last executing test programs: 21m30.257805797s ago: executing program 32 (id=16): syz_mount_image$vfat(&(0x7f00000000c0), &(0x7f0000000100)='./bus\x00', 0x20008c0, &(0x7f00000003c0)=ANY=[@ANYBLOB="616c6c6f775f7574696d653d303030303030303030303030303030303030303033686f72746e616d653ded697865642c696f636861727365743d6b6f69382d752c73686f72746e616d653d6c1f2c350050a46f7765722c636865636b3d7374726963742c73686f72746e616d653d6c6f7765722c696f636861727365743d63703935302c636f6465706167653d3836342c757466383d302c73686f72746e616d653d77691a8f000000000000786c0500000000000000695f786c6174653d302c757466383d312c756e695f786c6174653d312c0000000000743713213beb1067c2e7b90c81301bb3df0880744f30681f4ea8353be28e9549f6c5693a627f2fa7dbdee66ebe7abb3e4e8a53aa19578f"], 0x82, 0x350, &(0x7f0000000580)="$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") socket$alg(0x26, 0x5, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000000)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x2) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x6, &(0x7f0000000500)=0x7) getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r1, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r2 = openat$apparmor_thread_exec(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) write$apparmor_exec(r2, 0x0, 0x7) syz_mount_image$squashfs(&(0x7f0000000240), &(0x7f0000000380)='./file0\x00', 0x0, &(0x7f0000000300)={[{}]}, 0x1, 0x235, &(0x7f0000000000)="$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") r3 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$IPT_SO_SET_REPLACE(r3, 0x0, 0x40, &(0x7f0000000540)=@nat={'nat\x00', 0x670, 0x5, 0x4b0, 0x2c8, 0x370, 0xffffffff, 0x0, 0x2c8, 0x418, 0x418, 0xffffffff, 0x418, 0x418, 0x5, 0x0, {[{{@ip={@rand_addr=0x64010104, @local, 0xff0000ff, 0xffffff00, 'veth1_to_bridge\x00', 'wg1\x00', {}, {0xff}, 0x16}, 0x0, 0x1f0, 0x228, 0x48, {}, [@common=@unspec=@string={{0xc0}, {0x5, 0xc, 'kmp\x00', "4801d3e4c6b2bfd892aa7400051624fa86999b13d39b99407a9b7abe75a728baa18da576811985de44110b8602025e1298ea55f1c5087ab16f67b18ca90ac68f0b3d6a068f727f7d23fa5fad26a59a5da2651212bdf9d29248ae63e2349b2470915eea2c39ade5129ff26b6fe772493180cfda2cdd49412e9469d85abdb467ba", 0x79, 0x0, {0x1}}}, @common=@unspec=@conntrack2={{0xc0}, {{@ipv6=@dev={0xfe, 0x80, '\x00', 0x10}, [0xffffff00, 0xffffffff, 0x0, 0xff000000], @ipv4=@dev={0xac, 0x14, 0x14, 0x29}, [0x0, 0xffffff00, 0xff000000, 0xffffffff], @ipv6=@local, [0xff000000, 0xff, 0x0, 0xff], @ipv4=@broadcast, [0xffffffff, 0x0, 0xff], 0x7, 0x1, 0x5c, 0x4e1c, 0x4e22, 0x4e24, 0x4e24, 0x814, 0x20c0}, 0x80, 0x2}}]}, @DNAT0={0x38, 'DNAT\x00', 0x0, {0x1, {0xf, @local, @initdev={0xac, 0x1e, 0x0, 0x0}, @icmp_id=0x65, @port=0x4e24}}}}, {{@uncond, 0x0, 0x70, 0xa0}, @common=@inet=@SET2={0x30, 'SET\x00', 0x2, {{0xfffc, 0xd, 0x1}, {0x2, 0x4, 0x3}, 0x1000, 0x100}}}, {{@uncond, 0x0, 0x70, 0xa8}, @MASQUERADE={0x38, 'MASQUERADE\x00', 0x0, {0x1, {0x2, @loopback, @empty, @icmp_id=0x68, @port=0x4e23}}}}, {{@uncond, 0x0, 0x70, 0xa8}, @DNAT0={0x38, 'DNAT\x00', 0x0, {0x1, {0x10, @rand_addr, @dev={0xac, 0x14, 0x14, 0x2a}, @icmp_id, @icmp_id}}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x510) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000c00)={0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x2a9e035c390affd9}, 0x28) r4 = openat$ttynull(0xffffffffffffff9c, &(0x7f0000000000), 0x103d02, 0x0) ioctl$TIOCSETD(r4, 0x5423, &(0x7f0000000040)=0x6) openat(0xffffffffffffff9c, &(0x7f0000000440)='./bus\x00', 0x145842, 0x0) mount$nfs(0x0, &(0x7f0000000180)='./bus\x00', &(0x7f0000000280), 0x0, &(0x7f00000006c0)={[{'udp\x00'}]}) writev(r4, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=@newlink={0x40, 0x10, 0x503, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0xe315}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @macvtap={{0xc}, {0x4}}}, @IFLA_ADDRESS={0xa}]}, 0x40}}, 0x20000000) 21m7.055381429s ago: executing program 33 (id=47): sched_setaffinity(0x0, 0x8, &(0x7f00000000c0)=0xa) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000480)={0xffffffffffffffff, 0x0, 0x25, 0x2, @val=@uprobe_multi={0x0, 0x0, 0x0, 0x7fff, 0x0, 0x1}}, 0x40) r1 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000015c0), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r1, 0xaf01, 0x0) r2 = eventfd(0xfffffff9) ioctl$VHOST_SET_LOG_FD(r1, 0x4004af07, &(0x7f0000000240)=r2) ioctl$VHOST_SET_VRING_KICK(r1, 0x4008af20, &(0x7f0000000040)={0x1, r2}) ioctl$VHOST_SET_VRING_ADDR(r1, 0x4028af11, &(0x7f0000000140)={0x0, 0x0, 0x0, &(0x7f0000000500)=""/56, 0x0}) ioctl$VHOST_SET_VRING_ADDR(r1, 0x4028af11, &(0x7f0000000280)={0x1, 0x1, &(0x7f0000000380)=""/231, &(0x7f00000000c0)=""/87, &(0x7f0000000480)=""/70, 0x100000}) ioctl$VHOST_SET_MEM_TABLE(r1, 0x4008af03, &(0x7f0000000680)) ioctl$VHOST_SET_VRING_ERR(r1, 0x4008af22, &(0x7f00000002c0)={0x1, r2}) ioctl$VHOST_VSOCK_SET_RUNNING(r1, 0x4004af61, &(0x7f0000000000)=0x1) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x11, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x800000f}, 0x94) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a03000000000000000000070000000900010073797a300000000088000000090a010400000000000000000700000008000a40000000000900020073797a30000000000900010073797a3000000000080005400000000d44001280340001800a0001006c696d6974000000240002800c00024000000000000010000c000140000000000000000108000440000000010c000180080001006475700008000340000001"], 0xd0}, 0x1, 0x0, 0x0, 0x410}, 0x0) syz_mount_image$bfs(&(0x7f0000000040), &(0x7f0000000240)='./bus\x00', 0x8008, &(0x7f0000000100)=ANY=[@ANYRES8=r3], 0xf, 0xc6, &(0x7f00000003c0)="$eJzs1zEuhEEYBuDX2sSKSiMShXqbvYMzOAEKBY2oiMQVXMRVHGF7heJPVCI+GSPxC41CIZ6nmHzvTCaZZKaY7+7pdudmntR1UvPts/v6cH5xeTJNGw9O1zMy/VLwR03Sb3aWZHez5eRhr6+tpOflcHW0HFbzWJ+2Vh1uVLWH863Zbx8dAAD4oUkWydoov9SiV8/vXeBb2Mr+cfvxj6YAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA/ofXAAAA//8KyzfU") 19m18.87349336s ago: executing program 34 (id=244): syz_mount_image$ext4(&(0x7f0000000b80)='ext4\x00', &(0x7f0000000bc0)='./file0\x00', 0x1a0040c, &(0x7f0000000080)={[{@grpquota}, {@nomblk_io_submit}]}, 0x1, 0xbbd, &(0x7f0000000c00)="$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") r0 = open(&(0x7f0000000240)='./file1\x00', 0x145142, 0x0) r1 = syz_io_uring_setup(0x498, &(0x7f00000004c0)={0x0, 0x707c, 0x8, 0xffffffff, 0x800288, 0x0, r0}, &(0x7f0000000180)=0x0, &(0x7f0000000540)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r2, r3, &(0x7f00000002c0)=@IORING_OP_WRITEV={0x2, 0x0, 0x0, @fd_index=0x4, 0x0, 0x0}) io_uring_enter(r1, 0x12a8f, 0xf264, 0x40, 0x0, 0x0) 16m10.010873653s ago: executing program 35 (id=585): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x8ab43, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_CAP_EXIT_HYPERCALL(r2, 0x4068aea3, &(0x7f0000000040)={0x79, 0x0, 0xc}) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x2) socket$inet6_sctp(0xa, 0x1, 0x84) mknodat(0xffffffffffffff9c, 0x0, 0x81c0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x100008b}, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000180)=0x1400200bce) sched_setscheduler(0x0, 0x1, 0x0) r4 = syz_open_dev$MSR(&(0x7f0000000200), 0x0, 0x0) read$msr(r4, &(0x7f000001b700)=""/102392, 0x18ff8) openat(0xffffffffffffff9c, 0x0, 0x4842, 0x1cb) ioctl$KVM_SET_LAPIC(r3, 0x4400ae8f, 0x0) ioctl$KVM_SET_GUEST_DEBUG_x86(r3, 0x4048ae9b, &(0x7f00000005c0)={0x40003, 0x0, {[0x5, 0x0, 0x3, 0x0, 0x6, 0x6, 0x16, 0x2]}}) sendmsg$nl_route(r0, &(0x7f0000004380)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000600)=ANY=[@ANYBLOB="2c0000001800090400000001fedbdf250a000000000000000000008008001e00010000000800"], 0x2c}}, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) semget(0x3, 0x0, 0x10) 15m15.355750661s ago: executing program 36 (id=658): gettid() gettid() socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) unshare(0x22020600) r2 = syz_open_procfs$namespace(0x0, &(0x7f00000000c0)='ns/mnt\x00') setns(r2, 0x0) 15m13.541117055s ago: executing program 37 (id=661): sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000200)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0xb, &(0x7f0000000380)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020000000000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000300)='rcu_utilization\x00', r3, 0x0, 0xaa5}, 0x18) syz_fuse_handle_req(0xffffffffffffffff, 0x0, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x1c0) mkdirat(0xffffffffffffff9c, &(0x7f0000000140)='./file1/file4\x00', 0x1c0) 13m12.640504693s ago: executing program 38 (id=812): r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x6, &(0x7f0000000400)={0x1, &(0x7f0000000200)=[{0x6, 0x0, 0x2, 0x7fffffff}]}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newtaction={0x14, 0x30, 0x1}, 0x14}, 0x1, 0x0, 0x0, 0x24000805}, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() syz_open_procfs(0x0, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bind$inet6(0xffffffffffffffff, 0x0, 0x0) r4 = openat$dma_heap(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r5 = openat$nci(0xffffff9c, &(0x7f00000001c0), 0x2, 0x0) ioctl$F2FS_IOC_MOVE_RANGE(r5, 0x541b, 0x0) ioctl$DMA_HEAP_IOCTL_ALLOC(r4, 0xc0184800, &(0x7f0000000100)={0x4, r0}) syz_open_dev$dri(&(0x7f0000000040), 0x1ff, 0x80100) 11m50.567570321s ago: executing program 39 (id=953): socket$inet_tcp(0x2, 0x1, 0x0) syz_open_dev$vim2m(&(0x7f0000000580), 0x0, 0x2) r0 = syz_io_uring_setup(0xbdc, &(0x7f0000000640)={0x0, 0xec25, 0x0, 0x1, 0x83}, &(0x7f0000000dc0)=0x0, &(0x7f00000001c0)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r1, r2, &(0x7f0000000200)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x4007, @fd_index=0x4, 0xffffffffffffffff, 0x0}) io_uring_enter(r0, 0xc86, 0x0, 0xe, 0x0, 0x0) 7m45.711523655s ago: executing program 5 (id=1588): r0 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r0, 0x8914, &(0x7f0000000180)={'dummy0\x00', @broadcast}) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(r1, 0x84, 0x76, &(0x7f0000000200)={0x0, 0x7}, 0x8) setsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(r1, 0x84, 0x75, &(0x7f0000000340)={0x0, 0xcc}, 0x8) r2 = socket$inet6(0xa, 0x802, 0x0) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r1, 0x84, 0x64, &(0x7f0000000280)=[@in6={0xa, 0x4e23, 0x0, @loopback, 0x7}], 0x1c) sendmmsg$inet6(r1, &(0x7f0000000640)=[{{&(0x7f0000000080)={0xa, 0x4e23, 0x2, @loopback, 0x3}, 0x1c, &(0x7f0000000500)=[{&(0x7f0000000300)="06", 0x1}], 0x1}}], 0x1, 0x3404c8d4) setsockopt$inet_sctp6_SCTP_RESET_STREAMS(r1, 0x84, 0x77, &(0x7f0000000180)=ANY=[@ANYRES32, @ANYRES16, @ANYRES16=r2], 0x1000f) 7m40.398315092s ago: executing program 5 (id=1593): mkdirat(0xffffffffffffff9c, &(0x7f0000002000)='./file0\x00', 0x0) mkdir(&(0x7f0000000040)='./file1\x00', 0x0) mkdir(&(0x7f0000000000)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x80, &(0x7f0000000380)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './bus'}}]}) chdir(&(0x7f0000000440)='./bus\x00') write$FUSE_CREATE_OPEN(0xffffffffffffffff, 0x0, 0x0) 7m38.7877055s ago: executing program 5 (id=1596): r0 = syz_usb_connect(0x3, 0x3f, &(0x7f0000000040)=ANY=[@ANYBLOB], 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000bc0)={0x84, &(0x7f0000000600)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000400)={0x2c, 0x0, 0x0, 0x0, &(0x7f0000000340), 0x0}) 7m32.853999521s ago: executing program 5 (id=1607): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x2}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000000), 0x651, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r1 = syz_open_procfs(0x0, &(0x7f0000000140)='net/tcp6\x00') read$FUSE(r1, &(0x7f0000004dc0)={0x2020}, 0x2020) 7m30.939596089s ago: executing program 5 (id=1611): socket$nl_generic(0x10, 0x3, 0x10) syz_open_dev$tty1(0xc, 0x4, 0x1) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000004c0), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000040)={0x4, 0x3, 0x0, 0x2000, &(0x7f0000ffe000/0x2000)=nil}) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, 0x0, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(0xffffffffffffffff, 0xc04064a0, 0x0) ioctl$DRM_IOCTL_MODE_GETCRTC(0xffffffffffffffff, 0xc06864a1, &(0x7f00000003c0)={0x0, 0xfffffffffffffdb2, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_GETFB2(0xffffffffffffffff, 0xc06864ce, &(0x7f0000000440)={r2, 0x0, 0x0, 0x0, 0x0, [0x0], [0x7, 0xfffffffc, 0x3, 0x800], [0x9, 0x0, 0xfffffffe], [0xffffffff, 0x0, 0x0, 0x9]}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(0xffffffffffffffff, 0xc02064b2, &(0x7f0000000140)={0x3ff, 0x2, 0xb5}) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(0xffffffffffffffff, 0xc00c642d, &(0x7f0000000080)={r3}) r4 = openat$pidfd(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) pidfd_send_signal(r4, 0x0, &(0x7f0000000300)={0x0, 0x1, 0xfffffffa}, 0x0) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(0xffffffffffffffff, 0xc00c642e, &(0x7f0000000300)) r5 = syz_open_dev$evdev(&(0x7f00000000c0), 0x2, 0x862b01) ioctl$EVIOCSFF(r5, 0x40304580, &(0x7f0000000b40)={0x56, 0x0, 0x4007, {0x0, 0x1}, {0x46, 0x400}, @rumble={0xdd, 0x5}}) write$char_usb(r5, &(0x7f0000000040)="e2", 0x2250) 7m29.974896082s ago: executing program 5 (id=1613): r0 = fsopen(&(0x7f0000000280)='ceph\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r0, 0x1, &(0x7f0000000000)='source', &(0x7f0000000040)='c:::\x00', 0x0) r1 = gettid() fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x2, 0x2}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x1) sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bce) r2 = syz_open_dev$MSR(&(0x7f0000000340), 0x0, 0x0) read$msr(r2, &(0x7f0000048040)=""/102392, 0x18ff8) syz_memcpy_off$KVM_EXIT_HYPERCALL(0x0, 0x20, 0x0, 0x0, 0x0) tkill(r1, 0xb) futex(0x0, 0xc, 0x1, 0x0, &(0x7f0000048000)=0x2, 0x0) getgroups(0xfffffffffffffdb2, 0xfffffffffffffffe) r3 = memfd_create(&(0x7f0000000400)='\xa3\x9fn\xb4dR\x04i5\x02\xac\xce\xe1\x88\x9d[@8\xd7\xce\x1f 9I\x7f\x15\x1d\x93=\xb5\xe7\\\'L\xe6\xd2\x8e\xbc)JtTDq\x81\xcf\x81\xba\xe51\xf5 \xc8\x10>\xc9\\\x85\x17L\xbf\xcf\x91\xdfM\xf3\x02^T*\x00\x02\xb9~B\x9f\xacl\x1d3\x06o\xf8\x16H\xaa*\x02\xf7\xfb\x06\xf1\x83\x92\xa8\xc2\xcb\xae\xb0\xb4\x93\xb8\x04\xf1\x99\xc2yY+\xd9y\x8a\xd5b\xe8\"q\x1b0)\xccm\xacz\xc1\xadd\x9b6a\xf3\xdds\xbb\x88\xff\b\x85\xb3s\x00\x0e\xbcfvi\x85\xfc.|\xd4h\xec\x82o\x8e\x93\x11\xc1\xd4\xae\x05\x17=\xd9R\xd0\xd4\x90\xcf\x9b\xdc\xaeV\x88\x94\x9f\xe3\xefqi\xed\xa8w\xbe\xd0\xd0-tBl\x9e+\xd3\xed\xce\x9f\x83\x86\xf9\x12\x16Ts\x80\x13]C\xfb`\xc2`\xf7\x1a\x00\x00\x00\x00\x00\x00\x00k\xae\xcb\x1a.\xc2\x8f\xd1x4]PZ\x9e\xd5Y\xf0L\xa4\xbc\x84\xf6\x04L\xff0\x8b\\*\xf9,\xb6\r\x97\xedy\xe0\x8a\xe2\x8ck\xc6S\xc3g\xb9\x1a\xf8\x8f \x9d\x00u7\xd8\'\xf1E\xa4(Q\x80Fy\xb5\xe4q\xc9\xff \xd8\x9d\xad\x11\xf8m\xd3\xbc\x9e\x10D\x7f!\xca\x0ev\x15h$\x01\xdd\xe5\xce\xf8*\xb3\x01\x85\a\xe4qv&\x9c\xac\x9aN~o\xe5\x89\xd5\a\x9f\f\x1f\xc2e/\x8d\x1e\n\xd0_\xbd!^\xa46\xb8j\xc0x\n\xdb\xe1\xa3\xd6\xae;\r\x92@\xa5I\x88Z1F\xf0\x1at\t\xd0\x8a\x04m\x06\xf3BL\xffS\x9eY\xf4\xb0U \xf8\xd00\x88y\xebX\x92\xd5\xbb\xa1h7\xf3\xe0\x0f\xbd\x02\xe4%\xf9\xb1\x87\x8aM\xfeG\xb2L\xbd\x92-\xcd\x1f\xf4\xe1,\xb7G|\xec\"\xa2\xab\xf6\x84\xe0\xcf1\x9a', 0x0) execveat(r3, &(0x7f0000000000)='\x00', 0x0, 0x0, 0x1000) timer_create(0x2, 0x0, &(0x7f0000000900)) bind$inet6(0xffffffffffffffff, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty}, 0x1c) listen(0xffffffffffffffff, 0x8) syz_usb_connect$uac1(0x2, 0xb8, &(0x7f0000000100)=ANY=[@ANYBLOB], 0x0) 7m16.856420707s ago: executing program 3 (id=1633): r0 = semget$private(0x0, 0x6, 0x0) semtimedop(r0, &(0x7f00000003c0)=[{0x2, 0x4, 0x1800}], 0x1, 0x0) semop(r0, &(0x7f00000000c0)=[{0x4}, {0x2}], 0x2) semop(r0, &(0x7f0000000040)=[{0x3, 0x101}, {0x1, 0x0, 0x1000}], 0x2) 7m15.156965595s ago: executing program 3 (id=1636): socket$nl_generic(0x10, 0x3, 0x10) syz_open_dev$tty1(0xc, 0x4, 0x1) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000004c0), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000040)={0x4, 0x3, 0x0, 0x2000, &(0x7f0000ffe000/0x2000)=nil}) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x1, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0xfffffffc}, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(0xffffffffffffffff, 0xc04064a0, 0x0) ioctl$DRM_IOCTL_MODE_GETCRTC(0xffffffffffffffff, 0xc06864a1, &(0x7f00000003c0)={0x0, 0xfffffffffffffdb2, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_GETFB2(0xffffffffffffffff, 0xc06864ce, &(0x7f0000000440)={r2, 0x0, 0x0, 0x0, 0x0, [0x0], [0x7, 0xfffffffc, 0x3, 0x800], [0x9, 0x0, 0xfffffffe], [0xffffffff, 0x0, 0x0, 0x9]}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(0xffffffffffffffff, 0xc02064b2, &(0x7f0000000140)={0x3ff, 0x2, 0xb5}) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(0xffffffffffffffff, 0xc00c642d, &(0x7f0000000080)={r3}) r4 = openat$pidfd(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) pidfd_send_signal(r4, 0x0, &(0x7f0000000300)={0x0, 0x1, 0xfffffffa}, 0x0) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(0xffffffffffffffff, 0xc00c642e, &(0x7f0000000300)) r5 = syz_open_dev$evdev(&(0x7f00000000c0), 0x2, 0x862b01) ioctl$EVIOCSFF(r5, 0x40304580, &(0x7f0000000b40)={0x56, 0x0, 0x4007, {0x0, 0x1}, {0x46, 0x400}, @rumble={0xdd, 0x5}}) write$char_usb(r5, &(0x7f0000000040)="e2", 0x2250) 7m14.407713534s ago: executing program 40 (id=1613): r0 = fsopen(&(0x7f0000000280)='ceph\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r0, 0x1, &(0x7f0000000000)='source', &(0x7f0000000040)='c:::\x00', 0x0) r1 = gettid() fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x2, 0x2}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x1) sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bce) r2 = syz_open_dev$MSR(&(0x7f0000000340), 0x0, 0x0) read$msr(r2, &(0x7f0000048040)=""/102392, 0x18ff8) syz_memcpy_off$KVM_EXIT_HYPERCALL(0x0, 0x20, 0x0, 0x0, 0x0) tkill(r1, 0xb) futex(0x0, 0xc, 0x1, 0x0, &(0x7f0000048000)=0x2, 0x0) getgroups(0xfffffffffffffdb2, 0xfffffffffffffffe) r3 = memfd_create(&(0x7f0000000400)='\xa3\x9fn\xb4dR\x04i5\x02\xac\xce\xe1\x88\x9d[@8\xd7\xce\x1f 9I\x7f\x15\x1d\x93=\xb5\xe7\\\'L\xe6\xd2\x8e\xbc)JtTDq\x81\xcf\x81\xba\xe51\xf5 \xc8\x10>\xc9\\\x85\x17L\xbf\xcf\x91\xdfM\xf3\x02^T*\x00\x02\xb9~B\x9f\xacl\x1d3\x06o\xf8\x16H\xaa*\x02\xf7\xfb\x06\xf1\x83\x92\xa8\xc2\xcb\xae\xb0\xb4\x93\xb8\x04\xf1\x99\xc2yY+\xd9y\x8a\xd5b\xe8\"q\x1b0)\xccm\xacz\xc1\xadd\x9b6a\xf3\xdds\xbb\x88\xff\b\x85\xb3s\x00\x0e\xbcfvi\x85\xfc.|\xd4h\xec\x82o\x8e\x93\x11\xc1\xd4\xae\x05\x17=\xd9R\xd0\xd4\x90\xcf\x9b\xdc\xaeV\x88\x94\x9f\xe3\xefqi\xed\xa8w\xbe\xd0\xd0-tBl\x9e+\xd3\xed\xce\x9f\x83\x86\xf9\x12\x16Ts\x80\x13]C\xfb`\xc2`\xf7\x1a\x00\x00\x00\x00\x00\x00\x00k\xae\xcb\x1a.\xc2\x8f\xd1x4]PZ\x9e\xd5Y\xf0L\xa4\xbc\x84\xf6\x04L\xff0\x8b\\*\xf9,\xb6\r\x97\xedy\xe0\x8a\xe2\x8ck\xc6S\xc3g\xb9\x1a\xf8\x8f \x9d\x00u7\xd8\'\xf1E\xa4(Q\x80Fy\xb5\xe4q\xc9\xff \xd8\x9d\xad\x11\xf8m\xd3\xbc\x9e\x10D\x7f!\xca\x0ev\x15h$\x01\xdd\xe5\xce\xf8*\xb3\x01\x85\a\xe4qv&\x9c\xac\x9aN~o\xe5\x89\xd5\a\x9f\f\x1f\xc2e/\x8d\x1e\n\xd0_\xbd!^\xa46\xb8j\xc0x\n\xdb\xe1\xa3\xd6\xae;\r\x92@\xa5I\x88Z1F\xf0\x1at\t\xd0\x8a\x04m\x06\xf3BL\xffS\x9eY\xf4\xb0U \xf8\xd00\x88y\xebX\x92\xd5\xbb\xa1h7\xf3\xe0\x0f\xbd\x02\xe4%\xf9\xb1\x87\x8aM\xfeG\xb2L\xbd\x92-\xcd\x1f\xf4\xe1,\xb7G|\xec\"\xa2\xab\xf6\x84\xe0\xcf1\x9a', 0x0) execveat(r3, &(0x7f0000000000)='\x00', 0x0, 0x0, 0x1000) timer_create(0x2, 0x0, &(0x7f0000000900)) bind$inet6(0xffffffffffffffff, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty}, 0x1c) listen(0xffffffffffffffff, 0x8) syz_usb_connect$uac1(0x2, 0xb8, &(0x7f0000000100)=ANY=[@ANYBLOB], 0x0) 7m13.59439055s ago: executing program 3 (id=1641): r0 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000300), 0x602, 0x0) writev(r0, &(0x7f0000000680)=[{&(0x7f0000000180)='\x00', 0x1}], 0x1) 7m12.839673423s ago: executing program 3 (id=1642): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000006c0)={0x18, 0xb, &(0x7f0000000640)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x6a, '\x00', 0x0, 0x2}, 0x94) prlimit64(0x0, 0xe, &(0x7f00000007c0)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) openat$sequencer(0xffffffffffffff9c, &(0x7f00000001c0), 0x80280, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0x1}], 0x1) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) mmap$KVM_VCPU(&(0x7f0000ffc000/0x2000)=nil, 0x930, 0x1000002, 0x4018831, 0xffffffffffffffff, 0x0) r1 = userfaultfd(0x80801) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f00000000c0)) io_uring_enter(0xffffffffffffffff, 0x47ba, 0x0, 0x0, 0x0, 0x0) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f0000002800)={{&(0x7f0000ffa000/0x3000)=nil, 0x3000}, 0x1}) 7m12.122289042s ago: executing program 3 (id=1644): openat$binderfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) setrlimit(0x7, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x4008010) sendmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, 0x0) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r1 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000480), 0x2001, 0x0) getdents(0xffffffffffffffff, &(0x7f0000001fc0)=""/184, 0xb8) ioctl$VIDIOC_REQBUFS(0xffffffffffffffff, 0xc0145608, &(0x7f0000000340)={0x1, 0xa, 0x4, 0x0, 0x3}) r2 = ioctl$LOOP_CTL_GET_FREE(r1, 0x4c82) ioctl$LOOP_CTL_REMOVE(r1, 0x4c81, r2) openat$ppp(0xffffff9c, 0x0, 0x4340, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_RECV(0xffffffffffffffff, 0xc0502100, &(0x7f0000001880)) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)) r3 = syz_io_uring_setup(0x1e1e, &(0x7f0000000380)={0x0, 0x86f7, 0x10100}, &(0x7f0000002000)=0x0, &(0x7f0000000280)=0x0) syz_io_uring_submit(r4, r5, &(0x7f00000001c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd_index=0x3, 0xffffffffffffffff, 0x0, 0x0, 0x22}) io_uring_enter(r3, 0x48e9, 0x0, 0x2, 0x0, 0x0) syz_mount_image$hfsplus(&(0x7f0000000040), &(0x7f0000000180)='./file1\x00', 0x8, &(0x7f0000000140)=ANY=[@ANYRES8=0x0], 0xfb, 0x6a8, &(0x7f0000001dc0)="$eJzs3c1vHVfdB/DvXN/4Je2TJ0mTNqBKtRoJEBGJEystZkNACGVRVVVZsLYSp7HipMVxkVsh4vC67aJ/QFlkg1ghsWITqbBgQ3fskJdISGzKArPhopk7175vvrluE9sRn08095w558yZ3/xm5r5Z0Q3wP+vquTQfpsjVc6+tl+ubD+ZXNh/M327XX28mmUqykZTVRpLiX61W6+PkSlJsT1P0lQM+XF548y+fbv6tvdasl2p8Y9R2fepxG33NG5222SQTdfk59Mx37XPPV2xHfiXJ2bqEA3ckSavHD/707HZPl5lhW0/vS4zAk1W0XzcHHE+O1jd6+T6g88rb2N/oxjPRCXIM/e8gAAAA4GlTfQZuDjT3tPz/VrayXhzbx7AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADgqbaRTNY/n1/US6NTn03R+f3/ybotdf1weWlvwx8+qTgAAAAAAAAAYB+9tJWtrOdYZ71VVH/zf7laOVU9PpN3czdLWc35rGcxa1nLai4mOd410eT64traVGdt1JaXhm25eukRgU5tPwAAAAAAAAAAg36Sqzt//wcAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAgMOgSCbaRYr7Xc3H02gmmU4yWTZsJJ906k+zhwcdAAAAAOyDqWQr6znWWW8VOZXk+eo7gOm8mztZy3LWspKlXK++F2h/6m9sPphf2Xwwf7tcBuf91j/2FEY1Y9rfPQzf85lqxExuZLlqOZ9reTsruZ5GtWXpTB1PZ9a+uO6XMRXfrL06XmTX67I88g/qcsC9PR3sbvb4ZcrxKiNH2hmZSObq2MpsnOicmeFnaI9np2dPWcrFNLaDPdW3p8neg+nN+c6UjVH7O1qX5fH8YrecH4h2Jv7TalvKpa6r7/nROe89isNzSOOZqMtW9TgzeE3Md2XihUdkIl/+3W++f3Plzq2bN+6eO8yZmB5n0FyVidPb61fz3Xwv5zKbN7Ka5fwwi1nLUmbznaq2WJ/8ouuWH56pvpvkjUdFMllfoRP11nuJ6eVq29bUcl7P27mepbxS/buUi3k1l3M5C11n+PToM1zd9Y3Bu77S+r+hwZ/9Sl2ZSfLLujwcyrye6MrrzlU/V+X7RE9LnaWimZNjZGnIc+MozS/WlXIfP33UE+m+6s/Exa7r5bnRmfhV9bRyd+XOrdWbi++Mt7uTH9SV8j76eTJ7eJ5IyuvlZHmyqrWpnquj7Htuu683X2Xfqe2+xkDf6fw+zWZnL8vZ2PVOnazfww3OdKnqe2Fo33zVd6arb9j7LQAOvaNfPTo58/eZP898NPOzmZszr01/e+rrUy9O5sgfjnyjOTfxpcaLxW/zUX688/kfAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAD47O6+9/6txZWVpdW+SqvVuvfJ8K4xK53fq/mMm/dXOr8KNcbgzP71mXLokK6JtO7t0vWkKl94NtmvfR3eyr9brVbdUuwy5td/7E/UVA4odfXv/LUORepGVKYf3/01UDmwpyRgn1xYu/3Ohbvvvf+15duLby29tXRn4fLlhbmFy6/MX7ixvLI013486CiBJ2HnRf+gIwEAAAAAAAAAAADG9Zj/z8DGsK6DPkYAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADg6Xb1XJoPU+Ti3Pm5cn3zwfxKuXTqOyObSRpJih8lxcfJlbSXHO+arthtPx8uL7w5/enmP1tt9XzV+Mao7cazUS+ZTTLRLu8/rvmu1eVIxahDKLaPsEzY2U7i4KD9NwAA//94uwx2") r6 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x81000) linkat(r6, 0x0, 0xffffffffffffff9c, &(0x7f0000000100)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x1000) 7m9.995896819s ago: executing program 3 (id=1647): mkdir(&(0x7f0000000000)='./cgroup/../file0\x00', 0x0) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) openat$cgroup_type(r0, &(0x7f00000001c0), 0x2, 0x0) openat$sndseq(0xffffffffffffff9c, 0x0, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r3 = syz_io_uring_setup(0xbdc, &(0x7f0000000640)={0x0, 0xec25, 0x400, 0x1, 0x40000333}, &(0x7f00000006c0)=0x0, &(0x7f0000000240)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r4, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r4, r5, &(0x7f0000000200)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x4, 