last executing test programs: 26m49.447786712s ago: executing program 32 (id=3802): openat$cuse(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) socket(0x2, 0x2, 0x1) mkdir(&(0x7f0000000200)='./file1\x00', 0x0) mount$fuse(0x0, 0x0, 0x0, 0xfc5cd7921c2c19c4, &(0x7f0000000400)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=0x0]) mount(0x0, &(0x7f0000000380)='./file1\x00', &(0x7f0000000040)='autofs\x00', 0x0, &(0x7f0000000400)) chdir(&(0x7f0000000080)='./file1\x00') r0 = syz_clone(0x904000, 0x0, 0x5f, 0x0, 0x0, 0x0) mount$9p_fd(0x0, &(0x7f0000000040)='./file0\x00', 0x0, 0x0, &(0x7f0000000580)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX, @ANYBLOB=',wfdno=', @ANYRESHEX, @ANYBLOB=',privport,acce']) r1 = getpid() socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000240)=0x2) r3 = msgget(0x0, 0x100) getsockopt$sock_cred(r2, 0x1, 0x11, &(0x7f0000000180)={0x0, 0x0}, &(0x7f0000000200)=0xc) r5 = syz_open_procfs(0x0, &(0x7f0000000100)='timerslack_ns\x00') read$FUSE(r5, &(0x7f00000024c0)={0x2020, 0x0, 0x0, 0x0, 0x0}, 0xfffffffffffffe84) lchown(&(0x7f00000000c0)='./file1\x00', 0x0, r6) msgctl$IPC_SET(r3, 0x1, &(0x7f0000000300)={{0x1, r4, r6, 0x0, 0x0, 0x202, 0x4}, 0x0, 0x0, 0x7, 0xa0000000, 0x200, 0x9, 0x26, 0x5, 0x1, 0x7fff, r1, r1}) setpgid(r0, 0x0) r7 = getpgid(r0) setpgid(0x0, r7) r8 = openat$autofs(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) mount$fuse(0x0, &(0x7f0000000180)='./file1\x00', 0x0, 0x100240d, 0x0) r9 = open(&(0x7f0000000000)='.\x00', 0x0, 0x244) ioctl$AUTOFS_DEV_IOCTL_CATATONIC(r8, 0xc0189379, &(0x7f0000000200)={{0x1, 0x1, 0x18, r9}, './file0\x00'}) bpf$PROG_LOAD(0x5, &(0x7f0000008000)={0x15, 0x3, &(0x7f0000000900)=ANY=[@ANYBLOB="b700000000000000070000000000000095000000000000005b1953e7203b3833b487e3c4bd4540e4b6e87b7891e0f159182f542be18de00d9d95e1c4a6b62a3c065fc1a7b4c144cc2508eba2540e3425abc138dbaf9f6da59d9c77cbe2a8a9666a08ed1704c6bb2e422f01d64cae3050d7bd3c10b0e80d9483a2e36568cf0c6a1b78d9ca2f8065a1d7b4b0eeeecaa3c865de68042c9ab36e8a43b97955b04e5351f99c682a939832582c0dfd64028580c33fca4ca652f4c4e116c16e0f76fd9379599b54e06a8662f81fe375751e06007efabbd87b82d35367257d1bc15f92370261aace269013bc00b86daae71e253200000000b1467c86aff0ee8ff6c53939acb3866e8247eff7c10f000200000e6bd59e5b4dbc12ce8f0a5f816382fc66bcf14bb83ce2336b93b90594b78301e696503eea3404fe7dc3a8a5f9fde10f53e458e9efbe57fb52e85ea5346ed9f42418aefc6052afd588f8ae73eaab3af38936bfdadc91cda3983de6513ef3c2e58a54ffb1921aab1df971cdc2b2ab17bc9e421b5991b6036f845313a4a5f9d8a36472d7d758d73e9be967ca3fdae7d7ba03a8d9e5962c67ca30e5b6eb3c524c22632e47f18c879f0564361ef35aba5ed3f2d1b0bc6954e7e2dc49106ce8a49b48812ad3f5f8391c14ecde831be42d15bdc797c2b9ab30a8e90d7d53784e7add8e5bd5b6797a63e48efa0eb4d1df88ea8b388e94c6a15ac4e22447dad331244a38a5a2e294905611bfeadcac35f6ccf6af94191954c6b840a3092ef94d1e0e23019fbbdcd5b47e4a565ce42d0bbd7b14f9df1139"], &(0x7f0000003ff6)='syzkaller\x00', 0x1, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_reuseport, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) socket(0x10, 0x800000000080002, 0x6) 26m45.21425984s ago: executing program 33 (id=3841): r0 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r0, &(0x7f0000000040)={0x0, 0x0, 0x0}, 0x0) 26m29.245971365s ago: executing program 2 (id=3923): r0 = socket$kcm(0x2, 0x1, 0x84) setsockopt$sock_attach_bpf(r0, 0x84, 0x9, &(0x7f0000000380), 0x98) 26m28.984313111s ago: executing program 2 (id=3926): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000580)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a03000000000000000000070000000900010073797a300000000074000000090a010400000000000000000700000008000a40000000000900020073797a30000000000900010073797a3000000000080005400000000d30001280200001800a00010071756f7461000000100002800c00014000000000800000010c000180"], 0xbc}}, 0x20050800) 26m28.796088278s ago: executing program 2 (id=3927): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000340), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_XEN_HVM_CONFIG(r1, 0x4038ae7a, &(0x7f0000000240)={0x0, 0xda0, 0x0, 0x0, 0xfffffffffffffff6}) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x1) 26m28.617174043s ago: executing program 2 (id=3928): openat$cuse(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) socket(0x2, 0x2, 0x1) mkdir(&(0x7f0000000200)='./file1\x00', 0x0) mount$fuse(0x0, 0x0, 0x0, 0xfc5cd7921c2c19c4, &(0x7f0000000400)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=0x0]) mount(0x0, &(0x7f0000000380)='./file1\x00', &(0x7f0000000040)='autofs\x00', 0x0, &(0x7f0000000400)) chdir(&(0x7f0000000080)='./file1\x00') r0 = syz_clone(0x904000, 0x0, 0x5f, 0x0, 0x0, 0x0) mount$9p_fd(0x0, &(0x7f0000000040)='./file0\x00', 0x0, 0x0, &(0x7f0000000580)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX, @ANYBLOB=',wfdno=', @ANYRESHEX, @ANYBLOB=',privport,acce']) r1 = getpid() socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000240)=0x2) r3 = msgget(0x0, 0x100) getsockopt$sock_cred(r2, 0x1, 0x11, &(0x7f0000000180)={0x0, 0x0}, &(0x7f0000000200)=0xc) r5 = syz_open_procfs(0x0, &(0x7f0000000100)='timerslack_ns\x00') read$FUSE(r5, &(0x7f00000024c0)={0x2020, 0x0, 0x0, 0x0, 0x0}, 0xfffffffffffffe84) lchown(&(0x7f00000000c0)='./file1\x00', 0x0, r6) msgctl$IPC_SET(r3, 0x1, &(0x7f0000000300)={{0x1, r4, r6, 0x0, 0x0, 0x202, 0x4}, 0x0, 0x0, 0x7, 0xa0000000, 0x200, 0x9, 0x26, 0x5, 0x1, 0x7fff, r1, r1}) setpgid(r0, 0x0) setpgid(0x0, 0x0) r7 = openat$autofs(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) mount$fuse(0x0, &(0x7f0000000180)='./file1\x00', 0x0, 0x100240d, 0x0) r8 = open(&(0x7f0000000000)='.\x00', 0x0, 0x244) ioctl$AUTOFS_DEV_IOCTL_CATATONIC(r7, 0xc0189379, &(0x7f0000000200)={{0x1, 0x1, 0x18, r8}, './file0\x00'}) 26m28.400794104s ago: executing program 2 (id=3929): ioctl$DRM_IOCTL_MODE_ADDFB2(0xffffffffffffffff, 0xc06864b8, &(0x7f0000000580)={0x0, 0xc1, 0x80, 0x20203843, 0x2, [0x2], [0x80ffff, 0x0, 0xfe], [0x3, 0x0, 0x7, 0xfffffffe], [0x400000000000001, 0x0, 0x8, 0x5c]}) 26m23.421772888s ago: executing program 2 (id=3966): r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000240)={'batadv_slave_1\x00', 0x0}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=ANY=[@ANYBLOB="440000001000010027bd7000fbdbdf2500000000", @ANYRES32=r1, @ANYBLOB="104e060001620100240012801100010062a320108cefac664c617665000000000c0005"], 0x44}, 0x1, 0x0, 0x0, 0x404c000}, 0x4004002) 26m22.858060671s ago: executing program 34 (id=3966): r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000240)={'batadv_slave_1\x00', 0x0}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=ANY=[@ANYBLOB="440000001000010027bd7000fbdbdf2500000000", @ANYRES32=r1, @ANYBLOB="104e060001620100240012801100010062a320108cefac664c617665000000000c0005"], 0x44}, 0x1, 0x0, 0x0, 0x404c000}, 0x4004002) 23m36.541206378s ago: executing program 1 (id=4776): openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) r0 = socket$kcm(0x2, 0x1, 0x84) setsockopt$sock_attach_bpf(r0, 0x84, 0xd, &(0x7f0000000000), 0x8) 23m36.213745099s ago: executing program 1 (id=4779): r0 = syz_open_dev$radio(&(0x7f0000000140), 0x2, 0x2) ioctl$VIDIOC_DQEVENT(r0, 0x80805659, 0x0) syz_open_dev$vbi(&(0x7f0000000000), 0x2, 0x2) openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x20200, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$vim2m_VIDIOC_S_FMT(0xffffffffffffffff, 0xc0d05605, &(0x7f0000000140)={0x2, @pix_mp={0x0, 0x800, 0x34324152, 0x2, 0xb, [{}, {}, {0xfffffffd}, {0xfffffffd}, {}, {0x0, 0x1000000}], 0x0, 0x0, 0x0, 0x1}}) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=@newlink={0x48, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x38f3a, 0x8000}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @geneve={{0xb}, {0x4}}}, @IFLA_ALT_IFNAME={0x14, 0x35, 'geneve1\x00'}]}, 0x48}}, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = socket$l2tp6(0xa, 0x2, 0x73) bind$l2tp6(r2, &(0x7f0000000000)={0xa, 0x0, 0x0, @empty}, 0x20) connect$l2tp6(r2, &(0x7f0000000f40)={0xa, 0x0, 0x0, @empty}, 0x20) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000540)=@IORING_OP_SPLICE={0x1e, 0x58, 0x0, @fd_index=0x7, 0x400, {}, 0x77e7f3d6, 0x1, 0x1, {0x0, 0x0, r2}}) sendmmsg$inet6(r2, &(0x7f0000000ac0)=[{{&(0x7f0000000180)={0xa, 0x0, 0x0, @empty}, 0x1c, 0x0}}], 0x17fd147c801ae9ab, 0x0) setsockopt$inet6_mreq(r1, 0x29, 0x1b, &(0x7f0000000200)={@dev}, 0x14) ioctl$KVM_CREATE_DEVICE(0xffffffffffffffff, 0xc00caee0, &(0x7f0000000000)={0x4, 0xffffffffffffffff, 0x1}) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000009c0)=@newlink={0x28, 0x10, 0xc362e63b3f31ba5f, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x20080, 0x80e1}, [@IFLA_GROUP={0x8}]}, 0x28}}, 0x0) 23m36.071273914s ago: executing program 1 (id=4780): io_uring_setup(0x2ea4, 0x0) bind$inet6(0xffffffffffffffff, 0x0, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) close(r0) r1 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r0, 0x0, 0x0) listen(r1, 0x0) openat$ipvs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sys/net/ipv4/vs/secure_tcp\x00', 0x2, 0x0) r2 = socket$inet_mptcp(0x2, 0x1, 0x106) connect$inet(r2, &(0x7f0000000140)={0x2, 0x4e22, @loopback}, 0x10) accept4(r1, 0x0, 0x0, 0x800) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r3, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000004c0)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="0100000000000000000001000000280001801400040000000000000000000000ffffac1414aa060001000a0080000800060003"], 0x3c}, 0x1, 0x0, 0x0, 0x4000000}, 0x4000840) 23m34.390497103s ago: executing program 1 (id=4788): r0 = socket$packet(0x11, 0x3, 0x300) syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) ioctl$AUTOFS_DEV_IOCTL_VERSION(0xffffffffffffffff, 0xc0189371, &(0x7f0000000080)={{0x1, 0x1, 0x18, r0}, './file0\x00'}) r1 = openat$autofs(0xffffff9c, &(0x7f0000000200), 0x420000, 0x0) r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(r2, &(0x7f0000000200)={0x26, 'aead\x00', 0x0, 0x0, 'rfc4106-gcm-aesni\x00'}, 0x58) setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, 0x0, 0x0) ioctl$AUTOFS_DEV_IOCTL_PROTOVER(r1, 0xc0189372, &(0x7f0000000240)={{0x1, 0x1, 0x18, r2, {0x1}}, './file0\x00'}) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000100)) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000013c0)={0x11, 0x3, &(0x7f00000001c0)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000300)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000040)='contention_end\x00', r3}, 0x10) r4 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$BTRFS_IOC_GET_SUPPORTED_FEATURES(r4, 0x50009405, &(0x7f0000000180)) 23m33.565676254s ago: executing program 1 (id=4791): mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x0) mount$fuse(0x0, 0x0, 0x0, 0x2b38094, &(0x7f0000000400)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=0x0]) mount(0x0, &(0x7f0000000380)='./file1\x00', &(0x7f0000000040)='autofs\x00', 0x0, &(0x7f0000000400)) chdir(&(0x7f0000000080)='./file1\x00') r0 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) setpgid(r0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x20) mount(0x0, &(0x7f0000000380)='./file1\x00', 0x0, 0x0, 0x0) r1 = open(&(0x7f0000000000)='.\x00', 0x0, 0x0) ioctl$AUTOFS_IOC_PROTOSUBVER(r1, 0x40049366, 0x0) 23m33.348746935s ago: executing program 1 (id=4795): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newtaction={0xa4, 0x30, 0x1, 0x0, 0x20, {}, [{0x90, 0x1, [@m_ct={0x44, 0x2, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0x9d, 0x11e41e7a, 0x20000000, 0x0, 0xf}}]}, {0x4}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x0, 0x1}}}}, @m_ife={0x48, 0x1, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0xa4}, 0x1, 0x0, 0x0, 0x804}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) syz_emit_vhci(&(0x7f00000015c0)=ANY=[@ANYBLOB="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"], 0x102) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4000}, 0x0) bind$unix(r1, 0x0, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.stat\x00', 0x275a, 0x0) r4 = syz_open_dev$sndctrl(&(0x7f0000000100), 0x0, 0x0) r5 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000340)={'bridge0\x00', 0x0}) r7 = socket(0x1d, 0x80002, 0xfe3) sendmsg$nl_route(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={0x0, 0x44}}, 0x0) setsockopt$inet_mreqn(r3, 0x0, 0x20, &(0x7f0000000300)={@initdev={0xac, 0x1e, 0x0, 0x0}, @loopback, r6}, 0xc) getpid() r8 = mq_open(&(0x7f0000000080)='eth0\x00#\x13\xaeu\xe0\xfbu0*\xf3\x11i\xdd\xd9\xc6\x87\xde\xbf_\xa0\xf6\xdfk\xbf.\"\xa6\xc0#p\xcd\x1c/\xa6\xf2\xbcyL\x85a\xb5\xbb~+>\xbc\x93\xf8\xab\x9a3\x85l\x1d\x15\x11\x1a{@!2\xb6!\xae\xf79k\x90\x88\v8I$\xfdQ\x1d\x90=r\xd8\xc0\xd8\t/\x8dv\xb8\x93\xc3C\xae\x9dc\xd1T\xdd\x14\xd3\xe1\xbe_$A=z\xee\xbd/X\xbemOX)s\x94\xde\xbe_\v\x01\xbe\xeb\xbb\x91\x11z\xc2|d\x1b\x04\xd2\xf9yx\xb2\x1b\bLTrw\x88\x9e0\t\xc6\xe2\x9c\xed\\\xd8[\xc8\x04 \xf3\xac]V\x1d:\xfc\xc3\x9e\x02\ax\xef\xfe\x1c.TT\xcf\xbf\xf5\x80a%\xdcQ\xb3CuT\xcc7\x8avs\xb2\a\xfe\xb3j*\xad\x18I\xcc\xe9\xaa{]\xef\xb7\xf2\xee*\xf95\bJt\xd0s\xc4\xaa\xc8\x13~\xb2\xf20\xbdf\xdb\xaeG\xe3\xfb\xef\x94\xef:Q\x1b\xe3\xa3\xa4}\xef`e\xcdL\xab\xdb\r\xf2y\x9fg1\xf4\t\x18i/!\x13\xf1,\x8cu\xaa\xbf~)\x94\x1b2\x93\x86\xe7\x9a\xf2j\xa8\x96\xa6\xa2\xfcN\x81\xafTh\xb3\x1bo:\xe8\vq7S\xe4H\xf3L\xa0\x9c\x97B\x12\x10\x9d\xaa\x7fq\x06\xb9(\xf6\x1c\x83\xb1J\xec\x926\xb5a0\xa0B\xae|', 0x42, 0x0, 0x0) mq_timedsend(r8, 0x0, 0x0, 0x0, 0x0) mq_timedreceive(r8, &(0x7f000001d600)=""/102381, 0xec29, 0x20000004, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_WRITE(r4, 0xc1105518, &(0x7f0000000c40)={{0x0, 0x0, 0x0, 0x0, 'syz0\x00'}, 0x0, [0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000, 0x0, 0x80000000000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x8000000000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000000000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000000, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000000000000, 0xfffdfffc, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0xfffffffc, 0x7]}) 23m27.385822974s ago: executing program 7 (id=4828): ioctl$vim2m_VIDIOC_S_FMT(0xffffffffffffffff, 0xc0d05605, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x0, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) creat(0x0, 0xecf86c37d53049cc) pipe2$9p(&(0x7f0000001900)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) dup(r1) openat$cachefiles(0xffffffffffffff9c, &(0x7f00000004c0), 0x20081, 0x0) r2 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000015c0), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r2, 0xaf01, 0x0) r3 = eventfd(0xc) ioctl$VHOST_SET_LOG_BASE(r2, 0x4008af04, &(0x7f0000000200)=&(0x7f00000001c0)) ioctl$VHOST_SET_LOG_FD(r2, 0x4004af07, &(0x7f0000000240)=r3) syz_usb_connect(0x0, 0x36, 0x0, 0x0) ioctl$VHOST_SET_VRING_KICK(r2, 0x4008af20, &(0x7f0000000040)={0x1, r3}) ioctl$VHOST_SET_VRING_ADDR(r2, 0x4028af11, &(0x7f0000000140)={0x0, 0x0, 0x0, &(0x7f0000000500)=""/67, 0x0}) ioctl$VHOST_SET_VRING_ADDR(r2, 0x4028af11, &(0x7f0000000280)={0x1, 0x1, 0x0, &(0x7f00000000c0)=""/87, &(0x7f0000000480)=""/74}) ioctl$VHOST_SET_MEM_TABLE(r2, 0x4008af03, &(0x7f0000000180)) ioctl$VHOST_VSOCK_SET_RUNNING(r2, 0x4004af61, &(0x7f0000000000)=0x1) unshare(0x64000600) waitid(0x1, 0x0, 0x0, 0x61000006, 0x0) 23m22.410898887s ago: executing program 7 (id=4845): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newtaction={0xa4, 0x30, 0x1, 0x0, 0x0, {}, [{0x90, 0x1, [@m_ct={0x44, 0x3, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0x9d, 0x11e41e7a, 0x20000000, 0x0, 0xf}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x1}}}}, @m_ife={0x48, 0x1, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0xa4}, 0x1, 0x0, 0x0, 0x804}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) syz_io_uring_submit(0x0, 0x0, 0x0) syz_io_uring_setup(0x10d, &(0x7f0000000300)={0x0, 0xce5d, 0x80, 0x0, 0x89}, &(0x7f0000000240)=0x0, &(0x7f0000000280)) r4 = fsopen(&(0x7f0000000380)='btrfs\x00', 0x1) fsconfig$FSCONFIG_CMD_CREATE(r4, 0x6, 0x0, 0x0, 0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r3, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) bind$inet6(0xffffffffffffffff, &(0x7f0000000100)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) mmap(&(0x7f00009ff000/0x600000)=nil, 0x600000, 0x0, 0x11, 0xffffffffffffffff, 0x0) r5 = socket$inet6_mptcp(0xa, 0x1, 0x106) setsockopt$SO_TIMESTAMP(r5, 0x1, 0x41, &(0x7f0000000000)=0xff, 0x4) sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0xfffffeffffff7ffe, &(0x7f0000000140)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000000d40)=[{{0x0, 0x0, &(0x7f0000000640)=[{&(0x7f00000018c0)="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", 0xffc}, {&(0x7f0000000540)="633656a4", 0x4}], 0x2}}], 0x1, 0x4000800) getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(0xffffffffffffffff, 0x6, 0x23, &(0x7f0000000240)={&(0x7f0000f32000/0x1000)=nil, 0x1000, 0x0, 0x0, 0x0, 0x0, 0x57, 0x0, 0x0}, &(0x7f0000000800)=0x40) r6 = socket$netlink(0x10, 0x3, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000100)={0x1f, 0x9, &(0x7f0000000000)=@raw=[@printk={@p, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x96}}, @exit], &(0x7f0000000200)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x11, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) sendmsg$nl_route(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000180)=@newlink={0x48, 0x10, 0xffffff1f, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x18, 0x2, 0x0, 0x1, [@IFLA_BR_GROUP_ADDR={0x9, 0x14, @remote}, @IFLA_BR_AGEING_TIME={0x8, 0x9}]}}}]}, 0x48}}, 0x0) 23m21.413380887s ago: executing program 7 (id=4850): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newtaction={0xa4, 0x30, 0x1, 0x0, 0x0, {}, [{0x90, 0x1, [@m_ct={0x44, 0x2, 0x0, 0x0, {{0xfffffffffffffdd3}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0x9d, 0x11e41e7a, 0x20000000, 0x0, 0xf}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x3, 0x1}}}}, @m_ife={0x48, 0x1, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0xa4}, 0x1, 0x0, 0x0, 0x804}, 0x0) syz_genetlink_get_family_id$nfc(&(0x7f0000000100), 0xffffffffffffffff) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x4) ptrace$ARCH_SHSTK_ENABLE(0x1e, r1, 0x1, 0x5001) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sendmsg$NFNL_MSG_CTHELPER_GET(r0, &(0x7f00000001c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="94000000010901030064c30000000000000000060c00048008000140058806000c000480080001400000008108070040000000000c00048008000140000000ca280002001400018008000100ffffffff08000200ffffffff0600034000010000060003400002000008000640000000010c00048008000140000000050900010073797a31000000000c00048008000140000000"], 0x94}, 0x1, 0x0, 0x0, 0x50}, 0x24000000) 23m20.353312103s ago: executing program 7 (id=4856): mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) mprotect(&(0x7f0000038000/0x4000)=nil, 0x4000, 0x3) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000280)={0x0}, &(0x7f00000002c0)=0xc) r1 = syz_open_procfs(r0, &(0x7f0000000080)='net/ip_tables_matches\x00') madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) lseek(r1, 0x2006, 0x2) socket$key(0xf, 0x3, 0x2) openat$vnet(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) r2 = syz_open_dev$usbfs(&(0x7f0000000240), 0xb, 0x101301) ioctl$USBDEVFS_IOCTL(r2, 0xc0105512, &(0x7f0000000200)) ioctl$USBDEVFS_IOCTL(r2, 0x80045505, &(0x7f0000000040)=@usbdevfs_connect) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCSIFVLAN_ADD_VLAN_CMD(r3, 0x8983, &(0x7f0000000240)={0x0, 'bond_slave_1\x00', {0x5}, 0x9}) r4 = epoll_create(0x5) epoll_pwait2(r4, &(0x7f0000000340), 0x0, &(0x7f0000000300)={0x0, 0x3938700}, 0x0, 0x0) ioctl$USBDEVFS_SETCONFIGURATION(0xffffffffffffffff, 0x80045505, &(0x7f0000000000)=0x1) 23m19.133699942s ago: executing program 5 (id=4858): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000480)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a05000000000000000000010000000900010073797a30000000002c000000030a01010000000000000000010000000900010073797a30000000000900030073797a30000000005000f5892f17de1ecb650000060a010400000000000000000100000008000b40000000002800048024000180090001007866726d0000000014000280050003000000000008000240000000030900010073797a3000000000140000001100010000000000000000000000000a"], 0xc4}}, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYRES64=r0], 0x48) r1 = socket$nl_generic(0x10, 0x3, 0x10) mknodat$null(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0, 0x103) rseq(&(0x7f0000000400)={0x0, 0x0, 0x0, 0x4}, 0x20, 0x0, 0x0) acct(&(0x7f00000001c0)='./file0\x00') acct(0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r1, 0x8933, &(0x7f0000000140)={'batadv0\x00', 0x0}) syz_genetlink_get_family_id$batadv(&(0x7f0000000200), 0xffffffffffffffff) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newtaction={0xa4, 0x30, 0x1, 0x0, 0x0, {}, [{0x90, 0x1, [@m_ct={0x44, 0x2, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0x9d, 0x11e41e7a, 0x20000000, 0x0, 0xf}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x3, 0x1}}}}, @m_ife={0x48, 0x1, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0xa4}, 0x1, 0x0, 0x0, 0x804}, 0x0) syz_genetlink_get_family_id$nfc(&(0x7f0000000100), 0xffffffffffffffff) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r3 = getpid() bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x16, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b40000000000000079108000000000006300000000000042950000000000"], &(0x7f0000003ff6)='GPL\x00', 0x5, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @flow_dissector, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r3, 0x8, &(0x7f0000000000)=0x2) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) mknod$loop(&(0x7f0000000140)='./file0\x00', 0x200, 0x0) mount(&(0x7f0000000100)=@nullb, &(0x7f00000002c0)='./file0\x00', &(0x7f0000000080)='iso9660\x00', 0x0, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r6, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000180)=@getchain={0x24, 0x11, 0x1, 0x70bd2a, 0x8000000, {0x0, 0x0, 0x0, r2, {0x1f, 0x3}, {0x4}}}, 0x24}, 0x1, 0x0, 0x0, 0x20008040}, 0x4000000) 23m18.713852324s ago: executing program 7 (id=4861): mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x0) mount$fuse(0x0, 0x0, 0x0, 0x2b38094, &(0x7f0000000400)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=0x0]) mount(0x0, &(0x7f0000000380)='./file1\x00', &(0x7f0000000040)='autofs\x00', 0x0, &(0x7f0000000400)) chdir(&(0x7f0000000080)='./file1\x00') r0 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x20) setpgid(0x0, r0) mount(0x0, &(0x7f0000000380)='./file1\x00', 0x0, 0x0, 0x0) r1 = open(&(0x7f0000000000)='.\x00', 0x0, 0x0) ioctl$AUTOFS_IOC_PROTOSUBVER(r1, 0x40049366, 0x0) 23m17.992816541s ago: executing program 35 (id=4795): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newtaction={0xa4, 0x30, 0x1, 0x0, 0x20, {}, [{0x90, 0x1, [@m_ct={0x44, 0x2, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0x9d, 0x11e41e7a, 0x20000000, 0x0, 0xf}}]}, {0x4}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x0, 0x1}}}}, @m_ife={0x48, 0x1, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0xa4}, 0x1, 0x0, 0x0, 0x804}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) syz_emit_vhci(&(0x7f00000015c0)=ANY=[@ANYBLOB="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"], 0x102) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4000}, 0x0) bind$unix(r1, 0x0, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.stat\x00', 0x275a, 0x0) r4 = syz_open_dev$sndctrl(&(0x7f0000000100), 0x0, 0x0) r5 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000340)={'bridge0\x00', 0x0}) r7 = socket(0x1d, 0x80002, 0xfe3) sendmsg$nl_route(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={0x0, 0x44}}, 0x0) setsockopt$inet_mreqn(r3, 0x0, 0x20, &(0x7f0000000300)={@initdev={0xac, 0x1e, 0x0, 0x0}, @loopback, r6}, 0xc) getpid() r8 = mq_open(&(0x7f0000000080)='eth0\x00#\x13\xaeu\xe0\xfbu0*\xf3\x11i\xdd\xd9\xc6\x87\xde\xbf_\xa0\xf6\xdfk\xbf.\"\xa6\xc0#p\xcd\x1c/\xa6\xf2\xbcyL\x85a\xb5\xbb~+>\xbc\x93\xf8\xab\x9a3\x85l\x1d\x15\x11\x1a{@!2\xb6!\xae\xf79k\x90\x88\v8I$\xfdQ\x1d\x90=r\xd8\xc0\xd8\t/\x8dv\xb8\x93\xc3C\xae\x9dc\xd1T\xdd\x14\xd3\xe1\xbe_$A=z\xee\xbd/X\xbemOX)s\x94\xde\xbe_\v\x01\xbe\xeb\xbb\x91\x11z\xc2|d\x1b\x04\xd2\xf9yx\xb2\x1b\bLTrw\x88\x9e0\t\xc6\xe2\x9c\xed\\\xd8[\xc8\x04 \xf3\xac]V\x1d:\xfc\xc3\x9e\x02\ax\xef\xfe\x1c.TT\xcf\xbf\xf5\x80a%\xdcQ\xb3CuT\xcc7\x8avs\xb2\a\xfe\xb3j*\xad\x18I\xcc\xe9\xaa{]\xef\xb7\xf2\xee*\xf95\bJt\xd0s\xc4\xaa\xc8\x13~\xb2\xf20\xbdf\xdb\xaeG\xe3\xfb\xef\x94\xef:Q\x1b\xe3\xa3\xa4}\xef`e\xcdL\xab\xdb\r\xf2y\x9fg1\xf4\t\x18i/!