last executing test programs: 1m4.820413617s ago: executing program 4 (id=744): mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x0) pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r1, &(0x7f0000009ec0)=ANY=[@ANYBLOB="1500000065ffff097b000008003950323030302e4c"], 0x15) r2 = dup(r1) write$FUSE_BMAP(r2, &(0x7f0000000100)={0x18, 0x0, 0x0, {0x2}}, 0x18) write$FUSE_DIRENTPLUS(r2, &(0x7f0000000440)=ANY=[], 0xb0) write$FUSE_NOTIFY_RETRIEVE(r2, &(0x7f00000000c0)={0x14c}, 0x137) mount$9p_fd(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000b80), 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r0, @ANYBLOB=',wfdno=', @ANYRESHEX=r2]) chdir(&(0x7f0000000100)='./file0\x00') creat(&(0x7f0000000040)='./file0\x00', 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x9, '\x00', 0x0, @fallback=0x2b, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) mount$9p_fd(0x0, &(0x7f0000000500)='./file0\x00', &(0x7f0000000100), 0x0, &(0x7f0000000a40)) utimensat(0xffffffffffffff9c, &(0x7f0000000340)='.\x00', 0x0, 0x0) 1m4.604963418s ago: executing program 4 (id=747): getsockopt$SO_COOKIE(0xffffffffffffffff, 0x1, 0x39, &(0x7f0000000100), 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000500)=0x1) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) sched_setaffinity(r0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) ioctl$sock_SIOCGPGRP(0xffffffffffffffff, 0x8904, 0x0) r2 = socket(0x10, 0x3, 0x0) sendto$inet6(r2, &(0x7f0000000200)="7f00000018002507b9409b14ffff0b7a0204be04050714056406040c5c0005003f0006182a0000000d0085a102000000000000003610648d49935ade4a460c89b6ec0cff3959547f509058ba86c902007a00004a32000400160008030a0000000000e000e218d1ddf603000000523250b1eae26d992a38f1c42caee28c5aea", 0x7f, 0x0, 0x0, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff) openat$cgroup_procs(0xffffffffffffffff, &(0x7f0000000040)='tasks\x00', 0x2, 0x0) write$cgroup_pid(0xffffffffffffffff, 0x0, 0x0) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r2, 0x89f1, &(0x7f00000000c0)={'syztnl0\x00', &(0x7f0000000240)={'ip6_vti0\x00', 0x0, 0x29, 0xa, 0x1, 0xfffff122, 0x4, @local, @private0={0xfc, 0x0, '\x00', 0x1}, 0x8, 0x8, 0xb48, 0x3}}) io_setup(0x30, 0x0) openat$qrtrtun(0xffffffffffffff9c, &(0x7f0000000180), 0x0) ioctl$SNDRV_SEQ_IOCTL_SET_PORT_INFO(0xffffffffffffffff, 0x40a85323, &(0x7f0000000300)={{0x7, 0x17}, 'port1\x00', 0x8, 0x10, 0x8, 0x9, 0x4d6, 0x7fff, 0x5b7, 0x0, 0x1, 0x38}) r3 = syz_usb_connect(0x2, 0x24, &(0x7f0000004200)=ANY=[@ANYBLOB="12010000e2793f10d10501200002000000010902120001000000"], 0x0) syz_usb_control_io(r3, 0x0, &(0x7f0000000c40)={0x84, &(0x7f0000000d00)=ANY=[@ANYBLOB="40154c00000003bfa5289a55293f"], &(0x7f0000000880)={0x0, 0xa, 0x1}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r4 = openat$cgroup_pressure(0xffffffffffffffff, &(0x7f0000000000)='cpu.pressure\x00', 0x2, 0x0) pwritev2(r4, 0x0, 0x0, 0x80000000, 0x0, 0x6) 1m1.36460213s ago: executing program 4 (id=757): mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x0) pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r1, &(0x7f0000009ec0)=ANY=[@ANYBLOB="1500000065ffff097b000008003950323030302e4c"], 0x15) r2 = dup(r1) write$FUSE_BMAP(r2, &(0x7f0000000100)={0x18, 0x0, 0x0, {0x2}}, 0x18) write$FUSE_DIRENTPLUS(r2, &(0x7f0000000440)=ANY=[@ANYBLOB], 0xb0) write$FUSE_NOTIFY_RETRIEVE(r2, &(0x7f00000000c0)={0x14c}, 0x137) mount$9p_fd(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000b80), 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r0, @ANYBLOB=',wfdno=', @ANYRESHEX=r2]) chdir(&(0x7f0000000100)='./file0\x00') creat(&(0x7f0000000040)='./file0\x00', 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x9, '\x00', 0x0, @fallback=0x2b, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) mount$9p_fd(0x0, &(0x7f0000000500)='./file0\x00', &(0x7f0000000100), 0x0, &(0x7f0000000a40)) utimensat(0xffffffffffffff9c, &(0x7f0000000340)='.\x00', 0x0, 0x0) 59.387393607s ago: executing program 4 (id=762): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000200)={0x34, 0x3e, 0x107, 0xfffffffe, 0x0, {0x1, 0x7c}, [@nested={0x4, 0x142}, @nested={0xc, 0x1, 0x0, 0x1, [@typed={0x6, 0x6, 0x0, 0x0, @str='\x80\n'}]}, @nested={0x10, 0x2, 0x0, 0x1, [@nested={0xc, 0x15, 0x0, 0x1, [@nested={0x8, 0x1, 0x0, 0x1, [@nested={0x4, 0x19}]}]}]}]}, 0x34}, 0x1, 0x0, 0x0, 0x404c0c0}, 0x2000c000) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000500)=@base={0x9, 0x5, 0x8, 0x6}, 0x50) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000001c0)={0xd, 0x4, &(0x7f0000000040)=@framed={{}, [@ldst={0x1, 0x0, 0x3, 0x9, 0x1, 0x80}]}, &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xf}, 0x80) r2 = syz_open_procfs(0x0, &(0x7f0000000200)='smaps\x00') r3 = fanotify_init(0x8, 0x0) fanotify_mark(r3, 0x1, 0x40000011, r2, 0x0) r4 = syz_open_procfs(0x0, &(0x7f00000000c0)='task\x00') readv(r4, &(0x7f0000000140)=[{&(0x7f0000001240)=""/4096, 0x1000}, {0x0}], 0x2) bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x6, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000020000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000019007b8af8ff00000000bfa200000000000007020000fbffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000900)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 59.008792493s ago: executing program 4 (id=765): setsockopt$SO_BINDTODEVICE(0xffffffffffffffff, 0x1, 0x19, &(0x7f0000000040)='veth1_virt_wifi\x00', 0x10) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x28, &(0x7f00000001c0)=0x7004, 0x4) r0 = dup(0xffffffffffffffff) prlimit64(0x0, 0xe, &(0x7f00000007c0)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0x1}], 0x1) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) socket(0x2, 0x80805, 0x0) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) r2 = socket(0x2a, 0x2, 0x0) r3 = socket$packet(0x11, 0x3, 0x300) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r3, 0x8933, &(0x7f0000000080)={'batadv0\x00', 0x0}) ioctl$sock_SIOCOUTQ(r3, 0x5411, 0x0) sendto$packet(r3, &(0x7f0000000240)="f2435f203b000000000000000000", 0xe, 0x0, &(0x7f0000000200)={0x11, 0x0, r4, 0x1, 0x0, 0x6, @remote}, 0x14) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000080)=ANY=[@ANYBLOB="3c00000013000100000000000000000000000002", @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\n\x00', @ANYRES32=r4, @ANYBLOB="1400350064756d6d7930"], 0x3c}}, 0x0) ioctl$SIOCSIFMTU(r2, 0x8922, &(0x7f0000000080)={'dummy0\x00'}) syz_genetlink_get_family_id$devlink(&(0x7f0000000080), r0) sendmsg$inet(r0, &(0x7f0000000780)={&(0x7f0000000100)={0x2, 0x0, @multicast1}, 0x10, &(0x7f0000001600)=[{&(0x7f0000000000)="be39", 0xffeb}], 0x1, &(0x7f0000000c80)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @local, @private}}}], 0xf}, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x17, 0x7, 0x8c, 0x401, 0x1bcd9, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x3, 0x0, 0x1}, 0x50) r6 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r6, &(0x7f0000000100)={0x1f, 0xffff, 0x3}, 0x6) write$binfmt_misc(r6, &(0x7f0000000000), 0xd) read$FUSE(r0, &(0x7f0000001e40)={0x2020}, 0x2020) 58.714501026s ago: executing program 4 (id=768): sched_setscheduler(0x0, 0x1, 0x0) (async) r0 = getpid() sched_setscheduler(r0, 0x2, 0x0) (async) connect$unix(0xffffffffffffffff, 0x0, 0x0) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x2, 0x0) (async) fcntl$lock(0xffffffffffffffff, 0x24, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) (async) r2 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r2, 0x8933, &(0x7f00000000c0)={'vxcan1\x00', 0x0}) (async) setsockopt$SO_J1939_ERRQUEUE(r2, 0x6b, 0x4, &(0x7f0000000300)=0x1, 0x4) bind$can_j1939(r2, &(0x7f0000000380)={0x1d, r3, 0x0, {0x2, 0xf0, 0x4}, 0xfe}, 0x18) (async) setsockopt$sock_int(r2, 0x1, 0x6, &(0x7f0000000040)=0x1, 0x4) sendmsg$inet(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000003c0)=[{&(0x7f0000000540)="81b641f1f3843704b6", 0x9}], 0x1}, 0x4048001) (async) setsockopt$SO_TIMESTAMPING(r2, 0x1, 0x25, &(0x7f0000000580)=0x3eba, 0x4) (async) sendmsg$nl_route_sched(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000440)=@newtfilter={0x24, 0x11, 0x1, 0x70bd28, 0x0, {0x0, 0x0, 0x74, r3, {0xfffd, 0xffeb}, {0x1, 0x1}, {0xfff2, 0xd}}}, 0x24}, 0x1, 0xf0ffffffffffff, 0x0, 0x4012}, 0x850) (async) sendmmsg$inet6(0xffffffffffffffff, 0x0, 0x0, 0x10) (async) r4 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000340)={0x1, &(0x7f0000000000)=[{0x6, 0xf, 0x0, 0x7fff8000}]}) close_range(r4, 0xffffffffffffffff, 0x0) (async) r5 = syz_usbip_server_init(0x0) r6 = socket$igmp6(0xa, 0x3, 0x2) setsockopt$IP6T_SO_SET_REPLACE(r6, 0x29, 0x40, &(0x7f0000000b00)=@raw={'raw\x00', 0x8, 0x3, 0x428, 0xd0, 0xffffffff, 0xffffffff, 0x0, 0xffffffff, 0x358, 0xffffffff, 0xffffffff, 0x358, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@private0, @mcast2, [], [], 'veth0_macvtap\x00', 'dvmrp1\x00'}, 0x0, 0xa8, 0xd0}, @common=@unspec=@NFQUEUE0={0x28}}, {{@ipv6={@remote, @ipv4={'\x00', '\xff\xff', @dev}, [], [], 'wg1\x00', 'gre0\x00'}, 0x0, 0x258, 0x288, 0x0, {}, [@common=@inet=@hashlimit1={{0x58}, {'pim6reg\x00', {0x0, 0x0, 0x5, 0x0, 0x0, 0x7, 0x3ff}}}, @common=@inet=@hashlimit3={{0x158}, {'wg1\x00', {0x3, 0x0, 0x41, 0x0, 0x0, 0x1000, 0x6, 0x3}}}]}, @common=@unspec=@CONNMARK={0x30}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28, '\x00', 0x7}}}}, 0x488) (async) mlockall(0x3) (async) writev(0xffffffffffffffff, &(0x7f00000000c0)=[{&(0x7f0000000040)="390000fa461ad7e48489bffa560200130011186809fc071200000f0000ff3f21000000170a001700e0da8979d2fc6ca9e48270faf047105bc79e0b9971bcbedac0eead49dbecf96eebb1fdc2a85f4728f28690f68bfafb9c6299ad", 0x5b}], 0x1) r7 = syz_open_dev$sg(&(0x7f0000001600), 0x0, 0x22c01) setreuid(0x0, 0xee00) (async) ioctl$SCSI_IOCTL_SEND_COMMAND(r7, 0x1, &(0x7f0000000000)=ANY=[@ANYRESOCT=r5]) (async) socket(0xa, 0x3, 0x87) (async) r8 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r8, 0x0) syz_emit_ethernet(0x4a, &(0x7f0000000100)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaaaaaaabb86dd6056040000142c675e7d00000000001000000000000000aafe8000000000000000000000000000aa00004e224fed9c545933959213630895568287b93932e9ff458f7061e71f3cc7c62e26cf580b7cb9c82bb4596fe307286e184567aec825a3b30eb5c0c28679277b1950d0378d21c19694963765e1070246b7dbe0672376248e7d2e66c6b6811893bf5520e44ac526cac890254d39c6db6d562aa26335e9936f01e8ac7b7e1129cb2b9c76d3230a13fc23a4d4f3036645ea0a2e16064cd033691e5580822239ad0c9cad2138b9f8a4d33f282c75", @ANYRES32=0x41424344, @ANYRES32=0x41424344, @ANYBLOB="50c2000090780004"], 0x0) 42.192352235s ago: executing program 32 (id=768): sched_setscheduler(0x0, 0x1, 0x0) (async) r0 = getpid() sched_setscheduler(r0, 0x2, 0x0) (async) connect$unix(0xffffffffffffffff, 0x0, 0x0) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x2, 0x0) (async) fcntl$lock(0xffffffffffffffff, 0x24, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) (async) r2 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r2, 0x8933, &(0x7f00000000c0)={'vxcan1\x00', 0x0}) (async) setsockopt$SO_J1939_ERRQUEUE(r2, 0x6b, 0x4, &(0x7f0000000300)=0x1, 0x4) bind$can_j1939(r2, &(0x7f0000000380)={0x1d, r3, 0x0, {0x2, 0xf0, 0x4}, 0xfe}, 0x18) (async) setsockopt$sock_int(r2, 0x1, 0x6, &(0x7f0000000040)=0x1, 0x4) sendmsg$inet(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000003c0)=[{&(0x7f0000000540)="81b641f1f3843704b6", 0x9}], 0x1}, 0x4048001) (async) setsockopt$SO_TIMESTAMPING(r2, 0x1, 0x25, &(0x7f0000000580)=0x3eba, 0x4) (async) sendmsg$nl_route_sched(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000440)=@newtfilter={0x24, 0x11, 0x1, 0x70bd28, 0x0, {0x0, 0x0, 0x74, r3, {0xfffd, 0xffeb}, {0x1, 0x1}, {0xfff2, 0xd}}}, 0x24}, 0x1, 0xf0ffffffffffff, 0x0, 0x4012}, 0x850) (async) sendmmsg$inet6(0xffffffffffffffff, 0x0, 0x0, 0x10) (async) r4 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000340)={0x1, &(0x7f0000000000)=[{0x6, 0xf, 0x0, 0x7fff8000}]}) close_range(r4, 0xffffffffffffffff, 0x0) (async) r5 = syz_usbip_server_init(0x0) r6 = socket$igmp6(0xa, 0x3, 0x2) setsockopt$IP6T_SO_SET_REPLACE(r6, 0x29, 0x40, &(0x7f0000000b00)=@raw={'raw\x00', 0x8, 0x3, 0x428, 0xd0, 0xffffffff, 0xffffffff, 0x0, 0xffffffff, 0x358, 0xffffffff, 0xffffffff, 0x358, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@private0, @mcast2, [], [], 'veth0_macvtap\x00', 'dvmrp1\x00'}, 0x0, 0xa8, 0xd0}, @common=@unspec=@NFQUEUE0={0x28}}, {{@ipv6={@remote, @ipv4={'\x00', '\xff\xff', @dev}, [], [], 'wg1\x00', 'gre0\x00'}, 0x0, 0x258, 0x288, 0x0, {}, [@common=@inet=@hashlimit1={{0x58}, {'pim6reg\x00', {0x0, 0x0, 0x5, 0x0, 0x0, 0x7, 0x3ff}}}, @common=@inet=@hashlimit3={{0x158}, {'wg1\x00', {0x3, 0x0, 0x41, 0x0, 0x0, 0x1000, 0x6, 0x3}}}]}, @common=@unspec=@CONNMARK={0x30}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28, '\x00', 0x7}}}}, 0x488) (async) mlockall(0x3) (async) writev(0xffffffffffffffff, &(0x7f00000000c0)=[{&(0x7f0000000040)="390000fa461ad7e48489bffa560200130011186809fc071200000f0000ff3f21000000170a001700e0da8979d2fc6ca9e48270faf047105bc79e0b9971bcbedac0eead49dbecf96eebb1fdc2a85f4728f28690f68bfafb9c6299ad", 0x5b}], 0x1) r7 = syz_open_dev$sg(&(0x7f0000001600), 0x0, 0x22c01) setreuid(0x0, 0xee00) (async) ioctl$SCSI_IOCTL_SEND_COMMAND(r7, 0x1, &(0x7f0000000000)=ANY=[@ANYRESOCT=r5]) (async) socket(0xa, 0x3, 0x87) (async) r8 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r8, 0x0) syz_emit_ethernet(0x4a, &(0x7f0000000100)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaaaaaaabb86dd6056040000142c675e7d00000000001000000000000000aafe8000000000000000000000000000aa00004e224fed9c545933959213630895568287b93932e9ff458f7061e71f3cc7c62e26cf580b7cb9c82bb4596fe307286e184567aec825a3b30eb5c0c28679277b1950d0378d21c19694963765e1070246b7dbe0672376248e7d2e66c6b6811893bf5520e44ac526cac890254d39c6db6d562aa26335e9936f01e8ac7b7e1129cb2b9c76d3230a13fc23a4d4f3036645ea0a2e16064cd033691e5580822239ad0c9cad2138b9f8a4d33f282c75", @ANYRES32=0x41424344, @ANYRES32=0x41424344, @ANYBLOB="50c2000090780004"], 0x0) 18.688551315s ago: executing program 5 (id=871): setsockopt$SO_BINDTODEVICE(0xffffffffffffffff, 0x1, 0x19, &(0x7f0000000040)='veth1_virt_wifi\x00', 0x10) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x28, &(0x7f00000001c0)=0x7004, 0x4) r0 = dup(0xffffffffffffffff) prlimit64(0x0, 0xe, &(0x7f00000007c0)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)}, {0x0}], 0x2) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) socket(0x2, 0x80805, 0x0) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) r2 = socket(0x2a, 0x2, 0x0) r3 = socket$packet(0x11, 0x3, 0x300) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r3, 0x8933, &(0x7f0000000080)={'batadv0\x00', 0x0}) ioctl$sock_SIOCOUTQ(r3, 0x5411, 0x0) sendto$packet(r3, &(0x7f0000000240)="f2435f203b000000000000000000", 0xe, 0x0, &(0x7f0000000200)={0x11, 0x0, r4, 0x1, 0x0, 0x6, @remote}, 0x14) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000080)=ANY=[@ANYBLOB="3c00000013000100000000000000000000000002", @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\n\x00', @ANYRES32=r4, @ANYBLOB="1400350064756d6d7930"], 0x3c}}, 0x0) ioctl$SIOCSIFMTU(r2, 0x8922, &(0x7f0000000080)={'dummy0\x00'}) syz_genetlink_get_family_id$devlink(&(0x7f0000000080), r0) sendmsg$inet(r0, &(0x7f0000000780)={&(0x7f0000000100)={0x2, 0x0, @multicast1}, 0x10, &(0x7f0000001600)=[{&(0x7f0000000000)="be39", 0xffeb}], 0x1, &(0x7f0000000c80)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @local, @private}}}], 0xf}, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x17, 0x7, 0x8c, 0x401, 0x1bcd9, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x3, 0x0, 0x1}, 0x50) r6 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r6, &(0x7f0000000100)={0x1f, 0xffff, 0x3}, 0x6) write$binfmt_misc(r6, &(0x7f0000000000), 0xd) read$FUSE(r0, &(0x7f0000001e40)={0x2020}, 0x2020) 17.841802856s ago: executing program 5 (id=873): mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) mount$fuse(0x0, &(0x7f0000002080)='./file0\x00', &(0x7f00000020c0), 0x0, &(0x7f0000002100)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) (async) r1 = socket$unix(0x1, 0x2, 0x0) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0}, &(0x7f0000cab000)=0xc) (async) r3 = socket(0x10, 0x3, 0x0) (async) r4 = openat2$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', &(0x7f0000000100)={0x672082, 0x1, 0x1}, 0x18) quotactl_fd$Q_SETINFO(r4, 0xffffffff80000600, r2, &(0x7f0000000140)={0x3, 0x80, 0x1}) (async) getsockopt$sock_cred(r3, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0}, &(0x7f0000cab000)=0xc) setresuid(r5, r5, 0x0) setresuid(r2, r2, r5) (async) syz_fuse_handle_req(r0, &(0x7f0000002180)="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", 0x2000, &(0x7f0000000f00)={&(0x7f0000000080)={0x50, 0x0, 0x200000000000, {0x7, 0x29, 0x7, 0xa110000, 0xc9f, 0xfff, 0x800, 0x8, 0x0, 0x0, 0x10, 0x400}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 17.656652594s ago: executing program 5 (id=875): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000000000000000000000000850000007d000000180100002020732600000000002020207b1af8ff00000000bfa100000000000007010000f8ffffff"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$MAP_CREATE(0x100000000000000, &(0x7f0000002380)=ANY=[@ANYBLOB="0a00000016000000b30000007f00000000000000", @ANYRES32, @ANYBLOB="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", @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) bpf$MAP_DELETE_ELEM(0x3, &(0x7f00000001c0)={r0, &(0x7f0000000040)}, 0x20) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000200)=ANY=[], 0xa0}}, 0x0) r1 = socket(0x10, 0x3, 0x0) r2 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000300)='net/igmp6\x00') read$FUSE(r2, &(0x7f0000000340)={0x2020}, 0x2020) preadv(r2, &(0x7f0000000100)=[{&(0x7f0000000140)=""/196, 0xc4}], 0x1, 0x200000, 0x0) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=ANY=[@ANYBLOB="24000000680001"], 0x24}, 0x1, 0x0, 0x0, 0x4}, 0x0) sendmmsg(r1, &(0x7f0000000000), 0x4000000000001f2, 0x0) sendmmsg$inet(0xffffffffffffffff, &(0x7f00000006c0)=[{{0x0, 0x0, 0x0}}, {{&(0x7f0000000180)={0x2, 0x4e24, @loopback}, 0x10, 0x0}}], 0x2, 0x0) r3 = socket$netlink(0x10, 0x3, 0x10) bind$netlink(r3, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) r4 = socket$netlink(0x10, 0x3, 0x10) bind$netlink(r4, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) setsockopt$sock_int(r4, 0x1, 0x8, &(0x7f0000000300), 0x4) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r4, 0x10e, 0x4, &(0x7f0000000040)=0x1800, 0x4) socket$nl_generic(0x10, 0x3, 0x10) r5 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r5, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000001ac0)={&(0x7f0000000000)=ANY=[@ANYBLOB="2c0000002d00010026bd7000fcdbdf2504"], 0x2c}, 0x1, 0x0, 0x0, 0x4000d}, 0x20008010) syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) r6 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r6, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000000)="2e00000010008188e6b62aa73772cc9f1ba1f848430000005e1406ca000000000e000a000f000000028000001294", 0x2e}], 0x1}, 0x0) openat$vnet(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) syz_usb_connect(0x0, 0x4f, &(0x7f0000000000)=ANY=[], 0x0) 17.538943227s ago: executing program 0 (id=876): syz_emit_ethernet(0x36, &(0x7f0000000080)={@local, @link_local, @void, {@ipv4={0x800, @udp={{0x6, 0x4, 0x0, 0x0, 0x28, 0x0, 0x0, 0x0, 0x11, 0x0, @empty, @empty, {[@timestamp={0x7, 0x4, 0x4}]}}, {0x0, 0x0, 0x10, 0x0, @gue={{0x2, 0x0, 0x0, 0xfe}}}}}}}, 0x0) syz_usb_connect$cdc_ncm(0x4, 0xd1, &(0x7f0000000040)=ANY=[@ANYBLOB="12011003020000182505a1a44000010203010902bf0002010650000900000000020d00000524060001082400a9b30d240f010a0000000300ff000606241a05001407240a050905580c240c00000000a90c0900030424020204240200042406024424"], 0x0) r0 = shmget$private(0x0, 0x3000, 0x54000000, &(0x7f0000ff8000/0x3000)=nil) shmat(r0, &(0x7f0000ffd000/0x2000)=nil, 0x4000) mbind(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x1, 0x0, 0x2, 0x1) mbind(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x0, 0x0, 0xfffffffffffffffd, 0x0) syz_usb_connect$cdc_ncm(0x7, 0x183, &(0x7f00000000c0)={{0x12, 0x1, 0x310, 0x2, 0x0, 0x0, 0x40, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x171, 0x2, 0x1, 0xff, 0x30, 0x9, {{0x9, 0x4, 0x0, 0x0, 0x1, 0x2, 0xd, 0x0, 0x0, {{0x9, 0x24, 0x6, 0x0, 0x1, "fb791d0c"}, {0x5}, {0xd, 0x24, 0xf, 0x1, 0x1, 0x8000, 0x9, 0x2}, {0x6, 0x24, 0x1a, 0x5, 0x1}, [@mdlm_detail={0xc6, 0x24, 0x13, 0x81, "8baaaf513dfe5f722d4a92b3789b8d784704e40a50c142c2f8e30c73dd60502e9c6411fef2e4cdf8579cb60bb2f5e91e486c2a5acd86c399e3b54435985ae368510d7acabf05523d53c7a5cacf2a403581e48548294b7ae6f406acd39d70f227fd9ea1fc20160e1469e378c24825f1c66d7c6485e8ea0df287f0f94235b72d30420703a4f98073cfca3e0a3b64bb19155b75a9550df18d7407e269dd3697b7ea2424560954a18f767950a706f0574dc77c823ea34758b0e40bf6465dc61f2a814998"}, @obex={0x5, 0x24, 0x15, 0x6}, @mbim_extended={0x8, 0x24, 0x1c, 0x16, 0x4, 0x6}, @mdlm={0x15, 0x24, 0x12, 0xc}, @mdlm_detail={0x29, 0x24, 0x13, 0xda, "68905c74e8c371a42efbfbf2ff3227b2fa9e60f39f9e81e6ac5e28a1ad8350d9dc79e6e54c"}]}, {{0x9, 0x5, 0x81, 0x3, 0x3ff, 0x0, 0x10, 0x4}}}, {}, {0x9, 0x4, 0x1, 0x1, 0x2, 0x2, 0xd, 0x0, 0x0, "", {{{0x9, 0x5, 0x82, 0x2, 0x400, 0x0, 0xff, 0x9}}, {{0x9, 0x5, 0x3, 0x2, 0x3ff, 0x0, 0x38, 0x2}}}}}}}]}}, &(0x7f00000003c0)={0xa, &(0x7f0000000280)={0xa, 0x6, 0x110, 0x8, 0xa, 0x7, 0xff, 0xe}, 0x5, &(0x7f00000002c0)={0x5, 0xf, 0x5}, 0x2, [{0x14, &(0x7f0000000300)=@string={0x14, 0x3, "ef1808bac826e3b3b6725e090dff33570e2c"}}, {0x73, &(0x7f0000000340)=@string={0x73, 0x3, "c98195de31f046f3d04a10c246f0e55822d5b2085d82241900379c962a55d8698429e08fc00330c6ef0be78b747ec25af4c05f6764523f7c3a37824c84923d33de828b920dd54de5a046328827b58ecb60ec9176b0b68363509e77862ac3500cb9bd2c8454cf55a80c76135a04e8be6b03"}}]}) (async) syz_usb_connect$cdc_ncm(0x7, 0x183, &(0x7f00000000c0)={{0x12, 0x1, 0x310, 0x2, 0x0, 0x0, 0x40, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x171, 0x2, 0x1, 0xff, 0x30, 0x9, {{0x9, 0x4, 0x0, 0x0, 0x1, 0x2, 0xd, 0x0, 0x0, {{0x9, 0x24, 0x6, 0x0, 0x1, "fb791d0c"}, {0x5}, {0xd, 0x24, 0xf, 0x1, 0x1, 0x8000, 0x9, 0x2}, {0x6, 0x24, 0x1a, 0x5, 0x1}, [@mdlm_detail={0xc6, 0x24, 0x13, 0x81, "8baaaf513dfe5f722d4a92b3789b8d784704e40a50c142c2f8e30c73dd60502e9c6411fef2e4cdf8579cb60bb2f5e91e486c2a5acd86c399e3b54435985ae368510d7acabf05523d53c7a5cacf2a403581e48548294b7ae6f406acd39d70f227fd9ea1fc20160e1469e378c24825f1c66d7c6485e8ea0df287f0f94235b72d30420703a4f98073cfca3e0a3b64bb19155b75a9550df18d7407e269dd3697b7ea2424560954a18f767950a706f0574dc77c823ea34758b0e40bf6465dc61f2a814998"}, @obex={0x5, 0x24, 0x15, 0x6}, @mbim_extended={0x8, 0x24, 0x1c, 0x16, 0x4, 0x6}, @mdlm={0x15, 0x24, 0x12, 0xc}, @mdlm_detail={0x29, 0x24, 0x13, 0xda, "68905c74e8c371a42efbfbf2ff3227b2fa9e60f39f9e81e6ac5e28a1ad8350d9dc79e6e54c"}]}, {{0x9, 0x5, 0x81, 0x3, 0x3ff, 0x0, 0x10, 0x4}}}, {}, {0x9, 0x4, 0x1, 0x1, 0x2, 0x2, 0xd, 0x0, 0x0, "", {{{0x9, 0x5, 0x82, 0x2, 0x400, 0x0, 0xff, 0x9}}, {{0x9, 0x5, 0x3, 0x2, 0x3ff, 0x0, 0x38, 0x2}}}}}}}]}}, &(0x7f00000003c0)={0xa, &(0x7f0000000280)={0xa, 0x6, 0x110, 0x8, 0xa, 0x7, 0xff, 0xe}, 0x5, &(0x7f00000002c0)={0x5, 0xf, 0x5}, 0x2, [{0x14, &(0x7f0000000300)=@string={0x14, 0x3, "ef1808bac826e3b3b6725e090dff33570e2c"}}, {0x73, &(0x7f0000000340)=@string={0x73, 0x3, "c98195de31f046f3d04a10c246f0e55822d5b2085d82241900379c962a55d8698429e08fc00330c6ef0be78b747ec25af4c05f6764523f7c3a37824c84923d33de828b920dd54de5a046328827b58ecb60ec9176b0b68363509e77862ac3500cb9bd2c8454cf55a80c76135a04e8be6b03"}}]}) syz_usb_connect(0x3, 0xf5, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000772aed408680070bb96c010203010902e30003dc2000000904003f000e01000505a40600010524007f000d240f0104000000080000000006241a03000a05240101070424020a1524120009a317a88b045e4f01a607c0ffcb7e392a09044c03003a92a2010a240109000102010205240401050c2402"], 0x0) (async) syz_usb_connect(0x3, 0xf5, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000772aed408680070bb96c010203010902e30003dc2000000904003f000e01000505a40600010524007f000d240f0104000000080000000006241a03000a05240101070424020a1524120009a317a88b045e4f01a607c0ffcb7e392a09044c03003a92a2010a240109000102010205240401050c2402"], 0x0) 14.022779034s ago: executing program 0 (id=889): socket$nl_route(0x10, 0x3, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000002180)='blkio.bfq.io_merged\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x12, r0, 0x0) syslog(0x2, &(0x7f00000004c0)=""/164, 0xa4) 13.977792521s ago: executing program 5 (id=890): r0 = syz_usb_connect$hid(0x2, 0x36, &(0x7f00000000c0)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x8, 0x2179, 0x77, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x5, 0x2, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x5}}}}]}}]}}, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0xe) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) mbind(&(0x7f0000001000/0x800000)=nil, 0x800000, 0x0, 0x0, 0x0, 0x2) madvise(&(0x7f0000657000/0x3000)=nil, 0x3000, 0x10) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000300)=@newtaction={0x74, 0x30, 0xb, 0xfffffffc, 0x0, {}, [{0x60, 0x1, [@m_skbmod={0x5c, 0x1, 0x0, 0x0, {{0xb}, {0x30, 0x2, 0x0, 0x1, [@TCA_SKBMOD_PARMS={0x24, 0x2, {{}, 0x80000000000}}, @TCA_SKBMOD_ETYPE={0x6, 0x5, 0x3}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x74}, 0x1, 0x0, 0x0, 0x4044800}, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f0000000000)={0x24, 