last executing test programs: 15m51.691614843s ago: executing program 32 (id=4684): syz_usb_control_io$hid(0xffffffffffffffff, &(0x7f0000000240)={0x24, &(0x7f00000002c0)=ANY=[@ANYBLOB="00000c000000070001"], 0x0, 0x0, 0x0}, 0x0) sendmsg$IPCTNL_MSG_CT_DELETE(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)=ANY=[@ANYBLOB="e40000000201010800000000000000000a000000d00001800c000280050001000000000014000180080001000000000008000200000000002c00018014000300ff01000000000000000000000000000114000400ff0100000000000000000000000000010c00028005000100000000004700028005000100010000000600064000000000060005"], 0xe4}}, 0x0) mprotect(&(0x7f0000000000/0x2000)=nil, 0x2000, 0xc) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_FLUSH(r0, &(0x7f00000001c0)={0x0, 0x0, 0x0}, 0x0) 14m27.096525647s ago: executing program 33 (id=5550): r0 = userfaultfd(0x801) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f00000000c0)) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000000)={{&(0x7f0000400000/0xc00000)=nil, 0xc00000}, 0x3}) syz_io_uring_setup(0x5b0f, &(0x7f0000000000)={0x0, 0xfffffffc, 0x1000, 0x0, 0x359}, &(0x7f00000002c0), &(0x7f0000ff4000)) close_range(r0, r0, 0x0) 8m14.795876412s ago: executing program 34 (id=9312): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000040)={0x26, 'skcipher\x00', 0x0, 0x0, 'xts-aes-aesni\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000000)="adcd1a9a3fc36e961ed00fe41b0cd695", 0x20) r1 = accept4$alg(r0, 0x0, 0x0, 0x0) read$alg(r1, &(0x7f00000012c0)=""/4109, 0x100d) sendmsg$alg(r1, &(0x7f0000001280)={0x0, 0x0, &(0x7f0000001200)=[{&(0x7f0000000e00)="7911bf87e318844b7b7ece8fe95693844ba2b4c29049c749521cf970374e19e3e0eb47e456c6b48e9e6cbd7bf0c99099ca842917790c07a3922b2732c0b26c06681e5f6eeb013cae354f9e4cbdb1e2740ed027e6cea3bf48243cf3a4dfea964f056d9750a3845e1afa1cd4746ed1de3dcd86984fcb49e380144defb2648b5d28438225bdb08ba43fde421a07274d5d77389ddda7dbfec5ce2019fb2b85555c3adbf6812125af1e846cf1c0e4b88a751c58dfad1d210fbec40a1b21115f69230ca80b3ed558b27f6c46fe25c01fe4c18c0ba7d1e6861f6eb75b6f4903971921f799a56c12097998d9cfdce430335046f02dd1fef77b36c617b8b67621", 0xfc}, {&(0x7f0000002300)="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", 0xf11}], 0x2, &(0x7f0000001240)=[@op={0x10, 0x117, 0x3, 0x1}], 0x10, 0x8801}, 0x4000001) 7m50.550715698s ago: executing program 2 (id=9519): r0 = gettid() timer_create(0x7, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r0}, &(0x7f0000bbdffc)=0x0) timer_settime(r1, 0x1, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x3938700}}, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r2, 0x5) accept4(r2, 0x0, 0x0, 0x80800) 7m49.566775434s ago: executing program 2 (id=9535): r0 = syz_open_dev$vim2m(&(0x7f0000000100), 0x0, 0x2) ioctl$vim2m_VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f00000000c0)={0x1, 0x2, 0x1}) ioctl$vim2m_VIDIOC_EXPBUF(r0, 0xc0405610, &(0x7f0000000040)={0x2}) close(r0) r1 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x2, 0x7fff7ffc}]}) close_range(r1, 0xffffffffffffffff, 0x200000000000000) 7m49.238830118s ago: executing program 2 (id=9540): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="640000000001010400000000141a000002000000240001801400018008000100e000000108000200e00000010c00028005000100000000002400028014000180080001000000000008000200ac1e00010c0002800500010000000000080007"], 0x64}}, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)={0x6c, 0x0, 0x1, 0x401, 0x0, 0x0, {0x2}, [@CTA_TUPLE_ORIG={0x2c, 0x1, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @private=0xa010100}, {0x8, 0x2, @dev}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x4}]}, @CTA_TUPLE_REPLY={0x24, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @multicast1}, {0x8, 0x2, @multicast1}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TIMEOUT={0x8}]}, 0x6c}, 0x1, 0x0, 0x0, 0x14}, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000340)={0x38, 0x0, 0x1, 0x401, 0x0, 0x0, {0x2}, [@CTA_TUPLE_REPLY={0x24, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @multicast1}, {0x8, 0x2, @multicast1}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}]}, 0x38}}, 0x0) 7m49.003503761s ago: executing program 2 (id=9543): mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) r0 = open_tree(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x89901) move_mount(r0, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) r1 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r1, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000300)='./file0\x00', 0x41) umount2(&(0x7f0000000200)='./file0/../file0/../file0/../file0\x00', 0x1) 7m48.816343778s ago: executing program 2 (id=9547): openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) timer_create(0x0, &(0x7f0000000080)={0x0, 0x11, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000000)) timer_settime(0x0, 0x0, &(0x7f0000000240)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) mprotect(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x4) r0 = syz_open_procfs(0x0, &(0x7f0000000000)='net/dev_snmp6\x00') getdents(r0, &(0x7f0000001ec0)=""/4096, 0x1000) 7m48.207101612s ago: executing program 2 (id=9554): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x10, 0x3, 0x6) r2 = socket(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r1, 0x8933, &(0x7f0000000040)={'team0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000300)=@newqdisc={0x88, 0x24, 0xf0b, 0x70bd26, 0x0, {0x0, 0x0, 0x0, r3, {0x0, 0xffff}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_mqprio={{0xb}, {0x58, 0x2, {{0x2, [], 0x0, [0x4, 0x2, 0xfffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5c4, 0x0, 0x800, 0x0, 0x3dc], [0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000]}}}}]}, 0x88}}, 0x20000000) sendmsg$nl_route_sched(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000003c0)=@newqdisc={0x34, 0x24, 0x4ee4e6a52ff56541, 0x70bd2d, 0x10000, {0x0, 0x0, 0x0, r3, {0x0, 0xfff2}, {0x1, 0xffff}, {0x2, 0x3}}, [@qdisc_kind_options=@q_pfifo_fast={0xf}]}, 0x34}, 0x1, 0x0, 0x0, 0x8041}, 0x800) 7m47.802716404s ago: executing program 35 (id=9554): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x10, 0x3, 0x6) r2 = socket(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r1, 0x8933, &(0x7f0000000040)={'team0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000300)=@newqdisc={0x88, 0x24, 0xf0b, 0x70bd26, 0x0, {0x0, 0x0, 0x0, r3, {0x0, 0xffff}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_mqprio={{0xb}, {0x58, 0x2, {{0x2, [], 0x0, [0x4, 0x2, 0xfffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5c4, 0x0, 0x800, 0x0, 0x3dc], [0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000]}}}}]}, 0x88}}, 0x20000000) sendmsg$nl_route_sched(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000003c0)=@newqdisc={0x34, 0x24, 0x4ee4e6a52ff56541, 0x70bd2d, 0x10000, {0x0, 0x0, 0x0, r3, {0x0, 0xfff2}, {0x1, 0xffff}, {0x2, 0x3}}, [@qdisc_kind_options=@q_pfifo_fast={0xf}]}, 0x34}, 0x1, 0x0, 0x0, 0x8041}, 0x800) 5m47.800814389s ago: executing program 4 (id=10583): r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x41, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000dc0)={0x0, 0x0, 0x0, 0x0, 0x0, "0062ba7d82000000160000000000f738096304"}) r1 = syz_open_pts(r0, 0x900) dup3(r1, r0, 0x80000) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) pselect6(0x40, &(0x7f0000000100)={0x0, 0x20, 0x0, 0x0, 0x800, 0x0, 0x2}, 0x0, &(0x7f0000000240)={0x1f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6a9}, &(0x7f0000000280)={0x0, 0x3938700}, 0x0) 5m47.62479074s ago: executing program 4 (id=10585): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000380)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-cast5-avx\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f00000004c0)="2c385a7af3", 0x5) r1 = accept4(r0, 0x0, 0x0, 0x800) sendmmsg$alg(r1, &(0x7f0000000040)=[{0x0, 0x0, 0x0, 0x0, &(0x7f0000000280)=[@op={0x10, 0x117, 0x3, 0x1}], 0x10}], 0x1, 0x40800) recvmsg(r1, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x51}], 0x1}, 0x0) 5m47.54188889s ago: executing program 4 (id=10587): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000000c0)={0xffffffffffffffff, 0x0, 0xd, 0x0, &(0x7f00000002c0)="e02742e86c0d85ff9782762f08", 0x0, 0x40000, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) r1 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}}) write$tun(r0, &(0x7f0000000280)={@val={0x1c, 0x800}, @val={0x1, 0x0, 0x0, 0x0, 0x3d}, @mpls={[], @ipv4=@tcp={{0x6, 0x4, 0x0, 0x0, 0x3f, 0x0, 0x0, 0x0, 0x84, 0x0, @empty=0x3fffffff, @local}, {{0x0, 0x0, 0x41424344, 0x41424344, 0x0, 0x2, 0xb, 0x0, 0x300, 0x0, 0x1c, {[@window={0xe, 0x3}, @timestamp={0x5, 0x2, 0x7ffffff}, @generic={0x0, 0x2, "d58838068b91"}]}}}}}}, 0x4e) 5m47.349031257s ago: executing program 4 (id=10589): r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) syz_mount_image$fuse(&(0x7f0000000080), &(0x7f00000000c0)='./file0\x00', 0x0, &(0x7f0000002240)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0], 0x0, 0x0, 0x0) r1 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r1, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x41) r2 = open_tree(r1, &(0x7f0000000bc0)='./file0\x00', 0x800) move_mount(r2, &(0x7f00000001c0)='.\x00', 0xffffffffffffff9c, &(0x7f0000000300)='./file0\x00', 0x220) 5m46.445890806s ago: executing program 4 (id=10600): r0 = syz_open_dev$mouse(&(0x7f00000000c0), 0x0, 0x2042) io_setup(0x9, &(0x7f0000000b80)=0x0) write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000400)={'syz0\x00', {0x7, 0x4, 0x6, 0xfffa}, 0x1d, [0x6, 0xc95a, 0xfffffff3, 0x9, 0x7f, 0x2, 0x1, 0x7f, 0x6, 0xfffffff9, 0xfffffff2, 0x5f, 0xa, 0x3, 0xffff2d37, 0x1dd2, 0x6, 0x7, 0x0, 0x80000001, 0x4, 0x7, 0x3, 0x3c5b, 0x1, 0x24, 0xffffffff, 0xfffffffe, 0x1f461e2c, 0x1, 0xe661, 0x4, 0x9, 0x3, 0x7fff, 0x4c74, 0x8f00, 0x642, 0x3, 0xa, 0x0, 0x71, 0x7, 0x7, 0x103, 0x0, 0x5, 0x3c, 0x91, 0x6, 0xfffffffd, 0x3, 0x5, 0x4, 0x8, 0x0, 0x80, 0x0, 0x5, 0x6, 0x8, 0x4, 0x1, 0x40], [0x10000007, 0x8, 0x12f, 0x8000, 0x10, 0x8, 0x129432e2, 0xcb, 0xf6, 0xb, 0x2bf, 0x6c9, 0x9, 0xfffffffe, 0x7, 0x0, 0x7, 0x5, 0x2f, 0xe, 0x312, 0x78, 0xea4, 0xa, 0x4, 0x4000, 0x8000, 0x9, 0x400, 0x1, 0x6, 0xfffffffd, 0xff, 0x1005, 0x7f, 0x5f31, 0x4, 0x0, 0x6, 0x2, 0x9, 0x20000004, 0x9, 0x8, 0x9, 0x6, 0x5, 0x0, 0x0, 0x8000, 0xffff, 0x2, 0x7f, 0x9, 0x5, 0x10003, 0x4, 0x1, 0x7, 0xb, 0x9, 0x48c93690, 0x3, 0xff], [0x7, 0x4, 0x0, 0x64e, 0xfffffdfe, 0x7fffffff, 0x8ce, 0x9, 0x1, 0x1, 0x0, 0x5, 0xb, 0x4, 0x5, 0x5, 0x0, 0x6, 0x5, 0x8, 0x86, 0x3, 0x10000009, 0x3e7, 0xb, 0x5, 0x2, 0x2, 0xf, 0x8, 0x4, 0x6d01, 0x5, 0x3b, 0x3, 0x200, 0x80, 0x3, 0x4, 0x2, 0x0, 0xa2, 0x7, 0x53cf697b, 0x7, 0x6, 0x54fe12d6, 0xbf, 0x200, 0x3, 0x400002, 0xfffffff9, 0x0, 0x6, 0x5, 0x0, 0x3, 0xfffffffb, 0x120000, 0x3, 0x6, 0x9, 0x0, 0x3], [0x9, 0xbb2f, 0x3, 0x7, 0x5, 0x938, 0x6, 0x6, 0x0, 0x5, 0xce7, 0x1ff, 0x6, 0x8ad, 0x5, 0x3, 0x101, 0x10000, 0x6, 0x7fff, 0x8ffff, 0xa620, 0x2, 0x5, 0x6, 0x2, 0x14c, 0x60a7, 0x6, 0x5, 0xffffffff, 0x7ffffffe, 0x5, 0x8, 0xc8, 0x3, 0x3, 0xffff, 0x3, 0x9, 0x100, 0x9602, 0xa, 0x2, 0x1, 0x6, 0x1, 0x10000, 0x2, 0x8, 0x2b91, 0xa1f, 0x8, 0x9, 0x1, 0x6c1b, 0x0, 0x4, 0x5, 0xb1c, 0x1, 0x200, 0xffff3441, 0xfff]}, 0x45c) io_submit(r1, 0x1, &(0x7f00000002c0)=[&(0x7f0000000180)={0x0, 0x0, 0x0, 0x5, 0x0, r0, 0x0, 0x0, 0x0, 0x0, 0x0, r0}]) r2 = syz_open_dev$evdev(&(0x7f0000000000), 0x3, 0x822b01) write$char_usb(r2, &(0x7f0000000040)="e2", 0x918) 5m46.130722398s ago: executing program 4 (id=10602): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$KDSKBENT(0xffffffffffffffff, 0x4b47, &(0x7f0000000080)={0x5, 0x40, 0x9}) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x4e24, 0x0, @loopback, 0x3681}, 0x1c) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) setsockopt$inet6_tcp_TCP_MD5SIG(r0, 0x6, 0x20, &(0x7f0000000000)={@in6={{0xa, 0x4e22, 0x7, @local, 0x7}}, 0x0, 0x0, 0x3a, 0x0, "a30b3b28af4d2f246a016542daa845f387713f4048ff2ece1e75f1fc0100f41e4de6256109383664417165bba0dd5ace522fa788000000000033035551502f07b4001a00"}, 0xd8) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x4e21, 0x1ff, @loopback, 0x23}, 0x1c) 5m45.732632476s ago: executing program 36 (id=10602): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$KDSKBENT(0xffffffffffffffff, 0x4b47, &(0x7f0000000080)={0x5, 0x40, 0x9}) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x4e24, 0x0, @loopback, 0x3681}, 0x1c) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) setsockopt$inet6_tcp_TCP_MD5SIG(r0, 0x6, 0x20, &(0x7f0000000000)={@in6={{0xa, 0x4e22, 0x7, @local, 0x7}}, 0x0, 0x0, 0x3a, 0x0, "a30b3b28af4d2f246a016542daa845f387713f4048ff2ece1e75f1fc0100f41e4de6256109383664417165bba0dd5ace522fa788000000000033035551502f07b4001a00"}, 0xd8) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x4e21, 0x1ff, @loopback, 0x23}, 0x1c) 2m54.758082323s ago: executing program 7 (id=12324): r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x25, &(0x7f0000000200)=0x474c, 0x4) bind$inet(r0, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x10) connect$inet(r0, &(0x7f0000000480)={0x2, 0x0, @multicast2}, 0x10) sendmmsg(r0, &(0x7f0000007fc0), 0x800001d, 0x0) sendmsg$NFNL_MSG_ACCT_NEW(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={0x0, 0x68}, 0x1, 0x0, 0x0, 0x48040}, 0x10) recvmmsg(r0, &(0x7f0000000040), 0x291962b, 0x45833af92e4b39ff, 0x0) 2m54.512903446s ago: executing program 7 (id=12327): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x1fd, 0x1, 0x0, 0x2000, &(0x7f0000b07000/0x2000)=nil}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_GET_VCPU_EVENTS(r2, 0x4048aecb, &(0x7f0000000000)) r3 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x72, 0x0, 0x7fff0000}]}) close_range(r3, 0xffffffffffffffff, 0x0) 2m54.255719157s ago: executing program 7 (id=12329): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket(0x400000000010, 0x3, 0x0) r2 = socket$unix(0x1, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r3, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0xf}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000780)=@newtfilter={0x54, 0x2c, 0xd27, 0x70bd28, 0x0, {0x0, 0x0, 0x0, r3, {0x0, 0xfff1}, {}, {0x9}}, [@filter_kind_options=@f_basic={{0xa}, {0x24, 0x2, [@TCA_BASIC_EMATCHES={0x20, 0x2, 0x0, 0x1, [@TCA_EMATCH_TREE_HDR={0x8, 0x1, {0x3}}, @TCA_EMATCH_TREE_LIST={0x14, 0x2, 0x0, 0x1, [@TCF_EM_IPSET={0x7, 0x1, 0x0, 0x0, {{0x3, 0x8, 0x2}}}]}]}]}}]}, 0x54}, 0x1, 0x0, 0x0, 0x48c0}, 0x20001880) 2m54.138509547s ago: executing program 7 (id=12331): mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) r0 = open_tree(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x89901) move_mount(r0, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) chroot(&(0x7f0000000300)='./file0/../file0/../file0/../file0\x00') r1 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r1, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000300)='./file0\x00', 0x0) pivot_root(&(0x7f0000000240)='./file0/../file0/../file0/../file0\x00', &(0x7f0000000080)='./file0\x00') 2m54.027700568s ago: executing program 7 (id=12333): pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = syz_io_uring_setup(0x40, &(0x7f00000006c0)={0x0, 0x5dda, 0x10100, 0x0, 0x268, 0x0, r1}, &(0x7f0000000140), &(0x7f00000000c0)=0x0) syz_io_uring_setup(0x80c, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x40000000, 0x54}, &(0x7f0000000180)=0x0, &(0x7f0000000040)) read$FUSE(r0, &(0x7f0000000740)={0x2020}, 0x2020) syz_io_uring_submit(r4, r3, &(0x7f00000001c0)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x4}) io_uring_enter(r2, 0x381b, 0x0, 0x0, 0x0, 0x0) write(r1, &(0x7f0000000340), 0x11000) 2m53.733336184s ago: executing program 7 (id=12338): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x4) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f0000000280)=0x1, 0x4) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @remote}}, 0x1c) sendto$inet6(r0, &(0x7f00000001c0)="a6e2976b5c4383036d32dadd2e144d8645ca8d1b230e105614396838da83c754887e7bea2f35d4ea667817d90d532af065f2e398dd9081ea16f8b371a202a6f9e505bbc964a0d3880bf0104a0a0a2f0d311efee1637e85a0125b38f961918f99bf9c2c146e42327f178dc2b3d4936e7f7f0a79f74ba464d83ab41742d1186776dc1779b5c50ac82d0fa8f9e42074b5b6079207fb21e718080907964669be539791e3e98687ee059853", 0xfffffffffffffcc1, 0x840, 0x0, 0x56) mmap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x12, r0, 0x604ab000) getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(r0, 0x6, 0x23, &(0x7f0000000100)={&(0x7f0000ffc000/0x4000)=nil, 0xc00, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffff78, 0x0, 0x0}, &(0x7f0000000340)=0x40) 2m53.400636601s ago: executing program 37 (id=12338): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x4) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f0000000280)=0x1, 0x4) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @remote}}, 0x1c) sendto$inet6(r0, &(0x7f00000001c0)="a6e2976b5c4383036d32dadd2e144d8645ca8d1b230e105614396838da83c754887e7bea2f35d4ea667817d90d532af065f2e398dd9081ea16f8b371a202a6f9e505bbc964a0d3880bf0104a0a0a2f0d311efee1637e85a0125b38f961918f99bf9c2c146e42327f178dc2b3d4936e7f7f0a79f74ba464d83ab41742d1186776dc1779b5c50ac82d0fa8f9e42074b5b6079207fb21e718080907964669be539791e3e98687ee059853", 0xfffffffffffffcc1, 0x840, 0x0, 0x56) mmap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x12, r0, 0x604ab000) getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(r0, 0x6, 0x23, &(0x7f0000000100)={&(0x7f0000ffc000/0x4000)=nil, 0xc00, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffff78, 0x0, 0x0}, &(0x7f0000000340)=0x40) 46.518812459s ago: executing program 9 (id=13494): r0 = socket$qrtr(0x2a, 0x2, 0x0) connect$qrtr(r0, &(0x7f0000000040)={0x2a, 0x1, 0xfffffffe}, 0xc) r1 = socket$qrtr(0x2a, 0x2, 0x0) recvmmsg(r0, &(0x7f0000000ac0)=[{{0x0, 0xff2c, 0x0}, 0x1}], 0x40, 0x2, 0x0) bind$qrtr(r0, &(0x7f00000002c0)={0x2a, 0x1, 0x7fff}, 0xc) connect$qrtr(r1, &(0x7f0000000040)={0x2a, 0x1, 0x4000}, 0xc) writev(r1, &(0x7f0000000340)=[{&(0x7f0000000080)="fb", 0x1}], 0x1) 46.349615393s ago: executing program 9 (id=13495): openat$vcsa(0xffffff9c, &(0x7f0000000440), 0x2ac582, 0x0) r0 = openat$mice(0xffffffffffffff9c, &(0x7f0000000000), 0x8401) write$RDMA_USER_CM_CMD_RESOLVE_ADDR(r0, &(0x7f0000000300)={0x15, 0x110, 0xfa00, {0xffffffffffffffff, 0x9, 0x0, 0x0, 0x0, @in6={0xa, 0x4e20, 0x3, @mcast2, 0x10}, @ib={0x1b, 0x6, 0xffffffff, {"802519e99e37dc558b967ba674890b50"}, 0x8, 0x9}}}, 0x118) r1 = syz_io_uring_setup(0x8d2, &(0x7f00000000c0)={0x0, 0x0, 0x400, 0x0, 0x379}, &(0x7f00000001c0)=0x0, &(0x7f0000000080)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r2, r3, &(0x7f0000000240)=@IORING_OP_WRITEV={0x2, 0x0, 0x0, @fd_index=0x4, 0xffffffffffffffff, 0x0}) io_uring_enter(r1, 0x47ba, 0x3e82, 0x60, 0x0, 0x0) 43.277308651s ago: executing program 9 (id=13515): r0 = syz_usb_connect$hid(0x0, 0x90, &(0x7f0000000200)=ANY=[@ANYBLOB="12010000000000105804165000000000000109022400010000c04009040000010300000009210900000122a00009058103"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, &(0x7f0000000000)={0x2c, &(0x7f0000000100)=ANY=[@ANYBLOB="0000d2"], 0x0, 0x0, 0x0, 0x0}, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0xfffff000) get_mempolicy(0x0, 0x0, 0x0, &(0x7f0000045000/0x3000)=nil, 0x3) r1 = syz_open_dev$hiddev(&(0x7f0000000080), 0x0, 0x80) ioctl$HIDIOCSUSAGES(r1, 0x501c4814, 0x0) 39.459194029s ago: executing program 9 (id=13545): r0 = openat$fuse(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) syz_mount_image$fuse(&(0x7f0000000040), &(0x7f0000000000)='./file0\x00', 0x0, &(0x7f0000002200)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x4000}}, 0x0, 0x0, 0x0) mount$fuse(0x0, &(0x7f0000000280)='./file0\x00', 0x0, 0x100000, 0x0) r1 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x9801) move_mount(r1, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) r2 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r2, 0x0, 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x226) 38.507946048s ago: executing program 9 (id=13551): mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1000003, 0x4008032, 0xffffffffffffffff, 0x2000) madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0x80000000e) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x400000, 0x3, &(0x7f0000000000/0x400000)=nil) r0 = io_uring_setup(0xd71, &(0x7f0000000080)={0x0, 0x0, 0x2, 0x2}) io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000001700)=""/4095, 0x440000}], 0x100000000000011a) mremap(&(0x7f00003eb000/0x2000)=nil, 0x2000, 0x1000, 0x3, &(0x7f0000003000/0x1000)=nil) io_uring_register$IORING_REGISTER_BUFFERS_UPDATE(r0, 0x10, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000240)=[{&(0x7f0000002700)=""/4096, 0x1000}], 0x0, 0xa}, 0x20) 38.270460661s ago: executing program 9 (id=13555): syz_emit_ethernet(0x4a, &(0x7f0000000240)=ANY=[@ANYBLOB="aaaa"], 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x18, 0xf, &(0x7f0000000200)=ANY=[@ANYRESDEC, @ANYRES32, @ANYBLOB="0000000000000000b702000014000000b7020000000000008500000051000000bf0900000000000055"], 0x0, 0x9, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x6}, 0x94) syz_usb_connect(0x0, 0x36, &(0x7f0000000040)=ANY=[@ANYBLOB="1201000014da2108ab120400000000000001090224"], 0x0) r0 = syz_open_dev$loop(&(0x7f0000000100), 0x2, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='blkio.bfq.idle_time\x00', 0x275a, 0x0) write$binfmt_misc(r1, &(0x7f0000000040), 0xe09) ioctl$LOOP_CONFIGURE(r0, 0x4c0a, &(0x7f00000002c0)={r1, 0x0, {0x2a00, 0x80010000, 0x0, 0x2, 0x0, 0x0, 0x0, 0xb, 0x1c, "fee8a2ab78fc979fd1e00d96072000001ea89de2b7fb0000e60080b8785d96000100", "2809e8dbe108598948224ad44afac11d875397bdb22d0000b420a1a93c5240f45f819ef6167d3d458dd4992861ac00", "f4bd000000801900", [0x0, 0x2000000000001]}}) 37.814570883s ago: executing program 38 (id=13555): syz_emit_ethernet(0x4a, &(0x7f0000000240)=ANY=[@ANYBLOB="aaaa"], 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x18, 0xf, &(0x7f0000000200)=ANY=[@ANYRESDEC, @ANYRES32, @ANYBLOB="0000000000000000b702000014000000b7020000000000008500000051000000bf0900000000000055"], 0x0, 0x9, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x6}, 0x94) syz_usb_connect(0x0, 0x36, &(0x7f0000000040)=ANY=[@ANYBLOB="1201000014da2108ab120400000000000001090224"], 0x0) r0 = syz_open_dev$loop(&(0x7f0000000100), 0x2, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='blkio.bfq.idle_time\x00', 0x275a, 0x0) write$binfmt_misc(r1, &(0x7f0000000040), 0xe09) ioctl$LOOP_CONFIGURE(r0, 0x4c0a, &(0x7f00000002c0)={r1, 0x0, {0x2a00, 0x80010000, 0x0, 0x2, 0x0, 0x0, 0x0, 0xb, 0x1c, "fee8a2ab78fc979fd1e00d96072000001ea89de2b7fb0000e60080b8785d96000100", "2809e8dbe108598948224ad44afac11d875397bdb22d0000b420a1a93c5240f45f819ef6167d3d458dd4992861ac00", "f4bd000000801900", [0x0, 0x2000000000001]}}) 31.041540587s ago: executing program 0 (id=13602): r0 = syz_usb_connect(0x0, 0x2d, &(0x7f0000000080)=ANY=[@ANYBLOB="12010000a8f4dd086d0492082a6d0000000109021b0001000000000904"], 0x0) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000000)={0x2c, &(0x7f0000000840)=ANY=[], 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$rtl8150(r0, 0x0, &(0x7f0000000980)={0x18, &(0x7f0000000840)={0x40, 0xa}, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$printer(r0, 0x0, 0x0) syz_usb_control_io$rtl8150(r0, 0x0, &(0x7f00000006c0)={0x2c, &(0x7f0000000900)=ANY=[], 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) 27.716092735s ago: executing program 0 (id=13621): mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x2, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000000200)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) write$FUSE_NOTIFY_RETRIEVE(r0, &(0x7f0000000100)={0x30, 0x5, 0x0, {0x0, 0x1}}, 0x30) read$FUSE(r0, &(0x7f0000004180)={0x2020, 0x0, 0x0}, 0x2020) umount2(0x0, 0x0) write$FUSE_INIT(r0, &(0x7f0000000040)={0x50, 0xffffffffffffffda, r1, {0x7, 0x29, 0x0, 0x200c40, 0x0, 0x0, 0x90, 0xbd60, 0x0, 0x0, 0x8, 0x80}}, 0x50) 27.343617446s ago: executing program 0 (id=13623): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x80, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_XEN_HVM_CONFIG(r1, 0x4038ae7a, &(0x7f0000000000)={0x0, 0x40000105, 0x0, 0x0}) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) ioctl$KVM_SET_MSRS(r4, 