last executing test programs: 31m58.019149329s ago: executing program 1 (id=209): socket(0xf, 0x80000, 0x0) r0 = syz_init_net_socket$ax25(0x3, 0x2, 0xcc) ioctl$SIOCAX25ADDUID(r0, 0x89e1, &(0x7f0000000c40)={0x3, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}}) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) openat$sndseq(0xffffffffffffff9c, &(0x7f0000000040), 0x2082) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) acct(&(0x7f0000000080)='\xe9\x1fq\x89Y\x1e\x923aK\x00') ioctl$sock_SIOCGIFVLAN_GET_VLAN_INGRESS_PRIORITY_CMD(r1, 0x8982, &(0x7f0000000080)) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x1) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0xfffffffffffffffe) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) pselect6(0x0, 0x0, 0x0, 0x0, &(0x7f00000046c0)={0x0, 0x989680}, 0x0) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) r3 = socket$netlink(0x10, 0x3, 0xb) bind$netlink(r3, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2fffffffd}, 0xc) socket$nl_netfilter(0x10, 0x3, 0xc) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000700)=@newlink={0x50, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x585d}, [@IFLA_IFNAME={0x14, 0x3, 'ipvlan1\x00'}, @IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @ipvlan={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_IPVLAN_FLAGS={0x6, 0x2, 0x1}]}}}]}, 0x50}, 0x1, 0x0, 0x0, 0x840}, 0x0) 31m57.350370122s ago: executing program 1 (id=211): r0 = syz_clone(0x1206c100, 0x0, 0xfffffffffffffdc1, 0x0, 0x0, 0x0) r1 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000015c0), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r1, 0xaf01, 0x0) r2 = eventfd(0x0) ioctl$VHOST_SET_LOG_FD(r1, 0x4004af07, &(0x7f0000000240)=r2) ioctl$VHOST_SET_VRING_KICK(r1, 0x4008af20, &(0x7f0000000040)={0x1, r2}) ioctl$VHOST_SET_VRING_ADDR(r1, 0x4028af11, &(0x7f0000000140)={0x0, 0x0, 0x0, &(0x7f0000000180)=""/53, 0x0}) ppoll(&(0x7f0000000000)=[{r2, 0x4040}], 0x1, 0x0, 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000000)={'netpci0\x00'}) timer_create(0x3, 0x0, &(0x7f0000000280)) setsockopt$ax25_SO_BINDTODEVICE(0xffffffffffffffff, 0x101, 0x19, &(0x7f0000000000)=@bpq0, 0xfffffffffffffe1d) ioctl$sock_netdev_private(0xffffffffffffffff, 0x8914, &(0x7f0000000000)) ioctl$sock_ax25_SIOCADDRT(0xffffffffffffffff, 0x890b, &(0x7f00000000c0)={@default, @default, 0x8, [@rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}, @bcast, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @bcast, @bcast]}) r3 = syz_open_procfs(0x0, &(0x7f00000000c0)='task\x00') fchdir(r3) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x2) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) r4 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r4, &(0x7f0000019680)=""/102392, 0x18ff8) socket$inet6(0xa, 0x2, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r5 = openat$comedi(0xffffffffffffff9c, &(0x7f0000000080)='/dev/comedi3\x00', 0x400, 0x0) ioctl$COMEDI_DEVCONFIG(r5, 0x40946400, 0x0) ioctl$COMEDI_DEVCONFIG(r5, 0x40946400, &(0x7f00000000c0)={'adq12b\x00', [0x4f27, 0x2, 0x10000, 0x4, 0xe, 0x0, 0x3, 0x7, 0xa, 0x1, 0x8001, 0x4, 0xff6b, 0x801, 0xfffffffe, 0xb4c, 0x0, 0x2, 0x3, 0x40000003, 0x89, 0xcaa7, 0x201ff, 0x20001e58, 0xb, 0xe6b, 0x3c, 0x8, 0x65c, 0x0, 0xfffffff8]}) 31m56.336614992s ago: executing program 1 (id=212): socket$nl_netfilter(0x10, 0x3, 0xc) r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) close(r1) r2 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r1, &(0x7f0000000080)={0xa, 0x4e22, 0x0, @empty}, 0x1c) listen(r2, 0x0) r3 = socket$inet_mptcp(0x2, 0x1, 0x106) connect$inet(r3, &(0x7f0000000000)={0x2, 0x4e22, @local}, 0x10) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r4, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000300)={0x20, 0x0, 0x1, 0x0, 0x0, {}, [@MPTCP_PM_ATTR_ADDR={0xc, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @multicast1=0xac1414aa}]}]}, 0x20}}, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000740), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_FLUSH_ADDRS(r5, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000000c0)={0x14, r6, 0x1, 0x70bd2c, 0x25dfdbff}, 0x14}, 0x1, 0x0, 0x0, 0x20000800}, 0x800) close_range(r0, 0xffffffffffffffff, 0x0) 31m56.157771815s ago: executing program 1 (id=213): socket$tipc(0x1e, 0x5, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) getpid() mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) connect$unix(r0, &(0x7f00000004c0)=@abs, 0x6e) r1 = gettid() timer_create(0x0, &(0x7f0000000240)={0x0, 0x21, 0x800000000004, @tid=r1}, &(0x7f0000000040)) prlimit64(0x0, 0xe, &(0x7f0000000240)={0x8, 0x248}, 0x0) io_uring_setup(0x2c93, 0x0) timer_settime(0x0, 0x0, &(0x7f0000000000)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={0x0}, 0x18) mkdir(&(0x7f0000000100)='./control\x00', 0xa0) mount$afs(&(0x7f0000000080)=@cell={0x25, 'syz1:', 'syz1', '.readonly'}, &(0x7f00000000c0)='./control\x00', &(0x7f0000000000), 0x200000, 0x0) 31m54.043861607s ago: executing program 1 (id=218): mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x0) mount$fuse(0x0, 0x0, 0x0, 0xfc5cd7921c2c19c4, &(0x7f0000000400)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=0x0]) mount(0x0, &(0x7f0000000380)='./file1\x00', &(0x7f0000000040)='autofs\x00', 0x0, &(0x7f0000000400)) chdir(&(0x7f0000000080)='./file1\x00') mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x220) r0 = openat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x40000, 0x120) mount(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000000080)='sysfs\x00', 0x1214040, 0x0) r1 = openat$autofs(0xffffffffffffff9c, 0x0, 0x888000, 0x0) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(r1, 0xc018937c, &(0x7f00000000c0)={{0x1, 0x1, 0x18, r0, {0x1}}, './file0\x00'}) 31m54.041725007s ago: executing program 3 (id=219): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) syz_open_dev$sg(&(0x7f00000004c0), 0x0, 0x20c02) r3 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) connect$bt_l2cap(r3, &(0x7f0000000080)={0x1f, 0x0, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x7ff}, 0xe) sendmmsg$inet(r3, &(0x7f0000002d00)=[{{0x0, 0x0, &(0x7f0000002880)=[{0x0}, {&(0x7f0000002780)="d5d9", 0x2}], 0x2}}], 0x400000000000216, 0xc0) io_uring_enter(0xffffffffffffffff, 0x47f6, 0x0, 0x0, 0x0, 0x0) 31m53.017898466s ago: executing program 1 (id=220): r0 = syz_clone(0x1206c100, 0x0, 0xfffffffffffffdc1, 0x0, 0x0, 0x0) r1 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000015c0), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r1, 0xaf01, 0x0) r2 = eventfd(0x0) ioctl$VHOST_SET_LOG_FD(r1, 0x4004af07, &(0x7f0000000240)=r2) ioctl$VHOST_SET_VRING_KICK(r1, 