last executing test programs: 14m51.321483378s ago: executing program 32 (id=1385): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) pipe(&(0x7f00000000c0)) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) sendmsg(r1, &(0x7f0000000280)={0x0, 0x0, 0x0}, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0xb4b, 0x9, 0x8, 0x0, 0x400003}, 0x0) getsockopt$CAN_RAW_LOOPBACK(0xffffffffffffffff, 0x65, 0x20, 0x0, &(0x7f0000001040)=0x5d) syz_usb_connect(0x0, 0x5f, 0x0, 0x0) r2 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r2, &(0x7f0000000080)={0x2, 0x4e23, @local}, 0x10) sendto$inet(r2, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r2, 0x6, 0xd, &(0x7f0000000100)='bbr\x00', 0x4) r3 = socket$nl_sock_diag(0x10, 0x3, 0x4) sendmsg$TCPDIAG_GETSOCK(r3, 0x0, 0x40000) write$6lowpan_control(0xffffffffffffffff, &(0x7f0000000180)='connect aa:aa:aa:aa:aa:11 0', 0x1b) r4 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) r5 = inotify_init1(0x0) inotify_add_watch(r5, &(0x7f0000000180)='./control\x00', 0x64000ba6) inotify_add_watch(r5, &(0x7f0000000180)='./control\x00', 0xa4000960) ioctl$SNDCTL_DSP_SETFRAGMENT(r4, 0xc004500a, &(0x7f0000000000)=0xffff0018) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r6, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)={0x44, 0x2, 0x6, 0x5, 0x0, 0x0, {}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_HASHSIZE={0x8}]}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}, @IPSET_ATTR_REVISION={0x5, 0x4, 0x1}]}, 0x44}, 0x1, 0x0, 0x0, 0x4004000}, 0x40080) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_FLUSH(r7, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000100)={0x1c, 0x4, 0x6, 0x101, 0x0, 0x0, {}, [@IPSET_ATTR_PROTOCOL={0x5}]}, 0x1c}}, 0x0) 14m17.773590421s ago: executing program 33 (id=1432): socket$inet_icmp_raw(0x2, 0x3, 0x1) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5) close(0x4) syz_open_procfs$namespace(0x0, &(0x7f0000000200)='ns/pid_for_children\x00') unshare(0x6a040000) ioctl$sock_netrom_SIOCADDRT(0xffffffffffffffff, 0x6180, 0x0) sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000003940)=[{{0x0, 0x0, 0x0}}, {{&(0x7f0000000140)={0xa, 0x4e23, 0xe52, @ipv4={'\x00', '\xff\xff', @rand_addr=0x64010101}, 0x789c}, 0x1c, 0x0}}], 0x2, 0xc0000) 7m49.294455785s ago: executing program 0 (id=2396): r0 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000000), 0x180300, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x100008b}, 0x0) sched_setaffinity(0x0, 0x11, &(0x7f0000000180)=0x1400200bce) socket(0x29, 0x6, 0xfffffff8) sched_setscheduler(0x0, 0x1, &(0x7f0000002200)=0x1) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f000001b700)=""/102392, 0x18ff8) bpf$PROG_LOAD(0x5, 0x0, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) bind$netlink(0xffffffffffffffff, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) socket(0x200000000000011, 0x2, 0x0) sendmsg$nl_route(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000240)=ANY=[@ANYBLOB="3c00000010ec04ff1a000000000000000000004a", @ANYRES32=0x0, @ANYBLOB="0000000000000000140012800b000100", @ANYRES32=0x0, @ANYBLOB], 0x3c}}, 0x0) ioctl$FBIOPUT_VSCREENINFO(r0, 0x4601, 0x0) socket$netlink(0x10, 0x3, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000700)=ANY=[@ANYBLOB="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"], 0x118}}, 0x0) 7m47.006512802s ago: executing program 0 (id=2401): r0 = openat$rdma_cm(0xffffffffffffff9c, 0x0, 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000140)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000040), 0x106}}, 0x20) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x800}, 0x40000) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f00000003c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) mount$9p_virtio(0x0, &(0x7f0000000480)='./file0\x00', &(0x7f00000004c0), 0x0, 0x0) chdir(0x0) r4 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000015c0), 0x2, 0x0) r5 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r5, 0x3b81, &(0x7f0000000080)={0xc, 0x0, 0x0}) ioctl$IOMMU_VFIO_IOAS$SET(r5, 0x3b88, &(0x7f00000000c0)={0xc, r6}) ioctl$IOMMU_VFIO_SET_IOMMU(r5, 0x3b66, 0x3) ioctl$VHOST_SET_VRING_ADDR(r4, 0x4028af11, &(0x7f0000000140)={0x0, 0x0, 0x0, &(0x7f00000002c0)=""/77, 0x0}) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TEMPO(0xffffffffffffffff, 0x402c5342, &(0x7f0000005480)={0x0, 0x8, 0x3cdb, {0x0, 0x10000}}) 7m45.702303734s ago: executing program 0 (id=2405): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000002c0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWRULE={0x5c, 0x6, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x1}, [@NFTA_RULE_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_RULE_EXPRESSIONS={0x30, 0x4, 0x0, 0x1, [{0x2c, 0x1, 0x0, 0x1, @limit={{0xa}, @val={0x1c, 0x2, 0x0, 0x1, [@NFTA_LIMIT_RATE={0xc, 0x1, 0x1, 0x0, 0x7}, @NFTA_LIMIT_UNIT={0xc, 0x2, 0x1, 0x0, 0x1}]}}}]}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}, @NFT_MSG_DELFLOWTABLE={0x14, 0x18, 0xa, 0x301, 0x0, 0x0, {0x7, 0x0, 0x2}}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x98}, 0x1, 0x0, 0x0, 0x4000850}, 0x24000000) 7m43.77738635s ago: executing program 0 (id=2410): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)=ANY=[@ANYBLOB="0200000004000000080000000100000080"], 0x48) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB], 0x48) r1 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000001300)={0x0, r1}, 0x18) prlimit64(0x0, 0xe, &(0x7f0000000900)={0x7, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x1) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0xfffffffffffffffe) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) syz_open_dev$tty1(0xc, 0x4, 0x1) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x900}, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) connect$inet6(r3, 0x0, 0x0) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r3, 0x6, 0x14, 0x0, 0x0) setsockopt$inet6_tcp_TCP_REPAIR_WINDOW(r3, 0x6, 0x1d, &(0x7f0000000280), 0x14) setsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0x3, 0x0, 0x0) setsockopt$ALG_SET_KEY(0xffffffffffffffff, 0x117, 0x1, 0x0, 0x0) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f00000006c0)={r0}, 0x4) 7m42.205720613s ago: executing program 0 (id=2417): bpf$TOKEN_CREATE(0x24, &(0x7f0000000380), 0x8) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x14, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd}, 0x94) syz_init_net_socket$nfc_llcp(0x27, 0x2, 0x1) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) mount$tmpfs(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000100), 0x0, 0x0) mount$tmpfs(0x0, &(0x7f0000000180)='./file0\x00', 0x0, 0x84022, &(0x7f00000000c0)={[{@grpquota_inode_hardlimit={'grpquota_inode_hardlimit', 0x3d, [0x38]}}]}) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000180), 0xffffffffffffffff) sendmsg$L2TP_CMD_TUNNEL_GET(r3, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000900)={&(0x7f00000003c0)=ANY=[@ANYBLOB="14000000", @ANYRES16=r4, @ANYBLOB="0d0726bd7000fbdbdf2504000000db6d93163dacff3a4cd2d7803392e4b3437d874b688b7650874559f9a28b9dacebee5bd6e6907ff40716e4fa1edd336c49b2953b538ac8fa27a7b0a1b6045c0a94fc321c535090e04babff29039c6ddc20f8eb954f5842120b5caec3d4"], 0x14}, 0x1, 0x0, 0x0, 0x4040}, 0x8000) 7m41.08063383s ago: executing program 0 (id=2419): connect$inet(0xffffffffffffffff, &(0x7f0000000180)={0x2, 0x0, @remote}, 0x10) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = openat$udambuf(0xffffffffffffff9c, &(0x7f0000000040), 0x2) r3 = memfd_create(&(0x7f0000000080)='y\x105\xfb\xf7u\x83%:r\xc2\xb9x\xa4q\xc1\xea\x7f\x8cZ7`_4t\xcda\x9b\x11\x11\x0e\xa1\xcf\x00'/51, 0x2) ftruncate(r3, 0x1000006) fcntl$addseals(r3, 0x409, 0x7) ioctl$UDMABUF_CREATE(r2, 0x40187542, &(0x7f0000000000)={r3, 0x0, 0x0, 0x1000000}) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x102}, 0x0) sched_setscheduler(0x0, 0x2, 0x0) socketpair$unix(0x1, 0x2, 0x0, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, 0x0) openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) open_tree(0xffffffffffffffff, &(0x7f00000001c0)='\x00', 0x89901) socket$igmp6(0xa, 0x3, 0x2) pipe(0x0) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0e0000"], 0x48) 7m25.307226943s ago: executing program 34 (id=2419): connect$inet(0xffffffffffffffff, &(0x7f0000000180)={0x2, 0x0, @remote}, 0x10) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = openat$udambuf(0xffffffffffffff9c, &(0x7f0000000040), 0x2) r3 = memfd_create(&(0x7f0000000080)='y\x105\xfb\xf7u\x83%:r\xc2\xb9x\xa4q\xc1\xea\x7f\x8cZ7`_4t\xcda\x9b\x11\x11\x0e\xa1\xcf\x00'/51, 0x2) ftruncate(r3, 0x1000006) fcntl$addseals(r3, 0x409, 0x7) ioctl$UDMABUF_CREATE(r2, 0x40187542, &(0x7f0000000000)={r3, 0x0, 0x0, 0x1000000}) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x102}, 0x0) sched_setscheduler(0x0, 0x2, 0x0) socketpair$unix(0x1, 0x2, 0x0, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, 0x0) openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) open_tree(0xffffffffffffffff, &(0x7f00000001c0)='\x00', 0x89901) socket$igmp6(0xa, 0x3, 0x2) pipe(0x0) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0e0000"], 0x48) 4m37.901711082s ago: executing program 7 (id=2974): ioctl$IOMMU_IOAS_ALLOC(0xffffffffffffffff, 0x3b81, 0x0) syz_usb_connect(0x1, 0x2d, &(0x7f0000000340)=ANY=[@ANYBLOB="120100001ddf8208c007121522300000000109021b0001000000010904010001faf40d00090582"], 0x0) syz_open_dev$char_usb(0xc, 0xb4, 0x800000000000) r0 = syz_io_uring_setup(0x172, &(0x7f0000000780)={0x0, 0x4f5c, 0x10100, 0xfffffffe, 0x2a0}, &(0x7f00000001c0)=0x0, &(0x7f0000000140)=0x0) syz_open_dev$evdev(&(0x7f0000000000), 0x5, 0x440100) syz_io_uring_submit(r1, r2, &(0x7f0000000180)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x4, 0x0, 0x0}) io_uring_enter(r0, 0x567, 0x0, 0x0, 0x0, 0x0) 4m36.212021583s ago: executing program 7 (id=2984): r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000080)='net/protocols\x00') r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r1}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x1000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000001a300)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) read$FUSE(r0, &(0x7f00000030c0)={0x2020}, 0x2020) 4m35.124781259s ago: executing program 7 (id=2986): r0 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000bc0)=@raw={'raw\x00', 0x3c1, 0x3, 0x380, 0x0, 0x4c, 0x1a, 0x160, 0x73, 0x2b0, 0x258, 0x258, 0x2b0, 0x258, 0x3, 0x0, {[{{@ipv6={@private0, @local, [], [], 'dvmrp1\x00', 'macvlan1\x00', {}, {}, 0x73}, 0x0, 0x118, 0x160, 0x0, {}, [@common=@inet=@l2tp={{0x30}, {0x0, 0x0, 0x3, 0x0, 0x7}}, @common=@unspec=@connlimit={{0x40}}]}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x1, 0x0, 0x0, 0x0, 'syz0\x00'}}}, {{@uncond, 0x0, 0x120, 0x150, 0x0, {}, [@inet=@rpfilter={{0x28}}, @common=@inet=@multiport={{0x50}, {0x1, 0x4, [0x4e22, 0x4e20, 0x4e24, 0x8, 0x4e21, 0x4e22, 0x4e23, 0x4e21, 0x4e21, 0x4e23, 0x4e22, 0x4e20, 0x4e23, 0x4e21, 0x4e24], [0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1], 0x1}}]}, @common=@inet=@SET2={0x30}}], {{'\x00', 0x0, 0xa8, 0xd0, 0x0, {0x0, 0x5400}}, {0x28}}}}, 0x3e0) creat(&(0x7f00000011c0)='./file0\x00', 0x0) socketpair$unix(0x1, 0x3, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f00c00e}, 0x0) read$msr(0xffffffffffffffff, &(0x7f0000019680)=""/102392, 0x18ff8) connect$inet(0xffffffffffffffff, 0x0, 0x0) setsockopt$SO_RDS_TRANSPORT(0xffffffffffffffff, 0x114, 0x8, &(0x7f00000008c0)=0x2, 0x4) bind$inet(0xffffffffffffffff, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000001c0)={0x1c, 0x4, &(0x7f0000000040)=@framed={{0x18, 0x7}, [@exit]}, &(0x7f0000000000)='GPL\x00'}, 0x94) mkdir(&(0x7f0000002200)='./file0\x00', 0x0) r1 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000042c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r1, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) write$FUSE_NOTIFY_STORE(r1, &(0x7f00000003c0)={0x28, 0x4, 0x0, {0x1, 0x1}}, 0x28) r2 = syz_io_uring_setup(0x49a, &(0x7f0000000400)={0x0, 0x79af, 0x3180, 0x8000, 0x40024e}, &(0x7f0000000080)=0x0, &(0x7f0000000040)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r3, 0x4, &(0x7f0000000000)=0xffb, 0x0, 0x4) syz_io_uring_submit(r3, r4, &(0x7f00000002c0)=@IORING_OP_TIMEOUT={0xb, 0x11, 0x0, 0x0, 0x0, &(0x7f0000000100), 0x1, 0x40, 0x1}) io_uring_enter(r2, 0x628, 0xc88d, 0x43, 0x0, 0x0) mount$nfs(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000100), 0x400, &(0x7f0000000140)={[{'nointr'}]}) bpf$PROG_LOAD(0x5, &(0x7f0000000400)={0x16, 0x5, &(0x7f0000000500)=ANY=[@ANYBLOB="18020000020000000000000000000000850000001100000085000000b200000095"], &(0x7f0000000000)='syzkaller\x00', 0x4, 0x0, 0x0, 0x41100, 0x7, '\x00', 0x0, @fallback=0x35, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x3}, 0x94) 4m33.892830705s ago: executing program 7 (id=2993): bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x6, 0xb, &(0x7f0000000540)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020642500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb402000008000000b703000034120000850000007100000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @xdp=0x25, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) pipe(&(0x7f0000000440)) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x0) mount$fuse(0x0, 0x0, 0x0, 0x2b38094, &(0x7f0000000400)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=0x0]) mount(0x0, &(0x7f0000000380)='./file1\x00', &(0x7f0000000040)='autofs\x00', 0x0, &(0x7f0000000400)) chdir(&(0x7f0000000080)='./file1\x00') r0 = open(&(0x7f0000000000)='.\x00', 0x800000, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f00000001c0)='./file0/file0\x00', 0x1c0) mount$tmpfs(0x0, &(0x7f0000000200)='./file0/file0\x00', &(0x7f0000000240), 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x18, 0x4, &(0x7f0000000180)=ANY=[@ANYRES32=r0], 0x0, 0x8, 0x28, 0x0, 0x0, 0x50, '\x00', 0x0, @fallback=0x3, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, r0}, 0x94) ioctl$AUTOFS_IOC_PROTOSUBVER(r0, 0x40049366, &(0x7f0000000180)) 4m32.755954734s ago: executing program 7 (id=2996): ioctl$IOMMU_IOAS_ALLOC(0xffffffffffffffff, 0x3b81, 0x0) syz_usb_connect(0x1, 0x2d, &(0x7f0000000340)=ANY=[@ANYBLOB="120100001ddf8208c007121522300000000109021b0001000000010904010001faf40d0009058223"], 0x0) syz_open_dev$char_usb(0xc, 0xb4, 0x800000000000) r0 = syz_io_uring_setup(0x172, &(0x7f0000000780)={0x0, 0x4f5c, 0x10100, 0xfffffffe, 0x2a0}, &(0x7f00000001c0)=0x0, &(0x7f0000000140)=0x0) syz_open_dev$evdev(&(0x7f0000000000), 0x5, 0x440100) syz_io_uring_submit(r1, r2, &(0x7f0000000180)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x4, 0x0, 0x0}) io_uring_enter(r0, 0x567, 0x0, 0x0, 0x0, 0x0) 4m32.466235192s ago: executing program 7 (id=2997): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=ANY=[@ANYBLOB="300000001a000100000000000000ed798180800000000000"], 0x30}, 0x1, 0x0, 0x0, 0xc1}, 0x0) 4m31.628765038s ago: executing program 35 (id=2997): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=ANY=[@ANYBLOB="300000001a000100000000000000ed798180800000000000"], 0x30}, 0x1, 0x0, 0x0, 0xc1}, 0x0) 4m5.462563974s ago: executing program 1 (id=3067): bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="020000000400000006000000050000000010"], 0x48) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x48) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x11, 0xd, &(0x7f00000001c0)=ANY=[], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000600)={&(0x7f00000005c0)='sys_enter\x00', r0}, 0x10) mkdir(0x0, 0x0) 4m5.24093697s ago: executing program 1 (id=3069): syz_genetlink_get_family_id$nbd(0x0, 0xffffffffffffffff) sendmsg$NBD_CMD_CONNECT(0xffffffffffffffff, 0x0, 0x4000) syz_io_uring_submit(0x0, 0x0, &(0x7f00000001c0)=@IORING_OP_MADVISE={0x19, 0x40, 0x0, 0x0, 0x0, &(0x7f0000000000/0x2000)=nil, 0x2000, 0xf}) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) write$UHID_CREATE2(r0, &(0x7f00000001c0)=ANY=[@ANYBLOB="0e"], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x5, 0x12, r0, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000000)=@IORING_OP_WRITE={0x17, 0x10, 0x2007, @fd, 0x8, 0x0, 0x0, 0x2}) io_uring_enter(0xffffffffffffffff, 0x2d3e, 0x0, 0x0, 0x0, 0x0) 4m4.571429776s ago: executing program 1 (id=3071): socket$alg(0x26, 0x5, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$tipc(0xffffffffffffffff, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) write$sndseq(r0, &(0x7f0000000340), 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0) r1 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x2, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000002140)={{'fd', 0x3d, r1}, 0x2c, {'rootmode', 0x3d, 0x4000}}) write$FUSE_NOTIFY_INVAL_INODE(r1, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = syz_open_dev$MSR(&(0x7f0000000300), 0x0, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) r3 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDSKBENT(r3, 0x4b47, 0x0) sendmsg$alg(0xffffffffffffffff, 0x0, 0x0) ioctl$vim2m_VIDIOC_S_CTRL(0xffffffffffffffff, 0xc008561c, &(0x7f0000000140)={0xf0f045}) ppoll(&(0x7f0000000080)=[{0xffffffffffffffff, 0x2046}], 0x1, 0x0, 0x0, 0x0) 4m3.549800035s ago: executing program 1 (id=3073): bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x6, 0xb, &(0x7f0000000540)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020642500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb402000008000000b703000034120000850000007100000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @xdp=0x25, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) pipe(&(0x7f0000000440)) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x0) mount$fuse(0x0, 0x0, 0x0, 0x2b38094, &(0x7f0000000400)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=0x0]) mount(0x0, &(0x7f0000000380)='./file1\x00', &(0x7f0000000040)='autofs\x00', 0x0, &(0x7f0000000400)) chdir(&(0x7f0000000080)='./file1\x00') r0 = open(&(0x7f0000000000)='.\x00', 0x800000, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f00000001c0)='./file0/file0\x00', 0x1c0) mount$tmpfs(0x0, &(0x7f0000000200)='./file0/file0\x00', &(0x7f0000000240), 0x0, 0x0) ioctl$AUTOFS_IOC_PROTOSUBVER(r0, 0x40049366, &(0x7f0000000180)) 4m2.675528757s ago: executing program 1 (id=3076): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000640)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_CONNECT(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)=ANY=[@ANYBLOB='d\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="0500000000000b0000002e00000008000300", @ANYRES32=r2, @ANYBLOB="050034000000000004002a00080042000100000004001e0104001e010400cc0008004a"], 0x64}, 0x1, 0x0, 0x0, 0x4800}, 0x0) 3m59.921901936s ago: executing program 1 (id=3080): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000180)=@newqdisc={0x58, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {}, {0xffff, 0xffff}, {0x0, 0xfff1}}, [@qdisc_kind_options=@q_sfb={{0x8}, {0x2c, 0x2, @TCA_SFB_PARMS={0x28, 0x1, {0x1a3, 0x655c, 0x4, 0x40, 0x7fffffff, 0x7fffffff, 0x80, 0xffffffff, 0x1}}}}]}, 0x58}}, 0x0) setresuid(0x0, 0x0, 0x0) setfsuid(0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = socket$netlink(0x10, 0x3, 0xc) sendmsg$NFQNL_MSG_CONFIG(r0, 0x0, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4810}, 0x0) prlimit64(0x0, 0xe, &(0x7f00000000c0)={0x8, 0x8b}, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000000980)=""/102392, 0x18ff8) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$netlbl_cipso(&(0x7f0000000340), r3) sendmsg$NLBL_CIPSOV4_C_ADD(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000400)=ANY=[@ANYBLOB="08010000", @ANYRES16=r4, @ANYBLOB="0100000000000000000001000000080001000000000014000480050003000000000005000300000000000800020001000000d00008"], 0x108}}, 0x0) bind$packet(0xffffffffffffffff, &(0x7f0000000180)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev={'\xaa\xaa\xaa\xaa\xaa', 0xb}}, 0x14) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000080)={0x58, 0x2, 0x6, 0x3, 0x0, 0x0, {0x7}, [@IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_HASHSIZE={0x8, 0x12, 0x1, 0x0, 0xffff}]}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_TYPENAME={0x13, 0x3, 'hash:net,iface\x00'}]}, 0x58}, 0x1, 0x0, 0x0, 0x810}, 0x20004000) openat$tcp_mem(0xffffffffffffff9c, &(0x7f0000000080)='/proc/sys/net/ipv4/tcp_rmem\x00', 0x1, 0x0) sendmmsg(0xffffffffffffffff, &(0x7f00000002c0), 0x40000000000009f, 0x0) 3m59.389737547s ago: executing program 36 (id=3080): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000180)=@newqdisc={0x58, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {}, {0xffff, 0xffff}, {0x0, 0xfff1}}, [@qdisc_kind_options=@q_sfb={{0x8}, {0x2c, 0x2, @TCA_SFB_PARMS={0x28, 0x1, {0x1a3, 0x655c, 0x4, 0x40, 0x7fffffff, 0x7fffffff, 0x80, 0xffffffff, 0x1}}}}]}, 0x58}}, 0x0) setresuid(0x0, 0x0, 0x0) setfsuid(0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = socket$netlink(0x10, 0x3, 0xc) sendmsg$NFQNL_MSG_CONFIG(r0, 0x0, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4810}, 0x0) prlimit64(0x0, 0xe, &(0x7f00000000c0)={0x8, 0x8b}, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000000980)=""/102392, 0x18ff8) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$netlbl_cipso(&(0x7f0000000340), r3) sendmsg$NLBL_CIPSOV4_C_ADD(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000400)=ANY=[@ANYBLOB="08010000", @ANYRES16=r4, @ANYBLOB="0100000000000000000001000000080001000000000014000480050003000000000005000300000000000800020001000000d00008"], 0x108}}, 0x0) bind$packet(0xffffffffffffffff, &(0x7f0000000180)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev={'\xaa\xaa\xaa\xaa\xaa', 0xb}}, 0x14) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000080)={0x58, 0x2, 0x6, 0x3, 0x0, 0x0, {0x7}, [@IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_HASHSIZE={0x8, 0x12, 0x1, 0x0, 0xffff}]}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_TYPENAME={0x13, 0x3, 'hash:net,iface\x00'}]}, 0x58}, 0x1, 0x0, 0x0, 0x810}, 0x20004000) openat$tcp_mem(0xffffffffffffff9c, &(0x7f0000000080)='/proc/sys/net/ipv4/tcp_rmem\x00', 0x1, 0x0) sendmmsg(0xffffffffffffffff, &(0x7f00000002c0), 0x40000000000009f, 0x0) 2m56.652535421s ago: executing program 5 (id=3268): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xe, 0x4, 0x8, 0x7}, 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0xc, 0xd, &(0x7f0000000140)=ANY=[@ANYBLOB="1800000000000000000000000000000018150000", @ANYRES32=r0, @ANYBLOB], &(0x7f0000000400)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000005c0)={r1, 0x0, 0xe, 0x0, &(0x7f0000000640)="d9b9547ed3c0021a6fd6a67ab922", 0x0, 0x20000, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 2m55.929447268s ago: executing program 5 (id=3270): r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000080)='net/protocols\x00') r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r1}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x1000) connect$unix(0xffffffffffffffff, &(0x7f000001a300)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000000), 0x651, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) read$FUSE(r0, &(0x7f00000030c0)={0x2020}, 0x2020) 2m55.32192792s ago: executing program 5 (id=3272): syz_open_dev$dri(0x0, 0x1, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) sendmsg$NL80211_CMD_START_AP(r0, &(0x7f0000000000)={0x0, 0x0, 0x0}, 0x0) socket$nl_generic(0x10, 0x3, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x5, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000100)=0x2) sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bce) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000002000)=""/102400, 0x19000) getpid() r2 = openat$ptmx(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$TCSETS(r2, 0x40045431, 0x0) setsockopt$inet6_tcp_TCP_CONGESTION(0xffffffffffffffff, 0x6, 0xd, &(0x7f00000000c0)='dctcp\x00', 0x6) bind$inet6(0xffffffffffffffff, &(0x7f0000000000)={0xa, 0x3, 0x0, @loopback}, 0x1c) shutdown(0xffffffffffffffff, 0x2) 2m54.485886027s ago: executing program 5 (id=3274): bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x6, 0xb, &(0x7f0000000540)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020642500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb402000008000000b703000034120000850000007100000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @xdp=0x25, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) pipe(&(0x7f0000000440)) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x0) mount$fuse(0x0, 0x0, 0x0, 0x2b38094, &(0x7f0000000400)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=0x0]) mount(0x0, &(0x7f0000000380)='./file1\x00', &(0x7f0000000040)='autofs\x00', 0x0, &(0x7f0000000400)) chdir(&(0x7f0000000080)='./file1\x00') mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f00000001c0)='./file0/file0\x00', 0x1c0) mount$tmpfs(0x0, &(0x7f0000000200)='./file0/file0\x00', &(0x7f0000000240), 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x18, 0x4, &(0x7f0000000180)=ANY=[@ANYRES32], 0x0, 0x8, 0x28, 0x0, 0x0, 0x50, '\x00', 0x0, @fallback=0x3}, 0x94) ioctl$AUTOFS_IOC_PROTOSUBVER(0xffffffffffffffff, 0x40049366, &(0x7f0000000180)) 2m53.381597626s ago: executing program 5 (id=3276): r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x3) socket$pppl2tp(0x18, 0x1, 0x1) socket$inet6_udp(0xa, 0x2, 0x0) syz_genetlink_get_family_id$devlink(0x0, 0xffffffffffffffff) bpf$MAP_LOOKUP_ELEM(0x1, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x3) sched_setaffinity(0x0, 0x8, &(0x7f00000000c0)=0xa) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_GETPROPBLOB(0xffffffffffffffff, 0xc01064ac, 0x0) read$msr(r1, &(0x7f0000032680)=""/102400, 0x19000) r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000440), 0x2b00, 0x0) ioctl$TCSETS(r2, 0x40045431, &(0x7f0000000dc0)={0x0, 0x6, 0x1, 0x1, 0x10, "798200fc5a16884a00510900002000"}) syz_open_pts(r2, 0x0) r3 = dup(r0) sendmsg$nl_route_sched(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000dc0), 0x6df8}}, 0x0) 2m52.738140191s ago: executing program 5 (id=3280): r0 = syz_open_dev$usbmon(0x0, 0x7, 0x0) ioctl$MON_IOCX_MFETCH(r0, 0xc0109207, &(0x7f0000000080)={0x0}) ioctl$MON_IOCH_MFLUSH(r0, 0x9208, 0x6) syz_open_dev$usbfs(&(0x7f0000000000), 0x205, 0x44680) 2m51.83593s ago: executing program 37 (id=3280): r0 = syz_open_dev$usbmon(0x0, 0x7, 0x0) ioctl$MON_IOCX_MFETCH(r0, 0xc0109207, &(0x7f0000000080)={0x0}) ioctl$MON_IOCH_MFLUSH(r0, 0x9208, 0x6) syz_open_dev$usbfs(&(0x7f0000000000), 0x205, 0x44680) 15.569680745s ago: executing program 8 (id=3756): r0 = socket$alg(0x26, 0x5, 0x0) syz_io_uring_setup(0x83, &(0x7f0000000580)={0x0, 0xe7b7, 0x13500, 0x0, 0x352}, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) pipe2$9p(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r2, &(0x7f0000000300)=ANY=[@ANYBLOB="1500000065ffff017f000e0800395032303030"], 0x15) r3 = dup(r2) open(&(0x7f0000000100)='./file0\x00', 0x440, 0x0) write$FUSE_BMAP(r3, &(0x7f0000000000)={0x18, 0x0, 0x0, {0x3b9}}, 0x18) write$FUSE_DIRENTPLUS(r3, &(0x7f00000003c0)=ANY=[@ANYBLOB="b0"], 0xb0) write$FUSE_GETXATTR(r3, &(0x7f00000000c0)={0x18}, 0x18) write$FUSE_DIRENTPLUS(r3, &(0x7f00000005c0)=ANY=[@ANYBLOB="b900"], 0xb8) mount$9p_fd(0x0, &(0x7f0000000400)='./file0\x00', &(0x7f0000000080), 0x1010412, &(0x7f0000000780)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r1, @ANYBLOB=',wfdno=', @ANYRESHEX=r3, @ANYBLOB=',cache=fscache']) r4 = openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x20842, 0x22) writev(r4, &(0x7f0000000000)=[{&(0x7f00000006c0)='\t', 0x2003f}], 0x1) chmod(&(0x7f0000000040)='./file0\x00', 0x100) bind$alg(r0, &(0x7f0000000200)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-serpent-avx2\x00'}, 0x58) r5 = syz_open_dev$sg(&(0x7f00000060c0), 0x0, 0x8002) r6 = fcntl$dupfd(r5, 0x0, r5) write$sndseq(r6, &(0x7f0000000380)=[{0xff, 0x0, 0x3, 0x0, @tick=0x6, {}, {0xfe}, @result={0x1, 0x2}}, {0x0, 0x0, 0xff, 0x3, @time={0x8001, 0x8}, {0x8, 0x12}, {}, @addr={0x2a, 0x2}}], 0x38) readv(r6, &(0x7f00000003c0)=[{&(0x7f0000001140)=""/136, 0x88}], 0x1) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, 0x0, 0x0) r7 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000000)={'syz_tun\x00', 0x0}) sendmsg$nl_route(r7, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000300)=@newlink={0x28, 0x10, 0x403, 0x0, 0x25dfdbfb, {0x0, 0x0, 0x74, r8, 0x22820, 0x55007}, [@IFLA_TXQLEN={0x8, 0xd, 0x7d631b68}]}, 0x28}, 0x1, 0x0, 0x0, 0x41}, 0x24040840) r9 = accept(r0, 0x0, 0x0) sendmsg$IPCTNL_MSG_EXP_GET(r9, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000540)=ANY=[], 0x84}, 0x1, 0x0, 0x0, 0x8010}, 0x4008898) recvmsg(r9, &(0x7f000000b680)={0x0, 0xfffffe58, &(0x7f000000b600)=[{&(0x7f000000b4c0)=""/5, 0x4}, {&(0x7f000000b500)=""/153, 0xfb7b}], 0x2}, 0x0) sendto$inet6(r9, 0x0, 0x0, 0x24000044, 0x0, 0x0) 14.758514466s ago: executing program 3 (id=3761): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x2) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000001b00)=""/102392, 0x18ff8) r1 = openat$procfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) pread64(r1, &(0x7f0000002780)=""/59, 0x3b, 0xf27b) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000000200)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f00000001c0)={0x0}, 0x1, 0x0, 0x0, 0x40}, 0x4000) finit_module(0xffffffffffffffff, &(0x7f00000000c0)='/dev/nullb0\x00', 0x0) openat$binderfs(0xffffffffffffff9c, 0x0, 0x1002, 0x0) creat(&(0x7f0000000040)='./file0\x00', 0x0) open(0x0, 0x2002, 0x100) r2 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x8400, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r2, @ANYBLOB=',rootmode=00000000000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r2, &(0x7f0000006380)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r2, &(0x7f0000000040)={0x50, 0x0, r3, {0x7, 0x1f, 0x0, 0x200040, 0x0, 0x0, 0x0, 0xc49, 0x0, 0x0, 0x0, 0x1}}, 0x50) syz_fuse_handle_req(r2, &(0x7f00000021c0)="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", 0x2000, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000580)={0x20, 0x0, 0x0, {0x0, 0x27}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r4 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0xa4c81, 0x0) ioctl$BINDER_WRITE_READ(r4, 0xc0306201, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) 13.50586484s ago: executing program 4 (id=3762): syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newtaction={0xa4, 0x30, 0x1, 0x0, 0x0, {}, [{0x90, 0x1, [@m_ct={0x44, 0x1e, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0x9d, 0x11e41e7a, 0x20000000, 0x0, 0xf}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x1}}}}, @m_ife={0x48, 0x1, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0xa4}, 0x1, 0x0, 0x0, 0x800}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) r3 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) setsockopt$netrom_NETROM_T4(r3, 0x103, 0x6, &(0x7f0000001a40)=0xb, 0x4) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x0, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) mkdir(&(0x7f00000000c0)='./bus\x00', 0x0) mount$bind(&(0x7f00000002c0)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101091, 0x0) mkdir(&(0x7f0000000440)='./file1\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000a00)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}]}) chdir(&(0x7f00000001c0)='./bus\x00') rmdir(&(0x7f0000000380)='./file0/../file0\x00') 13.460312204s ago: executing program 2 (id=3763): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000300), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) r1 = eventfd(0xffffffff) bpf$PROG_LOAD(0x5, 0x0, 0x0) ioctl$VHOST_SET_LOG_FD(r0, 0x4004af07, &(0x7f0000000240)=r1) ioctl$VHOST_SET_VRING_KICK(r0, 0x4008af20, &(0x7f0000000040)={0x1, r1}) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000140)={0x0, 0x0, 0x0, &(0x7f0000000500)=""/67, 0x0}) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000280)={0x1, 0x1, 0x0, &(0x7f00000000c0)=""/87, &(0x7f0000000480)=""/74}) syz_usbip_server_init(0x3) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000000680)) ioctl$VHOST_VSOCK_SET_RUNNING(r0, 0x4004af61, 0x0) 13.042010156s ago: executing program 6 (id=3765): syz_open_dev$tty1(0xc, 0x4, 0x2) sendmsg$NBD_CMD_CONNECT(0xffffffffffffffff, 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce) syz_fuse_handle_req(0xffffffffffffffff, &(0x7f0000004140)="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", 0x2000, 0x0) madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00304, 0x15) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x1) r0 = syz_open_dev$MSR(&(0x7f0000000380), 0x0, 0x0) syz_open_dev$usbfs(0x0, 0x400000011ff, 0x101301) syz_io_uring_setup(0x22f, &(0x7f0000019140)={0x0, 0x8ffd, 0x10000, 0x0, 0x100002cf}, &(0x7f0000000000)=0x0, &(0x7f0000000040)=0x0) syz_io_uring_submit(r1, r2, &(0x7f00000009c0)=@IORING_OP_WRITE={0x17, 0x0, 0x0, @fd_index=0x3, 0x0, 0x0, 0xffffffffffffff31}) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) ioctl$SNDCTL_DSP_CHANNELS(0xffffffffffffffff, 0xc0045006, 0x0) r3 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) write$uinput_user_dev(r3, &(0x7f0000000a80)={'syz1\x00', {0xfffd}, 0x4a, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa, 0x1, 0x0, 0x0, 0x3, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x400, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000000], [0x0, 0x0, 0x2000, 0xfffffbff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x401, 0x0, 0x0, 0x20000000, 0x0, 0x0, 0xfffffffd, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000000, 0x0, 0x80, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x8000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x185], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe, 0x1000000, 0x0, 0x0, 0x9, 0x0, 0x3cc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe654, 0x0, 0xae, 0x0, 0x0, 0x88, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, 0x0, 0x2], [0xc, 0x4, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x8, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0xfffffffa, 0x0, 0x0, 0x0, 0x3, 0x4a9c, 0x4, 0x1, 0x0, 0x0, 0x8, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2ec2, 0x0, 0x80, 0x4]}, 0x45c) 11.997896357s ago: executing program 4 (id=3766): mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x102) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) mkdir(&(0x7f00000000c0)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000100)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}]}) chdir(&(0x7f00000001c0)='./bus\x00') r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000100)='.\x00', 0x0, 0x0) r1 = fanotify_init(0x200, 0x0) fanotify_mark(r1, 0x1, 0x4800003e, r0, 0x0) read$FUSE(r1, &(0x7f00000040c0)={0x2020}, 0x2020) open(0x0, 0x103bff, 0x111) 11.605811452s ago: executing program 6 (id=3767): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000200)=ANY=[@ANYBLOB="12010000000000100b060a5000000000000109022400010000500009040002010300000009210000000122f80409"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(0xffffffffffffffff, &(0x7f00000001c0)={0x2c, &(0x7f0000000040)=ANY=[@ANYBLOB="000706000000ff030902"], 0x0, 0x0, 0x0, 0x0}, 0x0) syz_usb_control_io$hid(r0, &(0x7f0000000340)={0x24, 0x0, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="00220508"], 0x0}, 0x0) 11.524082962s ago: executing program 3 (id=3768): syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) socket$nl_generic(0x10, 0x3, 0x10) mq_getsetattr(0xffffffffffffffff, &(0x7f0000000300)={0xb0000000, 0x6, 0x6, 0x8}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newtaction={0xa4, 0x30, 0x1, 0x0, 0x0, {}, [{0x90, 0x1, [@m_ct={0x44, 0x1e, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0x9d, 0x11e41e7a, 0x20000000, 0x0, 0xf}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x1}}}}, @m_ife={0x48, 0x1, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0xa4}, 0x1, 0x0, 0x0, 0x800}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) r3 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) setsockopt$netrom_NETROM_T4(r3, 0x103, 0x6, &(0x7f0000001a40)=0xb, 0x4) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) mkdir(&(0x7f00000000c0)='./bus\x00', 0x0) mount$bind(&(0x7f00000002c0)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101091, 0x0) mkdir(&(0x7f0000000440)='./file1\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000a00)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}, {@nfs_export_on}]}) chdir(&(0x7f00000001c0)='./bus\x00') rmdir(&(0x7f0000000380)='./file0/../file0\x00') r4 = socket$inet(0x2, 0x3, 0x4) sendmmsg$inet(r4, 0x0, 0x0, 0x400e000) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$SO_ATTACH_FILTER(r6, 0x1, 0x1a, &(0x7f0000000040)={0x2, &(0x7f0000000340)=[{0x20, 0xb, 0x3, 0xf663}, {0x6, 0x0, 0x3, 0x2}]}, 0x8) syz_io_uring_setup(0x2b2f, &(0x7f00000003c0)={0x0, 0xe63b, 0x20, 0x0, 0x27f}, &(0x7f0000000280), &(0x7f0000000440)) sendmmsg(r5, &(0x7f0000001c00), 0x400000000000159, 0x40840) 10.937162473s ago: executing program 9 (id=3769): sendmsg$NL80211_CMD_DISASSOCIATE(0xffffffffffffffff, 0x0, 0x24040800) r0 = socket$inet(0x2, 0x2, 0x0) setsockopt$sock_int(r0, 0x1, 0x2e, &(0x7f0000000180)=0x7b, 0x4) shutdown(r0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = syz_open_dev$MSR(&(0x7f0000000540), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) recvmmsg(r0, &(0x7f00000066c0), 0xa0d, 0x0, 0x0) 9.858007622s ago: executing program 3 (id=3770): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) r1 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r1, 0x8933, &(0x7f0000000000)={'vxcan1\x00', 0x0}) bind$can_j1939(r1, &(0x7f00000000c0)={0x1d, r2, 0x0, {0x0, 0x0, 0x2}, 0x1}, 0x18) connect$can_j1939(r1, &(0x7f0000000140)={0x1d, r2, 0x0, {0x1, 0xff, 0x1}, 0x2}, 0x18) sendmmsg(r1, &(0x7f0000003e40), 0x3fffffffffffe3d, 0xf5) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x2) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) r4 = socket$inet6(0xa, 0x3, 0x6) openat$comedi(0xffffffffffffff9c, &(0x7f0000000080)='/dev/comedi3\x00', 0xece2ed523b104b4b, 0x0) setsockopt$inet6_buf(r4, 0x29, 0x39, &(0x7f0000000040), 0x43) setsockopt$inet6_IPV6_HOPOPTS(r4, 0x29, 0x36, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, 0x0) sendmsg$NL802154_CMD_NEW_SEC_DEVKEY(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, 0x0}, 0x0) accept4$vsock_stream(0xffffffffffffffff, 0x0, 0x0, 0x80000) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) socket$kcm(0x2, 0x3, 0x2) bpf$OBJ_GET_PROG(0x7, &(0x7f00000000c0)=@generic={&(0x7f0000000080)='./file0\x00', 0x0, 0x8}, 0x18) ioctl$VHOST_SET_FEATURES(0xffffffffffffffff, 0x4008af00, &(0x7f0000000000)=0x200000000) write$vhost_msg_v2(0xffffffffffffffff, &(0x7f0000000200)={0x2, 0x0, {&(0x7f0000000340)=""/177, 0xb1, 0x0, 0x2, 0x2}}, 0x48) write$vhost_msg(0xffffffffffffffff, &(0x7f0000000540)={0x1, {&(0x7f0000000040)=""/62, 0x3e, 0x0, 0x2, 0x2}}, 0x48) write$vhost_msg_v2(0xffffffffffffffff, &(0x7f00000017c0)={0x2, 0x0, {&(0x7f00000005c0)=""/21, 0x15, 0x0, 0x2, 0x2}}, 0x48) 9.808328952s ago: executing program 2 (id=3771): r0 = syz_usb_connect(0x0, 0x24, &(0x7f00000007c0)=ANY=[@ANYBLOB="12010000ed3ec908cd0cb300ea2d010203010902120001000000000904"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, &(0x7f00000004c0)={0x1c, &(0x7f0000000540)=ANY=[], 0x0, 0x0}) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, &(0x7f0000000380)={0x24, &(0x7f0000000180)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) syz_usb_control_io$printer(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$uac1(r0, 0x0, 0x0) syz_usb_control_io$uac1(r0, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, &(0x7f0000000240)={0x1c, &(0x7f0000000140)={0x0, 0x11}, 0x0, 0x0}) 9.726923904s ago: executing program 4 (id=3772): sendmsg$IPSET_CMD_ADD(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={0x0}, 0x1, 0x0, 0x0, 0x10000082}, 0x80) r0 = socket$netlink(0x10, 0x3, 0xc) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000400)=ANY=[@ANYBLOB="540000000206010200000000000000000500000005000100060000000d000300686173683a6e6574000000000900020073797a31000000000c00078008000640000000400500050002000000050004"], 0x54}}, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000040)={0x38, 0x9, 0x6, 0x201, 0x0, 0x0, {}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_DATA={0x10, 0x7, 0x0, 0x1, [@IPSET_ATTR_IP={0xc, 0x1, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @loopback}}]}]}, 0x38}, 0x1, 0x0, 0x0, 0x10048047}, 0x4000050) sendmsg$IPSET_CMD_ADD(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000040)=ANY=[@ANYBLOB='8\x00\x00\x00\n'], 0x38}, 0x1, 0x0, 0x0, 0x10048047}, 0x4000050) sendmmsg(r0, &(0x7f00000002c0), 0x40000000000009f, 0x0) 9.557521999s ago: executing program 4 (id=3773): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f00000001c0)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, 0x0, 0x0) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r3 = io_uring_setup(0x669, &(0x7f00000002c0)) setresuid(0xffffffffffffffff, 0xffffffffffffffff, 0xee01) io_uring_register$IORING_REGISTER_PERSONALITY(r3, 0x9, 0x0, 0x0) setresuid(0x0, 0x0, 0x0) close_range(r3, 0xffffffffffffffff, 0x0) socket$packet(0x11, 0x3, 0x300) 8.722866193s ago: executing program 9 (id=3774): mkdir(&(0x7f0000000400)='./file0\x00', 0x9) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f00000000c0), 0x42, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x3, &(0x7f00000002c0)=@framed, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x3a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r4}, 0x10) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) sendto$inet6(r5, &(0x7f0000f6f000), 0xfffffffffffffea7, 0x20000004, &(0x7f0000b63fe4)={0xa, 0x2, 0x18115, @rand_addr, 0x983a}, 0x1c) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r5, 0x0, r6, 0x0, 0x406f413, 0x0) read$FUSE(r0, &(0x7f000000e280)={0x2020, 0x0, 0x0, 0x0}, 0x2020) syz_fuse_handle_req(r0, &(0x7f000000c280)="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", 0x2000, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000780)={0x90, 0x0, 0x0, {0x3, 0x0, 0x1, 0x0, 0x3, 0x0, {0x0, 0x0, 0x0, 0x40, 0x0, 0x8, 0x80, 0x0, 0x81, 0x1000, 0x10000, r8, 0x0, 0xd}}}, 0x0, 0x0, 0x0, 0x0, 0x0}) write$FUSE_INIT(r0, &(0x7f0000000380)={0x50, 0x0, r7, {0x7, 0x29, 0x0, 0x0, 0x0, 0x0, 0x100, 0x0, 0x0, 0x0, 0x0, 0x6}}, 0x50) link(&(0x7f0000000280)='./file0/../file0/file0\x00', &(0x7f0000000400)='./file0/../file0/file0\x00') syz_fuse_handle_req(r0, &(0x7f0000008280)="03680f2a20da68ab7a58c28b635d19c32b6efabb6ae3b5eee5a74d8943c613539e166c8baef50500824343a2f05093a5c21f746caefe9f9bccd83cca0fc28da20e2706308c61398dfce5f54ea9f266791ba29a4c7da158637def8b816aa296815ff13c06d632df45feaec1fd272ec1b510eaf58fe6b26cc36df3ecc0f5b1f258a190304e2519dd39ba9f5bc1788926ced5202e3b1e3afa16ae0b5d66dc05b36d3a00f72e5f318f8bdfc7eddc94238c50031d0657a22445ad0b3b90a86b086eed837a00bf0a3888bf61b4db57d6d8d6b286bbb13ba3b246def60ac34241eb843f89fe77d7e3e52573e90d791f21d4a8dfcc24ba95db60e2135634c02bd4b14535285df4fbe381ec036d876c4c8057c79371fa9717414590890e182a7b9e0ab927812083acf0d04e04c20c0555c8ceedc5bcf9b0e814be6eca98ce7b2f9f17d098bea541b75a1617c09fa99902ad746811f89a1fc5e6a80d77528247d6c104395715d2c9f9102f070a295f20c4307b9e848d3928b50985bfa2486893139761925b8fab96d26291243db23c4fd4d96864f4db860731a4e3e10b52d8d0487f5a8536cb4507dbdc111570ad0321b918edbc52807c2e0676d3257553702d9c1bd6741e9cd5cdeb3b8f636b6eb02a3b0066d7f677d586de5018850000f000ab3960f6656fb98039ceb6400d0299c356fc22b7298ed157c667bed5563fac2192a8ff7706a9e58d9d2f92632d6b25d8b090642e3f323bf7ff4d8264617a43a97099dd7347fbe3b1c439737913f17eff57f3e1ff4fdac374fb554e9a6a1ff32daa69507698d660d8d5f591801d8e4a9309342c3dc84966dbfcd2652800200bcb0dde9d456b7a07c5409f4f5387d0150daa34dbc865c6108d34dcc51eedb277e9638b43ce3c9afac5d7aa0f8542e58b0a84632a07557b041845d0012cf016ef065f97660b731ce1b79493de71def047277a3ae6d4a0d86591847d3475926039848c5baf6e1b43bc83053855182423156e54cadc8c85089265b49da853d15e5a701fedf2bf7986a723abf72e513fa05cb178345f2fcc859df49e74c8ccef196000a05cb090f22986ffb6f8f74ab41d2d88b6b535507a23b03d2fc2743f6f69fbcd43b8ff52b1ba32fa0137d542c515569b7f486f8ffa02ad1f54767f51701eb4c141437720884d529a57e17bc2837799124f7f112f42bd90f5b435d7a5d7524f7667bb7a6266263e62bf7ebf6896888d584c65a530b766111f078630d8629ffa91acb5ed02498549bd7e042acae0fab7ccb23278088a364be3da9619d91e1061bbaa9b33c3c5fbbcbc725ce8c2cc9ab0f2b4d30078040d3ca79d3ca056c360381ee87e743dea73a25ea2b4843f9ef280feb507f933fb556c718d8bf8f8618db72805b65d381b319f65c745c1e5060dae2f498852e79aff8dd9c88fd939a31871a430d3ba96fb118c79d1b08a397af23b1a188d1802106f588c768a1e6c9d244ac9a38d2a54ed50f19b78bf25e0ae1f9337ceaa8ff5ca8640104b19bcd643b51501d4e03ed5ffb383e7ed0ab78d540ae10bbd64fba1af59a4190215b7d10230992bbb4ff618d8284a2e2446990511fc2bff07cce9ba94a11d3db041e220e3d931fdf129d8ec2c9b17d6587a0044c9e09f52848db43ddc0df94513cc9e94e9d427623502a910deea0f21d86b16366769a46bf0d6d9fc0d2cd6b98ed885e9e2d765bdd051196bf20bd27c46ec902726d96de352c346d904fa00d63b67d272f116dce489f9d636cef61b441b9c113addec983b8b2fbdb2b32049e436c972b2fcf5140dc7b094c5047cb6226da700b72aeb3febdf16a75b6f61a311f606251c99b377c775c8fb3446ccf25dc4cca24290b3939f948019b05c80b5a6382112f63e0990b324c16a087c72aaec08796afc769f678e3634100a5a9da8215cb5d7a6a6b50a81676ef4edca35595b11f9606bef2fb84fe1f0a0703c886579f09986086f0dca6eb8061f9a74c79c1f758684a7363974b14561b9d2efdaba6c4cd8cb70627da1e195fcae3d8b2fa751278e8f220c83e677e14731eccd6fe0c357b011ed88b6df0c266b383f224b8e95384e401b717030b1227582d0d1042bd90377c4f2c7206a19983fc5905e4eb87edb6532b26ca9e28e160202606d19d9f5da34762f4b3fa842d7bff382ad70dcbc411f8b3e4cace8c8e0c72898d24023545e0dfdeb176209276a535491ce11c045c57b45c40f19b12dcf6ffbf78ab23e7fe9bdc404cf47db9855f2b835e1fce57debfa071803ec38da3c77a904080a4c737ce2b20e14e8449762f1ca0b1ce71779d2e6ee5299e1cf230e8070045c23c1d0e52f66fe9039f95cdc0b448dc12d24de39157934270345991948fce921b5d8e739315cc75d4b3b49928437b88672c1a7770365207b43895f45909d5d972f48aa66de609152a5afa2c7d75f0a14189d0409f0b623eab3b6e7d81025cde140893ed71b6f24f5a36d21dafb62af6be9da845403bc8ed36672efa74d7da19d5794cb4b79fa1c86940b1890c012e14b7c3bb261f16bdd99efaa9819b0bc00af842a6b94c6086d15b16ab81af9331ba3a5bd6941ef35239e85455ceab02c598ccee8fbad97ed37daebfe3b26a5a6c9eda5f65a1cfaf7a1f1688267c812a56c552ae11b465dac030e18f9008ad03cad80bf2cb91a7d99dcfa54d323ae0a4c3a6dc0f80d7ff703870610a945eb0ab5b6d14e81869c8872f6b123d98edcf6bba10d76d35cff4b0bb73db8b6695a8351785bcba1e160a42ed367c4da727da38f91562e941e5c4fa90cd585c5f1cd3a7d6892f18a5aa3c74a4fc00bf5909267489b937a928d9d8ff92530b5226eedf8ab9a957e5ffec45bc3a55e6955b38393ce52892655265d1f741e0b744808eb568a08d145a8bc5ada9b079f6d0bec5fc2ace0502b3f926372dff49478fbd10451f0de4b3d1a63b9d4e17ade45628d2e9dca041fcf7fc1e105e1fc44089fde9caf418ba8454dc361df4a59e1bd79143d280613e3c79ad18e922a43e199aa5927bb9553dd31e6223ad19bf8aff6e1dac8b3680feea3138bc61742b03f047b3d77039c1a4c2d05bd89c4bc12a1b83d78b4e7023f690fce6a44608c423d8cbc2e80942b9d9df2f4bf5606640fa47692f3e003885983a73e1dc313b243bbab5c3c6348afab796da766044ba142eda5a9d3713e3eda8c54c1708909c5da89ba67d29cd7f409c9b759cba316c42028754e3cb6eae2cc4f6d66982f212320f199b2e837bb4c54c54bcdcd2ac240ef6295d38e9889b4213819ef0f9aba6ceead4e0fd2c4becdc1f8ee3049831996c9a74a5fd4e12a1fd21ed47cf27e29f9d61e4b673d88914c36eefa53d3c49d94b463b7f8462c1951dfe33c10993d5cfcd0ededd50ad55009528f1e79fbc2fa70c3338b32c40ae3bb45d7079c7ae8433fb1aa19affbd3fbce0cb5ab0d557afb3be036856066eea45c28e93528b35477fc97fe9ff3641e5bb0f0e46069eb653c027daabff38541250081c77e0e3a1d030a73289e771cc41db10819af60599b5df0ad978fcf0b46af821c6b717b265e07d3a85397ea94de26f510290ddb5df8fcff76fe624843c8577802809c145916afce01d9dfdfa8bf07633e98f14fc73d5ef58ae5cb0c308bc74ca38259692a1cd4cf16752786a1c816f24612c27393d7e40a2df9a3dfa23a0c59613c8a7ccdd97c3fc67ecab94dcd8cc4b4517ed2414d41ce574074ffebd156e3d65c4421b0f339bc9f29abbfe49db62122248cf96b74d9639b3ef9d935cd81315a7ecfb0dc6ea1ee053c2e5c3615fbc10782f16a564fcabe1df70da7de989e00eedc346cef5b5cf880e9d563fc15302f056d37f98a939fd1dd5478b4318c256e93b77e31f87d8f7fe31755191b40d778ddb2ada1480bb9fcb96a09783fcf2c2c9fac2c3a2771dd0e2fb113cd460ee2c9cf4a712f04eb1b1a746091109f7ce0655e1ff7781fbe853e3d03bb91c9d8f4f416f5745c6b607bbf72786bd3c0ac4761e6e6d70f12dbefa1b13542086f793b72c6102ac06e75be17bdbb1efbf7e007f07f9bd433fd9d9cbf93e760757b792f15231895561fe49d9d683ccc066f38af581422b71702627162c0f0f35c36a61eaaa92129114b7334281e35fd39576e51d8593c149c9326e0c710ea4dcc9ef39a432a48ae1834f5046b954f9c033d6035cde0dbffe3e97f48a1dc695f4b2f6fe5d4eee83008318def105c37e11c9015670f13417ed036e68f6fbfca2a8289829677feb23079f3f2ee53b26e491924fefc1c50e54f288a8c4b6ba6d319054c3a9e39e14bba81b423acbd44b51279bbea6b0bb2047325837ce8b2191454f52ffa2cd04abe89e3de5bc102e9fdf740d3efd975bc9503af796e6aeee711ef8797de5d507a964730aa70cb9d3840054d4e1ffc57de378b511f7649666a54a6b3d91ed517198d76322bf99d13bef530a43ed3f13196bf2def6dcfb39f76471c75c5779bedf105717e546057fb478bfd24e8fdf3c12d028b542d1f424a9d45bb9e026e6098eb1cb0a77378300ec1b4c9f006aa4dfb7fb5c57cf1b035cbe96009ead1ca25ea1e5fae40312a4e9fe250684a1c8653bb303209e0fc6a498f3a08f6c5b946378a349f3aea45104a2badb8a45f500bb4f0f6cd620ce794e0f390e1cb7f2f1fc0039f4250a577544a6862b47bf89eea3a8c1516b7a9dd111c2ca719190e8feb1a7079e9fdfdb8224dc50791c986825469c087c8f081616edaa4193e161281aa68b7286a364cbb336b2459f0892e57c40afcfda7d16ea1877efb4e4b0d4b5c31e8cba15066903d3a91bdc7fb64452fb9843436110596f0b038da167a86f97d32c807270a1c994fe88e2517e11bdd210dd982d3c8158459440108308a936c9d2370b9d157c3f9caec36ff05bc40b37f095edf33bf4fad440f38c3f52129456936c07014140be5618f4e9d07b66679238023390cd676b1a3a28d0e90d5ad9ef13a31fcdc5a435454309367c437424e340a1f91c6483bce1026d85a16fb854252ea4ede39a4e69702ecff76432de508e064eda0df9f263a25c0f626d1c1ffaa6783be2975451ee936cc2178648935a924f6fb2db2f8ba34e348920d903114520918cc6872b842e3744fc18d1363583a107ec7b89c7792c0d8069e12f873f6d668f6fdeb47b72986914e45c2b061c5c936c73c9bcf1475ea0d25edaad21cf193405c8acef3bff4e4f1b2b321d70dba59e856a8849c2bba9508bad775370669b2bb7f5e53181af8bff525e13a4935d7e28b997b4ff15da9e36f1353a154ab701ad15420786daaf27ba7e122f7b825c668185b685630420378b4142ec4e4242c2cf0bf6e143f7e55cb12fb9dd59a8df9959ce4fc5fff68ae7174977a31ad7fd644bc94a20bae76f0af474034990fdfec8ceca0e6cd93fe21d84837b7e9d74c17b6d3054f0c008ee05764745fd8773a0c1c31bb3eef5b7e261b54805b5c805a4eeef05c812fcdede200442e7340c63490645ebd09c235d5c52a785542526edfe3875ad08267faed1d0a15236f00c6736b94c1a3821302ff610697ad7becdbc96f54b55138b585cd122e0d5aeaf43c9ba373e8aa1c1297e3415552cc57cd60ee1f3c04500ed0eed37775c873de3066c034c176c67c5bfbe9899a47732030855781341374641da058eee61d01d11b9db8f19fd4558957897340e32cdfbc39713f1f439be0638f614cdb5361433a45a6ff024e39c94141dc5403af101404ce5f2efa97b90d9ecdb7c361785dab977feded32554d1a74d5cbfe2435be7f0329ba382455c2ac11fbe29fe3826796d4bea03dc53a37f63f5be2773f83faf282f0ae24d9fe5762b71b499fd37b4ce7e71f93c3a983f80fed477708bbf2261c89893c4b76e34fac9b42671b6cc81678cc867f53e8c3ec47716206212743ca0c4941c2c61ed3177fccf85921e998d2b826df751173944bb07eeaae4001f677a0687a2550eeac8bb5128ecad9c7b6a514596a30b8292fbacc09ab488193507b6785d7a35c979db774b2c413246f1ae88d35d1914b20b8fb501034321642fb0b0baba3378e4c31fb5e247c177e573295df0194462b99079a436400ba1be2e30d39b8714c0fb2bdcd981d5a5cd514f8d4f14e4e0437108630355d8f2b60a6d18cb14ceb2b5d0704aa6e93e180bd79cb17e176bc4f81a03db12a03413de6189896955bb9e3cc69b6f9a50a7eda3742527f98c71d7ea8ba75e253c2b783f7104813c619949e6a0765179b1b9cbe68b703335ab5986928d86384357a2f4189f4b4ffcd61a3d29709bbc93b5371f0e7798cb72ae4c17bcee24f8e566f2777803c3d182d15a63ac40063f0ccdf4bd790404524eae02eafb6b54c699578486490033f0be866c74a134083003d330498658ba973ea674c4a0ff158403987b4c4752b07c8637a119b019fd5093406960144445056f6ffe73eda0235dc1871bb6058d4a9feecac628265689d58a81453d33290ab56eb691f3180d0288449f41844e56f5c6cf522d4a5866b24fb9552fde71946c4d25dcceaa41cfddb5a33c51c54c0a0a5abd31be8fb6ec53c1d14ba648e183979dbd0db01b9e51ba3803be7e7d3dee752668367264c783f74838121797ae5706ef3aa460682d1bf55808c70e69ae29d7683368470d08e7e9a1095305dce250b5b4bd48c02e098d241b1089736e8306a737e3a1a93e554cc3ab24672b8c74bfb8825004ca869e347f873de14575493836662ad741d79269904f905d7df64d0581ab8d76ee51a32d72ccb719f3a25c0a856b5bd2b2a1269e208d70c32e1d5ad0dfdc0ef43f0230e95eb85871eb4d6033abbf0be7025382d878eeaeea73c94270e79bd5757dc1bac95236a62545cd467830b12dcc30d7cc81e889d360d073db40058e9a1c7b41fc53e67740bc984132a1452cf7d000378f14ef93a7eb0dc9bacf23584ad6761139576607f8214757f71fc47b2944127116ca3e83b9d9643bce8d7bb44b4d16b5d5cff70a9e1114cd920b6fc1f409672648ad56ac3136ef0a314adb458faf3d3f171cb2fc513d76e43e6bda2f1a68e6fcf4a4ecbe6bc87716e2a82ea0c4657983ca0caaf8d75fdf5b0d7930e4f3e95eb1271485f938e7ad2bf0c97b7c11745de45518a1e3a74341968588558e7197b407d24eda0671ee28f219e4c5f809a7ea6f9f5b9705f4634a96112eb262bd5967db5237285b865d3f64516495ea6d1ec20dbed7af02362370bcc98671a61241fa1ef5b3095609d66ecc16010f6f67a280d1c6d215ec224ead17d68bbc9bc64b363b5be9b479b7aa2cbc8587a6b48cf653fde7a262a11ab3a10356f55f122310feac77c32ce0994d6e8a70f1c53331cb473a8e29427322fb6da292c4443b1678877f1c981fa05fbdef96520e5895aeb2a3a8e62652f9d8830c3b144b9598873e2ef41b7ade943807766877d609972cca74855eaedce07cda35b50557de96e736ca3107c154d31aeee78db214687b9964517bcd2c6c9ec047514b45c831aee4588166dc3ec9ab36bd1033e74b3d02d731c5bd84f659fa9fe55cac08c12cb999a2e64fac52f6cb7d1fffbf45d9a1126787d0060fd1be563ccbc278ac97dab0c1bee664675f273f5fa429bdc24b21ff1cf0a3ad3c687fb07ffd88bad6ab6c6b422a43b77ff76f96bf405c07f8a667bb8ff54d6714aaa21ceba2e78ce03146b2ab9f49e6d65081119b8e7cf3843e91349790d2b975c9f9c305df0ab4f2b1b2f30f629313cc66a325e4037f38f29842ee5781ba73d2f30f506cf7ff2237a72b4075aefa32cdd5ba0ae4e65cb6fa47a3e06f0d5f684b7172d6b58f5f7d783c4122db4f4b8b4f9d3296c9d115f432710c29d40dfca0010ecbe2f42fac899911d65c84f08aaa1923c8add5af518286211db14e1187a8839f3b2ae8bd914eafc16a576bbe3eba6271a4c5b3170c3f543761f11f1326a05c575bde1b5c6afd3876bea4fbb649071a95caf74de9f7b3421803ec351f934b8d0932ce72a13abf3627d9a396c10875fc167ef1ae98ff92af9ca366033c99d30306fd540a09d67d26ab192504e7c09f9e4d06287a2b1748f1761ba3c16d9d08be7562b7351c4b4679f5d4b38681bfd86c7f2003a9749b20b602112a95803469f5d252c564912b55c4bf3409298dbd066d877cc70a89b484b9ee6bb836c9acd1e53086c4be85e9a3bc5969c7016db9c72b68620c241409d06f4d7f72fe2289c9b4921055922783b8b886bc22926b7d194820af2b90e3c60e87e1a7851f38a970c07c1da120d1da75de2bb994ff7d05a313522373326f160914a9589711e0439d694f5221afe8cc118722ce4927e9543e61a12a76bcf2da1d01a0f258095d32063387349b4e9f253d8b73c6e834b6866f8a56b4797b92d521fa732aa0d55c8e9d6c56011ee6fb450853dc564d18e97c463609c27a63f9c91c46d7bd80ace4edc0615ca342f43ca3b3d0cc36ed52b7d1f457e5b4b26b5eca0d91abe4f1a42a2eec40ec2faff1222f71dc226d6344e947b45155691205c09913fc3c6ab3fe76f4d1b11fa45869e20694b5f0a1074780a07332764212533b797dd24d8df157d4172f91253b77eb2ec90c8222307ed59136463057b7f469116086410b7503b44cef401c47811c1390060da5b3321d34096b67468a7702978d98d4bd721c18a25ed541249638e90281dc8e3565dc33e66d7b832a9bd62c02c5ed0e92935c92472499653d2d842ea6697c733ee80d775884074b3a0c250a4aa021bb6ea93514f9cc5f09feb5719d270cd184e364ca966f1416e10f111bc425f32a993fc5cd75503f99d89d91d7ddc6dee70193057cb946e5fbf8663c53e12cebffe5dbd4a86bfcf5f35f0d8aa43763a60e00356b4f8bc2bca01b02cfddde38f0c4df1e7f98709fdebc5abb5eb9631bdc3dbfcf15517fabcf16931eb7381e83713b081ad1947274d4896ee8953d772e9e71f363b6f1147317bc739ec128e4ec865f8f0ea34cd5ff19fb2c28931d2c85846735358504ae9161535cd7890e8b95c814cfec116b78e6d0eb5097cd4f35888121452e27391d865c15f0b986925d0d0c623bcbb4d8ca66603720253af17853967ea5954eb5ef0dc43de185ec4925026c680464e66d1caff1f4c7c757bd55ec2515ffe7183e3481ff6f626c2228a3fc3d15f63e4bfbec76a2a170206142cbbcf204a1cbfe0ee56eb47dfb79c80894c0a0fbf8a2955d861678fc2f8f9ad7a28052197b5992bced1273658da5b1f42fca48c80883600c24d8515a0c7113deb4c97df918ab64bca16a0c14f2547dc91d5ce4f884978c95fe54899f77ffc20a2c4b27350bc451bef72a46d8e144ad57a8d5f8ac039f58b8a53ea1f3fd5fce612a171bf82ba17c0681cf46ce5c8181a522ed2e986361903903159643046c7be1787dac6ccab09d18a30997541dc6e9efa260f1ff0392bc1890f19d8bb725f4fe7d8bc618f46e0c23be6b9ca67777dd3f5a89b41ccfb11a526a3bed045a2906f86cc5186a1db7a70391261b694b423e5a44d374f9d3720330e083574083f8950b2b35c8bb5b6c0a7fe259f235dc1c069d4581a9f0a7451890561a0829bb290de6aefe4d243ae0b00ca61a1dc4262bb4951242b21d88148eb7b6a9718d6433274f2b3c9bcdbb6d5df67b48ff42692d8cd7f4b7f41728de68ea1ce0f3e4a2843c5b9ffc43f69b8a0445dce44081f5b443a327084b0d00d07cbdbbfd2da5d67bf8d4bb4ee408d17eeee48b61decd06bd3dac9a1adbeb069b49ec96608b9179bb3af4c10f2ade6778b31fd4c22c2961cb949a64e9a8a4879c550f8d8783064cb304511e40e2e562ba83c08ba8ae011a784ed9db03db5527a7aae222c856c8df0a94f9c4def0f94244c5b8e3db9f39dbd337928e24d9d8562f231fea72116c01089163d2c5f4ca17faab20b73c9957fa1a9af20837a804870034d4e64281125b070d8ee0dbf05f95e5fb079e2a57e9af977222e90b664189114dccbca81ee58b7de90a813768a2049052b339a608d3e9966bdb3b584291fbf7694a7d1dea7f72ca604894e6cca5d326ed5e48c15eff5e6a8cc11c40f84ca920d79a5c55d07001909bf6338921c656a39d59d03f62bb5b8870189f0416ec8c317b03ccdcbbeb3e1a9bf2661813f4966b57eb56a2757de5f7745851b5f7bf75e41eb1646e61a41923c5c0e58c2ea478d95b5c39c450744aea0aad3706fce684cb7338ff3dacab60e8d968f0e6fc070693ae3ca16996b34a50afb7e6e377546ae28dc8de7a2ea3a657b4b0003a91a488e347c61971d62f32eaf843d4d4c4f86cc4033c1244c8408def09188dde509c629323f34072f9089a3846680894e8b000a03865438b2ea212b68fdef7f17583f92014eef2c8115a37c9c82dee06213c1407c1433690f68cdc8e91971104039dfe06774b946f43b68b7957a5ca3ee763eafbb7437850eb0a285c413bcf6965232d593d8da47a2a06abc635ae38e596a9dae55b43f341bcc6fe72d79b453ac1c259da37f64cbc1f1508caf280aa6a3f4cd2ff5564cc5a8727f222431454a5ac93398a29fb95b4e057686cd6fcd920992f74e5870749676a36e043bec5fc1b0fce5563affe9addfaa3689e857383ccd1f2924080449d2cfb006e855570b711c1dedd1df2629afaa3806f4ae229a9a8ef1940ddf2c55dac7812d2374c0684b7ba27b2f0849ee4c055d2b8ccc8e41c593378340d7546bb974bc8032f220b37099e3b04c6591c40d2c50a855a491e03c1c9cbb32c400f6104341262d92daaf3e2c04936cf28788fdff8e0a77770a9deb9089a9e32eb5d9e2581aecd98f83881ca8e7d49e603556dc03a9aa19a8f3a4735aaee347b25ea35b36fa57484c0b6d591979b4a3da894fa0c15966d6a5e02e397cccdb9c314b504372b81ef6913877767001263c05dae362b49e5928ef36f554ce245b4111486417634f1e7f4530a760ae6ffd3123f5736ac12c5bf506c5dca03079c0fd0776cdb56c938cdf480fb9b97b1685dfa3be6f712aae107e2dda726bec137b2ebdf56c0fcaecca4350bd7b5c84d57f29c2a2c99ae10c30cece4831d71ae4ee3362983cc816bb6cb9225b9db08503a1be23a26a0425a8628a2e718feae5df91d829f27966f766b623a0a4958a57642aefae259713733670d5b1d027fb8eb2d0d3a0b4acd482076dfa09ffe883f556b2db2262bc0872e1bd713f100dd7a8a8f2d725b46e09c625d513179872bbcc9a41e596a18b2471d977f4ca2bebd06cdaba31b70ef25e098f214fef16f16f725cad4311eb91457fdb70b471eddb65ecafb1e2b03c5ff21356241e3cab2c8ba601f9ef1aec9006b7cd0b81da29be01cb4c1d52e563298e373013886ebb1889bd5616647c6c418ea6bc1f3c0853b65cae48467b35f08318e3a9d034af7224cc3520ab1ece7751ba15407298b21e4f84ef7c23d7993739403d4f116cba2d0ae2d4003a28334c461c734d4555105b986ad0af28aac36c753ab52b91b7e23ae3ab07d3b170fe53a2249efe5b65463a3f237cec72091b04005f95a15ae595191ba39d0ae1d91d8e00b132ae9339884bc57bbb79978a308e1c31c5f213b092f380a7ba58f55869e9c29a5a6e7a7aa4f8d58e5787cc05e5", 