\x13\xf1,\x8cu\xaa\xbf~)\x94\x1b2\x93\x86\xe7\x9a\xf2j\xa8\x96\xa6\xa2\xfcN\x81\xafTh\xb3\x1bo:\xe8\vq7S\xe4H\xf3L\xa0\x9c\x97B\x12\x10\x9d\xaa\x7fq\x06\xb9(\xf6\x1c\x83\xb1J\xec\x926\xb5a0\xa0B\xae|', 0x42, 0x0, 0x0) mq_timedsend(r8, 0x0, 0x0, 0x0, 0x0) mq_timedreceive(r8, &(0x7f000001d600)=""/102381, 0xec29, 0x20000004, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_WRITE(r4, 0xc1105518, &(0x7f0000000c40)={{0x0, 0x0, 0x0, 0x0, 'syz0\x00'}, 0x0, [0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000, 0x0, 0x80000000000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x8000000000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000000000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000000, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000000000000, 0xfffdfffc, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0xfffffffc, 0x7]}) 23m17.952726853s ago: executing program 7 (id=4864): ioctl$VHOST_SET_VRING_BASE(0xffffffffffffffff, 0xaf01, 0x0) r0 = eventfd(0x0) ioctl$VHOST_SET_VRING_BASE(0xffffffffffffffff, 0x4008af12, &(0x7f0000000080)={0x1, 0x83}) ioctl$VHOST_SET_LOG_FD(0xffffffffffffffff, 0x4004af07, &(0x7f0000000240)=r0) ioctl$VHOST_SET_VRING_KICK(0xffffffffffffffff, 0x4008af20, &(0x7f0000000040)={0x1, r0}) ioctl$VHOST_SET_VRING_ADDR(0xffffffffffffffff, 0x4028af11, &(0x7f0000000140)={0x0, 0x0, 0x0, &(0x7f0000000500)=""/67, 0x0}) ioctl$VHOST_SET_VRING_ADDR(0xffffffffffffffff, 0x4028af11, &(0x7f0000000280)={0x1, 0x1, &(0x7f0000000380)=""/247, &(0x7f00000000c0)=""/87, &(0x7f0000000480)=""/74}) ioctl$VHOST_SET_MEM_TABLE(0xffffffffffffffff, 0x4008af03, &(0x7f0000000680)) ioctl$VHOST_VSOCK_SET_RUNNING(0xffffffffffffffff, 0x4004af61, &(0x7f0000000000)=0x1ff) r1 = open(&(0x7f0000000180)='./bus\x00', 0x14927e, 0x41) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x27fffff, 0x4002011, r1, 0x0) 23m17.9515854s ago: executing program 5 (id=4865): ioctl$NS_GET_PARENT(0xffffffffffffffff, 0xb702, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newtaction={0xa4, 0x30, 0x1, 0x0, 0x0, {}, [{0x90, 0x1, [@m_ct={0x44, 0x2, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0x9d, 0x11e41e7a, 0x20000000, 0x0, 0xf}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x1}}}}, @m_ife={0x48, 0x1d, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0xa4}, 0x1, 0x0, 0x0, 0x804}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0xc, 0x0, 0x7ffc1ffb}]}) r3 = openat$sndseq(0xffffffffffffff9c, &(0x7f00000018c0), 0xe0c81) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r3, 0xc08c5332, &(0x7f00000002c0)={0xffffffff, 0x0, 0x0, 'queue1\x00'}) write$sndseq(r3, &(0x7f0000000000)=[{0x1e, 0x0, 0x0, 0x0, @tick, {}, {}, @raw32}], 0x1001a) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TEMPO(r3, 0x402c5342, &(0x7f0000000040)={0x0, 0x7a124, 0x60, {0x0, 0x100}}) r4 = socket(0x2, 0x80805, 0x0) sendmmsg$inet(r4, &(0x7f0000014980)=[{{&(0x7f0000000140)={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, &(0x7f0000000240)=[{&(0x7f0000001c00)='{', 0x1}], 0x1}}, {{&(0x7f00000000c0)={0x2, 0x0, @rand_addr=0x64010101}, 0x10, &(0x7f0000010700)=[{&(0x7f0000010140)="9b", 0x1}], 0x1}}], 0x2, 0x0) 23m16.97134491s ago: executing program 5 (id=4867): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newtaction={0xa4, 0x30, 0x1, 0x70bd2a, 0x0, {}, [{0x90, 0x1, [@m_ct={0x44, 0x2, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0x9d, 0x11e41e7a, 0x20000000, 0x0, 0xf}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x1}}}}, @m_ife={0x48, 0x1, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0xa4}, 0x1, 0x0, 0x0, 0x804}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0xd1, &(0x7f0000000040)=0x20f, 0x4) syz_io_uring_submit(0x0, 0x0, 0x0) openat$vim2m(0xffffff9c, &(0x7f0000000180), 0x2, 0x0) r3 = socket$can_raw(0x1d, 0x3, 0x1) close(r3) 23m15.348656471s ago: executing program 5 (id=4871): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000003c0)={0x18, 0x10, &(0x7f00000000c0)=ANY=[@ANYRES8, @ANYRES32, @ANYRES32], &(0x7f0000000000)='GPL\x00', 0x8, 0xba, &(0x7f0000000140)=""/186, 0x41000, 0x3, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000340), 0x10, 0x37, @void, @value}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0xe1}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x6) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x2000000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) connect$unix(r2, &(0x7f00000002c0)=@abs={0x1, 0x0, 0x4e21}, 0x6e) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x18, 0xb, &(0x7f0000000040)=ANY=[@ANYBLOB="18000000004f4b000000000000000000180100002020702000000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b7030000fdffffff850000007100000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r3}, 0x10) r4 = signalfd4(0xffffffffffffffff, &(0x7f0000000140), 0x8, 0x0) syz_io_uring_setup(0x39, &(0x7f0000000580)={0x0, 0xe7b7, 0x13500}, &(0x7f0000000240), &(0x7f0000001880)) mkdirat(r4, &(0x7f0000000100)='./file0/file0\x00', 0x120) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) execveat(0xffffffffffffffff, &(0x7f0000000000)='\x00', 0x0, 0x0, 0x1000) r5 = openat$6lowpan_control(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) write$6lowpan_control(r5, &(0x7f0000000180)='connect aa:aa:aa:aa:aa:11 0', 0x1b) r6 = socket$nl_crypto(0x10, 0x3, 0x15) sendmsg$nl_crypto(r6, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000600)=ANY=[@ANYBLOB="e000000010000100e3ff00000300000061656769733132380000000000000400"/224], 0xe0}, 0x1, 0x0, 0x0, 0x4c000}, 0x4008004) 23m13.833968575s ago: executing program 5 (id=4874): mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x0) mount$fuse(0x0, 0x0, 0x0, 0x2b38094, &(0x7f0000000400)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=0x0]) mount(0x0, &(0x7f0000000380)='./file1\x00', &(0x7f0000000040)='autofs\x00', 0x0, &(0x7f0000000400)) chdir(&(0x7f0000000080)='./file1\x00') r0 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x20) setpgid(0x0, r0) mount(0x0, &(0x7f0000000380)='./file1\x00', 0x0, 0x0, 0x0) r1 = open(&(0x7f0000000000)='.\x00', 0x0, 0x0) ioctl$AUTOFS_IOC_PROTOSUBVER(r1, 0x40049366, 0x0) 23m13.66103926s ago: executing program 5 (id=4875): syz_open_dev$ndb(0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, 0x0, 0x0) r0 = syz_open_procfs(0x0, 0x0) pread64(r0, &(0x7f0000000080)=""/102356, 0x18fd4, 0xc2a) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)=ANY=[@ANYBLOB="6000000002060103000000000000000000000004050001000700000013000300686173683a6e65742c696661636500000900020073797a30000000000500040000000000050005000a00000014000780050015000000000008001240"], 0x60}}, 0x0) 23m2.679124329s ago: executing program 36 (id=4864): ioctl$VHOST_SET_VRING_BASE(0xffffffffffffffff, 0xaf01, 0x0) r0 = eventfd(0x0) ioctl$VHOST_SET_VRING_BASE(0xffffffffffffffff, 0x4008af12, &(0x7f0000000080)={0x1, 0x83}) ioctl$VHOST_SET_LOG_FD(0xffffffffffffffff, 0x4004af07, &(0x7f0000000240)=r0) ioctl$VHOST_SET_VRING_KICK(0xffffffffffffffff, 0x4008af20, &(0x7f0000000040)={0x1, r0}) ioctl$VHOST_SET_VRING_ADDR(0xffffffffffffffff, 0x4028af11, &(0x7f0000000140)={0x0, 0x0, 0x0, &(0x7f0000000500)=""/67, 0x0}) ioctl$VHOST_SET_VRING_ADDR(0xffffffffffffffff, 0x4028af11, &(0x7f0000000280)={0x1, 0x1, &(0x7f0000000380)=""/247, &(0x7f00000000c0)=""/87, &(0x7f0000000480)=""/74}) ioctl$VHOST_SET_MEM_TABLE(0xffffffffffffffff, 0x4008af03, &(0x7f0000000680)) ioctl$VHOST_VSOCK_SET_RUNNING(0xffffffffffffffff, 0x4004af61, &(0x7f0000000000)=0x1ff) r1 = open(&(0x7f0000000180)='./bus\x00', 0x14927e, 0x41) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x27fffff, 0x4002011, r1, 0x0) 22m58.177051354s ago: executing program 37 (id=4875): syz_open_dev$ndb(0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, 0x0, 0x0) r0 = syz_open_procfs(0x0, 0x0) pread64(r0, &(0x7f0000000080)=""/102356, 0x18fd4, 0xc2a) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)=ANY=[@ANYBLOB="6000000002060103000000000000000000000004050001000700000013000300686173683a6e65742c696661636500000900020073797a30000000000500040000000000050005000a00000014000780050015000000000008001240"], 0x60}}, 0x0) 22m33.345768564s ago: executing program 0 (id=5023): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x48241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, 0x0) r1 = socket$kcm(0x2, 0xa, 0x2) r2 = socket$igmp6(0xa, 0x3, 0x2) ioctl$KVM_SET_IRQCHIP(0xffffffffffffffff, 0x4020ae46, &(0x7f0000000380)={0x0, 0x0, @ioapic={0x1000, 0x7, 0x7, 0xfffffffd, 0x0, [{0x5, 0xeb, 0x7, '\x00', 0xf8}, {0x4, 0x2, 0x80, '\x00', 0x7}, {0x9, 0x6, 0x6, '\x00', 0x7}, {0x1, 0xff, 0x4, '\x00', 0x43}, {0xb, 0xfc, 0x2, '\x00', 0xe}, {0x0, 0xa9, 0x8, '\x00', 0x15}, {0x40, 0xfa, 0x85, '\x00', 0x7}, {0x6, 0xff, 0x3, '\x00', 0xf9}, {0x9, 0x8, 0x9, '\x00', 0x3}, {0xd2, 0x80, 0x1, '\x00', 0x3}, {0xff, 0xd, 0xc, '\x00', 0x5}, {0xf5, 0x7, 0xf6}, {0xa1, 0xc, 0x0, '\x00', 0x3}, {0xfd, 0xc, 0x4, '\x00', 0xd}, {0x40, 0x2, 0x80, '\x00', 0x1}, {0x1, 0x40, 0x4, '\x00', 0x4}, {0x5, 0x81, 0x6, '\x00', 0x5}, {0x9, 0xf8, 0x9, '\x00', 0x7}, {0xff, 0xc5, 0x7, '\x00', 0x5}, {0x7, 0x8, 0x9, '\x00', 0xba}, {0x4, 0x2, 0x5, '\x00', 0x4}, {0xc, 0xf1, 0x9, '\x00', 0x4}, {0x8, 0x8, 0x4, '\x00', 0x4}, {0x8, 0x4a, 0x7, '\x00', 0x7}]}}) ioctl$sock_SIOCSIFVLAN_ADD_VLAN_CMD(r2, 0x8983, &(0x7f0000000300)={0x0, 'syzkaller1\x00'}) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$tun(r0, &(0x7f00000003c0)=ANY=[@ANYBLOB="000000000000000000001f000000000088a8000081"], 0x18a) 22m32.668726814s ago: executing program 0 (id=5025): mkdirat(0xffffffffffffff9c, &(0x7f0000000400)='./file0\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) mount(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000000080)='sysfs\x00', 0x0, 0x0) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000400)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}]}) chdir(&(0x7f0000000140)='./bus\x00') rmdir(&(0x7f0000000000)='./bus\x00') 22m32.420250367s ago: executing program 0 (id=5028): capset(&(0x7f00000000c0)={0x20071026}, 0x0) r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) ioctl$sock_ifreq(r0, 0x8943, &(0x7f0000000000)={'vlan1\x00', @ifru_map={0x80000000000004, 0xfffbffff}}) 22m31.594945333s ago: executing program 0 (id=5033): r0 = socket$inet_mptcp(0x2, 0x1, 0x106) getsockopt$inet_int(r0, 0x0, 0x18, 0x0, &(0x7f0000000080)) r1 = openat$audio1(0xffffffffffffff9c, &(0x7f0000000140), 0x256f16877c9c3f29, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newtaction={0xa4, 0x30, 0x1, 0x0, 0x0, {}, [{0x90, 0x1, [@m_ct={0x44, 0x2, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0x9a, 0x11e41e7a, 0x20000000, 0x0, 0xf}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x1}}}}, @m_ife={0x48, 0x1, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0xa4}, 0x1, 0x0, 0x0, 0x804}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r2 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r2, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socket$inet6_udp(0xa, 0x2, 0x0) r5 = syz_open_dev$media(&(0x7f00000006c0), 0x4007, 0x0) ioctl$MEDIA_IOC_REQUEST_ALLOC(r5, 0x80047c05, &(0x7f0000000940)=0xffffffffffffffff) ioctl$BTRFS_IOC_INO_LOOKUP_USER(r6, 0x7c81, 0x0) ioctl$SNDCTL_DSP_GETOPTR(r1, 0x800c5012, &(0x7f0000000000)) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) r7 = syz_open_dev$sg(&(0x7f00000060c0), 0x0, 0x8002) r8 = fcntl$dupfd(r7, 0x0, r7) write$sndseq(r8, &(0x7f0000000180)=[{0x0, 0x0, 0x4, 0x0, @tick, {}, {0x0, 0x4}, @control={0xdb, 0x6, 0xfffffffe}}, {0x0, 0x0, 0x0, 0x0, @tick=0x2, {0x0, 0xb}, {}, @time}], 0x38) ioctl$SG_GET_PACK_ID(r7, 0x227c, 0x0) syz_open_dev$vbi(&(0x7f0000000000), 0x3, 0x2) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000003c0)={0x18, 0x10, &(0x7f00000000c0)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x8, 0xa2, &(0x7f0000000140)=""/162, 0x41000, 0x3, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000340), 0x10, 0x37, @void, @value}, 0x94) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x6) getpid() 22m30.593986714s ago: executing program 0 (id=5036): r0 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_int(r0, 0x29, 0x4b, &(0x7f0000000180)=0xfffffff7, 0x4) sendmsg$inet(r0, &(0x7f0000000000)={&(0x7f0000000540)={0x2, 0x4e24, @multicast2}, 0x10, 0x0}, 0x800) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x0) mount$fuse(0x0, 0x0, 0x0, 0xfc5cd7921c2c19c4, &(0x7f0000000400)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=0x0]) mount(0x0, &(0x7f0000000380)='./file1\x00', &(0x7f0000000040)='autofs\x00', 0x0, &(0x7f0000000400)) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x42901, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r2 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$tun(r1, &(0x7f0000000240)=ANY=[@ANYBLOB="034886dd090030000300300000006000000001002f0081e949b93897bc3b0000000000007d01ff020000000000000000000000000001120022eb"], 0xfdef) chdir(&(0x7f0000000080)='./file1\x00') mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) chdir(&(0x7f0000000080)='./file0\x00') syz_clone(0x80002080, 0x0, 0x0, 0x0, 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x0, 0x0) r3 = syz_open_dev$vim2m(&(0x7f0000000080), 0xbfb, 0x2) r4 = dup2(r3, r3) ioctl$vim2m_VIDIOC_S_CTRL(r4, 0xc008561c, &(0x7f00000000c0)={0x980903, 0x6e}) setsockopt$RDS_GET_MR_FOR_DEST(r4, 0x114, 0x7, &(0x7f00000000c0)={@ax25={{0x3, @bcast, 0x1}, [@rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}, @default, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @default, @bcast, @bcast, @default]}, {0x0}, &(0x7f0000000080), 0x49}, 0xa0) 22m30.289787426s ago: executing program 0 (id=5039): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$sndmidi(0x0, 0x2, 0x141101) r1 = dup(r0) inotify_rm_watch(0xffffffffffffffff, 0x0) r2 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000015c0), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r2, 0xaf01, 0x0) r3 = eventfd(0x0) ioctl$VHOST_SET_VRING_BASE(r2, 0x4008af12, &(0x7f0000000080)={0x1, 0x7f}) ioctl$VHOST_SET_LOG_FD(r2, 0x4004af07, &(0x7f0000000240)=r3) ioctl$VHOST_SET_VRING_KICK(r2, 0x4008af20, &(0x7f0000000040)={0x1, r3}) ioctl$VHOST_SET_VRING_ADDR(r2, 0x4028af11, &(0x7f0000000140)={0x0, 0x0, 0x0, &(0x7f0000000180)=""/53, 0x0}) ioctl$VHOST_SET_VRING_ADDR(r2, 0x4028af11, &(0x7f0000000280)={0x1, 0x1, &(0x7f0000000380)=""/247, &(0x7f00000000c0)=""/87, &(0x7f0000000480)=""/74}) ioctl$VHOST_SET_MEM_TABLE(r2, 0x4008af03, &(0x7f0000000680)={0x1, 0x0, [{0x0, 0xfffffeac, &(0x7f00000001c0)=""/115}]}) ioctl$VHOST_SET_VRING_ERR(r2, 0x4008af22, &(0x7f00000002c0)={0x1, r3}) ioctl$VHOST_VSOCK_SET_RUNNING(r2, 0x4004af61, &(0x7f0000000340)=0x1) ioctl$BTRFS_IOC_SCRUB_PROGRESS(0xffffffffffffffff, 0xc400941d, &(0x7f0000000380)={0x0, 0x1fffe000000}) write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c) 22m15.085232276s ago: executing program 38 (id=5039): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$sndmidi(0x0, 0x2, 0x141101) r1 = dup(r0) inotify_rm_watch(0xffffffffffffffff, 0x0) r2 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000015c0), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r2, 0xaf01, 0x0) r3 = eventfd(0x0) ioctl$VHOST_SET_VRING_BASE(r2, 0x4008af12, &(0x7f0000000080)={0x1, 0x7f}) ioctl$VHOST_SET_LOG_FD(r2, 0x4004af07, &(0x7f0000000240)=r3) ioctl$VHOST_SET_VRING_KICK(r2, 0x4008af20, &(0x7f0000000040)={0x1, r3}) ioctl$VHOST_SET_VRING_ADDR(r2, 0x4028af11, &(0x7f0000000140)={0x0, 0x0, 0x0, &(0x7f0000000180)=""/53, 0x0}) ioctl$VHOST_SET_VRING_ADDR(r2, 0x4028af11, &(0x7f0000000280)={0x1, 0x1, &(0x7f0000000380)=""/247, &(0x7f00000000c0)=""/87, &(0x7f0000000480)=""/74}) ioctl$VHOST_SET_MEM_TABLE(r2, 0x4008af03, &(0x7f0000000680)={0x1, 0x0, [{0x0, 0xfffffeac, &(0x7f00000001c0)=""/115}]}) ioctl$VHOST_SET_VRING_ERR(r2, 0x4008af22, &(0x7f00000002c0)={0x1, r3}) ioctl$VHOST_VSOCK_SET_RUNNING(r2, 0x4004af61, &(0x7f0000000340)=0x1) ioctl$BTRFS_IOC_SCRUB_PROGRESS(0xffffffffffffffff, 0xc400941d, &(0x7f0000000380)={0x0, 0x1fffe000000}) write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c) 11.455705018s ago: executing program 3 (id=9367): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000400)=0x7) socketpair$unix(0x1, 0x2, 0x0, 0x0) connect$unix(0xffffffffffffffff, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="180100"/13], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f0000000540)='sched_switch\x00', r1, 0x0, 0x27}, 0x18) syz_init_net_socket$x25(0x9, 0x5, 0x0) timer_create(0x2, &(0x7f00000000c0)={0x0, 0x0, 0x2, @thr={&(0x7f0000000440)="8b7a798b259e906772e54107a2c0f20bbc865517a0d8398cae87c3fe7b2fced8e796663a70f5827e7b632fc15ea39bbb0e463c610140be51ad47aa9dc289a5fca7ea1919c71ce65589d5a11585e18d035fcb4fa9af7f4c4f10aff2b2687ce0e0bfc2c333a6f20859b8e2219dfedc1172ee33b0fb9c9d680009e56b9c9e", &(0x7f0000000340)="2f1f8562c81900c282f2ee28ced4bee8802da2b07b4fd5c3e384db5ea68bcdc1b5e136179b864a973570ed53b8cd005f584e77078b66571b51e9cc9d69449ac043fd1c4520478ade059ea5bc9d5d8185d9e9a260a7689b6fdd2a2c0ac489f2dc3425641911bddcf86c09082fcd3b772d9e86b0c4c5b983456f2ea7d79fe1d19b8ba131d750f6a186e3668e7648e4a29cc986"}}, &(0x7f0000000040)) socket$nl_netfilter(0x10, 0x3, 0xc) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000140)={0x38, 0x3, 0x1, 0x401, 0x0, 0x0, {0x2}, [@CTA_TUPLE_ORIG={0x24, 0x1, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @multicast1}, {0x8, 0x2, @multicast1}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}]}, 0x38}}, 0x0) 11.377716743s ago: executing program 3 (id=9369): socket$nl_route(0x10, 0x3, 0x0) ioctl$KVM_CAP_DIRTY_LOG_RING(0xffffffffffffffff, 0x4068aea3, 0x0) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$netlink(r0, &(0x7f0000001c00)={0x0, 0x0, 0x0}, 0x80000c0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newtaction={0xa4, 0x30, 0x1, 0x0, 0x0, {}, [{0x90, 0x1, [@m_ct={0x44, 0x2, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0x9d, 0x11e41e7a, 0x20000000, 0x0, 0xf}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x1}}}}, @m_ife={0x48, 0x1, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0xa4}, 0x1, 0x0, 0x0, 0x804}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) mkdirat(0xffffffffffffff9c, 0x0, 0x4) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0/file0\x00', 0x1c0) r4 = landlock_create_ruleset(&(0x7f0000000180)={0x100}, 0x18, 0x0) r5 = openat$dir(0xffffffffffffff9c, &(0x7f0000000140)='./file0/file0\x00', 0x0, 0x42) landlock_add_rule$LANDLOCK_RULE_PATH_BENEATH(r4, 0x1, &(0x7f0000000200)={0x100, r5}, 0x0) r6 = openat$dir(0xffffffffffffff9c, &(0x7f0000000240)='./file0/file0\x00', 0x200000, 0x0) landlock_add_rule$LANDLOCK_RULE_PATH_BENEATH(r4, 0x1, &(0x7f0000000280)={0x100, r6}, 0x0) request_key(&(0x7f0000000000)='asymmetric\x00', &(0x7f0000001ffb)={'syz', 0x2, 0x11}, &(0x7f0000001fee)='R\brust\xe3c*sgrVex:D0', 0x0) r7 = syz_open_procfs(0x0, 0x0) pread64(r7, &(0x7f0000001240)=""/102400, 0x200000, 0x200000) ioctl$sock_ipv6_tunnel_SIOCGET6RD(0xffffffffffffffff, 0x89f8, &(0x7f00000001c0)={'syztnl0\x00', &(0x7f00000000c0)={'ip_vti0\x00', 0x0, 0x8, 0x700, 0x76a, 0x7, {{0x2c, 0x4, 0x2, 0x1, 0xb0, 0x65, 0x0, 0x8, 0x2f, 0x0, @dev={0xac, 0x14, 0x14, 0x10}, @initdev={0xac, 0x1e, 0x1, 0x0}, {[@generic={0x94, 0xb, "e5b2b3ab328a77b9c0"}, @timestamp={0x44, 0x24, 0xbf, 0x0, 0x3, [0x11, 0xa, 0x6, 0x8, 0x7, 0xfffffffa, 0x3, 0x9]}, @ra={0x94, 0x4, 0x1}, @timestamp={0x44, 0x24, 0xae, 0x0, 0xe, [0x0, 0x3, 0x7, 0x80, 0x8b7, 0x9, 0x0, 0x3]}, @generic={0x88, 0x11, "672ab3bac55665a8c2fc7bbbccc8c8"}, @timestamp_prespec={0x44, 0x34, 0xe8, 0x3, 0x9, [{@multicast1, 0x400}, {@multicast1, 0x7}, {@private=0xa010100, 0x2}, {@remote, 0x3}, {@remote, 0x9}, {@multicast2, 0x5f7}]}]}}}}}) sendmsg$nl_route_sched_retired(r7, &(0x7f0000000380)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000340)={&(0x7f0000000200)=@newchain={0x24, 0x64, 0x1, 0x70bd29, 0x25dfdbfc, {0x0, 0x0, 0x0, r8, {0xfff1, 0x951f1719172a5509}, {0x4, 0xfff9}, {0x0, 0x8}}}, 0x24}, 0x1, 0x0, 0x0, 0x20000040}, 0x4000) 8.453701931s ago: executing program 3 (id=9379): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000400)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, 0x0, 0x0) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="180100"/13], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f0000000540)='sched_switch\x00', r3, 0x0, 0x27}, 0x18) syz_init_net_socket$x25(0x9, 0x5, 0x0) timer_create(0x2, &(0x7f00000000c0)={0x0, 0x0, 0x2, @thr={&(0x7f0000000440)="8b7a798b259e906772e54107a2c0f20bbc865517a0d8398cae87c3fe7b2fced8e796663a70f5827e7b632fc15ea39bbb0e463c610140be51ad47aa9dc289a5fca7ea1919c71ce65589d5a11585e18d035fcb4fa9af7f4c4f10aff2b2687ce0e0bfc2c333a6f20859b8e2219dfedc1172ee33b0fb9c9d680009e56b9c9e", &(0x7f0000000340)="2f1f8562c81900c282f2ee28ced4bee8802da2b07b4fd5c3e384db5ea68bcdc1b5e136179b864a973570ed53b8cd005f584e77078b66571b51e9cc9d69449ac043fd1c4520478ade059ea5bc9d5d8185d9e9a260a7689b6fdd2a2c0ac489f2dc3425641911bddcf86c09082fcd3b772d9e86b0c4c5b983456f2ea7d79fe1d19b8ba131d750f6a186e3668e7648e4a29cc986"}}, &(0x7f0000000040)) socket$nl_netfilter(0x10, 0x3, 0xc) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000140)={0x38, 0x3, 0x1, 0x401, 0x0, 0x0, {0x2}, [@CTA_TUPLE_ORIG={0x24, 0x1, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @multicast1}, {0x8, 0x2, @multicast1}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}]}, 0x38}}, 0x0) 7.807196971s ago: executing program 9 (id=9384): bpf$PROG_LOAD(0x5, &(0x7f0000000800)={0x1b, 0xc, &(0x7f0000000400)=ANY=[@ANYRESHEX, @ANYRES64], 0x0, 0x800000, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa6982a9, @void, @value}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, 0x0, &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000540)={0x16, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f00000001c0)=0x5) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000001c0)=ANY=[], 0x48) r3 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r3, 0x3b81, &(0x7f0000000040)={0xc, 0x0, 0x0}) ioctl$IOMMU_TEST_OP_MOCK_DOMAIN(r3, 0x3ba0, &(0x7f0000000380)={0x48, 0x2, r4}) close(r3) ioctl$sock_inet_SIOCSIFADDR(0xffffffffffffffff, 0x8916, &(0x7f0000000080)={'veth1_to_batadv\x00', {0x2, 0x0, @remote}}) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount$9p_rdma(&(0x7f0000000000), 0x0, &(0x7f0000000200), 0x800, &(0x7f0000000300)=ANY=[@ANYBLOB="7472616e733d72646d612cc792fbaa584a323461d64a706f72743d30322c00bb4fb37263ba48ac028276ec411a8846b389587dcb5a0bfdb07d359d06eb856928d1954d8290f349f265b4eaa6d2214c95880061444f043e2c18fbea8037aff4457244a6377800c3bf7798370000000000000000955e6556ad0b20a5a5ae0000"]) mount(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000080)='pstore\x00', 0x1c011, 0x0) r5 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) ioctl$LOOP_CTL_GET_FREE(r5, 0x4c82) syz_open_procfs(r0, &(0x7f00000003c0)='net/mcfilter6\x00') 6.890604873s ago: executing program 3 (id=9385): r0 = socket$inet6_mptcp(0xa, 0x1, 0x106) setsockopt$inet6_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000080)='cdg\x00', 0x4) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x3, 0x0, @loopback}, 0x1c) connect$inet6(r0, &(0x7f0000000040)={0xa, 0x3, 0x0, @loopback}, 0x1c) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) r3 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000040), 0x302) ioctl$SNDRV_SEQ_IOCTL_CLIENT_ID(r3, 0x80045301, &(0x7f0000000080)) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x4048010) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) sendmmsg$inet6(r0, &(0x7f0000002b00)=[{{0x0, 0x0, &(0x7f0000002c40)=[{0x0}], 0x1}}, {{0x0, 0x0, &(0x7f0000000480)=[{&(0x7f00000000c0)="05", 0x1}], 0x1}}], 0x2, 0x10) 6.798638055s ago: executing program 9 (id=9387): r0 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000400), 0x2, 0x0) write$UHID_CREATE2(r0, &(0x7f0000000180)=ANY=[@ANYBLOB="0b00000073797a31000000dfff000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000073797a30000037b35f0a00000000000010000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000073797a3100000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001"], 0x119) r1 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000380)=ANY=[@ANYBLOB="180000002c000100000000000000000004000080040010"], 0x18}], 0x1}, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x9, 0x4, &(0x7f0000000040)=@framed={{}, [@ldst={0x1, 0x2, 0x3, 0x2, 0x1, 0x37}], {0x95, 0x0, 0x700}}, &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x22, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) syz_usb_connect(0x0, 0x41, &(0x7f0000000580)=ANY=[@ANYBLOB="12010000e518a708ac0501859d200000690109022f00010000000009040000000e010000152403", @ANYRESHEX], 0x0) syz_genetlink_get_family_id$tipc(&(0x7f0000000640), 0xffffffffffffffff) capset(&(0x7f0000000080)={0x19980330}, &(0x7f0000000040)={0x200000, 0x200003, 0x1000, 0xfffffffc, 0x7}) 5.624460372s ago: executing program 8 (id=9390): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x100008b}, 0x0) sched_setaffinity(0x0, 0x11, &(0x7f0000000180)=0x1400200bce) sched_setscheduler(0x0, 0x1, &(0x7f0000002200)=0x1) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000002700)=""/102392, 0x18ff8) r1 = fsopen(&(0x7f0000000280)='ceph\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r1, 0x1, 0x0, &(0x7f0000000040)='c:::\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r1, 0x6, 0x0, 0x0, 0x0) syz_emit_vhci(&(0x7f0000000400)=@HCI_SCODATA_PKT={0x3, {0xc9, 0x78}, "86c3b619eb3906ef74e7e1b092754fdff60fc08a5054c0e1d37df3121f3e311ad1c1fed555420beda3e16973ba802383618f6bf7652255e73f17bfd6d20bd9ba12cbc995bc78470f5e187e9781f99a5aaf7e10deb7c2f0f153ea04445c40560af1ba1ecbaf89e718b0d1976a82ed4f06df4474c4801b46d8"}, 0x7c) connect$inet(0xffffffffffffffff, &(0x7f0000000040)={0x2, 0x0, @loopback}, 0x10) r2 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f0000000000)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x2, [@struct]}}, 0x0, 0x26, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x20) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000500)={0x6, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, r2, 0x8, 0x0, 0x0, 0x10, &(0x7f00000004c0), 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) rt_sigaction(0x8, 0x0, 0x0, 0x8, &(0x7f0000000300)) ioctl$VIDIOC_SUBDEV_G_DV_TIMINGS(0xffffffffffffffff, 0xc0845658, &(0x7f0000000600)={0x0, @bt={0x1e, 0x3, 0x1, 0x2, 0x4, 0x86, 0x5, 0x6, 0xfffffffd, 0x6, 0x0, 0x6, 0x401, 0x35fa865e, 0x2, 0x10, {0x34, 0xfffffffe}, 0xff, 0x3}}) r3 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') ioctl$UI_DEV_SETUP(r3, 0x405c5503, &(0x7f0000000380)={{0x5, 0x8, 0x1, 0x5}, 'syz1\x00', 0x25}) mount$9p_fd(0x0, &(0x7f0000000140)='.