0x4008ae89, &(0x7f0000000200)={0x1, 0x0, [{0x296}]}) 26.577826903s ago: executing program 0 (id=13627): r0 = openat$fuse(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) syz_mount_image$fuse(&(0x7f0000000040), &(0x7f0000000000)='./file0\x00', 0x0, &(0x7f0000002200)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x4000}}, 0x0, 0x0, 0x0) r1 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000040), 0x42, 0x0) mount$fuse(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r1, @ANYBLOB=',rootmode=0000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) r2 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x9801) move_mount(r2, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) openat2$dir(0xffffffffffffff9c, &(0x7f00000001c0)='./file0\x00', &(0x7f0000000380)={0x28880, 0x0, 0x12}, 0x18) 25.516802185s ago: executing program 0 (id=13634): r0 = openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000040), 0x80001, 0x0) r1 = openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$SW_SYNC_IOC_CREATE_FENCE(r1, 0xc0285700, &(0x7f0000000100)={0x1, "5660359c3245d1c42317afad7d48ed51000000000000000100", 0xffffffffffffffff}) ioctl$SW_SYNC_IOC_CREATE_FENCE(r0, 0xc0285700, &(0x7f0000000000)={0x5, "340b7832ceefd131b8e6498c25f58fad9987ffe93bbabd18cf501922de974a27", 0xffffffffffffffff}) ioctl$SYNC_IOC_MERGE(r2, 0xc0303e03, &(0x7f0000000180)={"2486910284ed923431d4c5d5fbf514fd00", r3, 0xffffffffffffffff}) ioctl$SW_SYNC_IOC_INC(r1, 0x40045701, &(0x7f00000002c0)=0x3) ioctl$SYNC_IOC_MERGE(r3, 0xc0303e03, &(0x7f0000000140)={"6f771451ba6e84c8b0ccdbda735401ee64000c083444a3cb01b69b00aca00cf5", r4}) 24.996182061s ago: executing program 0 (id=13639): mmap(&(0x7f0000001000/0x2000)=nil, 0x2000, 0x2000009, 0x32, 0xffffffffffffffff, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x4) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f0000000280)=0x2, 0x4) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @remote}}, 0x1c) sendto$inet6(r0, &(0x7f00000001c0)="a6e2976b5c4383036d32dadd2e14", 0xfffffffffffffe4c, 0x20004811, 0x0, 0xffffffffffffffbd) recvmsg(r0, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000b80)=[{&(0x7f0000000780)=""/243, 0x11000}], 0x1}, 0x142) 24.357517012s ago: executing program 39 (id=13639): mmap(&(0x7f0000001000/0x2000)=nil, 0x2000, 0x2000009, 0x32, 0xffffffffffffffff, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x4) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f0000000280)=0x2, 0x4) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @remote}}, 0x1c) sendto$inet6(r0, &(0x7f00000001c0)="a6e2976b5c4383036d32dadd2e14", 0xfffffffffffffe4c, 0x20004811, 0x0, 0xffffffffffffffbd) recvmsg(r0, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000b80)=[{&(0x7f0000000780)=""/243, 0x11000}], 0x1}, 0x142) 4.239739944s ago: executing program 6 (id=13799): r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000380)={0x2, 0x4e22, @empty}, 0x10) setsockopt$sock_int(r0, 0x1, 0x800000000f, &(0x7f0000000080)=0x7, 0x4) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$sock_int(r1, 0x1, 0xf, &(0x7f00000000c0)=0x5, 0x4) bind$inet6(r1, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty, 0x10000000}, 0x1c) listen(r0, 0x0) 4.012120374s ago: executing program 6 (id=13802): capset(&(0x7f0000000080)={0x20080522}, &(0x7f0000000040)={0x200000, 0x200000}) fsetxattr$security_capability(0xffffffffffffffff, &(0x7f00000001c0), 0x0, 0x0, 0x2) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='freezer.parent_freezing\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000040), 0xfea7) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x10012, r0, 0x0) r1 = socket(0x10, 0x3, 0x0) fremovexattr(r1, &(0x7f0000000180)=@known='security.apparmor\x00') 3.878049214s ago: executing program 6 (id=13804): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$sock_int(r0, 0x1, 0xf, &(0x7f0000000180)=0x800001, 0x4) bind$inet6(r0, &(0x7f0000000140)={0xa, 0x4e22, 0x7f, @ipv4={'\x00', '\xff\xff', @multicast1}, 0xffffffff}, 0x20) r1 = socket$inet6(0xa, 0x1, 0x0) setsockopt$sock_int(r1, 0x1, 0xf, &(0x7f0000000180)=0x20800001, 0x4) setsockopt$inet6_int(r1, 0x29, 0x4e, &(0x7f0000000000)=0x1, 0x4) bind$inet6(r1, &(0x7f0000000040)={0xa, 0x4e22, 0x80, @loopback={0x0, 0xa8aaaafffeaaaa1e}, 0x8000}, 0x1c) 3.861060868s ago: executing program 5 (id=13805): unshare(0x20000400) syz_open_dev$loop(0x0, 0xdf6, 0x0) syz_open_dev$usbfs(0x0, 0x76, 0x101301) r0 = syz_usb_connect$hid(0x3, 0x36, &(0x7f00000001c0)=ANY=[@ANYBLOB="1201000000000010d804dd000000000000010902240001000000e9090400000103000000092105000001220500090581030002"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, &(0x7f00000003c0)={0x2c, &(0x7f0000000100)=ANY=[@ANYBLOB="000008000000080482"], 0x0, 0x0, 0x0, 0x0}, 0x0) syz_usb_ep_write(r0, 0x81, 0x2, &(0x7f0000000280)="10b1") 3.748905495s ago: executing program 3 (id=13808): r0 = socket$unix(0x1, 0x1, 0x0) r1 = socket$unix(0x1, 0x1, 0x0) r2 = landlock_create_ruleset(&(0x7f0000000000)={0x19a1, 0x2, 0x1}, 0x21, 0x0) landlock_restrict_self(r2, 0x5) bind$unix(r1, &(0x7f0000003000)=@file={0x1}, 0x6e) listen(r1, 0x0) connect$unix(r0, &(0x7f0000000640)=@file={0x1}, 0x6e) 3.634231545s ago: executing program 6 (id=13809): timer_create(0x3, 0x0, &(0x7f0000000100)) timer_create(0xfffffffffffffffd, 0x0, &(0x7f00000000c0)=0x0) rt_sigprocmask(0x0, &(0x7f0000000000)={[0xfffffffffffffffd]}, 0x0, 0x8) timer_settime(0x0, 0x1, &(0x7f0000000340)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0) timer_settime(r0, 0x0, &(0x7f0000000080)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) sendmsg$netlink(r1, &(0x7f0000001e00)={0x0, 0x0, &(0x7f0000001d80)=[{&(0x7f0000000840)={0x28, 0x2e, 0x503, 0x40000, 0x0, "", [@nested={0x14, 0x0, 0x0, 0x1, [@typed={0x8, 0x0, 0x0, 0x0, @u32}, @typed={0x8, 0x0, 0x0, 0x0, @fd}]}, @generic="a8"]}, 0x28}], 0x1}, 0x0) 3.557793276s ago: executing program 3 (id=13811): r0 = syz_io_uring_setup(0x10d2, &(0x7f0000000680)={0x0, 0xb0d5, 0x80, 0x80, 0x12}, &(0x7f0000000080)=0x0, &(0x7f0000000300)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r1, r2, &(0x7f0000000200)=@IORING_OP_READV=@use_registered_buffer={0x1, 0x0, 0x4007, @fd_index=0x8, 0x8, 0x0, 0x0, 0x3, 0x1, {0x2}}) setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, &(0x7f0000000400)={0x1, &(0x7f0000000200)=[{0x402d, 0x0, 0x0, 0x1000004}]}, 0x10) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) syz_io_uring_submit(r1, r2, &(0x7f0000000200)=@IORING_OP_REMOVE_BUFFERS={0x1f, 0x18, 0x0, 0x7fff}) io_uring_enter(r0, 0x47bc, 0x0, 0x0, 0x0, 0x0) 3.318400922s ago: executing program 6 (id=13813): r0 = syz_usb_connect(0x3, 0x24, &(0x7f00000007c0)=ANY=[@ANYBLOB="12010000ed3ec908cd0cb300ea2d010203010902120001000000000904"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, &(0x7f00000004c0)={0x1c, &(0x7f0000000540)=ANY=[], 0x0, 0x0}) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, &(0x7f0000000380)={0x24, &(0x7f0000000180)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$printer(r0, 0x0, 0x0) 2.840826971s ago: executing program 3 (id=13816): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000200)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-serpent-sse2\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, 0x0, 0x0) r1 = accept4(r0, 0x0, 0x0, 0x0) sendmmsg$alg(r1, &(0x7f0000003340)=[{0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000000)="81fc968c8e602f12c08090cca64b50fd3d", 0x11}], 0x1, &(0x7f0000000280)=[@op={0x10, 0x117, 0x3, 0x1}], 0x10, 0x4040010}], 0x1, 0x4048020) recvmmsg$unix(r1, &(0x7f0000000500)=[{{0x0, 0x0, &(0x7f00000003c0)=[{&(0x7f0000001e40)=""/4096, 0x1000}], 0x1}}], 0x1, 0x100, 0x0) sendmsg$NL80211_CMD_GET_SCAN(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}, 0x1, 0x0, 0x0, 0x80c0}, 0x24000881) 2.479529099s ago: executing program 3 (id=13819): r0 = epoll_create1(0x80000) r1 = syz_open_dev$sndctrl(&(0x7f0000000000), 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_PCM_PREFER_SUBDEVICE(r1, 0x40045532, &(0x7f0000000040)=0x7) r2 = openat$audio(0xffffffffffffff9c, &(0x7f0000000140), 0x40000000040301, 0x0) r3 = syz_open_dev$sndpcmp(&(0x7f00000001c0), 0x0, 0xa2c65) write$RDMA_USER_CM_CMD_CREATE_ID(r2, &(0x7f0000000500)={0x0, 0x18, 0xfa00, {0x1000000000000, 0x0, 0x0, 0x2}}, 0x20) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r3, &(0x7f0000000100)={0xa0028018}) 2.270448202s ago: executing program 8 (id=13820): r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x2000, 0x0) ioctl$TIOCSPTLCK(r0, 0x40045431, &(0x7f0000000000)) syz_open_pts(r0, 0x2000) r1 = ioctl$TIOCGPTPEER(r0, 0x5441, 0x8) r2 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='fd/4\x00') ioctl$int_in(r2, 0x5452, &(0x7f0000000040)=0x9) close_range(r0, r1, 0x0) 2.135032778s ago: executing program 8 (id=13822): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.bfq.io_service_time_recursive\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x12, r0, 0x0) ftruncate(r0, 0xc17a) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000680)={0x10, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41000, 0x4}, 0x94) bpf$MAP_CREATE(0x0, &(0x7f00000023c0)=ANY=[], 0x48) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x19) 1.988466604s ago: executing program 8 (id=13823): mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x0, 0x5d032, 0xffffffffffffffff, 0x0) r0 = userfaultfd(0x80001) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000000100)) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000040)={{&(0x7f0000400000/0xc00000)=nil, 0xc00000}, 0x5}) ioctl$UFFDIO_CONTINUE(r0, 0xc020aa08, &(0x7f0000000080)={{&(0x7f0000400000/0xc00000)=nil, 0xc00000}}) r1 = syz_open_procfs$pagemap(0x0, &(0x7f0000001080)) ioctl$PAGEMAP_SCAN(r1, 0xc0606610, &(0x7f0000000140)={0x60, 0x0, &(0x7f0000001000/0x3000)=nil, &(0x7f0000ffb000/0x4000)=nil, 0x0, &(0x7f00000000c0)=[{0x800000000}, {0x0, 0x5, 0x4}], 0x2, 0x100000c01, 0x0, 0x0, 0x0, 0x6e}) 1.832200618s ago: executing program 1 (id=13825): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x1) ioctl$KVM_PRE_FAULT_MEMORY(r2, 0xc040aed5, &(0x7f0000000040)={0x3000, 0x114000}) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9) 1.831235074s ago: executing program 8 (id=13826): r0 = syz_create_resource$binfmt(&(0x7f0000000040)='./file1\x00') r1 = openat$binfmt(0xffffffffffffff9c, r0, 0x42, 0x1ff) close(r1) execveat$binfmt(0xffffffffffffff9c, r0, 0x0, 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x42, 0x0) mount$fuse(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000002100), 0x0, 0x0) mount$fuseblk(&(0x7f0000000080), &(0x7f00000003c0)='./file0\x00', 0x0, 0x911008, 0x0) 1.705488618s ago: executing program 5 (id=13827): r0 = fsopen(&(0x7f00000001c0)='ramfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) r1 = fsmount(r0, 0x0, 0x0) fchdir(r1) symlink(&(0x7f0000000680)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', &(0x7f0000000240)='./file1\x00') openat(r1, &(0x7f0000000000)='./file1\x00', 0x240, 0x4) openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x1ff) 1.705290891s ago: executing program 3 (id=13828): r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x0) r1 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000540), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f0000000100)={0x0, 0x18, 0xfa00, {0x3, &(0x7f0000000040)={0xffffffffffffffff}, 0x106}}, 0x20) write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f0000000240)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000080), 0x2}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_IP(r1, &(0x7f0000000180)={0x3, 0x40, 0xfa02, {{0x6000000, 0x0, 0x8, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x1}, {0xa, 0x0, 0x8, @remote}, r2}}, 0x48) write$RDMA_USER_CM_CMD_MIGRATE_ID(r1, &(0x7f0000000080)={0x12, 0x10, 0xfa00, {0x0, r2, r1}}, 0x18) close_range(r0, 0xffffffffffffffff, 0x400000000000000) 1.604541028s ago: executing program 8 (id=13829): bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100, 0x70, '\x00', 0x0, @fallback=0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = syz_io_uring_setup(0x24f6, &(0x7f00000006c0)={0x0, 0x0, 0x10100, 0x0, 0x1c5}, &(0x7f0000000100)=0x0, &(0x7f0000000180)=0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) write$UHID_CREATE2(r3, &(0x7f0000000040)=ANY=[], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x5, 0x11, r3, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_LINKAT={0x27, 0x20, 0x0, r3, 0x0, 0x0, r3, 0x1400}) io_uring_enter(r0, 0x2d3e, 0x0, 0x0, 0x0, 0x0) 1.48903997s ago: executing program 3 (id=13830): r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000040)=ANY=[@ANYBLOB="120100009c323f08a5040330b2440102030109021200010002"], 0x0) syz_usb_control_io$printer(r0, 0x0, 0x0) syz_usb_control_io$printer(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f00000055c0)={0x24, 0x0, &(0x7f0000005480)={0x0, 0x3, 0x2, @string={0x2}}, 0x0, 0x0}, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, &(0x7f0000000540)={0x2c, 0x0, &(0x7f0000000400)={0x0, 0x3, 0x2, @string={0x2}}, 0x0, 0x0, 0x0}, 0x0) 1.348493939s ago: executing program 5 (id=13831): r0 = fsopen(0x0, 0x0) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) fsmount(r0, 0x0, 0x82) r1 = io_uring_setup(0x7534, &(0x7f00000003c0)={0x0, 0x48c7, 0x80, 0x0, 0xffffffff}) syz_emit_vhci(&(0x7f0000000180)=ANY=[@ANYBLOB="04040affffffff0f614b180080"], 0xd) openat$snapshot(0xffffffffffffff9c, &(0x7f0000000040), 0x800, 0x0) close_range(r1, 0xffffffffffffffff, 0x0) 1.215657271s ago: executing program 1 (id=13832): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket(0x400000000010, 0x3, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2d, 0xffffffff, {0x0, 0x0, 0x0, r3, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x1, 0xf}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x28}}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000002240)=@newtfilter={0xed0, 0x2c, 0xd27, 0x70bd25, 0x8000, {0x0, 0x0, 0x0, r3, {0x0, 0x7}, {}, {0x7, 0x8}}, [@filter_kind_options=@f_fw={{0x7}, {0xea4, 0x2, [@TCA_FW_ACT={0xea0, 0x4, [@m_pedit={0xe9c, 0x1, 0x0, 0x0, {{0xa}, {0xe70, 0x2, 0x0, 0x1, [@TCA_PEDIT_PARMS={0xe20, 0x2, {{{0xdcdc, 0x5fa8, 0x3, 0x839, 0x7}, 0x7, 0xb}, [{0x4, 0x2, 0x5d0, 0x8, 0x100}, {0x9, 0xf2, 0x688d, 0x7, 0x1, 0x2}, {0x7f, 0x8, 0x0, 0x400, 0x2557, 0x462}, {0x2, 0x0, 0x8001, 0xffc00000, 0xc9}, {0x8001, 0x6, 0x7f, 0x5, 0x7fff, 0x7fffffff}, {0x2, 0x7ff, 0xfffffffe, 0x7, 0xfffffc00, 0x3}, {0x8, 0x710, 0x80000001, 0x6, 0x4, 0x3000000}, {0xc000000, 0x400, 0x80, 0x100, 0x3, 0x12}, {0x6, 0x9, 0xa, 0xfffffffe, 0x7, 0x5}, {0x0, 0x2, 0x7, 0xff, 0x64, 0x5}, {0x0, 0x80000000, 0x0, 0xd, 0x9, 0x1}, {0x6, 0xd7, 0x2e, 0x56d, 0x4, 0x80000000}, {0x7ffd, 0x6, 0x1, 0x1, 0x4, 0x9}, {0x3, 0x3, 0x200, 0x7ff, 0x273, 0x2207}, {0x332400, 0x2, 0x5, 0x4d1, 0xfffffffe, 0x2}, {0x7, 0x6, 0x4, 0x5, 0x1, 0x2}, {0x3, 0xfffffffb, 0x7, 0x3ff, 0x4, 0x8}, {0x5, 0x7, 0x1, 0x1, 0x3ff, 0x3ff}, {0x0, 0xffff0001, 0x6, 0x102, 0xa0a, 0x5}, {0x7, 0x4, 0x13ca4b9a, 0xfffffffa, 0xffff, 0x9}, {0x1, 0x2, 0x7fffffff, 0x7, 0x7, 0x200}, {0x0, 0x0, 0x40, 0xffff352c, 0x5, 0x6}, {0x200, 0x3, 0x34e, 0xc, 0x4, 0x1}, {0x1, 0x9, 0x1, 0x8, 0xe163, 0x72e00000}, {0x9ee4, 0x52d, 0x5, 0x0, 0x7, 0x5}, {0x100009, 0xda, 0x0, 0x5, 0xf, 0x7}, {0x4, 0x6e, 0xa, 0x8, 0x826, 0x5}, {0x9, 0x2, 0x7fff, 0xfffffff7, 0x4, 0x8}, {0xff, 0x131e, 0x5, 0x9, 0x3}, {0x6, 0x8, 0xd781, 0x7, 0xdce0, 0x101}, {0x0, 0x1ff, 0x0, 0x9, 0xfff, 0x8}, {0x8, 0x2, 0x6, 0x4, 0x69, 0x5149dc08}, {0x1, 0xffffffff, 0x6, 0x101, 0x8, 0x18000}, {0x0, 0x9, 0x1, 0x5, 0xc}, {0x3, 0x9, 0x9, 0xe68, 0x2, 0xffff}, {0x9, 0x62, 0xe2f, 0xa, 0x44, 0x7}, {0xfffffff9, 0x7f, 0xffffffff, 0x3, 0x341, 0x3}, {0x6, 0x6, 0x4, 0x40000, 0x2, 0xa155}, {0x6d3, 0x3, 0x9, 0x9, 0xfffffffd, 0xfffffffa}, {0xd47, 0x3ff, 0x800, 0x40, 0x80000001, 0x4}, {0x5c2e, 0x8, 0x0, 0x76, 0x7}, {0xac77, 0x5, 0x0, 0x101, 0xb2a, 0x1ff}, {0x8, 0xfffffffa, 0x8, 0x4, 0xf771, 0x800}, {0xc, 0xfffffc01, 0x2, 0x4, 0x6, 0x1}, {0x4, 0x8, 0x149, 0xfffffff7, 0x80, 0x10fff}, {0x8000, 0xd, 0x1, 0x101, 0x6}, {0x1000, 0xfffffffb, 0x268f, 0x80000001, 0xdf, 0x4}, {0x4, 0x0, 0x101, 0x1, 0x7, 0x9}, {0x9, 0x3, 0x20004, 0x0, 0x9, 0x8}, {0x400, 0xfe8, 0x5, 0x112, 0x10001, 0x7ff}, {0x4399, 0x0, 0x8, 0x2d1, 0x3ff}, {0xd8d2053, 0x7fffffff, 0x401, 0x6, 0x4, 0x6}, {0x3, 0x5, 0x205, 0x8, 0x6, 0xe7e1}, {0x550, 0x204, 0x342, 0x9, 0x8, 0x7}, {0x2, 0x7fffffff, 0x0, 0x8, 0x800, 0x3}, {0x4, 0x6, 0x3, 0x2, 0x2}, {0x1, 0x5d9, 0x4, 0xffffffff, 0x9, 0xac}, {0x7, 0x6, 0x7, 0xff, 0x4, 0x3}, {0x0, 0x5c6c, 0x8, 0x2, 0xffffffff, 0x4}, {0x40, 0xaa, 0x4, 0x6, 0xfffffff8, 0x3}, {0x0, 0xfffffffd, 0x7e0, 0xc, 0x7, 0x401}, {0xffff, 0x3, 0x5, 0x8, 0x47, 0xf9d}, {0xfffffbff, 0x0, 0x4, 0x0, 0x9, 0xffff}, {0xffffffff, 0x6, 0xfffffffa, 0x2, 0x8000, 0xbde}, {0x6af, 0x8001, 0x7f, 0x7, 0x7, 0x516}, {0x33, 0x8, 0x7, 0x81, 0x2, 0x80000001}, {0x9, 0x2, 0x9, 0x8000, 0x8, 0x3}, {0x6, 0x9, 0x6, 0x400, 0x1, 0xf}, {0xd424, 0x3, 0x7, 0xec, 0xb, 0x4}, {0x7, 0x7, 0xd7a, 0x80000001, 0xb137, 0x5}, {0xdcb, 0x10000, 0xe1, 0x6, 0x4, 0xfffffffb}, {0x4, 0x5, 0x3, 0x8, 0xe, 0x7}, {0x10000, 0x6, 0x80, 0x2, 0x8, 0x6}, {0x0, 0x4, 0xc779, 0x33000000, 0x100, 0x800}, {0x1000, 0x800, 0x0, 0x101, 0x4, 0x6}, {0x2, 0xffffffff, 0xb, 0x5, 0x5399, 0x4f4}, {0x5, 0x2, 0x7, 0x3, 0x1, 0x5}, {0x800, 0xde, 0x9, 0x6, 0x7, 0x4003ff}, {0x1, 0x6, 0x2, 0xfffffff7, 0x0, 0xfffff000}, {0x7, 0xdc76, 0x1, 0x2, 0x2, 0xf}, {0x9, 0x1, 0xcf69, 0x0, 0x457, 0x3}, {0x0, 0x573, 0x4, 0x8, 0x5, 0x4}, {0x3, 0x1, 0xeb1, 0x80, 0xe6, 0x5}, {0x1ff, 0xa601, 0xffff7fff, 0x5, 0x100, 0x4}, {0x5, 0x2, 0x87d, 0x2, 0x8, 0x9627}, {0x81, 0xffff, 0x4, 0xee46, 0x4, 0x40006ed}, {0xa4, 0x30000000, 0x200, 0x9, 0x2f056e5b, 0x4}, {0x3, 0x7, 0x3, 0x7fffffff, 0xd, 0xd}, {0x6, 0x6, 0x4, 0x100, 0x200, 0x8}, {0x40, 0xd00e, 0x22c, 0x2133ecfa, 0xffffff81, 0x1}, {0xfffffe00, 0x2, 0x10, 0x7f, 0x200}, {0x3, 0x10000, 0x4000, 0x3, 0xfb23, 0x8}, {0x8, 0xfff, 0x2, 0x7, 0x4, 0x3}, {0x8001, 0x6, 0x3, 0x1, 0x4, 0x17e3862}, {0x1, 0xe, 0x6, 0x5, 0x4, 0x1}, {0xcb67, 0x7, 0xc08c, 0x1, 0x3, 0x101}, {0x7, 0x401, 0x37, 0x3, 0x1, 0xe85}, {0x7fffffff, 0x0, 0x3, 0x10001, 0x3}, {0x8, 0x2, 0x59211cb1, 0x9, 0x1, 0x4}, {0x6, 0x3, 0x1, 0x7, 0x7, 0x100}, {0x7, 0x4, 0x2, 0x6, 0x400, 0x7}, {0xe, 0x6, 0x24, 0x3, 0x5, 0x1ff}, {0x1ff, 0x3fb, 0x2, 0x5, 0x7fff, 0x4}, {0x3ff, 0xa81, 0x5, 0x0, 0x5, 0x6}, {0xc, 0x76, 0x0, 0x2d0f3c09, 0x1, 0xbe9}, {0xffffbfb8, 0x7fff, 0x0, 0x1450e18f, 0x68c12bef, 0x6}, {0x4, 0x0, 0xc, 0x69, 0x6, 0x9}, {0x10, 0xf09, 0x1, 0x4, 0x1, 0x5}, {0xfffffffc, 0x9, 0x5, 0x4, 0xca, 0xffffffdf}, {0x2, 0x3, 0x8, 0xcf2f, 0x2, 0x1}, {0x7fff, 0xc9, 0x82, 0x6, 0x5}, {0x7, 0x4, 0x9, 0x5, 0x2, 0x9}, {0x4516, 0x3, 0x0, 0x8, 0x4, 0x1000}, {0xe4, 0x0, 0xffff, 0xc84, 0xc, 0x3}, {0xfffffffa, 0x0, 0x3, 0x9, 0xffff0000, 0x4}, {0x400, 0x5, 0x9, 0x2e, 0xd, 0x3}, {0x7, 0x2b, 0x5, 0xfffffff1, 0x3, 0x1}, {0x7fffffff, 0x5, 0x2, 0x80, 0x9, 0xd454}, {0x20000, 0x7ff, 0x61, 0x4, 0x8, 0x7}, {0xff, 0x1, 0x1, 0xa68b, 0x10, 0x60000}, {0x8, 0x0, 0x8, 0xf7f, 0x5, 0xfffffff8}, {0x28e, 0x1, 0xff, 0x6, 0xb3f2, 0x1}, {0x7, 0x2, 0x400040, 0x4, 0x9, 0x2}, {0x9, 0x8, 0xd, 0xe, 0x3, 0xd842}, {0x8, 0x8, 0x7, 0x0, 0xfffffff1, 0x2}, {0xffff9c2f, 0x84d, 0x4, 0x400, 0x7, 0x58}, {0x3, 0xffffffa2, 0x6, 0x0, 0x8, 0x1ff}, {0x8, 0xc1, 0x9, 0x1, 0x7ff, 0xff}], [{0x2, 0x1}, {0x5, 0x1}, {0x1, 0x1}, {0x5}, {0x3, 0x1}, {0x4}, {0x7, 0x1}, {0x3}, {0x2, 0x1}, {0x2}, {0x3}, {0x5, 0x1}, {0x3, 0x1}, {0x5}, {0x1, 0x1}, {0x3}, {0x1, 0xffffffffffffffff}, {0x2, 0x1}, {0x5, 0x1}, {0x5}, {0x5}, {0x5}, {0x1, 0x1}, {0x1}, {0x3, 0x1}, {0x5, 0x1}, {0x5}, {}, {0x2}, {0x1}, {0x2, 0x1}, {0x4, 0x1}, {0x0, 0x1}, {0x4, 0x1}, {0x7, 0x1}, {0x3}, {0x0, 0x1}, {0x1}, {0x1}, {0x4}, {0x2, 0x1}, {0x2}, {0x5}, {0x3, 0x1}, {0x2}, {0x2, 0x1}, {0x4}, {0x1}, {0x4, 0xfffffffffffffffd}, {0x4}, {0x0, 0x1}, {0x3}, {0x0, 0x1}, {0x3, 0x1}, {0x1}, {0x1, 0x1}, {0x5}, {0x5}, {0x4}, {0x4}, {0x5, 0x1}, {0x2}, {0x3, 0x1}, {0x1}, {}, {0x2}, {0x2}, {0x5, 0x1}, {}, {0x3}, {}, {0x2}, {0x0, 0x3}, {0x5, 0x1}, {0x3, 0x1}, {0x4, 0x1}, {0x3}, {0x0, 0x1}, {0x2}, {0x0, 0x1}, {0x2, 0x4e2ac20550e7fa09}, {0x1}, {0x0, 0x1}, {0x5, 0x1}, {0x2}, {0x3, 0x1}, {0x3}, {}, {0x2, 0x1}, {0x2}, {0x3}, {0x3}, {0x4}, {0x5, 0x1}, {0x4}, {0x4, 0x1}, {0x2}, {0x4, 0x1}, {0x4}, {0xf, 0x1}, {0x5, 0x1}, {0x5}, {0x0, 0x1}, {0x5}, {0x4}, {0x2, 0x1}, {}, {0x2}, {0x1}, {0x3}, {0x5}, {}, {0x0, 0x1}, {0x3, 0x1}, {0x5, 0x1}, {0x0, 0x1}, {0x3}, {0x5}, {0x5}, {0x2, 0x1}, {0x0, 0x1}, {0x5}, {0x3}, {0x3, 0x1}, {0x2, 0x1}, {0x1}, {0x5}, {0x0, 0x1}], 0x1}}, @TCA_PEDIT_KEYS_EX={0x4c, 0x5, 0x0, 0x1, [{0xfca2, 0x6, 0x0, 0x1, [@TCA_PEDIT_KEY_EX_HTYPE={0x6, 0x1, 0x2}, @TCA_PEDIT_KEY_EX_CMD={0x6, 0x2, 0x1}]}, {0x34, 0x6, 0x0, 0x1, [@TCA_PEDIT_KEY_EX_CMD={0x6}, @TCA_PEDIT_KEY_EX_HTYPE={0x6, 0x1, 0x4}, @TCA_PEDIT_KEY_EX_CMD={0x6}, @TCA_PEDIT_KEY_EX_CMD={0x6}, @TCA_PEDIT_KEY_EX_CMD={0x6, 0x2, 0x1}, @TCA_PEDIT_KEY_EX_CMD={0x6}]}]}]}, {0x4}, {0xc}, {0xc, 0x8, {0x0, 0x2}}}}]}]}}]}, 0xed0}, 0x1, 0x0, 0x0, 0x80}, 0x800) 998.098249ms ago: executing program 1 (id=13833): r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000015c0), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000140)={0x0, 0x0, 0x0, &(0x7f0000000540)=""/67, 0x0, 0x4}) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000280)={0x1, 0x1, 0x0, &(0x7f00000000c0)=""/87, 0x0, 0xd000}) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f00000036c0)) ioctl$VHOST_VSOCK_SET_RUNNING(r0, 0x4004af61, &(0x7f0000000000)=0x1) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f00000004c0)={0x2, 0x0, [{0x11d4000, 0x100e, &(0x7f0000001600)=""/4110}, {0x0, 0xfffffffffffffdea, &(0x7f0000001080)=""/8}]}) 967.630911ms ago: executing program 8 (id=13834): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000280), 0x40400, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) ioctl$KVM_XEN_HVM_CONFIG(r3, 0x4038ae7a, &(0x7f0000000340)={0x80, 0x40000094, 0x0, 0x0, 0xfffffffffffffe9a}) r4 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x1) ioctl$KVM_SET_MSRS(r4, 0x4008ae89, &(0x7f0000000040)={0x1, 0x0, [{0x2ba, 0x0, 0x7}]}) 578.417684ms ago: executing program 40 (id=13834): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000280), 0x40400, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) ioctl$KVM_XEN_HVM_CONFIG(r3, 0x4038ae7a, &(0x7f0000000340)={0x80, 0x40000094, 0x0, 0x0, 0xfffffffffffffe9a}) r4 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x1) ioctl$KVM_SET_MSRS(r4, 0x4008ae89, &(0x7f0000000040)={0x1, 0x0, [{0x2ba, 0x0, 0x7}]}) 572.223664ms ago: executing program 5 (id=13836): r0 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f0000000000)={0x0, 0x8000}, 0x4) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r2 = socket$kcm(0x2, 0x3, 0x2) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000000040)={'syzkaller1\x00', @broadcast}) write$tun(r1, &(0x7f0000001840)={@val={0x8, 0x800}, @val={0x6, 0x0, 0x9, 0x0, 0x14}, @ipv4=@generic={{0x5, 0x4, 0x2, 0x6, 0xfc0, 0x64, 0x0, 0xb, 0x33, 0x0, @rand_addr=0x64010104, @broadcast}, "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"}}, 0xfce) 567.364794ms ago: executing program 1 (id=13837): r0 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000740), 0x2, 0x0) ioctl$IOCTL_VMCI_VERSION2(r0, 0x7a7, &(0x7f0000000080)=0xb0000) ioctl$IOCTL_VMCI_INIT_CONTEXT(r0, 0x7a0, &(0x7f0000000180)={@hyper}) r1 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) ioctl$IOCTL_VMCI_VERSION2(r1, 0x7a7, &(0x7f0000000040)=0x90000) ioctl$IOCTL_VMCI_INIT_CONTEXT(r1, 0x7a0, &(0x7f0000000000)={@local}) ioctl$IOCTL_VMCI_NOTIFY_RESOURCE(r0, 0x7a5, &(0x7f0000000000)={{@local, 0x3}, 0x1, 0x0, 0x7}) 443.933636ms ago: executing program 1 (id=13838): r0 = fsopen(&(0x7f00000001c0)='ramfs\x00', 0x1) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) r1 = fsmount(r0, 0x0, 0x86) fchdir(r1) r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x836d9fb164f927b3) io_setup(0x3, &(0x7f0000000600)=0x0) io_submit(r3, 0x1, &(0x7f0000000000)=[&(0x7f0000000080)={0x0, 0x0, 0x10, 0x7, 0x0, r2, 0x0, 0x0, 0x0, 0x0, 0x2}]) 333.419285ms ago: executing program 5 (id=13839): ioctl$BTRFS_IOC_SET_RECEIVED_SUBVOL(0xffffffffffffffff, 0xc0c89425, &(0x7f0000000000)={"da19cdbf8ea74337e1c274620e046655", 