0x0, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB='\x00\"\n'], 0x0}, 0x0) io_submit(0x0, 0x0, 0x0) 13.864855175s ago: executing program 0 (id=891): add_key(&(0x7f0000000140)='rxrpc\x00', 0x0, 0x0, 0x0, 0xfffffffffffffffe) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) capset(&(0x7f0000000000)={0x20080522}, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x81, 0xffffffff}) r3 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) r4 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000340)={0x1b, 0x0, 0x0, 0x40000, 0x0, r3, 0xfff, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x3}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x15, 0x1c, &(0x7f0000000100)=@ringbuf={{0x18, 0x8, 0x0, 0x0, 0x4000}, {{0x18, 0x1, 0x1, 0x0, r4}, {}, {0x7, 0x0, 0xb, 0x6}, {0x85, 0x0, 0x0, 0x5}}, {{0x5, 0x0, 0x3}}, [@snprintf={{0x7, 0x0, 0xb, 0x2}, {0x3, 0x3, 0x3, 0xa, 0x9}, {0x5, 0x0, 0xb, 0x9}, {0x3, 0x3, 0x3, 0xa, 0xa}, {0x6, 0x1, 0xa, 0x9, 0x8}, {0x7, 0x0, 0x0, 0x8}, {0x7, 0x1, 0xb, 0x4, 0x8}, {}, {0x7, 0x0, 0xc}, {0x18, 0x6, 0x2, 0x0, r3}, {}, {0x46, 0x8, 0xfff0, 0x76}}], {{0x7, 0x1, 0xb, 0x8}, {0x6, 0x0, 0x5, 0x8}, {0x85, 0x0, 0x0, 0x7}}}, &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0xd, '\x00', 0x0, @sk_reuseport=0x27, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 12.865642838s ago: executing program 0 (id=893): r0 = socket$kcm(0x10, 0x2, 0x4) close(r0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = accept4(r1, 0x0, &(0x7f0000000000), 0x80800) sendmsg$inet(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f00000003c0)=[{&(0x7f0000000140)="5c000000130025cc9e3be35c6e17aa31076b876c1d0000007ea60864160af36514000cc00800030007000200060019c00364bc24eab556a705251e618294ff0051f60a84c9f4d4938037e786a6d0001000000e4509c5bbcd72c6c953", 0x5c}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x0) 12.045140042s ago: executing program 0 (id=897): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r1}, 0x18) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x7) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbee2, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) bpf$PROG_LOAD(0x5, 0x0, 0x0) setsockopt$packet_fanout(0xffffffffffffffff, 0x107, 0x12, 0x0, 0x0) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000200)=ANY=[@ANYBLOB="58000000020601080000000000000000000000400500010006000000050005000200000005000400000000000900020073797a31000000000c000780080006400000000011000300686173683a6970"], 0x58}}, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0xa0b41, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_route(0x10, 0x3, 0x0) r6 = socket$inet6_udp(0xa, 0x2, 0x0) r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='cgroup.stat\x00', 0x275a, 0x0) write$UHID_CREATE2(r7, &(0x7f0000000080)=ANY=[@ANYRES32=r6], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1000001, 0x12, r7, 0x0) r8 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCL_GETKMSGREDIRECT(r8, 0x541c, &(0x7f0000000000)) sendmsg$NFT_BATCH(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000500)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a18010000060a0b0400000000000000000200000034000480300001800a0001006d617463680000002000028008000240000000030b000100736f636b6574000005000300d60000000900010073797a30000000000900020073797a3200000000b70007"], 0x140}, 0x1, 0x0, 0x0, 0x40480e0}, 0x4008014) 12.037324288s ago: executing program 2 (id=898): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) inotify_init() (async) r1 = syz_open_procfs(0x0, &(0x7f0000000040)='fdinfo/3\x00') pread64(r1, &(0x7f00000002c0)=""/239, 0xef, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000900)=ANY=[@ANYBLOB="14000000100001f2ff000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a318b16f91d000000002c000000030a010100000000000000000a000007093b8962e11fdbfc9200010073037a31000000000900030073797a320000800000000000110001", @ANYRESDEC=r1, @ANYRESHEX=r0, @ANYRES64=0x0, @ANYRESDEC=r1, @ANYRES8=0x0, @ANYBLOB="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"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x40010) (async) r2 = socket$packet(0x11, 0x3, 0x300) (async) r3 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r3, 0x107, 0xf, &(0x7f0000000100)=0x9, 0x4) (async) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f00000000c0)={'geneve0\x00', 0x0}) sendto$packet(r3, &(0x7f0000000180)="0b031200e0ff64120200475400f6a13bb1000000086086dd4803", 0x1a, 0x0, &(0x7f0000000140)={0x11, 0x8100, r4, 0x1, 0x2, 0x6, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x20}}, 0x14) (async) sendmsg$NFT_BATCH(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000000)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a44000000090a010400000000000000000a00000409000000080005400000000208000a40fffffffc0900020073797a50033749d446b6544000000001140000001100010000000000000000000100000a0000000000000000"], 0x6c}, 0x1, 0x0, 0x0, 0x240008d1}, 0x20008800) (async) bpf$BPF_PROG_ATTACH(0x8, &(0x7f0000000500)=ANY=[@ANYRES32=0x0, @ANYRES32, @ANYBLOB="42c18800005f0000a485db2812ab5eae08ab4fcc5469b6f3f07592580fa39cea14b9f961a9b58d7887b6b067999378e9f3c83db409f7a497513309fcfc2585568f608112919cc8a6c347147f9eb7b75be15058b24e99eb4e42acfe735456fd", @ANYRES32=0x0, @ANYBLOB, @ANYRES32=0x0, @ANYBLOB, @ANYRES64=0x0], 0x20) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) (async) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r5 = getpid() sched_setscheduler(r5, 0x0, &(0x7f0000000200)=0x800) (async) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f04ebbeee, 0x8031, 0xffffffffffffffff, 0x0) (async) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r6, &(0x7f000057eff8)=@abs, 0x6e) (async) sendmmsg$unix(r7, &(0x7f0000000000), 0x651, 0x0) (async, rerun: 64) recvmmsg(r0, &(0x7f00000000c0), 0x0, 0x2, 0x0) (rerun: 64) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) (async, rerun: 64) r8 = openat$udambuf(0xffffffffffffff9c, 0x0, 0x2) (rerun: 64) fcntl$addseals(0xffffffffffffffff, 0x409, 0x7) (async) r9 = ioctl$UDMABUF_CREATE(r8, 0x40187542, 0x0) fcntl$dupfd(r9, 0x406, r0) (async) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(0xffffffffffffffff, 0xc00c642e, 0x0) (async) close_range(r3, 0xffffffffffffffff, 0x2) r10 = bpf$MAP_CREATE(0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB="1e000000200c000010000000feffffff00420000", @ANYRES32, @ANYBLOB="06000000000000000000000000000000000000e6a2a9546338ab030dac00", @ANYRES32=r4, @ANYRES32, @ANYBLOB="0200000003000000010000000400"/28], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xe, &(0x7f0000000580)=ANY=[@ANYBLOB="18000000040000000000000004000000185a000006000000001e65d02b922d6c5f76b42e81960d0015731dff0c3ae58795623500"/65, @ANYRES32=r10, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000030000009500000000000000"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x4, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 10.440758022s ago: executing program 0 (id=900): openat$uinput(0xffffffffffffff9c, &(0x7f0000000080), 0x802, 0x0) (async) r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000040), 0x802, 0x0) write$uinput_user_dev(r0, &(0x7f00000005c0)={'syz0\x00', {0x3, 0x5, 0x8, 0x1}, 0x3c, [0x800, 0x6, 0x4, 0xf86b, 0x7d6d, 0x5, 0x80000000, 0x4, 0xfffffffe, 0x5, 0x8d, 0xacd8, 0x6, 0x6, 0x5, 0x80000000, 0x8, 0x8, 0x7, 0x7c, 0x101, 0x8e0, 0x8, 0x4, 0x9, 0x4b2, 0x5, 0x8, 0x10000, 0x7, 0x8, 0xf1d, 0x6, 0xfffffffc, 0x9, 0x8, 0x7, 0x3, 0x7, 0x0, 0x16, 0x495, 0x1, 0xfffffff7, 0x9, 0x8, 0x2, 0x549, 0x9, 0x414bb727, 0x2, 0x400, 0x631335d1, 0x3, 0x5, 0xf01, 0x6, 0x8, 0xfff, 0x1000, 0x7, 0x68e0, 0x5, 0xfffffffe], [0x7ff, 0xa, 0x9, 0xa, 0x10000, 0x1, 0x7fffffff, 0x3, 0x20002, 0xae5, 0x7, 0x998, 0x2, 0x2, 0x6, 0xfff, 0x9, 0x6, 0xfff, 0x3, 0x0, 0xbf, 0x3, 0x1, 0x1, 0x7fff, 0x9, 0xd, 0x7, 0x5, 0x4, 0x7, 0x0, 0x3, 0x4, 0x2, 0xa26, 0x4, 0x1, 0x6, 0x2, 0x0, 0x5, 0xa, 0x1ff, 0x7fffffff, 0x1, 0x7, 0xfffffff7, 0x7, 0x7fff, 0x2, 0x6c4fbf90, 0x8, 0x3ec3, 0x0, 0x241, 0x10, 0x0, 0x6, 0x80000000, 0x101, 0x485a, 0x1ff], [0x1, 0xce2, 0x5, 0x34841347, 0x0, 0x2, 0x3, 0x100, 0x5, 0x81, 0x0, 0x37f1, 0x0, 0x1, 0x41f1, 0x7, 0xe1ae, 0x3, 0x30e5, 0x7d7cde65, 0xfffffbff, 0x5159, 0x7f, 0xc5, 0x3ff, 0x401, 0x0, 0x80000001, 0x4, 0x6, 0xff, 0x8, 0x4, 0xd, 0x1, 0x1, 0xfffffffd, 0xfffffffb, 0x8, 0x1, 0xfffffffc, 0x4, 0x10001, 0x9, 0x3, 0x7, 0x5, 0x2, 0x2e, 0x7fffffff, 0x8, 0x1, 0x0, 0x1, 0x0, 0x2, 0xfffffea4, 0xd, 0x9, 0x80, 0x1, 0x4, 0x800], [0x8, 0xaed, 0xeb, 0x3, 0x8, 0xd, 0x2, 0x3, 0xb2ec, 0xfffffffe, 0xffffffff, 0x6, 0x7, 0x6a, 0xf55, 0x2, 0x2, 0x2, 0x10000, 0xd8, 0x0, 0x9, 0xc, 0xdfee, 0x4, 0x4, 0x0, 0xffffffff, 0xfffff801, 0xfffffffa, 0x4, 0x7, 0x7, 0xdc, 0x3e245fdf, 0x7, 0x38, 0x7fff, 0x5, 0x9, 0x3, 0x7, 0x0, 0x7fffffff, 0x6, 0x7c, 0x2, 0x7, 0x6, 0x9, 0x1, 0x10, 0x9, 0x9, 0x0, 0x9, 0x6, 0x80000001, 0x0, 0x2, 0x7fff8, 0x6, 0x8000]}, 0x45c) mount$tmpfs(0x0, &(0x7f0000000540)='./cgroup\x00', &(0x7f0000000580), 0x900408, &(0x7f0000000000)={[{@mpol={'mpol', 0x3d, {'interleave', '=relative', @val={0x3a, [0x3a]}}}}]}) r1 = open_tree(0xffffffffffffff9c, &(0x7f0000000100)='\x00', 0x89101) (async) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) setsockopt$ARPT_SO_SET_ADD_COUNTERS(r1, 0x0, 0x61, &(0x7f0000000140)={'filter\x00', 0x4}, 0x68) (async, rerun: 64) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) (rerun: 64) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) ioctl$KVM_TPR_ACCESS_REPORTING(r4, 0xc028ae92, 0x0) (async) syz_usb_connect$uac1(0x0, 0xa4, &(0x7f0000000200)=ANY=[@ANYBLOB="2a01000020000040b708000000000000030109029200030172e5000904000000010100000a24010000000201020c0d2407000005000000000000000c240000e9fffff5ffffffff092403f3ff000005024524", @ANYRES8=r1, @ANYBLOB="05", @ANYRES16=r1], 0x0) socket$inet6(0xa, 0x1, 0x0) (async) bpf$MAP_CREATE(0x1900000000000000, 0x0, 0x50) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) (async) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) (async) r5 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) (async) sched_setscheduler(r5, 0x2, &(0x7f0000000200)=0x6) (async) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x3000) (async) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r6, &(0x7f000057eff8)=@file={0x0, './file1\x00'}, 0x6e) (async) sendmmsg$unix(r7, &(0x7f0000000000), 0x651, 0x0) (async) recvmmsg(r6, &(0x7f00000000c0), 0x10106, 0x2, 0x0) (async) sched_setaffinity(0x0, 0x8, &(0x7f0000000240)=0x6) r8 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x11, 0x5, &(0x7f00000002c0)=ANY=[@ANYBLOB="18050000000000fe000000004b64ffec850000007d000000040000000700000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r8}, 0xc) (async, rerun: 32) r9 = socket$nl_route(0x10, 0x3, 0x0) (rerun: 32) sendmsg$nl_route(r9, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000000)=@can_newroute={0x3c, 0x18, 0x1, 0x0, 0x0, {}, [@CGW_MOD_AND={0x15, 0x1, {{{}, 0x0, 0x0, 0x0, 0x0, "7d7408e707adb5a5"}, 0x5}}, @CGW_CS_XOR={0x8, 0x5, {0x1, 0x0, 0xfffffffffffffffb}}, @CGW_MOD_UID={0x8, 0xe, 0xee01}]}, 0x3c}, 0x1, 0x0, 0x0, 0x10}, 0x0) (async, rerun: 32) ioctl$VT_RESIZE(0xffffffffffffffff, 0x5609, 0x0) (async, rerun: 32) sendmsg$nl_xfrm(0xffffffffffffffff, 0x0, 0x0) 10.294536461s ago: executing program 5 (id=903): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0x6, 0xe, &(0x7f00000008c0)=ANY=[@ANYBLOB="b7020000f10d0000bfa30000000000000703000000feffff7a0af0fff8ffff1971a4f0ff00000000b7060000080000006f6400000000000045040400010000001704000001000a00b7040000ff0100006a0a00fe0000000085000000be000000b70000000000000095000000000000009e17f199a68b06d83298a8cdc21ce784909b849d5550ad857d0454d8877a6db61d69f2ffcaa10350e11cb97c8adf1bc9a0c4eeceb9971e43405d621ffbc9ce000000d8ca56b50d0c010d631f6dde53a9a53608c10556e5734eb84049761451ce540c772e2d9f8004e26f7fcc059c062234d5595f6fbaa187b81d1106000000000fd60000fd9ac3d09e29a9d542ca9d85a5c9c88474895d679838def0a83a733dc6a39b63a5ed69d32394c53361d7e43c5cbd80450f859ce8122a79c3e40000b59b0fc46d6cec3c0802882add4e3179bd4a44f231b6d753a7be428ba953df4aece69311687f4122073a236c3a32efa04137d4524847d2638da3261c8162bb7c7824be6195a66d2e17e122040e1100000000928612a29fc691e4f1f7bd053abb885f39381f1759410b1059f05684261f332d606834669b49ec99320ca7712d7e79bd5bf5ed818ecc7640917f6a559a47db608fcf9f6c131b84e41c354c66838f72b9e12d36e996f316f0812ca83efb30c7f6c6d57c4a64590401eec22523dd712c680013e87f649a1ede7142ca9d5d8a8c9f9b440fe4331ad5532c74d9a31a5d737537f7a2caa30581253d14dd3e92af7dc836686365ae01bdec561c0402b67801267a8df97d2f85426a5963d4fa3e26cc05972c162f223f000000d999e80de00fcbcc02d0aed7bb8f7ba337d59c14f39dcd4aad4139ef6425a9367f1bd1467fc6b95a4df7669839771ce9d5788029901e5a79d8b9990ace8f74087f25ad50c46088000000008000"/686], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x3a, 0x10, &(0x7f0000000340)={0x0, 0xa}, 0xd58495bc, 0x0, 0xffffffffffffffff, 0x2dc2c9024f5022d2}, 0x29) socket$inet6_tcp(0xa, 0x1, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r2}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x102}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs={0x0, 0x0, 0xfffffffe}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) syz_usb_connect$cdc_ncm(0x0, 0x72, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000002000040257d15a440000104000109026000420100000009040000010209"], 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000004c0)=@can_newroute={0x154, 0x18, 0x1, 0x70bd2b, 0x0, {0x1d, 0x1, 0x3}, [@CGW_MOD_SET={0x15, 0x4, {{{0x1, 0x0, 0x0, 0x1}, 0x0, 0x1, 0x0, 0x0, "a67494fcd3a42289"}, 0x7}}, @CGW_CS_CRC8={0x11e, 0x6, {0x2, 0x1, 0x0, 0x0, 0x0, "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", 0x3, "5c8d586b2a88d81866930fca15c8a95d29e5b2ea"}}, @CGW_CS_XOR={0x8, 0x5, {0x0, 0xfa, 0x1e, 0xf9}}]}, 0x154}}, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000c80)={r0, 0x2000012, 0xff0, 0x0, &(0x7f0000000c40), 0x0, 0x7ffe, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 9.560463321s ago: executing program 2 (id=906): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x10, 0x0, 0x0, &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x59}, 0x94) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000280)=ANY=[@ANYBLOB="240000001e00700002000000020000000100000000000000080010000900000000000000"], 0x24}, 0x1, 0x0, 0x0, 0x2}, 0x4042894) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) syz_open_procfs$userns(0x0, &(0x7f0000000000)) fgetxattr(r0, &(0x7f0000000540)=ANY=[@ANYRESDEC=r1], &(0x7f0000000800)=""/147, 0x93) r2 = syz_io_uring_setup(0x450d, &(0x7f0000000440)={0x0, 0x807734, 0x2000, 0xfffffff8, 0xfe}, &(0x7f00000000c0)=0x0, &(0x7f00000002c0)=0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'syzkaller0\x00', 0xca58c30f81b6079f}) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0xa802, 0x0) close(r5) socket$netlink(0x10, 0x3, 0x0) ioctl$SIOCSIFHWADDR(r5, 0x8914, &(0x7f00000006c0)={'dvmrp0\x00', @broadcast}) r6 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) r8 = socket$netlink(0x10, 0x3, 0x0) r9 = openat$sndtimer(0xffffffffffffff9c, &(0x7f00000003c0), 0x42400) ioctl$SNDRV_TIMER_IOCTL_PARAMS(r9, 0x40505412, &(0x7f00000004c0)={0x0, 0x8, 0x9, 0x0, 0xd}) sendmsg$nl_route_sched(r8, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000007c0)={&(0x7f0000000680)=@gettclass={0x24, 0x2a, 0x129, 0x2, 0x25dfdbff, {0x0, 0x0, 0x0, r7, {0xb, 0xffff}, {0x0, 0xfff6}, {0x2, 0x4}}}, 0x24}, 0x1, 0x0, 0x0, 0x4000041}, 0x40004) bpf$BPF_GET_BTF_INFO(0xf, &(0x7f0000000780)={0xffffffffffffffff, 0x20, &(0x7f0000000300)={&(0x7f0000000080)=""/12, 0xc, 0x0, &(0x7f0000000700)=""/127, 0x7f}}, 0x10) syz_memcpy_off$IO_URING_METADATA_GENERIC(r3, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, &(0x7f0000000400)={0x1, &(0x7f0000000200)=[{0x29, 0x0, 0x0, 0x204}]}, 0x10) sendfile(r0, r2, &(0x7f0000000380), 0xffffffff) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) syz_io_uring_submit(r3, r4, &(0x7f0000000200)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x4004, @fd_index=0x7, 0x9, &(0x7f0000000140)=[{&(0x7f00000018c0)=""/228, 0xe4}, {&(0x7f00000019c0)=""/150, 0x96}, {&(0x7f00000008c0)=""/135, 0x87}], 0x3, 0x14}) io_uring_enter(r2, 0x47bc, 0x0, 0x0, 0x0, 0x0) open(&(0x7f00000000c0)='./file0\x00', 0x108843, 0x98) r10 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000580)='/proc/consoles\x00', 0x0, 0x0) pread64(r10, &(0x7f00000024c0)=""/209, 0xd1, 0x8) fcntl$setlease(0xffffffffffffffff, 0x400, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) 7.854730572s ago: executing program 2 (id=907): r0 = socket$inet6(0xa, 0x400000000001, 0x0) bind$inet6(r0, &(0x7f0000fa0fe4)={0xa, 0x4e20, 0x4, @loopback}, 0x1c) (async) sendto$inet6(r0, 0x0, 0xffffffac, 0x20000008, &(0x7f00000001c0)={0xa, 0x4e20, 0x0, @empty}, 0x1c) (async) sendmmsg$inet6(r0, &(0x7f0000000680)=[{{0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000040)='O', 0x1}], 0x1}}], 0x1, 0x48815) (async) sendto$inet6(r0, &(0x7f0000000040)="91", 0x1, 0x800, 0x0, 0x0) (async) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) (async) openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) (async) r1 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ipvs(&(0x7f0000000000), r1) (async) socket$vsock_stream(0x28, 0x1, 0x0) (async) socket(0x1e, 0x1, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x101901, 0x0) (async) madvise(&(0x7f0000ffa000/0x2000)=nil, 0x2000, 0xb) (async) socket$nl_route(0x10, 0x3, 0x0) pselect6(0x40, &(0x7f0000000280)={0x5, 0xcbf, 0x120000000000, 0x2, 0xef, 0x1, 0x1000000ffe, 0x49}, 0x0, &(0x7f0000000180)={0xc971, 0x7, 0x0, 0x9, 0x86, 0x800, 0x80000002}, 0x0, 0x0) (async) socket$inet_udplite(0x2, 0x2, 0x88) (async) r2 = fsopen(&(0x7f0000000100)='configfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r2, 0x6, 0x0, 0x0, 0x0) r3 = fsmount(r2, 0x0, 0x1) fchdir(r3) (async) r4 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) fchown(r4, 0x0, 0xee01) (async) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000340)=@newlink={0x20, 0x10, 0x403, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x88ac5fb5}}, 0x20}}, 0x0) 7.740815248s ago: executing program 3 (id=908): setsockopt$SO_BINDTODEVICE(0xffffffffffffffff, 0x1, 0x19, &(0x7f0000000040)='veth1_virt_wifi\x00', 0x10) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x28, &(0x7f00000001c0)=0x7004, 0x4) r0 = dup(0xffffffffffffffff) prlimit64(0x0, 0xe, &(0x7f00000007c0)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) mkdir(0x0, 0x0) socket(0x2, 0x80805, 0x0) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) r2 = socket(0x2a, 0x2, 0x0) r3 = socket$packet(0x11, 0x3, 0x300) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r3, 0x8933, &(0x7f0000000080)={'batadv0\x00', 0x0}) ioctl$sock_SIOCOUTQ(r3, 0x5411, 0x0) sendto$packet(r3, &(0x7f0000000240)="f2435f203b000000000000000000", 0xe, 0x0, &(0x7f0000000200)={0x11, 0x0, r4, 0x1, 0x0, 0x6, @remote}, 0x14) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000080)=ANY=[@ANYBLOB="3c00000013000100000000000000000000000002", @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\n\x00', @ANYRES32=r4, @ANYBLOB="1400350064756d6d7930"], 0x3c}}, 0x0) ioctl$SIOCSIFMTU(r2, 0x8922, &(0x7f0000000080)={'dummy0\x00'}) syz_genetlink_get_family_id$devlink(&(0x7f0000000080), r0) sendmsg$inet(r0, &(0x7f0000000780)={&(0x7f0000000100)={0x2, 0x0, @multicast1}, 0x10, &(0x7f0000001600)=[{&(0x7f0000000000)="be39", 0xffeb}], 0x1, &(0x7f0000000c80)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @local, @private}}}], 0xf}, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x17, 0x7, 0x8c, 0x401, 0x1bcd9, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x3, 0x0, 0x1}, 0x50) r6 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r6, &(0x7f0000000100)={0x1f, 0xffff, 0x3}, 0x6) write$binfmt_misc(r6, &(0x7f0000000000), 0xd) read$FUSE(r0, &(0x7f0000001e40)={0x2020}, 0x2020) 7.563837482s ago: executing program 2 (id=909): bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) unshare(0x20040600) sendmsg$NL80211_CMD_SET_CQM(0xffffffffffffffff, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000380)={0x64, 0x0, 0x0, 0x0, 0x0, {{}, {@void, @val={0xc}}}, [@NL80211_ATTR_CQM={0x44, 0x5e, 0x0, 0x1, [@NL80211_ATTR_CQM_TXE_RATE={0x8}, @NL80211_ATTR_CQM_TXE_INTVL={0x8, 0x7, 0x135}, @NL80211_ATTR_CQM_RSSI_LEVEL={0x8}, @NL80211_ATTR_CQM_RSSI_THOLD={0x10, 0x1, [0x0, 0x0, 0x0]}, @NL80211_ATTR_CQM_TXE_INTVL={0x8}, @NL80211_ATTR_CQM_RSSI_THOLD={0x8, 0x1, [0x7220]}, @NL80211_ATTR_CQM_TXE_INTVL={0x8}]}]}, 0x64}}, 0x0) r0 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000001ac0)=[{&(0x7f00000003c0)=ANY=[@ANYBLOB="140100001f000504000000000000000005"], 0x114}], 0x1}, 0x0) readahead(0xffffffffffffffff, 0x401, 0x6c9) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) read$FUSE(0xffffffffffffffff, &(0x7f000001b000)={0x2020, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x2020) prlimit64(r1, 0xe, &(0x7f0000000140)={0x5, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000100)=0x2) sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bce) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000002000)=""/102400, 0x19000) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_GET(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000002c0)={0x14, 0x1, 0x1, 0x5, 0x0, 0x0, {0x3}}, 0x14}, 0x1, 0x0, 0x0, 0x40000}, 0x10) mremap(&(0x7f0000064000/0x3000)=nil, 0x3000, 0x600000, 0x3, &(0x7f0000a00000/0x600000)=nil) r4 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) r5 = dup(r4) write$6lowpan_enable(r5, &(0x7f0000000000)='0', 0xfffffd2c) read$FUSE(r5, &(0x7f0000001740)={0x2020}, 0x2020) 6.556163098s ago: executing program 3 (id=911): socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xc, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x3) sched_setaffinity(0x0, 0x8, &(0x7f00000000c0)=0xa) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) ioprio_set$pid(0x2, 0x0, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) close(0xffffffffffffffff) socketpair$unix(0x1, 0x1, 0x0, 0x0) getpid() setreuid(0xee00, 0x0) setns(0xffffffffffffffff, 0x24020000) r1 = memfd_create(&(0x7f0000000b40)='\x9d#\x00\xe6Z\x00\xafq%\xa5\x83\xa6\xb5\x00\x83y\xf3\xb2\xe6b \x00\x00\x00\x00\x00\x00\x01\x00\x00\xf7\xffg\xf5\x12oP\xfe\xe6\xd2SLR\xa1\x00\x00\x17\x1f$^\xe1\x00\x00\x00\x00\x00\x00\a\xff;\xeb\xf1\xd0\xce\xe5\x19\x12\b\x01\xd9\xae>/\x05\x00\x00\x00\x15\x00\x00\x00\xa1\xa2\xe0g\x98\xbf*\xdcc\x12.\xb7\xbe`\'\xcb\xb6\xaf\xdc\xa0D\x93.\xf25\x957\xec\xfb\xe6|\\\xe4h\xfc\x14\x05\x00\xfd\xc7\x00\x00\x00\x00\x91\x98\x15\xec\xdb\xaa\t9\x11\xb4h$&0\xdd\x19\x86\x90\xbe\xd7\xdc\n\xcbC\x15\xfcp\x11\xdai\f{a?\xd0\xe1{\x84\xb5\x82q\x19\xacS\x88|\x99\xfd\x9eS\x80\xcb\x14G\xfa\xff\xff\xff\xff\xff\xff\xff\xcd\xf0%\x97!\xba\xe3J\xc2t\x96\xf8\xb1\xd2\x168\xbf`$\xbf\xca\xea\xa3\x83\x8e-k\x12\xdf\xb9q\xb6Pr\xd4\xb5X\\\xdbD\n\x03G\x00\x04\x00\x00\xbc\xac\x18\xba\xce\xb3%QF\x03\b\x9dh\xcb)\xf4f\x12[\xf9\r\t\xef{h\xb0\xc0:\x8f|\x8f\x06\xf8T\x826`M\x11\x1c\xb0*8\v\x1e\xcf\x03\xd3\xe8,?P\xac\x86\x13b\xa8D\x0f\x93\xab\x1c\x11\x00\xc5\x8d\x82\x9c\xd6B[\xc9\x00\xf5]\x81\xf3\xfd\x06M\xbe\xf9\xba\x9em\xe9\"\x03\x933P\x9b\xcc\x9b\f\xa7\x8f9\x988\tgC\xbc\xe0\xc5\xf4\xe0E%\xd9\xd8w\x00k\x042Y\xd9\xc5\xe59\xa95\xd1m\xd8hCuZYi\x10D\xb9\xe6\xff\x04K%yH\xe5\xf4\x8b\x03Ca8\x1e\xe9\\#\xf8O\fw\xd9\xf5cF\xcc\x1a2ex\xb4\x0fi$\x97\x81.\x02\x04m\xfbT2\xd4\"\x1e\xf0\x16\x0f\x97\xe6j}J\xca\xb8)f\xd5\xfd>\x9bU\xb0\x03Zt0\xc0b\xad\xef@o\xc1\xd6\x17T\f\xc30\xe2\x89\xf6L\x1b1\x9c\t\xa7\x80\x1b:\xbb\x04\xd7\xd1\x06\xa0\xe9\xbah\xb6\xb2\xea/{Q\xca\x14\x13\x9ajWt\xc9\xecd\r\xd5)\x1d\xaf\n\xc0\xc1\x1d}DY\x95&\xe7\xf4U\xff\xcd&\a\x9f\x1bg\xe5|~\xc1\xc5n\x12%ur\xa1\x9e`\xc2\x01\b,\x18\xaf\xccD\xdeag\xc6\xf3\xd6\x94\x9d\xae\x8bl\xee\x7fu\xe5bu\x84\x04\xb3@\xa1\xf7\xc6\x13\xf9I\xfa\x12\xfc\x96\",aT\xfd\"\x01\x92\xb1\xbf\x8a\x15\x88\xfd\x8f\x88\x87\x82\x9c:L\xd2\xb8\xfa5\x066\x82\xf3_LUr\xfa\xd2\x99d \x97c9G\x99\xe3\xcc$\x96cu\x97\xe7\xc7a\tm\xe8F\xc7j\xf8\x98\x81\xe7\xf7\xab3F\xf4u\xdaav\xd21\v\x99HG\xdfx\x1cPl\t#\xc1\x8e\xddW\x00'/668, 0x6) fcntl$addseals(r1, 0x409, 0xc) 5.372071425s ago: executing program 1 (id=912): r0 = syz_open_dev$swradio(&(0x7f0000000080), 0x1, 0x2) ioctl$VIDIOC_S_FMT(r0, 0xc0d05605, &(0x7f00000000c0)={0xb, @win={{0x38305543, 0x2, 0x418, 0x1}, 0x8, 0x7, 0x0, 0x4, 0x0, 0x1}}) ioctl$VIDIOC_UNSUBSCRIBE_EVENT(r0, 0x4020565b, &(0x7f0000000000)={0x1, 0xffffffff, 0x1}) 4.825718667s ago: executing program 3 (id=913): mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000040)='cgroup2\x00', 0x0, 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000180), 0x0, &(0x7f0000000140)={[{@metacopy_on}, {@lowerdir={'lowerdir', 0x3d, './file0'}, 0x3a}], [], 0x2f}) mknodat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0, 0x0) pipe2$9p(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r1, &(0x7f0000000300)=ANY=[@ANYBLOB="1500000065ffff017f000e0800395032303030"], 0x15) r2 = dup(r1) write$FUSE_BMAP(r2, &(0x7f0000000000)={0x18}, 0x18) write$FUSE_DIRENTPLUS(r2, &(0x7f00000003c0)=ANY=[@ANYBLOB="b0"], 0xb0) write$FUSE_GETXATTR(r2, &(0x7f00000004c0)={0x18}, 0x18) write$FUSE_INIT(r2, &(0x7f0000000200)={0x50, 0x0, 0x0, {0x7, 0x29, 0x20200}}, 0x50) mount$9p_fd(0x0, &(0x7f00000002c0)='./file0\x00', &(0x7f0000000080), 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r0, @ANYBLOB=',wfdno=', @ANYRESHEX=r2]) mkdir(&(0x7f0000000000)='./cgroup/../file0\x00', 0x0) r3 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r4 = openat$cgroup_int(r3, &(0x7f0000000040)='cpu.weight.nice\x00', 0x2, 0x0) write$cgroup_subtree(r4, &(0x7f0000000a40)=ANY=[@ANYBLOB='-3'], 0x27) mount$afs(0x0, 0x0, 0x0, 0x94d7d968962f501e, 0x0) r5 = openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x20842, 0x0) writev(r5, &(0x7f0000000000)=[{&(0x7f00000000c0)="14", 0x1f68}], 0x2) 4.457279316s ago: executing program 1 (id=914): r0 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x12, r0, 0x0) syslog(0x2, &(0x7f00000004c0)=""/164, 0xa4) 3.521521557s ago: executing program 2 (id=915): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r1, 0x8933, &(0x7f00000000c0)={'vcan0\x00', 0x0}) bind$can_j1939(r1, &(0x7f0000000340)={0x1d, r2, 0x0, {0x2, 0x0, 0x6}, 0xfe}, 0x18) prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0x8b}, 0x0) io_setup(0x8, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r3 = getpid() sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, 0x0, 0x0) ioctl$PTP_ENABLE_PPS(0xffffffffffffffff, 0x40043d04, 0x0) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x2c, &(0x7f0000000000)='/proc/sys/net/\x00\x00v4\x00\x00s/\x92ync_\x00le\xf44.