737591][T10857] usb 5-1: new high-speed USB device number 13 using dummy_hcd [ 467.940956][T10857] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 468.032186][T10857] usb 5-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 468.147542][T10857] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 468.247905][T10857] usb 5-1: config 0 descriptor?? [ 468.782594][T10857] usbhid 5-1:0.0: can't add hid device: -71 [ 468.797625][T10857] usbhid: probe of 5-1:0.0 failed with error -71 [ 468.812919][T10857] usb 5-1: USB disconnect, device number 13 [ 469.001216][T10858] usb 7-1: new high-speed USB device number 18 using dummy_hcd [ 469.216601][T12365] program syz.9.1742 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 469.297814][T10858] usb 7-1: Using ep0 maxpacket: 16 [ 469.331345][T10858] usb 7-1: config 0 has an invalid interface number: 8 but max is 0 [ 469.560422][T10858] usb 7-1: config 0 has no interface number 0 [ 469.606928][T10858] usb 7-1: config 0 interface 8 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 469.666283][T10857] usb 5-1: new high-speed USB device number 14 using dummy_hcd [ 469.781597][T10858] usb 7-1: config 0 interface 8 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0 [ 469.894962][T10858] usb 7-1: New USB device found, idVendor=0d8c, idProduct=000e, bcdDevice=8e.8f [ 469.908910][T10858] usb 7-1: New USB device strings: Mfr=0, Product=24, SerialNumber=3 [ 469.937370][T10858] usb 7-1: Product: syz [ 469.952416][T10858] usb 7-1: SerialNumber: syz [ 469.978501][T10858] usb 7-1: config 0 descriptor?? [ 470.043996][T10858] cm109 7-1:0.8: invalid payload size 0, expected 4 [ 470.071298][T10857] usb 5-1: Using ep0 maxpacket: 32 [ 470.091681][T10858] input: CM109 USB driver as /devices/platform/dummy_hcd.6/usb7/7-1/7-1:0.8/input/input16 [ 470.177988][T10857] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 470.207679][T10857] usb 5-1: New USB device found, idVendor=0f11, idProduct=1021, bcdDevice= 0.40 [ 470.227059][T10857] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 470.290838][T10857] usb 5-1: config 0 descriptor?? [ 470.318835][T10857] ldusb 5-1:0.0: Interrupt out endpoint not found (using control endpoint instead) [ 470.350046][T10857] ldusb 5-1:0.0: LD USB Device #0 now attached to major 180 minor 0 [ 470.408282][ T23] usb 7-1: USB disconnect, device number 18 [ 470.410383][ C0] cm109 7-1:0.8: cm109_submit_buzz_toggle: usb_submit_urb (urb_ctl) failed -19 [ 470.480077][ T23] cm109 7-1:0.8: cm109_toggle_buzzer_sync: usb_control_msg() failed -19 [ 470.977727][ T1740] usb 5-1: USB disconnect, device number 14 [ 470.997127][ T1740] ldusb 5-1:0.0: LD USB Device #0 now disconnected [ 471.162576][T12379] x_tables: ip6_tables: CLASSIFY target: used from hooks PREROUTING, but only usable from FORWARD/OUTPUT/POSTROUTING [ 471.393717][T12365] syz.9.1742 (12365): drop_caches: 2 [ 471.637635][T10857] usb 5-1: new high-speed USB device number 15 using dummy_hcd [ 471.808006][ T1740] usb 9-1: new high-speed USB device number 13 using dummy_hcd [ 471.847560][T10857] usb 5-1: Using ep0 maxpacket: 32 [ 471.858190][T10857] usb 5-1: config index 0 descriptor too short (expected 29220, got 36) [ 471.866585][T10857] usb 5-1: config 0 has too many interfaces: 81, using maximum allowed: 32 [ 471.884007][T10857] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 81 [ 471.904154][T10857] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 471.914257][T10857] usb 5-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 471.927764][ T23] usb 10-1: new high-speed USB device number 12 using dummy_hcd [ 471.938297][T10857] usb 5-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 471.953808][T10857] usb 5-1: New USB device found, idVendor=03f0, idProduct=6c17, bcdDevice= 0.40 [ 471.966423][T10857] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 471.978566][T10857] usb 5-1: config 0 descriptor?? [ 471.999919][ T1740] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 472.011586][ T1740] usb 9-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 472.021453][ T1740] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 472.033634][ T1740] usb 9-1: config 0 descriptor?? [ 472.117978][ T23] usb 10-1: Using ep0 maxpacket: 16 [ 472.126358][ T23] usb 10-1: config 0 has an invalid interface number: 8 but max is 0 [ 472.135604][ T23] usb 10-1: config 0 has no interface number 0 [ 472.141995][ T23] usb 10-1: config 0 interface 8 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 472.153296][ T23] usb 10-1: config 0 interface 8 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0 [ 472.179583][ T23] usb 10-1: New USB device found, idVendor=0d8c, idProduct=000e, bcdDevice=8e.8f [ 472.203648][ T23] usb 10-1: New USB device strings: Mfr=0, Product=24, SerialNumber=3 [ 472.209707][T10857] usblp 5-1:0.0: usblp0: USB Bidirectional printer dev 15 if 0 alt 0 proto 3 vid 0x03F0 pid 0x6C17 [ 472.212243][ T23] usb 10-1: Product: syz [ 472.237945][ T23] usb 10-1: SerialNumber: syz [ 472.253538][ T23] usb 10-1: config 0 descriptor?? [ 472.261506][T10857] usb 5-1: USB disconnect, device number 15 [ 472.274427][ T23] cm109 10-1:0.8: invalid payload size 0, expected 4 [ 472.299874][T10857] usblp0: removed [ 472.307331][ T23] input: CM109 USB driver as /devices/platform/dummy_hcd.9/usb10/10-1/10-1:0.8/input/input17 [ 472.521907][ T1740] usbhid 9-1:0.0: can't add hid device: -71 [ 472.559115][ T1740] usbhid: probe of 9-1:0.0 failed with error -71 [ 472.566272][ C1] cm109_urb_ctl_callback: 29 callbacks suppressed [ 472.566295][ C1] cm109 10-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 472.580166][ C1] cm109 10-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 472.587628][ C1] cm109 10-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 472.594989][ C1] cm109 10-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 472.602316][ C1] cm109 10-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 472.609704][ C1] cm109 10-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 472.616966][ C1] cm109 10-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 472.624213][ C1] cm109 10-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 472.631534][ C1] cm109 10-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 472.638826][ C1] cm109 10-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 472.651165][T12418] program syz.6.1762 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 472.678415][ C1] cm109 10-1:0.8: cm109_submit_buzz_toggle: usb_submit_urb (urb_ctl) failed -19 [ 472.687804][ T27] usb 10-1: USB disconnect, device number 12 [ 472.695707][ T1740] usb 9-1: USB disconnect, device number 13 [ 472.829271][ T27] cm109 10-1:0.8: cm109_toggle_buzzer_sync: usb_control_msg() failed -19 [ 473.174995][ T1740] usb 9-1: new high-speed USB device number 14 using dummy_hcd [ 473.376163][T12418] syz.6.1762 (12418): drop_caches: 2 [ 473.381737][ T1740] usb 9-1: Using ep0 maxpacket: 32 [ 473.390791][ T1740] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 473.403335][ T1740] usb 9-1: New USB device found, idVendor=0f11, idProduct=1021, bcdDevice= 0.40 [ 473.420176][T12426] netlink: 64 bytes leftover after parsing attributes in process `syz.9.1763'. [ 473.437730][ T1740] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 473.477188][ T1740] usb 9-1: config 0 descriptor?? [ 473.495842][ T1740] ldusb 9-1:0.0: Interrupt out endpoint not found (using control endpoint instead) [ 473.516666][ T1740] ldusb 9-1:0.0: LD USB Device #0 now attached to major 180 minor 0 [ 474.126026][T12441] vlan2: entered promiscuous mode [ 474.175569][T12441] vlan2: entered allmulticast mode [ 474.189055][T12441] hsr_slave_1: entered allmulticast mode [ 474.197690][T10857] usb 5-1: new high-speed USB device number 16 using dummy_hcd [ 474.403925][T10857] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 474.417132][T10857] usb 5-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 474.428591][ T1740] usb 7-1: new high-speed USB device number 19 using dummy_hcd [ 474.442002][T10857] usb 5-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 474.451681][T10857] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 474.463952][T10857] usb 5-1: config 0 descriptor?? [ 474.479087][T10857] usbhid 5-1:0.0: couldn't find an input interrupt endpoint [ 474.557595][T10858] usb 10-1: new high-speed USB device number 13 using dummy_hcd [ 474.627726][ T1740] usb 7-1: Using ep0 maxpacket: 16 [ 474.646173][ T1740] usb 7-1: config 0 has an invalid interface number: 8 but max is 0 [ 474.654974][ T1740] usb 7-1: config 0 has no interface number 0 [ 474.662369][ T1740] usb 7-1: config 0 interface 8 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 474.677343][ T1740] usb 7-1: config 0 interface 8 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0 [ 474.700827][ T1740] usb 7-1: New USB device found, idVendor=0d8c, idProduct=000e, bcdDevice=8e.8f [ 474.715250][ T1740] usb 7-1: New USB device strings: Mfr=0, Product=24, SerialNumber=3 [ 474.724394][ T1740] usb 7-1: Product: syz [ 474.733164][ T1740] usb 7-1: SerialNumber: syz [ 474.744274][ T1740] usb 7-1: config 0 descriptor?? [ 474.751423][T10858] usb 10-1: Using ep0 maxpacket: 32 [ 474.761311][ T1740] cm109 7-1:0.8: invalid payload size 0, expected 4 [ 474.768812][T10858] usb 10-1: config index 0 descriptor too short (expected 29220, got 36) [ 474.787820][T10858] usb 10-1: config 0 has too many interfaces: 81, using maximum allowed: 32 [ 474.792565][ T1740] input: CM109 USB driver as /devices/platform/dummy_hcd.6/usb7/7-1/7-1:0.8/input/input18 [ 474.801049][T10858] usb 10-1: config 0 has 1 interface, different from the descriptor's value: 81 [ 474.845417][T10858] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 474.868911][T10858] usb 10-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 474.886197][T10858] usb 10-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 474.908868][T10858] usb 10-1: New USB device found, idVendor=03f0, idProduct=6c17, bcdDevice= 0.40 [ 474.923603][T10858] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 474.942172][T10858] usb 10-1: config 0 descriptor?? [ 475.050937][ T1740] usb 7-1: USB disconnect, device number 19 [ 475.056947][ C1] cm109 7-1:0.8: cm109_submit_buzz_toggle: usb_submit_urb (urb_ctl) failed -19 [ 475.107909][ T1740] cm109 7-1:0.8: cm109_toggle_buzzer_sync: usb_control_msg() failed -19 [ 475.159882][T10858] usblp 10-1:0.0: usblp1: USB Bidirectional printer dev 13 if 0 alt 0 proto 3 vid 0x03F0 pid 0x6C17 [ 475.183109][T10858] usb 10-1: USB disconnect, device number 13 [ 475.196398][T10858] usblp1: removed [ 476.168562][T10858] usb 9-1: USB disconnect, device number 14 [ 476.174587][ C0] ldusb 9-1:0.0: usb_submit_urb failed (-19) [ 477.041616][T12470] program syz.8.1778 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 477.297697][T10858] ldusb 9-1:0.0: LD USB Device #0 now disconnected [ 477.474148][ T28] audit: type=1326 audit(1763672044.961:92): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12477 comm="syz.9.1779" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f130c98f749 code=0x7ffc0000 [ 477.492099][T12470] syz.8.1778 (12470): drop_caches: 2 [ 477.556950][ T28] audit: type=1326 audit(1763672044.981:93): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12477 comm="syz.9.1779" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f130c98f749 code=0x7ffc0000 [ 477.620375][T10858] usb 5-1: USB disconnect, device number 16 [ 477.705042][ T28] audit: type=1326 audit(1763672045.011:94): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12477 comm="syz.9.1779" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f130c98f749 code=0x7ffc0000 [ 477.759326][ T28] audit: type=1326 audit(1763672045.011:95): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12477 comm="syz.9.1779" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f130c98f749 code=0x7ffc0000 [ 477.784942][ T28] audit: type=1326 