last executing test programs: 44m0.609554428s ago: executing program 4 (id=8): socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000003c0)) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) socket$inet6_mptcp(0xa, 0x1, 0x106) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) r0 = socket$kcm(0x2, 0x200000000000001, 0x106) setsockopt$sock_attach_bpf(r0, 0x1, 0x7, 0x0, 0x0) sendmsg$inet(r0, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa7}, 0x30004001) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) r1 = syz_open_dev$vim2m(&(0x7f0000000500), 0x2, 0x2) ioctl$vim2m_VIDIOC_CREATE_BUFS(r1, 0x5460, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fc00100}]}) openat$dir(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_RECV(0xffffffffffffffff, 0xc0502100, &(0x7f00000002c0)={0x0}) ioctl$SECCOMP_IOCTL_NOTIF_SEND(r4, 0xc0182101, &(0x7f0000000200)={r5, 0x0, 0xfffffffe}) r6 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6}]}) socket$alg(0x26, 0x5, 0x0) close_range(r6, 0xffffffffffffffff, 0x0) connect$unix(r2, 0x0, 0x0) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(0x0, 0x0, 0x0) openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$vim2m_VIDIOC_ENUM_FMT(r1, 0xc0405602, 0x0) r7 = dup(0xffffffffffffffff) write$UHID_INPUT(r7, &(0x7f0000005880)={0x8, {"fb46c5f44b3056773417d078c67ee3161560505848f9ce2edb829ee6064e94fa477efc8cee72dbc97846794a4a0434d416b2b526eef16a90a369fd73775c83a49d5a8cc46a1c1cba06cd50fb68081eae02414c20295e81c97908ca41c844b79810de2da77fe6ce012d311edd47e366954816bc3e78db0761cf8549f1f75ec97876647f766b36a0e8d3b66bb72fe3bd5bf63bca4ff95369833419cd5948bb3e68eb6d6c2f4556abf4994307edae8dc4d8de641efdaeaf094c6f7f190ecca36b4f4e91428d775651051b8a96807ce1470d0ff03719334fe70452dde274c6d580501369f914033309d47b09ad8bced27d2b6a8d99b1008d31fc50638623255e1d538a7b2558826e2357faa453425971b79ebfd1d15dc72597822b318f2cf48898d5579487d78c9ce53e365e3e8ecbff35af86a76d742d9e35415b815143064fe2b5a338780e04c1a1e1129855c702fbb8ea6dd966f5384334cfb1fc4009c47a8e1e7be99437606eeb5d7fa231ff3b8b14e7c654d56e387456242151ac75746d674cac872c71c0b342dc16e6dcd8940de0b4b6b28b8013d052f4b079d13ff235a20409eb3540624477c2895fe35945689f36da99cc3f39f5b91a159ef567453511f4d6cb4c82f4c476f08edc79dcad85598b9f43a4a379483084c11f935e54102511665081397d905a9a9526f6043f4015eea9d969f9e82588cd8d374eae15cbf5da8dde2d84feececc70e08674738426a5f291c92dc7e2585216ab580e3ea886a1b9bce90efc6b131329677d5f06368908f8fbdc391aef86f1b8e71a27b4b853b66db9ac1f5b5835836f179b28c57dfc44c19e521bc352bf587be6292e387a1dab43133ceb2258fbb68e682740687a790a37fcb42dc312f9cc6e01e88384ecf855b65c3e0c3e1133dcf6b9b9cf67aa9427eff62ae1b632b44e6451359533518b27e0e4376f69d2f8b59c100743a4811e4a446550b5e9ee40df0ca54a1ab9dfd01b01507404c2608f7e64c347c3d4babca590a920ac55dfc264576d8ce713b77fecff01fb910d91a31033a2dd6c241126c1c4c31a07a8ce6138fb3637f3fbf7da8005c1509ae4f931921119524fc3bd9a3d33fabdbdb3407385c46281734eba392b8f16ca90933cf2aa1ac0136fcc43195790bd2e8c33faeb6840f79eb9bc6e3b8a4f989d1c7c4b7cceb243bfd704ec9b0a5f4754bc283e680a899779dd8ea74324fc83e3ea42b5982ef2b12a4eb553f409a85039195d8bd12e69976af698f1f7de83707a2ce78166dd3251ead5337837f0b02d3370e6216559950bddfa3455c5ee5b77771b2dd050c577f9ada5c4fee021f587538af3ad1fe3d55020938b5d62f5f8eda8d6ccd8a418d92fc53dd37b2e4c704ea7679c07d2c1837f8a9f1aab3f877e13604ca78a0d83c2c52b0637f1b2bb4817ba0cde02c0ee17d0c6dc9f8e3177507827102bf04a99dee97bdc5a85eb48299285542a408ae2fc007fd6a324ccd799f8b2ed0a0aaf7c738c005c4b9442f32fb960f23516454ecc0405f8a0dea43fcca8d0b655399484bab067d2adcdbd2627e6282b9ec4d855a2373ea123b43a33e8321fa4aae70ae8eb101bed61b55d45c6c5a1bbdcab07beda5acf58e74bf5bdb6916f358460aefa85d6f6712d220ae0da5fa9851c6e831fb45c89af8d972ea5ba6c4c9ec92ba4c4613034a36820aa978cbd934a7ddd28ccbb9117e62fd2aa2345326275d3ef539e5c0ca0891e04579ae2ad1b7bf9b695021ab1a34a1acbd0d4a8ae5ae578cfd4c98b4d4ee249bec31f7da8f5268f5bd871d5085a6e57b329a39f7f8723dfc6c85d0e2f147b5dadc885dcb12e110e7ccf474f190425bc2a90fc98ada747b4b9beefa633d444816fda6d70ca9508bccc7f06da00632403bb7141f51b5a6e93d83688f1a9703a19d7a06902e6a08984b6729fcaf2a453ca784db2e788711d14d066f96ef486f25ecdf17e3ea5ffd2e51e7ccf5b7c836aa7aad0ec6c815634f8df55128eedba9b9c00a3867ad51d93206fc8eff21490b2df68bc4a89676c15d0993d456374238e9c18a17ded0f2864dd31263e6beb1dc35abb55972b7097e5f0060c2b8dd5dfdd3a23dc52838e4bbff1b50dcd35c6f3498b05d2eb1b5cda030d5093d7640596e6c252cc9101dc2f4106de1979d5593773480f9d2e86f4b42306d021406b82be2f5d37e52f3ae2fa7ac0ffbaadbd2ec2afc8b0a3b1738597fae9a295a8670446d7a0da67013b4015334f878b426f30d2feffb0e74880e1174c92ca4041cc05069b25c666b969bf28287164c64e59b8760fb84b4f00d13a06dc79cf50417936df0ed9b5c077556cdcab5d9fb35309eecb3a172b959b66e182f9ed949af05b6bc8defeea9df0a5cd838b5b3e1e212684e66b7a4040703f4b9b62ccc4f4839059f73e708c8ed420a1930aeaa8eedf8c92255742d65c89bffca3c35bd82a115e77d87f78a8011c5ccd2c6480f7b4d6765d2ec7292fd182e3e2b3c02090af93942c38206b85f6bd4ac4e1e67190705823eda5148de0f876fd4e7af86cbba28aaa0a0caf93e2a729ec2a4f22002facdcd18368ddf2076b2a519d68ce6a249e06aa6db7d0a4205b865e9ef191b17eb4a06a1a5e61a371bf1fbf96258e032441068fae231cadc2d064f1761796a87b3c254a26636e5e4f6a0638e0d307ff39c1c47d7e23c3bd70d12bc20f4b054949069f5a8d6c8b297aa25924fca491550c8f6996de235c99e19916560bfa3fb65c9b74f0ce9fcc8a702c831c002c176381b70fca96bef0332aa94356dfc510294f54bf8644bdb1b6be4f765c91beb7db51925dd40394741534448b2fafdf98e1d8a7858dd1e2701a59946dadb3021533d61a33c420e8cad7ccb64c67f185e43ff980a1b824df078927d07014a6eab27faed5e3cc577c413d2f6ee57615b3482982fa0e65b7cd576ae989c29a74003f380c4b3aa2b160a2f1de59feb8ad5d5a7377e1c3dd9da732d6870b76e32891fef2455628b5f10110c47002c0fbeed73c6c1c9e166fc7216b2c4af16759a5a91e76c9cb97a7f845c0a6336ea4f9236ba3f7b9d77ee3301dec84512254a159fa24a7dee17da3a1651d65908bed993a3ff428d05eee9a69dd230d713a1a076d589cfa06ae5779f769b582f13996424438ad7c29d010b840a6674b822b8a7d5dbc4eef8980ddf655439777773594d3393d1c578ea49c3c9f3dbbafbacfbb7ca299bd2d7cc8f2f156a0e16ab85a3a3b214e5d5351f730c8ba8c631b184ce597f36452b9248d110baf635f8417fbf111b7b1c56b6e8e6285f1aecf1789a91ee229d91f2053a448863e37460f6c05e69fb6e88136ecd2c187d18889c2d3513de16c6d7dfb230b85f005be12b8dd34463bd51f038f629d7a166b158f01cce7001f66d743e80ea738206c76c55dc364dd81a8d7a93e23969d1b10d637d8115dc03251f1d5d885c081ec9b00c20cefe780e392fbbba35c8f4b980203088f24a03b83cec8331879d6de9cbd867ae5edd62b801f03f108362bf87ded65b7f4fd076287154c27d74dee4d8eec0453e82caded89b862f587e618db6b52e06d0229c05a9187ca8228d6e84b7a6febc7ad38c125c766e25019b8f1b9b181133b51874b663a6748a1ef1a51c1c787bacf8db46b93c56d139d921dd40365b9611a1dd38e5892d06f8d170dbc52762a75c3f35c14d8ceb1b2cae7c7d9221a68be519f93d9b3a991dc2c674120a6e270ac5056892fc93f67509d778bd4c3badf1d473a994d58fd16878eb2655669d182ac42be60a25d15d2bf00d6d21d0cfffdc3d1bed795ff4181d80fa5895e495e7bb3d8062200066d8fbc754dba599e1f93dde7591866dab98591edf0f985353c9912d78891e59c2a6afb244fa69046a5be18a2c5d7453fd1392d7abac3cdc3f0c3be0beb63a1f095e2c943e1bebcd17dacd898b50a714f4783ed0ac46963cc7cc07045fd9e176984c18bf35277c582b55782f948e752c8931003ec56c8107bb11b36a63c9b1d8dba7304c4dbbf2b1a027deef641b93ed8f171abf31712ebda58a950d88143686181cffcc71bcba9f8e1a3d6157ec307818b687ed037a0caca78cb4a1909e9de14d4e7ff3f7e6e81f9517ed3b768936eb7cca3ba09c1f4acd0631e2ea16f268a6f10aeebf2ed30c7ec5b7041b3dc678f8486fee1df547b1a934b3733c34db4ce25b63a130efc884ae62ad70586ab676fe172cb0da7a859404993dda696b49d5e92afc88921508e639ba0422814946f920502f1aee332f6eeb0a31c7366763aa4c6d8a8d26b9e5160e8d4c70b861d4923d44287c8a1c9a230a97c8e7ed5889c9b64e2333f806753b4fbce8fd8ff6aadc99b285cf4946d395652303bd278d72f02d2e797010c1272b09e5916c33ba3340d94a306aaec02ca0cba0616c1c722ef96c891546733e93ffe572d39166302519df9f95c52159e04071458dd7b835e3ff8cef86db89899396a7c5b9bf6aba04550187c2d99de49d02059710c3e617bc4372424d0314c27a5f80299d4383c74fd7f2d4f803c02f0a9833e06c144450fe1304e4639b9c9a73dad350bf988d367276867b792567a502d2f3d56d7375c0fdb30af58d36875337d1cfb18b124e12001f65ba937473b96a6e8351e4c94d68546ccb7d7b1f285c55ff3eebe76fe224e0c39f658b0b887e4fcaacf64989f11a82d5f8163fefd165c1330503d4a65c7fdef6744ea74112079ec98f194e15751915039e3f62381444afd700c1058ee98501c5ee41c0501cbcfe046a1521722be9f452493876c4a8caacf9b8a56debf76d1a42eee5c7e6f3bad4cfc7b179d8f13f119bb22cb754fb49d6386bc6bebc6c46aa1088beefc5a0f50a9a51b9782422346cdc31a8b80f2659d64fa32c75002801abaad28a5c0d3486f137050abfabcc97fed6f00ed3c4747ce9a9274e1ece6b3181772bbb6b519f17a620825f0560292bd353c4d4fa6c1d4e8d21670ac3a8e9fef7e82fd4302ed3a69d05d801947528417ba61070a952a346c6e9343b56000613e14cb43b6b99146f0eff34f15e23a3be70c21e0206bcfa5003fd2c5966a1f4a89181ed25c71a6956fac6cd43de3e12a655c82070d739561bedd883943cd05fbb133653ce5a506b43b39be231883cf54c304e3378cee70a02d30d92b685d9d4ff7c329671b500e142eeb791808c5b438136d0911218c0ed69f5248cafae09cf9b1caa4e37fb019acfde3b5c6f83e64ade36d83e012fff86c8201380e326acdf55744626611266d053f9a2ef0498927256fb1734e8d1cf4bc885d6aad99c25dbf1b1de7585d4f51e54bd5beeb426d6034f300e66b296f5db33ad4ee53b1e701a2d81d5db87ae9850ba5192b877ceaac0a6426a2a7dd745f04d061d2f7644173c77196d7a08736982addffacaa04f9a510427e63118d70833874ae14ff38aec591634f63e98286e61fd23f6d399ccdc61f15b9b767a5c4f6da128c97858552c5012c5ba82b3e54af3c18a7129685d8938b328dfb3cfed83acc143f186c9a16b60d60fd0b4be84566659cc7f03db4076f356d57549d6618666a376f4ba6627e8da2277ab1f38542bc78c32853edac52323e59fbbeab06f104649a6defc61fd6d6c4ca42519ff524bbc85cc8b29a1565196d4a7be7e9d25ba317c4cb1475cef90008c99eafdfccfc48920974c8724b18d64ec8d630a2dd9d03ef48d2922ad71931cae60b9cd567737eae6cdff075e6041a4860ab27d9496d5f1270af4bf2e77f6ab6b5014f4878a0ccce1840c28ee2110af3a4d097c4ecde7e56b560649e96ebbccd37c52a19d", 0x1000}}, 0x1006) 43m50.09276866s ago: executing program 4 (id=19): bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x0) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, 0x0, 0x0) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl802154(0x0, 0xffffffffffffffff) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) bind$rds(0xffffffffffffffff, &(0x7f0000000840)={0x2, 0x0, @loopback}, 0x10) sendmsg$rds(0xffffffffffffffff, &(0x7f0000000740)={&(0x7f0000000040)={0x2, 0x0, @remote}, 0x10, 0x0, 0x0, &(0x7f0000000200)}, 0x0) open(0x0, 0x0, 0x0) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, 0x0) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'wlan0\x00'}) r3 = socket$nl_route(0x10, 0x3, 0x0) keyctl$unlink(0x9, 0x0, 0x0) ioctl(r3, 0x8b26, &(0x7f0000000040)) r4 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000001840), 0x2982, 0x0) r5 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/stat\x00', 0x0, 0x0) sendfile(r4, r5, 0x0, 0x20000023892) ioctl$TIOCSERGETLSR(r4, 0x5459, &(0x7f0000000040)) 43m48.782752357s ago: executing program 4 (id=24): openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x400000008b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010600000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff1b000000020000000900010073797a30000001000900030073797a320000000014"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000440)=ANY=[], 0x64}}, 0x0) sendmsg$NFT_MSG_GETOBJ_RESET(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000600)={&(0x7f0000000a00)={0x20, 0x15, 0xa, 0x903, 0x0, 0x0, {0x0, 0x0, 0x8}, [@NFTA_OBJ_TABLE={0x9, 0x1, 'syz0\x00'}]}, 0x20}, 0x1, 0x0, 0x0, 0x8009}, 0x0) close(r1) r2 = openat$qrtrtun(0xffffffffffffff9c, 0x0, 0x40800) read(r2, 0x0, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz1\x00', 0x1ff) r3 = request_key(&(0x7f0000000380)='.dead\x00', &(0x7f00000003c0)={'syz', 0x0}, &(0x7f0000000400)='\x00', 0xfffffffffffffff8) r4 = add_key$user(&(0x7f0000000180), &(0x7f00000001c0)={'syz', 0x0}, &(0x7f0000000300)="8ae75115f0bb93e4402aa587d4d036cf173f3786bd6c3461097a6f4f07cd17d56eeaf02d025cee481bc778379d6de2fc09c6a2cec3b5dc8ef03af2f747d68aa8400b86c091efeb479214c3f6a437ac0631425f5a96cfa555970a6ff007d00014821c0b46d65b", 0x66, r3) r5 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r6 = openat$cgroup_ro(r5, &(0x7f00000002c0)='hugetlb.2MB.usage_in_bytes\x00', 0x275a, 0x0) read$FUSE(r6, &(0x7f0000000440)={0x2020}, 0x2020) socket$nl_generic(0x10, 0x3, 0x10) r7 = add_key$user(&(0x7f00000003c0), &(0x7f0000000440), &(0x7f00000000c0), 0xc9, 0xfffffffffffffffd) keyctl$dh_compute(0x17, &(0x7f0000000200)={r7, r7, r7}, 0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000140)={'sha384-avx\x00'}}) keyctl$instantiate_iov(0x14, r4, 0x0, 0x0, r7) syz_genetlink_get_family_id$devlink(&(0x7f0000000880), 0xffffffffffffffff) r8 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r8, 0x10e, 0xc, &(0x7f0000000040)={0x8607}, 0x10) sendmsg$nl_generic(r8, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000140)={0x20, 0x16, 0x1, 0x0, 0x0, {0xa}, [@typed={0x4}, @typed={0x8, 0x5, 0x0, 0x0, @uid=0xee01}]}, 0x20}}, 0x0) 43m43.672536236s ago: executing program 4 (id=34): bpf$PROG_LOAD(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x3, &(0x7f0000000240)=ANY=[@ANYBLOB="18000000000700000000000000000000950000"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f00000006c0)='sched_switch\x00', r3}, 0x10) r4 = socket$inet_tcp(0x2, 0x1, 0x0) r5 = socket(0x1e, 0x4, 0x0) r6 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r6, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc}, 0x10) setsockopt$packet_tx_ring(r5, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc, 0x0, 0x2}, 0x10) sendmmsg(r5, &(0x7f00000030c0)=[{{0x0, 0xa9cc7003, &(0x7f0000000400)=[{&(0x7f00000000c0)="ee", 0x101d0}], 0x1}}], 0x400000000000181, 0x9200000000000000) sendmsg$tipc(r6, &(0x7f0000000640)={0x0, 0x0, 0x0}, 0x0) close_range(r4, 0xffffffffffffffff, 0x0) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000180)={0xffffffffffffffff, 0xe0, &(0x7f00000004c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000300), 0x0, 0xb8, 0x0, 0x0, 0x10, &(0x7f0000000380), 0x0, 0x0, 0x68, 0x8, 0x8, &(0x7f0000000480)}}, 0x10) sendmsg$nl_generic(0xffffffffffffffff, 0x0, 0x0) 43m39.360673237s ago: executing program 4 (id=37): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x3) sched_setaffinity(0x0, 0x8, &(0x7f00000000c0)=0xa) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) syz_init_net_socket$ax25(0x3, 0x5, 0x0) ptrace$ARCH_SHSTK_DISABLE(0x1e, 0x0, 0x0, 0x5002) fsconfig$FSCONFIG_CMD_CREATE(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) r1 = fsmount(0xffffffffffffffff, 0x0, 0x0) fsconfig$FSCONFIG_SET_FLAG(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) accept$nfc_llcp(r1, &(0x7f0000000200), &(0x7f0000000280)=0x60) socket$alg(0x26, 0x5, 0x0) madvise(&(0x7f0000c00000/0x400000)=nil, 0x400000, 0xe) r2 = userfaultfd(0x801) ioctl$UFFDIO_API(r2, 0xc018aa3f, 0x0) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000000)={'\x00', 0x5}) ioctl$TUNSETPERSIST(r3, 0x400454c9, 0x1) ioctl$TUNGETIFF(r3, 0x400454cc, 0x0) ioctl$UFFDIO_WRITEPROTECT(r2, 0xc018aa06, &(0x7f0000000140)={{&(0x7f0000400000/0xc00000)=nil, 0xc00000}, 0x1}) syz_io_uring_setup(0x48ba, &(0x7f0000000000)={0x0, 0xfffffffc, 0x1000, 0xfffffffb, 0x333}, &(0x7f00000002c0), &(0x7f0000ff4000)) 43m35.436492508s ago: executing program 4 (id=44): socket$nl_xfrm(0x10, 0x3, 0x6) r0 = socket(0x2000000000000021, 0x2, 0x10000000000002) connect$rxrpc(r0, &(0x7f0000000140)=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x8, @multicast2}}, 0x24) sendmmsg(r0, &(0x7f0000000180)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="18000000000000001001000001"], 0x18, 0xe000}, 0x5}], 0x1, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x43, &(0x7f0000000040)=0x2) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) recvmmsg(r0, &(0x7f0000000d00), 0xf000, 0x10002, 0x0) 43m20.222073899s ago: executing program 32 (id=44): socket$nl_xfrm(0x10, 0x3, 0x6) r0 = socket(0x2000000000000021, 0x2, 0x10000000000002) connect$rxrpc(r0, &(0x7f0000000140)=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x8, @multicast2}}, 0x24) sendmmsg(r0, &(0x7f0000000180)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="18000000000000001001000001"], 0x18, 0xe000}, 0x5}], 0x1, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x43, &(0x7f0000000040)=0x2) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) recvmmsg(r0, &(0x7f0000000d00), 0xf000, 0x10002, 0x0) 25m48.857285081s ago: executing program 2 (id=2967): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x2, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket$unix(0x1, 0x1, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000001c0)=@newqdisc={0x2c, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {0x0, 0xb}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_mq={0x7}]}, 0x2c}, 0x1, 0x0, 0x0, 0x20000001}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000280)=@newqdisc={0x24, 0x24, 0x4ee4e6a52ff56541, 0x70b926, 0x80000, {0x0, 0x0, 0x0, r3, {}, {0x4, 0xb}, {0xd, 0xb}}}, 0x24}, 0x1, 0x0, 0x0, 0x2000c061}, 0x4008000) 25m41.349093568s ago: executing program 2 (id=2974): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000003c0)={0x18, 0x10, 0x0, &(0x7f0000000000)='GPL\x00', 0x8, 0xba, &(0x7f0000000140)=""/186, 0x41000, 0x3, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000340), 0x10, 0x37, @void, @value}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0xe1}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x6) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x2000000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) ioctl$SNDCTL_DSP_SETTRIGGER(0xffffffffffffffff, 0x40045010, &(0x7f00000000c0)=0x6) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0xfffffffffffffc33, &(0x7f0000000280)=0x2) r4 = syz_open_dev$cec(&(0x7f00000000c0), 0x0, 0x82002) ioctl$CEC_S_MODE(r4, 0x40046109, &(0x7f0000000140)=0x12) close(r4) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) lstat(&(0x7f00000002c0)='./file0\x00', &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, 0x0}) sendmsg$nl_netfilter(r5, 0x0, 0x64004801) getresgid(&(0x7f0000001ec0)=0x0, &(0x7f0000001f00), &(0x7f0000001f40)) sendmmsg$unix(r2, &(0x7f0000002040)=[{{&(0x7f0000000340)=@file={0x1, './file0\x00'}, 0x6e, &(0x7f0000000240)=[{&(0x7f0000000100)="0ade537c877c680d2591ceec481eb458eadf92f8543c0a331010f3aea677c5bf0f4e3405a94e7fef0216555befd33ae2649c663114b72c", 0x37}, {&(0x7f0000000680)="77289da1fc0bc5c6dfd02bfecd29a7a033feb10e634259a1f39d9ca60cd99b52b071f244c194d0948dd4d4bc183a4fb02836266288bcfdceff3dacc1d4d8d81222ffccb0131889e57ae8b030e46846e4e29de739f0131d5ce64c0a4e2dce5ceb419fc8cce42c16f700e71a9fc6a1ec138663e5171360340184cdc5b815934bfe1163b5d8c49ed089f86e72aeca699a7ac38ea422331aa3afcb2351a782acd2c354775270df88e505d595b8951e3ad38c03cb42c0f77739be5260d65466beddd9d8622a97cdb5c2d8938e5c7c5d9c15169f7b0fbfe4f295329bd141b7116519fe2790fb695bff0aba", 0xe8}, {&(0x7f0000000580)="bed436d8e11fc03a173379311820492c97faf9487f5cf46dfa397a8110e6dcc4b62d94562f46cef09aa3c57acf842d717b0064b850eb8bf5687e4e3b11ba70a00a5c0580c001683691f5879b7f4bea8f7e75f29a2db9b83baa0feafef3c1a2399b9659cc4c00ea202447a839cdeb41f98f07aee838de2483778aae5a716d8546710d44667303bf2ab3dede4646ed17db24a067dffe1ea66ad40ddc092184c2176e99332a84c0ae53aebd42e9debfce7aea", 0xb1}, {&(0x7f0000000780)="3e22d675adbc744b70717a4569830f1a5aabc33ab4226b5078e692a3eaa773f62e1b20c6c038c2c296f62b2d0800ac4063dde46713ad711b22d77dc2480405d9704989cb6b7b1ff1a62faa7fa3401d819e4e45b687dc9a37c8e65c77f55ea8f17cdcb5d65d724252c62bc0e7380c414eabd70f2a380cb07516075b463fed7d5e5f369d59bed2aea4ce4c0ba9d98925f6873c33a9aac1682dce090facab3d6c15746fa8e0fb51", 0xa6}, {&(0x7f0000000840)="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", 0x1000}], 0x5, &(0x7f00000018c0)=[@rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, r2, 0xffffffffffffffff]}}, @rights={{0x10, 0x1, 0x1, [r2]}}, @rights={{0x2c, 0x1, 0x1, [r3, r2, r2, r2, r3, r3, r0, r2]}}, @rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, r0, r3]}}], 0x6c, 0x4000000}}, {{&(0x7f0000001940)=@file={0x1, './file0\x00'}, 0x6e, &(0x7f0000001a80)=[{&(0x7f00000019c0)="23f66711220fa455fc164a111839420fca05a569e09d9929fa3605d6414699e2946378ebe56901f4fb3990936b8f8076920fcca4303fc634e52554fa571dde04ec18037dff41d8e464d7d377ef93e3488e617bf7aabc35d338b2b01541da5648c4d7227aa83c4c9b6b0b2ad6892953ecbf90788c95324d28731682b44b9368ea799d90279ae29214c7", 0x89}], 0x1, &(0x7f0000001b00)=[@rights={{0x30, 0x1, 0x1, [r3, 0xffffffffffffffff, 0xffffffffffffffff, r0, r3, r0, r0, r3, r3]}}, @rights={{0x24, 0x1, 0x1, [r2, r2, r0, r2, r2, r3]}}], 0x54, 0x48041}}, {{&(0x7f0000001b80)=@file={0x1, './file0\x00'}, 0x6e, &(0x7f0000001e00)=[{&(0x7f0000001c00)="1d1338d0e6f40f7ca26639b8cc8b0989b78dae6a7fc7b8e23cd04e5b59285ac6794ea3416c1b28136bcb8275543dfa92689d8d8bdebf10b0580e43102c2aefce51eadf616d97aec76dc5cfadccf46fa6526b0679cc22be55f6395dce2de6160bf2f29ca06bb021a3902d16ccfb278d78b2710c5a5607f5e9b4f95dda11b2c90da63a742cd59e7a6aa089be072c76ed4f6379fe012cfd9655f56f6d6ac524f1819aabd9ed42ed22e07f593f0a6eb05a85e158efdbcf84ce83bee495ff81fa3ebe8e74319dd811e3dbb6930d8364e39b518d92a9bd", 0xd4}, {&(0x7f0000001d00)="2237520915e2916c41b46fd766ad0ffbbd393e3f156bee9b1cd72b0f416cbc2a7de9220d15440932b3a39aca88834f4572ef015b0a24cb5155a480", 0x3b}, {&(0x7f0000001d40)}, {&(0x7f0000001d80)="19573ad56427de9e640bd3550ddc7abb069733432ba9f7acdb1e37b789f1e1151f22c519cdddb5f6d2d3b90e1df325ebecd83e4684f44b195cd9393f4223e6eb58", 0x41}], 0x4, &(0x7f0000001f80)=ANY=[@ANYBLOB="240000000100000001000000", @ANYRES32=r3, @ANYRES32=r0, @ANYRES32=r3, @ANYRES32=r2, @ANYRES32=r2, @ANYRES32=r3, @ANYBLOB='\x00'/12, @ANYRES32=r1, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="300000000100000001000000", @ANYRES32=r2, @ANYRES32=r3, @ANYRES32=r3, @ANYRES32=r3, @ANYRES32, @ANYRES32, @ANYRES32=r3, @ANYRES32=r3, @ANYRES32=r3, @ANYBLOB="180000000100000002000000", @ANYRES32=r1, @ANYRES32=r6, @ANYRES32=r7], 0x84, 0x1}}], 0x3, 0x884) preadv2(0xffffffffffffffff, 0x0, 0x0, 0x2b, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) landlock_create_ruleset(&(0x7f0000000180)={0x100}, 0x18, 0x0) r8 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x18, 0xb, &(0x7f0000000040)=ANY=[@ANYBLOB="18000000004f4b000000000000000000180100002020702000000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b7030000fdffffff850000007100000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r8}, 0x10) execveat(0xffffffffffffffff, &(0x7f0000000000)='\x00', 0x0, 0x0, 0x1000) r9 = openat$6lowpan_control(0xffffffffffffff9c, &(0x7f0000000500), 0x2, 0x0) write$6lowpan_control(r9, &(0x7f0000000180)='connect aa:aa:aa:aa:aa:11 0', 0x1b) 25m38.610795111s ago: executing program 2 (id=2977): r0 = socket$netlink(0x10, 0x3, 0x0) syz_emit_ethernet(0x0, 0x0, 0x0) r1 = dup(0xffffffffffffffff) bpf$MAP_CREATE(0x0, 0x0, 