\xab%nN\xd4\xa2\x88\x00\xd1l,'}, 0x30) r6 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000300)='./cgroup/syz1\x00', 0x200002, 0x0) fchdir(r6) r7 = open(&(0x7f00000000c0)='.\x00', 0x0, 0x0) getdents(r7, &(0x7f0000001fc0)=""/184, 0x20002078) setsockopt$sock_int(r1, 0x1, 0x6, &(0x7f0000000040)=0x1, 0x4) r8 = socket$nl_generic(0x10, 0x3, 0x10) r9 = syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_DEL_ADDR(r8, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000100)=ANY=[@ANYBLOB="20008000", @ANYRES16=r9, @ANYBLOB="01000000000000000000020000000c00018005000200ed000000"], 0x20}, 0x1, 0x0, 0x0, 0x8000}, 0x0) getpid() sendmsg$inet(r1, 0x0, 0x4048081) setsockopt$SO_J1939_FILTER(r1, 0x6b, 0x1, &(0x7f0000000580)=[{0x2, 0x2, {0x0, 0xf0}, {0x1, 0xf0, 0x2}, 0xfe, 0x2}, {0x2, 0x1, {0x2, 0x0, 0x1}, {0x0, 0x0, 0x2}, 0x2, 0x2}, {0x1, 0x0, {0x2, 0x1, 0x2}, {0x0, 0xff, 0x1}}], 0x60) sendmsg$nl_route_sched(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000440)=@newtfilter={0x24, 0x11, 0x1, 0x70bd28, 0x0, {0x0, 0x0, 0x74, r2, {0xfffd, 0xffeb}, {0x1, 0x1}, {0xfff2, 0xd}}}, 0x24}, 0x1, 0xf0ffffffffffff, 0x0, 0x4012}, 0x850) 3.520204083s ago: executing program 3 (id=916): r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@dellinkprop={0x38, 0x6d, 0x2ec9b2c728e3c67, 0x70bd24, 0x25dfdbff, {0x0, 0x0, 0x0, 0x0, 0x48198, 0x800}, [@IFLA_PROP_LIST={0x4}, @IFLA_IFNAME={0x14, 0x3, 'dummy0\x00'}]}, 0x38}, 0x1, 0x0, 0x0, 0x8000}, 0x0) r1 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r1, 0x10f, 0x87, &(0x7f0000000140)=@req3={0x7813, 0x3, 0x0, 0x81, 0x1ff, 0x1, 0x1}, 0x1c) ioctl$sock_ipv6_tunnel_SIOCADDPRL(r1, 0x89f5, &(0x7f0000000040)={'sit0\x00', &(0x7f0000000000)={@local, 0x0, 0x0, 0x20, 0x0, [{@local}, {@multicast1}]}}) socket(0xa, 0x3, 0x3a) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000002c0)={0x18, 0x24, 0x301, 0x70bd25, 0x2, {0x1}, [@nested={0x4, 0x137}]}, 0x18}, 0x1, 0x0, 0x0, 0x448d3}, 0x0) r3 = socket$alg(0x26, 0x5, 0x0) bind$alg(r3, &(0x7f00000018c0)={0x26, 'hash\x00', 0x0, 0x0, 'xxhash64\x00'}, 0x58) accept4(r3, 0x0, 0x0, 0x0) ioctl$BTRFS_IOC_BALANCE_PROGRESS(r3, 0x84009422, &(0x7f0000000c80)={0x0, 0x0, {0x0, @struct, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}, {}, {0x0, @usage, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}}) ioctl$BTRFS_IOC_GET_DEV_STATS(0xffffffffffffffff, 0xc4089434, &(0x7f0000001300)={r4, 0x9, 0x0, [0x10000, 0x200005, 0x1, 0x9, 0x9], [0x8000000000000000, 0x1, 0xffffffffffffffff, 0x5, 0xc, 0xfffffffffffffff8, 0x0, 0x7f, 0x0, 0xce, 0x91a, 0x3ff, 0x242, 0x3b, 0xe9, 0x9, 0xffffffffffffffff, 0x232, 0x2003, 0x1c00000, 0x5, 0xd1e, 0x8, 0x4, 0x4, 0x22, 0x400, 0xcc, 0x0, 0x8, 0x6, 0xfffffffffffffffd, 0x33, 0xfffffffffffffffe, 0xfffffffffffffff8, 0x9, 0x2, 0xeb95, 0x1, 0x3, 0x8, 0x401, 0x40, 0x4, 0x2, 0x81df244, 0x25bcdfd2, 0x6, 0x20000008a02, 0x2, 0x4, 0x3, 0x1, 0x0, 0x2, 0x90, 0xb3, 0x8, 0x8, 0x5, 0x1, 0x4, 0xa24, 0x0, 0xffffffffffffffff, 0x9, 0xdb7a, 0x7, 0xb, 0x3ff, 0x8, 0xfda2, 0xfff, 0x6, 0x2000000, 0x7, 0x18, 0x8, 0x7ff, 0x200, 0x9147, 0x10001, 0xff, 0x2, 0xb, 0x4, 0x1000, 0xd429, 0x2, 0x3, 0xe58, 0x10000, 0x1, 0x80, 0xffffffffffff8001, 0x6, 0x2, 0x4, 0x2421, 0xa, 0x5, 0x0, 0x7fffffffffffffff, 0x0, 0x7, 0x0, 0x7, 0x3, 0x3, 0x3, 0x5, 0x20e, 0xffffffffffffffff, 0x3, 0x8000, 0xff, 0x94, 0x4, 0x7, 0x8, 0xffffffff]}) ioctl$BTRFS_IOC_BALANCE_V2(r1, 0xc4009420, &(0x7f00000003c0)={0x15, 0x6, {0x1000, @usage=0x401, 0x0, 0x1, 0x14a7, 0x95a, 0x9, 0x388, 0x80, @usage=0x1, 0x253, 0x7, [0x3, 0xffff, 0x7, 0x1, 0xfffffffffffffffa, 0x7ff]}, {0x7, @struct={0x21deb335, 0x68}, 0x0, 0x6, 0x6, 0x7, 0x4, 0x3, 0x48, @usage=0x7fff, 0x3ff, 0xf9d, [0x1, 0x7, 0x0, 0x7, 0x7fffffff, 0xb]}, {0xfffffffffffffff7, @usage, r4, 0x5, 0x2, 0xb72b, 0x2, 0x2, 0x40, @struct={0x9, 0x7e}, 0x0, 0x7, [0xc, 0x3, 0x4, 0x2, 0xfffffffffffffffb, 0x1000]}, {0x2, 0x2, 0xffffffffffffffff}}) r5 = socket$inet6(0xa, 0x80002, 0x0) sendmmsg$inet6(r5, &(0x7f0000000640)=[{{&(0x7f0000000080)={0xa, 0x4e20, 0x7fff, @mcast1}, 0x1c, 0x0, 0x0, &(0x7f0000000300)=[@rthdrdstopts={{0x18}}], 0x18}}], 0x1, 0x1c00) ioctl$BTRFS_IOC_SCRUB_PROGRESS(0xffffffffffffffff, 0xc400941d, &(0x7f0000000100)={r4, 0x1, 0x5, 0x1}) r6 = socket$nl_route(0x10, 0x3, 0x0) r7 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000080)={'bridge_slave_0\x00', 0x0}) sendmsg$nl_route(r6, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000300)=@bridge_dellink={0x2c, 0x13, 0x1, 0x0, 0x0, {0x7, 0x0, 0x0, r8}, [@IFLA_AF_SPEC={0xc, 0x1a, 0x0, 0x1, [@AF_INET={0x8, 0x5, 0x0, 0x1, {0x4, 0x6}}]}]}, 0x2c}}, 0x0) r9 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x1000000, 0x12, 0xffffffffffffffff, 0x8000000) r10 = io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) syz_io_uring_submit(r9, 0x0, &(0x7f0000000c40)=@IORING_OP_RECVMSG={0xa, 0x8, 0x1, r1, 0x0, &(0x7f0000000c00)={&(0x7f00000007c0)=@rxrpc=@in6={0x21, 0x0, 0x2, 0x1c, {0xa, 0x0, 0x0, @initdev}}, 0x80, &(0x7f0000000ac0)=[{&(0x7f0000000840)=""/68, 0x44}, {&(0x7f00000008c0)=""/38, 0x26}, {&(0x7f0000000900)=""/228, 0xe4}, {&(0x7f0000000a00)=""/113, 0x71}, {&(0x7f0000000a80)=""/49, 0x31}], 0x5, &(0x7f0000000b40)=""/192, 0xc0}, 0x0, 0x40010103, 0x0, {0x0, r10}}) 3.509157705s ago: executing program 1 (id=917): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) (async) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20008b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x3) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) setsockopt$bt_l2cap_L2CAP_LM(0xffffffffffffffff, 0x6, 0x3, 0x0, 0x0) (async) ioctl(r0, 0xa, 0x0) (async) ioctl$SNDRV_TIMER_IOCTL_CREATE(0xffffffffffffffff, 0xc02054a5, &(0x7f0000000000)={0x5, 0xffffffffffffffff, 'id1\x00'}) ioctl$BTRFS_IOC_DEFRAG(r1, 0x50009402, 0x0) (async) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) (async) read$msr(0xffffffffffffffff, &(0x7f0000001740)=""/102400, 0x19000) (async) ioctl$SG_IO(0xffffffffffffffff, 0x2285, 0x0) writev(0xffffffffffffffff, &(0x7f0000000400)=[{&(0x7f0000000080)="aefdda9d240300005a90f57f07703aeff0f64ebbee07962c22772e11b44e65d76641cb010052f436dd2a", 0x2a}], 0x1) (async) r2 = syz_io_uring_setup(0x110, 0x0, &(0x7f0000000240)=0x0, 0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r3, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_setup(0xbdc, &(0x7f0000000640)={0x0, 0x1084, 0x1000, 0x1, 0x4000032f}, &(0x7f00000006c0)=0x0, &(0x7f0000000280)) syz_io_uring_submit(r4, 0x0, &(0x7f00000002c0)=@IORING_OP_MSG_RING={0x28, 0x1, 0x0, r1, 0x1, &(0x7f00000001c0)="91024b706bc60cc1a3b5f4ec0ac1f0bdf8167aa444", 0x15, 0x3, 0x1}) (async) io_uring_enter(r2, 0xdb4, 0x0, 0x1, 0x0, 0x0) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000180)={0x0, 0x4c}}, 0x2) socket$nl_generic(0x10, 0x3, 0x10) (async) syz_genetlink_get_family_id$devlink(&(0x7f00000002c0), 0xffffffffffffffff) mknodat(0xffffffffffffff9c, &(0x7f0000000100)='./file7\x00', 0xc1c0, 0x0) (async) r5 = landlock_create_ruleset(&(0x7f0000000240)={0x1fff}, 0x18, 0x0) (async) r6 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x11, 0x3, &(0x7f0000001680)=ANY=[@ANYBLOB="1800000000030000000000000000000095"], &(0x7f0000001700)='GPL\x00', 0x0, 0x0, 0x0, 0x41000}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f00000000c0)='contention_end\x00', r6}, 0x18) (async) r7 = syz_open_dev$evdev(&(0x7f0000000000), 0x1, 0x8001) ioctl$EVIOCREVOKE(r7, 0x40044591, 0x0) (async) ioctl$FAT_IOCTL_GET_VOLUME_ID(r7, 0x80047213, 0x0) landlock_restrict_self(r5, 0x0) linkat(0xffffffffffffff9c, &(0x7f0000000800)='./file3\x00', 0xffffffffffffff9c, &(0x7f0000000840)='./file7\x00', 0x0) 3.273141989s ago: executing program 2 (id=918): madvise(&(0x7f0000c00000/0x400000)=nil, 0x400000, 0xe) r0 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000000), 0x80082, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000280)='mounts\x00') mount$9p_fd(0x0, &(0x7f0000000300)='.\x00', &(0x7f0000000080), 0x0, &(0x7f0000000240)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r1, @ANYBLOB=',wfdno=', @ANYRESHEX=r0, @ANYBLOB='+\x00']) ioctl$UFFDIO_MOVE(r1, 0xc028aa05, &(0x7f0000000080)={&(0x7f0000d19000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x1}) syz_open_dev$tty20(0xc, 0x4, 0x1) bind$inet(0xffffffffffffffff, &(0x7f0000000080)={0x2, 0x4e21, @multicast2}, 0x10) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newtaction={0xa4, 0x30, 0x1, 0x0, 0x0, {}, [{0x90, 0x1, [@m_ct={0x44, 0x2, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0x9d, 0x11e41e7a, 0x20000000, 0x0, 0xf}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x5}}}}, @m_ife={0x48, 0x1d, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c, 0x1, {{0x2000}}}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0xa4}, 0x1, 0x0, 0x0, 0x844}, 0x0) sched_setscheduler(0x0, 0x2, 0x0) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x400, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x1f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0xfffffffd}, 0x94) ioctl$KVM_CREATE_IRQCHIP(r3, 0xae60) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f0000000200)={0x1, 0x0, 0xf000, 0x2000, &(0x7f0000f9a000/0x2000)=nil}) r5 = dup(r4) ioctl$KVM_SET_VCPU_EVENTS(r4, 0x4400ae8f, &(0x7f0000000040)=@arm64={0x7, 0x6, 0x81, '\x00', 0x3c}) ioctl$KVM_SET_VAPIC_ADDR(r4, 0x4008ae93, &(0x7f0000000180)=0x100000) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r6 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r6, &(0x7f0000019680)=""/102392, 0x18ff8) ioctl$KVM_RUN(r5, 0xae80, 0x0) r7 = userfaultfd(0xc01) ioctl$UFFDIO_API(r7, 0xc018aa3f, &(0x7f00000000c0)) personality(0x4000000) rseq(&(0x7f0000000300), 0x20, 0x0, 0x0) ppoll(0x0, 0x0, &(0x7f00000003c0)={0x0, 0x3938700}, 0x0, 0x0) ioctl$UFFDIO_REGISTER(r7, 0xc020aa00, &(0x7f0000000000)={{&(0x7f0000400000/0xc00000)=nil, 0xc00000}, 0x3}) syz_io_uring_setup(0x5b0f, &(0x7f0000000000)={0x0, 0xfffffffc, 0x1000, 0x0, 0x359}, &(0x7f00000002c0), &(0x7f0000ff4000)) 3.176603855s ago: executing program 1 (id=919): r0 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x11) ioctl$UI_DEV_SETUP(r0, 0x405c5503, &(0x7f0000000100)={{0x100}, 'syz1\x00'}) ioctl$UI_SET_LEDBIT(r0, 0x40045569, 0x4) ioctl$UI_DEV_CREATE(r0, 0x5501) openat$dir(0xffffffffffffff9c, &(0x7f0000000340)='.\x00', 0x0, 0x124) fanotify_init(0x1a, 0x800) r1 = socket$inet(0x2, 0x3, 0x6) ioctl$sock_inet_SIOCSARP(r1, 0x8955, &(0x7f0000000000)={{0x2, 0x0, @local}, {0x1, @local}, 0x4a, {0x2, 0x0, @dev}}) ioctl$sock_inet_SIOCSARP(r1, 0x8955, &(0x7f0000000180)={{0x2, 0x4e23, @local}, {0x306, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x1}}, 0xb6b2ca0ebc195c99, {0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x12}}, 'veth0_vlan\x00'}) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) r2 = syz_open_dev$video4linux(&(0x7f0000002f40), 0x303, 0x2000) ioctl$VIDIOC_SUBDEV_QUERY_DV_TIMINGS(r2, 0x80845663, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) r3 = getpid() sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x7) read$FUSE(0xffffffffffffffff, &(0x7f0000002f80)={0x2020, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x2020) sched_setscheduler(r4, 0x0, &(0x7f0000000240)=0x7) r5 = getpid() sched_setscheduler(r5, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r6, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r7, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r6, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r8 = syz_open_procfs(0x0, &(0x7f0000000180)='fdinfo/4\x00') read$FUSE(r8, &(0x7f0000000480)={0x2020}, 0x2020) ioctl$UI_DEV_DESTROY(r0, 0x5502) 3.169804982s ago: executing program 3 (id=920): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) (async) r1 = syz_open_dev$dri(&(0x7f0000000000), 0x1000, 0x8a00) (async) ioctl$DRM_IOCTL_ADD_CTX(0xffffffffffffffff, 0xc0086420, &(0x7f0000000040)={0x0}) ioctl$DRM_IOCTL_SWITCH_CTX(r1, 0x40086424, &(0x7f0000000100)={r2, 0x2}) (async) sendmsg$NFT_BATCH(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000002c0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWSET={0x68, 0x9, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x4}, [@NFTA_SET_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x2}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ID={0x8, 0xa, 0x1, 0x0, 0xfffffffc}, @NFTA_SET_EXPR={0x2c, 0x11, 0x0, 0x1, @limit={{0xa}, @val={0x1c, 0x2, 0x0, 0x1, [@NFTA_LIMIT_RATE={0xc, 0x1, 0x1, 0x0, 0x3}, @NFTA_LIMIT_UNIT={0xc, 0x2, 0x1, 0x0, 0x4}]}}}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x90}, 0x1, 0x0, 0x0, 0x4000850}, 0x24000000) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_MSG_GETSET(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)={0x14, 0xa, 0xa, 0x101, 0x0, 0x0, {0xa, 0x0, 0x8}}, 0x14}, 0x1, 0x0, 0x0, 0xdef98b386264d0e0}, 0x0) 2.913184725s ago: executing program 3 (id=921): fcntl$lock(0xffffffffffffffff, 0x6, &(0x7f0000000040)={0x0, 0x0, 0x60d3, 0x5}) timer_create(0x0, &(0x7f0000000200)={0x0, 0x21, 0x2, @tid=0xffffffffffffffff}, &(0x7f0000000300)=0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x40042, 0x1) close(r1) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) socket$inet_sctp(0x2, 0x1, 0x84) r4 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) unshare(0x26020480) socket(0x10, 0x80002, 0x2) r5 = syz_usb_connect(0x0, 0x24, 0x0, 0x0) syz_usb_control_io$printer(r5, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r5, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r5, 0x0, 0x0) ioctl$TIOCSETD(r4, 0x5423, &(0x7f00000000c0)=0x3) ioctl$TCSETSW2(r4, 0x80047456, &(0x7f0000000040)={0x3, 0xb, 0xfffffffe, 0x7fffffff, 0x0, "23f555d9adb42d4408020e90d1beaa82dc1ecf", 0xffffffff}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r0, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) memfd_create(&(0x7f0000000540)='\x02A\xbb\xcc\x96\x0eo\x1f\xe2@\xcc\xb1Yg\x00\x00\x00\x00\x00\x00', 0x0) mq_getsetattr(0xffffffffffffffff, &(0x7f00000000c0)={0xfffffffffffffffe, 0x7fffffffffffffff, 0x6, 0x5}, 0x0) socket(0x10, 0x3, 0x0) r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r6, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) socket$kcm(0x2, 0xa, 0x2) socket$nl_generic(0x10, 0x3, 0x10) 2.648441977s ago: executing program 5 (id=922): socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x40000000000021b, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) r3 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$ARPT_SO_SET_REPLACE(r3, 0x0, 0x60, &(0x7f0000000440)={'filter\x00', 0x6001, 0x4, 0x3c8, 0x0, 0xe8, 0x1f8, 0x2e0, 0x2e0, 0x2e0, 0x4, 0x0, {[{{@uncond, 0xc0, 0xe8}, @unspec=@STANDARD={0x28, '\x00', 0x0, 0x2e0}}, {{@arp={@dev, @remote, 0x0, 0x0, 0x0, 0x0, {}, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'veth1_vlan\x00', 'team_slave_0\x00'}, 0xc0, 0x110}, @mangle={0x50, 'mangle\x00', 0x0, {@empty, @mac=@broadcast, @multicast2, @private}}}, {{@uncond, 0xc0, 0xe8}, @unspec=@NFQUEUE2={0x28}}], {{'\x00', 0xc0, 0xe8}, {0x28}}}}, 0x418) sendmsg$netlink(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000280)=[{&(0x7f0000000200)=ANY=[@ANYRESHEX=r3], 0x114}], 0x1}, 0x80) r4 = syz_usb_connect(0x0, 0x24, &(0x7f00000000c0)={{0x12, 0x1, 0x0, 0xcf, 0x8b, 0xed, 0x20, 0xfd9, 0x25, 0x2940, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0xca, 0xfb, 0x1a}}]}}]}}, 0x0) syz_usb_control_io$uac1(r4, 0x0, &(0x7f0000000580)={0x44, &(0x7f0000000700)=ANY=[@ANYBLOB="202901"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r5 = syz_open_dev$I2C(&(0x7f0000000000), 0x1, 0x402) read(r5, 0x0, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0xb, 0x59032, 0xffffffffffffffff, 0x0) r6 = userfaultfd(0x801) getsockname$packet(0xffffffffffffffff, 0x0, &(0x7f0000001480)) ioctl$SIOCX25GFACILITIES(0xffffffffffffffff, 0x5411, 0x0) ioctl$UFFDIO_API(r6, 0xc018aa3f, &(0x7f00000000c0)) r7 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) r8 = ioctl$KVM_CREATE_VM(r7, 0xae01, 0x0) r9 = socket$inet6_sctp(0xa, 0x5, 0x84) ioctl$sock_inet6_SIOCADDRT(r9, 0x890b, &(0x7f0000000380)={@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @dev={0xfe, 0x80, '\x00', 0x21}, @ipv4={'\x00', '\xff\xff', @loopback}, 0x2000000, 0x0, 0x8, 0x400, 0x0, 0x930310}) ioctl$sock_inet6_SIOCADDRT(r9, 0x890b, &(0x7f0000000040)={@loopback, @empty, @dev={0xfe, 0x80, '\x00', 0xf}, 0x1, 0x0, 0x40, 0x500, 0x209, 0x80810208}) r10 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x11, 0x3, &(0x7f0000000080)=ANY=[@ANYRESDEC=r3], &(0x7f00000003c0)='GPL\x00'}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000140)='contention_end\x00', r10}, 0x10) ioctl$KVM_SET_BOOT_CPU_ID(r8, 0xae78, &(0x7f0000000040)=0x1) ioctl$UFFDIO_REGISTER(r6, 0xc020aa00, &(0x7f0000000040)={{&(0x7f0000400000/0xc00000)=nil, 0xc00000}, 0x4}) r11 = socket$netlink(0x10, 0x3, 0x13) sendmsg$netlink(r11, &(0x7f0000001280)={0x0, 0x0, &(0x7f0000000c00)=[{&(0x7f0000000300)=ANY=[@ANYBLOB="180000002c000100000000000000000008000000", @ANYRES32=0x0, @ANYBLOB="6e60e8a0f89ef2a9fa66a5a3c652947f7a335b7177be52417b91a92feff348653b71bf13c71e13c3219d5ec841a8e5099d26833848f02d972cec915d755c12b23507a8a331a0fdd6a91b5403b058448beb8bd5f2fe242b1d605ea0cccca453660970edde75cb46da4e5e60bd4f930e6c1cf934a9f406f82b8af862e31447e3f082016d4ff04f076945"], 0x18}], 0x1}, 0x0) ioctl$UFFDIO_COPY(r6, 0xc028aa03, &(0x7f0000000100)={&(0x7f0000800000/0x800000)=nil, &(0x7f0000339000/0x1000)=nil, 0x800000}) 889.200764ms ago: executing program 1 (id=923): socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xc, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x3) sched_setaffinity(0x0, 0x8, &(0x7f00000000c0)=0xa) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) ioprio_set$pid(0x2, 0x0, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) close(0xffffffffffffffff) socketpair$unix(0x1, 0x1, 0x0, 0x0) getpid() setreuid(0xee00, 0x0) setns(0xffffffffffffffff, 0x24020000) r1 = memfd_create(&(0x7f0000000b40)='\x9d#\x00\xe6Z\x00\xafq%\xa5\x83\xa6\xb5\x00\x83y\xf3\xb2\xe6b \x00\x00\x00\x00\x00\x00\x01\x00\x00\xf7\xffg\xf5\x12oP\xfe\xe6\xd2SLR\xa1\x00\x00\x17\x1f$^\xe1\x00\x00\x00\x00\x00\x00\a\xff;\xeb\xf1\xd0\xce\xe5\x19\x12\b\x01\xd9\xae>/\x05\x00\x00\x00\x15\x00\x00\x00\xa1\xa2\xe0g\x98\xbf*\xdcc\x12.\xb7\xbe`\'\xcb\xb6\xaf\xdc\xa0D\x93.\xf25\x957\xec\xfb\xe6|\\\xe4h\xfc\x14\x05\x00\xfd\xc7\x00\x00\x00\x00\x91\x98\x15\xec\xdb\xaa\t9\x11\xb4h$&0\xdd\x19\x86\x90\xbe\xd7\xdc\n\xcbC\x15\xfcp\x11\xdai\f{a?\xd0\xe1{\x84\xb5\x82q\x19\xacS\x88|\x99\xfd\x9eS\x80\xcb\x14G\xfa\xff\xff\xff\xff\xff\xff\xff\xcd\xf0%\x97!\xba\xe3J\xc2t\x96\xf8\xb1\xd2\x168\xbf`$\xbf\xca\xea\xa3\x83\x8e-k\x12\xdf\xb9q\xb6Pr\xd4\xb5X\\\xdbD\n\x03G\x00\x04\x00\x00\xbc\xac\x18\xba\xce\xb3%QF\x03\b\x9dh\xcb)\xf4f\x12[\xf9\r\t\xef{h\xb0\xc0:\x8f|\x8f\x06\xf8T\x826`M\x11\x1c\xb0*8\v\x1e\xcf\x03\xd3\xe8,?P\xac\x86\x13b\xa8D\x0f\x93\xab\x1c\x11\x00\xc5\x8d\x82\x9c\xd6B[\xc9\x00\xf5]\x81\xf3\xfd\x06M\xbe\xf9\xba\x9em\xe9\"\x03\x933P\x9b\xcc\x9b\f\xa7\x8f9\x988\tgC\xbc\xe0\xc5\xf4\xe0E%\xd9\xd8w\x00k\x042Y\xd9\xc5\xe59\xa95\xd1m\xd8hCuZYi\x10D\xb9\xe6\xff\x04K%yH\xe5\xf4\x8b\x03Ca8\x1e\xe9\\#\xf8O\fw\xd9\xf5cF\xcc\x1a2ex\xb4\x0fi$\x97\x81.\x02\x04m\xfbT2\xd4\"\x1e\xf0\x16\x0f\x97\xe6j}J\xca\xb8)f\xd5\xfd>\x9bU\xb0\x03Zt0\xc0b\xad\xef@o\xc1\xd6\x17T\f\xc30\xe2\x89\xf6L\x1b1\x9c\t\xa7\x80\x1b:\xbb\x04\xd7\xd1\x06\xa0\xe9\xbah\xb6\xb2\xea/{Q\xca\x14\x13\x9ajWt\xc9\xecd\r\xd5)\x1d\xaf\n\xc0\xc1\x1d}DY\x95&\xe7\xf4U\xff\xcd&\a\x9f\x1bg\xe5|~\xc1\xc5n\x12%ur\xa1\x9e`\xc2\x01\b,\x18\xaf\xccD\xdeag\xc6\xf3\xd6\x94\x9d\xae\x8bl\xee\x7fu\xe5bu\x84\x04\xb3@\xa1\xf7\xc6\x13\xf9I\xfa\x12\xfc\x96\",aT\xfd\"\x01\x92\xb1\xbf\x8a\x15\x88\xfd\x8f\x88\x87\x82\x9c:L\xd2\xb8\xfa5\x066\x82\xf3_LUr\xfa\xd2\x99d \x97c9G\x99\xe3\xcc$\x96cu\x97\xe7\xc7a\tm\xe8F\xc7j\xf8\x98\x81\xe7\xf7\xab3F\xf4u\xdaav\xd21\v\x99HG\xdfx\x1cPl\t#\xc1\x8e\xddW\x00'/668, 0x6) fcntl$addseals(r1, 0x409, 0xc) 0s ago: executing program 1 (id=925): r0 = syz_open_procfs(0x0, &(0x7f0000000000)='map_files\x00') mknodat(r0, &(0x7f0000000100)='./file0\x00', 0x80, 0xfffffffd) socket$inet6_mptcp(0xa, 0x1, 0x106) syz_usb_connect$hid(0x6, 0x36, &(0x7f00000001c0)=ANY=[], 0x0) syz_io_uring_setup(0x7004, &(0x7f0000000080)={0x0, 0x80000000, 0x10100, 0x0, 0x2}, 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000140)) pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r2, &(0x7f0000000080)=ANY=[@ANYBLOB="1500000065ffff097b000008003950323030302e4c"], 0x15) r3 = dup(r2) r4 = socket$inet(0x2, 0x3, 0x2) setsockopt$inet_mreqsrc(0xffffffffffffffff, 0x0, 0x27, &(0x7f0000000040)={@multicast1, @remote, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0xc) setsockopt$inet_MCAST_JOIN_GROUP(r4, 0x0, 0x2a, &(0x7f0000000140)={0xa, {{0x2, 0x0, @multicast2}}}, 0x88) getsockopt$inet_buf(r4, 0x0, 0x29, &(0x7f0000000040)=""/185, &(0x7f0000000100)=0xb9) write$FUSE_BMAP(r3, &(0x7f0000000100)={0x18}, 0x18) write$FUSE_DIRENTPLUS(r3, &(0x7f0000002100)=ANY=[@ANYBLOB="b0000000000000001659ec0889419429aa5db97288b0f8a87ea8e66d9a8b"], 0xb0) write$FUSE_DIRENTPLUS(r3, &(0x7f0000000140)=ANY=[@ANYBLOB="10"], 0x10) write$FUSE_NOTIFY_RETRIEVE(r3, &(0x7f0000000200)={0x30, 0x5, 0x0, {0x0, 0x1, 0x5, 0x7}}, 0x30) write$FUSE_DIRENTPLUS(r3, &(0x7f00000002c0)=ANY=[@ANYBLOB="b0000000000000", @ANYRES16], 0xb0) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) mount$9p_fd(0x0, &(0x7f00000003c0)='./file0\x00', &(0x7f0000000b80), 0x0, &(0x7f0000000580)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r1, @ANYBLOB=',wfdno=', @ANYRESHEX=r3, @ANYBLOB=',posixacl']) kernel console output (not intermixed with test programs): ] batman_adv: batadv0: Local translation table size (108) exceeds maximum packet size (-320); Ignoring new local tt entry: 00:00:00:00:00:00 [ 223.658327][ T7355] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 224.378514][ T7364] netlink: 12 bytes leftover after parsing attributes in process `syz.0.311'. [ 224.388734][ T7364] netlink: 16 bytes leftover after parsing attributes in process `syz.0.311'. [ 225.073593][ T5990] usb 4-1: new full-speed USB device number 13 using dummy_hcd [ 225.195804][ T5935] usb 3-1: new high-speed USB device number 24 using dummy_hcd [ 225.308157][ T5990] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 225.369668][ T5990] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 225.390800][ T5935] usb 3-1: Using ep0 maxpacket: 8 [ 225.439220][ T5935] usb 3-1: config 0 has an invalid interface number: 186 but max is 0 [ 225.490906][ T5990] usb 4-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 225.511221][ T5935] usb 3-1: config 0 has no interface number 0 [ 225.560401][ T5935] usb 3-1: config 0 interface 186 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 225.585693][ T5990] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 225.656496][ T5990] usb 4-1: Product: syz [ 225.675940][ T5935] usb 3-1: config 0 interface 186 altsetting 0 has an endpoint descriptor with address 0x9A, changing to 0x8A [ 225.726581][ T5990] usb 4-1: Manufacturer: syz [ 225.760140][ T5990] usb 4-1: SerialNumber: syz [ 225.830951][ T5935] usb 3-1: config 0 interface 186 altsetting 0 endpoint 0x8A has an invalid bInterval 0, changing to 7 [ 225.978735][ T5935] usb 3-1: config 0 interface 186 altsetting 0 has 4 endpoint descriptors, different from the interface descriptor's value: 3 [ 226.242945][ T5935] usb 3-1: New USB device found, idVendor=07c0, idProduct=1505, bcdDevice=b8.c5 [ 226.290575][ T7380] batman_adv: batadv0: Local translation table size (96) exceeds maximum packet size (-320); Ignoring new local tt entry: 00:00:00:00:00:00 [ 226.335383][ T5990] usb 4-1: 0:2 : does not exist [ 226.340413][ T5990] usb 4-1: unit 6 not found! [ 226.361657][ T5935] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 226.384004][ T5935] usb 3-1: Product: syz [ 226.388566][ T5935] usb 3-1: Manufacturer: syz [ 226.393682][ T5935] usb 3-1: SerialNumber: syz [ 226.418449][ T5935] usb 3-1: config 0 descriptor?? [ 226.426251][ T5990] usb 4-1: USB disconnect, device number 13 [ 226.544030][ T6019] udevd[6019]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 226.545221][ T43] usb 5-1: new high-speed USB device number 15 using dummy_hcd [ 226.688932][ T5935] iowarrior 3-1:0.186: IOWarrior product=0x1505, serial=42424242 interface=186 now attached to iowarrior0 [ 226.735029][ T7387] batman_adv: batadv0: Local translation table size (96) exceeds maximum packet size (-320); Ignoring new local tt entry: 00:00:00:00:00:00 [ 226.783440][ T43] usb 5-1: Using ep0 maxpacket: 32 [ 226.805112][ T43] usb 5-1: config 12 has an invalid interface number: 11 but max is 0 [ 226.928129][ T7367] openvswitch: netlink: Tunnel attr 16383 out of range max 16 [ 226.936771][ T43] usb 5-1: config 12 has no interface number 0 [ 226.975817][ T43] usb 5-1: config 12 interface 11 altsetting 0 endpoint 0x2 has an invalid bInterval 0, changing to 7 [ 227.015195][ T5935] usb 3-1: USB disconnect, device number 24 [ 227.032192][ T43] usb 5-1: config 12 interface 11 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 227.062702][ T43] usb 5-1: config 12 interface 11 altsetting 0 endpoint 0xD has an invalid bInterval 0, changing to 7 [ 227.076782][ T43] usb 5-1: config 12 interface 11 altsetting 0 endpoint 0xD has invalid wMaxPacketSize 0 [ 227.115449][ T43] usb 5-1: New USB device found, idVendor=05ac, idProduct=0243, bcdDevice=c3.de [ 227.145469][ T43] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 227.162669][ T43] usb 5-1: Product: syz [ 227.167073][ T43] usb 5-1: Manufacturer: syz [ 227.171765][ T43] usb 5-1: SerialNumber: syz [ 227.226234][ T43] usb 5-1: rejected 1 configuration due to insufficient available bus power [ 227.260057][ T43] usb 5-1: no configuration chosen from 1 choice [ 227.382874][ T5919] usb 1-1: new high-speed USB device number 5 using dummy_hcd [ 227.685403][ T43] usb 4-1: new high-speed USB device number 14 using dummy_hcd [ 227.702679][ T5919] usb 1-1: Using ep0 maxpacket: 8 [ 227.728068][ T5919] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x8D has an invalid bInterval 42, changing to 9 [ 227.912613][ T43] usb 4-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 228.359850][ T5919] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 228.372050][ T43] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 228.391109][ T5919] usb 1-1: config 0 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 228.415397][ T43] usb 4-1: config 0 descriptor?? [ 228.434214][ T43] cp210x 4-1:0.0: cp210x converter detected [ 228.440814][ T5919] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x8B has invalid wMaxPacketSize 0 [ 228.451780][ T5919] usb 1-1: config 0 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 0 [ 228.462900][ T5919] usb 1-1: New USB device found, idVendor=05ac, idProduct=8215, bcdDevice=8f.58 [ 228.473006][ T5919] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 228.495468][ T5919] usb 1-1: config 0 descriptor?? [ 228.503080][ T5905] usb 2-1: new high-speed USB device number 13 using dummy_hcd [ 228.564320][ T5851] Bluetooth: hci5: urb ffff88807661fd00 submission failed (90) [ 228.637079][ T43] cp210x 4-1:0.0: failed to get vendor val 0x370b size 1: -121 [ 228.638258][ T7412] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 228.653069][ T43] cp210x 4-1:0.0: querying part number failed [ 228.666614][ T5905] usb 2-1: New USB device found, idVendor=0eb1, idProduct=7007, bcdDevice= 2.10 [ 228.693263][ T43] usb 4-1: cp210x converter now attached to ttyUSB0 [ 228.696685][ T7412] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 228.700030][ T5905] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 228.768930][ T5905] usb 2-1: Product: syz [ 228.796173][ T5905] usb 2-1: Manufacturer: syz [ 228.812960][ T5905] usb 2-1: SerialNumber: syz [ 228.833815][ T5905] usb 2-1: config 0 descriptor?? [ 228.854502][ T5905] go7007 2-1:0.0: probe with driver go7007 failed with error -12 [ 228.859903][ T30] audit: type=1804 audit(1755402766.003:93): pid=7394 uid=0 auid=4294967295 ses=4294967295 subj=_ op=invalid_pcr cause=open_writers comm="syz.0.321" name="/newroot/62/file0" dev="tmpfs" ino=360 res=1 errno=0 [ 228.903925][ T1218] usb 1-1: USB disconnect, device number 5 [ 229.289594][ T1218] usb 5-1: USB disconnect, device number 15 [ 230.260487][ T5905] usb 4-1: USB disconnect, device number 14 [ 230.300234][ T5905] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0 [ 230.312087][ T5905] cp210x 4-1:0.0: device disconnected [ 230.538324][ T5990] usb 2-1: USB disconnect, device number 13 [ 260.906881][ T1303] ieee802154 phy1 wpan1: encryption failed: -22 [ 322.346594][ T1303] ieee802154 phy1 wpan1: encryption failed: -22 [ 383.787101][ T1303] ieee802154 phy1 wpan1: encryption failed: -22 [ 404.493868][ T7444] program syz.2.330 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 404.527598][ T7443] batman_adv: batadv0: Local translation table size (96) exceeds maximum packet size (-320); Ignoring new local tt entry: 00:00:00:00:00:00 [ 404.695497][ T7457] batman_adv: batadv0: Local translation table size (96) exceeds maximum packet size (-320); Ignoring new local tt entry: 00:00:00:00:00:00 [ 404.734561][ T7458] xt_HMARK: spi-set and port-set can't be combined [ 404.862791][ T5990] usb 5-1: new full-speed USB device number 16 using dummy_hcd [ 405.032878][ T5990] usb 5-1: unable to get BOS descriptor or descriptor too short [ 405.082804][ T5990] usb 5-1: not running at top speed; connect to a high speed hub [ 405.114022][ T5990] usb 5-1: config 7 has an invalid interface number: 6 but max is 0 [ 405.150861][ T5990] usb 5-1: config 7 has 2 interfaces, different from the descriptor's value: 1 [ 405.161520][ T5990] usb 5-1: config 7 has no interface number 1 [ 405.171089][ T5990] usb 5-1: No eUSB2 isoc ep 15 companion for config 7 interface 6 altsetting 254 [ 405.187240][ T5990] usb 5-1: config 7 interface 6 altsetting 254 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 405.541928][ T5990] usb 5-1: config 7 interface 6 has no altsetting 0 [ 405.805241][ T5990] usb 5-1: New USB device found, idVendor=1a8d, idProduct=100d, bcdDevice=30.9e [ 405.859861][ T5990] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 405.900413][ T5990] usb 5-1: Product: syz [ 405.927486][ T5990] usb 5-1: Manufacturer: syz [ 405.932296][ T5990] usb 5-1: SerialNumber: syz [ 406.179865][ T5990] option 5-1:7.6: GSM modem (1-port) converter detected [ 406.249846][ T5990] usb 5-1: USB disconnect, device number 16 [ 406.284971][ T5990] option 5-1:7.6: device disconnected [ 406.743342][ T1209] usb 3-1: new high-speed USB device number 25 using dummy_hcd [ 407.572596][ T1209] usb 3-1: Using ep0 maxpacket: 16 [ 407.593685][ T1209] usb 3-1: config 0 interface 0 altsetting 64 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 408.332579][ T1209] usb 3-1: config 0 interface 0 has no altsetting 0 [ 408.339320][ T1209] usb 3-1: New USB device found, idVendor=046d, idProduct=c52b, bcdDevice= 0.00 [ 408.363785][ T1209] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 408.385991][ T1209] usb 3-1: config 0 descriptor?? [ 410.546132][ T5990] usb 3-1: USB disconnect, device number 25 [ 410.847472][ T5905] usb 2-1: new high-speed USB device number 14 using dummy_hcd [ 411.040603][ T5905] usb 2-1: New USB device found, idVendor=0cf3, idProduct=9374, bcdDevice=bc.3b [ 411.057217][ T5905] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 411.069671][ T5905] usb 2-1: config 0 descriptor?? [ 411.114397][ T5990] usb 5-1: new high-speed USB device number 17 using dummy_hcd [ 411.292890][ T5990] usb 5-1: Using ep0 maxpacket: 8 [ 411.317292][ T5990] usb 5-1: config 10 has an invalid interface number: 38 but max is 0 [ 411.343470][ T5990] usb 5-1: config 10 has an invalid descriptor of length 0, skipping remainder of the config [ 411.362436][ T7560] netlink: 780 bytes leftover after parsing attributes in process `syz.3.358'. [ 411.372537][ T5990] usb 5-1: config 10 has no interface number 0 [ 411.372593][ T5990] usb 5-1: config 10 interface 38 altsetting 0 endpoint 0xD has invalid maxpacket 3584, setting to 64 [ 411.399536][ T5990] usb 5-1: config 10 interface 38 altsetting 0 endpoint 0x9 has invalid maxpacket 1023, setting to 64 [ 411.410678][ T5990] usb 5-1: config 10 interface 38 altsetting 0 has a duplicate endpoint with address 0xD, skipping [ 411.424795][ T5990] usb 5-1: config 10 interface 38 altsetting 0 has a duplicate endpoint with address 0x8, skipping [ 411.437254][ T5990] usb 5-1: config 10 interface 38 altsetting 0 has 5 endpoint descriptors, different from the interface descriptor's value: 10 [ 411.456993][ T5990] usb 5-1: New USB device found, idVendor=1b3d, idProduct=0106, bcdDevice= d.4c [ 411.467743][ T5990] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 411.503787][ T5905] ath6kl: Failed to submit usb control message: -71 [ 411.525089][ T5905] ath6kl: unable to send the bmi data to the device: -71 [ 411.532313][ T5905] ath6kl: Unable to send get target info: -71 [ 411.539539][ T5905] ath6kl: Failed to init ath6kl core: -71 [ 411.561626][ T5905] ath6kl_usb 2-1:0.0: probe with driver ath6kl_usb failed with error -71 [ 411.577963][ T5905] usb 2-1: USB disconnect, device number 14 [ 411.710083][ T5990] usb 5-1: string descriptor 0 read error: -71 [ 411.737881][ T5990] ftdi_sio 5-1:10.38: FTDI USB Serial Device converter detected [ 411.757577][ T5990] ftdi_sio ttyUSB0: unknown device type: 0xd4c [ 411.780400][ T5990] usb 5-1: USB disconnect, device number 17 [ 411.799368][ T5990] ftdi_sio 5-1:10.38: device disconnected [ 412.517138][ T7566] netlink: 'syz.1.360': attribute type 10 has an invalid length. [ 412.634571][ T7566] 8021q: adding VLAN 0 to HW filter on device team0 [ 412.659969][ T7566] bond0: (slave team0): Enslaving as an active interface with an up link [ 412.764732][ T7573] netlink: 'syz.3.361': attribute type 13 has an invalid length. [ 412.797465][ T7565] netlink: 8 bytes leftover after parsing attributes in process `syz.1.360'. [ 412.833391][ T7573] veth0_macvtap: left promiscuous mode [ 412.857801][ T7573] macvtap0: entered allmulticast mode [ 412.914866][ T7573] macvtap0: refused to change device tx_queue_len [ 413.064901][ T5935] usb 5-1: new high-speed USB device number 18 using dummy_hcd [ 413.083589][ T30] audit: type=1326 audit(1755402950.223:94): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7574 comm="syz.2.363" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f186998ebe9 code=0x0 [ 413.459910][ T5935] usb 5-1: config 0 interface 0 altsetting 251 endpoint 0x9 has invalid wMaxPacketSize 0 [ 413.470560][ T5935] usb 5-1: config 0 interface 0 has no altsetting 0 [ 413.479856][ T5935] usb 5-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 413.489219][ T5935] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 413.497327][ T5935] usb 5-1: Product: syz [ 413.501776][ T5935] usb 5-1: Manufacturer: syz [ 413.506728][ T5935] usb 5-1: SerialNumber: syz [ 413.514733][ T5935] usb 5-1: config 0 descriptor?? [ 414.014474][ T7572] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 414.218208][ T7572] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 414.238179][ T5935] usb 5-1: selecting invalid altsetting 0 [ 414.329269][ T5935] usb 5-1: USB disconnect, device number 18 [ 414.498952][ T7539] udevd[7539]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 414.620329][ T7592] netlink: 20 bytes leftover after parsing attributes in process `syz.2.368'. [ 414.782744][ T7592] netlink: 32 bytes leftover after parsing attributes in process `syz.2.368'. [ 415.090020][ T7598] netlink: 52 bytes leftover after parsing attributes in process `syz.2.368'. [ 415.099459][ T7598] unsupported nlmsg_type 40 [ 415.533292][ T5935] usb 4-1: new high-speed USB device number 15 using dummy_hcd [ 415.723056][ T5935] usb 4-1: Using ep0 maxpacket: 32 [ 415.826579][ T5935] usb 4-1: config 9 has an invalid interface number: 160 but max is 0 [ 415.933871][ T5935] usb 4-1: config 9 has no interface number 0 [ 416.011925][ T5935] usb 4-1: config 9 interface 160 has no altsetting 0 [ 416.173617][ T5935] usb 4-1: New USB device found, idVendor=20b7, idProduct=0713, bcdDevice=4e.3f [ 416.261143][ T5935] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 416.371443][ T5935] usb 4-1: Product: syz [ 416.393376][ T5935] usb 4-1: Manufacturer: syz [ 416.546479][ T5935] usb 4-1: SerialNumber: syz [ 417.122112][ T7603] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 417.143507][ T7603] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 417.209139][ T5935] ftdi_sio 4-1:9.160: FTDI USB Serial Device converter detected [ 417.564432][ T5935] ftdi_sio ttyUSB0: unknown device type: 0x4e3f [ 417.661650][ T5935] usb 4-1: USB disconnect, device number 15 [ 417.669377][ T5935] ftdi_sio 4-1:9.160: device disconnected [ 417.996276][ T7632] netlink: 16 bytes leftover after parsing attributes in process `syz.4.376'. [ 418.342668][ T5935] usb 4-1: new high-speed USB device number 16 using dummy_hcd [ 418.709433][ T5935] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 418.802605][ T5935] usb 4-1: config 1 interface 1 altsetting 1 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 419.009336][ T5935] usb 4-1: config 1 interface 1 altsetting 1 endpoint 0x3 has invalid wMaxPacketSize 0 [ 419.022027][ T5935] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 419.033211][ T5935] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 419.041802][ T5935] usb 4-1: Product: syz [ 419.046263][ T5935] usb 4-1: Manufacturer: syz [ 419.051155][ T5935] usb 4-1: SerialNumber: syz [ 419.158891][ T7645] netlink: 16 bytes leftover after parsing attributes in process `syz.4.379'. [ 419.771584][ T7653] netlink: 4 bytes leftover after parsing attributes in process `syz.1.381'. [ 420.340508][ T5935] cdc_ncm 4-1:1.0: bind() failure [ 420.592160][ T5935] cdc_ncm 4-1:1.1: CDC Union missing and no IAD found [ 420.645943][ T5935] cdc_ncm 4-1:1.1: bind() failure [ 420.752995][ T7658] tmpfs: Bad value for 'mpol' [ 420.986724][ T7634] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 421.051633][ T5935] usb 4-1: USB disconnect, device number 16 [ 421.132593][ T7664] fuse: Bad value for 'fd' [ 421.269612][ T7665] input input13: cannot allocate more than FF_MAX_EFFECTS effects [ 422.722795][ T5935] usb 1-1: new high-speed USB device number 6 using dummy_hcd [ 422.742647][ T5851] Bluetooth: hci3: command 0x0406 tx timeout [ 422.955093][ T7672] netlink: 48 bytes leftover after parsing attributes in process `syz.1.385'. [ 423.053367][ T7680] loop6: detected capacity change from 0 to 1 [ 423.093244][ T5935] usb 1-1: Using ep0 maxpacket: 32 [ 423.098732][ T7680] Dev loop6: unable to read RDB block 1 [ 423.110831][ T5935] usb 1-1: config 0 has an invalid interface number: 35 but max is 0 [ 423.121101][ T5935] usb 1-1: config 0 has no interface number 0 [ 423.135525][ T7680] loop6: unable to read partition table [ 423.140122][ T5935] usb 1-1: New USB device found, idVendor=10c4, idProduct=818a, bcdDevice=7d.8f [ 423.154504][ T5935] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 423.163275][ T5935] usb 1-1: Product: syz [ 423.167847][ T7680] loop6: partition table beyond EOD, truncated [ 423.168511][ T5935] usb 1-1: Manufacturer: syz [ 423.201495][ T5935] usb 1-1: SerialNumber: syz [ 423.206058][ T7680] loop_reread_partitions: partition scan of loop6 (þ被xü—ŸÑà– ) failed (rc=-5) [ 423.338232][ T5935] usb 1-1: config 0 descriptor?? [ 423.377818][ T7690] netlink: 8 bytes leftover after parsing attributes in process `syz.3.388'. [ 423.657332][ T5935] radio-si470x 1-1:0.35: could not find interrupt in endpoint [ 423.665049][ T5935] radio-si470x 1-1:0.35: probe with driver radio-si470x failed with error -5 [ 423.723845][ T5935] radio-raremono 1-1:0.35: this is not Thanko's Raremono. [ 423.757107][ T5935] usbhid 1-1:0.35: couldn't find an input interrupt endpoint [ 424.033536][ T5935] usb 1-1: USB disconnect, device number 6 [ 424.591788][ T7704] netlink: 12 bytes leftover after parsing attributes in process `syz.4.393'. [ 424.863395][ T7700] netlink: 28 bytes leftover after parsing attributes in process `syz.4.393'. [ 425.226326][ T7700] 8021q: adding VLAN 0 to HW filter on device bond1 [ 425.344272][ T7715] openvswitch: netlink: Missing valid actions attribute. [ 425.351753][ T7715] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 425.384557][ T7715] batman_adv: batadv0: Local translation table size (104) exceeds maximum packet size (-320); Ignoring new local tt entry: aa:aa:aa:aa:aa:2a [ 426.043473][ T30] audit: type=1326 audit(1755402963.183:95): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7719 comm="syz.3.396" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fbb4e18ebe9 code=0x0 [ 426.094522][ T7721] Bluetooth: MGMT ver 1.23 [ 426.146483][ T30] audit: type=1326 audit(1755402963.273:96): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7722 comm="syz.4.397" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f67a5d8ebe9 code=0x0 [ 426.851359][ T7735] loop6: detected capacity change from 0 to 1 [ 426.886555][ T7735] Dev loop6: unable to read RDB block 1 [ 426.924559][ T7735] loop6: unable to read partition table [ 426.930596][ T7735] loop6: partition table beyond EOD, truncated [ 426.955571][ T7735] loop_reread_partitions: partition scan of loop6 (þ被xü—ŸÑà– ) failed (rc=-5) [ 427.372727][ T5957] usb 4-1: new high-speed USB device number 17 using dummy_hcd [ 427.557890][ T5957] usb 4-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 427.581214][ T5957] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 427.590040][ T5990] usb 2-1: new high-speed USB device number 15 using dummy_hcd [ 427.611339][ T5957] usb 4-1: Product: syz [ 427.622456][ T5957] usb 4-1: Manufacturer: syz [ 427.640670][ T5957] usb 4-1: SerialNumber: syz [ 427.718929][ T5957] usb 4-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 427.762988][ T5990] usb 2-1: Using ep0 maxpacket: 8 [ 427.771329][ T1218] usb 4-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 427.791834][ T5990] usb 2-1: New USB device found, idVendor=046d, idProduct=08dd, bcdDevice=ff.f4 [ 427.827984][ T5990] usb 2-1: New USB device strings: Mfr=8, Product=2, SerialNumber=3 [ 427.849741][ T5990] usb 2-1: Product: syz [ 427.856138][ T5990] usb 2-1: Manufacturer: syz [ 427.876900][ T5990] usb 2-1: SerialNumber: syz [ 427.887589][ T5990] usb 2-1: config 0 descriptor?? [ 427.907221][ T5990] gspca_main: gspca_zc3xx-2.14.0 probing 046d:08dd [ 428.437223][ T7740] !: renamed from dummy0 (while UP) [ 428.486400][ T5935] usb 4-1: USB disconnect, device number 17 [ 428.586435][ T5990] input: gspca_zc3xx as /devices/platform/dummy_hcd.1/usb2/2-1/input/input14 [ 428.686679][ T5957] usb 5-1: new full-speed USB device number 19 using dummy_hcd [ 429.380683][ T1218] usb 4-1: Service connection timeout for: 256 [ 429.399176][ T1218] ath9k_htc 4-1:1.0: ath9k_htc: Unable to initialize HTC services [ 429.409370][ T1218] ath9k_htc: Failed to initialize the device [ 429.416975][ T5935] usb 4-1: ath9k_htc: USB layer deinitialized [ 429.465244][ T5957] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 429.516998][ T5957] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 429.543272][ T5957] usb 5-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 429.552575][ T5957] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 429.573391][ T5957] usb 5-1: config 0 descriptor?? [ 429.586077][ T5957] hub 5-1:0.0: USB hub found [ 429.652639][ T5905] usb 1-1: new high-speed USB device number 7 using dummy_hcd [ 429.795664][ T5957] hub 5-1:0.0: 2 ports detected [ 429.815144][ T5905] usb 1-1: New USB device found, idVendor=8086, idProduct=0110, bcdDevice=bf.ad [ 429.836839][ T5905] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 429.877762][ T5905] usb 1-1: config 0 descriptor?? [ 429.920886][ T5905] gspca_main: spca508-2.14.0 probing 8086:0110 [ 430.119338][ T5905] gspca_spca508: reg_read err -32 [ 430.128068][ T5905] gspca_spca508: reg_read err -32 [ 430.137510][ T5905] gspca_spca508: reg_read err -32 [ 430.144878][ T5905] gspca_spca508: reg_read err -32 [ 430.160543][ T5905] gspca_spca508: reg_read err -32 [ 430.196844][ T7784] loop6: detected capacity change from 0 to 1 [ 430.206294][ T7784] Dev loop6: unable to read RDB block 1 [ 430.206561][ T7759] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 430.212049][ T7784] loop6: unable to read partition table [ 430.226376][ T1209] usb 4-1: new high-speed USB device number 18 using dummy_hcd [ 430.232669][ T7759] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 430.238698][ T7784] loop6: partition table beyond EOD, truncated [ 430.249718][ T7784] loop_reread_partitions: partition scan of loop6 (þ被xü—ŸÑà– ) failed (rc=-5) [ 430.384522][ T1209] usb 4-1: Using ep0 maxpacket: 8 [ 430.400204][ T1209] usb 4-1: New USB device found, idVendor=0c45, idProduct=613e, bcdDevice=c4.6d [ 430.428732][ T1209] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 430.444191][ T1209] usb 4-1: Product: syz [ 430.448653][ T1209] usb 4-1: Manufacturer: syz [ 430.463092][ T1209] usb 4-1: SerialNumber: syz [ 430.484018][ T1209] usb 4-1: config 0 descriptor?? [ 430.533374][ T1209] gspca_main: sonixj-2.14.0 probing 0c45:613e [ 430.698149][ T5905] gspca_spca508: reg write: error -110 [ 430.836548][ T5905] spca508 1-1:0.0: probe with driver spca508 failed with error -110 [ 431.403432][ T5957] hub 5-1:0.0: hub_ext_port_status failed (err = -32) [ 431.412585][ T1209] gspca_sonixj: reg_r err -32 [ 431.534771][ T1209] sonixj 4-1:0.0: probe with driver sonixj failed with error -32 [ 431.546637][ T5905] usb 1-1: USB disconnect, device number 7 [ 431.580471][ T5935] usb 2-1: USB disconnect, device number 15 [ 431.723040][ T5919] usb 5-1: USB disconnect, device number 19 [ 431.872811][ T5919] usb 4-1: USB disconnect, device number 18 [ 432.124743][ T7801] CIFS: No dialect specified on mount. Default has changed to a more secure dialect, SMB2.1 or later (e.g. SMB3.1.1), from CIFS (SMB1). To use the less secure SMB1 dialect to access old servers which do not support SMB3.1.1 (or even SMB3 or SMB2.1) specify vers=1.0 on mount. [ 432.211664][ T7800] CIFS mount error: No usable UNC path provided in device string! [ 432.211664][ T7800] [ 432.291757][ T7801] CIFS mount error: No usable UNC path provided in device string! [ 432.291757][ T7801] [ 432.339158][ T7800] CIFS: VFS: CIFS mount error: No usable UNC path provided in device string! [ 432.522994][ T7801] CIFS: VFS: CIFS mount error: No usable UNC path provided in device string! [ 432.535278][ T7812] netlink: 'syz.2.422': attribute type 6 has an invalid length. [ 434.034113][ T5851] Bluetooth: hci0: ACL packet for unknown connection handle 200 [ 434.048815][ T7830] netlink: 'syz.4.425': attribute type 30 has an invalid length. [ 434.061225][ T7832] netlink: 188 bytes leftover after parsing attributes in process `syz.3.427'. [ 434.218740][ T7824] netlink: 'syz.2.424': attribute type 10 has an invalid length. [ 434.226641][ T7824] netlink: 40 bytes leftover after parsing attributes in process `syz.2.424'. [ 434.239743][ T7824] dummy0: entered promiscuous mode [ 434.246422][ T7824] batman_adv: batadv0: Interface deactivated: dummy0 [ 434.278945][ T7824] batman_adv: batadv0: Removing interface: dummy0 [ 434.315599][ T7824] bridge0: port 3(dummy0) entered blocking state [ 434.322235][ T7824] bridge0: port 3(dummy0) entered disabled state [ 434.339602][ T7824] dummy0: entered allmulticast mode [ 434.357911][ T7824] bridge0: port 3(dummy0) entered blocking state [ 434.364800][ T7824] bridge0: port 3(dummy0) entered forwarding state [ 434.372975][ T5919] usb 5-1: new high-speed USB device number 20 using dummy_hcd [ 434.458689][ T7839] openvswitch: netlink: IP tunnel attribute has 20 unknown bytes. [ 434.676836][ T5919] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x9 has invalid wMaxPacketSize 0 [ 434.977493][ T5935] usb 4-1: new high-speed USB device number 19 using dummy_hcd [ 435.019384][ T5919] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0xB has invalid maxpacket 14129, setting to 64 [ 435.046069][ T5919] usb 5-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 435.062700][ T5919] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 435.072028][ T5919] usb 5-1: Product: syz [ 435.077753][ T5919] usb 5-1: Manufacturer: syz [ 435.082847][ T5919] usb 5-1: SerialNumber: syz [ 435.096440][ T5919] usb 5-1: config 0 descriptor?? [ 435.116908][ T5919] usb 5-1: 0:0 : invalid sync pipe. bmAttributes 30, bLength 9, bSynchAddress 37 [ 435.162627][ T5935] usb 4-1: Using ep0 maxpacket: 8 [ 435.175852][ T5935] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 7 [ 435.188128][ T5935] usb 4-1: New USB device found, idVendor=082d, idProduct=0100, bcdDevice=70.4b [ 435.249758][ T5935] usb 4-1: New USB device strings: Mfr=44, Product=2, SerialNumber=3 [ 435.294396][ T5935] usb 4-1: Product: syz [ 435.298639][ T5935] usb 4-1: Manufacturer: syz [ 435.316460][ T5935] usb 4-1: SerialNumber: syz [ 435.569001][ T7855] dummy0: left allmulticast mode [ 435.577099][ T7855] bridge0: port 3(dummy0) entered disabled state [ 435.957831][ T7855] batman_adv: batadv0: Adding interface: dummy0 [ 435.964985][ T7855] batman_adv: batadv0: The MTU of interface dummy0 is too small (1536) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1596 would solve the problem. [ 435.991712][ T7855] batman_adv: batadv0: Interface activated: dummy0 [ 436.042874][ T5935] usb 4-1: Handspring Visor / Palm OS: No valid connect info available [ 437.303129][ T7857] batadv0: mtu less than device minimum [ 437.312816][ T7857] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 