audit(1763672045.011:96): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12477 comm="syz.9.1779" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f130c98f749 code=0x7ffc0000 [ 477.811950][ T28] audit: type=1326 audit(1763672045.011:97): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12477 comm="syz.9.1779" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f130c98f749 code=0x7ffc0000 [ 477.838030][ T28] audit: type=1326 audit(1763672045.011:98): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12477 comm="syz.9.1779" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f130c98f749 code=0x7ffc0000 [ 477.867646][ T28] audit: type=1326 audit(1763672045.011:99): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12477 comm="syz.9.1779" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f130c98f749 code=0x7ffc0000 [ 477.896783][ T28] audit: type=1326 audit(1763672045.011:100): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12477 comm="syz.9.1779" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f130c98f749 code=0x7ffc0000 [ 477.926845][ T28] audit: type=1326 audit(1763672045.011:101): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12477 comm="syz.9.1779" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f130c98f749 code=0x7ffc0000 [ 477.957718][ T1740] usb 10-1: new high-speed USB device number 14 using dummy_hcd [ 478.147619][T10858] usb 5-1: new high-speed USB device number 17 using dummy_hcd [ 478.187632][ T1740] usb 10-1: Using ep0 maxpacket: 16 [ 478.198244][ T1740] usb 10-1: config 0 has an invalid interface number: 8 but max is 0 [ 478.227622][ T1740] usb 10-1: config 0 has no interface number 0 [ 478.233909][ T1740] usb 10-1: config 0 interface 8 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 478.307514][ T1740] usb 10-1: config 0 interface 8 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0 [ 478.354150][T10858] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 478.387792][T10858] usb 5-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 478.389866][ T1740] usb 10-1: New USB device found, idVendor=0d8c, idProduct=000e, bcdDevice=8e.8f [ 478.410725][T10858] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 478.445813][T10858] usb 5-1: config 0 descriptor?? [ 478.448065][ T1740] usb 10-1: New USB device strings: Mfr=0, Product=24, SerialNumber=3 [ 478.472053][ T1740] usb 10-1: Product: syz [ 478.476370][ T1740] usb 10-1: SerialNumber: syz [ 478.499016][ T1740] usb 10-1: config 0 descriptor?? [ 478.516614][ T1740] cm109 10-1:0.8: invalid payload size 0, expected 4 [ 478.527290][ T1740] input: CM109 USB driver as /devices/platform/dummy_hcd.9/usb10/10-1/10-1:0.8/input/input19 [ 478.743489][ C1] cm109_urb_ctl_callback: 177 callbacks suppressed [ 478.743510][ C1] cm109 10-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 478.757761][ C1] cm109 10-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 478.765037][ C1] cm109 10-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 478.772930][ C1] cm109 10-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 478.780337][ C1] cm109 10-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 478.787931][T10757] usb 9-1: new high-speed USB device number 15 using dummy_hcd [ 478.796063][ C1] cm109 10-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 478.803637][ C1] cm109 10-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 478.810955][ C1] cm109 10-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 478.818208][ C1] cm109 10-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 478.818433][ C1] cm109 10-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 478.836674][ T1740] usb 10-1: USB disconnect, device number 14 [ 478.836738][ C1] cm109 10-1:0.8: cm109_submit_buzz_toggle: usb_submit_urb (urb_ctl) failed -19 [ 478.924725][ T1740] cm109 10-1:0.8: cm109_toggle_buzzer_sync: usb_control_msg() failed -19 [ 478.994233][T10858] usbhid 5-1:0.0: can't add hid device: -71 [ 479.007359][T10858] usbhid: probe of 5-1:0.0 failed with error -71 [ 479.042608][T10858] usb 5-1: USB disconnect, device number 17 [ 479.062839][T10757] usb 9-1: Using ep0 maxpacket: 32 [ 479.074405][T10757] usb 9-1: config index 0 descriptor too short (expected 29220, got 36) [ 479.085569][T10757] usb 9-1: config 0 has too many interfaces: 81, using maximum allowed: 32 [ 479.147936][T10757] usb 9-1: config 0 has 1 interface, different from the descriptor's value: 81 [ 479.164162][T10757] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 479.194536][T10757] usb 9-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 479.237674][T10757] usb 9-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 479.277824][T10757] usb 9-1: New USB device found, idVendor=03f0, idProduct=6c17, bcdDevice= 0.40 [ 479.317983][T10757] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 479.379627][T10757] usb 9-1: config 0 descriptor?? [ 479.597684][T10858] usb 5-1: new high-speed USB device number 18 using dummy_hcd [ 479.621900][T10757] usblp 9-1:0.0: usblp0: USB Bidirectional printer dev 15 if 0 alt 0 proto 3 vid 0x03F0 pid 0x6C17 [ 479.655174][T10757] usb 9-1: USB disconnect, device number 15 [ 479.669627][T10757] usblp0: removed [ 479.817522][T10858] usb 5-1: Using ep0 maxpacket: 32 [ 479.831969][T10858] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 479.843470][T10858] usb 5-1: New USB device found, idVendor=0f11, idProduct=1021, bcdDevice= 0.40 [ 479.866637][T10858] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 479.890155][T10858] usb 5-1: config 0 descriptor?? [ 479.908908][T10858] ldusb 5-1:0.0: Interrupt out endpoint not found (using control endpoint instead) [ 479.920366][T10858] ldusb 5-1:0.0: LD USB Device #0 now attached to major 180 minor 0 [ 480.247609][T10858] usb 7-1: new high-speed USB device number 20 using dummy_hcd [ 480.439087][T10858] usb 7-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 480.461937][T10858] usb 7-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 480.493601][T10858] usb 7-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 480.511736][T10858] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 480.526190][T10858] usb 7-1: config 0 descriptor?? [ 480.546733][T10858] usbhid 7-1:0.0: couldn't find an input interrupt endpoint [ 481.641192][ T5898] usb 5-1: USB disconnect, device number 18 [ 481.743617][ T5898] ldusb 5-1:0.0: LD USB Device #0 now disconnected [ 481.792770][T12531] program syz.9.1795 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 481.970946][T12526] syz.9.1795 (12526): drop_caches: 2 [ 482.490205][T12540] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1796'. [ 482.738947][ T1740] usb 9-1: new high-speed USB device number 16 using dummy_hcd [ 483.267521][ T1740] usb 9-1: Using ep0 maxpacket: 16 [ 483.298984][ T1740] usb 9-1: config 0 has an invalid interface number: 8 but max is 0 [ 483.339613][ T1740] usb 9-1: config 0 has no interface number 0 [ 483.367518][ T1740] usb 9-1: config 0 interface 8 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 483.427555][ T1740] usb 9-1: config 0 interface 8 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0 [ 483.499239][ T1740] usb 9-1: New USB device found, idVendor=0d8c, idProduct=000e, bcdDevice=8e.8f [ 483.549429][ T1740] usb 9-1: New USB device strings: Mfr=0, Product=24, SerialNumber=3 [ 483.571176][ T1740] usb 9-1: Product: syz [ 483.587554][ T1740] usb 9-1: SerialNumber: syz [ 483.607067][ T1740] usb 9-1: config 0 descriptor?? [ 483.632295][ T1740] cm109 9-1:0.8: invalid payload size 0, expected 4 [ 483.646993][T10757] usb 7-1: USB disconnect, device number 20 [ 483.689258][ T1740] input: CM109 USB driver as /devices/platform/dummy_hcd.8/usb9/9-1/9-1:0.8/input/input20 [ 483.849849][ C1] cm109_urb_ctl_callback: 22 callbacks suppressed [ 483.849871][ C1] cm109 9-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 483.863492][ C1] cm109 9-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 483.876058][ C1] cm109 9-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 483.884458][ C1] cm109 9-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 483.892574][ C1] cm109 9-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 483.900428][ C1] cm109 9-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 483.908435][ C1] cm109 9-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 483.915797][ C1] cm109 9-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 483.923283][ C1] cm109 9-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 483.930854][ C1] cm109 9-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 483.968796][ C1] cm109 9-1:0.8: cm109_submit_buzz_toggle: usb_submit_urb (urb_ctl) failed -19 [ 483.983712][ T1740] usb 9-1: USB disconnect, device number 16 [ 484.017770][ T1740] cm109 9-1:0.8: cm109_toggle_buzzer_sync: usb_control_msg() failed -19 [ 484.058669][T12546] netlink: 20 bytes leftover after parsing attributes in process `syz.9.1798'. [ 484.848407][T10757] usb 9-1: new high-speed USB device number 17 using dummy_hcd [ 485.017927][ T1740] usb 5-1: new high-speed USB device number 19 using dummy_hcd [ 485.047640][T10757] usb 9-1: Using ep0 maxpacket: 32 [ 485.055913][T10757] usb 9-1: config index 0 descriptor too short (expected 29220, got 36) [ 485.069972][T10757] usb 9-1: config 0 has too many interfaces: 81, using maximum allowed: 32 [ 485.079387][T10757] usb 9-1: config 0 has 1 interface, different from the descriptor's value: 81 [ 485.088871][T10757] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 485.098990][T10757] usb 9-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 485.117222][T10757] usb 9-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 485.131566][T10757] usb 9-1: New USB device found, idVendor=03f0, idProduct=6c17, bcdDevice= 0.40 [ 485.142734][T10757] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 485.153576][T10757] usb 9-1: config 0 descriptor?? [ 485.240651][ T1740] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 485.266870][ T1740] usb 5-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 485.276947][ T1740] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 485.293988][ T1740] usb 5-1: config 0 descriptor?? [ 485.381302][T12560] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 485.429334][T12560] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 485.449915][T10757] usblp 9-1:0.0: usblp0: USB Bidirectional printer dev 17 if 0 alt 0 proto 3 vid 0x03F0 pid 0x6C17 [ 485.483030][T10757] usb 9-1: USB disconnect, device number 17 [ 485.496904][T10757] usblp0: removed [ 485.710528][ T1740] usbhid 5-1:0.0: can't add hid device: -71 [ 485.753424][ T1740] usbhid: probe of 5-1:0.0 failed with error -71 [ 485.788253][ T1740] usb 5-1: USB disconnect, device number 19 [ 485.847672][ T5898] usb 10-1: new high-speed USB device number 15 using dummy_hcd [ 486.087730][ T5898] usb 10-1: Using ep0 maxpacket: 16 [ 486.098824][ T5898] usb 10-1: config 0 has an invalid interface number: 8 but max is 0 [ 486.107198][ T5898] usb 10-1: config 0 has no interface number 0 [ 486.117416][ T5898] usb 10-1: config 0 interface 8 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 486.148919][ T5898] usb 10-1: config 0 interface 8 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0 [ 486.177039][ T5898] usb 10-1: New USB device found, idVendor=0d8c, idProduct=000e, bcdDevice=8e.8f [ 486.192123][ T5898] usb 10-1: New USB device strings: Mfr=0, Product=24, SerialNumber=3 [ 486.209763][ T5898] usb 10-1: Product: syz [ 486.223027][ T5898] usb 10-1: SerialNumber: syz [ 486.239268][ T5898] usb 10-1: config 0 descriptor?? [ 486.257416][ T5898] cm109 10-1:0.8: invalid payload size 0, expected 4 [ 486.301655][ T5898] input: CM109 USB driver as /devices/platform/dummy_hcd.9/usb10/10-1/10-1:0.8/input/input21 [ 486.509858][T10757] usb 10-1: USB disconnect, device number 15 [ 486.510013][ C0] cm109 10-1:0.8: cm109_submit_buzz_toggle: usb_submit_urb (urb_ctl) failed -19 [ 486.537392][T10757] cm109 10-1:0.8: cm109_toggle_buzzer_sync: usb_control_msg() failed -19 [ 486.598394][ T1740] usb 5-1: new high-speed USB device number 20 using dummy_hcd [ 486.807681][ T1740] usb 5-1: Using ep0 maxpacket: 32 [ 486.818848][ T1740] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 486.839522][ T1740] usb 5-1: New USB device found, idVendor=0f11, idProduct=1021, bcdDevice= 0.40 [ 486.858018][ T1740] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 486.884729][ T1740] usb 5-1: config 0 descriptor?? [ 486.912936][ T1740] ldusb 5-1:0.0: Interrupt out endpoint not found (using control endpoint instead) [ 486.939572][ T1740] ldusb 5-1:0.0: LD USB Device #0 now attached to major 180 minor 0 [ 487.857727][T10857] usb 7-1: new high-speed USB device number 21 using dummy_hcd [ 488.087551][T10857] usb 7-1: Using ep0 maxpacket: 8 [ 488.094280][T10857] usb 7-1: config 0 has an invalid interface number: 122 but max is 0 [ 488.103208][T10857] usb 7-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 488.136660][T10857] usb 7-1: config 0 has no interface number 0 [ 488.161375][T10857] usb 7-1: config 0 interface 122 altsetting 0 endpoint 0xA has invalid maxpacket 512, setting to 64 [ 488.257643][T10857] usb 7-1: config 0 interface 122 altsetting 0 bulk endpoint 0x8 has invalid maxpacket 8 [ 488.377769][T10857] usb 7-1: config 0 interface 122 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 8 [ 488.425202][T10857] usb 7-1: New USB device found, idVendor=1286, idProduct=2046, bcdDevice= 5.b7 [ 488.452170][T10857] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 488.482312][T10857] usb 7-1: Product: syz [ 488.493908][T10857] usb 7-1: Manufacturer: syz [ 488.513289][T10857] usb 7-1: SerialNumber: syz [ 488.534521][T10857] usb 7-1: config 0 descriptor?? [ 488.558573][T12611] raw-gadget.0 gadget.6: fail, usb_ep_enable returned -22 [ 489.065886][ T1740] usb 5-1: USB disconnect, device number 20 [ 489.074130][ T1740] ldusb 5-1:0.0: LD USB Device #0 now disconnected [ 489.509264][ T1740] usb 5-1: new high-speed USB device number 21 using dummy_hcd [ 489.700991][ T1740] usb 5-1: Using ep0 maxpacket: 16 [ 489.709448][ T1740] usb 5-1: config 0 has an invalid interface number: 8 but max is 0 [ 489.718064][ T1740] usb 5-1: config 0 has no interface number 0 [ 489.724216][ T1740] usb 5-1: config 0 interface 8 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 489.735688][ T1740] usb 5-1: config 0 interface 8 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0 [ 489.753316][ T1740] usb 5-1: New USB device found, idVendor=0d8c, idProduct=000e, bcdDevice=8e.8f [ 489.762694][ T1740] usb 5-1: New USB device strings: Mfr=0, Product=24, SerialNumber=3 [ 489.771182][ T1740] usb 5-1: Product: syz [ 489.775575][ T1740] usb 5-1: SerialNumber: syz [ 489.784241][ T1740] usb 5-1: config 0 descriptor?? [ 489.793725][ T1740] cm109 5-1:0.8: invalid payload size 0, expected 4 [ 489.803460][ T1740] input: CM109 USB driver as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.8/input/input22 [ 489.939195][ C0] vcan0: j1939_tp_rxtimer: 0xffff88805cfc6000: rx timeout, send abort [ 489.947823][ C0] vcan0: j1939_xtp_rx_abort_one: 0xffff88805cfc6000: 0x00000: (3) A timeout occurred and this is the connection abort to close the session. [ 489.962334][ C0] vcan0: j1939_tp_rxtimer: 0xffff88805cfc4800: rx timeout, send abort [ 490.004140][ C1] cm109_urb_ctl_callback: 131 callbacks suppressed [ 490.004162][ C1] cm109 5-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 490.018105][ C1] cm109 5-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 490.025330][ C1] cm109 5-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 490.032522][ C1] cm109 5-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 490.039909][ C1] cm109 5-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 490.047093][ C1] cm109 5-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 490.054800][ C1] cm109 5-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 490.062154][ C1] cm109 5-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 490.069495][ T1740] usb 5-1: USB disconnect, device number 21 [ 490.075526][ C1] cm109 5-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 490.075548][ C1] cm109 5-1:0.8: cm109_submit_buzz_toggle: usb_submit_urb (urb_ctl) failed -19 [ 490.094602][ T1740] cm109 5-1:0.8: cm109_toggle_buzzer_sync: usb_control_msg() failed -19 [ 490.470583][ C0] vcan0: j1939_tp_rxtimer: 0xffff88805cfc4800: abort rx timeout. Force session deactivation [ 490.770536][T10857] usb 7-1: NFC: intf ffff888079884000 id ffffffff8d63b620 [ 490.922259][T10857] usb 7-1: USB disconnect, device number 21 [ 490.997667][ T5898] usb 5-1: new high-speed USB device number 22 using dummy_hcd [ 491.231511][ T5898] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 491.264245][ T5898] usb 5-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 491.285594][ T5898] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 491.314776][ T5898] usb 5-1: config 0 descriptor?? [ 491.667767][ T23] usb 7-1: new high-speed USB device number 22 using dummy_hcd [ 491.691956][ T5898] usbhid 5-1:0.0: can't add hid device: -71 [ 491.704565][ T5898] usbhid: probe of 5-1:0.0 failed with error -71 [ 491.719135][ T5898] usb 5-1: USB disconnect, device number 22 [ 491.877539][ T1740] usb 9-1: new high-speed USB device number 18 using dummy_hcd [ 491.887310][ T23] usb 7-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 491.900080][ T23] usb 7-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 491.911010][ T23] usb 7-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 491.920840][ T23] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 491.932642][T12664] raw-gadget.0 gadget.6: fail, usb_ep_enable returned -22 [ 491.955464][ T23] usb 7-1: Quirk or no altest; falling back to MIDI 1.0 [ 492.087790][ T1740] usb 9-1: Using ep0 maxpacket: 16 [ 492.096491][ T1740] usb 9-1: config 0 has an invalid interface number: 8 but max is 0 [ 492.107328][ T1740] usb 9-1: config 0 has no interface number 0 [ 492.115742][ T1740] usb 9-1: config 0 interface 8 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 492.130295][ T1740] usb 9-1: config 0 interface 8 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0 [ 492.146367][ T1740] usb 9-1: New USB device found, idVendor=0d8c, idProduct=000e, bcdDevice=8e.8f [ 492.165962][ T1740] usb 9-1: New USB device strings: Mfr=0, Product=24, SerialNumber=3 [ 492.176704][ T1740] usb 9-1: Product: syz [ 492.182922][ T1740] usb 9-1: SerialNumber: syz [ 492.196549][ T1740] usb 9-1: config 0 descriptor?? [ 492.210011][ T1740] cm109 9-1:0.8: invalid payload size 0, expected 4 [ 492.223183][ T1740] input: CM109 USB driver as /devices/platform/dummy_hcd.8/usb9/9-1/9-1:0.8/input/input23 [ 492.320533][ T27] usb 7-1: USB disconnect, device number 22 [ 492.369738][ T23] usb 5-1: new high-speed USB device number 23 using dummy_hcd [ 492.432086][ C1] cm109 9-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 492.440652][ T1740] usb 9-1: USB disconnect, device number 18 [ 492.440740][ C1] cm109 9-1:0.8: cm109_submit_buzz_toggle: usb_submit_urb (urb_ctl) failed -19 [ 492.472608][ T1740] cm109 9-1:0.8: cm109_toggle_buzzer_sync: usb_control_msg() failed -19 [ 492.517705][ T5898] usb 10-1: new high-speed USB device number 16 using dummy_hcd [ 492.698330][ T23] usb 5-1: Using ep0 maxpacket: 32 [ 492.722092][ T5898] usb 10-1: Using ep0 maxpacket: 8 [ 492.740868][ T5898] usb 10-1: config 0 has an invalid interface number: 122 but max is 0 [ 492.767331][ T23] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 492.786541][ T23] usb 5-1: New USB device found, idVendor=0f11, idProduct=1021, bcdDevice= 0.40 [ 492.796652][ T23] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 492.809641][ T23] usb 5-1: config 0 descriptor?? [ 492.823035][ T5898] usb 10-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 492.833225][ T23] ldusb 5-1:0.0: Interrupt out endpoint not found (using control endpoint instead) [ 492.847831][ T23] ldusb 5-1:0.0: LD USB Device #0 now attached to major 180 minor 0 [ 492.896066][ T5898] usb 10-1: config 0 has no interface number 0 [ 492.910698][ T5898] usb 10-1: config 0 interface 122 altsetting 0 endpoint 0xA has invalid maxpacket 512, setting to 64 [ 492.922162][ T5898] usb 10-1: config 0 interface 122 altsetting 0 bulk endpoint 0x8 has invalid maxpacket 8 [ 492.932687][ T5898] usb 10-1: config 0 interface 122 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 8 [ 492.959470][ T5898] usb 10-1: New USB device found, idVendor=1286, idProduct=2046, bcdDevice= 5.b7 [ 492.971401][ T5898] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 492.979650][ T5898] usb 10-1: Product: syz [ 492.983954][ T5898] usb 10-1: Manufacturer: syz [ 492.988758][ T5898] usb 10-1: SerialNumber: syz [ 492.997302][ T5898] usb 10-1: config 0 descriptor?? [ 493.008417][T12670] raw-gadget.3 gadget.9: fail, usb_ep_enable returned -22 [ 493.647724][ T51] Bluetooth: hci2: command 0x0406 tx timeout [ 494.035209][ T5898] usb 10-1: NFC: intf ffff88801f786000 id ffffffff8d63b620 [ 494.111225][ T5898] usb 10-1: USB disconnect, device number 16 [ 494.299322][T10857] usb 5-1: USB disconnect, device number 23 [ 494.333099][T10857] ldusb 5-1:0.0: LD USB Device #0 now disconnected [ 494.727830][T10857] usb 5-1: new high-speed USB device number 24 using dummy_hcd [ 494.957527][T10857] usb 5-1: Using ep0 maxpacket: 16 [ 494.986829][T10857] usb 5-1: config 0 has an invalid interface number: 8 but max is 0 [ 495.009012][T10857] usb 5-1: config 0 has no interface number 0 [ 495.031502][T10857] usb 5-1: config 0 interface 8 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 495.043592][T10857] usb 5-1: config 0 interface 8 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0 [ 495.058677][T10857] usb 5-1: New USB device found, idVendor=0d8c, idProduct=000e, bcdDevice=8e.8f [ 495.069620][T10857] usb 5-1: New USB device strings: Mfr=0, Product=24, SerialNumber=3 [ 495.082249][T10857] usb 5-1: Product: syz [ 495.088658][T10857] usb 5-1: SerialNumber: syz [ 495.119873][T10857] usb 5-1: config 0 descriptor?? [ 495.168344][T10857] cm109 5-1:0.8: invalid payload size 0, expected 4 [ 495.184406][T10857] input: CM109 USB driver as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.8/input/input24 [ 495.687826][T10857] usb 9-1: new high-speed USB device number 19 using dummy_hcd [ 495.832840][ C0] cm109_urb_ctl_callback: 6 callbacks suppressed [ 495.832864][ C0] cm109 5-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 495.847060][ C0] cm109 5-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 495.854429][ C0] cm109 5-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 495.862163][ C0] cm109 5-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 495.869429][ C0] cm109 5-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 495.876893][ C0] cm109 5-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 495.877851][ T23] usb 5-1: USB disconnect, device number 24 [ 495.883850][ C0] cm109 5-1:0.8: cm109_submit_buzz_toggle: usb_submit_urb (urb_ctl) failed -19 [ 495.938081][T10857] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 495.956616][T10857] usb 9-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 495.966234][T10857] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 495.967146][ T23] cm109 5-1:0.8: cm109_toggle_buzzer_sync: usb_control_msg() failed -19 [ 495.984330][T10857] usb 9-1: config 0 descriptor?? [ 496.450551][T10857] usbhid 9-1:0.0: can't add hid device: -71 [ 496.456604][T10857] usbhid: probe of 9-1:0.0 failed with error -71 [ 496.594129][T10857] usb 9-1: USB disconnect, device number 19 [ 497.177827][T10857] usb 9-1: new high-speed USB device number 20 using dummy_hcd [ 497.427579][T10857] usb 9-1: Using ep0 maxpacket: 32 [ 497.508241][T10857] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 497.736283][T10857] usb 9-1: New USB device found, idVendor=0f11, idProduct=1021, bcdDevice= 0.40 [ 