0x2000, &(0x7f0000000a00)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000600)={0x90, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x7ffffffd, 0x0, {0x4000000, 0x2, 0x83, 0x1b7, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x1, 0x0, 0x0, 0xffffffff, 0x3}}}, 0x0, 0x0, 0x0, 0x0, 0x0}) 8.327591131s ago: executing program 3 (id=3775): bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x6, 0xb, &(0x7f0000000540)=ANY=[@ANYBLOB], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @xdp=0x25, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) pipe(&(0x7f0000000440)) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x0) mount$fuse(0x0, 0x0, 0x0, 0x2b38094, &(0x7f0000000400)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=0x0]) mount(0x0, &(0x7f0000000380)='./file1\x00', &(0x7f0000000040)='autofs\x00', 0x0, &(0x7f0000000400)) chdir(&(0x7f0000000080)='./file1\x00') r0 = open(&(0x7f0000000000)='.\x00', 0x800000, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f00000001c0)='./file0/file0\x00', 0x1c0) mount$tmpfs(0x0, &(0x7f0000000200)='./file0/file0\x00', &(0x7f0000000240), 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x18, 0x4, &(0x7f0000000180)=ANY=[@ANYRES32=r0], 0x0, 0x8, 0x28, 0x0, 0x0, 0x50, '\x00', 0x0, @fallback=0x3, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, r0}, 0x94) ioctl$AUTOFS_IOC_PROTOSUBVER(r0, 0x40049366, &(0x7f0000000180)) 8.185245582s ago: executing program 8 (id=3776): bpf$PROG_LOAD(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x2) bpf$BPF_MAP_GET_FD_BY_ID(0xe, 0x0, 0x0) sched_setaffinity(0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x800000000000001, 0x0, 0x2, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x27, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) keyctl$instantiate(0xc, 0x0, 0x0, 0x0, 0x0) socket$inet6_sctp(0xa, 0x5, 0x84) r1 = socket$kcm(0x10, 0x3, 0x10) sendmsg$kcm(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{0x0}], 0x1}, 0x800) 7.31687159s ago: executing program 9 (id=3777): socket$nl_netfilter(0x10, 0x3, 0xc) r0 = socket$inet6_mptcp(0xa, 0x1, 0x106) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) getsockopt$inet6_tcp_buf(r0, 0x6, 0x1a, 0x0, 0x0) r4 = syz_open_procfs(0x0, &(0x7f00000000c0)='coredump_filter\x00') r5 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000015c0), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r5, 0xaf01, 0x0) r6 = eventfd(0xc) ioctl$VHOST_SET_LOG_FD(r5, 0x4004af07, &(0x7f0000000240)=r6) ioctl$VHOST_SET_VRING_KICK(r5, 0x4008af20, &(0x7f0000000040)={0x1, r6}) ioctl$VHOST_VSOCK_SET_RUNNING(r5, 0x4004af61, &(0x7f0000000000)=0x1) read$FUSE(r4, 0x0, 0x0) 7.295300564s ago: executing program 3 (id=3778): accept4$inet(0xffffffffffffffff, &(0x7f0000000240)={0x2, 0x0, @local}, 0x0, 0x800) r0 = socket$kcm(0x10, 0x2, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbee2, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) openat$sndseq(0xffffffffffffff9c, 0x0, 0x446102) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)=@newtaction={0x48, 0x30, 0x53b, 0x0, 0x0, {0x9}, [{0x34, 0x1, [@m_sample={0x30, 0x1, 0x0, 0x0, {{0xb}, {0x4}, {0x4}, {0xc}, {0xc, 0x4, {0x3}}}}]}]}, 0x48}}, 0x40000) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000040)=@RTM_NEWMDB={0x38, 0x54, 0x1, 0x1, 0x0, {}, [@MDBA_SET_ENTRY={0x20, 0x1, {0x0, 0x1, 0x0, 0x3, {@ip4=@initdev={0xac, 0x1e, 0x0, 0x0}, 0x86dd}}}]}, 0x38}, 0x1, 0x0, 0x0, 0x4}, 0x0) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0xd18c9b25, &(0x7f0000000080)=[{&(0x7f0000000040)="e03f03003f000b05d25a806c8c6394f90324fc60100002000a000300053582c137153e3704020180fc0b09000c00", 0x33fe0}], 0x1}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x5, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000100)=0x2) ioctl$SNDRV_TIMER_IOCTL_TREAD_OLD(0xffffffffffffffff, 0x40045402, &(0x7f0000000140)=0x1) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r4 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='net/anycast6\x00') r5 = openat$misdntimer(0xffffffffffffff9c, &(0x7f0000001440), 0x0, 0x0) ioctl$IMADDTIMER(r5, 0x80044940, &(0x7f0000000380)=0x14) ioctl$IMADDTIMER(r5, 0x80044940, &(0x7f00000000c0)=0x32) close_range(r4, 0xffffffffffffffff, 0x0) r6 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) r7 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)=ANY=[@ANYBLOB="02000000040000001800000001"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000540)={0x5, 0x10, &(0x7f0000000480)=ANY=[@ANYRESHEX=r4, @ANYRES32=r7, @ANYBLOB="0000000000000000b70500000800000085000000aa00000095"], &(0x7f0000000500)='GPL\x00', 0xb, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) read$msr(r6, &(0x7f0000002000)=""/102400, 0x19000) 7.271807532s ago: executing program 6 (id=3779): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x13, &(0x7f00000002c0)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000002d0000001801000020756c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb7020000080000"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r0}, 0x10) bpf$PROG_LOAD(0x5, 0x0, 0x0) socket$rds(0x15, 0x5, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) openat$sndseq(0xffffffffffffff9c, &(0x7f00000018c0), 0xa8c01) r4 = openat$procfs(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/asound/seq/clients\x00', 0x0, 0x0) preadv(r4, &(0x7f0000000040)=[{&(0x7f0000000180)=""/128, 0x80}], 0x1, 0x0, 0x8) mmap$xdp(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x12, 0xffffffffffffffff, 0x0) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x2, 0x4, 0x0, &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x100, 0x70, '\x00', 0x0, @fallback=0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) mremap(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x2000, 0x7, &(0x7f0000fff000/0x1000)=nil) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000005c0)={r5, 0x0, 0x30, 0x0, @val=@uprobe_multi={&(0x7f0000000140)='./file0\x00', &(0x7f00000001c0)=[0x7], &(0x7f0000000240)=[0x2], 0x0, 0x9}}, 0x40) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = socket$inet6(0xa, 0x802, 0x0) setsockopt$inet6_buf(r7, 0x29, 0x39, &(0x7f0000000040)="ff0204000000000100"/21, 0x15) getsockopt$inet6_opts(r7, 0x29, 0x39, &(0x7f0000001cc0)=""/4096, &(0x7f00000000c0)=0x1000) syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), r6) syz_init_net_socket$x25(0x9, 0x5, 0x0) 7.0779656s ago: executing program 8 (id=3780): sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x0, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="01000000420000000600000008"], 0x48) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)=@base={0xc, 0x4, 0x4, 0x8001, 0x0, r1}, 0x50) bpf$MAP_LOOKUP_BATCH(0x18, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x8003, r2}, 0x38) 5.914648419s ago: executing program 9 (id=3781): ioctl$sock_inet_udp_SIOCINQ(0xffffffffffffffff, 0x541b, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, 0x0, 0x0, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$unix(r2, &(0x7f0000000d80)={0x0, 0x0, &(0x7f0000000380)=[{&(0x7f0000000080)="03", 0x1}], 0x1, &(0x7f0000000280)=ANY=[@ANYBLOB="14000000000000000100000001"], 0x18}, 0x0) recvmmsg(r3, &(0x7f0000001140), 0x700, 0x2, 0x0) sendmsg$key(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x3, &(0x7f0000000080)={0x0, 0x1fddc0807fc880cd}}, 0x0) 5.61731728s ago: executing program 3 (id=3782): syz_memcpy_off$IO_URING_METADATA_GENERIC(0x0, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x107, 0x12, &(0x7f00000000c0), 0x8) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000040)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0xfffffffc}, 0x6e) sendmmsg$unix(r2, 0x0, 0x0, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x11, 0x6, &(0x7f00000005c0)=ANY=[@ANYBLOB], &(0x7f0000000080)='GPL\x00', 0x5, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x6}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000580)={&(0x7f0000000080)='sched_switch\x00', r3}, 0x10) r4 = syz_open_dev$tty1(0xc, 0x4, 0x1) r5 = dup(r4) write$UHID_INPUT(r5, &(0x7f0000001040)={0xfc, {"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", 0x1000}}, 0x1006) 4.430464433s ago: executing program 38 (id=3782): syz_memcpy_off$IO_URING_METADATA_GENERIC(0x0, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x107, 0x12, &(0x7f00000000c0), 0x8) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000040)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0xfffffffc}, 0x6e) sendmmsg$unix(r2, 0x0, 0x0, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x11, 0x6, &(0x7f00000005c0)=ANY=[@ANYBLOB], &(0x7f0000000080)='GPL\x00', 0x5, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x6}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000580)={&(0x7f0000000080)='sched_switch\x00', r3}, 0x10) r4 = syz_open_dev$tty1(0xc, 0x4, 0x1) r5 = dup(r4) write$UHID_INPUT(r5, &(0x7f0000001040)={0xfc, {"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", 0x1000}}, 0x1006) 4.409396861s ago: executing program 4 (id=3784): r0 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000bc0)=@raw={'raw\x00', 0x3c1, 0x3, 0x380, 0x0, 0x4c, 0x1a, 0x160, 0x73, 0x2b0, 0x258, 0x258, 0x2b0, 0x258, 0x3, 0x0, {[{{@ipv6={@private0, @local, [], [], 'dvmrp1\x00', 'macvlan1\x00', {}, {}, 0x73}, 0x0, 0x118, 0x160, 0x0, {}, [@common=@inet=@l2tp={{0x30}, {0x0, 0x0, 0x3, 0x0, 0x7}}, @common=@unspec=@connlimit={{0x40}}]}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x1, 0x0, 0x0, 0x0, 'syz0\x00'}}}, {{@uncond, 0x0, 0x120, 0x150, 0x0, {}, [@inet=@rpfilter={{0x28}}, @common=@inet=@multiport={{0x50}, {0x1, 0x4, [0x4e22, 0x4e20, 0x4e24, 0x8, 0x4e21, 0x4e22, 0x4e23, 0x4e21, 0x4e21, 0x4e23, 0x4e22, 0x4e20, 0x4e23, 0x4e21, 0x4e24], [0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1], 0x1}}]}, @common=@inet=@SET2={0x30}}], {{'\x00', 0x0, 0xa8, 0xd0, 0x0, {0x0, 0x5400}}, {0x28}}}}, 0x3e0) socketpair$unix(0x1, 0x3, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f00c00e}, 0x0) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) connect$inet(0xffffffffffffffff, 0x0, 0x0) setsockopt$SO_RDS_TRANSPORT(0xffffffffffffffff, 0x114, 0x8, &(0x7f00000008c0)=0x2, 0x4) bind$inet(0xffffffffffffffff, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000001c0)={0x1c, 0x4, &(0x7f0000000040)=@framed={{0x18, 0x7}, [@exit]}, &(0x7f0000000000)='GPL\x00'}, 0x94) mkdir(&(0x7f0000002200)='./file0\x00', 0x0) r2 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000042c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r2, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) write$FUSE_NOTIFY_STORE(r2, &(0x7f00000003c0)={0x28, 0x4, 0x0, {0x1, 0x1}}, 0x28) r3 = syz_io_uring_setup(0x49a, &(0x7f0000000400)={0x0, 0x79af, 0x3180, 0x8000, 0x40024e}, &(0x7f0000000080)=0x0, &(0x7f0000000040)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r4, 0x4, &(0x7f0000000000)=0xffb, 0x0, 0x4) syz_io_uring_submit(r4, r5, &(0x7f00000002c0)=@IORING_OP_TIMEOUT={0xb, 0x11, 0x0, 0x0, 0x0, &(0x7f0000000100), 0x1, 0x40, 0x1}) io_uring_enter(r3, 0x628, 0xc88d, 0x43, 0x0, 0x0) mount$nfs(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000100), 0x400, &(0x7f0000000140)={[{'nointr'}]}) bpf$PROG_LOAD(0x5, &(0x7f0000000400)={0x16, 0x5, &(0x7f0000000500)=ANY=[@ANYBLOB="18020000020000000000000000000000850000001100000085000000b200000095"], &(0x7f0000000000)='syzkaller\x00', 0x4, 0x0, 0x0, 0x41100, 0x7, '\x00', 0x0, @fallback=0x35, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x3}, 0x94) 4.402026581s ago: executing program 2 (id=3785): ioctl$UFFDIO_API(0xffffffffffffffff, 0xc018aa3f, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000002c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01"], 0xc0}}, 0x0) r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r0, 0x107, 0xf, &(0x7f0000000100)=0x9, 0x4) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000480)={'bridge0\x00', 0x0}) sendto$packet(r0, &(0x7f00000002c0)="05030500d3fc030000004788800509101128", 0x100f, 0x4, &(0x7f0000000140)={0x11, 0x88a8, r1, 0x1, 0x0, 0x6, @multicast}, 0x14) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) 4.401246745s ago: executing program 9 (id=3786): sendmsg$NL80211_CMD_DISASSOCIATE(0xffffffffffffffff, 0x0, 0x24040800) r0 = socket$inet(0x2, 0x2, 0x0) setsockopt$sock_int(r0, 0x1, 0x2e, &(0x7f0000000180)=0x7b, 0x4) shutdown(r0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = syz_open_dev$MSR(&(0x7f0000000540), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) recvmmsg(r0, &(0x7f00000066c0), 0xa0d, 0x0, 0x0) 3.550146574s ago: executing program 2 (id=3787): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000280)=ANY=[@ANYBLOB="440000003e000701feffffff00000000017c0000040042800c00018006000600800a0000200002801c00068018"], 0x44}, 0x1, 0x0, 0x0, 0x40040c0}, 0xc000) 3.14263362s ago: executing program 8 (id=3788): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_wireguard(r0, 0x8933, &(0x7f0000000280)={'wg0\x00'}) socket$nl_route(0x10, 0x3, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) syz_genetlink_get_family_id$wireguard(&(0x7f0000000180), 0xffffffffffffffff) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000ac0)=@base={0x6, 0x4, 0x1000, 0x85}, 0x50) ioctl$UFFDIO_CONTINUE(0xffffffffffffffff, 0xc020aa08, &(0x7f0000000080)={{&(0x7f0000400000/0xc00000)=nil, 0xc00000}}) r4 = syz_open_procfs(0x0, &(0x7f00000001c0)='pagemap\x00') pread64(r4, &(0x7f0000001240)=""/102400, 0x19000, 0x1000000000) 3.070758007s ago: executing program 4 (id=3789): bpf$MAP_CREATE_RINGBUF(0x0, 0x0, 0x48) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000001200)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000016c0)=@newqdisc={0x24, 0x24, 0x4ee4e6a52ff56541, 0x70bd28, 0x4000000, {0x0, 0x0, 0x0, 0x0, {}, {0xffff, 0xffff}, {0xf}}}, 0x24}}, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r1, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f00000007c0)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) r2 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r2, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$devlink(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_GET(r3, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000680)={&(0x7f00000000c0)=ANY=[@ANYBLOB="14000000", @ANYRES16=r4, @ANYBLOB="0100000000230000000054"], 0x14}}, 0x0) close(r3) 2.950087701s ago: executing program 2 (id=3790): bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x6, 0xb, &(0x7f0000000540)=ANY=[@ANYBLOB], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @xdp=0x25, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) pipe(&(0x7f0000000440)) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x0) mount$fuse(0x0, 0x0, 0x0, 0x2b38094, &(0x7f0000000400)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=0x0]) mount(0x0, &(0x7f0000000380)='./file1\x00', &(0x7f0000000040)='autofs\x00', 0x0, &(0x7f0000000400)) chdir(&(0x7f0000000080)='./file1\x00') r0 = open(&(0x7f0000000000)='.\x00', 0x800000, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f00000001c0)='./file0/file0\x00', 0x1c0) mount$tmpfs(0x0, &(0x7f0000000200)='./file0/file0\x00', &(0x7f0000000240), 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x18, 0x4, &(0x7f0000000180)=ANY=[@ANYRES32=r0], 0x0, 0x8, 0x28, 0x0, 0x0, 0x50, '\x00', 0x0, @fallback=0x3, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, r0}, 0x94) ioctl$AUTOFS_IOC_PROTOSUBVER(r0, 0x40049366, &(0x7f0000000180)) 1.969271544s ago: executing program 8 (id=3791): bind$inet6(0xffffffffffffffff, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$MSR(&(0x7f0000000240), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) r1 = socket(0x23, 0x3, 0x0) sendmsg$nl_route_sched(r1, &(0x7f00000003c0)={0x0, 0x0, 0x0}, 0x0) syz_emit_vhci(&(0x7f0000000000)=@HCI_EVENT_PKT={0x4, @hci_ev_io_capa_request={{0x31, 0x6}}}, 0x9) setrlimit(0x1, 0x0) connect$inet(0xffffffffffffffff, &(0x7f0000000280)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x4}}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(0xffffffffffffffff, 0x6, 0xd, &(0x7f0000000340)='dctcp\x00', 0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb, 0x13, 0xffffffffffffffff, 0x2000) r2 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000480)}, 0x0) openat$nci(0xffffffffffffff9c, 0x0, 0x2, 0x0) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NFC_CMD_DEV_UP(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) syz_fuse_handle_req(0xffffffffffffffff, 0x0, 0x0, 0x0) migrate_pages(0x0, 0x8, 0x0, 0x0) 945.867085ms ago: executing program 6 (id=3792): r0 = syz_io_uring_setup(0x10e, &(0x7f0000000140)={0x0, 0x334e, 0x10, 0x3, 0x801}, &(0x7f00000003c0)=0x0, &(0x7f0000000300)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_OPENAT={0x12, 0x0, 0x0, 0xffffffffffffff9c, 0x0, &(0x7f0000000040)='./file0/file0\x00', 0x60, 0x185100}) openat$fb0(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) io_uring_enter(r0, 0x7277, 0x0, 0x28, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) getrandom(0x0, 0x0, 0x2) r3 = socket$netlink(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_DROP_MEMBERSHIP(r3, 0x10e, 0xc, 0x0, 0x0) sendmsg$netlink(r3, &(0x7f0000000040)={0x0, 0x0, 0x0}, 0x0) 472.963868ms ago: executing program 9 (id=3793): socket$nl_netfilter(0x10, 0x3, 0xc) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x6) r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) connect$bt_l2cap(r0, &(0x7f0000000000)={0x1f, 0x8ef, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}}, 0xe) r1 = syz_init_net_socket$bt_bnep(0x1f, 0x3, 0x4) r2 = socket$kcm(0x29, 0x5, 0x0) r3 = bpf$BPF_PROG_GET_FD_BY_ID(0xd, 0x0, 0x0) ioctl$sock_kcm_SIOCKCMATTACH(r2, 0x89e0, &(0x7f0000000080)={r1, r3}) ioctl$sock_bt_bnep_BNEPCONNADD(r1, 0x400442c8, &(0x7f0000000100)={r0, 0x0, 0x4, "31c877323b07"}) r4 = syz_usb_connect(0x0, 0x36, &(0x7f0000000280)={{0x12, 0x1, 0x141, 0xf2, 0xc5, 0x96, 0x20, 0x16d0, 0x10b8, 0xde8e, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x10, 0x0, [{{0x9, 0x4, 0x0, 0x2, 0x2, 0x0, 0x83, 0xec, 0x0, [], [{{0x9, 0x5, 0x6, 0x2, 0x200, 0x2, 0x0, 0xa}}, {{0x9, 0x5, 0x82, 0x2, 0x200, 0x0, 0x1, 0x10}}]}}]}}]}}, 0x0) syz_usb_control_io$uac1(r4, 0x0, 0x0) syz_usb_control_io$hid(r4, 0x0, &(0x7f0000000080)={0x2c, &(0x7f0000000040)=ANY=[], 0x0, 0x0, 0x0, 0x0}) 472.528402ms ago: executing program 2 (id=3794): r0 = syz_init_net_socket$x25(0x9, 0x5, 0x0) r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0) connect$bt_l2cap(r1, &(0x7f0000000080)={0x1f, 0x0, @none, 0x7ff}, 0xe) syz_init_net_socket$bt_hidp(0x1f, 0x3, 0x6) socket$inet6_udp(0xa, 0x2, 0x0) openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f00000003c0)={0x4, 0x80100008b}, 0x0) sched_setaffinity(0x0, 0x11, &(0x7f0000000180)=0x1400200bce) sched_setscheduler(0x0, 0x1, &(0x7f0000002200)=0x1) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000002700)=""/102392, 0x18ff8) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r3, &(0x7f00000020c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYBLOB="0001002bbd70004fdbdb2505000000080004"], 0x24}, 0x1, 0x0, 0x0, 0x50}, 0x4000000) r4 = syz_pidfd_open(0x0, 0x0) r5 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$sock_bt_hci(r5, 0x400448ca, 0x0) bind$bt_hci(r5, &(0x7f0000000100)={0x1f, 0xffff}, 0x6) timer_create(0x2, &(0x7f0000000000)={0x0, 0x0, 0x1}, &(0x7f0000000040)) timer_settime(0x0, 0x236bd4336e4642df, 0x0, 0x0) timer_settime(0x0, 0x0, &(0x7f0000000600)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) mmap(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x300000e, 0x1010, r4, 0x3ee80000) r6 = syz_open_dev$vcsa(&(0x7f0000000000), 0x1, 0x1a1300) write$vhost_msg(r6, &(0x7f0000000480)={0x1, {0x0, 0x0, &(0x7f0000000400)=""/102, 0x3, 0x1}}, 0x48) ioctl$int_in(0xffffffffffffffff, 0x40000000af01, 0x0) ioctl$SIOCX25GDTEFACILITIES(r0, 0x89ea, &(0x7f0000000040)) 402.782339ms ago: executing program 8 (id=3795): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f00000001c0)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, 0x0, 0x0) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r3 = io_uring_setup(0x669, &(0x7f00000002c0)) setresuid(0xffffffffffffffff, 0xffffffffffffffff, 0xee01) io_uring_register$IORING_REGISTER_PERSONALITY(r3, 0x9, 0x0, 0x0) setresuid(0x0, 0x0, 0x0) close_range(r3, 0xffffffffffffffff, 0x0) socket$packet(0x11, 0x3, 0x300) 182.460853ms ago: executing program 6 (id=3796): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000540)={0x26, 'hash\x00', 0x0, 0x0, 'crc32c-generic\x00'}, 0x7b) r1 = accept4(r0, 0x0, 0x0, 0x0) sendmmsg$inet(r1, &(0x7f0000003480)=[{{&(0x7f0000000080)={0x2, 0x4e24, @local}, 0x10, &(0x7f00000003c0)=[{&(0x7f0000000440)="47d0ed54e7bb6f5f1a439a92806383b56b8ffc7acbf79d5d40977f4ac8d3d55df98553beb334a3893aae663ff3e558577698ce6949b024f70a3fbc1b4a37797b3e28ddda571eec9006cd38565fb1b04a6eb69462cdcf293a9a008509658ffb1c0375878412bda4f212bc5efa03ad69b1a9ffef6ffd5ac15549f9441f98ab86e84564c21e1845eafddb757f9f8fa013aa6bf2a41f2484d13c1c5cec33b856ead6ee5d17c35e2ff61efec9164ccd92a1daf98224fb707a75f689777818720f26987752f5bd248ebf", 0xc7}, {&(0x7f0000000680)="280e5fd3571b1724ae6183dc99013192d11f2d0a83470b542f21a7a323786a472cde1eff23765de834a0c6a9c9b9cdcf10c5a389fc8addec028fdcea25810b30cf5c2373c95c9ff71a5ab658f860ba68b6cea9e0248a0d6d36bd3f5921d01ce1e489d5b29f26757bcb9e777917f42863fa480bb56d3c760734206b03f804dbc14e7af7b6fa9b3c9953768f62b60c815e16155f4244119f", 0x97}], 0x2, &(0x7f0000000740)=[@ip_ttl={{0x14, 0x0, 0x2, 0x5}}, @ip_ttl={{0x14, 0x0, 0x2, 0x7}}], 0x30}}, {{0x0, 0x0, &(0x7f00000008c0)=[{&(0x7f00000007c0)="cf0146b5a44c36774d6e383454b479cc8feff9b402f9006cc9b2fdb25b7d4b1f7f2ffd6ae3e5b7ff034417332e1b147e3650f1d7b8289a01f7dbf96118f393c4e7a582fe9de012fe28316ea258a1997f2b2e903d2db86c1ead450093d3086322d52bd02c01f27d1cf1b0c8d6ea3331c62b13438d173011b5286c59fe133d359f545df388007cbaa41000a62cb06981057893cb2ec0d2d8ca41f989d4beba67be78ca35d6714405c13d2e0a93587dc0b187442ff6a3d35c", 0xb7}], 0x1, &(0x7f0000000900)=[@ip_retopts={{0x28, 0x0, 0x7, {[@ra={0x94, 0x4}, @noop, @ra={0x94, 0x4, 0x1}, @noop, @generic={0x82, 0xb, "f4509eebf347cd18d7"}]}}}, @ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @local, @empty}}}, @ip_retopts={{0xa4, 0x0, 0x7, {[@timestamp_addr={0x44, 0x1c, 0xf, 0x1, 0x2, [{@multicast2, 0x3}, {@remote, 0x5}, {@initdev={0xac, 0x1e, 0x1, 0x0}, 0x2}]}, @cipso={0x86, 0x33, 0x0, [{0x1, 0x8, "d9c3c1aab031"}, {0x7, 0xe, "9c992c8209e4b3c34ace3d0f"}, {0x5, 0xd, "932f930488dd36bade0cc9"}, {0x2, 0xa, "dacd730fd746bfa4"}]}, @noop, @noop, @timestamp={0x44, 0x14, 0x92, 0x0, 0x0, [0x6, 0x3, 0x7, 0x3a]}, @ssrr={0x89, 0xf, 0xe0, [@empty, @private=0xa010102, @initdev={0xac, 0x1e, 0x1, 0x0}]}, @rr={0x7, 0x1f, 0x4c, [@multicast2, @rand_addr=0x64010102, @broadcast, @rand_addr=0x64010102, @empty, @empty, @multicast2]}]}}}], 0xf0}}], 0x2, 0x0) 0s ago: executing program 6 (id=3797): ioctl$sock_inet_udp_SIOCINQ(0xffffffffffffffff, 0x541b, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, 0x0, 0x0, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$unix(r2, &(0x7f0000000d80)={0x0, 0x0, &(0x7f0000000380)=[{&(0x7f0000000080)="03", 0x1}], 0x1, &(0x7f0000000280)=ANY=[@ANYBLOB="14000000000000000100000001"], 0x18}, 0x0) recvmmsg(r3, &(0x7f0000001140), 0x700, 0x2, 0x0) sendmsg$key(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x3, &(0x7f0000000080)={0x0, 0x1fddc0807fc880cd}}, 0x0) kernel console output (not intermixed with