0x0, 0x0, {0x9, 0x9}, {0x7, 0xf01}, 0x6, [0x5, 0x5, 0xff, 0x0, 0x9, 0x10001, 0x0, 0x5, 0x4bb, 0x72, 0x8, 0x0, 0x6, 0x3800000, 0xfffffffffffffffc, 0xffffffffffffffff]}) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000340), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x4, 0x1, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_BOOT_CPU_ID(r1, 0xae78, &(0x7f0000000000)=0x1) ioctl$KVM_SET_SREGS(r2, 0x4138ae84, &(0x7f0000000100)={{0xeeee8000, 0xeeee0002, 0xc, 0x1, 0x81, 0x0, 0x0, 0x24}, {0x10000, 0x5000, 0xb, 0xfc, 0x8, 0x0, 0x0, 0x0, 0xe, 0x0, 0x5, 0xfc}, {0x3000, 0x8080000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x1, 0x4}, {0x80a0000, 0xffff1000, 0xf, 0x0, 0x0, 0x8, 0x0, 0x7}, {0xeeee0000, 0xffff1000, 0xf, 0x2, 0xfe, 0x10, 0x3, 0xc, 0x58, 0x8, 0x4}, {0x4000, 0x1000, 0x0, 0x3, 0x0, 0xfd, 0xfc, 0x0, 0x0, 0x5, 0xc0, 0x10}, {0x3000, 0x4000, 0x10, 0x8, 0x7, 0xfb, 0x0, 0x7, 0x1a, 0x2, 0x0, 0x2}, {0x0, 0x3000, 0xe, 0x2, 0xff, 0x6e, 0x7, 0xfd, 0x0, 0x9, 0x7, 0x5}, {0x2000, 0xb}, {}, 0x9df9ffdf, 0x0, 0x2, 0xa8, 0x8, 0x8000, 0x2000, [0xdd41, 0x0, 0x2]}) 172.091453ms ago: executing program 1 (id=13840): mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000280), 0x42, 0x0) mount$fuse(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0), 0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB='fd=', @ANYRESDEC=r0, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) syz_fuse_handle_req(r0, &(0x7f0000004140)="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", 0x2000, &(0x7f00000003c0)={&(0x7f0000000340)={0x50, 0x0, 0x4, {0x7, 0x28, 0x0, 0x8010, 0x0, 0x2, 0x0, 0x6, 0x0, 0x0, 0x0, 0xfb}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) faccessat2(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x3, 0x300) umount2(&(0x7f0000000640)='./file0\x00', 0x2) syz_fuse_handle_req(r0, &(0x7f0000001640)="e0332fcf5747b9f778142cc174a9b5f0244b78bb6346cb5fc9135b8220090ee698fddc241870359d32327f299718466d88c89e68097036bb35abfe03e3c02234dcdb2c7d1209c657485ca1aa3f2fb80e71397b80fca6f3cf2367fb19eb95e5b4a0170063374645d9e020099ffd7def3d94cd29412b3d7b7a47bc70121be848cfcecea78d41a93622b134bd06e84dec07a9e5abc29cb02d5b9091e748cffacf48352628822bab7b24a17bdf4b3f3bd9fb17793496aa6490da3f58039ce5b40745dd63f82d93bed80b50ca5742d67d39029a98db95c9392e2d5fd9a35bad30cfe98682b5a069738a12c3cfd25949106cfc839202fd21c2b28e44be73280d5037351ead2dd1c277d9cc9088c6b14365eb0937ea9685f6b26232293803260f2c8cfe176b55df304bc2865b8f52581afc4beed445ae8cc405cb7bcc51103aef812c41437c5b070a3591ad0964677f4f9017bb300727dfab009056bee3671a9694be2e2f2173fcc06ceba5aed0d93a3d7cd88365c5c354788efcc705e90d572e34e9e566fc206a8167970ecb9cbc43f4d9de4d43688582b6600dfcfc7379c831e756a45835647bd87879a3e3942c61b9ea2c2af35d49a4caa9a109b0beb972996ff8924ea371e15dc48efd12b1203a7f1fe354977fcf9e4ee2c8f210387e551ddb55e5f67ee6bb9bc8772649693b0adf24606e8ccc59f020834d8cbfcadfa1770549fe464dfc412308fbaee8d30bd20c002794bfb923bac6b490841248d12ad9a0e54d1d96e3aff5dc4930a6c8b7c75264a46af7a6339725fb84e0363463ebaaaf58d6b9309ae7c87a8df8c68d2487d684011de1fa7645f3f48cf3bb61bee8bcace2f8ef5f967f2765f8086aeaa5dcc34c84e379a7ddd6438cccb5b8098dfbffffffffffffeadbc4ad2b2ef98412a46f74a171ad056429dbb723cdb9ca9f9f03170dba2870e5988b7cb755599d1eb8f7eaf5c8ded4b56022cb479d0bdfae18f69f9ecc42f4c181ea10838229ba5db7f088ad8d5f77e49c1fd93ed6b983c43b23c7eeb1233f0c114885057a27cd3f67a309e3fecba241836bc92308b830b10b04af6c9595b44e859b9ca7ef079e151fdd500060787be3a7a5b3e23b064504f8b8e7b6799ebfe14f698ba7a813a380e6f92cace9230aa8094a2465f7224e2becad469d0aaf0e48b0098eacfb17abdb69bb2ebba97a09d2b739b532d70db91fcb0fcb38bccdc01d7c8113024ea8b619e385e58d31899721416e10b408504a9c4fcf870d21051227440a616cf62f6637b62eceaee09029f88009be02269cb5e5ed090c6f5e6c652c31214aef301bd23ec2504f90991cd27539c1b8b54db51825e951d076cd0e70f56de4b91894ce22049205483a0fe7d7886b36118bebd96d138980e26604b6e70a7275c6b81501143119a8c2c271558202eda196704ef9ae3c33301e1afbe56d069ce4926bf531d960f3df58192f3da558adc169d48d39e24e04e95c406b34b1f4ed2726ef0f6a67dd84c75636984191d019cebfa883fdf99affcdb4c874614a5312455403895891daf7469d6721583ccd1290ab05b14516f22965fc52c4a528f1a5c20cc133fea279d9efc991ec4d51d2654daceda234f6d3b0c635db697aba3eeaf8356319adba42428266ac09a6e6495ca8f60c1c4e052068511696296e88ef86a591948627ba97df634e0063eb5f208df00a069b1213c29e58cf76f591253d60de9d7c01d29992ccc728140299c429fec0df9d90f83fa2467ce00de83b16d10c7edb80ff8d4b1b19eea9bd1e2783a0d41215c9cf23bc3ca1ff414e3f29aadba00c5a8d5b44c28c10e99140e5428278e54bfd880a93fd1b54b560422ab2bfcf120a7902373b6442c6e9867b19aa0a6b77b1634ab6fd1c8a1d90d99ebb9ebcb89d593562b266fbc53c40501f9298690283c45059b3f6ee278e46cb3904c947446c28af8855b2a68e6e0c0da205a6e12fdd15b393d579039b31c1a54230ac2ea13cf1f5540046b4dcccdd731fff7323c4880e5d2d8668d8a7f08920715c17ef9652eb55f224c82a6fdb970dbf1032403f283bd868a23f4785a6ab9c0bcd2308dba1a1f258ae512cf64784e501008db366ab7093a6cc4b6ee86154d44a1a15c10834602dd5ccf730f6d1142ac19d113496dbcb80021cb5733924265d082a8453b5c21e0245e4a2627e8df090da6a129ee49c58c1a7437369acdee15f5e4e5638f05d9f6391572d9890219def702a013a2b05239664dba44feec2a9508a3200b47de03e6a784bca2f3633df534af33da0a95a34ca845b61a22ff55a5a4c04ff9e06e7162f458a8c56e106e75ffb76a921f4057dd73d5f3801aa78ca4c78d6b79bce560404c2fe3d57876287f73e84c27c486ffb997951f9e0b3aa81a5e7804ac7360add11e7851842d0ed8df041c999e50226fef006373bbb53d5d8e9d1653924e60234fd0b6645b821746f3d88591ff66e294e8e958ca425ddbc7d604f7cbbcb9d5fe0d4ad53878eb16bc801def1005e1eb12a6d4924d2179948e7aa542f2600ba3c6c600629d64c529c7326c1f38aa4e1a6cc259e58f86400d65d67856c8f4fffc33ad4c279dc05367307f562f8127f37b03c3cf38a97cfde0c02aad8ac40d347a9e0a496f227c068dc6c666fb2b6a18990f607399b0707d135752d93739e1840b5b4c125c81eeeb318869b408f87778451e49f3ad988a8aa97672989ad367833ff7e7f0e79c37ac794fe466623e122127fb94ebbc01bc775183b26b2dc407b1aa1a55d4ce04dbe1df4fba0377fea4c4bfa5a37c4dd733fd116b9c7f50b11dd512ad68646b9ddca295fe27bee78476901fbb5c8d2856ae0e9e21ab26e3587c1325f1fa28edb4081f2ba309d5fc39f7f54abbd0d5a152c2f7e3a8b3a5ef6e097b109061c91124f41f33055a7bb86706629f614d40346715cf2fe387ef4e4fc6646839824d3ef85eeac85bc5e681320f6fa7057e0a10de8c4678b48510f77b91bb397dd1209eaba8ea1f237c348e9e0d7af1229e2c04b6560e48e3a7491f3066b63a8923becdcfd8594c1c55098a51283b599765b049831cacd9478e5e996c778d524b476f6677218c94886d7548be7617e5796e35bb3c9b13d70e4897867d85f0350e9329985f051fb556b861aef7dead54e6b29b9ad837cb4774f47a5371ef034612aa0c151345546b876b53e9f2c06e3ce0113e67eba8842f4ac5b51a61315bf050078c710dcf14371d9593730b1d0302ef999f488bbf42b7360171da98ad68932bda4937358fd1d0c2bcd04f7dbe2beaffa0d53cccda316cb19270cf4aa56695ef3203b49fe92d1623cc1d714da6b8f94112db1781562ab2ae50bda23debd55da440434299c992f2f8c264310d6d8ccdd042737db0253d6889d8bf36fe99a131b73300c9798b8fd58b5fc681b97e71230cd3094e441fe5cf1294bbc28f41146f06e39d5e19e673dd489dbddfc16fe281160a8008e375025cbf25e84945f2f0a5ffb2cd58273328ea9d7533b2f0861eff95823cea18dc1877183fefab808bda0890f91f1d79b36953b138fd62caea3411900647a4afadfecade2ff6274175f06614d108daaf9821c413a137e33c826957953bb39e2d852097f978c3577abcb71d68b45794247d8e82614979708f6d6d0e469828206b22913d6d320d815d42c0d943640c63196f703f946089f535eac511e26c6a5a529e875eb15aaf65fd50dcbaf37a009f2f9081cdbc744cf7aa2336913e89f1961581ad4bb6aeb1d23a787e2d3f99639871df5842c30581263d5139128f0a3f37ef48bb636d7aae06581de6baa55a12019d3ed831950915fdc1eee819dd01047bda606f2852699529718c99606246a92bb1dd9435d8f3a48646c0e423441bc783be358c0c91e6846419b6c0a81354500cb2721834dc11ba40c3bbe5717e5142922a168ca0e20fc269ea584c7f68ff7cced62c4277385368b4ad596b79c45a9c4575c37f300cab37a5693cb777fabed412934d3a77505b17cb2628119ddff45f3fcbffb50386eb9cfb6f82b37fa852ad4b65bf8e2898b11bf051cb7fb0fa81cbf81b9ceebb05498aeb2691eb15297edd682976d5a4f444cdaa82f063bc4482c28c4e6257c7cf3e5ee5a502c6527b77b12725e7526ff896ee2f8066536dce04d63072a34c19d533d4dbdb93e7185482cbf7510c5eef2f8aebebad011727cd8061a367b7e1868252bb43d9a74c9c6a10539e357d5367fac69a9296fe5a79a2e5b45950ff462e0e882aa32ff7f29b5644e5311f3e0b076c58683de29ad9dd8b2c9f3129bb60cc0a8d344981e82aec550bbf6c88adf3d54e9fdf93d9dce95289e9086043d888f19d209cbea79f8f5b2c81b2c3889eae1cb5305e282b883c4cfa3798eceeabb442a74ff6a8470020a296ef01d8e32553663c844e67e5a3a44375f0074ce9547a6c489ee86d7652219491f35c6b904d51a26c3d2cc77d8ff97050dd0d0aed4a1ecf1db7ac48673a1dcc70ac16f709dcf4b90148aede5302111ceaa3a81c49b724cfa206283b62513f96c1da77efafe2d2d08a5f391ab690b5d974ceed2e95e85b1039def0e94c79cc0aa1de1f8133e985adfadf4a657710487b265bb6692fd2b91a06ac98d50b052b8a13168e2638b93209238fbe67f4590a81a2cdbcc479ca9178720a6ec05bc9457f27ad2e2fd2f4e9c643ef85b6287a01f7fd597799cce7d6464ed3c95110733d4ba92314ba3dd81e51f541a6e37f8bb14376e41560f9049b4ff349a467defc205f915a345b5f06d090645180ca642c719f03e9813bff7fd635660efe38b022130d42f2cedd792bcba2bfb14385c6d1cbe5ff2e38c22f1f8d5e4d93d296042507e43f24ff904827b16f2a3572d26078d7fdb0cfdbe2e6bee07b94ae441e510681c96f97ef0ddbd7efbd80ce0689f6e2022a189dd2937d3eadd82a154a5fac91b5ef48523706957b8d5f55077973e9a036009d745a6df39ba154dc59c4ef784d62b3f2d782dc508242a1b0e4cc294b6e62e98ef946f0d984c3174cf86b8a0beb615f046ec50dd0c8a9c0f36df60bd162f1130f894085e7c47b6c28ff336f5d75166c1840e7ad07204fc10ce976505f6aece0316d8c65b973f61cea2fe4c6db722717985c25249f041c07a86b878702a8c9ab7c33fe41039041aa38489b02a28f18d69ab34619e9e35514c54592c8059984ace64b5302b5f22d68c35c7ffb23c63ce877a1e1b160dd2c329eabcc0e1e3072021bd811de3c0c7a68af20ddb9e2912b7eecc2a8cf083a252d0fe31629b20559f7b976e4d8625644385c692b8cdc2886a42d750962d0dee10a1546ecb7ef961216cc456d2450a44aab07014fe0be076ca6bcb46b644af844b2ad8b3817f1895a5d579af3dc937541f4b7e9203e7a7af534b406d8f6e3bc555d767603122ab1c4e62de19d6af63be8e39fe45732859d6d92e11f1a847f7d62764b6364aa7f95f03cc7deba467da5be71657ae50ff6bf93c51efb7d19ac9887e92fe5f3c9d545209eff307c9e02073bd3404827e148aa63c135ed668589bdfec38cb47716201a9d02f1b03993f89e96b33b32e52ddffb0580dac45422ba7a3fef76e519a3dc8d12eac60c2d2f8c4303aafa3e80135c403360d51c9cdeba3ffb31e664302f587e0e983ede7f9b2bfe2bc64bd5029cfa88445e043e08f3e9affee25e980e75d2664738726e3d2eade7dce0ece78a514bbbe5a54c121374d079e3b05996052d66889742232b73e950e1a9892e7352c9e546a8cfb48332d2b2be6327208ca51dc2869a562581947f62b0d5bfb3e0911d4854f822d6738b4deb195840d2bbae0b074b8d1e1010c24ec00052dce7d259e3044aab1a99d261fb3b49cf09dfc85473f94db06d49e202ca12182283d48144f8389a5301679901600bf81a99204b85a1598f84bd2d4c4893108f6717bf44234181467d6eeee61e1823268b5c60bf04d0e13e429f411b51adfca20ff1a1b1eee203d59b03da1643c3e9fc474a91470116c6c5275542adb10f3adae2ae87e88b93f334e0ceb6216fc081e8d84d8b0a503196dc50599b22b89b807627b427a815aea0dbca69e5fb215ee996395d8a21a1c67ac295be33c6517504e1f00f579f8c484873cc670b5b9e787b1c30ca1f0b25f8bb8f4bde3b3f4fa730c292cbf97b25068ba9c65f78c555d5f75d52a57958d7111e824f3afa16484f625abf62afc80654c36fd9f8284466422fb18e08274e8febc719d45b784974d50d187ad2349429af3f7930252a4d45997762e9d5f5493d408ca144532aa89aa3d43c46951dafb8f81794e2e9679ce238cfe86e112f4f046d87feec3be04461032819d62f217faa71fa9dc6da8861015567d1f7309090e25b7015dcc6d72a5e7ba53296ab1bc72467ac50831628cf5238155aed3fb189a8b527ebd38771e16454fe51e3edde55cea454414690491207c23f6cf33aaeeda432de2d1ede04e039a16245e66cce6f4e4ea534f290f02a2a81a46d6ffea7967dfbe37461f83d472091156594852823392efc953f4ac099d74e2d0328d9f47bd952352981a34055acd0273309484ab56afa85ff0c22fb53ac5d7cc8e346b4c2f38a4e2451738146b7b90c14f826c7dbc1b2be79d83772a8d629f2dfaf15286a15be1ea22a05d4ee3de6a6bfb7e208dbbcc88e77baac940d6438aeeb77c3a32db08b46e79545b65f7f3c1bd433092bc9116668c338ab35c01cb5871167868c6b61bd4c0ca5f96e5ce2465da06c4a320839f3bb7c0dffd40d5bb9a32fcbc6f691701de7211da062616272c77c62ac83e4cb29fb954ab27d9009877b79be54acd336bfe2a6e087abaab004743f5ea4ec8ddfb8086920e8e458a413adb98077a3cf860513cc8a453eb129556c871be7e7232a6130c4332819ad17b289fdb31f8f8854dffb4cfeca6d792567b444c750820a2a8a2e0f93779e61a4966650909369fc8bd5bd2bad4ff95cc8a14f6cd83ae6411b4bfe1a9b5cdf1fcf32c54cef1731edc47d41fa581376b25006fc859b98805d70a157e501a2cb2ab425340965213adfecdb5addb2b4b2ec5cc6935e4e279bb98283fb20dfcd8a2c91aefda9dc5a57bba4d8803d1eb0f4ba9529de01e39c2aa60a91267c31d036a3f669b9377661837f58c6950fdf38986ea13ff5e9c4d966bf999002da1a854d54aa225b259d91eb88425328e7d13b06dea321a151a8dfc44755214da97168e8acf027d66b7fff45ded94fcde53ff80342d4595644549c4ed827225596e2b30480e94eb049b6cd718fe8424d044bb5098e0206047ddb81755e3cb92131dd47ec754b64c4b78f663e364cf8a74cdd9857c81316dc4ccd5f02a84b310abfbc9d6a23ee6d1eaf6b8fc1544cfeb06002c8a40fb0e49859d2073a7b1cb112713518ad5e007d0a256f901469bfa5cae98841f877faeb584d41bfe695da72ca5700ae085f39c99f769502ea9f43c0b84ca4611441d5adb3e5d0a426297e535258748169cad487f97d171c0630642943508206ce648aad2971297f3d4037d73e5fbc73460ca7401b7dbd7807273ae077a81fd0d4bc90b6068e3ec95afcfeab16619306fb23942a4308e8253b35f4912df392dfc5daf35dd842a5a1f78fc294cbdbd504056f0c7779121b5b3db7461e437347452476f3b0bb22e63aa23cb9d3e797c6c95513058d8fb2c27864ac0e1f5001c988e29c79bfa4236c7be41dee5561d825c1f0fbebc0c06cc4712e88ad5efd94f4eb4e93794af42a9752a2ebc57dc2f3881c75bbb23ad25b69619f9f5b07fe114ba291d2b5b4c1c175e1aa3ee3eda55e6126b3ad1e613bf8e0bbad727b879e7796fa0ad100893677a18b53f5eb31db43a97370d3749afa92fd0291fa96b05daa6beb43b9c1c11d9515976976d1cc1e44f35d317299ceb68ea2545f2a2b92b4e1046f6f92c33aae6995593189bb2611576599fd765b8e6fe2e88674ffd57ee8252287b1904d622c36a502db45c72b0d5fc3d983cc44bc955eb43911404667a4ab147d72b69ff2514dfb820ad75758e85df88499cea94ed658b4c1c2f49fe2bbb8d2dd97f844a6df289296cfb9cd5bc8d17aa235e2c4501b1422b25acd6dbc3a91d03904c545320524f9034955ab02f5d058097c37d23984baf808d28b3e12821eb8919a77c1b6a8bdeceecfcc487c39db592817dd378a7c5127b427e7279b2a82f6b8eec6b3fabe0947e353e7a386475b15011de93e2f2891f772ef90f4aba1ee1c4d7321c81ce4dcaa378daeabb93182c319494436dbe67d252a01291cacb59686ebd53c6df21c083e98fa299cf5e9b59f1ccea95c62b1437c8ff8754a6372b5b879ebc3241f6430871eafe35337d75cb68c42862846df4342ab434f7f0a7b9f66824e1e696e3dbecde179592774b7511e5a7a1a06ba601eb5f2a935c7cef0f83ecd412a84afdd05120fceb1afb6445ebfcdff8fffffffb75dddccc45afb4f5bb1308d39309c92c0b61a322d5229881fa5d598113cce54107036ca9f63fe863d257c706fe89d5c7ae59a459c6f15ba48d80da4aff541797b26418acddb987df3544bc4918cdbbdd8dd1bc2163c89635044e7b4da878457727a667c0146a12b4c46639497243259bfe4aa5ea50eb79f39fa9209256c9a685e3e39d6d8b6a9ca7d3554fbff0908ad6c6ecf68e506c20b16cd4a98e3ada9eb0cb3eb0b75b13b6d80bf99eddf2282da52cec085d3a725b71c29395d605e1eb26143290946a3a0d24347fa46145735dbf4eabc12150b8d5f7eeca804d7ed1fecd0132d1b94ebec65cbc07dfd4d54a5140567e77c646bd92666922c43aca8e482c59b970fa43087eb76d6715e4e8e5ebe54ca391383ef685b133534fcc1e5c5eb56f9d76a888506c4ac8d289c37039e0c4f927b0e11e85c5c7ec1cf4b19bebee6014cb89ee57f2ade8d166005e956d46a0c01f60b58299479e8a59a2e88f1a7ffd08b27d92fc2772b338959bd0a1c9cb95075c3cc17043c818345b29b76c0b8ed41c8c7259cc780c657cb9509daec1558453cfe061f54e08523a55d3223897559d51096b680802140800000000000000322e007c2af0c08867291dd732bfe4b24d1d5ae517a7f5903c369ac6b157d42eb6ca8c0d7b50fd533a56c814e7cf04db3012eebd53ec1b123d65ab1e462dc19182b690d56a88ad5a1f4d89f1749b005e88085505cc6d7de8eeee08def67bc1d1519d44b7a62dc07e491f328f786956d9200f00d78829e6af7c1a5835366201374b9487330920d4c57e2f7073292e173acc2424bb0d5e0e9448b4c02f9cfc99bc408110b6a3e9bc3799e4b178c2871069bc7d9ceba564378f02b2932c36f159478b5facd452b595a86d119216af9d860bd3997305320159a69a70fc62284141d23d2dc1e5394b271d99e5570450f1c55807e96c7cbe1b7c2e3e96f69fecf0f375e36e0d2acf319e37199e98486a8d145ce2d996c1909402744cce63664a75e480b197c345360321e830e5912d1d7bfe5a129a67fa98e6eda5268fa588047859daa11d087d0dbf0ccc7e120e3a5820cb4f5dc06748317e3f866518eb66e39dc8a68a7411b3403fc8eeab8283dee4d767e8e5842ed922e03ae5b3c9c494d5ebc61527ccd1222740fedd9e469ba6b30761cf387d654081c7e63182860e4548748058914a9cea01caf074fe6a78fafa2b45c516f9f20af9ac6773a400fa9661a872f6b55f0ed52a9be9e9c35502604b924f0eb628d6545da322e0713f9a5587e87e4b04fa495423b7c72093b764adfd1430a2e608b7af3d2bf80fef00e5b69abe386618274921ff57621bb99739de2e066ff17e95eba027f6a35170af3a69e93359a9643e155832d45c1aa9a8f71ad35504b99d3d0a1c11ae108664ea36f4dcded083aee17ac9efe7ee3fdf7b63c7c09bcef62caa88708510d45cea79d323083ddbfe7e5d3d9138f206a7af82ef1d26c85015c3e55a285a35d0052546493536b9061db27291a9292033753b7bddac63dac6f6271689240e43523c434a65e1d35299e386c953d0c92f21057e0b7883e049d20961e75069587eb3df6206496f76bbfd96635bb19837ba2ab193d79072ffb8829306b63697ff104a65031b8a38c24cca9ba23d5cdf753169a00fe2b2c3849f234a7029b657b3324c10d553e601aa97d17024f7bf5a99f96392f4a079a83daa27f4e3b512ee8536e764ce4dc36fd0874dfa502a693e55bd9f116202c5e906703e2c43d84448598b7af78aa60a205c152841e75e23436738ccaa6bbcef87e6a237d86d1a5e38e56c162cd6d61a4fb8b410b1643ad557a22348edfa82c23db11c9abdd8141fce263a66537512e93a930a4801ad862a902c7c1e00eb7c7466b1351318b7196c2a9016c55a05e104e124bdb568132f9397e31b10d04e5284bd029ea2f6a3ed11854e09b5871d6a725c21a9ef5d7e729a90a8206d5f61e6e42e47dda3e31b9134d47872a0dd7a576b665ec6ceaa5fd7d85ed7feede9ac9fc23e40241c0318077edda75b62eb271e28fb3705f7b4950c14b721a3a74a7a4e4de02cef5de76a1602b906016c0892ef37db51b0a1dd53f28b3d896f20abbad1ad0e0220960423267fc6e1779d1150fd584dd184bb43278d2d68ff21ac0daeef5408348cb80f4a9e0e606f6048bbaa517289451f084fffb63c5d904788cfc310b5495528a58f4650dafc4e4675b99d35ebab710ac6fefcee6c51a2835510fb6d2dbd8f97c3e53fb7a23c3f3c0283eb2271504581b9c1fa31e35c117e56a5d668a9c57df3b4e1129ca019a8b877fa4a22768dfbdd9d2154e17f4a7755b065090d88982471bfb242d89af5c6782693a6ab1b1be74dfa5655ac3b5ef4ace8dc595803cf4025bdf5c0e9fbe7a12a3a313311809591da08a2cc6cd8480dc960e1f79fa208440a0e589be5756c36d5830a51c4bdc39c2a85c0431bae3a7331b2ffdf23623693d343a7938a8a8a4dd4d523c6450a705bccbb38427f06f4f84a18adf303c0ddecf4ce2b6cdde4e09a4c31816195f0fe9f05fcdc0609f8a75ad2f23d5c24faaf346c13ec0512a5c29477ac561c878085d1a323f6bab08e2fb9ee57d7bb621ef21caf3609d74036c6dc1d7be0b6058d89dcb8d9aa4462fa0a740be66e3fdaa957f27c5a26dc586ac8c927ab2d7cf1b761798ea4191be8f4423cf1a6727d0c5f27a9969a753573afa584dea82678f3471ba36d726c396d68c671e579120f1a11cd50fa66b26fc2d6cb74ba07edbd5d3a288cf58ed1255381df02b2fb8983b7cf833433d1ab8fdef12651c3507e4b69fbc4b234678cca36761e8da434e5f036f204a1400da15277ef27ac140e2d574b89c0fd617da27e6ce862883bbe81c288834b9477d0d440c15dad505b363fcc1cfef8e2e3a96438809505844196acd0af751dedfced67f209c2ffa9c6da842c93ff4b5fd54a67df904f2f31b4236728c99582a667a8461d397770a657ffa7d514b0f076d7f35e9704a836e7882a2acf0a0ec2158ac7234953c3696abdc791c0b163ee76fbcc5adc18b6fa0f51f76f3d313a0d891f1deb69f6e44289b1aa43a768b8d13270959763a2c45129daeea493a5b0d7b36753b223dca9a8037368653400", 0x2000, &(0x7f0000000700)={&(0x7f00000002c0)={0x50, 0x0, 0x0, {0x7, 0x2b, 0x4, 0x8, 0x3, 0x7ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100000}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 134.594908ms ago: executing program 6 (id=13841): gettid() r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)=ANY=[@ANYBLOB="3000000010000100"/20, @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\n\x00', @ANYRES32=0x0, @ANYBLOB="08001b"], 0x30}}, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r1, 0x8933, &(0x7f0000000000)={'team0\x00', 0x0}) syz_memcpy_off$IO_URING_METADATA_GENERIC(0x0, 0x40, 0x0, 0x0, 0x4) sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000500)=ANY=[@ANYBLOB="3c00000010000100"/20, @ANYRES32=0x0, @ANYBLOB="0401010000000000140003006970366772653000000000000000000008000a00", @ANYRES32=r2], 0x3c}}, 0x0) 0s ago: executing program 5 (id=13842): r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x210000000013, &(0x7f00000000c0)=0x100000001, 0x4) connect$inet(r0, &(0x7f0000000140)={0x2, 0x0, @remote}, 0x10) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r0, 0x6, 0x16, &(0x7f0000000000)=[@sack_perm, @window, @sack_perm, @sack_perm, @timestamp, @timestamp, @timestamp, @timestamp], 0x20000149) accept4(r0, 0x0, 0x0, 0x80800) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='blkio.bfq.io_merged_recursive\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x0, 0x10012, r1, 0x0) kernel console output (not intermixed with test programs): 4.261956][ T3531] netlink: 'syz.6.12228': attribute type 1 has an invalid length. [ 1244.268579][ T3527] team0: Failed to send options change via netlink (err -105) [ 1244.280543][ T3527] team0: Port device dummy0 added [ 1244.341297][ T3533] gretap1: entered allmulticast mode [ 1244.387498][ T3533] bond2: (slave gretap1): making interface the new active one [ 1244.414258][ T3533] bond2: (slave gretap1): Enslaving as an active interface with an up link [ 1244.631624][ T3541] fuse: root generation should be zero [ 1245.071319][ T3557] binder: 3556:3557 ioctl c0306201 0 returned -14 [ 1245.458907][ T3570] netlink: 'syz.8.12241': attribute type 10 has an invalid length. [ 1245.474664][ T3570] bond0: (slave wlan1): Enslaving as an active interface with an up link [ 1245.955098][T22184] usb 9-1: new high-speed USB device number 45 using dummy_hcd [ 1246.104971][T22184] usb 9-1: Using ep0 maxpacket: 8 [ 1246.111476][T22184] usb 9-1: config 0 has an invalid interface number: 186 but max is 0 [ 1246.121325][T22184] usb 9-1: config 0 has no interface number 0 [ 1246.128685][T22184] usb 9-1: config 0 interface 186 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 1246.140150][T22184] usb 9-1: config 0 interface 186 altsetting 0 has an endpoint descriptor with address 0x9A, changing to 0x8A [ 1246.153630][T22184] usb 9-1: config 0 interface 186 altsetting 0 endpoint 0x8A has an invalid bInterval 0, changing to 7 [ 1246.165932][T22184] usb 9-1: config 0 interface 186 altsetting 0 has 4 endpoint descriptors, different from the interface descriptor's value: 3 [ 1246.181708][T22184] usb 9-1: New USB device found, idVendor=07c0, idProduct=1505, bcdDevice=b8.c5 [ 1246.191308][T22184] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1246.199395][T22184] usb 9-1: Product: syz [ 1246.203692][T22184] usb 9-1: Manufacturer: syz [ 1246.208628][T22184] usb 9-1: SerialNumber: syz [ 1246.216227][T22184] usb 9-1: config 0 descriptor?? [ 1246.432741][T22184] iowarrior 9-1:0.186: IOWarrior product=0x1505, serial= interface=186 now attached to iowarrior0 [ 1246.666322][ T5914] usb 9-1: USB disconnect, device number 45 [ 1247.120552][ T3612] syzkaller1: entered promiscuous mode [ 1247.127056][ T3612] syzkaller1: entered allmulticast mode [ 1247.818714][ T3620] netlink: 'syz.3.12265': attribute type 1 has an invalid length. [ 1247.839170][ T3622] loop6: detected capacity change from 0 to 2640 [ 1247.900902][T15224] buffer_io_error: 3011 callbacks suppressed [ 1247.900921][T15224] Buffer I/O error on dev loop6, logical block 0, async page read [ 1247.949580][ T3625] Buffer I/O error on dev loop6, logical block 0, async page read [ 1247.979144][T15224] Buffer I/O error on dev loop6, logical block 0, async page read [ 1248.001269][ T3624] gretap2: entered allmulticast mode [ 1248.023411][ T3625] Buffer I/O error on dev loop6, logical block 0, async page read [ 1248.059757][ T3624] bond4: (slave gretap2): making interface the new active one [ 1248.075355][T15224] Buffer I/O error on dev loop6, logical block 0, async page read [ 1248.096077][ T3625] Buffer I/O error on dev loop6, logical block 0, async page read [ 1248.104415][ T3624] bond4: (slave gretap2): Enslaving as an active interface with an up link [ 1248.114408][T15224] Buffer I/O error on dev loop6, logical block 0, async page read [ 1248.123021][ T3625] Buffer I/O error on dev loop6, logical block 0, async page read [ 1248.133770][T15224] Buffer I/O error on dev loop6, logical block 0, async page read [ 1248.143777][ T3625] Buffer I/O error on dev loop6, logical block 0, async page read [ 1248.155235][T15224] ldm_validate_partition_table(): Disk read failed. [ 1248.162513][T15224] Dev loop6: unable to read RDB block 0 [ 1248.173099][T15224] loop6: unable to read partition table [ 1248.232980][ T3622] ldm_validate_partition_table(): Disk read failed. [ 1248.306955][ T3622] Dev loop6: unable to read RDB block 0 [ 1248.335991][ T3622] loop6: unable to read partition table [ 1248.394220][ T3622] loop_reread_partitions: partition scan of loop6 (3Ÿ ¾‚³˜) failed (rc=-5) [ 1248.457847][ T5196] ldm_validate_partition_table(): Disk read failed. [ 1248.464598][ T5196] Dev loop6: unable to read RDB block 0 [ 1248.498997][ T5196] loop6: unable to read partition table [ 1248.744008][ T5196] ldm_validate_partition_table(): Disk read failed. [ 1248.775657][ T5196] Dev loop6: unable to read RDB block 0 [ 1248.788580][ T5196] loop6: unable to read partition table [ 1248.991062][ T5196] ldm_validate_partition_table(): Disk read failed. [ 1249.011136][ T5196] Dev loop6: unable to read RDB block 0 [ 1249.026027][ T5196] loop6: unable to read partition table [ 1249.689314][ T3680] sctp: [Deprecated]: syz.9.12288 (pid 3680) Use of int in max_burst socket option deprecated. [ 1249.689314][ T3680] Use struct sctp_assoc_value instead [ 1250.326851][ T3701] netlink: 4 bytes leftover after parsing attributes in process `syz.9.12298'. [ 1251.405354][ T5914] usb 10-1: new high-speed USB device number 23 using dummy_hcd [ 1251.490475][ T3730] af_packet: tpacket_rcv: packet too big, clamped from 4 to 4294967280. macoff=96 [ 1251.595245][ T5914] usb 10-1: Using ep0 maxpacket: 32 [ 1251.605956][ T5914] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1251.637231][ T5914] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1251.662761][ T5914] usb 10-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 1251.685848][ T5914] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1251.708190][ T3732] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=3134677450 (3134677450 ns) > initial count (1366566911 ns). Using initial count to start timer. [ 1251.727702][ T5914] usb 10-1: config 0 descriptor?? [ 1251.753470][ T5914] hub 10-1:0.0: USB hub found [ 1251.958005][ T5914] hub 10-1:0.0: 1 port detected [ 1253.217079][ T5914] hub 10-1:0.0: hub_hub_status failed (err = -32) [ 1253.223866][ T5914] hub 10-1:0.0: config failed, can't get hub status (err -32) [ 1253.242594][ T5914] usbhid 10-1:0.0: can't add hid device: -32 [ 1253.249738][ T5914] usbhid 10-1:0.0: probe with driver usbhid failed with error -32 [ 1253.290507][ T5914] usb 10-1: USB disconnect, device number 23 [ 1254.988966][ T3790] loop2: detected capacity change from 0 to 7 [ 1255.001688][T15224] loop2: [POWERTEC] p1 p2 [ 1255.010240][T15224] loop2: p1 start 4293918720 is beyond EOD, truncated [ 1255.024986][T15224] loop2: p2 start 951 is beyond EOD, truncated [ 1255.043362][ T3790] loop2: [POWERTEC] p1 p2 [ 1255.050785][ T3790] loop2: p1 start 4293918720 is beyond EOD, truncated [ 1255.058194][ T3790] loop2: p2 start 951 is beyond EOD, truncated [ 1255.587068][ T3805] netlink: 4 bytes leftover after parsing attributes in process `syz.8.12342'. [ 1255.616615][ T3805] netlink: 4 bytes leftover after parsing attributes in process `syz.8.12342'. [ 1255.844193][ T3811] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 1255.859091][ T3811] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 1255.869888][ T3811] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 1255.886442][ T3811] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 1255.894162][ T3811] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 1256.211690][ T3814] chnl_net:caif_netlink_parms(): no params data found [ 1256.236924][ T5914] usb 9-1: new high-speed USB device number 46 using dummy_hcd [ 1256.400459][ T5914] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1256.425228][ T5914] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1256.455497][ T5914] usb 9-1: New USB device found, idVendor=044f, idProduct=b65d, bcdDevice= 0.00 [ 1256.479768][ T5914] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1256.491280][ T3814] bridge0: port 1(bridge_slave_0) entered blocking state [ 1256.502550][ T5914] usb 9-1: config 0 descriptor?? [ 1256.516493][ T3814] bridge0: port 1(bridge_slave_0) entered disabled state [ 1256.523840][ T3814] bridge_slave_0: entered allmulticast mode [ 1256.544227][ T3814] bridge_slave_0: entered promiscuous mode [ 1256.557237][ T3814] bridge0: port 2(bridge_slave_1) entered blocking state [ 1256.564585][ T3814] bridge0: port 2(bridge_slave_1) entered disabled state [ 1256.574304][ T3814] bridge_slave_1: entered allmulticast mode [ 1256.589253][ T3814] bridge_slave_1: entered promiscuous mode [ 1256.691001][ T3814] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1256.708366][ T3814] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1256.794773][ T3814] team0: Port device team_slave_0 added [ 1256.814290][ T3814] team0: Port device team_slave_1 added [ 1256.931950][ T3814] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1256.939700][ T3814] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1256.967668][ T3814] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1256.990075][ T5914] hid-thrustmaster 0003:044F:B65D.00CE: unknown main item tag 0x0 [ 1257.009803][ T3814] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1257.022305][ T3814] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1257.052763][ T5914] hid-thrustmaster 0003:044F:B65D.00CE: hidraw0: USB HID v0.00 Device [HID 044f:b65d] on usb-dummy_hcd.8-1/input0 [ 1257.066666][ T5914] hid-thrustmaster 0003:044F:B65D.00CE: Wrong number of endpoints? [ 1257.080118][ T3814] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1257.254562][ T3814] hsr_slave_0: entered promiscuous mode [ 1257.287845][ C1] hid-thrustmaster 0003:044F:B65D.00CE: URB to get model id failed with error -71 [ 1257.289207][T22184] usb 9-1: USB disconnect, device number 46 [ 1257.306261][ T3814] hsr_slave_1: entered promiscuous mode [ 1257.312746][ T3814] debugfs: 'hsr0' already exists in 'hsr' [ 1257.345183][ T3814] Cannot create hsr debugfs directory [ 1257.935312][T28293] Bluetooth: hci0: command tx timeout [ 1259.246600][T30242] usb 9-1: new full-speed USB device number 47 using dummy_hcd [ 1259.265393][ T3814] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 1259.326924][ T3814] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 1259.376907][ T3814] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 1259.396237][ T3814] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 1259.419946][T30242] usb 9-1: unable to get BOS descriptor or descriptor too short [ 1259.433834][T30242] usb 9-1: not running at top speed; connect to a high speed hub [ 1259.445985][T30242] usb 9-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1259.457055][T30242] usb 9-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 1259.475877][T30242] usb 9-1: string descriptor 0 read error: -22 [ 1259.495043][T30242] usb 9-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 1259.515722][T30242] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1259.547964][T30242] usb 9-1: 0:2 : does not exist [ 1259.701825][ T3814] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1259.758503][ T3814] 8021q: adding VLAN 0 to HW filter on device team0 [ 1259.774541][ T137] bridge0: port 1(bridge_slave_0) entered blocking state [ 1259.781829][ T137] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1259.836525][ T1135] bridge0: port 2(bridge_slave_1) entered blocking state [ 1259.843737][ T1135] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1259.859618][ T3922] kernel read not supported for file /rmdF¼ì (pid: 3922 comm: syz.9.12375) [ 1259.870095][ T30] audit: type=1800 audit(1766839796.249:609): pid=3922 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.9.12375" name=726D64461716BCEC dev="mqueue" ino=180857 res=0 errno=0 [ 1260.015496][T28293] Bluetooth: hci0: command tx timeout [ 1260.206057][ T3814] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1260.377286][T22184] usb 10-1: new high-speed USB device number 24 using dummy_hcd [ 1260.489237][ T3814] veth0_vlan: entered promiscuous mode [ 1260.549971][ T3814] veth1_vlan: entered promiscuous mode [ 1260.727094][ T3814] veth0_macvtap: entered promiscuous mode [ 1260.777070][ T3814] veth1_macvtap: entered promiscuous mode [ 1260.864031][ T3814] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1260.924691][ T3814] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1261.034529][ T1384] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1261.054971][T22184] usb 10-1: Using ep0 maxpacket: 8 [ 1261.062130][T22184] usb 10-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 56832, setting to 1024 [ 1261.097321][T22184] usb 10-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024 [ 1261.108904][ T1384] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1261.109533][T30242] usb 9-1: 5:0: failed to get current value for ch 0 (-22) [ 1261.131038][T22184] usb 10-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 1261.142890][T22184] usb 10-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 1261.170137][ T1384] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1261.177502][T30242] usb 9-1: 5:0: cannot get min/max values for control 3 (id 5) [ 1261.195227][T22184] usb 10-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 1261.209817][ T1384] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1261.222654][T30242] usb 9-1: 5:0: failed to get current value for ch 1 (-22) [ 1261.236964][T22184] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1261.365699][T30242] usb 9-1: 5:0: cannot get min/max values for control 3 (id 5) [ 1261.428953][T30242] usb 9-1: USB disconnect, device number 47 [ 1261.506375][ T5937] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1261.538661][T22184] usb 10-1: GET_CAPABILITIES returned 0 [ 1261.555631][ T5937] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1261.565016][T22184] usbtmc 10-1:16.0: can't read capabilities [ 1261.664725][T32539] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1261.687332][T32539] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1261.790660][ C1] usbtmc 10-1:16.0: usbtmc_write_bulk_cb - nonzero write bulk status received: -71 [ 1261.820551][T30246] usb 10-1: USB disconnect, device number 24 [ 1262.095650][T28293] Bluetooth: hci0: command tx timeout [ 1262.429375][ T3970] loop2: detected capacity change from 0 to 7 [ 1262.466576][ T3970] Dev loop2: unable to read RDB block 7 [ 1262.538272][ T3970] loop2: unable to read partition table [ 1262.557510][ T3970] loop2: partition table beyond EOD, truncated [ 1262.575518][ T3970] loop_reread_partitions: partition scan of loop2 (þ被xü—ŸÑà– ) failed (rc=-5) [ 1263.037755][ T3994] team0: left allmulticast mode [ 1263.042847][ T3994] team_slave_0: left allmulticast mode [ 1263.184980][ T3994] team_slave_1: left allmulticast mode [ 1263.190994][ T3994] bridge0: port 3(team0) entered disabled state [ 1263.278904][ T3994] bridge_slave_0: left allmulticast mode [ 1263.305617][ T3994] bridge_slave_0: left promiscuous mode [ 1263.325043][ T3994] bridge0: port 1(bridge_slave_0) entered disabled state [ 1263.351964][ T3994] bridge_slave_1: left allmulticast mode [ 1263.366737][ T3994] bridge_slave_1: left promiscuous mode [ 1263.378429][ T3994] bridge0: port 2(bridge_slave_1) entered disabled state [ 1263.422043][ T3994] bond0: (slave bond_slave_0): Releasing backup interface [ 1263.461118][ T3994] bond0: (slave bond_slave_1): Releasing backup interface [ 1263.477736][ T3994] team_slave_0: left promiscuous mode [ 1263.498325][ T3994] team0: Port device team_slave_0 removed [ 1263.508478][ T3994] team_slave_1: left promiscuous mode [ 1263.529628][ T3994] team0: Port device team_slave_1 removed [ 1263.550768][ T3994] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 1263.607800][ T4002] bond_slave_0: entered promiscuous mode [ 1263.614019][ T4002] bond_slave_1: entered promiscuous mode [ 1263.648311][ T4002] macvlan2: entered promiscuous mode [ 1263.670110][ T4002] bond0: entered promiscuous mode [ 1263.688511][ T4002] macvlan2: entered allmulticast mode [ 1263.713170][ T4002] bond0: entered allmulticast mode [ 1263.731954][ T4002] bond_slave_0: entered allmulticast mode [ 1263.757319][ T4002] bond_slave_1: entered allmulticast mode [ 1263.782959][ T4002] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 1263.812932][ T4002] bond0: left allmulticast mode [ 1263.840627][ T4002] bond_slave_0: left allmulticast mode [ 1263.867580][ T4002] bond_slave_1: left allmulticast mode [ 1263.890736][ T4002] bond0: left promiscuous mode [ 1263.916495][ T4002] bond_slave_0: left promiscuous mode [ 1263.922050][ T4002] bond_slave_1: left promiscuous mode [ 1264.180524][T28293] Bluetooth: hci0: command tx timeout [ 1265.836244][ T4086] netlink: 'syz.0.12417': attribute type 8 has an invalid length. [ 1265.882263][ T4086] netlink: 4 bytes leftover after parsing attributes in process `syz.0.12417'. [ 1265.934552][ T4086] bond0: entered promiscuous mode [ 1265.940164][ T4086] bond_slave_0: entered promiscuous mode [ 1265.946228][ T4086] bond_slave_1: entered promiscuous mode [ 1265.961680][ T4086] gretap0: entered promiscuous mode [ 1265.969022][ T4086] bond0: left promiscuous mode [ 1265.977174][ T4086] bond_slave_0: left promiscuous mode [ 1266.003416][ T4086] bond_slave_1: left promiscuous mode [ 1266.020749][ T4086] gretap0: left promiscuous mode [ 1267.285177][T22184] usb 10-1: new full-speed USB device number 25 using dummy_hcd [ 1267.467328][T22184] usb 10-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1267.495915][T22184] usb 10-1: config 0 has no interfaces? [ 1267.506143][T22184] usb 10-1: New USB device found, idVendor=04f3, idProduct=0755, bcdDevice= 0.00 [ 1267.529135][T22184] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1267.556029][T22184] usb 10-1: config 0 descriptor?? [ 1267.617382][T22187] usb 4-1: new high-speed USB device number 26 using dummy_hcd [ 1267.790930][T22184] usb 10-1: USB disconnect, device number 25 [ 1267.797524][T22187] usb 4-1: Using ep0 maxpacket: 32 [ 1267.813130][T22187] usb 4-1: New USB device found, idVendor=0ac8, idProduct=0321, bcdDevice=6f.be [ 1267.848244][T22187] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1267.866207][T22187] usb 4-1: config 0 descriptor?? [ 1267.889728][T22187] gspca_main: vc032x-2.14.0 probing 0ac8:0321 [ 1268.888070][T22187] gspca_vc032x: reg_w err -71 [ 1268.904686][T22187] gspca_vc032x: I2c Bus Busy Wait 00 [ 1268.920127][T22187] gspca_vc032x: I2c Bus Busy Wait 00 [ 1268.934557][T22187] gspca_vc032x: I2c Bus Busy Wait 00 [ 1268.952875][T22187] gspca_vc032x: I2c Bus Busy Wait 00 [ 1268.981949][T22187] gspca_vc032x: I2c Bus Busy Wait 00 [ 1268.994558][T22187] gspca_vc032x: I2c Bus Busy Wait 00 [ 1269.007507][T22187] gspca_vc032x: I2c Bus Busy Wait 00 [ 1269.018886][T22187] gspca_vc032x: I2c Bus Busy Wait 00 [ 1269.031028][T22187] gspca_vc032x: I2c Bus Busy Wait 00 [ 1269.044079][T22187] gspca_vc032x: I2c Bus Busy Wait 00 [ 1269.055528][T22187] gspca_vc032x: I2c Bus Busy Wait 00 [ 1269.085096][T22187] gspca_vc032x: I2c Bus Busy Wait 00 [ 1269.103339][T22187] gspca_vc032x: I2c Bus Busy Wait 00 [ 1269.125277][T22187] gspca_vc032x: I2c Bus Busy Wait 00 [ 1269.130625][T22187] gspca_vc032x: I2c Bus Busy Wait 00 [ 1269.154416][T22187] gspca_vc032x: I2c Bus Busy Wait 00 [ 1269.163126][T22187] gspca_vc032x: I2c Bus Busy Wait 00 [ 1269.172402][T22187] gspca_vc032x: I2c Bus Busy Wait 00 [ 1269.180396][T22187] gspca_vc032x: Unknown sensor... [ 1269.186092][T22187] vc032x 4-1:0.0: probe with driver vc032x failed with error -22 [ 1269.205455][T22187] usb 4-1: USB disconnect, device number 26 [ 1269.346284][T22193] usb 10-1: new high-speed USB device number 26 using dummy_hcd [ 1269.515058][T22193] usb 10-1: Using ep0 maxpacket: 8 [ 1269.533198][T22193] usb 10-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 1269.561358][T22193] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1269.590027][T22193] usb 10-1: Product: syz [ 1269.603217][T22193] usb 10-1: Manufacturer: syz [ 1269.614674][T22193] usb 10-1: SerialNumber: syz [ 1269.630425][T22193] usb 10-1: config 0 descriptor?? [ 1269.895875][T22193] usb 10-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 1270.427434][ T4231] netlink: 40 bytes leftover after parsing attributes in process `syz.0.12454'. [ 1270.570856][T30246] IPVS: starting estimator thread 0... [ 1270.679258][ T4239] IPVS: using max 28 ests per chain, 67200 per kthread [ 1271.100301][T22193] dvb_usb_rtl28xxu 10-1:0.0: probe with driver dvb_usb_rtl28xxu failed with error -71 [ 1271.142928][T22193] usb 10-1: USB disconnect, device number 26 [ 1271.339912][ T4263] Failed to get privilege flags for destination (handle=0x0:0x0) [ 1272.165226][T22193] usb 10-1: new high-speed USB device number 27 using dummy_hcd [ 1272.289581][ T30] audit: type=1326 audit(1766839808.659:610): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4301 comm="syz.0.12472" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fb7539 code=0x7ffc0000 [ 1272.348618][T22193] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1272.380098][ T30] audit: type=1326 audit(1766839808.679:611): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4301 comm="syz.0.12472" exe="/root/syz-executor" sig=0 arch=40000003 syscall=359 compat=1 ip=0xf7fb7539 code=0x7ffc0000 [ 1272.405623][T22193] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1272.448826][T22193] usb 10-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 1272.498261][ T30] audit: type=1326 audit(1766839808.689:612): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4301 comm="syz.0.12472" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fb7539 code=0x7ffc0000 [ 1272.525012][T22193] usb 10-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 1272.534440][T22193] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1272.547205][ T30] audit: type=1326 audit(1766839808.689:613): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4301 comm="syz.0.12472" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fb7539 code=0x7ffc0000 [ 1272.578552][T22193] usb 10-1: config 0 descriptor?? [ 1272.597698][ T30] audit: type=1326 audit(1766839808.689:614): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4301 comm="syz.0.12472" exe="/root/syz-executor" sig=0 arch=40000003 syscall=361 compat=1 ip=0xf7fb7539 code=0x7ffc0000 [ 1272.620980][ T30] audit: type=1326 audit(1766839808.689:615): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4301 comm="syz.0.12472" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fb7539 code=0x7ffc0000 [ 1272.644629][ T418] tipc: Subscription rejected, illegal request [ 1272.644629][ T30] audit: type=1326 audit(1766839808.689:616): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4301 comm="syz.0.12472" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fb7539 code=0x7ffc0000 [ 1272.652368][ T30] audit: type=1326 audit(1766839808.689:617): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4301 comm="syz.0.12472" exe="/root/syz-executor" sig=0 arch=40000003 syscall=362 compat=1 ip=0xf7fb7539 code=0x7ffc0000 [ 1272.746941][ T30] audit: type=1326 audit(1766839808.689:618): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4301 comm="syz.0.12472" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fb7539 code=0x7ffc0000 [ 1272.781676][ T30] audit: type=1326 audit(1766839808.689:619): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4301 comm="syz.0.12472" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fb7539 code=0x7ffc0000 [ 1273.077184][T22193] plantronics 0003:047F:FFFF.00CF: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.9-1/input0 [ 1273.342166][ T4325] bridge_slave_0: left allmulticast mode [ 1273.348295][ T4325] bridge_slave_0: left promiscuous mode [ 1273.355639][ T4325] bridge0: port 1(bridge_slave_0) entered disabled state [ 1273.398321][ T4325] bridge_slave_1: left allmulticast mode [ 1273.404236][ T4325] bridge0: port 2(bridge_slave_1) entered disabled state [ 1273.450522][ T4325] bond0: (slave bond_slave_0): Releasing backup interface [ 1273.479405][ T4325] bond0: (slave bond_slave_1): Releasing backup interface [ 1273.512032][ T4325] team0: Port device team_slave_0 removed [ 1273.552622][ T4325] team0: Port device team_slave_1 removed [ 1273.586189][ T4325] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1273.593853][ T4325] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1273.618810][ T4325] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1273.627636][ T4325] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1273.638978][ T4325] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 1273.875801][T22187] usb 10-1: USB disconnect, device number 27 [ 1275.459787][ T4372] kvm: vcpu 0: requested 128 ns lapic timer period limited to 200000 ns [ 1275.469008][ T4372] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=1812281087 (231971979136 ns) > initial count (200000 ns). Using initial count to start timer. [ 1275.966006][T22187] usb 10-1: new high-speed USB device number 28 using dummy_hcd [ 1276.135318][T22187] usb 10-1: Using ep0 maxpacket: 16 [ 1276.167206][T22187] usb 10-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xF3, changing to 0x83 [ 1276.205828][T22187] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 1276.269113][T22187] usb 10-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 1276.296176][T22187] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1276.304326][T22187] usb 10-1: Product: syz [ 1276.351119][T22187] usb 10-1: Manufacturer: syz [ 1276.377240][T22187] usb 10-1: SerialNumber: syz [ 1276.395954][T22187] usb 10-1: config 0 descriptor?? [ 1276.429285][T22187] em28xx 10-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0) [ 1276.485089][T22187] em28xx 10-1:0.0: Audio interface 0 found (Vendor Class) [ 1277.005251][ T5914] usb 4-1: new high-speed USB device number 27 using dummy_hcd [ 1277.039866][T22187] em28xx 10-1:0.0: unknown em28xx chip ID (0) [ 1277.060554][T22187] em28xx 10-1:0.0: Config register raw data: 0xfffffffb [ 1277.117836][T22193] hid-generic 0000:0000:0000.00D0: unknown main item tag 0x0 [ 1277.130334][T22193] hid-generic 0000:0000:0000.00D0: hidraw0: HID v0.00 Device [syz1] on syz0 [ 1277.197435][ T5914] usb 4-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 1277.235260][ T5914] usb 4-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config [ 1277.268885][ T5914] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 1277.282788][T22187] em28xx 10-1:0.0: AC97 chip type couldn't be determined [ 1277.294209][ T5914] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 52, changing to 9 [ 1277.305515][T22187] em28xx 10-1:0.0: No AC97 audio processor [ 1277.325726][T22187] usb 10-1: USB disconnect, device number 28 [ 1277.353874][ T5914] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8241, setting to 1024 [ 1277.365319][T22187] em28xx 10-1:0.0: Disconnecting em28xx [ 1277.376091][T22187] em28xx 10-1:0.0: Freeing device [ 1277.399032][ T5914] usb 4-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 1277.431582][ T5914] usb 4-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 1277.464968][ T5914] usb 4-1: Product: syz [ 1277.469215][ T5914] usb 4-1: Manufacturer: syz [ 1277.491637][ T5914] cdc_wdm 4-1:1.0: skipping garbage [ 1277.500989][ T5914] cdc_wdm 4-1:1.0: skipping garbage [ 1277.508080][ T5914] cdc_wdm 4-1:1.0: cdc-wdm0: USB WDM device [ 1277.525242][ T5914] cdc_wdm 4-1:1.0: Unknown control protocol [ 1277.841975][ C0] cdc_wdm 4-1:1.0: nonzero urb status received: -71 [ 1277.848619][ C0] cdc_wdm 4-1:1.0: wdm_int_callback - 0 bytes [ 1277.855273][ C0] cdc_wdm 4-1:1.0: nonzero urb status received: -71 [ 1277.861931][ C0] cdc_wdm 4-1:1.0: wdm_int_callback - 0 bytes [ 1277.868748][ C0] cdc_wdm 4-1:1.0: nonzero urb status received: -71 [ 1277.875758][ C0] cdc_wdm 4-1:1.0: wdm_int_callback - 0 bytes [ 1277.882775][ C0] cdc_wdm 4-1:1.0: nonzero urb status received: -71 [ 1277.889439][ C0] cdc_wdm 4-1:1.0: wdm_int_callback - 0 bytes [ 1277.895837][ C0] cdc_wdm 4-1:1.0: nonzero urb status received: -71 [ 1277.902450][ C0] cdc_wdm 4-1:1.0: wdm_int_callback - 0 bytes [ 1277.908841][ C0] cdc_wdm 4-1:1.0: nonzero urb status received: -71 [ 1277.915500][ C0] cdc_wdm 4-1:1.0: wdm_int_callback - 0 bytes [ 1277.921872][ C0] cdc_wdm 4-1:1.0: nonzero urb status received: -71 [ 1277.928513][ C0] cdc_wdm 4-1:1.0: wdm_int_callback - 0 bytes [ 1277.934834][ C0] cdc_wdm 4-1:1.0: nonzero urb status received: -71 [ 1277.941472][ C0] cdc_wdm 4-1:1.0: wdm_int_callback - 0 bytes [ 1277.948291][ C0] cdc_wdm 4-1:1.0: nonzero urb status received: -71 [ 1277.954938][ C0] cdc_wdm 4-1:1.0: wdm_int_callback - 0 bytes [ 1277.961288][ C0] cdc_wdm 4-1:1.0: nonzero urb status received: -71 [ 1277.967916][ C0] cdc_wdm 4-1:1.0: wdm_int_callback - 0 bytes [ 