437.326873][ T7857] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 437.340804][ T7857] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 437.354135][ T7857] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 437.368236][ T7857] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 437.382279][ T7857] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 437.396244][ T7857] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 437.408356][ T7857] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 437.728626][ T5935] usb 4-1: Handspring Visor / Palm OS: port 0, is for HotSync use [ 438.453689][ T5935] usb 4-1: Handspring Visor / Palm OS: port 0, is for Generic use [ 438.461701][ T5935] usb 4-1: Handspring Visor / Palm OS: Number of ports: 2 [ 438.729817][ T7865] /dev/sg0: Can't lookup blockdev [ 439.214200][ T5935] usb 4-1: palm_os_3_probe - error -110 getting bytes available request [ 439.505019][ T5935] visor 4-1:1.0: Handspring Visor / Palm OS converter detected [ 439.603076][ T5935] usb 4-1: Handspring Visor / Palm OS converter now attached to ttyUSB0 [ 439.663787][ T5919] usb 5-1: USB disconnect, device number 20 [ 439.777296][ T5935] usb 4-1: Handspring Visor / Palm OS converter now attached to ttyUSB1 [ 439.967807][ T5935] usb 4-1: USB disconnect, device number 19 [ 439.989427][ T7493] udevd[7493]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 440.054844][ T5905] usb 2-1: new full-speed USB device number 16 using dummy_hcd [ 440.064287][ T5935] visor ttyUSB0: Handspring Visor / Palm OS converter now disconnected from ttyUSB0 [ 440.085089][ T5935] visor ttyUSB1: Handspring Visor / Palm OS converter now disconnected from ttyUSB1 [ 440.095392][ T5935] visor 4-1:1.0: device disconnected [ 440.239713][ T7864] syz.0.435 (7864): drop_caches: 2 [ 440.245365][ T5905] usb 2-1: device descriptor read/64, error -71 [ 440.496140][ T5905] usb 2-1: new full-speed USB device number 17 using dummy_hcd [ 441.051817][ T5905] usb 2-1: device descriptor read/64, error -71 [ 441.500110][ T5905] usb usb2-port1: attempt power cycle [ 441.842833][ T5905] usb 2-1: new full-speed USB device number 18 using dummy_hcd [ 442.133437][ T5905] usb 2-1: device descriptor read/8, error -71 [ 442.223087][ T7894] tipc: Started in network mode [ 442.228183][ T7894] tipc: Node identity 8ed9d64f1a21, cluster identity 4711 [ 442.275136][ T7894] tipc: Enabled bearer , priority 0 [ 442.336472][ T7895] syzkaller0: entered promiscuous mode [ 442.363075][ T7895] syzkaller0: entered allmulticast mode [ 442.606339][ T7892] tipc: Resetting bearer [ 442.705892][ T7892] tipc: Disabling bearer [ 442.732738][ T5957] usb 3-1: new full-speed USB device number 26 using dummy_hcd [ 443.015618][ T5957] usb 3-1: not running at top speed; connect to a high speed hub [ 443.041553][ T5957] usb 3-1: config 95 has an invalid interface number: 1 but max is 0 [ 443.063355][ T43] usb 4-1: new high-speed USB device number 20 using dummy_hcd [ 443.077573][ T5957] usb 3-1: config 95 has no interface number 0 [ 443.098730][ T5957] usb 3-1: config 95 interface 1 has no altsetting 0 [ 443.118677][ T5957] usb 3-1: New USB device found, idVendor=0763, idProduct=2031, bcdDevice=ad.3f [ 443.140315][ T5957] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 443.202438][ T7911] net_ratelimit: 11 callbacks suppressed [ 443.208279][ T7911] batman_adv: batadv0: Local translation table size (108) exceeds maximum packet size (-320); Ignoring new local tt entry: 00:00:00:00:00:00 [ 443.227657][ T5957] usb 3-1: Product: syz [ 443.393202][ T5957] usb 3-1: Manufacturer: syz [ 443.461364][ T5957] usb 3-1: SerialNumber: syz [ 443.842702][ T43] usb 4-1: Using ep0 maxpacket: 8 [ 444.091439][ T43] usb 4-1: New USB device found, idVendor=2770, idProduct=9120, bcdDevice=6c.77 [ 444.102444][ T43] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 444.116448][ T43] usb 4-1: Product: syz [ 444.123198][ T43] usb 4-1: Manufacturer: syz [ 444.127955][ T43] usb 4-1: SerialNumber: syz [ 444.136141][ T43] usb 4-1: config 0 descriptor?? [ 444.155944][ T43] gspca_main: sq905-2.14.0 probing 2770:9120 [ 444.328433][ T5957] usb 3-1: USB disconnect, device number 26 [ 444.575859][ T7496] udevd[7496]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:95.1/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 444.726169][ T43] gspca_sq905: bulk read fail (-22) len 0/4 [ 444.749939][ T43] sq905 4-1:0.0: probe with driver sq905 failed with error -5 [ 445.237430][ T1303] ieee802154 phy1 wpan1: encryption failed: -22 [ 445.541343][ T5957] usb 4-1: USB disconnect, device number 20 [ 446.748145][ T7942] syz_tun: entered allmulticast mode [ 446.804246][ T7942] dvmrp1: entered allmulticast mode [ 447.144654][ T7933] syz_tun: left allmulticast mode [ 447.592087][ T7954] netdevsim netdevsim0 : renamed from netdevsim0 (while UP) [ 447.731686][ T7958] fanotify: failed to encode fid (type=0, len=0, err=-2) [ 447.732528][ T7949] fanotify: failed to encode fid (type=0, len=0, err=-2) [ 448.042188][ T7964] batman_adv: batadv0: Local translation table size (96) exceeds maximum packet size (-320); Ignoring new local tt entry: 00:00:00:00:00:00 [ 452.793398][ T7991] netlink: 4 bytes leftover after parsing attributes in process `syz.1.465'. [ 453.568969][ T8001] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 453.631215][ T8001] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 454.474143][ T5957] usb 2-1: new full-speed USB device number 21 using dummy_hcd [ 454.919654][ T8004] syz.2.469 (8004) used greatest stack depth: 16320 bytes left [ 455.220242][ T8018] batman_adv: batadv0: Local translation table size (96) exceeds maximum packet size (-320); Ignoring new local tt entry: 00:00:00:00:00:00 [ 456.772669][ T30] audit: type=1326 audit(1755402993.903:97): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8023 comm="syz.1.475" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7efcc0f8ebe9 code=0x7ffc0000 [ 456.807555][ T8024] x_tables: ip6_tables: icmp6 match: only valid for protocol 58 [ 456.846807][ T30] audit: type=1326 audit(1755402993.903:98): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8023 comm="syz.1.475" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7efcc0f8ebe9 code=0x7ffc0000 [ 456.928667][ T30] audit: type=1326 audit(1755402993.903:99): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8023 comm="syz.1.475" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7efcc0f8ebe9 code=0x7ffc0000 [ 457.114086][ T8031] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 457.800722][ T30] audit: type=1326 audit(1755402993.903:100): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8023 comm="syz.1.475" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7efcc0f8ebe9 code=0x7ffc0000 [ 457.878291][ T8034] netlink: 9 bytes leftover after parsing attributes in process `syz.3.477'. [ 457.986620][ T30] audit: type=1326 audit(1755402993.913:101): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8023 comm="syz.1.475" exe="/root/syz-executor" sig=0 arch=c000003e syscall=46 compat=0 ip=0x7efcc0f8ebe9 code=0x7ffc0000 [ 458.065312][ T30] audit: type=1326 audit(1755402993.953:102): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8023 comm="syz.1.475" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7efcc0f8ebe9 code=0x7ffc0000 [ 458.088130][ T30] audit: type=1326 audit(1755402993.953:103): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8023 comm="syz.1.475" exe="/root/syz-executor" sig=0 arch=c000003e syscall=54 compat=0 ip=0x7efcc0f8ebe9 code=0x7ffc0000 [ 458.112836][ T30] audit: type=1326 audit(1755402994.023:104): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8023 comm="syz.1.475" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7efcc0f8ebe9 code=0x7ffc0000 [ 458.134778][ T30] audit: type=1326 audit(1755402994.023:105): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8023 comm="syz.1.475" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7efcc0f8ebe9 code=0x7ffc0000 [ 458.183533][ T30] audit: type=1326 audit(1755402994.073:106): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8023 comm="syz.1.475" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7efcc0f8d550 code=0x7ffc0000 [ 458.572756][ T5905] usb 1-1: new high-speed USB device number 8 using dummy_hcd [ 459.052601][ T5905] usb 1-1: Using ep0 maxpacket: 16 [ 459.080617][ T8037] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 459.093125][ T8037] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 459.112977][ T8048] netlink: 40 bytes leftover after parsing attributes in process `syz.2.481'. [ 459.156091][ T5905] usb 1-1: unable to get BOS descriptor or descriptor too short [ 459.171357][ T5905] usb 1-1: unable to read config index 0 descriptor/start: -71 [ 459.223196][ T5905] usb 1-1: can't read configurations, error -71 [ 459.486414][ T8059] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 459.516753][ T8059] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:1) [ 459.772590][ T5918] usb 4-1: new high-speed USB device number 21 using dummy_hcd [ 459.948085][ T5851] Bluetooth: hci0: Opcode 0x0c1a failed: -110 [ 459.969431][ T5918] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 460.023795][ T5847] Bluetooth: hci0: command 0x0c1a tx timeout [ 460.031010][ T5918] usb 4-1: New USB device found, idVendor=060b, idProduct=0001, bcdDevice= 0.00 [ 460.040706][ T5918] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 460.112355][ T5918] usb 4-1: config 0 descriptor?? [ 460.714043][ T5918] macally 0003:060B:0001.0006: item fetching failed at offset 0/2 [ 460.743643][ T5918] macally 0003:060B:0001.0006: probe with driver macally failed with error -22 [ 460.871711][ T5935] usb 4-1: USB disconnect, device number 21 [ 461.634973][ T8098] netlink: 24 bytes leftover after parsing attributes in process `syz.3.493'. [ 461.696679][ T8100] netlink: 40 bytes leftover after parsing attributes in process `syz.3.493'. [ 462.023068][ T5918] usb 4-1: new high-speed USB device number 22 using dummy_hcd [ 462.253609][ T5918] usb 4-1: Using ep0 maxpacket: 16 [ 462.318006][ T5918] usb 4-1: config 0 has an invalid interface number: 198 but max is 2 [ 462.374840][ T5918] usb 4-1: config 0 has an invalid interface number: 11 but max is 2 [ 462.472746][ T8103] netlink: 16 bytes leftover after parsing attributes in process `syz.0.494'. [ 462.555514][ T5918] usb 4-1: config 0 has an invalid descriptor of length 1, skipping remainder of the config [ 462.586558][ T5918] usb 4-1: config 0 has 2 interfaces, different from the descriptor's value: 3 [ 462.619436][ T5918] usb 4-1: config 0 has no interface number 0 [ 462.634269][ T5918] usb 4-1: config 0 has no interface number 1 [ 462.651044][ T5918] usb 4-1: config 0 interface 198 altsetting 9 has an invalid descriptor for endpoint zero, skipping [ 463.620415][ T5918] usb 4-1: config 0 interface 198 altsetting 9 endpoint 0xE has an invalid bInterval 177, changing to 11 [ 463.646721][ T8107] netlink: 12 bytes leftover after parsing attributes in process `syz.4.495'. [ 464.655994][ T5918] usb 4-1: config 0 interface 198 altsetting 9 endpoint 0xB has invalid maxpacket 1024, setting to 64 [ 464.689607][ T5918] usb 4-1: config 0 interface 198 altsetting 9 has an endpoint descriptor with address 0x9F, changing to 0x8F [ 464.708094][ T5918] usb 4-1: config 0 interface 198 altsetting 9 endpoint 0x2 has invalid maxpacket 1023, setting to 64 [ 464.719596][ T5918] usb 4-1: config 0 interface 198 altsetting 9 has a duplicate endpoint with address 0xB, skipping [ 464.797285][ T5918] usb 4-1: config 0 interface 198 altsetting 9 has an invalid descriptor for endpoint zero, skipping [ 464.854281][ T5918] usb 4-1: config 0 interface 198 altsetting 9 has 10 endpoint descriptors, different from the interface descriptor's value: 13 [ 465.450201][ T5918] usb 4-1: config 0 interface 11 altsetting 5 endpoint 0x9 has invalid maxpacket 1024, setting to 64 [ 465.475514][ T5918] usb 4-1: config 0 interface 11 altsetting 5 has 1 endpoint descriptor, different from the interface descriptor's value: 4 [ 465.489788][ T5918] usb 4-1: config 0 interface 198 has no altsetting 0 [ 465.496987][ T5918] usb 4-1: config 0 interface 11 has no altsetting 0 [ 465.514003][ T5918] usb 4-1: string descriptor 0 read error: -71 [ 465.525213][ T5918] usb 4-1: New USB device found, idVendor=12d1, idProduct=f24a, bcdDevice=4a.d9 [ 465.547008][ T5918] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 465.734740][ T5918] usb 4-1: config 0 descriptor?? [ 465.741841][ T5918] usb 4-1: can't set config #0, error -71 [ 465.751096][ T5918] usb 4-1: USB disconnect, device number 22 [ 465.968640][ T5847] Bluetooth: hci2: unexpected event for opcode 0x0405 [ 469.023843][ T8156] batman_adv: batadv0: Local translation table size (96) exceeds maximum packet size (-320); Ignoring new local tt entry: 00:00:00:00:00:00 [ 476.883755][ T5847] Bluetooth: hci0: unexpected event 0x2f length: 509 > 260 [ 477.713867][ T8186] netlink: 4 bytes leftover after parsing attributes in process `syz.3.513'. [ 478.300279][ T8185] netlink: zone id is out of range [ 478.339597][ T8185] netlink: zone id is out of range [ 478.349775][ T8185] netlink: zone id is out of range [ 478.382205][ T8185] netlink: zone id is out of range [ 478.428268][ T8185] netlink: zone id is out of range [ 478.454933][ T8185] netlink: zone id is out of range [ 478.482015][ T8185] netlink: zone id is out of range [ 478.487623][ T8185] netlink: zone id is out of range [ 478.498546][ T8185] netlink: zone id is out of range [ 478.529543][ T8185] netlink: zone id is out of range [ 480.439539][ T8204] trusted_key: encrypted_key: master key parameter 'deFault' is invalid [ 480.450045][ T8204] trusted_key: encrypted_key: master key parameter 'deFault' is invalid [ 481.403198][ T8217] kvm: kvm [8216]: vcpu2, guest rIP: 0xfff0 Unhandled WRMSR(0xc0010015) = 0x85 [ 482.253285][ T5905] usb 3-1: new high-speed USB device number 27 using dummy_hcd [ 482.446221][ T5905] usb 3-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 482.482660][ T5905] usb 3-1: New USB device found, idVendor=0419, idProduct=0600, bcdDevice= 0.00 [ 482.519343][ T5905] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 482.587258][ T5905] usb 3-1: config 0 descriptor?? [ 482.852783][ T43] usb 2-1: new high-speed USB device number 22 using dummy_hcd [ 483.237066][ T43] usb 2-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 483.316009][ T43] usb 2-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 483.390213][ T43] usb 2-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 483.438793][ T43] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 483.481030][ T8225] raw-gadget.1 gadget.1: fail, usb_ep_enable returned -22 [ 483.556491][ T43] usb 2-1: Quirk or no altset; falling back to MIDI 1.0 [ 484.438594][ T8241] netlink: 'syz.1.526': attribute type 10 has an invalid length. [ 484.551835][ T8243] netlink: 12 bytes leftover after parsing attributes in process `syz.1.526'. [ 484.768224][ T8241] team0: Device bond0 is already an upper device of the team interface [ 484.831155][ T8225] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 484.845210][ T8225] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 485.679535][ T5957] usb 3-1: USB disconnect, device number 27 [ 486.489191][ T8266] net_ratelimit: 736 callbacks suppressed [ 486.489210][ T8266] batman_adv: batadv0: Local translation table size (84) exceeds maximum packet size (-320); Ignoring new local tt entry: 00:00:00:00:00:00 [ 488.030221][ T5990] usb 2-1: USB disconnect, device number 22 [ 488.372216][ T5905] usb 4-1: new high-speed USB device number 23 using dummy_hcd [ 488.402551][ T43] usb 1-1: new full-speed USB device number 10 using dummy_hcd [ 488.562728][ T5905] usb 4-1: device descriptor read/64, error -71 [ 488.583882][ C1] Illegal XDP return value 16128 on prog (id 121) dev lo, expect packet loss! [ 488.598103][ T43] usb 1-1: config 0 has an invalid descriptor of length 114, skipping remainder of the config [ 488.608760][ T43] usb 1-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 488.629497][ T43] usb 1-1: New USB device found, idVendor=0675, idProduct=1688, bcdDevice=59.4c [ 488.640972][ T43] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 488.652566][ T43] usb 1-1: Product: syz [ 488.667108][ T43] usb 1-1: Manufacturer: syz [ 488.671979][ T43] usb 1-1: SerialNumber: syz [ 488.683875][ T43] usb 1-1: config 0 descriptor?? [ 488.727712][ T8278] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 488.812951][ T5905] usb 4-1: new high-speed USB device number 24 using dummy_hcd [ 488.906358][ T8274] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 488.953200][ T8274] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 488.963075][ T5905] usb 4-1: device descriptor read/64, error -71 [ 489.015773][ T5990] usb 1-1: USB disconnect, device number 10 [ 489.132978][ T5905] usb usb4-port1: attempt power cycle [ 489.333116][ T5935] usb 5-1: new high-speed USB device number 21 using dummy_hcd [ 489.492727][ T5905] usb 4-1: new high-speed USB device number 25 using dummy_hcd [ 489.506168][ T5935] usb 5-1: Using ep0 maxpacket: 8 [ 489.547397][ T5905] usb 4-1: device descriptor read/8, error -71 [ 489.552759][ T5935] usb 5-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 489.577195][ T5935] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 489.610367][ T5935] usb 5-1: Product: syz [ 489.623894][ T5935] usb 5-1: Manufacturer: syz [ 489.634973][ T5935] usb 5-1: SerialNumber: syz [ 489.649260][ T5935] usb 5-1: config 0 descriptor?? [ 489.803506][ T5905] usb 4-1: new high-speed USB device number 26 using dummy_hcd [ 489.824057][ T5905] usb 4-1: device descriptor read/8, error -71 [ 489.876762][ T5935] usb 5-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 489.932909][ T5905] usb usb4-port1: unable to enumerate USB device [ 490.004425][ T5918] usb 1-1: new high-speed USB device number 11 using dummy_hcd [ 490.142766][ T5935] dvb_usb_rtl28xxu 5-1:0.0: probe with driver dvb_usb_rtl28xxu failed with error -71 [ 490.173280][ T5935] usb 5-1: USB disconnect, device number 21 [ 490.188682][ T5918] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 490.227282][ T5918] usb 1-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xA1, changing to 0x81 [ 490.254306][ T5918] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 490.279361][ T5918] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 490.299680][ T5918] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0xB has invalid wMaxPacketSize 0 [ 490.312344][ T5918] usb 1-1: config 0 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 0 [ 490.327428][ T5918] usb 1-1: New USB device found, idVendor=2294, idProduct=425a, bcdDevice=d1.41 [ 490.337174][ T5918] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 490.346197][ T5918] usb 1-1: Product: syz [ 490.350712][ T5918] usb 1-1: Manufacturer: syz [ 490.357128][ T5918] usb 1-1: SerialNumber: syz [ 490.373437][ T5918] usb 1-1: config 0 descriptor?? [ 490.386560][ T8306] fuse: Unknown parameter '' [ 490.601319][ T5918] usb 1-1: ucan: probing device on interface #0 [ 490.615799][ T5918] usb 1-1: ucan: invalid endpoint configuration [ 490.622377][ T5918] usb 1-1: ucan: probe failed; try to update the device firmware [ 490.644712][ T5918] usb 1-1: USB disconnect, device number 11 [ 490.692798][ T5935] usb 5-1: new high-speed USB device number 22 using dummy_hcd [ 490.832614][ T5935] usb 5-1: device descriptor read/64, error -71 [ 491.082553][ T5935] usb 5-1: new high-speed USB device number 23 using dummy_hcd [ 491.232774][ T5935] usb 5-1: device descriptor read/64, error -71 [ 491.388138][ T8315] batman_adv: batadv0: Local translation table size (96) exceeds maximum packet size (-320); Ignoring new local tt entry: 00:00:00:00:00:00 [ 491.564756][ T5918] usb 3-1: new high-speed USB device number 28 using dummy_hcd [ 491.645627][ T5935] usb usb5-port1: attempt power cycle [ 491.833061][ T43] usb 1-1: new full-speed USB device number 12 using dummy_hcd [ 491.844956][ T5918] usb 3-1: Using ep0 maxpacket: 8 [ 492.103234][ T43] usb 1-1: config 127 has an invalid interface number: 231 but max is 0 [ 492.189858][ T43] usb 1-1: config 127 has no interface number 0 [ 492.240889][ T43] usb 1-1: New USB device found, idVendor=2c7c, idProduct=012b, bcdDevice=ce.f8 [ 492.281409][ T43] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 492.325814][ T43] option 1-1:127.231: GSM modem (1-port) converter detected [ 492.771349][ T5935] usb 5-1: new high-speed USB device number 24 using dummy_hcd [ 493.307630][ T5935] usb 5-1: device descriptor read/8, error -71 [ 493.847265][ T5957] usb 1-1: USB disconnect, device number 12 [ 493.865845][ T5957] option 1-1:127.231: device disconnected [ 494.242668][ T5918] usb 3-1: unable to get BOS descriptor or descriptor too short [ 494.279043][ T5918] usb 3-1: unable to read config index 0 descriptor/start: -71 [ 494.304093][ T5918] usb 3-1: can't read configurations, error -71 [ 494.754914][ T8337] : entered promiscuous mode [ 494.924812][ T8342] netlink: 199836 bytes leftover after parsing attributes in process `syz.2.557'. [ 494.980692][ T5847] block nbd2: Receive control failed (result -107) [ 495.028399][ T8338] block nbd2: shutting down sockets [ 495.430421][ T8383] cgroup: noprefix used incorrectly [ 495.499450][ T8390] batman_adv: batadv0: Local translation table size (96) exceeds maximum packet size (-320); Ignoring new local tt entry: 00:00:00:00:00:00 [ 495.782309][ T8326] usb 5-1: new high-speed USB device number 26 using dummy_hcd [ 496.442659][ T8326] usb 5-1: Using ep0 maxpacket: 32 [ 496.457585][ T8326] usb 5-1: config 0 has an invalid interface number: 126 but max is 0 [ 496.467000][ T8326] usb 5-1: config 0 has no interface number 0 [ 496.477814][ T8326] usb 5-1: config 0 interface 126 altsetting 16 bulk endpoint 0x6 has invalid maxpacket 1023 [ 496.492252][ T8326] usb 5-1: config 0 interface 126 altsetting 16 bulk endpoint 0x82 has invalid maxpacket 8 [ 496.503849][ T8326] usb 5-1: config 0 interface 126 has no altsetting 0 [ 496.535761][ T8326] usb 5-1: New USB device found, idVendor=09c4, idProduct=0011, bcdDevice=b0.1c [ 496.573451][ T8326] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 496.579711][ T5935] usb 1-1: new high-speed USB device number 13 using dummy_hcd [ 496.581589][ T8326] usb 5-1: Product: syz [ 496.633281][ T8326] usb 5-1: Manufacturer: syz [ 496.637962][ T8326] usb 5-1: SerialNumber: syz [ 496.665310][ T8326] usb 5-1: config 0 descriptor?? [ 496.677141][ T8384] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 496.693277][ T8384] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 496.764997][ T5935] usb 1-1: Using ep0 maxpacket: 32 [ 496.777260][ T5935] usb 1-1: config 0 has an invalid interface number: 145 but max is 1 [ 496.788254][ T5935] usb 1-1: config 0 has an invalid interface number: 43 but max is 1 [ 497.017243][ T5935] usb 1-1: config 0 has an invalid descriptor of length 137, skipping remainder of the config [ 497.030255][ T5935] usb 1-1: config 0 has no interface number 0 [ 497.037278][ T5935] usb 1-1: config 0 has no interface number 1 [ 497.044659][ T5935] usb 1-1: config 0 interface 43 altsetting 250 has 0 endpoint descriptors, different from the interface descriptor's value: 2 [ 497.059414][ T5935] usb 1-1: config 0 interface 145 has no altsetting 0 [ 497.169048][ T8418] netlink: 4 bytes leftover after parsing attributes in process `syz.3.567'. [ 497.747063][ T5935] usb 1-1: config 0 interface 43 has no altsetting 0 [ 497.809338][ T5935] usb 1-1: New USB device found, idVendor=06cd, idProduct=0104, bcdDevice=c8.6a [ 497.939380][ T8326] ir_usb 5-1:0.126: IR Dongle converter detected [ 498.357207][ T5935] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 498.469089][ T5935] usb 1-1: Product: syz [ 498.529276][ T5935] usb 1-1: Manufacturer: syz [ 498.593440][ T5935] usb 1-1: SerialNumber: syz [ 498.608633][ T8326] usb 5-1: IRDA class descriptor not found, device not bound [ 498.648454][ T5935] usb 1-1: config 0 descriptor?? [ 498.897220][ T5957] usb 5-1: USB disconnect, device number 26 [ 498.914611][ T5935] keyspan_pda 1-1:0.145: required endpoints missing [ 498.949327][ T5935] keyspan_pda 1-1:0.43: required endpoints missing [ 499.002860][ T5935] usb 1-1: USB disconnect, device number 13 [ 499.781459][ T8426] fanotify: failed to encode fid (type=0, len=0, err=-2) [ 502.262970][ T8443] ubi31: attaching mtd0 [ 502.278411][ T8443] ubi31: scanning is finished [ 502.278476][ T8443] ubi31: empty MTD device detected [ 502.871805][ T8440] tmpfs: Bad value for 'mpol' [ 502.931112][ T8443] ubi31: attached mtd0 (name "mtdram test device", size 0 MiB) [ 502.939161][ T8443] ubi31: PEB size: 4096 bytes (4 KiB), LEB size: 3968 bytes [ 502.946643][ T8443] ubi31: min./max. I/O unit sizes: 1/64, sub-page size 1 [ 502.953764][ T8443] ubi31: VID header offset: 64 (aligned 64), data offset: 128 [ 502.961368][ T8443] ubi31: good PEBs: 32, bad PEBs: 0, corrupted PEBs: 0 [ 502.968291][ T8443] ubi31: user volume: 0, internal volumes: 1, max. volumes count: 23 [ 502.976506][ T8443] ubi31: max/mean erase counter: 0/0, WL threshold: 4096, image sequence number: 3506992556 [ 502.986832][ T8443] ubi31: available PEBs: 28, total reserved PEBs: 4, PEBs reserved for bad PEB