0x0, &(0x7f0000000600)=[{0x0}], 0x1}) io_uring_enter(r3, 0x847ba, 0x0, 0xe, 0x0, 0x0) write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000400)={'syz0\x00', {0x7, 0x4, 0x6, 0xfffa}, 0x1d, [0x7ffe, 0xc95a, 0xfffffff3, 0x9, 0x80, 0x2, 0x3, 0x7f, 0x6, 0x4d, 0x39cc191a, 0x5f, 0x9, 0x5, 0xffff2d37, 0xffffff01, 0x6, 0x3, 0x0, 0x9, 0x4, 0x8, 0x4, 0x3c5b, 0x1, 0x3, 0x9, 0x1, 0x1f461e2c, 0x0, 0xe660, 0x4, 0x7, 0x101, 0x7fff, 0x4c74, 0x80000000, 0x242, 0x3, 0xe, 0x0, 0x71, 0xfffffff8, 0x7, 0x0, 0x0, 0xd, 0x3e, 0x8f, 0x6, 0x10000006, 0x0, 0x5, 0x4, 0x8, 0x0, 0x80, 0x0, 0x5, 0x6, 0x808, 0x4, 0x1, 0x40], [0x10000007, 0xffff, 0x134, 0x7ffe, 0x10, 0xfffffff3, 0x129432e6, 0xcb, 0xf9, 0xd, 0x2bf, 0x6c9, 0x9, 0x6, 0x3, 0x0, 0x7, 0x5, 0x0, 0xe, 0x800312, 0x78, 0xea4, 0x0, 0x4, 0x4, 0x8000, 0x9, 0x400, 0x5, 0x6, 0x7, 0xff, 0x1, 0x5, 0x8, 0x4, 0x0, 0x2, 0x2, 0xa, 0x4, 0x9, 0x8, 0x800, 0x6, 0x7, 0x8000, 0x1, 0xfe000000, 0xff7f, 0x2, 0x7f, 0x9, 0x2, 0xffffffff, 0x9, 0x1, 0x7, 0x3, 0x9, 0x48c93690, 0x42, 0x2], [0x400, 0x4, 0x0, 0x5, 0xfffffffe, 0x100, 0x8d2, 0x9, 0x5, 0x7fff, 0x0, 0x5, 0xb, 0x4, 0x5, 0x5, 0x0, 0x1ef, 0x5, 0x8, 0x86, 0x80000003, 0x9, 0x3e7, 0x9, 0xede0, 0x2, 0x2, 0xf38, 0x80000008, 0x4, 0x6d01, 0x5, 0x38, 0x800003, 0x200, 0x80, 0xf, 0xd, 0x2950bfaf, 0x1000, 0xa2, 0x7, 0x53cf697b, 0x5, 0x6, 0xac8, 0xbf, 0x2, 0x3, 0x7ff, 0xfffffff9, 0x1, 0x4, 0xffff, 0x0, 0x1a, 0x1c, 0x120000, 0x3, 0x6, 0xaaed, 0x4, 0x65], [0x5, 0xbb31, 0x3, 0xb, 0x5, 0x938, 0x6, 0x6, 0x0, 0x5, 0xce7, 0x1ff, 0x2, 0xf58, 0x5, 0x3, 0x101, 0x10000, 0x6, 0x7ffe, 0x8, 0x200a620, 0x2, 0x5, 0x1, 0x2, 0x14c, 0x60a7, 0xe, 0x6, 0xffffffff, 0x80000000, 0x5, 0x8, 0xc8, 0xee1, 0xfffff000, 0x40ffff, 0x3, 0x7f, 0x100, 0x9602, 0x7, 0x2, 0x4, 0x5, 0x1, 0x10080, 0x5, 0x8, 0x30b1d693, 0x81f, 0x8, 0x7, 0x1, 0x6c1b, 0x0, 0x4, 0x5, 0xb1c, 0x1, 0x200, 0xffbf2441, 0xfff]}, 0x45c) r6 = openat$ttyprintk(0xffffffffffffff9c, &(0x7f0000000040), 0x21041, 0x0) ioctl$TCFLSH(r6, 0x540b, 0xfffffffffffeffff) ioctl$RTC_ALM_SET(0xffffffffffffffff, 0x40247007, &(0x7f00000000c0)={0x3c, 0x10, 0x15, 0x8, 0xb, 0x10, 0x6, 0x101, 0x1}) 7m2.181065013s ago: executing program 4 (id=1660): sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) fsetxattr$security_capability(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x1) socket$l2tp6(0xa, 0x2, 0x73) clock_adjtime(0x0, &(0x7f0000000100)={0x2, 0x6a, 0x5, 0x8000000000000001, 0x48c, 0x5, 0xd, 0x424, 0x2, 0xffffffffffffffff, 0xf423f, 0xfffffffffffffff9, 0x7, 0x2, 0x1000000081, 0x5, 0x0, 0x5, 0x0, 0x9220000000000000, 0x3, 0x0, 0x80000001, 0x0, 0x5, 0x7}) madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0x80000000e) r0 = socket$tipc(0x1e, 0x5, 0x0) bind$tipc(r0, &(0x7f0000000340)=@nameseq={0x1e, 0x1, 0x3, {0x43}}, 0x10) r1 = socket$tipc(0x1e, 0x5, 0x0) setsockopt$TIPC_GROUP_JOIN(r1, 0x10f, 0x87, &(0x7f0000000300)={0x44043, 0xfffffffe, 0x3, 0x3}, 0x3c) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x1000002, 0x200000005c831, 0xffffffffffffffff, 0x0) remap_file_pages(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x0, 0x0, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9) 6m59.944883054s ago: executing program 4 (id=1664): socket$inet6_mptcp(0xa, 0x1, 0x106) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_route(0x10, 0x3, 0x0) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) r0 = socket$inet_mptcp(0x2, 0x1, 0x106) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e24, @multicast2}, 0x10) connect$inet(r0, 0x0, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='pids.current\x00', 0x275a, 0x0) socket$nl_route(0x10, 0x3, 0x0) pselect6(0x40, &(0x7f00000001c0)={0x0, 0x0, 0x3, 0xfffffffffffffffd, 0x0, 0xac}, 0x0, &(0x7f00000002c0)={0x3ff, 0x0, 0x0, 0x9, 0x0, 0x0, 0x7fffffff}, 0x0, 0x0) shutdown(r0, 0x1) 6m58.04615446s ago: executing program 4 (id=1668): r0 = syz_usb_connect(0x3, 0x3f, &(0x7f0000000040)=ANY=[@ANYBLOB="1201000016038308c5109a8146e4010223010902"], 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000bc0)={0x84, &(0x7f0000000600)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000400)={0x2c, 0x0, 0x0, 0x0, &(0x7f0000000340), 0x0}) 6m54.504253099s ago: executing program 41 (id=1647): mkdir(&(0x7f0000000000)='./cgroup/../file0\x00', 0x0) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) openat$cgroup_type(r0, &(0x7f00000001c0), 0x2, 0x0) openat$sndseq(0xffffffffffffff9c, 0x0, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r3 = syz_io_uring_setup(0xbdc, &(0x7f0000000640)={0x0, 0xec25, 0x400, 0x1, 0x40000333}, &(0x7f00000006c0)=0x0, &(0x7f0000000240)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r4, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r4, r5, &(0x7f0000000200)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x4, 0x0, &(0x7f0000000600)=[{0x0}], 0x1}) io_uring_enter(r3, 0x847ba, 0x0, 0xe, 0x0, 0x0) write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000400)={'syz0\x00', {0x7, 0x4, 0x6, 0xfffa}, 0x1d, [0x7ffe, 0xc95a, 0xfffffff3, 0x9, 0x80, 0x2, 0x3, 0x7f, 0x6, 0x4d, 0x39cc191a, 0x5f, 0x9, 0x5, 0xffff2d37, 0xffffff01, 0x6, 0x3, 0x0, 0x9, 0x4, 0x8, 0x4, 0x3c5b, 0x1, 0x3, 0x9, 0x1, 0x1f461e2c, 0x0, 0xe660, 0x4, 0x7, 0x101, 0x7fff, 0x4c74, 0x80000000, 0x242, 0x3, 0xe, 0x0, 0x71, 0xfffffff8, 0x7, 0x0, 0x0, 0xd, 0x3e, 0x8f, 0x6, 0x10000006, 0x0, 0x5, 0x4, 0x8, 0x0, 0x80, 0x0, 0x5, 0x6, 0x808, 0x4, 0x1, 0x40], [0x10000007, 0xffff, 0x134, 0x7ffe, 0x10, 0xfffffff3, 0x129432e6, 0xcb, 0xf9, 0xd, 0x2bf, 0x6c9, 0x9, 0x6, 0x3, 0x0, 0x7, 0x5, 0x0, 0xe, 0x800312, 0x78, 0xea4, 0x0, 0x4, 0x4, 0x8000, 0x9, 0x400, 0x5, 0x6, 0x7, 0xff, 0x1, 0x5, 0x8, 0x4, 0x0, 0x2, 0x2, 0xa, 0x4, 0x9, 0x8, 0x800, 0x6, 0x7, 0x8000, 0x1, 0xfe000000, 0xff7f, 0x2, 0x7f, 0x9, 0x2, 0xffffffff, 0x9, 0x1, 0x7, 0x3, 0x9, 0x48c93690, 0x42, 0x2], [0x400, 0x4, 0x0, 0x5, 0xfffffffe, 0x100, 0x8d2, 0x9, 0x5, 0x7fff, 0x0, 0x5, 0xb, 0x4, 0x5, 0x5, 0x0, 0x1ef, 0x5, 0x8, 0x86, 0x80000003, 0x9, 0x3e7, 0x9, 0xede0, 0x2, 0x2, 0xf38, 0x80000008, 0x4, 0x6d01, 0x5, 0x38, 0x800003, 0x200, 0x80, 0xf, 0xd, 0x2950bfaf, 0x1000, 0xa2, 0x7, 0x53cf697b, 0x5, 0x6, 0xac8, 0xbf, 0x2, 0x3, 0x7ff, 0xfffffff9, 0x1, 0x4, 0xffff, 0x0, 0x1a, 0x1c, 0x120000, 0x3, 0x6, 0xaaed, 0x4, 0x65], [0x5, 0xbb31, 0x3, 0xb, 0x5, 0x938, 0x6, 0x6, 0x0, 0x5, 0xce7, 0x1ff, 0x2, 0xf58, 0x5, 0x3, 0x101, 0x10000, 0x6, 0x7ffe, 0x8, 0x200a620, 0x2, 0x5, 0x1, 0x2, 0x14c, 0x60a7, 0xe, 0x6, 0xffffffff, 0x80000000, 0x5, 0x8, 0xc8, 0xee1, 0xfffff000, 0x40ffff, 0x3, 0x7f, 0x100, 0x9602, 0x7, 0x2, 0x4, 0x5, 0x1, 0x10080, 0x5, 0x8, 0x30b1d693, 0x81f, 0x8, 0x7, 0x1, 0x6c1b, 0x0, 0x4, 0x5, 0xb1c, 0x1, 0x200, 0xffbf2441, 0xfff]}, 0x45c) r6 = openat$ttyprintk(0xffffffffffffff9c, &(0x7f0000000040), 0x21041, 0x0) ioctl$TCFLSH(r6, 0x540b, 0xfffffffffffeffff) ioctl$RTC_ALM_SET(0xffffffffffffffff, 0x40247007, &(0x7f00000000c0)={0x3c, 0x10, 0x15, 0x8, 0xb, 0x10, 0x6, 0x101, 0x1}) 6m54.215442564s ago: executing program 4 (id=1674): ioctl$VIDIOC_QUERY_EXT_CTRL(0xffffffffffffffff, 0xc0205647, &(0x7f00000000c0)={0x80000000, 0x0, "4f2572ce1ced0000004f14bb1e000000150500", 0x0, 0x2, 0x200, 0xfffffffffffffffe, 0x0, 0x0, 0x80000000}) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) socket$inet_icmp_raw(0x2, 0x3, 0x1) socket$nl_netfilter(0x10, 0x3, 0xc) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x2080, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x5, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000100)=0x2) sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bce) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) symlink(0x0, &(0x7f0000000080)='./file0\x00') r1 = syz_open_dev$dri(&(0x7f0000000000), 0x1ff, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_NO_ENOBUFS(r2, 0x10e, 0xc, 0x0, 0x0) sendmsg$nl_route(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="380000001a0001000000000000", @ANYRESHEX=r2], 0x38}}, 0x0) ioctl$DRM_IOCTL_MODE_LIST_LESSEES(r1, 0xc01064d1, &(0x7f0000000040)={0x1, 0x0, &(0x7f0000000080)=[0x0]}) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(0xffffffffffffffff, 0x8933, &(0x7f0000000240)={'batadv_slave_0\x00', 0x0}) ioctl$sock_inet6_SIOCDELRT(0xffffffffffffffff, 0x890c, &(0x7f00000000c0)={@remote, @private0, @empty, 0x40003, 0x40, 0x5, 0x100, 0x0, 0x590043, r3}) 6m53.200708123s ago: executing program 4 (id=1677): socket$inet6_mptcp(0xa, 0x1, 0x106) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_route(0x10, 0x3, 0x0) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) r0 = socket$inet_mptcp(0x2, 0x1, 0x106) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e24, @multicast2}, 0x10) connect$inet(r0, 0x0, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='pids.current\x00', 0x275a, 0x0) socket$nl_route(0x10, 0x3, 0x0) pselect6(0x40, &(0x7f00000001c0)={0x0, 0x0, 0x3, 0xfffffffffffffffd, 0x0, 0xac}, 0x0, &(0x7f00000002c0)={0x3ff, 0x0, 0x0, 0x9, 0x0, 0x0, 0x7fffffff}, 0x0, 0x0) shutdown(r0, 0x1) 6m51.162777292s ago: executing program 4 (id=1679): getsockopt$bt_hci(0xffffffffffffffff, 0x84, 0x85, 0x0, 0x0) bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x48) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) ioctl$COMEDI_RANGEINFO(0xffffffffffffffff, 0x80106408, 0x0) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x11, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1801000021000000000000004bc311ec8500000075000000a70000000800000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f00000000c0)='percpu_alloc_percpu\x00', r0}, 0x10) syz_io_uring_setup(0x111, &(0x7f0000000340)={0x0, 0xa927, 0x2, 0x4}, 0x0, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000680)=0x2) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) 6m43.123260173s ago: executing program 0 (id=1687): socket$inet6_mptcp(0xa, 0x1, 0x106) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_route(0x10, 0x3, 0x0) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) r0 = socket$inet_mptcp(0x2, 0x1, 0x106) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e24, @multicast2}, 0x10) connect$inet(r0, 0x0, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='pids.current\x00', 0x275a, 0x0) socket$nl_route(0x10, 0x3, 0x0) pselect6(0x40, &(0x7f00000001c0)={0x0, 0x0, 0x3, 0xfffffffffffffffd, 0x0, 0xac}, 0x0, &(0x7f00000002c0)={0x3ff, 0x0, 0x0, 0x9, 0x0, 0x0, 0x7fffffff}, 0x0, 0x0) shutdown(r0, 0x1) 6m41.721849121s ago: executing program 0 (id=1690): sendmsg$MPTCP_PM_CMD_GET_LIMITS(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0xffffffffffffffb4, 0x0, 0x1, 0x0, 0x0, 0x41}, 0x809d) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000300)='blkio.bfq.io_merged_recursive\x00', 0x275a, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000140)='./file0\x00', 0x141000, 0x57) syz_emit_ethernet(0x36, &(0x7f0000000100)=ANY=[@ANYBLOB="000002f0d31209000000bc2e79e995"], 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r2, 0x0) preadv(r2, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffff23}], 0x3e, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0x0, 0x0, &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000499000/0x18000)=nil, &(0x7f0000000040)=[@text16={0x10, &(0x7f0000000180)="66b9800000c00f326635000800000f300f0f1c9a65660ff3b20618baa000ec672e660f38803d004000000f285473f61366b9800000c00f320f300f20e06635800000000f22e02b6aa6c8", 0x4a}], 0x1, 0x0, 0x0, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x20004840}, 0x14) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f00000004c0)=[@text32={0x20, 0x0}], 0x1, 0x0, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x11, 0x1e, &(0x7f0000000500)=ANY=[@ANYBLOB="180000009800", @ANYBLOB="0000000000000000b702000014000000b7030400000000008500000083000000bf09000000000000550901000000000095000000000000008520000002000000d7"], &(0x7f0000000000)='GPL\x00', 0x2a7, 0x0, 0x0, 0x40f00, 0x24, '\x00', 0x0, 0x0, r2, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x3ff}, 0x94) ioctl$KVM_RUN(r3, 0xae80, 0x0) 6m40.7651618s ago: executing program 0 (id=1691): openat$binderfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) setrlimit(0x7, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000009a00), 0x0, 0x4008010) sendmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, 0x0) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r1 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000480), 0x2001, 0x0) getdents(0xffffffffffffffff, &(0x7f0000001fc0)=""/184, 0xb8) ioctl$VIDIOC_REQBUFS(0xffffffffffffffff, 0xc0145608, &(0x7f0000000340)={0x1, 0xa, 0x4, 0x0, 0x3}) r2 = ioctl$LOOP_CTL_GET_FREE(r1, 0x4c82) ioctl$LOOP_CTL_REMOVE(r1, 0x4c81, r2) openat$ppp(0xffffff9c, 0x0, 0x4340, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_RECV(0xffffffffffffffff, 0xc0502100, &(0x7f0000001880)) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)) r3 = syz_io_uring_setup(0x1e1e, &(0x7f0000000380)={0x0, 0x86f7, 0x10100}, &(0x7f0000002000)=0x0, &(0x7f0000000280)=0x0) syz_io_uring_submit(r4, r5, &(0x7f00000001c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd_index=0x3, 0xffffffffffffffff, 0x0, 0x0, 0x22}) io_uring_enter(r3, 0x48e9, 0x0, 0x2, 0x0, 0x0) syz_mount_image$hfsplus(&(0x7f0000000040), &(0x7f0000000180)='./file1\x00', 0x8, &(0x7f0000000140)=ANY=[@ANYRES8=0x0], 0xfb, 0x6a8, &(0x7f0000001dc0)="$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") r6 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x81000) linkat(r6, 0x0, 0xffffffffffffff9c, &(0x7f0000000100)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x1000) 6m38.89280113s ago: executing program 0 (id=1692): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000440), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CAP_SPLIT_IRQCHIP(r1, 0x4068aea3, &(0x7f00000001c0)={0x79, 0x0, 0xc73}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x2) ioctl$KVM_SET_MP_STATE(r2, 0x4004ae99, &(0x7f0000000040)=0x3) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1000003, 0x13, r2, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00'}, 0x10) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f00000000c0)={[0x1, 0x9, 0x7, 0x0, 0x1, 0x0, 0x2, 0xfffffffffffff801, 0x0, 0x0, 0x0, 0x0, 0x7, 0x6, 0x1, 0x5], 0x8000000, 0x49340}) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$KVM_SET_VCPU_EVENTS(r2, 0x4040aea0, &(0x7f0000000080)=@x86={0x7f, 0x3, 0xfd, 0x0, 0x1, 0x7e, 0xcb, 0x10, 0x8, 0x5, 0xb, 0x8, 0x0, 0x10003, 0x9, 0xff, 0x4, 0x2, 0x12, '\x00', 0xb}) ioctl$KVM_RUN(r2, 0xae80, 0x0) 6m37.534101079s ago: executing program 0 (id=1694): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) syz_io_uring_setup(0x18d7, &(0x7f0000000040)={0x0, 0x0, 0x2, 0x0, 0x25b}, 0x0, &(0x7f0000ffe000)) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) r2 = socket(0x15, 0x5, 0x0) connect$unix(r2, &(0x7f0000000080)=@abs={0xa}, 0x6e) 6m35.400874816s ago: executing program 42 (id=1679): getsockopt$bt_hci(0xffffffffffffffff, 0x84, 0x85, 0x0, 0x0) bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x48) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) ioctl$COMEDI_RANGEINFO(0xffffffffffffffff, 0x80106408, 0x0) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x11, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1801000021000000000000004bc311ec8500000075000000a70000000800000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f00000000c0)='percpu_alloc_percpu\x00', r0}, 0x10) syz_io_uring_setup(0x111, &(0x7f0000000340)={0x0, 0xa927, 0x2, 0x4}, 0x0, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000680)=0x2) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) 6m35.286541716s ago: executing program 0 (id=1696): signalfd4(0xffffffffffffffff, 0x0, 0x0, 0x0) r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x4000000024002, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setaffinity(0x0, 0x11, &(0x7f0000000180)=0x1400200bce) r1 = syz_open_dev$MSR(&(0x7f0000000200), 0x0, 0x0) read$msr(r1, &(0x7f0000002700)=""/102392, 0x18ff8) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, 0x0, 0x0) r2 = dup(r0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb, 0x13, r2, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) 6m18.819138711s ago: executing program 43 (id=1696): signalfd4(0xffffffffffffffff, 0x0, 0x0, 0x0) r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x4000000024002, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setaffinity(0x0, 0x11, &(0x7f0000000180)=0x1400200bce) r1 = syz_open_dev$MSR(&(0x7f0000000200), 0x0, 0x0) read$msr(r1, &(0x7f0000002700)=""/102392, 0x18ff8) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, 0x0, 0x0) r2 = dup(r0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb, 0x13, r2, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) 1m31.956338905s ago: executing program 9 (id=2779): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000300)={'bridge0\x00'}) sendmsg$nl_route(r0, &(0x7f0000000240)={0x0, 0x0, 0x0}, 0x0) 1m30.516462774s ago: executing program 9 (id=2781): socket$inet_icmp_raw(0x2, 0x3, 0x1) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5) close(0x4) syz_open_procfs$namespace(0x0, &(0x7f0000000080)='ns/ipc\x00') mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x5, 0x3032, 0xffffffffffffffff, 0x0) r0 = socket$inet_udplite(0x2, 0x2, 0x88) syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) getsockopt$IPT_SO_GET_INFO(r0, 0x0, 0x40, &(0x7f0000000440)={'filter\x00', 0x0, [0x630, 0x3, 0x7fff, 0x80008000, 0xe]}, &(0x7f00000003c0)=0x54) 1m28.599745448s ago: executing program 9 (id=2786): r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000003c0)={'wlan0\x00'}) sendmsg$NL80211_CMD_SET_MCAST_RATE(r0, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={0x0}, 0x1, 0x0, 0x0, 0x44001}, 0xc800) 1m27.735568374s ago: executing program 9 (id=2788): r0 = socket(0x10, 0x803, 0x0) getsockname$packet(r0, &(0x7f0000000140)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000240)=ANY=[@ANYBLOB="4c000000100039042abd70000000000000000000", @ANYRES32=r1, @ANYBLOB="01180200031100002c0012800e00010069703665727370616e0000001800028008001500a8bc0d00040012"], 0x4c}}, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000440)={&(0x7f00000003c0)=@newlink={0x78, 0x10, 0x401, 0x0, 0x3, {0x0, 0x0, 0x0, r1, 0x0, 0x1c05}, [@IFLA_LINKINFO={0x58, 0x12, 0x0, 0x1, @ip6erspan={{0xe}, {0x44, 0x2, 0x0, 0x1, [@IFLA_GRE_COLLECT_METADATA={0x4}, @IFLA_GRE_ERSPAN_VER={0x5, 0x16, 0x2}, @IFLA_GRE_OFLAGS={0x6, 0x3, 0x4}, @IFLA_GRE_ERSPAN_VER={0x5, 0x16, 0x2}, @IFLA_GRE_ENCAP_SPORT={0x6, 0x10, 0x4e23}, @IFLA_GRE_ERSPAN_DIR={0x5, 0x17, 0x1}, @IFLA_GRE_REMOTE={0x14, 0x7, @local}]}}}]}, 0x78}, 0x1, 0x0, 0x0, 0x10}, 0x12) 1m26.504872017s ago: executing program 9 (id=2792): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000140)=ANY=[@ANYBLOB="4400000010003b1528bd70000000000000000000", @ANYRES32=0x0], 0x44}, 0x1, 0x0, 0x0, 0x8000}, 0x0) 1m25.685273569s ago: executing program 9 (id=2795): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = socket$inet6(0xa, 0x3, 0xff) socket$key(0xf, 0x3, 0x2) connect$inet6(r2, &(0x7f0000000480)={0xa, 0xfffe, 0x3, @mcast1, 0x5}, 0x1c) syz_genetlink_get_family_id$tipc(0x0, 0xffffffffffffffff) r3 = dup2(r2, r2) sendmmsg$unix(r3, &(0x7f0000008380), 0x400000000000174, 0x4008890) 1m10.169265864s ago: executing program 44 (id=2795): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = socket$inet6(0xa, 0x3, 0xff) socket$key(0xf, 0x3, 0x2) connect$inet6(r2, &(0x7f0000000480)={0xa, 0xfffe, 0x3, @mcast1, 0x5}, 0x1c) syz_genetlink_get_family_id$tipc(0x0, 0xffffffffffffffff) r3 = dup2(r2, r2) sendmmsg$unix(r3, &(0x7f0000008380), 0x400000000000174, 0x4008890) 23.164531769s ago: executing program 7 (id=2939): mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz1\x00', 0x1ff) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup/syz1\x00', 0x200002, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x48) r1 = openat$cgroup_type(r0, &(0x7f0000000300), 0x2, 0x0) write$cgroup_type(r1, &(0x7f0000000280), 0x9) openat$cgroup_procs(r0, &(0x7f00000002c0)='cgroup.threads\x00', 0x2, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz1\x00', 0x1ff) r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r3 = openat$cgroup_procs(r2, &(0x7f0000000040)='cgroup.procs\x00', 0x2, 0x0) write$cgroup_pid(r3, &(0x7f00000000c0), 0x40) 22.354789531s ago: executing program 7 (id=2942): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x19, 0x14, &(0x7f0000000400)=ANY=[@ANYBLOB, @ANYRES32, @ANYBLOB], 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, '\x00', 0x0, @fallback=0x5bb91d60155f6f93, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = socket$nl_route(0x10, 0x3, 0x0) connect$netlink(r0, &(0x7f0000000280)=@proc={0x10, 0x0, 0x25dfdbfc}, 0xc) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x48) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x6) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) socket$igmp6(0xa, 0x3, 0x2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000c00)=@framed={{}, [@printk={@llu, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x3}}]}, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socket$inet6_tcp(0xa, 0x1, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x0, 0x4, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c3000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe}, 0x94) r4 = syz_io_uring_setup(0x78c5, &(0x7f0000000880)={0x0, 0xf3a8, 0x800, 0x4000002, 0x331}, &(0x7f0000000580), &(0x7f00000005c0)) io_uring_register$IORING_REGISTER_PERSONALITY(r4, 0x9, 0x0, 0x0) 18.579390106s ago: executing program 7 (id=2948): socket$inet_icmp_raw(0x2, 0x3, 0x1) close(0x4) syz_open_procfs$namespace(0x0, &(0x7f0000000080)='ns/ipc\x00') mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x5, 0x3032, 0xffffffffffffffff, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r0 = socket$inet_udplite(0x2, 0x2, 0x88) syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) getsockopt$IPT_SO_GET_INFO(r0, 0x0, 0x40, &(0x7f0000000440)={'filter\x00', 0x0, [0x630, 0x3, 0x7fff, 0x80008000, 0xe]}, &(0x7f00000003c0)=0x54) 17.244279878s ago: executing program 7 (id=2953): bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x14, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018000000", @ANYRES32=0x0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000f66f63bb850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0xae, '\x00', 0x0, @fallback=0x35, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffff0b8}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000040)='sched_switch\x00', r0}, 0x10) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x11, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1801000021000000000000004bc311ec8500000075000000a70000000800000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f00000000c0)='percpu_alloc_percpu\x00', r1}, 0x10) syz_io_uring_setup(0x111, &(0x7f0000000340)={0x0, 0x11, 0x2, 0x4}, 0x0, 0x0) 16.356287535s ago: executing program 6 (id=2956): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0x6, 0xe, &(0x7f00000008c0)=ANY=[@ANYBLOB="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"/686], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x3a, 0x10, &(0x7f0000000340), 0xd58495bc, 0x0, 0xffffffffffffffff, 0xffffffffffffff5b}, 0x42) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000040)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x27, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r1}, 0x10) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000c80)={r0, 0x2000012, 0x100e, 0x2, &(0x7f0000000c40)="63eced8e46dc3f2ddf33c9e9b986", 0x0, 0x7ffe, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 16.060231677s ago: executing program 7 (id=2958): sendmsg$IPSET_CMD_DESTROY(0xffffffffffffffff, &(0x7f0000000780)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)={0x14, 0x3, 0x6, 0x5}, 0x14}}, 0x8081) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x48241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, 0x0) r1 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000240)={'syzkaller1\x00', @link_local}) writev(r0, &(0x7f00000002c0)=[{&(0x7f0000000a40)="2e9b3d0007e03dd65193dfb6c575963f86ddf06712e9232f2b8db0049d90491ceaebfd26d4eef23248000000f858dbb8a19052343f", 0x35}, {&(0x7f0000000200)="c67f0d7df9", 0x49}], 0x2) 15.028947904s ago: executing program 6 (id=2960): r0 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000280)={'vcan0\x00', 0x0}) bind$can_j1939(r0, &(0x7f0000000100)={0x1d, r1, 0x0, {}, 0xfd}, 0x18) connect$can_j1939(r0, 0x0, 0x0) sendmsg$can_j1939(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000300)}}, 0x0) 14.856227167s ago: executing program 7 (id=2961): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) mprotect(&(0x7f0000001000/0x2000)=nil, 0x2000, 0x2000000) openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x800, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) socket$nl_generic(0x10, 0x3, 0x10) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0xd, 0x4, &(0x7f0000000000)=@framed={{}, [@ldst={0x1, 0x0, 0x3, 0x9, 0x1, 0x68}]}, &(0x7f0000000080)='syzkaller\x00'}, 0x80) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) r4 = socket(0x400000000010, 0x3, 0x0) r5 = socket$unix(0x1, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00'}) sendmsg$nl_route_sched(r4, 0x0, 0x24041080) ioctl$sock_inet6_SIOCADDRT(r0, 0x890b, &(0x7f00000002c0)={@mcast2, @mcast1, @dev={0xfe, 0x80, '\x00', 0x36}, 0x1, 0x6, 0x0, 0x100, 0x4, 0x2080005}) 14.521690353s ago: executing program 1 (id=2962): r0 = socket$netlink(0x10, 0x3, 0x10) sendmsg$IPSET_CMD_TEST(0xffffffffffffffff, 0x0, 0x0) bind$netlink(r0, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) r1 = socket$netlink(0x10, 0x3, 0x10) bind$netlink(r1, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) setsockopt$sock_int(r1, 0x1, 0x8, &(0x7f0000000000), 0x4) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r1, 0x10e, 0x4, &(0x7f0000000640)=0x1800, 0x4) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000040)={'dummy0\x00', 0x0}) r4 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r4, 0x8933, &(0x7f0000000000)={'team0\x00', 0x0}) sendmsg$nl_route(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000380)=ANY=[@ANYBLOB="4c0000001000fbff27bd7002fedbdf2500000000", @ANYRES32=0x0, @ANYBLOB, @ANYRES32=r3, @ANYBLOB='\b\x00\n\x00', @ANYRES32=r5], 0x4c}, 0x1, 0x0, 0x0, 0x28001}, 0x8000002) 13.963959568s ago: executing program 6 (id=2964): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r1 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$tun(r0, &(0x7f0000000280)={@val={0x0, 0x800}, @val={0x1, 0x0, 0x0, 0x0, 0x3d}, @mpls={[], @ipv4=@tcp={{0x5, 0x4, 0x0, 0x0, 0x38, 0x0, 0x0, 0x0, 0x84, 0x0, @empty=0x3fffffff, @local}, {{0x0, 0x0, 0x41424344, 0x41424344, 0x0, 0x2, 0x9, 0x0, 0x0, 0x0, 0x4, {[@window={0xa, 0x3}, @timestamp={0x5, 0xa}, @generic={0x0, 0x2}]}}}}}}, 0x46) 13.519457451s ago: executing program 6 (id=2966): openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f00000000c0)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, 0x0, 0x0, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r3 = openat$sysctl(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sys/vm/drop_caches\x00', 0x1, 0x0) writev(r3, &(0x7f00000000c0), 0x0) 13.082762131s ago: executing program 1 (id=2968): socket$nl_route(0x10, 0x3, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={0x0, 0x14}}, 0x0) getsockname$packet(r2, &(0x7f00000002c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="480000001000050700000086d7c0d6c878f064eb", @ANYRES32=r3, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/schedstat\x00', 0x0, 0x0) openat$ptmx(0xffffffffffffff9c, 0x0, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r4 = getpid() sched_setaffinity(0x0, 0x0, 0x0) sched_setscheduler(r4, 0x2, &(0x7f0000000200)=0x6) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r5, &(0x7f00000004c0)=@abs={0x0, 0x0, 0x4e24}, 0x6e) sendmmsg$unix(r6, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r5, &(0x7f00000000c0), 0x3fffffffffffeda, 0x2, 0x0) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b7030000e8ffffff850000000400000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x33, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r7}, 0x10) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sendmsg$nl_route_sched(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000900)=@newqdisc={0x30, 0x24, 0xf1d, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_clsact={0xb}]}, 0x30}, 0x1, 0xfffc}, 0x4000800) sendmsg$nl_route_sched(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000003080)=@delchain={0x24, 0x64, 0xf31, 0xfffffffb, 0x0, {0x0, 0x0, 0x0, r3, {0x0, 0xfff1}, {0xfff3, 0xffff}, {0x0, 0x1b}}}, 0x24}, 0x1, 0x0, 0x0, 0x10}, 0x0) 12.093400953s ago: executing program 8 (id=2970): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=@newqdisc={0x24, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r3, {0x0, 0xfff1}, {0xffff, 0xffff}}}, 0x24}, 0x1, 0x0, 0x0, 0x4000000}, 0x20040084) sendmsg$nl_route_sched(r1, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000300)=@newqdisc={0x38, 0x28, 0x4ee4e6a52ff56541, 0x4001, 0xfffffdfc, {0x0, 0x0, 0x0, r3, {0x3}, {}, {0x2, 0x1}}, [@qdisc_kind_options=@q_hhf={{0x8}, {0xc, 0x2, [@TCA_HHF_HH_FLOWS_LIMIT={0x8, 0x3, 0x9}]}}]}, 0x38}, 0x1, 0x0, 0x0, 0x4000001}, 0x4040000) 11.963525217s ago: executing program 2 (id=2971): sendmsg$IPSET_CMD_DESTROY(0xffffffffffffffff, &(0x7f0000000780)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)={0x14, 0x3, 0x6, 0x5}, 0x14}}, 0x8081) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x48241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) r1 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r1, 0x8914, 0x0) writev(r0, &(0x7f00000002c0)=[{&(0x7f0000000a40)="2e9b3d0007e03dd65193dfb6c575963f86ddf06712e9232f2b8db0049d90491ceaebfd26d4eef23248000000f858dbb8a19052343f", 0x35}, {&(0x7f0000000200)="c67f0d7df9", 0x49}], 0x2) 11.783469177s ago: executing program 6 (id=2972): bpf$PROG_LOAD(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000240)={0x8, 0x248}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f0000000380)=0x202) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xffffe000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000840)=@abs={0x0, 0x0, 0x4e20}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x3fffffffffffeda, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, 0x0, &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x4, '\x00', 0x0, @fallback=0x33, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe}, 0x94) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000003500)={0x11, 0xb, &(0x7f0000000640)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000004000000b703000000000000850000007200000095"], &(0x7f00000034c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000400)={&(0x7f0000000040)='sched_switch\x00', r3}, 0x10) r4 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r4, &(0x7f0000000000)={0x1f, 0xffff, 0x2}, 0x6) recvmmsg(r4, &(0x7f0000000580)=[{{&(0x7f0000000080)=@nl=@unspec, 0x80, &(0x7f00000005c0)=[{&(0x7f0000000100)=""/230, 0xe6}, {&(0x7f0000000240)=""/200, 0xc8}, {&(0x7f0000000340)=""/175, 0xaf}, {&(0x7f0000000400)=""/53, 0x35}, {&(0x7f0000000440)=""/119, 0x77}], 0x5, &(0x7f0000000540)=""/55, 0x37}}], 0x400000000000222, 0x0, 0x0) r5 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xe, 0x4, 0x8, 0x7}, 0x50) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0xc, 0xd, &(0x7f0000000140)=ANY=[@ANYBLOB="1800000000000000000000000000000018150000", @ANYRES32=r5, @ANYBLOB="0000000000000000b7080000000000007b5af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001e000000850000000700000095"], &(0x7f0000000400)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000005c0)={r6, 0x0, 0xe, 0x0, &(0x7f0000000640)="d9b9547ed3c0021a6fd6a67ab922", 0x0, 0x20000, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) syz_mount_image$exfat(&(0x7f00000000c0), &(0x7f0000000000)='./file0\x00', 0x800, &(0x7f0000000bc0)=ANY=[@ANYBLOB='iocharset=maciceland,iocharset=default,gid=', @ANYRESHEX=0x0, @ANYBLOB="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"], 0x1, 0x152c, &(0x7f0000001f80)="$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") timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)=0x0) timer_settime(r7, 0x1, &(0x7f0000000040)={{}, {0x77359400}}, 0x0) r8 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r8, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000600)=ANY=[@ANYBLOB="400000002100110829bd7000fcdbdf250a0010020c000004040000001400020020010000000000000000000200010002050016003a00000008001700", @ANYRES64=r8], 0x40}, 0x1, 0x0, 0x0, 0x4000000}, 0x44000) 11.491727338s ago: executing program 2 (id=2973): bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000002000000b704000000000000850000005700000095"], 0x0}, 0x90) bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="17000000000000000400000003"], 0x48) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008"], 0x0}, 0x94) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000300)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008000000000000000000018110000", @ANYRES32=r0], 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xb, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r1}, 0x10) syz_clone(0xe50c1700, 0x0, 0x0, 0x0, 0x0, 0x0) 11.267798296s ago: executing program 8 (id=2974): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)={{0x12, 0x1, 0x200, 0x0, 0x0, 0x0, 0x8, 0x56a, 0xb8, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x0, 0x3, 0x0, {0x9, 0x21, 0x559, 0x0, 0x1, {0x22, 0xb}}, {{{0x9, 0x5, 0x81, 0x3, 0x0, 0x10, 0x2, 0x3}}}}}]}}]}}, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f0000000040)={0x24, 0x0, 0x0, &(0x7f0000000080)={0x0, 0x22, 0xb, {[@local=@item_4={0x3, 0x2, 0x2}, @main=@item_4={0x3, 0x0, 0x8, "0e13e94f"}, @main=@item_012={0x0, 0x0, 0x9}]}}, 0x0}, 0x0) 9.771625299s ago: executing program 1 (id=2975): setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x210000000013, &(0x7f00000000c0)=0x100000001, 0x4) setsockopt$inet_tcp_TCP_REPAIR_QUEUE(0xffffffffffffffff, 0x6, 0x14, 0x0, 0x0) connect$inet(0xffffffffffffffff, 0x0, 0x0) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x22, 0x0) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x1, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xffffe000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000004c0)=@abs={0x0, 0x0, 0x4e24}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x3fffffffffffeda, 0x2, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b7030000e8ffffff850000000400000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x33, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r3}, 0x10) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) connect$pppl2tp(0xffffffffffffffff, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x3, 0xffffffffffffffff, {0x2, 0x0, @dev}, 0x2}}, 0x2e) r4 = socket$pppl2tp(0x18, 0x1, 0x1) mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1) getsockopt(r4, 0x111, 0x3, 0x0, &(0x7f0000000080)) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x2, 0x0, &(0x7f0000000140)={0x0, 0x0}) syz_clone(0xe50c1700, 0x0, 0x0, 0x0, 0x0, 0x0) recvfrom$inet(0xffffffffffffffff, &(0x7f0000000a00)=""/138, 0x8a, 0x0, &(0x7f0000000300)={0x2, 0x4e24, @rand_addr=0x64010100}, 0x10) 7.582897974s ago: executing program 2 (id=2976): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r1 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$tun(r0, &(0x7f0000000280)={@val={0x0, 0x800}, @val={0x1, 0x0, 0x0, 0x0, 0x3d}, @mpls={[], @ipv4=@tcp={{0x5, 0x4, 0x0, 0x0, 0x38, 0x0, 0x0, 0x0, 0x84, 0x0, @empty=0x3fffffff, @local}, {{0x0, 0x0, 0x41424344, 0x41424344, 0x0, 0x2, 0x9, 0x0, 0x0, 0x0, 0x4, {[@window={0xa, 0x3}, @timestamp={0x5, 0xa}, @generic={0x0, 0x2}]}}}}}}, 0x46) 7.207510043s ago: executing program 8 (id=2977): r0 = openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r1) socket$nl_generic(0x10, 0x3, 0x10) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000340)=@newqdisc={0x4c, 0x24, 0x4ee4e6a52ff56541, 0x1, 0x25dfdbfd, {0x0, 0x0, 0x0, r3, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x1c, 0x2, {{0x3, 0x3, 0x6361, 0x7, 0xffffffff, 0x3}}}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x40088c1}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000004c0)=@newqdisc={0x3c, 0x24, 0x4ee4e6a52ff56541, 0x70b927, 0x25dfdc01, {0x0, 0x0, 0x0, r3, {0x0, 0x3}, {0xffff, 0xb}, {0xd, 0xb}}, [@qdisc_kind_options=@q_cake={{0x9}, {0xc, 0x2, [@TCA_CAKE_ACK_FILTER={0x8, 0x10, 0x1}]}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x2000c061}, 0x4008000) r4 = socket$packet(0x11, 0x3, 0x300) sendto$packet(r4, &(0x7f0000000200)="bad330fbc9b554ae7874805e3460811ac8b99482877766d70c0500000000000000430fc78dc06012e0127c4de9c80ee3aee8afd54b34", 0x36, 0xc1, &(0x7f00000001c0)={0x11, 0xf8, r3, 0x1, 0xd8, 0x6, @broadcast}, 0x14) 6.416920638s ago: executing program 2 (id=2978): socket$inet_icmp_raw(0x2, 0x3, 0x1) close(0x4) syz_open_procfs$namespace(0x0, &(0x7f0000000080)='ns/ipc\x00') mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x5, 0x3032, 0xffffffffffffffff, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r0 = socket$inet_udplite(0x2, 0x2, 0x88) syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) getsockopt$IPT_SO_GET_INFO(r0, 0x0, 0x40, &(0x7f0000000440)={'filter\x00', 0x0, [0x630, 0x3, 0x7fff, 0x80008000, 0xe]}, &(0x7f00000003c0)=0x54) 5.447510841s ago: executing program 8 (id=2979): mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz1\x00', 0x1ff) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup/syz1\x00', 0x200002, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x48) r1 = openat$cgroup_type(r0, &(0x7f0000000300), 0x2, 0x0) write$cgroup_type(r1, &(0x7f0000000280), 0x9) write$cgroup_pid(0xffffffffffffffff, &(0x7f00000001c0), 0x12) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz1\x00', 0x1ff) r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r3 = openat$cgroup_procs(r2, &(0x7f0000000040)='cgroup.procs\x00', 0x2, 0x0) write$cgroup_pid(r3, &(0x7f00000000c0), 0x40) 4.274821458s ago: executing program 8 (id=2980): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x11, 0x5, &(0x7f00000002c0)=ANY=[@ANYBLOB="1805000000000000000000004b64ffec8500000075000000040000000700000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000240)={&(0x7f0000000080)='sched_switch\x00', r0}, 0x10) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) setsockopt$netlink_NETLINK_ADD_MEMBERSHIP(r1, 0x10e, 0x1, &(0x7f0000000400)=0x1, 0x4) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000840)=ANY=[@ANYBLOB="fc0000001900010000000000fcdbdf2500000000000000000000000000000000fe8000000002000000000000000000bb00000000000000000200000000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="000000000000000004000000000000000000000000000000000000000000000000000000000000000200000000000000000000000000000000000000000000000000000000000000000000000000000000000000002000000000000000000000000000000000000001000000000000004400050000000000000000000000000000000000000000022b0000000a000000fe8000000000000000000000000000aa0000000004"], 0xfc}, 0x1, 0x0, 0x0, 0x20008000}, 0x0) r3 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r3, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x16) connect$inet(r3, &(0x7f0000000480)={0x2, 0x0, @multicast2}, 0x10) sendmmsg(r3, &(0x7f0000007fc0), 0x800001d, 0x1c) 3.840371254s ago: executing program 2 (id=2981): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000500), 0x0, 0x0) close(r1) socket$nl_generic(0x10, 0x3, 0x10) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000003c0)=@newqdisc={0x60, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {0x0, 0xb}, {0xffff, 0xffff}, {0x10, 0xfff1}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x34, 0x2, [@TCA_TBF_PARMS={0x28, 0x1, {{0x0, 0x2, 0x81, 0x7, 0x8, 0x8}, {0x6, 0x1, 0xd, 0x6, 0x6, 0xfb8e000}, 0x6, 0x4, 0x111e}}, @TCA_TBF_BURST={0x8, 0x6, 0x7f}]}}]}, 0x60}, 0x1, 0x0, 0x0, 0x24000011}, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000600)={&(0x7f0000000280)=@newqdisc={0x58, 0x24, 0x4ee4e6a52ff56541, 0x70b927, 0x25dfdc01, {0x0, 0x0, 0x0, r5, {0x0, 0x2}, {0xffff, 0xb}, {0xd, 0xb}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x28, 0x2, {{0x80000000, 0x7f, 0x76fd, 0x0, 0x80000001}, [@TCA_NETEM_CORRUPT={0xc, 0x4, {0x80000001}}]}}}]}, 0x58}, 0x1, 0x0, 0x0, 0x2000c061}, 0x4008000) r6 = socket$packet(0x11, 0x3, 0x300) sendto$packet(r6, &(0x7f0000000140)="bad330fbc9b5544972e7a5ea0756", 0xe, 0x40, &(0x7f00000001c0)={0x11, 0x1a, r5, 0x1, 0xd8, 0x6, @random="98c8ca7122df"}, 0x14) 3.67809885s ago: executing program 1 (id=2982): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000900)=@newsa={0xfc, 0x10, 0x1, 0xbffffffd, 0x100, {{@in6=@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @in=@local, 0x1, 0x794, 0x4e23, 0x5, 0x0, 0x0, 0x20, 0x3a}, {@in=@broadcast, 0x4d4, 0x6c}, @in=@loopback, {0x0, 0x9, 0x6, 0xffff, 0x8251c, 0x2, 0xfffffffffffffff8}, {0xffffffffffffffff, 0x0, 0x1f, 0x1ff}, {0x2, 0xfffffffc}, 0x70bd2a, 0x3504, 0x2, 0x1, 0xfd, 0x20}, [@mark={0xc, 0x15, {0x35075a, 0x3}}]}, 0xfc}, 0x1, 0x0, 0x0, 0x8801}, 0x10) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$inet6_IPV6_XFRM_POLICY(r1, 0x29, 0x23, &(0x7f00000003c0)={{{@in6=@mcast1, @in=@multicast2, 0x4e20, 0x0, 0x800, 0x0, 0x2}, {0x7, 0x0, 0x0, 0x0, 0xfffffffffffffffc, 0xfffffffffffffffd}, {0xffffffffffffffff}, 0x3, 0x0, 0x1, 0x0, 0x3, 0x3}, {{@in6=@private0={0xfc, 0x0, '\x00', 0x2}, 0x0, 0x2b}, 0x0, @in=@local, 0x0, 0x3, 0x0, 0x0, 0x10001, 0x200000}}, 0xe8) connect$inet6(r1, &(0x7f0000000040)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @loopback}}, 0x1c) 2.666818546s ago: executing program 1 (id=2983): sendmsg$IPSET_CMD_DESTROY(0xffffffffffffffff, &(0x7f0000000780)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)={0x14, 0x3, 0x6, 0x5}, 0x14}}, 0x8081) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x48241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) r1 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r1, 0x8914, 0x0) writev(r0, &(0x7f00000002c0)=[{&(0x7f0000000a40)="2e9b3d0007e03dd65193dfb6c575963f86ddf06712e9232f2b8db0049d90491ceaebfd26d4eef23248000000f858dbb8a19052343f", 0x35}, {&(0x7f0000000200)="c67f0d7df9", 0x49}], 0x2) 2.19834869s ago: executing program 2 (id=2984): r0 = syz_usb_connect(0x0, 0x1cb, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000122f0d4071040403dfe4000000010902b901010000003f0904"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$sierra_net(r0, 0x0, 0x0) syz_usb_control_io$uac1(r0, 0x0, 0x0) syz_usb_control_io$lan78xx(r0, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$rtl8150(r0, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$uac1(r0, 0x0, 0x0) syz_usb_control_io$printer(r0, 0x0, &(0x7f0000000480)={0x34, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 1.210355696s ago: executing program 1 (id=2985): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000300)={'pim6reg1\x00', 0x1}) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000100)={'pim6reg1\x00', @link_local}) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="170000000000000004000000ff"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000300)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0}, 0x94) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000040)='qdisc_destroy\x00', r3}, 0x10) close(r0) 265.323596ms ago: executing program 6 (id=2986): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0x102, 0x0) close(r1) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$tipc(&(0x7f00000000c0), r2) sendmsg$TIPC_CMD_ENABLE_BEARER(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c657230"], 0x38}}, 0x0) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x100, 0x0) close(r4) r5 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000380)=@newqdisc={0x58, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r6, {0x0, 0xb}, {0xffff, 0xffff}, {0x0, 0xfff3}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x28, 0x2, {{0x100, 0x7, 0x6361, 0x5, 0xffffffed, 0x6}, [@TCA_NETEM_LATENCY64={0xc, 0xa, 0x6}]}}}]}, 0x58}, 0x1, 0x0, 0x0, 0x20000001}, 0x0) sendmsg$nl_route_sched(r5, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000006c0)=@newqdisc={0x58, 0x24, 0x4ee4e6a52ff56541, 0x70bd26, 0x25dfdbff, {0x0, 0x0, 0x0, r6, {}, {0xb, 0xb}, {0x0, 0xb}}, [@qdisc_kind_options=@q_sfb={{0x8}, {0x2c, 0x2, @TCA_SFB_PARMS={0x28, 0x1, {0x33a34d5a, 0x5ebd81f7, 0xb, 0x1, 0xffffffff, 0xffff, 0x5, 0x7, 0x22}}}}]}, 0x58}, 0x1, 0x0, 0x0, 0x2001c061}, 0x4008000) ioctl$SIOCSIFHWADDR(r4, 0x8922, &(0x7f0000002280)={'syzkaller0\x00', @random="2b0100004ec6"}) 0s ago: executing program 8 (id=2987): socket$inet(0x2, 0x4000000000000001, 0x0) r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f0000000000)={0x9, 0x0, &(0x7f0000000040)={&(0x7f0000000240)=ANY=[@ANYBLOB="0207aa0f0200000000000000fed9df25"], 0x10}}, 0x40400c0) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r1 = getpid() sched_setscheduler(r1, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r4, 0x10e, 0xc, &(0x7f0000000040)={0x8607}, 0x10) ioctl$ifreq_SIOCGIFINDEX_wireguard(0xffffffffffffffff, 0x8933, &(0x7f0000000480)={'wg2\x00'}) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00'}, 0x10) openat$cgroup(0xffffffffffffffff, 0x0, 0x200002, 0x0) socket$nl_generic(0x10, 0x3, 0x10) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x3c, &(0x7f00000001c0)=0x7fff, 0x4) r5 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000001840), 0x2182, 0x0) r6 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000140)='/proc/consoles\x00', 0x0, 0x0) sendfile(r5, r6, 0x0, 0x20000023896) process_vm_writev(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x15) kernel console output (not intermixed with test programs): 1.819197][ T37] usb 3-1: config 0 descriptor?? [ 1222.130515][T11783] usb 7-1: new full-speed USB device number 24 using dummy_hcd [ 1223.264941][T11783] usb 7-1: unable to get BOS descriptor or descriptor too short [ 1223.307728][T11783] usb 7-1: unable to read config index 0 descriptor/start: -71 [ 1223.317418][T11783] usb 7-1: can't read configurations, error -71 [ 1223.570499][ T37] usb 10-1: USB disconnect, device number 45 [ 1224.134591][ T37] usb 2-1: new high-speed USB device number 10 using dummy_hcd [ 1224.367214][ T37] usb 2-1: config 0 has no interfaces? [ 1224.374176][ T37] usb 2-1: New USB device found, idVendor=0458, idProduct=5003, bcdDevice= 0.00 [ 1224.384621][ T37] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1224.465525][T10907] usb 3-1: USB disconnect, device number 24 [ 1224.487667][ T37] usb 2-1: config 0 descriptor?? [ 1224.877234][T13022] overlayfs: missing 'lowerdir' [ 1224.906044][ T37] usb 2-1: USB disconnect, device number 10 [ 1224.960158][T10907] usb 3-1: new high-speed USB device number 25 using dummy_hcd [ 1225.160488][T10907] usb 3-1: Using ep0 maxpacket: 8 [ 1225.177211][T10907] usb 3-1: config index 0 descriptor too short (expected 30, got 18) [ 1225.186687][T10907] usb 3-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 1225.247535][T10907] usb 3-1: New USB device found, idVendor=1660, idProduct=0932, bcdDevice=80.ea [ 1225.257228][T10907] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1225.265670][T10907] usb 3-1: Product: syz [ 1225.270317][T10907] usb 3-1: Manufacturer: syz [ 1225.275120][T10907] usb 3-1: SerialNumber: syz [ 1225.356944][T10907] usb 3-1: config 0 descriptor?? [ 1225.665708][ T37] usb 3-1: USB disconnect, device number 25 [ 1226.300573][ T37] usb 2-1: new high-speed USB device number 11 using dummy_hcd [ 1226.505811][ T37] usb 2-1: Using ep0 maxpacket: 16 [ 1226.544761][ T37] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1226.555601][ T37] usb 2-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 1226.659213][ T37] usb 2-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 1226.673538][ T37] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1226.683481][ T37] usb 2-1: Product: syz [ 1226.687877][ T37] usb 2-1: Manufacturer: syz [ 1226.692849][ T37] usb 2-1: SerialNumber: syz [ 1226.754043][ T37] usb 2-1: config 0 descriptor?? [ 1226.764115][T10907] usb 3-1: new high-speed USB device number 26 using dummy_hcd [ 1226.950415][T10907] usb 3-1: Using ep0 maxpacket: 16 [ 1226.968270][T10907] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1226.983685][T10907] usb 3-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 1227.043466][T10907] usb 3-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 1227.053049][T10907] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1227.061481][T10907] usb 3-1: Product: syz [ 1227.065873][T10907] usb 3-1: Manufacturer: syz [ 1227.070803][T10907] usb 3-1: SerialNumber: syz [ 1227.106757][T10907] usb 3-1: config 0 descriptor?? [ 1229.465469][T10907] usb 2-1: USB disconnect, device number 11 [ 1229.990823][ T37] usb 3-1: USB disconnect, device number 26 [ 1231.190180][ T37] usb 10-1: new high-speed USB device number 46 using dummy_hcd [ 1231.363396][ T37] usb 10-1: Using ep0 maxpacket: 32 [ 1231.390429][ T8683] usb 2-1: new high-speed USB device number 12 using dummy_hcd [ 1231.456767][ T37] usb 10-1: config 0 has an invalid interface number: 