0x4008af20, &(0x7f0000000040)={0x1, r2}) ioctl$VHOST_SET_VRING_ADDR(r1, 0x4028af11, &(0x7f0000000140)={0x0, 0x0, 0x0, &(0x7f0000000180)=""/53, 0x0}) ppoll(&(0x7f0000000000)=[{r2, 0x4040}], 0x1, 0x0, 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000000)={'netpci0\x00'}) timer_create(0x3, 0x0, &(0x7f0000000280)) setsockopt$ax25_SO_BINDTODEVICE(0xffffffffffffffff, 0x101, 0x19, &(0x7f0000000000)=@bpq0, 0xfffffffffffffe1d) ioctl$sock_netdev_private(0xffffffffffffffff, 0x8914, &(0x7f0000000000)) ioctl$sock_ax25_SIOCADDRT(0xffffffffffffffff, 0x890b, &(0x7f00000000c0)={@default, @default, 0x8, [@rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}, @bcast, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @bcast, @bcast]}) r3 = syz_open_procfs(0x0, &(0x7f00000000c0)='task\x00') fchdir(r3) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x2) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) r4 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r4, &(0x7f0000019680)=""/102392, 0x18ff8) socket$inet6(0xa, 0x2, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r5 = openat$comedi(0xffffffffffffff9c, &(0x7f0000000080)='/dev/comedi3\x00', 0x400, 0x0) ioctl$COMEDI_DEVCONFIG(r5, 0x40946400, 0x0) ioctl$COMEDI_DEVCONFIG(r5, 0x40946400, &(0x7f00000000c0)={'adq12b\x00', [0x4f27, 0x2, 0x10000, 0x4, 0xe, 0x0, 0x3, 0x7, 0xa, 0x1, 0x8001, 0x4, 0xff6b, 0x801, 0xfffffffe, 0xb4c, 0x0, 0x2, 0x3, 0x40000003, 0x89, 0xcaa7, 0x201ff, 0x20001e58, 0xb, 0xe6b, 0x3c, 0x8, 0x65c, 0x0, 0xfffffff8]}) 31m52.960551427s ago: executing program 3 (id=221): r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x143042, 0x0) pwritev2(r0, &(0x7f0000000100)=[{&(0x7f0000000080)='!', 0x1}], 0x1, 0x400003, 0x800004, 0x7) lseek(r0, 0xe, 0x3) mkdirat$cgroup_root(0xffffffffffffff9c, 0x0, 0x1ff) r1 = io_uring_setup(0x4a86, &(0x7f0000000300)={0x0, 0x4178, 0x40, 0x8001002, 0x3d7}) r2 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r2, 0x10f, 0x87, &(0x7f0000000040)=@req={0x3fc}, 0x10) r3 = socket(0x1e, 0x4, 0x0) socket$nl_generic(0x10, 0x3, 0x10) sched_setscheduler(0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x5, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000100)=0x2) sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bce) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) bind$alg(0xffffffffffffffff, &(0x7f0000000200)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-serpent-avx2\x00'}, 0x58) setsockopt$packet_tx_ring(r3, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc}, 0x10) sendmmsg(r2, &(0x7f0000003240), 0x4000000000000e4, 0x0) close_range(r1, 0xffffffffffffffff, 0x2) 31m52.058466515s ago: executing program 3 (id=224): openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) socket$rxrpc(0x21, 0x2, 0x2) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80202, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r0, 0x0, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x2, 0x0) fanotify_init(0xf00, 0x0) pselect6(0x40, &(0x7f00000001c0)={0x0, 0x0, 0x3, 0xfffffffffffffffd}, 0x0, &(0x7f00000002c0)={0x3ff, 0x0, 0x0, 0x9, 0x0, 0x0, 0x7fffffff}, 0x0, 0x0) 31m51.075982394s ago: executing program 3 (id=226): r0 = fsopen(0x0, 0x0) fsmount(r0, 0x0, 0x0) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000380)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="180100"/13], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000280)='sched_switch\x00', r1}, 