1277.975357][T22187] usb 4-1: USB disconnect, device number 27 [ 1277.982009][ C0] cdc_wdm 4-1:1.0: wdm_int_callback - usb_submit_urb failed with result -19 [ 1280.078696][ T4468] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1280.618631][ T30] kauditd_printk_skb: 9 callbacks suppressed [ 1280.619888][ T30] audit: type=1326 audit(1766839816.989:629): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4474 comm="syz.9.12533" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f65539 code=0x7ffc0000 [ 1280.653489][ T30] audit: type=1326 audit(1766839816.989:630): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4474 comm="syz.9.12533" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f65539 code=0x7ffc0000 [ 1280.676215][ T30] audit: type=1326 audit(1766839817.029:631): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4474 comm="syz.9.12533" exe="/root/syz-executor" sig=0 arch=40000003 syscall=359 compat=1 ip=0xf7f65539 code=0x7ffc0000 [ 1280.698960][ T30] audit: type=1326 audit(1766839817.029:632): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4474 comm="syz.9.12533" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f65539 code=0x7ffc0000 [ 1280.722313][ T30] audit: type=1326 audit(1766839817.029:633): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4474 comm="syz.9.12533" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f65539 code=0x7ffc0000 [ 1280.766514][ T30] audit: type=1326 audit(1766839817.029:634): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4474 comm="syz.9.12533" exe="/root/syz-executor" sig=0 arch=40000003 syscall=361 compat=1 ip=0xf7f65539 code=0x7ffc0000 [ 1280.807526][ T30] audit: type=1326 audit(1766839817.029:635): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4474 comm="syz.9.12533" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f65539 code=0x7ffc0000 [ 1280.830651][ T30] audit: type=1326 audit(1766839817.049:636): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4474 comm="syz.9.12533" exe="/root/syz-executor" sig=0 arch=40000003 syscall=362 compat=1 ip=0xf7f65539 code=0x7ffc0000 [ 1280.862112][ T30] audit: type=1326 audit(1766839817.099:637): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4474 comm="syz.9.12533" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f65539 code=0x7ffc0000 [ 1280.917734][ T30] audit: type=1326 audit(1766839817.099:638): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4474 comm="syz.9.12533" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f65539 code=0x7ffc0000 [ 1281.069986][ T4483] netlink: 24 bytes leftover after parsing attributes in process `syz.8.12536'. [ 1283.019597][ T418] tipc: Subscription rejected, illegal request [ 1283.482832][ T4541] loop6: detected capacity change from 0 to 524287999 [ 1283.557749][ T4544] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=1812281087 (231971979136 ns) > initial count (200000 ns). Using initial count to start timer. [ 1283.608811][T15224] buffer_io_error: 3827 callbacks suppressed [ 1283.608831][T15224] Buffer I/O error on dev loop6, logical block 65535998, async page read [ 1284.071153][ T4553] gre2: entered promiscuous mode [ 1285.109992][T29089] netdevsim netdevsim7 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1285.147533][T29089] netdevsim netdevsim7 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1285.228894][ T4591] all: renamed from lo (while UP) [ 1285.457198][T29089] netdevsim netdevsim7 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1285.485712][T29089] netdevsim netdevsim7 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1285.823197][T29089] netdevsim netdevsim7 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1285.892166][T29089] netdevsim netdevsim7 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1286.149221][T29089] netdevsim netdevsim7 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1286.175943][T29089] netdevsim netdevsim7 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1286.747901][T29089] batadv1: left allmulticast mode [ 1286.753004][T29089] batadv1: left promiscuous mode [ 1286.767457][T29089] bridge0: port 3(batadv1) entered disabled state [ 1286.826155][T29089] bridge_slave_1: left allmulticast mode [ 1286.832161][T29089] bridge_slave_1: left promiscuous mode [ 1286.849164][T29089] bridge0: port 2(bridge_slave_1) entered disabled state [ 1286.872135][T29089] bridge_slave_0: left allmulticast mode [ 1286.888934][T29089] bridge_slave_0: left promiscuous mode [ 1286.915616][T29089] bridge0: port 1(bridge_slave_0) entered disabled state [ 1287.748606][T29089] bond1 (unregistering): (slave geneve2): Releasing active interface [ 1288.273953][T29089] team0: Port device bond0 removed [ 1288.299286][T29089] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1288.311401][ T30] kauditd_printk_skb: 22 callbacks suppressed [ 1288.311420][ T30] audit: type=1326 audit(1766839824.689:661): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4653 comm="syz.8.12603" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f91539 code=0x7fc00000 [ 1288.341939][T29089] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1288.351055][ T30] audit: type=1326 audit(1766839824.689:662): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4653 comm="syz.8.12603" exe="/root/syz-executor" sig=0 arch=40000003 syscall=20 compat=1 ip=0xf7f91539 code=0x7fc00000 [ 1288.379101][ T30] audit: type=1326 audit(1766839824.699:663): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4653 comm="syz.8.12603" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f91539 code=0x7fc00000 [ 1288.402038][T29089] bond0 (unregistering): (slave wlan1): Releasing backup interface [ 1288.426171][T29089] bond0 (unregistering): Released all slaves [ 1288.744302][T29089] bond1 (unregistering): Released all slaves [ 1288.900022][T29089] tipc: Left network mode [ 1289.596829][T29089] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1289.604408][T29089] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1289.636477][T29089] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1289.653862][T29089] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1289.712162][T29089] veth1_macvtap: left promiscuous mode [ 1289.725571][T29089] veth1_vlan: left promiscuous mode [ 1289.731459][T29089] veth0_vlan: left promiscuous mode [ 1290.646645][T29089] team0 (unregistering): Port device team_slave_1 removed [ 1290.734438][T29089] team0 (unregistering): Port device team_slave_0 removed [ 1292.099590][T28293] Bluetooth: hci3: command 0x0406 tx timeout [ 1292.356335][ T4734] netlink: 28 bytes leftover after parsing attributes in process `syz.0.12622'. [ 1292.368367][ T4734] netlink: 28 bytes leftover after parsing attributes in process `syz.0.12622'. [ 1292.565072][ T3941] usb 10-1: new full-speed USB device number 29 using dummy_hcd [ 1292.760537][ T3941] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 1024, setting to 64 [ 1292.797512][ T3941] usb 10-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 7 [ 1292.825019][ T3941] usb 10-1: New USB device found, idVendor=06cb, idProduct=81a7, bcdDevice= 0.00 [ 1292.849223][ T3941] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1292.894389][ T3941] usb 10-1: config 0 descriptor?? [ 1292.909794][ T4730] raw-gadget.0 gadget.9: fail, usb_ep_enable returned -22 [ 1293.152729][ T4730] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1293.172408][ T4730] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1293.206816][ T3941] usbhid 10-1:0.0: can't add hid device: -71 [ 1293.231560][ T3941] usbhid 10-1:0.0: probe with driver usbhid failed with error -71 [ 1293.265958][ T3941] usb 10-1: USB disconnect, device number 29 [ 1293.344732][ T4771] netlink: 12 bytes leftover after parsing attributes in process `syz.6.12635'. [ 1293.470475][ T4771] 8021q: adding VLAN 0 to HW filter on device bond4 [ 1293.486778][ T4774] ÿ: renamed from bond_slave_0 (while UP) [ 1293.564936][ T4776] bond4: (slave macvlan1): Enslaving as an active interface with an up link [ 1293.744937][ T3941] usb 10-1: new high-speed USB device number 30 using dummy_hcd [ 1293.886211][ T4791] netlink: 24 bytes leftover after parsing attributes in process `syz.6.12641'. [ 1293.938742][ T3941] usb 10-1: Using ep0 maxpacket: 32 [ 1293.976804][ T3941] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x2 has an invalid bInterval 129, changing to 11 [ 1294.016424][ T3941] usb 10-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 7 [ 1294.052146][ T3941] usb 10-1: New USB device found, idVendor=06cb, idProduct=81a7, bcdDevice= 0.00 [ 1294.080631][ T3941] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1294.116271][ T3941] usb 10-1: config 0 descriptor?? [ 1294.141705][ T3941] hub 10-1:0.0: bad descriptor, ignoring hub [ 1294.185496][ T3941] hub 10-1:0.0: probe with driver hub failed with error -5 [ 1294.434908][T30242] usb 9-1: new high-speed USB device number 48 using dummy_hcd [ 1294.578237][ T3941] hid-rmi 0003:06CB:81A7.00D1: hidraw0: USB HID v0.00 Device [HID 06cb:81a7] on usb-dummy_hcd.9-1/input0 [ 1294.624269][T30242] usb 9-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1294.667016][T30242] usb 9-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 1294.715090][T30242] usb 9-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 1294.746273][T30242] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 1294.754497][T30242] usb 9-1: SerialNumber: syz [ 1295.007785][ T3941] usb 10-1: USB disconnect, device number 30 [ 1295.072696][T30242] usb 9-1: 0:2 : does not exist [ 1295.150777][T30242] usb 9-1: USB disconnect, device number 48 [ 1295.239198][T15224] udevd[15224]: error opening ATTR{/sys/devices/platform/dummy_hcd.8/usb9/9-1/9-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1296.570354][ T4870] input: syz0 as /devices/virtual/input/input201 [ 1297.413696][ T4900] netlink: 12 bytes leftover after parsing attributes in process `syz.9.12678'. [ 1297.489931][ T4902] netlink: 212348 bytes leftover after parsing attributes in process `syz.8.12679'. [ 1297.515508][ T4903] netlink: 12 bytes leftover after parsing attributes in process `syz.9.12678'. [ 1299.733378][ T4968] input: syz0 as /devices/virtual/input/input202 [ 1300.815053][T30242] usb 10-1: new high-speed USB device number 31 using dummy_hcd [ 1300.975223][T30242] usb 10-1: Using ep0 maxpacket: 32 [ 1300.989759][T30242] usb 10-1: New USB device found, idVendor=06a2, idProduct=0003, bcdDevice=b4.8c [ 1300.999384][T30242] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1301.011702][T30242] usb 10-1: Product: syz [ 1301.016254][T30242] usb 10-1: Manufacturer: syz [ 1301.021146][T30242] usb 10-1: SerialNumber: syz [ 1301.033025][T30242] usb 10-1: config 0 descriptor?? [ 1301.042842][T30242] gspca_main: gspca_topro-2.14.0 probing 06a2:0003 [ 1301.787882][ T5032] kvm: Disabled LAPIC found during irq injection [ 1302.468024][T30242] gspca_topro: reg_r err -71 [ 1302.480846][T30242] gspca_topro: Sensor soi763a [ 1302.508788][T30242] usb 10-1: USB disconnect, device number 31 [ 1304.344971][T22183] usb 9-1: new high-speed USB device number 49 using dummy_hcd [ 1304.500347][ T5097] netlink: 24 bytes leftover after parsing attributes in process `syz.6.12757'. [ 1304.525395][T22183] usb 9-1: Using ep0 maxpacket: 16 [ 1304.540703][T22183] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1304.565973][T22183] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1304.584165][T22183] usb 9-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 17 [ 1304.601351][T22183] usb 9-1: New USB device found, idVendor=05ac, idProduct=8241, bcdDevice= 0.00 [ 1304.613973][T22183] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1304.667055][T22183] usb 9-1: config 0 descriptor?? [ 1305.139145][T22183] input: HID 05ac:8241 as /devices/platform/dummy_hcd.8/usb9/9-1/9-1:0.0/0003:05AC:8241.00D2/input/input203 [ 1305.250657][T22183] appleir 0003:05AC:8241.00D2: input,hiddev0,hidraw0: USB HID v0.00 Device [HID 05ac:8241] on usb-dummy_hcd.8-1/input0 [ 1305.378417][T22183] usb 9-1: USB disconnect, device number 49 [ 1305.389777][ T1302] ieee802154 phy0 wpan0: encryption failed: -22 [ 1305.406956][ T1302] ieee802154 phy1 wpan1: encryption failed: -22 [ 1305.570343][ T5115] fido_id[5115]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.8/usb9/report_descriptor': No such file or directory [ 1306.598802][ T5937] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1306.619174][ T5937] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1306.904737][ T5165] netlink: 104 bytes leftover after parsing attributes in process `syz.0.12780'. [ 1307.195317][T22183] usb 10-1: new high-speed USB device number 32 using dummy_hcd [ 1307.378638][T22183] usb 10-1: Using ep0 maxpacket: 8 [ 1307.399537][T22183] usb 10-1: config 0 has no interfaces? [ 1307.419412][T22183] usb 10-1: New USB device found, idVendor=093b, idProduct=a104, bcdDevice= 0.01 [ 1307.440299][T22183] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1307.468580][T22183] usb 10-1: Product: syz [ 1307.479640][T22183] usb 10-1: Manufacturer: syz [ 1307.491415][T22183] usb 10-1: SerialNumber: syz [ 1307.514540][T22183] usb 10-1: config 0 descriptor?? [ 1307.918729][T22183] usb 10-1: USB disconnect, device number 32 [ 1309.431317][ T5261] netlink: 4 bytes leftover after parsing attributes in process `syz.6.12805'. [ 1311.817449][ T30] audit: type=1326 audit(1766839848.189:664): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5287 comm="syz.3.12812" exe="/root/syz-executor" sig=31 arch=40000003 syscall=240 compat=1 ip=0xf702d539 code=0x0 [ 1312.069591][ T5314] netlink: 104 bytes leftover after parsing attributes in process `syz.8.12816'. [ 1312.817115][ T5329] kvm: emulating exchange as write [ 1313.369304][ T5352] netlink: 72 bytes leftover after parsing attributes in process `syz.6.12831'. [ 1313.435018][ T30] audit: type=1326 audit(1766839849.799:665): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5346 comm="syz.9.12830" exe="/root/syz-executor" sig=9 arch=40000003 syscall=252 compat=1 ip=0xf7f65539 code=0x0 [ 1314.624635][ T5402] netlink: 8 bytes leftover after parsing attributes in process `syz.3.12852'. [ 1315.124700][ T5431] netlink: 'syz.3.12863': attribute type 1 has an invalid length. [ 1315.170197][ T5431] bond5: (slave geneve2): making interface the new active one [ 1315.179938][ T5431] bond5: (slave geneve2): Enslaving as an active interface with an up link [ 1315.188885][ T418] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 20000 - 0 [ 1315.211907][ T418] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 20000 - 0 [ 1315.230145][ T418] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 20000 - 0 [ 1315.259571][ T418] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 20000 - 0 [ 1315.535221][T30242] usb 9-1: new high-speed USB device number 50 using dummy_hcd [ 1315.704129][ T5442] netlink: 64 bytes leftover after parsing attributes in process `syz.3.12866'. [ 1315.724918][T30242] usb 9-1: Using ep0 maxpacket: 32 [ 1315.745798][T30242] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1315.770579][T30242] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1315.797687][T30242] usb 9-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 1315.814840][T30242] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1315.835337][T30242] usb 9-1: config 0 descriptor?? [ 1315.857201][T30242] hub 9-1:0.0: USB hub found [ 1316.077587][T30242] hub 9-1:0.0: 1 port detected [ 1316.313193][ T5454] netlink: 4 bytes leftover after parsing attributes in process `syz.3.12871'. [ 1316.327067][ T5454] netlink: 4 bytes leftover after parsing attributes in process `syz.3.12871'. [ 1316.338511][ T5454] netlink: 4 bytes leftover after parsing attributes in process `syz.3.12871'. [ 1316.835098][T22183] usb 4-1: new high-speed USB device number 28 using dummy_hcd [ 1316.987260][T22183] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1316.998490][T22183] usb 4-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 1317.007679][T22183] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1317.018911][T22183] usb 4-1: config 0 descriptor?? [ 1317.230745][T22183] usbhid 4-1:0.0: can't add hid device: -71 [ 1317.244365][T22183] usbhid 4-1:0.0: probe with driver usbhid failed with error -71 [ 1317.268187][T22183] usb 4-1: USB disconnect, device number 28 [ 1317.381022][T30242] hub 9-1:0.0: hub_hub_status failed (err = -32) [ 1317.387711][T30242] hub 9-1:0.0: config failed, can't get hub status (err -32) [ 1317.412542][T30242] usbhid 9-1:0.0: can't add hid device: -32 [ 1317.418931][T30242] usbhid 9-1:0.0: probe with driver usbhid failed with error -32 [ 1317.446445][T30242] usb 9-1: USB disconnect, device number 50 [ 1317.714995][T22183] usb 4-1: new high-speed USB device number 29 using dummy_hcd [ 1317.875110][T22183] usb 4-1: Using ep0 maxpacket: 32 [ 1317.887234][T22183] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1317.908298][T22183] usb 4-1: New USB device found, idVendor=0f11, idProduct=1021, bcdDevice= 0.40 [ 1317.919928][T22183] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1317.933509][T22183] usb 4-1: config 0 descriptor?? [ 1317.944365][T22183] ldusb 4-1:0.0: Interrupt out endpoint not found (using control endpoint instead) [ 1317.959903][T22183] ldusb 4-1:0.0: LD USB Device #0 now attached to major 180 minor 0 [ 1318.402461][ T30] audit: type=1326 audit(1766839854.769:666): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5485 comm="syz.9.12884" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f65539 code=0x7fc00000 [ 1318.433570][T22193] usb 4-1: USB disconnect, device number 29 [ 1318.502007][T22193] ldusb 4-1:0.0: LD USB Device #0 now disconnected [ 1318.510709][ T30] audit: type=1326 audit(1766839854.769:667): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5485 comm="syz.9.12884" exe="/root/syz-executor" sig=0 arch=40000003 syscall=20 compat=1 ip=0xf7f65539 code=0x7fc00000 [ 1318.603858][ T30] audit: type=1326 audit(1766839854.769:668): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5485 comm="syz.9.12884" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f65539 code=0x7fc00000 [ 1318.696434][ T30] audit: type=1326 audit(1766839854.769:669): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5485 comm="syz.9.12884" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f65539 code=0x7fc00000 [ 1318.741538][ T30] audit: type=1326 audit(1766839854.769:670): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5485 comm="syz.9.12884" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f65539 code=0x7fc00000 [ 1318.763955][ T30] audit: type=1326 audit(1766839854.769:671): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5485 comm="syz.9.12884" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f65539 code=0x7fc00000 [ 1319.075239][T22193] usb 9-1: new high-speed USB device number 51 using dummy_hcd [ 1319.326184][T22193] usb 9-1: Using ep0 maxpacket: 32 [ 1319.342255][T22193] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1319.358584][ T5523] netlink: 76 bytes leftover after parsing attributes in process `syz.6.12898'. [ 1319.364454][T22193] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1319.390116][T22193] usb 9-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 1319.409549][T22193] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1319.452523][T22193] usb 9-1: config 0 descriptor?? [ 1319.476972][T22193] hub 9-1:0.0: USB hub found [ 1319.699975][T22193] hub 9-1:0.0: 1 port detected [ 1320.322705][T22193] hub 9-1:0.0: activate --> -90 [ 1320.489381][ T5560] netlink: 76 bytes leftover after parsing attributes in process `syz.3.12911'. [ 1320.730937][T30246] usb 9-1: USB disconnect, device number 51 [ 1321.211162][ T5572] netlink: 'syz.6.12916': attribute type 13 has an invalid length. [ 1321.537755][ T5581] netlink: 60 bytes leftover after parsing attributes in process `syz.0.12917'. [ 1321.587736][ T5581] netlink: 60 bytes leftover after parsing attributes in process `syz.0.12917'. [ 1322.485357][ T5610] netlink: 'syz.6.12930': attribute type 1 has an invalid length. [ 1322.628486][ T5614] bond5: (slave bridge4): making interface the new active one [ 1322.648721][ T5614] bond5: (slave bridge4): Enslaving as an active interface with an up link [ 1323.264331][ T30] audit: type=1326 audit(1766839859.629:672): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5637 comm="syz.6.12940" exe="/root/syz-executor" sig=9 arch=40000003 syscall=252 compat=1 ip=0xf703d539 code=0x0 [ 1323.518659][ T5651] netlink: 4 bytes leftover after parsing attributes in process `syz.9.12944'. [ 1323.567179][ T5651] bridge_slave_1: left allmulticast mode [ 1323.573553][ T5651] bridge_slave_1: left promiscuous mode [ 1323.580573][ T5651] bridge0: port 2(bridge_slave_1) entered disabled state [ 1323.591326][ T5651] bridge_slave_0: left allmulticast mode [ 1323.597371][ T5651] bridge_slave_0: left promiscuous mode [ 1323.612188][ T5651] bridge0: port 1(bridge_slave_0) entered disabled state [ 1323.928590][ T5658] netlink: 'syz.9.12946': attribute type 1 has an invalid length. [ 1323.999928][ T5658] bond1: (slave bridge0): making interface the new active one [ 1324.008668][ T5658] bond1: (slave bridge0): Enslaving as an active interface with an up link [ 1324.129674][ T5664] only policy match revision 0 supported [ 1324.129699][ T5664] unable to load match [ 1324.288296][ T30] audit: type=1326 audit(1766839860.659:673): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5666 comm="syz.6.12949" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf703d539 code=0x7fc00000 [ 1324.313010][ T30] audit: type=1326 audit(1766839860.689:674): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5666 comm="syz.6.12949" exe="/root/syz-executor" sig=0 arch=40000003 syscall=20 compat=1 ip=0xf703d539 code=0x7fc00000 [ 1324.388561][ T30] audit: type=1326 audit(1766839860.689:675): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5666 comm="syz.6.12949" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf703d539 code=0x7fc00000 [ 1324.435207][T22187] usb 10-1: new high-speed USB device number 33 using dummy_hcd [ 1324.599202][T22187] usb 10-1: New USB device found, idVendor=04fc, idProduct=504a, bcdDevice=43.02 [ 1324.612579][T22187] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1324.634087][T22187] usb 10-1: Product: syz [ 1324.645407][T22187] usb 10-1: Manufacturer: syz [ 1324.653716][T22187] usb 10-1: SerialNumber: syz [ 1324.671540][T22187] usb 10-1: config 0 descriptor?? [ 1324.696934][T22187] gspca_main: sunplus-2.14.0 probing 04fc:504a [ 1324.954904][T30246] usb 9-1: new high-speed USB device number 52 using dummy_hcd [ 1325.106692][T30246] usb 9-1: config 0 has no interfaces? [ 1325.114482][T30246] usb 9-1: New USB device found, idVendor=18b4, idProduct=fffb, bcdDevice=dc.7b [ 1325.137663][T30246] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1325.154504][T30246] usb 9-1: Product: syz [ 1325.168105][T30246] usb 9-1: Manufacturer: syz [ 1325.183497][T30246] usb 9-1: SerialNumber: syz [ 1325.207159][T30246] usb 9-1: config 0 descriptor?? [ 1325.600713][ T5681] veth1_vlan: left promiscuous mode [ 1325.621641][T30242] usb 9-1: USB disconnect, device number 52 [ 1326.141573][T22187] gspca_sunplus: reg_w_riv err -71 [ 1326.160423][T22187] sunplus 10-1:0.0: probe with driver sunplus failed with error -71 [ 1326.191210][T22187] usb 10-1: USB disconnect, device number 33 [ 1327.014996][T22183] usb 10-1: new high-speed USB device number 34 using dummy_hcd [ 1327.179419][T22183] usb 10-1: New USB device found, idVendor=041e, idProduct=4011, bcdDevice=af.98 [ 1327.196719][T22183] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1327.229454][T22183] usb 10-1: config 0 descriptor?? [ 1327.252154][T22183] pwc: Creative Labs Webcam Pro Ex detected. [ 1327.355225][ T30] audit: type=1326 audit(1766839863.719:676): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5708 comm="syz.8.12964" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f91539 code=0x7fc00000 [ 1327.378738][ T30] audit: type=1326 audit(1766839863.749:677): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5708 