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f0000001c40)=ANY=[@ANYBLOB="620af8ff0c200021bfa100000000000007010000f8ffffffb702000003000000bd120000000000008500000006000000b70000000000000095000000000000003faf4f1e7f2aa3d9b18ed81c0c869b51ec6c0af4e0e4a9446c7670568982b4e020f698393aa0f3881f9c24aa56f15199fad0093c59d66b5ece9f36c70d0f13905ea23c22624c9f87f9793f50bb546040677b0c5077da80fb982c1e9400e693146cea484a415b76966118b64f751a0f241b072e90080008002d75593a286cecc93e64c227c95aa0b784625704f07a72c234664c0af9360a1f7a5e6b607130c89f18c0c1089d8b853289e01aa27ae8b09e00e79ab20b0b8e1148f49faf2ad0000000000000006fa03c6468972089b302d7bf6023cdcedb5e0125ebbc08dee510cb2364149215108333719acd97cfa107d40224edc5465a932b77e74e802a0d42bc6099ad2300000080006ef6c1ff0900000000000010c63a949e8b7955394ffa82b8e942c89112f4ab87b1bfeda7be586602d985430cea0162ab3fcf4591c926abfb0767192302000000b0eea24492a660583eecb42cbcd3de3a83209da17a0faf60fd6ad9b97aa5fa68480366c9c6fd6fa5043aa3926b81e3b59c95c25a573dc2ed0300000000000000af99431412fd134a996382a1a04d5bb924cfe5f3185418d605ffff9c4d2ec7c32f2095e63c80aff9fa740b5b7632f32030916f89c6dad7603f2ba2a790d62d6faec2fed44da4928b30142ba11de6c5d50b83bae613402216b5054d1e7c13b1355d6f4a8245ffa4997da9c77af4c0eb97fca585ec6bf58351d564beb6d952aab9c70764b0a8a7583c90b3433b809bdb9fbd48bc873495cbff8a326eea31ae4e0f7505ebf6c9d13330ca005ace1a84521f14008c9b476fccbd6c712016219848624b87cec2dbe98223a0eb4fa39f6b5c02e6d6d90756ff57902a8f57000000009700cf0b4b8bc2294133000000000000000000030000000000000000000000000010008bc0d9559711e6e8861c46495ba585a4b2d02edc3e28dd271c896249ed85b980680b00002b435ac15fc0288d9b2a169cdcacc413038dafb7a2c8cb482bac0ac502d9ba96ffffff7f0000100000006da21b40216e14ba2d6ad5656bfff17addaedab25b30002abbba7fa725f38400be7c1f001b2cd317902f19e385be9e48dccff729433282830689da6b53b263339863297771429d120000003341bf4abacac95900fca0493cf29b33dcc9ffffffffffffffd39fec2271ff01589646efd1cf870cd7bb2366fde41f94290c2a5ff870ce41fd3467decb05cfd9fcb32c8ed1dbd9d10a64c1083d5e71b5565b1768ee58969c4159b364a4fd7013f34db173a4fdacf15229df17bcad70fb4021428ce970275d13b78100788f11f76161d46ea3ab60fa4d30dc94ef241875f3b4ce0232fcea69c271d7fa29822aea68a660e717a04becff0f719197724f4fce1093b62d7e8c7123d8ec571be54c72d978cf906df0042e36acd37d7f9e119f2c06f815312e0cfe222a06f56dd022c074eb8a322fb0bf47c0a8d154b405c37feaf3dd95f6ef2ae582786105c7df8be5877050c91301bb997316dbf17866fb84d4173731efe895ff2e1c5560926e90109b598502d3e959efc71f665c4d75cf2458e3546c1c776da64fb5abee0acfd235f2f4632c9062ece84c99a061887a20639b41c8c12ee86c50804042b3fb5aac518a75f9e7d7101d5e186c489b3a06fb99e0aa7f23a054de2f4d92d6bd72ee2c9fdc75aaaf1e3e483b4ad05573af40326993947d9a631bcbf3583784acbda216550d7aec6b79e30cbd128f54c2d3335457acf37331766e472391e358c3b377327ac9ecc34f24c9ae153ec60ac0694dc55bff9f5f45f90400000000000000d6b2c5ea1393fdf24285bf16b99c9cc0ad1857216f1a985f369191ae954febb3df464bfe0f7f3ee9afe7befb89d2777399f5874c553aeb3729cffe86e66964ae09bb6d163118e4cbe024fd4500f8ff0700000000cc9d8046c216c1f895778cb25122a2a9f9b444aeadea2a40da8daccf080842a486721737390cbf3a74cb2003016f1514216bdf57d2a40d40b51ab63e96ec8485b3b8a8c9ae3d14f93100c2e0893862eef552fcde2981f48c482bde8a168c3f5db2fea6f26e4a4304e50c349f4f9ecee27defc93871c5f99b355b72d538ba4978ea8e4aa37014191e10096e7e60fc3541a2c905a1a95e9571bf38ae1981c4238ecaee6f75cd0a6881bd1517a8250ddc8674152f94e3a409e2a3bce109b60000000000000000d6d5210d7503000000a87a27602b81f76386f1535bef1497f92186086e29c6bc5a1fad6ec9a31137abf9a404abde7750898b1bd627e873f8703be867a28f09c5877fc2355ecdc9c30dcb2d70d1ab57075228a9f46ed9bd1f08fb8191bbab2dc51de3a61f0868afc4294859323e6c257a45319f18101288d139bd3da20fed05a8fe64680b0a3fc22dd70400000000946912d6c98cd1a9fbe1e7d58c08acaf30235b918a31d2eca55f74a23641f61f2d5b308cf0d031b0009556237badf4e7965bbe2777e808fcba821aa8e8c5c39609ff854352cb4900000000000000000000000000c1fee30a3f7a85d1b29e58c77685efc0ceb1c8e5729c66418d169fc03aa188546b3ad2a182068e1e3a0e2505bc7f41019645466a53f1c96e0d4b3bc19faa5449209b083dbd334b47f067bbab40743b2a42010082008df75cf43f8ecc8d3726602111b40e761fd21081920382f14d12ca3c3431ee97471c7868dcda7eaa69eb7f7f80572fdd11bb1d0d1280fbc22bf73468788df51710d7d31c632fc5ed1762eb0b428ee751c47d8e894f745a868404a0bf35f0121008b722b1eaa6aedfa1bf2e7ccb2d61d5d7226bbd9ccd628ab84875f2c50ba891cea592b0430a537a395dc73bda367bf12cb7d81691a5fe8c47be395656a297e9df0e71f96756ea5cce7daac4be290159f6bcd75f0dda9de5532e71ae9e48b0ed0254a83100000000f6fbb869604d51a36a54c832e45b2569dc0d90b075225fde44c4e0973171ad47d6b0fdf9743af932cd6db49a47613808bad959710300000000000000832d0a45fa4242e24c7e800003c9e8095e02985f28e678f66422436f949e2ab8f162d7e3f855e378f4a1f40b0c6fb2d4b205a800b6d713acebc5b014e61a543a5a194f9ac18d76b5440e3b1a569e7397f6cafa86966d7ba19e720413267a6ccea9c439671d2c680f2753ca184eeeb843450368acb4383a01d25eb3d1e23e0f2645d1cdfa9fa410632f95a5f622f851c66ee7e30393cd7a4d67ff3a49c4f93c0984b5c2d4523497e4d64f95f08493564a1df87111c9bf3194fef97dcecc467ace45feeb685c5870d05f88a0f463db88d377442e1349acaf766218b54a9d624778e1c4e064c98e494198276eb2df7766411bef0ebb5000000000006065d635b0b7a00ee767221d8af9753387e0cd8d718f54a29df6eba3bd4c440e6e2172e3fcc01b8babb357b5c59217b80d0db3ba582814a604e4ef7a803e9ca7c85b35c9b93a9e0885e238b44ae1c2e64cce3b27083b8246829e64056000302bffff15405bd5f2eba20000000000000000000000000000000000009a9823fd8fbc5aa165099c5ed032b48ea12d8e0588dc52702e4084913a06d468d0928bad76d697e1f85ab030e788d38788ee5b5428d4a971cc97db9fd231088e570735ce129e7e77fc2777692664a1488fd8d6dff4dad618fd54f529d4555c6507009ee69dd1bc55258789b24052137e9637f3efbab71720f88cf573fe0e5239c000be2733c49546f6e8a9175ec6f14dbf72cac91643b2fd99c29eca28a3c2e60d5e5b8795fae16a7c3ea57e728eca35eaf0155a39f97580e079175426c088a0208040982a0000000000000000000000000051ceaaf0159fe61f2eade7603d0a7a56fb09cd119ac06adb6597155ae47846892bb423c024d8cbe9240b71ec6dc2124d3a19e2d714b273d95d1d3aa737cb04a33615ff2a730e51067d5d675d7122361c37c61a43b5afd865b60d4cae891b73220f17d25985a7f76834995e53a93a1c7b9eef267df691ca983a0b15bda7f6c5c1ca7aa50265a3089a1ebf0734c9b07e8951ff023263ad5aed8cfb49b49e128c697724c057d22c5df5aef27ce3db11d5ad5527d149d076e1a87e2df27c0cb8a67ad026bf953e88f10447e125c2c0f1aebee1f3390a9e3ddad4e2a6e0f6e4569fdefa19e870e04acf9493b963f98e23cfc665e4f465fa3f801e1957c399e45f61d3459b1c606204368bb931345af2823c487d2fd99db6ea6e008e7ffa06ca861551189d155bd077a79fe2c7e961352e56824f727d21d41eae78bfec4a2d7a7edbc8ef958c5ea599f7c25bf71c2340558aa12fdd24a88aaad5921aee7dae6a2f3009d9cb43ab4898d0f0aa565431b6abe585d75db04d1c9ba0b9de4ae8b0d3132bc6810cc9a693979f55174a72e1df9fdef35bc470f9e6e591982757f45c52c645d891bf63bb21fb66926ebe1a8525611fc3e8bb8795c36dc2a86b5ab46ff33cc74f61751b2dae92676db85c8d0c721b7ea4544bf51c95c86fcac1f434d09d1ee4928aafe23de66fed972e0dddfb33f64e48701b049239e7f552d816441d11c4c2647c014462344359198d97c4b6e9ed31ca18987b64de079b2bed641e8a92f13ca70844c65cb423d01950b0ebf44bd28e09c05d9ae5dd689fb880fb18d042219f5ac60c3a03b085abf3e8e3efc842a8d328733461f04c99607061c65ed14c61322a5ac2d371a95b8ad867857ed13a4fa4ae033a09673866cd77f4bcdaaa05207166b19a8758d8855400d8c6a7242dc207251e8797eca24ea4f487663e60f2f5e1f1424958fd148f846830e88a42d9a0e06da200481cde8bf475bc3e1fe9c0b4a4a268921738938aa9f3cb3811ac87c54c8ebc8bcfb4613cc3a997ff1579edbd4ade8020e3ad001b072b1a751b588ac4639f35a58e00a50c0270608c7a7f10132b1c25b9ea81232fbef665f6212f875b2a00"/3590], &(0x7f0000000380)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x2e) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000540)='rcu_utilization\x00', r2}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x6) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x0, 0x0) r3 = getpid() sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f0000000380)=@abs, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r6 = socket$l2tp6(0xa, 0x2, 0x73) bind$l2tp6(r6, &(0x7f0000000000)={0xa, 0x0, 0x0, @empty}, 0x20) connect$l2tp6(r6, &(0x7f0000000f40)={0xa, 0x0, 0x0, @empty}, 0x20) sendmmsg$inet6(r6, &(0x7f0000000ac0)=[{{&(0x7f0000000180)={0xa, 0x0, 0x0, @empty}, 0x18, 0x0, 0x0, 0x0, 0x0, 0xe0}}], 0x17fd147c801ae9ab, 0x0) getsockname$packet(r1, 0x0, 0x0) sendmsg$nl_route(r0, 0x0, 0x0) r7 = syz_open_dev$vcsn(&(0x7f0000000000), 0x3, 0x400080) bind$xdp(r7, &(0x7f0000000080)={0x2c, 0x1, 0x0, 0x30}, 0x10) 25m36.488460059s ago: executing program 2 (id=2978): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r1 = dup(r0) mkdir(&(0x7f00000020c0)='./file0\x00', 0x0) mount$tmpfs(0x0, &(0x7f0000000280)='./file0\x00', 0x0, 0x0, 0x0) mount$tmpfs(0x0, &(0x7f00000000c0)='./file0\x00', 0x0, 0x2a00a9, 0x0) write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c) r2 = syz_io_uring_setup(0x4e1, &(0x7f0000000380)={0x0, 0x1ffffa, 0x10100, 0x0, 0x0, 0x0, r1}, 0x0, &(0x7f00000001c0)=0x0) io_uring_enter(r1, 0x47f9, 0x0, 0x0, 0x0, 0x0) syz_io_uring_submit(0x0, r3, &(0x7f0000000040)=@IORING_OP_POLL_ADD={0x6, 0x2, 0x0, @fd_index=0x4, 0x0, 0x0, 0x0, {}, 0x1}) io_uring_enter(r2, 0x708, 0x41e3, 0x0, 0x0, 0x0) pipe(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) r5 = syz_open_dev$sg(&(0x7f00000060c0), 0x0, 0x8002) ioctl$SG_SET_FORCE_PACK_ID(r5, 0x227b, &(0x7f00000000c0)=0x1) r6 = fcntl$dupfd(r5, 0x0, r5) read$FUSE(r6, &(0x7f0000000700)={0x2020}, 0x2020) write$FUSE_INIT(r6, &(0x7f00000004c0)={0x50, 0x0, 0x0, {0x7, 0x29, 0x4c0, 0x140, 0x7, 0x9d, 0x2, 0x6, 0x0, 0x0, 0x4, 0x8}}, 0x50) splice(r4, 0x0, 0xffffffffffffffff, 0x0, 0x4ffe6, 0x0) 25m32.542920381s ago: executing program 2 (id=2983): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x2, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket$unix(0x1, 0x1, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000001c0)=@newqdisc={0x2c, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {0x0, 0xb}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_mq={0x7}]}, 0x2c}, 0x1, 0x0, 0x0, 0x20000001}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000280)=@newqdisc={0x24, 0x24, 0x4ee4e6a52ff56541, 0x70b926, 0x80000, {0x0, 0x0, 0x0, r3, {}, {0x4, 0xb}, {0xd, 0xb}}}, 0x24}, 0x1, 0x0, 0x0, 0x2000c061}, 0x4008000) 25m30.80989058s ago: executing program 2 (id=2987): socket$nl_route(0x10, 0x3, 0x0) r0 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000c80)={'lo\x00'}) socket$inet6_udplite(0xa, 0x2, 0x88) mkdir(&(0x7f00000002c0)='./file0\x00', 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x48241, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) socket$kcm(0x2, 0xa, 0x2) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, 0x0) recvmsg(r0, &(0x7f0000000180)={&(0x7f0000000200)=@pptp={0x18, 0x2, {0x0, @initdev}}, 0x80, &(0x7f0000000a40)=[{&(0x7f0000000500)=""/129, 0x81}, {&(0x7f00000005c0)=""/227, 0xe3}, {&(0x7f0000000100)=""/42, 0x2a}, {&(0x7f00000006c0)=""/225, 0xe1}, {&(0x7f0000001380)=""/4096, 0x1000}, {&(0x7f00000007c0)=""/243, 0xf3}, {&(0x7f00000008c0)=""/92, 0x5c}, {&(0x7f0000002380)=""/4096, 0x1000}, {&(0x7f0000000940)=""/122, 0x7a}, {&(0x7f00000009c0)=""/70, 0x46}], 0xa, &(0x7f0000000ac0)=""/102, 0x66}, 0x0) r2 = add_key(&(0x7f0000000000)='big_key\x00', &(0x7f0000000280)={'syz', 0x1}, &(0x7f00000002c0)="1d", 0xfe3a, 0xfffffffffffffffe) add_key$user(&(0x7f00000004c0), 0x0, 0x0, 0x0, r2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r3 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r4 = dup(r3) write$6lowpan_enable(r4, &(0x7f0000000000)='0', 0xfffffd2c) mount(0x0, &(0x7f00000001c0)='./file0\x00', &(0x7f00000000c0)='devtmpfs\x00', 0x0, 0x0) r5 = socket$inet6_mptcp(0xa, 0x1, 0x106) listen(r5, 0x0) r6 = socket$netlink(0x10, 0x3, 0x8000000004) writev(r6, 0x0, 0x0) msgget$private(0x0, 0x0) r7 = openat$procfs(0xffffffffffffff9c, &(0x7f00000004c0)='/proc/sysvipc/msg\x00', 0x0, 0x0) read$FUSE(r7, &(0x7f0000000600)={0x2020}, 0x2020) mount$overlay(0x0, &(0x7f0000001340)='./file0\x00', &(0x7f00000000c0), 0x0, &(0x7f00000003c0)={[{@lowerdir={'lowerdir', 0x3d, './file0'}, 0x3a}], [], 0x2f}) r8 = openat2$dir(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000080), 0x18) getdents64(r8, &(0x7f0000000300)=""/154, 0x9a) openat$vicodec0(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) 25m13.745685786s ago: executing program 33 (id=2987): socket$nl_route(0x10, 0x3, 0x0) r0 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000c80)={'lo\x00'}) socket$inet6_udplite(0xa, 0x2, 0x88) mkdir(&(0x7f00000002c0)='./file0\x00', 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x48241, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) socket$kcm(0x2, 0xa, 0x2) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, 0x0) recvmsg(r0, &(0x7f0000000180)={&(0x7f0000000200)=@pptp={0x18, 0x2, {0x0, @initdev}}, 0x80, &(0x7f0000000a40)=[{&(0x7f0000000500)=""/129, 0x81}, {&(0x7f00000005c0)=""/227, 0xe3}, {&(0x7f0000000100)=""/42, 0x2a}, {&(0x7f00000006c0)=""/225, 0xe1}, {&(0x7f0000001380)=""/4096, 0x1000}, {&(0x7f00000007c0)=""/243, 0xf3}, {&(0x7f00000008c0)=""/92, 0x5c}, {&(0x7f0000002380)=""/4096, 0x1000}, {&(0x7f0000000940)=""/122, 0x7a}, {&(0x7f00000009c0)=""/70, 0x46}], 0xa, &(0x7f0000000ac0)=""/102, 0x66}, 0x0) r2 = add_key(&(0x7f0000000000)='big_key\x00', &(0x7f0000000280)={'syz', 0x1}, &(0x7f00000002c0)="1d", 0xfe3a, 0xfffffffffffffffe) add_key$user(&(0x7f00000004c0), 0x0, 0x0, 0x0, r2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r3 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r4 = dup(r3) write$6lowpan_enable(r4, &(0x7f0000000000)='0', 0xfffffd2c) mount(0x0, &(0x7f00000001c0)='./file0\x00', &(0x7f00000000c0)='devtmpfs\x00', 0x0, 0x0) r5 = socket$inet6_mptcp(0xa, 0x1, 0x106) listen(r5, 0x0) r6 = socket$netlink(0x10, 0x3, 0x8000000004) writev(r6, 0x0, 0x0) msgget$private(0x0, 0x0) r7 = openat$procfs(0xffffffffffffff9c, &(0x7f00000004c0)='/proc/sysvipc/msg\x00', 0x0, 0x0) read$FUSE(r7, &(0x7f0000000600)={0x2020}, 0x2020) mount$overlay(0x0, &(0x7f0000001340)='./file0\x00', &(0x7f00000000c0), 0x0, &(0x7f00000003c0)={[{@lowerdir={'lowerdir', 0x3d, './file0'}, 0x3a}], [], 0x2f}) r8 = openat2$dir(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000080), 0x18) getdents64(r8, &(0x7f0000000300)=""/154, 0x9a) openat$vicodec0(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) 37.944619896s ago: executing program 1 (id=5524): r0 = socket$netlink(0x10, 0x3, 0x8000000004) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) write$FUSE_BMAP(0xffffffffffffffff, 0x0, 0x0) mount(&(0x7f0000000040)=@nbd={'/dev/nbd', 0x0}, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000080)='exfat\x00', 0x808001, 0x0) bpf$PROG_BIND_MAP(0xa, &(0x7f00000004c0), 0xc) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) r3 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r3}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x1, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) r4 = socket$l2tp(0x2, 0x2, 0x73) recvmmsg(r4, &(0x7f0000001380)=[{{&(0x7f0000000200)=@rxrpc=@in6={0x21, 0x0, 0x2, 0x1c, {0xa, 0x0, 0x0, @initdev}}, 0x80, &(0x7f0000000bc0)=[{&(0x7f0000000380)=""/204, 0xcc}, {&(0x7f00000005c0)=""/150, 0x96}, {&(0x7f0000000780)=""/137, 0x89}, {&(0x7f0000000840)=""/216, 0xd8}, {&(0x7f0000000a40)=""/129, 0x81}, {&(0x7f0000000b00)=""/150, 0x96}], 0x6}, 0x2}, {{&(0x7f0000000c40)=@x25={0x9, @remote}, 0x80, 0x0}, 0x1f}, {{&(0x7f0000000e80)=@rc, 0x80, 0x0}, 0xb}, {{0x0, 0x0, &(0x7f0000001340)=[{&(0x7f0000001200)=""/160, 0xa0}, {&(0x7f0000001300)}, {0x0}], 0x3}, 0x9}], 0x4, 0x12006, 0x0) r5 = socket(0x1e, 0x5, 0x0) accept4$inet6(r5, 0x0, 0x0, 0x0) connect$inet6(r1, &(0x7f0000000000)={0xa, 0x4001, 0x0, @dev={0xfe, 0x80, '\x00', 0x1b}, 0xd}, 0x1c) writev(r0, &(0x7f0000000140)=[{&(0x7f00000001c0)="580000001400192340834b80040d8c560a067f0202ff000000000000000058000b4824ca945f64009400ff0325010ebc000000000000008000f0fffeffe809005300fff5dd00000010000100060c10000000010000000000", 0x58}], 0x1) 36.13037578s ago: executing program 1 (id=5530): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_open_dev$video4linux(0x0, 0x5, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="170000000000000004000000ff"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000200)={0x3, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0xd, 0x0, 0x0, 0x0, 0x13, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x20, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r1}, 0x10) keyctl$instantiate_iov(0x14, 0x0, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r3 = dup(r2) write$6lowpan_enable(r3, &(0x7f0000000000)='0', 0xfffffd2c) r4 = userfaultfd(0x80001) ioctl$UFFDIO_API(r4, 0xc018aa3f, 0x0) ioctl$UFFDIO_REGISTER(r4, 0xc020aa00, 0x0) r5 = fanotify_init(0x40, 0x0) write$binfmt_aout(r5, 0x0, 0x0) madvise(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x19) ioctl$KDSKBENT(0xffffffffffffffff, 0x4b47, &(0x7f0000000200)={0x4, 0x3}) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000000)={'veth0_virt_wifi\x00', 0x0}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000100)=ANY=[@ANYRES32=r6, @ANYBLOB="800202000a0002"], 0x48}}, 0x0) sendmsg$NBD_CMD_RECONFIGURE(r0, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000600)={0x0, 0x14}}, 0x0) syz_genetlink_get_family_id$nfc(&(0x7f00000001c0), r0) r7 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000280), r0) sendmsg$NL802154_CMD_DEL_SEC_LEVEL(r0, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000340)=ANY=[@ANYBLOB='d\x00\x00\x00', @ANYRES16=r7, @ANYRES32, @ANYBLOB="24002d801a0001"], 0x64}}, 0x0) syz_genetlink_get_family_id$ieee802154(&(0x7f0000000180), r0) 34.415301117s ago: executing program 1 (id=5535): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) close(r0) ioctl$vim2m_VIDIOC_S_FMT(0xffffffffffffffff, 0xc0d05605, &(0x7f0000000140)={0x2, @pix_mp={0x0, 0x3, 0x34325258, 0x0, 0xa, [{}, {0x10}, {0x1}, {}, {}, {0x0, 0x9}, {0xffffeffc}, {0x400000}], 0x0, 0x4}}) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) setsockopt$packet_fanout(0xffffffffffffffff, 0x107, 0x12, 0x0, 0x0) r2 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000200), 0x2, 0x0) eventfd(0xfc69) r3 = fsopen(&(0x7f0000000140)='vfat\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r3, 0x1, &(0x7f0000000080)='iocharset', &(0x7f00000000c0)='io#harset', 0x0) fsconfig$FSCONFIG_SET_STRING(r3, 0x1, &(0x7f0000001100)='iocharset', &(0x7f0000001140)='\xe0^@&&}\'\x00', 0x0) ioctl$VHOST_SET_VRING_ADDR(r2, 0x4028af11, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, 0x1000}) ioctl$VHOST_SET_MEM_TABLE(r2, 0x4008af03, 0x0) unshare(0x44040000) r4 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000580)=ANY=[@ANYRES16, @ANYRES32=r1, @ANYBLOB='\x00\b\x00'/12], 0x48) bpf$PROG_LOAD(0x5, 0x0, 0x0) ioctl$KVM_SET_MSRS(0xffffffffffffffff, 0x4008ae89, &(0x7f00000000c0)=ANY=[@ANYRES64=r4, @ANYRESDEC]) ioctl$SNDRV_RAWMIDI_IOCTL_INFO(0xffffffffffffffff, 0x40045731, &(0x7f0000000180)) r5 = memfd_create(&(0x7f0000000200)='\x103q}2\x9a\xce\xaf\x03\xdfy[\xd9\xffR8\xf4\x1c\bi\xe4^\xd5\xfd\xa9\r\xac7A\x94\xa0\x00\x00\x00\x90+\xd6\x05\r\x84\x87\x1c\b\xdb\xe2\x00\x00A\x90m\xb6&\xd0\x9d\x00\x00\xc5\xb8,\f\xd4s\xb2\x99/\xc0\x9a\xf2O\xdb\x00\x00\x00\x00\x00\x00\r\x1b\xd3\xff<\x83z\x80\x8fQ|\xf5d\x10\x10\xd7\x01M\x7fML\x18\'\x1a<\xfee7{l\x16}\xa0I\x7f\xb5)l\xbb\x02\xfa\xb7\xb6\xa0]\xda8\xe0~\x1c \x91\t\x8b\xbd\x1f\xb3834d1i\x9b\x94\xa6\\\x0e\xe2\xfa\xe5!\xd3\xcf\xfc\xce\xba\xe2\x9f\x05xgL5\x14Y+\xb3\x1axi)<\xf7\x98\xc1\xba\xf4|\xe7|\xc4\xd7\x03\x00\x00\x00\x04D\x15E^7%8\x94y\x98\xf0l\xa0\'Q%\xd4\xda\xee\x81}\xcc\xfd\xa2\xe3M~x\x96\xe3]\xd70\xa2\x17\xca\xde\x1b\xaa\xe0l\xfc\x85\x8fc\x1c{|e\x8bs\xb0\x85E\xce;p)\xf8\xa6\xaa&QC4V\x81\x04\xcf\xd2\x81\xdc\xdf\xd7<\x9f\x93\x8bX\xd4\xea\xb2\xff\b\x92\xc7\x00\xef\xff\x00\x93\x1f\x92\xa7dcY\x9c\x9e9O-\xfcF\xbb\xbd{:IR\xea\xd8$\xe2\xa0\xc2\x8b\x1a\xead\xb8\xe1:6\x15M\x1d\xdak\x8c\x909\xd8\xb3\x02\xe0\x04\x9c\xc2\x06|\xf0\x0f\xa6Y&r\x9b\xc7\x1d\xe7jDf\x87@\x8fg\x15RJwe\xe2\xdcunu\xff`\xa40\xce\xffB%\xe4k\xff\x8d\x06\x0e\x89\xd9DC\x9fF\x9c[M=\xe0^\xa8\xed)\xe8Z\xe8\x99&\x87\x04\xa4\t\xaa\xd8\xd6\xd5pG\xcb\xc4\x8b\xf7\xb8#\xcb\xd8|\xa5\xa6S\x8b\x8cv\xb7)\x02k\xf3L\x03\xbb\xfa\xe1\\\xf1\x8cUj\xd5\xa5\x88GL\xe7_\xfd\x17C=G\x0f\xe9u\x1d\xfeg\xfex\xcd\xaa\xad\x906\xd0sy\xc6T\x93\xae\xd5r\xc8G\xc5\xfdS\xff\x04:`\x1e\xe3;l\xcd&\xd4\xf4\x8eum\x04\x00~\xfa\x05', 0x6) ftruncate(r5, 0x80079a0) mmap(&(0x7f0000200000/0x400000)=nil, 0x400000, 0xb, 0x2012, r5, 0x0) lseek(r5, 0x1003ff, 0x4) memfd_create(&(0x7f0000000000)='/dev/vhost-vsock\x00', 0x7) setsockopt$packet_fanout(0xffffffffffffffff, 0x107, 0x12, &(0x7f0000000040)={0x0, 0x6}, 0x4) 30.73325635s ago: executing program 1 (id=5539): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x6) r0 = getpid() sched_setscheduler(r0, 0x2, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file2\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0xffffffffffffff2b, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) r3 = openat$audio(0xffffffffffffff9c, &(0x7f0000000140), 0x40000000040201, 0x0) ioctl$SNDCTL_DSP_SPEED(r3, 0xc0045002, &(0x7f0000000000)=0x7fffffff) ioctl$SNDCTL_DSP_CHANNELS(r3, 0xc0045006, &(0x7f0000000040)=0x5c) ioctl$SNDCTL_DSP_GETODELAY(r3, 0x80045017, 0x0) ioctl$FS_IOC_GETFSMAP(0xffffffffffffffff, 0x40305839, 0x0) r4 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r4, &(0x7f0000000100)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @multicast2}}, 0x1c) getsockopt$inet6_mptcp_buf(r4, 0x11c, 0x4, &(0x7f0000000000)=""/152, 0x0) mknodat$loop(0xffffffffffffffff, &(0x7f0000000000)='./file1\x00', 0xc000, 0x0) 20.476904311s ago: executing program 1 (id=5556): r0 = socket$netlink(0x10, 0x3, 0x8000000004) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) write$FUSE_BMAP(0xffffffffffffffff, 0x0, 0x0) mount(&(0x7f0000000040)=@nbd={'/dev/nbd', 0x0}, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000080)='exfat\x00', 0x808001, 0x0) bpf$PROG_BIND_MAP(0xa, &(0x7f00000004c0), 0xc) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) r3 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r3}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x1, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) r4 = socket$l2tp(0x2, 0x2, 0x73) recvmmsg(r4, &(0x7f0000001380)=[{{&(0x7f0000000200)=@rxrpc=@in6={0x21, 0x0, 0x2, 0x1c, {0xa, 0x0, 0x0, @initdev}}, 0x80, &(0x7f0000000bc0)=[{&(0x7f0000000380)=""/204, 0xcc}, {&(0x7f00000005c0)=""/150, 0x96}, {&(0x7f0000000780)=""/137, 0x89}, {&(0x7f0000000840)=""/216, 0xd8}, {&(0x7f0000000a40)=""/129, 0x81}, {&(0x7f0000000b00)=""/150, 0x96}], 0x6}, 0x2}, {{&(0x7f0000000c40)=@x25={0x9, @remote}, 0x80, 0x0}, 0x1f}, {{&(0x7f0000000e80)=@rc, 0x80, 0x0}, 0xb}, {{0x0, 0x0, &(0x7f0000001340)=[{&(0x7f0000001200)=""/160, 0xa0}, {&(0x7f0000001300)}, {0x0}], 0x3}, 0x9}], 0x4, 0x12006, 0x0) r5 = socket(0x1e, 0x5, 0x0) accept4$inet6(r5, 0x0, 0x0, 0x0) connect$inet6(r1, &(0x7f0000000000)={0xa, 0x4001, 0x0, @dev={0xfe, 0x80, '\x00', 0x1b}, 0xd}, 0x1c) writev(r0, &(0x7f0000000140)=[{&(0x7f00000001c0)="580000001400192340834b80040d8c560a067f0202ff000000000000000058000b4824ca945f64009400ff0325010ebc000000000000008000f0fffeffe809005300fff5dd00000010000100060c10000000010000000000", 0x58}], 0x1) 15.493791541s ago: executing program 1 (id=5563): bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={0x0}, 0x18) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[], 0x50) write(0xffffffffffffffff, &(0x7f0000000000)='\"', 0x1) r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000100)={0x1f, 0xffff, 0x3}, 0x6) write$binfmt_misc(r0, &(0x7f0000000000), 0xd) 8.306728914s ago: executing program 5 (id=5585): r0 = openat$kvm(0x0, &(0x7f0000000200), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) r3 = openat$kvm(0x0, &(0x7f0000000040), 0x0, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) r6 = mmap$KVM_VCPU(&(0x7f0000009000/0x1000)=nil, 0x930, 0x280000f, 0x11, r5, 0x0) syz_memcpy_off$KVM_EXIT_HYPERCALL(r6, 0x20, &(0x7f00000001c0)="fb0149dd033be3ac2cc4a29ea6ab8031d1dfd92f00000000010000005a9610fbff67521ce16f8f1f449a7a835673312b54ebb2aa7fc869d22627e700", 0x0, 0x48) mmap$KVM_VCPU(&(0x7f0000000000/0xa000)=nil, 0x930, 0x1000001, 0x11, r5, 0x0) r7 = eventfd2(0x0, 0x0) close(r7) openat$kvm(0xffffff9c, &(0x7f0000000040), 0x30272, 0x0) write$eventfd(r7, &(0x7f0000000000), 0xfffffe1e) r8 = ioctl$KVM_GET_VCPU_MMAP_SIZE(r0, 0xae04) mmap$KVM_VCPU(&(0x7f0000ff9000/0x1000)=nil, r8, 0x800005, 0x11, r7, 0x0) openat$kvm(0xffffff9c, &(0x7f0000000040), 0x30272, 0x0) munmap(&(0x7f0000011000/0xc00000)=nil, 0xc00000) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) 7.713327848s ago: executing program 6 (id=5590): mmap$KVM_VCPU(&(0x7f0000000000/0x14000)=nil, 0x930, 0x2000001, 0x5c1fd1b65647af1, 0xffffffffffffffff, 0x0) mmap$KVM_VCPU(&(0x7f0000000000/0x14000)=nil, 0x930, 0x0, 0x5c1fd1b656592f1, 0xffffffffffffffff, 0x0) 7.611417685s ago: executing program 5 (id=5592): mmap$KVM_VCPU(&(0x7f0000007000/0x1000)=nil, 0x930, 0x1000002, 0x28031, 0xffffffffffffffff, 0x0) r0 = mmap$KVM_VCPU(&(0x7f0000000000/0x14000)=nil, 0x930, 0x3000003, 0x28031, 0xffffffffffffffff, 0x0) syz_memcpy_off$KVM_EXIT_HYPERCALL(r0, 0x20, &(0x7f0000000240)="fb4149dd033be3ac2cc4a22332fdaa8de0418df24200000000a6ab8031d1dfd92f0000000001ffffffff9610fbff77521ce10d8f6b69d22627e700", 0x0, 0xffffffffffffffca) openat$kvm(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = openat$kvm(0x0, &(0x7f0000000200), 0x0, 0x0) r4 = eventfd2(0x7, 0x1) ioctl$KVM_IOEVENTFD(r2, 0x4040ae79, &(0x7f0000000040)={0x10000, 0x0, 0x0, r4, 0x8}) ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) r5 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r6 = ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r6, 0x4020ae46, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x1000, &(0x7f0000ffd000/0x1000)=nil}) r7 = openat$kvm(0x0, &(0x7f0000000200), 0x0, 0x0) ioctl$KVM_CREATE_VM(r7, 0xae01, 0x0) r8 = ioctl$KVM_CREATE_VCPU(r6, 0xae41, 0x0) ioctl$KVM_REGISTER_COALESCED_MMIO(0xffffffffffffffff, 0x4010ae67, 0x0) ioctl$KVM_SET_SIGNAL_MASK(r8, 0x4004ae8b, &(0x7f0000000100)=ANY=[@ANYBLOB='\b']) ioctl$KVM_SET_DEVICE_ATTR(r8, 0x4018aee1, &(0x7f0000000040)) ioctl$KVM_RUN(r8, 0xae80, 0x0) ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) mmap$KVM_VCPU(&(0x7f0000000000/0x14000)=nil, 0x930, 0x0, 0x10, 0xffffffffffffffff, 0x0) ioctl$KVM_TRANSLATE(0xffffffffffffffff, 0xc018ae85, 0x0) r9 = mmap$KVM_VCPU(&(0x7f0000760000/0x1000)=nil, 0x930, 0x1000007, 0x28031, 0xffffffffffffffff, 0x0) syz_memcpy_off$KVM_EXIT_HYPERCALL(r9, 0x20, &(0x7f0000000240)="fb4149dd033be3ac2cc4a22332fdaa8de0418df24200000000a6ab8031d1dfd92f0000000001ffffffff9610fbff77521ce10d8f6b69d22627e700", 0x0, 0xffffffffffffffca) munmap(&(0x7f0000011000/0xc00000)=nil, 0xc00000) 7.498633553s ago: executing program 6 (id=5593): ioctl$KVM_IRQFD(0xffffffffffffffff, 0x4020ae76, &(0x7f0000000140)={0xffffffffffffffff, 0xd7, 0x80000001}) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_DEVICE(r1, 0xc00caee0, &(0x7f0000000140)={0x4, 0xffffffffffffffff, 0x1}) ioctl$KVM_SET_DEVICE_ATTR(r2, 0xc0189436, &(0x7f0000000040)=@attr_arm64={0x0, 0x0, 0x0, 0x0}) 7.128832631s ago: executing program 6 (id=5596): ioctl$KVM_IRQFD(0xffffffffffffffff, 0x4020ae76, &(0x7f0000000140)={0xffffffffffffffff, 0xc8}) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_DEVICE(r1, 0xc00caee0, &(0x7f0000000140)={0x4, 0xffffffffffffffff, 0x1}) r3 = openat$kvm(0x0, &(0x7f0000000040), 0x0, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) r6 = mmap$KVM_VCPU(&(0x7f0000009000/0x1000)=nil, 0x930, 0x280000f, 0x11, r5, 0x0) syz_memcpy_off$KVM_EXIT_HYPERCALL(r6, 0x20, &(0x7f00000001c0)="fb0149dd033be3ac2cc4a29ea6ab8031d1dfd92f00000000010000005a9610fbff67521ce16f8f1f449a7a835673312b54ebb2aa7fc869d22627e700", 0x0, 0x48) mmap$KVM_VCPU(&(0x7f0000000000/0xa000)=nil, 0x930, 0x1000001, 0x11, r5, 0x0) r7 = eventfd2(0x0, 0x0) close(r7) openat$kvm(0xffffff9c, &(0x7f0000000040), 0xa00f2, 0x0) write$eventfd(r7, &(0x7f0000000000)=0x6, 0x8) openat$kvm(0xffffff9c, &(0x7f0000000040), 0x100b31, 0x0) write$eventfd(r7, &(0x7f0000000000), 