handling: 0 [ 503.000273][ T8449] ubi31: background thread "ubi_bgt31d" started, PID 8449 [ 503.838748][ T8459] tipc: Started in network mode [ 503.874994][ T8459] tipc: Node identity 4a1f5477d512, cluster identity 4711 [ 503.895511][ T8459] tipc: Enabled bearer , priority 0 [ 503.902882][ T8461] syzkaller0: entered promiscuous mode [ 503.908412][ T8461] syzkaller0: entered allmulticast mode [ 504.008551][ T8471] vhci_hcd vhci_hcd.0: pdev(0) rhport(0) sockfd(3) [ 504.015154][ T8471] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 504.046078][ T8459] tipc: Resetting bearer [ 504.148433][ T8467] netlink: 4 bytes leftover after parsing attributes in process `syz.3.580'. [ 504.152010][ T8471] vhci_hcd vhci_hcd.0: Device attached [ 504.193290][ T8458] tipc: Resetting bearer [ 504.212846][ T8472] usbip_core: unknown command [ 504.224300][ T8472] vhci_hcd: unknown pdu 16842751 [ 504.231071][ T8472] usbip_core: unknown command [ 504.303949][ T8458] tipc: Disabling bearer [ 504.327079][ T8378] vhci_hcd: stop threads [ 504.349091][ T8378] vhci_hcd: release socket [ 504.374686][ T8378] vhci_hcd: disconnect device [ 504.432764][ T8326] vhci_hcd: vhci_device speed not set [ 505.988979][ T8491] batman_adv: batadv0: Local translation table size (108) exceeds maximum packet size (-320); Ignoring new local tt entry: 00:00:00:00:00:00 [ 506.667319][ T1303] ieee802154 phy1 wpan1: encryption failed: -22 [ 508.882153][ T8496] netlink: 20 bytes leftover after parsing attributes in process `syz.2.588'. [ 508.925121][ T8496] netlink: 32 bytes leftover after parsing attributes in process `syz.2.588'. [ 509.879986][ T8505] netlink: 52 bytes leftover after parsing attributes in process `syz.2.588'. [ 510.277050][ T8518] C: renamed from team_slave_0 (while UP) [ 510.391791][ T8518] netlink: 'syz.0.593': attribute type 1 has an invalid length. [ 510.403074][ T8518] netlink: 152 bytes leftover after parsing attributes in process `syz.0.593'. [ 510.414738][ T8518] A link change request failed with some changes committed already. Interface C may have been left with an inconsistent configuration, please check. [ 511.832417][ T8531] bad cache= option: no%e [ 511.832417][ T8531] [ 511.841020][ T8531] CIFS: VFS: bad cache= option: no%e [ 511.962616][ T5990] usb 2-1: new high-speed USB device number 23 using dummy_hcd [ 512.112629][ T8326] usb 4-1: new high-speed USB device number 27 using dummy_hcd [ 512.134910][ T5990] usb 2-1: config 4 has an invalid interface number: 121 but max is 0 [ 512.151286][ T5990] usb 2-1: config 4 has no interface number 0 [ 512.167808][ T5990] usb 2-1: config 4 interface 121 has no altsetting 0 [ 512.185271][ T5990] usb 2-1: New USB device found, idVendor=6b86, idProduct=c211, bcdDevice=25.ca [ 512.202108][ T5990] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 512.216061][ T5990] usb 2-1: Product: syz [ 512.226462][ T5990] usb 2-1: Manufacturer: syz [ 512.234872][ T5990] usb 2-1: SerialNumber: syz [ 512.284206][ T8326] usb 4-1: device descriptor read/64, error -71 [ 512.472105][ T5990] usb 2-1: USB disconnect, device number 23 [ 512.497259][ T8536] netlink: 47 bytes leftover after parsing attributes in process `syz.2.599'. [ 512.552919][ T8326] usb 4-1: new high-speed USB device number 28 using dummy_hcd [ 512.692744][ T8326] usb 4-1: device descriptor read/64, error -71 [ 512.895540][ T8326] usb usb4-port1: attempt power cycle [ 513.483073][ T8326] usb 4-1: new high-speed USB device number 29 using dummy_hcd [ 513.499182][ T8554] netlink: 40 bytes leftover after parsing attributes in process `syz.1.605'. [ 513.517054][ T8326] usb 4-1: device descriptor read/8, error -71 [ 513.714850][ T8554] kvm: pic: non byte write [ 513.852943][ T5990] usb 5-1: new high-speed USB device number 27 using dummy_hcd [ 513.926425][ T8563] 9pnet_fd: Insufficient options for proto=fd [ 514.637667][ T8326] usb 4-1: new high-speed USB device number 30 using dummy_hcd [ 514.759253][ T5990] usb 5-1: New USB device found, idVendor=0b95, idProduct=772b, bcdDevice=a2.4c [ 514.783831][ T5990] usb 5-1: New USB device strings: Mfr=24, Product=2, SerialNumber=3 [ 514.814469][ T5990] usb 5-1: Product: syz [ 514.821019][ T5990] usb 5-1: Manufacturer: syz [ 514.854783][ T5990] usb 5-1: SerialNumber: syz [ 514.892797][ T8326] usb 4-1: device descriptor read/8, error -71 [ 514.895330][ T5990] usb 5-1: config 0 descriptor?? [ 514.970960][ T8570] netlink: 24 bytes leftover after parsing attributes in process `syz.0.609'. [ 515.004170][ T8326] usb usb4-port1: unable to enumerate USB device [ 515.015067][ T8573] netlink: 20 bytes leftover after parsing attributes in process `syz.3.610'. [ 515.073593][ T8573] netlink: 32 bytes leftover after parsing attributes in process `syz.3.610'. [ 515.140213][ T5990] asix 5-1:0.0 (unnamed net_device) (uninitialized): Failed to read reg index 0x0000: -61 [ 515.191516][ T5990] asix 5-1:0.0: probe with driver asix failed with error -61 [ 515.435533][ T8578] netlink: 52 bytes leftover after parsing attributes in process `syz.3.610'. [ 516.110311][ T5935] usb 5-1: USB disconnect, device number 27 [ 516.252614][ T5990] usb 1-1: new high-speed USB device number 14 using dummy_hcd [ 516.422538][ T5990] usb 1-1: Using ep0 maxpacket: 32 [ 516.441198][ T5990] usb 1-1: config index 0 descriptor too short (expected 35577, got 27) [ 516.452564][ T5935] usb 5-1: new high-speed USB device number 28 using dummy_hcd [ 516.464752][ T5990] usb 1-1: config 1 has too many interfaces: 92, using maximum allowed: 32 [ 516.482690][ T5990] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 92 [ 516.502080][ T5990] usb 1-1: config 1 has no interface number 0 [ 516.514009][ T5990] usb 1-1: config 1 interface 1 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 516.538076][ T5990] usb 1-1: config 1 interface 1 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 17 [ 516.573863][ T5990] usb 1-1: New USB device found, idVendor=0e41, idProduct=5051, bcdDevice=d5.e8 [ 516.592640][ T5990] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 516.630353][ T5990] snd_usb_pod 1-1:1.1: Line 6 Pocket POD found [ 516.642698][ T5935] usb 5-1: Using ep0 maxpacket: 8 [ 517.465149][ T5990] snd_usb_pod 1-1:1.1: Line 6 Pocket POD now attached [ 517.472733][ T5935] usb 5-1: unable to get BOS descriptor or descriptor too short [ 517.495100][ T5935] usb 5-1: config 1 interface 0 altsetting 1 bulk endpoint 0x1 has invalid maxpacket 64 [ 517.512546][ T5935] usb 5-1: config 1 interface 0 altsetting 1 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 517.543519][ T5935] usb 5-1: config 1 interface 0 has no altsetting 0 [ 517.663922][ T5935] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40 [ 517.683005][ T5935] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 517.689270][ T8326] usb 1-1: USB disconnect, device number 14 [ 517.691396][ T5935] usb 5-1: Product: syz [ 517.730065][ T8326] snd_usb_pod 1-1:1.1: Line 6 Pocket POD now disconnected [ 517.746936][ T5935] usb 5-1: Manufacturer: syz [ 517.751843][ T5935] usb 5-1: SerialNumber: syz [ 517.779408][ T8583] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 518.427508][ T8595] Bluetooth: hci0: Opcode 0x0c03 failed: -4 [ 518.924018][ T8605] netlink: 52 bytes leftover after parsing attributes in process `syz.1.619'. [ 519.022863][ T5935] usblp 5-1:1.0: usblp0: USB Unidirectional printer dev 28 if 0 alt 1 proto 1 vid 0x0525 pid 0xA4A8 [ 519.075484][ T5935] usb 5-1: USB disconnect, device number 28 [ 519.106488][ T5935] usblp0: removed [ 519.113203][ T8605] bridge1: entered allmulticast mode [ 519.154775][ T8613] netlink: 4 bytes leftover after parsing attributes in process `syz.1.619'. [ 521.274835][ T8627] netlink: 20 bytes leftover after parsing attributes in process `syz.2.624'. [ 521.290267][ T8627] netlink: 32 bytes leftover after parsing attributes in process `syz.2.624'. [ 521.445899][ T5935] usb 5-1: new high-speed USB device number 29 using dummy_hcd [ 521.781366][ T8632] netlink: 52 bytes leftover after parsing attributes in process `syz.2.624'. [ 522.296694][ T5935] usb 5-1: Using ep0 maxpacket: 8 [ 522.303574][ T5935] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 522.313937][ T5935] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 522.324213][ T5935] usb 5-1: config 1 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 522.335825][ T5935] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 522.348295][ T5935] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 522.359698][ T5935] usb 5-1: New USB device found, idVendor=0225, idProduct=0000, bcdDevice= 0.00 [ 522.368977][ T5935] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 522.380767][ T8622] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 522.390119][ T5935] hub 5-1:1.0: bad descriptor, ignoring hub [ 522.406171][ T5935] hub 5-1:1.0: probe with driver hub failed with error -5 [ 522.423346][ T5935] cdc_wdm 5-1:1.0: skipping garbage [ 522.432508][ T5935] cdc_wdm 5-1:1.0: skipping garbage [ 522.462350][ T5935] cdc_wdm 5-1:1.0: cdc-wdm0: USB WDM device [ 522.482342][ T5935] cdc_wdm 5-1:1.0: Unknown control protocol [ 523.236919][ T8643] netlink: 2 bytes leftover after parsing attributes in process `syz.0.627'. [ 523.323345][ T5990] usb 5-1: USB disconnect, device number 29 [ 523.348240][ T8647] netlink: 'syz.1.628': attribute type 20 has an invalid length. [ 525.352670][ T5896] usb 3-1: new high-speed USB device number 30 using dummy_hcd [ 525.532814][ T5896] usb 3-1: Using ep0 maxpacket: 16 [ 525.554121][ T5896] usb 3-1: config 0 has an invalid interface number: 105 but max is 0 [ 525.564532][ T5896] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 525.630585][ T5896] usb 3-1: config 0 has no interface number 0 [ 525.649062][ T5896] usb 3-1: New USB device found, idVendor=046d, idProduct=08f3, bcdDevice= b.28 [ 525.659163][ T5896] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 525.677267][ T5896] usb 3-1: Product: syz [ 525.681630][ T5896] usb 3-1: Manufacturer: syz [ 525.686339][ T5896] usb 3-1: SerialNumber: syz [ 525.694250][ T5896] usb 3-1: config 0 descriptor?? [ 525.704804][ T5896] usb 3-1: Found UVC 0.00 device syz (046d:08f3) [ 525.711283][ T5896] usb 3-1: No valid video chain found. [ 525.907026][ T8672] netlink: 8 bytes leftover after parsing attributes in process `syz.2.635'. [ 526.632617][ T8688] netlink: 20 bytes leftover after parsing attributes in process `syz.3.640'. [ 526.664618][ T8672] netlink: 12 bytes leftover after parsing attributes in process `syz.2.635'. [ 526.713248][ T8688] netlink: 32 bytes leftover after parsing attributes in process `syz.3.640'. [ 526.735315][ T5935] usb 3-1: USB disconnect, device number 30 [ 527.043504][ T8698] netlink: 52 bytes leftover after parsing attributes in process `syz.3.640'. [ 529.425644][ T8718] netlink: 4 bytes leftover after parsing attributes in process `syz.0.646'. [ 530.370863][ T8720] netlink: 'syz.4.647': attribute type 10 has an invalid length. [ 530.718239][ T8743] netlink: 4 bytes leftover after parsing attributes in process `syz.2.651'. [ 531.588443][ T8751] batman_adv: batadv0: Local translation table size (104) exceeds maximum packet size (-320); Ignoring new local tt entry: 00:00:00:00:00:00 [ 531.865502][ T5919] usb 2-1: new full-speed USB device number 24 using dummy_hcd [ 531.949179][ T8762] loop6: detected capacity change from 0 to 2560 [ 531.956717][ T8762] Buffer I/O error on dev loop6, logical block 0, async page read [ 531.964999][ T8762] Buffer I/O error on dev loop6, logical block 0, async page read [ 531.973032][ T8762] Buffer I/O error on dev loop6, logical block 0, async page read [ 531.981370][ T8762] Buffer I/O error on dev loop6, logical block 0, async page read [ 531.989508][ T8762] Buffer I/O error on dev loop6, logical block 0, async page read [ 531.997700][ T8762] Buffer I/O error on dev loop6, logical block 0, async page read [ 532.005926][ T8762] Buffer I/O error on dev loop6, logical block 0, async page read [ 532.014446][ T8762] Buffer I/O error on dev loop6, logical block 0, async page read [ 532.022619][ T8762] ldm_validate_partition_table(): Disk read failed. [ 532.029337][ T8762] Buffer I/O error on dev loop6, logical block 0, async page read [ 532.037603][ T8762] Buffer I/O error on dev loop6, logical block 0, async page read [ 532.045929][ T8762] Dev loop6: unable to read RDB block 0 [ 532.052054][ T8762] loop6: unable to read partition table [ 532.058112][ T8762] loop_reread_partitions: partition scan of loop6 (3Ÿ ¾‚³˜) failed (rc=-5) [ 532.073613][ T8326] usb 1-1: new high-speed USB device number 15 using dummy_hcd [ 532.104560][ T5919] usb 2-1: config 0 has an invalid interface number: 20 but max is 0 [ 532.121854][ T5919] usb 2-1: config 0 has no interface number 0 [ 532.129803][ T5919] usb 2-1: config 0 interface 20 altsetting 0 endpoint 0x6 has invalid maxpacket 1023, setting to 64 [ 532.144302][ T5919] usb 2-1: New USB device found, idVendor=04e6, idProduct=000b, bcdDevice= 1.00 [ 532.163444][ T5919] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 532.193441][ T5919] usb 2-1: Product: syz [ 532.200499][ T8771] cgroup: noprefix used incorrectly [ 532.213758][ T5919] usb 2-1: Manufacturer: syz [ 532.220843][ T5919] usb 2-1: SerialNumber: syz [ 532.235230][ T5919] usb 2-1: config 0 descriptor?? [ 532.241306][ T8749] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 532.275373][ T8326] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 532.287239][ T5919] usb-storage 2-1:0.20: USB Mass Storage device detected [ 532.306321][ T8326] usb 1-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 532.317963][ T5990] usb 4-1: new high-speed USB device number 31 using dummy_hcd [ 532.327434][ T5919] usb-storage 2-1:0.20: Quirks match for vid 04e6 pid 000b: 4 [ 532.338535][ T8326] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 532.368010][ T8326] usb 1-1: config 0 descriptor?? [ 532.410817][ T8776] netlink: 36 bytes leftover after parsing attributes in process `syz.4.660'. [ 532.501591][ T5919] scsi host1: usb-storage 2-1:0.20 [ 532.512637][ T5990] usb 4-1: Using ep0 maxpacket: 16 [ 532.520590][ T5990] usb 4-1: unable to get BOS descriptor or descriptor too short [ 532.544069][ T5990] usb 4-1: config 1 has an invalid descriptor of length 1, skipping remainder of the config [ 532.562574][ T5990] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 532.584343][ T5990] usb 4-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 532.591480][ T8326] usbhid 1-1:0.0: can't add hid device: -71 [ 532.593636][ T5990] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 532.593663][ T5990] usb 4-1: Product: syz [ 532.593680][ T5990] usb 4-1: Manufacturer: syz [ 532.593697][ T5990] usb 4-1: SerialNumber: syz [ 532.627440][ T8326] usbhid 1-1:0.0: probe with driver usbhid failed with error -71 [ 532.638044][ T8326] usb 1-1: USB disconnect, device number 15 [ 532.724595][ T5918] usb 2-1: USB disconnect, device number 24 [ 533.057201][ T8782] netlink: 4 bytes leftover after parsing attributes in process `syz.2.661'. [ 533.122871][ T8326] usb 1-1: new high-speed USB device number 16 using dummy_hcd [ 533.284689][ T8326] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 533.311169][ T8326] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 533.363620][ T8326] usb 1-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 533.392072][ T8326] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 533.439817][ T8326] usb 1-1: config 0 descriptor?? [ 533.775451][ T8793] netlink: 4 bytes leftover after parsing attributes in process `syz.1.663'. [ 533.917446][ T8326] plantronics 0003:047F:FFFF.0007: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.0-1/input0 [ 533.956748][ T8802] netlink: 16 bytes leftover after parsing attributes in process `syz.4.666'. [ 534.256749][ T8807] batman_adv: batadv0: Local translation table size (108) exceeds maximum packet size (-320); Ignoring new local tt entry: 00:00:00:00:00:00 [ 534.622055][ C1] plantronics 0003:047F:FFFF.0007: hid_field_extract() called with n (132) > 32! (syz.2.664) [ 534.622617][ T1218] usb 5-1: new high-speed USB device number 30 using dummy_hcd [ 534.798495][ T5990] usb 4-1: 0:2 : does not exist [ 534.934260][ T5990] usb 4-1: USB disconnect, device number 31 [ 534.949925][ T1218] usb 5-1: device descriptor read/64, error -71 [ 534.996817][ T7626] usb 1-1: USB disconnect, device number 16 [ 535.332248][ T1218] usb 5-1: new high-speed USB device number 31 using dummy_hcd [ 535.602632][ T1218] usb 5-1: device descriptor read/64, error -71 [ 535.712914][ T1218] usb usb5-port1: attempt power cycle [ 535.823323][ T8821] batman_adv: batadv0: Local translation table size (96) exceeds maximum packet size (-320); Ignoring new local tt entry: 00:00:00:00:00:00 [ 536.133673][ T8829] netlink: 4 bytes leftover after parsing attributes in process `syz.0.672'. [ 536.862578][ T1218] usb 5-1: new high-speed USB device number 32 using dummy_hcd [ 536.913088][ T1218] usb 5-1: device descriptor read/8, error -71 [ 537.164712][ T1218] usb 5-1: new high-speed USB device number 33 using dummy_hcd [ 537.188634][ T8842] batman_adv: batadv0: Local translation table size (104) exceeds maximum packet size (-320); Ignoring new local tt entry: 00:00:00:00:00:00 [ 537.252048][ T1218] usb 5-1: device descriptor read/8, error -71 [ 537.363215][ T1218] usb usb5-port1: unable to enumerate USB device [ 537.452720][ T5990] usb 3-1: new high-speed USB device number 31 using dummy_hcd [ 537.490705][ T8854] netlink: 'syz.3.684': attribute type 10 has an invalid length. [ 537.504994][ T8854] netlink: 40 bytes leftover after parsing attributes in process `syz.3.684'. [ 537.518264][ T8854] team0: entered promiscuous mode [ 537.523980][ T8855] netlink: 'syz.4.683': attribute type 1 has an invalid length. [ 537.536732][ T8854] team_slave_0: entered promiscuous mode [ 537.545216][ T8854] team_slave_1: entered promiscuous mode [ 537.551343][ T8854] team0: entered allmulticast mode [ 537.560655][ T8854] team_slave_0: entered allmulticast mode [ 537.566663][ T8854] team_slave_1: entered allmulticast mode [ 537.574157][ T8854] bridge0: port 3(team0) entered blocking state [ 537.585431][ T8854] bridge0: port 3(team0) entered disabled state [ 537.600203][ T8854] bridge0: port 3(team0) entered blocking state [ 537.606735][ T8854] bridge0: port 3(team0) entered forwarding state [ 537.618594][ T5990] usb 3-1: Using ep0 maxpacket: 16 [ 537.660611][ T5990] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 537.709728][ T5990] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 537.893231][ T8855] 8021q: adding VLAN 0 to HW filter on device bond2 [ 538.026488][ T5990] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 538.160932][ T5990] usb 3-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 538.253946][ T5990] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 538.297029][ T8857] bond2: (slave ip6gretap1): making interface the new active one [ 538.398154][ T5990] usb 3-1: config 0 descriptor?? [ 538.448683][ T8857] bond2: (slave ip6gretap1): Enslaving as an active interface with an up link [ 539.109886][ T8871] netlink: 4 bytes leftover after parsing attributes in process `syz.3.686'. [ 539.561290][ T5990] microsoft 0003:045E:07DA.0008: unknown main item tag 0x0 [ 539.572568][ T8620] Bluetooth: hci5: command 0x1003 tx timeout [ 539.581888][ T5847] Bluetooth: hci5: Opcode 0x1003 failed: -110 [ 539.590884][ T5990] microsoft 0003:045E:07DA.0008: ignoring exceeding usage max [ 539.916766][ T8874] netlink: 4 bytes leftover after parsing attributes in process `syz.4.685'. [ 540.225184][ T5990] microsoft 0003:045E:07DA.0008: hidraw0: USB HID v0.00 Device [HID 045e:07da] on usb-dummy_hcd.2-1/input0 [ 540.268334][ T5990] microsoft 0003:045E:07DA.0008: no inputs found [ 540.302375][ T5990] microsoft 0003:045E:07DA.0008: could not initialize ff, continuing anyway [ 540.540091][ T5990] usb 3-1: USB disconnect, device number 31 [ 540.640628][ T8880] batman_adv: batadv0: Local translation table size (96) exceeds maximum packet size (-320); Ignoring new local tt entry: 00:00:00:00:00:00 [ 541.079061][ T8820] usb 5-1: new low-speed USB device number 34 using dummy_hcd [ 541.523411][ T8820] usb 5-1: config 9 has an invalid interface number: 1 but max is 0 [ 541.559544][ T8820] usb 5-1: config 9 has no interface number 0 [ 541.592578][ T8820] usb 5-1: config 9 interface 1 has no altsetting 0 [ 541.614471][ T8820] usb 5-1: string descriptor 0 read error: -22 [ 541.622027][ T8820] usb 5-1: New USB device found, idVendor=2040, idProduct=b140, bcdDevice=75.36 [ 541.640427][ T8820] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 541.662004][ T8820] cx231xx 5-1:9.1: New device @ 1.5 Mbps (2040:b140) with 1 interfaces [ 541.686430][ T8895] batman_adv: batadv0: Local translation table size (96) exceeds maximum packet size (-320); Ignoring new local tt entry: 00:00:00:00:00:00 [ 541.718138][ T8820] cx231xx 5-1:9.1: Not found matching IAD interface [ 541.914847][ T8326] usb 5-1: USB disconnect, device number 34 [ 542.011185][ T8900] netlink: 76 bytes leftover after parsing attributes in process `syz.0.693'. [ 542.337398][ T8900] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 543.442525][ T8820] usb 5-1: new high-speed USB device number 35 using dummy_hcd [ 544.492540][ T8820] usb 5-1: Using ep0 maxpacket: 16 [ 544.542870][ T8820] usb 5-1: too many configurations: 37, using maximum allowed: 8 [ 544.619985][ T8820] usb 5-1: unable to read config index 0 descriptor/start: -61 [ 544.645514][ T8820] usb 5-1: can't read configurations, error -61 [ 545.272530][ T8820] usb 5-1: new high-speed USB device number 36 using dummy_hcd [ 545.510159][ T8951] batman_adv: batadv0: Local translation table size (104) exceeds maximum packet size (-320); Ignoring new local tt entry: 00:00:00:00:00:00 [ 545.524789][ T8820] usb 5-1: Using ep0 maxpacket: 16 [ 545.533567][ T8820] usb 5-1: too many configurations: 37, using maximum allowed: 8 [ 545.580811][ T8820] usb 5-1: unable to read config index 0 descriptor/start: -61 [ 545.588747][ T8820] usb 5-1: can't read configurations, error -61 [ 545.635453][ T8820] usb usb5-port1: attempt power cycle [ 545.855241][ T8955] netlink: 176 bytes leftover after parsing attributes in process `syz.0.708'. [ 545.877029][ T8956] netlink: 176 bytes leftover after parsing attributes in process `syz.0.708'. [ 545.982534][ T5990] usb 2-1: new high-speed USB device number 25 using dummy_hcd [ 546.022613][ T8820] usb 5-1: new high-speed USB device number 37 using dummy_hcd [ 546.172682][ T5990] usb 2-1: Using ep0 maxpacket: 16 [ 546.179620][ T8971] binder: 8970:8971 unknown command 0 [ 546.184435][ T5990] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 546.186235][ T8971] binder: 8970:8971 ioctl c0306201 2000000001c0 returned -22 [ 546.922902][ T8820] usb 5-1: device not accepting address 37, error -71 [ 546.930034][ T5990] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 546.940571][ T5990] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 546.954150][ T5990] usb 2-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 546.964599][ T5990] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 547.009723][ T5990] usb 2-1: config 0 descriptor?? [ 547.298071][ T8985] fuse: Bad value for 'fd' [ 547.303046][ T1218] usb 4-1: new high-speed USB device number 32 using dummy_hcd [ 547.667929][ T1218] usb 4-1: Using ep0 maxpacket: 32 [ 547.786027][ T5990] microsoft 0003:045E:07DA.0009: unknown main item tag 0x0 [ 547.982489][ T5990] microsoft 0003:045E:07DA.0009: unknown main item tag 0x0 [ 547.991883][ T5990] microsoft 0003:045E:07DA.0009: unknown main item tag 0x0 [ 548.023830][ T1218] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 548.266624][ T5990] microsoft 0003:045E:07DA.0009: unknown main item tag 0x0 [ 548.292750][ T1218] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 548.302739][ T5990] microsoft 0003:045E:07DA.0009: unknown main item tag 0x0 [ 548.310023][ T5990] microsoft 0003:045E:07DA.0009: unknown main item tag 0x0 [ 548.331675][ T1218] usb 4-1: New USB device found, idVendor=1e7d, idProduct=2d5a, bcdDevice= 0.00 [ 548.343016][ T1218] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 548.351369][ T5990] microsoft 0003:045E:07DA.0009: unknown main item tag 0x0 [ 548.367237][ T5990] microsoft 0003:045E:07DA.0009: unknown main item tag 0x0 [ 548.385220][ T1218] usb 4-1: config 0 descriptor?? [ 548.399024][ T5990] microsoft 0003:045E:07DA.0009: unknown main item tag 0x0 [ 548.399431][ T8994] loop6: detected capacity change from 0 to 1 [ 548.422995][ T5990] microsoft 0003:045E:07DA.0009: unknown main item tag 0x0 [ 548.430402][ T5990] microsoft 0003:045E:07DA.0009: unknown main item tag 0x0 [ 548.443032][ T5990] microsoft 0003:045E:07DA.0009: unknown main item tag 0x0 [ 548.450488][ T5990] microsoft 0003:045E:07DA.0009: unknown main item tag 0x0 [ 548.483721][ T5990] microsoft 0003:045E:07DA.0009: hidraw0: USB HID v0.00 Device [HID 045e:07da] on usb-dummy_hcd.1-1/input0 [ 548.485745][ T8994] Dev loop6: unable to read RDB block 1 [ 548.495658][ T5990] microsoft 0003:045E:07DA.0009: no inputs found [ 548.508994][ T5990] microsoft 0003:045E:07DA.0009: could not initialize ff, continuing anyway [ 548.521606][ T8999] 9pnet_fd: Insufficient options for proto=fd [ 548.558269][ T5990] usb 2-1: USB disconnect, device number 25 [ 548.579224][ T8994] loop6: unable to read partition table [ 548.620078][ T8994] loop6: partition table beyond EOD, truncated [ 548.647891][ T8994] loop_reread_partitions: partition scan of loop6 (þ被xü—ŸÑà– ) failed (rc=-5) [ 550.606789][ T1218] savu 0003:1E7D:2D5A.000A: hiddev0,hidraw0: USB HID v0.00 Device [HID 1e7d:2d5a] on usb-dummy_hcd.3-1/input0 [ 550.794207][ T1218] usb 4-1: USB disconnect, device number 32 [ 550.988669][ T8365] Bluetooth: hci5: Frame reassembly failed (-84) [ 551.372921][ T5918] usb 1-1: new high-speed USB device number 17 using dummy_hcd [ 551.859158][ T1218] usb 4-1: new full-speed USB device number 33 using dummy_hcd [ 551.952515][ T5918] usb 1-1: Using ep0 maxpacket: 16 [ 551.960540][ T5918] usb 1-1: config 0 has an invalid interface number: 9 but max is 2 [ 551.970008][ T5918] usb 1-1: config 0 has an invalid interface number: 9 but max is 2 [ 551.978363][ T5918] usb 1-1: config 0 has an invalid interface number: 157 but max is 2 [ 551.987155][ T5918] usb 1-1: config 0 has 2 interfaces, different from the descriptor's value: 3 [ 551.996430][ T5918] usb 1-1: config 0 has no interface number 0 [ 552.055713][ T5918] usb 1-1: config 0 has no interface number 1 [ 552.062953][ T5918] usb 1-1: config 0 interface 9 has no altsetting 0 [ 552.096138][ T5918] usb 1-1: config 0 interface 9 has no altsetting 1 [ 552.114806][ T1218] usb 4-1: config 1 has an invalid descriptor of length 116, skipping remainder of the config [ 552.132512][ T5918] usb 1-1: config 0 interface 157 has no altsetting 0 [ 552.172878][ T1218] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 552.180544][ T5918] usb 1-1: New USB device found, idVendor=1199, idProduct=6891, bcdDevice=89.a0 [ 552.193174][ T5918] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 552.222321][ T1218] usb 4-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 552.241972][ T1218] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 552.245880][ T5918] usb 1-1: Product: syz [ 552.260560][ T5918] usb 1-1: Manufacturer: syz [ 552.265552][ T5918] usb 1-1: SerialNumber: syz [ 552.294422][ T1218] usb 4-1: Product: syz [ 552.302549][ T1218] usb 4-1: Manufacturer: syz [ 552.307202][ T1218] usb 4-1: SerialNumber: syz [ 552.308155][ T5918] usb 1-1: config 0 descriptor?? [ 552.533965][ T5918] usb 1-1: selecting invalid altsetting 1 [ 552.595019][ T9014] delete_channel: no stack [ 552.721571][ T1218] usb 4-1: 0:2 : does not exist [ 552.732094][ T5918] sierra 1-1:0.9: Sierra USB modem converter detected [ 552.760893][ T5918] usb 1-1: Sierra USB modem converter now attached to ttyUSB0 [ 552.762761][ T1218] usb 4-1: 5:0: failed to get current value for ch 0 (-22) [ 552.798172][ T1218] usb 4-1: USB disconnect, device number 33 [ 552.801971][ T5918] usb 1-1: USB disconnect, device number 17 [ 552.831379][ T5918] sierra ttyUSB0: Sierra USB modem converter now disconnected from ttyUSB0 [ 552.850777][ T5918] sierra 1-1:0.9: device disconnected [ 553.062914][ T5847] Bluetooth: hci5: Opcode 0x1003 failed: -110 [ 553.943061][ T9026] nfs: Unknown parameter 'smackfst' [ 555.490271][ T9029] fuse: Bad value for 'fd' [ 555.994779][ T1218] usb 1-1: new high-speed USB device number 18 using dummy_hcd [ 556.090506][ T9048] 9pnet_fd: Insufficient options for proto=fd [ 556.185772][ T1218] usb 1-1: Using ep0 maxpacket: 16 [ 556.222321][ T1218] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 255, changing to 11 [ 556.269567][ T1218] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 59391, setting to 1024 [ 556.287644][ T1218] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 556.318833][ T1218] usb 1-1: New USB device found, idVendor=1781, idProduct=0898, bcdDevice= 0.00 [ 556.383067][ T1218] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 556.434298][ T1218] usb 1-1: config 0 descriptor?? [ 556.452976][ T9026] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 556.501425][ T1218] input: PXRC Flight Controller Adapter as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/input/input17 [ 556.696773][ T5918] usb 1-1: USB disconnect, device number 18 [ 556.882756][ T1218] usb 4-1: new high-speed USB device number 34 using dummy_hcd [ 556.912758][ T5990] usb 2-1: new full-speed USB device number 26 using dummy_hcd [ 557.043113][ T1218] usb 4-1: Using ep0 maxpacket: 16 [ 557.061433][ T1218] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 557.082947][ T5990] usb 2-1: device descriptor read/64, error -71 [ 557.236462][ T1218] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 557.312898][ T1218] usb 4-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 557.341393][ T1218] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 557.404709][ T1218] usb 4-1: config 0 descriptor?? [ 557.422656][ T5990] usb 2-1: new full-speed USB device number 27 using dummy_hcd [ 557.562938][ T5990] usb 2-1: device descriptor read/64, error -71 [ 557.807711][ T5990] usb usb2-port1: attempt power cycle [ 557.818808][ T9058] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 557.828859][ T9058] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 558.606393][ T1218] microsoft 0003:045E:07DA.000B: unknown main item tag 0x0 [ 558.618400][ T1218] microsoft 0003:045E:07DA.000B: unknown main item tag 0x0 [ 558.626059][ T1218] microsoft 0003:045E:07DA.000B: unknown main item tag 0x0 [ 558.639531][ T1218] microsoft 0003:045E:07DA.000B: unknown main item tag 0x0 [ 558.689842][ T1218] microsoft 0003:045E:07DA.000B: unknown main item tag 0x0 [ 558.697753][ T1218] microsoft 0003:045E:07DA.000B: unknown main item tag 0x0 [ 558.717471][ T1218] microsoft 0003:045E:07DA.000B: unknown main item tag 0x0 [ 558.730602][ T1218] microsoft 0003:045E:07DA.000B: unknown main item tag 0x0 [ 558.745451][ T9058] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 558.756719][ T9082] fuse: Bad value for 'fd' [ 558.796680][ T9058] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 558.815519][ T1218] microsoft 0003:045E:07DA.000B: hidraw0: USB HID v0.00 Device [HID 045e:07da] on usb-dummy_hcd.3-1/input0 [ 558.861656][ T1218] microsoft 0003:045E:07DA.000B: no inputs found [ 558.882938][ T1218] microsoft 0003:045E:07DA.000B: could not initialize ff, continuing anyway [ 558.892595][ T5990] usb 2-1: new full-speed USB device number 28 using dummy_hcd [ 558.927816][ T5990] usb 2-1: device descriptor read/8, error -71 [ 558.961553][ T5918] usb 4-1: USB disconnect, device number 34 [ 559.035589][ T9090] 9pnet_fd: Insufficient options for proto=fd [ 559.223546][ T5990] usb 2-1: new full-speed USB device number 29 using dummy_hcd [ 559.263366][ T5990] usb 2-1: device descriptor read/8, error -71 [ 559.336207][ T9099] netlink: 'syz.4.747': attribute type 5 has an invalid length. [ 559.344068][ T9099] netlink: 7 bytes leftover after parsing attributes in process `syz.4.747'. [ 559.392995][ T5990] usb usb2-port1: unable to enumerate USB device [ 559.682967][ T1218] usb 5-1: new full-speed USB device number 39 using dummy_hcd [ 559.732569][ T5918] usb 1-1: new high-speed USB device number 19 using dummy_hcd [ 559.867120][ T1218] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 559.889279][ T1218] usb 5-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 559.908728][ T1218] usb 5-1: New USB device found, idVendor=05d1, idProduct=2001, bcdDevice= 2.00 [ 559.912556][ T5918] usb 1-1: device descriptor read/64, error -71 [ 559.944339][ T1218] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 559.983144][ T1218] usb 5-1: config 0 descriptor?? [ 560.106053][ T9125] netlink: 6 bytes leftover after parsing attributes in process `syz.1.751'. [ 560.173193][ T5918] usb 1-1: new high-speed USB device number 20 using dummy_hcd [ 560.193228][ T5896] usb 3-1: new high-speed USB device number 32 using dummy_hcd [ 560.283495][ T1218] usb 4-1: new full-speed USB device number 35 using dummy_hcd [ 560.317303][ T5918] usb 1-1: device descriptor read/64, error -71 [ 560.352543][ T5896] usb 3-1: Using ep0 maxpacket: 32 [ 560.359816][ T5896] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 560.372376][ T5896] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 560.388484][ T5896] usb 3-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 560.398151][ T5896] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 560.411374][ T5896] usb 3-1: config 0 descriptor?? [ 560.420048][ T5896] hub 3-1:0.0: USB hub found [ 560.433155][ T5918] usb usb1-port1: attempt power cycle [ 560.455443][ T1218] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x6 has invalid maxpacket 1023, setting to 64 [ 560.466628][ T1218] usb 4-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xBA, changing to 0x8A [ 560.482289][ T1218] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x8A has invalid wMaxPacketSize 0 [ 560.504527][ T1218] usb 4-1: New USB device found, idVendor=2294, idProduct=425b, bcdDevice=a2.10 [ 560.518851][ T1218] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 560.527183][ T1218] usb 4-1: Product: syz [ 560.531481][ T1218] usb 4-1: Manufacturer: syz [ 560.540316][ T1218] usb 4-1: SerialNumber: syz [ 560.548122][ T1218] usb 4-1: config 0 descriptor?? [ 560.558755][ T9121] raw-gadget.3 gadget.3: fail, usb_ep_enable returned -22 [ 560.567820][ T1218] usb 4-1: ucan: probing device on interface #0 [ 560.578821][ T1218] usb 4-1: ucan: invalid in_ep MaxPacketSize [ 560.585271][ T1218] usb 4-1: ucan: probe failed; try to update the device firmware [ 560.719591][ T5896] hub 3-1:0.0: 1 port detected [ 561.520443][ T5918] usb 1-1: new high-speed USB device number 21 using dummy_hcd [ 561.577302][ T5918] usb 1-1: device descriptor read/8, error -71 [ 561.843615][ T5918] usb 1-1: new high-speed USB device number 22 using dummy_hcd [ 561.902283][ T5918] usb 1-1: device descriptor read/8, error -71 [ 562.010934][ T8326] hub 3-1:0.0: activate --> -90 [ 562.027667][ T5918] usb usb1-port1: unable to enumerate USB device [ 562.097524][ T1218] usb 4-1: USB disconnect, device number 35 [ 562.284766][ T5918] usb 5-1: USB disconnect, device number 39 [ 562.629741][ T5896] usb 3-1: USB disconnect, device number 32 [ 562.726145][ T9150] 9pnet_fd: Insufficient options for proto=fd [ 563.066542][ T9157] netlink: 8 bytes leftover after parsing attributes in process `syz.3.758'. [ 564.630736][ T9162] netlink: 'syz.4.762': attribute type 1 has an invalid length. [ 564.638639][ T9162] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 564.942486][ T9170] batman_adv: batadv0: Local translation table size (108) exceeds maximum packet size (-320); Ignoring new local tt entry: 00:00:00:00:00:00 [ 565.072716][ T5918] usb 3-1: new high-speed USB device number 33 using dummy_hcd [ 565.252815][ T5918] usb 3-1: Using ep0 maxpacket: 16 [ 565.308723][ T5918] usb 3-1: config 0 has an invalid interface number: 251 but max is 0 [ 565.460397][ T5918] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 565.762509][ T5918] usb 3-1: config 0 has no interface number 0 [ 565.787001][ T5918] usb 3-1: New USB device found, idVendor=0b95, idProduct=172a, bcdDevice=f7.f4 [ 565.811349][ T5918] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 565.836265][ T5918] usb 3-1: Product: syz [ 565.849299][ T5918] usb 3-1: Manufacturer: syz [ 565.857412][ T5918] usb 3-1: SerialNumber: syz [ 565.933598][ T5918] usb 3-1: config 0 descriptor?? [ 565.980287][ T9184] netlink: 4 bytes leftover after parsing attributes in process `syz.4.768'. [ 566.163659][ C1] vxcan1: j1939_tp_rxtimer: 0xffff88807b31f400: rx timeout, send abort [ 566.201432][ T5918] asix 3-1:0.251: probe with driver asix failed with error -22 [ 566.424742][ T5896] usb 4-1: new high-speed USB device number 36 using dummy_hcd [ 566.532133][ T9189] netlink: 'syz.0.769': attribute type 83 has an invalid length. [ 566.553623][ T9165] netlink: 'syz.2.763': attribute type 4 has an invalid length. [ 566.605267][ T9165] netlink: 'syz.2.763': attribute type 4 has an invalid length. [ 566.646826][ T5918] usb 3-1: USB disconnect, device number 33 [ 566.664793][ T5896] usb 4-1: Using ep0 maxpacket: 32 [ 566.881828][ T5896] usb 4-1: config index 0 descriptor too short (expected 29220, got 36) [ 566.908817][ T5896] usb 4-1: config 0 has too many interfaces: 81, using maximum allowed: 32 [ 566.917928][ T5896] usb 4-1: config 0 has 1 interface, different from the descriptor's value: 81 [ 567.119499][ T5896] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 567.130143][ T5896] usb 4-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 567.140850][ T5896] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 567.156356][ T5896] usb 4-1: config 0 interface 0 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 0 [ 568.108865][ T5896] usb 4-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 568.111742][ T1303] ieee802154 phy1 wpan1: encryption failed: -22 [ 568.353303][ T5896] usb 4-1: New USB device found, idVendor=03f0, idProduct=6c17, bcdDevice= 0.40 [ 568.368825][ T5896] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 568.397948][ T5896] usb 4-1: config 0 descriptor?? [ 568.435727][ T9206] batman_adv: batadv0: Local translation table size (104) exceeds maximum packet size (-320); Ignoring new local tt entry: 00:00:00:00:00:00 [ 568.464823][ T9208] batman_adv: batadv0: Local translation table size (96) exceeds maximum packet size (-320); Ignoring new local tt entry: 00:00:00:00:00:00 [ 569.090260][ T5896] usblp 4-1:0.0: usblp0: USB Bidirectional printer dev 36 if 0 alt 0 proto 3 vid 0x03F0 pid 0x6C17 [ 569.111453][ T5896] usb 4-1: USB disconnect, device number 36 [ 569.127957][ T5896] usblp0: removed [ 569.377859][ T9220] batman_adv: batadv0: Local translation table size (104) exceeds maximum packet size (-320); Ignoring new local tt entry: 00:00:00:00:00:00 [ 569.482525][ T5918] usb 3-1: new high-speed USB device number 34 using dummy_hcd [ 569.587413][ T9223] netlink: 12 bytes leftover after parsing attributes in process `syz.1.779'. [ 569.662906][ T9226] tap0: tun_chr_ioctl cmd 1074025673 [ 569.682537][ T5918] usb 3-1: Using ep0 maxpacket: 8 [ 569.694071][ T5918] usb 3-1: config 0 has an invalid descriptor of length 139, skipping remainder of the config [ 569.716323][ T9226] tap0: tun_chr_ioctl cmd 1074025673 [ 569.721917][ T9226] tap0: tun_chr_ioctl cmd 1074025673 [ 569.773067][ T5918] usb 3-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 569.783093][ T5918] usb 3-1: New USB device found, idVendor=0458, idProduct=0153, bcdDevice= 0.00 [ 569.796966][ T5918] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 569.853848][ T5918] usb 3-1: config 0 descriptor?? [ 570.080413][ T5918] usb 3-1: string descriptor 0 read error: -71 [ 570.098760][ T5918] usb 3-1: USB disconnect, device number 34 [ 570.252840][ T7626] usb 1-1: new high-speed USB device number 23 using dummy_hcd [ 570.412785][ T7626] usb 1-1: Using ep0 maxpacket: 16 [ 570.442551][ T5896] usb 2-1: new full-speed USB device number 30 using dummy_hcd [ 570.444776][ T7626] usb 1-1: config 1 contains an unexpected descriptor of type 0x2, skipping [ 570.460605][ T7626] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 570.471757][ T7626] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 570.484082][ T7626] usb 1-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 570.494242][ T7626] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 570.502300][ T7626] usb 1-1: Product: syz [ 570.506784][ T7626] usb 1-1: Manufacturer: syz [ 570.511464][ T7626] usb 1-1: SerialNumber: syz [ 570.522742][ T1218] usb 3-1: new high-speed USB device number 35 using dummy_hcd [ 570.629012][ T5896] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 570.641324][ T5896] usb 2-1: New USB device found, idVendor=18b1, idProduct=0037, bcdDevice= 0.00 [ 570.650589][ T5896] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 570.674377][ T1218] usb 3-1: Using ep0 maxpacket: 8 [ 570.681378][ T5896] usb 2-1: config 0 descriptor?? [ 570.698247][ T1218] usb 3-1: config 0 has an invalid descriptor of length 139, skipping remainder of the config [ 570.714835][ T1218] usb 3-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 570.730424][ T1218] usb 3-1: New USB device found, idVendor=0458, idProduct=0153, bcdDevice= 0.00 [ 570.744235][ T1218] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 570.756387][ T1218] usb 3-1: config 0 descriptor?? [ 570.934738][ T7626] usb 1-1: 0:2 : does not exist [ 570.998653][ T1218] usb 3-1: string descriptor 0 read error: -71 [ 571.105230][ T1218] usb 3-1: USB disconnect, device number 35 [ 571.302013][ T5896] petalynx 0003:18B1:0037.000C: item fetching failed at offset 0/2 [ 571.350759][ T5896] petalynx 0003:18B1:0037.000C: parse failed [ 571.360711][ T5896] petalynx 0003:18B1:0037.000C: probe with driver petalynx failed with error -22 [ 572.376926][ T9240] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 572.397392][ T9240] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 572.455369][ T9240] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 572.464487][ T9240] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 572.728066][ T9254] netlink: 68 bytes leftover after parsing attributes in process `syz.2.785'. [ 573.566784][ T7626] usb 1-1: 1:0: failed to get current value for ch 0 (-22) [ 573.616724][ T7626] usb 1-1: USB disconnect, device number 23 [ 573.642794][ T9261] netlink: 20 bytes leftover after parsing attributes in process `syz.3.787'. [ 573.663112][ T9261] netlink: 32 bytes leftover after parsing attributes in process `syz.3.787'. [ 574.855328][ T9271] affs: No valid root block on device nullb0 [ 574.978723][ T5990] usb 2-1: USB disconnect, device number 30 [ 575.219020][ T9281] batman_adv: batadv0: Local translation table size (104) exceeds maximum packet size (-320); Ignoring new local tt entry: 00:00:00:00:00:00 [ 575.584968][ T9284] netlink: 52 bytes leftover after parsing attributes in process `syz.3.787'. [ 575.896618][ T9282] netlink: 12 bytes leftover after parsing attributes in process `syz.1.791'. [ 576.438925][ T9304] program syz.0.796 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 577.349844][ T5918] usb 3-1: new high-speed USB device number 36 using dummy_hcd [ 577.403483][ T8326] usb 4-1: new high-speed USB device number 37 using dummy_hcd [ 577.740857][ T8326] usb 4-1: Using ep0 maxpacket: 32 [ 577.742692][ T5918] usb 3-1: config 0 has an invalid interface number: 50 but max is 0 [ 577.900619][ T8326] usb 4-1: config 0 has an invalid interface number: 54 but max is 0 [ 577.931674][ T5918] usb 3-1: config 0 has no interface number 0 [ 577.954592][ T8326] usb 4-1: config 0 has 2 interfaces, different from the descriptor's value: 1 [ 578.003596][ T5918] usb 3-1: config 0 interface 50 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 578.038291][ T8326] usb 4-1: config 0 has no interface number 1 [ 578.097730][ T8326] usb 4-1: config 0 interface 0 has no altsetting 0 [ 578.124911][ T5918] usb 3-1: New USB device found, idVendor=0c45, idProduct=1010, bcdDevice=e6.fc [ 578.161756][ T8326] usb 4-1: New USB device found, idVendor=d5ff, idProduct=0066, bcdDevice=d8.b0 [ 578.424602][ T5918] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 578.438106][ T8326] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 578.446755][ T5918] usb 3-1: Product: syz [ 578.460051][ T5918] usb 3-1: Manufacturer: syz [ 578.480579][ T5918] usb 3-1: SerialNumber: syz [ 578.494179][ T8326] usb 4-1: config 0 descriptor?? [ 578.571137][ T8326] usb 4-1: bad CDC descriptors [ 578.590786][ T5918] usb 3-1: config 0 descriptor?? [ 578.757183][ T5918] yurex 3-1:0.50: USB YUREX device now attached to Yurex #0 [ 579.405563][ T9337] netlink: 12 bytes leftover after parsing attributes in process `syz.0.804'. [ 581.647708][ T8326] usb 4-1: string descriptor 0 read error: -71 [ 581.687755][ T5918] usb 3-1: USB disconnect, device number 36 [ 581.700621][ T8326] usb 4-1: USB disconnect, device number 37 [ 581.717854][ T5918] yurex 3-1:0.50: USB YUREX #0 now disconnected [ 582.859303][ T9365] loop8: detected capacity change from 0 to 7 [ 583.218118][ T9369] netlink: 12 bytes leftover after parsing attributes in process `syz.1.811'. [ 583.410360][ T9365] Dev loop8: unable to read RDB block 7 [ 583.441149][ T9365] loop8: unable to read partition table [ 583.465515][ T8620] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 583.479647][ T8620] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 583.488383][ T8620] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 583.498800][ T8620] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 583.506657][ T8620] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 583.532251][ T9365] loop8: partition table beyond EOD, truncated [ 583.554217][ T9365] loop_reread_partitions: partition scan of loop8 (þ被xü^>Ñà– ) failed (rc=-5) [ 584.454277][ T8326] usb 3-1: new high-speed USB device number 37 using dummy_hcd [ 584.600356][ T9373] chnl_net:caif_netlink_parms(): no params data found [ 584.673995][ T9395] nullb0: AHDI p1 [ 584.736689][ T8326] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 584.748812][ T8326] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 584.759420][ T8326] usb 3-1: New USB device found, idVendor=ea6d, idProduct=c292, bcdDevice= 0.00 [ 584.768779][ T8326] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 584.852311][ T8326] usb 3-1: config 0 descriptor?? [ 585.081815][ T9407] /dev/sg0: Can't lookup blockdev [ 585.847345][ T5935] usb 2-1: new high-speed USB device number 31 using dummy_hcd [ 585.848433][ T9373] bridge0: port 1(bridge_slave_0) entered blocking state [ 585.860915][ T8620] Bluetooth: hci5: command tx timeout [ 585.862300][ T9373] bridge0: port 1(bridge_slave_0) entered disabled state [ 585.878919][ T9373] bridge_slave_0: entered allmulticast mode [ 585.887255][ T9373] bridge_slave_0: entered promiscuous mode [ 585.897505][ T9373] bridge0: port 2(bridge_slave_1) entered blocking state [ 586.168938][ T9404] syz.3.820 (9404): drop_caches: 2 [ 586.174903][ T9373] bridge0: port 2(bridge_slave_1) entered disabled state [ 586.189742][ T8326] hid-generic 0003:EA6D:C292.000D: unknown main item tag 0x0 [ 586.197509][ T9373] bridge_slave_1: entered allmulticast mode [ 586.242192][ T8326] hid-generic 0003:EA6D:C292.000D: unknown main item tag 0x0 [ 586.253267][ T9373] bridge_slave_1: entered promiscuous mode [ 586.261102][ T5935] usb 2-1: Using ep0 maxpacket: 32 [ 586.263043][ T5935] usb 2-1: config 0 has an invalid interface number: 85 but max is 0 [ 586.263071][ T5935] usb 2-1: config 0 has no interface number 0 [ 586.263115][ T5935] usb 2-1: config 0 interface 85 altsetting 7 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 586.263145][ T5935] usb 2-1: config 0 interface 85 has no altsetting 0 [ 586.265660][ T5935] usb 2-1: New USB device found, idVendor=05ac, idProduct=0219, bcdDevice=f0.72 [ 586.394496][ T8326] hid-generic 0003:EA6D:C292.000D: unknown main item tag 0x0 [ 586.407396][ T5935] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 586.442172][ T5935] usb 2-1: Product: syz [ 586.444126][ T8326] hid-generic 0003:EA6D:C292.000D: unknown main item tag 0x0 [ 586.474928][ T8326] hid-generic 0003:EA6D:C292.000D: unknown main item tag 0x0 [ 586.475589][ T5935] usb 2-1: Manufacturer: syz [ 586.486858][ T8326] hid-generic 0003:EA6D:C292.000D: unbalanced collection at end of report description [ 586.487390][ T5990] usb 1-1: new high-speed USB device number 24 using dummy_hcd [ 586.514367][ T8326] hid-generic 0003:EA6D:C292.000D: probe with driver hid-generic failed with error -22 [ 586.527967][ T5935] usb 2-1: SerialNumber: syz [ 586.559818][ T9373] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 586.587899][ T5935] usb 2-1: config 0 descriptor?? [ 586.598589][ T9373] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 586.693358][ T5990] usb 1-1: Using ep0 maxpacket: 8 [ 586.709674][ T5990] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 586.735459][ T5990] usb 1-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 586.768966][ T5990] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 586.795501][ T5990] usb 1-1: config 0 descriptor?? [ 586.801238][ T9373] team0: Port device team_slave_0 added [ 586.812121][ T9373] team0: Port device team_slave_1 added [ 586.818140][ T5935] appletouch 2-1:0.85: Failed to read mode from device. [ 586.826238][ T5935] appletouch 2-1:0.85: probe with driver appletouch failed with error -5 [ 586.864659][ T9373] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 586.872715][ T9373] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 586.898959][ T9373] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 586.917276][ T9373] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 586.925105][ T9373] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 586.952246][ T9373] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 587.024523][ T5990] iowarrior 1-1:0.0: IOWarrior product=0x1512, serial= interface=0 now attached to iowarrior0 [ 587.040796][ T9373] hsr_slave_0: entered promiscuous mode [ 587.056083][ T9373] hsr_slave_1: entered promiscuous mode [ 587.060225][ T9416] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 587.066698][ T9373] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 587.078765][ T9373] Cannot create hsr debugfs directory [ 587.092006][ T9416] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 587.170514][ T5935] usb 2-1: USB disconnect, device number 31 [ 587.883560][ T5935] usb 2-1: new high-speed USB device number 32 using dummy_hcd [ 587.954653][ T5990] usb 4-1: new full-speed USB device number 38 using dummy_hcd [ 587.962681][ T8620] Bluetooth: hci5: command tx timeout [ 588.099401][ T1218] usb 3-1: USB disconnect, device number 37 [ 588.155578][ T5935] usb 2-1: config 0 has an invalid interface number: 64 but max is 0 [ 588.172465][ T5935] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 588.192595][ T5935] usb 2-1: config 0 has no interface number 0 [ 588.395740][ T5935] usb 2-1: New USB device found, idVendor=046d, idProduct=0823, bcdDevice= 0.07 [ 588.397878][ T9373] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 588.417180][ T5935] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 588.425653][ T5990] usb 4-1: config 0 has an invalid interface number: 175 but max is 0 [ 588.430381][ T9373] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 588.433898][ T5935] usb 2-1: Product: syz [ 588.433919][ T5935] usb 2-1: Manufacturer: syz [ 588.433936][ T5935] usb 2-1: SerialNumber: syz [ 589.140590][ T5935] usb 2-1: config 0 descriptor?? [ 589.145808][ T5990] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 589.172032][ T5990] usb 4-1: config 0 has no interface number 0 [ 589.184904][ T5990] usb 4-1: config 0 interface 175 altsetting 0 has an endpoint descriptor with address 0xBC, changing to 0x8C [ 589.197849][ T5990] usb 4-1: config 0 interface 175 altsetting 0 endpoint 0x8C has an invalid bInterval 0, changing to 10 [ 589.209370][ T5990] usb 4-1: config 0 interface 175 altsetting 0 endpoint 0x8C has invalid wMaxPacketSize 0 [ 589.219681][ T5990] usb 4-1: config 0 interface 175 altsetting 0 has an endpoint descriptor with address 0xC6, changing to 0x86 [ 589.263150][ T5935] usb 1-1: USB disconnect, device number 24 [ 589.289585][ T5990] usb 4-1: config 0 interface 175 altsetting 0 endpoint 0x86 has invalid maxpacket 28598, setting to 1023 [ 589.329114][ T9373] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 589.340593][ T5990] usb 4-1: config 0 interface 175 altsetting 0 has 4 endpoint descriptors, different from the interface descriptor's value: 16 [ 589.376769][ T9373] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 589.384525][ T5990] usb 4-1: New USB device found, idVendor=05e0, idProduct=0600, bcdDevice=f9.9b [ 589.408789][ T9438] binder: 9434:9438 ioctl c0306201 200000000640 returned -22 [ 589.416793][ T5990] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 589.451643][ T5990] usb 4-1: Product: syz [ 589.456450][ T5990] usb 4-1: Manufacturer: syz [ 589.461889][ T5990] usb 4-1: SerialNumber: syz [ 589.476522][ T5990] usb 4-1: config 0 descriptor?? [ 589.520598][ T5990] symbolserial 4-1:0.175: symbol converter detected [ 589.541180][ T5990] usb 4-1: symbol converter now attached to ttyUSB0 [ 590.032854][ T8620] Bluetooth: hci5: command tx timeout [ 590.159874][ T9373] 8021q: adding VLAN 0 to HW filter on device bond0 [ 590.180749][ T5990] usb 4-1: USB disconnect, device number 38 [ 590.212377][ T5990] symbol ttyUSB0: symbol converter now disconnected from ttyUSB0 [ 590.213150][ T9373] 8021q: adding VLAN 0 to HW filter on device team0 [ 590.257500][ T5990] symbolserial 4-1:0.175: device disconnected [ 590.260410][ T8366] bridge0: port 1(bridge_slave_0) entered blocking state [ 590.270895][ T8366] bridge0: port 1(bridge_slave_0) entered forwarding state [ 590.294239][ T8366] bridge0: port 2(bridge_slave_1) entered blocking state [ 590.301512][ T8366] bridge0: port 2(bridge_slave_1) entered forwarding state [ 590.347379][ T9456] netlink: 'syz.0.832': attribute type 1 has an invalid length. [ 590.357294][ T9456] netlink: 'syz.0.832': attribute type 1 has an invalid length. [ 590.365286][ T9456] netlink: 'syz.0.832': attribute type 2 has an invalid length. [ 590.586932][ T43] usb 2-1: USB disconnect, device number 32 [ 591.315385][ T9373] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 591.397186][ T9466] netlink: 8 bytes leftover after parsing attributes in process `syz.2.835'. [ 591.433298][ T9466] netlink: 4 bytes leftover after parsing attributes in process `syz.2.835'. [ 591.442164][ T9466] netlink: 'syz.2.835': attribute type 15 has an invalid length. [ 592.925926][ T8620] Bluetooth: hci5: command tx timeout [ 593.178155][ T9373] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 593.312945][ T9480] openvswitch: netlink: IP tunnel dst address not specified [ 595.072626][ T9499] IPVS: set_ctl: invalid protocol: 0 0.0.0.0:0 [ 595.200366][ T9499] IPVS: set_ctl: invalid protocol: 0 0.0.0.0:0 [ 595.786352][ T9515] fuse: Bad value for 'fd' [ 596.349907][ T9373] veth0_vlan: entered promiscuous mode [ 596.394361][ T9373] veth1_vlan: entered promiscuous mode [ 596.479460][ T9373] veth0_macvtap: entered promiscuous mode [ 596.693695][ T9373] veth1_macvtap: entered promiscuous mode [ 596.712520][ T5896] usb 2-1: new high-speed USB device number 33 using dummy_hcd [ 596.972646][ T5896] usb 2-1: Using ep0 maxpacket: 16 [ 597.162206][ T5896] usb 2-1: config 0 has an invalid interface number: 8 but max is 0 [ 597.208780][ T9373] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 597.316601][ T5896] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 597.395310][ T9373] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 597.452527][ T5896] usb 2-1: config 0 has no interface number 0 [ 597.458725][ T5896] usb 2-1: config 0 interface 8 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 597.479410][ T5896] usb 2-1: New USB device found, idVendor=0d8c, idProduct=000e, bcdDevice=8e.8f [ 597.488786][ T5896] usb 2-1: New USB device strings: Mfr=0, Product=24, SerialNumber=3 [ 597.501581][ T5896] usb 2-1: Product: syz [ 597.505851][ T5896] usb 2-1: SerialNumber: syz [ 597.519187][ T5896] usb 2-1: config 0 descriptor?? [ 597.528429][ T5896] usbhid 2-1:0.8: couldn't find an input interrupt endpoint [ 597.565497][ T9373] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 597.585308][ T9373] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 597.596456][ T9373] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 597.605874][ T9373] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 597.623210][ T9535] netlink: 'syz.2.849': attribute type 15 has an invalid length. [ 597.636954][ T9536] netlink: 'syz.2.849': attribute type 15 has an invalid length. [ 597.822617][ T8376] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 597.953794][ T8376] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 599.369858][ T8357] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 599.385461][ T8357] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 600.454187][ T5990] usb 2-1: USB disconnect, device number 33 [ 600.467142][ T5935] usb 6-1: new high-speed USB device number 2 using dummy_hcd [ 600.882498][ T5935] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 600.926446][ T5935] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 601.220395][ T5935] usb 6-1: New USB device found, idVendor=1ea7, idProduct=0907, bcdDevice= 0.00 [ 601.255544][ T5935] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 601.268967][ T5935] usb 6-1: config 0 descriptor?? [ 601.385673][ T9570] trusted_key: encrypted key: instantiation of keys using provided decrypted data is disabled since CONFIG_USER_DECRYPTED_DATA is set to false [ 602.215900][ T9582] netlink: 'syz.2.858': attribute type 1 has an invalid length. [ 602.223829][ T9582] netlink: 'syz.2.858': attribute type 4 has an invalid length. [ 602.232115][ T9582] netlink: 9462 bytes leftover after parsing attributes in process `syz.2.858'. [ 602.243721][ T9582] netlink: 8 bytes leftover after parsing attributes in process `syz.2.858'. [ 602.753692][ T5935] semitek 0003:1EA7:0907.000E: unknown main item tag 0x0 [ 602.779185][ T5935] semitek 0003:1EA7:0907.000E: hidraw0: USB HID vf5.a3 Device [HID 1ea7:0907] on usb-dummy_hcd.5-1/input0 [ 602.955462][ T5935] usb 6-1: USB disconnect, device number 2 [ 605.021466][ T9619] batman_adv: batadv0: Adding interface: dummy0 [ 605.027836][ T9619] batman_adv: batadv0: The MTU of interface dummy0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 605.053163][ T9619] batman_adv: batadv0: Interface activated: dummy0 [ 605.094196][ T9619] batadv0: mtu less than device minimum [ 605.101706][ T9619] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 605.113507][ T9619] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 605.124957][ T9619] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 605.136389][ T9619] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 605.147905][ T9619] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 605.159320][ T9619] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 605.170816][ T9619] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 605.182237][ T9619] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 605.193823][ T9619] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 606.157492][ T9640] netlink: 12 bytes leftover after parsing attributes in process `syz.5.875'. [ 606.174317][ T9640] netlink: 12 bytes leftover after parsing attributes in process `syz.5.875'. [ 606.195624][ T9640] netlink: 24 bytes leftover after parsing attributes in process `syz.5.875'. [ 606.267968][ T9643] netlink: 'syz.5.875': attribute type 10 has an invalid length. [ 606.280859][ T9644] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 606.301667][ T9644] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 606.367899][ T9643] bond0: (slave netdevsim0): Enslaving as an active interface with an up link [ 606.494412][ T9649] netlink: 'syz.2.877': attribute type 10 has an invalid length. [ 606.513705][ T8326] usb 1-1: new high-speed USB device number 25 using dummy_hcd [ 606.541655][ T9649] team0: Device ipvlan1 failed to register rx_handler [ 606.592936][ T5896] usb 6-1: new high-speed USB device number 3 using dummy_hcd [ 606.728358][ T8326] usb 1-1: config 220 has an invalid interface number: 76 but max is 2 [ 606.753230][ T5896] usb 6-1: device descriptor read/64, error -71 [ 606.777204][ T8326] usb 1-1: config 220 contains an unexpected descriptor of type 0x2, skipping [ 606.818561][ T8326] usb 1-1: config 220 has an invalid descriptor of length 13, skipping remainder of the config [ 606.834617][ T8326] usb 1-1: config 220 has no interface number 2 [ 606.857588][ T8326] usb 1-1: config 220 interface 1 altsetting 5 has 0 endpoint descriptors, different from the interface descriptor's value: 12 [ 606.871587][ T8326] usb 1-1: config 220 interface 0 has no altsetting 0 [ 606.879053][ T8326] usb 1-1: config 220 interface 76 has no altsetting 0 [ 606.898854][ T8326] usb 1-1: config 220 interface 1 has no altsetting 0 [ 607.004176][ T8326] usb 1-1: New USB device found, idVendor=8086, idProduct=0b07, bcdDevice=6c.b9 [ 607.024124][ T5896] usb 6-1: new high-speed USB device number 4 using dummy_hcd [ 607.073095][ T8326] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 607.133302][ T8326] usb 1-1: Product: syz [ 607.154077][ T8326] usb 1-1: Manufacturer: syz [ 607.159449][ T8326] usb 1-1: SerialNumber: syz [ 607.286136][ T5896] usb 6-1: device descriptor read/64, error -71 [ 607.424438][ T5896] usb usb6-port1: attempt power cycle [ 607.452035][ T8326] usb 1-1: Found UVC 7.01 device syz (8086:0b07) [ 607.464079][ T8326] usb 1-1: No valid video chain found. [ 607.470717][ T8326] usb 1-1: selecting invalid altsetting 0 [ 607.498421][ T8326] usb 1-1: selecting invalid altsetting 0 [ 607.505352][ T8326] usbtest 1-1:220.1: probe with driver usbtest failed with error -22 [ 607.517320][ T8326] usb 1-1: USB disconnect, device number 25 [ 607.792949][ T5896] usb 6-1: new high-speed USB device number 5 using dummy_hcd [ 607.990973][ T5896] usb 6-1: device descriptor read/8, error -71 [ 608.042570][ T1218] usb 2-1: new full-speed USB device number 34 using dummy_hcd [ 608.088138][ T9675] ptrace attach of "./syz-executor exec"[5848] was attempted by ""[9675] [ 609.005226][ T1218] usb 2-1: unable to get BOS descriptor or descriptor too short [ 609.040126][ T5896] usb 6-1: new high-speed USB device number 6 using dummy_hcd [ 609.121826][ T5896] usb 6-1: device descriptor read/8, error -71 [ 609.293836][ T1218] usb 2-1: not running at top speed; connect to a high speed hub [ 609.297582][ T5896] usb usb6-port1: unable to enumerate USB device [ 609.677590][ T1218] usb 2-1: config 1 interface 0 altsetting 249 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 609.698870][ T1218] usb 2-1: config 1 interface 0 has no altsetting 0 [ 609.719296][ T1218] usb 2-1: New USB device found, idVendor=05ac, idProduct=0236, bcdDevice= 0.40 [ 609.741252][ T1218] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 609.763626][ T1218] usb 2-1: Product: syz [ 609.767871][ T1218] usb 2-1: Manufacturer: syz [ 609.772706][ T1218] usb 2-1: SerialNumber: syz [ 609.978066][ T9696] netlink: 47 bytes leftover after parsing attributes in process `syz.2.888'. [ 610.005179][ T1218] input: bcm5974 as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/input/input20 [ 610.031407][ T5193] bcm5974 2-1:1.0: could not read from device [ 610.056149][ T5193] bcm5974 2-1:1.0: could not read from device [ 610.108353][ T1218] usb 2-1: USB disconnect, device number 34 [ 610.114762][ T5193] bcm5974 2-1:1.0: could not read from device [ 610.163622][ T5193] bcm5974 2-1:1.0: could not read from device [ 610.882847][ T5896] usb 6-1: new full-speed USB device number 7 using dummy_hcd [ 611.147767][ T5896] usb 6-1: config 0 interface 0 altsetting 5 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 611.259863][ T5896] usb 6-1: config 0 interface 0 altsetting 5 endpoint 0x81 has invalid wMaxPacketSize 0 [ 611.374669][ T5896] usb 6-1: config 0 interface 0 altsetting 5 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 611.457781][ T5896] usb 6-1: config 0 interface 0 has no altsetting 0 [ 611.492850][ T5896] usb 6-1: New USB device found, idVendor=2179, idProduct=0077, bcdDevice= 0.00 [ 611.522770][ T5896] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 611.551545][ T5896] usb 6-1: config 0 descriptor?? [ 611.612154][ T9708] net_ratelimit: 11 callbacks suppressed [ 611.612174][ T9708] batman_adv: batadv0: Local translation table size (84) exceeds maximum packet size (-320); Ignoring new local tt entry: 00:00:00:00:00:00 [ 612.821537][ T9718] netlink: 16 bytes leftover after parsing attributes in process `syz.2.898'. [ 613.415728][ T5896] usbhid 6-1:0.0: can't add hid device: -71 [ 613.421815][ T5896] usbhid 6-1:0.0: probe with driver usbhid failed with error -71 [ 613.480360][ T5896] usb 6-1: USB disconnect, device number 7 [ 613.902594][ T8326] usb 1-1: new high-speed USB device number 26 using dummy_hcd [ 613.975957][ T9741] 9pnet_fd: Insufficient options for proto=fd [ 614.093009][ T8326] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 614.127785][ T8326] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 614.153687][ T8326] usb 1-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 614.187640][ T5896] usb 6-1: new high-speed USB device number 8 using dummy_hcd [ 614.206764][ T8326] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 614.245703][ T8326] usb 1-1: SerialNumber: syz [ 614.498872][ T5896] usb 6-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 614.517284][ T5896] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 614.558905][ T5896] usb 6-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 614.574604][ T9746] cgroup: noprefix used incorrectly [ 614.601107][ T5896] usb 6-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 614.966973][ T5896] usb 6-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 615.056649][ T5896] usb 6-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 615.168983][ T5896] usb 6-1: Product: syz [ 615.224167][ T5896] usb 6-1: Manufacturer: syz [ 615.431484][ T5896] cdc_wdm 6-1:1.0: probe with driver cdc_wdm failed with error -22 [ 617.227494][ T9771] netlink: 240 bytes leftover after parsing attributes in process `syz.2.909'. [ 617.456247][ T9771] NCSI netlink: No device for ifindex 29216 [ 619.591364][ T8326] usb 1-1: 0:2 : does not exist [ 619.829597][ T9798] netlink: 4 bytes leftover after parsing attributes in process `syz.2.915'. [ 620.567804][ T9800] 9pnet_fd: Insufficient options for proto=fd [ 620.634448][ T9802] input: syz1 as /devices/virtual/input/input22 [ 620.754644][ T5936] usb 6-1: USB disconnect, device number 8 [ 622.426548][ T43] usb 6-1: new high-speed USB device number 9 using dummy_hcd [ 622.595684][ T43] usb 6-1: Using ep0 maxpacket: 32 [ 622.699325][ T43] usb 6-1: New USB device found, idVendor=0fd9, idProduct=0025, bcdDevice=29.40 [ 622.776990][ T43] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 622.886152][ T43] usb 6-1: config 0 descriptor?? [ 623.669773][ T43] dvb-usb: found a 'Elgato EyeTV Sat' in warm state. [ 623.695940][ T43] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 623.737574][ T43] dvbdev: DVB: registering new adapter (Elgato EyeTV Sat) [ 623.756113][ T43] usb 6-1: media controller created [ 623.886935][ T43] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 623.981650][ T9826] ------------[ cut here ]------------ [ 623.987599][ T9826] WARNING: CPU: 0 PID: 9826 at mm/page_alloc.c:4935 __alloc_frozen_pages_noprof+0x2c8/0x370 [ 623.997816][ T9826] Modules linked in: [ 624.002148][ T9826] CPU: 0 UID: 0 PID: 9826 Comm: syz.1.925 Not tainted 6.16.0-syzkaller #0 PREEMPT(full) [ 624.012197][ T9826] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 624.022334][ T9826] RIP: 0010:__alloc_frozen_pages_noprof+0x2c8/0x370 [ 624.029150][ T9826] Code: 74 10 4c 89 e7 89 54 24 0c e8 14 14 0d 00 8b 54 24 0c 49 83 3c 24 00 0f 85 a5 fe ff ff e9 a6 fe ff ff c6 05 b8 a6 77 0d 01 90 <0f> 0b 90 e9 18 ff ff ff a9 00 00 08 00 48 8b 4c 24 10 4c 8d 44 24 [ 624.049453][ T9826] RSP: 0018:ffffc9000b9e79c0 EFLAGS: 00010246 [ 624.055846][ T9826] RAX: ffffc9000b9e7a00 RBX: 0000000000000024 RCX: 0000000000000000 [ 624.063889][ T9826] RDX: 0000000000000000 RSI: 0000000000000000 RDI: ffffc9000b9e7a28 [ 624.071875][ T9826] RBP: ffffc9000b9e7aa8 R08: ffffc9000b9e7a27 R09: 0000000000000000 [ 624.080039][ T9826] R10: ffffc9000b9e7a00 R11: fffff5200173cf45 R12: 0000000000000000 [ 624.088209][ T9826] R13: 1ffff9200173cf3c R14: 0000000000040d40 R15: dffffc0000000000 [ 624.096236][ T9826] FS: 00007efcc1d986c0(0000) GS:ffff888125c57000(0000) knlGS:0000000000000000 [ 624.105248][ T9826] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 624.111844][ T9826] CR2: 00002000001e5030 CR3: 00000000351ca000 CR4: 00000000003526f0 [ 624.119866][ T9826] Call Trace: [ 624.123239][ T9826] [ 624.126213][ T9826] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 624.133047][ T9826] ? v9fs_fid_xattr_get+0x237/0x2e0 [ 624.138287][ T9826] __alloc_pages_noprof+0xa/0x30 [ 624.143590][ T9826] ___kmalloc_large_node+0x85/0x210 [ 624.148823][ T9826] __kmalloc_large_node_noprof+0x18/0x90 [ 624.154724][ T9826] __kmalloc_noprof+0x36f/0x4f0 [ 624.159619][ T9826] ? v9fs_fid_get_acl+0x4f/0x100 [ 624.164670][ T9826] ? __pfx_v9fs_cache_inode_get_cookie+0x10/0x10 [ 624.171039][ T9826] v9fs_fid_get_acl+0x4f/0x100 [ 624.175899][ T9826] v9fs_get_acl+0x9a/0x360 [ 624.180456][ T9826] v9fs_inode_from_fid_dotl+0x221/0x2b0 [ 624.186093][ T9826] v9fs_mount+0x6cb/0xa10 [ 624.190622][ T9826] ? __pfx_v9fs_mount+0x10/0x10 [ 624.195535][ T9826] ? rcu_is_watching+0x15/0xb0 [ 624.200322][ T9826] ? cap_capable+0x11f/0x460 [ 624.205026][ T9826] legacy_get_tree+0xfd/0x1a0 [ 624.209723][ T9826] ? __pfx_v9fs_mount+0x10/0x10 [ 624.214634][ T9826] vfs_get_tree+0x92/0x2b0 [ 624.219099][ T9826] do_new_mount+0x24a/0xa40 [ 624.223678][ T9826] __se_sys_mount+0x317/0x410 [ 624.228413][ T9826] ? __pfx___se_sys_mount+0x10/0x10 [ 624.233690][ T9826] ? rcu_is_watching+0x15/0xb0 [ 624.238587][ T9826] ? do_syscall_64+0xbe/0x3b0 [ 624.243339][ T9826] ? __x64_sys_mount+0x20/0xc0 [ 624.248448][ T9826] do_syscall_64+0xfa/0x3b0 [ 624.253219][ T9826] ? lockdep_hardirqs_on+0x9c/0x150 [ 624.258478][ T9826] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 624.264918][ T9826] ? clear_bhb_loop+0x60/0xb0 [ 624.269652][ T9826] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 624.275729][ T9826] RIP: 0033:0x7efcc0f8ebe9 [ 624.280173][ T9826] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 624.299965][ T9826] RSP: 002b:00007efcc1d98038 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 624.308477][ T9826] RAX: ffffffffffffffda RBX: 00007efcc11b5fa0 RCX: 00007efcc0f8ebe9 [ 624.316525][ T9826] RDX: 0000200000000b80 RSI: 00002000000003c0 RDI: 0000000000000000 [ 624.324553][ T9826] RBP: 00007efcc1011e19 R08: 0000200000000580 R09: 0000000000000000 [ 624.332766][ T9826] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 624.340758][ T9826] R13: 00007efcc11b6038 R14: 00007efcc11b5fa0 R15: 00007ffc0dbe8a48 [ 624.349268][ T9826] [ 624.352329][ T9826] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 624.359626][ T9826] CPU: 0 UID: 0 PID: 9826 Comm: syz.1.925 Not tainted 6.16.0-syzkaller #0 PREEMPT(full) [ 624.369443][ T9826] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 624.379525][ T9826] Call Trace: [ 624.382814][ T9826] [ 624.385755][ T9826] dump_stack_lvl+0x99/0x250 [ 624.390433][ T9826] ? __asan_memcpy+0x40/0x70 [ 624.395065][ T9826] ? __pfx_dump_stack_lvl+0x10/0x10 [ 624.400306][ T9826] ? __pfx__printk+0x10/0x10 [ 624.404942][ T9826] panic+0x2db/0x790 [ 624.408887][ T9826] ? __pfx_panic+0x10/0x10 [ 624.413330][ T9826] ? show_trace_log_lvl+0x4fb/0x550 [ 624.418561][ T9826] __warn+0x31b/0x4b0 [ 624.422571][ T9826] ? __alloc_frozen_pages_noprof+0x2c8/0x370 [ 624.428627][ T9826] ? __alloc_frozen_pages_noprof+0x2c8/0x370 [ 624.434651][ T9826] report_bug+0x2be/0x4f0 [ 624.439226][ T9826] ? __alloc_frozen_pages_noprof+0x2c8/0x370 [ 624.445327][ T9826] ? __alloc_frozen_pages_noprof+0x2c8/0x370 [ 624.451326][ T9826] ? __alloc_frozen_pages_noprof+0x2ca/0x370 [ 624.457335][ T9826] handle_bug+0x84/0x160 [ 624.461595][ T9826] exc_invalid_op+0x1a/0x50 [ 624.466136][ T9826] asm_exc_invalid_op+0x1a/0x20 [ 624.471021][ T9826] RIP: 0010:__alloc_frozen_pages_noprof+0x2c8/0x370 [ 624.477734][ T9826] Code: 74 10 4c 89 e7 89 54 24 0c e8 14 14 0d 00 8b 54 24 0c 49 83 3c 24 00 0f 85 a5 fe ff ff e9 a6 fe ff ff c6 05 b8 a6 77 0d 01 90 <0f> 0b 90 e9 18 ff ff ff a9 00 00 08 00 48 8b 4c 24 10 4c 8d 44 24 [ 624.497365][ T9826] RSP: 0018:ffffc9000b9e79c0 EFLAGS: 00010246 [ 624.503461][ T9826] RAX: ffffc9000b9e7a00 RBX: 0000000000000024 RCX: 0000000000000000 [ 624.511466][ T9826] RDX: 0000000000000000 RSI: 0000000000000000 RDI: ffffc9000b9e7a28 [ 624.519456][ T9826] RBP: ffffc9000b9e7aa8 R08: ffffc9000b9e7a27 R09: 0000000000000000 [ 624.527442][ T9826] R10: ffffc9000b9e7a00 R11: fffff5200173cf45 R12: 0000000000000000 [ 624.535438][ T9826] R13: 1ffff9200173cf3c R14: 0000000000040d40 R15: dffffc0000000000 [ 624.543463][ T9826] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 624.549860][ T9826] ? v9fs_fid_xattr_get+0x237/0x2e0 [ 624.555200][ T9826] __alloc_pages_noprof+0xa/0x30 [ 624.560336][ T9826] ___kmalloc_large_node+0x85/0x210 [ 624.565552][ T9826] __kmalloc_large_node_noprof+0x18/0x90 [ 624.571220][ T9826] __kmalloc_noprof+0x36f/0x4f0 [ 624.576091][ T9826] ? v9fs_fid_get_acl+0x4f/0x100 [ 624.581118][ T9826] ? __pfx_v9fs_cache_inode_get_cookie+0x10/0x10 [ 624.587497][ T9826] v9fs_fid_get_acl+0x4f/0x100 [ 624.592316][ T9826] v9fs_get_acl+0x9a/0x360 [ 624.596771][ T9826] v9fs_inode_from_fid_dotl+0x221/0x2b0 [ 624.602344][ T9826] v9fs_mount+0x6cb/0xa10 [ 624.606727][ T9826] ? __pfx_v9fs_mount+0x10/0x10 [ 624.611586][ T9826] ? rcu_is_watching+0x15/0xb0 [ 624.616362][ T9826] ? cap_capable+0x11f/0x460 [ 624.620967][ T9826] legacy_get_tree+0xfd/0x1a0 [ 624.625655][ T9826] ? __pfx_v9fs_mount+0x10/0x10 [ 624.630515][ T9826] vfs_get_tree+0x92/0x2b0 [ 624.634973][ T9826] do_new_mount+0x24a/0xa40 [ 624.639497][ T9826] __se_sys_mount+0x317/0x410 [ 624.644201][ T9826] ? __pfx___se_sys_mount+0x10/0x10 [ 624.649411][ T9826] ? rcu_is_watching+0x15/0xb0 [ 624.654195][ T9826] ? do_syscall_64+0xbe/0x3b0 [ 624.658883][ T9826] ? __x64_sys_mount+0x20/0xc0 [ 624.663680][ T9826] do_syscall_64+0xfa/0x3b0 [ 624.668206][ T9826] ? lockdep_hardirqs_on+0x9c/0x150 [ 624.673416][ T9826] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 624.679506][ T9826] ? clear_bhb_loop+0x60/0xb0 [ 624.684208][ T9826] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 624.690110][ T9826] RIP: 0033:0x7efcc0f8ebe9 [ 624.694551][ T9826] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 624.714166][ T9826] RSP: 002b:00007efcc1d98038 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 624.722590][ T9826] RAX: ffffffffffffffda RBX: 00007efcc11b5fa0 RCX: 00007efcc0f8ebe9 [ 624.730586][ T9826] RDX: 0000200000000b80 RSI: 00002000000003c0 RDI: 0000000000000000 [ 624.738581][ T9826] RBP: 00007efcc1011e19 R08: 0000200000000580 R09: 0000000000000000 [ 624.746567][ T9826] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 624.754551][ T9826] R13: 00007efcc11b6038 R14: 00007efcc11b5fa0 R15: 00007ffc0dbe8a48 [ 624.762554][ T9826] [ 624.765964][ T9826] Kernel Offset: disabled [ 624.770305][ T9826] Rebooting in 86400 seconds..