\x00', &(0x7f0000000080), 0x0, &(0x7f0000000340)=ANY=[@ANYBLOB, @ANYRESHEX=r3, @ANYBLOB, @ANYRESHEX=r3]) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(0xffffffffffffffff, 0x84, 0x64, &(0x7f0000000080)=[@in={0x2, 0x4e21, @empty}, @in6={0xa, 0x4e23, 0x7ff, @rand_addr=' \x01\x00', 0xbcacbe}], 0x2c) syz_open_procfs(0x0, &(0x7f0000000140)='status\x00') ioprio_set$pid(0x1, 0x0, 0x0) r4 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000001480), 0x42002, 0x0) ioctl$TIOCVHANGUP(r4, 0x5437, 0x0) 5.149641031s ago: executing program 8 (id=9391): socket$nl_route(0x10, 0x3, 0x0) ioctl$KVM_CAP_DIRTY_LOG_RING(0xffffffffffffffff, 0x4068aea3, 0x0) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$netlink(r0, &(0x7f0000001c00)={0x0, 0x0, 0x0}, 0x80000c0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newtaction={0xa4, 0x30, 0x1, 0x0, 0x0, {}, [{0x90, 0x1, [@m_ct={0x44, 0x2, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0x9d, 0x11e41e7a, 0x20000000, 0x0, 0xf}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x1}}}}, @m_ife={0x48, 0x1, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0xa4}, 0x1, 0x0, 0x0, 0x804}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) mkdirat(0xffffffffffffff9c, 0x0, 0x4) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0/file0\x00', 0x1c0) r4 = landlock_create_ruleset(&(0x7f0000000180)={0x100}, 0x18, 0x0) r5 = openat$dir(0xffffffffffffff9c, &(0x7f0000000140)='./file0/file0\x00', 0x0, 0x42) landlock_add_rule$LANDLOCK_RULE_PATH_BENEATH(r4, 0x1, &(0x7f0000000200)={0x100, r5}, 0x0) r6 = openat$dir(0xffffffffffffff9c, &(0x7f0000000240)='./file0/file0\x00', 0x200000, 0x0) landlock_add_rule$LANDLOCK_RULE_PATH_BENEATH(r4, 0x1, &(0x7f0000000280)={0x100, r6}, 0x0) request_key(&(0x7f0000000000)='asymmetric\x00', &(0x7f0000001ffb)={'syz', 0x2, 0x11}, &(0x7f0000001fee)='R\brust\xe3c*sgrVex:D0', 0x0) r7 = syz_open_procfs(0x0, 0x0) pread64(r7, &(0x7f0000001240)=""/102400, 0x200000, 0x200000) ioctl$sock_ipv6_tunnel_SIOCGET6RD(0xffffffffffffffff, 0x89f8, &(0x7f00000001c0)={'syztnl0\x00', &(0x7f00000000c0)={'ip_vti0\x00', 0x0, 0x8, 0x700, 0x76a, 0x7, {{0x2c, 0x4, 0x2, 0x1, 0xb0, 0x65, 0x0, 0x8, 0x2f, 0x0, @dev={0xac, 0x14, 0x14, 0x10}, @initdev={0xac, 0x1e, 0x1, 0x0}, {[@generic={0x94, 0xb, "e5b2b3ab328a77b9c0"}, @timestamp={0x44, 0x24, 0xbf, 0x0, 0x3, [0x11, 0xa, 0x6, 0x8, 0x7, 0xfffffffa, 0x3, 0x9]}, @ra={0x94, 0x4, 0x1}, @timestamp={0x44, 0x24, 0xae, 0x0, 0xe, [0x0, 0x3, 0x7, 0x80, 0x8b7, 0x9, 0x0, 0x3]}, @generic={0x88, 0x11, "672ab3bac55665a8c2fc7bbbccc8c8"}, @timestamp_prespec={0x44, 0x34, 0xe8, 0x3, 0x9, [{@multicast1, 0x400}, {@multicast1, 0x7}, {@private=0xa010100, 0x2}, {@remote, 0x3}, {@remote, 0x9}, {@multicast2, 0x5f7}]}]}}}}}) sendmsg$nl_route_sched_retired(r7, &(0x7f0000000380)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000340)={&(0x7f0000000200)=@newchain={0x24, 0x64, 0x1, 0x70bd29, 0x25dfdbfc, {0x0, 0x0, 0x0, r8, {0xfff1, 0x951f1719172a5509}, {0x4, 0xfff9}, {0x0, 0x8}}}, 0x24}, 0x1, 0x0, 0x0, 0x20000040}, 0x4000) 4.884896467s ago: executing program 4 (id=9392): syz_open_dev$midi(0x0, 0x2, 0x40c01) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x100008b}, 0x0) sched_setaffinity(0x0, 0x11, &(0x7f0000000180)=0x1400200bce) sched_setscheduler(0x0, 0x1, &(0x7f0000002200)=0x1) syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) r0 = fsopen(&(0x7f0000000280)='gfs2\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r0, 0x1, 0x0, &(0x7f0000000040)='c:::\x00', 0x0) r1 = msgget(0x2, 0x3a8) msgrcv(r1, 0x0, 0x0, 0x2, 0x2800) socket$kcm(0x10, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x1, 0x4, &(0x7f0000000340)=@framed={{}, [@call={0x85, 0x0, 0x0, 0x2e}]}, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) sendmsg$nl_generic(0xffffffffffffffff, 0x0, 0xc000) msgrcv(r1, 0x0, 0x0, 0x3, 0x0) msgctl$IPC_RMID(r1, 0x0) msgrcv(r1, 0x0, 0x0, 0x0, 0x0) modify_ldt$write(0x1, &(0x7f0000000080)={0x1000, 0x1000, 0xfffffffffffffffe}, 0x10) ptrace$setregs(0xd, 0x0, 0x0, &(0x7f0000000340)) ptrace$poke(0x21, 0x0, 0x0, 0x0) 4.716984575s ago: executing program 6 (id=9393): creat(&(0x7f0000000080)='./file0\x00', 0x86) acct(&(0x7f0000000240)='./file0\x00') 4.674551065s ago: executing program 4 (id=9394): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000b40)=ANY=[], 0x48) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000040)={r0, 0xffffffffffffffff}, 0x4) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x1f, 0x18, &(0x7f0000000080)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000000000008500000004000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r1, @ANYBLOB="0000000000000000b70500000800000085000000a700000095"], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x10, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000000)={r2}, 0xc) 4.54819409s ago: executing program 4 (id=9395): r0 = syz_usb_connect$hid(0x5, 0x36, &(0x7f0000000100)=ANY=[@ANYBLOB="12010000090024206d041cc340000000000109022400010000a0000904000001030101000921000800012201000905", @ANYRES32], 0x0) syz_usb_connect$printer(0x5, 0x0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f00000000c0)={0x24, &(0x7f0000000000)=ANY=[], 0x0, 0x0, 0x0}, 0x0) 4.547675792s ago: executing program 6 (id=9396): r0 = socket$nl_generic(0x10, 0x3, 0x10) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x6) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0xfffffffffffffc33, &(0x7f0000000280)=0x2) r4 = syz_open_dev$I2C(&(0x7f0000003000), 0x0, 0x0) ioctl$I2C_SMBUS(r4, 0x720, &(0x7f0000003080)={0x1, 0x0, 0x6, &(0x7f0000000180)={0x0, "f4e1a230be8f46463fb1a5f1b44f44eaa65e485b747aa95df8c01eaf07677d18bc"}}) r5 = socket$inet_udp(0x2, 0x2, 0x0) getsockopt$EBT_SO_GET_INFO(r5, 0x0, 0x80, &(0x7f00000002c0)={'filter\x00', 0x0, 0x0, 0x0, [0x1, 0xffffffffffffffff, 0x0, 0xae, 0x401, 0x8]}, &(0x7f0000000280)=0x78) openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) r7 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r7, 0x8933, &(0x7f0000000040)={'batadv_slave_1\x00', 0x0}) sendmsg$nl_route(r6, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=@ipv4_newaddr={0x20, 0x14, 0x509, 0x0, 0x0, {0x2, 0x1f, 0x0, 0x0, r8}, [@IFA_LOCAL={0x8, 0x2, @private=0xa010100}]}, 0x20}}, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) read$FUSE(0xffffffffffffffff, &(0x7f0000000400)={0x2020}, 0x2020) getsockopt$inet6_udp_int(0xffffffffffffffff, 0x11, 0xa, &(0x7f0000000040), &(0x7f0000000080)=0x4) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, 0x0}, 0xc000) 3.524453464s ago: executing program 3 (id=9397): mkdir(0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x5) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) capset(&(0x7f0000000000)={0x19980330}, &(0x7f0000000040)) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x22000, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_SET_CPUID(r3, 0x4008ae8a, &(0x7f0000000000)={0x2, 0x0, [{0x80000000, 0xffffffff, 0x0, 0x7e6f, 0x7}, {0x80000008, 0x7f, 0x1, 0x3, 0x3}]}) 3.523858601s ago: executing program 6 (id=9398): socket$netlink(0x10, 0x3, 0x0) r0 = socket(0x10, 0x803, 0x0) signalfd(0xffffffffffffffff, 0x0, 0x0) r1 = syz_io_uring_setup(0x4174, &(0x7f0000000780)={0x0, 0xfffffffe, 0x10100, 0x0, 0x292}, &(0x7f0000000240)=0x0, &(0x7f0000000040)=0x0) syz_io_uring_submit(r2, r3, &(0x7f0000000180)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x4, 0x0, 0x0}) io_uring_enter(r1, 0x567, 0x0, 0x0, 0x0, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) syz_emit_ethernet(0x46, &(0x7f0000000440)=ANY=[@ANYBLOB="aaaaaaaaaaaaffffffffffff86dd60f91e2e00107300fc040000000000000000000000000000ff0200"/52], 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newtaction={0xa4, 0x30, 0x1, 0x70bd2a, 0x0, {}, [{0x90, 0x1, [@m_ct={0x44, 0x2, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0x9d, 0x11e41e7a, 0x3, 0x0, 0xf}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x1}}}}, @m_ife={0x48, 0x1, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0xa4}, 0x1, 0x0, 0x0, 0x804}, 0x1) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r4 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r4, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r5, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r6, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r4, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r5, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r7 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000740), 0x2, 0x0) ioctl$IOCTL_VMCI_VERSION2(r7, 0x7a7, 0x0) r8 = socket$igmp(0x2, 0x3, 0x2) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000200)={'netdevsim0\x00', 0x0}) r10 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000001980)={0x6, 0x3, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000003a95"], &(0x7f0000001780)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', r9, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000500)={r10, r9, 0x25, 0x8}, 0x40) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r0, 0x89f3, &(0x7f0000001d40)={'ip6gre0\x00', &(0x7f0000001cc0)={'ip6tnl0\x00', 0x0, 0x2f, 0xd, 0x0, 0x4, 0xd, @private2, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x700, 0x8, 0x1000, 0x1}}) sendmmsg$inet(r0, &(0x7f0000001f80)=[{{&(0x7f0000000000)={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x22}}, 0x10, &(0x7f00000009c0)=[{&(0x7f0000000300)="e3ab45c51f53f69820c4cab24c941ff72b93a91bdf6c32ecc2568ba4fbfac2100cff8cdbf7efc36c530285d8fc0cdd7c6e6edcc2ab24f9b231d6c1339f263f39ed0a9ea2d2a64cd7884af654a00f2637c489c4ba0f9806a8bb4bea4fad0d8599aeb507be748e715c5a9dccc28f0c04ce15952ea05a6f77b2a50f1ee1119e071b", 0x80}, {&(0x7f00000005c0)="08db52baaf64a84c479075a09cc08f9e31a5b430dfec6a90fad0a5fc538080c0a9e37e819b971166d25572b0cf190d8c67c6799655b039b37e89b9b9e35cfa0fd6d552fa4657163e44bb1bd713e200a663969a043e8e1aca3e345d228761a01b5fe24525da229698279307e85d2e2fe377521539b33bc1da7b705cdef74d2f224f355266aff10ea361d1f1f6", 0x8c}, {&(0x7f0000000680)="3acb920d0a2e6ffe75995abf8a86a29cd25958ddc61d85e5b3fc18945d9d0b16bad38bc891385b0e6aa7d741662b9a2b9b3841c2ae3522e945a59c44bef6200efdf3bc4893037a8ba5538483472b349039d418b58567f38dbba77f8cfc5b3e78254935c970ce84c0eb501ba5bda3efd1dfb91e304c77718a", 0x78}, {&(0x7f00000001c0)="4d21c5390d554823c92a", 0xa}, {&(0x7f0000000800)="9555d0d202a361a8037113c463f4bf83bb1098ca3b7ebf3b48cdfd1e7ff3017d4f038cebc719862850a8755750ec2bc381a8691cd2e204815d74b5e34a6043b4e64801b472d6f68e466c82e9909c5f53e47d8bc87c1ab2f44a363e4e78129d78213c228dcaf86a2dbcbf6e42d9a6073e47b3787c395a65bc0ce5fa5a4c18e0c8cfd700f7312fa73e17dd9d385ae2b6b9f5ca3969e6c24b2c608c68f1e36ed8d0d003a9261af7", 0xa6}, {&(0x7f0000000280)="79471a3aee93f9da2d37e445344030593c93b03a60db320826b73a4cd9", 0x1d}, {&(0x7f0000000400)="a7b2a83589451da063927ea5edbbf824172efe9e64a83d39afd2090dcc86fedc93f29f8ccc18886816315f59fe06afb6e474d9185d54", 0x36}, {&(0x7f00000008c0)="f51a94e6dd8814debc3f0150801bade1095598a64047defef12636a6eace75465e6e15cd09f66ddcc3dd8354197a99229ad79b18dc57cbafd91dabc2e3978c087d5cacbeca908a39c77093af0890fc77bda251336695bfeb20b3c97c07ef4db523881b", 0x63}, {&(0x7f0000000940)="9e2db4c0e90f23034b77aed25de406f7958338049889dfbabcd06c325f95547592e238f5a0a42e1f0d8bf3d70b14304ea1ad77a177e8fc81f829275cf04763668b43d28dcc060571f7630b928348272e37708e81cd76af6e754b8915db936463808f8ff95f2b6f7e93d918adf47f5154dfc8b4", 0x73}], 0x9, &(0x7f0000000a40)}}, {{0x0, 0x0, &(0x7f0000000700)=[{&(0x7f0000000ac0)="7e735338b3a69f0493d65d90a3a9fda2ae6e810f4868dc3a0ec96255847a3c2483967288423f05f1e087ef104641920cc3f4b25afc78eb68f364ee3e0b2a02b72ba3faf300a2aae983a3834165fd1dc8d680c85c10a376d00933e7322771b4628ab587e167046b207e1756cdf9271d3490b02f19279367497406af04bddefc66f62a46b1465600a0a08e526f05114cecd915991d61f54401eed60521874b07b18876", 0xa2}], 0x1, &(0x7f0000000b80)=[@ip_tos_u8={{0x11, 0x0, 0x1, 0xf7}}, @ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @remote, @multicast2}}}, @ip_tos_int={{0x14, 0x0, 0x1, 0x1000}}, @ip_retopts={{0x5c, 0x0, 0x7, {[@generic={0x0, 0x12, "bd43f3d4f242645333055b2afa09a01b"}, @generic={0x86, 0x5, 'epo'}, @rr={0x7, 0xf, 0x9, [@local, @loopback, @loopback]}, @timestamp_addr={0x44, 0x24, 0xd4, 0x1, 0x9, [{@empty, 0x1}, {@multicast2, 0x3}, {@multicast2, 0x4}, {@remote, 0x101}]}]}}}, @ip_tos_int={{0x14, 0x0, 0x1, 0x7}}], 0xc8}}, {{0x0, 0x0, &(0x7f0000001c80)=[{&(0x7f0000000c40)="fd8cf2f0fac5761e57a10a87a13760e76fd577172cf9f0665739f758ff", 0x1d}, {&(0x7f0000000c80)="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", 0xfc0}], 0x2, &(0x7f0000001d80)=[@ip_tos_int={{0x14, 0x0, 0x1, 0xf828}}, @ip_tos_int={{0x14}}, @ip_pktinfo={{0x1c, 0x0, 0x8, {r9, @private=0xa010102, @empty}}}, @ip_pktinfo={{0x1c, 0x0, 0x8, {r11, @local, @initdev={0xac, 0x1e, 0x1, 0x0}}}}, @ip_tos_u8={{0x11, 0x0, 0x1, 0x27}}, @ip_tos_int={{0x14, 0x0, 0x1, 0xfffffff9}}, @ip_tos_u8={{0x11, 0x0, 0x1, 0x2a}}], 0xb8}}], 0x3, 0x0) 2.499967155s ago: executing program 6 (id=9399): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000c00)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000500)=@ipv4_delroute={0x24, 0x18, 0x901, 0x0, 0x0, {0x2, 0x18, 0x0, 0xf, 0xff, 0x0, 0xc8, 0x8}, [@RTA_DST={0x8, 0x1, @dev}]}, 0x24}}, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x5) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce) syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) sched_setaffinity(0x0, 0xfffffef7, &(0x7f0000000740)=0x410000002) r3 = socket$inet(0xa, 0x1, 0x0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFQNL_MSG_CONFIG(r4, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000040)=ANY=[@ANYBLOB="1c000000020323000000000000000000000000000800010001"], 0x1c}}, 0x0) sendmsg$NFQNL_MSG_CONFIG(r4, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)={0x1c, 0x2, 0x3, 0x801, 0x0, 0x0, {0x7, 0x0, 0x10}, [@NFQA_CFG_CMD={0x8, 0x1, {0x1}}]}, 0x1c}}, 0x0) setsockopt$IPT_SO_SET_REPLACE(r3, 0x0, 0x40, &(0x7f0000000480)=@mangle={'mangle\x00', 0x44, 0x6, 0x418, 0x2b0, 0x2b0, 0x2b0, 0x138, 0x98, 0x380, 0x380, 0x380, 0x380, 0x380, 0x6, 0x0, {[{{@ip={@broadcast, @multicast1=0xe0007600, 0x0, 0x0, 'geneve1\x00', 'ip6gre0\x00'}, 0x0, 0x70, 0x98}, @inet=@DSCP={0x28}}, {{@ip={@initdev={0xac, 0x1e, 0x0, 0x0}, @local, 0x0, 0x0, 'batadv_slave_1\x00', 'veth1_virt_wifi\x00', {}, {}, 0x6}, 0x0, 0x70, 0xa0}, @TPROXY={0x30, 'TPROXY\x00', 0x0, {0x0, 0x0, @local}}}, {{@ip={@broadcast, @multicast2, 0x0, 0x0, 'vlan1\x00', 'nr0\x00'}, 0x0, 0xb0, 0xd8, 0x0, {}, [@common=@unspec=@connlimit={{0x40}}]}, @ECN={0x28}}, {{@ip={@loopback, @multicast2, 0x0, 0x0, 'syzkaller0\x00', 'veth1_to_team\x00'}, 0x0, 0x70, 0xa0}, @TPROXY={0x30, 'TPROXY\x00', 0x0, {0x0, 0x0, @empty}}}, {{@ip={@broadcast, @empty, 0x0, 0x0, 'lo\x00', 'batadv_slave_1\x00'}, 0x0, 0xa0, 0xd0, 0x0, {}, [@common=@unspec=@mac={{0x30}, {@multicast}}]}, @TPROXY={0x30, 'TPROXY\x00', 0x0, {0x0, 0x0, @loopback}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x478) syz_emit_ethernet(0x42, &(0x7f0000000080)=ANY=[@ANYBLOB="0180c2000003ffffffffffff86dd60010700000c1100fc010000000000000200000000000000000000000000014e21"], 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, 0x0, 0x100440c0) ioctl$KVM_CREATE_IRQCHIP(r2, 0xae60) r6 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x200) ioctl$KVM_SET_LAPIC(r6, 0x4400ae8f, &(0x7f0000000740)={"5bd8c60c794793b94c5bfe6520d5061e28aa564bec1ad917e9a207084a20b672a0e50ac4c614e103f81491d6139a267d3752498fc37cc80da6ea17afd11758ea1bf74b6feec7df97969850c5fb4c82f57dc20b2dd7c3bc761a59d82a7cd2e102160635ac9b1b9922cc5f5a11def36b75fb3f5826db5e2712b5ed0fdb66ea3bc11f2ef28ff33f1e445244c67bd10b381d4068bb9e0f26669f24f536984c02f045c131cc072843cfb0a9442a30b251a90a330d8470456ffd66653c96c2e5616fa23e1c1bb6553008e4c10d889325bb8e74fba38114082be9d6b7629d45bb0556f360d9f371973e30e5c06cc4803009b72deda305d934d0aa0e1900db82226792d2fca39f00d90a2e77b11ef5fea88a00f2ed95c8b851415ab5fab0bcb2a140246b73f09b73a4222b5ec4083768e0b62a8338ea21c51699fcf9b60376a8633955e7ff2c93a4b4d9b0c8cb5e43fc6ca5f249eb6edba17e35af3e34283e5c25081171073ad28fbefe9443c97f4ca9f95d5178e43d5ec34ab5db08684f1bda104a1657bce0d1468f41f33325d7b8c8e658d5dcae9c623ac2a808b338fd7229abfa514caf8995298f8a4df71de34f4b9870cd1b5bb0e2a20a287f692d8eb1f2e3c64673ddeb2612d397433f46b06fbec9749944e8a8df0ea3a11e9a3fb4c01906ed5761286ad591e97916cc765c9d351eb2358d8f8aebf48bcb641a38cbbce279cfa1fa8d37e2d0d8f9ebdfcfaadfb071b8b9b3fe8d09ada0a2df0496c534a6f72489932a24afd22d7a53c5f8496aa97790b7dc650ff9c5e66ae9dc1dd94dfc6feca0455a1dbad82d835dd399581633cbe94bf785578170813d8cc78c910f48593f774e22b17a54e811effc99338d5e322b273a1b5e86bfaa98157ee6d18896c9b0cff25eef0124d72cb9d41df9252e7436c84da9057095c2574f991d3d868adf3f42f0d3f90b5102a1409e4b89c26d762ef0ce0fbbb66cec4c006750f50dcb1e7973e322905c7ebda44b4bc9889f90e54e3b42b335110270fbaaf82d568bd5a80436b972da37d24dc1e571de053092243f0a97cae309e4b84f183ac1adf5ea370ef7f6be5c9214385b7c0d5f62fb6e3423d9d50811a7283fd65f511b656cc411e15bf8cf1a445fdda987a0111f59596285998537ac39b8fe16510a27958f26afcd8418b5598091041650a949e1597d0527198de960f6efa9d89277d474da399a5ebc489a24575b7bafb53de6818fb7d35a3165e3eb6acc9643c7e9ad56e52f9f56979b2ab7d22ae1d5f7da871d39684df33307dd7fb517bdd42570d793a18868c91ec87a3caa256f72201bf86039f330d2892e5eaf9b8a86b1e075c689e5e876879ff809e24b756b8190cae79d9e062870f158208054a73399adb39be462b0dbfba5f823857ba144642ecfcfe61e722e7de1e456d414fa7b56741d6e512fdb8c758bba"}) ioctl$KVM_SET_IRQCHIP(r2, 0x8208ae63, 0x0) 2.437958334s ago: executing program 9 (id=9400): mkdirat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x0) mount$tmpfs(0x0, 0x0, &(0x7f00000001c0), 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000900)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './bus'}}]}) r0 = open(&(0x7f0000000140)='./file0\x00', 0x0, 0x0) mknodat$loop(r0, &(0x7f0000001600)='./file1\x00', 0x100, 0x1) chdir(&(0x7f00000003c0)='./bus\x00') link(&(0x7f0000000000)='./file1\x00', &(0x7f0000000040)='./bus\x00') mount$tmpfs(0x0, &(0x7f0000000380)='./bus\x00', 0x0, 0x0, 0x0) 2.321105224s ago: executing program 3 (id=9401): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000001180)=ANY=[@ANYBLOB="12010000090003206d0414c34000ffff000109022400010400a000090400000103010100093700086ce82201000905815f"], 0x0) syz_usb_control_io$hid(r0, &(0x7f00000001c0)={0x14, &(0x7f0000000dc0)=ANY=[@ANYBLOB="00020c0000000c0002"], 0x0, 0x0, 0x0}, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000900)={0x84, 0x0, 0x0, 0x0, &(0x7f0000000500)={0x20, 0x0, 0x68}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, &(0x7f00000006c0)={0x84, 0x0, 0x0, 0x0, &(0x7f00000005c0)={0x20, 0x0, 0x4, {0x5}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$hid(r0, 0x0, 0x0) 2.214212281s ago: executing program 6 (id=9402): syz_open_dev$midi(0x0, 0x2, 0x40c01) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x100008b}, 0x0) sched_setaffinity(0x0, 0x11, &(0x7f0000000180)=0x1400200bce) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000002700)=""/102392, 0x18ff8) fsconfig$FSCONFIG_SET_STRING(0xffffffffffffffff, 0x1, 0x0, &(0x7f0000000040)='c:::\x00', 0x0) sendmsg$nl_generic(0xffffffffffffffff, 0x0, 0xc000) modify_ldt$write(0x1, &(0x7f0000000080)={0x1000, 0x1000, 0xfffffffffffffffe}, 0x10) 2.174988332s ago: executing program 9 (id=9403): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000001ec0), r0) socket$nl_audit(0x10, 0x3, 0x9) sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(r0, &(0x7f0000002040)={0x0, 0x0, &(0x7f0000002000)={&(0x7f00000000c0)={0x3c, r1, 0xc01, 0x70bd26, 0x25dfdbff, {{}, {@val={0x8}, @void}}, [@chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}, @NL80211_ATTR_CHANNEL_WIDTH={0x8}, @NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0xdce}], @NL80211_ATTR_DURATION={0x8, 0x57, 0xff}]}, 0x3c}, 0x1, 0x0, 0x0, 0x4001}, 0x40000) 2.029416112s ago: executing program 9 (id=9404): syz_open_dev$midi(0x0, 0x2, 0x40c01) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x100008b}, 0x0) sched_setaffinity(0x0, 0x11, &(0x7f0000000180)=0x1400200bce) sched_setscheduler(0x0, 0x1, &(0x7f0000002200)=0x1) syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) r0 = fsopen(&(0x7f0000000280)='gfs2\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r0, 0x1, 0x0, &(0x7f0000000040)='c:::\x00', 0x0) r1 = msgget(0x2, 0x3a8) msgrcv(r1, 0x0, 0x0, 0x2, 0x2800) socket$kcm(0x10, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x1, 0x4, &(0x7f0000000340)=@framed={{}, [@call={0x85, 0x0, 0x0, 0x2e}]}, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) sendmsg$nl_generic(0xffffffffffffffff, 0x0, 0xc000) msgrcv(r1, 0x0, 0x0, 0x3, 0x0) msgctl$IPC_RMID(r1, 0x0) msgrcv(r1, 0x0, 0x0, 0x0, 0x0) modify_ldt$write(0x1, &(0x7f0000000080)={0x1000, 0x1000, 0xfffffffffffffffe}, 0x10) ptrace$setregs(0xd, 0x0, 0x0, &(0x7f0000000340)) ptrace$poke(0x21, 0x0, 0x0, 0x0) 1.825498805s ago: executing program 9 (id=9405): r0 = socket$packet(0x11, 0xa, 0x300) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000fbe000)={0x1, &(0x7f0000000100)=[{0x80000006}]}, 0x10) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) syz_emit_ethernet(0x7a, &(0x7f0000000700)={@link_local, @empty, @void, {@ipv6={0x86dd, @gre_packet={0x0, 0x6, "f2a400", 0x44, 0x2f, 0x0, @dev, @local, {[], {{0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x6558}, {}, {}, {0x289}}}}}}}, 0x0) close(0xffffffffffffffff) pipe2(0x0, 0x4080) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x400000008b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) r1 = syz_usb_connect(0x3, 0x24, &(0x7f0000001c80)=ANY=[@ANYBLOB="12010000941b6508c410c1ea2f700102030109021200010000000009040102"], 0x0) syz_usb_control_io$printer(r1, 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) r3 = dup(r2) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x2) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000080)={0x0, 0x2, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(r3, r4, &(0x7f000000a000/0x18000)=nil, &(0x7f0000000300)=[@text32={0x20, 0x0}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_REGISTER_COALESCED_MMIO(r2, 0x4010ae67, &(0x7f00000001c0)={0x0, 0xd000}) syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) 1.753851749s ago: executing program 8 (id=9406): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000b40)=ANY=[], 0x48) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000040)={r0, 0xffffffffffffffff}, 0x4) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x1f, 0x18, &(0x7f0000000080)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000000000008500000004000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r1, @ANYBLOB="0000000000000000b70500000800000085000000a700000095"], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x10, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000000)={r2}, 0xc) 1.632027239s ago: executing program 8 (id=9407): bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={0xffffffffffffffff, 0x0, 0xe, 0x0, &(0x7f0000000100)="e0b9547ed387dbe9abc89b6f5bec", 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x48) 1.538318696s ago: executing program 8 (id=9408): r0 = socket$nl_generic(0x10, 0x3, 0x10) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x6) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0xfffffffffffffc33, &(0x7f0000000280)=0x2) r4 = syz_open_dev$I2C(&(0x7f0000003000), 0x0, 0x0) ioctl$I2C_SMBUS(r4, 0x720, &(0x7f0000003080)={0x1, 0x0, 0x6, &(0x7f0000000180)={0x0, "f4e1a230be8f46463fb1a5f1b44f44eaa65e485b747aa95df8c01eaf07677d18bc"}}) r5 = socket$inet_udp(0x2, 0x2, 0x0) getsockopt$EBT_SO_GET_INFO(r5, 0x0, 0x80, &(0x7f00000002c0)={'filter\x00', 0x0, 0x0, 0x0, [0x1, 0xffffffffffffffff, 0x0, 0xae, 0x401, 0x8]}, &(0x7f0000000280)=0x78) openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) r7 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r7, 0x8933, &(0x7f0000000040)={'batadv_slave_1\x00', 0x0}) sendmsg$nl_route(r6, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=@ipv4_newaddr={0x20, 0x14, 0x509, 0x0, 0x0, {0x2, 0x1f, 0x0, 0x0, r8}, [@IFA_LOCAL={0x8, 0x2, @private=0xa010100}]}, 0x20}}, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) read$FUSE(0xffffffffffffffff, &(0x7f0000000400)={0x2020}, 0x2020) getsockopt$inet6_udp_int(0xffffffffffffffff, 0x11, 0xa, &(0x7f0000000040), &(0x7f0000000080)=0x4) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, 0x0}, 0xc000) 909.45584ms ago: executing program 4 (id=9409): socket$inet6_sctp(0xa, 0x5, 0x84) socket$netlink(0x10, 0x3, 0x0) syz_open_dev$radio(&(0x7f0000000040), 0x3, 0x2) socket(0x10, 0x3, 0x0) r0 = socket(0x10, 0x2, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r2, &(0x7f0000000180), 0xfea7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb, 0x11, r1, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$batadv(&(0x7f0000007580), 0xffffffffffffffff) sendmsg$BATADV_CMD_SET_HARDIF(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="2c010000", @ANYRES16, @ANYBLOB="2d01620000000900509072fb60cb08000300", @ANYRES16], 0x2c}, 0x1, 0x0, 0x0, 0x5}, 0x0) sendmsg$BATADV_CMD_GET_GATEWAYS(0xffffffffffffffff, &(0x7f0000007680)={0x0, 0x0, &(0x7f0000007640)={&(0x7f0000000000)=ANY=[@ANYBLOB="46040000", @ANYRES16=r5, @ANYBLOB="ff830500000700ffffff", @ANYRES32=r0], 0x4}}, 0x0) sendfile(r4, r3, 0x0, 0x100000002) 746.129333ms ago: executing program 6 (id=9410): r0 = socket(0x10, 0x803, 0x0) sendmsg$kcm(r0, &(0x7f0000000740)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000400)=[{0x28, 0x101, 0x0, "ae27e4d02845bf4d67108aa1ccbfcb9289"}, {0x40, 0x22, 0x5, "84852333ab1ebd4b2bf179011ec8244310168aeeeed4a8416cf206baca82607e378c97cab676757e0fbc2a"}], 0x68}, 0x8080) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r2, 0xae60) ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(0xffffffffffffffff, 0xc0189373, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$EVIOCSKEYCODE_V2(0xffffffffffffffff, 0x40284504, &(0x7f00000004c0)={0x9, 0x0, 0x20, 0x0, "cbfea29368cc60a1ff856ae471fe261fdfb44a306ea8d6996bbcb8eb45d73158"}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000100)=[@text64={0x40, &(0x7f0000000200)="f7790066baa00066b86b4266ef66ba420066b8e20066ef0f29902cbb0000c4e2b1ba8c88d9000000666666440f38826b410f7842280f07b8010000000f01d9c4033921820f47a753fd", 0x49}], 0x1, 0x43, 0x0, 0x0) eventfd(0xcfd) syz_kvm_setup_cpu$x86(r2, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, &(0x7f00000000c0)=[@text32={0x20, 0x0}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_SET_VCPU_EVENTS(r3, 0x4400ae8f, &(0x7f0000000140)=@x86={0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0xff, 0xff}) ioctl$KVM_RUN(r3, 0xae80, 0x0) 640.516721ms ago: executing program 4 (id=9411): mkdir(0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x5) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) capset(&(0x7f0000000000)={0x19980330}, &(0x7f0000000040)) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x22000, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_SET_CPUID(r3, 0x4008ae8a, &(0x7f0000000000)={0x2, 0x0, [{0x80000000, 0xffffffff, 0x0, 0x7e6f, 0x7}, {0x80000008, 0x7f, 0x1, 0x3, 0x3}]}) 559.154995ms ago: executing program 8 (id=9412): socket$nl_route(0x10, 0x3, 0x0) ioctl$KVM_CAP_DIRTY_LOG_RING(0xffffffffffffffff, 0x4068aea3, 0x0) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$netlink(r0, &(0x7f0000001c00)={0x0, 0x0, 0x0}, 0x80000c0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newtaction={0x5c, 0x30, 0x1, 0x0, 0x0, {}, [{0x48, 0x1, [@m_ct={0x44, 0x2, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0x9d, 0x11e41e7a, 0x20000000, 0x0, 0xf}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x1}}}}]}]}, 0x5c}, 0x1, 0x0, 0x0, 0x804}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) mkdirat(0xffffffffffffff9c, 0x0, 0x4) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0/file0\x00', 0x1c0) r4 = landlock_create_ruleset(&(0x7f0000000180)={0x100}, 0x18, 0x0) landlock_add_rule$LANDLOCK_RULE_PATH_BENEATH(r4, 0x1, &(0x7f0000000200)={0x100}, 0x0) r5 = openat$dir(0xffffffffffffff9c, 