12 but max is 0 [ 1231.465395][ T37] usb 10-1: config 0 has no interface number 0 [ 1231.471992][ T37] usb 10-1: config 0 interface 12 has no altsetting 0 [ 1231.566754][ T37] usb 10-1: New USB device found, idVendor=2c42, idProduct=1202, bcdDevice=85.40 [ 1231.576580][ T37] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1231.589574][ T37] usb 10-1: Product: syz [ 1231.596473][ T37] usb 10-1: Manufacturer: syz [ 1231.601516][ T37] usb 10-1: SerialNumber: syz [ 1231.635607][ T8683] usb 2-1: Using ep0 maxpacket: 16 [ 1231.655492][ T8683] usb 2-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xF3, changing to 0x83 [ 1231.667731][ T8683] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 1231.702680][ T37] usb 10-1: config 0 descriptor?? [ 1231.755176][ T8683] usb 2-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 1231.765259][ T8683] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1231.773833][ T8683] usb 2-1: Product: syz [ 1231.778363][ T8683] usb 2-1: Manufacturer: syz [ 1231.788014][ T8683] usb 2-1: SerialNumber: syz [ 1231.849113][ T8683] usb 2-1: config 0 descriptor?? [ 1231.861967][T10907] usb 3-1: new full-speed USB device number 27 using dummy_hcd [ 1231.875954][ T8683] em28xx 2-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0) [ 1231.892228][ T8683] em28xx 2-1:0.0: Audio interface 0 found (Vendor Class) [ 1232.111071][T10907] usb 3-1: unable to get BOS descriptor or descriptor too short [ 1232.144171][T10907] usb 3-1: not running at top speed; connect to a high speed hub [ 1232.208951][T10907] usb 3-1: config 1 has an invalid descriptor of length 131, skipping remainder of the config [ 1232.220204][T10907] usb 3-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 1232.229406][T10907] usb 3-1: config 1 has no interface number 1 [ 1232.235871][T10907] usb 3-1: too many endpoints for config 1 interface 2 altsetting 3: 58, using maximum allowed: 30 [ 1232.246971][T10907] usb 3-1: config 1 interface 2 altsetting 3 has 0 endpoint descriptors, different from the interface descriptor's value: 58 [ 1232.260628][T10907] usb 3-1: config 1 interface 2 has no altsetting 0 [ 1232.393425][T10907] usb 3-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 1232.407584][T10907] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1232.417660][T10907] usb 3-1: Product: syz [ 1232.422231][T10907] usb 3-1: Manufacturer: syz [ 1232.427046][T10907] usb 3-1: SerialNumber: syz [ 1232.586003][ T8683] em28xx 2-1:0.0: unknown em28xx chip ID (0) [ 1232.623373][ T8683] em28xx 2-1:0.0: Config register raw data: 0x00 [ 1233.076485][ T37] f81534 10-1:0.12: f81534_get_register: reg: 1003 failed: -71 [ 1233.089304][ T37] f81534 10-1:0.12: f81534_find_config_idx: read failed: -71 [ 1233.097204][ T37] f81534 10-1:0.12: f81534_calc_num_ports: find idx failed: -71 [ 1233.105537][ T37] f81534 10-1:0.12: probe with driver f81534 failed with error -71 [ 1233.262521][ T37] usb 10-1: USB disconnect, device number 46 [ 1234.264443][T10907] usb 3-1: USB disconnect, device number 27 [ 1234.280155][ T37] usb 7-1: new high-speed USB device number 26 using dummy_hcd [ 1234.390817][T11783] usb 2-1: USB disconnect, device number 12 [ 1234.398896][T11783] em28xx 2-1:0.0: Disconnecting em28xx [ 1234.510606][ T37] usb 7-1: Using ep0 maxpacket: 16 [ 1234.538872][ T37] usb 7-1: config 0 interface 0 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 1234.563684][T11783] em28xx 2-1:0.0: Freeing device [ 1235.118322][ T37] usb 7-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 1235.127982][ T37] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1235.137430][ T37] usb 7-1: Product: syz [ 1235.142009][ T37] usb 7-1: Manufacturer: syz [ 1235.146826][ T37] usb 7-1: SerialNumber: syz [ 1235.274043][ T37] usb 7-1: config 0 descriptor?? [ 1237.506948][ T37] usb 7-1: USB disconnect, device number 26 [ 1238.110449][ T37] usb 2-1: new high-speed USB device number 13 using dummy_hcd [ 1238.325097][ T37] usb 2-1: Using ep0 maxpacket: 16 [ 1238.376531][ T37] usb 2-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xF3, changing to 0x83 [ 1238.388868][ T37] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 1238.475470][ T37] usb 2-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 1238.485868][ T37] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1238.494443][ T37] usb 2-1: Product: syz [ 1238.498839][ T37] usb 2-1: Manufacturer: syz [ 1238.503861][ T37] usb 2-1: SerialNumber: syz [ 1238.605843][ T37] usb 2-1: config 0 descriptor?? [ 1238.635480][ T37] em28xx 2-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0) [ 1238.652069][ T37] em28xx 2-1:0.0: Audio interface 0 found (Vendor Class) [ 1238.710866][T11783] usb 7-1: new full-speed USB device number 27 using dummy_hcd [ 1238.910708][T11783] usb 7-1: unable to get BOS descriptor or descriptor too short [ 1238.946560][T11783] usb 7-1: not running at top speed; connect to a high speed hub [ 1238.988293][T11783] usb 7-1: config 1 has an invalid descriptor of length 131, skipping remainder of the config [ 1238.999392][T11783] usb 7-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 1239.008785][T11783] usb 7-1: config 1 has no interface number 1 [ 1239.015337][T11783] usb 7-1: too many endpoints for config 1 interface 2 altsetting 3: 58, using maximum allowed: 30 [ 1239.026578][T11783] usb 7-1: config 1 interface 2 altsetting 3 has 0 endpoint descriptors, different from the interface descriptor's value: 58 [ 1239.040027][T11783] usb 7-1: config 1 interface 2 has no altsetting 0 [ 1239.128238][T11783] usb 7-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 1239.138051][T11783] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1239.146797][T11783] usb 7-1: Product: syz [ 1239.151461][T11783] usb 7-1: Manufacturer: syz [ 1239.161649][T11783] usb 7-1: SerialNumber: syz [ 1239.287627][ T37] em28xx 2-1:0.0: unknown em28xx chip ID (0) [ 1239.315105][ T37] em28xx 2-1:0.0: Config register raw data: 0x00 [ 1240.494312][ T5805] Bluetooth: hci1: command 0x0406 tx timeout [ 1241.038339][T11783] usb 7-1: USB disconnect, device number 27 [ 1241.127585][T10907] usb 2-1: USB disconnect, device number 13 [ 1241.143285][T10907] em28xx 2-1:0.0: Disconnecting em28xx [ 1241.181692][T10907] em28xx 2-1:0.0: Freeing device [ 1243.740355][ T37] usb 2-1: new high-speed USB device number 14 using dummy_hcd [ 1243.925222][ T37] usb 2-1: Using ep0 maxpacket: 16 [ 1243.988049][ T37] usb 2-1: config 0 interface 0 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 1244.100843][ T37] usb 2-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 1244.110648][ T37] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1244.118880][ T37] usb 2-1: Product: syz [ 1244.123479][ T37] usb 2-1: Manufacturer: syz [ 1244.128310][ T37] usb 2-1: SerialNumber: syz [ 1244.220381][ T37] usb 2-1: config 0 descriptor?? [ 1245.260272][ T37] usb 10-1: new full-speed USB device number 47 using dummy_hcd [ 1245.465948][ T37] usb 10-1: unable to get BOS descriptor or descriptor too short [ 1245.488373][ T37] usb 10-1: not running at top speed; connect to a high speed hub [ 1245.523674][ T37] usb 10-1: config 1 has an invalid descriptor of length 131, skipping remainder of the config [ 1245.534758][ T37] usb 10-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 1245.544845][ T37] usb 10-1: config 1 has no interface number 1 [ 1245.551371][ T37] usb 10-1: too many endpoints for config 1 interface 2 altsetting 3: 58, using maximum allowed: 30 [ 1245.562714][ T37] usb 10-1: config 1 interface 2 altsetting 3 has 0 endpoint descriptors, different from the interface descriptor's value: 58 [ 1245.576813][ T37] usb 10-1: config 1 interface 2 has no altsetting 0 [ 1245.724690][ T37] usb 10-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 1245.734591][ T37] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1245.743346][ T37] usb 10-1: Product: syz [ 1245.747810][ T37] usb 10-1: Manufacturer: syz [ 1245.752859][ T37] usb 10-1: SerialNumber: syz [ 1246.432778][T10907] usb 7-1: new high-speed USB device number 28 using dummy_hcd [ 1246.660271][T10907] usb 7-1: Using ep0 maxpacket: 8 [ 1246.689337][T10907] usb 7-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1246.700492][T10907] usb 7-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xBE, changing to 0x8E [ 1246.712573][T10907] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x8E has an invalid bInterval 0, changing to 7 [ 1246.723889][T10907] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x8E has invalid wMaxPacketSize 0 [ 1246.739373][T10907] usb 7-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 1247.112162][T10907] usb 7-1: New USB device found, idVendor=10c5, idProduct=819a, bcdDevice=e4.46 [ 1247.121907][T10907] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=35 [ 1247.130676][T10907] usb 7-1: Product: syz [ 1247.135130][T10907] usb 7-1: Manufacturer: syz [ 1247.140124][T10907] usb 7-1: SerialNumber: syz [ 1247.326082][T10907] usb 7-1: config 0 descriptor?? [ 1247.357264][ T8683] usb 2-1: USB disconnect, device number 14 [ 1247.405025][ T37] usb 10-1: USB disconnect, device number 47 [ 1247.578984][T10907] radio-si470x 7-1:0.0: si470x_get_report: usb_control_msg returned -32 [ 1247.589017][T10907] radio-si470x 7-1:0.0: probe with driver radio-si470x failed with error -5 [ 1247.676186][T10907] usb 7-1: USB disconnect, device number 28 [ 1248.787610][T13273] netlink: 8 bytes leftover after parsing attributes in process `syz.6.1910'. [ 1248.963163][T13273] team0: Port device vlan2 added [ 1249.520836][T10907] usb 3-1: new high-speed USB device number 28 using dummy_hcd [ 1249.720552][T10907] usb 3-1: Using ep0 maxpacket: 8 [ 1249.767781][T10907] usb 3-1: config index 0 descriptor too short (expected 301, got 45) [ 1249.776625][T10907] usb 3-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 1249.786811][T10907] usb 3-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 1249.796955][T10907] usb 3-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 1249.811868][T10907] usb 3-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 1249.827168][T10907] usb 3-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 1249.836623][T10907] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1250.021224][T11783] usb 7-1: new high-speed USB device number 29 using dummy_hcd [ 1250.174921][T10907] usb 3-1: GET_CAPABILITIES returned 2f [ 1250.181548][T10907] usbtmc 3-1:16.0: can't read capabilities [ 1250.225819][T11783] usb 7-1: Using ep0 maxpacket: 16 [ 1250.252051][T11783] usb 7-1: config 0 interface 0 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 1250.282633][T11783] usb 7-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 1250.292576][T11783] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1250.301157][T11783] usb 7-1: Product: syz [ 1250.305561][T11783] usb 7-1: Manufacturer: syz [ 1250.310578][T11783] usb 7-1: SerialNumber: syz [ 1250.412631][T11783] usb 7-1: config 0 descriptor?? [ 1251.410751][ T37] usb 10-1: new high-speed USB device number 48 using dummy_hcd [ 1251.596067][ T37] usb 10-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1251.611541][ T37] usb 10-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 1251.621972][ T37] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1251.672907][ T37] usb 10-1: config 0 descriptor?? [ 1251.724697][ T37] pwc: Askey VC010 type 2 USB webcam detected. [ 1252.113733][ T37] pwc: recv_control_msg error -32 req 02 val 2b00 [ 1252.125796][ T37] pwc: recv_control_msg error -32 req 02 val 2700 [ 1252.149414][ T37] pwc: recv_control_msg error -32 req 02 val 2c00 [ 1252.186352][ T37] pwc: recv_control_msg error -32 req 04 val 1000 [ 1252.200308][ T37] pwc: recv_control_msg error -32 req 04 val 1300 [ 1252.241303][ T37] pwc: recv_control_msg error -32 req 04 val 1400 [ 1252.258365][ T37] pwc: recv_control_msg error -32 req 02 val 2000 [ 1252.293160][ T37] pwc: recv_control_msg error -32 req 02 val 2100 [ 1252.302528][T11783] usb 3-1: USB disconnect, device number 28 [ 1252.327275][ T37] pwc: recv_control_msg error -32 req 04 val 1500 [ 1252.560302][ T37] pwc: recv_control_msg error -71 req 02 val 2400 [ 1252.576870][ T37] pwc: recv_control_msg error -71 req 02 val 2600 [ 1252.610532][ T37] pwc: recv_control_msg error -71 req 02 val 2900 [ 1252.620977][ T37] pwc: recv_control_msg error -71 req 02 val 2800 [ 1252.640994][ T37] pwc: recv_control_msg error -71 req 04 val 1100 [ 1252.655060][ T37] pwc: recv_control_msg error -71 req 04 val 1200 [ 1252.702629][ T37] pwc: Registered as video103. [ 1252.710733][ T37] input: PWC snapshot button as /devices/platform/dummy_hcd.9/usb10/10-1/input/input17 [ 1252.747875][ T37] usb 10-1: USB disconnect, device number 48 [ 1253.097750][T11783] usb 7-1: USB disconnect, device number 29 [ 1253.408745][T13343] netlink: 12 bytes leftover after parsing attributes in process `syz.6.1930'. [ 1253.521916][T13343] 8021q: adding VLAN 0 to HW filter on device bond1 [ 1254.691302][T13362] dummy0: entered promiscuous mode [ 1254.696674][T13362] dummy0: entered allmulticast mode [ 1255.306289][ T37] usb 10-1: new full-speed USB device number 49 using dummy_hcd [ 1255.504092][ T37] usb 10-1: no configurations [ 1255.509327][ T37] usb 10-1: can't read configurations, error -22 [ 1255.660388][ T8683] usb 3-1: new high-speed USB device number 29 using dummy_hcd [ 1255.690872][ T37] usb 10-1: new full-speed USB device number 50 using dummy_hcd [ 1255.854067][ T8683] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1255.864945][ T8683] usb 3-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 1255.874949][ T8683] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1255.897712][ T37] usb 10-1: no configurations [ 1255.902941][ T37] usb 10-1: can't read configurations, error -22 [ 1255.930698][ T37] usb usb10-port1: attempt power cycle [ 1255.958530][ T8683] usb 3-1: config 0 descriptor?? [ 1255.979134][ T8683] pwc: Askey VC010 type 2 USB webcam detected. [ 1256.280695][ T37] usb 10-1: new full-speed USB device number 51 using dummy_hcd [ 1256.319424][ T37] usb 10-1: no configurations [ 1256.325005][ T37] usb 10-1: can't read configurations, error -22 [ 1256.413420][ T8683] pwc: recv_control_msg error -32 req 02 val 2b00 [ 1256.428005][ T8683] pwc: recv_control_msg error -32 req 02 val 2700 [ 1256.467972][ T8683] pwc: recv_control_msg error -32 req 02 val 2c00 [ 1256.480581][ T37] usb 10-1: new full-speed USB device number 52 using dummy_hcd [ 1256.490007][ T8683] pwc: recv_control_msg error -32 req 04 val 1000 [ 1256.511620][ T8683] pwc: recv_control_msg error -32 req 04 val 1300 [ 1256.525786][ T37] usb 10-1: no configurations [ 1256.530897][ T37] usb 10-1: can't read configurations, error -22 [ 1256.549721][ T8683] pwc: recv_control_msg error -32 req 04 val 1400 [ 1256.559595][ T37] usb usb10-port1: unable to enumerate USB device [ 1256.575539][ T8683] pwc: recv_control_msg error -32 req 02 val 2000 [ 1256.590543][ T8683] pwc: recv_control_msg error -32 req 02 val 2100 [ 1256.626294][ T8683] pwc: recv_control_msg error -32 req 04 val 1500 [ 1256.840607][ T8683] pwc: recv_control_msg error -71 req 02 val 2400 [ 1256.860083][ T8683] pwc: recv_control_msg error -71 req 02 val 2600 [ 1256.890187][ T8683] pwc: recv_control_msg error -71 req 02 val 2900 [ 1256.900795][ T8683] pwc: recv_control_msg error -71 req 02 val 2800 [ 1256.908804][ T8683] pwc: recv_control_msg error -71 req 04 val 1100 [ 1256.919119][ T8683] pwc: recv_control_msg error -71 req 04 val 1200 [ 1256.941178][ T8683] pwc: Registered as video103. [ 1256.948630][ T8683] input: PWC snapshot button as /devices/platform/dummy_hcd.2/usb3/3-1/input/input18 [ 1257.014277][ T8683] usb 3-1: USB disconnect, device number 29 [ 1258.739504][T13396] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1945'. [ 1258.838047][T13396] 8021q: adding VLAN 0 to HW filter on device bond1 [ 1259.002129][T11783] usb 10-1: new full-speed USB device number 53 using dummy_hcd [ 1259.196274][T11783] usb 10-1: unable to get BOS descriptor or descriptor too short [ 1259.207627][T11783] usb 10-1: not running at top speed; connect to a high speed hub [ 1259.277712][T11783] usb 10-1: config 1 has an invalid descriptor of length 131, skipping remainder of the config [ 1259.292244][T11783] usb 10-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 1259.302086][T11783] usb 10-1: config 1 has no interface number 1 [ 1259.308505][T11783] usb 10-1: too many endpoints for config 1 interface 2 altsetting 3: 58, using maximum allowed: 30 [ 1259.323959][T11783] usb 10-1: config 1 interface 2 altsetting 3 has 0 endpoint descriptors, different from the interface descriptor's value: 58 [ 1259.341109][T11783] usb 10-1: config 1 interface 2 has no altsetting 0 [ 1259.448486][T11783] usb 10-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 1259.461191][T11783] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1259.469541][T11783] usb 10-1: Product: syz [ 1259.474344][T11783] usb 10-1: Manufacturer: syz [ 1259.479247][T11783] usb 10-1: SerialNumber: syz [ 1259.650802][T13411] dummy0: entered promiscuous mode [ 1259.656428][T13411] dummy0: entered allmulticast mode [ 1260.827486][T11783] usb 10-1: USB disconnect, device number 53 [ 1260.974688][T11764] Bluetooth: hci5: command 0x0406 tx timeout [ 1261.140933][T10907] usb 2-1: new high-speed USB device number 15 using dummy_hcd [ 1261.388557][T10907] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1261.399391][T10907] usb 2-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 1261.408854][T10907] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1261.604235][T10907] usb 2-1: config 0 descriptor?? [ 1261.706954][T10907] pwc: Askey VC010 type 2 USB webcam detected. [ 1262.057700][T10907] pwc: recv_control_msg error -32 req 02 val 2b00 [ 1262.130468][T10907] pwc: recv_control_msg error -32 req 02 val 2700 [ 1262.161523][T10907] pwc: recv_control_msg error -32 req 02 val 2c00 [ 1262.180760][T10907] pwc: recv_control_msg error -32 req 04 val 1000 [ 1262.209451][T10907] pwc: recv_control_msg error -32 req 04 val 1300 [ 1262.236434][T10907] pwc: recv_control_msg error -32 req 04 val 1400 [ 1262.249487][T10907] pwc: recv_control_msg error -32 req 02 val 2000 [ 1262.281381][T10907] pwc: recv_control_msg error -32 req 02 val 2100 [ 1262.316767][T10907] pwc: recv_control_msg error -32 req 04 val 1500 [ 1262.531683][T10907] pwc: recv_control_msg error -71 req 02 val 2400 [ 1262.562940][T10907] pwc: recv_control_msg error -71 req 02 val 2600 [ 1262.593361][T10907] pwc: recv_control_msg error -71 req 02 val 2900 [ 1262.629407][T10907] pwc: recv_control_msg error -71 req 02 val 2800 [ 1262.650340][T10907] pwc: recv_control_msg error -71 req 04 val 1100 [ 1262.658122][T10907] pwc: recv_control_msg error -71 req 04 val 1200 [ 1262.678830][T10907] pwc: Registered as video103. [ 1262.686610][T10907] input: PWC snapshot button as /devices/platform/dummy_hcd.1/usb2/2-1/input/input19 [ 1262.833689][T10907] usb 2-1: USB disconnect, device number 15 [ 1268.299156][ T30] kauditd_printk_skb: 32 callbacks suppressed [ 1268.299249][ T30] audit: type=1326 audit(1760149654.460:193): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13472 comm="syz.2.1967" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc36098eec9 code=0x7ffc0000 [ 1268.328671][ T30] audit: type=1326 audit(1760149654.460:194): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13472 comm="syz.2.1967" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc36098eec9 code=0x7ffc0000 [ 1268.355592][ T30] audit: type=1326 audit(1760149654.460:195): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13472 comm="syz.2.1967" exe="/root/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7fc36098eec9 code=0x7ffc0000 [ 1268.368317][T10907] usb 7-1: new high-speed USB device number 30 using dummy_hcd [ 1268.379589][ T30] audit: type=1326 audit(1760149654.470:196): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13472 comm="syz.2.1967" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc36098eec9 code=0x7ffc0000 [ 1268.408949][ T30] audit: type=1326 audit(1760149654.470:197): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13472 comm="syz.2.1967" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc36098eec9 code=0x7ffc0000 [ 1268.431994][ T30] audit: type=1326 audit(1760149654.470:198): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13472 comm="syz.2.1967" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7fc36098eec9 code=0x7ffc0000 [ 1268.458110][ T30] audit: type=1326 audit(1760149654.470:199): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13472 comm="syz.2.1967" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc36098eec9 code=0x7ffc0000 [ 1268.482158][ T30] audit: type=1326 audit(1760149654.470:200): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13472 comm="syz.2.1967" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc36098eec9 code=0x7ffc0000 [ 1268.638736][T10907] usb 7-1: Using ep0 maxpacket: 32 [ 1268.672908][T10907] usb 7-1: config index 0 descriptor too short (expected 35577, got 27) [ 1268.682437][T10907] usb 7-1: config 1 has too many interfaces: 92, using maximum allowed: 32 [ 1268.691572][T10907] usb 7-1: config 1 has 1 interface, different from the descriptor's value: 92 [ 1268.700957][T10907] usb 7-1: config 1 has no interface number 0 [ 1268.707285][T10907] usb 7-1: config 1 interface 1 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 1268.718560][T10907] usb 7-1: config 1 interface 1 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 17 [ 1268.732470][T10907] usb 7-1: New USB device found, idVendor=0e41, idProduct=5051, bcdDevice=d5.e8 [ 1268.741915][T10907] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1268.863976][T10907] snd_usb_pod 7-1:1.1: Line 6 Pocket POD found [ 1268.874558][ T30] audit: type=1326 audit(1760149654.700:201): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13472 comm="syz.2.1967" exe="/root/syz-executor" sig=0 arch=c000003e syscall=307 compat=0 ip=0x7fc36098eec9 code=0x7ffc0000 [ 1268.898172][ T30] audit: type=1326 audit(1760149654.700:202): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13472 comm="syz.2.1967" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc36098eec9 code=0x7ffc0000 [ 1269.063645][T10907] snd_usb_pod 7-1:1.1: Line 6 Pocket POD now attached [ 1269.577507][T10907] usb 7-1: USB disconnect, device number 30 [ 1269.585985][T10907] snd_usb_pod 7-1:1.1: Line 6 Pocket POD now disconnected [ 1273.851441][T13543] dummy0: entered promiscuous mode [ 1273.856814][T13543] dummy0: entered allmulticast mode [ 1273.998868][ T30] kauditd_printk_skb: 4 callbacks suppressed [ 1273.998949][ T30] audit: type=1326 audit(1760149660.170:207): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13537 comm="syz.1.1986" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc54fd8eec9 code=0x7ffc0000 [ 1274.028565][ T30] audit: type=1326 audit(1760149660.170:208): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13537 comm="syz.1.1986" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc54fd8eec9 code=0x7ffc0000 [ 1274.052049][ T30] audit: type=1326 audit(1760149660.170:209): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13537 comm="syz.1.1986" exe="/root/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7fc54fd8eec9 code=0x7ffc0000 [ 1274.078227][ T30] audit: type=1326 audit(1760149660.180:210): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13537 comm="syz.1.1986" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc54fd8eec9 code=0x7ffc0000 [ 1274.102050][ T30] audit: type=1326 audit(1760149660.180:211): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13537 comm="syz.1.1986" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc54fd8eec9 code=0x7ffc0000 [ 1274.124962][ T30] audit: type=1326 audit(1760149660.180:212): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13537 comm="syz.1.1986" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7fc54fd8eec9 code=0x7ffc0000 [ 1274.147710][ T30] audit: type=1326 audit(1760149660.180:213): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13537 comm="syz.1.1986" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc54fd8eec9 code=0x7ffc0000 [ 1274.170690][ T30] audit: type=1326 audit(1760149660.180:214): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13537 comm="syz.1.1986" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc54fd8eec9 code=0x7ffc0000 [ 1274.196149][ T30] audit: type=1326 audit(1760149660.180:215): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13537 