test programs): 5230][T16547] hsr_slave_0: entered promiscuous mode [ 1047.260710][T16547] hsr_slave_1: entered promiscuous mode [ 1047.266831][T14209] usb 2-1: config 0 has no interface number 0 [ 1047.277554][T16547] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 1047.285264][T14209] usb 2-1: config 0 interface 52 altsetting 1 endpoint 0x8A has an invalid bInterval 0, changing to 7 [ 1047.318571][T14209] usb 2-1: config 0 interface 52 altsetting 1 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 1047.332026][T14209] usb 2-1: config 0 interface 52 has no altsetting 0 [ 1047.341068][T14209] usb 2-1: New USB device found, idVendor=06cb, idProduct=0003, bcdDevice=e8.00 [ 1047.350794][T14209] usb 2-1: New USB device strings: Mfr=22, Product=0, SerialNumber=0 [ 1047.350815][T16547] Cannot create hsr debugfs directory [ 1047.364603][T14209] usb 2-1: Manufacturer: syz [ 1047.371784][T14209] usb 2-1: config 0 descriptor?? [ 1047.379373][T14209] hub 2-1:0.52: bad descriptor, ignoring hub [ 1047.389388][T14209] hub 2-1:0.52: probe with driver hub failed with error -5 [ 1047.662183][T14209] input: syz as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.52/input/input15 [ 1047.922370][T14209] usb 2-1: USB disconnect, device number 20 [ 1049.096765][T16653] netlink: 'syz.2.2480': attribute type 6 has an invalid length. [ 1049.698056][T16547] netdevsim netdevsim8 netdevsim0: renamed from eth0 [ 1049.889204][T16547] netdevsim netdevsim8 netdevsim1: renamed from eth1 [ 1049.960358][T16656] futex_wake_op: syz.1.2481 tries to shift op by -1; fix this program [ 1050.013188][T16547] netdevsim netdevsim8 netdevsim2: renamed from eth2 [ 1050.127854][T16547] netdevsim netdevsim8 netdevsim3: renamed from eth3 [ 1050.551548][ T5921] usb 3-1: new high-speed USB device number 18 using dummy_hcd [ 1050.741602][ T5921] usb 3-1: Using ep0 maxpacket: 8 [ 1050.766156][ T5921] usb 3-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 1050.793952][ T5921] usb 3-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 1050.821397][ T5921] usb 3-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 1 [ 1050.848091][ T5921] usb 3-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 1050.906573][ T5921] usb 3-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 1050.918286][T16547] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1050.929078][ T5921] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1050.986931][T16547] 8021q: adding VLAN 0 to HW filter on device team0 [ 1051.006240][T11847] bridge0: port 1(bridge_slave_0) entered blocking state [ 1051.013367][T11847] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1051.879710][ T5921] usb 3-1: GET_CAPABILITIES returned 0 [ 1051.895091][T11847] bridge0: port 2(bridge_slave_1) entered blocking state [ 1051.902315][T11847] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1051.926052][ T5921] usbtmc 3-1:16.0: can't read capabilities [ 1052.185379][T16658] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1052.199962][T16658] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1053.040573][T16547] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 1053.707392][ T1295] ieee802154 phy0 wpan0: encryption failed: -22 [ 1053.714035][ T1295] ieee802154 phy1 wpan1: encryption failed: -22 [ 1054.551507][ T5936] usb 6-1: new high-speed USB device number 20 using dummy_hcd [ 1055.030449][ T5936] usb 6-1: New USB device found, idVendor=04fc, idProduct=504a, bcdDevice=43.02 [ 1055.050853][ T5936] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1055.093640][ T5936] usb 6-1: Product: syz [ 1055.144931][ T5936] usb 6-1: Manufacturer: syz [ 1055.191681][ T5936] usb 6-1: SerialNumber: syz [ 1055.253099][ T5936] usb 6-1: config 0 descriptor?? [ 1055.276252][ T5936] gspca_main: sunplus-2.14.0 probing 04fc:504a [ 1055.285864][T16547] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1055.775414][ T6015] usb 3-1: USB disconnect, device number 18 [ 1055.881688][ T5936] gspca_sunplus: reg_r err -71 [ 1055.921561][ T5936] sunplus 6-1:0.0: probe with driver sunplus failed with error -71 [ 1055.967386][ T5936] usb 6-1: USB disconnect, device number 20 [ 1058.547221][T16719] kexec: Could not allocate control_code_buffer [ 1058.682440][T16726] futex_wake_op: syz.7.2497 tries to shift op by -1; fix this program [ 1059.245066][T16547] veth0_vlan: entered promiscuous mode [ 1059.273097][T16547] veth1_vlan: entered promiscuous mode [ 1059.688583][T16547] veth0_macvtap: entered promiscuous mode [ 1059.976055][T16547] veth1_macvtap: entered promiscuous mode [ 1060.585065][T16547] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1060.660098][T16547] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1060.679317][T16547] netdevsim netdevsim8 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1060.698201][T16547] netdevsim netdevsim8 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1060.717602][T16547] netdevsim netdevsim8 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1061.546907][T16547] netdevsim netdevsim8 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1062.259714][T16750] vhci_hcd vhci_hcd.0: pdev(6) rhport(0) sockfd(5) [ 1062.266449][T16750] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 1062.409246][T16750] vhci_hcd vhci_hcd.0: Device attached [ 1062.439429][T16756] vhci_hcd: connection closed [ 1062.474823][ T12] vhci_hcd: stop threads [ 1062.504314][T11845] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1062.546248][T11845] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1062.579494][ T12] vhci_hcd: release socket [ 1062.631320][ T5936] usb 45-1: new high-speed USB device number 2 using vhci_hcd [ 1062.653227][ T12] vhci_hcd: disconnect device [ 1062.768565][ T6305] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1062.789170][ T6305] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1063.852391][T16774] futex_wake_op: syz.2.2512 tries to shift op by -1; fix this program [ 1066.334619][T16791] fuse: Bad value for 'fd' [ 1066.410142][T16793] nfs: Deprecated parameter 'nointr' [ 1068.751625][ T5936] vhci_hcd: vhci_device speed not set [ 1069.499884][ T6015] usb 7-1: new high-speed USB device number 7 using dummy_hcd [ 1069.691686][ T6015] usb 7-1: Using ep0 maxpacket: 16 [ 1070.481940][ T6015] usb 7-1: New USB device found, idVendor=1604, idProduct=8007, bcdDevice=af.a6 [ 1070.491373][ T6015] usb 7-1: New USB device strings: Mfr=1, Product=23, SerialNumber=3 [ 1070.501184][ T6015] usb 7-1: Product: syz [ 1070.505335][ T6015] usb 7-1: Manufacturer: syz [ 1070.509906][ T6015] usb 7-1: SerialNumber: syz [ 1070.607469][ T6015] usb 7-1: config 0 descriptor?? [ 1071.051657][T16837] futex_wake_op: syz.1.2527 tries to shift op by -1; fix this program [ 1071.180858][ T5981] usb 7-1: USB disconnect, device number 7 [ 1073.780904][T16859] vhci_hcd vhci_hcd.0: pdev(1) rhport(0) sockfd(5) [ 1073.787470][T16859] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 1073.812174][T16859] vhci_hcd vhci_hcd.0: Device attached [ 1074.132659][T16864] vhci_hcd: connection closed [ 1074.241869][T15282] vhci_hcd: stop threads [ 1074.271165][T15282] vhci_hcd: release socket [ 1074.295645][T15282] vhci_hcd: disconnect device [ 1074.311236][T13100] vhci_hcd: vhci_device speed not set [ 1075.253096][T16884] netlink: 'syz.8.2541': attribute type 6 has an invalid length. [ 1075.876132][T16886] futex_wake_op: syz.6.2542 tries to shift op by -1; fix this program [ 1076.644874][T16893] binder: 16889:16893 ioctl 5008 0 returned -22 [ 1076.659010][T16897] futex_wake_op: syz.8.2545 tries to shift op by -1; fix this program [ 1077.132892][T16895] netlink: 12 bytes leftover after parsing attributes in process `syz.6.2546'. [ 1079.467144][T16920] netlink: 40 bytes leftover after parsing attributes in process `syz.6.2554'. [ 1079.649806][T16922] netlink: 8 bytes leftover after parsing attributes in process `syz.8.2552'. [ 1079.752297][T16922] bridge0: port 2(bridge_slave_1) entered disabled state [ 1079.762707][T16922] bridge0: port 1(bridge_slave_0) entered disabled state [ 1082.335551][T16947] netlink: 'syz.1.2558': attribute type 6 has an invalid length. [ 1083.076214][T16949] pci 0000:00:05.0: vgaarb: VGA decodes changed: olddecodes=io+mem,decodes=none:owns=io+mem [ 1085.167263][T16962] xt_cgroup: invalid path, errno=-2 [ 1086.185462][T16968] netlink: 40 bytes leftover after parsing attributes in process `syz.1.2569'. [ 1086.707394][T16984] netlink: 'syz.1.2574': attribute type 6 has an invalid length. [ 1088.533363][T17002] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1089.529172][T17010] xt_cgroup: invalid path, errno=-2 [ 1091.273783][T17027] netlink: 'syz.8.2588': attribute type 6 has an invalid length. [ 1093.315660][T17039] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 1094.816050][ T5921] usb 8-1: new high-speed USB device number 9 using dummy_hcd [ 1094.925041][T17058] netlink: 204 bytes leftover after parsing attributes in process `syz.2.2594'. [ 1095.432255][ T5921] usb 8-1: Using ep0 maxpacket: 32 [ 1095.535924][ T5921] usb 8-1: config 2 has an invalid interface number: 173 but max is 0 [ 1095.566595][ T5921] usb 8-1: config 2 has no interface number 0 [ 1095.631873][ T5921] usb 8-1: New USB device found, idVendor=1bc7, idProduct=9201, bcdDevice=42.1a [ 1095.658128][ T5921] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1095.771473][ T5921] usb 8-1: Product: syz [ 1095.775713][ T5921] usb 8-1: Manufacturer: syz [ 1095.780309][ T5921] usb 8-1: SerialNumber: syz [ 1097.887689][ T5921] option 8-1:2.173: GSM modem (1-port) converter detected [ 1097.895858][ T30] audit: type=1326 audit(1753028312.175:90): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17087 comm="syz.2.2604" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f2bf618e9a9 code=0x0 [ 1097.921498][ T5921] usb 8-1: USB disconnect, device number 9 [ 1097.928469][ T5921] option 8-1:2.173: device disconnected [ 1098.271625][T12908] usb 6-1: new high-speed USB device number 21 using dummy_hcd [ 1098.871050][T12908] usb 6-1: Using ep0 maxpacket: 16 [ 1098.924189][T12908] usb 6-1: config 0 interface 0 altsetting 2 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1098.958834][T12908] usb 6-1: config 0 interface 0 altsetting 2 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1098.974982][T12908] usb 6-1: config 0 interface 0 has no altsetting 0 [ 1098.992908][T12908] usb 6-1: New USB device found, idVendor=05ac, idProduct=0247, bcdDevice= 0.00 [ 1099.041333][T12908] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1099.083035][T12908] usb 6-1: config 0 descriptor?? [ 1099.495058][T12908] apple 0003:05AC:0247.0019: unexpected long global item [ 1099.513110][T12908] apple 0003:05AC:0247.0019: parse failed [ 1099.528390][T12908] apple 0003:05AC:0247.0019: probe with driver apple failed with error -22 [ 1099.797304][T12908] usb 6-1: USB disconnect, device number 21 [ 1100.354052][T17110] netlink: 28 bytes leftover after parsing attributes in process `syz.2.2611'. [ 1100.544747][T17112] netlink: 204 bytes leftover after parsing attributes in process `syz.8.2612'. [ 1101.301708][ T5921] usb 3-1: new high-speed USB device number 19 using dummy_hcd [ 1101.432290][T14209] usb 9-1: new high-speed USB device number 2 using dummy_hcd [ 1101.468424][T17136] vhci_hcd vhci_hcd.0: pdev(5) rhport(0) sockfd(5) [ 1101.474957][T17136] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 1101.482957][ T5921] usb 3-1: Using ep0 maxpacket: 8 [ 1101.490075][T17136] vhci_hcd vhci_hcd.0: Device attached [ 1101.497804][ T5921] usb 3-1: config index 0 descriptor too short (expected 301, got 45) [ 1101.507264][T17138] vhci_hcd: connection closed [ 1101.508862][ T5921] usb 3-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 1101.509447][ T6307] vhci_hcd: stop threads [ 1101.514399][ T5921] usb 3-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 1101.528916][ T6307] vhci_hcd: release socket [ 1101.537494][ T5921] usb 3-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 1101.548243][ T6307] vhci_hcd: disconnect device [ 1101.552135][ T5921] usb 3-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 1101.571159][ T5921] usb 3-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 1101.580387][ T5921] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1101.601459][T14209] usb 9-1: Using ep0 maxpacket: 8 [ 1101.608890][T14209] usb 9-1: config 0 has an invalid interface number: 52 but max is 0 [ 1101.617197][T14209] usb 9-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1101.627675][T14209] usb 9-1: config 0 has no interface number 0 [ 1101.633962][T14209] usb 9-1: config 0 interface 52 altsetting 1 endpoint 0x8A has an invalid bInterval 0, changing to 7 [ 1101.645235][T14209] usb 9-1: config 0 interface 52 altsetting 1 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 1101.658304][T12908] usb 7-1: new high-speed USB device number 8 using dummy_hcd [ 1101.658363][T14209] usb 9-1: config 0 interface 52 has no altsetting 0 [ 1101.676098][T14209] usb 9-1: New USB device found, idVendor=06cb, idProduct=0003, bcdDevice=e8.00 [ 1101.685454][T14209] usb 9-1: New USB device strings: Mfr=22, Product=0, SerialNumber=0 [ 1101.697035][T14209] usb 9-1: Manufacturer: syz [ 1101.705489][T14209] usb 9-1: config 0 descriptor?? [ 1101.716658][T14209] hub 9-1:0.52: bad descriptor, ignoring hub [ 1101.723569][T14209] hub 9-1:0.52: probe with driver hub failed with error -5 [ 1101.800913][ T5921] usb 3-1: usb_control_msg returned -32 [ 1101.811506][ T5921] usbtmc 3-1:16.0: can't read capabilities [ 1101.821597][T12908] usb 7-1: Using ep0 maxpacket: 32 [ 1101.832827][T12908] usb 7-1: config 2 has an invalid interface number: 173 but max is 0 [ 1101.841359][T12908] usb 7-1: config 2 has no interface number 0 [ 1101.849899][T12908] usb 7-1: New USB device found, idVendor=1bc7, idProduct=9201, bcdDevice=42.1a [ 1101.859159][T12908] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1101.867227][T12908] usb 7-1: Product: syz [ 1101.871571][T12908] usb 7-1: Manufacturer: syz [ 1101.876549][T12908] usb 7-1: SerialNumber: syz [ 1101.930348][T14209] input: syz as /devices/platform/dummy_hcd.8/usb9/9-1/9-1:0.52/input/input16 [ 1102.232964][ T5921] usb 9-1: USB disconnect, device number 2 [ 1104.304769][T12324] usb 3-1: USB disconnect, device number 19 [ 1104.512548][T12908] option 7-1:2.173: GSM modem (1-port) converter detected [ 1104.606280][T12908] usb 7-1: USB disconnect, device number 8 [ 1104.653752][T12908] option 7-1:2.173: device disconnected [ 1104.874512][T17178] netlink: 204 bytes leftover after parsing attributes in process `syz.5.2634'. [ 1107.167353][ T5921] usb 3-1: new high-speed USB device number 20 using dummy_hcd [ 1107.293370][T17182] nfs: Deprecated parameter 'nointr' [ 1107.358619][ T5921] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 1107.408994][ T5921] usb 3-1: config 1 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 1107.419113][T12908] usb 8-1: new high-speed USB device number 10 using dummy_hcd [ 1107.471345][ T5921] usb 3-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 1107.487418][ T5921] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.41 [ 1107.501622][ T5921] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=11 [ 1107.511584][ T5921] usb 3-1: Product: syz [ 1107.540380][ T5921] usb 3-1: Manufacturer: syz [ 1107.567635][ T5921] usb 3-1: SerialNumber: syz [ 1107.621401][T12908] usb 8-1: Using ep0 maxpacket: 8 [ 1107.675732][T12908] usb 8-1: unable to get BOS descriptor or descriptor too short [ 1107.752926][T12908] usb 8-1: config 17 has an invalid interface number: 8 but max is 1 [ 1107.871236][T12908] usb 8-1: config 17 has 1 interface, different from the descriptor's value: 2 [ 1107.937309][ T5921] usblp 3-1:1.0: usblp0: USB Unidirectional printer dev 20 if 0 alt 0 proto 1 vid 0x0525 pid 0xA4A8 [ 1107.985121][T12908] usb 8-1: config 17 has no interface number 0 [ 1108.376319][T12908] usb 8-1: config 17 interface 8 altsetting 6 endpoint 0x3 has an invalid bInterval 0, changing to 7 [ 1108.392806][ T5921] usb 3-1: USB disconnect, device number 20 [ 1108.464900][T12908] usb 8-1: config 17 interface 8 has no altsetting 0 [ 1108.475083][ T5921] usblp0: removed [ 1108.493710][T12908] usb 8-1: New USB device found, idVendor=0763, idProduct=2001, bcdDevice=2c.ff [ 1108.508834][T12908] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1108.520935][T12908] usb 8-1: Product: syz [ 1108.536347][T12908] usb 8-1: Manufacturer: syz [ 1108.557431][T12908] usb 8-1: SerialNumber: syz [ 1109.171580][T12324] usb 9-1: new high-speed USB device number 3 using dummy_hcd [ 1109.240936][T12908] usb 8-1: selecting invalid altsetting 0 [ 1109.256468][T12908] usb 8-1: 8:6 : UAC_AS_GENERAL descriptor not found [ 1109.273597][T12908] usb 8-1: selecting invalid altsetting 0 [ 1109.353192][T12908] usb 8-1: USB disconnect, device number 10 [ 1109.361398][T12324] usb 9-1: Using ep0 maxpacket: 32 [ 1109.641454][T12324] usb 9-1: config 2 has an invalid interface number: 173 but max is 0 [ 1109.763637][T12324] usb 9-1: config 2 has no interface number 0 [ 1110.516469][T12324] usb 9-1: New USB device found, idVendor=1bc7, idProduct=9201, bcdDevice=42.1a [ 1110.525710][T12324] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1110.534084][T12324] usb 9-1: Product: syz [ 1110.538266][T12324] usb 9-1: Manufacturer: syz [ 1110.543046][T12324] usb 9-1: SerialNumber: syz [ 1110.656751][T17238] futex_wake_op: syz.1.2652 tries to shift op by -1; fix this program [ 1112.311936][T12324] option 9-1:2.173: GSM modem (1-port) converter detected [ 1112.325187][T12324] usb 9-1: USB disconnect, device number 3 [ 1112.347762][T12324] option 9-1:2.173: device disconnected [ 1112.743998][T17272] netlink: 40 bytes leftover after parsing attributes in process `syz.6.2665'. [ 1112.845403][T14209] usb 6-1: new high-speed USB device number 22 using dummy_hcd [ 1112.917543][T17275] futex_wake_op: syz.8.2666 tries to shift op by -1; fix this program [ 1113.103599][T14209] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 1113.138864][T14209] usb 6-1: config 1 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 1113.176521][T14209] usb 6-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 1113.335579][T14209] usb 6-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.41 [ 1113.348311][ T6015] usb 9-1: new low-speed USB device number 4 using dummy_hcd [ 1113.376233][T14209] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=11 [ 1113.400756][T14209] usb 6-1: Product: syz [ 1113.418625][T14209] usb 6-1: Manufacturer: syz [ 1113.436982][T14209] usb 6-1: SerialNumber: syz [ 1113.530580][T17291] pim6reg: entered allmulticast mode [ 1113.570164][ T6015] usb 9-1: device descriptor read/64, error -71 [ 1113.825244][T14209] usblp 6-1:1.0: usblp0: USB Unidirectional printer dev 22 if 0 alt 0 proto 1 vid 0x0525 pid 0xA4A8 [ 1113.860387][ T6015] usb 9-1: new low-speed USB device number 5 using dummy_hcd [ 1114.037001][T14209] usb 6-1: USB disconnect, device number 22 [ 1114.055701][T14209] usblp0: removed [ 1114.080425][ T6015] usb 9-1: device descriptor read/64, error -71 [ 1114.135402][T17296] loop9: detected capacity change from 0 to 7 [ 1114.185339][T17296] buffer_io_error: 54 callbacks suppressed [ 1114.185357][T17296] Buffer I/O error on dev loop9, logical block 0, async page read [ 1114.230331][T17296] Buffer I/O error on dev loop9, logical block 0, async page read [ 1114.241753][T17296] Buffer I/O error on dev loop9, logical block 0, async page read [ 1114.242215][ T6015] usb usb9-port1: attempt power cycle [ 1114.260974][T17296] Buffer I/O error on dev loop9, logical block 0, async page read [ 1114.276313][T17296] Buffer I/O error on dev loop9, logical block 0, async page read [ 1114.290666][T17296] Buffer I/O error on dev loop9, logical block 0, async page read [ 1114.313955][T17296] Buffer I/O error on dev loop9, logical block 0, async page read [ 1114.324702][T17296] ldm_validate_partition_table(): Disk read failed. [ 1114.332792][T17296] Buffer I/O error on dev loop9, logical block 0, async page read [ 1114.341256][T17296] Buffer I/O error on dev loop9, logical block 0, async page read [ 1114.353301][T17296] Buffer I/O error on dev loop9, logical block 0, async page read [ 1114.368033][T17296] Dev loop9: unable to read RDB block 0 [ 1114.381256][T17296] loop9: unable to read partition table [ 1114.395192][T17296] loop9: partition table beyond EOD, truncated [ 1114.401808][T17296] loop_reread_partitions: partition scan of loop9 (þ被xüŸÑø éÚ¬§½dG¤´à–ƒÝ¡¯ â·û [ 1114.401808][T17296] ) failed (rc=-5) [ 1114.961442][ T6015] usb 9-1: new low-speed USB device number 6 using dummy_hcd [ 1115.035415][ T6015] usb 9-1: device descriptor read/8, error -71 [ 1115.135367][ T1295] ieee802154 phy0 wpan0: encryption failed: -22 [ 1115.145745][ T1295] ieee802154 phy1 wpan1: encryption failed: -22 [ 1115.321583][ T6015] usb 9-1: new low-speed USB device number 7 using dummy_hcd [ 1115.514957][ T6015] usb 9-1: device descriptor read/8, error -71 [ 1115.871660][ T6015] usb usb9-port1: unable to enumerate USB device [ 1116.139877][T17316] futex_wake_op: syz.2.2681 tries to shift op by -1; fix this program [ 1116.181435][ T5921] usb 8-1: new high-speed USB device number 11 using dummy_hcd [ 1116.361207][ T5921] usb 8-1: Using ep0 maxpacket: 32 [ 1116.368149][ T5921] usb 8-1: config 2 has an invalid interface number: 173 but max is 0 [ 1116.571389][ T5921] usb 8-1: config 2 has no interface number 0 [ 1116.962312][ T5921] usb 8-1: New USB device found, idVendor=1bc7, idProduct=9201, bcdDevice=42.1a [ 1116.989401][ T5921] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1117.017609][ T5921] usb 8-1: Product: syz [ 1117.037733][ T5921] usb 8-1: Manufacturer: syz [ 1117.068533][ T5921] usb 8-1: SerialNumber: syz [ 1117.578571][ T6015] usb 9-1: new high-speed USB device number 8 using dummy_hcd [ 1118.101270][T14209] usb 7-1: new high-speed USB device number 9 using dummy_hcd [ 1118.127671][ T6015] usb 9-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 1118.156364][ T6015] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1118.181225][T12324] usb 2-1: new high-speed USB device number 21 using dummy_hcd [ 1118.216791][ T6015] usb 9-1: Product: syz [ 1118.238023][ T6015] usb 9-1: Manufacturer: syz [ 1118.264306][T14209] usb 7-1: config 1 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 1118.276717][ T6015] usb 9-1: SerialNumber: syz [ 1118.372419][T14209] usb 7-1: config 1 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 1118.378946][T12324] usb 2-1: New USB device found, idVendor=04fc, idProduct=504a, bcdDevice=43.02 [ 1118.392374][T12324] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1118.471549][T12324] usb 2-1: Product: syz [ 1118.475841][T12324] usb 2-1: Manufacturer: syz [ 1118.477716][ T6015] usb 9-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 1118.480489][T12324] usb 2-1: SerialNumber: syz [ 1118.513418][T12324] usb 2-1: config 0 descriptor?? [ 1118.544059][T14209] usb 7-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 1118.625298][T12324] gspca_main: sunplus-2.14.0 probing 04fc:504a [ 1118.735427][T14209] usb 7-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.41 [ 1118.752162][T14209] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=11 [ 1118.771754][T13100] usb 9-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 1118.791282][T14209] usb 7-1: Product: syz [ 1118.805589][T12324] gspca_sunplus: reg_r err -32 [ 1118.818116][T12324] usb 2-1: USB disconnect, device number 21 [ 1118.860268][T14209] usb 7-1: Manufacturer: syz [ 1118.896220][T14209] usb 7-1: SerialNumber: syz [ 1118.906441][ T5921] option 8-1:2.173: GSM modem (1-port) converter detected [ 1118.939192][T12908] usb 3-1: new low-speed USB device number 21 using dummy_hcd [ 1118.995893][ T5921] usb 8-1: USB disconnect, device number 11 [ 1119.029247][ T5921] option 8-1:2.173: device disconnected [ 1119.131463][T12908] usb 3-1: device descriptor read/64, error -71 [ 1119.171829][T14209] usblp 7-1:1.0: usblp0: USB Unidirectional printer dev 9 if 0 alt 0 proto 1 vid 0x0525 pid 0xA4A8 [ 1119.222417][ T5981] usb 9-1: USB disconnect, device number 8 [ 1119.384318][T14209] usb 7-1: USB disconnect, device number 9 [ 1119.413068][T12908] usb 3-1: new low-speed USB device number 22 using dummy_hcd [ 1119.471379][T14209] usblp0: removed [ 1120.007426][T13100] ath9k_htc 9-1:1.0: ath9k_htc: Target is unresponsive [ 1120.074322][T13100] ath9k_htc: Failed to initialize the device [ 1120.141250][ T5981] usb 9-1: ath9k_htc: USB layer deinitialized [ 1120.191233][T12908] usb 3-1: device descriptor read/64, error -71 [ 1120.304178][T12908] usb usb3-port1: attempt power cycle [ 1120.769699][T12908] usb 3-1: new low-speed USB device number 23 using dummy_hcd [ 1120.987820][T12908] usb 3-1: device descriptor read/8, error -71 [ 1121.478848][T12908] usb 3-1: new low-speed USB device number 24 using dummy_hcd [ 1121.668563][T17372] ip6erspan0: entered promiscuous mode [ 1122.277775][T12908] usb 3-1: device descriptor read/8, error -71 [ 1122.583679][T12908] usb usb3-port1: unable to enumerate USB device [ 1123.751238][T12908] usb 7-1: new high-speed USB device number 10 using dummy_hcd [ 1123.934665][T12908] usb 7-1: Using ep0 maxpacket: 32 [ 1123.943460][T12908] usb 7-1: config 2 has an invalid interface number: 173 but max is 0 [ 1123.951937][T12908] usb 7-1: config 2 has no interface number 0 [ 1123.967306][T12908] usb 7-1: New USB device found, idVendor=1bc7, idProduct=9201, bcdDevice=42.1a [ 1123.978424][T12908] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1123.988216][T12908] usb 7-1: Product: syz [ 1123.993333][T12908] usb 7-1: Manufacturer: syz [ 1123.997962][T12908] usb 7-1: SerialNumber: syz [ 1124.122863][T12324] usb 8-1: new high-speed USB device number 12 using dummy_hcd [ 1124.222428][ T5921] usb 3-1: new high-speed USB device number 25 using dummy_hcd [ 1124.293853][T12324] usb 8-1: config 1 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 1124.323600][T12324] usb 8-1: config 1 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 1124.333719][T12324] usb 8-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 1124.349766][T12324] usb 8-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.41 [ 1124.359005][T12324] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=11 [ 1124.367206][T12324] usb 8-1: Product: syz [ 1124.371656][T12324] usb 8-1: Manufacturer: syz [ 1124.376358][T12324] usb 8-1: SerialNumber: syz [ 1124.411652][ T5921] usb 3-1: Using ep0 maxpacket: 32 [ 1124.419741][ T5921] usb 3-1: config 0 has an invalid interface number: 184 but max is 0 [ 1124.428493][ T5921] usb 3-1: config 0 has no interface number 0 [ 1124.461285][ T5921] usb 3-1: config 0 interface 184 has no altsetting 0 [ 1124.480228][ T5921] usb 3-1: New USB device found, idVendor=0424, idProduct=7500, bcdDevice=69.ee [ 1124.503175][ T5921] usb 3-1: New USB device strings: Mfr=227, Product=1, SerialNumber=3 [ 1124.546995][ T5921] usb 3-1: Product: syz [ 1124.569082][ T5921] usb 3-1: Manufacturer: syz [ 1124.597669][ T5921] usb 3-1: SerialNumber: syz [ 1124.613014][T12324] usblp 8-1:1.0: usblp0: USB Unidirectional printer dev 12 if 0 alt 0 proto 1 vid 0x0525 pid 0xA4A8 [ 1124.670383][ T5921] usb 3-1: config 0 descriptor?? [ 1124.994371][ T5921] smsc75xx v1.0.0 [ 1125.230824][T12324] usb 