0x18) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x6) r5 = io_uring_setup(0x3c8e, &(0x7f0000000340)={0x0, 0x3, 0x800, 0x2}) r6 = socket$netlink(0x10, 0x3, 0xc) bind$netlink(r6, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) close_range(r5, 0xffffffffffffffff, 0x0) 31m49.993918355s ago: executing program 3 (id=228): mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x0) mount$fuse(0x0, 0x0, 0x0, 0xfc5cd7921c2c19c4, &(0x7f0000000400)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=0x0]) mount(0x0, &(0x7f0000000380)='./file1\x00', &(0x7f0000000040)='autofs\x00', 0x0, &(0x7f0000000400)) chdir(&(0x7f0000000080)='./file1\x00') mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x220) r0 = openat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x40000, 0x120) mount(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000000080)='sysfs\x00', 0x1214040, 0x0) r1 = openat$autofs(0xffffffffffffff9c, 0x0, 0x888000, 0x0) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(r1, 0xc018937c, &(0x7f00000000c0)={{0x1, 0x1, 0x18, r0, {0x1}}, './file0\x00'}) 31m49.654043422s ago: executing program 3 (id=230): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000000)={0x0}}, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) accept4(r0, &(0x7f00000006c0)=@pppol2tpv3in6, &(0x7f0000000780)=0x80, 0x80000) ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, 0x0) faccessat2(0xffffffffffffff9c, 0x0, 0x6, 0x1280) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x400000, 0x3, &(0x7f0000000000/0x400000)=nil) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='tlb_flush\x00'}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r2 = syz_io_uring_setup(0x49a, &(0x7f0000000400)={0x0, 0x79af, 0x3180, 0x8000, 0x40024e}, &(0x7f0000000340)=0x0, 0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r3, 0x4, &(0x7f0000000000)=0xffb, 0x0, 0x4) syz_io_uring_submit(r3, 0x0, &(0x7f00000002c0)=@IORING_OP_STATX={0x15, 0x0, 0x0, 0xffffffffffffff9c, 0x0, &(0x7f00000000c0)='./file0\x00', 0x200}) newfstatat(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', &(0x7f00000001c0), 0x100) io_uring_enter(r2, 0x627, 0x4c1, 0x43, 0x0, 0x0) r4 = syz_open_dev$sndctrl(&(0x7f0000000180), 0xb, 0x121841) ioctl$SNDRV_CTL_IOCTL_ELEM_WRITE(r4, 0xc4c85513, &(0x7f00000001c0)={{0x2, 0x5, 0x7, 0xff, 'syz0\x00', 0xffe0}, 0x1, [0x0, 0x3, 0x8001, 0x0, 0xb1a4, 0xaf8c, 0x4, 0xb, 0x70c, 0x7, 0x5, 0x7, 0xfffffffffffffffa, 0x80000000401, 0x2, 0x2, 0x2, 0x3, 0x6, 0xfffffffffffffffd, 0x9, 0xfffffffffffffffc, 0x1, 0x101, 0x8000000000000001, 0x3, 0x7, 0x0, 0x100000001, 0x8, 0xa, 0x9, 0x6, 0x6, 0xfff, 0x1, 0x4, 0x8, 0x9, 0x4, 0x2, 0xa5a, 0x3, 0x400000000, 0x2, 0xffffffff, 0x2, 0x208, 0xa2e, 0x10, 0x4, 0x2, 0xc, 0x1, 0x8, 0x5, 0x0, 0x0, 0x2, 0x8, 0x6, 0x6, 0x7fffffff, 0x400, 0x6, 0x8, 0x7, 0x8, 0x3, 0xff, 0x6d6, 0x0, 0x3, 0x7, 0xffffffffffffffbe, 0x60, 0x19, 0x7, 0x101, 0x2, 0xffffffffffffff66, 0x3, 0x1, 0x6, 0x5e, 0xaf, 0x2, 0x0, 0x6, 0x5, 0x3, 0x3, 0xd, 0x7, 0x5b9, 0x2000000, 0x4, 0x89b7, 0x946, 0x800, 0xffffffffcb5b2d7d, 0x3, 0xc3f, 0x5, 0x4, 0x4fbcc26, 0x3, 0x5, 0x1, 0x7, 0x1, 0x8001, 0xfffffffffffffffe, 0x7, 0x5, 0x89, 0x2, 0xf8b, 0x8, 0x80, 0x4, 0x7, 0xb11, 0xaf, 0x5, 0x1, 0xd, 0xfffffffffffffffa]}) 31m48.7239615s ago: executing