comm="syz.1.1986" exe="/root/syz-executor" sig=0 arch=c000003e syscall=307 compat=0 ip=0x7fc54fd8eec9 code=0x7ffc0000 [ 1274.219746][ T30] audit: type=1326 audit(1760149660.180:216): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13537 comm="syz.1.1986" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc54fd8eec9 code=0x7ffc0000 [ 1275.636056][T13561] binder: 13559:13561 ioctl c0306201 0 returned -14 [ 1275.780400][ T8683] usb 3-1: new high-speed USB device number 30 using dummy_hcd [ 1276.000741][ T8683] usb 3-1: Using ep0 maxpacket: 16 [ 1276.047000][ T8683] usb 3-1: config 1 has an invalid descriptor of length 97, skipping remainder of the config [ 1276.057900][ T8683] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 1276.152996][ T8683] usb 3-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 1276.162642][ T8683] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1276.171619][ T8683] usb 3-1: Product: syz [ 1276.176016][ T8683] usb 3-1: Manufacturer: syz [ 1276.181125][ T8683] usb 3-1: SerialNumber: syz [ 1276.333474][T11764] Bluetooth: hci0: command 0x0406 tx timeout [ 1276.525601][ T8683] usb 3-1: 0:2 : does not exist [ 1276.538055][ T8683] usb 3-1: unit 6 not found! [ 1276.620947][ T8683] usb 3-1: USB disconnect, device number 30 [ 1277.141912][T13583] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2000'. [ 1277.808243][T13594] ceph: Path missing in source [ 1278.200691][T13598] binder: 13597:13598 ioctl c0306201 0 returned -14 [ 1279.405412][ T1289] ieee802154 phy0 wpan0: encryption failed: -22 [ 1279.412459][ T1289] ieee802154 phy1 wpan1: encryption failed: -22 [ 1279.551054][ T30] kauditd_printk_skb: 4 callbacks suppressed [ 1279.551142][ T30] audit: type=1326 audit(1760149665.710:221): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13602 comm="syz.8.2007" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f87a7f8eec9 code=0x7ffc0000 [ 1279.580564][ T30] audit: type=1326 audit(1760149665.710:222): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13602 comm="syz.8.2007" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f87a7f8eec9 code=0x7ffc0000 [ 1279.606479][ T30] audit: type=1326 audit(1760149665.710:223): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13602 comm="syz.8.2007" exe="/root/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7f87a7f8eec9 code=0x7ffc0000 [ 1279.630521][ T30] audit: type=1326 audit(1760149665.710:224): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13602 comm="syz.8.2007" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f87a7f8eec9 code=0x7ffc0000 [ 1279.653598][ T30] audit: type=1326 audit(1760149665.720:225): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13602 comm="syz.8.2007" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f87a7f8eec9 code=0x7ffc0000 [ 1279.676434][ T30] audit: type=1326 audit(1760149665.720:226): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13602 comm="syz.8.2007" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f87a7f8eec9 code=0x7ffc0000 [ 1279.699865][ T30] audit: type=1326 audit(1760149665.720:227): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13602 comm="syz.8.2007" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f87a7f8eec9 code=0x7ffc0000 [ 1279.725473][ T30] audit: type=1326 audit(1760149665.720:228): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13602 comm="syz.8.2007" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f87a7f8eec9 code=0x7ffc0000 [ 1279.749023][ T30] audit: type=1326 audit(1760149665.720:229): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13602 comm="syz.8.2007" exe="/root/syz-executor" sig=0 arch=c000003e syscall=307 compat=0 ip=0x7f87a7f8eec9 code=0x7ffc0000 [ 1281.553037][ T8683] usb 7-1: new high-speed USB device number 31 using dummy_hcd [ 1281.764745][ T8683] usb 7-1: Using ep0 maxpacket: 16 [ 1281.796702][ T8683] usb 7-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xF3, changing to 0x83 [ 1281.809162][ T8683] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 1281.848811][ T8683] usb 7-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 1281.862371][ T8683] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1281.872049][ T8683] usb 7-1: Product: syz [ 1281.876440][ T8683] usb 7-1: Manufacturer: syz [ 1281.881453][ T8683] usb 7-1: SerialNumber: syz [ 1281.924230][ T8683] usb 7-1: config 0 descriptor?? [ 1281.953485][ T8683] em28xx 7-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0) [ 1281.968578][ T8683] em28xx 7-1:0.0: Audio interface 0 found (Vendor Class) [ 1282.602022][ T8683] em28xx 7-1:0.0: unknown em28xx chip ID (0) [ 1282.639663][ T8683] em28xx 7-1:0.0: Config register raw data: 0x00 [ 1283.012582][T13630] netlink: 4 bytes leftover after parsing attributes in process `syz.9.2013'. [ 1283.412231][T13639] binder: 13638:13639 ioctl c0306201 0 returned -14 [ 1284.578876][ T30] audit: type=1326 audit(1760149670.730:230): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13644 comm="syz.2.2019" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc36098eec9 code=0x7ffc0000 [ 1284.602242][ T30] audit: type=1326 audit(1760149670.730:231): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13644 comm="syz.2.2019" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc36098eec9 code=0x7ffc0000 [ 1284.628544][ T30] audit: type=1326 audit(1760149670.740:232): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13644 comm="syz.2.2019" exe="/root/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7fc36098eec9 code=0x7ffc0000 [ 1284.652353][ T30] audit: type=1326 audit(1760149670.740:233): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13644 comm="syz.2.2019" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc36098eec9 code=0x7ffc0000 [ 1284.675649][ T30] audit: type=1326 audit(1760149670.740:234): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13644 comm="syz.2.2019" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc36098eec9 code=0x7ffc0000 [ 1284.698594][ T30] audit: type=1326 audit(1760149670.740:235): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13644 comm="syz.2.2019" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7fc36098eec9 code=0x7ffc0000 [ 1284.721453][ T30] audit: type=1326 audit(1760149670.740:236): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13644 comm="syz.2.2019" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc36098eec9 code=0x7ffc0000 [ 1284.748411][ T30] audit: type=1326 audit(1760149670.740:237): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13644 comm="syz.2.2019" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc36098eec9 code=0x7ffc0000 [ 1284.772631][ T30] audit: type=1326 audit(1760149670.740:238): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13644 comm="syz.2.2019" exe="/root/syz-executor" sig=0 arch=c000003e syscall=307 compat=0 ip=0x7fc36098eec9 code=0x7ffc0000 [ 1284.891397][ T8683] usb 7-1: USB disconnect, device number 31 [ 1284.899361][ T8683] em28xx 7-1:0.0: Disconnecting em28xx [ 1284.971830][ T8683] em28xx 7-1:0.0: Freeing device [ 1286.053738][T13661] netlink: 8 bytes leftover after parsing attributes in process `syz.6.2023'. [ 1287.185491][T13670] netlink: 4 bytes leftover after parsing attributes in process `syz.6.2027'. [ 1289.999376][T13688] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2035'. [ 1290.242256][ T5805] Bluetooth: hci4: link tx timeout [ 1290.247607][ T5805] Bluetooth: hci4: killing stalled connection 11:aa:aa:aa:aa:aa [ 1290.542920][T13694] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2038'. [ 1291.694167][ T5805] Bluetooth: hci4: command 0x0406 tx timeout [ 1293.002668][T13713] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2047'. [ 1293.336888][T13715] syz.6.2039 (13715): drop_caches: 2 [ 1293.852636][ T5805] Bluetooth: hci4: command 0x0406 tx timeout [ 1297.862786][T13742] netlink: 8 bytes leftover after parsing attributes in process `syz.6.2058'. [ 1300.721740][T13773] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2072'. [ 1302.384504][T13778] syz.2.2060 (13778): drop_caches: 2 [ 1308.780285][T10907] usb 3-1: new high-speed USB device number 31 using dummy_hcd [ 1308.960423][T10907] usb 3-1: Using ep0 maxpacket: 16 [ 1308.983276][T10907] usb 3-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xF3, changing to 0x83 [ 1308.998503][T10907] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 1309.072502][T10907] usb 3-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 1309.082287][T10907] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1309.097662][T10907] usb 3-1: Product: syz [ 1309.108109][T10907] usb 3-1: Manufacturer: syz [ 1309.114493][T10907] usb 3-1: SerialNumber: syz [ 1309.183166][T10907] usb 3-1: config 0 descriptor?? [ 1309.212300][T10907] em28xx 3-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0) [ 1309.222021][T10907] em28xx 3-1:0.0: Audio interface 0 found (Vendor Class) [ 1309.826408][T10907] em28xx 3-1:0.0: unknown em28xx chip ID (0) [ 1309.845330][T10907] em28xx 3-1:0.0: Config register raw data: 0xfffffffb [ 1309.864686][T10907] em28xx 3-1:0.0: AC97 chip type couldn't be determined [ 1309.872182][T10907] em28xx 3-1:0.0: No AC97 audio processor [ 1311.839325][T10907] usb 3-1: USB disconnect, device number 31 [ 1311.847765][T10907] em28xx 3-1:0.0: Disconnecting em28xx [ 1311.877300][T10907] em28xx 3-1:0.0: Freeing device [ 1316.210868][ T8683] usb 10-1: new high-speed USB device number 54 using dummy_hcd [ 1316.400537][ T8683] usb 10-1: Using ep0 maxpacket: 16 [ 1316.414146][ T8683] usb 10-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xF3, changing to 0x83 [ 1316.426461][ T8683] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 1316.472582][ T8683] usb 10-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 1316.482684][ T8683] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1316.491275][ T8683] usb 10-1: Product: syz [ 1316.495753][ T8683] usb 10-1: Manufacturer: syz [ 1316.500865][ T8683] usb 10-1: SerialNumber: syz [ 1316.541133][ T8683] usb 10-1: config 0 descriptor?? [ 1316.560860][ T8683] em28xx 10-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0) [ 1316.576546][ T8683] em28xx 10-1:0.0: Audio interface 0 found (Vendor Class) [ 1317.174234][ T8683] em28xx 10-1:0.0: unknown em28xx chip ID (0) [ 1317.188899][ T8683] em28xx 10-1:0.0: Config register raw data: 0xfffffffb [ 1317.200206][ T8683] em28xx 10-1:0.0: AC97 chip type couldn't be determined [ 1317.207491][ T8683] em28xx 10-1:0.0: No AC97 audio processor [ 1319.120299][ T8683] usb 10-1: USB disconnect, device number 54 [ 1319.128600][ T8683] em28xx 10-1:0.0: Disconnecting em28xx [ 1319.171384][ T8683] em28xx 10-1:0.0: Freeing device [ 1320.615887][T13914] syz.6.2125 (13914): drop_caches: 2 [ 1325.072658][T10907] usb 2-1: new high-speed USB device number 16 using dummy_hcd [ 1325.250406][T10907] usb 2-1: Using ep0 maxpacket: 16 [ 1325.281243][T10907] usb 2-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xF3, changing to 0x83 [ 1325.293172][T10907] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 1325.336107][T10907] usb 2-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 1325.345692][T10907] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1325.354122][T10907] usb 2-1: Product: syz [ 1325.358513][T10907] usb 2-1: Manufacturer: syz [ 1325.363564][T10907] usb 2-1: SerialNumber: syz [ 1325.422380][T10907] usb 2-1: config 0 descriptor?? [ 1325.441603][T10907] em28xx 2-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0) [ 1325.453353][T10907] em28xx 2-1:0.0: Audio interface 0 found (Vendor Class) [ 1326.090307][T10907] em28xx 2-1:0.0: unknown em28xx chip ID (0) [ 1326.120500][T10907] em28xx 2-1:0.0: Config register raw data: 0xfffffffb [ 1326.145295][T10907] em28xx 2-1:0.0: AC97 chip type couldn't be determined [ 1326.152724][T10907] em28xx 2-1:0.0: No AC97 audio processor [ 1327.986863][T10907] usb 2-1: USB disconnect, device number 16 [ 1327.995199][T10907] em28xx 2-1:0.0: Disconnecting em28xx [ 1328.021565][T10907] em28xx 2-1:0.0: Freeing device [ 1329.359749][T13974] syz.1.2153 (13974): drop_caches: 2 [ 1330.461571][T13976] macsec0: entered promiscuous mode [ 1330.924803][ T8683] usb 7-1: new high-speed USB device number 32 using dummy_hcd [ 1331.200342][ T8683] usb 7-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1331.211332][ T8683] usb 7-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 1331.224466][ T8683] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1331.381635][ T8683] usb 7-1: config 0 descriptor?? [ 1331.467038][ T8683] pwc: Askey VC010 type 2 USB webcam detected. [ 1331.874078][ T8683] pwc: recv_control_msg error -32 req 02 val 2b00 [ 1331.900988][ T8683] pwc: recv_control_msg error -32 req 02 val 2700 [ 1331.940589][ T8683] pwc: recv_control_msg error -32 req 02 val 2c00 [ 1331.963723][ T8683] pwc: recv_control_msg error -32 req 04 val 1000 [ 1331.985752][ T8683] pwc: recv_control_msg error -32 req 04 val 1300 [ 1332.020338][ T8683] pwc: recv_control_msg error -32 req 04 val 1400 [ 1332.038675][ T8683] pwc: recv_control_msg error -32 req 02 val 2000 [ 1332.055171][ T8683] pwc: recv_control_msg error -32 req 02 val 2100 [ 1332.078023][ T8683] pwc: recv_control_msg error -32 req 04 val 1500 [ 1332.296385][ T8683] pwc: recv_control_msg error -71 req 02 val 2400 [ 1332.310245][ T8683] pwc: recv_control_msg error -71 req 02 val 2600 [ 1332.331331][ T8683] pwc: recv_control_msg error -71 req 02 val 2900 [ 1332.360887][ T8683] pwc: recv_control_msg error -71 req 02 val 2800 [ 1332.369317][ T8683] pwc: recv_control_msg error -71 req 04 val 1100 [ 1332.384472][ T8683] pwc: recv_control_msg error -71 req 04 val 1200 [ 1332.409241][ T8683] pwc: Registered as video103. [ 1332.417431][ T8683] input: PWC snapshot button as /devices/platform/dummy_hcd.6/usb7/7-1/input/input20 [ 1332.457473][ T8683] usb 7-1: USB disconnect, device number 32 [ 1334.088223][T14011] pim6reg1: entered promiscuous mode [ 1334.094059][T14011] pim6reg1: entered allmulticast mode [ 1334.467674][T14016] syz.1.2169 (14016): drop_caches: 2 [ 1334.963267][T14015] pim6reg1: entered promiscuous mode [ 1334.969033][T14015] pim6reg1: entered allmulticast mode [ 1338.133189][ T30] audit: type=1326 audit(1760149724.310:239): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14051 comm="syz.8.2184" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f87a7f8eec9 code=0x7ffc0000 [ 1338.156573][ T30] audit: type=1326 audit(1760149724.310:240): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14051 comm="syz.8.2184" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f87a7f8eec9 code=0x7ffc0000 [ 1338.182963][ T30] audit: type=1326 audit(1760149724.310:241): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14051 comm="syz.8.2184" exe="/root/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7f87a7f8eec9 code=0x7ffc0000 [ 1338.207000][ T30] audit: type=1326 audit(1760149724.310:242): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14051 comm="syz.8.2184" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f87a7f8eec9 code=0x7ffc0000 [ 1338.230702][ T30] audit: type=1326 audit(1760149724.310:243): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14051 comm="syz.8.2184" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f87a7f8eec9 code=0x7ffc0000 [ 1338.253824][ T30] audit: type=1326 audit(1760149724.310:244): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14051 comm="syz.8.2184" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f87a7f8eec9 code=0x7ffc0000 [ 1338.276658][ T30] audit: type=1326 audit(1760149724.310:245): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14051 comm="syz.8.2184" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f87a7f8eec9 code=0x7ffc0000 [ 1338.303560][ T30] audit: type=1326 audit(1760149724.310:246): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14051 comm="syz.8.2184" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f87a7f8eec9 code=0x7ffc0000 [ 1338.327690][ T30] audit: type=1326 audit(1760149724.310:247): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14051 comm="syz.8.2184" exe="/root/syz-executor" sig=0 arch=c000003e syscall=307 compat=0 ip=0x7f87a7f8eec9 code=0x7ffc0000 [ 1338.350776][ T30] audit: type=1326 audit(1760149724.310:248): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14051 comm="syz.8.2184" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f87a7f8eec9 code=0x7ffc0000 [ 1339.769085][T14077] syz.6.2191 (14077): drop_caches: 2 [ 1339.889562][T14075] netlink: 24 bytes leftover after parsing attributes in process `syz.2.2193'. [ 1340.841821][ T1289] ieee802154 phy0 wpan0: encryption failed: -22 [ 1340.848691][ T1289] ieee802154 phy1 wpan1: encryption failed: -22 [ 1341.233258][T14087] netlink: 28 bytes leftover after parsing attributes in process `syz.8.2198'. [ 1342.391308][T10907] usb 2-1: new high-speed USB device number 17 using dummy_hcd [ 1342.540094][T10907] usb 2-1: device descriptor read/64, error -71 [ 1342.724353][T14105] netlink: 24 bytes leftover after parsing attributes in process `syz.6.2207'. [ 1342.806944][T10907] usb 2-1: new high-speed USB device number 18 using dummy_hcd [ 1343.580425][T14113] pim6reg1: entered promiscuous mode [ 1343.586274][T14113] pim6reg1: entered allmulticast mode [ 1343.661972][T10907] usb 2-1: device descriptor read/64, error -71 [ 1343.740786][ T30] kauditd_printk_skb: 4 callbacks suppressed [ 1343.740871][ T30] audit: type=1326 audit(1760149729.890:253): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14106 comm="syz.9.2208" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f41b8b8eec9 code=0x7ffc0000 [ 1343.770944][ T30] audit: type=1326 audit(1760149729.890:254): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14106 comm="syz.9.2208" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f41b8b8eec9 code=0x7ffc0000 [ 1343.793883][ T30] audit: type=1326 audit(1760149729.890:255): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14106 comm="syz.9.2208" exe="/root/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7f41b8b8eec9 code=0x7ffc0000 [ 1343.819542][ T30] audit: type=1326 audit(1760149729.900:256): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14106 comm="syz.9.2208" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f41b8b8eec9 code=0x7ffc0000 [ 1343.843044][ T30] audit: type=1326 audit(1760149729.900:257): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14106 comm="syz.9.2208" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f41b8b8eec9 code=0x7ffc0000 [ 1343.868137][ T30] audit: type=1326 audit(1760149729.900:258): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14106 comm="syz.9.2208" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f41b8b8eec9 code=0x7ffc0000 [ 1343.890956][ T30] audit: type=1326 audit(1760149729.900:259): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14106 comm="syz.9.2208" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f41b8b8eec9 code=0x7ffc0000 [ 1343.916321][ T30] audit: type=1326 audit(1760149729.900:260): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14106 comm="syz.9.2208" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f41b8b8eec9 code=0x7ffc0000 [ 1343.940081][ T30] audit: type=1326 audit(1760149729.920:261): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14106 comm="syz.9.2208" exe="/root/syz-executor" sig=0 arch=c000003e syscall=307 compat=0 ip=0x7f41b8b8eec9 code=0x7ffc0000 [ 1343.962953][ T30] audit: type=1326 audit(1760149729.920:262): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14106 comm="syz.9.2208" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f41b8b8eec9 code=0x7ffc0000 [ 1343.988416][T10907] usb usb2-port1: attempt power cycle [ 1345.073765][T10907] usb 2-1: new high-speed USB device number 19 using dummy_hcd [ 1345.340979][T14127] syz.6.2214 (14127): drop_caches: 2 [ 1346.075182][T10907] usb 2-1: device descriptor read/8, error -71 [ 1347.474549][T10907] usb 2-1: new high-speed USB device number 20 using dummy_hcd [ 1347.871302][T10907] usb 2-1: Using ep0 maxpacket: 16 [ 1347.911895][T10907] usb 2-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xF3, changing to 0x83 [ 1347.924622][T10907] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 1347.992443][T10907] usb 2-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 1348.002049][T10907] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1348.013241][T10907] usb 2-1: Product: syz [ 1348.017662][T10907] usb 2-1: Manufacturer: syz [ 1348.022913][T10907] usb 2-1: SerialNumber: syz [ 1348.086232][T14149] lo speed is unknown, defaulting to 1000 [ 1348.094433][T14149] lo speed is unknown, defaulting to 1000 [ 1348.102016][T14149] lo speed is unknown, defaulting to 1000 [ 1348.159481][T14149] infiniband syz2: RDMA CMA: cma_listen_on_dev, error -98 [ 1348.274885][T10907] usb 2-1: config 0 descriptor?? [ 1348.321478][T14149] lo speed is unknown, defaulting to 1000 [ 1348.331505][T14149] lo speed is unknown, defaulting to 1000 [ 1348.341547][T14149] lo speed is unknown, defaulting to 1000 [ 1348.350888][T14149] lo speed is unknown, defaulting to 1000 [ 1348.359727][T14149] lo speed is unknown, defaulting to 1000 [ 1348.405939][T10907] em28xx 2-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0) [ 1348.419693][T10907] em28xx 2-1:0.0: Audio interface 0 found (Vendor Class) [ 1348.794973][T11783] usb 10-1: new high-speed USB device number 55 using dummy_hcd [ 1348.959623][T10907] em28xx 2-1:0.0: unknown em28xx chip ID (0) [ 1348.980566][T10907] em28xx 2-1:0.0: Config register raw data: 0x41 [ 1349.024059][T11783] usb 10-1: device descriptor read/64, error -71 [ 1349.035311][ T30] kauditd_printk_skb: 4 callbacks suppressed [ 1349.035402][ T30] audit: type=1326 audit(1760149735.200:267): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14152 comm="syz.6.2226" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff408d8eec9 code=0x7ffc0000 [ 1349.065028][ T30] audit: type=1326 audit(1760149735.200:268): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14152 comm="syz.6.2226" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff408d8eec9 code=0x7ffc0000 [ 1349.088053][ T30] audit: type=1326 audit(1760149735.200:269): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14152 comm="syz.6.2226" exe="/root/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7ff408d8eec9 code=0x7ffc0000 [ 1349.110749][ T30] audit: type=1326 audit(1760149735.200:270): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14152 comm="syz.6.2226" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff408d8eec9 code=0x7ffc0000 [ 1349.136183][ T30] audit: type=1326 audit(1760149735.200:271): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14152 comm="syz.6.2226" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff408d8eec9 code=0x7ffc0000 [ 1349.160006][ T30] audit: type=1326 audit(1760149735.200:272): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14152 comm="syz.6.2226" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7ff408d8eec9 code=0x7ffc0000 [ 1349.182781][ T30] audit: type=1326 audit(1760149735.200:273): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14152 comm="syz.6.2226" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff408d8eec9 code=0x7ffc0000 [ 1349.205824][ T30] audit: type=1326 audit(1760149735.200:274): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14152 comm="syz.6.2226" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff408d8eec9 code=0x7ffc0000 [ 1349.228652][ T30] audit: type=1326 audit(1760149735.200:275): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14152 comm="syz.6.2226" exe="/root/syz-executor" sig=0 arch=c000003e syscall=307 compat=0 ip=0x7ff408d8eec9 code=0x7ffc0000 [ 1349.253856][ T30] audit: type=1326 audit(1760149735.210:276): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14152 comm="syz.6.2226" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff408d8eec9 code=0x7ffc0000 [ 1349.400347][ T8683] usb 3-1: new high-speed USB device number 32 using dummy_hcd [ 1349.420772][T11783] usb 10-1: new high-speed USB device number 56 using dummy_hcd [ 1349.571154][ T8683] usb 3-1: Using ep0 maxpacket: 32 [ 1349.580801][T11783] usb 10-1: device descriptor read/64, error -71 [ 1349.603882][ T8683] usb 3-1: config 0 has an invalid interface number: 12 but max is 0 [ 1349.612759][ T8683] usb 3-1: config 0 has no interface number 0 [ 1349.619112][ T8683] usb 3-1: config 0 interface 12 has no altsetting 0 [ 1349.666509][ T8683] usb 3-1: New USB device found, idVendor=2c42, idProduct=1202, bcdDevice=85.40 [ 1349.676471][ T8683] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1349.685135][ T8683] usb 3-1: Product: syz [ 1349.689520][ T8683] usb 3-1: Manufacturer: syz [ 1349.694760][ T8683] usb 3-1: SerialNumber: syz [ 1349.707655][T11783] usb usb10-port1: attempt power cycle [ 1349.726479][ T8683] usb 3-1: config 0 descriptor?? [ 1349.742839][ T8683] f81534 3-1:0.12: required endpoints missing [ 1350.075194][T11783] usb 10-1: new high-speed USB device number 57 using dummy_hcd [ 1350.118532][T11783] usb 10-1: device descriptor read/8, error -71 [ 1350.309074][T10907] usb 2-1: USB disconnect, device number 20 [ 1350.317362][T10907] em28xx 2-1:0.0: Disconnecting em28xx [ 1350.352154][T10907] em28xx 2-1:0.0: Freeing device [ 1350.380113][T11783] usb 10-1: new high-speed USB device number 58 using dummy_hcd [ 1350.412371][T11783] usb 10-1: device descriptor read/8, error -71 [ 1350.526940][T11783] usb usb10-port1: unable to enumerate USB device [ 1350.576384][T14181] bridge0: port 2(bridge_slave_1) entered disabled state [ 1350.586618][T14181] bridge0: port 1(bridge_slave_0) entered disabled state [ 1350.604888][T14181] bridge0: entered allmulticast mode [ 1350.645031][T14181] bridge_slave_1: left allmulticast mode [ 1350.651493][T14181] bridge_slave_1: left promiscuous mode [ 1350.658259][T14181] bridge0: port 2(bridge_slave_1) entered disabled state [ 1350.694508][T14181] bridge_slave_0: left allmulticast mode [ 1350.701335][T14181] bridge_slave_0: left promiscuous mode [ 1350.708136][T14181] bridge0: port 1(bridge_slave_0) entered disabled state [ 1351.229457][T14190] veth1_macvtap: left promiscuous mode [ 1351.235475][T14190] macsec0: entered promiscuous mode [ 1351.608253][T14195] siw: device registration error -23 [ 1352.655053][T10907] usb 3-1: USB disconnect, device number 32 [ 1353.141793][T14211] lo speed is unknown, defaulting to 1000 [ 1353.351689][T10907] usb 3-1: new high-speed USB device number 33 using dummy_hcd [ 1353.550228][T10907] usb 3-1: Using ep0 maxpacket: 16 [ 1353.584867][T10907] usb 3-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xF3, changing to 0x83 [ 1353.596990][T10907] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 1353.680264][T10907] usb 3-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 1353.690072][T10907] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1353.698329][T10907] usb 3-1: Product: syz [ 1353.702814][T10907] usb 3-1: Manufacturer: syz [ 1353.707634][T10907] usb 3-1: SerialNumber: syz [ 1353.806161][T10907] usb 3-1: config 0 descriptor?? [ 1353.870907][T10907] em28xx 3-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0) [ 1353.880808][T10907] em28xx 3-1:0.0: Audio interface 0 found (Vendor Class) [ 1354.451518][T10907] em28xx 3-1:0.0: unknown em28xx chip ID (0) [ 1354.451532][ T8683] usb 10-1: new high-speed USB device number 59 using dummy_hcd [ 1354.510921][T10907] em28xx 3-1:0.0: Config register raw data: 0x41 [ 1354.580596][ T8683] usb 10-1: device descriptor read/64, error -71 [ 1354.777063][T14226] siw: device registration error -23 [ 1354.833424][ T8683] usb 10-1: new high-speed USB device number 60 using dummy_hcd [ 1355.008355][ T8683] usb 10-1: device descriptor read/64, error -71 [ 1355.122212][ T8683] usb usb10-port1: attempt power cycle [ 1355.484687][ T8683] usb 10-1: new high-speed USB device number 61 using dummy_hcd [ 1355.558872][ T8683] usb 10-1: device descriptor read/8, error -71 [ 1355.832091][ T8683] usb 10-1: new high-speed USB device number 62 using dummy_hcd [ 1355.916413][ T8683] usb 10-1: device descriptor read/8, error -71 [ 1356.045527][ T8683] usb usb10-port1: unable to enumerate USB device [ 1356.330580][ T8683] usb 3-1: USB disconnect, device number 33 [ 1356.338653][ T8683] em28xx 3-1:0.0: Disconnecting em28xx [ 1356.375804][ T8683] em28xx 3-1:0.0: Freeing device [ 1357.390520][ T30] kauditd_printk_skb: 18 callbacks suppressed [ 1357.390603][ T30] audit: type=1326 audit(1760149743.560:295): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14247 comm="syz.2.2258" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc36098eec9 code=0x7ffc0000 [ 1357.420645][ T30] audit: type=1326 audit(1760149743.560:296): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14247 comm="syz.2.2258" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc36098eec9 code=0x7ffc0000 [ 1357.443863][ T30] audit: type=1326 audit(1760149743.560:297): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14247 comm="syz.2.2258" exe="/root/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7fc36098eec9 code=0x7ffc0000 [ 1357.469272][ T30] audit: type=1326 audit(1760149743.560:298): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14247 comm="syz.2.2258" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc36098eec9 code=0x7ffc0000 [ 1357.496638][ T30] audit: type=1326 audit(1760149743.560:299): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14247 comm="syz.2.2258" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc36098eec9 code=0x7ffc0000 [ 1357.519648][ T30] audit: type=1326 audit(1760149743.560:300): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14247 comm="syz.2.2258" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7fc36098eec9 code=0x7ffc0000 [ 1357.545392][ T30] audit: type=1326 audit(1760149743.570:301): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14247 comm="syz.2.2258" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc36098eec9 code=0x7ffc0000 [ 1357.569277][ T30] audit: type=1326 audit(1760149743.570:302): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14247 comm="syz.2.2258" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc36098eec9 code=0x7ffc0000 [ 1357.592237][ T30] audit: type=1326 audit(1760149743.570:303): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14247 comm="syz.2.2258" exe="/root/syz-executor" sig=0 arch=c000003e syscall=307 compat=0 ip=0x7fc36098eec9 code=0x7ffc0000 [ 1357.615221][ T30] audit: type=1326 audit(1760149743.570:304): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14247 comm="syz.2.2258" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc36098eec9 code=0x7ffc0000 [ 1358.006717][T14263] siw: device registration error -23 [ 1359.744329][T14275] syz.9.2267 (14275) used greatest stack depth: 2456 bytes left [ 1360.490459][ T37] usb 3-1: new high-speed USB device number 34 using dummy_hcd [ 1360.503354][ T8683] usb 7-1: new high-speed USB device number 33 using dummy_hcd [ 1360.633806][T14298] netlink: 44 bytes leftover after parsing attributes in process `syz.9.2277'. [ 1360.659022][T14298] netlink: 168 bytes leftover after parsing attributes in process `syz.9.2277'. [ 1360.721321][ T8683] usb 7-1: Using ep0 maxpacket: 32 [ 1360.729146][ T37] usb 3-1: Using ep0 maxpacket: 16 [ 1360.762219][ T8683] usb 7-1: config 0 has an invalid interface number: 12 but max is 0 [ 1360.770986][ T8683] usb 7-1: config 0 has no interface number 0 [ 1360.777334][ T8683] usb 7-1: config 0 interface 12 has no altsetting 0 [ 1360.785432][ T37] usb 3-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xF3, changing to 0x83 [ 1360.797838][ T37] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 1360.846844][ T8683] usb 7-1: New USB device found, idVendor=2c42, idProduct=1202, bcdDevice=85.40 [ 1360.856722][ T8683] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1360.865511][ T8683] usb 7-1: Product: syz [ 1360.870072][ T8683] usb 7-1: Manufacturer: syz [ 1360.874926][ T8683] usb 7-1: SerialNumber: syz [ 1360.888098][ T8683] usb 7-1: config 0 descriptor?? [ 1360.917310][ T37] usb 3-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 1360.927205][ T37] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1360.935907][ T37] usb 3-1: Product: syz [ 1360.940769][ T37] usb 3-1: Manufacturer: syz [ 1360.945765][ T37] usb 3-1: SerialNumber: syz [ 1360.973212][ T8683] f81534 7-1:0.12: required endpoints missing [ 1360.992898][ T37] usb 3-1: config 0 descriptor?? [ 1361.019678][ T37] em28xx 3-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0) [ 1361.031758][ T37] em28xx 3-1:0.0: Audio interface 0 found (Vendor Class) [ 1361.302099][ T8683] usb 10-1: new high-speed USB device number 63 using dummy_hcd [ 1362.102668][ T37] em28xx 3-1:0.0: unknown em28xx chip ID (0) [ 1362.118189][ T8683] usb 10-1: no configurations [ 1362.123381][ T8683] usb 10-1: can't read configurations, error -22 [ 1362.131607][ T37] em28xx 3-1:0.0: Config register raw data: 0xfffffffb [ 1362.600635][ T37] em28xx 3-1:0.0: AC97 chip type couldn't be determined [ 1362.607948][ T37] em28xx 3-1:0.0: No AC97 audio processor [ 1362.671457][ T8683] usb 10-1: new high-speed USB device number 64 using dummy_hcd [ 1362.847540][ T8683] usb 10-1: no configurations [ 1362.854613][ T8683] usb 10-1: can't read configurations, error -22 [ 1362.878475][ T8683] usb usb10-port1: attempt power cycle [ 1363.246127][ T8683] usb 10-1: new high-speed USB device number 65 using dummy_hcd [ 1363.272368][T11783] usb 7-1: USB disconnect, device number 33 [ 1363.336229][ T8683] usb 10-1: no configurations [ 1363.341647][ T8683] usb 10-1: can't read configurations, error -22 [ 1363.480320][ T8683] usb 10-1: new high-speed USB device number 66 using dummy_hcd [ 1363.537824][ T8683] usb 10-1: no configurations [ 1363.547256][ T8683] usb 10-1: can't read configurations, error -22 [ 1363.549252][T11783] usb 3-1: USB disconnect, device number 34 [ 1363.567410][T11783] em28xx 3-1:0.0: Disconnecting em28xx [ 1363.584192][ T8683] usb usb10-port1: unable to enumerate USB device [ 1363.656562][T11783] em28xx 3-1:0.0: Freeing device [ 1363.736273][T14331] netlink: 'syz.8.2287': attribute type 13 has an invalid length. [ 1364.290527][ T8683] lo speed is unknown, defaulting to 1000 [ 1365.373369][T14351] netlink: 4 bytes leftover after parsing attributes in process `syz.6.2293'. [ 1365.397959][ T30] kauditd_printk_skb: 18 callbacks suppressed [ 1365.398041][ T30] audit: type=1326 audit(1760149751.570:323): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14341 comm="syz.2.2291" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc36098eec9 code=0x7ffc0000 [ 1365.430880][ T30] audit: type=1326 audit(1760149751.570:324): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14341 comm="syz.2.2291" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc36098eec9 code=0x7ffc0000 [ 1365.453580][ C0] vkms_vblank_simulate: vblank timer overrun [ 1365.460724][ T30] audit: type=1326 audit(1760149751.570:325): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14341 comm="syz.2.2291" exe="/root/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7fc36098eec9 code=0x7ffc0000 [ 1365.483147][ C0] vkms_vblank_simulate: vblank timer overrun [ 1365.489705][ T30] audit: type=1326 audit(1760149751.580:326): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14341 comm="syz.2.2291" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc36098eec9 code=0x7ffc0000 [ 1365.512990][ T30] audit: type=1326 audit(1760149751.580:327): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14341 comm="syz.2.2291" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc36098eec9 code=0x7ffc0000 [ 1365.535672][ C0] vkms_vblank_simulate: vblank timer overrun [ 1365.545158][ T30] audit: type=1326 audit(1760149751.580:328): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14341 comm="syz.2.2291" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7fc36098eec9 code=0x7ffc0000 [ 1365.567667][ C0] vkms_vblank_simulate: vblank timer overrun [ 1365.574243][ T30] audit: type=1326 audit(1760149751.580:329): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14341 comm="syz.2.2291" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc36098eec9 code=0x7ffc0000 [ 1365.597137][ T30] audit: type=1326 audit(1760149751.580:330): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14341 comm="syz.2.2291" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc36098eec9 code=0x7ffc0000 [ 1365.619722][ C0] vkms_vblank_simulate: vblank timer overrun [ 1365.628847][ T30] audit: type=1326 audit(1760149751.580:331): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14341 comm="syz.2.2291" exe="/root/syz-executor" sig=0 arch=c000003e syscall=307 compat=0 ip=0x7fc36098eec9 code=0x7ffc0000 [ 1365.651500][ C0] vkms_vblank_simulate: vblank timer overrun [ 1365.658317][ T30] audit: type=1326 audit(1760149751.590:332): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14341 comm="syz.2.2291" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc36098eec9 code=0x7ffc0000 [ 1366.330544][ T8683] usb 10-1: new high-speed USB device number 67 using dummy_hcd [ 1366.515700][ T8683] usb 10-1: Using ep0 maxpacket: 16 [ 1366.535537][ T8683] usb 10-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xF3, changing to 0x83 [ 1366.550657][ T8683] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 1366.610278][ T8683] usb 10-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 1366.621702][ T8683] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1366.631063][ T8683] usb 10-1: Product: syz [ 1366.635552][ T8683] usb 10-1: Manufacturer: syz [ 1366.641030][ T8683] usb 10-1: SerialNumber: syz [ 1366.659116][ T8683] usb 10-1: config 0 descriptor?? [ 1366.680291][ T8683] em28xx 10-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0) [ 1366.691042][ T8683] em28xx 10-1:0.0: Audio interface 0 found (Vendor Class) [ 1367.040174][T11783] usb 3-1: new high-speed USB device number 35 using dummy_hcd [ 1367.247164][T11783] usb 3-1: unable to read config index 0 descriptor/start: -61 [ 1367.255580][T11783] usb 3-1: can't read configurations, error -61 [ 1367.310705][ T8683] em28xx 10-1:0.0: unknown em28xx chip ID (0) [ 1367.320132][ T8683] em28xx 10-1:0.0: Config register raw data: 0xfffffffb [ 1367.404871][T11783] usb 3-1: new high-speed USB device number 36 using dummy_hcd [ 1367.533646][ T8683] em28xx 10-1:0.0: AC97 chip type couldn't be determined [ 1367.541361][ T8683] em28xx 10-1:0.0: No AC97 audio processor [ 1367.610648][T11783] usb 3-1: unable to read config index 0 descriptor/start: -61 [ 1367.618738][T11783] usb 3-1: can't read configurations, error -61 [ 1367.640696][T11783] usb usb3-port1: attempt power cycle [ 1367.991057][T11783] usb 3-1: new high-speed USB device number 37 using dummy_hcd [ 1368.138087][T11783] usb 3-1: unable to read config index 0 descriptor/start: -61 [ 1368.146187][T11783] usb 3-1: can't read configurations, error -61 [ 1368.380241][T11783] usb 3-1: new high-speed USB device number 38 using dummy_hcd [ 1368.493150][T11783] usb 3-1: unable to read config index 0 descriptor/start: -61 [ 1368.501420][T11783] usb 3-1: can't read configurations, error -61 [ 1368.556273][T11783] usb usb3-port1: unable to enumerate USB device [ 1368.972476][T14390] netlink: 'syz.1.2310': attribute type 10 has an invalid length. [ 1369.184067][ T8683] usb 10-1: USB disconnect, device number 67 [ 1369.192698][ T8683] em28xx 10-1:0.0: Disconnecting em28xx [ 1369.235644][ T8683] em28xx 10-1:0.0: Freeing device [ 1369.477681][T14399] tipc: Started in network mode [ 1369.483233][T14399] tipc: Node identity 46322771654, cluster identity 4711 [ 1369.491765][T14399] tipc: Enabled bearer , priority 0 [ 1369.539034][T14400] syzkaller0: entered promiscuous mode [ 1369.545392][T14400] syzkaller0: entered allmulticast mode [ 1369.650608][T14399] tipc: Resetting bearer [ 1369.672574][T14397] tipc: Resetting bearer [ 1369.696467][T14397] tipc: Disabling bearer [ 1370.388999][T14410] team0: Port device vlan2 added [ 1371.275485][ T8683] usb 2-1: new high-speed USB device number 21 using dummy_hcd [ 1371.440325][ T8683] usb 2-1: Using ep0 maxpacket: 16 [ 1371.454892][ T8683] usb 2-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xF3, changing to 0x83 [ 1371.470027][ T8683] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 1371.638735][ T8683] usb 2-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 1371.648824][ T8683] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1371.657281][ T8683] usb 2-1: Product: syz [ 1371.664796][ T8683] usb 2-1: Manufacturer: syz [ 1371.669633][ T8683] usb 2-1: SerialNumber: syz [ 1372.129531][ T8683] usb 2-1: config 0 descriptor?? [ 1372.164827][ T8683] em28xx 2-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0) [ 1372.178719][ T8683] em28xx 2-1:0.0: Audio interface 0 found (Vendor Class) [ 1372.560634][T11783] usb 3-1: new high-speed USB device number 39 using dummy_hcd [ 1372.752057][T11783] usb 3-1: unable to read config index 0 descriptor/start: -61 [ 1372.760316][T11783] usb 3-1: can't read configurations, error -61 [ 1372.824588][ T8683] em28xx 2-1:0.0: unknown em28xx chip ID (0) [ 1372.835302][ T8683] em28xx 2-1:0.0: Config register raw data: 0x41 [ 1372.953476][T11783] usb 3-1: new high-speed USB device number 40 using dummy_hcd [ 1373.084944][T14437] team0: Port device vlan2 added [ 1373.153267][T11783] usb 3-1: unable to read config index 0 descriptor/start: -61 [ 1373.163472][T11783] usb 3-1: can't read configurations, error -61 [ 1373.202755][T11783] usb usb3-port1: attempt power cycle [ 1373.676970][T11783] usb 3-1: new high-speed USB device number 41 using dummy_hcd [ 1373.807913][T11783] usb 3-1: unable to read config index 0 descriptor/start: -61 [ 1373.818881][T11783] usb 3-1: can't read configurations, error -61 [ 1374.130901][T11783] usb 3-1: new high-speed USB device number 42 using dummy_hcd [ 1374.293099][ T8683] usb 2-1: USB disconnect, device number 21 [ 1374.301230][ T8683] em28xx 2-1:0.0: Disconnecting em28xx [ 1374.311413][T11783] usb 3-1: unable to read config index 0 descriptor/start: -61 [ 1374.319472][T11783] usb 3-1: can't read configurations, error -61 [ 1374.320165][ T8683] em28xx 2-1:0.0: Freeing device [ 1374.371273][T11783] usb usb3-port1: unable to enumerate USB device [ 1375.871253][T11783] usb 10-1: new high-speed USB device number 68 using dummy_hcd [ 1376.070616][T11783] usb 10-1: Using ep0 maxpacket: 32 [ 1376.118806][T11783] usb 10-1: config index 0 descriptor too short (expected 35577, got 27) [ 1376.128330][T11783] usb 10-1: config 1 has too many interfaces: 92, using maximum allowed: 32 [ 1376.137521][T11783] usb 10-1: config 1 has 1 interface, different from the descriptor's value: 92 [ 1376.146938][T11783] usb 10-1: config 1 has no interface number 0 [ 1376.153810][T11783] usb 10-1: config 1 interface 1 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 1376.165284][T11783] usb 10-1: config 1 interface 1 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 17 [ 1376.181698][T11783] usb 10-1: New USB device found, idVendor=0e41, idProduct=5051, bcdDevice=d5.e8 [ 1376.191290][T11783] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1376.404500][T11783] snd_usb_pod 10-1:1.1: Line 6 Pocket POD found [ 1376.584616][T11783] snd_usb_pod 10-1:1.1: Line 6 Pocket POD now attached [ 1377.031088][T11783] usb 7-1: new high-speed USB device number 34 using dummy_hcd [ 1377.066564][T10907] usb 10-1: USB disconnect, device number 68 [ 1377.075382][T10907] snd_usb_pod 10-1:1.1: Line 6 Pocket POD now disconnected [ 1377.501296][ T8683] usb 2-1: new high-speed USB device number 22 using dummy_hcd [ 1377.660446][ T8683] usb 2-1: Using ep0 maxpacket: 16 [ 1377.697451][ T8683] usb 2-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xF3, changing to 0x83 [ 1377.713064][ T8683] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 1377.793136][ T8683] usb 2-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 1377.803429][ T8683] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1377.814677][ T8683] usb 2-1: Product: syz [ 1377.819076][ T8683] usb 2-1: Manufacturer: syz [ 1377.824993][ T8683] usb 2-1: SerialNumber: syz [ 1378.018875][ T8683] usb 2-1: config 0 descriptor?? [ 1378.045947][ T8683] em28xx 2-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0) [ 1378.055759][ T8683] em28xx 2-1:0.0: Audio interface 0 found (Vendor Class) [ 1378.230408][T14492] netlink: 'syz.9.2348': attribute type 1 has an invalid length. [ 1378.671959][ T8683] em28xx 2-1:0.0: unknown em28xx chip ID (0) [ 1378.694395][ T8683] em28xx 2-1:0.0: Config register raw data: 0xfffffffb [ 1378.971168][ T8683] em28xx 2-1:0.0: AC97 chip type couldn't be determined [ 1378.978498][ T8683] em28xx 2-1:0.0: No AC97 audio processor [ 1379.491035][T11783] usb 7-1: Using ep0 maxpacket: 16 [ 1379.504910][T11783] usb 7-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xF3, changing to 0x83 [ 1379.516951][T11783] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 1379.557718][T11783] usb 7-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 1379.568093][T11783] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1379.576463][T11783] usb 7-1: Product: syz [ 1379.581027][T11783] usb 7-1: Manufacturer: syz [ 1379.585902][T11783] usb 7-1: SerialNumber: syz [ 1379.630803][T11783] usb 7-1: config 0 descriptor?? [ 1379.683466][T10907] usb 10-1: new high-speed USB device number 69 using dummy_hcd [ 1379.924634][T10907] usb 10-1: unable to read config index 0 descriptor/start: -61 [ 1379.936254][T10907] usb 10-1: can't read configurations, error -61 [ 1380.004887][T11783] usb 7-1: can't set config #0, error -71 [ 1380.075280][T11783] usb 7-1: USB disconnect, device number 34 [ 1380.280431][T10907] usb 10-1: new high-speed USB device number 70 using dummy_hcd [ 1380.491552][T10907] usb 10-1: unable to read config index 0 descriptor/start: -61 [ 1380.500727][T10907] usb 10-1: can't read configurations, error -61 [ 1380.520649][T10907] usb usb10-port1: attempt power cycle [ 1380.568792][T11783] usb 2-1: USB disconnect, device number 22 [ 1380.581790][T11783] em28xx 2-1:0.0: Disconnecting em28xx [ 1380.590857][T11783] em28xx 2-1:0.0: Freeing device [ 1380.703853][ T8683] usb 7-1: new high-speed USB device number 35 using dummy_hcd [ 1380.897572][ T8683] usb 7-1: Using ep0 maxpacket: 16 [ 1380.920974][T10907] usb 10-1: new high-speed USB device number 71 using dummy_hcd [ 1380.950541][ T8683] usb 7-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1381.002849][ T8683] usb 7-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 1381.008576][T10907] usb 10-1: unable to read config index 0 descriptor/start: -61 [ 1381.012563][ T8683] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1381.012707][ T8683] usb 7-1: Product: syz [ 1381.012820][ T8683] usb 7-1: Manufacturer: syz [ 1381.012929][ T8683] usb 7-1: SerialNumber: syz [ 1381.043493][T10907] usb 10-1: can't read configurations, error -61 [ 1381.067267][ T8683] usb 7-1: config 0 descriptor?? [ 1381.251693][T10907] usb 10-1: new high-speed USB device number 72 using dummy_hcd [ 1381.308183][T10907] usb 10-1: unable to read config index 0 descriptor/start: -61 [ 1381.316885][T10907] usb 10-1: can't read configurations, error -61 [ 1381.340460][T10907] usb usb10-port1: unable to enumerate USB device [ 1382.360415][ T5856] usb 2-1: new high-speed USB device number 23 using dummy_hcd [ 1382.600114][ T5856] usb 2-1: Using ep0 maxpacket: 32 [ 1382.628547][ T5856] usb 2-1: config index 0 descriptor too short (expected 35577, got 27) [ 1382.638406][ T5856] usb 2-1: config 1 has too many interfaces: 92, using maximum allowed: 32 [ 1382.647505][ T5856] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 92 [ 1382.657573][ T5856] usb 2-1: config 1 has no interface number 0 [ 1382.664404][ T5856] usb 2-1: config 1 interface 1 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 1382.675844][ T5856] usb 2-1: config 1 interface 1 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 17 [ 1382.689260][ T5856] usb 2-1: New USB device found, idVendor=0e41, idProduct=5051, bcdDevice=d5.e8 [ 1382.699066][ T5856] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1382.814040][ T5856] snd_usb_pod 2-1:1.1: Line 6 Pocket POD found [ 1383.012024][ T5856] snd_usb_pod 2-1:1.1: Line 6 Pocket POD now attached [ 1383.341640][T10907] usb 3-1: new high-speed USB device number 43 using dummy_hcd [ 1383.494573][ T8501] usb 2-1: USB disconnect, device number 23 [ 1383.503853][ T8501] snd_usb_pod 2-1:1.1: Line 6 Pocket POD now disconnected [ 1383.521342][T10907] usb 3-1: Using ep0 maxpacket: 16 [ 1383.559680][T10907] usb 3-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xF3, changing to 0x83 [ 1383.572886][T10907] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 1383.582568][ T5856] usb 7-1: USB disconnect, device number 35 [ 1383.599090][T10907] usb 3-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 1383.610798][T10907] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1383.619050][T10907] usb 