comm="syz.8.12964" exe="/root/syz-executor" sig=0 arch=40000003 syscall=20 compat=1 ip=0xf7f91539 code=0x7fc00000 [ 1327.403052][ T30] audit: type=1326 audit(1766839863.769:678): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5708 comm="syz.8.12964" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f91539 code=0x7fc00000 [ 1327.883061][T22183] pwc: recv_control_msg error -71 req 02 val 2b00 [ 1327.894661][T22183] pwc: recv_control_msg error -71 req 02 val 2700 [ 1327.910355][T22183] pwc: recv_control_msg error -71 req 04 val 1600 [ 1327.925518][T22183] pwc: recv_control_msg error -71 req 02 val 2c00 [ 1327.941084][T22183] pwc: recv_control_msg error -71 req 04 val 1000 [ 1327.951463][T22183] pwc: recv_control_msg error -71 req 04 val 1300 [ 1327.978274][T22183] pwc: recv_control_msg error -71 req 04 val 1400 [ 1327.994036][T22183] pwc: recv_control_msg error -71 req 02 val 2000 [ 1328.009433][T22183] pwc: recv_control_msg error -71 req 02 val 2100 [ 1328.025537][T22183] pwc: recv_control_msg error -71 req 06 val 0600 [ 1328.047369][T22183] pwc: recv_control_msg error -71 req 04 val 1500 [ 1328.058228][T22183] pwc: recv_control_msg error -71 req 02 val 2500 [ 1328.079420][T22183] pwc: recv_control_msg error -71 req 02 val 2400 [ 1328.091223][T22183] pwc: recv_control_msg error -71 req 02 val 2600 [ 1328.109697][T22183] pwc: recv_control_msg error -71 req 02 val 2900 [ 1328.126468][T22183] pwc: recv_control_msg error -71 req 02 val 2800 [ 1328.136340][T22183] pwc: recv_control_msg error -71 req 04 val 1100 [ 1328.153327][T22183] pwc: recv_control_msg error -71 req 04 val 1200 [ 1328.182415][T22183] pwc: Registered as video103. [ 1328.201579][T22183] input: PWC snapshot button as /devices/platform/dummy_hcd.9/usb10/10-1/input/input204 [ 1328.238930][T22183] usb 10-1: USB disconnect, device number 34 [ 1328.746918][ T5769] netlink: 8 bytes leftover after parsing attributes in process `syz.0.12989'. [ 1329.177088][ T5771] netlink: 'syz.8.12992': attribute type 2 has an invalid length. [ 1329.862945][ T5794] netlink: 4 bytes leftover after parsing attributes in process `syz.9.12999'. [ 1330.265480][ T5805] netlink: 'syz.8.13004': attribute type 13 has an invalid length. [ 1330.967661][T22193] usb 10-1: new high-speed USB device number 35 using dummy_hcd [ 1331.135189][T22193] usb 10-1: Using ep0 maxpacket: 32 [ 1331.143664][T22193] usb 10-1: config 0 has an invalid interface number: 12 but max is 0 [ 1331.152884][T22193] usb 10-1: config 0 has no interface number 0 [ 1331.159669][T22193] usb 10-1: config 0 interface 12 has no altsetting 0 [ 1331.170030][T22193] usb 10-1: New USB device found, idVendor=2c42, idProduct=1202, bcdDevice=85.40 [ 1331.180166][T22193] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1331.189806][T22193] usb 10-1: Product: syz [ 1331.194361][T22193] usb 10-1: Manufacturer: syz [ 1331.199515][T22193] usb 10-1: SerialNumber: syz [ 1331.211896][T22193] usb 10-1: config 0 descriptor?? [ 1332.266967][ T5857] netlink: 'syz.0.13023': attribute type 13 has an invalid length. [ 1332.652453][T22193] f81534 10-1:0.12: f81534_set_register: reg: 1002 data: 2f failed: -71 [ 1332.667336][T22193] f81534 10-1:0.12: f81534_find_config_idx: read failed: -71 [ 1332.675216][T22193] f81534 10-1:0.12: f81534_calc_num_ports: find idx failed: -71 [ 1332.682968][T22193] f81534 10-1:0.12: probe with driver f81534 failed with error -71 [ 1332.707290][T22193] usb 10-1: USB disconnect, device number 35 [ 1333.975592][ T3941] usb 10-1: new high-speed USB device number 36 using dummy_hcd [ 1334.177748][ T3941] usb 10-1: Using ep0 maxpacket: 32 [ 1334.185358][ T5893] kvm: user requested TSC rate below hardware speed [ 1334.194253][ T3941] usb 10-1: New USB device found, idVendor=041e, idProduct=400b, bcdDevice=3e.e7 [ 1334.204734][ T3941] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1334.213914][T22193] usb 4-1: new high-speed USB device number 30 using dummy_hcd [ 1334.243572][ T3941] usb 10-1: config 0 descriptor?? [ 1334.260322][ T3941] gspca_main: sunplus-2.14.0 probing 041e:400b [ 1334.376382][T22193] usb 4-1: Using ep0 maxpacket: 32 [ 1334.386023][T22193] usb 4-1: config 0 has an invalid interface number: 132 but max is 0 [ 1334.404911][T22193] usb 4-1: config 0 has no interface number 0 [ 1334.424917][T22193] usb 4-1: config 0 interface 132 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 1334.463843][T22193] usb 4-1: New USB device found, idVendor=0413, idProduct=6023, bcdDevice=ec.e5 [ 1334.500899][T22193] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1334.519648][T22193] usb 4-1: Product: syz [ 1334.523908][T22193] usb 4-1: Manufacturer: syz [ 1334.549933][T22193] usb 4-1: SerialNumber: syz [ 1334.570828][T22193] usb 4-1: config 0 descriptor?? [ 1334.598977][T22193] em28xx 4-1:0.132: New device syz syz @ 480 Mbps (0413:6023, interface 132, class 132) [ 1334.634678][T22193] em28xx 4-1:0.132: Video interface 132 found: [ 1335.009708][T22193] em28xx 4-1:0.132: chip ID is em28178 [ 1335.034991][T30246] usb 9-1: new high-speed USB device number 53 using dummy_hcd [ 1335.194932][T30246] usb 9-1: Using ep0 maxpacket: 16 [ 1335.206700][T30246] usb 9-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xF3, changing to 0x83 [ 1335.231226][T30246] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 1335.270789][T30246] usb 9-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 1335.284874][T30246] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1335.293175][T30246] usb 9-1: Product: syz [ 1335.303331][T30246] usb 9-1: Manufacturer: syz [ 1335.308765][T30246] usb 9-1: SerialNumber: syz [ 1335.328246][T30246] usb 9-1: config 0 descriptor?? [ 1335.347069][T30246] em28xx 9-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0) [ 1335.358545][T30246] em28xx 9-1:0.0: Audio interface 0 found (Vendor Class) [ 1335.639169][ T5903] mac80211_hwsim hwsim18 syzkaller0: Caught tx_queue_len zero misconfig [ 1335.700370][ T3941] gspca_sunplus: reg_w_riv err -71 [ 1335.718355][ T3941] sunplus 10-1:0.0: probe with driver sunplus failed with error -71 [ 1335.808562][T22193] em28xx 4-1:0.132: failed to read eeprom (err=-110) [ 1335.815621][T22193] em28xx 4-1:0.132: em28xx_i2c_register: em28xx_i2_eeprom failed! retval [-110] [ 1335.840730][ T3941] usb 10-1: USB disconnect, device number 36 [ 1336.028890][T30246] em28xx 9-1:0.0: unknown em28xx chip ID (0) [ 1336.037607][T30246] em28xx 9-1:0.0: Config register raw data: 0xfffffffb [ 1336.065504][T22193] em28xx 4-1:0.132: Identified as Leadtek Winfast USB II (card=7) [ 1336.083849][T22193] em28xx 4-1:0.132: analog set to bulk mode. [ 1336.090602][ T3941] em28xx 4-1:0.132: Registering V4L2 extension [ 1336.112774][T22193] usb 4-1: USB disconnect, device number 30 [ 1336.147198][T22193] em28xx 4-1:0.132: Disconnecting em28xx [ 1336.320855][ T3941] usb 4-1: Decoder not found [ 1336.327807][ T3941] em28xx 4-1:0.132: failed to create media graph [ 1336.337658][ T3941] em28xx 4-1:0.132: V4L2 device video103 deregistered [ 1336.354121][ T3941] em28xx 4-1:0.132: Remote control support is not available for this card. [ 1336.363104][T22193] em28xx 4-1:0.132: Closing input extension [ 1336.400612][T22193] em28xx 4-1:0.132: Freeing device [ 1336.451783][T30246] em28xx 9-1:0.0: AC97 chip type couldn't be determined [ 1336.466940][T30246] em28xx 9-1:0.0: No AC97 audio processor [ 1336.498177][T30246] usb 9-1: USB disconnect, device number 53 [ 1336.529051][T30246] em28xx 9-1:0.0: Disconnecting em28xx [ 1336.544693][T30246] em28xx 9-1:0.0: Freeing device [ 1337.922016][ T5987] netlink: 76 bytes leftover after parsing attributes in process `syz.8.13072'. [ 1338.425071][T30246] usb 9-1: new high-speed USB device number 54 using dummy_hcd [ 1338.493402][ T5996] all: renamed from bridge_slave_0 [ 1338.572066][ T6000] netlink: 4 bytes leftover after parsing attributes in process `syz.3.13077'. [ 1338.590415][T30246] usb 9-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 1338.602491][T30246] usb 9-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 1338.613341][T30246] usb 9-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 1338.623583][T30246] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1338.642377][ T5994] raw-gadget.2 gadget.8: fail, usb_ep_enable returned -22 [ 1338.663756][T30246] usb 9-1: Quirk or no altset; falling back to MIDI 1.0 [ 1338.890164][T22183] usb 9-1: USB disconnect, device number 54 [ 1341.469380][ T6072] netlink: 76 bytes leftover after parsing attributes in process `syz.3.13106'. [ 1342.348844][ T6109] netlink: 8 bytes leftover after parsing attributes in process `syz.0.13120'. [ 1342.361092][ T6109] netlink: 16 bytes leftover after parsing attributes in process `syz.0.13120'. [ 1342.936440][ T6126] netlink: 4 bytes leftover after parsing attributes in process `syz.0.13126'. [ 1343.252410][ T6138] netlink: 4 bytes leftover after parsing attributes in process `syz.8.13131'. [ 1343.269841][ T6138] netlink: 4 bytes leftover after parsing attributes in process `syz.8.13131'. [ 1343.284671][ T6133] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=1812281087 (231971979136 ns) > initial count (128 ns). Using initial count to start timer. [ 1343.303808][ T6138] netlink: 452 bytes leftover after parsing attributes in process `syz.8.13131'. [ 1343.331160][ T6138] netlink: 452 bytes leftover after parsing attributes in process `syz.8.13131'. [ 1343.836809][ T6162] netlink: 4 bytes leftover after parsing attributes in process `syz.3.13140'. [ 1344.128277][ T6174] netlink: 4 bytes leftover after parsing attributes in process `syz.9.13145'. [ 1344.140031][ T6174] netlink: 4 bytes leftover after parsing attributes in process `syz.9.13145'. [ 1344.151909][ T6174] netlink: 4 bytes leftover after parsing attributes in process `syz.9.13145'. [ 1344.204930][T22193] usb 4-1: new high-speed USB device number 31 using dummy_hcd [ 1344.370273][T22193] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1344.406987][T22193] usb 4-1: config 0 has no interfaces? [ 1344.440916][T22193] usb 4-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 1344.569928][T22193] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 1344.612831][T22193] usb 4-1: SerialNumber: syz [ 1344.639655][T22193] usb 4-1: config 0 descriptor?? [ 1344.910792][T22193] usb 4-1: USB disconnect, device number 31 [ 1346.444942][T22183] usb 10-1: new high-speed USB device number 37 using dummy_hcd [ 1346.589478][ T6298] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 1346.616826][T22183] usb 10-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1346.641003][T22183] usb 10-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 1346.654592][T22183] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1346.664724][T22183] usb 10-1: Product: syz [ 1346.669916][T22183] usb 10-1: Manufacturer: syz [ 1346.674942][T22183] usb 10-1: SerialNumber: syz [ 1348.020342][T22183] cdc_ncm 10-1:1.0: MAC-Address: 42:42:42:42:42:42 [ 1348.034854][T22183] cdc_ncm 10-1:1.0: dwNtbInMaxSize=16 is too small. Using 2048 [ 1348.042479][T22183] cdc_ncm 10-1:1.0: setting rx_max = 2048 [ 1348.422184][T22183] cdc_ncm 10-1:1.0: setting tx_max = 88 [ 1348.440766][T22183] cdc_ncm 10-1:1.0 usb0: register 'cdc_ncm' at usb-dummy_hcd.9-1, CDC NCM (NO ZLP), 42:42:42:42:42:42 [ 1348.481805][T22183] usb 10-1: USB disconnect, device number 37 [ 1348.526805][T22183] cdc_ncm 10-1:1.0 usb0: unregister 'cdc_ncm' usb-dummy_hcd.9-1, CDC NCM (NO ZLP) [ 1348.701091][ T6349] netlink: 'syz.8.13193': attribute type 13 has an invalid length. [ 1348.854744][ T6354] netlink: 16 bytes leftover after parsing attributes in process `syz.0.13196'. [ 1348.953184][ T6356] netlink: 16 bytes leftover after parsing attributes in process `syz.0.13196'. [ 1349.858398][ T6391] mac80211_hwsim hwsim14 syzkaller0: entered promiscuous mode [ 1350.079790][ T6400] netlink: 4 bytes leftover after parsing attributes in process `syz.8.13214'. [ 1350.359979][ T6414] netlink: 4 bytes leftover after parsing attributes in process `syz.3.13217'. [ 1350.372849][ T6414] netlink: 4 bytes leftover after parsing attributes in process `syz.3.13217'. [ 1350.384049][ T6414] netlink: 4 bytes leftover after parsing attributes in process `syz.3.13217'. [ 1350.400548][ T6414] netlink: 4 bytes leftover after parsing attributes in process `syz.3.13217'. [ 1352.341729][ T6468] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=1812281087 (231971979136 ns) > initial count (128 ns). Using initial count to start timer. [ 1352.715762][T22193] usb 10-1: new high-speed USB device number 38 using dummy_hcd [ 1352.922133][T22193] usb 10-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 1352.959989][T22193] usb 10-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 1352.988766][T22193] usb 10-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 1353.020769][T22193] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1353.049163][ T6470] raw-gadget.2 gadget.9: fail, usb_ep_enable returned -22 [ 1353.049425][ T6490] netlink: 212348 bytes leftover after parsing attributes in process `syz.3.13240'. [ 1353.101750][T22193] usb 10-1: Quirk or no altset; falling back to MIDI 1.0 [ 1353.324169][T30242] usb 10-1: USB disconnect, device number 38 [ 1353.455035][ T6500] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=1812281087 (231971979136 ns) > initial count (128 ns). Using initial count to start timer. [ 1353.764985][T30242] usb 4-1: new high-speed USB device number 32 using dummy_hcd [ 1353.926964][T30242] usb 4-1: config 220 has an invalid interface number: 76 but max is 2 [ 1353.948326][T30242] usb 4-1: config 220 contains an unexpected descriptor of type 0x2, skipping [ 1353.967535][T30242] usb 4-1: config 220 has an invalid descriptor of length 0, skipping remainder of the config [ 1353.992846][T30242] usb 4-1: config 220 has no interface number 2 [ 1354.004214][T30242] usb 4-1: config 220 interface 1 altsetting 5 has 0 endpoint descriptors, different from the interface descriptor's value: 12 [ 1354.045242][T30242] usb 4-1: config 220 interface 0 has no altsetting 0 [ 1354.055681][T30242] usb 4-1: config 220 interface 76 has no altsetting 0 [ 1354.062618][T30242] usb 4-1: config 220 interface 1 has no altsetting 0 [ 1354.088193][T30242] usb 4-1: New USB device found, idVendor=8086, idProduct=0b07, bcdDevice=6c.b9 [ 1354.099802][T30242] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1354.108858][T30242] usb 4-1: Product: syz [ 1354.113133][T30242] usb 4-1: Manufacturer: syz [ 1354.117875][T30242] usb 4-1: SerialNumber: syz [ 1354.360022][T30242] usb 4-1: selecting invalid altsetting 0 [ 1354.369020][T30242] uvcvideo 4-1:220.0: Found UVC 7.01 device syz (8086:0b07) [ 1354.380527][T30242] uvcvideo 4-1:220.0: No valid video chain found. [ 1354.398301][T30242] usb 4-1: selecting invalid altsetting 0 [ 1354.404190][T30242] usbtest 4-1:220.1: probe with driver usbtest failed with error -22 [ 1354.441695][T30242] usb 4-1: USB disconnect, device number 32 [ 1355.314978][T22183] usb 4-1: new high-speed USB device number 33 using dummy_hcd [ 1355.496960][T22183] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1355.532577][T22183] usb 4-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 1355.574953][T22183] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1355.612516][T22183] usb 4-1: config 0 descriptor?? [ 1355.815078][T22193] usb 10-1: new high-speed USB device number 39 using dummy_hcd [ 1355.868957][T22183] usbhid 4-1:0.0: can't add hid device: -71 [ 1355.882336][T22183] usbhid 4-1:0.0: probe with driver usbhid failed with error -71 [ 1355.905286][T22183] usb 4-1: USB disconnect, device number 33 [ 1355.975224][T22193] usb 10-1: Using ep0 maxpacket: 32 [ 1355.983966][T22193] usb 10-1: config 0 has an invalid interface number: 89 but max is 0 [ 1355.992785][T22193] usb 10-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1356.008122][T22193] usb 10-1: config 0 has no interface number 0 [ 1356.014391][T22193] usb 10-1: config 0 interface 89 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 2 [ 1356.032215][T22193] usb 10-1: New USB device found, idVendor=12d1, idProduct=7ef3, bcdDevice=54.68 [ 1356.042993][T22193] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1356.051427][T22193] usb 10-1: Product: syz [ 1356.057367][T22193] usb 10-1: Manufacturer: syz [ 1356.062124][T22193] usb 10-1: SerialNumber: syz [ 1356.073278][T22193] usb 10-1: config 0 descriptor?? [ 1356.081166][T22193] hub 10-1:0.89: bad descriptor, ignoring hub [ 1356.091740][T22193] hub 10-1:0.89: probe with driver hub failed with error -5 [ 1356.103933][T22193] option 10-1:0.89: GSM modem (1-port) converter detected [ 1356.445085][T22183] usb 4-1: new high-speed USB device number 34 using dummy_hcd [ 1356.614950][T22183] usb 4-1: Using ep0 maxpacket: 32 [ 1356.622150][T22183] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1356.629093][T22193] usb 10-1: USB disconnect, device number 39 [ 1356.644750][T22193] option 10-1:0.89: device disconnected [ 1356.663904][T22183] usb 4-1: New USB device found, idVendor=0f11, idProduct=1021, bcdDevice= 0.40 [ 1356.683620][T22183] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1356.712981][T22183] usb 4-1: config 0 descriptor?? [ 1356.729916][T22183] ldusb 4-1:0.0: Interrupt out endpoint not found (using control endpoint instead) [ 1356.755513][T22183] ldusb 4-1:0.0: LD USB Device #0 now attached to major 180 minor 0 [ 1357.066827][ T6565] syzkaller0: entered promiscuous mode [ 1357.244758][T22193] usb 4-1: USB disconnect, device number 34 [ 1357.266287][T22193] ldusb 4-1:0.0: LD USB Device #0 now disconnected [ 1358.337572][ T6589] netlink: 'syz.3.13277': attribute type 13 has an invalid length. [ 1358.536246][T22184] usb 9-1: new high-speed USB device number 55 using dummy_hcd [ 1358.707618][T22184] usb 9-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1358.718283][T22184] usb 9-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 1358.727653][T22184] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1358.739410][T22184] usb 9-1: config 0 descriptor?? [ 1358.750905][T22184] pwc: Askey VC010 type 2 USB webcam detected. [ 1359.166239][T22184] pwc: recv_control_msg error -32 req 02 val 2b00 [ 1359.183117][T22184] pwc: recv_control_msg error -32 req 02 val 2700 [ 1359.203539][T22184] pwc: recv_control_msg error -32 req 02 val 2c00 [ 1359.216045][T22184] pwc: recv_control_msg error -32 req 04 val 1000 [ 1359.425541][T22184] pwc: recv_control_msg error -71 req 04 val 1400 [ 1359.434029][T22184] pwc: recv_control_msg error -71 req 02 val 2000 [ 1359.459790][T22184] pwc: recv_control_msg error -71 req 02 val 2100 [ 1359.475366][T22193] usb 4-1: new full-speed USB device number 35 using dummy_hcd [ 1359.481863][T22184] pwc: recv_control_msg error -71 req 04 val 1500 [ 1359.515533][T22184] pwc: recv_control_msg error -71 req 02 val 2500 [ 1359.540232][T22184] pwc: recv_control_msg error -71 req 02 val 2400 [ 1359.557541][T22184] pwc: recv_control_msg error -71 req 02 val 2600 [ 1359.584997][T22184] pwc: recv_control_msg error -71 req 02 val 2900 [ 1359.608131][T22184] pwc: recv_control_msg error -71 req 02 val 2800 [ 1359.632894][T22184] pwc: recv_control_msg error -71 req 04 val 1100 [ 1359.648321][T22184] pwc: recv_control_msg error -71 req 04 val 1200 [ 1359.667353][T22193] usb 4-1: too many endpoints for config 0 interface 0 altsetting 0: 253, using maximum allowed: 30 [ 1359.678819][T22193] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 1359.692306][T22193] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1359.703824][T22193] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 253 [ 1359.717091][T22184] pwc: Registered as video103. [ 1359.731276][T22184] input: PWC snapshot button as /devices/platform/dummy_hcd.8/usb9/9-1/input/input205 [ 1359.755323][T22193] usb 4-1: New USB device found, idVendor=05ac, idProduct=8243, bcdDevice=8b.40 [ 1359.794950][T22193] usb 4-1: New USB device strings: Mfr=11, Product=0, SerialNumber=0 [ 1359.821516][T22184] usb 9-1: USB disconnect, device number 55 [ 1359.824053][T22193] usb 4-1: Manufacturer: syz [ 1359.847918][T22193] usb 4-1: config 0 descriptor?? [ 1360.061479][ T6615] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 1360.288312][T22193] appleir 0003:05AC:8243.00D3: unknown main item tag 0x0 [ 1360.330949][T22193] appleir 0003:05AC:8243.00D3: hiddev0,hidraw0: USB HID v0.00 Device [syz] on usb-dummy_hcd.3-1/input0 [ 1360.365308][T22195] usb 9-1: new high-speed USB device number 56 using dummy_hcd [ 1360.587257][T22195] usb 9-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1360.600201][T22195] usb 9-1: config 1 interface 1 altsetting 1 bulk endpoint 0x82 has invalid maxpacket 1024 [ 1360.614636][T22195] usb 9-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 1360.644050][T22195] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1360.652861][T22195] usb 9-1: Product: syz [ 1360.657486][T22195] usb 9-1: Manufacturer: syz [ 1360.662504][T22195] usb 9-1: SerialNumber: syz [ 1360.704438][T22195] cdc_mbim 9-1:1.0: skipping garbage [ 1360.923067][ T6618] raw-gadget.1 gadget.8: fail, usb_ep_enable returned -22 [ 1361.543866][ T6618] raw-gadget.1 gadget.8: fail, usb_ep_enable returned -22 [ 1361.557290][T22195] cdc_mbim 9-1:1.0: dwNtbInMaxSize=0 is too small. Using 2048 [ 1361.566474][T22195] cdc_mbim 9-1:1.0: setting rx_max = 2048 [ 1361.760232][T22195] cdc_mbim 9-1:1.0: setting tx_max = 184 [ 1361.769041][T22195] cdc_mbim 9-1:1.0: cdc-wdm1: USB WDM device [ 1361.795777][T22195] wwan wwan0: port wwan0mbim0 attached [ 1361.813705][T22195] cdc_mbim 9-1:1.0 wwan0: register 'cdc_mbim' at usb-dummy_hcd.8-1, CDC MBIM, 5e:5a:ef:9c:04:3b [ 1362.047803][T22183] usb 9-1: USB disconnect, device number 56 [ 1362.057836][T22183] cdc_mbim 9-1:1.0 wwan0: unregister 'cdc_mbim' usb-dummy_hcd.8-1, CDC MBIM [ 1362.177739][T22183] wwan wwan0: port wwan0mbim0 disconnected [ 1362.416562][T30242] usb 4-1: USB disconnect, device number 35 [ 1364.517812][T22183] IPVS: starting estimator thread 0... [ 1364.604957][ T6723] IPVS: using max 27 ests per chain, 64800 per kthread [ 1365.042298][T30578] IPVS: stop unused estimator thread 0... [ 1365.326568][ T6742] input: syz1 as /devices/virtual/input/input206 [ 1365.676030][ T6749] input: syz1 as /devices/virtual/input/input207 [ 1365.920189][ T6770] netlink: 'syz.6.13333': attribute type 13 has an invalid length. [ 1366.575261][T22183] usb 9-1: new high-speed USB device number 57 using dummy_hcd [ 1366.750820][T22183] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1366.785019][T22183] usb 9-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 1366.823457][ T1302] ieee802154 phy0 wpan0: encryption failed: -22 [ 1366.825418][T22183] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1366.830197][ T1302] ieee802154 phy1 wpan1: encryption failed: -22 [ 1366.866547][T22183] usb 9-1: config 0 descriptor?? [ 1366.897354][ T6792] netlink: 27 bytes leftover after parsing attributes in process `syz.9.13344'. [ 1367.120268][T22183] usbhid 9-1:0.0: can't add hid device: -71 [ 1367.146081][T22183] usbhid 9-1:0.0: probe with driver usbhid failed with error -71 [ 1367.174561][T22183] usb 9-1: USB disconnect, device number 57 [ 1367.552117][ T6814] netlink: 8 bytes leftover after parsing attributes in process `syz.6.13354'. [ 1367.561778][ T6814] netlink: 8 bytes leftover after parsing attributes in process `syz.6.13354'. [ 1367.645019][T22183] usb 9-1: new high-speed USB device number 58 using dummy_hcd [ 1367.769337][ T6820] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 1367.825113][T22183] usb 9-1: Using ep0 maxpacket: 32 [ 1367.833468][T22183] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1367.865845][T22183] usb 9-1: New USB device found, idVendor=0f11, idProduct=1021, bcdDevice= 0.40 [ 1367.889333][ T6820] ip6gre0: entered promiscuous mode [ 1367.901212][T22183] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1367.930170][ T6820] team0: Port device ip6gre0 added [ 1367.955694][T22183] usb 9-1: config 0 descriptor?? [ 1367.977600][T22183] ldusb 9-1:0.0: Interrupt out endpoint not found (using control endpoint instead) [ 1368.024216][T22183] ldusb 