program 0 (id=231): r0 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) r1 = socket$rxrpc(0x21, 0x2, 0x2) setsockopt$RXRPC_MIN_SECURITY_LEVEL(r1, 0x110, 0x4, &(0x7f0000000040)=0x1, 0x4) r2 = ioctl$KVM_CREATE_VCPU(r0, 0xae41, 0x0) timer_settime(0x0, 0x1, &(0x7f0000000340)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) sched_setscheduler(0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20008b}, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000180)=0x1400200bce) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x1) r3 = syz_open_dev$MSR(&(0x7f0000000200), 0x0, 0x0) read$msr(r3, &(0x7f0000002700)=""/102392, 0x18ff8) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$SEG6(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$SEG6_CMD_SETHMAC(r4, &(0x7f00000004c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000300)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="01000000000000000000010000000500050001000000080004000000000005000600000000000800030001"], 0x34}}, 0x0) r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="0600000004000000080000000800000000000000", @ANYRES32=r4, @ANYBLOB='\x00'/20, @ANYRES64=r0, @ANYRES32, @ANYRESHEX=r4], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0x11, 0xc, &(0x7f0000000400)=ANY=[@ANYRES32=r6, @ANYBLOB="0000000000000000b7080000c7de00027b8af8ff00000000bfa200000000000007020010f8ffffffb707000008000000b70400000000000085000000030001009500000000000000a02d1f5a228270cc69cfc66923f79d235bafed06a7c56400ab84689752e1d03b11515df11b5227a291bd286f16eac532d7270adf2b397903db49757a"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x7a, '\x00', 0x0, @fallback=0x14, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1, 0xc, 0x0, &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x23, '\x00', 0x0, @fallback=0xe, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000500)='page_pool_state_release\x00', r7}, 0x10) r8 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xc, 0x0, &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000280)={r8, 0x2000300, 0x7, 0x0, &(0x7f0000000000)="63eced8e46dc3f", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x50) r9 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r9, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000540)=ANY=[@ANYBLOB="380000001000000400000000fddbdf1a00000000e3a84464b4c18c23c597c5f514b823dcd1d04b04e2942644b5b6937dd79d6d8bab986612d4f339f029225be365a6feff48fcee36cdd1f60e805ede7980a84ce30e6294727d80f5fbeee908a9dd856467ed3e9400f632a1494442f1db770bcd3925c67b56d654666c3b45cefc1e64032f8d46d641777fa96c3e96b5f84913232b82bc4ae77b43a03899342bc65e9b2e8e32ccd9901f69a8772e57", @ANYRES32=0x0, @ANYBLOB="830405004dc4040018001280080001"], 0x38}, 0x1, 0x0, 0x0, 0x40000}, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_SET_GUEST_DEBUG(r2, 0x4048ae9b, &(0x7f00000001c0)={0x70003, 0x0, [0x7, 0xb, 0x2, 0x9, 0x1ff, 0x6, 0x3000000002, 0x1]}) 31m47.857681277s ago: executing program 0 (id=234): openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) socket$rxrpc(0x21, 0x2, 0x2) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80202, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r0, 0x0, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x2, 0x0) fanotify_init(0xf00, 0x0) pselect6(0x40, &(0x7f00000001c0)={0x0, 0x0, 0x3, 0xfffffffffffffffd}, 0x0, &(0x7f00000002c0)={0x3ff, 