0x0, 0x200000, 0x0) landlock_add_rule$LANDLOCK_RULE_PATH_BENEATH(r4, 0x1, &(0x7f0000000280)={0x100, r5}, 0x0) request_key(&(0x7f0000000000)='asymmetric\x00', 0x0, &(0x7f0000001fee)='R\brust\xe3c*sgrVex:D0', 0x0) pread64(0xffffffffffffffff, &(0x7f0000001240)=""/102400, 0x200000, 0x200000) ioctl$sock_ipv6_tunnel_SIOCGET6RD(0xffffffffffffffff, 0x89f8, &(0x7f00000001c0)={'syztnl0\x00', &(0x7f00000000c0)={'ip_vti0\x00', 0x0, 0x8, 0x700, 0x76a, 0x7, {{0x2a, 0x4, 0x2, 0x1, 0xa8, 0x65, 0x0, 0x8, 0x2f, 0x0, @dev={0xac, 0x14, 0x14, 0x10}, @initdev={0xac, 0x1e, 0x1, 0x0}, {[@generic={0x94, 0xb, "e5b2b3ab328a77b9c0"}, @timestamp={0x44, 0x24, 0xbf, 0x0, 0x3, [0x11, 0xa, 0x6, 0x8, 0x7, 0xfffffffa, 0x3, 0x9]}, @ra={0x94, 0x4, 0x1}, @timestamp={0x44, 0x24, 0xae, 0x0, 0xe, [0x0, 0x3, 0x7, 0x80, 0x8b7, 0x9, 0x0, 0x3]}, @generic={0x88, 0x11, "672ab3bac55665a8c2fc7bbbccc8c8"}, @timestamp_prespec={0x44, 0x2c, 0xe8, 0x3, 0x9, [{@multicast1, 0x400}, {@multicast1, 0x7}, {@private=0xa010100, 0x2}, {@remote, 0x3}, {@remote, 0x9}]}]}}}}}) sendmsg$nl_route_sched_retired(0xffffffffffffffff, &(0x7f0000000380)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000340)={&(0x7f0000000200)=@newchain={0x24, 0x64, 0x1, 0x70bd29, 0x25dfdbfc, {0x0, 0x0, 0x0, r6, {0xfff1, 0x951f1719172a5509}, {0x4, 0xfff9}, {0x0, 0x8}}}, 0x24}, 0x1, 0x0, 0x0, 0x20000040}, 0x4000) 0s ago: executing program 4 (id=9413): pipe(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) write$cgroup_devices(r1, &(0x7f0000000180)=ANY=[@ANYBLOB='b'], 0x44) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.net/syz0\x00', 0x1ff) r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040), 0x200002, 0x0) r3 = openat$cgroup_devices(r2, &(0x7f0000000000)='devices.deny\x00', 0x2, 0x0) splice(r0, 0x0, r3, 0x0, 0x200000000008, 0x0) kernel console output (not intermixed with test programs): nvalid wMaxPacketSize 0 [ 2289.740353][ T1209] usb 7-1: config 0 interface 0 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 0 [ 2289.777827][ T5449] fuse: Bad value for 'fd' [ 2289.807703][ T1209] usb 7-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 2289.872217][ T1209] usb 7-1: New USB device found, idVendor=03f0, idProduct=6c17, bcdDevice= 0.40 [ 2289.901102][ T1209] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2289.972028][ T1209] usb 7-1: config 0 descriptor?? [ 2290.076802][ T1209] usblp 7-1:0.0: usblp0: USB Bidirectional printer dev 61 if 0 alt 0 proto 3 vid 0x03F0 pid 0x6C17 [ 2290.151694][ T1209] usb 7-1: USB disconnect, device number 61 [ 2290.191635][ T1209] usblp0: removed [ 2290.248040][T27739] usb 10-1: new high-speed USB device number 41 using dummy_hcd [ 2290.536806][T27739] usb 10-1: config 220 has an invalid descriptor of length 1, skipping remainder of the config [ 2290.919554][T27739] usb 10-1: config 220 has 1 interface, different from the descriptor's value: 3 [ 2290.929373][T27739] usb 10-1: config 220 interface 0 has no altsetting 0 [ 2290.977642][T27739] usb 10-1: New USB device found, idVendor=8086, idProduct=0b07, bcdDevice=6c.b9 [ 2291.015164][T27739] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2291.037371][T27739] usb 10-1: Product: syz [ 2291.048021][T27739] usb 10-1: Manufacturer: syz [ 2291.067841][T27739] usb 10-1: SerialNumber: syz [ 2291.445352][T27739] usb 10-1: Found UVC 7.01 device syz (8086:0b07) [ 2291.461904][T27739] usb 10-1: No valid video chain found. [ 2291.470344][T27739] usb 10-1: USB disconnect, device number 41 [ 2292.158035][ T5484] bond0: entered promiscuous mode [ 2292.163145][ T5484] bond_slave_0: entered promiscuous mode [ 2292.169389][ T5484] bond_slave_1: entered promiscuous mode [ 2294.472335][ T29] audit: type=1400 audit(1740668488.201:1762): avc: denied { ioctl } for pid=5502 comm="syz.8.8123" path="socket:[128877]" dev="sockfs" ino=128877 ioctlcmd=0x4944 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=isdn_socket permissive=1 [ 2294.658689][ T5507] fuse: Bad value for 'fd' [ 2296.586972][ T5537] random: crng reseeded on system resumption [ 2297.133056][ T5536] overlayfs: failed to resolve './file0': -2 [ 2297.141643][ T5536] 9pnet_virtio: no channels available for device syz [ 2300.159587][ T5570] netlink: 'syz.3.8138': attribute type 9 has an invalid length. [ 2302.459757][ T29] audit: type=1400 audit(1740668496.733:1763): avc: denied { read } for pid=5588 comm="syz.6.8145" laddr=172.20.20.170 lport=20002 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 2305.029725][ T5626] netlink: 'syz.6.8155': attribute type 9 has an invalid length. [ 2305.459665][ T1218] usb 10-1: new high-speed USB device number 42 using dummy_hcd [ 2305.689158][ T1209] usb 5-1: new high-speed USB device number 118 using dummy_hcd [ 2305.729082][ T1218] usb 10-1: Using ep0 maxpacket: 8 [ 2305.759691][ T1218] usb 10-1: config 0 has an invalid descriptor of length 16, skipping remainder of the config [ 2305.877792][ T1218] usb 10-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 2305.896932][ T1218] usb 10-1: New USB device found, idVendor=10c4, idProduct=eac1, bcdDevice=70.2f [ 2305.922841][ T1218] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2305.939519][ T5872] usb 7-1: new high-speed USB device number 62 using dummy_hcd [ 2305.941714][ T1209] usb 5-1: New USB device found, idVendor=04d8, idProduct=f372, bcdDevice= 0.00 [ 2305.955446][ T1218] usb 10-1: Product: syz [ 2306.006666][ T5641] serio: Serial port ttyS3 [ 2306.139961][ T5872] usb 7-1: Using ep0 maxpacket: 8 [ 2306.507996][ T1209] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2306.519812][ T1218] usb 10-1: Manufacturer: syz [ 2306.541322][ T5872] usb 7-1: New USB device found, idVendor=1004, idProduct=61aa, bcdDevice=d2.b4 [ 2306.545499][ T1209] usb 5-1: config 0 descriptor?? [ 2306.553139][ T1218] usb 10-1: SerialNumber: syz [ 2306.569061][ T5872] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2306.588027][ T1218] usb 10-1: config 0 descriptor?? [ 2306.603604][ T5872] usb 7-1: Product: syz [ 2306.613701][ T5872] usb 7-1: Manufacturer: syz [ 2306.626620][ T5872] usb 7-1: SerialNumber: syz [ 2306.667987][T27739] usb 9-1: new full-speed USB device number 31 using dummy_hcd [ 2306.848248][T27739] usb 9-1: device descriptor read/64, error -71 [ 2306.858918][ T5872] usb 7-1: bad CDC descriptors [ 2307.021481][ T5872] usb 7-1: USB disconnect, device number 62 [ 2307.234191][T27739] usb 9-1: new full-speed USB device number 32 using dummy_hcd [ 2307.435999][T27739] usb 9-1: device descriptor read/64, error -71 [ 2307.443094][ T1209] usbhid 5-1:0.0: can't add hid device: -71 [ 2307.449151][ T1209] usbhid 5-1:0.0: probe with driver usbhid failed with error -71 [ 2307.466151][ T1209] usb 5-1: USB disconnect, device number 118 [ 2307.541022][ T5653] 9pnet_fd: Insufficient options for proto=fd [ 2307.552354][ T1218] usb 10-1: USB disconnect, device number 42 [ 2307.592201][T27739] usb usb9-port1: attempt power cycle [ 2308.385792][T27739] usb 9-1: new full-speed USB device number 33 using dummy_hcd [ 2308.415962][T27739] usb 9-1: device descriptor read/8, error -71 [ 2308.735484][T27739] usb 9-1: new full-speed USB device number 34 using dummy_hcd [ 2308.893978][T27739] usb 9-1: device descriptor read/8, error -71 [ 2309.349995][T27739] usb usb9-port1: unable to enumerate USB device [ 2309.534621][ T5687] Cannot find add_set index 0 as target [ 2310.338908][ T4067] Bluetooth: hci2: command 0x0406 tx timeout [ 2310.403050][T27739] usb 9-1: new high-speed USB device number 35 using dummy_hcd [ 2311.268729][T27739] usb 9-1: config 220 has an invalid interface number: 76 but max is 2 [ 2311.321788][ T5901] usb 5-1: new high-speed USB device number 119 using dummy_hcd [ 2311.351970][T27739] usb 9-1: config 220 has an invalid descriptor of length 0, skipping remainder of the config [ 2311.366662][T27739] usb 9-1: config 220 has 2 interfaces, different from the descriptor's value: 3 [ 2311.376924][T27739] usb 9-1: config 220 has no interface number 1 [ 2311.383444][T27739] usb 9-1: config 220 interface 0 has no altsetting 0 [ 2311.390386][T27739] usb 9-1: config 220 interface 76 has no altsetting 0 [ 2311.399631][T27739] usb 9-1: New USB device found, idVendor=8086, idProduct=0b07, bcdDevice=6c.b9 [ 2311.419617][T27739] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2311.428139][T27739] usb 9-1: Product: syz [ 2311.438010][T27739] usb 9-1: Manufacturer: syz [ 2311.442907][T27739] usb 9-1: SerialNumber: syz [ 2311.549236][ T1209] usb 7-1: new high-speed USB device number 63 using dummy_hcd [ 2311.626617][ T5714] sp0: Synchronizing with TNC [ 2311.639701][ T5901] usb 5-1: New USB device found, idVendor=04d8, idProduct=f372, bcdDevice= 0.00 [ 2311.659635][ T5901] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2311.731523][ T1209] usb 7-1: Using ep0 maxpacket: 32 [ 2311.750112][ T1209] usb 7-1: New USB device found, idVendor=055f, idProduct=d001, bcdDevice=88.92 [ 2311.780409][ T5901] usb 5-1: config 0 descriptor?? [ 2311.859196][ T1209] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2312.007881][ T1209] usb 7-1: config 0 descriptor?? [ 2312.101763][ T1209] gspca_main: nw80x-2.14.0 probing 055f:d001 [ 2312.121877][T27739] usb 9-1: Found UVC 7.01 device syz (8086:0b07) [ 2312.193262][T27739] usb 9-1: No valid video chain found. [ 2312.282395][T27739] usb 9-1: USB disconnect, device number 35 [ 2312.519811][ T5901] usbhid 5-1:0.0: can't add hid device: -71 [ 2312.570483][ T5901] usbhid 5-1:0.0: probe with driver usbhid failed with error -71 [ 2312.602316][ T5901] usb 5-1: USB disconnect, device number 119 [ 2312.978740][ T29] audit: type=1326 audit(1740668507.266:1764): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5735 comm="syz.3.8191" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f164918d169 code=0x7ffc0000 [ 2313.003978][ T5737] netlink: 8 bytes leftover after parsing attributes in process `syz.3.8191'. [ 2313.020549][ T29] audit: type=1326 audit(1740668507.266:1765): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5735 comm="syz.3.8191" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f164918d169 code=0x7ffc0000 [ 2313.050838][ T29] audit: type=1326 audit(1740668507.266:1766): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5735 comm="syz.3.8191" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f164918bad0 code=0x7ffc0000 [ 2313.132003][ T29] audit: type=1326 audit(1740668507.266:1767): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5735 comm="syz.3.8191" exe="/root/syz-executor" sig=0 arch=c000003e syscall=308 compat=0 ip=0x7f164918e997 code=0x7ffc0000 [ 2313.728242][ T5872] usb 7-1: USB disconnect, device number 63 [ 2313.805187][ T29] audit: type=1326 audit(1740668507.266:1768): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5735 comm="syz.3.8191" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f164918d169 code=0x7ffc0000 [ 2313.937040][ T29] audit: type=1326 audit(1740668507.266:1769): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5735 comm="syz.3.8191" exe="/root/syz-executor" sig=0 arch=c000003e syscall=308 compat=0 ip=0x7f164918e997 code=0x7ffc0000 [ 2313.960758][ T29] audit: type=1326 audit(1740668507.266:1770): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5735 comm="syz.3.8191" exe="/root/syz-executor" sig=0 arch=c000003e syscall=3 compat=0 ip=0x7f164918bdca code=0x7ffc0000 [ 2314.001925][ T29] audit: type=1326 audit(1740668507.266:1771): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5735 comm="syz.3.8191" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f164918d169 code=0x7ffc0000 [ 2314.169853][ T29] audit: type=1326 audit(1740668507.266:1772): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5735 comm="syz.3.8191" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f164918d169 code=0x7ffc0000 [ 2314.194276][ T29] audit: type=1326 audit(1740668507.296:1773): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5735 comm="syz.3.8191" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f164918d169 code=0x7ffc0000 [ 2314.798503][ T5872] usb 4-1: new high-speed USB device number 56 using dummy_hcd [ 2314.982934][ T5872] usb 4-1: config 220 has an invalid interface number: 76 but max is 2 [ 2314.999959][ T5872] usb 4-1: config 220 has an invalid descriptor of length 0, skipping remainder of the config [ 2315.061256][ T5872] usb 4-1: config 220 has 2 interfaces, different from the descriptor's value: 3 [ 2315.273679][ T5872] usb 4-1: config 220 has no interface number 1 [ 2315.319111][ T5872] usb 4-1: config 220 interface 0 has no altsetting 0 [ 2315.448764][ T5872] usb 4-1: config 220 interface 76 has no altsetting 0 [ 2315.469945][ T5872] usb 4-1: New USB device found, idVendor=8086, idProduct=0b07, bcdDevice=6c.b9 [ 2315.506656][ T5872] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2315.514703][ T5872] usb 4-1: Product: syz [ 2315.539081][ T5872] usb 4-1: Manufacturer: syz [ 2315.543748][ T5872] usb 4-1: SerialNumber: syz [ 2315.544917][ T5772] syz.6.8201: attempt to access beyond end of device [ 2315.544917][ T5772] nbd6: rw=0, sector=8, nr_sectors = 8 limit=0 [ 2315.606680][ T5772] VFS: could not find a valid V7 on nbd6. [ 2315.824967][ T5872] usb 4-1: Found UVC 7.01 device syz (8086:0b07) [ 2315.838850][ T5872] usb 4-1: No valid video chain found. [ 2315.890991][ T5872] usb 4-1: USB disconnect, device number 56 [ 2316.006448][T27739] usb 7-1: new high-speed USB device number 64 using dummy_hcd [ 2316.755289][T27739] usb 7-1: Using ep0 maxpacket: 32 [ 2317.281814][T27739] usb 7-1: config index 0 descriptor too short (expected 29220, got 36) [ 2317.291057][T27739] usb 7-1: config 0 has too many interfaces: 81, using maximum allowed: 32 [ 2317.300038][T27739] usb 7-1: config 0 has 1 interface, different from the descriptor's value: 81 [ 2317.309533][T27739] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 2318.604517][T27739] usb 7-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 2319.235367][T27739] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 2319.245534][T27739] usb 7-1: config 0 interface 0 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 0 [ 2319.477596][T27739] usb 7-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 2319.544930][ T5816] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 2320.349491][T27739] usb 7-1: New USB device found, idVendor=03f0, idProduct=6c17, bcdDevice= 0.40 [ 2320.809180][T27739] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2320.853966][T27739] usb 7-1: config 0 descriptor?? [ 2320.905296][ T5831] usb usb8: Requested nonsensical USBDEVFS_URB_SHORT_NOT_OK. [ 2321.009535][T27739] usb 7-1: can't set config #0, error -71 [ 2321.021853][T27739] usb 7-1: USB disconnect, device number 64 [ 2322.420215][ T5845] netlink: 8 bytes leftover after parsing attributes in process `syz.6.8220'. [ 2322.431816][ T29] kauditd_printk_skb: 8 callbacks suppressed [ 2322.431833][ T29] audit: type=1326 audit(1740668516.717:1782): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5842 comm="syz.6.8220" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fefa5f8d169 code=0x7ffc0000 [ 2322.499401][ T29] audit: type=1326 audit(1740668516.717:1783): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5842 comm="syz.6.8220" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fefa5f8d169 code=0x7ffc0000 [ 2322.821890][ T29] audit: type=1326 audit(1740668516.717:1784): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5842 comm="syz.6.8220" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7fefa5f8bad0 code=0x7ffc0000 [ 2322.846492][ T29] audit: type=1326 audit(1740668516.727:1785): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5842 comm="syz.6.8220" exe="/root/syz-executor" sig=0 arch=c000003e syscall=308 compat=0 ip=0x7fefa5f8e997 code=0x7ffc0000 [ 2323.127237][ T29] audit: type=1326 audit(1740668516.727:1786): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5842 comm="syz.6.8220" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7fefa5f8d169 code=0x7ffc0000 [ 2323.233964][ T29] audit: type=1326 audit(1740668516.727:1787): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5842 comm="syz.6.8220" exe="/root/syz-executor" sig=0 arch=c000003e syscall=308 compat=0 ip=0x7fefa5f8e997 code=0x7ffc0000 [ 2323.813569][ T29] audit: type=1326 audit(1740668516.727:1788): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5842 comm="syz.6.8220" exe="/root/syz-executor" sig=0 arch=c000003e syscall=3 compat=0 ip=0x7fefa5f8bdca code=0x7ffc0000 [ 2323.862791][ T29] audit: type=1326 audit(1740668516.727:1789): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5842 comm="syz.6.8220" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fefa5f8d169 code=0x7ffc0000 [ 2323.956060][ T29] audit: type=1326 audit(1740668516.727:1790): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5842 comm="syz.6.8220" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fefa5f8d169 code=0x7ffc0000 [ 2324.012165][ T29] audit: type=1326 audit(1740668516.727:1791): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5842 comm="syz.6.8220" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7fefa5f8d169 code=0x7ffc0000 [ 2324.186606][ T1209] usb 7-1: new high-speed USB device number 65 using dummy_hcd [ 2324.357870][ T1209] usb 7-1: New USB device found, idVendor=04d8, idProduct=f372, bcdDevice= 0.00 [ 2324.375370][ T1209] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2324.431792][ T1209] usb 7-1: config 0 descriptor?? [ 2325.172699][ T1209] usbhid 7-1:0.0: can't add hid device: -71 [ 2325.226018][ T5873] netlink: 28 bytes leftover after parsing attributes in process `syz.3.8229'. [ 2325.249288][ T1209] usbhid 7-1:0.0: probe with driver usbhid failed with error -71 [ 2325.264910][ T1209] usb 7-1: USB disconnect, device number 65 [ 2325.275451][ T5873] netlink: 28 bytes leftover after parsing attributes in process `syz.3.8229'. [ 2327.044077][ T5904] usb usb1: usbfs: interface 0 claimed by hub while 'syz.6.8237' sets config #1 [ 2330.396895][T27739] usb 5-1: new high-speed USB device number 120 using dummy_hcd [ 2330.466664][ T5950] 9pnet_fd: Insufficient options for proto=fd [ 2330.896390][ T5955] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 2331.426547][ T4067] Bluetooth: hci4: command 0x0406 tx timeout [ 2331.468624][T27739] usb 5-1: Using ep0 maxpacket: 32 [ 2331.479969][T27739] usb 5-1: config index 0 descriptor too short (expected 29220, got 36) [ 2331.571362][T27739] usb 5-1: config 0 has too many interfaces: 81, using maximum allowed: 32 [ 2331.580906][T27739] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 81 [ 2331.590941][T27739] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 2331.604618][T27739] usb 5-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 2331.614430][T27739] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 2331.706598][T27739] usb 5-1: config 0 interface 0 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 0 [ 2331.987907][T27739] usb 5-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 2332.035011][T27739] usb 5-1: New USB device found, idVendor=03f0, idProduct=6c17, bcdDevice= 0.40 [ 2332.054435][T27739] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2332.090147][T27739] usb 5-1: config 0 descriptor?? [ 2332.470495][T27739] usblp 5-1:0.0: usblp0: USB Bidirectional printer dev 120 if 0 alt 0 proto 3 vid 0x03F0 pid 0x6C17 [ 2333.594261][T27739] usb 5-1: USB disconnect, device number 120 [ 2333.627651][T27739] usblp0: removed [ 2337.340186][ T6033] netlink: 'syz.8.8272': attribute type 9 has an invalid length. [ 2338.385331][ T6047] netlink: 8 bytes leftover after parsing attributes in process `syz.3.8275'. [ 2339.040795][ T4067] Bluetooth: hci5: command tx timeout [ 2339.064860][ T29] kauditd_printk_skb: 8 callbacks suppressed [ 2339.064873][ T29] audit: type=1326 audit(1740668532.695:1800): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6041 comm="syz.3.8275" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f164918d169 code=0x7ffc0000 [ 2339.094461][ T29] audit: type=1326 audit(1740668532.695:1801): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6041 comm="syz.3.8275" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f164918d169 code=0x7ffc0000 [ 2339.117801][ C0] vkms_vblank_simulate: vblank timer overrun [ 2339.124487][ T29] audit: type=1326 audit(1740668532.695:1802): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6041 comm="syz.3.8275" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f164918bad0 code=0x7ffc0000 [ 2339.147831][ C0] vkms_vblank_simulate: vblank timer overrun [ 2339.190033][ T29] audit: type=1326 audit(1740668532.695:1803): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6041 comm="syz.3.8275" exe="/root/syz-executor" sig=0 arch=c000003e syscall=308 compat=0 ip=0x7f164918e997 code=0x7ffc0000 [ 2339.213435][ C0] vkms_vblank_simulate: vblank timer overrun [ 2339.300149][ T29] audit: type=1326 audit(1740668532.695:1804): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6041 comm="syz.3.8275" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f164918d169 code=0x7ffc0000 [ 2339.304691][ T6056] tipc: Enabling of bearer rejected, failed to enable media [ 2339.348338][ T6059] netlink: 32 bytes leftover after parsing attributes in process `syz.8.8281'. [ 2339.367811][ T29] audit: type=1326 audit(1740668532.695:1805): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6041 comm="syz.3.8275" exe="/root/syz-executor" sig=0 arch=c000003e syscall=308 compat=0 ip=0x7f164918e997 code=0x7ffc0000 [ 2339.393719][ T6059] netlink: 12 bytes leftover after parsing attributes in process `syz.8.8281'. [ 2339.405296][ T29] audit: type=1326 audit(1740668532.695:1806): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6041 comm="syz.3.8275" exe="/root/syz-executor" sig=0 arch=c000003e syscall=3 compat=0 ip=0x7f164918bdca code=0x7ffc0000 [ 2339.428500][ C0] vkms_vblank_simulate: vblank timer overrun [ 2339.435953][ T6059] netlink: 40 bytes leftover after parsing attributes in process `syz.8.8281'. [ 2339.479553][ T29] audit: type=1326 audit(1740668532.695:1807): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6041 comm="syz.3.8275" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f164918d169 code=0x7ffc0000 [ 2339.589187][ T29] audit: type=1326 audit(1740668532.695:1808): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6041 comm="syz.3.8275" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f164918d169 code=0x7ffc0000 [ 2339.612596][ C0] vkms_vblank_simulate: vblank timer overrun [ 2339.947132][ T29] audit: type=1326 audit(1740668532.695:1809): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6041 comm="syz.3.8275" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f164918d169 code=0x7ffc0000 [ 2340.121081][T27739] usb 7-1: new high-speed USB device number 66 using dummy_hcd [ 2340.357740][ T6075] netlink: 'syz.3.8287': attribute type 9 has an invalid length. [ 2340.504925][T27739] usb 7-1: Using ep0 maxpacket: 16 [ 2340.641683][T27739] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 2340.807941][T27739] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 2340.841098][T27739] usb 7-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 2340.857755][T27739] usb 7-1: New USB device found, idVendor=1e7d, idProduct=2e22, bcdDevice= 0.00 [ 2340.870606][T27739] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2341.050369][T27739] usb 7-1: config 0 descriptor?? [ 2342.392520][T27739] koneplus 0003:1E7D:2E22.001A: unknown main item tag 0x0 [ 2342.529216][T27739] koneplus 0003:1E7D:2E22.001A: unknown main item tag 0x0 [ 2342.541718][T27739] koneplus 0003:1E7D:2E22.001A: hidraw0: USB HID v0.00 Device [HID 1e7d:2e22] on usb-dummy_hcd.6-1/input0 [ 2342.640444][ T6098] serio: Serial port ttyS3 [ 2342.979384][T27739] usb 10-1: new full-speed USB device number 43 using dummy_hcd [ 2343.195689][T11353] usb 7-1: USB disconnect, device number 66 [ 2343.366546][T27739] usb 10-1: device descriptor read/64, error -71 [ 2343.762421][T27739] usb 10-1: new full-speed USB device number 44 using dummy_hcd [ 2343.790483][ T6117] 9pnet_fd: Insufficient options for proto=fd [ 2343.925808][T27739] usb 10-1: device descriptor read/64, error -71 [ 2344.066901][ T1295] ieee802154 phy1 wpan1: encryption failed: -22 [ 2344.084605][T27739] usb usb10-port1: attempt power cycle [ 2344.197544][ T5901] usb 4-1: new high-speed USB device number 57 using dummy_hcd [ 2344.978194][ T5901] usb 4-1: Using ep0 maxpacket: 16 [ 2344.993429][ T5901] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 2345.012919][ T5901] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 2345.034856][T27739] usb 10-1: new full-speed USB device number 45 using dummy_hcd [ 2345.036320][ T5901] usb 4-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 2345.084715][ T5901] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2345.104173][ T5901] usb 4-1: Product: syz [ 2345.109080][ T5901] usb 4-1: Manufacturer: syz [ 2345.124684][ T5901] usb 4-1: SerialNumber: syz [ 2345.364664][ T5901] usb 4-1: 0:2 : does not exist [ 2345.380792][ T5901] usb 4-1: 5:0: failed to get current value for ch 0 (-22) [ 2346.135620][ T5901] usb 4-1: USB disconnect, device number 57 [ 2346.758262][T27739] usb 10-1: device descriptor read/8, error -71 [ 2346.844316][ T5820] udevd[5820]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 2347.019408][ T6146] sp0: Synchronizing with TNC [ 2350.083172][ T6192] ksmbd: Daemon and kernel module version mismatch. ksmbd: 0, kernel module: 1. User-space ksmbd should terminate. [ 2350.964130][T11353] usb 4-1: new high-speed USB device number 58 using dummy_hcd [ 2351.838946][ T6200] No such timeout policy "syz1" [ 2352.188851][T11353] usb 4-1: Using ep0 maxpacket: 32 [ 2352.197326][T11353] usb 4-1: New USB device found, idVendor=093a, idProduct=050f, bcdDevice=56.a5 [ 2352.207677][T11353] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2352.215855][T11353] usb 4-1: Product: syz [ 2352.220470][T11353] usb 4-1: Manufacturer: syz [ 2352.225082][T11353] usb 4-1: SerialNumber: syz [ 2352.232628][T11353] usb 4-1: config 0 descriptor?? [ 2352.240327][T11353] gspca_main: mars-2.14.0 probing 093a:050f [ 2352.362427][ T6213] netlink: 'syz.8.8327': attribute type 9 has an invalid length. [ 2352.767258][T11353] usb 4-1: USB disconnect, device number 