9-1:0.0: LD USB Device #0 now attached to major 180 minor 0 [ 1368.388186][T22175] usb 9-1: USB disconnect, device number 58 [ 1368.428373][T22175] ldusb 9-1:0.0: LD USB Device #0 now disconnected [ 1368.661798][ T6841] netlink: 44 bytes leftover after parsing attributes in process `syz.6.13366'. [ 1368.705126][ T6841] netlink: 9 bytes leftover after parsing attributes in process `syz.6.13366'. [ 1368.919368][ T6847] netlink: 76 bytes leftover after parsing attributes in process `syz.9.13368'. [ 1370.049516][ T6876] netlink: 4 bytes leftover after parsing attributes in process `syz.3.13381'. [ 1370.500728][ T6893] netem: change failed [ 1371.434951][ T3942] usb 9-1: new high-speed USB device number 59 using dummy_hcd [ 1371.608239][ T3942] usb 9-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1371.643987][ T3942] usb 9-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1371.672261][ T3942] usb 9-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 1371.692651][ T3942] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1371.717777][ T3942] usb 9-1: Product: syz [ 1371.722125][ T3942] usb 9-1: Manufacturer: syz [ 1371.727648][ T3942] usb 9-1: SerialNumber: syz [ 1371.861312][ T6921] netlink: 'syz.9.13399': attribute type 5 has an invalid length. [ 1372.011309][ T6926] netlink: 24 bytes leftover after parsing attributes in process `syz.9.13401'. [ 1372.341923][ T6932] netlink: 8 bytes leftover after parsing attributes in process `syz.0.13403'. [ 1372.351483][ T6932] netlink: 20 bytes leftover after parsing attributes in process `syz.0.13403'. [ 1372.360760][ T6932] netlink: 20 bytes leftover after parsing attributes in process `syz.0.13403'. [ 1372.370003][ T6932] netlink: 12 bytes leftover after parsing attributes in process `syz.0.13403'. [ 1372.581384][ T3942] cdc_ncm 9-1:1.0: SET_CRC_MODE failed [ 1372.590127][ T3942] cdc_ncm 9-1:1.0: SET_NTB_FORMAT failed [ 1372.615737][ T3942] cdc_ncm 9-1:1.0: bind() failure [ 1372.628803][ T3942] cdc_ncm 9-1:1.1: CDC Union missing and no IAD found [ 1372.636706][ T3942] cdc_ncm 9-1:1.1: bind() failure [ 1372.653871][ T3942] usb 9-1: USB disconnect, device number 59 [ 1372.815532][T22175] usb 4-1: new high-speed USB device number 36 using dummy_hcd [ 1372.974985][T22175] usb 4-1: Using ep0 maxpacket: 8 [ 1372.985515][T22175] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1373.007267][T22175] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 1373.047614][T22175] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 100, changing to 10 [ 1373.066363][T22175] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 24936, setting to 1024 [ 1373.087936][T22175] usb 4-1: New USB device found, idVendor=0225, idProduct=0000, bcdDevice= 0.00 [ 1373.098626][T22175] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1373.136588][T22175] hub 4-1:1.0: bad descriptor, ignoring hub [ 1373.136622][T22175] hub 4-1:1.0: probe with driver hub failed with error -5 [ 1373.153580][T22175] cdc_wdm 4-1:1.0: skipping garbage [ 1373.153604][T22175] cdc_wdm 4-1:1.0: skipping garbage [ 1373.165528][T22175] cdc_wdm 4-1:1.0: cdc-wdm0: USB WDM device [ 1373.165554][T22175] cdc_wdm 4-1:1.0: Unknown control protocol [ 1373.565078][T22183] usb 10-1: new high-speed USB device number 40 using dummy_hcd [ 1373.724977][T22183] usb 10-1: Using ep0 maxpacket: 8 [ 1373.733636][T22183] usb 10-1: config index 0 descriptor too short (expected 301, got 45) [ 1373.743165][T22183] usb 10-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 1373.753787][T22183] usb 10-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 1373.783396][T22183] usb 10-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 1373.794165][T22183] usb 10-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 1373.808211][T22183] usb 10-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 1373.820502][T22183] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1374.055571][ T6938] usb 4-1: reset high-speed USB device number 36 using dummy_hcd [ 1374.065740][T22183] usb 10-1: GET_CAPABILITIES returned 0 [ 1374.071382][T22183] usbtmc 10-1:16.0: can't read capabilities [ 1374.270195][T22195] usb 10-1: USB disconnect, device number 40 [ 1375.571610][ C1] wdm_int_callback: 2 callbacks suppressed [ 1375.571640][ C1] cdc_wdm 4-1:1.0: nonzero urb status received: -71 [ 1375.584131][ C1] wdm_int_callback: 2 callbacks suppressed [ 1375.584154][ C1] cdc_wdm 4-1:1.0: wdm_int_callback - 0 bytes [ 1375.598120][ C1] cdc_wdm 4-1:1.0: nonzero urb status received: -71 [ 1375.604776][ C1] cdc_wdm 4-1:1.0: wdm_int_callback - 0 bytes [ 1375.611130][ C1] cdc_wdm 4-1:1.0: nonzero urb status received: -71 [ 1375.617940][ C1] cdc_wdm 4-1:1.0: wdm_int_callback - 0 bytes [ 1375.624307][ C1] cdc_wdm 4-1:1.0: nonzero urb status received: -71 [ 1375.630962][ C1] cdc_wdm 4-1:1.0: wdm_int_callback - 0 bytes [ 1375.637857][ C1] cdc_wdm 4-1:1.0: nonzero urb status received: -71 [ 1375.644492][ C1] cdc_wdm 4-1:1.0: wdm_int_callback - 0 bytes [ 1375.650820][ C1] cdc_wdm 4-1:1.0: nonzero urb status received: -71 [ 1375.657461][ C1] cdc_wdm 4-1:1.0: wdm_int_callback - 0 bytes [ 1375.665745][ C1] cdc_wdm 4-1:1.0: nonzero urb status received: -71 [ 1375.672477][ C1] cdc_wdm 4-1:1.0: wdm_int_callback - 0 bytes [ 1375.679365][ C1] cdc_wdm 4-1:1.0: nonzero urb status received: -71 [ 1375.686009][ C1] cdc_wdm 4-1:1.0: wdm_int_callback - 0 bytes [ 1375.692346][ C1] cdc_wdm 4-1:1.0: nonzero urb status received: -71 [ 1375.698986][ C1] cdc_wdm 4-1:1.0: wdm_int_callback - 0 bytes [ 1375.706061][ C1] cdc_wdm 4-1:1.0: nonzero urb status received: -71 [ 1375.712714][ C1] cdc_wdm 4-1:1.0: wdm_int_callback - 0 bytes [ 1375.745242][T22175] usb 4-1: USB disconnect, device number 36 [ 1375.751254][ C1] cdc_wdm 4-1:1.0: wdm_int_callback - usb_submit_urb failed with result -19 [ 1375.812175][ T6985] FAULT_FLAG_ALLOW_RETRY missing 801 [ 1375.820162][ T6985] CPU: 0 UID: 0 PID: 6985 Comm: syz.3.13425 Tainted: G L syzkaller #0 PREEMPT(full) [ 1375.820199][ T6985] Tainted: [L]=SOFTLOCKUP [ 1375.820208][ T6985] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 1375.820226][ T6985] Call Trace: [ 1375.820236][ T6985] [ 1375.820248][ T6985] dump_stack_lvl+0xe8/0x150 [ 1375.820283][ T6985] handle_userfault+0x14c3/0x17b0 [ 1375.820320][ T6985] ? __folio_put+0x21b/0x2c0 [ 1375.820353][ T6985] ? __pfx_handle_userfault+0x10/0x10 [ 1375.820408][ T6985] handle_mm_fault+0x1b26/0x32b0 [ 1375.820440][ T6985] ? __pte_offset_map_lock+0x13e/0x210 [ 1375.820492][ T6985] ? handle_mm_fault+0xdb/0x32b0 [ 1375.820534][ T6985] ? __pfx_handle_mm_fault+0x10/0x10 [ 1375.820568][ T6985] ? follow_page_pte+0x7ef/0x13e0 [ 1375.820608][ T6985] ? __pfx_follow_page_pte+0x10/0x10 [ 1375.820651][ T6985] __get_user_pages+0x1650/0x29f0 [ 1375.820714][ T6985] populate_vma_page_range+0x29f/0x3a0 [ 1375.820746][ T6985] ? __pfx_populate_vma_page_range+0x10/0x10 [ 1375.820773][ T6985] ? vma_wants_writenotify+0xb3/0x2a0 [ 1375.820807][ T6985] ? vma_set_page_prot+0xc3/0x100 [ 1375.820850][ T6985] mprotect_fixup+0x845/0xa30 [ 1375.820886][ T6985] ? __pfx_mprotect_fixup+0x10/0x10 [ 1375.820925][ T6985] do_mprotect_pkey+0x8c5/0xcd0 [ 1375.820954][ T6985] ? __fget_files+0x3a0/0x420 [ 1375.820993][ T6985] ? __pfx_do_mprotect_pkey+0x10/0x10 [ 1375.821034][ T6985] ? __se_sys_futex_time32+0x360/0x3e0 [ 1375.821073][ T6985] ? rcu_is_watching+0x15/0xb0 [ 1375.821111][ T6985] __ia32_sys_mprotect+0x7f/0x90 [ 1375.821137][ T6985] __do_fast_syscall_32+0x1dc/0x560 [ 1375.821163][ T6985] ? lockdep_hardirqs_on+0x7b/0x110 [ 1375.821184][ T6985] ? do_fast_syscall_32+0x34/0x80 [ 1375.821208][ T6985] ? irqentry_exit+0x10f/0x660 [ 1375.821235][ T6985] do_fast_syscall_32+0x34/0x80 [ 1375.821260][ T6985] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 1375.821293][ T6985] RIP: 0023:0xf702d539 [ 1375.821322][ T6985] Code: 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 [ 1375.821343][ T6985] RSP: 002b:00000000f541d55c EFLAGS: 00000206 ORIG_RAX: 000000000000007d [ 1375.821367][ T6985] RAX: ffffffffffffffda RBX: 0000000080ffc000 RCX: 0000000000004000 [ 1375.821383][ T6985] RDX: 000000000000000f RSI: 0000000000000000 RDI: 0000000000000000 [ 1375.821397][ T6985] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 1375.821410][ T6985] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 1375.821424][ T6985] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 1375.821456][ T6985] [ 1376.051704][ T6989] netlink: 'syz.8.13427': attribute type 1 has an invalid length. [ 1376.157276][ T6989] bond4: (slave bridge1): making interface the new active one [ 1376.165881][ T6989] bond4: (slave bridge1): Enslaving as an active interface with an up link [ 1376.437741][ T6999] netlink: 316 bytes leftover after parsing attributes in process `syz.9.13431'. [ 1376.458511][ T7005] netlink: 27 bytes leftover after parsing attributes in process `syz.8.13432'. [ 1377.748205][ T7039] input: syz0 as /devices/virtual/input/input208 [ 1379.147489][ T3811] Bluetooth: hci0: command 0x0406 tx timeout [ 1379.207940][ T7073] netlink: 212348 bytes leftover after parsing attributes in process `syz.0.13460'. [ 1379.941232][ T7085] ALSA: seq fatal error: cannot create timer (-22) [ 1380.526440][T22175] usb 9-1: new high-speed USB device number 60 using dummy_hcd [ 1380.681117][ T7109] netlink: 'syz.9.13475': attribute type 13 has an invalid length. [ 1380.695577][T22175] usb 9-1: Using ep0 maxpacket: 8 [ 1380.740504][T22175] usb 9-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 56832, setting to 1024 [ 1380.768389][T22175] usb 9-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024 [ 1380.801880][T22175] usb 9-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 1380.816363][T22175] usb 9-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 1380.831814][T22175] usb 9-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 1380.843384][T22175] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1381.071384][ T7116] netlink: 'syz.3.13478': attribute type 1 has an invalid length. [ 1381.097492][T22175] usb 9-1: GET_CAPABILITIES returned 0 [ 1381.103334][T22175] usbtmc 9-1:16.0: can't read capabilities [ 1381.160690][ T7116] 8021q: adding VLAN 0 to HW filter on device bond6 [ 1381.213544][ T7119] bond6: (slave veth1): Enslaving as an active interface with a down link [ 1381.318770][ C1] usbtmc 9-1:16.0: usbtmc_write_bulk_cb - nonzero write bulk status received: -71 [ 1381.329970][T22175] usb 9-1: USB disconnect, device number 60 [ 1381.480455][ T7116] bond6 (unregistering): (slave veth1): Releasing active interface [ 1381.503961][ T7116] bond6 (unregistering): Released all slaves [ 1382.228319][ T7148] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=3965544961 (63448719376 ns) > initial count (51650093520 ns). Using initial count to start timer. [ 1382.425292][T22195] usb 4-1: new high-speed USB device number 37 using dummy_hcd [ 1382.579930][T22195] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1382.592656][T22195] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1382.604303][T22195] usb 4-1: New USB device found, idVendor=256c, idProduct=006d, bcdDevice= 0.00 [ 1382.618244][T22195] usb 4-1: New USB device strings: Mfr=2, Product=0, SerialNumber=0 [ 1382.625801][T22184] usb 9-1: new high-speed USB device number 61 using dummy_hcd [ 1382.637016][T22195] usb 4-1: Manufacturer: syz [ 1382.644680][T22195] usb 4-1: config 0 descriptor?? [ 1382.804941][T22184] usb 9-1: Using ep0 maxpacket: 16 [ 1382.812380][T22184] usb 9-1: config 1 interface 0 altsetting 255 endpoint 0x1 has invalid wMaxPacketSize 0 [ 1382.834925][T22184] usb 9-1: config 1 interface 0 altsetting 255 bulk endpoint 0x1 has invalid maxpacket 0 [ 1382.854939][T22184] usb 9-1: config 1 interface 0 altsetting 255 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 1382.875605][T22184] usb 9-1: config 1 interface 0 has no altsetting 0 [ 1382.887419][T22184] usb 9-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40 [ 1382.905044][T22184] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1382.913098][T22184] usb 9-1: Product: syz [ 1382.924852][T22184] usb 9-1: Manufacturer: syz [ 1382.930545][T22184] usb 9-1: SerialNumber: syz [ 1383.168315][T22184] usblp 9-1:1.0: usblp0: USB Unidirectional printer dev 61 if 0 alt 255 proto 1 vid 0x0525 pid 0xA4A8 [ 1383.565200][ T7152] usblp0:failed reading printer status (-32) [ 1383.587040][T22175] usb 9-1: USB disconnect, device number 61 [ 1383.626433][T22175] usblp0: removed [ 1383.721929][T22195] input: syz as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/0003:256C:006D.00D4/input/input209 [ 1383.828122][T22195] input: syz as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/0003:256C:006D.00D4/input/input210 [ 1383.885406][T22195] uclogic 0003:256C:006D.00D4: input,hidraw0: USB HID v0.00 Keypad [syz] on usb-dummy_hcd.3-1/input0 [ 1383.928687][T22195] usb 4-1: USB disconnect, device number 37 [ 1384.116726][ T7166] fido_id[7166]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.3/usb4/report_descriptor': No such file or directory [ 1385.613623][ T30] audit: type=1326 audit(1766839921.979:679): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7204 comm="syz.3.13513" exe="/root/syz-executor" sig=31 arch=40000003 syscall=240 compat=1 ip=0xf702d539 code=0x0 [ 1385.723597][ T7209] netlink: 'syz.8.13514': attribute type 3 has an invalid length. [ 1385.735779][ T7209] netlink: 8 bytes leftover after parsing attributes in process `syz.8.13514'. [ 1386.025671][T22175] usb 10-1: new high-speed USB device number 41 using dummy_hcd [ 1386.185320][T22175] usb 10-1: Using ep0 maxpacket: 16 [ 1386.198610][T22175] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1386.237686][T22175] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1386.258941][T22175] usb 10-1: New USB device found, idVendor=0458, idProduct=5016, bcdDevice= 0.00 [ 1386.285424][T22175] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1386.311486][T22175] usb 10-1: config 0 descriptor?? [ 1386.430619][ T7230] gtp0: entered promiscuous mode [ 1386.443939][ T7231] input: syz0 as /devices/virtual/input/input211 [ 1386.470177][ T7230] netlink: 4 bytes leftover after parsing attributes in process `syz.8.13524'. [ 1386.765910][T22175] kye 0003:0458:5016.00D5: control desc unexpectedly large [ 1386.782167][T22175] input: HID 0458:5016 as /devices/platform/dummy_hcd.9/usb10/10-1/10-1:0.0/0003:0458:5016.00D5/input/input212 [ 1386.912565][T22175] input: HID 0458:5016 as /devices/platform/dummy_hcd.9/usb10/10-1/10-1:0.0/0003:0458:5016.00D5/input/input213 [ 1386.988770][T22175] kye 0003:0458:5016.00D5: input,hiddev0,hidraw0: USB HID v0.09 Device [HID 0458:5016] on usb-dummy_hcd.9-1/input0 [ 1387.886958][ C1] kye 0003:0458:5016.00D5: usb_submit_urb(ctrl) failed: -1 [ 1388.167467][ T7269] kvm: vcpu 128: requested lapic timer restore with starting count register 0x390=1812281087 (231971979136 ns) > initial count (200000 ns). Using initial count to start timer. [ 1388.726056][T22195] usb 10-1: USB disconnect, device number 41 [ 1389.479260][ T7279] netlink: 4 bytes leftover after parsing attributes in process `syz.3.13544'. [ 1389.638768][ T7287] netlink: 'syz.0.13542': attribute type 13 has an invalid length. [ 1390.198951][ T7296] loop3: detected capacity change from 0 to 7 [ 1390.230459][ T7296] Dev loop3: unable to read RDB block 7 [ 1390.244016][ T7296] loop3: unable to read partition table [ 1390.255614][ T7296] loop3: partition table beyond EOD, truncated [ 1390.262124][ T7296] loop_reread_partitions: partition scan of loop3 (þ被xü—ŸÑà– ) failed (rc=-5) [ 1390.770888][T32353] netdevsim netdevsim9 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1390.838185][ T7307] ipvlan2: entered promiscuous mode [ 1390.961829][T32353] netdevsim netdevsim9 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1391.102805][T32353] netdevsim netdevsim9 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1391.281508][T32353] netdevsim netdevsim9 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1391.421276][ T3811] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 1391.437867][ T3811] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 1391.447635][ T3811] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 1391.458165][ T3811] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 1391.468323][ T3811] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 1391.616429][ T7334] netlink: 4 bytes leftover after parsing attributes in process `syz.0.13566'. [ 1391.702038][ T7334] netlink: 12 bytes leftover after parsing attributes in process `syz.0.13566'. [ 1392.402781][T32353] bond1 (unregistering): (slave bridge0): Releasing active interface [ 1392.982206][T32353] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1392.992956][T32353] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1393.013939][T32353] bond0 (unregistering): Released all slaves [ 1393.043197][T32353] bond1 (unregistering): Released all slaves [ 1393.545297][T28293] Bluetooth: hci3: command tx timeout [ 1394.204198][T32353] hsr_slave_0: left promiscuous mode [ 1394.230546][T32353] hsr_slave_1: left promiscuous mode [ 1394.254262][T32353] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1394.281448][T32353] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1394.329394][T32353] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1394.355932][T32353] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1394.451248][T32353] veth1_macvtap: left promiscuous mode [ 1394.475063][T32353] veth0_macvtap: left promiscuous mode [ 1394.480803][T32353] veth1_vlan: left promiscuous mode [ 1394.525072][T32353] veth0_vlan: left promiscuous mode [ 1395.498184][T32353] team0 (unregistering): Port device team_slave_1 removed [ 1395.616365][T28293] Bluetooth: hci3: command tx timeout [ 1395.665392][T32353] team0 (unregistering): Port device team_slave_0 removed [ 1396.285591][T32353] team0 (unregistering): Port device dummy0 removed [ 1396.671389][ T7331] chnl_net:caif_netlink_parms(): no params data found [ 1397.069658][ T7331] bridge0: port 1(bridge_slave_0) entered blocking state [ 1397.090983][ T7331] bridge0: port 1(bridge_slave_0) entered disabled state [ 1397.130479][ T7331] bridge_slave_0: entered allmulticast mode [ 1397.171055][ T7331] bridge_slave_0: entered promiscuous mode [ 1397.207432][ T7331] bridge0: port 2(bridge_slave_1) entered blocking state [ 1397.240150][ T7331] bridge0: port 2(bridge_slave_1) entered disabled state [ 1397.253839][ T7449] loop5: detected capacity change from 0 to 7 [ 1397.267405][ T7331] bridge_slave_1: entered allmulticast mode [ 1397.278926][ T7449] Dev loop5: unable to read RDB block 7 [ 1397.292734][ T7331] bridge_slave_1: entered promiscuous mode [ 1397.303166][ T7449] loop5: unable to read partition table [ 1397.321253][ T7449] loop5: partition table beyond EOD, truncated [ 1397.357884][ T7449] loop_reread_partitions: partition scan of loop5 (þ被xü—ŸÑà– ) failed (rc=-5) [ 1397.528578][ T7331] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1397.603992][ T7331] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1397.695708][T28293] Bluetooth: hci3: command tx timeout [ 1397.829413][ T7331] team0: Port device team_slave_0 added [ 1397.868428][ T7331] team0: Port device team_slave_1 added [ 1398.044396][ T7331] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1398.066198][ T7331] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1398.146343][ T7331] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1398.194396][ T7331] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1398.221420][ T7331] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1398.310046][ T7331] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1398.480254][ T7331] hsr_slave_0: entered promiscuous mode [ 1398.496621][ T7331] hsr_slave_1: entered promiscuous mode [ 1398.503079][ T7331] debugfs: 'hsr0' already exists in 'hsr' [ 1398.521605][ T7331] Cannot create hsr debugfs directory [ 1399.783951][T28293] Bluetooth: hci3: command tx timeout [ 1399.978895][ T7503] netlink: 'syz.8.13612': attribute type 13 has an invalid length. [ 1400.632454][ T7331] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 1400.692795][ T7331] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 1400.792492][ T7331] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 1400.960863][ T7331] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 1401.481388][ T7331] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1401.510637][ T7331] 8021q: adding VLAN 0 to HW filter on device team0 [ 1401.544294][ T5565] bridge0: port 1(bridge_slave_0) entered blocking state [ 1401.551571][ T5565] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1401.619490][ T5565] bridge0: port 2(bridge_slave_1) entered blocking state [ 1401.626781][ T5565] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1401.956187][ T7331] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1402.235171][ T7331] veth0_vlan: entered promiscuous mode [ 1402.302813][ T7331] veth1_vlan: entered promiscuous mode [ 1402.430443][ T7331] veth0_macvtap: entered promiscuous mode [ 1402.469091][ T7331] veth1_macvtap: entered promiscuous mode [ 1402.521939][ T7331] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1402.569540][ T7331] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1402.619168][ T418] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1402.636443][ T418] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1402.670063][ T418] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1402.714107][ T418] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1402.964504][ T5565] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1403.000741][ T5565] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1403.045276][T29089] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1403.053871][T29089] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1404.818983][ T7622] netlink: 'syz.8.13646': attribute type 10 has an invalid length. [ 1404.869063][ T3811] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 1404.880324][ T3811] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 1404.891830][ T3811] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 1404.916070][ T3811] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 1404.923823][ T3811] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 1404.956753][ T7622] bond0: (slave bridge0): Enslaving as an active interface with an up link [ 1405.213759][ T7635] netlink: 4 bytes leftover after parsing attributes in process `syz.1.13647'. [ 1405.236158][ T7635] netlink: 'syz.1.13647': attribute type 15 has an invalid length. [ 1405.250915][ T7635] netlink: 'syz.1.13647': attribute type 18 has an invalid length. [ 1405.410112][ T7635] vxlan0: entered promiscuous mode [ 1405.437684][ T5898] netdevsim netdevsim1 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 1405.474982][ T5898] netdevsim netdevsim1 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 1405.483765][ T5898] netdevsim netdevsim1 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 1405.526140][ T5898] netdevsim netdevsim1 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 1405.589668][ T7624] chnl_net:caif_netlink_parms(): no params data found [ 1406.078353][ T7624] bridge0: port 1(bridge_slave_0) entered blocking state [ 1406.116133][ T7624] bridge0: port 1(bridge_slave_0) entered disabled state [ 1406.123464][ T7624] bridge_slave_0: entered allmulticast mode [ 1406.147391][ T7624] bridge_slave_0: entered promiscuous mode [ 1406.174371][ T7624] bridge0: port 2(bridge_slave_1) entered blocking state [ 1406.192201][ T7667] input: syz0 as /devices/virtual/input/input214 [ 1406.202434][ T7624] bridge0: port 2(bridge_slave_1) entered disabled state [ 1406.215540][ T7624] bridge_slave_1: entered allmulticast mode [ 1406.238827][ T7624] bridge_slave_1: entered promiscuous mode [ 1406.500520][ T7624] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1406.563220][ T7624] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1406.977367][T28293] Bluetooth: hci0: command tx timeout [ 1407.030368][ T7624] team0: Port device team_slave_0 