0xfffffe1e) r8 = mmap$KVM_VCPU(&(0x7f0000004000/0x4000)=nil, 0x930, 0x280000a, 0x11, r7, 0x0) syz_memcpy_off$KVM_EXIT_HYPERCALL(r8, 0x20, &(0x7f0000000240)="fb4149dd033be3ac2cc4a22332fdaa8de0418df24200000000a6ab8031d1dfd92f0000000001ffffffff9610fbff77521ce10d8f6b69d22627e700", 0x0, 0xffffffffffffffb2) mmap$KVM_VCPU(&(0x7f0000009000/0x1000)=nil, 0x930, 0x0, 0x30831, 0xffffffffffffffff, 0x0) r9 = openat$kvm(0x0, &(0x7f0000000200), 0x0, 0x0) r10 = ioctl$KVM_CREATE_VM(r9, 0xae01, 0x0) ioctl$KVM_IRQ_LINE_STATUS(r10, 0xc008ae67, &(0x7f0000000180)={0x6, 0x9}) openat$kvm(0x0, &(0x7f0000000040), 0x2cc803, 0x0) ioctl$KVM_CHECK_EXTENSION_VM(0xffffffffffffffff, 0xae03, 0xb2) ioctl$KVM_SET_USER_MEMORY_REGION(r10, 0x4020ae46, &(0x7f0000000000)={0x1fe, 0x0, 0xf000, 0x1000, &(0x7f0000015000/0x1000)=nil}) munmap(&(0x7f0000008000/0x1000)=nil, 0x200000) ioctl$KVM_SET_DEVICE_ATTR(r2, 0x400454cc, 0x0) 6.961276494s ago: executing program 0 (id=5597): ioctl$KVM_IRQFD(0xffffffffffffffff, 0x4020ae76, &(0x7f0000000000)={0xffffffffffffffff, 0x26}) r0 = openat$kvm(0x0, &(0x7f0000000200), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_DEVICE_ATTR(r1, 0x4018aee1, &(0x7f00000001c0)) 6.727339011s ago: executing program 0 (id=5598): r0 = openat$kvm(0x0, &(0x7f0000000140), 0x0, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) ioctl$KVM_SET_ONE_REG(r3, 0x4010aeac, &(0x7f0000000140)=@arm64_core={0x0, 0x0}) mmap$KVM_VCPU(&(0x7f0000ff4000/0x4000)=nil, 0x930, 0x0, 0x13, r3, 0x0) ioctl$KVM_SET_ONE_REG(0xffffffffffffffff, 0x4010aeac, &(0x7f0000000140)=@arm64_core={0x6000000000110000, 0x0}) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r4 = openat$kvm(0x0, &(0x7f0000000040), 0x0, 0x0) r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) r6 = ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x2) r7 = mmap$KVM_VCPU(&(0x7f0000000000/0x2000)=nil, 0x930, 0x280000b, 0x11, r6, 0x0) syz_memcpy_off$KVM_EXIT_HYPERCALL(r7, 0x20, &(0x7f0000000240)="fb4149dd033be3ac2cc4a22332fdaa8de0418df24200000000a6ab8031d1dfd92f0000000001ffffffff9610fbff77521ce10d8f6b69d22627e700", 0x0, 0xffffffffffffffb2) openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r8 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000780), 0x0, 0x0) r9 = ioctl$KVM_CREATE_VM(r8, 0xae01, 0x0) ioctl$KVM_CAP_HALT_POLL(r9, 0x4068aea3, &(0x7f0000000000)={0xdf, 0x0, 0x1000}) ioctl$KVM_SET_USER_MEMORY_REGION(r9, 0x4020ae46, &(0x7f00000000c0)={0x0, 0x1, 0x0, 0x1000, &(0x7f0000ffc000/0x1000)=nil}) r10 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) ioctl$KVM_CREATE_VM(r10, 0xae01, 0x0) r11 = ioctl$KVM_CREATE_VCPU(r9, 0xae41, 0x0) ioctl$KVM_RUN(r11, 0xae80, 0x0) 6.277259514s ago: executing program 5 (id=5600): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) ioctl$KVM_CREATE_DEVICE(r3, 0xc00caee0, &(0x7f0000000140)={0x4, 0xffffffffffffffff, 0x1}) write$eventfd(r4, &(0x7f00000001c0), 0xf001) ioctl$KVM_CREATE_DEVICE(r1, 0xc00caee0, &(0x7f0000000140)={0x4, 0xffffffffffffffff, 0x1}) ioctl$KVM_SET_DEVICE_ATTR(r5, 0x541b, 0x0) 6.026886943s ago: executing program 3 (id=5602): ioctl$KVM_IRQFD(0xffffffffffffffff, 0x4020ae76, &(0x7f0000000140)={0xffffffffffffffff, 0xc8}) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_DEVICE(r1, 0xc00caee0, &(0x7f0000000140)={0x4, 0xffffffffffffffff, 0x1}) ioctl$KVM_SET_DEVICE_ATTR(r2, 0xc0189436, &(0x7f0000000040)=@attr_arm64={0x0, 0x0, 0x0, 0x0}) 5.749788323s ago: executing program 6 (id=5603): r0 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) r1 = ioctl$KVM_CREATE_VCPU(r0, 0xae41, 0x0) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$KVM_CHECK_EXTENSION(r2, 0xae03, 0x4d) ioctl$KVM_RUN(r1, 0xae80, 0x0) ioctl$KVM_RUN(r1, 0xae80, 0xf5) r3 = openat$kvm(0x0, &(0x7f0000000040), 0x0, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) r6 = mmap$KVM_VCPU(&(0x7f0000007000/0x1000)=nil, 0x930, 0x1000002, 0x28031, 0xffffffffffffffff, 0x0) r7 = mmap$KVM_VCPU(&(0x7f0000000000/0x14000)=nil, 0x930, 0x3000003, 0x28031, 0xffffffffffffffff, 0x0) eventfd2(0x7f, 0x1) syz_memcpy_off$KVM_EXIT_HYPERCALL(r7, 0x20, &(0x7f0000000240)="fb4149dd033be3ac2cc4a22332fdaa8de0418df24200000000a6ab8031d1dfd92f0000000001ffffffff9610fbff77521ce10d8f6b69d22627e700", 0x0, 0xffffffffffffffca) r8 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) r9 = ioctl$KVM_CREATE_VM(r8, 0xae01, 0x0) close(r9) syz_memcpy_off$KVM_EXIT_HYPERCALL(r6, 0x20, &(0x7f0000000240)="fb4149dd033be3ac2cc4a22332fdaa8de0418df24200000000a6ab8031d1dfd92f0000000001ffffffff9610fbff77521ce10d8f6b69d22627e700", 0x0, 0xffffffffffffffca) r10 = mmap$KVM_VCPU(&(0x7f0000009000/0x1000)=nil, 0x930, 0x280000f, 0x11, r5, 0x0) r11 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r12 = ioctl$KVM_CREATE_VM(r11, 0xae01, 0x0) ioctl$KVM_CREATE_DEVICE(r12, 0xc00caee0, &(0x7f0000000280)={0x8, 0xffffffffffffffff}) ioctl$KVM_SET_DEVICE_ATTR(r13, 0x4018aee1, &(0x7f00000000c0)) syz_memcpy_off$KVM_EXIT_HYPERCALL(r10, 0x20, &(0x7f0000000240)="fb4149dd033be3ac2cc4a22332fdaa8de0418df24200000000a6ab8031d1dfd92f0000000001ffffffff9610fbff77521ce10d8f6b69d22627e700", 0x0, 0xffffffffffffff5a) openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) 5.689325158s ago: executing program 3 (id=5604): openat$kvm(0x0, &(0x7f0000000100), 0x7a1f00, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae03, 0xa8) 5.628163262s ago: executing program 5 (id=5605): munmap(&(0x7f0000647000/0x1000)=nil, 0x1000) mmap$KVM_VCPU(&(0x7f0000c00000/0x400000)=nil, 0x930, 0x0, 0x53033, 0xffffffffffffffff, 0x0) mmap$KVM_VCPU(&(0x7f0000eb3000/0x1000)=nil, 0x930, 0x0, 0x20031, 0xffffffffffffffff, 0x0) munmap(&(0x7f0000f0f000/0x2000)=nil, 0x2000) munmap(&(0x7f00004a0000/0x2000)=nil, 0x2000) munmap(&(0x7f0000002000/0x4000)=nil, 0x4000) munmap(&(0x7f000075a000/0xb000)=nil, 0xb000) munmap(&(0x7f0000ece000/0x2000)=nil, 0x2000) munmap(&(0x7f0000482000/0x2000)=nil, 0x2000) munmap(&(0x7f00004ff000/0x1000)=nil, 0x1000) munmap(&(0x7f0000e76000/0x12000)=nil, 0x12000) mmap$KVM_VCPU(&(0x7f0000ffc000/0x2000)=nil, 0x930, 0x0, 0x24132, 0xffffffffffffffff, 0x0) mmap$KVM_VCPU(&(0x7f0000ec1000/0x1000)=nil, 0x930, 0x3, 0x9032, 0xffffffffffffffff, 0x0) mmap$KVM_VCPU(&(0x7f0000fed000/0x3000)=nil, 0x930, 0x0, 0x4030031, 0xffffffffffffffff, 0x0) 5.602488104s ago: executing program 0 (id=5606): r0 = openat$kvm(0x0, &(0x7f0000000200), 0x183280, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 5.482516173s ago: executing program 3 (id=5607): r0 = socket$packet(0x11, 0xa, 0x300) recvmmsg(r0, &(0x7f0000005ec0)=[{{0x0, 0x0, 0x0}, 0xd2fa}, {{0x0, 0x0, 0x0}, 0x7}], 0x2, 0x0, 0x0) 5.325196014s ago: executing program 5 (id=5608): bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x11, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x2c, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, @void, @value}, 0x94) time(&(0x7f0000000180)) io_uring_setup(0x610c, &(0x7f00000015c0)={0x0, 0xd831, 0x80, 0x1, 0x123}) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f00000002c0)='westwood\x00', 0x9) connect$inet6(r0, &(0x7f00000000c0)={0xa, 0x4001, 0x0, @dev={0xfe, 0x80, '\x00', 0x1b}, 0xd}, 0x1c) write$binfmt_script(r0, &(0x7f0000000200), 0xfffffd9d) bpf$MAP_CREATE(0x0, 0x0, 0x48) bpf$PROG_LOAD(0x5, 0x0, 0x0) socket(0x10, 0x3, 0x0) bpf$ENABLE_STATS(0x20, 0x0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='memory.events.local\x00', 0x275a, 0x0) preadv2(r1, 0x0, 0x0, 0x80, 0x1ff, 0x8) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x100000a, 0x12, r1, 0x0) socket$nl_route(0x10, 0x3, 0x0) 5.207752534s ago: executing program 0 (id=5609): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000003c0)={0x18, 0x10, &(0x7f00000000c0)=ANY=[@ANYBLOB], &(0x7f0000000000)='GPL\x00', 0x8, 0x0, 0x0, 0x41000, 0x3, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x37, @void, @value}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x6) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0xfffffffffffffc33, &(0x7f0000000280)=0x2) r3 = mq_open(&(0x7f0000001140)='eth0\x00#\x13\xaeu\xe0\xfbu0*\xf3\x11i\xdd\xd9\xc6\x87\xde\xbf_\xa0\xf6\xdfk\xbf.\"\xa6\xc0#p\xcd\x1c/\xa6\xf2\xbcyL\x85a\xb5\xbb~+>\xbc\x93\xf8\xab\x9a3\x85l\x1d\x15\x11\x1a{@!2\xb6!\xae\xf79k\x90\x88\v8I$\xfdQ\x1d\x90=r\xd8\xc0\xd8\t/\x8dv\xd3\xa7\xd8J\xfd\x94#KT\xdd\x14\xd3\xe1\xbe_$A=z\xee\xbd/X\xbemOX)s\x94\xde\xbe_\x88N\xb8\xde\xeb)\xcd\xc56m\n\v\x01\xbe\xeb\xbb\x91\x11z\xc2|d\x1b\x04\xd2\xf9yx\xb2\x1b\bLTrw\x88|0\t\xc6\xe2\x9c\xed\\\xd8[\xc8\x04 \xf3\xac]V\x1d:\xfc\xc3\x9e\x02\ax\xef\xfe\x1c.TT\xcf\xbf\xf5\x80a%\xdcQ\xb3CuT\xcc\x02\xea\x91\xe8\xd8\x01YZy\xe6!\x89\x9c\xd1\xa6\x167\x8avs\xb2\a\xfe\xb3j*\xad\x18I\xcc\xe9\xaa{]\xef\xb7\xf2\xee*\xf95\bJt\xd0s\xc4\xaa\xc8\x13~\xb2\xf20\xbdf\xdb\xaeG\xe3\xfb\xef\x94\xef:Q\x1b\xe3\xa3\xa4}\xef`e\xcdL\xab\xdb\r\xf2y\x9fg1\xf4\t\x18i/!\x13\xf1,\x8cu\xaa\xbf~)\x94\x1b2\x93\x86\xe7\x9a\xf2j\xa8\x96\xa6\xa2\xfcN\x81\xafTh\xb3\x1bo:\xe8\vq7S\xe4H\xf3L\xa0\x9c\x97B\x12\x10\x9d\xaa\x7fq\x06\xb9(\xf6\x1c\x83\xb1[\x84\x10aF\x9b\xda\xeb\xc4*\x02q\xb2\x92\x00\x8cv\xac AN\xb9\xaa\xe0\x9d\x97Te\x81\x98L\xfe\x97+u\xd3^\xb1\xf0\xe0\x1f\xbd\a\xbb\xe5\x18\x9ds\x12ha\x00\xeb\x84\x99\xc6\x0f\xf1\xd5LD\xa87\xa0DQ\x8a2\x16!8,\xbc%$\xf1\xf2\xd6\x9cy\xecK\xda\xc5\xdc\xfa\xdd\xf6\b\xc6\xb4\x14\x16\x9c\x7f\x92\x85\xb0\xa2%:\xf0\xf4\x150\x0f\xb4\xa6d\xb4\xe4L\x19W\xd5\x90\xf7l\x1b\xfe\xde\vh\x97=m\x82.\xac\vh\xfe\x84Q}\x838/\x83\xebP\xbe\xd6+:\xceE\\\x95\xd4\xac\x92\x87\xd7\x98\x97\xe3\xec\xad\xd5\xac\x80C\x84R\x88r^g\xbaQ(\x9a>\xe2\xba\xa8=\x17\f04\x8f\x1f\xf2\x88*@v\xe7\xd1\xee\xb3\xc2\x8dT\xda\x81g\xd9\x1a:hzW6s)x\x06\xae\x11\xf2\x1e\xcd\v\xe5L\x19\x96s\xbc\x9e\xf4\x10$\r\xa4\xd8\xa2\xa2\xfcM\xc5R3~$\xc0\xa5n\x9a W\xb1e\xcc<$\xdf\x15\f]\x15\xf5#G\xce\xaf\x88U\xfa\x80\xf24\xf6\xb5\xef\xe2z\xcf\x9eN\x92\xac\x81{\xe6\xbd\xd7\x16\xe6F\xe2\x9e\x91%\x94\v\xb9\xdc\xd6\x87\x8f\xcd\xc1\xb05\x81\x81\xf8\xe9X\xe8Kt9@\xf4\xe1\xa6=\xc9\xe1:p4\nP[f\x1d\xfd\xfa\x839\x8d\x0e\xd1\xf9\xa0\xd2^E\xe5\xedo.\xaa\xf2\xb4\xcdn\x14\f\xcd\x83_yk\xda\xc5\x89\xf0Z\xea\x1d\xbd\xc00\v\xa3\xb3\xbe\xe6\x8b\x18/\xa8\xaaY\xf2\x89\x0f\x9enOOr\x00\xb2\x01\x1f:Z\xb8\xee;\xe3;\x8aPV\xce\xee\xf8[\x16\n\xe6:z\xb8\x1dvk\a{\xc1\x14\xd9+\xdb\t\x11\x90y\xe8\\\xe6\xfc\xca\xb4\xcbC\xd6\xd0\xbeC\xce\xc0L\xdb\xcd\xb3\x907c\xb4\xa6\xce\xdb[\xce\x122N\xa3\xc7Q<\x1a\xa5\xb3)\xc5\x98\x84\x8a\x82\x19\xb0\t\xac\x10\\\x8c\xbe\xcb\raIYe[\xa8\xc4\xac\x0e\xbb\x0f\b^\xdag\xe2\xa9\"\xf5h\'\xcf\xd9\x1b\xef\xe3\xe7y\x82\x1e\xca\x7f\x02 \xcf\x9e\xe0\xd9TM\xb9\n\xa9\xad3\x91\xa5\xe6!\xcd\xa2\xa4\x14\x12\xf9\xbf\xa8b\xcec:\xd7\'\f\f\x957\xc9}\r\xa6\xaa\x0f\xca\x96\xeb', 0x42, 0x0, 0x0) mq_unlink(&(0x7f0000000000)='eth0\x00') close(r3) r4 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r4, 0x8933, &(0x7f00000000c0)={'vxcan1\x00', 0x0}) bind$can_j1939(r4, &(0x7f0000000100)={0x1d, r5, 0x0, {0x0, 0xff, 0x1}}, 0x18) connect$can_j1939(r4, &(0x7f0000000140)={0x1d, r5}, 0x18) 4.834471361s ago: executing program 5 (id=5610): r0 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) write$UHID_INPUT(r0, &(0x7f0000000940)={0x8, {"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", 0x1000}}, 0x1006) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bce) prlimit64(0x0, 0xe, &(0x7f00000000c0)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) sched_setscheduler(0x0, 0x2, &(0x7f00000003c0)=0x3) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x53cb1000) syz_clone(0x0, 0x0, 0xfffffe11, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) waitid(0x2, 0x0, 0x0, 0x80000000, &(0x7f00000002c0)) fsopen(0x0, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(r2, &(0x7f0000000280)={0x26, 'hash\x00', 0x0, 0x0, 'digest_null\x00'}, 0x58) vmsplice(0xffffffffffffffff, &(0x7f0000000400), 0x0, 0x0) accept4(r2, 0x0, 0x0, 0x0) 3.980143844s ago: executing program 0 (id=5611): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000040)={0x4, 0x1000085}, 0x0) r0 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r0, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f0000000100)={0x0, 0x1c, &(0x7f00000001c0)=[@in6={0xa, 0x0, 0x0, @private0}]}, &(0x7f0000000180)=0x10) getsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(0xffffffffffffffff, 0x84, 0x66, &(0x7f00000000c0)={r1, 0x3, 0x30}, &(0x7f0000000300)=0xc) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000180)=0x2) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000340)=0x2) read$msr(r2, &(0x7f0000019680)=""/102384, 0x18ff0) r3 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000000), 0x149802, 0x0) r4 = dup(r3) sendfile(r3, r4, 0x0, 0x80006) 3.881260072s ago: executing program 3 (id=5612): syz_pidfd_open(0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0x11, 0xf, &(0x7f0000000200)=ANY=[@ANYBLOB, @ANYRES32, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000085000000b7000000"], &(0x7f0000001dc0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r3}, 0x2d) r4 = getpid() r5 = syz_pidfd_open(r4, 0x0) setns(r5, 0x24020000) syz_clone3(&(0x7f00000008c0)={0x14860000, 0x0, 0x0, 0x0, {0x33}, 0x0, 0x0, 0x0, &(0x7f00000002c0)=[r4], 0x1}, 0x58) 2.649417113s ago: executing program 3 (id=5613): timer_create(0x3, 0x0, &(0x7f0000000280)) timer_settime(0x0, 0x0, &(0x7f0000000000)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) timer_create(0x3, 0x0, &(0x7f00000000c0)=0x0) timer_settime(r0, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000000c0)=ANY=[@ANYBLOB="8c0000003d000701000000000000000001"], 0x8c}}, 0x2) 2.14843991s ago: executing program 0 (id=5614): prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]}) bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="170000000000000004000000ff"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000840)={0x3, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r0}, 0x10) rt_sigaction(0x19, &(0x7f0000000000)={0xfffffffffffffffc, 0x44000006, 0x0}, 0x0, 0x8, &(0x7f0000000440)) r1 = memfd_create(&(0x7f00000006c0)='\x00\xac=\x9d\xd2\xdb\xe6\xbf\xb4\xf2\xed\x04\x00\x00\x00\xd4N\x12\x9b\x1f\t\xd1Z+\x86T\x16\xf8\x01\x00\x00\x00\x9f+\x8d!\x0fG\xab\xc2\xdc\xa3\xb3\xae8\x9f9?\xefo\xa4k\x01\xb2>\xa1\x9c\x86xm\xe6\x9bZ4\x91\x1a\xdb\xdd\x89\xb9\xc0LF;\xd6\x84\x195\x06\x00\x00\x00~\xf3S\x12\"p^\xc1jP\x8a\xc6[\xbd\xe7q]\xdd\r\x1aZS\x01*\x1b\xfd\xbcMA\xdcq\xa1\x00\xb3\xf9\x91r\x7f\xdc\xf1\xc3G,\xdb\xccS\x15\x95b\x17\xab\xe4?\x96\x95\xa4kP\x99YO\xb8V\xd5p\x90X\xaaf', 0x0) fallocate(r1, 0x0, 0x400000000000000, 0x7) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) membarrier(0x10, 0x0) membarrier(0x8, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000440)=ANY=[@ANYBLOB="140000001000d40000000000000000000000000a20000000000a03000000000000000000010000000900010073797a3000000000bc000000160a01000000000000000000010000000900010073797a30000000000900020073797a3000000000900003"], 0x4b0}}, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) r4 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) ioctl$FITRIM(r4, 0xc0185879, &(0x7f0000000080)={0x0, 0x2000003, 0x4000}) sendmsg$nl_route(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/18, @ANYRES32, @ANYBLOB="01d90000000000001c0012000c000100626f6e64000000000c0002000800010005"], 0x3c}}, 0x0) r5 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r5, 0x29, 0x40, &(0x7f0000000400)=@raw={'raw\x00', 0x3c1, 0x3, 0x2e0, 0xd0, 0x268, 0x311, 0xd0, 0x268, 0x210, 0x460, 0x460, 0x210, 0x460, 0x9, 0x0, {[{{@ipv6={@local, @local, [0x0, 0xffffff00, 0x0, 0xffffffff], [0xff000000, 0xff, 0xff, 0xff], 'pim6reg1\x00', 'batadv_slave_0\x00', {}, {}, 0x11, 0x80, 0x4}, 0x160, 0xa8, 0xd0, 0x0, {0x9401}}, @common=@unspec=@NFQUEUE3={0x28, 'NFQUEUE\x00', 0x3, {0x401, 0x6, 0x11}}}, {{@ipv6={@private2, @remote, [], [0x0, 0x0, 0xff], 'ip6gretap0\x00', 'ip6_vti0\x00'}, 0x0, 0xd8, 0x140, 0xe4030000, {}, [@common=@ah={{0x30}, {[0x4d3, 0x4d5], 0x4, 0xa, 0x1}}]}, @unspec=@CT1={0x68, 'CT\x00', 0x1, {0x18, 0x0, 0x0, 0x0, 'netbios-ns\x00', 'syz1\x00'}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x340) 1.496934719s ago: executing program 6 (id=5615): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f00000001c0)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x6770c000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000006900000000000001000000940000000fad413e850000000700000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r3}, 0x10) sendmsg$NFC_CMD_GET_TARGET(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={0x0}}, 0x0) r4 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$TIOCSETD(r4, 0x5423, &(0x7f0000000000)=0x15) syz_genetlink_get_family_id$nl802154(0x0, 0xffffffffffffffff) sendmsg$NL802154_CMD_NEW_INTERFACE(0xffffffffffffffff, 0x0, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000300)={0x0, 0x0, 0x96, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x28) r5 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f0000000000)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x2, [@struct]}}, 0x0, 0x26, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x20) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000500)={0x6, 0x3, &(0x7f0000000200)=@framed, 0x0, 0x5, 0xe2, &(0x7f00000002c0)=""/226, 0x0, 0x0, '\x00', 0x0, 0x25, r5, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r6 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0006}]}) close_range(r6, 0xffffffffffffffff, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, 0x0) 1.412490745s ago: executing program 3 (id=5616): r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000000), 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xc, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000000)=0x4) timer_create(0x0, &(0x7f0000000680)={0x0, 0x21}, &(0x7f0000000100)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000240)) pipe(&(0x7f0000000200)) timer_create(0xfffffffffffffffc, 0x0, &(0x7f0000001400)) ioctl$EXT4_IOC_GROUP_ADD(0xffffffffffffffff, 0xc0185879, 0x0) syz_mount_image$hfsplus(&(0x7f0000000100), &(0x7f0000002900)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x2000010, &(0x7f00000022c0)=ANY=[], 0x1, 0x6ca, &(0x7f0000000500)="$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") syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f00000000c0)={'wlan1\x00'}) socket$nl_xfrm(0x10, 0x3, 0x6) syz_open_dev$sndpcmp(0x0, 0x1, 0x0) r2 = syz_open_dev$sndctrl(&(0x7f0000000000), 0x1, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_READ(r2, 0xc4c85512, &(0x7f0000000780)={{0x3, 0x0, 0x0, 0x0, 'syz0\x00'}, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, 0x0, 0xfffffffffffffffd, 0x100000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xd451, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x10000, 0x7785, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000000000, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000001]}) ioctl$SNDRV_SEQ_IOCTL_SET_PORT_INFO(0xffffffffffffffff, 0xc0a85320, &(0x7f00000005c0)={{0x80}, 'port1\x00', 0x62, 0x11cfa, 0x0, 0x8000808, 0x3, 0x1, 0x1, 0x0, 0x7cce8c743ee810df}) ioctl$SNDRV_SEQ_IOCTL_SET_CLIENT_POOL(0xffffffffffffffff, 0x40505330, 0x0) ioctl$SNDRV_SEQ_IOCTL_UNSUBSCRIBE_PORT(r0, 0x40505331, &(0x7f0000000100)={{}, {0xe}, 0x3, 0x4}) 0s ago: executing program 6 (id=5617): mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x2, 0x4c831, 0xffffffffffffffff, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x1) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0xa) syz_clone(0x88200, 0x0, 0x0, 0x0, 0x0, 0x0) pidfd_getfd(0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_open_procfs(0x0, 0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(0x0, 0x4, 0x0, 0x0, 0x4) io_uring_register$IORING_REGISTER_FILES_UPDATE(0xffffffffffffffff, 0x17, 0x0, 0x0) kernel console output (not intermixed with test programs): ned -22 [ 2119.713643][T21904] usb 1-1: can't set config #1, error -71 [ 2119.730583][T21904] usb 1-1: USB disconnect, device number 33 [ 2119.835060][T22000] device syzkaller1 entered promiscuous mode [ 2120.926688][T22009] netlink: 'syz.0.4563': attribute type 4 has an invalid length. [ 2120.934525][T22009] netlink: 17 bytes leftover after parsing attributes in process `syz.0.4563'. [ 2123.664235][T22028] device syzkaller1 entered promiscuous mode [ 2123.894639][T22030] netlink: 96 bytes leftover after parsing attributes in process `syz.3.4569'. [ 2125.882660][T21904] usb 1-1: new high-speed USB device number 34 using dummy_hcd [ 2126.087142][T21904] usb 1-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 2126.114453][T21904] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 2126.186388][T22050] [U] VÔ3¸ÂFÙ¾"SÇÁ/ÉÊ4:ÃXTZ“W¡T‘’LWµ«= [ 2126.223627][T21904] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 2126.272184][T21904] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 101, changing to 10 [ 2126.324840][T21904] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 18286, setting to 1024 [ 2126.375426][T21904] usb 1-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 2126.409565][T21904] usb 1-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 2126.418476][T21904] usb 1-1: Product: syz [ 2126.423097][T21904] usb 1-1: Manufacturer: syz [ 2126.432623][T22041] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 2126.461006][T21904] cdc_wdm 1-1:1.0: skipping garbage [ 2126.476046][T21904] cdc_wdm 1-1:1.0: skipping garbage [ 2126.500296][T21904] cdc_wdm 1-1:1.0: cdc-wdm0: USB WDM device [ 2126.527478][T21904] cdc_wdm 1-1:1.0: Unknown control protocol [ 2126.684411][ C0] cdc_wdm 1-1:1.0: nonzero urb status received: -71 [ 2126.691065][ C0] cdc_wdm 1-1:1.0: wdm_int_callback - 0 bytes [ 2126.698393][ C0] cdc_wdm 1-1:1.0: nonzero urb status received: -71 [ 2126.704994][ C0] cdc_wdm 1-1:1.0: wdm_int_callback - 0 bytes [ 2126.711279][ C0] cdc_wdm 1-1:1.0: nonzero urb status received: -71 [ 2126.717871][ C0] cdc_wdm 1-1:1.0: wdm_int_callback - 0 bytes [ 2126.724133][ C0] cdc_wdm 1-1:1.0: nonzero urb status received: -71 [ 2126.730738][ C0] cdc_wdm 1-1:1.0: wdm_int_callback - 0 bytes [ 2126.737871][ C0] cdc_wdm 1-1:1.0: wdm_int_callback - usb_submit_urb failed with result -1 [ 2126.751291][T21904] usb 1-1: USB disconnect, device number 34 [ 2127.209757][T20538] Bluetooth: hci5: sending frame failed (-49) [ 2127.218719][ T4261] Bluetooth: hci5: Opcode 0x1003 failed: -49 [ 2127.282621][T22061] Bluetooth: received HCILL_WAKE_UP_IND in state 2 [ 2132.917355][T22099] device syzkaller1 entered promiscuous mode [ 2133.162670][T21904] usb 7-1: new high-speed USB device number 4 using dummy_hcd [ 2133.389485][T21904] usb 7-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 2133.411139][T21904] usb 7-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 2133.443727][T21904] usb 7-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 2133.476922][T21904] usb 7-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 2133.520514][T21904] usb 7-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 2133.573383][T21904] usb 7-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 2133.604164][T21904] usb 7-1: Product: syz [ 2133.608665][T21904] usb 7-1: Manufacturer: syz [ 2133.649973][T21904] cdc_wdm 7-1:1.0: skipping garbage [ 2133.677537][T21904] cdc_wdm 7-1:1.0: skipping garbage [ 2133.682818][T21904] cdc_wdm: probe of 7-1:1.0 failed with error -22 [ 2133.872169][T13634] usb 7-1: USB disconnect, device number 4 [ 2134.126551][T22108] atomic_op ffff88807de4c998 conn xmit_atomic 0000000000000000 [ 2136.181776][T22123] platform regulatory.0: Direct firmware load for regulatory.db failed with error -2 [ 2136.191450][T22123] platform regulatory.0: Falling back to sysfs fallback for: regulatory.db [ 2140.512512][T22150] netlink: 'syz.1.4601': attribute type 4 has an invalid length. [ 2140.520635][T22150] netlink: 17 bytes leftover after parsing attributes in process `syz.1.4601'. [ 2141.683470][T21904] usb 7-1: new high-speed USB device number 5 using dummy_hcd [ 2141.898610][T21904] usb 7-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 2141.927748][T21904] usb 7-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 2141.967615][T21904] usb 7-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 2142.038301][T21904] usb 7-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 2142.097283][T21904] usb 7-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 2142.147344][T21904] usb 7-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 2142.190709][T21904] usb 7-1: Product: syz [ 2142.194920][T21904] usb 7-1: Manufacturer: syz [ 2142.232032][T21904] cdc_wdm 7-1:1.0: skipping garbage [ 2142.259016][T21904] cdc_wdm 7-1:1.0: skipping garbage [ 2142.280609][T21904] cdc_wdm: probe of 7-1:1.0 failed with error -22 [ 2142.454260][T21904] usb 7-1: USB disconnect, device number 5 [ 2142.919340][T22171] platform regulatory.0: Direct firmware load for regulatory.db failed with error -2 [ 2142.928985][T22171] platform regulatory.0: Falling back to sysfs fallback for: regulatory.db [ 2144.073734][ T126] usb 1-1: new high-speed USB device number 35 using dummy_hcd [ 2145.040171][ T126] usb 1-1: device descriptor read/64, error -71 [ 2145.339358][ T126] usb 1-1: new high-speed USB device number 36 using dummy_hcd [ 2145.511414][ T126] usb 1-1: device