0x0, 0x0, 0x9, 0x0, 0x0, 0x7fffffff}, 0x0, 0x0) 31m46.953284004s ago: executing program 0 (id=236): r0 = fsopen(0x0, 0x0) fsmount(r0, 0x0, 0x0) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000380)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="180100"/13], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000280)='sched_switch\x00', r1}, 0x18) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x6) r5 = io_uring_setup(0x3c8e, &(0x7f0000000340)={0x0, 0x3, 0x800, 0x2}) r6 = socket$netlink(0x10, 0x3, 0xc) bind$netlink(r6, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) close_range(r5, 0xffffffffffffffff, 0x0) 31m45.954258673s ago: executing program 0 (id=237): socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, 0x0}, 0x84) syz_genetlink_get_family_id$ethtool(0x0, 0xffffffffffffffff) sendto$rxrpc(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x5, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x1) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000032680)=""/102392, 0x18ff8) r2 = socket$inet6(0x10, 0x3, 0x0) sendto$inet6(r2, &(0x7f0000000140)="1ba0000016001d0d89fdc5cbdd045798707bed4dca141a780f0f8e", 0xff3b, 0x0, 0x0, 0x0) recvfrom$inet6(r2, 0x0, 0x0, 0x0, 0x0, 0x0) 31m45.473872853s ago: executing program 0 (id=238): mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x0) mount$fuse(0x0, 0x0, 0x0, 0xfc5cd7921c2c19c4, &(0x7f0000000400)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=0x0]) mount(0x0, &(0x7f0000000380)='./file1\x00', &(0x7f0000000040)='autofs\x00', 0x0, &(0x7f0000000400)) chdir(&(0x7f0000000080)='./file1\x00') mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x220) r0 = openat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x40000, 0x120) mount(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000000080)='sysfs\x00', 0x1214040, 0x0) r1 = openat$autofs(0xffffffffffffff9c, 0x0, 0x888000, 0x0) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(r1, 0xc018937c, &(0x7f00000000c0)={{0x1, 0x1, 0x18, r0, {0x1}}, './file0\x00'}) 31m45.250167997s ago: executing program 0 (id=239): getpid() getpid() prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) connect$unix(0xffffffffffffffff, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000000), 0x651, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$BPF_GET_BTF_INFO(0xf, &(0x7f0000000380)={0xffffffffffffffff, 0x20, &(0x7f0000000280)={&(0x7f00000004c0)=""/224, 0xe0, 0x0, &(0x7f0000000a00)=""/4096, 0x1000}}, 0x10) r2 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r2, &(0x7f0000001ac0)={0x0, 0x0, &(0x7f0000000440)=[{&(0x7f0000000000)=ANY=[@ANYBLOB="140100001400210200000000fcdbdf25031100800c0002"], 0x114}], 0x1}, 0x40014) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f00000005c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r1, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socket$inet(0x2, 0x2, 0x0) bind$alg(0xffffffffffffffff, &(0x7f0000000000)={0x26, 'rng\x00', 0x0, 0x0, 'drbg_nopr_ctr_aes128\x00'}, 0x58) socket$netlink(0x10, 0x3, 0x0) 31m43.194099507s ago: executing program 2 (id=243): io_setup(0x6, &(0x7f00000003c0)=0x0) r1 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x62081, 0x0) io_submit(r0, 0x1, &(0x7f00000000c0)=[&(0x7f0000000000)={0x0, 0x0, 0x0, 0x5, 0x0, r1, 0x0}]) r2 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000040), 