8-1: USB disconnect, device number 12 [ 1125.264310][T12324] usblp0: removed [ 1125.449044][ T5921] smsc75xx 3-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000014: -71 [ 1125.479200][ T5921] smsc75xx 3-1:0.184 (unnamed net_device) (uninitialized): Failed to read PMT_CTL: -71 [ 1125.593129][ T5921] smsc75xx 3-1:0.184 (unnamed net_device) (uninitialized): device not ready in smsc75xx_bind [ 1125.606398][ T5921] smsc75xx 3-1:0.184: probe with driver smsc75xx failed with error -71 [ 1125.672666][ T5921] usb 3-1: USB disconnect, device number 25 [ 1126.012121][T17432] xt_cgroup: invalid path, errno=-2 [ 1126.163507][T12908] option 7-1:2.173: GSM modem (1-port) converter detected [ 1126.228457][T12908] usb 7-1: USB disconnect, device number 10 [ 1126.250178][T12908] option 7-1:2.173: device disconnected [ 1128.530744][T17464] nfs: Deprecated parameter 'nointr' [ 1128.899867][T17469] xt_cgroup: invalid path, errno=-2 [ 1129.034186][T17471] blk_print_req_error: 3 callbacks suppressed [ 1129.034210][T17471] I/O error, dev nbd1, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 1129.061720][T17471] buffer_io_error: 4 callbacks suppressed [ 1129.061736][T17471] Buffer I/O error on dev nbd1, logical block 0, async page read [ 1129.126333][T17478] netlink: 28 bytes leftover after parsing attributes in process `syz.1.2739'. [ 1129.160561][T17471] I/O error, dev nbd1, sector 2 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 1129.276282][T17471] Buffer I/O error on dev nbd1, logical block 1, async page read [ 1129.296851][T17471] I/O error, dev nbd1, sector 4 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 1129.321268][ T5921] usb 7-1: new high-speed USB device number 11 using dummy_hcd [ 1129.352657][T17471] Buffer I/O error on dev nbd1, logical block 2, async page read [ 1129.382950][T17478] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2739'. [ 1129.405784][T17471] I/O error, dev nbd1, sector 6 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 1129.442587][T17471] Buffer I/O error on dev nbd1, logical block 3, async page read [ 1129.474822][T17471] I/O error, dev nbd1, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 1129.484389][ T5921] usb 7-1: Using ep0 maxpacket: 32 [ 1129.496155][ T5921] usb 7-1: config 2 has an invalid interface number: 173 but max is 0 [ 1129.508205][ T5921] usb 7-1: config 2 has no interface number 0 [ 1129.523602][T17471] Buffer I/O error on dev nbd1, logical block 0, async page read [ 1129.537012][ T5921] usb 7-1: New USB device found, idVendor=1bc7, idProduct=9201, bcdDevice=42.1a [ 1129.580825][T17471] I/O error, dev nbd1, sector 2 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 1129.591338][ T5921] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1129.599521][ T5921] usb 7-1: Product: syz [ 1129.607398][ T5921] usb 7-1: Manufacturer: syz [ 1129.616418][ T5921] usb 7-1: SerialNumber: syz [ 1129.700609][T17471] Buffer I/O error on dev nbd1, logical block 1, async page read [ 1129.736959][T17488] 9pnet: p9_errstr2errno: server reported unknown error Çpî‘AçÁ›¬ž [ 1129.754906][T17471] I/O error, dev nbd1, sector 4 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 1129.767410][T17471] Buffer I/O error on dev nbd1, logical block 2, async page read [ 1129.788841][T17471] I/O error, dev nbd1, sector 6 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 1129.810450][T17471] Buffer I/O error on dev nbd1, logical block 3, async page read [ 1129.891574][T17471] I/O error, dev nbd1, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 1129.998651][T17471] Buffer I/O error on dev nbd1, logical block 0, async page read [ 1130.011761][T17471] I/O error, dev nbd1, sector 2 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 1130.020919][T17471] Buffer I/O error on dev nbd1, logical block 1, async page read [ 1130.037311][T17471] ldm_validate_partition_table(): Disk read failed. [ 1130.074482][T17471] Dev nbd1: unable to read RDB block 0 [ 1130.125396][T17471] nbd1: unable to read partition table [ 1130.828962][ T49] netdevsim netdevsim0 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1131.316581][ T49] netdevsim netdevsim0 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1131.511844][ T5981] usb 9-1: new high-speed USB device number 9 using dummy_hcd [ 1131.864840][T17508] xt_cgroup: invalid path, errno=-2 [ 1132.025221][ T49] netdevsim netdevsim0 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1132.036166][ T5981] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1132.103331][ T5981] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1132.116454][ T5921] option 7-1:2.173: GSM modem (1-port) converter detected [ 1132.192794][ T5981] usb 9-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 1132.231594][ T5921] usb 7-1: USB disconnect, device number 11 [ 1132.256815][ T5921] option 7-1:2.173: device disconnected [ 1132.274523][ T5981] usb 9-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 1132.295300][ T5981] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1132.699352][ T974] usb 6-1: new high-speed USB device number 23 using dummy_hcd [ 1132.752618][ T49] netdevsim netdevsim0 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1132.807588][ T5981] usb 9-1: config 0 descriptor?? [ 1132.921250][ T974] usb 6-1: Using ep0 maxpacket: 16 [ 1132.942706][ T974] usb 6-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xF3, changing to 0x83 [ 1133.042371][ T974] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 1133.085422][ T974] usb 6-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 1133.097923][ T974] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1133.161231][ T974] usb 6-1: Product: syz [ 1133.197960][ T974] usb 6-1: Manufacturer: syz [ 1133.242328][ T974] usb 6-1: SerialNumber: syz [ 1133.351182][T17528] netlink: 204 bytes leftover after parsing attributes in process `syz.2.2758'. [ 1133.685415][ T5981] plantronics 0003:047F:FFFF.001A: unknown main item tag 0x0 [ 1133.705364][ T974] usb 6-1: config 0 descriptor?? [ 1133.720964][ T5981] plantronics 0003:047F:FFFF.001A: unknown main item tag 0x0 [ 1133.736040][ T974] em28xx 6-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0) [ 1133.745560][ T5981] plantronics 0003:047F:FFFF.001A: unknown main item tag 0x0 [ 1133.761212][ T974] em28xx 6-1:0.0: Audio interface 0 found (Vendor Class) [ 1133.768346][ T5981] plantronics 0003:047F:FFFF.001A: unknown main item tag 0x0 [ 1133.798744][ T5981] plantronics 0003:047F:FFFF.001A: unknown main item tag 0x0 [ 1133.823464][ T5981] plantronics 0003:047F:FFFF.001A: unknown main item tag 0x0 [ 1134.343316][ T5981] plantronics 0003:047F:FFFF.001A: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.8-1/input0 [ 1134.397139][ T5981] usb 9-1: USB disconnect, device number 9 [ 1134.720410][ T974] em28xx 6-1:0.0: unknown em28xx chip ID (159) [ 1135.521030][ T974] em28xx 6-1:0.0: Config register raw data: 0x9f [ 1135.875784][ T974] em28xx 6-1:0.0: AC97 chip type couldn't be determined [ 1135.889815][ T974] em28xx 6-1:0.0: No AC97 audio processor [ 1135.971642][ T974] usb 6-1: USB disconnect, device number 23 [ 1135.997997][ T974] em28xx 6-1:0.0: Disconnecting em28xx [ 1136.046914][ T974] em28xx 6-1:0.0: Freeing device [ 1137.409172][T17578] futex_wake_op: syz.1.2774 tries to shift op by -1; fix this program [ 1137.432795][ T974] usb 9-1: new high-speed USB device number 10 using dummy_hcd [ 1137.981248][ T974] usb 9-1: Using ep0 maxpacket: 32 [ 1137.997771][ T974] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1138.054561][ T974] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1138.082341][ T974] usb 9-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 1138.127624][ T974] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1138.172359][ T974] usb 9-1: config 0 descriptor?? [ 1138.273342][ T974] hub 9-1:0.0: USB hub found [ 1138.475696][ T974] hub 9-1:0.0: 1 port detected [ 1138.541217][T13100] usb 3-1: new high-speed USB device number 26 using dummy_hcd [ 1138.701785][T13100] usb 3-1: Using ep0 maxpacket: 32 [ 1138.719704][ T49] bond0 (unregistering): Released all slaves [ 1138.733147][T13100] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1138.826785][T13100] usb 3-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 1138.909778][T13100] usb 3-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 1138.989372][T13100] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1139.043997][ T49] bond1 (unregistering): Released all slaves [ 1139.100994][T13100] usb 3-1: config 0 descriptor?? [ 1139.144191][T13100] hub 3-1:0.0: bad descriptor, ignoring hub [ 1139.161691][ T974] hub 9-1:0.0: activate --> -90 [ 1139.208255][T13100] hub 3-1:0.0: probe with driver hub failed with error -5 [ 1139.239975][ T49] tipc: Left network mode [ 1139.264427][T13100] usbhid 3-1:0.0: couldn't find an input interrupt endpoint [ 1139.519906][ T30] audit: type=1326 audit(1753028353.795:91): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17596 comm="syz.7.2782" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7eff92d8e9a9 code=0x0 [ 1139.570697][ T5921] usb 9-1: USB disconnect, device number 10 [ 1140.752625][ T49] hsr_slave_0: left promiscuous mode [ 1140.777701][ T49] hsr_slave_1: left promiscuous mode [ 1140.858256][ T49] veth1_macvtap: left promiscuous mode [ 1140.947964][ T49] veth0_macvtap: left promiscuous mode [ 1140.957506][ T49] veth1_vlan: left promiscuous mode [ 1140.963686][ T49] veth0_vlan: left promiscuous mode [ 1141.299938][T17619] futex_wake_op: syz.8.2788 tries to shift op by -1; fix this program [ 1141.862325][ T974] usb 3-1: USB disconnect, device number 26 [ 1142.419613][T17641] netlink: 'syz.8.2792': attribute type 10 has an invalid length. [ 1142.618533][T17645] vhci_hcd vhci_hcd.0: pdev(5) rhport(0) sockfd(5) [ 1142.625088][T17645] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 1142.654334][T17645] vhci_hcd vhci_hcd.0: Device attached [ 1142.698204][T17647] vhci_hcd: connection closed [ 1142.698649][ T13] vhci_hcd: stop threads [ 1142.795715][ T13] vhci_hcd: release socket [ 1142.800665][ T13] vhci_hcd: disconnect device [ 1142.813083][T17653] usb usb5: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 1143.143260][ T974] usb 9-1: new high-speed USB device number 11 using dummy_hcd [ 1143.471221][ T974] usb 9-1: Using ep0 maxpacket: 16 [ 1144.120798][ T974] usb 9-1: config 0 has an invalid descriptor of length 15, skipping remainder of the config [ 1144.156730][ T974] usb 9-1: New USB device found, idVendor=134c, idProduct=0002, bcdDevice=ec.7e [ 1144.176044][ T974] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1144.191367][ T974] usb 9-1: Product: syz [ 1144.200590][ T974] usb 9-1: Manufacturer: syz [ 1144.221399][ T974] usb 9-1: SerialNumber: syz [ 1144.259909][ T974] usb 9-1: config 0 descriptor?? [ 1144.561380][T13100] usb 7-1: new high-speed USB device number 12 using dummy_hcd [ 1144.569239][T14209] usb 3-1: new high-speed USB device number 27 using dummy_hcd [ 1144.583787][T17671] QAT: Device 253 not found [ 1144.747379][T14209] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1144.762421][T13100] usb 7-1: config 0 has an invalid interface number: 1 but max is 0 [ 1144.774989][T14209] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1144.805749][T13100] usb 7-1: config 0 has no interface number 0 [ 1144.828224][T14209] usb 3-1: New USB device found, idVendor=10c4, idProduct=ea90, bcdDevice= 0.00 [ 1144.839176][T13100] usb 7-1: New USB device found, idVendor=18b4, idProduct=fffb, bcdDevice=dc.7b [ 1144.874322][T13100] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1144.882445][T14209] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1144.891222][ T974] usb 2-1: new low-speed USB device number 22 using dummy_hcd [ 1144.893839][T13100] usb 7-1: Product: syz [ 1144.905024][T13100] usb 7-1: Manufacturer: syz [ 1144.910611][T14209] usb 3-1: config 0 descriptor?? [ 1144.915824][T13100] usb 7-1: SerialNumber: syz [ 1144.943208][T13100] usb 7-1: config 0 descriptor?? [ 1144.989897][T17677] hfsplus: unable to find HFS+ superblock [ 1145.522848][T13100] usb 7-1: dvb_usb_v2: found a 'E3C EC168 reference design' in warm state [ 1145.585902][T13100] usb 7-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 1145.607473][ T974] usb 2-1: config 0 has an invalid interface number: 1 but max is 0 [ 1145.609518][T14209] cp2112 0003:10C4:EA90.001B: unknown main item tag 0x0 [ 1145.615626][ T974] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1145.615653][ T974] usb 2-1: config 0 has no interface number 0 [ 1145.615704][ T974] usb 2-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 1145.615733][ T974] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1145.625504][ T974] usb 2-1: config 0 descriptor?? [ 1145.642481][T13100] dvbdev: DVB: registering new adapter (E3C EC168 reference design) [ 1145.669484][ T974] iowarrior 2-1:0.1: no interrupt-in endpoint found [ 1145.687243][T14209] cp2112 0003:10C4:EA90.001B: unknown main item tag 0x2 [ 1145.700759][T13100] usb 7-1: media controller created [ 1145.709203][T14209] cp2112 0003:10C4:EA90.001B: hidraw0: USB HID v0.00 Device [HID 10c4:ea90] on usb-dummy_hcd.2-1/input0 [ 1145.758616][T13100] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 1145.800892][T14209] cp2112 0003:10C4:EA90.001B: Part Number: 0x00 Device Version: 0x00 [ 1145.979623][ T24] usb 2-1: USB disconnect, device number 22 [ 1146.297023][ T24] usb 7-1: USB disconnect, device number 12 [ 1146.766434][ T974] usb 3-1: USB disconnect, device number 27 [ 1148.102452][T17693] kexec: Could not allocate control_code_buffer [ 1148.351438][T17695] vhci_hcd vhci_hcd.0: pdev(2) rhport(0) sockfd(5) [ 1148.358019][T17695] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 1148.374643][T17695] vhci_hcd vhci_hcd.0: Device attached [ 1148.402326][T17699] vhci_hcd: connection closed [ 1148.411252][T11845] vhci_hcd: stop threads [ 1148.424262][T11845] vhci_hcd: release socket [ 1148.428716][T11845] vhci_hcd: disconnect device [ 1148.483930][T17639] bridge_slave_0: left allmulticast mode [ 1148.489638][T17639] bridge_slave_0: left promiscuous mode [ 1148.501917][T17639] bridge0: port 1(bridge_slave_0) entered disabled state [ 1148.644460][T17639] bridge_slave_1: left allmulticast mode [ 1148.664033][T17639] bridge_slave_1: left promiscuous mode [ 1148.706653][T17639] bridge0: port 2(bridge_slave_1) entered disabled state [ 1148.849871][T17639] bond0: (slave bond_slave_0): Releasing backup interface [ 1149.411601][T17639] bond0: (slave bond_slave_1): Releasing backup interface [ 1149.731273][T17710] vhci_hcd vhci_hcd.0: pdev(6) rhport(0) sockfd(5) [ 1149.737843][T17710] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 1150.036031][T17710] vhci_hcd vhci_hcd.0: Device attached [ 1150.143598][T17639] team0: Port device team_slave_0 removed [ 1150.182214][T17639] team0: Port device team_slave_1 removed [ 1150.188996][T17639] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1150.218831][T17639] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1150.491786][T14209] usb 45-1: new low-speed USB device number 3 using vhci_hcd [ 1150.514456][T17639] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1150.544862][ T974] usb 7-1: new high-speed USB device number 13 using dummy_hcd [ 1151.161982][T17639] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1151.234981][T17641] bond0: (slave wlan1): Enslaving as an active interface with an up link [ 1151.321422][ T974] usb 7-1: Using ep0 maxpacket: 16 [ 1151.334466][T17731] futex_wake_op: syz.2.2821 tries to shift op by -1; fix this program [ 1151.359573][ T974] usb 7-1: config 0 has no interfaces? [ 1151.372362][T17725] sit1: entered allmulticast mode [ 1151.386259][T17722] bridge_slave_0: left allmulticast mode [ 1151.391990][T17722] bridge_slave_0: left promiscuous mode [ 1151.397778][T17722] bridge0: port 1(bridge_slave_0) entered disabled state [ 1151.491923][ T974] usb 7-1: New USB device found, idVendor=0955, idProduct=7214, bcdDevice=ed.00 [ 1151.503780][ T974] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1151.515597][T17722] bridge_slave_1: left allmulticast mode [ 1151.521621][T17722] bridge_slave_1: left promiscuous mode [ 1151.524307][ T974] usb 7-1: config 0 descriptor?? [ 1151.527409][T17722] bridge0: port 2(bridge_slave_1) entered disabled state [ 1151.599074][T17722] bond0: (slave bond_slave_0): Releasing backup interface [ 1151.623045][T17722] bond0: (slave bond_slave_1): Releasing backup interface [ 1151.642189][T17722] team0: Port device team_slave_0 removed [ 1151.660601][T17722] team0: Port device team_slave_1 removed [ 1151.667234][T17722] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1151.674923][T17722] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1151.683490][T17722] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1151.690889][T17722] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1151.705403][T17722] bond0: (slave wlan1): Releasing backup interface [ 1151.722015][T17722] bond2: (slave macvlan2): Releasing active interface [ 1151.791382][T17728] team0: Mode changed to "activebackup" [ 1151.812932][T17711] vhci_hcd: cannot find a urb of seqnum 1 max seqnum 2 [ 1151.822406][T17733] xt_cgroup: invalid path, errno=-2 [ 1151.847931][T11845] vhci_hcd: stop threads [ 1151.860662][ T5936] usb 7-1: USB disconnect, device number 13 [ 1151.870741][T11845] vhci_hcd: release socket [ 1151.891978][T11845] vhci_hcd: disconnect device [ 1152.034207][ T13] tipc: Resetting bearer [ 1155.213811][T17776] xt_cgroup: invalid path, errno=-2 [ 1155.739881][T14209] vhci_hcd: vhci_device speed not set [ 1155.978835][T13100] usb 9-1: USB disconnect, device number 11 [ 1157.081270][T17509] usb 6-1: new high-speed USB device number 24 using dummy_hcd [ 1157.438832][T17509] usb 6-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 1158.086918][T17509] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1158.097657][T17509] usb 6-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 1158.107401][T17509] usb 6-1: config 1 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 1158.121186][T17509] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 1158.213462][T17509] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 1158.281857][T17509] usb 6-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 1158.304231][T17509] usb 6-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 1158.315985][T17509] usb 6-1: Product: syz [ 1158.320173][T17509] usb 6-1: Manufacturer: syz [ 1158.443455][T17793] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22 [ 1158.487326][T17509] cdc_wdm 6-1:1.0: skipping garbage [ 1158.501388][T17509] cdc_wdm 6-1:1.0: skipping garbage [ 1159.010057][T17509] cdc_wdm 6-1:1.0: cdc-wdm0: USB WDM device [ 1159.048729][T17509] cdc_wdm 6-1:1.0: Unknown control protocol [ 1159.232848][T17509] usb 6-1: USB disconnect, device number 24 [ 1161.876352][T17846] semctl(GETNCNT/GETZCNT) is since 3.16 Single Unix Specification compliant. [ 1161.876352][T17846] The task syz.1.2858 (17846) triggered the difference, watch for misbehavior. [ 1164.314900][T17856] futex_wake_op: syz.1.2863 tries to shift op by -1; fix this program [ 1165.521224][T17509] usb 3-1: new high-speed USB device number 28 using dummy_hcd [ 1165.593543][T17871] netlink: 8 bytes leftover after parsing attributes in process `syz.6.2866'. [ 1166.370347][T17509] usb 3-1: device descriptor read/64, error -71 [ 1168.431603][T17509] usb 3-1: new high-speed USB device number 29 using dummy_hcd [ 1171.807717][T17923] geneve2: entered promiscuous mode [ 1173.032714][T17509] usb 6-1: new high-speed USB device number 25 using dummy_hcd [ 1173.311187][T17509] usb 6-1: device descriptor read/64, error -71 [ 1173.529337][T17949] futex_wake_op: syz.8.2895 tries to shift op by -1; fix this program [ 1173.571597][T17509] usb 6-1: new high-speed USB device number 26 using dummy_hcd [ 1173.781973][T17509] usb 6-1: device descriptor read/64, error -71 [ 1173.928113][T17509] usb usb6-port1: attempt power cycle [ 1174.363870][T17961] nfs: Deprecated parameter 'nointr' [ 1174.381197][T17509] usb 6-1: new high-speed USB device number 27 using dummy_hcd [ 1174.417557][T17509] usb 6-1: device descriptor read/8, error -71 [ 1174.754247][T17963] overlayfs: failed to decode file handle (len=6, type=251, flags=0, err=-22) [ 1175.641191][T17509] usb 6-1: new high-speed USB device number 28 using dummy_hcd [ 1176.112801][T17509] usb 6-1: device not accepting address 28, error -71 [ 1176.377980][T17509] usb usb6-port1: unable to enumerate USB device [ 1176.577763][ T1295] ieee802154 phy0 wpan0: encryption failed: -22 [ 1176.588291][ T1295] ieee802154 phy1 wpan1: encryption failed: -22 [ 1177.679272][T17984] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 1178.538340][T17996] futex_wake_op: syz.8.2909 tries to shift op by -1; fix this program [ 1179.342207][ T24] usb 6-1: new full-speed USB device number 29 using dummy_hcd [ 1179.633216][ T24] usb 6-1: config 0 has an invalid interface number: 93 but max is 0 [ 1179.643502][ T24] usb 6-1: config 0 has no interface number 0 [ 1179.652872][ T24] usb 6-1: New USB device found, idVendor=10b8, idProduct=1bb4, bcdDevice=34.65 [ 1179.663803][ T24] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1179.679961][ T24] usb 6-1: Product: syz [ 1179.689054][ T24] usb 6-1: Manufacturer: syz [ 1179.695999][ T24] usb 6-1: SerialNumber: syz [ 1179.704949][ T24] usb 6-1: config 0 descriptor?? [ 1180.178878][T17984] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 1180.255769][T18018] QAT: Device 253 not found [ 1180.602170][T18024] hfsplus: unable to find HFS+ superblock [ 1181.273530][ T974] usb 8-1: new high-speed USB device number 13 using dummy_hcd [ 1181.702263][ T974] usb 8-1: Using ep0 maxpacket: 32 [ 1181.846252][ T974] usb 8-1: config 0 has an invalid interface number: 146 but max is 0 [ 1181.861307][ T24] dvb-usb: found a 'DiBcom TFE7090PVR reference design' in cold state, will try to load a firmware [ 1181.889425][ T974] usb 8-1: config 0 has no interface number 0 [ 1181.897529][ T24] dvb-usb: downloading firmware from file 'dvb-usb-dib0700-1.20.fw' [ 1181.917454][ T974] usb 8-1: config 0 interface 146 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 1181.928311][ T24] dib0700: firmware download failed at 7 with -22 [ 1181.942708][ T974] usb 8-1: config 0 interface 146 altsetting 0 has an endpoint descriptor with address 0xE3, changing to 0x83 [ 1181.948424][ T24] usb 6-1: USB disconnect, device number 29 [ 1181.957634][ T974] usb 8-1: config 0 interface 146 altsetting 0 endpoint 0x83 has invalid maxpacket 33307, setting to 1024 [ 1182.015189][T18030] vhci_hcd vhci_hcd.0: pdev(1) rhport(0) sockfd(5) [ 1182.021756][T18030] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 1182.823414][T18030] vhci_hcd vhci_hcd.0: Device attached [ 1182.852400][ T974] usb 8-1: config 0 interface 146 altsetting 0 bulk endpoint 0x83 has invalid maxpacket 1024 [ 1182.962901][ T974] usb 8-1: config 0 interface 146 altsetting 0 has an endpoint descriptor with address 0xF2, changing to 0x82 [ 1182.974858][ T974] usb 8-1: config 0 interface 146 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 1182.986116][ T974] usb 8-1: config 0 interface 146 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 0 [ 1182.996297][ T974] usb 8-1: config 0 interface 146 altsetting 0 endpoint 0x1 has invalid maxpacket 29793, setting to 1024 [ 1183.007766][ T974] usb 8-1: config 0 interface 146 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 1024 [ 1183.018269][ T974] usb 8-1: config 0 interface 146 altsetting 0 has 4 endpoint descriptors, different from the interface descriptor's value: 3 [ 1183.034725][ T974] usb 8-1: New USB device found, idVendor=05da, idProduct=009a, bcdDevice=62.95 [ 1183.044237][T18035] vhci_hcd: connection closed [ 1183.047813][T11845] vhci_hcd: stop threads [ 1183.065561][ T974] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1183.080045][T11845] vhci_hcd: release socket [ 1183.084851][T14209] usb 35-1: new high-speed USB device number 3 using vhci_hcd [ 1183.092911][T11845] vhci_hcd: disconnect device [ 1183.104995][ T974] usb 8-1: Product: syz [ 1183.114684][ T974] usb 8-1: Manufacturer: syz [ 1183.124632][ T974] usb 8-1: SerialNumber: syz [ 1183.144535][ T974] usb 8-1: config 0 descriptor?? [ 1184.175900][T18023] raw-gadget.1 gadget.7: fail, usb_ep_enable returned -22 [ 1184.350003][ T974] usb 8-1: can't set config #0, error -71 [ 1184.373008][ T974] usb 8-1: USB disconnect, device number 13 [ 1184.631419][ T6015] usb 3-1: new low-speed USB device number 30 using dummy_hcd [ 1185.102928][ T6015] usb 3-1: config 0 has an invalid interface number: 1 but max is 0 [ 1185.117760][ T6015] usb 3-1: config 0 has no interface number 0 [ 1185.132609][ T6015] usb 3-1: config 0 interface 1 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 1185.153038][ T6015] usb 3-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 1185.328293][ T6015] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1185.785054][ T6015] usb 3-1: config 0 descriptor?? [ 1185.796231][ T6015] iowarrior 3-1:0.1: no interrupt-in endpoint found [ 1186.056694][ T974] usb 3-1: USB disconnect, device number 30 [ 1188.781262][T14209] vhci_hcd: vhci_device speed not set [ 1191.946031][T18117] tipc: Resetting bearer [ 1192.056113][T18120] netlink: 204 bytes leftover after parsing attributes in process `syz.2.2950'. [ 1192.431816][ T974] usb 7-1: new high-speed USB device number 14 using dummy_hcd [ 1192.511210][T14209] usb 8-1: new low-speed USB device number 14 using dummy_hcd [ 1192.601302][ T974] usb 7-1: Using ep0 maxpacket: 32 [ 1192.623268][ T974] usb 7-1: config 2 has an invalid interface number: 173 but max is 0 [ 1192.669005][ T974] usb 7-1: config 2 has no interface number 0 [ 1192.673303][T14209] usb 8-1: config 0 has an invalid interface number: 1 but max is 0 [ 1192.683478][T14209] usb 8-1: config 0 has no interface number 0 [ 1192.689967][T14209] usb 8-1: config 0 interface 1 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 1192.700030][T14209] usb 8-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 1192.709230][T14209] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1192.723445][T14209] usb 8-1: config 0 descriptor?? [ 1192.730437][ T974] usb 7-1: New USB device found, idVendor=1bc7, idProduct=9201, bcdDevice=42.1a [ 1192.733346][T14209] iowarrior 8-1:0.1: no interrupt-in endpoint found [ 1192.755502][ T974] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1192.800028][ T974] usb 7-1: Product: syz [ 1192.822183][ T974] usb 7-1: Manufacturer: syz [ 1192.844897][ T974] usb 7-1: SerialNumber: syz [ 1192.973795][ T5921] usb 8-1: USB disconnect, device number 14 [ 1193.148493][ T974] option 7-1:2.173: GSM modem (1-port) converter detected [ 1193.222714][ T974] usb 7-1: USB disconnect, device number 14 [ 1193.238782][ T974] option 7-1:2.173: device disconnected [ 1195.359206][T18165] netlink: 204 bytes leftover after parsing attributes in process `syz.8.2967'. [ 1197.647426][T18185] xt_cgroup: invalid path, errno=-2 [ 1198.841455][ T5921] usb 8-1: new low-speed USB device number 15 using dummy_hcd [ 1199.047370][ T5921] usb 8-1: config 0 has an invalid interface number: 1 but max is 0 [ 1199.076900][ T5921] usb 8-1: config 0 has no interface number 0 [ 1199.111369][ T5921] usb 