descriptor read/64, error -71 [ 2145.649554][ T126] usb usb1-port1: attempt power cycle [ 2145.710917][T22188] atomic_op ffff888027637998 conn xmit_atomic 0000000000000000 [ 2146.088689][ T126] usb 1-1: new high-speed USB device number 37 using dummy_hcd [ 2146.143162][ T126] usb 1-1: device descriptor read/8, error -71 [ 2146.429869][ T126] usb 1-1: new high-speed USB device number 38 using dummy_hcd [ 2146.622887][ T126] usb 1-1: device descriptor read/8, error -71 [ 2146.815543][ T126] usb usb1-port1: unable to enumerate USB device [ 2147.783680][ T1274] ieee802154 phy0 wpan0: encryption failed: -22 [ 2147.791531][ T1274] ieee802154 phy1 wpan1: encryption failed: -22 [ 2149.448769][T13636] usb 2-1: new high-speed USB device number 22 using dummy_hcd [ 2149.713125][T13636] usb 2-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 2149.738790][T13636] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 2149.846669][T13636] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 2149.916327][T13636] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 2150.058345][T13636] usb 2-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 2150.385690][T13636] usb 2-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 2151.153521][T13636] usb 2-1: Product: syz [ 2151.159776][T13636] usb 2-1: Manufacturer: syz [ 2151.173704][T13636] cdc_wdm 2-1:1.0: skipping garbage [ 2151.188040][T13636] cdc_wdm 2-1:1.0: skipping garbage [ 2151.193377][T13636] cdc_wdm: probe of 2-1:1.0 failed with error -22 [ 2151.264300][T22223] fuse: Unknown parameter 'group_id00000000000000000000' [ 2151.394260][T13636] usb 2-1: USB disconnect, device number 22 [ 2151.828951][T22231] netlink: 4 bytes leftover after parsing attributes in process `syz.3.4623'. [ 2152.651789][T21904] usb 2-1: new high-speed USB device number 23 using dummy_hcd [ 2152.961753][T21904] usb 2-1: device descriptor read/64, error -71 [ 2153.754088][T22246] netlink: 60 bytes leftover after parsing attributes in process `syz.3.4626'. [ 2154.118438][T21904] usb 2-1: new high-speed USB device number 24 using dummy_hcd [ 2154.971547][T21904] usb 2-1: device descriptor read/64, error -71 [ 2155.243717][T21904] usb usb2-port1: attempt power cycle [ 2156.286476][T21904] usb 2-1: new high-speed USB device number 25 using dummy_hcd [ 2156.430837][T21904] usb 2-1: device descriptor read/8, error -71 [ 2158.344275][T22274] fuse: Bad value for 'user_id' [ 2158.927066][T21904] usb 2-1: new high-speed USB device number 26 using dummy_hcd [ 2159.718023][T21904] usb 2-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 2159.726729][T21904] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 2159.890180][T22283] netlink: 60 bytes leftover after parsing attributes in process `syz.3.4636'. [ 2160.092067][T21904] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 2160.546780][T21904] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 2160.663792][T21904] usb 2-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 2160.697546][T21904] usb 2-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 2160.724604][T21904] usb 2-1: Product: syz [ 2160.738060][T21904] usb 2-1: Manufacturer: syz [ 2160.748384][T22289] netlink: 28 bytes leftover after parsing attributes in process `syz.3.4638'. [ 2160.772687][T21904] cdc_wdm 2-1:1.0: skipping garbage [ 2160.784016][T21904] cdc_wdm 2-1:1.0: skipping garbage [ 2160.794405][T21904] cdc_wdm: probe of 2-1:1.0 failed with error -22 [ 2160.990811][ T126] usb 2-1: USB disconnect, device number 26 [ 2161.203878][T20538] Bluetooth: hci5: sending frame failed (-49) [ 2161.211853][ T4261] Bluetooth: hci5: Opcode 0x1003 failed: -49 [ 2161.221958][T22298] Bluetooth: received HCILL_WAKE_UP_IND in state 2 [ 2162.258740][T19699] usb 1-1: new high-speed USB device number 39 using dummy_hcd [ 2162.433644][T19699] usb 1-1: device descriptor read/64, error -71 [ 2162.722324][T19699] usb 1-1: new high-speed USB device number 40 using dummy_hcd [ 2163.705850][T19699] usb 1-1: device descriptor read/64, error -71 [ 2163.834868][T19699] usb usb1-port1: attempt power cycle [ 2164.034021][T22317] fuse: Bad value for 'user_id' [ 2164.272583][T19699] usb 1-1: new high-speed USB device number 41 using dummy_hcd [ 2164.326873][T19699] usb 1-1: device descriptor read/8, error -71 [ 2164.614768][T19699] usb 1-1: new high-speed USB device number 42 using dummy_hcd [ 2164.750568][T22319] device syzkaller1 entered promiscuous mode [ 2164.956633][T19699] usb 1-1: device not accepting address 42, error -71 [ 2164.965209][T19699] usb usb1-port1: unable to enumerate USB device [ 2168.855592][T22349] overlayfs: unrecognized mount option "smackfsdef=wfdno" or missing value [ 2169.907755][T18031] usb 4-1: new high-speed USB device number 23 using dummy_hcd [ 2170.122520][T18031] usb 4-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 2170.157871][T18031] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 2170.189067][T18031] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 2170.210629][T18031] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 2170.249942][T22354] fuse: Bad value for 'user_id' [ 2170.250724][T18031] usb 4-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 2170.298111][T18031] usb 4-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 2170.310111][T18031] usb 4-1: Product: syz [ 2170.314642][T18031] usb 4-1: Manufacturer: syz [ 2170.332285][T18031] cdc_wdm 4-1:1.0: skipping garbage [ 2170.344641][T18031] cdc_wdm 4-1:1.0: skipping garbage [ 2170.529783][T18031] cdc_wdm: probe of 4-1:1.0 failed with error -22 [ 2170.559732][ T126] usb 4-1: USB disconnect, device number 23 [ 2170.703906][T22363] netlink: 60 bytes leftover after parsing attributes in process `syz.0.4658'. [ 2170.890140][T16934] usb 6-1: new high-speed USB device number 24 using dummy_hcd [ 2171.408820][T16934] usb 6-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 2171.422609][T16934] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 2171.445351][T16934] usb 6-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 2171.454966][T16934] usb 6-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 2171.515953][T16934] usb 6-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 2171.528571][T16934] usb 6-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 2171.562696][T16934] usb 6-1: Product: syz [ 2171.568804][T16934] usb 6-1: Manufacturer: syz [ 2171.740168][T16934] cdc_wdm: probe of 6-1:1.0 failed with error -22 [ 2172.632811][T19839] usb 6-1: USB disconnect, device number 24 [ 2172.651187][T22373] netlink: 28 bytes leftover after parsing attributes in process `syz.0.4662'. [ 2173.521663][ T126] usb 4-1: new high-speed USB device number 24 using dummy_hcd [ 2173.853345][ T126] usb 4-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 2173.876604][ T126] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 2173.915941][T22383] device syzkaller1 entered promiscuous mode [ 2173.940738][ T126] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 2174.001714][ T126] usb 4-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 2174.080945][ T126] usb 4-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 2174.126495][ T126] usb 4-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 2174.178458][ T126] usb 4-1: Product: syz [ 2174.194849][ T126] usb 4-1: Manufacturer: syz [ 2174.254790][ T126] cdc_wdm: probe of 4-1:1.0 failed with error -22 [ 2174.655376][T22387] platform regulatory.0: Direct firmware load for regulatory.db failed with error -2 [ 2174.665016][T22387] platform regulatory.0: Falling back to sysfs fallback for: regulatory.db [ 2175.168333][T19699] usb 4-1: USB disconnect, device number 24 [ 2175.404736][T22391] fuse: Bad value for 'user_id' [ 2176.815481][T22402] fuse: Bad value for 'fd' [ 2177.033322][T22405] overlayfs: unrecognized mount option "smackfsdef=wfdno" or missing value [ 2181.003340][T22424] netlink: 12 bytes leftover after parsing attributes in process `syz.6.4676'. [ 2181.006172][T22423] platform regulatory.0: Direct firmware load for regulatory.db failed with error -2 [ 2181.023990][T22423] platform regulatory.0: Falling back to sysfs fallback for: regulatory.db [ 2183.140707][T22440] platform regulatory.0: Direct firmware load for regulatory.db failed with error -2 [ 2183.150426][T22440] platform regulatory.0: Falling back to sysfs fallback for: regulatory.db [ 2183.761328][T14664] usb 2-1: new high-speed USB device number 27 using dummy_hcd [ 2184.132908][T14664] usb 2-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 2184.603964][T14664] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 2184.932283][T14664] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 2184.965735][T14664] usb 2-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 2185.168707][T14664] usb 2-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 2185.194075][T14664] usb 2-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 2185.215305][T14664] usb 2-1: Product: syz [ 2185.219514][T14664] usb 2-1: Manufacturer: syz [ 2185.225536][T22429] Process accounting resumed [ 2185.258161][T14664] cdc_wdm: probe of 2-1:1.0 failed with error -22 [ 2185.319259][T22453] fuse: Bad value for 'fd' [ 2185.527232][T14664] usb 2-1: USB disconnect, device number 27 [ 2186.118215][T22457] overlayfs: unrecognized mount option "smackfsdef=wfdno" or missing value [ 2186.288133][T22461] device syzkaller1 entered promiscuous mode [ 2187.825749][T22477] netlink: 28 bytes leftover after parsing attributes in process `syz.1.4690'. [ 2189.977928][T22491] atomic_op ffff888056ad7198 conn xmit_atomic 0000000000000000 [ 2190.333122][T20538] Bluetooth: hci5: sending frame failed (-49) [ 2190.340996][ T4261] Bluetooth: hci5: Opcode 0x1003 failed: -49 [ 2190.350278][T22496] Bluetooth: received HCILL_WAKE_UP_IND in state 2 [ 2190.412683][T22499] fuse: Bad value for 'fd' [ 2191.993421][T22513] overlayfs: unrecognized mount option "smackfsdef=wfdno" or missing value [ 2192.078731][T16934] usb 4-1: new high-speed USB device number 25 using dummy_hcd [ 2193.091695][T16934] usb 4-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 2193.272997][T16934] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 2193.285009][T16934] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 2193.294526][T16934] usb 4-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 2193.311656][T16934] usb 4-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 2193.320907][T16934] usb 4-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 2193.328943][T16934] usb 4-1: Product: syz [ 2193.395636][T16934] usb 4-1: Manufacturer: syz [ 2193.583968][T16934] cdc_wdm: probe of 4-1:1.0 failed with error -22 [ 2193.916284][T19839] usb 4-1: USB disconnect, device number 25 [ 2196.040672][T22537] [U] VÔ3¸ÂFÙ¾"SÇÁ/ÉÊ4:ÃXTZ“W¡T‘’LWµ«= [ 2196.970531][T19839] usb 1-1: new high-speed USB device number 43 using dummy_hcd [ 2197.102401][T22541] netlink: 4 bytes leftover after parsing attributes in process `syz.6.4708'. [ 2197.201613][T19839] usb 1-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 2197.220837][T19839] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 2197.230982][T19839] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 2197.256351][T19839] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 2197.276130][T19839] usb 1-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 2197.299827][T19839] usb 1-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 2197.323089][T19839] usb 1-1: Product: syz [ 2197.327318][T19839] usb 1-1: Manufacturer: syz [ 2197.356134][T19839] cdc_wdm 1-1:1.0: skipping garbage [ 2197.369342][T19839] cdc_wdm 1-1:1.0: skipping garbage [ 2197.375343][T19839] cdc_wdm: probe of 1-1:1.0 failed with error -22 [ 2198.317935][T16934] usb 1-1: USB disconnect, device number 43 [ 2198.407055][T22552] fuse: Bad value for 'fd' [ 2198.788685][T22560] device syzkaller1 entered promiscuous mode [ 2198.845017][T22562] netlink: 4 bytes leftover after parsing attributes in process `syz.6.4711'. [ 2198.886850][T22561] Bluetooth: received HCILL_WAKE_UP_IND in state 2 [ 2198.933725][T16167] Bluetooth: hci5: Frame reassembly failed (-84) [ 2200.636978][T22580] loop1: detected capacity change from 0 to 512 [ 2201.050187][T20538] Bluetooth: hci5: command 0x1003 tx timeout [ 2201.123097][ T4261] Bluetooth: hci5: Opcode 0x1003 failed: -110 [ 2202.568623][T22580] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 2203.345932][T22580] EXT4-fs (loop1): orphan cleanup on readonly fs [ 2203.590252][T22580] Quota error (device loop1): do_check_range: Getting block 196613 out of range 1-5 [ 2203.599832][T22580] Quota error (device loop1): qtree_read_dquot: Can't read quota structure for id 0 [ 2203.609307][T22580] EXT4-fs error (device loop1): ext4_acquire_dquot:6795: comm syz.1.4716: Failed to acquire dquot type 1 [ 2203.710648][T22580] EXT4-fs (loop1): 1 truncate cleaned up [ 2203.716895][T22580] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback. [ 2204.004567][T13507] EXT4-fs (loop1): unmounting filesystem. [ 2205.302611][T19839] usb 2-1: new high-speed USB device number 28 using dummy_hcd [ 2205.408315][ T1042] block nbd3: Attempted send on invalid socket [ 2205.414949][ T1042] I/O error, dev nbd3, sector 0 op 0x0:(READ) flags 0x800 phys_seg 1 prio class 2 [ 2205.435638][T22593] SQUASHFS error: Failed to read block 0x0: -5 [ 2205.466494][T22593] unable to read squashfs_super_block [ 2205.514216][T19839] usb 2-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 2205.526033][T19839] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 2205.547626][T19839] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 2205.564415][T19839] usb 2-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 2205.603993][T19839] usb 2-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 2205.627600][T19839] usb 2-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 2205.646905][T19839] usb 2-1: Product: syz [ 2205.651122][T19839] usb 2-1: Manufacturer: syz [ 2205.677168][T19839] cdc_wdm: probe of 2-1:1.0 failed with error -22 [ 2205.904578][T19699] usb 2-1: USB disconnect, device number 28 [ 2208.467973][T22609] netlink: 24 bytes leftover after parsing attributes in process `syz.3.4722'. [ 2209.174155][T22613] fuse: Bad value for 'fd' [ 2209.761046][T19699] usb 4-1: new high-speed USB device number 26 using dummy_hcd [ 2209.965745][T19699] usb 4-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 2209.986997][T19699] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 2210.033666][T22623] atomic_op ffff88807b310198 conn xmit_atomic 0000000000000000 [ 2210.044926][T19699] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 2210.078402][T19699] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 2210.139525][T19699] usb 4-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 2210.190812][T19699] usb 4-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 2210.215854][T19699] usb 4-1: Product: syz [ 2210.220061][T19699] usb 4-1: Manufacturer: syz [ 2210.306776][T19699] cdc_wdm 4-1:1.0: skipping garbage [ 2210.316816][T19699] cdc_wdm 4-1:1.0: skipping garbage [ 2210.339354][T19699] cdc_wdm: probe of 4-1:1.0 failed with error -22 [ 2210.522007][T19699] usb 4-1: USB disconnect, device number 26 [ 2211.441905][T22641] netlink: 96 bytes leftover after parsing attributes in process `syz.3.4729'. [ 2212.202034][T22646] netlink: 96 bytes leftover after parsing attributes in process `syz.5.4730'. [ 2213.417140][T19839] usb 1-1: new high-speed USB device number 44 using dummy_hcd [ 2213.451340][ T1274] ieee802154 phy0 wpan0: encryption failed: -22 [ 2213.457937][ T1274] ieee802154 phy1 wpan1: encryption failed: -22 [ 2213.632765][T19839] usb 1-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 2213.659155][T19839] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 2213.742863][T19839] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 2213.836890][T19839] usb 1-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 2213.959972][T19839] usb 1-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 2213.978514][T19839] usb 1-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 2214.129148][T19839] usb 1-1: Product: syz [ 2214.133928][T19839] usb 1-1: Manufacturer: syz [ 2214.158279][T19839] cdc_wdm: probe of 1-1:1.0 failed with error -22 [ 2215.155790][ T126] usb 1-1: USB disconnect, device number 44 [ 2215.217279][T22662] fuse: Bad value for 'fd' [ 2215.454934][T22665] fuse: Bad value for 'user_id' [ 2215.704103][T22663] netlink: 24 bytes leftover after parsing attributes in process `syz.5.4734'. [ 2218.460121][T22689] atomic_op ffff8880730dd998 conn xmit_atomic 0000000000000000 [ 2218.623502][T19839] usb 1-1: new high-speed USB device number 45 using dummy_hcd [ 2218.860428][T19839] usb 1-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 2218.880395][T19839] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 2218.943435][T19839] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 2218.996480][T19839] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 2219.095730][T19839] usb 1-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 2219.136577][T19839] usb 1-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 2219.183135][T19839] usb 1-1: Product: syz [ 2219.187376][T19839] usb 1-1: Manufacturer: syz [ 2219.215063][T19839] cdc_wdm 1-1:1.0: skipping garbage [ 2219.290436][T19839] cdc_wdm 1-1:1.0: skipping garbage [ 2219.295787][T19839] cdc_wdm: probe of 1-1:1.0 failed with error -22 [ 2219.562209][ T126] usb 1-1: USB disconnect, device number 45 [ 2220.702480][T22704] fuse: Invalid rootmode [ 2221.909167][T22709] netlink: 4 bytes leftover after parsing attributes in process `syz.3.4747'. [ 2224.275285][T19839] usb 1-1: new high-speed USB device number 46 using dummy_hcd [ 2224.685792][T19839] usb 1-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 2224.821826][T19839] usb 1-1: config 1 has an invalid descriptor of length 111, skipping remainder of the config [ 2224.903094][T22731] netlink: 24 bytes leftover after parsing attributes in process `syz.5.4752'. [ 2224.934343][T19839] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 2224.983313][T19839] usb 1-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 2225.202423][T19839] usb 1-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 2225.232086][T19839] usb 1-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 2226.238933][T19839] usb 1-1: Product: syz [ 2226.243161][T19839] usb 1-1: Manufacturer: syz [ 2226.316515][T19839] cdc_wdm 1-1:1.0: skipping garbage [ 2226.335547][T19839] cdc_wdm: probe of 1-1:1.0 failed with error -22 [ 2226.604326][T14665] usb 1-1: USB disconnect, device number 46 [ 2227.863827][T20538] Bluetooth: hci5: sending frame failed (-49) [ 2227.872370][ T4261] Bluetooth: hci5: Opcode 0x1003 failed: -49 [ 2228.103602][ T126] usb 1-1: new high-speed USB device number 47 using dummy_hcd [ 2229.296079][ T126] usb 1-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 2229.866992][ T126] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 2229.946584][ T126] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 2229.976826][ T126] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 2230.001111][ T126] usb 1-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 2230.168405][ T126] usb 1-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 2230.187649][ T126] usb 1-1: Product: syz [ 2230.193136][ T126] usb 1-1: Manufacturer: syz [ 2231.267131][ T126] usb 1-1: can't set config #1, error -71 [ 2231.293429][ T126] usb 1-1: USB disconnect, device number 47 [ 2231.404825][T22773] netlink: 4 bytes leftover after parsing attributes in process `syz.0.4764'. [ 2231.572363][T22776] device syzkaller1 entered promiscuous mode [ 2231.911940][ T126] usb 2-1: new high-speed USB device number 29 using dummy_hcd [ 2232.249932][ T126] usb 2-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 2232.840403][ T126] usb 2-1: config 1 has an invalid descriptor of length 111, skipping remainder of the config [ 2232.878172][ T126] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 2232.911139][ T126] usb 2-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 2233.083080][T22786] netlink: 24 bytes leftover after parsing attributes in process `syz.0.4768'. [ 2233.462563][ T126] usb 2-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 2233.535269][ T126] usb 2-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 2233.586742][ T126] usb 2-1: Product: syz [ 2233.613493][ T126] usb 2-1: Manufacturer: syz [ 2233.695021][ T126] cdc_wdm 2-1:1.0: skipping garbage [ 2233.733872][ T126] cdc_wdm: probe of 2-1:1.0 failed with error -22 [ 2233.889433][ T126] usb 2-1: USB disconnect, device number 29 [ 2236.033578][T22807] platform regulatory.0: Direct firmware load for regulatory.db failed with error -2 [ 2236.043122][T22807] platform regulatory.0: Falling back to sysfs fallback for: regulatory.db [ 2236.338736][T18031] usb 4-1: new high-speed USB device number 27 using dummy_hcd [ 2236.576894][T18031] usb 4-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 2236.590912][T18031] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 2236.720255][T18031] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 2236.917120][T18031] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 2237.531058][T18031] usb 4-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 2237.547199][T18031] usb 4-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 2237.555255][T18031] usb 4-1: Product: syz [ 2237.567197][T18031] usb 4-1: Manufacturer: syz [ 2237.605460][T18031] cdc_wdm 4-1:1.0: skipping garbage [ 2237.620583][T18031] cdc_wdm 4-1:1.0: skipping garbage [ 2237.625901][T18031] cdc_wdm: probe of 4-1:1.0 failed with error -22 [ 2237.828285][T21150] usb 4-1: USB disconnect, device number 27 [ 2238.897433][T22830] netlink: 24 bytes leftover after parsing attributes in process `syz.6.4779'. [ 2239.777830][ T52] block nbd5: Attempted send on invalid socket [ 2239.785773][ T52] I/O error, dev nbd5, sector 0 op 0x0:(READ) flags 0x800 phys_seg 1 prio class 2 [ 2239.802243][T22836] SQUASHFS error: Failed to read block 0x0: -5 [ 2239.808464][T22836] unable to read squashfs_super_block [ 2240.257155][T20538] Bluetooth: hci5: sending frame failed (-49) [ 2240.265601][ T4261] Bluetooth: hci5: Opcode 0x1003 failed: -49 [ 2240.293887][T22839] Bluetooth: received HCILL_WAKE_UP_IND in state 2 [ 2240.748830][T22849] overlayfs: unrecognized mount option "smackfsdef=wfdno" or missing value [ 2240.827797][T19839] usb 6-1: new high-speed USB device number 25 using dummy_hcd [ 2241.849544][T19839] usb 6-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 2241.876631][T19839] usb 6-1: config 1 has an invalid descriptor of length 111, skipping remainder of the config [ 2241.923375][T19839] usb 6-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 2241.967440][T19839] usb 6-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 2242.172814][T19839] usb 6-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 2242.193795][T19839] usb 6-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 2242.214022][T19839] usb 6-1: Product: syz [ 2242.225740][T19839] usb 6-1: Manufacturer: syz [ 2243.046146][T19839] cdc_wdm 6-1:1.0: skipping garbage [ 2243.053744][T19839] cdc_wdm: probe of 6-1:1.0 failed with error -22 [ 2243.269324][T19839] usb 6-1: USB disconnect, device number 25 [ 2244.166714][T22868] netlink: 'syz.5.4790': attribute type 1 has an invalid length. [ 2244.305337][T22868] 8021q: adding VLAN 0 to HW filter on device bond5 [ 2244.465581][T22869] bond5: (slave gretap1): Enslaving as an active interface with an up link [ 2244.521024][T18582] IPv6: ADDRCONF(NETDEV_CHANGE): bond5: link becomes ready [ 2246.262865][T22890] overlayfs: unrecognized mount option "smackfsdef=wfdno" or missing value [ 2250.780779][T19839] usb 6-1: new high-speed USB device number 26 using dummy_hcd [ 2250.889230][T22926] vhci_hcd vhci_hcd.0: pdev(0) rhport(0) sockfd(3) [ 2250.896342][T22926] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 2250.928014][T22926] vhci_hcd vhci_hcd.0: Device attached [ 2251.082309][T19839] usb 6-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 2251.112360][T19839] usb 6-1: config 1 has an invalid descriptor of length 110, skipping remainder of the config [ 2251.168138][T19839] usb 6-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 2251.208422][T13636] usb 33-1: new low-speed USB device number 2 using vhci_hcd [ 2251.216176][T19839] usb 6-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 2251.279202][T19839] usb 6-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 2251.321017][T19839] usb 6-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 2251.337761][T14665] usb 1-1: new high-speed USB device number 48 using dummy_hcd [ 2251.377911][T19839] usb 6-1: Product: syz [ 2251.403604][T19839] usb 6-1: Manufacturer: syz [ 2251.448875][T19839] cdc_wdm 6-1:1.0: skipping garbage [ 2251.470112][T19839] cdc_wdm 6-1:1.0: skipping garbage [ 2251.512285][T19839] cdc_wdm: probe of 6-1:1.0 failed