497.864383][T10857] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 497.914508][T12751] bridge0: port 2(bridge_slave_1) entered disabled state [ 497.922296][T12751] bridge0: port 1(bridge_slave_0) entered disabled state [ 497.986840][T10857] usb 9-1: config 0 descriptor?? [ 498.115445][T10857] ldusb 9-1:0.0: Interrupt out endpoint not found (using control endpoint instead) [ 498.228670][T10857] ldusb 9-1:0.0: LD USB Device #0 now attached to major 180 minor 0 [ 498.770454][ T51] Bluetooth: hci0: command 0x0406 tx timeout [ 499.104333][T12751] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 499.140891][T12751] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 499.564590][ T5897] usb 9-1: USB disconnect, device number 20 [ 499.608258][ T5897] ldusb 9-1:0.0: LD USB Device #0 now disconnected [ 499.613933][T12751] netdevsim netdevsim4 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 499.678849][T12751] netdevsim netdevsim4 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 499.693063][T12751] netdevsim netdevsim4 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 499.712333][T12751] netdevsim netdevsim4 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 500.274609][T12785] program syz.6.1883 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 500.296975][T12798] netlink: 8 bytes leftover after parsing attributes in process `syz.8.1882'. [ 500.321785][T12785] syz.6.1883 (12785): drop_caches: 2 [ 501.295161][T12770] netlink: 20 bytes leftover after parsing attributes in process `syz.9.1874'. [ 501.477647][ T5898] usb 5-1: new high-speed USB device number 25 using dummy_hcd [ 501.687106][ T5898] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 501.717643][ T5898] usb 5-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 501.727099][ T5898] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 501.770569][ T5898] usb 5-1: config 0 descriptor?? [ 501.812109][ T1284] ieee802154 phy0 wpan0: encryption failed: -22 [ 501.821870][ T1284] ieee802154 phy1 wpan1: encryption failed: -22 [ 502.166866][ T5898] usbhid 5-1:0.0: can't add hid device: -71 [ 502.235406][ T5898] usbhid: probe of 5-1:0.0 failed with error -71 [ 502.305134][ T5898] usb 5-1: USB disconnect, device number 25 [ 502.848044][ T1740] usb 5-1: new high-speed USB device number 26 using dummy_hcd [ 503.024937][T12831] lo speed is unknown, defaulting to 1000 [ 503.038886][T12831] lo speed is unknown, defaulting to 1000 [ 503.053940][T12831] lo speed is unknown, defaulting to 1000 [ 503.059935][ T1740] usb 5-1: Using ep0 maxpacket: 32 [ 503.101447][ T1740] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 503.131563][T12831] infiniband syz2: RDMA CMA: cma_listen_on_dev, error -98 [ 503.143602][ T1740] usb 5-1: New USB device found, idVendor=0f11, idProduct=1021, bcdDevice= 0.40 [ 503.199553][ T1740] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 503.246991][ T1740] usb 5-1: config 0 descriptor?? [ 503.338119][T12831] lo speed is unknown, defaulting to 1000 [ 503.356133][T12831] lo speed is unknown, defaulting to 1000 [ 503.471726][ T1740] ldusb 5-1:0.0: Interrupt out endpoint not found (using control endpoint instead) [ 503.505126][T12831] lo speed is unknown, defaulting to 1000 [ 503.505271][ T1740] ldusb 5-1:0.0: LD USB Device #0 now attached to major 180 minor 0 [ 503.668050][T12831] lo speed is unknown, defaulting to 1000 [ 503.708491][T12831] lo speed is unknown, defaulting to 1000 [ 503.725452][T12831] lo speed is unknown, defaulting to 1000 [ 503.753894][T12831] lo speed is unknown, defaulting to 1000 [ 503.888707][T12840] program syz.9.1896 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 504.095540][T12840] syz.9.1896 (12840): drop_caches: 2 [ 504.379345][T12844] netlink: 20 bytes leftover after parsing attributes in process `syz.8.1898'. [ 505.436737][ T5831] usb 5-1: USB disconnect, device number 26 [ 505.445273][ T5831] ldusb 5-1:0.0: LD USB Device #0 now disconnected [ 505.627738][ T5898] usb 10-1: new high-speed USB device number 17 using dummy_hcd [ 505.819669][ T5898] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 505.843661][ T5898] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 505.865447][ T5898] usb 10-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 505.889513][ T5898] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 505.919243][ T5898] usb 10-1: config 0 descriptor?? [ 506.350531][T12895] pim6reg: entered allmulticast mode [ 508.244363][T12901] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1913'. [ 508.301242][ T1740] usb 7-1: new high-speed USB device number 23 using dummy_hcd [ 508.587723][ T1740] usb 7-1: Using ep0 maxpacket: 32 [ 508.611058][ T1740] usb 7-1: no configurations [ 508.621066][ T1740] usb 7-1: can't read configurations, error -22 [ 508.807729][ T1740] usb 7-1: new high-speed USB device number 24 using dummy_hcd [ 509.027707][ T1740] usb 7-1: Using ep0 maxpacket: 32 [ 509.047784][ T1740] usb 7-1: no configurations [ 509.052438][ T1740] usb 7-1: can't read configurations, error -22 [ 509.096047][ T1740] usb usb7-port1: attempt power cycle [ 509.517537][ T1740] usb 7-1: new high-speed USB device number 25 using dummy_hcd [ 509.569118][ T1740] usb 7-1: Using ep0 maxpacket: 32 [ 509.576204][ T1740] usb 7-1: no configurations [ 509.586486][ T1740] usb 7-1: can't read configurations, error -22 [ 509.807652][ T1740] usb 7-1: new high-speed USB device number 26 using dummy_hcd [ 509.838210][ T1740] usb 7-1: Using ep0 maxpacket: 32 [ 509.844084][ T1740] usb 7-1: no configurations [ 509.876906][ T1740] usb 7-1: can't read configurations, error -22 [ 509.899331][ T1740] usb usb7-port1: unable to enumerate USB device [ 510.407877][ T5898] usbhid 10-1:0.0: can't add hid device: -71 [ 510.414010][ T5898] usbhid: probe of 10-1:0.0 failed with error -71 [ 510.487969][ T5898] usb 10-1: USB disconnect, device number 17 [ 510.863112][T12936] syz.9.1922[12936] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 510.863272][T12936] syz.9.1922[12936] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 511.349406][ T5831] usb 10-1: new high-speed USB device number 18 using dummy_hcd [ 511.580479][ T5831] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 511.668192][ T5831] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 511.710536][ T5831] usb 10-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 511.857512][ T5831] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 511.987840][ T5831] usb 10-1: config 0 descriptor?? [ 513.088119][ T5898] usb 9-1: new high-speed USB device number 21 using dummy_hcd [ 513.317594][ T5898] usb 9-1: Using ep0 maxpacket: 8 [ 513.344258][ T5898] usb 9-1: config 1 has an invalid descriptor of length 128, skipping remainder of the config [ 513.375547][ T5898] usb 9-1: config 1 has 0 interfaces, different from the descriptor's value: 1 [ 513.404016][ T5898] usb 9-1: New USB device found, idVendor=05ac, idProduct=0242, bcdDevice= 0.40 [ 513.470665][ T5898] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 513.513996][ T5898] usb 9-1: Product: syz [ 513.524209][ T5898] usb 9-1: Manufacturer: syz [ 513.536344][ T5898] usb 9-1: SerialNumber: syz [ 513.607629][ T27] usb 5-1: new high-speed USB device number 27 using dummy_hcd [ 513.828635][ T27] usb 5-1: Using ep0 maxpacket: 8 [ 513.846520][ T5898] usb 9-1: USB disconnect, device number 21 [ 513.881007][ T27] usb 5-1: config 168 has an invalid descriptor of length 0, skipping remainder of the config [ 513.956547][ T27] usb 5-1: config 168 has an invalid descriptor of length 0, skipping remainder of the config [ 513.971133][T12999] netlink: 20 bytes leftover after parsing attributes in process `syz.6.1941'. [ 514.052526][ T27] usb 5-1: config 168 has an invalid descriptor of length 0, skipping remainder of the config [ 514.124795][ T27] usb 5-1: New USB device found, idVendor=0a07, idProduct=0064, bcdDevice=40.6e [ 514.182685][ T27] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 514.223701][ T27] usb 5-1: Product: syz [ 514.233928][ T27] usb 5-1: Manufacturer: syz [ 514.244317][ T27] usb 5-1: SerialNumber: syz [ 514.487320][ T27] adutux 5-1:168.0: interrupt endpoints not found [ 514.596820][ T27] usb 5-1: USB disconnect, device number 27 [ 514.914227][ T5831] usbhid 10-1:0.0: can't add hid device: -71 [ 514.934547][ T5831] usbhid: probe of 10-1:0.0 failed with error -71 [ 515.002098][ T5831] usb 10-1: USB disconnect, device number 18 [ 515.555412][T13039] fuse: Bad value for 'fd' [ 515.621622][T13041] fuse: Bad value for 'fd' [ 515.885440][T13048] netlink: 72 bytes leftover after parsing attributes in process `syz.9.1956'. [ 516.270759][T13061] netlink: 20 bytes leftover after parsing attributes in process `syz.8.1957'. [ 518.029403][T13083] syzkaller0: entered promiscuous mode [ 518.038004][T13083] syzkaller0: entered allmulticast mode [ 518.436026][ T51] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 518.446890][ T51] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 518.456636][ T51] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 518.467168][ T51] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 518.474986][ T51] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 518.482697][ T51] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 518.700032][T13100] netlink: 232 bytes leftover after parsing attributes in process `syz.4.1974'. [ 518.985071][T13094] lo speed is unknown, defaulting to 1000 [ 520.077605][T13116] netlink: 20 bytes leftover after parsing attributes in process `syz.4.1975'. [ 520.473245][ T11] hsr_slave_0: left promiscuous mode [ 520.491043][ T11] hsr_slave_1: left promiscuous mode [ 520.516326][ T11] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 520.546335][ T11] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 520.586797][ T11] bridge_slave_1: left allmulticast mode [ 520.609532][ T51] Bluetooth: hci0: command tx timeout [ 520.615722][ T11] bridge_slave_1: left promiscuous mode [ 520.644102][ T11] bridge0: port 2(bridge_slave_1) entered disabled state [ 520.692257][ T11] bridge_slave_0: left allmulticast mode [ 520.723323][ T11] bridge_slave_0: left promiscuous mode [ 520.740943][ T11] bridge0: port 1(bridge_slave_0) entered disabled state [ 520.889578][ T11] pim6reg (unregistering): left allmulticast mode [ 522.173671][ T11] team0 (unregistering): Port device team_slave_1 removed [ 522.287252][ T11] team0 (unregistering): Port device team_slave_0 removed [ 522.403143][ T11] $Hÿ (unregistering): (slave bond_slave_1): Releasing backup interface [ 522.434030][ T11] bond_slave_1 (unregistering): left promiscuous mode [ 522.520977][ T11] $Hÿ (unregistering): (slave bond_slave_0): Releasing backup interface [ 522.531943][ T11] bond_slave_0 (unregistering): left promiscuous mode [ 522.687632][ T51] Bluetooth: hci0: command tx timeout [ 523.553731][ T11] $Hÿ (unregistering): Released all slaves [ 523.703872][T13145] syzkaller0: entered promiscuous mode [ 523.710100][T13145] syzkaller0: entered allmulticast mode [ 524.038738][T13094] chnl_net:caif_netlink_parms(): no params data found [ 524.137712][ T1740] usb 5-1: new high-speed USB device number 28 using dummy_hcd [ 524.316432][ T1740] usb 5-1: device descriptor read/64, error -71 [ 524.587564][ T1740] usb 5-1: new high-speed USB device number 29 using dummy_hcd [ 524.767896][ T51] Bluetooth: hci0: command tx timeout [ 524.777823][ T1740] usb 5-1: device descriptor read/64, error -71 [ 524.909150][ T1740] usb usb5-port1: attempt power cycle [ 525.362988][ T1740] usb 5-1: new high-speed USB device number 30 using dummy_hcd [ 525.401018][ T1740] usb 5-1: device descriptor read/8, error -71 [ 525.697718][ T1740] usb 5-1: new high-speed USB device number 31 using dummy_hcd [ 525.741015][ T1740] usb 5-1: device descriptor read/8, error -71 [ 525.883844][ T1740] usb usb5-port1: unable to enumerate USB device [ 525.884405][T13213] siw: device registration error -23 [ 525.985303][ T28] kauditd_printk_skb: 