8-1: config 0 interface 1 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 1199.139062][ T5921] usb 8-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 1199.177805][ T5921] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1199.204345][ T5921] usb 8-1: config 0 descriptor?? [ 1199.221300][ T5921] iowarrior 8-1:0.1: no interrupt-in endpoint found [ 1199.447584][ T974] usb 8-1: USB disconnect, device number 15 [ 1199.551338][ T5921] usb 9-1: new high-speed USB device number 12 using dummy_hcd [ 1199.736984][ T5921] usb 9-1: Using ep0 maxpacket: 32 [ 1199.794684][ T5921] usb 9-1: config 2 has an invalid interface number: 173 but max is 0 [ 1199.811227][ T5921] usb 9-1: config 2 has no interface number 0 [ 1199.819907][ T5921] usb 9-1: New USB device found, idVendor=1bc7, idProduct=9201, bcdDevice=42.1a [ 1199.829667][ T5921] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1199.837874][ T5921] usb 9-1: Product: syz [ 1199.901575][ T5921] usb 9-1: Manufacturer: syz [ 1199.918181][ T5921] usb 9-1: SerialNumber: syz [ 1200.071717][T18212] netlink: 20 bytes leftover after parsing attributes in process `syz.2.2983'. [ 1200.170595][ T5921] option 9-1:2.173: GSM modem (1-port) converter detected [ 1200.195534][ T5921] usb 9-1: USB disconnect, device number 12 [ 1200.223269][ T5921] option 9-1:2.173: device disconnected [ 1202.127702][T18233] nfs: Deprecated parameter 'nointr' [ 1204.427829][T11845] netdevsim netdevsim7 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1204.896390][T11845] netdevsim netdevsim7 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1205.252662][T11845] netdevsim netdevsim7 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1205.535522][T11845] netdevsim netdevsim7 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1205.698307][T18262] xt_cgroup: invalid path, errno=-2 [ 1205.870933][T18269] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 1206.081894][T18269] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 1206.092155][T18269] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 1206.100838][T18269] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 1206.112343][T18269] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 1206.382395][ T5981] usb 7-1: new high-speed USB device number 15 using dummy_hcd [ 1206.941298][ T5981] usb 7-1: Using ep0 maxpacket: 32 [ 1206.949513][ T5981] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1206.963589][ T5981] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1206.985248][ T5981] usb 7-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 1207.005709][ T5981] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1207.020220][ T5981] usb 7-1: config 0 descriptor?? [ 1207.036634][ T5981] hub 7-1:0.0: USB hub found [ 1207.554652][ T5981] hub 7-1:0.0: config failed, can't read hub descriptor (err -22) [ 1207.767464][ T5981] usbhid 7-1:0.0: can't add hid device: -71 [ 1207.773534][ T5981] usbhid 7-1:0.0: probe with driver usbhid failed with error -71 [ 1207.832563][ T5981] usb 7-1: USB disconnect, device number 15 [ 1208.414442][ T5161] Bluetooth: hci5: command tx timeout [ 1209.111329][T17509] usb 3-1: new low-speed USB device number 31 using dummy_hcd [ 1210.025818][T17509] usb 3-1: config 0 has an invalid interface number: 1 but max is 0 [ 1210.034099][T17509] usb 3-1: config 0 has no interface number 0 [ 1210.040186][T17509] usb 3-1: config 0 interface 1 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 10 [ 1210.099087][T17509] usb 3-1: config 0 interface 1 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 1210.127430][T17509] usb 3-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 1210.166847][T17509] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1210.199802][T17509] usb 3-1: config 0 descriptor?? [ 1210.257222][T17509] iowarrior 3-1:0.1: IOWarrior product=0x1512, serial= interface=1 now attached to iowarrior0 [ 1210.434274][T17509] usb 3-1: USB disconnect, device number 31 [ 1210.494566][ T5161] Bluetooth: hci5: command tx timeout [ 1211.991198][ T5921] usb 3-1: new high-speed USB device number 32 using dummy_hcd [ 1212.160836][ T5921] usb 3-1: Using ep0 maxpacket: 8 [ 1212.192601][ T5921] usb 3-1: config 0 has an invalid interface number: 52 but max is 0 [ 1212.200868][ T5921] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1212.211248][ T5921] usb 3-1: config 0 has no interface number 0 [ 1212.217351][ T5921] usb 3-1: config 0 interface 52 has no altsetting 0 [ 1212.259441][ T5921] usb 3-1: New USB device found, idVendor=06cb, idProduct=0003, bcdDevice=e8.00 [ 1212.318118][ T5921] usb 3-1: New USB device strings: Mfr=22, Product=0, SerialNumber=0 [ 1212.326577][ T5921] usb 3-1: Manufacturer: syz [ 1212.334211][ T5921] usb 3-1: config 0 descriptor?? [ 1212.342639][ T5921] hub 3-1:0.52: bad descriptor, ignoring hub [ 1212.348715][ T5921] hub 3-1:0.52: probe with driver hub failed with error -5 [ 1212.575932][ T5161] Bluetooth: hci5: command tx timeout [ 1212.749758][T11845] bond0 (unregistering): Released all slaves [ 1212.878843][ T5921] usb 3-1: USB disconnect, device number 32 [ 1214.089231][T18268] chnl_net:caif_netlink_parms(): no params data found [ 1214.662020][ T5161] Bluetooth: hci5: command tx timeout [ 1215.925583][T11845] hsr_slave_0: left promiscuous mode [ 1215.952629][T11845] hsr_slave_1: left promiscuous mode [ 1216.136707][T11845] veth1_macvtap: left promiscuous mode [ 1216.162519][T11845] veth0_macvtap: left promiscuous mode [ 1216.171237][T14209] usb 9-1: new full-speed USB device number 13 using dummy_hcd [ 1216.180323][T11845] veth1_vlan: left promiscuous mode [ 1216.195910][T11845] veth0_vlan: left promiscuous mode [ 1216.328913][T14209] usb 9-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1216.339683][T14209] usb 9-1: config 0 has 1 interface, different from the descriptor's value: 2 [ 1216.353589][T14209] usb 9-1: New USB device found, idVendor=05d8, idProduct=810a, bcdDevice=92.b8 [ 1216.366902][T14209] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1216.407270][T14209] usb 9-1: config 0 descriptor?? [ 1216.429587][T14209] dvb-usb: found a 'Artec T1 USB2.0' in warm state. [ 1216.442480][T14209] dvb-usb: bulk message failed: -22 (3/0) [ 1216.487262][T14209] dvb-usb: will use the device's hardware PID filter (table count: 16). [ 1216.577875][T14209] dvbdev: DVB: registering new adapter (Artec T1 USB2.0) [ 1216.618282][T14209] usb 9-1: media controller created [ 1217.022810][T14209] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 1217.474284][T14209] dvb-usb: bulk message failed: -22 (6/0) [ 1217.480344][T14209] dvb-usb: no frontend was attached by 'Artec T1 USB2.0' [ 1217.664495][T14209] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.8/usb9/9-1/input/input17 [ 1217.707842][T14209] dvb-usb: schedule remote query interval to 150 msecs. [ 1217.720680][T14209] dvb-usb: Artec T1 USB2.0 successfully initialized and connected. [ 1217.929269][ T5936] dvb-usb: bulk message failed: -22 (1/0) [ 1217.941901][ T5936] dvb-usb: error while querying for an remote control event. [ 1218.164260][ T5936] dvb-usb: bulk message failed: -22 (1/0) [ 1218.382940][ T5936] dvb-usb: error while querying for an remote control event. [ 1218.571347][ T5936] dvb-usb: bulk message failed: -22 (1/0) [ 1218.593658][ T5936] dvb-usb: error while querying for an remote control event. [ 1218.791347][T14209] dvb-usb: bulk message failed: -22 (1/0) [ 1218.803984][T14209] dvb-usb: error while querying for an remote control event. [ 1218.996984][T14209] dvb-usb: bulk message failed: -22 (1/0) [ 1219.011300][ T5936] usb 7-1: new high-speed USB device number 16 using dummy_hcd [ 1219.073873][T14209] dvb-usb: error while querying for an remote control event. [ 1219.108954][ T5981] usb 9-1: USB disconnect, device number 13 [ 1219.170636][ T5981] dvb-usb: Artec T1 USB2.0 successfully deinitialized and disconnected. [ 1219.298056][ T5936] usb 7-1: Using ep0 maxpacket: 8 [ 1219.331492][ T5936] usb 7-1: config 0 has an invalid interface number: 52 but max is 0 [ 1219.339845][ T5936] usb 7-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1219.377423][ T5936] usb 7-1: config 0 has no interface number 0 [ 1219.391409][ T5936] usb 7-1: config 0 interface 52 has no altsetting 0 [ 1219.409401][ T5936] usb 7-1: New USB device found, idVendor=06cb, idProduct=0003, bcdDevice=e8.00 [ 1219.433431][ T5936] usb 7-1: New USB device strings: Mfr=22, Product=0, SerialNumber=0 [ 1219.493894][ T5936] usb 7-1: Manufacturer: syz [ 1219.547998][ T5936] usb 7-1: config 0 descriptor?? [ 1219.577195][ T5936] hub 7-1:0.52: bad descriptor, ignoring hub [ 1219.591633][ T5936] hub 7-1:0.52: probe with driver hub failed with error -5 [ 1220.104788][ T5936] usb 7-1: USB disconnect, device number 16 [ 1223.452059][ T5981] usb 6-1: new high-speed USB device number 30 using dummy_hcd [ 1223.641499][ T6015] usb 3-1: new full-speed USB device number 33 using dummy_hcd [ 1223.672512][ T5981] usb 6-1: Using ep0 maxpacket: 16 [ 1223.679830][ T5981] usb 6-1: config 0 interface 0 altsetting 2 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1223.691948][ T5981] usb 6-1: config 0 interface 0 altsetting 2 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1223.735258][ T5981] usb 6-1: config 0 interface 0 has no altsetting 0 [ 1223.773784][ T5981] usb 6-1: New USB device found, idVendor=060b, idProduct=500a, bcdDevice= 0.00 [ 1223.817548][ T6015] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1223.828322][ T6015] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 2 [ 1223.831222][ T5981] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1223.866498][ T6015] usb 3-1: New USB device found, idVendor=05d8, idProduct=810a, bcdDevice=92.b8 [ 1223.902510][ T5981] usb 6-1: config 0 descriptor?? [ 1223.915347][ T6015] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1224.012555][ T6015] usb 3-1: config 0 descriptor?? [ 1224.104492][ T6015] dvb-usb: found a 'Artec T1 USB2.0' in warm state. [ 1224.118048][ T6015] dvb-usb: bulk message failed: -22 (3/0) [ 1224.195616][ T6015] dvb-usb: will use the device's hardware PID filter (table count: 16). [ 1224.233406][ T6015] dvbdev: DVB: registering new adapter (Artec T1 USB2.0) [ 1224.258890][ T6015] usb 3-1: media controller created [ 1224.290159][ T6015] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 1224.316143][ T30] audit: type=1326 audit(1753028438.545:92): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18406 comm="syz.6.3047" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f1e6fb8e9a9 code=0x0 [ 1224.440576][ T5981] cougar 0003:060B:500A.001C: unexpected long global item [ 1224.462280][ T5981] cougar 0003:060B:500A.001C: parse failed [ 1224.474188][ T6015] dvb-usb: bulk message failed: -22 (6/0) [ 1224.490453][ T5981] cougar 0003:060B:500A.001C: probe with driver cougar failed with error -22 [ 1224.499153][ T6015] dvb-usb: no frontend was attached by 'Artec T1 USB2.0' [ 1224.515215][ T6015] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.2/usb3/3-1/input/input18 [ 1224.547218][ T6015] dvb-usb: schedule remote query interval to 150 msecs. [ 1224.574809][ T6015] dvb-usb: Artec T1 USB2.0 successfully initialized and connected. [ 1224.586732][ T5981] usb 6-1: USB disconnect, device number 30 [ 1224.901183][ T6015] dvb-usb: bulk message failed: -22 (1/0) [ 1224.908625][ T6015] dvb-usb: error while querying for an remote control event. [ 1225.116063][ T6015] dvb-usb: bulk message failed: -22 (1/0) [ 1225.122000][ T6015] dvb-usb: error while querying for an remote control event. [ 1225.311206][ T6015] dvb-usb: bulk message failed: -22 (1/0) [ 1225.327324][ T6015] dvb-usb: error while querying for an remote control event. [ 1225.957400][ T6015] dvb-usb: bulk message failed: -22 (1/0) [ 1225.978510][ T6015] dvb-usb: error while querying for an remote control event. [ 1226.161243][ T6015] dvb-usb: bulk message failed: -22 (1/0) [ 1226.167036][ T6015] dvb-usb: error while querying for an remote control event. [ 1226.347211][ T6015] dvb-usb: bulk message failed: -22 (1/0) [ 1226.363365][ T6015] dvb-usb: error while querying for an remote control event. [ 1226.523968][ T6015] dvb-usb: bulk message failed: -22 (1/0) [ 1226.529908][ T6015] dvb-usb: error while querying for an remote control event. [ 1226.771619][ T6015] dvb-usb: bulk message failed: -22 (1/0) [ 1226.920579][ T6015] dvb-usb: error while querying for an remote control event. [ 1227.102630][ T6015] dvb-usb: bulk message failed: -22 (1/0) [ 1227.110821][ T6015] dvb-usb: error while querying for an remote control event. [ 1227.222806][T18362] syz_tun: refused to change device tx_queue_len [ 1227.301641][ T5936] dvb-usb: bulk message failed: -22 (1/0) [ 1227.307757][ T5936] dvb-usb: error while querying for an remote control event. [ 1227.822184][ T5981] usb 3-1: USB disconnect, device number 33 [ 1227.924788][ T5981] dvb-usb: Artec T1 USB2.0 successfully deinitialized and disconnected. [ 1228.130720][T18268] bridge0: port 1(bridge_slave_0) entered blocking state [ 1228.174592][T18268] bridge0: port 1(bridge_slave_0) entered disabled state [ 1228.833175][T18268] bridge_slave_0: entered allmulticast mode [ 1228.902841][T18268] bridge_slave_0: entered promiscuous mode [ 1228.934279][T18268] bridge0: port 2(bridge_slave_1) entered blocking state [ 1228.949713][T18268] bridge0: port 2(bridge_slave_1) entered disabled state [ 1228.962389][T18268] bridge_slave_1: entered allmulticast mode [ 1228.970556][T18268] bridge_slave_1: entered promiscuous mode [ 1231.109151][T18268] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1231.652192][T18268] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1231.891917][T18477] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1232.384817][T18268] team0: Port device team_slave_0 added [ 1232.433065][T18268] team0: Port device team_slave_1 added [ 1232.984591][T18485] syz_tun: refused to change device tx_queue_len [ 1233.107453][T18268] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1233.166285][T18268] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1233.262922][T18268] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1233.292254][T18268] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1233.299302][T18268] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1233.378329][T18268] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1234.453006][T18268] hsr_slave_0: entered promiscuous mode [ 1234.480437][T18268] hsr_slave_1: entered promiscuous mode [ 1234.500440][T18268] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 1234.525930][T18268] Cannot create hsr debugfs directory [ 1235.590123][T18500] capability: warning: `syz.8.3078' uses 32-bit capabilities (legacy support in use) [ 1236.863295][T18268] netdevsim netdevsim9 netdevsim0: renamed from eth0 [ 1236.882093][T18268] netdevsim netdevsim9 netdevsim1: renamed from eth1 [ 1236.904992][T18268] netdevsim netdevsim9 netdevsim2: renamed from eth2 [ 1236.927061][T18268] netdevsim netdevsim9 netdevsim3: renamed from eth3 [ 1237.308116][T18268] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1237.562801][T18268] 8021q: adding VLAN 0 to HW filter on device team0 [ 1237.620896][ T6305] bridge0: port 1(bridge_slave_0) entered blocking state [ 1237.628237][ T6305] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1238.016984][ T1295] ieee802154 phy0 wpan0: encryption failed: -22 [ 1238.024072][ T1295] ieee802154 phy1 wpan1: encryption failed: -22 [ 1238.194458][ T6303] bridge0: port 2(bridge_slave_1) entered blocking state [ 1238.201691][ T6303] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1238.457612][T18269] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 1238.470556][T18269] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 1238.611948][ T30] audit: type=1326 audit(1753028452.885:93): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18537 comm="syz.5.3090" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f201b18e9a9 code=0x0 [ 1238.633754][ C0] vkms_vblank_simulate: vblank timer overrun [ 1238.679465][T18269] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 1238.747020][T18269] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 1238.762361][T18269] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 1240.910049][T18269] Bluetooth: hci0: command tx timeout [ 1241.401203][T17509] usb 9-1: new high-speed USB device number 14 using dummy_hcd [ 1241.417390][T18534] chnl_net:caif_netlink_parms(): no params data found [ 1242.509905][T17509] usb 9-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 1242.641239][T17509] usb 9-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1242.823388][T17509] usb 9-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 1242.971282][T18269] Bluetooth: hci0: command tx timeout [ 1243.549885][T18572] kexec: Could not allocate control_code_buffer [ 1243.578245][T17509] usb 9-1: config 1 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 1243.640323][T17509] usb 9-1: config 1 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 1243.979959][T17509] usb 9-1: config 1 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 1244.242570][T17509] usb 9-1: string descriptor 0 read error: -71 [ 1244.248874][T17509] usb 9-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 1244.258629][T17509] usb 9-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 1244.279578][T17509] usb 9-1: can't set config #1, error -71 [ 1244.303408][T17509] usb 9-1: USB disconnect, device number 14 [ 1244.615194][T18587] QAT: Device 253 not found [ 1245.066551][T18269] Bluetooth: hci0: command tx timeout [ 1245.539153][T18591] hfsplus: unable to find HFS+ superblock [ 1245.580550][T18534] bridge0: port 1(bridge_slave_0) entered blocking state [ 1245.624670][T18534] bridge0: port 1(bridge_slave_0) entered disabled state [ 1245.707183][T18534] bridge_slave_0: entered allmulticast mode [ 1245.747454][T18534] bridge_slave_0: entered promiscuous mode [ 1245.852885][T18534] bridge0: port 2(bridge_slave_1) entered blocking state [ 1245.863015][T18534] bridge0: port 2(bridge_slave_1) entered disabled state [ 1245.874028][T18534] bridge_slave_1: entered allmulticast mode [ 1245.983897][T18534] bridge_slave_1: entered promiscuous mode [ 1246.129532][T18594] xt_cgroup: invalid path, errno=-2 [ 1246.170009][T18534] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1246.197385][T18268] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1246.270162][T18534] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1247.131457][T18269] Bluetooth: hci0: command tx timeout [ 1247.679537][T18534] team0: Port device team_slave_0 added [ 1247.728892][T18534] team0: Port device team_slave_1 added [ 1247.850288][T18611] netlink: 8 bytes leftover after parsing attributes in process `syz.5.3109'. [ 1248.377823][T18534] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1248.401299][T18534] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1248.441003][T18534] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1248.468966][T18534] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1248.486504][T18534] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1248.659229][T18534] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1248.777328][T18534] hsr_slave_0: entered promiscuous mode [ 1248.782384][ T5981] usb 9-1: new high-speed USB device number 15 using dummy_hcd [ 1248.797404][T18534] hsr_slave_1: entered promiscuous mode [ 1248.806037][T18534] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 1248.816179][T18534] Cannot create hsr debugfs directory [ 1249.503044][ T5981] usb 9-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 1249.513823][ T5981] usb 9-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1249.564003][ T5981] usb 9-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 1249.607092][ T5981] usb 9-1: config 1 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 1249.757515][ T5981] usb 9-1: config 1 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 1250.095887][ T5981] usb 9-1: config 1 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 1250.117702][ T5981] usb 9-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 1250.127307][ T5981] usb 9-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 1250.140055][ T5981] usb 9-1: Product: syz [ 1250.148844][ T5981] usb 9-1: Manufacturer: syz [ 1250.158994][T18615] raw-gadget.0 gadget.8: fail, usb_ep_enable returned -22 [ 1250.197528][ T5981] cdc_wdm 9-1:1.0: skipping garbage [ 1250.213725][ T5981] cdc_wdm 9-1:1.0: skipping garbage [ 1250.258927][ T5981] cdc_wdm 9-1:1.0: cdc-wdm0: USB WDM device [ 1250.280277][ T5981] cdc_wdm 9-1:1.0: Unknown control protocol [ 1250.381501][T12908] usb 9-1: USB disconnect, device number 15 [ 1250.387649][ T30] audit: type=1326 audit(1753028464.655:94): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18632 comm="syz.6.3116" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f1e6fb8e9a9 code=0x0 [ 1250.466433][T18268] veth0_vlan: entered promiscuous mode [ 1250.997792][T18268] veth1_vlan: entered promiscuous mode [ 1251.305395][T18268] veth0_macvtap: entered promiscuous mode [ 1251.330922][T18268] veth1_macvtap: entered promiscuous mode [ 1251.371411][ T5936] usb 3-1: new high-speed USB device number 34 using dummy_hcd [ 1251.549875][ T5936] usb 3-1: Using ep0 maxpacket: 16 [ 1251.560208][ T5936] usb 3-1: config 0 interface 0 altsetting 2 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1251.571891][ T5936] usb 3-1: config 0 interface 0 altsetting 2 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1251.588715][ T5936] usb 3-1: config 0 interface 0 has no altsetting 0 [ 1251.596296][ T5936] usb 3-1: New USB device found, idVendor=060b, idProduct=500a, bcdDevice= 0.00 [ 1251.613509][ T5936] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1251.723059][ T5936] usb 3-1: config 0 descriptor?? [ 1252.439140][ T5936] usbhid 3-1:0.0: can't add hid device: -71 [ 1252.463336][T18268] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1252.474387][ T5936] usbhid 3-1:0.0: probe with driver usbhid failed with error -71 [ 1252.513629][ T5936] usb 3-1: USB disconnect, device number 34 [ 1252.904751][T18268] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1252.972965][T18268] netdevsim netdevsim9 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1252.989358][T18268] netdevsim netdevsim9 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1253.040004][T18268] netdevsim netdevsim9 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1253.102614][T18268] netdevsim netdevsim9 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1253.146375][T18657] netlink: 8 bytes leftover after parsing attributes in process `syz.8.3125'. [ 1254.664611][T18534] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 1254.671745][ T6307] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1254.694758][ T6307] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1254.713747][ T30] audit: type=1326 audit(1753028468.985:95): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18669 comm="syz.6.3130" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f1e6fb8e9a9 code=0x0 [ 1254.901434][T17509] usb 9-1: new high-speed USB device number 16 using dummy_hcd [ 1254.941734][T18534] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 1255.003712][T18534] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 1255.106549][T18534] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 1255.118049][T17509] usb 9-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 1255.133106][T17509] usb 9-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1255.209289][T17509] usb 9-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 1255.276254][T17509] usb 9-1: config 1 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 1255.329242][T17509] usb 9-1: config 1 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 1255.387143][ T6137] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1255.399298][T17509] usb 9-1: config 1 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 1255.401011][ T6137] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1255.460572][T17509] usb 9-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 1255.510832][T17509] usb 9-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 1255.562305][T17509] usb 9-1: Product: syz [ 1255.580366][T17509] usb 9-1: Manufacturer: syz [ 1255.614197][T18668] raw-gadget.0 gadget.8: fail, usb_ep_enable returned -22 [ 1255.633459][T17509] cdc_wdm 9-1:1.0: skipping garbage [ 1255.650554][T17509] cdc_wdm 9-1:1.0: skipping garbage [ 1255.745040][T17509] cdc_wdm 9-1:1.0: cdc-wdm0: USB WDM device [ 1255.761339][T17509] cdc_wdm 9-1:1.0: Unknown control protocol [ 1255.848343][ T5981] usb 9-1: USB disconnect, device number 16 [ 1255.956623][T18534] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1256.043577][T18534] 8021q: adding VLAN 0 to HW filter on device team0 [ 1256.607918][ T6304] bridge0: port 1(bridge_slave_0) entered blocking state [ 1256.615097][ T6304] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1256.646441][ T6304] bridge0: port 2(bridge_slave_1) entered blocking state [ 1256.653766][ T6304] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1257.194489][T18702] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3139'. [ 1259.473227][T18721] netlink: 'syz.2.3145': attribute type 10 has an invalid length. [ 1260.058232][ T30] audit: type=1326 audit(1753028474.325:96): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18717 comm="syz.6.3144" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f1e6fb8e9a9 code=0x0 [ 1260.355112][T18534] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1260.642877][ T5981] usb 9-1: new high-speed USB device number 17 using dummy_hcd [ 1261.356693][ T5981] usb 9-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 1261.399502][ T5981] usb 9-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1261.439126][ T5981] usb 9-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 1261.513803][ T5981] usb 9-1: config 1 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 1261.594260][ T5981] usb 9-1: config 1 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 1261.635886][ T5981] usb 9-1: config 1 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 1261.820390][ T5981] usb 9-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 1261.946951][ T5981] usb 9-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 1261.997060][ T5981] usb 9-1: Product: syz [ 1262.010008][ T5981] usb 9-1: Manufacturer: syz [ 1262.061269][T14209] usb 6-1: new high-speed USB device number 31 using dummy_hcd [ 1262.067156][T18734] raw-gadget.0 gadget.8: fail, usb_ep_enable returned -22 [ 1262.088391][ T5981] cdc_wdm 9-1:1.0: skipping garbage [ 1262.097236][ T5981] cdc_wdm 9-1:1.0: skipping garbage [ 1262.106559][ T5981] cdc_wdm 9-1:1.0: cdc-wdm0: USB WDM device [ 1262.115835][ T5981] cdc_wdm 9-1:1.0: Unknown control protocol [ 1262.337511][T14209] usb 6-1: Using ep0 maxpacket: 8 [ 1262.446549][ T6015] usb 9-1: USB disconnect, device number 17 [ 1262.461897][T14209] usb 6-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 1262.491846][T14209] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1262.508732][T14209] usb 6-1: Product: syz [ 1262.515071][T14209] usb 6-1: Manufacturer: syz [ 1262.519704][T14209] usb 6-1: SerialNumber: syz [ 1262.533369][T14209] usb 6-1: config 