with error -22 [ 2251.540146][T14665] usb 1-1: Using ep0 maxpacket: 16 [ 2251.553999][T14665] usb 1-1: New USB device found, idVendor=05d1, idProduct=2001, bcdDevice= 9.00 [ 2251.594680][T14665] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2251.604130][T14665] usb 1-1: Product: syz [ 2251.614216][T14665] usb 1-1: Manufacturer: syz [ 2251.624476][T14665] usb 1-1: SerialNumber: syz [ 2251.641707][T14665] usb 1-1: config 0 descriptor?? [ 2251.660885][T14665] ftdi_sio 1-1:0.0: FTDI USB Serial Device converter detected [ 2251.670693][T19839] usb 6-1: USB disconnect, device number 26 [ 2251.671701][T14665] usb 1-1: Detected FT232H [ 2251.885433][T14665] ftdi_sio ttyUSB0: Unable to read latency timer: -71 [ 2251.887823][T22928] vhci_hcd: connection reset by peer [ 2251.909845][T14665] ftdi_sio ttyUSB0: Unable to write latency timer: -71 [ 2251.927028][T18580] vhci_hcd: stop threads [ 2251.940708][T14665] ftdi_sio 1-1:0.0: GPIO initialisation failed: -71 [ 2251.951161][T18580] vhci_hcd: release socket [ 2251.976341][T18580] vhci_hcd: disconnect device [ 2251.983463][T14665] usb 1-1: FTDI USB Serial Device converter now attached to ttyUSB0 [ 2252.043920][T14665] usb 1-1: USB disconnect, device number 48 [ 2252.119067][T14665] ftdi_sio ttyUSB0: FTDI USB Serial Device converter now disconnected from ttyUSB0 [ 2252.149430][T14665] ftdi_sio 1-1:0.0: device disconnected [ 2254.071772][T20538] Bluetooth: hci5: sending frame failed (-49) [ 2254.081369][ T4261] Bluetooth: hci5: Opcode 0x1003 failed: -49 [ 2254.975695][T22949] Bluetooth: received HCILL_WAKE_UP_IND in state 2 [ 2255.516339][T22961] overlayfs: unrecognized mount option "smackfsdef=wfdno" or missing value [ 2256.736663][T13636] vhci_hcd: vhci_device speed not set [ 2260.381096][T13636] usb 1-1: new high-speed USB device number 49 using dummy_hcd [ 2260.660616][T13636] usb 1-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 2260.669290][T13636] usb 1-1: config 1 has an invalid descriptor of length 110, skipping remainder of the config [ 2261.487704][T22991] [U] VÔ3¸ÂFÙ¾"SÇÁ/ÉÊ4:ÃXTZ“W¡T‘’LWµ«= [ 2261.494341][T13636] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 2261.504843][T13636] usb 1-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 2261.688224][T13636] usb 1-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 2261.719872][T13636] usb 1-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 2261.765807][T13636] usb 1-1: Product: syz [ 2261.770041][T13636] usb 1-1: Manufacturer: syz [ 2261.816895][T13636] cdc_wdm 1-1:1.0: skipping garbage [ 2261.829742][T13636] cdc_wdm 1-1:1.0: skipping garbage [ 2262.012822][T13636] cdc_wdm: probe of 1-1:1.0 failed with error -22 [ 2262.995584][T13636] usb 1-1: USB disconnect, device number 49 [ 2264.649765][T23013] overlayfs: unrecognized mount option "smackfsdef=wfdno" or missing value [ 2265.536296][T23017] netlink: 'syz.6.4824': attribute type 1 has an invalid length. [ 2265.743916][T23017] 8021q: adding VLAN 0 to HW filter on device bond4 [ 2265.769994][T23019] netlink: 4 bytes leftover after parsing attributes in process `syz.0.4826'. [ 2265.837756][T23023] netlink: 4 bytes leftover after parsing attributes in process `syz.3.4825'. [ 2266.106333][T23031] fuse: Unknown parameter 'use00000000000000000000' [ 2266.928743][T23044] overlayfs: failed to resolve './file0': -2 [ 2269.564313][T16934] usb 1-1: new full-speed USB device number 50 using dummy_hcd [ 2270.067708][T21904] usb 4-1: new high-speed USB device number 28 using dummy_hcd [ 2270.196571][T16934] usb 1-1: not running at top speed; connect to a high speed hub [ 2270.249273][T16934] usb 1-1: config 1 interface 0 altsetting 6 endpoint 0x81 has invalid maxpacket 911, setting to 64 [ 2270.266324][T16934] usb 1-1: config 1 interface 0 altsetting 6 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 2270.279989][T16934] usb 1-1: config 1 interface 0 has no altsetting 0 [ 2270.306953][T16934] usb 1-1: New USB device found, idVendor=056a, idProduct=010f, bcdDevice= 0.40 [ 2270.316232][T16934] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2270.326291][T16934] usb 1-1: Product: syz [ 2270.330624][T16934] usb 1-1: Manufacturer: syz [ 2270.335443][T16934] usb 1-1: SerialNumber: syz [ 2270.397185][T23058] raw-gadget.1 gadget.0: fail, usb_ep_enable returned -22 [ 2270.438812][T21904] usb 4-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 2270.475833][T21904] usb 4-1: config 1 has an invalid descriptor of length 110, skipping remainder of the config [ 2270.715389][T21904] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 2270.759533][T21904] usb 4-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 2270.809854][T21904] usb 4-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 2270.844378][T21904] usb 4-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 2270.870701][T21904] usb 4-1: Product: syz [ 2270.875064][T21904] usb 4-1: Manufacturer: syz [ 2270.893685][T21904] cdc_wdm 4-1:1.0: skipping garbage [ 2270.900198][T21904] cdc_wdm 4-1:1.0: skipping garbage [ 2270.910235][T21904] cdc_wdm: probe of 4-1:1.0 failed with error -22 [ 2271.109600][T21904] usb 4-1: USB disconnect, device number 28 [ 2271.520889][T20538] Bluetooth: hci1: command 0x0409 tx timeout [ 2271.894161][T23065] netlink: 4 bytes leftover after parsing attributes in process `syz.5.4835'. [ 2272.333920][T23079] overlayfs: unrecognized mount option "smackfsdef=wfdno" or missing value [ 2273.342444][T16934] usbhid 1-1:1.0: can't add hid device: -71 [ 2273.402127][T16934] usbhid: probe of 1-1:1.0 failed with error -71 [ 2273.599576][ T1042] block nbd0: Attempted send on invalid socket [ 2273.606045][ T1042] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x800 phys_seg 1 prio class 2 [ 2273.633869][T16934] usb 1-1: USB disconnect, device number 50 [ 2273.680552][T23082] SQUASHFS error: Failed to read block 0x0: -5 [ 2273.733548][T23082] unable to read squashfs_super_block [ 2274.027878][ T1042] block nbd5: Attempted send on invalid socket [ 2274.034203][ T1042] I/O error, dev nbd5, sector 0 op 0x0:(READ) flags 0x800 phys_seg 1 prio class 2 [ 2274.045176][T23092] SQUASHFS error: Failed to read block 0x0: -5 [ 2274.051592][T23092] unable to read squashfs_super_block [ 2275.124057][T23093] netlink: 24 bytes leftover after parsing attributes in process `syz.3.4839'. [ 2275.500439][ T27] audit: type=1326 audit(1739441057.846:56): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23102 comm="syz.0.4844" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fb57f78cde9 code=0x0 [ 2275.671045][T23103] netlink: 'syz.0.4844': attribute type 5 has an invalid length. [ 2276.553022][T23109] device syzkaller1 entered promiscuous mode [ 2277.090382][T13636] usb 4-1: new high-speed USB device number 29 using dummy_hcd [ 2277.328548][T13636] usb 4-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 2277.348013][T13636] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 2277.383597][T13636] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 2277.394128][T13636] usb 4-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 2277.438049][T13636] usb 4-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 2277.454547][T13636] usb 4-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 2277.473500][T13636] usb 4-1: Product: syz [ 2277.484283][T13636] usb 4-1: Manufacturer: syz [ 2277.510186][T13636] cdc_wdm 4-1:1.0: skipping garbage [ 2277.515448][T13636] cdc_wdm 4-1:1.0: skipping garbage [ 2277.534355][T13636] cdc_wdm 4-1:1.0: skipping garbage [ 2277.550194][T13636] cdc_wdm: probe of 4-1:1.0 failed with error -22 [ 2277.750598][T16934] usb 4-1: USB disconnect, device number 29 [ 2278.239213][T23127] overlayfs: unrecognized mount option "smackfsdef=wfdno" or missing value [ 2279.135576][ T1274] ieee802154 phy0 wpan0: encryption failed: -22 [ 2279.141933][ T1274] ieee802154 phy1 wpan1: encryption failed: -22 [ 2279.930524][T23141] overlayfs: unrecognized mount option "smackfsdef=wfdno" or missing value [ 2281.345261][T16934] usb 7-1: new full-speed USB device number 6 using dummy_hcd [ 2281.739157][T16934] usb 7-1: not running at top speed; connect to a high speed hub [ 2282.404704][T16934] usb 7-1: config 1 interface 0 altsetting 6 endpoint 0x81 has invalid maxpacket 911, setting to 64 [ 2282.422400][T16934] usb 7-1: config 1 interface 0 altsetting 6 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 2282.436069][T16934] usb 7-1: config 1 interface 0 has no altsetting 0 [ 2282.459655][T16934] usb 7-1: New USB device found, idVendor=056a, idProduct=010f, bcdDevice= 0.40 [ 2282.489208][T16934] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2282.519125][T16934] usb 7-1: Product: syz [ 2282.523598][T13636] usb 6-1: new high-speed USB device number 27 using dummy_hcd [ 2282.553241][T16934] usb 7-1: Manufacturer: syz [ 2282.558460][T16934] usb 7-1: SerialNumber: syz [ 2282.666100][T14664] usb 1-1: new full-speed USB device number 51 using dummy_hcd [ 2282.707077][T16934] usb 7-1: can't set config #1, error -71 [ 2282.719076][T13636] usb 6-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 2282.729537][T16934] usb 7-1: USB disconnect, device number 6 [ 2282.764474][T13636] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 2282.806152][T13636] usb 6-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 2282.899238][T14664] usb 1-1: not running at top speed; connect to a high speed hub [ 2282.959121][T13636] usb 6-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 2283.010889][T13636] usb 6-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 2283.013899][T14664] usb 1-1: config 1 interface 0 altsetting 6 endpoint 0x81 has invalid maxpacket 911, setting to 64 [ 2283.031181][T13636] usb 6-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 2283.031213][T13636] usb 6-1: Product: syz [ 2283.031231][T13636] usb 6-1: Manufacturer: syz [ 2283.050584][T13636] cdc_wdm: probe of 6-1:1.0 failed with error -22 [ 2283.128786][T14664] usb 1-1: config 1 interface 0 altsetting 6 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 2283.152756][T14664] usb 1-1: config 1 interface 0 has no altsetting 0 [ 2283.720101][T20538] Bluetooth: hci2: command 0x0409 tx timeout [ 2283.762844][T14664] usb 1-1: New USB device found, idVendor=056a, idProduct=010f, bcdDevice= 0.40 [ 2283.799987][T14664] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2283.812866][T14664] usb 1-1: Product: syz [ 2283.818856][T14664] usb 1-1: Manufacturer: syz [ 2283.823675][T14664] usb 1-1: SerialNumber: syz [ 2283.901685][T20538] Bluetooth: hci1: command 0x0409 tx timeout [ 2283.994527][T23153] raw-gadget.2 gadget.0: fail, usb_ep_enable returned -22 [ 2284.049207][T13636] usb 6-1: USB disconnect, device number 27 [ 2284.076040][T23164] netlink: 24 bytes leftover after parsing attributes in process `syz.1.4857'. [ 2285.504893][T14664] usbhid 1-1:1.0: can't add hid device: -71 [ 2285.586195][T14664] usbhid: probe of 1-1:1.0 failed with error -71 [ 2285.697464][T14664] usb 1-1: USB disconnect, device number 51 [ 2287.923178][T23191] overlayfs: unrecognized mount option "smackfsdef=wfdno" or missing value [ 2289.424758][T14664] usb 2-1: new high-speed USB device number 30 using dummy_hcd [ 2290.138880][T14664] usb 2-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 2290.156362][T14664] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 2290.172432][T14664] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 2290.183365][T14664] usb 2-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 2290.959228][T14664] usb 2-1: string descriptor 0 read error: -71 [ 2290.976452][T14665] usb 6-1: new full-speed USB device number 28 using dummy_hcd [ 2291.019909][T14664] usb 2-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 2291.052438][T14664] usb 2-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 2291.099873][T14664] usb 2-1: can't set config #1, error -71 [ 2291.136589][T14664] usb 2-1: USB disconnect, device number 30 [ 2291.194247][ T27] audit: type=1326 audit(1739441072.523:57): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23206 comm="syz.1.4869" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f76c6b8cde9 code=0x0 [ 2291.234325][T14665] usb 6-1: not running at top speed; connect to a high speed hub [ 2291.264530][T14665] usb 6-1: config 1 interface 0 altsetting 6 endpoint 0x81 has invalid maxpacket 911, setting to 64 [ 2291.277216][T14665] usb 6-1: config 1 interface 0 altsetting 6 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 2291.292455][T14665] usb 6-1: config 1 interface 0 has no altsetting 0 [ 2291.311633][T14665] usb 6-1: New USB device found, idVendor=056a, idProduct=010f, bcdDevice= 0.40 [ 2291.323254][T23215] netlink: 'syz.1.4869': attribute type 5 has an invalid length. [ 2291.330440][T14665] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2291.355211][T14665] usb 6-1: Product: syz [ 2291.359441][T14665] usb 6-1: Manufacturer: syz [ 2291.382650][T23214] atomic_op ffff888068c2f198 conn xmit_atomic 0000000000000000 [ 2291.391666][T14665] usb 6-1: SerialNumber: syz [ 2291.444440][T23201] raw-gadget.1 gadget.5: fail, usb_ep_enable returned -22 [ 2292.316668][T20538] Bluetooth: hci3: command 0x0409 tx timeout [ 2292.607039][ T52] block nbd1: Attempted send on invalid socket [ 2292.615159][ T52] I/O error, dev nbd1, sector 0 op 0x0:(READ) flags 0x800 phys_seg 1 prio class 2 [ 2292.635741][T23226] SQUASHFS error: Failed to read block 0x0: -5 [ 2292.642155][T23226] unable to read squashfs_super_block [ 2292.845183][T14665] usbhid 6-1:1.0: can't add hid device: -71 [ 2292.910308][T14665] usbhid: probe of 6-1:1.0 failed with error -71 [ 2292.946890][T14665] usb 6-1: USB disconnect, device number 28 [ 2292.966419][T23230] netlink: 24 bytes leftover after parsing attributes in process `syz.3.4873'. [ 2293.036749][T23235] fuse: Bad value for 'user_id' [ 2294.243387][T23236] netlink: 4 bytes leftover after parsing attributes in process `syz.6.4874'. [ 2294.789408][T23248] overlayfs: unrecognized mount option "smackfsdef=wfdno" or missing value [ 2296.663216][T23253] atomic_op ffff88807bdcd998 conn xmit_atomic 0000000000000000 [ 2296.932318][T13636] usb 7-1: new high-speed USB device number 7 using dummy_hcd [ 2297.171631][T13636] usb 7-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 2297.192123][T13636] usb 7-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 2297.216586][T13636] usb 7-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 2297.268553][T13636] usb 7-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 2297.305574][T13636] usb 7-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 2297.328783][T13636] usb 7-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 2297.369447][T13636] usb 7-1: Product: syz [ 2297.391072][T13636] usb 7-1: Manufacturer: syz [ 2297.476469][T13636] cdc_wdm 7-1:1.0: skipping garbage [ 2298.281599][T13636] cdc_wdm 7-1:1.0: skipping garbage [ 2298.357961][T13636] cdc_wdm 7-1:1.0: skipping garbage [ 2298.375624][T13636] cdc_wdm: probe of 7-1:1.0 failed with error -22 [ 2298.413277][T13636] usb 7-1: USB disconnect, device number 7 [ 2298.860630][T23268] device syzkaller1 entered promiscuous mode [ 2301.765706][T23282] netlink: 4 bytes leftover after parsing attributes in process `syz.6.4886'. [ 2301.863736][T23296] overlayfs: unrecognized mount option "smackfsdef=wfdno" or missing value [ 2304.379797][T23305] fuse: Bad value for 'user_id' [ 2308.504031][T23323] device syzkaller1 entered promiscuous mode [ 2308.693413][T23329] netlink: 24 bytes leftover after parsing attributes in process `syz.1.4895'. [ 2308.780142][T19839] usb 7-1: new high-speed USB device number 8 using dummy_hcd [ 2308.991164][T19839] usb 7-1: Using ep0 maxpacket: 16 [ 2308.997911][T23326] netlink: 60 bytes leftover after parsing attributes in process `syz.0.4897'. [ 2309.015637][ T126] usb 4-1: new full-speed USB device number 30 using dummy_hcd [ 2309.040548][T19839] usb 7-1: New USB device found, idVendor=05d1, idProduct=2001, bcdDevice= 9.00 [ 2309.116097][T19839] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2309.171895][T23326] netlink: 60 bytes leftover after parsing attributes in process `syz.0.4897'. [ 2309.183290][T19839] usb 7-1: Product: syz [ 2309.227530][T19839] usb 7-1: Manufacturer: syz [ 2309.232245][T19839] usb 7-1: SerialNumber: syz [ 2309.448646][T19839] usb 7-1: config 0 descriptor?? [ 2309.456853][T19839] ftdi_sio 7-1:0.0: FTDI USB Serial Device converter detected [ 2309.465424][T19839] usb 7-1: Detected FT232H [ 2309.922938][T20538] Bluetooth: hci4: command 0x0409 tx timeout [ 2310.526028][T19839] ftdi_sio ttyUSB0: Unable to read latency timer: -71 [ 2310.563572][T19839] ftdi_sio ttyUSB0: Unable to write latency timer: -71 [ 2310.594966][T19839] ftdi_sio 7-1:0.0: GPIO initialisation failed: -71 [ 2310.647009][T19839] usb 7-1: FTDI USB Serial Device converter now attached to ttyUSB0 [ 2310.748283][T19839] usb 7-1: USB disconnect, device number 8 [ 2310.793585][T19839] ftdi_sio ttyUSB0: FTDI USB Serial Device converter now disconnected from ttyUSB0 [ 2311.012967][T19839] ftdi_sio 7-1:0.0: device disconnected [ 2311.144400][T23348] overlayfs: unrecognized mount option "smackfsdef=wfdno" or missing value [ 2316.717119][T23382] [U] VÔ3¸ÂFÙ¾"SÇÁ/ÉÊ4:ÃXTZ“W¡T‘’LWµ«= [ 2318.240531][T23399] netlink: 'syz.3.4912': attribute type 4 has an invalid length. [ 2318.248319][T23399] netlink: 17 bytes leftover after parsing attributes in process `syz.3.4912'. [ 2319.462293][T23404] overlayfs: unrecognized mount option "smackfsdef=wfdno" or missing value [ 2321.325947][T23418] netlink: 28 bytes leftover after parsing attributes in process `syz.3.4916'. [ 2323.232615][ T4341] usb 2-1: new full-speed USB device number 31 using dummy_hcd [ 2323.447405][ T4341] usb 2-1: not running at top speed; connect to a high speed hub [ 2323.565903][ T4341] usb 2-1: config 1 interface 0 altsetting 6 endpoint 0x81 has invalid maxpacket 911, setting to 64 [ 2323.615576][ T4341] usb 2-1: config 1 interface 0 altsetting 6 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 2323.665909][ T4341] usb 2-1: config 1 interface 0 has no altsetting 0 [ 2323.690270][ T4341] usb 2-1: New USB device found, idVendor=056a, idProduct=010f, bcdDevice= 0.40 [ 2323.700781][ T4341] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2323.709109][ T4341] usb 2-1: Product: syz [ 2323.713740][ T4341] usb 2-1: Manufacturer: syz [ 2323.718446][ T4341] usb 2-1: SerialNumber: syz [ 2323.737297][T23411] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 2324.375529][T23438] device syzkaller1 entered promiscuous mode [ 2324.973823][ T4261] Bluetooth: hci0: command 0x0409 tx timeout [ 2325.226354][ T4341] usbhid 2-1:1.0: can't add hid device: -71 [ 2325.273303][ T4341] usbhid: probe of 2-1:1.0 failed with error -71 [ 2325.317320][ T4341] usb 2-1: USB disconnect, device number 31 [ 2326.845908][ T4341] usb 4-1: new full-speed USB device number 31 using dummy_hcd [ 2327.564515][ T4341] usb 4-1: not running at top speed; connect to a high speed hub [ 2327.586342][ T4341] usb 4-1: config 1 interface 0 altsetting 6 endpoint 0x81 has invalid maxpacket 911, setting to 64 [ 2327.659885][T23454] netlink: 'syz.1.4924': attribute type 4 has an invalid length. [ 2327.667811][T23454] netlink: 17 bytes leftover after parsing attributes in process `syz.1.4924'. [ 2328.484360][ T4341] usb 4-1: config 1 interface 0 altsetting 6 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 2328.542684][ T4341] usb 4-1: config 1 interface 0 has no altsetting 0 [ 2328.568841][ T4341] usb 4-1: New USB device found, idVendor=056a, idProduct=010f, bcdDevice= 0.40 [ 2328.582801][ T4341] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2328.632560][ T4341] usb 4-1: Product: syz [ 2328.656638][ T4341] usb 4-1: Manufacturer: syz [ 2328.661399][ T4341] usb 4-1: SerialNumber: syz [ 2328.822277][T20538] Bluetooth: hci4: command 0x0409 tx timeout [ 2328.883149][T23450] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 2330.839366][ T4341] usbhid 4-1:1.0: can't add hid device: -71 [ 2330.847708][T23475] netlink: 24 bytes leftover after parsing attributes in process `syz.6.4931'. [ 2330.884297][ T4341] usbhid: probe of 4-1:1.0 failed with error -71 [ 2330.908368][ T4341] usb 4-1: USB disconnect, device number 31 [ 2334.055594][T23500] netlink: 'syz.1.4936': attribute type 4 has an invalid length. [ 2334.064937][T23500] netlink: 17 bytes leftover after parsing attributes in process `syz.1.4936'. [ 2334.558474][T23493] vhci_hcd vhci_hcd.0: pdev(3) rhport(0) sockfd(3) [ 2334.565140][T23493] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 2334.584454][T18031] usb 6-1: new full-speed USB device number 29 using dummy_hcd [ 2334.617893][T23493] vhci_hcd vhci_hcd.0: Device attached [ 2334.798268][ T9148] usb 4-1: new high-speed USB device number 32 using dummy_hcd [ 2334.913978][T13634] usb 39-1: new low-speed USB device number 2 using vhci_hcd [ 2334.919806][T18031] usb 6-1: not running at top speed; connect to a high speed hub [ 2335.210402][T18031] usb 6-1: config 1 interface 0 altsetting 6 endpoint 0x81 has invalid maxpacket 911, setting to 64 [ 2335.227304][T18031] usb 6-1: config 1 interface 0 altsetting 6 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 2335.247508][ T9148] usb 4-1: Using ep0 maxpacket: 16 [ 2335.248590][T18031] usb 6-1: config 1 interface 0 has no altsetting 0 [ 2335.262499][ T9148] usb 4-1: New USB device found, idVendor=05d1, idProduct=2001, bcdDevice= 9.00 [ 2335.272080][ T9148] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2335.280303][ T9148] usb 4-1: Product: syz [ 2335.284792][ T9148] usb 4-1: Manufacturer: syz [ 2335.289485][ T9148] usb 4-1: SerialNumber: syz [ 2335.297732][ T9148] usb 4-1: config 0 descriptor?? [ 2335.305373][ T9148] ftdi_sio 4-1:0.0: FTDI USB Serial Device converter detected [ 2335.313978][ T9148] usb 4-1: Detected FT232H [ 2335.345409][T18031] usb 6-1: New USB device found, idVendor=056a, idProduct=010f, bcdDevice= 0.40 [ 2335.367106][T18031] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2335.389251][T18031] usb 6-1: Product: syz [ 2335.398367][T18031] usb 6-1: Manufacturer: syz [ 2335.403006][T18031] usb 6-1: SerialNumber: syz [ 2335.433753][T23498] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22 [ 2335.547076][ T9148] ftdi_sio ttyUSB0: Unable to read latency timer: -71 [ 2335.565940][T23495] vhci_hcd: connection reset by peer [ 2335.576459][ T9148] ftdi_sio ttyUSB0: Unable to write latency timer: -71 [ 2335.611642][T16167] vhci_hcd: stop threads [ 2335.615964][T16167] vhci_hcd: release socket [ 2335.627467][ T9148] ftdi_sio 4-1:0.0: GPIO initialisation failed: -71 [ 2335.638140][T16167] vhci_hcd: disconnect device [ 2335.686799][ T9148] usb 4-1: FTDI USB Serial Device converter now attached to ttyUSB0 [ 2335.711070][ T9148] usb 4-1: USB disconnect, device number 32 [ 2335.734767][ T9148] ftdi_sio ttyUSB0: FTDI USB Serial Device converter now disconnected from ttyUSB0 [ 2335.765233][ T9148] ftdi_sio 4-1:0.0: device disconnected [ 2336.359406][T20538] Bluetooth: hci3: command 0x0409 tx timeout [ 2336.999781][T18031] usbhid 6-1:1.0: can't add hid device: -71 [ 2337.066766][T18031] usbhid: probe of 6-1:1.0 failed with error -71 [ 2337.084848][T18031] usb 6-1: USB disconnect, device number 29 [ 2337.268709][T23519] netlink: 24 bytes leftover after parsing attributes in process `syz.5.4942'. [ 2337.396410][T23523] vhci_hcd vhci_hcd.0: pdev(3) rhport(0) sockfd(3) [ 2337.402965][T23523] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 2337.542869][T23523] vhci_hcd vhci_hcd.0: Device attached [ 2338.647147][T13636] usb 4-1: new high-speed USB device number 33 using dummy_hcd [ 2338.862224][T13636] usb 4-1: Using ep0 maxpacket: 16 [ 2338.883934][T13636] usb 4-1: New USB device found, idVendor=05d1, idProduct=2001, bcdDevice= 9.00 [ 2338.914803][T13636] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2338.938798][T13636] usb 4-1: Product: syz [ 2338.981716][T13636] usb 4-1: Manufacturer: syz [ 2339.067971][T13636] usb 4-1: SerialNumber: syz [ 2339.144062][T13636] usb 4-1: config 0 descriptor?? [ 2339.200108][T13636] ftdi_sio 4-1:0.0: FTDI USB Serial Device converter detected [ 2339.429202][T23524] vhci_hcd: connection closed [ 2339.501019][T16167] vhci_hcd: stop threads [ 2339.547276][T16167] vhci_hcd: release socket [ 2339.552488][T16167] vhci_hcd: disconnect device [ 2339.560036][T13636] usb 4-1: Detected FT232H [ 2339.827850][T13636] ftdi_sio ttyUSB0: Unable to read latency timer: -71 [ 2339.899760][T13636] ftdi_sio ttyUSB0: Unable to write latency timer: -71 [ 2339.924681][T13636] ftdi_sio 4-1:0.0: GPIO initialisation failed: -71 [ 2339.950521][T13636] usb 4-1: FTDI USB Serial Device converter now attached to ttyUSB0 [ 2340.003563][T13636] usb 4-1: USB disconnect, device number 33 [ 2340.047163][T13636] ftdi_sio ttyUSB0: FTDI USB Serial Device converter now disconnected from ttyUSB0 [ 2340.072605][T13636] ftdi_sio 4-1:0.0: device disconnected [ 2340.379199][T13634] vhci_hcd: vhci_device speed not set [ 2341.845546][T23556] netlink: 4 