7 callbacks suppressed [ 525.985318][ T28] audit: type=1326 audit(1763672093.471:109): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13214 comm="syz.9.1999" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f130c98f749 code=0x7ffc0000 [ 526.014107][ C0] vkms_vblank_simulate: vblank timer overrun [ 526.024296][ T28] audit: type=1326 audit(1763672093.511:110): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13214 comm="syz.9.1999" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f130c98f749 code=0x7ffc0000 [ 526.046687][ C0] vkms_vblank_simulate: vblank timer overrun [ 526.053230][ T28] audit: type=1326 audit(1763672093.511:111): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13214 comm="syz.9.1999" exe="/root/syz-executor" sig=0 arch=c000003e syscall=317 compat=0 ip=0x7f130c98f749 code=0x7ffc0000 [ 526.075947][ T28] audit: type=1326 audit(1763672093.551:112): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13214 comm="syz.9.1999" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f130c98f749 code=0x7ffc0000 [ 526.098315][ C0] vkms_vblank_simulate: vblank timer overrun [ 526.106620][ T28] audit: type=1326 audit(1763672093.551:113): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13214 comm="syz.9.1999" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f130c98f749 code=0x7ffc0000 [ 526.129207][ C0] vkms_vblank_simulate: vblank timer overrun [ 526.847648][ T51] Bluetooth: hci0: command tx timeout [ 527.670300][T13226] syzkaller0: entered promiscuous mode [ 527.675797][T13226] syzkaller0: entered allmulticast mode [ 527.778490][T13094] bridge0: port 1(bridge_slave_0) entered blocking state [ 527.804525][T13094] bridge0: port 1(bridge_slave_0) entered disabled state [ 527.836020][T13094] bridge_slave_0: entered allmulticast mode [ 527.843687][T13094] bridge_slave_0: entered promiscuous mode [ 527.860500][T13094] bridge0: port 2(bridge_slave_1) entered blocking state [ 527.878119][T13094] bridge0: port 2(bridge_slave_1) entered disabled state [ 527.885528][T13094] bridge_slave_1: entered allmulticast mode [ 527.896706][T13094] bridge_slave_1: entered promiscuous mode [ 527.963792][T13233] netlink: 20 bytes leftover after parsing attributes in process `syz.4.2004'. [ 528.202775][ T1301] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 528.276566][T13254] siw: device registration error -23 [ 528.405782][T13094] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 528.572970][ T1301] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 528.605740][T13094] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 528.698536][T13094] team0: Port device team_slave_0 added [ 528.865234][ T1301] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 529.045443][ T1301] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 529.075744][T13094] team0: Port device team_slave_1 added [ 529.326017][T13094] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 529.355338][T13094] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 529.426820][T13094] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 529.458122][T13094] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 529.470482][T13094] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 529.497886][T13094] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 529.704096][T13094] hsr_slave_0: entered promiscuous mode [ 529.734896][T13094] hsr_slave_1: entered promiscuous mode [ 529.745775][T13094] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 529.761827][T13094] Cannot create hsr debugfs directory [ 530.207966][T13289] netem: change failed [ 530.554131][T13301] netlink: 28 bytes leftover after parsing attributes in process `syz.4.2020'. [ 530.583267][T13301] netlink: 28 bytes leftover after parsing attributes in process `syz.4.2020'. [ 531.025436][T13306] syz.9.2021 (13306): drop_caches: 2 [ 531.072098][T13320] siw: device registration error -23 [ 531.444875][ T1301] tipc: Left network mode [ 531.473922][ T1301] tipc: Left network mode [ 531.644405][ T1301] ip6gretap0 (unregistering): left promiscuous mode [ 531.849676][ T1301] ip6gretap0 (unregistering): left promiscuous mode [ 532.746877][T13365] input: syz1 as /devices/virtual/input/input25 [ 533.025536][T13372] hub 9-0:1.0: USB hub found [ 533.039337][T13372] hub 9-0:1.0: 1 port detected [ 533.257544][ T1301] gretap0 (unregistering): left promiscuous mode [ 533.922918][T13094] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 533.943147][T13094] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 533.959969][T13094] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 534.199524][T13392] syz.9.2042 (13392): drop_caches: 2 [ 534.224732][T13094] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 534.607837][T13356] Bluetooth: hci1: command 0x0406 tx timeout [ 534.614023][T13356] Bluetooth: hci3: command 0x0406 tx timeout [ 535.159941][T13094] 8021q: adding VLAN 0 to HW filter on device bond0 [ 535.280770][ T1301] bond0: left promiscuous mode [ 535.285796][ T1301] bond_slave_0: left promiscuous mode [ 535.298682][ T1301] bond_slave_1: left promiscuous mode [ 535.317072][T13432] siw: device registration error -23 [ 535.370925][ T1301] hsr_slave_0: left promiscuous mode [ 535.388532][ T1301] hsr_slave_1: left promiscuous mode [ 535.394863][ T1301] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 535.411610][ T1301] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 535.429084][ T1301] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 535.454750][ T1301] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 535.511126][ T1301] bridge_slave_1: left allmulticast mode [ 535.535544][ T1301] bridge_slave_1: left promiscuous mode [ 535.557996][ T1301] bridge0: port 2(bridge_slave_1) entered disabled state [ 535.583326][ T1301] bridge_slave_0: left allmulticast mode [ 535.599964][ T1301] bridge_slave_0: left promiscuous mode [ 535.614220][ T1301] bridge0: port 1(bridge_slave_0) entered disabled state [ 535.678694][ T1301] bridge0: left promiscuous mode [ 535.870359][ T1301] hsr_slave_0: left promiscuous mode [ 535.883817][ T1301] hsr_slave_1: left promiscuous mode [ 535.909148][ T1301] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 535.925110][ T1301] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 535.946917][ T1301] bridge_slave_1: left allmulticast mode [ 535.954024][ T1301] bridge_slave_1: left promiscuous mode [ 535.961148][ T1301] bridge0: port 2(bridge_slave_1) entered disabled state [ 535.971509][ T1301] bridge_slave_0: left allmulticast mode [ 535.977291][ T1301] bridge_slave_0: left promiscuous mode [ 535.983579][ T1301] bridge0: port 1(bridge_slave_0) entered disabled state [ 536.082297][ T1301] veth1_macvtap: left promiscuous mode [ 536.088203][ T1301] veth0_macvtap: left promiscuous mode [ 536.094665][ T1301] veth1_vlan: left promiscuous mode [ 536.100264][ T1301] veth0_vlan: left promiscuous mode [ 537.720815][ T5898] usb 10-1: new high-speed USB device number 19 using dummy_hcd [ 537.784111][ T1301] team0 (unregistering): Port device team_slave_1 removed [ 537.844258][ T1301] team0 (unregistering): Port device team_slave_0 removed [ 537.884329][ T5898] usb 10-1: device descriptor read/64, error -71 [ 537.903040][ T1301] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 537.958015][ T1301] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 538.169911][ T5898] usb 10-1: new high-speed USB device number 20 using dummy_hcd [ 538.327741][ T5898] usb 10-1: device descriptor read/64, error -71 [ 538.453515][ T5898] usb usb10-port1: attempt power cycle [ 538.528299][ T1301] bond0 (unregistering): Released all slaves [ 538.870759][ T5898] usb 10-1: new high-speed USB device number 21 using dummy_hcd [ 538.929033][ T5898] usb 10-1: device descriptor read/8, error -71 [ 539.203901][ T5898] usb 10-1: new high-speed USB device number 22 using dummy_hcd [ 539.227878][ T1301] team0 (unregistering): Port device team_slave_1 removed [ 539.241497][ T5898] usb 10-1: device descriptor read/8, error -71 [ 539.283689][ T1301] team0 (unregistering): Port device team_slave_0 removed [ 539.337174][ T1301] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 539.367810][ T5898] usb usb10-port1: unable to enumerate USB device [ 539.397298][ T1301] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 539.975880][ T1301] bond0 (unregistering): Released all slaves [ 540.085766][T13463] netlink: 20 bytes leftover after parsing attributes in process `syz.4.2059'. [ 540.242467][T13094] 8021q: adding VLAN 0 to HW filter on device team0 [ 540.284817][ T2920] bridge0: port 1(bridge_slave_0) entered blocking state [ 540.292080][ T2920] bridge0: port 1(bridge_slave_0) entered forwarding state [ 540.355481][T11222] bridge0: port 2(bridge_slave_1) entered blocking state [ 540.362699][T11222] bridge0: port 2(bridge_slave_1) entered forwarding state [ 541.161817][T13094] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 541.303987][T13094] veth0_vlan: entered promiscuous mode [ 541.319442][T13094] veth1_vlan: entered promiscuous mode [ 541.345522][T13094] veth0_macvtap: entered promiscuous mode [ 541.363061][T13094] veth1_macvtap: entered promiscuous mode [ 541.409135][T13094] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 541.423053][T13094] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 541.433533][T13094] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 541.447120][T13094] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 541.459076][T13094] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 541.485859][T13094] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 541.564291][T13094] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 541.597953][T13094] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 541.633900][T13094] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 541.647166][T13094] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 541.676641][ T1301] IPVS: stop unused estimator thread 0... [ 541.705818][T13094] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 541.727298][ T1301] IPVS: stop unused estimator thread 0... [ 541.750289][T13094] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 541.792033][T13094] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 541.843700][T13094] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 542.092518][ T2929] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 542.127484][ T2929] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 542.203449][ T42] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 542.281296][ T42] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 542.737652][ T5831] usb 5-1: new high-speed USB device number 32 using dummy_hcd [ 542.853947][T13549] program syz.3.2078 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 542.935512][ T5831] usb 5-1: device descriptor read/64, error -71 [ 542.962617][T13549] syz.3.2078 (13549): drop_caches: 2 [ 543.123308][T13554] netlink: 20 bytes leftover after parsing attributes in process `syz.8.2079'. [ 543.217639][ T5831] usb 5-1: new high-speed USB device number 33 using dummy_hcd [ 543.457651][ T5831] usb 5-1: device descriptor read/64, error -71 [ 543.644081][ T5831] usb usb5-port1: attempt power cycle [ 544.067933][ T5831] usb 5-1: new high-speed USB device number 34 using dummy_hcd [ 544.159246][ T5831] usb 5-1: device descriptor read/8, error -71 [ 544.467635][ T5831] usb 5-1: new high-speed USB device number 35 using dummy_hcd [ 544.530118][ T5831] usb 5-1: device descriptor read/8, error -71 [ 544.688010][ T5831] usb usb5-port1: unable to enumerate USB device [ 545.882049][T13627] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2090'. [ 545.899074][T13627] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2090'. [ 545.908420][T13627] netlink: 'syz.4.2090': attribute type 30 has an invalid length. [ 545.922947][T13627] netdevsim netdevsim4 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 545.932205][T13627] netdevsim netdevsim4 