0 descriptor?? [ 1263.155622][T14209] usb 6-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 1263.300736][T18534] veth0_vlan: entered promiscuous mode [ 1263.368736][T18534] veth1_vlan: entered promiscuous mode [ 1264.306340][T18534] veth0_macvtap: entered promiscuous mode [ 1264.433237][T18534] veth1_macvtap: entered promiscuous mode [ 1264.564613][T18534] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1264.647773][T18534] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1264.710872][T18534] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1264.754770][T18534] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1264.787877][T18534] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1264.931740][T18534] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1264.953697][T14209] dvb_usb_rtl28xxu 6-1:0.0: probe with driver dvb_usb_rtl28xxu failed with error -71 [ 1264.990925][T14209] usb 6-1: USB disconnect, device number 31 [ 1265.691324][ T5161] Bluetooth: hci1: command 0x0406 tx timeout [ 1265.736313][ T6305] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1265.802409][ T6305] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1265.845213][ T6137] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1266.372641][ T6137] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1274.276940][T18853] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1282.053541][ T6015] usb 9-1: new high-speed USB device number 18 using dummy_hcd [ 1283.077838][ T6015] usb 9-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1283.089433][ T6015] usb 9-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 1283.125496][ T6015] usb 9-1: New USB device found, idVendor=04fc, idProduct=504a, bcdDevice=43.02 [ 1283.435454][T18928] vhci_hcd vhci_hcd.0: pdev(5) rhport(0) sockfd(5) [ 1283.442020][T18928] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 1283.452143][T18928] vhci_hcd vhci_hcd.0: Device attached [ 1283.460576][T18931] vhci_hcd: connection closed [ 1283.461043][ T13] vhci_hcd: stop threads [ 1283.462143][ T6015] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1283.467344][ T13] vhci_hcd: release socket [ 1283.490301][ T13] vhci_hcd: disconnect device [ 1283.509065][ T6015] usb 9-1: Product: syz [ 1283.531756][ T6015] usb 9-1: Manufacturer: syz [ 1283.557924][ T6015] usb 9-1: SerialNumber: syz [ 1283.585708][ T6015] usb 9-1: config 0 descriptor?? [ 1284.118615][T17509] usb 9-1: USB disconnect, device number 18 [ 1285.611465][T12908] usb 10-1: new high-speed USB device number 2 using dummy_hcd [ 1285.811238][T12908] usb 10-1: Using ep0 maxpacket: 32 [ 1285.821470][T12908] usb 10-1: config 2 has an invalid interface number: 173 but max is 0 [ 1285.868759][T12908] usb 10-1: config 2 has no interface number 0 [ 1285.897227][T12908] usb 10-1: New USB device found, idVendor=1bc7, idProduct=9201, bcdDevice=42.1a [ 1285.934229][T12908] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1285.999842][T12908] usb 10-1: Product: syz [ 1286.221625][T12908] usb 10-1: Manufacturer: syz [ 1286.237225][T12908] usb 10-1: SerialNumber: syz [ 1288.847199][T12908] option 10-1:2.173: GSM modem (1-port) converter detected [ 1288.895394][T12908] usb 10-1: USB disconnect, device number 2 [ 1288.912942][T12908] option 10-1:2.173: device disconnected [ 1289.012462][ T5981] usb 3-1: new high-speed USB device number 35 using dummy_hcd [ 1289.270359][ T5981] usb 3-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 1289.562036][ T5981] usb 3-1: New USB device found, idVendor=04fc, idProduct=504a, bcdDevice=43.02 [ 1289.573697][ T5981] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1289.598092][ T5981] usb 3-1: Product: syz [ 1289.636839][ T5981] usb 3-1: Manufacturer: syz [ 1289.663786][ T5981] usb 3-1: SerialNumber: syz [ 1289.704708][ T5981] usb 3-1: config 0 descriptor?? [ 1292.108893][ T5981] usb 3-1: USB disconnect, device number 35 [ 1294.039029][T19042] @: renamed from vlan0 (while UP) [ 1299.581591][ T1295] ieee802154 phy0 wpan0: encryption failed: -22 [ 1299.588481][ T1295] ieee802154 phy1 wpan1: encryption failed: -22 [ 1303.004848][T19133] xt_cgroup: invalid path, errno=-2 [ 1305.983890][T19163] tmpfs: Cannot change global quota limit on remount [ 1306.319888][T19170] xt_cgroup: invalid path, errno=-2 [ 1308.321297][ T5161] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 1308.337209][ T5161] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 1308.356701][ T5161] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 1308.420704][ T5161] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 1308.449848][ T5161] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 1310.501658][ T5161] Bluetooth: hci3: command tx timeout [ 1311.260665][T19213] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1312.083806][T19217] xt_cgroup: invalid path, errno=-2 [ 1312.162557][T19184] chnl_net:caif_netlink_parms(): no params data found [ 1312.573551][ T5161] Bluetooth: hci3: command tx timeout [ 1314.711818][ T5161] Bluetooth: hci3: command tx timeout [ 1315.708581][T19184] bridge0: port 1(bridge_slave_0) entered blocking state [ 1315.751615][T19184] bridge0: port 1(bridge_slave_0) entered disabled state [ 1315.758963][T19184] bridge_slave_0: entered allmulticast mode [ 1315.993314][T19184] bridge_slave_0: entered promiscuous mode [ 1316.323632][T19184] bridge0: port 2(bridge_slave_1) entered blocking state [ 1316.731951][ T5161] Bluetooth: hci3: command tx timeout [ 1316.732502][T19184] bridge0: port 2(bridge_slave_1) entered disabled state [ 1316.861543][T19184] bridge_slave_1: entered allmulticast mode [ 1317.743317][T19184] bridge_slave_1: entered promiscuous mode [ 1318.016927][T19184] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1318.074737][T19184] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1318.569279][T19184] team0: Port device team_slave_0 added [ 1318.629724][T19184] team0: Port device team_slave_1 added [ 1318.898403][T19273] input: syz1 as /devices/virtual/input/input23 [ 1319.762249][T19184] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1319.999813][T19184] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1320.025831][ C1] vkms_vblank_simulate: vblank timer overrun [ 1320.795354][T19184] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1320.839966][T19184] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1320.853571][T19184] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1320.980492][T19184] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1322.479201][T19184] hsr_slave_0: entered promiscuous mode [ 1322.503029][T19184] hsr_slave_1: entered promiscuous mode [ 1322.521297][T19184] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 1322.764121][T19184] Cannot create hsr debugfs directory [ 1324.481223][ T5981] usb 9-1: new high-speed USB device number 19 using dummy_hcd [ 1324.871287][ T5981] usb 9-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 1324.910485][ T5981] usb 9-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1324.928808][ T5981] usb 9-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 1324.949068][ T5981] usb 9-1: config 1 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 1325.162915][ T5981] usb 9-1: config 1 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 1325.300647][ T5981] usb 9-1: config 1 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 1325.412947][ T5981] usb 9-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 1325.471333][ T5981] usb 9-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 1325.495590][ T5981] usb 9-1: Product: syz [ 1325.499808][ T5981] usb 9-1: Manufacturer: syz [ 1325.526725][T19319] raw-gadget.0 gadget.8: fail, usb_ep_enable returned -22 [ 1325.554840][ T5981] cdc_wdm 9-1:1.0: skipping garbage [ 1325.576094][ T5981] cdc_wdm 9-1:1.0: skipping garbage [ 1325.601526][ T5981] cdc_wdm 9-1:1.0: cdc-wdm0: USB WDM device [ 1325.617740][ T5981] cdc_wdm 9-1:1.0: Unknown control protocol [ 1326.179727][ T6015] usb 9-1: USB disconnect, device number 19 [ 1327.119416][T19184] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 1328.005676][T19184] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 1328.234956][T19184] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 1328.460495][T19184] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 1330.300553][T19184] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1330.390384][T19184] 8021q: adding VLAN 0 to HW filter on device team0 [ 1330.420450][ T13] bridge0: port 1(bridge_slave_0) entered blocking state [ 1330.427677][ T13] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1330.499225][ T6304] bridge0: port 2(bridge_slave_1) entered blocking state [ 1330.506509][ T6304] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1330.518563][T14209] usb 9-1: new high-speed USB device number 20 using dummy_hcd [ 1330.765921][T14209] usb 9-1: New USB device found, idVendor=04fc, idProduct=504a, bcdDevice=43.02 [ 1330.773819][T19184] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 1330.805923][T14209] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1330.841665][T14209] usb 9-1: Product: syz [ 1330.859551][T14209] usb 9-1: Manufacturer: syz [ 1330.877757][T14209] usb 9-1: SerialNumber: syz [ 1330.910760][T14209] usb 9-1: config 0 descriptor?? [ 1330.968997][T14209] gspca_main: sunplus-2.14.0 probing 04fc:504a [ 1331.495628][T14209] gspca_sunplus: reg_r err -110 [ 1332.799034][T19184] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1332.937729][T19428] No control pipe specified [ 1332.980052][T19184] veth0_vlan: entered promiscuous mode [ 1334.002963][T19184] veth1_vlan: entered promiscuous mode [ 1334.167845][ T5936] usb 9-1: USB disconnect, device number 20 [ 1334.329953][T19184] veth0_macvtap: entered promiscuous mode [ 1334.427751][T19184] veth1_macvtap: entered promiscuous mode [ 1335.157958][T19184] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1335.320250][T19184] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1335.390588][T19184] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1335.411179][T19184] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1335.419950][T19184] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1335.463416][T19184] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1336.383525][T19457] netlink: 8 bytes leftover after parsing attributes in process `syz.9.3384'. [ 1337.442564][ T13] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1337.450401][ T13] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1338.138833][ T6137] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1338.150558][ T6137] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1339.810327][T19469] No control pipe specified [ 1339.976343][T19481] pci 0000:00:05.0: vgaarb: VGA decodes changed: olddecodes=none,decodes=none:owns=io+mem [ 1343.247526][T19514] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3404'. [ 1344.140120][T19522] IPv6: NLM_F_CREATE should be specified when creating new route [ 1344.812713][T19525] No control pipe specified [ 1344.923956][T19529] pci 0000:00:05.0: vgaarb: VGA decodes changed: olddecodes=none,decodes=none:owns=io+mem [ 1346.624743][T19547] netlink: 'syz.8.3416': attribute type 1 has an invalid length. [ 1346.656164][T19551] nfs: Deprecated parameter 'nointr' [ 1347.030123][T19557] netlink: 8 bytes leftover after parsing attributes in process `syz.8.3419'. [ 1347.695281][T18269] Bluetooth: hci5: command 0x0406 tx timeout [ 1351.754560][T19600] netlink: 16 bytes leftover after parsing attributes in process `syz.3.3434'. [ 1352.739046][T19613] overlayfs: missing 'lowerdir' [ 1353.213875][T19623] fuse: Bad value for 'fd' [ 1354.622264][ T974] usb 3-1: new high-speed USB device number 36 using dummy_hcd [ 1355.206585][ T974] usb 3-1: New USB device found, idVendor=04fc, idProduct=504a, bcdDevice=43.02 [ 1356.159139][ T974] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1356.172045][ T974] usb 3-1: Product: syz [ 1356.176233][ T974] usb 3-1: Manufacturer: syz [ 1356.180820][ T974] usb 3-1: SerialNumber: syz [ 1356.196691][ T974] usb 3-1: config 0 descriptor?? [ 1357.054627][ T974] gspca_main: sunplus-2.14.0 probing 04fc:504a [ 1357.504081][ T974] gspca_sunplus: reg_r err -71 [ 1357.578883][ T974] usb 3-1: USB disconnect, device number 36 [ 1359.178387][T19660] overlayfs: missing 'lowerdir' [ 1359.861411][ T5981] usb 10-1: new high-speed USB device number 3 using dummy_hcd [ 1360.070847][ T5981] usb 10-1: Using ep0 maxpacket: 32 [ 1360.126821][ T5981] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1360.191569][ T5981] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1360.262324][ T5981] usb 10-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 1360.324134][ T5981] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1360.592454][ T5981] usb 10-1: config 0 descriptor?? [ 1360.605886][ T5981] hub 10-1:0.0: USB hub found [ 1360.722369][T19694] Bluetooth: MGMT ver 1.23 [ 1360.903812][ T1295] ieee802154 phy0 wpan0: encryption failed: -22 [ 1360.920055][ T1295] ieee802154 phy1 wpan1: encryption failed: -22 [ 1361.070754][ T5981] hub 10-1:0.0: 1 port detected [ 1362.365248][T17509] hub 10-1:0.0: hub_ext_port_status failed (err = -71) [ 1362.372857][ T5981] usb 10-1: USB disconnect, device number 3 [ 1363.003306][T18269] Bluetooth: hci0: command 0x0406 tx timeout [ 1363.085014][T19710] overlayfs: option "workdir=./bus" is useless in a non-upper mount, ignore [ 1363.097307][T19710] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent [ 1367.395932][T19764] overlayfs: option "workdir=./bus" is useless in a non-upper mount, ignore [ 1367.426090][T19764] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent [ 1371.705092][T19816] overlayfs: option "workdir=./bus" is useless in a non-upper mount, ignore [ 1371.714044][T19816] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent [ 1372.271307][ T5981] usb 9-1: new high-speed USB device number 21 using dummy_hcd [ 1372.951267][ T5981] usb 9-1: device descriptor read/64, error -71 [ 1373.191317][ T5981] usb 9-1: new high-speed USB device number 22 using dummy_hcd [ 1373.412408][ T5981] usb 9-1: device descriptor read/64, error -71 [ 1373.552169][ T5981] usb usb9-port1: attempt power cycle [ 1373.951208][ T5981] usb 9-1: new high-speed USB device number 23 using dummy_hcd [ 1374.071593][ T5981] usb 9-1: device descriptor read/8, error -71 [ 1374.311514][ T5981] usb 9-1: new high-speed USB device number 24 using dummy_hcd [ 1374.342031][ T5981] usb 9-1: device descriptor read/8, error -71 [ 1374.461716][ T5981] usb usb9-port1: unable to enumerate USB device [ 1379.768644][T19898] nfs: Deprecated parameter 'nointr' [ 1380.036354][T14209] usb 9-1: new high-speed USB device number 25 using dummy_hcd [ 1380.191386][T14209] usb 9-1: device descriptor read/64, error -71 [ 1380.851032][T14209] usb 9-1: new high-speed USB device number 26 using dummy_hcd [ 1382.553273][T14209] usb 9-1: device descriptor read/64, error -71 [ 1382.675352][T14209] usb usb9-port1: attempt power cycle [ 1383.530271][T14209] usb 9-1: new high-speed USB device number 27 using dummy_hcd [ 1383.907221][T14209] usb 9-1: device descriptor read/8, error -71 [ 1385.406029][T14209] usb 9-1: new high-speed USB device number 28 using dummy_hcd [ 1385.467761][T14209] usb 9-1: config 1 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 1385.480534][T14209] usb 9-1: config 1 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 1385.840058][T14209] usb 9-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 1385.953639][T14209] usb 9-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.41 [ 1385.968413][T14209] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=11 [ 1386.009668][T14209] usb 9-1: Product: syz [ 1386.027890][T14209] usb 9-1: Manufacturer: syz [ 1386.507527][T14209] usb 9-1: SerialNumber: syz [ 1386.847451][T14209] usblp 9-1:1.0: usblp0: USB Unidirectional printer dev 28 if 0 alt 0 proto 1 vid 0x0525 pid 0xA4A8 [ 1386.962489][T14209] usb 9-1: USB disconnect, device number 28 [ 1387.015862][T14209] usblp0: removed [ 1388.902897][T18269] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 1388.913258][T18269] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 1388.921241][T18269] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 1388.951497][T18269] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 1388.969438][T18269] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 1391.051819][T18269] Bluetooth: hci6: command tx timeout [ 1392.528037][T17509] usb 10-1: new high-speed USB device number 4 using dummy_hcd [ 1392.723240][T17509] usb 10-1: config 1 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 1392.814916][T17509] usb 10-1: config 1 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 1393.610920][T17509] usb 10-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 1393.619897][T18269] Bluetooth: hci6: command tx timeout [ 1393.671520][T19969] chnl_net:caif_netlink_parms(): no params data found [ 1393.698815][T17509] usb 10-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.41 [ 1393.734996][T17509] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=11 [ 1393.778371][T17509] usb 10-1: Product: syz [ 1393.808021][T17509] usb 10-1: Manufacturer: syz [ 1393.846473][T17509] usb 10-1: SerialNumber: syz [ 1394.157763][T17509] usblp 10-1:1.0: usblp0: USB Unidirectional printer dev 4 if 0 alt 0 proto 1 vid 0x0525 pid 0xA4A8 [ 1394.512429][T17509] usb 10-1: USB disconnect, device number 4 [ 1394.562232][T17509] usblp0: removed [ 1395.691632][T18269] Bluetooth: hci6: command tx timeout [ 1396.718897][T19969] bridge0: port 1(bridge_slave_0) entered blocking state [ 1396.737653][T19969] bridge0: port 1(bridge_slave_0) entered disabled state [ 1396.761484][T19969] bridge_slave_0: entered allmulticast mode [ 1396.769654][T19969] bridge_slave_0: entered promiscuous mode [ 1396.879915][T19969] bridge0: port 2(bridge_slave_1) entered blocking state [ 1396.893125][T19969] bridge0: port 2(bridge_slave_1) entered disabled state [ 1396.910769][T19969] bridge_slave_1: entered allmulticast mode [ 1396.953601][T19969] bridge_slave_1: entered promiscuous mode [ 1397.652122][T19969] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1397.683677][T19969] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1397.772593][T18269] Bluetooth: hci6: command tx timeout [ 1397.787324][T19969] team0: Port device team_slave_0 added [ 1397.809472][T19969] team0: Port device team_slave_1 added [ 1397.911225][ T5981] usb 9-1: new high-speed USB device number 29 using dummy_hcd [ 1397.991241][T13100] usb 7-1: new high-speed USB device number 17 using dummy_hcd [ 1398.029207][T19969] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1398.054659][T19969] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1398.081499][ T5981] usb 9-1: Using ep0 maxpacket: 8 [ 1398.102415][ T5981] usb 9-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 1398.121427][T19969] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1398.134185][ T5981] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1398.144247][T19969] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1398.160667][ T5981] usb 9-1: Product: syz [ 1398.161254][T19969] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1398.165629][ T5981] usb 9-1: Manufacturer: syz [ 1398.199082][T13100] usb 7-1: Using ep0 maxpacket: 32 [ 1398.223440][T13100] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1398.234608][T13100] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1398.248602][ T5981] usb 9-1: SerialNumber: syz [ 1398.251322][T19969] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1398.264198][T13100] usb 7-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 1398.281474][T13100] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1398.282960][ T5981] usb 9-1: config 0 descriptor?? [ 1398.312520][T13100] usb 7-1: config 0 descriptor?? [ 1398.323469][T13100] hub 7-1:0.0: USB hub found [ 1398.419745][T19969] hsr_slave_0: entered promiscuous mode [ 1398.447860][T19969] hsr_slave_1: entered promiscuous mode [ 1398.462406][T19969] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 1398.480260][T19969] Cannot create hsr debugfs directory [ 1398.526355][ T5981] usb 9-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 1398.530993][T13100] hub 7-1:0.0: 1 port detected [ 1399.225308][T19969] netdevsim netdevsim2 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1399.354939][T19969] netdevsim netdevsim2 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1399.434191][T19969] netdevsim netdevsim2 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1399.530722][T19969] netdevsim netdevsim2 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1399.913914][T19969] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 1399.956743][T19969] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 1399.972815][ T5936] hub 7-1:0.0: hub_ext_port_status failed (err = -32) [ 1400.004057][ T5981] dvb_usb_rtl28xxu 9-1:0.0: probe with driver dvb_usb_rtl28xxu failed with error -71 [ 1400.035944][T19969] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 1400.070307][ T5981] usb 9-1: USB disconnect, device number 29 [ 1400.098635][T19969] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 1400.380093][T19969] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1400.740302][T19969] 8021q: adding VLAN 0 to HW filter on device team0 [ 1400.913915][T13100] usb 7-1: USB disconnect, device number 17 [ 1401.044107][T15282] bridge0: port 1(bridge_slave_0) entered blocking state [ 1401.051337][T15282] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1401.153648][T15282] bridge0: port 2(bridge_slave_1) entered blocking state [ 1401.160847][T15282] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1401.648132][T19969] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 1405.701370][ T24] usb 9-1: new high-speed USB device number 30 using dummy_hcd [ 1405.871877][ T24] usb 9-1: Using ep0 maxpacket: 32 [ 1405.883631][ T24] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1405.951557][ T24] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1405.966456][T19969] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1406.011490][ T24] usb 9-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 1406.071542][ T24] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1406.112665][T19969] veth0_vlan: entered promiscuous mode [ 1406.125688][ T24] usb 9-1: config 0 descriptor?? [ 1406.154096][ T24] hub 9-1:0.0: USB hub found [ 1406.174558][T19969] veth1_vlan: entered promiscuous mode [ 1406.353703][ T24] hub 9-1:0.0: 1 port detected [ 1406.373169][T19969] veth0_macvtap: entered promiscuous mode [ 1406.423912][T19969] veth1_macvtap: entered promiscuous mode [ 1406.492937][T19969] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1406.528520][T19969] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1406.758220][T19969] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1406.767152][T19969] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1406.775965][T19969] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1406.785182][T19969] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1407.616681][ T24] hub 9-1:0.0: hub_hub_status failed (err = -32) [ 1407.626611][ T24] hub 9-1:0.0: config failed, can't get hub status (err -32) [ 1407.660145][ T24] usbhid 9-1:0.0: can't add hid device: -32 [ 1407.682401][ T24] usbhid 9-1:0.0: probe with driver usbhid failed with error -32 [ 1407.809042][T20144] trusted_key: encrypted_key: keyword 'new' not allowed when called from .update method [ 1408.668012][T15282] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1408.701050][T15282] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1408.761668][T13100] usb 9-1: USB disconnect, device number 30 [ 1408.839675][T15282] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1408.862050][T15282] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1412.726253][T12908] usb 9-1: new high-speed USB device number 31 using dummy_hcd [ 1412.883332][T12908] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1412.883374][T12908] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1412.883419][T12908] usb 9-1: New USB device found, idVendor=1e7d, idProduct=319c, bcdDevice= 0.00 [ 1412.883448][T12908] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1412.888355][T12908] usb 9-1: config 0 descriptor?? [ 1413.072110][T13100] usb 3-1: new high-speed USB device number 37 using dummy_hcd [ 1413.231440][T13100] usb 3-1: Using ep0 maxpacket: 32 [ 1413.233558][T13100] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1413.233594][T13100] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1413.233640][T13100] usb 3-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 1413.233671][T13100] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1413.236744][T13100] usb 3-1: config 0 descriptor?? [ 1413.239270][T13100] hub 3-1:0.0: USB hub found [ 1413.406476][T12908] isku 0003:1E7D:319C.001D: unknown main item tag 0x0 [ 1413.406512][T12908] isku 0003:1E7D:319C.001D: item fetching failed at offset 6/7 [ 1413.407267][T12908] isku 0003:1E7D:319C.001D: parse failed [ 1413.407342][T12908] isku 0003:1E7D:319C.001D: probe with driver isku failed with error -22 [ 1413.448145][T13100] hub 3-1:0.0: 1 port detected [ 1413.600230][T12908] usb 9-1: USB disconnect, device number 31 [ 1414.132342][ T24] usb 10-1: new high-speed USB device number 5 using dummy_hcd [ 1414.291750][ T24] usb 10-1: Using ep0 maxpacket: 16 [ 1414.294307][ T24] usb 10-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1414.294359][ T24] usb 10-1: config 0 interface 0 altsetting 2 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 1414.294418][ T24] usb 10-1: config 0 interface 0 has no altsetting 0 [ 1414.294458][ T24] usb 10-1: New USB device found, idVendor=060b, idProduct=500a, bcdDevice= 0.00 [ 1414.294486][ T24] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1414.298153][ T24] usb 10-1: config 0 descriptor?? [ 1414.321833][ T24] usbhid 10-1:0.0: couldn't find an input interrupt endpoint [ 1414.662750][T13100] hub 3-1:0.0: hub_hub_status failed (err = -32) [ 1414.669221][T13100] hub 3-1:0.0: config failed, can't get hub status (err -32) [ 1414.684926][T13100] usbhid 3-1:0.0: can't add hid device: -32 [ 1414.692313][T13100] usbhid 3-1:0.0: probe with driver usbhid failed with error -32 [ 1415.661279][T17520] usb 3-1: USB disconnect, device number 37 [ 1418.502460][T13100] usb 10-1: USB disconnect, device number 5 [ 1419.772714][T15282] netdevsim netdevsim1 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1419.974039][T15282] netdevsim netdevsim1 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1421.504768][T15282] netdevsim netdevsim1 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1421.670339][T15282] netdevsim netdevsim1 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1422.338124][ T1295] ieee802154 phy0 wpan0: encryption failed: -22 [ 1422.355207][ T1295] ieee802154 phy1 wpan1: encryption failed: -22 [ 1426.428653][T20302] QAT: Device 253 not found [ 1426.611239][ T24] usb 7-1: new high-speed USB device number 18 using dummy_hcd [ 1426.783627][T20307] hfsplus: unable to find HFS+ superblock [ 1426.801597][ T24] usb 7-1: Using ep0 maxpacket: 16 [ 1426.814739][ T24] usb 7-1: config 245 has an invalid interface number: 201 but max