bytes leftover after parsing attributes in process `syz.5.4948'. [ 2342.019448][T23558] vhci_hcd vhci_hcd.0: pdev(0) rhport(0) sockfd(3) [ 2342.026031][T23558] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 2342.256687][T23558] vhci_hcd vhci_hcd.0: Device attached [ 2342.760979][T18031] usb 1-1: new high-speed USB device number 52 using dummy_hcd [ 2344.817731][ T1274] ieee802154 phy0 wpan0: encryption failed: -22 [ 2344.824086][ T1274] ieee802154 phy1 wpan1: encryption failed: -22 [ 2345.021096][T18031] usb 1-1: Using ep0 maxpacket: 16 [ 2345.075806][T18031] usb 1-1: New USB device found, idVendor=05d1, idProduct=2001, bcdDevice= 9.00 [ 2345.116945][ T126] usb 33-1: new low-speed USB device number 3 using vhci_hcd [ 2345.125184][T18031] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2345.136234][T18031] usb 1-1: Product: syz [ 2345.140800][T18031] usb 1-1: Manufacturer: syz [ 2345.145784][T18031] usb 1-1: SerialNumber: syz [ 2345.202910][T18031] usb 1-1: config 0 descriptor?? [ 2345.374730][T23577] atomic_op ffff888073cef998 conn xmit_atomic 0000000000000000 [ 2346.174344][T23560] vhci_hcd: connection reset by peer [ 2346.188298][ T4369] vhci_hcd: stop threads [ 2346.194511][T18031] usb 1-1: can't set config #0, error -71 [ 2346.210165][ T4369] vhci_hcd: release socket [ 2346.216023][T18031] usb 1-1: USB disconnect, device number 52 [ 2346.243051][ T4369] vhci_hcd: disconnect device [ 2351.732279][ T126] vhci_hcd: vhci_device speed not set [ 2355.296767][T14664] usb 7-1: new high-speed USB device number 9 using dummy_hcd [ 2355.497097][T14664] usb 7-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 2355.512953][T14664] usb 7-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 2355.531677][T14664] usb 7-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 2355.559756][T14664] usb 7-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 2355.609767][T14664] usb 7-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 2355.653036][T14664] usb 7-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 2355.729037][T14664] usb 7-1: Product: syz [ 2355.764727][T14664] usb 7-1: Manufacturer: syz [ 2355.814847][T14664] cdc_wdm: probe of 7-1:1.0 failed with error -22 [ 2356.030741][T18031] usb 7-1: USB disconnect, device number 9 [ 2357.601355][ T9148] usb 2-1: new full-speed USB device number 32 using dummy_hcd [ 2358.609071][ T9148] usb 2-1: not running at top speed; connect to a high speed hub [ 2359.124008][ T9148] usb 2-1: config 1 interface 0 altsetting 6 endpoint 0x81 has invalid maxpacket 911, setting to 64 [ 2359.173150][ T9148] usb 2-1: config 1 interface 0 altsetting 6 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 2359.225118][ T9148] usb 2-1: config 1 interface 0 has no altsetting 0 [ 2359.255857][ T9148] usb 2-1: New USB device found, idVendor=056a, idProduct=010f, bcdDevice= 0.40 [ 2359.347669][ T9148] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2359.355307][T23650] device syzkaller1 entered promiscuous mode [ 2359.362046][ T9148] usb 2-1: Product: syz [ 2359.366680][ T9148] usb 2-1: Manufacturer: syz [ 2359.371509][ T9148] usb 2-1: SerialNumber: syz [ 2359.386787][ T9148] usb 2-1: can't set config #1, error -71 [ 2359.399146][ T9148] usb 2-1: USB disconnect, device number 32 [ 2359.440341][T20538] Bluetooth: hci0: command 0x0409 tx timeout [ 2359.536972][T23652] vhci_hcd vhci_hcd.0: pdev(1) rhport(0) sockfd(3) [ 2359.543556][T23652] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 2359.589800][T23652] vhci_hcd vhci_hcd.0: Device attached [ 2359.868709][T13634] usb 35-1: new low-speed USB device number 2 using vhci_hcd [ 2360.008302][ T9148] usb 2-1: new high-speed USB device number 33 using dummy_hcd [ 2360.242014][ T9148] usb 2-1: Using ep0 maxpacket: 16 [ 2360.263646][ T9148] usb 2-1: New USB device found, idVendor=05d1, idProduct=2001, bcdDevice= 9.00 [ 2360.287833][ T9148] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2360.310714][ T9148] usb 2-1: Product: syz [ 2360.323992][ T9148] usb 2-1: Manufacturer: syz [ 2360.339025][ T9148] usb 2-1: SerialNumber: syz [ 2360.366070][ T9148] usb 2-1: config 0 descriptor?? [ 2360.392726][ T9148] ftdi_sio 2-1:0.0: FTDI USB Serial Device converter detected [ 2360.930640][T23653] usbip_core: unknown command [ 2360.935489][T23653] vhci_hcd: unknown pdu 0 [ 2360.961756][T23653] usbip_core: unknown command [ 2360.978199][ T9148] usb 2-1: Detected FT232H [ 2360.994372][ T4380] vhci_hcd: stop threads [ 2361.011829][ T4380] vhci_hcd: release socket [ 2361.016236][ T9148] ftdi_sio ttyUSB0: Unable to read latency timer: -71 [ 2361.020446][ T4380] vhci_hcd: disconnect device [ 2361.028723][ T9148] ftdi_sio ttyUSB0: Unable to write latency timer: -71 [ 2361.071285][ T9148] ftdi_sio 2-1:0.0: GPIO initialisation failed: -71 [ 2361.094880][ T9148] usb 2-1: FTDI USB Serial Device converter now attached to ttyUSB0 [ 2361.118150][T23667] device syzkaller1 entered promiscuous mode [ 2361.127195][ T9148] usb 2-1: USB disconnect, device number 33 [ 2361.165056][ T9148] ftdi_sio ttyUSB0: FTDI USB Serial Device converter now disconnected from ttyUSB0 [ 2361.386653][ T9148] ftdi_sio 2-1:0.0: device disconnected [ 2362.247794][T23679] netlink: 24 bytes leftover after parsing attributes in process `syz.6.4982'. [ 2362.638265][ T9148] usb 4-1: new high-speed USB device number 34 using dummy_hcd [ 2362.915205][ T9148] usb 4-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 2362.955869][ T9148] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 2363.140654][ T9148] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 2363.156916][ T9148] usb 4-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 2363.242775][ T9148] usb 4-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 2363.267498][ T9148] usb 4-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 2363.304278][ T9148] usb 4-1: Product: syz [ 2363.310264][ T9148] usb 4-1: Manufacturer: syz [ 2363.347795][ T9148] cdc_wdm: probe of 4-1:1.0 failed with error -22 [ 2363.589462][ T9148] usb 4-1: USB disconnect, device number 34 [ 2363.629114][T23689] netlink: 'syz.0.4985': attribute type 4 has an invalid length. [ 2363.636990][T23689] netlink: 17 bytes leftover after parsing attributes in process `syz.0.4985'. [ 2365.536745][T13634] vhci_hcd: vhci_device speed not set [ 2365.591535][T23699] netlink: 'syz.0.4987': attribute type 4 has an invalid length. [ 2365.599456][T23699] netlink: 17 bytes leftover after parsing attributes in process `syz.0.4987'. [ 2369.458316][T23718] netlink: 4 bytes leftover after parsing attributes in process `syz.0.4993'. [ 2369.778704][T23722] netlink: 24 bytes leftover after parsing attributes in process `syz.6.4994'. [ 2370.943862][T23737] netlink: 'syz.5.4997': attribute type 4 has an invalid length. [ 2370.951704][T23737] netlink: 17 bytes leftover after parsing attributes in process `syz.5.4997'. [ 2371.126642][ T126] usb 7-1: new high-speed USB device number 10 using dummy_hcd [ 2371.790029][ T126] usb 7-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 2371.810187][ T126] usb 7-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 2371.820832][ T126] usb 7-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 2371.838862][ T126] usb 7-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 2372.105787][ T126] usb 7-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 2372.130253][ T126] usb 7-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 2372.151118][ T126] usb 7-1: Product: syz [ 2372.156795][ T126] usb 7-1: Manufacturer: syz [ 2372.327384][ T126] cdc_wdm: probe of 7-1:1.0 failed with error -22 [ 2372.599769][ T126] usb 7-1: USB disconnect, device number 10 [ 2374.865593][T23761] fuse: Bad value for 'user_id' [ 2375.080736][T23762] netlink: 20 bytes leftover after parsing attributes in process `syz.5.5003'. [ 2378.544254][ T126] usb 4-1: new full-speed USB device number 35 using dummy_hcd [ 2378.675541][T23780] netlink: 24 bytes leftover after parsing attributes in process `syz.0.5008'. [ 2378.761045][ T126] usb 4-1: not running at top speed; connect to a high speed hub [ 2378.801849][ T126] usb 4-1: config 1 interface 0 altsetting 6 endpoint 0x81 has invalid maxpacket 911, setting to 64 [ 2379.081032][ T126] usb 4-1: config 1 interface 0 altsetting 6 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 2379.159674][ T126] usb 4-1: config 1 interface 0 has no altsetting 0 [ 2379.170697][ T126] usb 4-1: New USB device found, idVendor=056a, idProduct=010f, bcdDevice= 0.40 [ 2379.285314][ T126] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2379.314964][ T126] usb 4-1: Product: syz [ 2379.319238][ T126] usb 4-1: Manufacturer: syz [ 2379.324014][ T126] usb 4-1: SerialNumber: syz [ 2379.332664][ T126] usb 4-1: can't set config #1, error -71 [ 2379.358190][ T126] usb 4-1: USB disconnect, device number 35 [ 2379.708358][T23786] netlink: 'syz.3.5009': attribute type 4 has an invalid length. [ 2379.717965][T23786] netlink: 17 bytes leftover after parsing attributes in process `syz.3.5009'. [ 2380.373060][ T4261] Bluetooth: hci4: command 0x0409 tx timeout [ 2380.961280][T23793] netlink: 4 bytes leftover after parsing attributes in process `syz.3.5012'. [ 2383.559576][T14664] usb 4-1: new high-speed USB device number 36 using dummy_hcd [ 2383.773833][T14664] usb 4-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 2383.789806][T14664] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 2383.803690][T14664] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 2383.814138][T14664] usb 4-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 2383.840425][T21904] usb 1-1: new high-speed USB device number 53 using dummy_hcd [ 2383.860174][T14664] usb 4-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 2383.966778][T14664] usb 4-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 2383.974853][T14664] usb 4-1: Product: syz [ 2383.990120][T14664] usb 4-1: Manufacturer: syz [ 2384.006502][T14664] cdc_wdm: probe of 4-1:1.0 failed with error -22 [ 2384.035482][T23819] vhci_hcd vhci_hcd.0: pdev(5) rhport(0) sockfd(3) [ 2384.042040][T23819] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 2384.054213][T23819] vhci_hcd vhci_hcd.0: Device attached [ 2384.097059][T21904] usb 1-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 2384.117832][T21904] usb 1-1: config 1 has an invalid descriptor of length 110, skipping remainder of the config [ 2384.148106][T21904] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 2384.157880][T21904] usb 1-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 2384.182343][T21904] usb 1-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 2384.242315][T21904] usb 1-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 2384.253449][T21904] usb 1-1: Product: syz [ 2384.257658][T21904] usb 1-1: Manufacturer: syz [ 2384.295121][ T4341] usb 4-1: USB disconnect, device number 36 [ 2384.320375][T21904] cdc_wdm 1-1:1.0: skipping garbage [ 2384.325795][T21904] cdc_wdm 1-1:1.0: skipping garbage [ 2384.348765][T21904] cdc_wdm: probe of 1-1:1.0 failed with error -22 [ 2384.349691][T14664] usb 43-1: new low-speed USB device number 2 using vhci_hcd [ 2384.359291][T13634] usb 6-1: new high-speed USB device number 30 using dummy_hcd [ 2384.565998][T16934] usb 1-1: USB disconnect, device number 53 [ 2384.671400][T13634] usb 6-1: Using ep0 maxpacket: 16 [ 2384.758859][T13634] usb 6-1: New USB device found, idVendor=05d1, idProduct=2001, bcdDevice= 9.00 [ 2384.782739][T13634] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2384.862705][T13634] usb 6-1: Product: syz [ 2384.868550][T13634] usb 6-1: Manufacturer: syz [ 2384.878053][T13634] usb 6-1: SerialNumber: syz [ 2384.894732][T13634] usb 6-1: config 0 descriptor?? [ 2384.958570][T23827] netlink: 4 bytes leftover after parsing attributes in process `syz.6.5020'. [ 2385.017161][T13634] ftdi_sio 6-1:0.0: FTDI USB Serial Device converter detected [ 2385.039175][T13634] usb 6-1: Detected FT232H [ 2385.312149][T13634] ftdi_sio ttyUSB0: Unable to read latency timer: -71 [ 2385.312833][T23820] usbip_core: unknown command [ 2385.322537][T13634] ftdi_sio ttyUSB0: Unable to write latency timer: -71 [ 2385.343791][T13634] ftdi_sio 6-1:0.0: GPIO initialisation failed: -71 [ 2385.930121][T23837] netlink: 'syz.1.5021': attribute type 4 has an invalid length. [ 2385.938179][T23837] netlink: 17 bytes leftover after parsing attributes in process `syz.1.5021'. [ 2386.051169][T13634] usb 6-1: FTDI USB Serial Device converter now attached to ttyUSB0 [ 2386.066023][T23820] vhci_hcd: unknown pdu 0 [ 2386.076140][T23820] usbip_core: unknown command [ 2386.087014][T13634] usb 6-1: USB disconnect, device number 30 [ 2386.296366][T18580] vhci_hcd: stop threads [ 2386.300684][T18580] vhci_hcd: release socket [ 2386.327214][T13634] ftdi_sio ttyUSB0: FTDI USB Serial Device converter now disconnected from ttyUSB0 [ 2386.335087][T18580] vhci_hcd: disconnect device [ 2386.394649][T13634] ftdi_sio 6-1:0.0: device disconnected [ 2386.757864][T23844] netlink: 'syz.1.5024': attribute type 4 has an invalid length. [ 2386.765882][T23844] netlink: 17 bytes leftover after parsing attributes in process `syz.1.5024'. [ 2388.287414][T23857] overlayfs: missing 'lowerdir' [ 2389.888518][T14664] vhci_hcd: vhci_device speed not set [ 2390.282601][ T126] usb 4-1: new high-speed USB device number 37 using dummy_hcd [ 2390.487340][ T126] usb 4-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 2390.509409][ T126] usb 4-1: config 1 has an invalid descriptor of length 111, skipping remainder of the config [ 2390.557877][ T126] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 2390.602371][ T126] usb 4-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 2390.683742][ T126] usb 4-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 2390.728920][ T126] usb 4-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 2390.770723][ T126] usb 4-1: Product: syz [ 2390.792158][ T126] usb 4-1: Manufacturer: syz [ 2390.841616][ T126] cdc_wdm 4-1:1.0: skipping garbage [ 2390.860775][ T126] cdc_wdm: probe of 4-1:1.0 failed with error -22 [ 2391.051222][ T126] usb 4-1: USB disconnect, device number 37 [ 2393.669721][T23898] overlayfs: missing 'lowerdir' [ 2394.505407][T23900] netlink: 4 bytes leftover after parsing attributes in process `syz.3.5038'. [ 2395.915941][T23912] netlink: 4 bytes leftover after parsing attributes in process `syz.0.5042'. [ 2396.517868][T23917] netlink: 24 bytes leftover after parsing attributes in process `syz.6.5043'. [ 2397.764658][T14664] usb 4-1: new high-speed USB device number 38 using dummy_hcd [ 2397.808873][T23939] netlink: 4 bytes leftover after parsing attributes in process `syz.6.5049'. [ 2397.879003][T23940] overlayfs: missing 'lowerdir' [ 2399.044144][T14664] usb 4-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 2399.053692][T14664] usb 4-1: config 1 has an invalid descriptor of length 111, skipping remainder of the config [ 2399.065123][T14664] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 2399.074612][T14664] usb 4-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 2399.271842][T14664] usb 4-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 2399.291250][T14664] usb 4-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 2399.314637][T14664] usb 4-1: Product: syz [ 2399.319837][T14664] usb 4-1: Manufacturer: syz [ 2399.445572][T14664] cdc_wdm 4-1:1.0: skipping garbage [ 2399.450847][T14664] cdc_wdm: probe of 4-1:1.0 failed with error -22 [ 2399.661969][ T7] usb 4-1: USB disconnect, device number 38 [ 2401.974611][T23964] fuse: Bad value for 'user_id' [ 2402.330609][T23967] netlink: 'syz.6.5056': attribute type 4 has an invalid length. [ 2402.338599][T23967] netlink: 17 bytes leftover after parsing attributes in process `syz.6.5056'. [ 2403.497275][T23980] netlink: 4 bytes leftover after parsing attributes in process `syz.6.5058'. [ 2405.184505][T23991] overlayfs: unrecognized mount option "smackfsdef=wfdno" or missing value [ 2406.513781][ T126] usb 4-1: new full-speed USB device number 39 using dummy_hcd [ 2406.911030][ T126] usb 4-1: not running at top speed; connect to a high speed hub [ 2406.921978][ T126] usb 4-1: config 1 interface 0 altsetting 6 endpoint 0x81 has invalid maxpacket 911, setting to 64 [ 2406.934623][ T126] usb 4-1: config 1 interface 0 altsetting 6 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 2407.045048][ T126] usb 4-1: config 1 interface 0 has no altsetting 0 [ 2407.173547][ T126] usb 4-1: New USB device found, idVendor=056a, idProduct=010f, bcdDevice= 0.40 [ 2407.271843][ T126] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2407.280032][ T126] usb 4-1: Product: syz [ 2407.288190][ T126] usb 4-1: Manufacturer: syz [ 2407.294086][ T126] usb 4-1: SerialNumber: syz [ 2407.318700][T23989] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 2407.690378][ T126] usbhid 4-1:1.0: can't add hid device: -71 [ 2407.696420][ T126] usbhid: probe of 4-1:1.0 failed with error -71 [ 2407.705000][ T126] usb 4-1: USB disconnect, device number 39 [ 2407.851163][ T4261] Bluetooth: hci4: command 0x0409 tx timeout [ 2408.583948][T24013] fuse: Bad value for 'user_id' [ 2409.718021][T16934] usb 1-1: new full-speed USB device number 54 using dummy_hcd [ 2410.030583][T16934] usb 1-1: not running at top speed; connect to a high speed hub [ 2410.051895][T16934] usb 1-1: config 1 interface 0 altsetting 6 endpoint 0x81 has invalid maxpacket 911, setting to 64 [ 2410.102900][T16934] usb 1-1: config 1 interface 0 altsetting 6 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 2410.169101][T16934] usb 1-1: config 1 interface 0 has no altsetting 0 [ 2410.192471][T16934] usb 1-1: New USB device found, idVendor=056a, idProduct=010f, bcdDevice= 0.40 [ 2410.235975][T16934] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2410.288610][T16934] usb 1-1: Product: syz [ 2410.301100][T16934] usb 1-1: Manufacturer: syz [ 2410.371343][T16934] usb 1-1: SerialNumber: syz [ 2410.448386][T24020] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 2410.502325][ T1274] ieee802154 phy0 wpan0: encryption failed: -22 [ 2410.508711][ T1274] ieee802154 phy1 wpan1: encryption failed: -22 [ 2411.526490][T20538] Bluetooth: hci1: command 0x0409 tx timeout [ 2412.748178][T16934] usbhid 1-1:1.0: can't add hid device: -71 [ 2412.756151][T16934] usbhid: probe of 1-1:1.0 failed with error -71 [ 2412.790347][T16934] usb 1-1: USB disconnect, device number 54 [ 2413.179055][T24047] overlayfs: unrecognized mount option "smackfsdef=wfdno" or missing value [ 2416.572268][T16934] usb 4-1: new full-speed USB device number 40 using dummy_hcd [ 2416.799066][T16934] usb 4-1: not running at top speed; connect to a high speed hub [ 2416.830672][T16934] usb 4-1: config 1 interface 0 altsetting 6 endpoint 0x81 has invalid maxpacket 911, setting to 64 [ 2416.863442][T16934] usb 4-1: config 1 interface 0 altsetting 6 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 2416.904944][T16934] usb 4-1: config 1 interface 0 has no altsetting 0 [ 2416.935785][T16934] usb 4-1: New USB device found, idVendor=056a, idProduct=010f, bcdDevice= 0.40 [ 2416.976962][T16934] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2416.985098][T16934] usb 4-1: Product: syz [ 2416.991195][T16934] usb 4-1: Manufacturer: syz [ 2416.995916][T16934] usb 4-1: SerialNumber: syz [ 2417.039531][T24055] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 2419.004041][T20538] Bluetooth: hci4: command 0x0409 tx timeout [ 2419.122227][T16934] usbhid 4-1:1.0: can't add hid device: -71 [ 2419.153130][T16934] usbhid: probe of 4-1:1.0 failed with error -71 [ 2419.219690][T16934] usb 4-1: USB disconnect, device number 40 [ 2419.309622][T24066] vhci_hcd vhci_hcd.0: pdev(3) rhport(0) sockfd(3) [ 2419.316166][T24066] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 2420.002474][T16934] usb 4-1: new high-speed USB device number 41 using dummy_hcd [ 2420.036657][T24066] vhci_hcd vhci_hcd.0: Device attached [ 2420.259107][T16934] usb 4-1: Using ep0 maxpacket: 16 [ 2420.802936][T16934] usb 4-1: New USB device found, idVendor=05d1, idProduct=2001, bcdDevice= 9.00 [ 2420.866481][T16934] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2420.975277][ T9148] usb 39-1: new low-speed USB device number 3 using vhci_hcd [ 2420.977164][T16934] usb 4-1: Product: syz [ 2421.035742][T16934] usb 4-1: Manufacturer: syz [ 2421.045748][T16934] usb 4-1: SerialNumber: syz [ 2421.060365][T16934] usb 4-1: config 0 descriptor?? [ 2421.097506][T16934] ftdi_sio 4-1:0.0: FTDI USB Serial Device converter detected [ 2421.349665][T16934] usb 4-1: Detected FT232H [ 2421.357583][T24068] usbip_core: unknown command [ 2421.602181][T16934] ftdi_sio ttyUSB0: Unable to read latency timer: -71 [ 2421.700801][T24068] vhci_hcd: unknown pdu 0 [ 2421.751681][T16934] ftdi_sio ttyUSB0: Unable to write latency timer: -71 [ 2421.787909][T24068] usbip_core: unknown command [ 2421.862048][ T4301] vhci_hcd: stop threads [ 2421.872308][ T4301] vhci_hcd: release socket [ 2422.364010][T16934] ftdi_sio 4-1:0.0: GPIO initialisation failed: -71 [ 2422.365897][T24088] netlink: 'syz.5.5083': attribute type 1 has an invalid length. [ 2422.411478][ T4301] vhci_hcd: disconnect device [ 2422.421464][T16934] usb 4-1: FTDI USB Serial Device converter now attached to ttyUSB0 [ 2422.479560][T16934] usb 4-1: USB disconnect, device number 41 [ 2422.496708][T16934] ftdi_sio ttyUSB0: FTDI USB Serial Device converter now disconnected from ttyUSB0 [ 2422.498409][T24088] 8021q: adding VLAN 0 to HW filter on device bond6 [ 2422.508193][T16934] ftdi_sio 4-1:0.0: device disconnected [ 2422.694342][T24089] bond6: (slave gretap2): making interface the new active one [ 2422.817764][T24089] bond6: (slave gretap2): Enslaving as an active interface with an up link [ 2423.773280][ T4429] IPv6: ADDRCONF(NETDEV_CHANGE): bond6: link becomes ready [ 2424.642935][T24107] overlayfs: unrecognized mount option "smackfsdef=wfdno" or missing value [ 2425.709369][T24104] platform regulatory.0: Direct firmware load for regulatory.db failed with error -2 [ 2425.719134][T24104] platform regulatory.0: Falling back to sysfs fallback for: regulatory.db [ 2426.593305][ T9148] vhci_hcd: vhci_device speed not set [ 2427.439291][T24111] netlink: 60 bytes leftover after parsing attributes in process `syz.1.5089'. [ 2428.301661][T24123] netlink: 'syz.3.5091': attribute type 4 has an invalid length. [ 2428.309640][T24123] netlink: 17 bytes leftover after parsing attributes in process `syz.3.5091'. [ 2429.540237][T24131] netlink: 'syz.1.5102': attribute type 4 has an invalid length. [ 2429.548074][T24131] netlink: 17 bytes leftover after parsing attributes in process `syz.1.5102'. [ 2430.826597][T24138] fuse: Bad value for 'user_id' [ 2431.939406][T24149] vhci_hcd vhci_hcd.0: pdev(0) rhport(0) sockfd(3) [ 2431.946013][T24149] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 2432.083498][T24149] vhci_hcd vhci_hcd.0: Device attached [ 2432.143397][ T9148] usb 4-1: new high-speed USB device number 42 using dummy_hcd [ 2432.447975][ T9148] usb 4-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 2433.205341][ T9148] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 2433.237376][T18031] usb 1-1: new high-speed USB device number 55 using dummy_hcd [ 2433.996986][T14665] usb 33-1: new low-speed USB device number 4 using vhci_hcd [ 2434.211362][T18031] usb 1-1: Using ep0 maxpacket: 16 [ 2434.239103][T18031] usb 1-1: New USB device found, idVendor=05d1, idProduct=2001, bcdDevice= 9.00 [ 2434.249989][T18031] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2434.258377][T18031] usb 1-1: Product: syz [ 2434.262676][T18031] usb 1-1: Manufacturer: syz [ 2434.267470][T18031] usb 1-1: SerialNumber: syz [ 2434.327673][T18031] usb 1-1: config 0 descriptor?? [ 2434.344950][T18031] ftdi_sio 1-1:0.0: FTDI USB Serial Device converter detected [ 2434.353297][ T9148] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 2434.366107][T18031] usb 1-1: Detected FT232H [ 2434.392726][ T9148] usb 4-1: config 1 interface 0 altsetting 0 has an invalid endpoint with address 0x69, skipping [ 2434.440549][ T9148] usb 4-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 2434.466406][ T9148] usb 4-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 2434.497117][ T9148] usb 4-1: Product: syz [ 2434.513674][ T9148] usb 4-1: Manufacturer: syz [ 2434.528781][T24144] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 2434.559534][T24150] usbip_core: unknown command [ 2434.575064][T24150] vhci_hcd: unknown pdu 0 [ 2434.585769][ T9148] cdc_wdm 4-1:1.0: skipping garbage [ 2434.591026][ T9148] cdc_wdm 4-1:1.0: skipping garbage [ 2434.597158][T18031] ftdi_sio ttyUSB0: Unable to read latency timer: -71 [ 2434.597763][T24150] usbip_core: unknown command [ 2434.616514][T18031] ftdi_sio ttyUSB0: Unable to write latency timer: -71 [ 2434.649102][T18031] ftdi_sio 1-1:0.0: GPIO initialisation failed: -71 [ 2434.653483][ T9148] cdc_wdm: probe of 4-1:1.0 failed with error -22 [ 2434.663259][ T4369] vhci_hcd: stop threads [ 2434.667565][ T4369] vhci_hcd: release socket [ 2434.677659][ T4369] vhci_hcd: disconnect device [ 2434.698818][T18031] usb 1-1: FTDI USB Serial Device converter now attached to ttyUSB0 [ 2434.767439][T18031] usb 1-1: USB disconnect, device number 55 [ 2434.807535][T18031] ftdi_sio ttyUSB0: FTDI USB Serial Device converter now disconnected from ttyUSB0 [ 2434.875609][T18031] ftdi_sio 1-1:0.0: device disconnected [ 2434.943681][ T9148] usb 4-1: USB disconnect, device number 42 [ 2435.355959][T21150] usb 7-1: new full-speed USB device number 11 using dummy_hcd [ 2435.588975][T21150] usb 7-1: not running at top speed; connect to a high speed hub [ 2435.816742][T21150] usb 7-1: config 1 interface 0 altsetting 6 endpoint 0x81 has invalid maxpacket 911, setting to 64 [ 2435.839225][T21150] usb 7-1: config 1 interface 0 altsetting 6 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 2435.853343][T21150] usb 7-1: config 1 interface 0 has no altsetting 0 [ 2435.871782][T21150] usb 7-1: New USB device found, idVendor=056a, idProduct=010f, bcdDevice= 0.40 [ 2435.881461][T21150] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2435.889724][T21150] usb 7-1: Product: syz [ 2436.085949][T21150] usb 7-1: Manufacturer: syz [ 2436.091156][T21150] usb 7-1: SerialNumber: syz [ 2436.100391][T24167] raw-gadget.0 gadget.6: fail, usb_ep_enable returned -22 [ 2437.268738][T20538] Bluetooth: hci2: command 0x0409 tx timeout [ 2437.878632][T24187] netlink: 'syz.3.5104': attribute type 4 has an invalid length. [ 2437.886502][T24187] netlink: 17 bytes leftover after parsing attributes in process `syz.3.5104'. [ 2439.979342][T21150] usbhid 7-1:1.0: can't add hid device: -71 [ 2440.003283][T21150] usbhid: probe of 7-1:1.0 failed with error -71 [ 2440.015365][T14665] vhci_hcd: vhci_device speed not set [ 2440.306049][T21150] usb 7-1: USB disconnect, device number 11 [ 2441.368158][T24207] platform regulatory.0: Direct firmware load for regulatory.db failed with error -2 [ 2441.377803][T24207] platform regulatory.0: Falling back to sysfs fallback for: regulatory.db [ 2442.178134][T21150] usb 2-1: new high-speed USB device number 34 using dummy_hcd [ 2442.548543][T21150] usb 2-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 2442.565951][T21150] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 2443.111193][T21150] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 2443.120323][T21150] usb 2-1: config 1 interface 0 altsetting 0 has an invalid endpoint with address 0x69, skipping [ 2443.144510][T21150] usb 2-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 2443.165692][T21150] usb 2-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 2443.173853][T21150] usb 2-1: Product: syz [ 2443.178053][T21150] usb 2-1: Manufacturer: syz [ 2443.185210][T24206] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 2443.224509][T21150] cdc_wdm 2-1:1.0: skipping garbage [ 2443.229776][T21150] cdc_wdm 2-1:1.0: skipping garbage [ 2443.246317][T21150] cdc_wdm: probe of 2-1:1.0 failed with error -22 [ 2443.477018][T13636] usb 2-1: USB disconnect, device number 34 [ 2446.784997][T24238] netlink: 'syz.1.5117': attribute type 4 has an invalid length. [ 2446.792897][T24238] netlink: 17 bytes leftover after parsing attributes in process `syz.1.5117'. [ 2447.284942][T20538] Bluetooth: hci1: command 0x0409 tx timeout [ 2449.209020][T24244] netlink: 60 bytes leftover after parsing attributes in process `syz.0.5118'. [ 2450.133820][T24257] fuse: Bad value for 'user_id' [ 2451.494161][T24261] netlink: 24 bytes leftover after parsing attributes in process `syz.1.5123'. [ 2453.296512][T24281] vhci_hcd vhci_hcd.0: pdev(5) rhport(0) sockfd(3) [ 2453.303058][T24281] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 2453.348130][T24281] vhci_hcd vhci_hcd.0: Device attached [ 2453.560243][T19839] usb 6-1: new high-speed USB device number 31 using dummy_hcd [ 2453.635087][T14665] usb 43-1: new low-speed USB device number 3 using vhci_hcd [ 2453.887205][T19839] usb 6-1: Using ep0 maxpacket: 16 [ 2454.801340][T19839] usb 6-1: New USB device found, idVendor=05d1, idProduct=2001, bcdDevice= 9.00 [ 2454.994259][T19839] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2455.046783][T19839] usb 6-1: Product: syz [ 2455.051039][T19839] usb 6-1: Manufacturer: syz [ 2455.066611][T19839] usb 6-1: SerialNumber: syz [ 2455.104353][T19839] usb 6-1: config 0 descriptor?? [ 2455.141230][T19839] ftdi_sio 6-1:0.0: FTDI USB Serial Device converter detected [ 2455.180732][T19839] usb 6-1: Detected FT232H [ 2455.367790][T24284] usbip_core: unknown command [ 2455.372738][T19839] ftdi_sio ttyUSB0: Unable to read latency timer: -71 [ 2455.385834][T24284] vhci_hcd: unknown pdu 0 [ 2455.396241][T24284] usbip_core: unknown command [ 2455.401703][T19839] ftdi_sio ttyUSB0: Unable to write latency timer: -71 [ 2455.411493][T19839] ftdi_sio 6-1:0.0: GPIO initialisation failed: -71 [ 2455.433398][ T4429] vhci_hcd: stop threads [ 2455.437862][ T4429] vhci_hcd: release socket [ 2455.474565][ T4429] vhci_hcd: disconnect device [ 2455.489601][T19839] usb 6-1: FTDI USB Serial Device converter now attached to ttyUSB0 [ 2455.553771][T19839] usb 6-1: USB disconnect, device number 31 [ 2455.621681][T19839] ftdi_sio ttyUSB0: FTDI USB Serial Device converter now disconnected from ttyUSB0 [ 2455.687348][T19839] ftdi_sio 6-1:0.0: device disconnected [ 2457.655690][T24327] overlayfs: unrecognized mount option "smackfsdef=wfdno" or missing value [ 2458.387175][T24333] fuse: Bad value for 'user_id' [ 2458.409220][T24334] netlink: 24 bytes leftover after parsing attributes in process `syz.1.5140'. [ 2460.113671][T14665] vhci_hcd: vhci_device speed not set [ 2463.753815][T24367] netlink: 4 bytes leftover after parsing attributes in process `syz.3.5149'. [ 2464.637692][T24371] netlink: 'syz.5.5150': attribute type 4 has an invalid length. [ 2464.647682][T24371] netlink: 17 bytes leftover after parsing attributes in process `syz.5.5150'. [ 2465.168405][T24384] overlayfs: unrecognized mount option "smackfsdef=wfdno" or missing value [ 2471.191547][T24425] atomic_op ffff8880601ed998 conn xmit_atomic 0000000000000000 [ 2471.924855][T24432] netlink: 'syz.0.5164': attribute type 4 has an invalid length. [ 2471.934268][T24432] netlink: 17 bytes leftover after parsing attributes in process `syz.0.5164'. [ 2473.041719][T24437] overlayfs: unrecognized mount option "smackfsdef=wfdno" or missing value [ 2475.850622][T24446] vivid-001: kernel_thread() failed [ 2476.554375][ T1274] ieee802154 phy0 wpan0: encryption failed: -22 [ 2476.565857][ T1274] ieee802154 phy1 wpan1: encryption failed: -22 [ 2477.098961][T24445] [U] VÔ3¸ÂFÙ¾"SÇÁ/ÉÊ4: [ 2477.902901][ T4261] Bluetooth: hci1: command 0x0409 tx timeout [ 2478.722616][T24483] netlink: 20 bytes leftover after parsing attributes in process `syz.3.5175'. [ 2480.836229][T24500] overlayfs: unrecognized mount option "smackfsdef=wfdno" or missing value [ 2482.308582][ T9148] usb 6-1: new high-speed USB device number 32 using dummy_hcd [ 2482.524266][ T9148] usb 6-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 2482.544913][ T9148] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 2482.578127][ T9148] usb 6-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 2482.612066][ T9148] usb 6-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 2482.648407][ T9148] usb 6-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 2482.672395][ T9148] usb 6-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 2482.704318][ T9148] usb 6-1: Product: syz [ 2482.722650][ T9148] usb 6-1: Manufacturer: syz [ 2482.774686][ T9148] cdc_wdm 6-1:1.0: skipping garbage [ 2482.792009][ T9148] cdc_wdm 6-1:1.0: skipping garbage [ 2482.832326][ T9148] cdc_wdm 6-1:1.0: skipping garbage [ 2482.852012][ T9148] cdc_wdm: probe of 6-1:1.0 failed with error -22 [ 2483.486188][ T126] usb 6-1: USB disconnect, device number 32 [ 2483.680924][T24523] fuse: Bad value for 'user_id' [ 2484.060609][T20538] Bluetooth: hci3: command 0x0405 tx timeout [ 2485.686925][T24540] netlink: 20 bytes leftover after parsing attributes in process `syz.1.5188'. [ 2487.503824][T24554] overlayfs: unrecognized mount option "smackfsdef=wfdno" or missing value [ 2488.156830][T24551] atomic_op ffff88807696c998 conn xmit_atomic 0000000000000000 [ 2489.184330][T24556] [U] VÔ3¸ÂFÙ¾"SÇÁ/ÉÊ4:ÃXTZ“W¡T‘ [ 2492.887918][T24606] overlayfs: missing 'lowerdir' [ 2495.260497][T24622] atomic_op ffff8880568bd998 conn xmit_atomic 0000000000000000 [ 2495.285135][T24628] atomic_op ffff8880568be998 conn xmit_atomic 0000000000000000 [ 2500.810027][T24659] overlayfs: missing 'lowerdir' [ 2501.755099][T24663] tipc: Started in network mode [ 2501.761001][T24663] tipc: Node identity aaaaaaaaaa32, cluster identity 4711 [ 2501.786177][T24663] tipc: Enabled bearer , priority 10 [ 2501.877509][T24663] tipc: Resetting bearer [ 2502.083292][T24663] tipc: Disabling bearer [ 2504.830549][T24695] overlayfs: missing 'lowerdir' [ 2508.972004][T14665] usb 1-1: new full-speed USB device number 56 using dummy_hcd [ 2509.301541][T14665] usb 1-1: not running at top speed; connect to a high speed hub [ 2510.009616][T14665] usb 1-1: config 1 interface 0 altsetting 6 endpoint 0x81 has invalid maxpacket 911, setting to 64 [ 2510.022940][T14665] usb 1-1: config 1 interface 0 altsetting 6 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 2510.049439][T20538] Bluetooth: hci1: command 0x0409 tx timeout [ 2510.064704][T14665] usb 1-1: config 1 interface 0 has no altsetting 0 [ 2510.081353][T14665] usb 1-1: New USB device found, idVendor=056a, idProduct=010f, bcdDevice= 0.40 [ 2510.108429][T14665] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2510.124574][T14665] usb 1-1: Product: syz [ 2510.129695][T14665] usb 1-1: Manufacturer: syz [ 2510.196512][T14665] usb 1-1: SerialNumber: syz [ 2510.212216][T24718] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 2512.129675][T14665] usbhid 1-1:1.0: can't add hid device: -71 [ 2512.229006][T14665] usbhid: probe of 1-1:1.0 failed with error -71 [ 2512.640271][T14665] usb 1-1: USB disconnect, device number 56 [ 2513.864117][T24762] loop1: detected capacity change from 0 to 128 [ 2513.901483][T24762] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: none. [ 2514.196591][T24766] 9pnet_virtio: no channels available for device [ 2514.211353][T24766] ip6t_rpfilter: unknown options [ 2514.859628][T13507] EXT4-fs (loop1): unmounting filesystem. [ 2516.240225][T24780] atomic_op ffff8880732b6198 conn xmit_atomic 0000000000000000 [ 2519.828130][T24811] tipc: Started in network mode [ 2519.836983][T24811] tipc: Node identity aaaaaaaaaa32, cluster identity 4711 [ 2519.870900][T24811] tipc: Enabled bearer , priority 10 [ 2519.916807][T24816] tipc: Resetting bearer [ 2520.252115][T24816] tipc: Disabling bearer [ 2525.166290][T16934] usb 4-1: new full-speed USB device number 43 using dummy_hcd [ 2525.713552][T16934] usb 4-1: not running at top speed; connect to a high speed hub [ 2525.744677][T16934] usb 4-1: config 1 interface 0 altsetting 6 endpoint 0x81 has invalid maxpacket 911, setting to 64 [ 2525.792687][T16934] usb 4-1: config 1 interface 0 altsetting 6 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 2525.809780][T16934] usb 4-1: config 1 interface 0 has no altsetting 0 [ 2526.010604][T16934] usb 4-1: New USB device found, idVendor=056a, idProduct=010f, bcdDevice= 0.40 [ 2526.128191][T16934] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2526.138236][T16934] usb 4-1: Product: syz [ 2526.150567][T16934] usb 4-1: Manufacturer: syz [ 2526.156167][T16934] usb 4-1: SerialNumber: syz [ 2526.533852][T24844] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 2526.557458][T20538] Bluetooth: hci4: command 0x0409 tx timeout [ 2526.590317][ T26] usb 7-1: new full-speed USB device number 12 using dummy_hcd [ 2526.929091][ T26] usb 7-1: not running at top speed; connect to a high speed hub [ 2527.001668][ T26] usb 7-1: config 1 interface 0 altsetting 6 endpoint 0x81 has invalid maxpacket 911, setting to 64 [ 2527.017335][T24868] netlink: 4 bytes leftover after parsing attributes in process `syz.1.5269'. [ 2527.214247][ T26] usb 7-1: config 1 interface 0 altsetting 6 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 2527.270685][ T26] usb 7-1: config 1 interface 0 has no altsetting 0 [ 2527.644489][ T26] usb 7-1: New USB device found, idVendor=056a, idProduct=010f, bcdDevice= 0.40 [ 2527.720760][ T26] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2527.795634][ T26] usb 7-1: Product: syz [ 2527.820417][ T26] usb 7-1: Manufacturer: syz [ 2527.859601][ T26] usb 7-1: SerialNumber: syz [ 2527.937074][T16934] usbhid 4-1:1.0: can't add hid device: -71 [ 2527.951396][T24862] raw-gadget.1 gadget.6: fail, usb_ep_enable returned -22 [ 2527.963775][T16934] usbhid: probe of 4-1:1.0 failed with error -71 [ 2528.045873][T16934] usb 4-1: USB disconnect, device number 43 [ 2528.267203][T20538] Bluetooth: hci2: command 0x0409 tx timeout [ 2529.436954][ T26] usbhid 7-1:1.0: can't add hid device: -71 [ 2529.452196][ T26] usbhid: probe of 7-1:1.0 failed with error -71 [ 2529.516886][ T26] usb 7-1: USB disconnect, device number 12 [ 2529.605896][T24887] atomic_op ffff88807a221198 conn xmit_atomic 0000000000000000 [ 2532.867248][T24923] loop0: detected capacity change from 0 to 128 [ 2533.661669][T24923] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: none. [ 2534.209530][T24931] 9pnet_virtio: no channels available for device [ 2538.250742][T15665] EXT4-fs (loop0): unmounting filesystem. [ 2539.452450][T24948] fuse: Bad value for 'user_id' [ 2541.748179][T24965] netlink: 4 bytes leftover after parsing attributes in process `syz.3.5293'. [ 2541.873989][ T1274] ieee802154 phy0 wpan0: encryption failed: -22 [ 2541.881728][ T1274] ieee802154 phy1 wpan1: encryption failed: -22 [ 2543.062767][T24981] device syzkaller1 entered promiscuous mode [ 2543.741618][T24989] atomic_op ffff88807bdf6198 conn xmit_atomic 0000000000000000 [ 2546.697015][T16934] usb 7-1: new full-speed USB device number 13 using dummy_hcd [ 2546.935301][T16934] usb 7-1: not running at top speed; connect to a high speed hub [ 2546.960900][T16934] usb 7-1: config 1 interface 0 altsetting 6 endpoint 0x81 has invalid maxpacket 911, setting to 64 [ 2546.995682][T16934] usb 7-1: config 1 interface 0 altsetting 6 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 2547.017260][T16934] usb 7-1: config 1 interface 0 has no altsetting 0 [ 2547.064421][T16934] usb 7-1: New USB device found, idVendor=056a, idProduct=010f, bcdDevice= 0.40 [ 2547.087127][T16934] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2547.099178][T16934] usb 7-1: Product: syz [ 2547.102930][T25007] loop0: detected capacity change from 0 to 128 [ 2547.111716][T16934] usb 7-1: Manufacturer: syz [ 2547.122503][T16934] usb 7-1: SerialNumber: syz [ 2547.142990][T25005] raw-gadget.0 gadget.6: fail, usb_ep_enable returned -22 [ 2547.238182][T25007] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: none. [ 2547.764536][T25013] 9pnet_virtio: no channels available for device [ 2548.388361][T20538] Bluetooth: hci2: command 0x0409 tx timeout [ 2548.564011][T16934] usbhid 7-1:1.0: can't add hid device: -71 [ 2548.574965][T15665] EXT4-fs (loop0): unmounting filesystem. [ 2548.577552][T16934] usbhid: probe of 7-1:1.0 failed with error -71 [ 2548.650498][T16934] usb 7-1: USB disconnect, device number 13 [ 2549.835427][T16934] usb 1-1: new full-speed USB device number 57 using dummy_hcd [ 2550.045997][T16934] usb 1-1: not running at top speed; connect to a high speed hub [ 2550.115368][T16934] usb 1-1: config 1 interface 0 altsetting 6 endpoint 0x81 has invalid maxpacket 911, setting to 64 [ 2550.155575][T16934] usb 1-1: config 1 interface 0 altsetting 6 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 2550.176001][T16934] usb 1-1: config 1 interface 0 has no altsetting 0 [ 2550.182064][T25026] fuse: Bad value for 'user_id' [ 2550.188743][T16934] usb 1-1: New USB device found, idVendor=056a, idProduct=010f, bcdDevice= 0.40 [ 2550.207660][T16934] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2550.217517][T16934] usb 1-1: Product: syz [ 2550.222517][T16934] usb 1-1: Manufacturer: syz [ 2550.228210][T16934] usb 1-1: SerialNumber: syz [ 2550.256947][T25022] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 2551.480148][T20538] Bluetooth: hci1: command 0x0409 tx timeout [ 2551.671348][T25038] atomic_op ffff888074196998 conn xmit_atomic 0000000000000000 [ 2552.407297][T25032] [U] VÔ3¸ÂFÙ¾"SÇÁ/ÉÊ4:ÃXTZ“W¡T‘’LWµ« [ 2552.723443][T16934] usbhid 1-1:1.0: can't add hid device: -71 [ 2552.731829][T16934] usbhid: probe of 1-1:1.0 failed with error -71 [ 2552.743325][T16934] usb 1-1: USB disconnect, device number 57 [ 2553.052648][T25056] device syzkaller1 entered promiscuous mode [ 2553.063113][T25057] atomic_op ffff8880555b4198 conn xmit_atomic 0000000000000000 [ 2553.940274][T25063] device syzkaller1 entered promiscuous mode [ 2554.332382][T25066] loop5: detected capacity change from 0 to 128 [ 2554.455102][T25066] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: none. [ 2554.849413][T25073] 9pnet_virtio: no channels available for device [ 2555.073616][T25073] ip6t_rpfilter: unknown options [ 2556.280385][T16697] EXT4-fs (loop5): unmounting filesystem. [ 2556.607334][T25076] platform regulatory.0: Direct firmware load for regulatory.db failed with error -2 [ 2556.620311][T25076] platform regulatory.0: Falling back to sysfs fallback for: regulatory.db [ 2557.441906][T25084] netlink: 4 bytes leftover after parsing attributes in process `syz.5.5319'. [ 2557.921546][T25090] platform regulatory.0: Direct firmware load for regulatory.db failed with error -2 [ 2557.934552][T25090] platform regulatory.0: Falling back to sysfs fallback for: regulatory.db [ 2558.672284][T25097] fuse: Bad value for 'user_id' [ 2562.037874][T19839] usb 4-1: new full-speed USB device number 44 using dummy_hcd [ 2562.588952][T19839] usb 4-1: device descriptor read/all, error -71 [ 2563.609366][ T4261] Bluetooth: hci4: command 0x0409 tx timeout [ 2563.836307][T25131] overlayfs: failed to resolve './file0': -2 [ 2564.894376][T25121] device syzkaller1 entered promiscuous mode [ 2565.807600][T25141] platform regulatory.0: Direct firmware load for regulatory.db failed with error -2 [ 2565.819480][T25141] platform regulatory.0: Falling back to sysfs fallback for: regulatory.db [ 2566.819511][T25143] atomic_op ffff888028b23998 conn xmit_atomic 0000000000000000 [ 2567.718552][T25169] atomic_op ffff888073000998 conn xmit_atomic 0000000000000000 [ 2571.203739][T25185] [U] VÔ3¸ÂFÙ¾"SÇÁ/ÉÊ4:ÃXTZ“W¡T‘’LWµ« [ 2571.333038][T18031] usb 6-1: new full-speed USB device number 33 using dummy_hcd [ 2571.618867][T18031] usb 6-1: not running at top speed; connect to a high speed hub [ 2571.652679][T18031] usb 6-1: config 1 interface 0 altsetting 6 endpoint 0x81 has invalid maxpacket 911, setting to 64 [ 2571.687804][T18031] usb 6-1: config 1 interface 0 altsetting 6 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 2571.710745][T18031] usb 6-1: config 1 interface 0 has no altsetting 0 [ 2571.738231][T18031] usb 6-1: New USB device found, idVendor=056a, idProduct=010f, bcdDevice= 0.40 [ 2571.829001][T18031] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2571.873414][T18031] usb 6-1: Product: syz [ 2571.882115][T18031] usb 6-1: Manufacturer: syz [ 2571.895824][T18031] usb 6-1: SerialNumber: syz [ 2571.904167][T25197] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22 [ 2571.943880][T25206] netlink: 4 bytes leftover after parsing attributes in process `syz.0.5344'. [ 2572.012913][T25203] netlink: 4 bytes leftover after parsing attributes in process `syz.3.5343'. [ 2572.549807][T25213] platform regulatory.0: Direct firmware load for regulatory.db failed with error -2 [ 2572.561360][T25213] platform regulatory.0: Falling back to sysfs fallback for: regulatory.db [ 2572.825812][ T4261] Bluetooth: hci3: command 0x0409 tx timeout [ 2573.537064][T18031] usbhid 6-1:1.0: can't add hid device: -71 [ 2573.574119][T18031] usbhid: probe of 6-1:1.0 failed with error -71 [ 2573.631959][T18031] usb 6-1: USB disconnect, device number 33 [ 2577.601393][T25243] loop6: detected capacity change from 0 to 128 [ 2578.167519][T25243] EXT4-fs (loop6): mounted filesystem without journal. Quota mode: none. [ 2578.197045][T25250] netlink: 16 bytes leftover after parsing attributes in process `syz.0.5356'. [ 2578.496255][T25252] 9pnet_virtio: no channels available for device [ 2578.549908][T25252] ip6t_rpfilter: unknown options [ 2579.447888][T15206] EXT4-fs (loop6): unmounting filesystem. [ 2579.747904][T25256] platform regulatory.0: Direct firmware load for regulatory.db failed with error -2 [ 2579.760910][T25256] platform regulatory.0: Falling back to sysfs fallback for: regulatory.db [ 2580.555483][T25264] fuse: Bad value for 'user_id' [ 2580.702507][T25263] netlink: 'syz.5.5361': attribute type 1 has an invalid length. [ 2581.389575][T24163] usb 2-1: new full-speed USB device number 35 using dummy_hcd [ 2581.803204][T25263] 8021q: adding VLAN 0 to HW filter on device bond7 [ 2581.874065][T25272] bond7: (slave gretap3): making interface the new active one [ 2581.903907][T25272] bond7: (slave gretap3): Enslaving as an active interface with an up link [ 2581.978223][T24163] usb 2-1: not running at top speed; connect to a high speed hub [ 2582.004767][T24163] usb 2-1: config 1 interface 0 altsetting 6 endpoint 0x81 has invalid maxpacket 911, setting to 64 [ 2582.018010][ T4305] IPv6: ADDRCONF(NETDEV_CHANGE): bond7: link becomes ready [ 2582.045267][T24163] usb 2-1: config 1 interface 0 altsetting 6 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 2582.062626][T24163] usb 2-1: config 1 interface 0 has no altsetting 0 [ 2582.073741][T24163] usb 2-1: New USB device found, idVendor=056a, idProduct=010f, bcdDevice= 0.40 [ 2582.098547][T24163] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2582.130302][T24163] usb 2-1: Product: syz [ 2582.135413][T24163] usb 2-1: Manufacturer: syz [ 2582.141478][T24163] usb 2-1: SerialNumber: syz [ 2582.167925][T25269] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 2583.258948][T20538] Bluetooth: hci0: command 0x0409 tx timeout [ 2583.273998][T25279] loop5: detected capacity change from 0 to 512 [ 2583.387771][T25279] EXT4-fs: Warning: mounting with data=journal disables delayed allocation, dioread_nolock, O_DIRECT and fast_commit support! [ 2583.554949][T25279] EXT4-fs (loop5): encrypted files will use data=ordered instead of data journaling mode [ 2583.871548][T24163] usbhid 2-1:1.0: can't add hid device: -71 [ 2583.882177][T24163] usbhid: probe of 2-1:1.0 failed with error -71 [ 2583.920557][T24163] usb 2-1: USB disconnect, device number 35 [ 2584.197314][T25279] EXT4-fs (loop5): 1 truncate cleaned up [ 2584.263688][T25279] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: none. [ 2586.899568][T16697] EXT4-fs (loop5): unmounting filesystem. [ 2588.775243][T25310] netlink: 48 bytes leftover after parsing attributes in process `syz.0.5369'. [ 2591.577691][T14665] usb 7-1: new full-speed USB device number 14 using dummy_hcd [ 2592.112862][T14665] usb 7-1: not running at top speed; connect to a high speed hub [ 2592.167049][T14665] usb 7-1: config 1 interface 0 altsetting 6 endpoint 0x81 has invalid maxpacket 911, setting to 64 [ 2592.193961][T14665] usb 7-1: config 1 interface 0 altsetting 6 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 2592.217007][T14665] usb 7-1: config 1 interface 0 has no altsetting 0 [ 2592.230114][T14665] usb 7-1: New USB device found, idVendor=056a, idProduct=010f, bcdDevice= 0.40 [ 2592.242944][T14665] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2592.253068][T14665] usb 7-1: Product: syz [ 2592.253077][T25343] loop3: detected capacity change from 0 to 256 [ 2592.264222][T25343] exfat: Unknown parameter 'nameª}t' [ 2592.266337][T14665] usb 7-1: Manufacturer: syz [ 2592.296050][T14665] usb 7-1: SerialNumber: syz [ 2592.313936][T25340] raw-gadget.0 gadget.6: fail, usb_ep_enable returned -22 [ 2593.436390][T20538] Bluetooth: hci2: command 0x0409 tx timeout [ 2593.629983][T25353] loop1: detected capacity change from 0 to 512 [ 2593.836395][T25353] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 2594.098925][ C1] hrtimer: interrupt took 41945 ns [ 2594.735455][T14665] usbhid 7-1:1.0: can't add hid device: -71 [ 2594.797459][T14665] usbhid: probe of 7-1:1.0 failed with error -71 [ 2594.809020][T14665] usb 7-1: USB disconnect, device number 14 [ 2594.821187][T25353] EXT4-fs (loop1): 1 truncate cleaned up [ 2594.843724][T25363] fuse: Bad value for 'user_id' [ 2594.851216][T25353] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: none. [ 2597.118816][T25372] EXT4-fs error (device loop1): htree_dirblock_to_tree:1112: inode #2: block 13: comm syz.1.5380: bad entry in directory: rec_len is smaller than minimal - offset=24, inode=11, rec_len=8, size=1024 fake=0 [ 2597.912591][T13507] EXT4-fs (loop1): unmounting filesystem. [ 2600.579509][T25406] loop1: detected capacity change from 0 to 256 [ 