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 545.941027][T13627] netdevsim netdevsim4 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 545.950048][T13627] netdevsim netdevsim4 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 546.548535][T13653] random: crng reseeded on system resumption [ 553.827543][ T5831] usb 9-1: new high-speed USB device number 22 using dummy_hcd [ 554.037920][ T5831] usb 9-1: Using ep0 maxpacket: 16 [ 554.049175][ T28] audit: type=1326 audit(1763672121.521:114): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13917 comm="syz.3.2170" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f6a3078f749 code=0x0 [ 554.071441][ C0] vkms_vblank_simulate: vblank timer overrun [ 554.093585][ T5831] usb 9-1: New USB device found, idVendor=05d1, idProduct=2001, bcdDevice=10.00 [ 554.111704][ T5831] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 554.120221][ T5831] usb 9-1: Product: syz [ 554.124417][ T5831] usb 9-1: Manufacturer: syz [ 554.134961][ T5831] usb 9-1: SerialNumber: syz [ 554.143347][ T5831] usb 9-1: config 0 descriptor?? [ 554.166995][ T5831] ftdi_sio 9-1:0.0: FTDI USB Serial Device converter detected [ 554.198093][ T5831] usb 9-1: Detected FT-X [ 554.254388][ T1301] netdevsim netdevsim9 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 554.375413][ T5831] ftdi_sio ttyUSB0: Unable to read latency timer: -32 [ 554.453462][ T1301] netdevsim netdevsim9 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 554.613671][ T1301] netdevsim netdevsim9 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 554.740701][ T1301] netdevsim netdevsim9 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 554.816154][ T5831] usb 9-1: FTDI USB Serial Device converter now attached to ttyUSB0 [ 555.004142][ T5838] usb 9-1: USB disconnect, device number 22 [ 555.078199][ T5838] ftdi_sio ttyUSB0: FTDI USB Serial Device converter now disconnected from ttyUSB0 [ 555.102288][ T5838] ftdi_sio 9-1:0.0: device disconnected [ 555.269825][T13947] netdevsim netdevsim4 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 555.279288][T13947] netdevsim netdevsim4 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 555.288432][T13947] netdevsim netdevsim4 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 555.297337][T13947] netdevsim netdevsim4 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 555.400991][ T5794] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 555.413907][ T5794] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 555.424151][ T5794] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 555.457199][ T5794] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 555.466158][ T5794] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 555.474915][ T5794] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 555.652978][T13949] lo speed is unknown, defaulting to 1000 [ 555.746051][ T28] audit: type=1326 audit(1763672123.231:115): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13961 comm="syz.4.2182" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f07ae98f749 code=0x0 [ 556.773905][T13949] chnl_net:caif_netlink_parms(): no params data found [ 557.319777][ T1301] hsr_slave_0: left promiscuous mode [ 557.343710][ T1301] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 557.372563][ T1301] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 557.429491][ T1301] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 557.447555][ T1301] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 557.511604][ T1301] bridge_slave_1: left allmulticast mode [ 557.520895][ T1301] bridge_slave_1: left promiscuous mode [ 557.536200][ T1301] bridge0: port 2(bridge_slave_1) entered disabled state [ 557.561806][ T1301] bridge_slave_0: left allmulticast mode [ 557.567965][ T5794] Bluetooth: hci3: command tx timeout [ 557.578110][ T1301] bridge_slave_0: left promiscuous mode [ 557.585207][ T1301] bridge0: port 1(bridge_slave_0) entered disabled state [ 557.659871][ T1301] veth1_macvtap: left promiscuous mode [ 557.666375][ T1301] veth0_macvtap: left promiscuous mode [ 557.683120][ T1301] veth1_vlan: left promiscuous mode [ 557.692931][ T1301] veth0_vlan: left promiscuous mode [ 559.605502][ T1301] team0 (unregistering): Port device team_slave_0 removed [ 559.652860][ T5794] Bluetooth: hci3: command tx timeout [ 559.677886][ T1301] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 559.740591][ T1301] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 560.445226][ T1301] bond0 (unregistering): Released all slaves [ 560.525023][T13949] bridge0: port 1(bridge_slave_0) entered blocking state [ 560.532293][T13949] bridge0: port 1(bridge_slave_0) entered disabled state [ 560.539593][T13949] bridge_slave_0: entered allmulticast mode [ 560.546391][T13949] bridge_slave_0: entered promiscuous mode [ 560.600766][T13949] bridge0: port 2(bridge_slave_1) entered blocking state [ 560.626534][T13949] bridge0: port 2(bridge_slave_1) entered disabled state [ 560.640624][T13949] bridge_slave_1: entered allmulticast mode [ 560.656070][T13949] bridge_slave_1: entered promiscuous mode [ 560.844645][T13949] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 560.883017][T13949] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 561.080842][T13949] team0: Port device team_slave_0 added [ 561.110950][T13949] team0: Port device team_slave_1 added [ 561.240791][T13949] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 561.268088][T13949] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 561.325510][T13949] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 561.364529][T13949] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 561.384389][T13949] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 561.444784][T13949] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 561.672025][T13949] hsr_slave_0: entered promiscuous mode [ 561.692653][T13949] hsr_slave_1: entered promiscuous mode [ 561.713480][T13949] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 561.731506][ T5794] Bluetooth: hci3: command tx timeout [ 561.754142][T13949] Cannot create hsr debugfs directory [ 562.446300][T14104] program syz.4.2217 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 562.659105][T14104] syz.4.2217 (14104): drop_caches: 2 [ 563.253106][ T1284] ieee802154 phy0 wpan0: encryption failed: -22 [ 563.259794][ T1284] ieee802154 phy1 wpan1: encryption failed: -22 [ 563.293314][T14140] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2223'. [ 563.807793][ T5794] Bluetooth: hci3: command tx timeout [ 564.613395][T13949] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 564.646943][T13949] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 564.691980][T13949] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 564.740723][T13949] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 564.765037][T14166] netlink: 'syz.3.2233': attribute type 6 has an invalid length. [ 564.977553][ T5892] usb 9-1: new high-speed USB device number 23 using dummy_hcd [ 564.989744][T13949] 8021q: adding VLAN 0 to HW filter on device bond0 [ 565.045315][T13949] 8021q: adding VLAN 0 to HW filter on device team0 [ 565.093925][ T2929] bridge0: port 1(bridge_slave_0) entered blocking state [ 565.101701][ T2929] bridge0: port 1(bridge_slave_0) entered forwarding state [ 565.143238][T14189] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 565.187701][ T5892] usb 9-1: Using ep0 maxpacket: 16 [ 565.202262][ T42] bridge0: port 2(bridge_slave_1) entered blocking state [ 565.209526][ T42] bridge0: port 2(bridge_slave_1) entered forwarding state [ 565.234401][ T5892] usb 9-1: New USB device found, idVendor=05d1, idProduct=2001, bcdDevice=10.00 [ 565.247632][ T5892] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 565.290549][ T5892] usb 9-1: Product: syz [ 565.294775][ T5892] usb 9-1: Manufacturer: syz [ 565.320027][ T5892] usb 9-1: SerialNumber: syz [ 565.345398][ T5892] usb 9-1: config 0 descriptor?? [ 565.356451][T13949] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 565.370630][ T5892] ftdi_sio 9-1:0.0: FTDI USB Serial Device converter detected [ 565.394556][ T5892] usb 9-1: Detected FT-X [ 565.585628][ T5892] ftdi_sio ttyUSB0: Unable to read latency timer: -32 [ 565.870678][T13949] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 565.907622][T14216] netlink: 40 bytes leftover after parsing attributes in process `syz.4.2246'. [ 566.011335][ T5892] ftdi_sio 9-1:0.0: GPIO initialisation failed: -71 [ 566.029477][ T5892] usb 9-1: FTDI USB Serial Device converter now attached to ttyUSB0 [ 566.053813][T13949] veth0_vlan: entered promiscuous mode [ 566.074987][ T5892] usb 9-1: USB disconnect, device number 23 [ 566.107673][ T5892] ftdi_sio ttyUSB0: FTDI USB Serial Device converter now disconnected from ttyUSB0 [ 566.120319][T13949] veth1_vlan: entered promiscuous mode [ 566.136821][T14224] netlink: 356 bytes leftover after parsing attributes in process `syz.4.2248'. [ 566.158283][ T5892] ftdi_sio 9-1:0.0: device disconnected [ 566.209781][T13949] veth0_macvtap: entered promiscuous mode [ 566.259136][T13949] veth1_macvtap: entered promiscuous mode [ 566.299864][T13949] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 566.323368][T13949] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 566.344832][T13949] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 566.381758][T13949] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 566.409707][T13949] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 566.426591][T13949] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 566.437535][T13949] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 566.453563][T13949] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 566.476897][T13949] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 566.509142][T13949] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 566.580542][T13949] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 566.608412][T13949] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 566.617314][T13949] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 566.626727][T13949] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 566.798034][ T11] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 566.805900][ T11] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 566.841201][ T28] audit: type=1326 audit(1763672134.321:116): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14249 comm="syz.3.2256" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f6a3078f749 code=0x0 [ 566.874868][ T11] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 566.890463][ T11] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 567.810672][T10757] usb 4-1: new high-speed USB device number 37 using dummy_hcd [ 568.007673][T10757] usb 4-1: Using ep0 maxpacket: 16 [ 568.022627][T10757] usb 4-1: New USB device found, idVendor=05d1, idProduct=2001, bcdDevice=10.00 [ 568.057617][T10757] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 568.085962][T10757] usb 4-1: Product: syz [ 568.109288][T10757] usb 4-1: Manufacturer: syz [ 568.113948][T10757] usb 4-1: SerialNumber: syz [ 568.140608][T10757] usb 4-1: config 0 descriptor?? [ 568.159708][T10757] ftdi_sio 4-1:0.0: FTDI USB Serial Device converter detected [ 568.180276][T10757] usb 4-1: Detected FT-X [ 568.374590][T10757] ftdi_sio ttyUSB0: Unable to read latency timer: -32 [ 568.697643][ T5794] Bluetooth: hci4: Opcode 0x1003 failed: -110 [ 568.704393][ T51] Bluetooth: hci4: command 0x1003 tx timeout [ 568.801899][T10757] ftdi_sio 4-1:0.0: GPIO initialisation failed: -71 [ 568.840757][T10757] usb 4-1: FTDI USB Serial Device converter now attached to ttyUSB0 [ 568.888047][T10757] usb 4-1: USB disconnect, device number 37 [ 568.938269][T10757] ftdi_sio ttyUSB0: FTDI USB Serial Device converter now disconnected from ttyUSB0 [ 568.961431][T10757] ftdi_sio 4-1:0.0: device disconnected [ 571.614468][ T42] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 571.846474][ T42] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 572.060705][ T42] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 572.171591][ T42] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 572.558500][ T5794] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 572.575571][ T5794] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 572.605469][ T5794] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 572.614841][ T5794] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 572.637758][ T5794] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 572.653146][ T5794] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 572.840525][T14397] lo speed is unknown, defaulting to 1000 [ 574.121799][T14441] IPVS: Error connecting to the multicast addr [ 574.169431][T14397] chnl_net:caif_netlink_parms(): no params data found [ 574.427654][ T42] hsr_slave_0: left promiscuous mode [ 574.492961][ T42] hsr_slave_1: left promiscuous mode [ 574.508360][ T42] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 574.561405][ T42] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 574.608287][ T42] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 574.666759][ T42] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 574.688216][ T42] bridge_slave_1: left allmulticast mode [ 574.693915][ T42] bridge_slave_1: left promiscuous mode [ 574.731925][ T42] bridge0: port 2(bridge_slave_1) entered disabled state [ 574.777974][ T5794] Bluetooth: hci3: command tx timeout [ 574.783325][ T42] bridge_slave_0: left allmulticast mode [ 574.783350][ T42] bridge_slave_0: left promiscuous mode [ 574.783550][ T42] bridge0: port 1(bridge_slave_0) entered disabled state [ 574.874049][T14462] 9pnet_fd: Insufficient options for proto=fd [ 574.996593][ T42] veth1_macvtap: left promiscuous mode [ 575.018611][ T42] veth0_macvtap: left promiscuous mode [ 575.034660][ T42] veth1_vlan: left promiscuous mode [ 575.047869][ T42] veth0_vlan: left promiscuous mode [ 575.217827][ T27] usb 5-1: new high-speed USB device number 36 using dummy_hcd [ 575.455522][ T27] usb 5-1: Using ep0 maxpacket: 16 [ 575.479941][ T27] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 575.516279][ T27] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 575.536813][ T27] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 575.559971][ T27] usb 5-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 575.685571][ T27] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 575.722322][ T27] usb 5-1: config 0 descriptor?? [ 575.950015][T10856] usb 9-1: new high-speed USB device number 24 using dummy_hcd [ 576.335379][ T27] microsoft 0003:045E:07DA.0004: unknown main item tag 0x0 [ 576.694905][ T27] microsoft 0003:045E:07DA.0004: unknown main item tag 0x0 [ 576.727675][ T27] microsoft 0003:045E:07DA.0004: unknown main item tag 0x0 [ 576.741940][ T27] microsoft 0003:045E:07DA.0004: unknown main item tag 0x0 [ 576.771359][ T27] microsoft 0003:045E:07DA.0004: unknown main item tag 0x0 [ 576.811992][ T27] input: HID 045e:07da as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/0003:045E:07DA.0004/input/input26 [ 576.872529][ T5794] Bluetooth: hci3: command tx timeout [ 577.077813][T10856] usb 9-1: Using ep0 maxpacket: 16 [ 577.102456][T10856] usb 9-1: New USB device found, idVendor=05d1, idProduct=2001, bcdDevice=10.00 [ 577.119418][T10856] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 577.127962][T10856] usb 9-1: Product: syz [ 577.132202][T10856] usb 9-1: Manufacturer: syz [ 577.136831][T10856] usb 9-1: SerialNumber: syz [ 577.158205][T10856] usb 9-1: config 0 descriptor?? [ 577.165839][T10856] ftdi_sio 9-1:0.0: FTDI USB Serial Device converter detected [ 577.214663][T10856] usb 9-1: Detected FT-X [ 577.346815][ T27] microsoft 0003:045E:07DA.0004: input,hidraw0: USB HID v0.00 Device [HID 045e:07da] on usb-dummy_hcd.4-1/input0 [ 577.393592][T10856] ftdi_sio ttyUSB0: Unable to read latency timer: -32 [ 577.435169][ T27] usb 5-1: USB disconnect, device number 36 [ 577.590436][T14493] fido_id[14493]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.4/usb5/5-1/report_descriptor': No such file or directory [ 577.851673][T10856] ftdi_sio 9-1:0.0: GPIO initialisation failed: -71 [ 577.860933][T10856] usb 9-1: FTDI USB Serial Device converter now attached to ttyUSB0 [ 577.903942][T10856] usb 9-1: USB disconnect, device number 24 [ 577.914975][T10856] ftdi_sio ttyUSB0: FTDI USB Serial Device converter now disconnected from ttyUSB0 [ 577.948069][T10856] ftdi_sio 9-1:0.0: device disconnected [ 577.983936][ T42] team0 (unregistering): Port device team_slave_1 removed [ 578.113730][ T42] team0 (unregistering): Port device team_slave_0 removed [ 578.186014][ T42] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 578.298358][ T42] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 579.027553][ T5794] Bluetooth: hci3: command tx timeout [ 580.106439][T14518] comedi comedi0: pcl711: I/O port conflict (0x6,16) [ 580.907729][ T5838] usb 9-1: new high-speed USB device number 25 using dummy_hcd [ 581.087570][ T5794] Bluetooth: hci3: command tx timeout [ 581.112392][ T5838] usb 9-1: Using ep0 maxpacket: 16 [ 581.151302][ T5838] usb 9-1: New USB device found, idVendor=05d1, idProduct=2001, bcdDevice=10.00 [ 582.049774][ T42] bond0 (unregistering): Released all slaves [ 582.527417][ C0] sched: RT throttling activated [ 582.528833][ T5838] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 582.556738][ T5838] usb 9-1: Product: syz [ 582.669148][ T5838] usb 9-1: Manufacturer: syz [ 582.673805][ T5838] usb 9-1: SerialNumber: syz [ 582.739128][ T5838] usb 9-1: config 0 descriptor?? [ 582.801032][ T5838] ftdi_sio 9-1:0.0: FTDI USB Serial Device converter detected [ 582.854149][ T5838] usb 9-1: Detected FT-X [ 583.012086][ T5838] ftdi_sio ttyUSB0: Unable to read latency timer: -32 [ 583.040078][T14397] bridge0: port 1(bridge_slave_0) entered blocking state [ 583.078648][T14397] bridge0: port 1(bridge_slave_0) entered disabled state [ 583.128057][T14397] bridge_slave_0: entered allmulticast mode [ 583.171995][T14397] bridge_slave_0: entered promiscuous mode [ 583.219807][T14397] bridge0: port 2(bridge_slave_1) entered blocking state [ 583.227027][T14397] bridge0: port 2(bridge_slave_1) entered disabled state [ 583.295543][T14397] bridge_slave_1: entered allmulticast mode [ 583.337924][T14397] bridge_slave_1: entered promiscuous mode [ 583.500383][ T5838] ftdi_sio 9-1:0.0: GPIO initialisation failed: -71 [ 583.535073][ T5838] usb 9-1: FTDI USB Serial Device converter now attached to ttyUSB0 [ 583.574013][ T5838] usb 9-1: USB disconnect, device number 25 [ 583.633802][ T5838] ftdi_sio ttyUSB0: FTDI USB Serial Device converter now disconnected from ttyUSB0 [ 583.681969][T14397] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 583.698146][ T5838] ftdi_sio 9-1:0.0: device disconnected [ 583.770874][T14397] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 584.049876][T14397] team0: Port device team_slave_0 added [ 584.159408][T14397] team0: Port device team_slave_1 added [ 584.425533][T14397] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 584.457063][T14397] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 584.489734][T14397] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 584.519655][T14397] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 584.536320][T14397] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 584.570388][T14397] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 584.868274][T14397] hsr_slave_0: entered promiscuous mode [ 584.883268][T14397] hsr_slave_1: entered promiscuous mode [ 584.917587][T14397] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 584.945605][T14397] Cannot create hsr debugfs directory [ 586.183347][T14397] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 587.324605][T14397] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 587.408498][T14587] netlink: 20 bytes leftover after parsing attributes in process `syz.4.2335'. [ 587.491735][T14397] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 587.577521][ T5838] usb 4-1: new high-speed USB device number 38 using dummy_hcd [ 587.625897][T14397] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 587.837645][ T5838] usb 4-1: Using ep0 maxpacket: 16 [ 587.871046][ T5838] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 587.923655][ T5838] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 587.957537][ T5838] usb 4-1: New USB device found, idVendor=1b1c, idProduct=1b02, bcdDevice= 0.00 [ 588.014938][T14397] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 588.015361][ T5838] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 588.039094][T14397] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 588.068813][ T5838] usb 4-1: config 0 descriptor?? [ 588.081186][T14397] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 588.134181][T14397] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 588.455295][T14621] syz.8.2339[14621] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 588.455453][T14621] syz.8.2339[14621] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 588.501879][T14397] 8021q: adding VLAN 0 to HW filter on device bond0 [ 588.565188][T14397] 8021q: adding VLAN 0 to HW filter on device team0 [ 588.599705][ T11] bridge0: port 1(bridge_slave_0) entered blocking state [ 588.606946][ T11] bridge0: port 1(bridge_slave_0) entered forwarding state [ 588.681511][ T42] bridge0: port 2(bridge_slave_1) entered blocking state [ 588.688780][ T42] bridge0: port 2(bridge_slave_1) entered forwarding state [ 588.693076][ T5838] corsair 0003:1B1C:1B02.0005: unknown main item tag 0x0 [ 588.705414][ T5838] corsair 0003:1B1C:1B02.0005: unknown main item tag 0x0 [ 588.713304][ T5838] corsair 0003:1B1C:1B02.0005: unknown main item tag 0x0 [ 588.720577][ T5838] corsair 0003:1B1C:1B02.0005: unknown main item tag 0x0 [ 588.728141][ T5838] corsair 0003:1B1C:1B02.0005: unknown main item tag 0x0 [ 588.747947][ T5838] corsair 0003:1B1C:1B02.0005: hidraw0: USB HID v0.00 Device [HID 1b1c:1b02] on usb-dummy_hcd.3-1/input0 [ 589.146051][ T5838] corsair 0003:1B1C:1B02.0005: Read invalid backlight brightness: 88. [ 589.498084][ T5838] usb 4-1: USB disconnect, device number 38 [ 589.609827][T14628] fido_id[14628]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.3/usb4/report_descriptor': No such file or directory [ 590.024427][T14397] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 590.738590][T14645] bridge0: port 2(bridge_slave_1) entered disabled state [ 590.746366][T14645] bridge0: port 1(bridge_slave_0) entered disabled state [ 591.100396][T14645] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 591.126922][T14645] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 591.242907][T14645] netdevsim netdevsim3 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 591.294266][T14645] netdevsim netdevsim3 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 591.311761][T14645] netdevsim netdevsim3 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 592.040410][T14645] netdevsim netdevsim3 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 592.303179][T14397] veth0_vlan: entered promiscuous mode [ 592.403842][T14397] veth1_vlan: entered promiscuous mode [ 593.098798][T14397] veth0_macvtap: entered promiscuous mode [ 593.144685][T14680] netdevsim netdevsim4: Direct firmware load for þ failed with error -2 [ 593.202030][T14397] veth1_macvtap: entered promiscuous mode [ 593.230699][T14397] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 593.277477][T14680] netdevsim netdevsim4: Falling back to sysfs fallback for: þ [ 593.300397][T14397] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 593.344823][T14397] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 593.431410][T14397] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 593.447036][T14397] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 593.468091][T14397] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 