58 [ 2352.887462][ T1209] usb 5-1: new high-speed USB device number 121 using dummy_hcd [ 2353.161654][ T1209] usb 5-1: device descriptor read/64, error -71 [ 2353.689450][ T6232] sp0: Synchronizing with TNC [ 2354.279263][ T1209] usb 5-1: new high-speed USB device number 122 using dummy_hcd [ 2354.666313][ T9] usb 9-1: new high-speed USB device number 36 using dummy_hcd [ 2354.759128][ T1209] usb 5-1: device descriptor read/64, error -71 [ 2354.893377][ T1209] usb usb5-port1: attempt power cycle [ 2354.915076][ T9] usb 9-1: New USB device found, idVendor=0c45, idProduct=608f, bcdDevice=b5.55 [ 2354.945105][ T9] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2354.975554][ T9] usb 9-1: Product: syz [ 2354.981125][ T9] usb 9-1: Manufacturer: syz [ 2354.989726][ T9] usb 9-1: SerialNumber: syz [ 2355.008697][ T9] usb 9-1: config 0 descriptor?? [ 2355.028154][ T9] gspca_main: sonixb-2.14.0 probing 0c45:608f [ 2355.351302][ T1209] usb 5-1: new high-speed USB device number 123 using dummy_hcd [ 2355.475113][T11353] usb 10-1: new high-speed USB device number 47 using dummy_hcd [ 2355.634069][ T9] sonixb 9-1:0.0: Error reading register 00: -110 [ 2355.979544][ T1209] usb 5-1: device descriptor read/8, error -71 [ 2356.118415][T11353] usb 10-1: Using ep0 maxpacket: 32 [ 2356.134397][T11353] usb 10-1: config index 0 descriptor too short (expected 29220, got 36) [ 2356.145434][T11353] usb 10-1: config 0 has too many interfaces: 81, using maximum allowed: 32 [ 2356.157232][T11353] usb 10-1: config 0 has 1 interface, different from the descriptor's value: 81 [ 2356.168702][T11353] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 2356.368643][T27739] usb 9-1: USB disconnect, device number 36 [ 2356.418805][T11353] usb 10-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 2356.429193][T11353] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 2356.440268][T11353] usb 10-1: config 0 interface 0 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 0 [ 2356.454299][T11353] usb 10-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 2356.470470][T11353] usb 10-1: New USB device found, idVendor=03f0, idProduct=6c17, bcdDevice= 0.40 [ 2356.561745][T11353] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2356.575051][T11353] usb 10-1: config 0 descriptor?? [ 2356.679793][ T6256] No such timeout policy "syz1" [ 2357.189981][T11353] usblp 10-1:0.0: usblp0: USB Bidirectional printer dev 47 if 0 alt 0 proto 3 vid 0x03F0 pid 0x6C17 [ 2360.522048][ T1209] usb 10-1: USB disconnect, device number 47 [ 2360.546060][ T1209] usblp0: removed [ 2360.935626][ T6275] netlink: 'syz.9.8344': attribute type 9 has an invalid length. [ 2361.772077][ T6291] serio: Serial port ttyS3 [ 2361.863600][ T6293] program syz.4.8350 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 2362.649099][T27739] usb 10-1: new full-speed USB device number 48 using dummy_hcd [ 2362.898891][T27739] usb 10-1: device descriptor read/64, error -71 [ 2363.409022][ T6305] 9pnet_fd: Insufficient options for proto=fd [ 2363.450259][T27739] usb 10-1: new full-speed USB device number 49 using dummy_hcd [ 2364.107858][T27739] usb 10-1: device descriptor read/64, error -71 [ 2364.217999][T27739] usb usb10-port1: attempt power cycle [ 2365.267837][T27739] usb 10-1: new full-speed USB device number 50 using dummy_hcd [ 2365.895881][ T6326] 8021q: adding VLAN 0 to HW filter on device bond1 [ 2365.918508][ T6326] bond1: entered promiscuous mode [ 2366.526001][ T4067] Bluetooth: hci0: command 0x0406 tx timeout [ 2366.783854][T27739] usb 10-1: device descriptor read/8, error -71 [ 2368.189787][ T6326] bond1 (unregistering): Released all slaves [ 2368.530085][ T3568] Bluetooth: hci1: Frame reassembly failed (-84) [ 2368.570039][ T6358] Bluetooth: hci1: Frame reassembly failed (-84) [ 2368.626911][T27739] usb 10-1: new full-speed USB device number 52 using dummy_hcd [ 2368.719792][ T6363] Bluetooth: hci1: Frame reassembly failed (-84) [ 2369.086194][T27739] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x88 has an invalid bInterval 0, changing to 10 [ 2369.103193][T27739] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x88 has invalid wMaxPacketSize 0 [ 2369.134629][T27739] usb 10-1: New USB device found, idVendor=08ca, idProduct=0010, bcdDevice=90.d6 [ 2369.144014][T27739] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2369.152096][T27739] usb 10-1: Product: syz [ 2369.163410][T27739] usb 10-1: Manufacturer: syz [ 2369.168285][T27739] usb 10-1: SerialNumber: syz [ 2369.194591][T27739] usb 10-1: config 0 descriptor?? [ 2369.520418][T27739] aiptek 10-1:0.0: Aiptek using 400 ms programming speed [ 2369.535504][T27739] input: Aiptek as /devices/platform/dummy_hcd.9/usb10/10-1/10-1:0.0/input/input37 [ 2370.115094][T27739] input: failed to attach handler kbd to device input37, error: -5 [ 2370.166674][T27739] usb 10-1: USB disconnect, device number 52 [ 2370.320658][ T6340] udevd[6340]: Error opening device "/dev/input/event4": No such file or directory [ 2370.368452][ T6340] udevd[6340]: Unable to EVIOCGABS device "/dev/input/event4" [ 2370.412792][ T6340] udevd[6340]: Unable to EVIOCGABS device "/dev/input/event4" [ 2370.514872][T18475] Bluetooth: hci1: Opcode 0x1003 failed: -110 [ 2370.610978][ T6386] serio: Serial port ttyS3 [ 2371.481805][T27739] usb 4-1: new full-speed USB device number 59 using dummy_hcd [ 2371.621844][T27739] usb 4-1: device descriptor read/64, error -71 [ 2372.012081][T27739] usb 4-1: new full-speed USB device number 60 using dummy_hcd [ 2372.171586][T27739] usb 4-1: device descriptor read/64, error -71 [ 2372.383192][ T6418] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 2372.875968][T27739] usb usb4-port1: attempt power cycle [ 2373.460431][T27739] usb 4-1: new full-speed USB device number 61 using dummy_hcd [ 2375.741875][T27739] usb 4-1: device descriptor read/8, error -71 [ 2377.601236][T11353] usb 9-1: new high-speed USB device number 37 using dummy_hcd [ 2377.903592][T11353] usb 9-1: New USB device found, idVendor=0c45, idProduct=608f, bcdDevice=b5.55 [ 2378.057018][T11353] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2378.145415][ T6473] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 2378.421734][T11353] usb 9-1: Product: syz [ 2378.426033][T11353] usb 9-1: Manufacturer: syz [ 2378.431915][T11353] usb 9-1: SerialNumber: syz [ 2378.571610][T11353] usb 9-1: config 0 descriptor?? [ 2378.640696][T11353] usb 9-1: can't set config #0, error -71 [ 2378.790348][T11353] usb 9-1: USB disconnect, device number 37 [ 2380.043577][ T6495] batadv0 speed is unknown, defaulting to 1000 [ 2380.140813][ T6495] batadv0 speed is unknown, defaulting to 1000 [ 2380.437716][ T6495] batadv0 speed is unknown, defaulting to 1000 [ 2380.467108][ T6495] infiniband syz1: RDMA CMA: cma_listen_on_dev, error -98 [ 2380.628775][ T6495] batadv0 speed is unknown, defaulting to 1000 [ 2380.640218][ T6495] batadv0 speed is unknown, defaulting to 1000 [ 2380.655661][ T6495] batadv0 speed is unknown, defaulting to 1000 [ 2380.663207][ T6495] batadv0 speed is unknown, defaulting to 1000 [ 2380.670192][ T6495] batadv0 speed is unknown, defaulting to 1000 [ 2380.677153][ T6495] batadv0 speed is unknown, defaulting to 1000 [ 2380.693493][ T6495] batadv0 speed is unknown, defaulting to 1000 [ 2381.252598][ T29] kauditd_printk_skb: 8 callbacks suppressed [ 2381.252618][ T29] audit: type=1400 audit(1740668575.551:1818): avc: denied { map } for pid=6511 comm="syz.9.8413" path="/dev/video4" dev="devtmpfs" ino=936 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:v4l_device_t tclass=chr_file permissive=1 [ 2382.283774][ T6107] usb 10-1: new high-speed USB device number 53 using dummy_hcd [ 2382.663565][T18475] Bluetooth: hci1: command 0x1003 tx timeout [ 2382.663991][ T4067] Bluetooth: hci1: Opcode 0x1003 failed: -110 [ 2382.697580][ T6107] usb 10-1: New USB device found, idVendor=0c45, idProduct=608f, bcdDevice=b5.55 [ 2382.706941][ T6107] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2382.715737][ T6107] usb 10-1: Product: syz [ 2382.720105][ T6107] usb 10-1: Manufacturer: syz [ 2382.725149][ T6107] usb 10-1: SerialNumber: syz [ 2382.741211][ T6107] usb 10-1: config 0 descriptor?? [ 2382.815601][ T6107] gspca_main: sonixb-2.14.0 probing 0c45:608f [ 2382.967540][ T6533] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 2383.797516][ T6107] sonixb 10-1:0.0: Error reading register 00: -110 [ 2384.227948][ T6537] netlink: 'syz.4.8419': attribute type 8 has an invalid length. [ 2385.221622][ T6107] usb 7-1: new high-speed USB device number 67 using dummy_hcd [ 2385.250376][ T4501] usb 10-1: USB disconnect, device number 53 [ 2385.981103][ T6107] usb 7-1: Using ep0 maxpacket: 32 [ 2386.004098][ T6107] usb 7-1: config index 0 descriptor too short (expected 29220, got 36) [ 2386.039549][ T6107] usb 7-1: config 0 has too many interfaces: 81, using maximum allowed: 32 [ 2386.064758][ T6107] usb 7-1: config 0 has 1 interface, different from the descriptor's value: 81 [ 2386.074417][ T6107] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 2386.084236][ T6107] usb 7-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 2386.094785][ T6107] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 2386.105048][ T6107] usb 7-1: config 0 interface 0 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 0 [ 2386.115446][ T6107] usb 7-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 2386.129395][ T6107] usb 7-1: New USB device found, idVendor=03f0, idProduct=6c17, bcdDevice= 0.40 [ 2386.138846][ T6107] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2386.161826][ T6107] usb 7-1: config 0 descriptor?? [ 2386.427685][ T6107] usblp 7-1:0.0: usblp0: USB Bidirectional printer dev 67 if 0 alt 0 proto 3 vid 0x03F0 pid 0x6C17 [ 2388.899275][ T4067] Bluetooth: hci1: Opcode 0x1003 failed: -110 [ 2390.007540][T31866] Bluetooth: hci1: Frame reassembly failed (-84) [ 2390.145008][ T4501] usb 7-1: USB disconnect, device number 67 [ 2390.196043][ T4501] usblp0: removed [ 2391.077023][T18475] Bluetooth: hci1: command 0x1003 tx timeout [ 2391.085306][ T4067] Bluetooth: hci1: Opcode 0x1003 failed: -110 [ 2394.968946][ T4501] usb 10-1: new high-speed USB device number 54 using dummy_hcd [ 2395.248116][ T6643] No such timeout policy "syz1" [ 2395.734600][ T4501] usb 10-1: Using ep0 maxpacket: 32 [ 2395.776186][ T4501] usb 10-1: config index 0 descriptor too short (expected 29220, got 36) [ 2395.790103][ T4501] usb 10-1: config 0 has too many interfaces: 81, using maximum allowed: 32 [ 2395.814471][ T4501] usb 10-1: config 0 has 1 interface, different from the descriptor's value: 81 [ 2395.833747][ T4501] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 2395.886085][ T4501] usb 10-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 2395.916317][ T4501] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 2395.944559][ T4501] usb 10-1: config 0 interface 0 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 0 [ 2395.955111][ T4501] usb 10-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 2395.974425][ T4501] usb 10-1: New USB device found, idVendor=03f0, idProduct=6c17, bcdDevice= 0.40 [ 2395.993934][ T4501] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2396.015984][ T4501] usb 10-1: config 0 descriptor?? [ 2396.085925][ T6641] netlink: 8 bytes leftover after parsing attributes in process `syz.4.8448'. [ 2396.134365][ T5901] usb 7-1: new high-speed USB device number 68 using dummy_hcd [ 2396.238015][ T4501] usblp 10-1:0.0: usblp0: USB Bidirectional printer dev 54 if 0 alt 0 proto 3 vid 0x03F0 pid 0x6C17 [ 2396.314873][ T5901] usb 7-1: Using ep0 maxpacket: 16 [ 2396.331637][ T5901] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 2396.352498][ T5901] usb 7-1: New USB device found, idVendor=056e, idProduct=00e6, bcdDevice= 0.00 [ 2396.363821][ T5901] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2396.392981][ T5901] usb 7-1: config 0 descriptor?? [ 2396.405097][ T6654] ksmbd: Daemon and kernel module version mismatch. ksmbd: 0, kernel module: 1. User-space ksmbd should terminate. [ 2398.072307][ T5901] elecom 0003:056E:00E6.001B: unknown main item tag 0x0 [ 2398.197533][ T5901] elecom 0003:056E:00E6.001B: unknown main item tag 0x0 [ 2398.339406][ T5901] elecom 0003:056E:00E6.001B: unknown main item tag 0x0 [ 2398.559981][ T5901] elecom 0003:056E:00E6.001B: hidraw0: USB HID v0.05 Device [HID 056e:00e6] on usb-dummy_hcd.6-1/input0 [ 2398.733007][ T5901] usb 7-1: USB disconnect, device number 68 [ 2399.219971][T26763] usb 10-1: USB disconnect, device number 54 [ 2399.229815][T26763] usblp0: removed [ 2400.081846][ T5901] usb 10-1: new full-speed USB device number 55 using dummy_hcd [ 2401.046532][ T5901] usb 10-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 2401.485802][ T5901] usb 10-1: config 0 has no interfaces? [ 2401.701103][ T5901] usb 10-1: New USB device found, idVendor=10cf, idProduct=8061, bcdDevice=b7.12 [ 2401.718870][ T5901] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2401.734655][ T5901] usb 10-1: Product: syz [ 2401.738955][ T5901] usb 10-1: Manufacturer: syz [ 2401.791450][ T5901] usb 10-1: SerialNumber: syz [ 2401.866293][ T5901] usb 10-1: config 0 descriptor?? [ 2402.355854][ T6701] overlayfs: failed to resolve './file0': -2 [ 2402.369535][ T6672] bridge0: port 2(bridge_slave_1) entered disabled state [ 2402.376946][ T6672] bridge0: port 1(bridge_slave_0) entered disabled state [ 2402.569704][ T6672] A link change request failed with some changes committed already. Interface bridge0 may have been left with an inconsistent configuration, please check. [ 2402.606213][ T5901] usb 10-1: USB disconnect, device number 55 [ 2403.266353][T26763] usb 5-1: new high-speed USB device number 125 using dummy_hcd [ 2403.945061][T26763] usb 5-1: New USB device found, idVendor=0c45, idProduct=608f, bcdDevice=b5.55 [ 2403.959011][ T6727] 9pnet_fd: Insufficient options for proto=fd [ 2403.969868][T26763] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2403.978643][T26763] usb 5-1: Product: syz [ 2403.989403][ T6107] usb 9-1: new high-speed USB device number 38 using dummy_hcd [ 2403.991621][T26763] usb 5-1: Manufacturer: syz [ 2404.006951][T26763] usb 5-1: SerialNumber: syz [ 2404.021047][T26763] usb 5-1: config 0 descriptor?? [ 2404.030196][T26763] gspca_main: sonixb-2.14.0 probing 0c45:608f [ 2404.159313][ T5901] usb 4-1: new high-speed USB device number 63 using dummy_hcd [ 2404.293563][ T6107] usb 9-1: device descriptor read/64, error -71 [ 2404.359191][ T5901] usb 4-1: Using ep0 maxpacket: 32 [ 2404.378126][ T5901] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 2404.452589][ T6734] x_tables: ip_tables: rpfilter match: used from hooks OUTPUT, but only valid from PREROUTING [ 2404.998512][T26763] sonixb 5-1:0.0: Error writing register 01: -110 [ 2405.005074][ T5901] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 2405.015307][T26763] sonixb 5-1:0.0: probe with driver sonixb failed with error -110 [ 2405.028044][ T5901] usb 4-1: New USB device found, idVendor=0403, idProduct=6030, bcdDevice= 0.00 [ 2405.068918][ T5901] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2405.097685][ T5901] usb 4-1: config 0 descriptor?? [ 2405.238623][ T6107] usb 9-1: new high-speed USB device number 39 using dummy_hcd [ 2405.379405][ T1295] ieee802154 phy1 wpan1: encryption failed: -22 [ 2405.622255][ T6743] Bluetooth: MGMT ver 1.23 [ 2405.629819][ T6741] Bluetooth: hci0: Opcode 0x0401 failed: -112 [ 2405.704590][ T5901] ft260 0003:0403:6030.001C: unknown main item tag 0x0 [ 2405.798114][ T5901] ft260 0003:0403:6030.001C: unknown main item tag 0x0 [ 2405.968238][ T6107] usb 9-1: device descriptor read/64, error -71 [ 2406.023633][ T5901] ft260 0003:0403:6030.001C: chip code: 0000 0000 [ 2406.081140][ T4501] usb 5-1: USB disconnect, device number 125 [ 2406.124704][ T6107] usb usb9-port1: attempt power cycle [ 2406.228880][ T5901] ft260 0003:0403:6030.001C: failed to retrieve system status [ 2406.265356][ T5901] ft260 0003:0403:6030.001C: probe with driver ft260 failed with error -71 [ 2406.294793][ T5901] usb 4-1: USB disconnect, device number 63 [ 2407.711535][ T4067] Bluetooth: hci0: Opcode 0x0c1a failed: -110 [ 2407.713251][T18475] Bluetooth: hci0: command 0x0406 tx timeout [ 2409.079025][ T6777] netlink: 8 bytes leftover after parsing attributes in process `syz.4.8486'. [ 2409.738966][ T6783] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 2409.935890][ T4067] Bluetooth: hci0: command 0x0406 tx timeout [ 2410.104456][ T6791] sp0: Synchronizing with TNC [ 2410.175513][ T6791] batadv0 speed is unknown, defaulting to 1000 [ 2419.300679][ T5901] usb 5-1: new high-speed USB device number 126 using dummy_hcd [ 2419.450560][ T5901] usb 5-1: Using ep0 maxpacket: 8 [ 2419.461510][ T5901] usb 5-1: config 233 has an invalid descriptor of length 0, skipping remainder of the config [ 2419.472638][ T5901] usb 5-1: config 233 has 0 interfaces, different from the descriptor's value: 1 [ 2419.483409][ T5901] usb 5-1: New USB device found, idVendor=1004, idProduct=61aa, bcdDevice=d2.b4 [ 2419.494816][ T5901] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2419.511152][ T5901] usb 5-1: Product: syz [ 2419.522699][ T5901] usb 5-1: Manufacturer: syz [ 2419.530536][ T5901] usb 5-1: SerialNumber: syz [ 2420.159838][ T1218] usb 5-1: USB disconnect, device number 126 [ 2425.114751][ T6945] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 2429.035660][ T6107] usb 4-1: new high-speed USB device number 64 using dummy_hcd [ 2429.746987][ T6107] usb 4-1: Using ep0 maxpacket: 8 [ 2429.793426][ T6107] usb 4-1: config 0 has an invalid descriptor of length 16, skipping remainder of the config [ 2429.827016][ T6107] usb 4-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 2430.190382][ T6107] usb 4-1: New USB device found, idVendor=10c4, idProduct=eac1, bcdDevice=70.2f [ 2430.938004][ T6107] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2430.960013][ T6107] usb 4-1: Product: syz [ 2430.964295][ T6107] usb 4-1: Manufacturer: syz [ 2430.975177][ T6107] usb 4-1: SerialNumber: syz [ 2431.002399][ T6107] usb 4-1: config 0 descriptor?? [ 2431.114730][ T6107] usb 4-1: USB disconnect, device number 64 [ 2433.416740][ T7040] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 2434.024560][ T4768] usb 9-1: new high-speed USB device number 41 using dummy_hcd [ 2434.213219][ T4768] usb 9-1: Using ep0 maxpacket: 32 [ 2434.225283][ T4768] usb 9-1: config index 0 descriptor too short (expected 29220, got 36) [ 2434.252727][ T4768] usb 9-1: config 0 has too many interfaces: 81, using maximum allowed: 32 [ 2434.297809][ T4768] usb 9-1: config 0 has 1 interface, different from the descriptor's value: 81 [ 2434.330450][ T4768] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 2434.422062][ T4768] usb 9-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 2434.458634][ T4768] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 2434.480731][ T4768] usb 9-1: config 0 interface 0 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 0 [ 2434.496342][ T7045] xt_TPROXY: Can be used only with -p tcp or -p udp [ 2434.560874][ T4768] usb 9-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 2434.611595][ T4768] usb 9-1: New USB device found, idVendor=03f0, idProduct=6c17, bcdDevice= 0.40 [ 2434.631064][ T4768] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2434.643045][ T5872] usb 10-1: new high-speed USB device number 56 using dummy_hcd [ 2434.671628][ T4768] usb 9-1: config 0 descriptor?? [ 2434.900591][ T4768] usblp 9-1:0.0: usblp0: USB Bidirectional printer dev 41 if 0 alt 0 proto 3 vid 0x03F0 pid 0x6C17 [ 2434.912823][ T5872] usb 10-1: Using ep0 maxpacket: 32 [ 2434.922579][ T5872] usb 10-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 2434.964048][ T5872] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 2435.028361][ T7057] sp0: Synchronizing with TNC [ 2435.095080][ T7057] batadv0 speed is unknown, defaulting to 1000 [ 2435.517610][ T5872] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 2435.529852][ T5872] usb 10-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 2435.539347][ T5872] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2435.552306][ T5872] usb 10-1: config 0 descriptor?? [ 2435.557509][ T6107] usb 7-1: new high-speed USB device number 69 using dummy_hcd [ 2435.663185][ T7046] raw-gadget.1 gadget.9: fail, usb_ep_enable returned -22 [ 2435.672166][ T5872] hub 10-1:0.0: USB hub found [ 2435.882613][ T6107] usb 7-1: Using ep0 maxpacket: 8 [ 2435.901941][ T6107] usb 7-1: config 0 has an invalid descriptor of length 16, skipping remainder of the config [ 2435.986889][ T6107] usb 7-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 2435.998706][ T7046] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2436.055396][ T7046] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2436.069137][ T6107] usb 7-1: New USB device found, idVendor=10c4, idProduct=eac1, bcdDevice=70.2f [ 2436.111077][ T6107] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2436.128279][ T5872] hub 10-1:0.0: config failed, hub has too many ports! (err -19) [ 2436.350556][ T6107] usb 7-1: Product: syz [ 2436.370528][ T6107] usb 7-1: Manufacturer: syz [ 2436.542378][ T7071] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 2437.336290][ T5872] usbhid 10-1:0.0: can't add hid device: -71 [ 2437.352056][ T6107] usb 7-1: SerialNumber: syz [ 2437.358935][ T5872] usbhid 10-1:0.0: probe with driver usbhid failed with error -71 [ 2437.372655][ T6107] usb 7-1: config 0 descriptor?? [ 2437.732705][ T6107] usb 7-1: can't set config #0, error -71 [ 2437.744492][ T6107] usb 7-1: USB disconnect, device number 69 [ 2437.752322][ T5872] usb 10-1: USB disconnect, device number 56 [ 2437.973704][ T5901] usb 9-1: USB disconnect, device number 41 [ 2437.983561][ T5901] usblp0: removed [ 2438.741043][ T6107] usb 5-1: new high-speed USB device number 127 using dummy_hcd [ 2440.345667][ T6107] usb 5-1: Using ep0 maxpacket: 16 [ 2440.360043][ T6107] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 2440.370565][ T6107] usb 5-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 2440.385509][ T6107] usb 5-1: New USB device found, idVendor=0b57, idProduct=2bbd, bcdDevice=e7.cc [ 2440.408443][ T6107] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2440.421367][ T6107] usb 5-1: Product: syz [ 2440.425668][ T6107] usb 5-1: Manufacturer: syz [ 2440.430674][ T6107] usb 5-1: SerialNumber: syz [ 2440.471207][ T6107] usb 5-1: config 0 descriptor?? [ 2440.645592][ T6107] usbhid 5-1:0.0: couldn't find an input interrupt endpoint [ 2440.692696][ T6107] usb 5-1: USB disconnect, device number 127 [ 2440.809038][ T7106] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 2441.916123][T11353] usb 4-1: new high-speed USB device number 65 using dummy_hcd [ 2442.290672][T11353] usb 4-1: Using ep0 maxpacket: 8 [ 2442.324334][T11353] usb 4-1: config 0 has an invalid descriptor of length 16, skipping remainder of the config [ 2442.361085][T11353] usb 4-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 2442.425638][T11353] usb 4-1: New USB device found, idVendor=10c4, idProduct=eac1, bcdDevice=70.2f [ 2442.459390][T11353] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2442.492258][T11353] usb 4-1: Product: syz [ 2442.496453][T11353] usb 4-1: Manufacturer: syz [ 2442.527172][T11353] usb 4-1: SerialNumber: syz [ 2442.545285][T11353] usb 4-1: config 0 descriptor?? [ 2442.670110][ T5901] usb 7-1: new high-speed USB device number 70 using dummy_hcd [ 2442.735138][ T4833] Bluetooth: hci1: Frame reassembly failed (-84) [ 2442.939184][ T5901] usb 7-1: Using ep0 maxpacket: 32 [ 2442.950178][ T5901] usb 7-1: config index 0 descriptor too short (expected 29220, got 36) [ 2442.958587][ T5901] usb 7-1: config 0 has too many interfaces: 81, using maximum allowed: 32 [ 2443.693319][ T5901] usb 7-1: config 0 has 1 interface, different from the descriptor's value: 81 [ 2443.832384][ T5901] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 2443.932437][ T5901] usb 7-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 2444.098704][ T5901] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 2444.102767][T11353] usb 4-1: USB disconnect, device number 65 [ 2444.311417][ T5901] usb 7-1: config 0 interface 0 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 0 [ 2444.329840][ T5901] usb 7-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 2444.343210][ T5901] usb 7-1: New USB device found, idVendor=03f0, idProduct=6c17, bcdDevice= 0.40 [ 2444.362403][ T5901] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2444.379757][ T5901] usb 7-1: config 0 descriptor?? [ 2444.598201][ T5901] usblp 7-1:0.0: usblp0: USB Bidirectional printer dev 70 if 0 alt 0 proto 3 vid 0x03F0 pid 0x6C17 [ 2444.788463][ T4067] Bluetooth: hci1: Opcode 0x1003 failed: -110 [ 2445.787918][ T4768] usb 5-1: new full-speed USB device number 2 using dummy_hcd [ 2445.961506][ T4768] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x88 has an invalid bInterval 0, changing to 10 [ 2446.003598][ T4768] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x88 has invalid wMaxPacketSize 0 [ 2446.027818][ T4768] usb 5-1: New USB device found, idVendor=08ca, idProduct=0010, bcdDevice=90.d6 [ 2446.604611][ T5901] usb 7-1: USB disconnect, device number 70 [ 2446.611692][ T4768] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2446.620179][ T5901] usblp0: removed [ 2446.624730][ T4768] usb 5-1: Product: syz [ 2446.631420][ T4768] usb 5-1: Manufacturer: syz [ 2446.636032][ T4768] usb 5-1: SerialNumber: syz [ 2446.671271][ T4768] usb 5-1: config 0 descriptor?? [ 2446.682977][ T7164] syz.8.8587: attempt to access beyond end of device [ 2446.682977][ T7164] nbd8: rw=0, sector=0, nr_sectors = 1 limit=0 [ 2446.712437][ T7165] netlink: 16 bytes leftover after parsing attributes in process `syz.8.8587'. [ 2446.741347][ T7164] efs: cannot read volume header [ 2446.923907][ T4768] aiptek 5-1:0.0: Aiptek using 400 ms programming speed [ 2446.945036][ T4768] input: Aiptek as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/input/input38 [ 2446.979078][ T4768] input: failed to attach handler kbd to device input38, error: -5 [ 2447.002466][ T4768] usb 5-1: USB disconnect, device number 2 [ 2447.257986][ T7172] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 2450.738500][ T7215] No such timeout policy "syz1" [ 2451.085583][ T5872] usb 10-1: new high-speed USB device number 57 using dummy_hcd [ 2451.416959][ T5872] usb 10-1: New USB device found, idVendor=0c45, idProduct=608f, bcdDevice=b5.55 [ 2451.432047][ T5872] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2451.445953][ T5872] usb 10-1: Product: syz [ 2451.450469][ T5872] usb 10-1: Manufacturer: syz [ 2451.496160][ T5872] usb 10-1: SerialNumber: syz [ 2451.576240][ T5872] usb 10-1: config 0 descriptor?? [ 2451.592031][ T5872] gspca_main: sonixb-2.14.0 probing 0c45:608f [ 2451.637301][ T7224] block nbd6: shutting down sockets [ 2452.024905][ T7238] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 2452.115422][ T5872] sonixb 10-1:0.0: Error reading register 00: -110 [ 2453.311387][ T4768] usb 10-1: USB disconnect, device number 57 [ 2453.742643][ T7259] No such timeout policy "syz1" [ 2455.046769][ T7278] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 2455.531103][ T7280] x_tables: ip6_tables: NFQUEUE.2 target: invalid size 8 (kernel) != (user) 0 [ 2455.573928][ T5872] usb 4-1: new high-speed USB device number 66 using dummy_hcd [ 2456.514278][ T5872] usb 4-1: Using ep0 maxpacket: 8 [ 2456.524709][ T5872] usb 4-1: config 0 has an invalid interface number: 1 but max is 0 [ 2456.561251][ T5872] usb 4-1: config 0 has no interface number 0 [ 2456.643446][ T5872] usb 4-1: config 0 interface 1 has no altsetting 0 [ 2456.658766][ T5872] usb 4-1: New USB device found, idVendor=10c4, idProduct=eac1, bcdDevice=70.2f [ 2456.674546][ T5872] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2456.847084][ T5872] usb 4-1: Product: syz [ 2456.851255][ T5872] usb 4-1: Manufacturer: syz [ 2456.855953][ T5872] usb 4-1: SerialNumber: syz [ 2456.866858][ T7298] program syz.4.8622 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 2457.201966][ T7303] No such timeout policy "syz1" [ 2457.320345][ T5872] usb 4-1: config 0 descriptor?? [ 2457.824169][ T5872] i2c-cp2615 4-1:0.1: probe with driver i2c-cp2615 failed with error -71 [ 2457.843669][T27739] usb 7-1: new high-speed USB device number 71 using dummy_hcd [ 2457.851516][ T5872] usb 4-1: USB disconnect, device number 66 [ 2458.052408][T27739] usb 7-1: New USB device found, idVendor=0c45, idProduct=608f, bcdDevice=b5.55 [ 2458.062518][T27739] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2458.078900][T27739] usb 7-1: Product: syz [ 2458.085213][T27739] usb 7-1: Manufacturer: syz [ 2458.089835][T27739] usb 7-1: SerialNumber: syz [ 2458.124130][T27739] usb 7-1: config 0 descriptor?? [ 2458.141044][T27739] gspca_main: sonixb-2.14.0 probing 0c45:608f [ 2458.849600][T27739] sonixb 7-1:0.0: Error reading register 00: -110 [ 2458.904489][ T7326] Bluetooth: hci0: Opcode 0x0401 failed: -4 [ 2459.307962][ T7333] netlink: 44 bytes leftover after parsing attributes in process `syz.3.8635'. [ 2459.317520][ T7333] netlink: 43 bytes leftover after parsing attributes in process `syz.3.8635'. [ 2459.442089][ T7333] netlink: 'syz.3.8635': attribute type 6 has an invalid length. [ 2459.562935][ T7333] netlink: 'syz.3.8635': attribute type 5 has an invalid length. [ 2459.653236][ T7333] netlink: 43 bytes leftover after parsing attributes in process `syz.3.8635'. [ 2459.949579][ T4501] usb 7-1: USB disconnect, device number 71 [ 2460.287324][ T7353] No such timeout policy "syz1" [ 2460.511789][ T4067] Bluetooth: hci0: command 0x0406 tx timeout [ 2460.851187][ T7348] netlink: 8 bytes leftover after parsing attributes in process `syz.6.8637'. [ 2463.609944][ T7403] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 2466.829851][ T1295] ieee802154 phy1 wpan1: encryption failed: -22 [ 2468.161270][ T7440] overlayfs: missing 'lowerdir' [ 2468.945956][ T7459] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 2475.565990][ T7537] xt_TPROXY: Can be used only with -p tcp or -p udp [ 2476.983036][ T7561] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 2477.106934][T26763] usb 5-1: new high-speed USB device number 3 using dummy_hcd [ 2477.726802][T26763] usb 5-1: Using ep0 maxpacket: 32 [ 2477.750359][ T7562] batadv0 speed is unknown, defaulting to 1000 [ 2477.770475][T26763] usb 5-1: config index 0 descriptor too short (expected 29220, got 36) [ 2477.824335][T26763] usb 5-1: config 0 has too many interfaces: 81, using maximum allowed: 32 [ 2477.948850][T26763] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 81 [ 2478.035257][T26763] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 2478.145860][T26763] usb 5-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 2478.166461][T26763] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 2478.225398][T26763] usb 5-1: config 0 interface 0 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 0 [ 2478.246863][T26763] usb 5-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 2478.447869][T26763] usb 5-1: New USB device found, idVendor=03f0, idProduct=6c17, bcdDevice= 0.40 [ 2478.458550][T26763] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2478.483603][T26763] usb 5-1: config 0 descriptor?? [ 2479.398473][ T6107] usb 4-1: new high-speed USB device number 67 using dummy_hcd [ 2479.455024][T26763] usblp 5-1:0.0: usblp0: USB Bidirectional printer dev 3 if 0 alt 0 proto 3 vid 0x03F0 pid 0x6C17 [ 2479.686856][ T6107] usb 4-1: Using ep0 maxpacket: 16 [ 2480.345010][ T6107] usb 4-1: config 0 interface 0 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 2480.345290][T26763] usb 5-1: USB disconnect, device number 3 [ 2480.369878][ T6107] usb 4-1: New USB device found, idVendor=0b57, idProduct=2bbd, bcdDevice=e7.cc [ 2480.381109][ T6107] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2480.394727][ T6107] usb 4-1: Product: syz [ 2480.396355][T26763] usblp0: removed [ 2480.399351][ T6107] usb 4-1: Manufacturer: syz [ 2480.414778][ T6107] usb 4-1: SerialNumber: syz [ 2480.427476][ T6107] usb 4-1: config 0 descriptor?? [ 2480.454328][ T6107] usbhid 4-1:0.0: couldn't find an input interrupt endpoint [ 2480.687909][ T7591] xt_TPROXY: Can be used only with -p tcp or -p udp [ 2480.924559][T26763] usb 4-1: USB disconnect, device number 67 [ 2482.781373][ T7616] batadv0 speed is unknown, defaulting to 1000 [ 2483.785901][ T7625] 9pnet_fd: Insufficient options for proto=fd [ 2484.517096][ T7632] ksmbd: Daemon and kernel module version mismatch. ksmbd: 0, kernel module: 1. User-space ksmbd should terminate. [ 2486.953515][ T9] usb 10-1: new high-speed USB device number 58 using dummy_hcd [ 2487.482358][ T9] usb 10-1: Using ep0 maxpacket: 16 [ 2487.528436][ T9] usb 10-1: config 0 interface 0 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 2487.622335][ T9] usb 10-1: New USB device found, idVendor=0b57, idProduct=2bbd, bcdDevice=e7.cc [ 2487.641814][ T9] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2487.650237][ T9] usb 10-1: Product: syz [ 2487.663992][ T9] usb 10-1: Manufacturer: syz [ 2487.672042][ T9] usb 10-1: SerialNumber: syz [ 2487.684032][ T9] usb 10-1: config 0 descriptor?? [ 2487.694581][ T9] usbhid 10-1:0.0: couldn't find an input interrupt endpoint [ 2487.897127][ T6107] usb 10-1: USB disconnect, device number 58 [ 2489.096647][ T7678] fuse: Bad value for 'fd' [ 2490.108694][ T4501] usb 10-1: new high-speed USB device number 59 using dummy_hcd [ 2491.065116][ T29] audit: type=1400 audit(1740668685.035:1819): avc: denied { mount } for pid=7695 comm="syz.8.8745" name="/" dev="configfs" ino=1057 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=filesystem permissive=1 [ 2491.069535][T27739] usb 7-1: new high-speed USB device number 72 using dummy_hcd [ 2491.087810][ C0] vkms_vblank_simulate: vblank timer overrun [ 2491.115471][ T29] audit: type=1400 audit(1740668685.045:1820): avc: denied { mounton } for pid=7695 comm="syz.8.8745" path="/204/file0" dev="configfs" ino=1057 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 2491.186430][ T4501] usb 10-1: New USB device found, idVendor=0c45, idProduct=608f, bcdDevice=b5.55 [ 2491.201386][ T6107] usb 4-1: new high-speed USB device number 68 using dummy_hcd [ 2491.210022][ T29] audit: type=1400 audit(1740668685.045:1821): avc: denied { read } for pid=7695 comm="syz.8.8745" name="/" dev="configfs" ino=1057 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 2491.260007][ T4501] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2491.273567][ T4501] usb 10-1: Product: syz [ 2491.278141][ T4501] usb 10-1: Manufacturer: syz [ 2491.283725][ T4501] usb 10-1: SerialNumber: syz [ 2491.293952][ T4501] usb 10-1: config 0 descriptor?? [ 2491.314404][ T29] audit: type=1400 audit(1740668685.045:1822): avc: denied { open } for pid=7695 comm="syz.8.8745" path="/204/file0" dev="overlay" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 2491.358137][ T4501] gspca_main: sonixb-2.14.0 probing 0c45:608f [ 2491.374828][T27739] usb 7-1: Using ep0 maxpacket: 8 [ 2491.402433][ T29] audit: type=1400 audit(1740668685.615:1823): avc: denied { unmount } for pid=4065 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=filesystem permissive=1 [ 2491.425032][T27739] usb 7-1: config 0 has an invalid interface number: 1 but max is 0 [ 2491.447834][T27739] usb 7-1: config 0 has no interface number 0 [ 2491.458002][T27739] usb 7-1: config 0 interface 1 has no altsetting 0 [ 2491.477460][T27739] usb 7-1: New USB device found, idVendor=10c4, idProduct=eac1, bcdDevice=70.2f [ 2491.486889][ T6107] usb 4-1: Using ep0 maxpacket: 32 [ 2491.503829][T27739] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2491.515435][ T6107] usb 4-1: config index 0 descriptor too short (expected 29220, got 36) [ 2491.535561][ T6107] usb 4-1: config 0 has too many interfaces: 81, using maximum allowed: 32 [ 2491.546110][T27739] usb 7-1: Product: syz [ 2491.561352][T27739] usb 7-1: Manufacturer: syz [ 2491.570370][ T6107] usb 4-1: config 0 has 1 interface, different from the descriptor's value: 81 [ 2491.587852][T27739] usb 7-1: SerialNumber: syz [ 2491.624352][ T6107] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 2491.655518][ T6107] usb 4-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 2491.676926][T27739] usb 7-1: config 0 descriptor?? [ 2491.703439][ T6107] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 2491.736815][ T6107] usb 4-1: config 0 interface 0 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 0 [ 2491.782761][ T6107] usb 4-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 2491.871325][ T4501] sonixb 10-1:0.0: Error reading register 00: -110 [ 2491.966357][T27739] i2c-cp2615 7-1:0.1: probe with driver i2c-cp2615 failed with error -22 [ 2491.978008][ T6107] usb 4-1: New USB device found, idVendor=03f0, idProduct=6c17, bcdDevice= 0.40 [ 2491.998430][ T6107] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2492.008215][ T6107] usb 4-1: config 0 descriptor?? [ 2492.445401][ T6107] usblp 4-1:0.0: usblp0: USB Bidirectional printer dev 68 if 0 alt 0 proto 3 vid 0x03F0 pid 0x6C17 [ 2492.955611][T27739] usb 10-1: USB disconnect, device number 59 [ 2493.102258][ T6107] usb 4-1: USB disconnect, device number 68 [ 2493.223536][ T6107] usblp0: removed [ 2493.649011][T26763] usb 7-1: USB disconnect, device number 72 [ 2493.726567][ T7728] 9pnet_fd: Insufficient options for proto=fd [ 2495.709188][ T7735] xt_TPROXY: Can be used only with -p tcp or -p udp [ 2495.808305][ T7749] x_tables: ip6_tables: TCPMSS target: only valid for protocol 6 [ 2496.729613][ T1218] usb 5-1: new high-speed USB device number 4 using dummy_hcd [ 2497.326183][ T1218] usb 5-1: New USB device found, idVendor=0c45, idProduct=608f, bcdDevice=b5.55 [ 2497.536948][ T1218] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2497.553883][ T1218] usb 5-1: Product: syz [ 2497.558205][ T1218] usb 5-1: Manufacturer: syz [ 2497.563111][ T1218] usb 5-1: SerialNumber: syz [ 2497.578146][ T1218] usb 5-1: config 0 descriptor?? [ 2497.602403][ T1218] gspca_main: sonixb-2.14.0 probing 0c45:608f [ 2498.268948][ T1218] sonixb 5-1:0.0: Error reading register 00: -110 [ 2499.387177][T27739] usb 5-1: USB disconnect, device number 4 [ 2499.438766][ T1218] usb 9-1: new high-speed USB device number 42 using dummy_hcd [ 2500.138634][ T1218] usb 9-1: Using ep0 maxpacket: 8 [ 2500.149980][ T1218] usb 9-1: config 0 has an invalid interface number: 1 but max is 0 [ 2500.369183][ T1218] usb 9-1: config 0 has no interface number 0 [ 2500.390267][ T1218] usb 9-1: config 0 interface 1 has no altsetting 0 [ 2500.403463][ T1218] usb 9-1: New USB device found, idVendor=10c4, idProduct=eac1, bcdDevice=70.2f [ 2500.413636][ T1218] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2500.422025][ T1218] usb 9-1: Product: syz [ 2500.426249][ T1218] usb 9-1: Manufacturer: syz [ 2500.434436][ T1218] usb 9-1: SerialNumber: syz [ 2500.448788][ T1218] usb 9-1: config 0 descriptor?? [ 2500.731585][ T1218] i2c-cp2615 9-1:0.1: probe with driver i2c-cp2615 failed with error -22 [ 2501.543234][ T9] usb 9-1: USB disconnect, device number 42 [ 2503.230293][T14838] bridge_slave_1: left allmulticast mode [ 2503.236054][T14838] bridge_slave_1: left promiscuous mode [ 2503.827659][ T4768] usb 5-1: new high-speed USB device number 5 using dummy_hcd [ 2503.881240][T14838] bridge0: port 2(bridge_slave_1) entered disabled state [ 2503.904503][T14838] bridge_slave_0: left allmulticast mode [ 2503.916515][T14838] bridge_slave_0: left promiscuous mode [ 2504.340288][ T4768] usb 5-1: New USB device found, idVendor=0c45, idProduct=608f, bcdDevice=b5.55 [ 2504.357659][ T4768] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2504.365859][ T4768] usb 5-1: Product: syz [ 2504.370577][ T4768] usb 5-1: Manufacturer: syz [ 2504.375242][ T4768] usb 5-1: SerialNumber: syz [ 2504.382154][T14838] bridge0: port 1(bridge_slave_0) entered disabled state [ 2504.411376][ T4768] usb 5-1: config 0 descriptor?? [ 2504.426385][ T4768] gspca_main: sonixb-2.14.0 probing 0c45:608f [ 2504.448981][T14838] bridge_slave_1: left allmulticast mode [ 2504.461727][T14838] bridge_slave_1: left promiscuous mode [ 2504.494250][T14838] bridge0: port 2(bridge_slave_1) entered disabled state [ 2504.541351][T14838] bridge_slave_0: left allmulticast mode [ 2504.552307][T14838] bridge_slave_0: left promiscuous mode [ 2504.562573][ T7845] netlink: 72 bytes leftover after parsing attributes in process `syz.3.8786'. [ 2504.572399][T14838] bridge0: port 1(bridge_slave_0) entered disabled state [ 2504.825089][T27739] usb 7-1: new high-speed USB device number 73 using dummy_hcd [ 2505.489600][ T4768] sonixb 5-1:0.0: Error reading register 00: -110 [ 2505.691489][T27739] usb 7-1: too many endpoints for config 0 interface 0 altsetting 0: 253, using maximum allowed: 30 [ 2505.703022][T27739] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 2505.727955][T27739] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 2505.751460][T27739] usb 7-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 253 [ 2505.788828][T27739] usb 7-1: New USB device found, idVendor=05ac, idProduct=8243, bcdDevice=8b.40 [ 2505.813640][T27739] usb 7-1: New USB device strings: Mfr=11, Product=0, SerialNumber=0 [ 2505.822221][T27739] usb 7-1: Manufacturer: syz [ 2505.846085][T27739] usb 7-1: config 0 descriptor?? [ 2506.003549][T14838]  (unregistering): (slave bridge0): Releasing backup interface [ 2506.024382][T14838] bridge0 (unregistering): left promiscuous mode [ 2506.248637][ T1218] usb 5-1: USB disconnect, device number 5 [ 2506.282076][T27739] appleir 0003:05AC:8243.001D: unknown main item tag 0x0 [ 2506.425365][T27739] appleir 0003:05AC:8243.001D: No inputs registered, leaving [ 2506.485959][T27739] appleir 0003:05AC:8243.001D: hiddev0,hidraw0: USB HID v0.00 Device [syz] on usb-dummy_hcd.6-1/input0 [ 2506.502730][T14838] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 2506.560227][T14838] bond_slave_0: left promiscuous mode [ 2506.593204][T14838] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 2506.654290][T14838] bond_slave_1: left promiscuous mode [ 2506.668545][T14838] bond0 (unregistering): Released all slaves [ 2507.153234][T14838]  (unregistering): (slave bond_slave_0): Releasing backup interface [ 2507.173721][T14838] bond_slave_0: left promiscuous mode [ 2507.182397][T14838]  (unregistering): (slave bond_slave_1): Releasing backup interface [ 2507.199252][T14838] bond_slave_1: left promiscuous mode [ 2507.204952][T14838]  (unregistering): Released all slaves [ 2507.430010][T14838] tipc: Left network mode [ 2509.040746][T27739] usb 7-1: USB disconnect, device number 73 [ 2509.912771][T14838] hsr_slave_0: left promiscuous mode [ 2509.927028][ T7899] block nbd6: shutting down sockets [ 2509.934061][T14838] hsr_slave_1: left promiscuous mode [ 2509.942943][T14838] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 2510.001308][T14838] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 2510.159772][T14838] hsr_slave_0: left promiscuous mode [ 2510.165445][ T7904] netlink: 72 bytes leftover after parsing attributes in process `syz.6.8804'. [ 2510.182286][T14838] hsr_slave_1: left promiscuous mode [ 2510.258494][T14838] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 2510.339725][T14838] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 2510.489309][ T7908] serio: Serial port ttyS3 [ 2511.466497][ T1218] usb 10-1: new full-speed USB device number 60 using dummy_hcd [ 2511.695520][ T1218] usb 10-1: device descriptor read/64, error -71 [ 2511.987654][ T1218] usb 10-1: new full-speed USB device number 61 using dummy_hcd [ 2512.152691][ T7920] Falling back ldisc for ptm0. [ 2512.192975][ T1218] usb 10-1: device descriptor read/64, error -71 [ 2512.330484][ T1218] usb usb10-port1: attempt power cycle [ 2513.244651][ T1218] usb 10-1: new full-speed USB device number 62 using dummy_hcd [ 2513.322601][ T1218] usb 10-1: device descriptor read/8, error -71 [ 2514.181988][T14838] team0 (unregistering): Port device team_slave_1 removed [ 2514.791150][ T7948] fuse: Invalid rootmode [ 2514.803370][T14838] team0 (unregistering): Port device team_slave_0 removed [ 2516.244736][ T7963] xt_TPROXY: Can be used only with -p tcp or -p udp [ 2518.064743][T14838] team0 (unregistering): Port device team_slave_1 removed [ 2518.117018][T14838] team0 (unregistering): Port device team_slave_0 removed [ 2519.432369][ T7924] batadv0 speed is unknown, defaulting to 1000 [ 2521.293215][ T1218] usb 5-1: new high-speed USB device number 6 using dummy_hcd [ 2522.891378][ T8023] xt_TPROXY: Can be used only with -p tcp or -p udp [ 2523.036774][ T1218] usb 5-1: config index 0 descriptor too short (expected 45, got 36) [ 2523.045627][ T1218] usb 5-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 2523.073645][ T1218] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 2523.087222][ T1218] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 2523.103111][ T1218] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 2523.120561][ T1218] usb 5-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 2523.131899][ T1218] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2523.151482][ T1218] usb 5-1: config 0 descriptor?? [ 2523.159116][ T8014] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 2523.191068][ T8028] netlink: 52 bytes leftover after parsing attributes in process `syz.8.8838'. [ 2523.595252][ T8034] xt_TPROXY: Can be used only with -p tcp or -p udp [ 2523.698668][ T1218] plantronics 0003:047F:FFFF.001E: unknown main item tag 0xd [ 2523.741068][ T1218] plantronics 0003:047F:FFFF.001E: No inputs registered, leaving [ 2524.092295][ T1218] plantronics 0003:047F:FFFF.001E: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.4-1/input0 [ 2524.239264][ T1218] usb 5-1: USB disconnect, device number 6 [ 2524.344322][ T8043] sp0: Synchronizing with TNC [ 2524.396910][ T8043] batadv0 speed is unknown, defaulting to 1000 [ 2526.910592][ T8070] xt_TPROXY: Can be used only with -p tcp or -p udp [ 2528.271928][ T1295] ieee802154 phy1 wpan1: encryption failed: -22 [ 2533.760140][ T4501] usb 4-1: new high-speed USB device number 69 using dummy_hcd [ 2534.200109][ T4501] usb 4-1: Using ep0 maxpacket: 32 [ 2534.212338][ T4501] usb 4-1: config 0 has an invalid interface number: 67 but max is 0 [ 2534.232082][ T4501] usb 4-1: config 0 has no interface number 0 [ 2534.247876][ T4501] usb 4-1: New USB device found, idVendor=0424, idProduct=9901, bcdDevice=c2.57 [ 2534.257398][ T4501] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2534.276013][ T4501] usb 4-1: Product: syz [ 2534.288796][ T4501] usb 4-1: Manufacturer: syz [ 2534.299790][ T4501] usb 4-1: SerialNumber: syz [ 2534.329172][ T4501] usb 4-1: config 0 descriptor?? [ 2534.368379][ T4501] smsc95xx v2.0.0 [ 2535.869885][ T9] usb 7-1: new full-speed USB device number 74 using dummy_hcd [ 2536.101673][ T9] usb 7-1: config 5 has an invalid interface number: 123 but max is 0 [ 2536.110020][ T9] usb 7-1: config 5 has no interface number 0 [ 2536.116124][ T9] usb 7-1: config 5 interface 123 altsetting 7 endpoint 0x4 has invalid wMaxPacketSize 0 [ 2536.720888][ T4501] smsc95xx 4-1:0.67 (unnamed net_device) (uninitialized): EEPROM read operation timeout [ 2536.739501][ T4501] smsc95xx 4-1:0.67 (unnamed net_device) (uninitialized): Failed to write reg index 0x00000014: -71 [ 2536.779432][ T9] usb 7-1: config 5 interface 123 has no altsetting 0 [ 2536.786384][ T4501] smsc95xx 4-1:0.67: probe with driver smsc95xx failed with error -71 [ 2536.817195][ T4501] usb 4-1: USB disconnect, device number 69 [ 2536.824111][ T9] usb 7-1: New USB device found, idVendor=3923, idProduct=718a, bcdDevice=d8.d7 [ 2536.833464][ T9] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2536.847436][ T9] usb 7-1: Product: syz [ 2536.851714][ T9] usb 7-1: Manufacturer: syz [ 2536.856423][ T9] usb 7-1: SerialNumber: syz [ 2537.080583][ T9] ni6501 7-1:5.123: driver 'ni6501' failed to auto-configure device. [ 2537.106799][ T9] usb 7-1: USB disconnect, device number 74 [ 2537.659496][ T9] usb 4-1: new high-speed USB device number 70 using dummy_hcd [ 2538.053015][ T9] usb 4-1: Using ep0 maxpacket: 32 [ 2538.063955][ T9] usb 4-1: config 0 interface 0 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 2538.075564][ T9] usb 4-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 2538.134883][ T9] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2538.157235][ T9] usb 4-1: config 0 descriptor?? [ 2538.165917][ T9] hub 4-1:0.0: bad descriptor, ignoring hub [ 2538.188079][ T9] hub 4-1:0.0: probe with driver hub failed with error -5 [ 2538.209715][ T9] usbhid 4-1:0.0: couldn't find an input interrupt endpoint [ 2538.377952][ T8207] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2538.397251][ T8207] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2538.560827][ T5872] usb 4-1: USB disconnect, device number 70 [ 2540.468667][ T8259] No such timeout policy "syz1" [ 2541.756279][ T1209] usb 5-1: new high-speed USB device number 7 using dummy_hcd [ 2542.338413][ T1209] usb 5-1: Using ep0 maxpacket: 32 [ 2542.367314][ T1209] usb 5-1: config 0 interface 0 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 2542.396283][ T1209] usb 5-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 2542.413988][ T1209] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2542.435816][ T1209] usb 5-1: config 0 descriptor?? [ 2542.443969][ T1209] hub 5-1:0.0: bad descriptor, ignoring hub [ 2542.468077][ T1209] hub 5-1:0.0: probe with driver hub failed with error -5 [ 2542.588510][ T1209] usbhid 5-1:0.0: couldn't find an input interrupt endpoint [ 2543.055813][ T8272] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2543.172586][ T8272] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2543.408426][ T1209] usb 5-1: USB disconnect, device number 7 [ 2543.476624][ T8302] xt_TPROXY: Can be used only with -p tcp or -p udp [ 2544.346067][ T8318] Bluetooth: hci0: Opcode 0x0401 failed: -112 [ 2544.875973][ T1209] usb 4-1: new full-speed USB device number 71 using dummy_hcd [ 2545.322227][ T1209] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 2545.627612][ T8324] 9pnet: Could not find request transport: fd0x0000000000000008 [ 2545.778143][ T1209] usb 4-1: config 1 interface 1 altsetting 1 endpoint 0x3 has invalid maxpacket 1024, setting to 64 [ 2545.819751][ T1209] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 2545.837619][ T1209] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2545.854539][ T1209] usb 4-1: Product: syz [ 2545.943225][ T1209] usb 4-1: Manufacturer: syz [ 2545.954491][ T1209] usb 4-1: SerialNumber: syz [ 2546.297556][T18475] Bluetooth: hci0: command 0x0406 tx timeout [ 2546.306534][ T4067] Bluetooth: hci0: Opcode 0x0c1a failed: -110 [ 2546.555048][ T8315] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 2548.367231][ T4067] Bluetooth: hci0: command 0x0406 tx timeout [ 2548.561713][ T1209] cdc_ncm 4-1:1.0: bind() failure [ 2548.638035][ T5872] usb 9-1: new high-speed USB device number 43 using dummy_hcd [ 2548.649628][ T1209] cdc_ncm 4-1:1.1: CDC Union missing and no IAD found [ 2548.656510][ T1209] cdc_ncm 4-1:1.1: bind() failure [ 2548.707253][ T1209] usb 4-1: USB disconnect, device number 71 [ 2548.962503][ T5872] usb 9-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 2549.200031][ T5872] usb 9-1: config 0 has no interfaces? [ 2549.205554][ T5872] usb 9-1: New USB device found, idVendor=17ef, idProduct=6047, bcdDevice= 0.00 [ 2549.837629][ T5872] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2549.850450][ T5872] usb 9-1: config 0 descriptor?? [ 2550.168337][ T8373] 9pnet: Could not find request transport: fd0x0000000000000008 [ 2550.198842][ T1209] usb 9-1: USB disconnect, device number 43 [ 2551.069705][ T29] audit: type=1400 audit(1740668745.489:1824): avc: denied { getopt } for pid=8386 comm="syz.4.8942" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 2552.544295][ T8405] xt_TPROXY: Can be used only with -p tcp or -p udp [ 2552.988880][ T8412] netlink: 16 bytes leftover after parsing attributes in process `syz.4.8948'. [ 2554.901734][ T8430] xt_TPROXY: Can be used only with -p tcp or -p udp [ 2555.845214][ T8444] input: syz0 as /devices/virtual/input/input41 [ 2557.406059][ T8455] xt_TPROXY: Can be used only with -p tcp or -p udp [ 2559.675538][ T8472] vhci_hcd vhci_hcd.0: pdev(9) rhport(0) sockfd(4) [ 