2600.600136][T25406] exfat: Unknown parameter 'nameª}t' [ 2600.657066][T19207] I/O error, dev loop1, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 2606.286236][T24163] usb 1-1: new full-speed USB device number 58 using dummy_hcd [ 2607.292659][T20538] Bluetooth: hci1: command 0x0409 tx timeout [ 2607.327279][T24163] usb 1-1: not running at top speed; connect to a high speed hub [ 2607.349461][T24163] usb 1-1: config 1 interface 0 altsetting 6 endpoint 0x81 has invalid maxpacket 911, setting to 64 [ 2607.398198][T24163] usb 1-1: config 1 interface 0 altsetting 6 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 2607.458482][T24163] usb 1-1: config 1 interface 0 has no altsetting 0 [ 2607.500999][T24163] usb 1-1: New USB device found, idVendor=056a, idProduct=010f, bcdDevice= 0.40 [ 2607.545987][T24163] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2607.556244][ T1274] ieee802154 phy0 wpan0: encryption failed: -22 [ 2607.565312][ T1274] ieee802154 phy1 wpan1: encryption failed: -22 [ 2607.589339][T24163] usb 1-1: Product: syz [ 2607.611049][T24163] usb 1-1: Manufacturer: syz [ 2607.624968][T24163] usb 1-1: SerialNumber: syz [ 2607.648839][T25438] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 2609.576161][T24163] usbhid 1-1:1.0: can't add hid device: -71 [ 2609.587805][T24163] usbhid: probe of 1-1:1.0 failed with error -71 [ 2609.601637][T24163] usb 1-1: USB disconnect, device number 58 [ 2610.011123][T25464] fuse: Bad value for 'user_id' [ 2612.099701][T25478] loop3: detected capacity change from 0 to 256 [ 2612.211144][T25478] exfat: Unknown parameter 'nameª}t' [ 2612.346306][T25485] netlink: 48 bytes leftover after parsing attributes in process `syz.6.5407'. [ 2613.317279][T19207] I/O error, dev loop3, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 2615.208176][T25504] fuse: Bad value for 'fd' [ 2616.678008][ T26] usb 7-1: new full-speed USB device number 15 using dummy_hcd [ 2616.898067][ T26] usb 7-1: not running at top speed; connect to a high speed hub [ 2616.911842][ T26] usb 7-1: config 1 interface 0 altsetting 6 endpoint 0x81 has invalid maxpacket 911, setting to 64 [ 2617.073090][ T26] usb 7-1: config 1 interface 0 altsetting 6 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 2617.129413][ T26] usb 7-1: config 1 interface 0 has no altsetting 0 [ 2617.140362][ T26] usb 7-1: New USB device found, idVendor=056a, idProduct=010f, bcdDevice= 0.40 [ 2617.151791][ T26] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2617.171557][ T26] usb 7-1: Product: syz [ 2617.186260][ T26] usb 7-1: Manufacturer: syz [ 2617.225546][ T26] usb 7-1: SerialNumber: syz [ 2617.246048][T25512] raw-gadget.0 gadget.6: fail, usb_ep_enable returned -22 [ 2617.550757][T25529] loop1: detected capacity change from 0 to 256 [ 2617.624103][T25529] exfat: Unknown parameter 'nameª}t' [ 2617.853647][T20538] Bluetooth: hci2: command 0x0409 tx timeout [ 2618.864878][ T26] usbhid 7-1:1.0: can't add hid device: -71 [ 2619.319560][ T26] usbhid: probe of 7-1:1.0 failed with error -71 [ 2620.151866][ T26] usb 7-1: USB disconnect, device number 15 [ 2621.214778][T25546] netlink: 16 bytes leftover after parsing attributes in process `syz.5.5421'. [ 2621.331240][T25554] netlink: 8 bytes leftover after parsing attributes in process `syz.1.5420'. [ 2622.079121][T25552] loop0: detected capacity change from 0 to 128 [ 2622.377729][T25552] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: none. [ 2622.853319][T25566] 9pnet_virtio: no channels available for device [ 2622.892131][T25566] ip6t_rpfilter: unknown options [ 2623.734077][T15665] EXT4-fs (loop0): unmounting filesystem. [ 2627.887648][T25607] netlink: 8 bytes leftover after parsing attributes in process `syz.5.5434'. [ 2628.246576][T20538] Bluetooth: hci1: command 0x0409 tx timeout [ 2628.903846][T25598] netlink: 4 bytes leftover after parsing attributes in process `syz.1.5432'. [ 2628.969962][T25613] loop5: detected capacity change from 0 to 256 [ 2628.994028][T25615] fuse: Bad value for 'user_id' [ 2629.016598][T25613] exfat: Unknown parameter 'nameª}t' [ 2633.560834][T25630] platform regulatory.0: Direct firmware load for regulatory.db failed with error -2 [ 2633.572450][T25630] platform regulatory.0: Falling back to sysfs fallback for: regulatory.db [ 2637.097280][T20538] Bluetooth: hci2: command 0x0409 tx timeout [ 2637.371449][T25662] loop3: detected capacity change from 0 to 512 [ 2637.407676][T25662] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 2637.465163][T25662] EXT4-fs (loop3): 1 truncate cleaned up [ 2637.483573][T25662] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: none. [ 2638.773023][T25669] loop5: detected capacity change from 0 to 256 [ 2638.781365][T15316] EXT4-fs (loop3): unmounting filesystem. [ 2638.785439][T25669] exfat: Unknown parameter 'nameª}t' [ 2641.158061][T25678] platform regulatory.0: Direct firmware load for regulatory.db failed with error -2 [ 2641.169548][T25678] platform regulatory.0: Falling back to sysfs fallback for: regulatory.db [ 2641.572045][T25672] loop1: detected capacity change from 0 to 128 [ 2641.719732][T25672] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: none. [ 2642.490391][T13507] EXT4-fs (loop1): unmounting filesystem. [ 2647.445923][T21150] usb 1-1: new full-speed USB device number 59 using dummy_hcd [ 2647.685722][T21150] usb 1-1: not running at top speed; connect to a high speed hub [ 2647.788896][T21150] usb 1-1: config 1 interface 0 altsetting 6 endpoint 0x81 has invalid maxpacket 911, setting to 64 [ 2648.133863][T21150] usb 1-1: config 1 interface 0 altsetting 6 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 2648.153516][T21150] usb 1-1: config 1 interface 0 has no altsetting 0 [ 2648.210446][T21150] usb 1-1: New USB device found, idVendor=056a, idProduct=010f, bcdDevice= 0.40 [ 2648.279578][T21150] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2648.310915][T21150] usb 1-1: Product: syz [ 2648.316931][T21150] usb 1-1: Manufacturer: syz [ 2648.340109][T21150] usb 1-1: SerialNumber: syz [ 2648.359992][T25729] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 2649.609849][T20538] Bluetooth: hci1: command 0x0409 tx timeout [ 2650.009432][T21150] usbhid 1-1:1.0: can't add hid device: -71 [ 2650.085474][T21150] usbhid: probe of 1-1:1.0 failed with error -71 [ 2650.220248][T21150] usb 1-1: USB disconnect, device number 59 [ 2650.907239][T25750] loop6: detected capacity change from 0 to 128 [ 2651.032987][T25750] EXT4-fs (loop6): mounted filesystem without journal. Quota mode: none. [ 2652.231257][T25760] loop5: detected capacity change from 0 to 128 [ 2652.381529][T25760] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: none. [ 2652.474147][T25764] 9pnet_virtio: no channels available for device [ 2652.522546][T25764] ip6t_rpfilter: unknown options [ 2653.383019][T15206] EXT4-fs (loop6): unmounting filesystem. [ 2653.496778][T25768] 9pnet_virtio: no channels available for device [ 2653.541597][T25768] ip6t_rpfilter: unknown options [ 2654.263333][T16697] EXT4-fs (loop5): unmounting filesystem. [ 2656.781930][T25787] fuse: Invalid rootmode [ 2657.351946][T25791] platform regulatory.0: Direct firmware load for regulatory.db failed with error -2 [ 2657.363492][T25791] platform regulatory.0: Falling back to sysfs fallback for: regulatory.db [ 2661.103070][ T27] audit: type=1326 audit(1739441418.536:58): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=25814 comm="syz.1.5484" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f76c6b8cde9 code=0x0 [ 2661.250894][T25818] netlink: 'syz.1.5484': attribute type 5 has an invalid length. [ 2663.180560][T25844] fuse: Bad value for 'user_id' [ 2672.520149][T20538] Bluetooth: hci0: command 0x0409 tx timeout [ 2673.175606][T25889] netlink: 80 bytes leftover after parsing attributes in process `syz.1.5498'. [ 2673.237297][ T1274] ieee802154 phy0 wpan0: encryption failed: -22 [ 2673.245461][ T1274] ieee802154 phy1 wpan1: encryption failed: -22 [ 2673.674095][T25910] netlink: 4 bytes leftover after parsing attributes in process `syz.5.5503'. [ 2674.223163][T25917] platform regulatory.0: Direct firmware load for regulatory.db failed with error -2 [ 2674.234680][T25917] platform regulatory.0: Falling back to sysfs fallback for: regulatory.db [ 2677.851391][ T27] audit: type=1326 audit(1739441434.204:59): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=25941 comm="syz.6.5512" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f749518cde9 code=0x0 [ 2677.968891][T25948] netlink: 'syz.6.5512': attribute type 5 has an invalid length. [ 2678.364556][T20538] Bluetooth: hci2: command 0x0409 tx timeout [ 2685.644287][T20538] Bluetooth: hci0: command 0x0409 tx timeout [ 2686.256857][T26016] netlink: 80 bytes leftover after parsing attributes in process `syz.1.5530'. [ 2689.593818][T26035] platform regulatory.0: Direct firmware load for regulatory.db failed with error -2 [ 2689.605368][T26035] platform regulatory.0: Falling back to sysfs fallback for: regulatory.db [ 2694.462729][T20538] Bluetooth: hci2: command 0x0409 tx timeout [ 2703.140948][T26146] netlink: 80 bytes leftover after parsing attributes in process `syz.6.5557'. [ 2703.533080][ T4261] Bluetooth: hci2: command 0x0409 tx timeout [ 2704.543483][T26155] platform regulatory.0: Direct firmware load for regulatory.db failed with error -2 [ 2704.555048][T26155] platform regulatory.0: Falling back to sysfs fallback for: regulatory.db [ 2706.831764][T24163] usb 4-1: new full-speed USB device number 46 using dummy_hcd [ 2707.091929][T24163] usb 4-1: not running at top speed; connect to a high speed hub [ 2707.110678][T24163] usb 4-1: config 1 interface 0 altsetting 6 endpoint 0x81 has invalid maxpacket 911, setting to 64 [ 2707.343174][T24163] usb 4-1: config 1 interface 0 altsetting 6 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 2707.724597][T24163] usb 4-1: config 1 interface 0 has no altsetting 0 [ 2708.073448][T24163] usb 4-1: New USB device found, idVendor=056a, idProduct=010f, bcdDevice= 0.40 [ 2708.096046][T24163] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2708.107822][T24163] usb 4-1: Product: syz [ 2708.114339][T24163] usb 4-1: Manufacturer: syz [ 2708.120782][T24163] usb 4-1: SerialNumber: syz [ 2708.131116][T26169] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 2709.097500][T20538] Bluetooth: hci4: command 0x0409 tx timeout [ 2709.718009][T20538] Bluetooth: hci2: command 0x0409 tx timeout [ 2709.809797][T26193] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 2709.831447][T26193] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 2709.847456][T26193] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 2709.858928][T26193] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 2709.869208][T26193] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3 [ 2709.883563][T26193] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 2710.469901][T13507] device syz_tun left promiscuous mode [ 2711.450855][T24163] usbhid 4-1:1.0: can't add hid device: -71 [ 2711.458082][T24163] usbhid: probe of 4-1:1.0 failed with error -71 [ 2711.542505][T24163] usb 4-1: USB disconnect, device number 46 [ 2711.927161][T26191] chnl_net:caif_netlink_parms(): no params data found [ 2712.147586][T26193] Bluetooth: hci5: command 0x0409 tx timeout [ 2712.316161][T26191] bridge0: port 1(bridge_slave_0) entered blocking state [ 2712.324833][T26191] bridge0: port 1(bridge_slave_0) entered disabled state [ 2712.360382][T26191] device bridge_slave_0 entered promiscuous mode [ 2712.411166][T26191] bridge0: port 2(bridge_slave_1) entered blocking state [ 2712.471473][T26191] bridge0: port 2(bridge_slave_1) entered disabled state [ 2712.492469][T26191] device bridge_slave_1 entered promiscuous mode [ 2712.625414][T26191] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 2712.860632][ T4305] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2712.931189][T26191] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 2712.996718][ T4305] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2713.127008][T26191] team0: Port device team_slave_0 added [ 2713.234776][ T4305] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2713.334365][T26191] team0: Port device team_slave_1 added [ 2713.500465][ T4305] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2713.546675][T26191] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 2713.573451][T26191] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 2713.634541][T26191] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 2713.650126][T26191] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 2713.662931][T26191] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 2713.709524][T26191] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 2713.958053][T26191] device hsr_slave_0 entered promiscuous mode [ 2713.997064][T26191] device hsr_slave_1 entered promiscuous mode [ 2714.015285][T26191] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 2714.032349][T26191] Cannot create hsr debugfs directory [ 2714.369568][ T4305] tipc: Left network mode [ 2714.380486][T26193] Bluetooth: hci5: command 0x041b tx timeout [ 2716.142853][T26191] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 2716.191789][T26191] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 2716.293154][T26191] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 2716.350389][T26191] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 2716.602941][T26193] Bluetooth: hci5: command 0x040f tx timeout [ 2717.177722][T26191] 8021q: adding VLAN 0 to HW filter on device bond0 [ 2717.235096][T26191] 8021q: adding VLAN 0 to HW filter on device team0 [ 2717.773123][T26191] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 2717.912004][T26191] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 2717.934839][ T4430] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 2717.946482][ T4430] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 2717.964773][ T4430] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 2718.001710][ T4430] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 2718.051182][ T4430] bridge0: port 1(bridge_slave_0) entered blocking state [ 2718.059789][ T4430] bridge0: port 1(bridge_slave_0) entered forwarding state [ 2718.075624][ T4430] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 2718.425864][ T4430] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 2719.280255][T26193] Bluetooth: hci5: command 0x0419 tx timeout [ 2719.582961][ T4430] bridge0: port 2(bridge_slave_1) entered blocking state [ 2719.591835][ T4430] bridge0: port 2(bridge_slave_1) entered forwarding state [ 2719.930593][ T27] audit: type=1326 audit(1739441473.566:60): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=26403 comm="syz.0.5614" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb57f78cde9 code=0x7ffc0000 [ 2719.964430][ T27] audit: type=1326 audit(1739441473.594:61): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=26403 comm="syz.0.5614" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fb57f78cde9 code=0x7ffc0000 [ 2719.970512][T26402] netlink: 116 bytes leftover after parsing attributes in process `syz.3.5613'. [ 2719.992216][ T27] audit: type=1326 audit(1739441473.594:62): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=26403 comm="syz.0.5614" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb57f78cde9 code=0x7ffc0000 [ 2720.004680][ T4430] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 2720.041648][T26405] netlink: 140 bytes leftover after parsing attributes in process `syz.0.5614'. [ 2720.053138][ T27] audit: type=1326 audit(1739441473.594:63): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=26403 comm="syz.0.5614" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fb57f78cde9 code=0x7ffc0000 [ 2720.080798][ T27] audit: type=1326 audit(1739441473.594:64): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=26403 comm="syz.0.5614" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb57f78cde9 code=0x7ffc0000 [ 2720.597739][ T27] audit: type=1326 audit(1739441473.594:65): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=26403 comm="syz.0.5614" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fb57f78cde9 code=0x7ffc0000 [ 2720.681271][ T4430] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 2720.735940][ T4430] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 2721.544634][T26193] Bluetooth: hci5: command 0x0405 tx timeout [ 2738.917571][ T1274] ieee802154 phy0 wpan0: encryption failed: -22 [ 2738.925255][ T1274] ieee802154 phy1 wpan1: encryption failed: -22 [ 2804.600708][ T1274] ieee802154 phy0 wpan0: encryption failed: -22 [ 2804.608349][ T1274] ieee802154 phy1 wpan1: encryption failed: -22 [ 2834.359674][ C0] rcu: INFO: rcu_preempt detected stalls on CPUs/tasks: [ 2834.368051][ C0] rcu: Tasks blocked on level-0 rcu_node (CPUs 0-1): P24872/1:b..l [ 2834.378373][ C0] (detected by 0, t=10502 jiffies, g=172601, q=141 ncpus=2) [ 2834.387236][ C0] task:kworker/u4:7 state:R running task stack:22328 pid:24872 ppid:2 flags:0x00004000 [ 2834.401872][ C0] Workqueue: bat_events batadv_iv_send_outstanding_bat_ogm_packet [ 2834.411395][ C0] Call Trace: [ 2834.415337][ C0] [ 2834.418864][ C0] __schedule+0x143f/0x4570 [ 2834.424372][ C0] ? release_firmware_map_entry+0x186/0x186 [ 2834.431463][ C0] ? print_irqtrace_events+0x210/0x210 [ 2834.438042][ C0] ? mark_lock+0x9a/0x340 [ 2834.443269][ C0] ? preempt_schedule_irq+0xec/0x1c0 [ 2834.449631][ C0] preempt_schedule_irq+0xf7/0x1c0 [ 2834.455781][ C0] ? preempt_schedule_notrace+0x140/0x140 [ 2834.462656][ C0] ? lockdep_hardirqs_on_prepare+0x438/0x7a0 [ 2834.469978][ C0] irqentry_exit+0x53/0x80 [ 2834.475357][ C0] asm_sysvec_apic_timer_interrupt+0x16/0x20 [ 2834.482555][ C0] RIP: 0010:lock_acquire+0x194/0x5a0 [ 2834.488926][ C0] Code: 4c 89 fb 48 c1 eb 03 42 80 3c 2b 00 74 08 4c 89 ff e8 50 8d 77 00 48 c7 84 24 80 00 00 00 00 00 00 00 9c 8f 84 24 80 00 00 00 <42> 80 3c 2b 00 74 08 4c 89 ff e8 ad 8c 77 00 48 8d 5c 24 60 4c 8b [ 2834.512482][ C0] RSP: 0018:ffffc9000501f900 EFLAGS: 00000246 [ 2834.519778][ C0] RAX: 0000000000000000 RBX: 1ffff92000a03f30 RCX: ffffffff816aa22b [ 2834.529359][ C0] RDX: 0000000000000000 RSI: ffffffff8b5e6960 RDI: ffffffff8b5e6920 [ 2834.538943][ C0] RBP: ffffc9000501fa48 R08: dffffc0000000000 R09: fffffbfff1d36536 [ 2834.548524][ C0] R10: 0000000000000000 R11: dffffc0000000001 R12: 1ffff92000a03f28 [ 2834.558106][ C0] R13: dffffc0000000000 R14: 0000000000000000 R15: ffffc9000501f980 [ 2834.567695][ C0] ? lock_acquire+0xeb/0x5a0 [ 2834.573249][ C0] ? read_lock_is_recursive+0x10/0x10 [ 2834.579737][ C0] ? batadv_iv_ogm_schedule+0x41a/0x1090 [ 2834.586548][ C0] ? __lock_acquire+0x1f80/0x1f80 [ 2834.592612][ C0] ? batadv_primary_if_get_selected+0x3f0/0x510 [ 2834.600146][ C0] batadv_iv_ogm_schedule+0x43b/0x1090 [ 2834.606728][ C0] ? batadv_iv_ogm_schedule+0x41a/0x1090 [ 2834.613517][ C0] ? batadv_iv_ogm_schedule+0x41a/0x1090 [ 2834.620310][ C0] ? batadv_iv_send_outstanding_bat_ogm_packet+0x800/0x800 [ 2834.628972][ C0] ? batadv_send_skb_packet+0x417/0x660 [ 2834.635719][ C0] batadv_iv_send_outstanding_bat_ogm_packet+0x6fa/0x800 [ 2834.644206][ C0] ? process_one_work+0x7a9/0x11d0 [ 2834.650365][ C0] process_one_work+0x8a9/0x11d0 [ 2834.656336][ C0] ? worker_detach_from_pool+0x260/0x260 [ 2834.663158][ C0] ? _raw_spin_lock_irqsave+0x120/0x120 [ 2834.669864][ C0] ? kthread_data+0x4e/0xc0 [ 2834.675304][ C0] ? wq_worker_running+0x97/0x190 [ 2834.681354][ C0] worker_thread+0xa47/0x1200 [ 2834.687000][ C0] ? _raw_spin_unlock+0x40/0x40 [ 2834.692905][ C0] kthread+0x28d/0x320 [ 2834.697808][ C0] ? worker_clr_flags+0x190/0x190 [ 2834.703855][ C0] ? kthread_blkcg+0xd0/0xd0 [ 2834.709378][ C0] ret_from_fork+0x1f/0x30 [ 2834.714715][ C0] [ 2834.718350][ C0] rcu: rcu_preempt kthread starved for 9741 jiffies! g172601 f0x0 RCU_GP_WAIT_FQS(5) ->state=0x0 ->cpu=0 [ 2834.731794][ C0] rcu: Unless rcu_preempt kthread gets sufficient CPU time, OOM is now expected behavior. [ 2834.743764][ C0] rcu: RCU grace-period kthread stack dump: [ 2834.750840][ C0] task:rcu_preempt state:R running task stack:26136 pid:16 ppid:2 flags:0x00004000 [ 2834.763790][ C0] Call Trace: [ 2834.767733][ C0] [ 2834.771264][ C0] __schedule+0x143f/0x4570 [ 2834.776691][ C0] ? _raw_spin_unlock+0x40/0x40 [ 2834.782553][ C0] ? release_firmware_map_entry+0x186/0x186 [ 2834.789653][ C0] ? lockdep_softirqs_off+0x420/0x420 [ 2834.796117][ C0] ? _raw_spin_unlock_irqrestore+0xd9/0x130 [ 2834.803219][ C0] ? _raw_spin_unlock+0x40/0x40 [ 2834.809084][ C0] schedule+0xbf/0x180 [ 2834.813982][ C0] schedule_timeout+0x1b9/0x300 [ 2834.819822][ C0] ? console_conditional_schedule+0x40/0x40 [ 2834.826912][ C0] ? update_process_times+0x1b0/0x1b0 [ 2834.833381][ C0] ? prepare_to_swait_event+0x329/0x350 [ 2834.840064][ C0] rcu_gp_fqs_loop+0x2d2/0x1150 [ 2834.845908][ C0] ? dyntick_save_progress_counter+0x2b0/0x2b0 [ 2834.853319][ C0] ? lockdep_hardirqs_on+0x94/0x130 [ 2834.859577][ C0] ? rcu_gp_init+0x15f0/0x15f0 [ 2834.865308][ C0] ? _raw_spin_unlock_irqrestore+0xd9/0x130 [ 2834.872405][ C0] ? finish_swait+0xcf/0x1e0 [ 2834.877938][ C0] rcu_gp_kthread+0xa3/0x3b0 [ 2834.883468][ C0] ? rcu_report_qs_rsp+0x1a0/0x1a0 [ 2834.889619][ C0] ? _raw_spin_unlock_irqrestore+0xd9/0x130 [ 2834.896718][ C0] ? __kthread_parkme+0x168/0x1c0 [ 2834.902777][ C0] kthread+0x28d/0x320 [ 2834.907673][ C0] ? rcu_report_qs_rsp+0x1a0/0x1a0 [ 2834.913823][ C0] ? kthread_blkcg+0xd0/0xd0 [ 2834.919368][ C0] ret_from_fork+0x1f/0x30 [ 2834.924703][ C0] [ 2834.928334][ C0] rcu: Stack dump where RCU GP kthread last ran: [ 2834.935942][ C0] CPU: 0 PID: 0 Comm: swapper/0 Not tainted 6.1.128-syzkaller #0 [ 2834.945210][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 12/27/2024 [ 2834.957309][ C0] RIP: 0010:acpi_idle_do_entry+0x10f/0x340 [ 2834.964321][ C0] Code: 6a cd f6 48 83 e3 08 0f 85 0b 01 00 00 4c 8d 74 24 20 e8 b4 26 d4 f6 0f 1f 44 00 00 e8 1a 66 cd f6 0f 00 2d d3 67 ab 00 fb f4 <4c> 89 f3 48 c1 eb 03 42 80 3c 3b 00 74 08 4c 89 f7 e8 6b f9 24 f7 [ 2834.987873][ C0] RSP: 0018:ffffffff8d007b20 EFLAGS: 000002d3 [ 2834.995168][ C0] RAX: ffffffff8abd3686 RBX: 0000000000000000 RCX: ffffffff8d0bd8c0 [ 2835.004739][ C0] RDX: 0000000000000000 RSI: ffffffff8b0c0340 RDI: ffffffff8b5e6980 [ 2835.014322][ C0] RBP: ffffffff8d007bb0 R08: ffffffff8abd3668 R09: fffffbfff1a17b19 [ 2835.023898][ C0] R10: 0000000000000000 R11: dffffc0000000001 R12: 1ffffffff1a00f64 [ 2835.033470][ C0] R13: ffff888142320804 R14: ffffffff8d007b40 R15: dffffc0000000000 [ 2835.043046][ C0] FS: 0000000000000000(0000) GS:ffff8880b8e00000(0000) knlGS:0000000000000000 [ 2835.053771][ C0] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 2835.061676][ C0] CR2: 00007f656d3ec6c0 CR3: 000000007e138000 CR4: 00000000003506f0 [ 2835.071261][ C0] Call Trace: [ 2835.075202][ C0] [ 2835.078623][ C0] ? rcu_check_gp_kthread_starvation+0x1b8/0x220 [ 2835.086242][ C0] ? print_other_cpu_stall+0x150c/0x1640 [ 2835.093036][ C0] ? print_cpu_stall+0x5f0/0x5f0 [ 2835.098973][ C0] ? __lock_acquire+0x1f80/0x1f80 [ 2835.105055][ C0] ? do_raw_spin_unlock+0x137/0x8a0 [ 2835.111318][ C0] ? rcu_sched_clock_irq+0xaf6/0x1200 [ 2835.117784][ C0] ? rcutree_dead_cpu+0x20/0x20 [ 2835.123619][ C0] ? hrtimer_run_queues+0x163/0x450 [ 2835.129884][ C0] ? update_process_times+0x147/0x1b0 [ 2835.136343][ C0] ? tick_sched_timer+0x386/0x550 [ 2835.142386][ C0] ? tick_setup_sched_timer+0x2f0/0x2f0 [ 2835.149053][ C0] ? __hrtimer_run_queues+0x5a7/0xe50 [ 2835.155534][ C0] ? hrtimer_interrupt+0x980/0x980 [ 2835.161684][ C0] ? ktime_get_update_offsets_now+0x407/0x420 [ 2835.169003][ C0] ? hrtimer_interrupt+0x392/0x980 [ 2835.175271][ C0] ? __sysvec_apic_timer_interrupt+0x158/0x5b0 [ 2835.182712][ C0] ? sysvec_apic_timer_interrupt+0x9b/0xc0 [ 2835.189692][ C0] [ 2835.193211][ C0] [ 2835.196738][ C0] ? asm_sysvec_apic_timer_interrupt+0x16/0x20 [ 2835.204139][ C0] ? acpi_idle_do_entry+0xe8/0x340 [ 2835.210290][ C0] ? acpi_idle_do_entry+0x106/0x340 [ 2835.216547][ C0] ? acpi_idle_do_entry+0x10f/0x340 [ 2835.222809][ C0] ? acpi_idle_enter_bm+0x5e0/0x5e0 [ 2835.229067][ C0] ? lockdep_hardirqs_on_prepare+0x438/0x7a0 [ 2835.236271][ C0] ? __sched_clock_gtod_offset+0xe0/0xe0 [ 2835.243050][ C0] acpi_idle_enter+0x352/0x4f0 [ 2835.248792][ C0] cpuidle_enter_state+0x516/0xf80 [ 2835.255058][ C0] ? cpuidle_enter_s2idle+0x6b0/0x6b0 [ 2835.261531][ C0] ? menu_enable_device+0x380/0x380 [ 2835.267788][ C0] cpuidle_enter+0x59/0x90 [ 2835.273115][ C0] do_idle+0x3ce/0x680 [ 2835.278030][ C0] ? idle_inject_timer_fn+0x60/0x60 [ 2835.284294][ C0] ? asm_sysvec_apic_timer_interrupt+0x16/0x20 [ 2835.291690][ C0] ? memcpy_orig+0xb0/0x10f [ 2835.297125][ C0] ? schedule_idle+0x57/0x90 [ 2835.302661][ C0] ? rest_init+0x31/0x300 [ 2835.307871][ C0] cpu_startup_entry+0x3d/0x60 [ 2835.313608][ C0] rest_init+0x2da/0x300 [ 2835.318710][ C0] ? time_init+0x33/0x33 [ 2835.323819][ C0] arch_call_rest_init+0xa/0xa [ 2835.329559][ C0] start_kernel+0x496/0x53f [ 2835.334998][ C0] secondary_startup_64_no_verify+0xcf/0xdb [ 2835.342104][ C0]