added [ 1407.039463][ T7624] team0: Port device team_slave_1 added [ 1407.163704][ T7624] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1407.191237][ T7624] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1407.266453][ T7624] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1407.285666][ T3941] usb 2-1: new high-speed USB device number 65 using dummy_hcd [ 1407.333674][ T7624] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1407.342340][ T7624] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1407.444853][ T7624] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1407.469020][ T3941] usb 2-1: Using ep0 maxpacket: 32 [ 1407.490935][ T3941] usb 2-1: config index 0 descriptor too short (expected 29220, got 36) [ 1407.527144][ T3941] usb 2-1: config 0 has too many interfaces: 81, using maximum allowed: 32 [ 1407.564975][ T3941] usb 2-1: config 0 has 1 interface, different from the descriptor's value: 81 [ 1407.574030][ T3941] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 1407.649972][ T3941] usb 2-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 1407.680140][ T3941] usb 2-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 1407.698443][ T3941] usb 2-1: New USB device found, idVendor=03f0, idProduct=6c17, bcdDevice= 0.40 [ 1407.709672][ T3941] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1407.724261][ T3941] usb 2-1: config 0 descriptor?? [ 1407.762230][ T7624] hsr_slave_0: entered promiscuous mode [ 1407.786915][ T7624] hsr_slave_1: entered promiscuous mode [ 1407.793642][ T7624] debugfs: 'hsr0' already exists in 'hsr' [ 1407.844988][ T7624] Cannot create hsr debugfs directory [ 1407.978176][ T3941] usblp 2-1:0.0: usblp0: USB Bidirectional printer dev 65 if 0 alt 0 proto 3 vid 0x03F0 pid 0x6C17 [ 1408.060315][ T3941] usb 2-1: USB disconnect, device number 65 [ 1408.125987][ T3941] usblp0: removed [ 1408.554955][ T3941] usb 2-1: new high-speed USB device number 66 using dummy_hcd [ 1408.765610][ T3941] usb 2-1: Using ep0 maxpacket: 32 [ 1408.794453][ T3941] usb 2-1: config index 0 descriptor too short (expected 29220, got 36) [ 1408.809111][ T3941] usb 2-1: config 0 has too many interfaces: 81, using maximum allowed: 32 [ 1408.837492][ T3941] usb 2-1: config 0 has 1 interface, different from the descriptor's value: 81 [ 1408.865369][ T3941] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 1408.869511][ T7624] netdevsim netdevsim5 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1408.885318][ T3941] usb 2-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 1408.908488][ T3941] usb 2-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 1408.960486][ T3941] usb 2-1: New USB device found, idVendor=03f0, idProduct=6c17, bcdDevice= 0.40 [ 1409.006986][ T3941] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1409.057824][T28293] Bluetooth: hci0: command tx timeout [ 1409.060616][ T3941] usb 2-1: config 0 descriptor?? [ 1409.307796][ T7624] netdevsim netdevsim5 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1409.351600][ T3941] usblp 2-1:0.0: usblp0: USB Bidirectional printer dev 66 if 0 alt 0 proto 3 vid 0x03F0 pid 0x6C17 [ 1409.479027][ T7624] netdevsim netdevsim5 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1409.627400][ T7624] netdevsim netdevsim5 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1409.894973][T22187] usb 2-1: USB disconnect, device number 66 [ 1409.921497][T22187] usblp0: removed [ 1410.286757][ T7624] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 1410.323558][ T7624] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 1410.474940][ T7624] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 1410.533390][ T7624] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 1410.591547][ T7760] netlink: 28 bytes leftover after parsing attributes in process `syz.8.13678'. [ 1410.669771][ T7760] lo: entered promiscuous mode [ 1410.675412][ T7760] lo: entered allmulticast mode [ 1411.155235][ T3811] Bluetooth: hci0: command tx timeout [ 1411.575584][ T7624] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1411.724085][ T7829] netlink: 304 bytes leftover after parsing attributes in process `syz.1.13691'. [ 1412.004923][ T7838] netlink: 'syz.8.13694': attribute type 13 has an invalid length. [ 1412.037666][ T7624] 8021q: adding VLAN 0 to HW filter on device team0 [ 1412.049136][ T7838] netlink: 'syz.8.13694': attribute type 17 has an invalid length. [ 1412.619708][ T7838] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 1412.692579][ T5565] bridge0: port 1(bridge_slave_0) entered blocking state [ 1412.699832][ T5565] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1412.772367][T32539] bridge0: port 2(bridge_slave_1) entered blocking state [ 1412.779625][T32539] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1412.984098][ T7859] netlink: 8 bytes leftover after parsing attributes in process `syz.3.13699'. [ 1413.043905][ T7859] vlan2: entered allmulticast mode [ 1413.055144][ T7859] hsr0: entered allmulticast mode [ 1413.070724][ T7859] hsr_slave_0: entered allmulticast mode [ 1413.085106][ T7859] hsr_slave_1: entered allmulticast mode [ 1413.189702][ T7624] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1413.215598][T28293] Bluetooth: hci0: command tx timeout [ 1413.322292][ T7868] binder: 7867:7868 ioctl c0306201 80000640 returned -22 [ 1413.402504][ T7624] veth0_vlan: entered promiscuous mode [ 1413.466904][ T7624] veth1_vlan: entered promiscuous mode [ 1413.592900][ T7878] netlink: 20 bytes leftover after parsing attributes in process `syz.8.13705'. [ 1413.622000][ T7624] veth0_macvtap: entered promiscuous mode [ 1413.650283][ T7624] veth1_macvtap: entered promiscuous mode [ 1413.688680][ T7624] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1413.740399][ T7624] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1413.804278][ T1384] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1413.845211][ T1384] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1413.878472][ T1384] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1413.908205][ T1384] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1414.130179][ T5898] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1414.153658][ T5898] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1414.271070][ T1135] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1414.310547][ T1135] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1414.925483][ T7927] IPVS: lc: UDP 224.0.0.2:0 - no destination available [ 1414.926273][T22175] usb 9-1: new high-speed USB device number 62 using dummy_hcd [ 1415.118347][T22175] usb 9-1: config index 0 descriptor too short (expected 39, got 27) [ 1415.142831][T22175] usb 9-1: config 0 interface 0 altsetting 251 endpoint 0x9 has invalid wMaxPacketSize 0 [ 1415.169205][T22175] usb 9-1: config 0 interface 0 has no altsetting 0 [ 1415.199259][T22175] usb 9-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 1415.221308][T22175] usb 9-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 1415.241279][T22175] usb 9-1: Product: syz [ 1415.257692][T22175] usb 9-1: Manufacturer: syz [ 1415.273641][T22175] usb 9-1: SerialNumber: syz [ 1415.296149][T22175] usb 9-1: config 0 descriptor?? [ 1415.313818][T22175] hub 9-1:0.0: bad descriptor, ignoring hub [ 1415.324117][T22175] hub 9-1:0.0: probe with driver hub failed with error -5 [ 1415.378859][T22175] usb 9-1: selecting invalid altsetting 0 [ 1415.840486][ T3941] usb 6-1: new full-speed USB device number 69 using dummy_hcd [ 1416.018924][ T3941] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 1023, setting to 64 [ 1416.039594][ T7916] usb 9-1: reset high-speed USB device number 62 using dummy_hcd [ 1416.045813][ T3941] usb 6-1: New USB device found, idVendor=28bd, idProduct=0042, bcdDevice= 0.00 [ 1416.095537][ T3941] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1416.127615][ T3941] usb 6-1: config 0 descriptor?? [ 1416.146358][ T7949] raw-gadget.1 gadget.5: fail, usb_ep_enable returned -22 [ 1416.451251][ T7916] usb 9-1: failed to restore interface 0 altsetting 251 (error=-71) [ 1416.482515][T22188] usb 9-1: USB disconnect, device number 62 [ 1416.525604][ T7982] sch_tbf: burst 127 is lower than device syzkaller0 mtu (1514) ! [ 1416.554048][ T3941] usbhid 6-1:0.0: can't add hid device: -71 [ 1416.590905][ T3941] usbhid 6-1:0.0: probe with driver usbhid failed with error -71 [ 1416.623672][ T3941] usb 6-1: USB disconnect, device number 69 [ 1417.671377][T22188] usb 4-1: new high-speed USB device number 38 using dummy_hcd [ 1417.848360][T22188] usb 4-1: config 0 interface 0 altsetting 251 endpoint 0x9 has invalid wMaxPacketSize 0 [ 1417.901377][T22188] usb 4-1: config 0 interface 0 has no altsetting 0 [ 1417.946705][T22188] usb 4-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 1417.983726][T22188] usb 4-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 1418.039209][T22188] usb 4-1: Product: syz [ 1418.062343][T22188] usb 4-1: Manufacturer: syz [ 1418.078568][T22188] usb 4-1: SerialNumber: syz [ 1418.113602][T22188] usb 4-1: config 0 descriptor?? [ 1418.143475][T22188] usb 4-1: selecting invalid altsetting 0 [ 1418.285634][T30242] usb 9-1: new high-speed USB device number 63 using dummy_hcd [ 1418.376597][T30246] usb 4-1: USB disconnect, device number 38 [ 1418.463901][T30242] usb 9-1: config index 0 descriptor too short (expected 23569, got 27) [ 1418.489174][T30242] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1418.538072][T30242] usb 9-1: New USB device found, idVendor=03eb, idProduct=0002, bcdDevice=ba.c0 [ 1418.567250][T30242] usb 9-1: New USB device strings: Mfr=5, Product=0, SerialNumber=0 [ 1418.585084][T30242] usb 9-1: Manufacturer: syz [ 1418.611434][T30242] usb 9-1: config 0 descriptor?? [ 1418.765817][T30242] rc_core: IR keymap rc-hauppauge not found [ 1418.774676][T30242] Registered IR keymap rc-empty [ 1418.783881][T30242] rc rc0: IgorPlug-USB IR Receiver as /devices/platform/dummy_hcd.8/usb9/9-1/9-1:0.0/rc/rc0 [ 1418.801441][T30242] input: IgorPlug-USB IR Receiver as /devices/platform/dummy_hcd.8/usb9/9-1/9-1:0.0/rc/rc0/input215 [ 1418.856947][ C0] igorplugusb 9-1:0.0: Error: urb status = -32 [ 1418.872005][T30242] usb 9-1: USB disconnect, device number 63 [ 1418.908903][ T3942] usb 6-1: new high-speed USB device number 70 using dummy_hcd [ 1418.925209][T30246] usb 4-1: new high-speed USB device number 39 using dummy_hcd [ 1419.065092][ T3942] usb 6-1: Using ep0 maxpacket: 16 [ 1419.088902][ T3942] usb 6-1: config 1 has an invalid descriptor of length 242, skipping remainder of the config [ 1419.110146][T30246] usb 4-1: config 0 interface 0 altsetting 251 endpoint 0x9 has invalid wMaxPacketSize 0 [ 1419.110910][ T3942] usb 6-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 1419.146219][T30246] usb 4-1: config 0 interface 0 has no altsetting 0 [ 1419.158283][ T3942] usb 6-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 1419.168238][ T3942] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1419.169898][T30246] usb 4-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 1419.203703][T30246] usb 4-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 1419.217734][ T3942] usb 6-1: Product: syz [ 1419.222038][ T3942] usb 6-1: Manufacturer: syz [ 1419.228372][T30246] usb 4-1: Product: syz [ 1419.231918][ T3942] usb 6-1: SerialNumber: syz [ 1419.255224][T30246] usb 4-1: Manufacturer: syz [ 1419.261244][T30246] usb 4-1: SerialNumber: syz [ 1419.272637][T30246] usb 4-1: config 0 descriptor?? [ 1419.374099][ T8068] veth0: entered promiscuous mode [ 1419.386107][ T8068] veth0_to_hsr: entered promiscuous mode [ 1419.392593][ T8067] veth0_to_hsr: left promiscuous mode [ 1419.399234][ T8067] veth0: left promiscuous mode [ 1419.465722][ T3942] usb 6-1: 0:2 : does not exist [ 1419.503328][ T3942] usb 6-1: 5:0: failed to get current value for ch 0 (-22) [ 1419.566219][ T3942] usb 6-1: USB disconnect, device number 70 [ 1419.589600][T30246] usb 4-1: selecting invalid altsetting 0 [ 1419.660332][T15224] udevd[15224]: error opening ATTR{/sys/devices/platform/dummy_hcd.5/usb6/6-1/6-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1419.713649][T30246] usb 4-1: USB disconnect, device number 39 [ 1419.814467][ T5970] udevd[5970]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1420.906825][ T3942] usb 6-1: new high-speed USB device number 71 using dummy_hcd [ 1421.068933][ T3942] usb 6-1: Using ep0 maxpacket: 32 [ 1421.081239][ T3942] usb 6-1: config index 0 descriptor too short (expected 29220, got 36) [ 1421.099380][ T3942] usb 6-1: config 0 has too many interfaces: 81, using maximum allowed: 32 [ 1421.111174][ T3942] usb 6-1: config 0 has 1 interface, different from the descriptor's value: 81 [ 1421.128027][ T3942] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 1421.143297][ T3942] usb 6-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 1421.159731][ T3942] usb 6-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 1421.192638][ T3942] usb 6-1: New USB device found, idVendor=03f0, idProduct=6c17, bcdDevice= 0.40 [ 1421.204435][ T3942] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1421.269362][ T3942] usb 6-1: config 0 descriptor?? [ 1421.637000][ T3942] usblp 6-1:0.0: usblp0: USB Bidirectional printer dev 71 if 0 alt 0 proto 3 vid 0x03F0 pid 0x6C17 [ 1421.668234][ T3942] usb 6-1: USB disconnect, device number 71 [ 1421.700318][ T3942] usblp0: removed [ 1422.074500][ T30] audit: type=1804 audit(1766839958.439:680): pid=8142 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.3.13784" name="file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa" dev="ramfs" ino=204167 res=1 errno=0 [ 1422.268876][ T3942] usb 6-1: new high-speed USB device number 72 using dummy_hcd [ 1422.824833][ T3942] usb 6-1: Using ep0 maxpacket: 32 [ 1422.931991][ T3942] usb 6-1: config index 0 descriptor too short (expected 29220, got 36) [ 1422.945456][ T3942] usb 6-1: config 0 has too many interfaces: 81, using maximum allowed: 32 [ 1423.153740][ T3942] usb 6-1: config 0 has 1 interface, different from the descriptor's value: 81 [ 1423.193442][ T3942] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 1423.253572][ T3942] usb 6-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 1423.304854][ T3942] usb 6-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 1423.420618][ T3942] usb 6-1: New USB device found, idVendor=03f0, idProduct=6c17, bcdDevice= 0.40 [ 1423.481114][ T3942] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1423.578294][ T3942] usb 6-1: config 0 descriptor?? [ 1423.761418][ T3942] usblp 6-1:0.0: usblp0: USB Bidirectional printer dev 72 if 0 alt 0 proto 3 vid 0x03F0 pid 0x6C17 [ 1423.855330][ T3942] usb 6-1: USB disconnect, device number 72 [ 1423.903420][ T3942] usblp0: removed [ 1424.005892][ T8168] netlink: 16 bytes leftover after parsing attributes in process `syz.5.13791'. [ 1424.119234][ T6063] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 1424.151856][T22187] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 1424.160005][ T6063] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 1424.225062][T22187] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 1425.145870][ T3942] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 1425.407153][ T8217] netlink: 4 bytes leftover after parsing attributes in process `syz.6.13809'. [ 1425.427007][ T3941] usb 6-1: new high-speed USB device number 73 using dummy_hcd [ 1425.438395][ T3942] hid-generic 0000:0000:0000.00D6: unknown main item tag 0x0 [ 1425.479568][ T3942] hid-generic 0000:0000:0000.00D6: hidraw0: HID v0.00 Device [syz1] on syz0 [ 1425.615456][ T3941] usb 6-1: Using ep0 maxpacket: 16 [ 1425.637979][ T3941] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1425.678530][ T3941] usb 6-1: New USB device found, idVendor=04d8, idProduct=00dd, bcdDevice= 0.00 [ 1425.718396][ T3941] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1425.745257][ T3941] usb 6-1: config 0 descriptor?? [ 1425.982203][ T30] audit: type=1804 audit(1766839962.349:681): pid=8229 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.1.13815" name="file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa" dev="ramfs" ino=204822 res=1 errno=0 [ 1426.187624][ T3941] mcp2221 0003:04D8:00DD.00D7: USB HID v0.05 Device [HID 04d8:00dd] on usb-dummy_hcd.5-1/input0 [ 1427.107195][ T3941] usb 6-1: USB disconnect, device number 73 [ 1427.402276][ T30] audit: type=1804 audit(1766839963.769:682): pid=8267 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.5.13827" name="file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa" dev="ramfs" ino=204498 res=1 errno=0 [ 1427.689599][T28293] Bluetooth: unknown link type 128 [ 1427.776862][ T3942] usb 4-1: new high-speed USB device number 40 using dummy_hcd [ 1427.847096][ T8277] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 1427.853656][ T8277] Bluetooth: hci3: Opcode 0x0406 failed: -4 [ 1427.894614][ T8277] Bluetooth: hci3: Opcode 0x0406 failed: -4 [ 1427.923006][ T8277] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 1427.941508][ T3942] usb 4-1: Using ep0 maxpacket: 8 [ 1427.956754][ T8277] Bluetooth: hci0: Opcode 0x0406 failed: -4 [ 1427.964039][ T3942] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1427.986298][ T8277] Bluetooth: hci0: Opcode 0x0406 failed: -4 [ 1427.992374][ T3942] usb 4-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 1428.028908][ T3942] usb 4-1: New USB device found, idVendor=04a5, idProduct=3003, bcdDevice=44.b2 [ 1428.040478][ T3942] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1428.048966][ T3942] usb 4-1: Product: syz [ 1428.053262][ T3942] usb 4-1: Manufacturer: syz [ 1428.058008][ T3942] usb 4-1: SerialNumber: syz [ 1428.070018][ T3942] usb 4-1: config 0 descriptor?? [ 1428.260350][ T1302] ieee802154 phy0 wpan0: encryption failed: -22 [ 1428.268654][ T1302] ieee802154 phy1 wpan1: encryption failed: -22 [ 1428.379928][ T8287] syzkaller1: entered promiscuous mode [ 1428.387222][ T8287] syzkaller1: entered allmulticast mode [ 1428.518356][ T3811] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 1428.529739][ T3811] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 1428.539059][ T3811] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 1428.552063][ T3811] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 1428.570035][ T3811] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 1428.577389][ C0] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 1428.723121][T30242] usb 4-1: USB disconnect, device number 40 [ 1428.912936][ T8301] team0: Port device ip6gre0 removed [ 1428.970638][ T8301] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 1429.013038][ T3941] skbuff: skb_under_panic: text:ffffffff8a25ec78 len:116 put:40 head:ffff888078767000 data:ffff888078766fe8 tail:0x5c end:0x6c0 dev:team0 [ 1429.046703][ T3941] ------------[ cut here ]------------ [ 1429.052234][ T3941] kernel BUG at net/core/skbuff.c:213! [ 1429.059464][ T3941] Oops: invalid opcode: 0000 [#1] SMP KASAN PTI [ 1429.065773][ T3941] CPU: 1 UID: 0 PID: 3941 Comm: kworker/1:1 Tainted: G L syzkaller #0 PREEMPT(full) [ 1429.076746][ T3941] Tainted: [L]=SOFTLOCKUP [ 1429.081107][ T3941] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 1429.091276][ T3941] Workqueue: mld mld_ifc_work [ 1429.096085][ T3941] RIP: 0010:skb_panic+0x157/0x160 [ 1429.101165][ T3941] Code: c7 60 9c 6f 8c 48 8b 74 24 08 48 8b 54 24 10 8b 0c 24 44 8b 44 24 04 4d 89 e9 50 55 41 57 41 56 e8 ce 6a f5 ff 48 83 c4 20 90 <0f> 0b cc cc cc cc cc cc cc 90 90 90 90 90 90 90 90 90 90 90 90 90 [ 1429.120813][ T3941] RSP: 0018:ffffc9000ecc7440 EFLAGS: 00010282 [ 1429.126922][ T3941] RAX: 0000000000000087 RBX: dffffc0000000000 RCX: 451b58d80ec07900 [ 1429.134931][ T3941] RDX: 0000000000000000 RSI: 0000000080000000 RDI: 0000000000000000 [ 1429.142939][ T3941] RBP: 00000000000006c0 R08: ffffc9000ecc71a7 R09: 1ffff92001d98e34 [ 1429.150956][ T3941] R10: dffffc0000000000 R11: fffff52001d98e35 R12: ffff88803cfd1a10 [ 1429.158988][ T3941] R13: ffff888078767000 R14: ffff888078766fe8 R15: 000000000000005c [ 1429.167005][ T3941] FS: 0000000000000000(0000) GS:ffff888125f1f000(0000) knlGS:0000000000000000 [ 1429.176052][ T3941] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 1429.182684][ T3941] CR2: 00007f50bf3ab6b0 CR3: 00000000486c0000 CR4: 00000000003526f0 [ 1429.190708][ T3941] DR0: ffffffffffffffff DR1: 00000000000001f8 DR2: 0000000000000083 [ 1429.198729][ T3941] DR3: ffffffffefffff15 DR6: 00000000ffff0ff0 DR7: 0000000000000400 [ 1429.206923][ T3941] Call Trace: [ 1429.210238][ T3941] [ 1429.213206][ T3941] ? ip6gre_header+0xc8/0x790 [ 1429.218029][ T3941] ? ip6gre_header+0xc8/0x790 [ 1429.222756][ T3941] skb_push+0xc3/0xe0 [ 1429.226776][ T3941] ip6gre_header+0xc8/0x790 [ 1429.231333][ T3941] ? __pfx_ip6gre_header+0x10/0x10 [ 1429.236487][ T3941] ? neigh_connected_output+0x1ea/0x460 [ 1429.242065][ T3941] ? read_seqbegin+0xac/0x180 [ 1429.246765][ T3941] ? lockdep_hardirqs_on+0x7b/0x110 [ 1429.251987][ T3941] ? __pfx_ip6gre_header+0x10/0x10 [ 1429.257124][ T3941] neigh_connected_output+0x286/0x460 [ 1429.262539][ T3941] ? ip6_output+0x126/0x550 [ 1429.267071][ T3941] ip6_output+0x340/0x550 [ 1429.271421][ T3941] NF_HOOK+0x9e/0x380 [ 1429.275422][ T3941] ? NF_HOOK+0x101/0x380 [ 1429.279686][ T3941] ? __pfx_NF_HOOK+0x10/0x10 [ 1429.284303][ T3941] ? __pfx_dst_output+0x10/0x10 [ 1429.289172][ T3941] ? lockdep_hardirqs_on+0x7b/0x110 [ 1429.294386][ T3941] ? __local_bh_enable_ip+0xd0/0x130 [ 1429.299688][ T3941] ? icmp6_dst_alloc+0x3a5/0x420 [ 1429.304663][ T3941] mld_sendpack+0x8d4/0xe60 [ 1429.309232][ T3941] ? mld_sendpack+0x1e7/0xe60 [ 1429.313959][ T3941] ? __pfx_mld_sendpack+0x10/0x10 [ 1429.319035][ T3941] mld_ifc_work+0x83e/0xd60 [ 1429.323571][ T3941] ? process_scheduled_works+0x9ef/0x1770 [ 1429.329308][ T3941] process_scheduled_works+0xad1/0x1770 [ 1429.334972][ T3941] ? __pfx_process_scheduled_works+0x10/0x10 [ 1429.340978][ T3941] ? do_raw_spin_lock+0x121/0x290 [ 1429.346056][ T3941] worker_thread+0x8a0/0xda0 [ 1429.350685][ T3941] ? __kthread_parkme+0x7b/0x200 [ 1429.355646][ T3941] kthread+0x711/0x8a0 [ 1429.359758][ T3941] ? __pfx_worker_thread+0x10/0x10 [ 1429.364905][ T3941] ? __pfx_kthread+0x10/0x10 [ 1429.369538][ T3941] ? _raw_spin_unlock_irq+0x23/0x50 [ 1429.374765][ T3941] ? __pfx_kthread+0x10/0x10 [ 1429.379418][ T3941] ret_from_fork+0x510/0xa50 [ 1429.384045][ T3941] ? __pfx_ret_from_fork+0x10/0x10 [ 1429.389178][ T3941] ? __switch_to+0xc9e/0x1480 [ 1429.393893][ T3941] ? __pfx_kthread+0x10/0x10 [ 1429.398518][ T3941] ret_from_fork_asm+0x1a/0x30 [ 1429.403314][ T3941] [ 1429.406364][ T3941] Modules linked in: [ 1429.411825][ T3941] ---[ end trace 0000000000000000 ]--- [ 1429.429464][ T3941] RIP: 0010:skb_panic+0x157/0x160 [ 1429.434660][ T3941] Code: c7 60 9c 6f 8c 48 8b 74 24 08 48 8b 54 24 10 8b 0c 24 44 8b 44 24 04 4d 89 e9 50 55 41 57 41 56 e8 ce 6a f5 ff 48 83 c4 20 90 <0f> 0b cc cc cc cc cc cc cc 90 90 90 90 90 90 90 90 90 90 90 90 90 [ 1429.455469][ T3941] RSP: 0018:ffffc9000ecc7440 EFLAGS: 00010282 SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 1429.461742][ T3941] RAX: 0000000000000087 RBX: dffffc0000000000 RCX: 451b58d80ec07900 [ 1429.470072][ T3941] RDX: 0000000000000000 RSI: 0000000080000000 RDI: 0000000000000000 [ 1429.478544][ T3941] RBP: 00000000000006c0 R08: ffffc9000ecc71a7 R09: 1ffff92001d98e34 [ 1429.487120][ T3941] R10: dffffc0000000000 R11: fffff52001d98e35 R12: ffff88803cfd1a10 [ 1429.495379][ T3941] R13: ffff888078767000 R14: ffff888078766fe8 R15: 000000000000005c [ 1429.504317][ T3941] FS: 0000000000000000(0000) GS:ffff888125f1f000(0000) knlGS:0000000000000000 [ 1429.514379][ T3941] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 1429.566122][ T3941] CR2: 000000005690c4c0 CR3: 000000007782e000 CR4: 00000000003526f0 [ 1429.574323][ T3941] DR0: ffffffffffffffff DR1: 00000000000001f8 DR2: 0000000000000083 [ 1429.582659][ T3941] DR3: ffffffffefffff15 DR6: 00000000ffff0ff0 DR7: 0000000000000400 [ 1429.590972][ T3941] Kernel panic - not syncing: Fatal exception [ 1429.597674][ T3941] Kernel Offset: disabled [ 1429.602019][ T3941] Rebooting in 86400 seconds..