3-1: Product: syz [ 1383.624742][T10907] usb 3-1: Manufacturer: syz [ 1383.629556][T10907] usb 3-1: SerialNumber: syz [ 1383.645649][T10907] usb 3-1: config 0 descriptor?? [ 1383.665229][T10907] em28xx 3-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0) [ 1383.675515][T10907] em28xx 3-1:0.0: Audio interface 0 found (Vendor Class) [ 1384.308511][T10907] em28xx 3-1:0.0: unknown em28xx chip ID (0) [ 1384.331473][T10907] em28xx 3-1:0.0: Config register raw data: 0x00 [ 1384.735902][T14547] netlink: set zone limit has 8 unknown bytes [ 1384.976544][T14556] afs: Unknown parameter 'dy' [ 1385.754721][T14568] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2375'. [ 1386.081553][ T5856] usb 10-1: new high-speed USB device number 73 using dummy_hcd [ 1386.275221][ T5856] usb 10-1: Using ep0 maxpacket: 16 [ 1386.318274][ T5856] usb 10-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1386.366649][ T5856] usb 10-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 1386.376331][ T5856] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1386.384830][ T5856] usb 10-1: Product: syz [ 1386.389328][ T5856] usb 10-1: Manufacturer: syz [ 1386.394483][ T5856] usb 10-1: SerialNumber: syz [ 1386.415656][T10907] usb 3-1: USB disconnect, device number 43 [ 1386.423947][T10907] em28xx 3-1:0.0: Disconnecting em28xx [ 1386.468084][ T5856] usb 10-1: config 0 descriptor?? [ 1386.482164][T10907] em28xx 3-1:0.0: Freeing device [ 1387.311269][T14589] xt_cgroup: xt_cgroup: no path or classid specified [ 1387.648181][T14596] netlink: 4 bytes leftover after parsing attributes in process `syz.8.2387'. [ 1388.562430][T10907] usb 2-1: new high-speed USB device number 24 using dummy_hcd [ 1388.628352][ T5856] usb 7-1: new high-speed USB device number 36 using dummy_hcd [ 1388.745565][T10907] usb 2-1: Using ep0 maxpacket: 16 [ 1388.771150][T10907] usb 2-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xF3, changing to 0x83 [ 1388.783377][T10907] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 1388.826618][ T5856] usb 7-1: Using ep0 maxpacket: 16 [ 1388.840721][ T5856] usb 7-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xF3, changing to 0x83 [ 1388.853854][ T5856] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 1388.907760][T10907] usb 2-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 1388.917414][T10907] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1388.926378][T10907] usb 2-1: Product: syz [ 1388.931147][T10907] usb 2-1: Manufacturer: syz [ 1388.935989][T10907] usb 2-1: SerialNumber: syz [ 1388.938513][ T5856] usb 7-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 1388.950489][ T5856] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1388.958774][ T5856] usb 7-1: Product: syz [ 1388.963301][ T5856] usb 7-1: Manufacturer: syz [ 1388.971003][ T5856] usb 7-1: SerialNumber: syz [ 1388.978831][T10907] usb 2-1: config 0 descriptor?? [ 1389.017332][ T8683] usb 10-1: USB disconnect, device number 73 [ 1389.032422][ T5856] usb 7-1: config 0 descriptor?? [ 1389.057158][T10907] em28xx 2-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0) [ 1389.066898][T10907] em28xx 2-1:0.0: Audio interface 0 found (Vendor Class) [ 1389.088587][ T5856] em28xx 7-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0) [ 1389.098471][ T5856] em28xx 7-1:0.0: Audio interface 0 found (Vendor Class) [ 1389.251909][T14618] netlink: 'syz.8.2396': attribute type 2 has an invalid length. [ 1389.260102][T14618] netlink: 76 bytes leftover after parsing attributes in process `syz.8.2396'. [ 1389.668195][T10907] em28xx 2-1:0.0: unknown em28xx chip ID (0) [ 1389.696345][T10907] em28xx 2-1:0.0: Config register raw data: 0xfffffffb [ 1389.696895][ T5856] em28xx 7-1:0.0: unknown em28xx chip ID (0) [ 1389.718224][ T5856] em28xx 7-1:0.0: Config register raw data: 0x00 [ 1389.773125][T14626] netlink: 4 bytes leftover after parsing attributes in process `syz.9.2400'. [ 1389.937465][T10907] em28xx 2-1:0.0: AC97 chip type couldn't be determined [ 1389.947061][T10907] em28xx 2-1:0.0: No AC97 audio processor [ 1390.139698][T14630] syzkaller0: entered promiscuous mode [ 1390.145617][T14630] syzkaller0: entered allmulticast mode [ 1390.164413][T14630] sch_tbf: burst 127 is lower than device syzkaller0 mtu (1514) ! [ 1390.891193][T14648] netlink: 168 bytes leftover after parsing attributes in process `syz.9.2409'. [ 1391.437540][ T5856] usb 7-1: USB disconnect, device number 36 [ 1391.445727][ T5856] em28xx 7-1:0.0: Disconnecting em28xx [ 1391.471942][ T5856] em28xx 7-1:0.0: Freeing device [ 1391.545335][T10907] usb 2-1: USB disconnect, device number 24 [ 1391.553614][T10907] em28xx 2-1:0.0: Disconnecting em28xx [ 1391.588771][T10907] em28xx 2-1:0.0: Freeing device [ 1391.736366][T14661] netlink: 4 bytes leftover after parsing attributes in process `syz.6.2411'. [ 1393.171068][ T5856] usb 10-1: new high-speed USB device number 74 using dummy_hcd [ 1393.360119][ T5856] usb 10-1: Using ep0 maxpacket: 16 [ 1393.368283][T14692] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2425'. [ 1393.438147][ T5856] usb 10-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xF3, changing to 0x83 [ 1393.451597][ T5856] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 1393.524229][ T5856] usb 10-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 1393.534077][ T5856] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1393.542845][ T5856] usb 10-1: Product: syz [ 1393.547321][ T5856] usb 10-1: Manufacturer: syz [ 1393.552404][ T5856] usb 10-1: SerialNumber: syz [ 1393.627512][ T5856] usb 10-1: config 0 descriptor?? [ 1393.661618][ T5856] em28xx 10-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0) [ 1393.671681][ T5856] em28xx 10-1:0.0: Audio interface 0 found (Vendor Class) [ 1393.963791][T14698] tipc: Started in network mode [ 1393.969220][T14698] tipc: Node identity e2403fb3aa54, cluster identity 4711 [ 1393.978074][T14698] tipc: Enabled bearer , priority 0 [ 1394.029587][T14698] syzkaller0: entered promiscuous mode [ 1394.035915][T14698] syzkaller0: entered allmulticast mode [ 1394.082618][ T8683] lo speed is unknown, defaulting to 1000 [ 1394.091702][ T8683] syz2: Port: 1 Link DOWN [ 1394.098400][T14698] sch_tbf: burst 127 is lower than device syzkaller0 mtu (1514) ! [ 1394.131501][T14705] netlink: 'syz.8.2431': attribute type 4 has an invalid length. [ 1394.167740][T14698] tipc: Resetting bearer [ 1394.183443][T14697] tipc: Resetting bearer [ 1394.212184][T14697] tipc: Disabling bearer [ 1394.265820][T10907] lo speed is unknown, defaulting to 1000 [ 1394.272488][T10907] syz2: Port: 1 Link ACTIVE [ 1394.316327][ T5856] em28xx 10-1:0.0: unknown em28xx chip ID (0) [ 1394.330774][ T5856] em28xx 10-1:0.0: Config register raw data: 0x00 [ 1395.107446][T14724] netlink: 4 bytes leftover after parsing attributes in process `syz.6.2438'. [ 1396.111913][ T5856] usb 10-1: USB disconnect, device number 74 [ 1396.120079][ T5856] em28xx 10-1:0.0: Disconnecting em28xx [ 1396.177947][ T5856] em28xx 10-1:0.0: Freeing device [ 1396.798587][T14760] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2450'. [ 1397.838670][ T5856] usb 2-1: new high-speed USB device number 25 using dummy_hcd [ 1398.025237][ T5856] usb 2-1: Using ep0 maxpacket: 16 [ 1398.069682][ T5856] usb 2-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xF3, changing to 0x83 [ 1398.085054][ T5856] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 1398.147488][ T5856] usb 2-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 1398.157047][ T5856] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1398.165676][ T5856] usb 2-1: Product: syz [ 1398.170278][ T5856] usb 2-1: Manufacturer: syz [ 1398.175101][ T5856] usb 2-1: SerialNumber: syz [ 1398.251505][ T5856] usb 2-1: config 0 descriptor?? [ 1398.276908][ T5856] em28xx 2-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0) [ 1398.290871][ T5856] em28xx 2-1:0.0: Audio interface 0 found (Vendor Class) [ 1398.893912][ T5856] em28xx 2-1:0.0: unknown em28xx chip ID (0) [ 1398.920288][ T5856] em28xx 2-1:0.0: Config register raw data: 0x00 [ 1399.463074][T14805] tipc: Enabled bearer , priority 0 [ 1399.493485][T14805] syzkaller0: entered promiscuous mode [ 1399.499308][T14805] syzkaller0: entered allmulticast mode [ 1399.543872][T14805] tipc: Resetting bearer [ 1399.555181][T14804] tipc: Resetting bearer [ 1399.569170][T14804] tipc: Disabling bearer [ 1399.966008][T14815] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 1399.973692][T14815] IPv6: NLM_F_CREATE should be set when creating new route [ 1400.900496][ T5856] usb 2-1: USB disconnect, device number 25 [ 1400.908514][ T5856] em28xx 2-1:0.0: Disconnecting em28xx [ 1400.963485][ T5856] em28xx 2-1:0.0: Freeing device [ 1402.285933][ T1289] ieee802154 phy0 wpan0: encryption failed: -22 [ 1402.292917][ T1289] ieee802154 phy1 wpan1: encryption failed: -22 [ 1403.038071][T14863] syz.2.2488 (14863): drop_caches: 2 [ 1403.720760][ T8501] usb 7-1: new high-speed USB device number 37 using dummy_hcd [ 1403.909191][ T8501] usb 7-1: Using ep0 maxpacket: 16 [ 1403.975796][ T8501] usb 7-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xF3, changing to 0x83 [ 1403.988038][ T8501] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 1404.046480][ T8501] usb 7-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 1404.056236][ T8501] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1404.064614][ T8501] usb 7-1: Product: syz [ 1404.069000][ T8501] usb 7-1: Manufacturer: syz [ 1404.073954][ T8501] usb 7-1: SerialNumber: syz [ 1404.142406][ T8501] usb 7-1: config 0 descriptor?? [ 1404.242872][ T8501] em28xx 7-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0) [ 1404.252845][ T8501] em28xx 7-1:0.0: Audio interface 0 found (Vendor Class) [ 1404.952011][ T8501] em28xx 7-1:0.0: unknown em28xx chip ID (0) [ 1404.990423][ T8501] em28xx 7-1:0.0: Config register raw data: 0x00 [ 1405.770918][ T5856] usb 2-1: new high-speed USB device number 26 using dummy_hcd [ 1405.971247][ T5856] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1405.982941][ T5856] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1405.993168][ T5856] usb 2-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 1406.002602][ T5856] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1406.016350][ T5856] usb 2-1: config 0 descriptor?? [ 1406.293703][ T5856] usbhid 2-1:0.0: can't add hid device: -71 [ 1406.300530][ T5856] usbhid 2-1:0.0: probe with driver usbhid failed with error -71 [ 1406.344342][ T5856] usb 2-1: USB disconnect, device number 26 [ 1406.497592][T14899] netlink: 8 bytes leftover after parsing attributes in process `syz.8.2507'. [ 1406.587335][ T8501] usb 7-1: USB disconnect, device number 37 [ 1406.595457][ T8501] em28xx 7-1:0.0: Disconnecting em28xx [ 1406.631126][ T8501] em28xx 7-1:0.0: Freeing device [ 1406.850394][ T5856] usb 2-1: new full-speed USB device number 27 using dummy_hcd [ 1406.970394][ T8501] kernel write not supported for file /dsp (pid: 8501 comm: kworker/0:4) [ 1407.064254][ T5856] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 1407.075983][ T5856] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1407.086221][ T5856] usb 2-1: New USB device found, idVendor=097f, idProduct=3333, bcdDevice= 0.40 [ 1407.098458][ T5856] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1407.134643][ T5856] usb 2-1: config 0 descriptor?? [ 1407.582329][ T5856] usbhid 2-1:0.0: can't add hid device: -71 [ 1407.588997][ T5856] usbhid 2-1:0.0: probe with driver usbhid failed with error -71 [ 1407.651929][ T5856] usb 2-1: USB disconnect, device number 27 [ 1409.224665][T14933] netlink: set zone limit has 8 unknown bytes [ 1410.104044][ T5856] usb 3-1: new high-speed USB device number 44 using dummy_hcd [ 1410.178048][T14951] netlink: 16 bytes leftover after parsing attributes in process `syz.8.2531'. [ 1410.182589][T14946] syzkaller0: entered promiscuous mode [ 1410.193094][T14946] syzkaller0: entered allmulticast mode [ 1410.405951][ T5856] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1410.417384][ T5856] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1410.427717][ T5856] usb 3-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 1410.437156][ T5856] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1410.455624][ T5856] usb 3-1: config 0 descriptor?? [ 1410.708190][ T5856] usbhid 3-1:0.0: can't add hid device: -71 [ 1410.721000][ T5856] usbhid 3-1:0.0: probe with driver usbhid failed with error -71 [ 1410.746887][ T5856] usb 3-1: USB disconnect, device number 44 [ 1411.246242][ T5856] usb 3-1: new full-speed USB device number 45 using dummy_hcd [ 1411.437067][ T5856] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 1411.449001][ T5856] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1411.459223][ T5856] usb 3-1: New USB device found, idVendor=097f, idProduct=3333, bcdDevice= 0.40 [ 1411.468662][ T5856] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1411.514909][ T5856] usb 3-1: config 0 descriptor?? [ 1411.962167][ T5856] hid-generic 0003:097F:3333.0002: unknown main item tag 0x0 [ 1412.024956][ T5856] hid-generic 0003:097F:3333.0002: hidraw0: USB HID v0.00 Device [HID 097f:3333] on usb-dummy_hcd.2-1/input0 [ 1412.165636][ T5856] usb 3-1: USB disconnect, device number 45 [ 1412.374085][T14982] netlink: 16 bytes leftover after parsing attributes in process `syz.1.2543'. [ 1414.117496][T15015] netlink: 16 bytes leftover after parsing attributes in process `syz.9.2556'. [ 1415.748064][T15045] syzkaller0: entered promiscuous mode [ 1415.754199][T15045] syzkaller0: entered allmulticast mode [ 1416.442680][T15058] tipc: Started in network mode [ 1416.448181][T15058] tipc: Node identity 6a8346ff0c3e, cluster identity 4711 [ 1416.456777][T15058] tipc: Enabled bearer , priority 0 [ 1416.519313][T15061] syzkaller0: entered promiscuous mode [ 1416.525469][T15061] syzkaller0: entered allmulticast mode [ 1416.647764][T15058] tipc: Resetting bearer [ 1416.681433][T15056] tipc: Resetting bearer [ 1416.711191][T15056] tipc: Disabling bearer [ 1420.870411][ T5856] usb 3-1: new high-speed USB device number 46 using dummy_hcd [ 1420.979455][T15145] tipc: Enabled bearer , priority 0 [ 1421.004533][T15144] tipc: Disabling bearer [ 1421.051350][ T5856] usb 3-1: Using ep0 maxpacket: 32 [ 1421.062606][ T5856] usb 3-1: config index 0 descriptor too short (expected 35577, got 27) [ 1421.072666][ T5856] usb 3-1: config 1 has too many interfaces: 92, using maximum allowed: 32 [ 1421.083144][ T5856] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 92 [ 1421.093405][ T5856] usb 3-1: config 1 has no interface number 0 [ 1421.100860][ T5856] usb 3-1: config 1 interface 1 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 1421.113192][ T5856] usb 3-1: config 1 interface 1 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 17 [ 1421.117724][T15148] netlink: 8 bytes leftover after parsing attributes in process `syz.6.2609'. [ 1421.129313][ T5856] usb 3-1: New USB device found, idVendor=0e41, idProduct=5051, bcdDevice=d5.e8 [ 1421.129479][ T5856] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1421.156590][T15148] netlink: 8 bytes leftover after parsing attributes in process `syz.6.2609'. [ 1421.201306][ T5856] snd_usb_pod 3-1:1.1: Line 6 Pocket POD found [ 1421.392583][ T5856] snd_usb_pod 3-1:1.1: Line 6 Pocket POD now attached [ 1421.831343][ T8501] usb 3-1: USB disconnect, device number 46 [ 1421.835585][T15154] tipc: Enabled bearer , priority 0 [ 1421.842376][ T8501] snd_usb_pod 3-1:1.1: Line 6 Pocket POD now disconnected [ 1421.853996][T15154] syzkaller0: entered promiscuous mode [ 1421.860042][T15154] syzkaller0: entered allmulticast mode [ 1421.948632][T15154] tipc: Resetting bearer [ 1421.954685][T15158] fuse: Bad value for 'group_id' [ 1421.960261][T15158] fuse: Bad value for 'group_id' [ 1421.987501][T15153] tipc: Resetting bearer [ 1422.017996][T15153] tipc: Disabling bearer [ 1422.550282][ T5856] usb 7-1: new high-speed USB device number 38 using dummy_hcd [ 1422.723774][ T5856] usb 7-1: Using ep0 maxpacket: 16 [ 1422.755996][ T5856] usb 7-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xF3, changing to 0x83 [ 1422.770275][ T5856] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 1422.806633][ T5856] usb 7-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 1422.816557][ T5856] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1422.824928][ T5856] usb 7-1: Product: syz [ 1422.829303][ T5856] usb 7-1: Manufacturer: syz [ 1422.834228][ T5856] usb 7-1: SerialNumber: syz [ 1422.847401][ T5856] usb 7-1: config 0 descriptor?? [ 1422.881321][ T5856] em28xx 7-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0) [ 1422.891021][ T5856] em28xx 7-1:0.0: Audio interface 0 found (Vendor Class) [ 1423.529234][ T5856] em28xx 7-1:0.0: unknown em28xx chip ID (0) [ 1423.546332][ T5856] em28xx 7-1:0.0: Config register raw data: 0xfffffffb [ 1423.977720][ T5856] em28xx 7-1:0.0: AC97 chip type couldn't be determined [ 1423.985235][ T5856] em28xx 7-1:0.0: No AC97 audio processor [ 1424.027635][T15188] fuse: Bad value for 'group_id' [ 1424.033664][T15188] fuse: Bad value for 'group_id' [ 1424.068013][T15190] tipc: Enabled bearer , priority 0 [ 1424.078498][T15190] syzkaller0: entered promiscuous mode [ 1424.085103][T15190] syzkaller0: entered allmulticast mode [ 1424.142041][T15190] tipc: Resetting bearer [ 1424.154418][T15186] tipc: Resetting bearer [ 1424.174134][T15186] tipc: Disabling bearer [ 1424.744747][T15201] netlink: 76 bytes leftover after parsing attributes in process `syz.8.2632'. [ 1425.443802][ T8501] usb 7-1: USB disconnect, device number 38 [ 1425.452284][ T8501] em28xx 7-1:0.0: Disconnecting em28xx [ 1425.461906][ T8501] em28xx 7-1:0.0: Freeing device [ 1425.724637][T15221] fuse: Bad value for 'group_id' [ 1425.732738][T15221] fuse: Bad value for 'group_id' [ 1425.840566][T15223] tipc: Enabled bearer , priority 0 [ 1425.878020][T15223] syzkaller0: entered promiscuous mode [ 1425.884169][T15223] syzkaller0: entered allmulticast mode [ 1425.918492][T15223] tipc: Resetting bearer [ 1425.959084][T15220] tipc: Resetting bearer [ 1425.983675][T15220] tipc: Disabling bearer [ 1426.097557][T15227] syzkaller0: entered promiscuous mode [ 1426.103926][T15227] syzkaller0: entered allmulticast mode [ 1427.360169][ T8501] usb 2-1: new high-speed USB device number 28 using dummy_hcd [ 1427.530750][ T8501] usb 2-1: Using ep0 maxpacket: 16 [ 1427.550763][ T8501] usb 2-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xF3, changing to 0x83 [ 1427.562789][ T8501] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 1427.592585][ T8501] usb 2-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 1427.602335][ T8501] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1427.610985][ T8501] usb 2-1: Product: syz [ 1427.615376][ T8501] usb 2-1: Manufacturer: syz [ 1427.620325][ T8501] usb 2-1: SerialNumber: syz [ 1427.631399][ T8501] usb 2-1: config 0 descriptor?? [ 1427.651410][ T8501] em28xx 2-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0) [ 1427.661063][ T8501] em28xx 2-1:0.0: Audio interface 0 found (Vendor Class) [ 1428.309177][ T8501] em28xx 2-1:0.0: unknown em28xx chip ID (0) [ 1428.329946][ T8501] em28xx 2-1:0.0: Config register raw data: 0xfffffffb [ 1428.433963][T15257] syzkaller0: entered promiscuous mode [ 1428.441756][T15257] syzkaller0: entered allmulticast mode [ 1428.963605][ T8501] em28xx 2-1:0.0: Unknown AC97 audio processor detected! [ 1428.987446][ T8501] em28xx 2-1:0.0: couldn't setup AC97 register 2 [ 1429.010408][ T8501] em28xx 2-1:0.0: couldn't setup AC97 register 4 [ 1429.027849][ T8501] em28xx 2-1:0.0: couldn't setup AC97 register 6 [ 1429.055459][ T8501] em28xx 2-1:0.0: couldn't setup AC97 register 54 [ 1429.072449][T15269] syzkaller1: entered promiscuous mode [ 1429.078491][T15269] syzkaller1: entered allmulticast mode [ 1429.100591][ T8501] em28xx 2-1:0.0: couldn't setup AC97 register 56 [ 1429.128581][ T8501] usb 2-1: USB disconnect, device number 28 [ 1430.374499][ T8501] usb 2-1: new high-speed USB device number 29 using dummy_hcd [ 1430.617005][T15291] netlink: 96 bytes leftover after parsing attributes in process `syz.8.2668'. [ 1430.660825][ T8501] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1430.671426][ T8501] usb 2-1: config 0 has no interfaces? [ 1430.677199][ T8501] usb 2-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 1430.686510][ T8501] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1432.199068][ T8501] usb 2-1: config 0 descriptor?? [ 1432.293291][T15295] tipc: Started in network mode [ 1432.298715][T15295] tipc: Node identity b684cebf40eb, cluster identity 4711 [ 1432.307115][T15295] tipc: Enabled bearer , priority 0 [ 1432.776803][T15300] syzkaller0: entered promiscuous mode [ 1432.783558][T15300] syzkaller0: entered allmulticast mode [ 1433.164380][T15294] tipc: Resetting bearer [ 1433.243088][T15294] tipc: Disabling bearer [ 1434.489566][ T8501] usb 2-1: USB disconnect, device number 29 [ 1434.655042][ T5856] usb 3-1: new high-speed USB device number 47 using dummy_hcd [ 1434.863534][ T5856] usb 3-1: Using ep0 maxpacket: 16 [ 1434.911988][ T5856] usb 3-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xF3, changing to 0x83 [ 1434.924175][ T5856] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 1435.030389][ T5856] usb 3-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 1435.039632][ T5856] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1435.049462][ T5856] usb 3-1: Product: syz [ 1435.054749][ T5856] usb 3-1: Manufacturer: syz [ 1435.059507][ T5856] usb 3-1: SerialNumber: syz [ 1435.120253][ T5856] usb 3-1: config 0 descriptor?? [ 1435.165413][ T5856] em28xx 3-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0) [ 1435.175395][ T5856] em28xx 3-1:0.0: Audio interface 0 found (Vendor Class) [ 1435.768283][ T5856] em28xx 3-1:0.0: unknown em28xx chip ID (0) [ 1435.782102][ T5856] em28xx 3-1:0.0: Config register raw data: 0xfffffffb [ 1436.398264][ T5856] em28xx 3-1:0.0: Unknown AC97 audio processor detected! [ 1436.408525][ T5856] em28xx 3-1:0.0: couldn't setup AC97 register 2 [ 1436.417201][ T5856] em28xx 3-1:0.0: couldn't setup AC97 register 4 [ 1436.446051][ T5856] em28xx 3-1:0.0: couldn't setup AC97 register 6 [ 1436.482661][ T5856] em28xx 3-1:0.0: couldn't setup AC97 register 54 [ 1436.508414][ T5856] em28xx 3-1:0.0: couldn't setup AC97 register 56 [ 1436.551659][T15328] netlink: 28 bytes leftover after parsing attributes in process `syz.6.2682'. [ 1436.572665][ T5856] usb 3-1: USB disconnect, device number 47 [ 1436.714521][T15333] tipc: Enabled bearer , priority 0 [ 1436.733246][T15333] syzkaller0: entered promiscuous mode [ 1436.738955][T15333] syzkaller0: entered allmulticast mode [ 1436.827113][T15331] tipc: Resetting bearer [ 1436.905718][T15331] tipc: Disabling bearer [ 1437.947743][ T8501] usb 2-1: new high-speed USB device number 30 using dummy_hcd [ 1438.140875][ T8501] usb 2-1: Using ep0 maxpacket: 16 [ 1438.183435][ T8501] usb 2-1: config 1 has an invalid descriptor of length 97, skipping remainder of the config [ 1438.194356][ T8501] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 1438.283260][ T8501] usb 2-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 1438.292705][ T8501] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1438.301347][ T8501] usb 2-1: Product: syz [ 1438.305649][ T8501] usb 2-1: Manufacturer: syz [ 1438.310483][ T8501] usb 2-1: SerialNumber: syz [ 1438.637375][ T8501] usb 2-1: 0:2 : does not exist [ 1438.683701][ T8501] usb 2-1: USB disconnect, device number 30 [ 1439.042689][T11775] usb 10-1: new full-speed USB device number 75 using dummy_hcd [ 1439.215156][T11775] usb 10-1: unable to get BOS descriptor or descriptor too short [ 1439.238143][T11775] usb 10-1: not running at top speed; connect to a high speed hub [ 1439.297848][T11775] usb 10-1: config 1 has an invalid descriptor of length 131, skipping remainder of the config [ 1439.308663][T11775] usb 10-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 1439.318926][T11775] usb 10-1: config 1 has no interface number 1 [ 1439.325452][T11775] usb 10-1: too many endpoints for config 1 interface 2 altsetting 3: 58, using maximum allowed: 30 [ 1439.336668][T11775] usb 10-1: config 1 interface 2 altsetting 3 has 0 endpoint descriptors, different from the interface descriptor's value: 58 [ 1439.352454][T11775] usb 10-1: config 1 interface 2 has no altsetting 0 [ 1439.408146][T11775] usb 10-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 