593.476617][T14692] warning: `syz.3.2351' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211 [ 593.518892][T14397] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 593.543945][T14397] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 593.574810][T14397] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 593.597562][T14397] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 593.865249][T11222] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 593.886871][T11222] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 593.940295][ T2929] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 593.955890][ T2929] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 595.350737][T14719] bridge0: port 2(bridge_slave_1) entered disabled state [ 595.358518][T14719] bridge0: port 1(bridge_slave_0) entered disabled state [ 596.340164][T14719] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 596.439861][T14719] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 596.717635][ T5897] usb 5-1: new full-speed USB device number 37 using dummy_hcd [ 596.779577][T14719] netdevsim netdevsim0 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 596.789256][T14719] netdevsim netdevsim0 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 596.798901][T14719] netdevsim netdevsim0 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 596.808266][T14719] netdevsim netdevsim0 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 596.906747][ T5897] usb 5-1: config 0 has an invalid interface number: 128 but max is 0 [ 596.937315][ T5897] usb 5-1: config 0 has no interface number 0 [ 596.964861][ T5897] usb 5-1: New USB device found, idVendor=20b7, idProduct=1540, bcdDevice=b7.5a [ 596.983592][ T5897] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 597.000914][ T5897] usb 5-1: Product: syz [ 597.008522][ T5897] usb 5-1: Manufacturer: syz [ 597.018860][ T5897] usb 5-1: SerialNumber: syz [ 597.030915][ T5897] usb 5-1: config 0 descriptor?? [ 597.869283][ T5897] usb 5-1: Firmware version (0.0) predates our first public release. [ 597.925506][ T5897] usb 5-1: Please update to version 0.2 or newer [ 598.650423][ T5897] usb 5-1: USB disconnect, device number 37 [ 599.167523][T13356] Bluetooth: hci2: command 0x0406 tx timeout [ 600.482083][ T5795] hid-generic 0000:0000:0000.0006: unknown main item tag 0x0 [ 600.534989][T14818] program syz.3.2374 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 600.557849][ T5795] hid-generic 0000:0000:0000.0006: hidraw0: HID v0.00 Device [syz1] on syz0 [ 600.773532][T14831] fido_id[14831]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 600.819488][T14818] syz.3.2374 (14818): drop_caches: 2 [ 602.733715][T14874] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2384'. [ 603.674564][T14886] program syz.4.2388 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 604.385283][T14886] syz.4.2388 (14886): drop_caches: 2 [ 608.800635][ T5795] IPVS: starting estimator thread 0... [ 608.897788][T14989] IPVS: using max 17 ests per chain, 40800 per kthread [ 610.760661][T15009] netlink: 56 bytes leftover after parsing attributes in process `syz.8.2413'. [ 614.543536][T15065] binder: 15063:15065 ioctl c018620c 200000000000 returned -22 [ 614.748460][T15069] netlink: 12 bytes leftover after parsing attributes in process `syz.8.2425'. [ 619.010013][T15136] comedi comedi0: pcl711: I/O port conflict (0x6,16) [ 619.795344][ T28] audit: type=1800 audit(1763672187.281:117): pid=15156 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.8.2444" name="bus" dev="overlay" ino=1191 res=0 errno=0 [ 619.816037][ C1] vkms_vblank_simulate: vblank timer overrun [ 620.656173][T15166] netlink: 32 bytes leftover after parsing attributes in process `syz.3.2446'. [ 622.148194][T14664] usb 5-1: new high-speed USB device number 38 using dummy_hcd [ 622.402611][T14664] usb 5-1: Using ep0 maxpacket: 16 [ 622.749822][T14664] usb 5-1: New USB device found, idVendor=05d1, idProduct=2001, bcdDevice=10.00 [ 622.767657][T14664] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 622.778247][T14664] usb 5-1: Product: syz [ 622.782650][T14664] usb 5-1: Manufacturer: syz [ 622.788244][T14664] usb 5-1: SerialNumber: syz [ 622.798037][T14664] usb 5-1: config 0 descriptor?? [ 622.809431][T14664] ftdi_sio 5-1:0.0: FTDI USB Serial Device converter detected [ 622.824015][T14664] usb 5-1: Detected FT-X [ 623.038420][T14664] ftdi_sio ttyUSB0: Unable to read latency timer: -32 [ 623.692347][T14664] ftdi_sio 5-1:0.0: GPIO initialisation failed: -71 [ 624.094436][T14664] usb 5-1: FTDI USB Serial Device converter now attached to ttyUSB0 [ 624.107185][T14664] usb 5-1: USB disconnect, device number 38 [ 624.137575][T14664] ftdi_sio ttyUSB0: FTDI USB Serial Device converter now disconnected from ttyUSB0 [ 624.147668][T14664] ftdi_sio 5-1:0.0: device disconnected [ 624.734915][ T1284] ieee802154 phy0 wpan0: encryption failed: -22 [ 624.743737][ T1284] ieee802154 phy1 wpan1: encryption failed: -22 [ 625.997666][T14664] usb 5-1: new high-speed USB device number 39 using dummy_hcd [ 626.100363][T15264] comedi comedi0: pcl711: I/O port conflict (0x6,16) [ 626.870024][T14664] usb 5-1: Using ep0 maxpacket: 32 [ 626.879683][T14664] usb 5-1: New USB device found, idVendor=0c72, idProduct=000d, bcdDevice=27.9b [ 626.889593][T14664] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 626.897665][T14664] usb 5-1: Product: syz [ 626.901878][T14664] usb 5-1: Manufacturer: syz [ 626.906458][T14664] usb 5-1: SerialNumber: syz [ 626.918163][T14664] usb 5-1: config 0 descriptor?? [ 627.611812][T14664] peak_usb 5-1:0.0 can0: unable to request usb[type=0 value=0] err=-71 [ 627.620446][T14664] peak_usb 5-1:0.0: unable to read PCAN-USB Pro bootloader info (err -71) [ 627.860882][T14664] peak_usb: probe of 5-1:0.0 failed with error -71 [ 627.959693][T14664] usb 5-1: USB disconnect, device number 39 [ 628.831366][T15313] comedi comedi3: 8255: I/O port conflict (0x404f26,4) [ 628.841955][T15313] comedi comedi3: 8255: I/O port conflict (0x5,4) [ 628.852264][T15313] comedi comedi3: 8255: I/O port conflict (0x2,4) [ 628.859672][T15313] comedi comedi3: 8255: I/O port conflict (0xc,4) [ 628.868066][T15313] comedi comedi3: 8255: I/O port conflict (0x5c95239c,4) [ 628.875251][T15313] comedi comedi3: 8255: I/O port conflict (0x5,4) [ 628.883242][T15313] comedi comedi3: 8255: I/O port conflict (0x3bf,4) [ 628.893259][T15313] comedi comedi3: 8255: I/O port conflict (0x1,4) [ 628.900154][T15313] comedi comedi3: 8255: I/O port conflict (0x20000001,4) [ 628.907984][T15313] comedi comedi3: 8255: I/O port conflict (0x9,4) [ 628.914980][T15313] comedi comedi3: 8255: I/O port conflict (0x6,4) [ 628.922763][T15313] comedi comedi3: 8255: I/O port conflict (0x4,4) [ 628.933499][T15313] comedi comedi3: 8255: I/O port conflict (0x400,4) [ 628.943680][T15313] comedi comedi3: 8255: I/O port conflict (0x6,4) [ 629.060757][T14664] usb 5-1: new high-speed USB device number 40 using dummy_hcd [ 629.533490][ T28] audit: type=1800 audit(1763672197.021:118): pid=15322 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.2481" name="bus" dev="overlay" ino=159 res=0 errno=0 [ 629.608146][T14664] usb 5-1: Using ep0 maxpacket: 8 [ 629.620085][T14664] usb 5-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 56832, setting to 1024 [ 629.656396][T14664] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024 [ 629.685287][T14664] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 629.748816][T14664] usb 5-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 629.795959][T14664] usb 5-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 629.846312][T14664] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 630.157185][T15309] netlink: 48 bytes leftover after parsing attributes in process `syz.4.2478'. [ 630.248719][T14664] usb 5-1: usb_control_msg returned -32 [ 630.282726][T14664] usbtmc 5-1:16.0: can't read capabilities [ 632.065334][T15363] Bluetooth: MGMT ver 1.22 [ 632.875258][T14661] usb 5-1: USB disconnect, device number 40 [ 634.306309][T15395] CIFS: No dialect specified on mount. Default has changed to a more secure dialect, SMB2.1 or later (e.g. SMB3.1.1), from CIFS (SMB1). To use the less secure SMB1 dialect to access old servers which do not support SMB3.1.1 (or even SMB3 or SMB2.1) specify vers=1.0 on mount. [ 634.728237][T15395] CIFS: VFS: CIFS mount error: No usable UNC path provided in device string! [ 634.821473][T15392] overlayfs: failed to resolve './file0': -2 [ 636.471399][T15421] binder: 15420:15421 ioctl c0306201 200000000680 returned -14 [ 637.227572][T10858] usb 5-1: new high-speed USB device number 41 using dummy_hcd [ 637.440478][T10858] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 637.498799][T10858] usb 5-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 637.573243][T10858] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 637.620064][T10858] usb 5-1: config 0 descriptor?? [ 640.353615][T15471] binder: BINDER_SET_CONTEXT_MGR already set [ 640.371553][T15471] binder: 15469:15471 ioctl 4018620d 200000000100 returned -16 [ 640.417909][T15471] binder: BINDER_SET_CONTEXT_MGR already set [ 640.437687][T15471] binder: 15469:15471 ioctl 4018620d 2000000002c0 returned -16 [ 643.273066][T10858] usbhid 5-1:0.0: can't add hid device: -32 [ 643.287601][T10858] usbhid: probe of 5-1:0.0 failed with error -32 [ 645.553258][T15521] comedi comedi0: pcl711: I/O port conflict (0x6,16) [ 645.737694][T14661] usb 9-1: new full-speed USB device number 26 using dummy_hcd [ 645.964365][T14661] usb 9-1: config 0 has an invalid interface number: 1 but max is 0 [ 646.018594][T14661] usb 9-1: config 0 has no interface number 0 [ 646.024776][T14661] usb 9-1: New USB device found, idVendor=0b48, idProduct=1005, bcdDevice=8c.1e [ 646.034481][T14663] usb 5-1: USB disconnect, device number 41 [ 646.067430][T14661] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 646.091029][T14661] usb 9-1: config 0 descriptor?? [ 646.119112][T14661] usb 9-1: selecting invalid altsetting 1 [ 646.126525][T14661] dvb_ttusb_budget: ttusb_init_controller: error [ 646.176128][T14661] dvbdev: DVB: registering new adapter (Technotrend/Hauppauge Nova-USB) [ 647.247718][T15542] comedi comedi0: pcl711: I/O port conflict (0x6,16) [ 647.672115][T14661] DVB: Unable to find symbol cx22700_attach() [ 649.944138][T14661] DVB: Unable to find symbol tda10046_attach() [ 649.955451][T14661] dvb_ttusb_budget: no frontend driver found for device [0b48:1005] [ 650.048927][T14661] usb 9-1: USB disconnect, device number 26 [ 650.951709][T15564] comedi comedi0: pcl711: I/O port conflict (0x6,16) [ 654.075262][T15599] comedi comedi0: pcl711: I/O port conflict (0x6,16) [ 654.622178][T15625] comedi comedi0: pcl711: I/O port conflict (0x6,16) [ 659.428230][ T5160] udevd[5160]: worker [15622] terminated by signal 33 (Unknown signal 33) [ 662.253272][ T2929] hsr_slave_0: left promiscuous mode [ 662.260666][ T2929] hsr_slave_1: left promiscuous mode [ 662.266765][ T2929] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 662.275171][ T2929] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 662.283811][ T2929] bridge_slave_1: left allmulticast mode [ 662.289885][ T2929] bridge_slave_1: left promiscuous mode [ 662.295652][ T2929] bridge0: port 2(bridge_slave_1) entered disabled state [ 662.312040][ T2929] bridge_slave_0: left allmulticast mode [ 662.322327][ T2929] bridge_slave_0: left promiscuous mode [ 662.329725][ T2929] bridge0: port 1(bridge_slave_0) entered disabled state [ 662.923151][ T2929] team0 (unregistering): Port device team_slave_1 removed [ 662.995089][ T2929] team0 (unregistering): Port device team_slave_0 removed [ 663.045821][ T2929] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 663.102177][ T2929] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 663.658955][ T2929] bond0 (unregistering): Released all slaves [ 664.029487][ T2929] IPVS: stop unused estimator thread 0...