is 0 [ 1426.831671][ T24] usb 7-1: config 245 has no interface number 0 [ 1426.875014][ T24] usb 7-1: New USB device found, idVendor=05ac, idProduct=8218, bcdDevice=7e.cb [ 1426.889863][ T24] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1426.928689][ T24] usb 7-1: Product: syz [ 1426.947591][ T24] usb 7-1: Manufacturer: syz [ 1426.963605][ T24] usb 7-1: SerialNumber: syz [ 1427.235096][T17509] usb 7-1: USB disconnect, device number 18 [ 1428.376099][T15282] bond0 (unregistering): Released all slaves [ 1428.447435][T15282] bond1 (unregistering): Released all slaves [ 1428.686046][T14209] usb 7-1: new high-speed USB device number 19 using dummy_hcd [ 1428.953029][T14209] usb 7-1: Using ep0 maxpacket: 8 [ 1428.993005][T14209] usb 7-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 1429.002437][T14209] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1429.017541][T14209] usb 7-1: Product: syz [ 1429.032830][T14209] usb 7-1: Manufacturer: syz [ 1429.041222][T14209] usb 7-1: SerialNumber: syz [ 1429.086638][T14209] usb 7-1: config 0 descriptor?? [ 1429.149737][T15282] bond2 (unregistering): Released all slaves [ 1429.316820][T14209] usb 7-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 1430.016606][T15282] tipc: Left network mode [ 1431.234988][T14209] dvb_usb_rtl28xxu 7-1:0.0: probe with driver dvb_usb_rtl28xxu failed with error -71 [ 1431.269948][T14209] usb 7-1: USB disconnect, device number 19 [ 1433.958121][T15282] hsr_slave_0: left promiscuous mode [ 1434.039145][T15282] hsr_slave_1: left promiscuous mode [ 1434.518951][T15282] veth1_macvtap: left promiscuous mode [ 1434.544784][T15282] veth0_macvtap: left promiscuous mode [ 1434.569224][T15282] veth1_vlan: left promiscuous mode [ 1434.589677][T15282] veth0_vlan: left promiscuous mode [ 1439.051205][T14209] usb 7-1: new high-speed USB device number 20 using dummy_hcd [ 1439.231994][T14209] usb 7-1: Using ep0 maxpacket: 8 [ 1439.310437][T14209] usb 7-1: New USB device found, idVendor=1557, idProduct=7720, bcdDevice=b7.eb [ 1439.365234][T14209] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1439.417051][T14209] usb 7-1: config 0 descriptor?? [ 1439.646562][T14209] asix 7-1:0.0 (unnamed net_device) (uninitialized): invalid hw address, using random [ 1440.031340][T17520] usb 10-1: new high-speed USB device number 6 using dummy_hcd [ 1440.183789][T17520] usb 10-1: Using ep0 maxpacket: 32 [ 1440.200114][T17520] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1440.211265][T17520] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1440.221496][T17520] usb 10-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 1440.230759][T17520] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1440.252882][T17520] usb 10-1: config 0 descriptor?? [ 1440.262181][T17520] hub 10-1:0.0: USB hub found [ 1440.600857][T17509] usb 9-1: new high-speed USB device number 32 using dummy_hcd [ 1440.771551][T17509] usb 9-1: Using ep0 maxpacket: 16 [ 1440.779146][T17509] usb 9-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1440.789766][T17509] usb 9-1: config 0 interface 0 altsetting 2 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 1440.803628][T17509] usb 9-1: config 0 interface 0 has no altsetting 0 [ 1440.810368][T17509] usb 9-1: New USB device found, idVendor=060b, idProduct=500a, bcdDevice= 0.00 [ 1440.819815][T17509] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1440.832271][T17509] usb 9-1: config 0 descriptor?? [ 1440.842988][T17509] usbhid 9-1:0.0: couldn't find an input interrupt endpoint [ 1441.722507][T14209] asix 7-1:0.0 (unnamed net_device) (uninitialized): Failed to write reg index 0x0000: -71 [ 1441.754297][T14209] asix 7-1:0.0: probe with driver asix failed with error -71 [ 1441.782111][T14209] usb 7-1: USB disconnect, device number 20 [ 1443.035070][T17520] hub 10-1:0.0: config failed, can't read hub descriptor (err -22) [ 1443.061793][T17520] usbhid 10-1:0.0: can't add hid device: -71 [ 1443.533747][T17520] usbhid 10-1:0.0: probe with driver usbhid failed with error -71 [ 1443.721225][ T5936] usb 9-1: USB disconnect, device number 32 [ 1443.815696][T17520] usb 10-1: USB disconnect, device number 6 [ 1446.170727][T20458] netlink: 8 bytes leftover after parsing attributes in process `syz.8.3715'. [ 1446.800332][T20459] netlink: 44 bytes leftover after parsing attributes in process `syz.2.3714'. [ 1447.855210][T20467] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1453.998554][T20536] vhci_hcd vhci_hcd.0: pdev(8) rhport(0) sockfd(5) [ 1454.005109][T20536] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 1454.124790][T20536] vhci_hcd vhci_hcd.0: Device attached [ 1454.410781][T20538] vhci_hcd: connection closed [ 1456.163159][T17520] usb 49-1: new high-speed USB device number 2 using vhci_hcd [ 1456.178184][T20100] vhci_hcd: stop threads [ 1456.281680][T20100] vhci_hcd: release socket [ 1456.433444][T20100] vhci_hcd: disconnect device [ 1457.131296][ T5936] usb 3-1: new high-speed USB device number 38 using dummy_hcd [ 1457.595599][ T5936] usb 3-1: Using ep0 maxpacket: 8 [ 1457.864958][ T5936] usb 3-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 1457.880691][ T5936] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1457.949133][ T5936] usb 3-1: Product: syz [ 1458.257571][ T5936] usb 3-1: Manufacturer: syz [ 1458.271554][ T5936] usb 3-1: SerialNumber: syz [ 1458.296367][ T5936] usb 3-1: config 0 descriptor?? [ 1458.565770][ T5936] usb 3-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 1460.321334][ T5921] usb 7-1: new high-speed USB device number 21 using dummy_hcd [ 1460.655853][ T5936] dvb_usb_rtl28xxu 3-1:0.0: probe with driver dvb_usb_rtl28xxu failed with error -71 [ 1460.684351][ T5936] usb 3-1: USB disconnect, device number 38 [ 1460.883418][ T5921] usb 7-1: Using ep0 maxpacket: 16 [ 1460.913882][ T5921] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1460.947680][ T5921] usb 7-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 5 [ 1460.982715][ T5921] usb 7-1: New USB device found, idVendor=057e, idProduct=2019, bcdDevice= 0.00 [ 1461.001529][ T5921] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1461.049398][ T5921] usb 7-1: config 0 descriptor?? [ 1461.274315][T20584] syz_tun: refused to change device tx_queue_len [ 1461.281744][T17520] vhci_hcd: vhci_device speed not set [ 1461.522541][ T5921] nintendo 0003:057E:2019.001E: unknown main item tag 0x0 [ 1461.557644][ T5921] nintendo 0003:057E:2019.001E: unknown main item tag 0x0 [ 1461.583078][ T5921] nintendo 0003:057E:2019.001E: unknown main item tag 0x0 [ 1461.600567][ T5921] nintendo 0003:057E:2019.001E: unknown main item tag 0x0 [ 1461.671350][ T5921] nintendo 0003:057E:2019.001E: unknown main item tag 0x0 [ 1461.778494][ T5921] nintendo 0003:057E:2019.001E: hidraw0: USB HID v80.05 Device [HID 057e:2019] on usb-dummy_hcd.6-1/input0 [ 1463.041215][ T5921] nintendo 0003:057E:2019.001E: Failed to get joycon info; ret=-38 [ 1463.089895][ T5921] nintendo 0003:057E:2019.001E: Failed to retrieve controller info; ret=-38 [ 1463.207588][ T5921] nintendo 0003:057E:2019.001E: Failed to initialize controller; ret=-38 [ 1463.264512][ T5921] nintendo 0003:057E:2019.001E: probe - fail = -38 [ 1463.314910][ T5921] nintendo 0003:057E:2019.001E: probe with driver nintendo failed with error -38 [ 1463.360194][ T5921] usb 7-1: USB disconnect, device number 21 [ 1464.822790][T20610] vhci_hcd vhci_hcd.0: pdev(2) rhport(0) sockfd(5) [ 1464.829327][T20610] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 1465.353089][T20610] vhci_hcd vhci_hcd.0: Device attached [ 1465.383927][T20618] vhci_hcd: connection closed [ 1465.385088][ T49] vhci_hcd: stop threads [ 1465.411172][ T49] vhci_hcd: release socket [ 1465.437677][ T49] vhci_hcd: disconnect device [ 1465.484020][ T5921] usb 7-1: new high-speed USB device number 22 using dummy_hcd [ 1466.598210][ T5921] usb 7-1: Using ep0 maxpacket: 16 [ 1466.704234][ T5921] usb 7-1: config 0 interface 0 altsetting 2 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 1466.766706][ T5921] usb 7-1: config 0 interface 0 has no altsetting 0 [ 1466.795914][ T5921] usb 7-1: New USB device found, idVendor=060b, idProduct=500a, bcdDevice= 0.00 [ 1466.829076][ T5921] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1466.879279][ T5921] usb 7-1: config 0 descriptor?? [ 1466.911707][ T6015] usb 3-1: new high-speed USB device number 39 using dummy_hcd [ 1466.924382][ T5921] usbhid 7-1:0.0: couldn't find an input interrupt endpoint [ 1467.443937][ T6015] usb 3-1: Using ep0 maxpacket: 8 [ 1467.637855][ T6015] usb 3-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 1467.669042][ T6015] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1467.709799][ T6015] usb 3-1: Product: syz [ 1467.724629][ T6015] usb 3-1: Manufacturer: syz [ 1467.745383][ T6015] usb 3-1: SerialNumber: syz [ 1467.783836][ T6015] usb 3-1: config 0 descriptor?? [ 1468.051501][ T6015] usb 3-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 1469.090324][ T5936] usb 7-1: USB disconnect, device number 22 [ 1470.558673][ T6015] dvb_usb_rtl28xxu 3-1:0.0: probe with driver dvb_usb_rtl28xxu failed with error -71 [ 1470.596717][ T6015] usb 3-1: USB disconnect, device number 39 [ 1471.335777][ T12] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1471.683153][ T12] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1471.849497][ T12] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1472.063299][ T12] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1472.776034][T20679] nfs: Deprecated parameter 'nointr' [ 1473.167219][T20686] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 1474.395878][ T12] bridge_slave_1: left allmulticast mode [ 1474.434930][ T12] bridge_slave_1: left promiscuous mode [ 1474.492104][ T12] bridge0: port 2(bridge_slave_1) entered disabled state [ 1475.722418][ T12] bridge_slave_0: left allmulticast mode [ 1475.756158][ T12] bridge_slave_0: left promiscuous mode [ 1475.863088][ T12] bridge0: port 1(bridge_slave_0) entered disabled state [ 1476.011826][T18269] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 1476.027820][T18269] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 1476.040042][T18269] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 1476.049031][T18269] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 1476.057532][T18269] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 1476.322000][T17520] usb 10-1: new high-speed USB device number 7 using dummy_hcd [ 1476.491770][T17520] usb 10-1: Using ep0 maxpacket: 32 [ 1476.501739][T17520] usb 10-1: config 0 interface 0 has no altsetting 0 [ 1476.625607][T17520] usb 10-1: New USB device found, idVendor=16d0, idProduct=10b8, bcdDevice=de.8e [ 1476.635209][T17520] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1476.676332][T17520] usb 10-1: Product: syz [ 1476.712408][T17520] usb 10-1: Manufacturer: syz [ 1476.746348][T17520] usb 10-1: SerialNumber: syz [ 1476.768055][T17520] usb 10-1: config 0 descriptor?? [ 1477.018237][ T12] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1477.038445][ T12] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1477.058140][ T12] bond0 (unregistering): Released all slaves [ 1477.099714][T20705] ================================================================== [ 1477.107808][T20705] BUG: KASAN: slab-use-after-free in cfusbl_device_notify+0x150/0x6a0 [ 1477.115966][T20705] Read of size 8 at addr ffff8880332c8c50 by task syz.9.3793/20705 [ 1477.123847][T20705] [ 1477.126159][T20705] CPU: 0 UID: 0 PID: 20705 Comm: syz.9.3793 Not tainted 6.16.0-rc6-syzkaller-00281-gf4a40a4282f4 #0 PREEMPT(full) [ 1477.126183][T20705] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 1477.126195][T20705] Call Trace: [ 1477.126203][T20705] [ 1477.126211][T20705] dump_stack_lvl+0x189/0x250 [ 1477.126235][T20705] ? __kasan_check_byte+0x12/0x40 [ 1477.126263][T20705] ? __pfx_dump_stack_lvl+0x10/0x10 [ 1477.126285][T20705] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1477.126307][T20705] ? lock_release+0x4b/0x3e0 [ 1477.126329][T20705] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1477.126349][T20705] ? __virt_addr_valid+0x4a5/0x5c0 [ 1477.126375][T20705] print_report+0xca/0x230 [ 1477.126392][T20705] ? cfusbl_device_notify+0x150/0x6a0 [ 1477.126417][T20705] kasan_report+0x118/0x150 [ 1477.126445][T20705] ? cfusbl_device_notify+0x150/0x6a0 [ 1477.126475][T20705] cfusbl_device_notify+0x150/0x6a0 [ 1477.126500][T20705] ? net_generic+0x1e/0x240 [ 1477.126524][T20705] ? __pfx_cfusbl_device_notify+0x10/0x10 [ 1477.126550][T20705] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1477.126571][T20705] ? caif_device_notify+0x250/0xfc0 [ 1477.126597][T20705] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1477.126618][T20705] ? smc_pnet_netdev_event+0x3b5/0x6c0 [ 1477.126647][T20705] notifier_call_chain+0x1b6/0x3e0 [ 1477.126678][T20705] register_netdevice+0x121c/0x1ae0 [ 1477.126697][T20705] ? __mutex_lock+0x51b/0xe80 [ 1477.126726][T20705] ? __pfx_register_netdevice+0x10/0x10 [ 1477.126748][T20705] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1477.126769][T20705] ? __asan_memset+0x22/0x50 [ 1477.126789][T20705] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1477.126810][T20705] ? dev_addr_mod+0x2ce/0x3d0 [ 1477.126840][T20705] register_netdev+0x40/0x60 [ 1477.126858][T20705] bnep_add_connection+0x6bf/0xbf0 [ 1477.126882][T20705] ? __pfx_bnep_add_connection+0x10/0x10 [ 1477.126899][T20705] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1477.126920][T20705] ? __fget_files+0x3a0/0x420 [ 1477.126940][T20705] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1477.126963][T20705] do_bnep_sock_ioctl+0x40e/0x640 [ 1477.126981][T20705] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1477.127005][T20705] ? __pfx_do_bnep_sock_ioctl+0x10/0x10 [ 1477.127027][T20705] ? tomoyo_path_number_perm+0x1bc/0x5a0 [ 1477.127046][T20705] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1477.127067][T20705] ? tomoyo_path_number_perm+0x4e2/0x5a0 [ 1477.127087][T20705] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 1477.127104][T20705] ? rcu_is_watching+0x15/0xb0 [ 1477.127131][T20705] sock_do_ioctl+0xdc/0x300 [ 1477.127153][T20705] ? __pfx_sock_do_ioctl+0x10/0x10 [ 1477.127172][T20705] ? __lock_acquire+0xab9/0xd20 [ 1477.127199][T20705] sock_ioctl+0x576/0x790 [ 1477.127219][T20705] ? __pfx_sock_ioctl+0x10/0x10 [ 1477.127239][T20705] ? __fget_files+0x2a/0x420 [ 1477.127255][T20705] ? __fget_files+0x3a0/0x420 [ 1477.127270][T20705] ? __fget_files+0x2a/0x420 [ 1477.127288][T20705] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1477.127309][T20705] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1477.127330][T20705] ? __pfx_sock_ioctl+0x10/0x10 [ 1477.127350][T20705] __se_sys_ioctl+0xfc/0x170 [ 1477.127374][T20705] do_syscall_64+0xfa/0x3b0 [ 1477.127395][T20705] ? lockdep_hardirqs_on+0x9c/0x150 [ 1477.127414][T20705] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1477.127432][T20705] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1477.127452][T20705] ? exc_page_fault+0x9f/0xf0 [ 1477.127472][T20705] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1477.127490][T20705] RIP: 0033:0x7fedcf58e9a9 [ 1477.127507][T20705] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1477.127523][T20705] RSP: 002b:00007fedd045c038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1477.127542][T20705] RAX: ffffffffffffffda RBX: 00007fedcf7b5fa0 RCX: 00007fedcf58e9a9 [ 1477.127557][T20705] RDX: 0000200000000100 RSI: 00000000400442c8 RDI: 0000000000000006 [ 1477.127570][T20705] RBP: 00007fedcf610d69 R08: 0000000000000000 R09: 0000000000000000 [ 1477.127582][T20705] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1477.127593][T20705] R13: 0000000000000000 R14: 00007fedcf7b5fa0 R15: 00007fff7d8d1f28 [ 1477.127615][T20705] [ 1477.127622][T20705] [ 1477.530417][T20705] Allocated by task 18269: [ 1477.534817][T20705] kasan_save_track+0x3e/0x80 [ 1477.539493][T20705] __kasan_kmalloc+0x93/0xb0 [ 1477.544084][T20705] __kmalloc_cache_noprof+0x230/0x3d0 [ 1477.549472][T20705] __hci_conn_add+0x233/0x1b30 [ 1477.554232][T20705] hci_conn_request_evt+0x53e/0xb60 [ 1477.559420][T20705] hci_event_packet+0x7e3/0x1200 [ 1477.564349][T20705] hci_rx_work+0x46a/0xe80 [ 1477.568756][T20705] process_scheduled_works+0xae1/0x17b0 [ 1477.574308][T20705] worker_thread+0x8a0/0xda0 [ 1477.578890][T20705] kthread+0x711/0x8a0 [ 1477.582955][T20705] ret_from_fork+0x3fc/0x770 [ 1477.587535][T20705] ret_from_fork_asm+0x1a/0x30 [ 1477.592293][T20705] [ 1477.594600][T20705] Freed by task 19969: [ 1477.598643][T20705] kasan_save_track+0x3e/0x80 [ 1477.603314][T20705] kasan_save_free_info+0x46/0x50 [ 1477.608330][T20705] __kasan_slab_free+0x62/0x70 [ 1477.613086][T20705] kfree+0x18e/0x440 [ 1477.616973][T20705] device_release+0x9c/0x1c0 [ 1477.621550][T20705] kobject_put+0x22b/0x480 [ 1477.625981][T20705] hci_conn_del+0x8ff/0xcb0 [ 1477.630486][T20705] hci_conn_hash_flush+0x191/0x230 [ 1477.635596][T20705] hci_dev_close_sync+0xaef/0x1330 [ 1477.640702][T20705] hci_unregister_dev+0x21a/0x510 [ 1477.645719][T20705] vhci_release+0x80/0xd0 [ 1477.650040][T20705] __fput+0x44c/0xa70 [ 1477.654044][T20705] task_work_run+0x1d4/0x260 [ 1477.658631][T20705] do_exit+0x6b5/0x22e0 [ 1477.662788][T20705] do_group_exit+0x21c/0x2d0 [ 1477.667375][T20705] __x64_sys_exit_group+0x3f/0x40 [ 1477.672398][T20705] x64_sys_call+0x21ba/0x21c0 [ 1477.677072][T20705] do_syscall_64+0xfa/0x3b0 [ 1477.681571][T20705] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1477.687456][T20705] [ 1477.689859][T20705] Last potentially related work creation: [ 1477.695569][T20705] kasan_save_stack+0x3e/0x60 [ 1477.700253][T20705] kasan_record_aux_stack+0xbd/0xd0 [ 1477.705447][T20705] insert_work+0x3d/0x330 [ 1477.709772][T20705] __queue_work+0xcfc/0xfe0 [ 1477.714272][T20705] queue_delayed_work_on+0x18b/0x280 [ 1477.719594][T20705] l2cap_chan_del+0x285/0x5e0 [ 1477.724296][T20705] l2cap_conn_del+0x388/0x680 [ 1477.728999][T20705] hci_conn_hash_flush+0x10d/0x230 [ 1477.734127][T20705] hci_dev_close_sync+0xaef/0x1330 [ 1477.739246][T20705] hci_unregister_dev+0x21a/0x510 [ 1477.744300][T20705] vhci_release+0x80/0xd0 [ 1477.748635][T20705] __fput+0x44c/0xa70 [ 1477.752622][T20705] task_work_run+0x1d4/0x260 [ 1477.757221][T20705] do_exit+0x6b5/0x22e0 [ 1477.761379][T20705] do_group_exit+0x21c/0x2d0 [ 1477.765974][T20705] __x64_sys_exit_group+0x3f/0x40 [ 1477.771001][T20705] x64_sys_call+0x21ba/0x21c0 [ 1477.775688][T20705] do_syscall_64+0xfa/0x3b0 [ 1477.780212][T20705] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1477.786102][T20705] [ 1477.788413][T20705] The buggy address belongs to the object at ffff8880332c8000 [ 1477.788413][T20705] which belongs to the cache kmalloc-8k of size 8192 [ 1477.802456][T20705] The buggy address is located 3152 bytes inside of [ 1477.802456][T20705] freed 8192-byte region [ffff8880332c8000, ffff8880332ca000) [ 1477.816417][T20705] [ 1477.818731][T20705] The buggy address belongs to the physical page: [ 1477.825128][T20705] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x332c8 [ 1477.833879][T20705] head: order:3 mapcount:0 entire_mapcount:0 nr_pages_mapped:0 pincount:0 [ 1477.842369][T20705] flags: 0xfff00000000040(head|node=0|zone=1|lastcpupid=0x7ff) [ 1477.849909][T20705] page_type: f5(slab) [ 1477.853911][T20705] raw: 00fff00000000040 ffff88801a442280 dead000000000122 0000000000000000 [ 1477.862488][T20705] raw: 0000000000000000 0000000000020002 00000000f5000000 0000000000000000 [ 1477.871062][T20705] head: 00fff00000000040 ffff88801a442280 dead000000000122 0000000000000000 [ 1477.879732][T20705] head: 0000000000000000 0000000000020002 00000000f5000000 0000000000000000 [ 1477.888403][T20705] head: 00fff00000000003 ffffea0000ccb201 00000000ffffffff 00000000ffffffff [ 1477.897070][T20705] head: ffffffffffffffff 0000000000000000 00000000ffffffff 0000000000000008 [ 1477.905729][T20705] page dumped because: kasan: bad access detected [ 1477.912128][T20705] page_owner tracks the page as allocated [ 1477.917826][T20705] page last allocated via order 3, migratetype Unmovable, gfp_mask 0xd20c0(__GFP_IO|__GFP_FS|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP|__GFP_NOMEMALLOC), pid 18269, tgid 18269 (kworker/u9:0), ts 1389022420493, free_ts 1388583521746 [ 1477.939706][T20705] post_alloc_hook+0x240/0x2a0 [ 1477.944480][T20705] get_page_from_freelist+0x21e4/0x22c0 [ 1477.950030][T20705] __alloc_frozen_pages_noprof+0x181/0x370 [ 1477.955836][T20705] alloc_pages_mpol+0x232/0x4a0 [ 1477.960725][T20705] allocate_slab+0x8a/0x3b0 [ 1477.965223][T20705] ___slab_alloc+0xbfc/0x1480 [ 1477.969892][T20705] __kmalloc_cache_noprof+0x296/0x3d0 [ 1477.975269][T20705] __hci_conn_add+0x233/0x1b30 [ 1477.980037][T20705] hci_conn_request_evt+0x53e/0xb60 [ 1477.985229][T20705] hci_event_packet+0x7e3/0x1200 [ 1477.990158][T20705] hci_rx_work+0x46a/0xe80 [ 1477.994568][T20705] process_scheduled_works+0xae1/0x17b0 [ 1478.000110][T20705] worker_thread+0x8a0/0xda0 [ 1478.004705][T20705] kthread+0x711/0x8a0 [ 1478.008777][T20705] ret_from_fork+0x3fc/0x770 [ 1478.013366][T20705] ret_from_fork_asm+0x1a/0x30 [ 1478.018137][T20705] page last free pid 19962 tgid 19959 stack trace: [ 1478.024623][T20705] __free_frozen_pages+0xc71/0xe70 [ 1478.029744][T20705] __slab_free+0x326/0x400 [ 1478.034153][T20705] qlist_free_all+0x97/0x140 [ 1478.038755][T20705] kasan_quarantine_reduce+0x148/0x160 [ 1478.044214][T20705] __kasan_slab_alloc+0x22/0x80 [ 1478.049071][T20705] __kmalloc_cache_node_noprof+0x1c0/0x3d0 [ 1478.054886][T20705] sched_setaffinity+0x27d/0x430 [ 1478.059835][T20705] __x64_sys_sched_setaffinity+0x100/0x160 [ 1478.065648][T20705] do_syscall_64+0xfa/0x3b0 [ 1478.070159][T20705] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1478.076050][T20705] [ 1478.078363][T20705] Memory state around the buggy address: [ 1478.083988][T20705] ffff8880332c8b00: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 1478.092045][T20705] ffff8880332c8b80: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 1478.100101][T20705] >ffff8880332c8c00: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 1478.108153][T20705] ^ [ 1478.114817][T20705] ffff8880332c8c80: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 1478.122872][T20705] ffff8880332c8d00: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 1478.130923][T20705] ================================================================== [ 1478.162346][T20705] Kernel panic - not syncing: KASAN: panic_on_warn set ... [ 1478.169587][T20705] CPU: 0 UID: 0 PID: 20705 Comm: syz.9.3793 Not tainted 6.16.0-rc6-syzkaller-00281-gf4a40a4282f4 #0 PREEMPT(full) [ 1478.181658][T20705] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 1478.191727][T20705] Call Trace: [ 1478.194999][T20705] [ 1478.197932][T20705] dump_stack_lvl+0x99/0x250 [ 1478.202533][T20705] ? __asan_memcpy+0x40/0x70 [ 1478.207157][T20705] ? __pfx_dump_stack_lvl+0x10/0x10 [ 1478.212359][T20705] ? __pfx__printk+0x10/0x10 [ 1478.216957][T20705] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1478.222614][T20705] panic+0x2db/0x790 [ 1478.226518][T20705] ? __pfx_panic+0x10/0x10 [ 1478.230962][T20705] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1478.236621][T20705] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1478.242267][T20705] ? _raw_spin_unlock_irqrestore+0xfd/0x110 [ 1478.248164][T20705] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 1478.254493][T20705] ? print_memory_metadata+0x314/0x400 [ 1478.260114][T20705] ? cfusbl_device_notify+0x150/0x6a0 [ 1478.265589][T20705] check_panic_on_warn+0x89/0xb0 [ 1478.270539][T20705] ? cfusbl_device_notify+0x150/0x6a0 [ 1478.275917][T20705] end_report+0x78/0x160 [ 1478.280172][T20705] kasan_report+0x129/0x150 [ 1478.284687][T20705] ? cfusbl_device_notify+0x150/0x6a0 [ 1478.290070][T20705] cfusbl_device_notify+0x150/0x6a0 [ 1478.295282][T20705] ? net_generic+0x1e/0x240 [ 1478.299797][T20705] ? __pfx_cfusbl_device_notify+0x10/0x10 [ 1478.305525][T20705] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1478.311165][T20705] ? caif_device_notify+0x250/0xfc0 [ 1478.316374][T20705] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1478.322012][T20705] ? smc_pnet_netdev_event+0x3b5/0x6c0 [ 1478.327480][T20705] notifier_call_chain+0x1b6/0x3e0 [ 1478.332687][T20705] register_netdevice+0x121c/0x1ae0 [ 1478.337972][T20705] ? __mutex_lock+0x51b/0xe80 [ 1478.342657][T20705] ? __pfx_register_netdevice+0x10/0x10 [ 1478.348203][T20705] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1478.353836][T20705] ? __asan_memset+0x22/0x50 [ 1478.358426][T20705] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1478.364061][T20705] ? dev_addr_mod+0x2ce/0x3d0 [ 1478.368749][T20705] register_netdev+0x40/0x60 [ 1478.373337][T20705] bnep_add_connection+0x6bf/0xbf0 [ 1478.378451][T20705] ? __pfx_bnep_add_connection+0x10/0x10 [ 1478.384081][T20705] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1478.389714][T20705] ? __fget_files+0x3a0/0x420 [ 1478.394390][T20705] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1478.400024][T20705] do_bnep_sock_ioctl+0x40e/0x640 [ 1478.405135][T20705] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1478.410772][T20705] ? __pfx_do_bnep_sock_ioctl+0x10/0x10 [ 1478.416325][T20705] ? tomoyo_path_number_perm+0x1bc/0x5a0 [ 1478.421967][T20705] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1478.427607][T20705] ? tomoyo_path_number_perm+0x4e2/0x5a0 [ 1478.433332][T20705] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 1478.439314][T20705] ? rcu_is_watching+0x15/0xb0 [ 1478.444093][T20705] sock_do_ioctl+0xdc/0x300 [ 1478.448598][T20705] ? __pfx_sock_do_ioctl+0x10/0x10 [ 1478.453722][T20705] ? __lock_acquire+0xab9/0xd20 [ 1478.458583][T20705] sock_ioctl+0x576/0x790 [ 1478.462914][T20705] ? __pfx_sock_ioctl+0x10/0x10 [ 1478.467772][T20705] ? __fget_files+0x2a/0x420 [ 1478.472357][T20705] ? __fget_files+0x3a0/0x420 [ 1478.477025][T20705] ? __fget_files+0x2a/0x420 [ 1478.481615][T20705] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1478.487261][T20705] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1478.492897][T20705] ? __pfx_sock_ioctl+0x10/0x10 [ 1478.497751][T20705] __se_sys_ioctl+0xfc/0x170 [ 1478.502352][T20705] do_syscall_64+0xfa/0x3b0 [ 1478.506856][T20705] ? lockdep_hardirqs_on+0x9c/0x150 [ 1478.512051][T20705] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1478.518118][T20705] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1478.523753][T20705] ? exc_page_fault+0x9f/0xf0 [ 1478.528429][T20705] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1478.534320][T20705] RIP: 0033:0x7fedcf58e9a9 [ 1478.538729][T20705] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1478.558335][T20705] RSP: 002b:00007fedd045c038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1478.566757][T20705] RAX: ffffffffffffffda RBX: 00007fedcf7b5fa0 RCX: 00007fedcf58e9a9 [ 1478.574728][T20705] RDX: 0000200000000100 RSI: 00000000400442c8 RDI: 0000000000000006 [ 1478.582695][T20705] RBP: 00007fedcf610d69 R08: 0000000000000000 R09: 0000000000000000 [ 1478.590660][T20705] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1478.598624][T20705] R13: 0000000000000000 R14: 00007fedcf7b5fa0 R15: 00007fff7d8d1f28 [ 1478.606601][T20705] [ 1478.609829][T20705] Kernel Offset: disabled [ 1478.614148][T20705] Rebooting in 86400 seconds..