1439.418502][T11775] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1439.426967][T11775] usb 10-1: Product: syz [ 1439.431714][T11775] usb 10-1: Manufacturer: syz [ 1439.436625][T11775] usb 10-1: SerialNumber: syz [ 1440.718040][T11775] usb 10-1: USB disconnect, device number 75 [ 1440.792266][T15364] tipc: Enabled bearer , priority 0 [ 1440.812123][T15364] syzkaller0: entered promiscuous mode [ 1440.817966][T15364] syzkaller0: entered allmulticast mode [ 1440.893555][T15363] tipc: Resetting bearer [ 1440.945461][T15363] tipc: Disabling bearer [ 1441.943134][T15383] syzkaller1: left promiscuous mode [ 1441.948604][T15383] syzkaller1: left allmulticast mode [ 1442.351606][T15389] tipc: Enabled bearer , priority 0 [ 1442.382416][T15389] syzkaller0: entered promiscuous mode [ 1442.388141][T15389] syzkaller0: entered allmulticast mode [ 1442.476202][T15389] tipc: Resetting bearer [ 1442.539435][T15385] tipc: Resetting bearer [ 1442.565327][T15385] tipc: Disabling bearer [ 1443.140256][T15398] bridge0: port 3(gretap0) entered blocking state [ 1443.147439][T15398] bridge0: port 3(gretap0) entered disabled state [ 1443.154984][T15398] gretap0: entered allmulticast mode [ 1443.164259][T15398] gretap0: entered promiscuous mode [ 1443.172297][T15398] bridge0: port 3(gretap0) entered blocking state [ 1443.179234][T15398] bridge0: port 3(gretap0) entered forwarding state [ 1443.331667][T15405] tipc: Enabled bearer , priority 0 [ 1443.369332][T15405] syzkaller0: entered promiscuous mode [ 1443.375556][T15405] syzkaller0: entered allmulticast mode [ 1443.428793][T15399] tipc: Resetting bearer [ 1443.494330][T15399] tipc: Disabling bearer [ 1445.654785][T15446] tipc: Enabled bearer , priority 0 [ 1445.740063][T15446] tipc: Resetting bearer [ 1445.827986][T15444] tipc: Disabling bearer [ 1447.477152][T15473] netlink: 4 bytes leftover after parsing attributes in process `syz.6.2738'. [ 1448.647781][T15488] tipc: Started in network mode [ 1448.655587][T15488] tipc: Node identity 3e61b2e13843, cluster identity 4711 [ 1448.663930][T15488] tipc: Enabled bearer , priority 0 [ 1448.724801][T15491] tipc: Resetting bearer [ 1448.788302][T15487] tipc: Disabling bearer [ 1449.884596][T15507] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2752'. [ 1450.398821][T15514] tipc: Enabled bearer , priority 0 [ 1450.452217][T15515] syzkaller0: entered promiscuous mode [ 1450.458064][T15515] syzkaller0: entered allmulticast mode [ 1450.527936][T15514] tipc: Resetting bearer [ 1450.580935][T15513] tipc: Resetting bearer [ 1450.623079][T15513] tipc: Disabling bearer [ 1451.391769][T15531] tipc: Enabled bearer , priority 0 [ 1451.452330][T15531] tipc: Resetting bearer [ 1451.541266][T15525] tipc: Disabling bearer [ 1452.175887][T15543] netlink: 4 bytes leftover after parsing attributes in process `syz.8.2767'. [ 1453.080433][T15559] tipc: Enabled bearer , priority 0 [ 1453.101853][T15559] syzkaller0: entered promiscuous mode [ 1453.107577][T15559] syzkaller0: entered allmulticast mode [ 1453.187828][T15559] tipc: Resetting bearer [ 1453.227484][T15558] tipc: Resetting bearer [ 1453.275991][T15558] tipc: Disabling bearer [ 1454.472210][T15574] syzkaller0: entered promiscuous mode [ 1454.478161][T15574] syzkaller0: entered allmulticast mode [ 1454.797741][T15583] netlink: 20 bytes leftover after parsing attributes in process `syz.6.2776'. [ 1455.073718][T15582] faux_driver regulatory: loading /lib/firmware/regulatory.db failed with error -4 [ 1455.083695][T15582] faux_driver regulatory: Direct firmware load for regulatory.db failed with error -4 [ 1455.093652][T15582] faux_driver regulatory: Falling back to sysfs fallback for: regulatory.db [ 1457.343395][T15600] syzkaller0: entered promiscuous mode [ 1457.349289][T15600] syzkaller0: entered allmulticast mode [ 1457.512213][T15598] sch_tbf: burst 127 is lower than device syzkaller0 mtu (1514) ! [ 1458.363844][T15605] tipc: Enabled bearer , priority 0 [ 1458.373913][T15605] syzkaller0: entered promiscuous mode [ 1458.379620][T15605] syzkaller0: entered allmulticast mode [ 1458.507602][T15607] netlink: 8 bytes leftover after parsing attributes in process `syz.9.2788'. [ 1458.645954][T15605] tipc: Resetting bearer [ 1458.779132][T15604] tipc: Resetting bearer [ 1458.862665][T15604] tipc: Disabling bearer [ 1459.485131][T15611] netlink: 'syz.8.2791': attribute type 16 has an invalid length. [ 1459.728543][T15614] netlink: 36 bytes leftover after parsing attributes in process `syz.9.2792'. [ 1460.001380][T15616] syzkaller0: entered promiscuous mode [ 1460.007128][T15616] syzkaller0: entered allmulticast mode [ 1462.952220][T15638] syzkaller0: entered promiscuous mode [ 1462.958171][T15638] syzkaller0: entered allmulticast mode [ 1463.005703][T15638] sch_tbf: burst 127 is lower than device syzkaller0 mtu (1514) ! [ 1463.792956][ T1289] ieee802154 phy0 wpan0: encryption failed: -22 [ 1463.799653][ T1289] ieee802154 phy1 wpan1: encryption failed: -22 [ 1464.407404][T15650] netlink: 'syz.8.2804': attribute type 16 has an invalid length. [ 1464.652460][T15652] netlink: 36 bytes leftover after parsing attributes in process `syz.6.2805'. [ 1465.141671][T15657] syzkaller0: entered promiscuous mode [ 1465.147308][T15657] syzkaller0: entered allmulticast mode [ 1466.304715][T15669] syzkaller0: entered promiscuous mode [ 1466.311016][T15669] syzkaller0: entered allmulticast mode [ 1466.433856][T15669] sch_tbf: burst 127 is lower than device syzkaller0 mtu (1514) ! [ 1467.380114][T15680] netlink: 'syz.6.2816': attribute type 16 has an invalid length. [ 1467.878934][T15683] netlink: 36 bytes leftover after parsing attributes in process `syz.8.2818'. [ 1475.530246][T15703] syzkaller0: entered promiscuous mode [ 1475.536189][T15703] syzkaller0: entered allmulticast mode [ 1475.619662][T15704] sch_tbf: burst 127 is lower than device syzkaller0 mtu (1514) ! [ 1477.091605][T15723] netlink: 36 bytes leftover after parsing attributes in process `syz.2.2831'. [ 1477.148926][T15089] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 1477.169114][T15089] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 1477.181728][T15089] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 1477.196155][T15089] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 1477.215141][T15089] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 1477.305649][T15727] tipc: Enabled bearer , priority 0 [ 1477.322329][T15727] syzkaller0: entered promiscuous mode [ 1477.328044][T15727] syzkaller0: entered allmulticast mode [ 1477.414281][T15726] lo speed is unknown, defaulting to 1000 [ 1477.501049][T15725] tipc: Resetting bearer [ 1477.581416][T15725] tipc: Disabling bearer [ 1480.061172][T15089] Bluetooth: hci2: command tx timeout [ 1482.564401][T15089] Bluetooth: hci2: command tx timeout [ 1483.770211][T15754] syzkaller0: entered promiscuous mode [ 1483.775939][T15754] syzkaller0: entered allmulticast mode [ 1483.888551][T15726] chnl_net:caif_netlink_parms(): no params data found [ 1484.663278][T11764] Bluetooth: hci2: command tx timeout [ 1484.968479][T15768] netlink: 36 bytes leftover after parsing attributes in process `syz.6.2843'. [ 1487.371781][T11764] Bluetooth: hci2: command tx timeout [ 1487.517908][T15726] bridge0: port 1(bridge_slave_0) entered blocking state [ 1487.526328][T15726] bridge0: port 1(bridge_slave_0) entered disabled state [ 1487.534388][T15726] bridge_slave_0: entered allmulticast mode [ 1487.544473][T15726] bridge_slave_0: entered promiscuous mode [ 1487.759366][T15726] bridge0: port 2(bridge_slave_1) entered blocking state [ 1487.767329][T15726] bridge0: port 2(bridge_slave_1) entered disabled state [ 1487.776112][T15726] bridge_slave_1: entered allmulticast mode [ 1487.789324][T15726] bridge_slave_1: entered promiscuous mode [ 1487.821304][T15781] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2847'. [ 1487.986526][T15781] 8021q: adding VLAN 0 to HW filter on device bond2 [ 1488.006050][T15783] tipc: Enabled bearer , priority 0 [ 1488.027553][T15785] syzkaller0: entered promiscuous mode [ 1488.034019][T15785] syzkaller0: entered allmulticast mode [ 1488.203859][T15778] tipc: Resetting bearer [ 1488.257086][T15778] tipc: Disabling bearer [ 1488.491428][T15726] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1488.577556][T15726] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1488.876777][T15726] team0: Port device team_slave_0 added [ 1488.946390][T15726] team0: Port device team_slave_1 added [ 1488.957719][T15796] syzkaller0: entered promiscuous mode [ 1488.963843][T15796] syzkaller0: entered allmulticast mode [ 1489.212402][T15726] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1489.221974][T15726] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1489.249215][T15726] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1489.282239][T15726] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1489.290243][T15726] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1489.318195][T15726] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1489.682902][T15726] hsr_slave_0: entered promiscuous mode [ 1489.694058][T15726] hsr_slave_1: entered promiscuous mode [ 1489.703503][T15726] debugfs: 'hsr0' already exists in 'hsr' [ 1489.709456][T15726] Cannot create hsr debugfs directory [ 1492.142017][T15817] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2859'. [ 1492.285612][T15817] 8021q: adding VLAN 0 to HW filter on device bond2 [ 1493.560038][ T5856] usb 3-1: new high-speed USB device number 48 using dummy_hcd [ 1493.761462][ T5856] usb 3-1: Using ep0 maxpacket: 32 [ 1493.813136][ T5856] usb 3-1: config index 0 descriptor too short (expected 35577, got 27) [ 1493.822099][ T5856] usb 3-1: config 1 has too many interfaces: 92, using maximum allowed: 32 [ 1493.833588][ T5856] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 92 [ 1493.843465][ T5856] usb 3-1: config 1 has no interface number 0 [ 1493.849895][ T5856] usb 3-1: config 1 interface 1 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 1493.861247][ T5856] usb 3-1: config 1 interface 1 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 17 [ 1493.874474][ T5856] usb 3-1: New USB device found, idVendor=0e41, idProduct=5051, bcdDevice=d5.e8 [ 1493.884239][ T5856] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1493.966852][ T5856] snd_usb_pod 3-1:1.1: Line 6 Pocket POD found [ 1494.179608][ T5856] snd_usb_pod 3-1:1.1: Line 6 Pocket POD now attached [ 1494.546871][T15726] netdevsim netdevsim7 netdevsim0: renamed from eth0 [ 1494.678002][T11775] usb 3-1: USB disconnect, device number 48 [ 1494.685931][T11775] snd_usb_pod 3-1:1.1: Line 6 Pocket POD now disconnected [ 1494.701847][T15726] netdevsim netdevsim7 netdevsim1: renamed from eth1 [ 1494.789160][T15726] netdevsim netdevsim7 netdevsim2: renamed from eth2 [ 1494.802773][T15846] netlink: 8 bytes leftover after parsing attributes in process `syz.8.2866'. [ 1494.882165][T15726] netdevsim netdevsim7 netdevsim3: renamed from eth3 [ 1495.828076][T15726] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1496.090884][T15726] 8021q: adding VLAN 0 to HW filter on device team0 [ 1496.236649][ T9678] bridge0: port 1(bridge_slave_0) entered blocking state [ 1496.244348][ T9678] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1496.398598][ T9678] bridge0: port 2(bridge_slave_1) entered blocking state [ 1496.406277][ T9678] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1497.558053][T15872] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2873'. [ 1497.668146][T15872] 8021q: adding VLAN 0 to HW filter on device bond3 [ 1501.503070][T15888] syzkaller0: entered promiscuous mode [ 1501.511703][T15888] syzkaller0: entered allmulticast mode [ 1501.636179][T15892] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2878'. [ 1501.791362][T15726] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1502.094734][T15898] netlink: 4 bytes leftover after parsing attributes in process `syz.6.2879'. [ 1502.412148][T15901] gretap0: left allmulticast mode [ 1502.417542][T15901] gretap0: left promiscuous mode [ 1502.423645][T15901] bridge0: port 3(gretap0) entered disabled state [ 1504.535285][T15920] block device autoloading is deprecated and will be removed. [ 1506.553824][T15726] veth0_vlan: entered promiscuous mode [ 1506.863587][T15726] veth1_vlan: entered promiscuous mode [ 1507.183883][T15926] netlink: 4 bytes leftover after parsing attributes in process `syz.8.2887'. [ 1507.266855][T15726] veth0_macvtap: entered promiscuous mode [ 1507.356245][T15726] veth1_macvtap: entered promiscuous mode [ 1507.516604][T15726] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1507.629051][T15726] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1507.722123][ T1135] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1507.766835][ T1135] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1507.814987][ T1135] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1507.822898][T15930] netlink: 8 bytes leftover after parsing attributes in process `syz.6.2889'. [ 1507.841382][ T9693] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1508.012467][T15933] syzkaller0: entered promiscuous mode [ 1508.018337][T15933] syzkaller0: entered allmulticast mode [ 1508.844399][T15942] hub 9-0:1.0: USB hub found [ 1508.850758][T15942] hub 9-0:1.0: 1 port detected [ 1509.366006][T15949] netlink: 4 bytes leftover after parsing attributes in process `syz.6.2893'. [ 1510.630288][ T8683] usb 2-1: new high-speed USB device number 31 using dummy_hcd [ 1510.876751][ T8683] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1510.887635][ T8683] usb 2-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 1510.897312][ T8683] usb 2-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 1510.906726][ T8683] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1511.097361][ T8683] usb 2-1: config 0 descriptor?? [ 1511.551133][T15968] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2900'. [ 1511.997141][T15973] netlink: 28 bytes leftover after parsing attributes in process `syz.6.2902'. [ 1512.638191][T15977] syzkaller0: entered promiscuous mode [ 1512.644308][T15977] syzkaller0: entered allmulticast mode [ 1513.778517][ T8683] usb 2-1: USB disconnect, device number 31 [ 1514.886892][T15994] netlink: 96 bytes leftover after parsing attributes in process `syz.1.2907'. [ 1514.978526][T15999] netlink: 4 bytes leftover after parsing attributes in process `syz.8.2910'. [ 1515.520236][T16011] netlink: 28 bytes leftover after parsing attributes in process `syz.8.2912'. [ 1515.764451][T16015] syzkaller0: entered promiscuous mode [ 1515.770691][T16015] syzkaller0: entered allmulticast mode [ 1517.115010][ T3945] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1517.123462][ T3945] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1517.152088][T16035] serio: Serial port ptm0 [ 1517.973191][ T4046] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1517.981606][ T4046] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1518.122951][T16045] syz.2.2920 calls setitimer() with new_value NULL pointer. Misfeature support will be removed [ 1518.775368][T16049] netlink: 28 bytes leftover after parsing attributes in process `syz.1.2924'. [ 1519.406826][T16056] syzkaller0: entered promiscuous mode [ 1519.415124][T16056] syzkaller0: entered allmulticast mode [ 1521.796737][T16085] netlink: 28 bytes leftover after parsing attributes in process `syz.1.2937'. [ 1522.405982][T16089] dummy0: left promiscuous mode [ 1522.411414][T16089] dummy0: left allmulticast mode [ 1522.471913][T16089] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 1523.128223][T16093] syzkaller0: entered promiscuous mode [ 1523.135237][T16093] syzkaller0: entered allmulticast mode [ 1525.202737][ T1289] ieee802154 phy0 wpan0: encryption failed: -22 [ 1525.209424][ T1289] ieee802154 phy1 wpan1: encryption failed: -22 [ 1528.162563][T16124] netlink: 28 bytes leftover after parsing attributes in process `syz.6.2950'. [ 1529.045407][T16134] syzkaller0: entered promiscuous mode [ 1529.056569][T16134] syzkaller0: entered allmulticast mode [ 1532.393296][T16164] netlink: 28 bytes leftover after parsing attributes in process `syz.1.2962'. [ 1533.228089][T16174] netlink: 24 bytes leftover after parsing attributes in process `syz.1.2968'. [ 1533.397491][T16176] syzkaller0: entered promiscuous mode [ 1533.403683][T16176] syzkaller0: entered allmulticast mode [ 1534.829019][T16189] lo speed is unknown, defaulting to 1000 [ 1538.118615][ T8501] usb 9-1: new high-speed USB device number 2 using dummy_hcd [ 1542.641541][T16224] syzkaller0: entered promiscuous mode [ 1542.647385][T16224] syzkaller0: entered allmulticast mode [ 1544.330766][ T8683] usb 3-1: new high-speed USB device number 49 using dummy_hcd [ 1544.680828][ T8683] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1544.692256][ T8683] usb 3-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 1544.701841][ T8683] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1544.916341][ T8683] usb 3-1: config 0 descriptor?? [ 1545.011055][ T8683] pwc: Askey VC010 type 2 USB webcam detected. [ 1545.435504][ T8683] pwc: recv_control_msg error -32 req 02 val 2b00 [ 1545.470261][ T8683] pwc: recv_control_msg error -32 req 02 val 2700 [ 1545.530606][ T8683] pwc: recv_control_msg error -32 req 02 val 2c00 [ 1545.570463][ T8683] pwc: recv_control_msg error -32 req 04 val 1000 [ 1545.593521][ T8683] pwc: recv_control_msg error -32 req 04 val 1300 [ 1545.619633][ T8683] pwc: recv_control_msg error -32 req 04 val 1400 [ 1545.643706][ T8683] pwc: recv_control_msg error -32 req 02 val 2000 [ 1545.665405][ T8683] pwc: recv_control_msg error -32 req 02 val 2100 [ 1545.695773][ T8683] pwc: recv_control_msg error -32 req 04 val 1500 [ 1545.717563][ T8683] pwc: recv_control_msg error -32 req 02 val 2500 [ 1545.748443][ T8683] pwc: recv_control_msg error -32 req 02 val 2400 [ 1545.767935][ T8683] pwc: recv_control_msg error -71 req 02 val 2600 [ 1545.788537][ T8683] pwc: recv_control_msg error -71 req 02 val 2900 [ 1545.840773][ T8683] pwc: recv_control_msg error -71 req 02 val 2800 [ 1545.868025][ T8683] pwc: recv_control_msg error -71 req 04 val 1100 [ 1545.900186][ T8683] pwc: recv_control_msg error -71 req 04 val 1200 [ 1545.927535][ T8683] pwc: Registered as video103. [ 1545.962569][ T8683] input: PWC snapshot button as /devices/platform/dummy_hcd.2/usb3/3-1/input/input22 [ 1546.015010][T16236] tipc: Enabled bearer , priority 0 [ 1546.030692][ T8683] usb 3-1: USB disconnect, device number 49 [ 1546.067104][T16236] tipc: Resetting bearer [ 1546.081940][T16235] tipc: Disabling bearer [ 1546.399490][ T9681] ===================================================== [ 1546.407438][ T9681] BUG: KMSAN: uninit-value in n_tty_receive_buf_standard+0xafd/0x98a0 [ 1546.416117][ T9681] n_tty_receive_buf_standard+0xafd/0x98a0 [ 1546.422300][ T9681] n_tty_receive_buf_common+0x1a68/0x2540 [ 1546.428237][ T9681] n_tty_receive_buf2+0x4c/0x60 [ 1546.433402][ T9681] tty_ldisc_receive_buf+0xc3/0x2c0 [ 1546.438925][ T9681] tty_port_default_receive_buf+0xd7/0x1a0 [ 1546.445254][ T9681] flush_to_ldisc+0x43b/0xe30 [ 1546.450426][ T9681] process_scheduled_works+0xb91/0x1d80 [ 1546.456260][ T9681] worker_thread+0xedf/0x1590 [ 1546.463406][ T9681] kthread+0xd59/0xf00 [ 1546.467790][ T9681] ret_from_fork+0x233/0x380 [ 1546.473454][ T9681] ret_from_fork_asm+0x1a/0x30 [ 1546.478487][ T9681] [ 1546.481042][ T9681] Uninit was stored to memory at: [ 1546.486335][ T9681] n_tty_receive_buf_standard+0xaf6/0x98a0 [ 1546.492540][ T9681] n_tty_receive_buf_common+0x1a68/0x2540 [ 1546.498476][ T9681] n_tty_receive_buf2+0x4c/0x60 [ 1546.503897][ T9681] tty_ldisc_receive_buf+0xc3/0x2c0 [ 1546.509344][ T9681] tty_port_default_receive_buf+0xd7/0x1a0 [ 1546.515519][ T9681] flush_to_ldisc+0x43b/0xe30 [ 1546.520554][ T9681] process_scheduled_works+0xb91/0x1d80 [ 1546.526297][ T9681] worker_thread+0xedf/0x1590 [ 1546.531269][ T9681] kthread+0xd59/0xf00 [ 1546.535542][ T9681] ret_from_fork+0x233/0x380 [ 1546.540441][ T9681] ret_from_fork_asm+0x1a/0x30 [ 1546.545434][ T9681] [ 1546.547851][ T9681] Uninit was created at: [ 1546.552553][ T9681] __kmalloc_noprof+0xabb/0x1b40 [ 1546.557735][ T9681] __tty_buffer_request_room+0x3d4/0x7a0 [ 1546.565819][ T9681] __tty_insert_flip_string_flags+0x157/0x6f0 [ 1546.572857][ T9681] uart_insert_char+0x368/0x930 [ 1546.578012][ T9681] serial8250_read_char+0x1ba/0x670 [ 1546.583690][ T9681] serial8250_handle_irq+0x930/0x1110 [ 1546.589300][ T9681] serial8250_default_handle_irq+0x116/0x370 [ 1546.595637][ T9681] serial8250_interrupt+0xc8/0x430 [ 1546.601224][ T9681] __handle_irq_event_percpu+0x11b/0xf80 [ 1546.607206][ T9681] handle_irq_event+0xe0/0x2a0 [ 1546.612314][ T9681] handle_edge_irq+0x2a9/0xb50 [ 1546.617279][ T9681] __common_interrupt+0x9a/0x180 [ 1546.622590][ T9681] common_interrupt+0x94/0xb0 [ 1546.627642][ T9681] asm_common_interrupt+0x2b/0x40 [ 1546.633022][ T9681] [ 1546.635485][ T9681] CPU: 1 UID: 0 PID: 9681 Comm: kworker/u8:12 Not tainted syzkaller #0 PREEMPT(none) [ 1546.645364][ T9681] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 1546.655742][ T9681] Workqueue: events_unbound flush_to_ldisc [ 1546.663944][ T9681] ===================================================== [ 1546.671693][ T9681] Disabling lock debugging due to kernel taint [ 1546.677998][ T9681] Kernel panic - not syncing: kmsan.panic set ... [ 1546.684579][ T9681] CPU: 1 UID: 0 PID: 9681 Comm: kworker/u8:12 Tainted: G B syzkaller #0 PREEMPT(none) [ 1546.695919][ T9681] Tainted: [B]=BAD_PAGE [ 1546.700187][ T9681] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 1546.710406][ T9681] Workqueue: events_unbound flush_to_ldisc [ 1546.716502][ T9681] Call Trace: [ 1546.719907][ T9681] [ 1546.722955][ T9681] __dump_stack+0x26/0x30 [ 1546.727504][ T9681] dump_stack_lvl+0x53/0x270 [ 1546.732320][ T9681] ? kmsan_get_shadow_origin_ptr+0x4a/0xb0 [ 1546.738384][ T9681] dump_stack+0x1e/0x25 [ 1546.742750][ T9681] vpanic+0x435/0xd30 [ 1546.746961][ T9681] panic+0x15d/0x160 [ 1546.751126][ T9681] kmsan_report+0x31c/0x320 [ 1546.755865][ T9681] ? __msan_warning+0x1b/0x30 [ 1546.760744][ T9681] ? n_tty_receive_buf_standard+0xafd/0x98a0 [ 1546.766938][ T9681] ? n_tty_receive_buf_common+0x1a68/0x2540 [ 1546.773046][ T9681] ? n_tty_receive_buf2+0x4c/0x60 [ 1546.778274][ T9681] ? tty_ldisc_receive_buf+0xc3/0x2c0 [ 1546.783890][ T9681] ? tty_port_default_receive_buf+0xd7/0x1a0 [ 1546.790142][ T9681] ? flush_to_ldisc+0x43b/0xe30 [ 1546.795240][ T9681] ? process_scheduled_works+0xb91/0x1d80 [ 1546.801160][ T9681] ? worker_thread+0xedf/0x1590 [ 1546.806202][ T9681] ? kthread+0xd59/0xf00 [ 1546.810651][ T9681] ? ret_from_fork+0x233/0x380 [ 1546.815602][ T9681] ? ret_from_fork_asm+0x1a/0x30 [ 1546.820773][ T9681] ? ret_from_fork_asm+0x1a/0x30 [ 1546.825954][ T9681] ? stack_depot_save_flags+0x35/0x7b0 [ 1546.831789][ T9681] ? kmsan_get_metadata+0xfb/0x160 [ 1546.837140][ T9681] ? kmsan_get_metadata+0x150/0x160 [ 1546.842570][ T9681] ? kmsan_internal_set_shadow_origin+0x7a/0x110 [ 1546.849149][ T9681] ? kmsan_get_metadata+0x150/0x160 [ 1546.854585][ T9681] ? kmsan_get_shadow_origin_ptr+0x4a/0xb0 [ 1546.860661][ T9681] ? n_tty_receive_char+0xfae/0x1440 [ 1546.866178][ T9681] ? kmsan_get_metadata+0xfb/0x160 [ 1546.871540][ T9681] __msan_warning+0x1b/0x30 [ 1546.876265][ T9681] n_tty_receive_buf_standard+0xafd/0x98a0 [ 1546.882340][ T9681] ? kmsan_get_metadata+0xfb/0x160 [ 1546.887712][ T9681] ? psi_group_change+0xee6/0x13c0 [ 1546.893144][ T9681] ? kmsan_internal_set_shadow_origin+0x7a/0x110 [ 1546.899747][ T9681] n_tty_receive_buf_common+0x1a68/0x2540 [ 1546.905791][ T9681] n_tty_receive_buf2+0x4c/0x60 [ 1546.910842][ T9681] ? __pfx_n_tty_receive_buf2+0x10/0x10 [ 1546.916609][ T9681] tty_ldisc_receive_buf+0xc3/0x2c0 [ 1546.922088][ T9681] tty_port_default_receive_buf+0xd7/0x1a0 [ 1546.928182][ T9681] flush_to_ldisc+0x43b/0xe30 [ 1546.933137][ T9681] ? __pfx_tty_port_default_receive_buf+0x10/0x10 [ 1546.939823][ T9681] ? __pfx_flush_to_ldisc+0x10/0x10 [ 1546.945270][ T9681] process_scheduled_works+0xb91/0x1d80 [ 1546.951099][ T9681] worker_thread+0xedf/0x1590 [ 1546.956024][ T9681] kthread+0xd59/0xf00 [ 1546.960309][ T9681] ? __pfx_worker_thread+0x10/0x10 [ 1546.965652][ T9681] ? __pfx_kthread+0x10/0x10 [ 1546.970464][ T9681] ret_from_fork+0x233/0x380 [ 1546.975257][ T9681] ? __pfx_kthread+0x10/0x10 [ 1546.980082][ T9681] ret_from_fork_asm+0x1a/0x30 [ 1546.985106][ T9681] [ 1546.988674][ T9681] Kernel Offset: disabled [ 1546.993078][ T9681] Rebooting in 86400 seconds..