2559.682074][ T8472] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 2559.702444][ T8472] vhci_hcd vhci_hcd.0: Device attached [ 2559.826850][ T8473] vhci_hcd: cannot find a urb of seqnum 0 max seqnum 0 [ 2560.032148][ T12] vhci_hcd: stop threads [ 2560.085872][T27739] usb 51-1: new low-speed USB device number 2 using vhci_hcd [ 2560.102641][ T12] vhci_hcd: release socket [ 2560.123295][ T12] vhci_hcd: disconnect device [ 2560.138493][ T8484] block nbd8: server does not support multiple connections per device. [ 2560.362896][ T8479] block nbd8: shutting down sockets [ 2561.404693][ T1209] usb 10-1: new high-speed USB device number 64 using dummy_hcd [ 2561.488135][ T6107] usb 5-1: new high-speed USB device number 8 using dummy_hcd [ 2561.584643][ T1209] usb 10-1: Using ep0 maxpacket: 32 [ 2561.608972][ T1209] usb 10-1: New USB device found, idVendor=174f, idProduct=6a31, bcdDevice=26.3f [ 2561.661842][ T1209] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2561.814265][ T6107] usb 5-1: New USB device found, idVendor=0c45, idProduct=608f, bcdDevice=b5.55 [ 2561.854767][ T6107] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2561.873227][ T1209] usb 10-1: Product: syz [ 2561.886640][ T6107] usb 5-1: Product: syz [ 2561.898656][ T6107] usb 5-1: Manufacturer: syz [ 2561.909717][ T6107] usb 5-1: SerialNumber: syz [ 2561.935132][ T1209] usb 10-1: Manufacturer: syz [ 2561.938803][ T6107] usb 5-1: config 0 descriptor?? [ 2561.947117][ T6107] gspca_main: sonixb-2.14.0 probing 0c45:608f [ 2561.980305][ T1209] usb 10-1: SerialNumber: syz [ 2562.009617][ T1209] usb 10-1: config 0 descriptor?? [ 2562.059518][ T1209] gspca_main: stk1135-2.14.0 probing 174f:6a31 [ 2562.489137][ T6107] sonixb 5-1:0.0: Error reading register 00: -110 [ 2562.742750][ T8512] xt_TPROXY: Can be used only with -p tcp or -p udp [ 2563.176250][ T1209] gspca_stk1135: reg_w 0x7 err -71 [ 2563.202310][ T1209] gspca_stk1135: serial bus timeout: status=0x00 [ 2563.217140][ T1209] gspca_stk1135: Sensor write failed [ 2563.228751][ T1209] gspca_stk1135: serial bus timeout: status=0x00 [ 2563.245082][ T1209] gspca_stk1135: Sensor write failed [ 2563.257893][ T1209] gspca_stk1135: serial bus timeout: status=0x00 [ 2563.304358][ T1209] gspca_stk1135: Sensor read failed [ 2563.317072][ T1209] gspca_stk1135: serial bus timeout: status=0x00 [ 2563.330038][ T1209] gspca_stk1135: Sensor read failed [ 2563.339800][ T1209] gspca_stk1135: Detected sensor type unknown (0x0) [ 2563.354502][ T1209] gspca_stk1135: serial bus timeout: status=0x00 [ 2563.366862][ T1209] gspca_stk1135: Sensor read failed [ 2563.381809][ T1209] gspca_stk1135: serial bus timeout: status=0x00 [ 2563.403975][ T1209] gspca_stk1135: Sensor read failed [ 2563.419838][ T1209] gspca_stk1135: serial bus timeout: status=0x00 [ 2563.434018][ T1209] gspca_stk1135: Sensor write failed [ 2563.446943][ T1209] gspca_stk1135: serial bus timeout: status=0x00 [ 2563.459331][ T1209] gspca_stk1135: Sensor write failed [ 2563.471031][ T1209] stk1135 10-1:0.0: probe with driver stk1135 failed with error -71 [ 2563.501200][ T1209] usb 10-1: USB disconnect, device number 64 [ 2563.693230][ T4768] usb 5-1: USB disconnect, device number 8 [ 2563.898668][ T8524] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 2563.906105][ T8524] IPv6: NLM_F_CREATE should be set when creating new route [ 2564.477543][ T8524] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 2565.304442][T27739] vhci_hcd: vhci_device speed not set [ 2567.652851][ T8556] tipc: Started in network mode [ 2567.662295][ T8556] tipc: Node identity b66dac32aa12, cluster identity 4711 [ 2567.670302][ T8556] tipc: Enabled bearer , priority 0 [ 2567.711215][ T8555] tipc: Disabling bearer [ 2568.483529][T27739] usb 5-1: new high-speed USB device number 9 using dummy_hcd [ 2568.782895][ T8580] Bluetooth: hci0: Opcode 0x0401 failed: -112 [ 2569.693507][T27739] usb 5-1: Using ep0 maxpacket: 8 [ 2569.888253][T27739] usb 5-1: config 0 has an invalid interface number: 1 but max is 0 [ 2569.914093][T27739] usb 5-1: config 0 has no interface number 0 [ 2569.924771][T27739] usb 5-1: config 0 interface 1 has no altsetting 0 [ 2570.676346][T27739] usb 5-1: New USB device found, idVendor=10c4, idProduct=eac1, bcdDevice=70.2f [ 2570.685657][T27739] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2570.698516][T27739] usb 5-1: Product: syz [ 2570.702737][T27739] usb 5-1: Manufacturer: syz [ 2570.707426][T27739] usb 5-1: SerialNumber: syz [ 2570.714473][T27739] usb 5-1: config 0 descriptor?? [ 2570.736972][T27739] usb 5-1: can't set config #0, error -71 [ 2570.744182][T27739] usb 5-1: USB disconnect, device number 9 [ 2571.473290][T18475] Bluetooth: hci0: command 0x0406 tx timeout [ 2571.632968][ T4067] Bluetooth: hci0: Opcode 0x0c1a failed: -110 [ 2572.524266][ T8609] xt_TPROXY: Can be used only with -p tcp or -p udp [ 2573.552858][ T4067] Bluetooth: hci0: command 0x0406 tx timeout [ 2576.035863][ T29] audit: type=1326 audit(1740668770.454:1825): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8655 comm="syz.4.9017" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f254398d169 code=0x7ffc0000 [ 2576.366489][ T29] audit: type=1326 audit(1740668770.454:1826): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8655 comm="syz.4.9017" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f254398bad0 code=0x7ffc0000 [ 2576.389959][ C0] vkms_vblank_simulate: vblank timer overrun [ 2576.530152][ T8666] sp0: Synchronizing with TNC [ 2576.571688][ T8666] batadv0 speed is unknown, defaulting to 1000 [ 2577.058880][ T29] audit: type=1326 audit(1740668770.454:1827): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8655 comm="syz.4.9017" exe="/root/syz-executor" sig=0 arch=c000003e syscall=308 compat=0 ip=0x7f254398e997 code=0x7ffc0000 [ 2577.082669][ T29] audit: type=1326 audit(1740668770.454:1828): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8655 comm="syz.4.9017" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f254398d169 code=0x7ffc0000 [ 2577.105972][ C0] vkms_vblank_simulate: vblank timer overrun [ 2577.175957][ T29] audit: type=1326 audit(1740668770.454:1829): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8655 comm="syz.4.9017" exe="/root/syz-executor" sig=0 arch=c000003e syscall=308 compat=0 ip=0x7f254398e997 code=0x7ffc0000 [ 2577.324285][ T29] audit: type=1326 audit(1740668770.454:1830): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8655 comm="syz.4.9017" exe="/root/syz-executor" sig=0 arch=c000003e syscall=3 compat=0 ip=0x7f254398bdca code=0x7ffc0000 [ 2577.898419][ T29] audit: type=1326 audit(1740668770.454:1831): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8655 comm="syz.4.9017" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f254398d169 code=0x7ffc0000 [ 2577.921835][ C0] vkms_vblank_simulate: vblank timer overrun [ 2578.008735][ T29] audit: type=1326 audit(1740668770.454:1832): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8655 comm="syz.4.9017" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f254398d169 code=0x7ffc0000 [ 2578.091963][ T29] audit: type=1326 audit(1740668770.464:1833): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8655 comm="syz.4.9017" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f254398d169 code=0x7ffc0000 [ 2578.168323][ T29] audit: type=1326 audit(1740668770.464:1834): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8655 comm="syz.4.9017" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f254398d169 code=0x7ffc0000 [ 2578.357339][ T8681] fuse: Unknown parameter '0x0000000000000004' [ 2579.061790][T27739] usb 4-1: new full-speed USB device number 72 using dummy_hcd [ 2579.422187][T27739] usb 4-1: unable to get BOS descriptor or descriptor too short [ 2579.440793][T27739] usb 4-1: not running at top speed; connect to a high speed hub [ 2579.473652][T27739] usb 4-1: config 1 contains an unexpected descriptor of type 0x2, skipping [ 2579.504317][T27739] usb 4-1: config 1 interface 2 altsetting 1 endpoint 0x82 has invalid maxpacket 1024, setting to 1023 [ 2579.553368][T27739] usb 4-1: config 1 interface 1 has no altsetting 0 [ 2579.586473][T27739] usb 4-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 2579.598331][T27739] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2579.630254][T27739] usb 4-1: Product: syz [ 2579.648771][T27739] usb 4-1: Manufacturer: syz [ 2579.665472][T27739] usb 4-1: SerialNumber: syz [ 2579.932416][T27739] usb 4-1: 2:1: invalid format type 0x1001 is detected, processed as PCM [ 2579.975661][T27739] usb 4-1: 2:1 : invalid UAC_FORMAT_TYPE desc [ 2580.007624][T27739] usb 4-1: 2:1 : invalid channels 0 [ 2580.240640][ T8702] 9pnet_fd: Insufficient options for proto=fd [ 2581.132029][T27739] usb 4-1: USB disconnect, device number 72 [ 2581.186230][ T8596] udevd[8596]: setting mode of /dev/bus/usb/004/072 to 020664 failed: No such file or directory [ 2581.297438][ T8596] udevd[8596]: setting owner of /dev/bus/usb/004/072 to uid=0, gid=0 failed: No such file or directory [ 2581.892048][ T8596] udevd[8596]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 2583.304351][ T8735] sp0: Synchronizing with TNC [ 2583.321162][ T8735] batadv0 speed is unknown, defaulting to 1000 [ 2584.722203][ T8753] openvswitch: netlink: Unexpected mask (mask=20040, allowed=10048) [ 2586.619635][ T8782] Bluetooth: hci0: Opcode 0x0401 failed: -112 [ 2588.288863][ T8796] sp0: Synchronizing with TNC [ 2588.352578][ T8796] batadv0 speed is unknown, defaulting to 1000 [ 2589.165035][T18475] Bluetooth: hci0: command 0x0406 tx timeout [ 2589.170434][ T4067] Bluetooth: hci0: Opcode 0x0c1a failed: -110 [ 2589.634667][ T1295] ieee802154 phy1 wpan1: encryption failed: -22 [ 2590.105437][ T6107] usb 5-1: new full-speed USB device number 10 using dummy_hcd [ 2590.264564][ T6107] usb 5-1: config 5 has an invalid interface number: 123 but max is 0 [ 2590.342403][ T6107] usb 5-1: config 5 has no interface number 0 [ 2590.415449][ T6107] usb 5-1: config 5 interface 123 altsetting 7 endpoint 0x4 has invalid wMaxPacketSize 0 [ 2590.555211][ T6107] usb 5-1: config 5 interface 123 has no altsetting 0 [ 2590.650341][ T6107] usb 5-1: New USB device found, idVendor=3923, idProduct=718a, bcdDevice=d8.d7 [ 2590.742317][ T6107] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2590.769049][ T6107] usb 5-1: Product: syz [ 2590.782692][ T6107] usb 5-1: Manufacturer: syz [ 2590.796700][ T6107] usb 5-1: SerialNumber: syz [ 2591.031889][ T6107] ni6501 5-1:5.123: driver 'ni6501' failed to auto-configure device. [ 2591.062602][ T6107] usb 5-1: USB disconnect, device number 10 [ 2591.230172][T18475] Bluetooth: hci0: command 0x0406 tx timeout [ 2593.778642][ T8859] sp0: Synchronizing with TNC [ 2593.832278][ T8859] batadv0 speed is unknown, defaulting to 1000 [ 2597.812527][ T8902] netlink: 72 bytes leftover after parsing attributes in process `syz.8.9081'. [ 2598.300193][ T8526] usb 9-1: new high-speed USB device number 44 using dummy_hcd [ 2598.976219][ T8926] No such timeout policy "syz1" [ 2599.745747][ T8925] Bluetooth: hci0: Opcode 0x0401 failed: -112 [ 2599.817145][ T8526] usb 9-1: config 0 has an invalid interface number: 22 but max is 0 [ 2599.835322][ T8526] usb 9-1: config 0 has no interface number 0 [ 2599.929980][ T8526] usb 9-1: New USB device found, idVendor=10b8, idProduct=1fa8, bcdDevice=d4.21 [ 2599.949030][ T8526] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2599.957139][ T8526] usb 9-1: Product: syz [ 2599.962384][ T8526] usb 9-1: Manufacturer: syz [ 2599.967096][ T8526] usb 9-1: SerialNumber: syz [ 2600.279235][ T8526] usb 9-1: config 0 descriptor?? [ 2600.977996][ T8526] dvb-usb: found a 'DiBcom NIM8096MD reference design' in warm state. [ 2600.992824][ T8526] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 2601.009115][ T8526] dvbdev: DVB: registering new adapter (DiBcom NIM8096MD reference design) [ 2601.023184][ T8526] usb 9-1: media controller created [ 2601.044385][ T8526] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 2601.211040][ T8526] DVB: Unable to find symbol dib8000_attach() [ 2601.217208][ T8526] dvb-usb: no frontend was attached by 'DiBcom NIM8096MD reference design' [ 2601.598821][ T8526] rc_core: IR keymap rc-dib0700-rc5 not found [ 2601.678697][ T8526] Registered IR keymap rc-empty [ 2601.684690][ T8526] dvb-usb: could not initialize remote control. [ 2601.692163][ T8526] dvb-usb: DiBcom NIM8096MD reference design successfully initialized and connected. [ 2601.878814][ T4067] Bluetooth: hci0: command 0x0406 tx timeout [ 2601.884960][T18475] Bluetooth: hci0: Opcode 0x0c1a failed: -110 [ 2602.018965][ T6107] usb 9-1: USB disconnect, device number 44 [ 2602.083263][ T6107] dvb-usb: DiBcom NIM8096MD reference design successfully deinitialized and disconnected. [ 2602.518699][T27739] usb 10-1: new high-speed USB device number 65 using dummy_hcd [ 2603.283692][T27739] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 2603.305085][T27739] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 2603.342403][T27739] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 2603.359182][ T4067] Bluetooth: hci1: sending frame failed (-49) [ 2603.367564][T18475] Bluetooth: hci1: Entering manufacturer mode failed (-49) [ 2603.374235][T27739] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 2603.386981][ T8972] Bluetooth: hci1: Frame reassembly failed (-84) [ 2603.437724][T27739] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 2603.490980][T27739] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 2603.519256][T27739] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 2603.550809][T27739] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 2603.592242][T27739] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 2603.609128][T27739] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 2603.987658][T18475] Bluetooth: hci0: command 0x0406 tx timeout [ 2604.344691][T27739] usb 10-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 2604.354562][T27739] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2604.399006][T27739] usb 10-1: config 0 descriptor?? [ 2604.950203][T27739] usbhid 10-1:0.0: can't add hid device: -71 [ 2604.968861][T27739] usbhid 10-1:0.0: probe with driver usbhid failed with error -71 [ 2605.003582][T27739] usb 10-1: USB disconnect, device number 65 [ 2605.392698][T26763] usb 4-1: new high-speed USB device number 73 using dummy_hcd [ 2605.664021][ T9001] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 2606.198087][T26763] usb 4-1: Using ep0 maxpacket: 16 [ 2606.204652][T26763] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 2606.221054][T26763] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 2606.235194][T26763] usb 4-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 2606.244657][T26763] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2606.256330][T26763] usb 4-1: Product: syz [ 2606.275580][T26763] usb 4-1: Manufacturer: syz [ 2606.373102][T26763] usb 4-1: SerialNumber: syz [ 2606.613314][T26763] usb 4-1: 0:2 : does not exist [ 2606.628940][T26763] usb 4-1: 5:0: failed to get current value for ch 0 (-22) [ 2606.670394][T26763] usb 4-1: USB disconnect, device number 73 [ 2607.158599][ T8961] udevd[8961]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 2609.717775][ T8584] usb 9-1: new high-speed USB device number 45 using dummy_hcd [ 2609.996170][ T8584] usb 9-1: Using ep0 maxpacket: 32 [ 2610.016566][ T8584] usb 9-1: config 0 has an invalid descriptor of length 255, skipping remainder of the config [ 2610.048980][ T8584] usb 9-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 2610.079691][ T8584] usb 9-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 2610.098042][ T8584] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2610.112872][ T8584] usb 9-1: rejected 1 configuration due to insufficient available bus power [ 2610.125565][ T8584] usb 9-1: no configuration chosen from 1 choice [ 2612.780049][T26763] usb 9-1: USB disconnect, device number 45 [ 2613.136113][ T9082] ptrace attach of "./syz-executor exec"[4065] was attempted by "./syz-executor exec"[9082] [ 2613.955304][ T9089] batadv0 speed is unknown, defaulting to 1000 [ 2616.257632][ T8584] usb 7-1: new full-speed USB device number 75 using dummy_hcd [ 2616.386926][ T8584] usb 7-1: device descriptor read/64, error -71 [ 2617.067282][ T1218] usb 9-1: new high-speed USB device number 46 using dummy_hcd [ 2617.193858][ T8584] usb 7-1: new full-speed USB device number 76 using dummy_hcd [ 2617.276777][ T1218] usb 9-1: Using ep0 maxpacket: 32 [ 2617.410513][ T8584] usb 7-1: device descriptor read/64, error -71 [ 2617.454018][ T1218] usb 9-1: config 0 has an invalid descriptor of length 255, skipping remainder of the config [ 2617.471517][ T1218] usb 9-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 2617.484481][ T1218] usb 9-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 2617.493688][ T1218] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2617.514092][ T1218] usb 9-1: config 0 descriptor?? [ 2617.537963][ T8584] usb usb7-port1: attempt power cycle [ 2617.561352][ T1218] hub 9-1:0.0: bad descriptor, ignoring hub [ 2618.045343][ T9118] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2618.065781][ T1218] hub 9-1:0.0: probe with driver hub failed with error -5 [ 2618.075922][ T9118] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2618.089403][ T1218] usbhid 9-1:0.0: couldn't find an input interrupt endpoint [ 2618.221272][ T1218] usb 9-1: USB disconnect, device number 46 [ 2618.267993][ T6107] usb 4-1: new high-speed USB device number 74 using dummy_hcd [ 2618.336684][ T8584] usb 7-1: new full-speed USB device number 77 using dummy_hcd [ 2618.387019][ T8584] usb 7-1: device descriptor read/8, error -71 [ 2618.427048][ T6107] usb 4-1: Using ep0 maxpacket: 8 [ 2618.434369][ T6107] usb 4-1: config 0 has an invalid descriptor of length 16, skipping remainder of the config [ 2618.454796][ T6107] usb 4-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 2618.584918][ T6107] usb 4-1: New USB device found, idVendor=10c4, idProduct=eac1, bcdDevice=70.2f [ 2618.604752][ T6107] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2618.622112][ T6107] usb 4-1: Product: syz [ 2618.630933][ T6107] usb 4-1: Manufacturer: syz [ 2618.640223][ T6107] usb 4-1: SerialNumber: syz [ 2618.656773][ T6107] usb 4-1: config 0 descriptor?? [ 2618.736564][ T8584] usb 7-1: new full-speed USB device number 78 using dummy_hcd [ 2618.778336][ T8584] usb 7-1: device descriptor read/8, error -71 [ 2618.932581][ T8584] usb usb7-port1: unable to enumerate USB device [ 2620.178845][ T6107] usb 4-1: USB disconnect, device number 74 [ 2620.516483][ T8584] usb 7-1: new high-speed USB device number 79 using dummy_hcd [ 2620.927656][ T8584] usb 7-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 2620.946275][ T8584] usb 7-1: config 0 has no interfaces? [ 2620.959824][ T8584] usb 7-1: New USB device found, idVendor=17ef, idProduct=6047, bcdDevice= 0.00 [ 2621.015952][ T8584] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2621.190625][ T9164] xt_TPROXY: Can be used only with -p tcp or -p udp [ 2621.258852][ T8584] usb 7-1: config 0 descriptor?? [ 2622.306439][ T8526] usb 7-1: USB disconnect, device number 79 [ 2622.606455][T26763] usb 9-1: new high-speed USB device number 47 using dummy_hcd [ 2622.706309][ T1209] usb 5-1: new full-speed USB device number 11 using dummy_hcd [ 2622.778275][T26763] usb 9-1: config 0 has an invalid interface number: 22 but max is 0 [ 2622.790042][T26763] usb 9-1: config 0 has no interface number 0 [ 2622.798750][T26763] usb 9-1: New USB device found, idVendor=10b8, idProduct=1fa8, bcdDevice=d4.21 [ 2622.844142][ T1209] usb 5-1: device descriptor read/64, error -71 [ 2622.854373][T26763] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2622.874735][T26763] usb 9-1: Product: syz [ 2622.881673][T26763] usb 9-1: Manufacturer: syz [ 2622.989881][T26763] usb 9-1: SerialNumber: syz [ 2623.001794][T26763] usb 9-1: config 0 descriptor?? [ 2623.087301][ T29] kauditd_printk_skb: 4 callbacks suppressed [ 2623.087333][ T29] audit: type=1400 audit(1740668817.510:1839): avc: denied { accept } for pid=9186 comm="syz.6.9166" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=unix_dgram_socket permissive=1 [ 2623.130348][ T1209] usb 5-1: new full-speed USB device number 12 using dummy_hcd [ 2623.531368][T26763] dvb-usb: found a 'DiBcom NIM8096MD reference design' in warm state. [ 2623.553553][T26763] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 2623.566761][T26763] dvbdev: DVB: registering new adapter (DiBcom NIM8096MD reference design) [ 2623.577187][T26763] usb 9-1: media controller created [ 2623.597659][T26763] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 2623.636056][ T1209] usb 5-1: device descriptor read/64, error -71 [ 2623.646332][T26763] DVB: Unable to find symbol dib8000_attach() [ 2623.652793][T26763] dvb-usb: no frontend was attached by 'DiBcom NIM8096MD reference design' [ 2623.774198][ T1209] usb usb5-port1: attempt power cycle [ 2623.781355][T26763] rc_core: IR keymap rc-dib0700-rc5 not found [ 2623.801277][T26763] Registered IR keymap rc-empty [ 2623.808761][T26763] dvb-usb: could not initialize remote control. [ 2624.373546][T26763] dvb-usb: DiBcom NIM8096MD reference design successfully initialized and connected. [ 2624.397693][T26763] usb 9-1: USB disconnect, device number 47 [ 2624.460710][T26763] dvb-usb: DiBcom NIM8096MD reference design successfully deinitialized and disconnected. [ 2624.685980][ T1209] usb 5-1: new full-speed USB device number 13 using dummy_hcd [ 2625.168581][ T1209] usb 5-1: device descriptor read/8, error -71 [ 2625.753144][ T1209] usb 5-1: new full-speed USB device number 14 using dummy_hcd [ 2625.975783][ T1209] usb 5-1: device not accepting address 14, error -71 [ 2626.963410][ T1209] usb usb5-port1: unable to enumerate USB device [ 2627.413052][ T9226] netlink: 12 bytes leftover after parsing attributes in process `syz.8.9175'. [ 2630.129617][ T6107] usb 4-1: new high-speed USB device number 75 using dummy_hcd [ 2630.572216][ T6107] usb 4-1: config 0 has an invalid interface number: 22 but max is 0 [ 2630.581033][ T6107] usb 4-1: config 0 has no interface number 0 [ 2630.594944][ T6107] usb 4-1: New USB device found, idVendor=10b8, idProduct=1fa8, bcdDevice=d4.21 [ 2630.605771][ T6107] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2630.613884][ T6107] usb 4-1: Product: syz [ 2630.645585][ T6107] usb 4-1: Manufacturer: syz [ 2630.669811][ T6107] usb 4-1: SerialNumber: syz [ 2630.710103][ T6107] usb 4-1: config 0 descriptor?? [ 2630.928261][ T6107] dvb-usb: found a 'DiBcom NIM8096MD reference design' in warm state. [ 2630.938064][ T6107] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 2630.947895][ T6107] dvbdev: DVB: registering new adapter (DiBcom NIM8096MD reference design) [ 2630.956866][ T6107] usb 4-1: media controller created [ 2630.968769][ T6107] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 2631.002074][ T6107] DVB: Unable to find symbol dib8000_attach() [ 2631.008373][ T6107] dvb-usb: no frontend was attached by 'DiBcom NIM8096MD reference design' [ 2631.025312][ T4768] usb 5-1: new full-speed USB device number 15 using dummy_hcd [ 2631.065755][ T6107] rc_core: IR keymap rc-dib0700-rc5 not found [ 2631.073585][ T6107] Registered IR keymap rc-empty [ 2631.081488][ T6107] dvb-usb: could not initialize remote control. [ 2631.092934][ T6107] dvb-usb: DiBcom NIM8096MD reference design successfully initialized and connected. [ 2631.156109][ T6107] usb 4-1: USB disconnect, device number 75 [ 2631.195407][ T4768] usb 5-1: device descriptor read/64, error -71 [ 2631.207972][ T6107] dvb-usb: DiBcom NIM8096MD reference design successfully deinitialized and disconnected. [ 2631.455221][ T4768] usb 5-1: new full-speed USB device number 16 using dummy_hcd [ 2631.642289][ T4768] usb 5-1: device descriptor read/64, error -71 [ 2632.261471][ T4768] usb usb5-port1: attempt power cycle [ 2633.465099][ T4768] usb 5-1: new full-speed USB device number 17 using dummy_hcd [ 2634.523003][ T4768] usb 5-1: device descriptor read/8, error -71 [ 2635.757379][ T9299] xt_TPROXY: Can be used only with -p tcp or -p udp [ 2636.704675][ T4768] usb 10-1: new high-speed USB device number 66 using dummy_hcd [ 2637.689682][ T4768] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 2637.705639][ T4768] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 2637.728175][ T4768] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 2637.745769][ T4768] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 2637.763820][ T4768] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 2637.784582][ T4768] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 2637.802843][ T4768] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 2637.815381][ T4768] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 2637.826545][ T4768] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 2637.851921][ T4768] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 2637.862718][ T4768] usb 10-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 2637.872287][ T4768] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2637.906143][ T4768] usb 10-1: config 0 descriptor?? [ 2638.562872][ T4768] usbhid 10-1:0.0: can't add hid device: -71 [ 2638.573349][ T4768] usbhid 10-1:0.0: probe with driver usbhid failed with error -71 [ 2638.900741][ T4768] usb 10-1: USB disconnect, device number 66 [ 2639.368767][ T9350] xt_TPROXY: Can be used only with -p tcp or -p udp [ 2640.062176][ T9366] No such timeout policy "syz1" [ 2641.571522][ T9389] 9pnet: p9_errstr2errno: server reported unknown error 1844674 [ 2642.274339][ T6107] usb 4-1: new high-speed USB device number 76 using dummy_hcd [ 2642.910908][ T6107] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 2642.948700][ T6107] usb 4-1: config 0 has no interfaces? [ 2642.973522][ T6107] usb 4-1: New USB device found, idVendor=17ef, idProduct=6047, bcdDevice= 0.00 [ 2642.984117][ T6107] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2642.997391][ T6107] usb 4-1: config 0 descriptor?? [ 2643.188037][ T9408] No such timeout policy "syz1" [ 2643.299889][ T4768] usb 4-1: USB disconnect, device number 76 [ 2644.212832][ T9396] Bluetooth: hci2: Opcode 0x0c1a failed: -110 [ 2644.314892][ T9396] Bluetooth: hci2: Error when powering off device on rfkill (-110) [ 2644.322931][T18475] Bluetooth: hci2: command 0x0406 tx timeout [ 2645.123868][ T9396] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 2645.138549][ T9396] Bluetooth: hci4: Error when powering off device on rfkill (-4) [ 2645.149426][ T9396] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 2645.159795][ T9396] Bluetooth: hci0: Error when powering off device on rfkill (-4) [ 2645.172758][ T9396] Bluetooth: hci5: Opcode 0x0c1a failed: -4 [ 2645.188569][ T9396] Bluetooth: hci5: Error when powering off device on rfkill (-4) [ 2645.253898][ T6107] usb 7-1: new high-speed USB device number 80 using dummy_hcd [ 2645.434278][ T6107] usb 7-1: Using ep0 maxpacket: 8 [ 2645.725569][ T6107] usb 7-1: config 0 has an invalid interface number: 1 but max is 0 [ 2645.832115][ T6107] usb 7-1: config 0 has no interface number 0 [ 2645.838318][ T6107] usb 7-1: config 0 interface 1 has no altsetting 0 [ 2645.847943][ T6107] usb 7-1: New USB device found, idVendor=10c4, idProduct=eac1, bcdDevice=70.2f [ 2645.857094][ T6107] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2645.865214][ T6107] usb 7-1: Product: syz [ 2645.869622][ T6107] usb 7-1: Manufacturer: syz [ 2645.874780][ T6107] usb 7-1: SerialNumber: syz [ 2645.970088][ T6107] usb 7-1: config 0 descriptor?? [ 2646.394025][ T6107] i2c-cp2615 7-1:0.1: probe with driver i2c-cp2615 failed with error -22 [ 2647.214452][ T6107] usb 7-1: USB disconnect, device number 80 [ 2647.683676][ T1209] usb 5-1: new high-speed USB device number 19 using dummy_hcd [ 2647.918852][ T1209] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 2647.929215][ T1209] usb 5-1: config 0 has no interfaces? [ 2647.944861][ T1209] usb 5-1: New USB device found, idVendor=17ef, idProduct=6047, bcdDevice= 0.00 [ 2647.981313][ T1209] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2648.001849][ T9464] ./file0: Can't lookup blockdev [ 2649.414901][ T1209] usb 5-1: config 0 descriptor?? [ 2650.573959][ T1218] usb 10-1: new high-speed USB device number 67 using dummy_hcd [ 2650.647081][ T1209] usb 5-1: USB disconnect, device number 19 [ 2650.916929][ T1218] usb 10-1: config 0 has an invalid interface number: 22 but max is 0 [ 2650.927506][ T1218] usb 10-1: config 0 has no interface number 0 [ 2650.952378][ T1218] usb 10-1: New USB device found, idVendor=10b8, idProduct=1fa8, bcdDevice=d4.21 [ 2650.968613][ T1218] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2651.004519][ T1218] usb 10-1: Product: syz [ 2651.008786][ T1218] usb 10-1: Manufacturer: syz [ 2651.070013][ T1295] ieee802154 phy1 wpan1: encryption failed: -22 [ 2651.154746][ T1218] usb 10-1: SerialNumber: syz [ 2651.313840][ T1218] usb 10-1: config 0 descriptor?? [ 2651.524559][ T1218] dvb-usb: found a 'DiBcom NIM8096MD reference design' in warm state. [ 2651.596957][ T1218] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 2651.606991][ T1218] dvbdev: DVB: registering new adapter (DiBcom NIM8096MD reference design) [ 2651.616287][ T1218] usb 10-1: media controller created [ 2651.630558][ T1218] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 2652.122402][ T1218] DVB: Unable to find symbol dib8000_attach() [ 2652.128634][ T1218] dvb-usb: no frontend was attached by 'DiBcom NIM8096MD reference design' [ 2652.143251][ T8584] usb 5-1: new high-speed USB device number 20 using dummy_hcd [ 2652.151794][ T6107] usb 9-1: new full-speed USB device number 48 using dummy_hcd [ 2652.183244][ T1218] rc_core: IR keymap rc-dib0700-rc5 not found [ 2652.189331][ T1218] Registered IR keymap rc-empty [ 2652.198897][ T1218] dvb-usb: could not initialize remote control. [ 2652.205225][ T1218] dvb-usb: DiBcom NIM8096MD reference design successfully initialized and connected. [ 2652.222345][ T1218] usb 10-1: USB disconnect, device number 67 [ 2652.298461][ T1218] dvb-usb: DiBcom NIM8096MD reference design successfully deinitialized and disconnected. [ 2652.308538][ T8584] usb 5-1: Using ep0 maxpacket: 8 [ 2652.315473][ T8584] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 2652.337602][ T6107] usb 9-1: unable to get BOS descriptor or descriptor too short [ 2652.349858][ T8584] usb 5-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 2652.366030][ T6107] usb 9-1: not running at top speed; connect to a high speed hub [ 2652.376783][ T8584] usb 5-1: New USB device found, idVendor=10c4, idProduct=eac1, bcdDevice=70.2f [ 2652.386150][ T8584] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2652.395132][ T8584] usb 5-1: Product: syz [ 2652.399503][ T8584] usb 5-1: Manufacturer: syz [ 2652.404227][ T8584] usb 5-1: SerialNumber: syz [ 2652.415878][ T8584] usb 5-1: config 0 descriptor?? [ 2652.420928][ T6107] usb 9-1: New USB device found, idVendor=04e8, idProduct=6889, bcdDevice=93.dd [ 2652.430224][ T6107] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2652.439898][ T6107] usb 9-1: Product: syz [ 2652.444162][ T6107] usb 9-1: Manufacturer: syz [ 2652.448826][ T6107] usb 9-1: SerialNumber: syz [ 2652.879589][ T6107] kalmia 9-1:106.0: probe with driver kalmia failed with error -22 [ 2652.898896][ T6107] usb 9-1: USB disconnect, device number 48 [ 2653.462823][ T9503] kvm: pic: non byte write [ 2653.471558][ T9503] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=3832186367 (7664372734 ns) > initial count (4194322 ns). Using initial count to start timer. [ 2653.553213][ T1218] usb 10-1: new high-speed USB device number 68 using dummy_hcd [ 2653.765496][ T1218] usb 10-1: config 0 interface 0 altsetting 14 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 2653.777862][ T1218] usb 10-1: config 0 interface 0 altsetting 14 endpoint 0x81 has invalid maxpacket 58624, setting to 1024 [ 2653.794431][ T1218] usb 10-1: config 0 interface 0 has no altsetting 0 [ 2653.801184][ T1218] usb 10-1: New USB device found, idVendor=057e, idProduct=2019, bcdDevice= 0.00 [ 2653.812081][ T1218] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2653.825188][ T1218] usb 10-1: config 0 descriptor?? [ 2653.830699][ T9498] raw-gadget.0 gadget.9: fail, usb_ep_enable returned -22 [ 2654.366284][ T1218] usbhid 10-1:0.0: can't add hid device: -71 [ 2654.382762][ T1218] usbhid 10-1:0.0: probe with driver usbhid failed with error -71 [ 2654.400531][ T1218] usb 10-1: USB disconnect, device number 68 [ 2654.596114][ T6107] usb 5-1: USB disconnect, device number 20 [ 2656.192914][ T1209] usb 4-1: new high-speed USB device number 77 using dummy_hcd [ 2656.372943][ T1209] usb 4-1: Using ep0 maxpacket: 8 [ 2656.393688][ T1209] usb 4-1: New USB device found, idVendor=2770, idProduct=9120, bcdDevice=6c.77 [ 2656.416589][ T1209] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2656.439073][ T1209] usb 4-1: Product: syz [ 2656.452830][ T1209] usb 4-1: Manufacturer: syz [ 2656.462844][ T1209] usb 4-1: SerialNumber: syz [ 2656.473760][ T1209] usb 4-1: config 0 descriptor?? [ 2656.504966][ T29] audit: type=1400 audit(1740668850.943:1840): avc: denied { bind } for pid=9550 comm="syz.4.9274" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 2656.534480][ T1209] gspca_main: sq905-2.14.0 probing 2770:9120 [ 2657.564010][ T1209] gspca_sq905: sq905_command: usb_control_msg failed (-110) [ 2657.575871][ T1209] sq905 4-1:0.0: probe with driver sq905 failed with error -110 [ 2659.665488][ T6107] usb 4-1: USB disconnect, device number 77 [ 2660.168309][ T9583] Bluetooth: hci0: Opcode 0x0401 failed: -22 [ 2662.502449][ T4067] Bluetooth: hci0: command tx timeout [ 2663.152403][ T1218] usb 4-1: new high-speed USB device number 78 using dummy_hcd [ 2663.676420][ T1218] usb 4-1: config 5 has an invalid interface number: 171 but max is 0 [ 2663.794350][ T1218] usb 4-1: config 5 has no interface number 0 [ 2663.805455][ T1218] usb 4-1: New USB device found, idVendor=0411, idProduct=0012, bcdDevice=2f.00 [ 2663.824002][ T1218] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2663.835747][ T1218] usb 4-1: Product: syz [ 2663.840051][ T1218] usb 4-1: Manufacturer: syz [ 2663.863196][ T1218] usb 4-1: SerialNumber: syz [ 2664.456448][ T1218] rtl8150 4-1:5.171: couldn't find required endpoints [ 2664.472266][ T1218] rtl8150 4-1:5.171: probe with driver rtl8150 failed with error -5 [ 2664.502330][ T1218] usb 4-1: USB disconnect, device number 78 [ 2666.130714][ T9648] overlayfs: failed to resolve './file0': -2 [ 2667.272062][ T8526] usb 7-1: new full-speed USB device number 81 using dummy_hcd [ 2667.912063][ T6107] usb 5-1: new full-speed USB device number 21 using dummy_hcd [ 2668.322231][ T6107] usb 5-1: device descriptor read/64, error -71 [ 2668.326807][ T8526] usb 7-1: config 5 has an invalid descriptor of length 0, skipping remainder of the config [ 2668.369142][ T8526] usb 7-1: config 5 has 0 interfaces, different from the descriptor's value: 1 [ 2668.422152][ T29] audit: type=1400 audit(1740668862.844:1841): avc: denied { write } for pid=9672 comm="syz.8.9310" name="msr" dev="devtmpfs" ino=87 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cpu_device_t tclass=chr_file permissive=1 [ 2668.688566][ T29] audit: type=1400 audit(1740668863.114:1842): avc: denied { ioctl } for pid=9672 comm="syz.8.9310" path="/dev/cpu/0/msr" dev="devtmpfs" ino=87 ioctlcmd=0x5503 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cpu_device_t tclass=chr_file permissive=1 [ 2668.689931][ T8526] usb 7-1: New USB device found, idVendor=3923, idProduct=718a, bcdDevice=d8.d7 [ 2668.730125][ T8526] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2668.741612][ T8526] usb 7-1: Product: syz [ 2668.741877][ T6107] usb 5-1: new full-speed USB device number 22 using dummy_hcd [ 2668.761917][ T8526] usb 7-1: Manufacturer: syz [ 2668.768719][ T8526] usb 7-1: SerialNumber: syz [ 2668.891968][ T6107] usb 5-1: device descriptor read/64, error -71 [ 2668.961886][ T4768] usb 4-1: new high-speed USB device number 79 using dummy_hcd [ 2669.002134][ T6107] usb usb5-port1: attempt power cycle [ 2669.011218][ T8584] usb 7-1: USB disconnect, device number 81 [ 2669.111926][ T4768] usb 4-1: Using ep0 maxpacket: 32 [ 2669.125596][ T4768] usb 4-1: config 4 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 2669.148368][ T4768] usb 4-1: config 4 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 2669.170827][ T4768] usb 4-1: New USB device found, idVendor=046d, idProduct=c314, bcdDevice= 0.40 [ 2669.187279][ T4768] usb 4-1: New USB device strings: Mfr=255, Product=255, SerialNumber=0 [ 2669.201812][ T4768] usb 4-1: Product: syz [ 2669.209140][ T4768] usb 4-1: Manufacturer: syz [ 2669.220699][ T4768] hub 4-1:4.0: USB hub found [ 2669.371890][ T6107] usb 5-1: new full-speed USB device number 23 using dummy_hcd [ 2669.393022][ T6107] usb 5-1: device descriptor read/8, error -71 [ 2669.424332][ T4768] hub 4-1:4.0: 2 ports detected [ 2669.486819][ T9692] overlayfs: failed to resolve './file0': -2 [ 2669.723431][ T6107] usb 5-1: new full-speed USB device number 24 using dummy_hcd [ 2669.806594][ T6107] usb 5-1: device descriptor read/8, error -71 [ 2670.513712][ T6107] usb usb5-port1: unable to enumerate USB device [ 2671.327176][T26763] usb 4-1: USB disconnect, device number 79 [ 2672.227778][ T9730] batadv0 speed is unknown, defaulting to 1000 [ 2672.283606][ T29] audit: type=1400 audit(1740668866.714:1843): avc: denied { write } for pid=9719 comm="syz.9.9326" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netrom_socket permissive=1 [ 2674.067479][ T9744] overlayfs: failed to resolve './file0': -2 [ 2676.248570][ T9764] kvm: pic: non byte write [ 2676.451407][T27739] usb 7-1: new full-speed USB device number 82 using dummy_hcd [ 2676.601327][T27739] usb 7-1: device descriptor read/64, error -71 [ 2676.621440][ T29] audit: type=1804 audit(1740668871.055:1844): pid=9782 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=invalid_pcr cause=ToMToU comm="syz.4.9339" name="/newroot/265/file1" dev="fuse" ino=1 res=1 errno=0 [ 2676.851448][T27739] usb 7-1: new full-speed USB device number 83 using dummy_hcd [ 2677.143066][T27739] usb 7-1: device descriptor read/64, error -71 [ 2677.221252][ T29] audit: type=1800 audit(1740668871.655:1845): pid=9782 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed(directio) comm="syz.4.9339" name="/" dev="fuse" ino=1 res=0 errno=0 [ 2677.261557][T27739] usb usb7-port1: attempt power cycle [ 2677.611253][T27739] usb 7-1: new full-speed USB device number 84 using dummy_hcd [ 2677.633978][T27739] usb 7-1: device descriptor read/8, error -71 [ 2677.911348][T27739] usb 7-1: new full-speed USB device number 85 using dummy_hcd [ 2677.971645][T27739] usb 7-1: device descriptor read/8, error -71 [ 2678.100228][T27739] usb usb7-port1: unable to enumerate USB device [ 2678.241339][ T9808] No such timeout policy "syz1" [ 2678.339602][ T9810] kvm: pic: non byte write [ 2679.304108][ T29] audit: type=1804 audit(1740668873.745:1846): pid=9828 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=invalid_pcr cause=ToMToU comm="syz.8.9356" name="/newroot/349/file1" dev="fuse" ino=1 res=1 errno=0 [ 2680.270899][T27739] usb 7-1: new high-speed USB device number 86 using dummy_hcd [ 2680.306112][ T29] audit: type=1800 audit(1740668874.745:1847): pid=9828 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed(directio) comm="syz.8.9356" name="/" dev="fuse" ino=1 res=0 errno=0 [ 2680.441732][T27739] usb 7-1: device descriptor read/64, error -71 [ 2680.864972][ T9844] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 2680.895626][T27739] usb 7-1: new high-speed USB device number 87 using dummy_hcd [ 2681.553027][T27739] usb 7-1: device descriptor read/64, error -71 [ 2681.767678][ T9852] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 2681.832810][ T9853] No such timeout policy "syz1" [ 2681.851122][ T8526] usb 5-1: new high-speed USB device number 25 using dummy_hcd [ 2681.998702][T27739] usb usb7-port1: attempt power cycle [ 2682.061033][ T8526] usb 5-1: Using ep0 maxpacket: 32 [ 2682.073460][ T8526] usb 5-1: config 4 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 2682.089120][ T8526] usb 5-1: config 4 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 2682.112927][ T8526] usb 5-1: New USB device found, idVendor=046d, idProduct=c314, bcdDevice= 0.40 [ 2682.177489][ T8526] usb 5-1: New USB device strings: Mfr=255, Product=255, SerialNumber=0 [ 2682.225988][ T8526] usb 5-1: Product: syz [ 2682.230901][ T8526] usb 5-1: Manufacturer: syz [ 2682.249535][ T8526] hub 5-1:4.0: USB hub found [ 2682.636162][ T8526] hub 5-1:4.0: 2 ports detected [ 2684.210606][ T8526] hub 5-1:4.0: activate --> -90 [ 2684.625311][T26763] usb 5-1: USB disconnect, device number 25 [ 2684.631480][ T8526] usb 5-1-port2: config error [ 2686.642292][ T9917] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 2687.373473][T26763] hid-generic 0000:0000:0000.001F: unknown main item tag 0x0 [ 2687.444066][T26763] hid-generic 0000:0000:0000.001F: hidraw0: HID v0.00 Device [syz1] on syz0 [ 2687.730577][ T6107] usb 10-1: new high-speed USB device number 69 using dummy_hcd [ 2688.570747][ T6107] usb 10-1: Using ep0 maxpacket: 8 [ 2688.821721][ T6107] usb 10-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 2688.834019][ T6107] usb 10-1: New USB device found, idVendor=05ac, idProduct=8501, bcdDevice=20.9d [ 2688.843711][ T6107] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=105 [ 2688.879291][ T6107] usb 10-1: SerialNumber: syz [ 2688.903514][ T6107] usb 10-1: config 0 descriptor?? [ 2689.488585][ T9955] Process accounting resumed [ 2689.676351][ T6107] usb 10-1: Found UVC 0.00 device (05ac:8501) [ 2689.701633][ T6107] usb 10-1: No valid video chain found. [ 2689.844554][ T6107] usb 10-1: USB disconnect, device number 69 [ 2690.490571][ T4768] usb 5-1: new high-speed USB device number 26 using dummy_hcd [ 2690.650893][ T4768] usb 5-1: Using ep0 maxpacket: 32 [ 2690.831450][ T4768] usb 5-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 2690.847331][ T4768] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 2691.599723][ T4768] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 2691.620665][ T4768] usb 5-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 2691.636601][ T4768] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2691.680636][ T4768] usb 5-1: config 0 descriptor?? [ 2691.710705][ T9962] raw-gadget.1 gadget.4: fail, usb_ep_enable returned -22 [ 2691.745052][ T9983] xt_TPROXY: Can be used only with -p tcp or -p udp [ 2691.746428][ T4768] hub 5-1:0.0: USB hub found [ 2692.100582][T26763] usb 4-1: new high-speed USB device number 80 using dummy_hcd [ 2692.142826][ T4768] hub 5-1:0.0: config failed, can't read hub descriptor (err -22) [ 2692.201404][ T4768] usbhid 5-1:0.0: can't add hid device: -71 [ 2692.231810][ T4768] usbhid 5-1:0.0: probe with driver usbhid failed with error -71 [ 2692.280587][T26763] usb 4-1: Using ep0 maxpacket: 32 [ 2692.291610][ T4768] usb 5-1: USB disconnect, device number 26 [ 2692.312832][T26763] usb 4-1: config 4 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 2692.344518][T26763] usb 4-1: config 4 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 2692.359853][T26763] usb 4-1: New USB device found, idVendor=046d, idProduct=c314, bcdDevice= 0.40 [ 2692.397541][T26763] usb 4-1: New USB device strings: Mfr=255, Product=255, SerialNumber=0 [ 2692.420411][T26763] usb 4-1: Product: syz [ 2692.424736][T26763] usb 4-1: Manufacturer: syz [ 2692.441334][T26763] hub 4-1:4.0: USB hub found [ 2692.610717][ T1218] usb 10-1: new high-speed USB device number 70 using dummy_hcd [ 2692.950610][ T1218] usb 10-1: Using ep0 maxpacket: 8 [ 2693.030309][ T1218] usb 10-1: config 0 has an invalid interface number: 1 but max is 0 [ 2693.114961][ T1218] usb 10-1: config 0 has no interface number 0 [ 2693.182968][ T1218] usb 10-1: config 0 interface 1 has no altsetting 0 [ 2693.266770][ T1218] usb 10-1: New USB device found, idVendor=10c4, idProduct=eac1, bcdDevice=70.2f [ 2693.319354][T26763] hub 4-1:4.0: 2 ports detected [ 2693.337925][ T1218] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2693.351124][ T1218] usb 10-1: Product: syz [ 2693.361643][ T1218] usb 10-1: Manufacturer: syz [ 2693.369932][ T1218] usb 10-1: SerialNumber: syz [ 2693.392987][ T1218] usb 10-1: config 0 descriptor?? [ 2693.443942][T10020] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=3832186367 (7664372734 ns) > initial count (4194322 ns). Using initial count to start timer. [ 2693.881226][ T1218] i2c-cp2615 10-1:0.1: probe with driver i2c-cp2615 failed with error -22 [ 2694.072324][ T8526] usb 10-1: USB disconnect, device number 70 [ 2694.083960][T26763] usb 4-1: USB disconnect, device number 80 [ 2694.136217][T10030] [ 2694.138550][T10030] ====================================================== [ 2694.145541][T10030] WARNING: possible circular locking dependency detected [ 2694.152540][T10030] 6.14.0-rc4-syzkaller-00090-gdd83757f6e68 #0 Not tainted [ 2694.159615][T10030] ------------------------------------------------------ [ 2694.166599][T10030] syz.4.9413/10030 is trying to acquire lock: [ 2694.172633][T10030] ffff888022364488 (&of->mutex){+.+.}-{4:4}, at: kernfs_fop_write_iter+0x27b/0x500 [ 2694.181913][T10030] [ 2694.181913][T10030] but task is already holding lock: [ 2694.189246][T10030] ffff888012f8dc68 (&pipe->mutex){+.+.}-{4:4}, at: pipe_lock+0x64/0x80 [ 2694.197473][T10030] [ 2694.197473][T10030] which lock already depends on the new lock. [ 2694.197473][T10030] [ 2694.207844][T10030] [ 2694.207844][T10030] the existing dependency chain (in reverse order) is: [ 2694.216824][T10030] [ 2694.216824][T10030] -> #3 (&pipe->mutex){+.+.}-{4:4}: [ 2694.224176][T10030] __mutex_lock+0x19b/0xb10 [ 2694.229174][T10030] pipe_lock+0x64/0x80 [ 2694.233737][T10030] iter_file_splice_write+0x1eb/0x10b0 [ 2694.239694][T10030] do_splice+0x146a/0x1f70 [ 2694.244604][T10030] __do_splice+0x327/0x360 [ 2694.249516][T10030] __x64_sys_splice+0x187/0x250 [ 2694.254860][T10030] do_syscall_64+0xcd/0x250 [ 2694.259855][T10030] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 2694.266247][T10030] [ 2694.266247][T10030] -> #2 (sb_writers#6){.+.+}-{0:0}: [ 2694.273603][T10030] mnt_want_write+0x6f/0x450 [ 2694.278690][T10030] ovl_rename+0x7f5/0x1890 [ 2694.283603][T10030] vfs_rename+0xf88/0x21f0 [ 2694.288514][T10030] do_renameat2+0xc5f/0xdd0 [ 2694.293508][T10030] __x64_sys_renameat2+0xe7/0x130 [ 2694.299023][T10030] do_syscall_64+0xcd/0x250 [ 2694.304022][T10030] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 2694.310412][T10030] [ 2694.310412][T10030] -> #1 (&ovl_i_mutex_dir_key[depth]){++++}-{4:4}: [ 2694.319063][T10030] down_read+0x9a/0x330 [ 2694.323711][T10030] walk_component+0x342/0x5b0 [ 2694.328892][T10030] path_lookupat+0x17f/0x770 [ 2694.333989][T10030] filename_lookup+0x221/0x5f0 [ 2694.339241][T10030] kern_path+0x35/0x50 [ 2694.343797][T10030] lookup_bdev+0xd9/0x280 [ 2694.348616][T10030] resume_store+0x1d8/0x460 [ 2694.353608][T10030] kobj_attr_store+0x55/0x80 [ 2694.358688][T10030] sysfs_kf_write+0x117/0x170 [ 2694.363858][T10030] kernfs_fop_write_iter+0x33d/0x500 [ 2694.369644][T10030] vfs_write+0x5ae/0x1150 [ 2694.374486][T10030] ksys_write+0x12b/0x250 [ 2694.379318][T10030] do_syscall_64+0xcd/0x250 [ 2694.384322][T10030] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 2694.390724][T10030] [ 2694.390724][T10030] -> #0 (&of->mutex){+.+.}-{4:4}: [ 2694.397913][T10030] __lock_acquire+0x249e/0x3c40 [ 2694.403264][T10030] lock_acquire.part.0+0x11b/0x380 [ 2694.408875][T10030] __mutex_lock+0x19b/0xb10 [ 2694.413870][T10030] kernfs_fop_write_iter+0x27b/0x500 [ 2694.419648][T10030] iter_file_splice_write+0x90f/0x10b0 [ 2694.425605][T10030] do_splice+0x146a/0x1f70 [ 2694.430542][T10030] __do_splice+0x327/0x360 [ 2694.435472][T10030] __x64_sys_splice+0x187/0x250 [ 2694.440839][T10030] do_syscall_64+0xcd/0x250 [ 2694.445841][T10030] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 2694.452229][T10030] [ 2694.452229][T10030] other info that might help us debug this: [ 2694.452229][T10030] [ 2694.462426][T10030] Chain exists of: [ 2694.462426][T10030] &of->mutex --> sb_writers#6 --> &pipe->mutex [ 2694.462426][T10030] [ 2694.474473][T10030] Possible unsafe locking scenario: [ 2694.474473][T10030] [ 2694.481890][T10030] CPU0 CPU1 [ 2694.487222][T10030] ---- ---- [ 2694.492554][T10030] lock(&pipe->mutex); [ 2694.496678][T10030] lock(sb_writers#6); [ 2694.503324][T10030] lock(&pipe->mutex); [ 2694.509964][T10030] lock(&of->mutex); [ 2694.513916][T10030] [ 2694.513916][T10030] *** DEADLOCK *** [ 2694.513916][T10030] [ 2694.522028][T10030] 2 locks held by syz.4.9413/10030: [ 2694.527190][T10030] #0: ffff888078eb8420 (sb_writers#12){.+.+}-{0:0}, at: __do_splice+0x327/0x360 [ 2694.536306][T10030] #1: ffff888012f8dc68 (&pipe->mutex){+.+.}-{4:4}, at: pipe_lock+0x64/0x80 [ 2694.544985][T10030] [ 2694.544985][T10030] stack backtrace: [ 2694.550848][T10030] CPU: 0 UID: 0 PID: 10030 Comm: syz.4.9413 Not tainted 6.14.0-rc4-syzkaller-00090-gdd83757f6e68 #0 [ 2694.550864][T10030] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 2694.550872][T10030] Call Trace: [ 2694.550877][T10030] [ 2694.550884][T10030] dump_stack_lvl+0x116/0x1f0 [ 2694.550903][T10030] print_circular_bug+0x490/0x760 [ 2694.550922][T10030] check_noncircular+0x31a/0x400 [ 2694.550940][T10030] ? __pfx_check_noncircular+0x10/0x10 [ 2694.550961][T10030] ? lock_acquire.part.0+0x11b/0x380 [ 2694.550980][T10030] ? lockdep_lock+0xc6/0x200 [ 2694.550994][T10030] ? __pfx_lockdep_lock+0x10/0x10 [ 2694.551009][T10030] __lock_acquire+0x249e/0x3c40 [ 2694.551029][T10030] ? __pfx___lock_acquire+0x10/0x10 [ 2694.551047][T10030] ? hlock_class+0x4e/0x130 [ 2694.551061][T10030] lock_acquire.part.0+0x11b/0x380 [ 2694.551078][T10030] ? kernfs_fop_write_iter+0x27b/0x500 [ 2694.551095][T10030] ? __pfx_lock_acquire.part.0+0x10/0x10 [ 2694.551114][T10030] ? rcu_is_watching+0x12/0xc0 [ 2694.551128][T10030] ? trace_lock_acquire+0x14e/0x1f0 [ 2694.551142][T10030] ? kernfs_fop_write_iter+0x27b/0x500 [ 2694.551157][T10030] ? lock_acquire+0x2f/0xb0 [ 2694.551174][T10030] ? kernfs_fop_write_iter+0x27b/0x500 [ 2694.551190][T10030] __mutex_lock+0x19b/0xb10 [ 2694.551205][T10030] ? kernfs_fop_write_iter+0x27b/0x500 [ 2694.551220][T10030] ? __asan_memcpy+0x3c/0x60 [ 2694.551240][T10030] ? kernfs_fop_write_iter+0x27b/0x500 [ 2694.551256][T10030] ? __pfx___mutex_lock+0x10/0x10 [ 2694.551271][T10030] ? __pfx__copy_from_iter+0x10/0x10 [ 2694.551285][T10030] ? __virt_addr_valid+0x5e/0x590 [ 2694.551299][T10030] ? __phys_addr_symbol+0x30/0x80 [ 2694.551313][T10030] ? kernfs_fop_write_iter+0x27b/0x500 [ 2694.551328][T10030] kernfs_fop_write_iter+0x27b/0x500 [ 2694.551345][T10030] iter_file_splice_write+0x90f/0x10b0 [ 2694.551369][T10030] ? __pfx_iter_file_splice_write+0x10/0x10 [ 2694.551391][T10030] ? __pfx_lock_acquire.part.0+0x10/0x10 [ 2694.551410][T10030] ? __do_splice+0x327/0x360 [ 2694.551430][T10030] ? __pfx_iter_file_splice_write+0x10/0x10 [ 2694.551450][T10030] do_splice+0x146a/0x1f70 [ 2694.551469][T10030] ? kmem_cache_free+0x2e2/0x4d0 [ 2694.551484][T10030] ? __pfx_do_splice+0x10/0x10 [ 2694.551502][T10030] ? __pfx_pipe_clear_nowait+0x10/0x10 [ 2694.551519][T10030] ? __pfx_lock_release+0x10/0x10 [ 2694.551536][T10030] ? trace_lock_acquire+0x14e/0x1f0 [ 2694.551551][T10030] __do_splice+0x327/0x360 [ 2694.551571][T10030] ? __pfx___do_splice+0x10/0x10 [ 2694.551589][T10030] ? __fget_files+0x206/0x3a0 [ 2694.551604][T10030] __x64_sys_splice+0x187/0x250 [ 2694.551624][T10030] do_syscall_64+0xcd/0x250 [ 2694.551641][T10030] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 2694.551659][T10030] RIP: 0033:0x7f254398d169 [ 2694.551670][T10030] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 2694.551683][T10030] RSP: 002b:00007f2544774038 EFLAGS: 00000246 ORIG_RAX: 0000000000000113 [ 2694.551695][T10030] RAX: ffffffffffffffda RBX: 00007f2543ba5fa0 RCX: 00007f254398d169 [ 2694.551704][T10030] RDX: 0000000000000006 RSI: 0000000000000000 RDI: 0000000000000003 [ 2694.551711][T10030] RBP: 00007f2543a0e2a0 R08: 0000200000000008 R09: 0000000000000000 [ 2694.551719][T10030] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 2694.551727][T10030] R13: 0000000000000000 R14: 00007f2543ba5fa0 R15: 00007ffd6e7e4888 [ 2694.551739][T10030]