0x8002, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f0000000300)=@abs, 0x6e) socket$nl_audit(0x10, 0x3, 0x9) sendmmsg$unix(r4, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg(r4, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0xb4c, 0x9, 0x6, 0x0, 0x3}, 0x0) sendmsg$NL80211_CMD_NEW_STATION(0xffffffffffffffff, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000001040)={&(0x7f00000004c0)=ANY=[@ANYBLOB="1c000000", @ANYRES16=0x0, @ANYBLOB="d93c3979db996d1c840ab40697d7281cd758d64c70f852a5e15edbe646cd0f03dd2d697423615b73684c141e61752f8c91460dfe6ce21bd90f07f28c2298b4656d07"], 0x1c}}, 0x0) r5 = syz_open_dev$usbfs(&(0x7f0000000100), 0x76, 0x101301) ioctl$USBDEVFS_DISCONNECT_CLAIM(r5, 0x8108551b, 0x0) r6 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r7 = ioctl$KVM_CREATE_VM(r6, 0xae01, 0x0) r8 = ioctl$KVM_CREATE_VCPU(r7, 0xae41, 0x0) ioctl$KVM_SET_MSRS(r8, 0xc008ae88, &(0x7f0000000080)={0x1, 0x0, [{0xc0010003, 0x0, 0x4}]}) r9 = open$dir(&(0x7f0000000240)='./file0\x00', 0x800, 0x100) openat$incfs(r9, &(0x7f0000000280)='.log\x00', 0x800, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000140), 0x8417f, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, 0x0) r10 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x189240, 0x0) ioctl$TUNSETIFF(r10, 0x400454ca, &(0x7f0000000000)={'\x00', 0x2}) ioctl$TUNSETTXFILTER(r10, 0x400454d1, 0x0) ioctl$USBDEVFS_CLAIM_PORT(0xffffffffffffffff, 0x80045518, &(0x7f0000000000)=0x1) ioctl$USBDEVFS_BULK(r5, 0xc0185502, &(0x7f0000000380)={{{0xf}}, 0x4a, 0x6, &(0x7f00000001c0)="99ba00a7504a61422015234472a6dd06c922df098ea59d3a34e59164b56488280af5a015b5a82d8b93d1ba7e5056f5d6c1a7178da6d4cb7e1c1e3e45de1236c3b1d5e18cef67166b1a52"}) write$P9_RSTATu(r2, &(0x7f0000000080)={0x50e, 0x7d, 0x0, {{0x500, 0x1f8, 0x0, 0x40, {0x0, 0x0, 0x2}, 0x0, 0x0, 0xc, 0x0, 0x10f, '\x04nodZ=\xbfd`\xd2\xc2\x97D,\x027\xfcb%\xff\xff\xff\x80\x05\x00\x00\x00\x00\x00\x00\xff\x03\xff\x92\xe9\x16\x00\x05\x00\x00\x00,\x93\xcb=\xb6\xc21\xd1\x19\xaa\xa1ou\xc5\x8f\xa6\x88\x9f\xf3\xc8\xf7\xab\xc6\x1bY\xa1\xd2o\fJ\xf8\xe2\x93\xd3\xf8l\xcd\xc6o\xf5{\xe9\x00\x00\x00\x00\x00\x00\x00\x03\xd5\x89-\x8e\xfe\xbb\x9e\x05\xac\nk\xc5)`z\xc6\x8a8\x13\xaf\xe7\x9e\x85cj\xfdl]\x15\xb2\xae\xbb\xb7\xee;\x1e\xae\x8a\x7f\xbe.\x85\x88s\x14\xcb\xec\xf0\xa1\xa5\x124z\x8c\x15\xb3 \xd1\xe1\xc0\x10Uz\xaaw\x16^Q`208^|\'\x01\x00\xacB3\x00D\xa9\b=\xe5\xbe\xd8\xe0\xbd(h\"\x94\xf68\xc3\x8e%uj\xb0\xb0\x7fe\xdb\xd6$\xee\x95_}\xa7\x8e\xe1\x96I7?0\xe3\xf7\xb9d\xf0\xa2f\xc3\xac\x9ePwS\xa3\xc4\x03\xc8{\xf1Jv\x87%\x91h\xb4[\xbdz\x1f\xd8`\x0e\xa1.\x00\xdb\xfeL\x1a\xfe\xea\xaf\x9d{\xb4\xa7Z\x1c\x82\x18\x93\xf7\xf4|\xff\xeb\t\xb55\x1f[\xde\x05@\x00\x00\x00Y_\xcb\x14\x03CT\xb9\xfd\x9e\xf1\x96\xa5\x1c\xd5\x15z\xdc\x81\x06\xb4\x94\xe1', 0x35, '\xcf`7-a\xcc\xea\xb8\xc8\x86A\xeb\x93\xb4\xcc\xf6\x00*\xb8{\xfc\x01\'\x96\t?h0\\M\" \x83~\x01\b\xe2\xe7HP\x1cQHK\xa0/\x10\x9c\xaa\xf9\x15\t\xa2', 0x56, '\xf8\xf6i\xfbqk\xcf1^\xca\xf3\x85@\x9a\xc6[\x94\bg\x8c,;\x9e\x1dR\xc3l\xde{\xa4\xa4\x00\xb4\xb0\xb4\xf1t\xa6f\xa8R\x9aE\x1b4\a\xdb\xda\xb2\x88K\xaf\x05\x00\x00\x00\x00\x00\x00\x00G\xec!\xca\xbf\xf2\x0f\x9c\x15\xbe6\xf4\xfd\x1aL\xdb\x80\xe8\xd4\a\x00\x00\x007\x00C'}, 0x301, 'odev/n\xb1{#\x00\xf9\xda\xa5\xee#&n\xcf\x85\xfe\xa6^B\xd9y\xa3\xfd\xe5\xf4u\xda\xf0;\x11r\xd9{\xad\xc7\tZ\xfdv\xfeO\fA\xf7\xf7t\x1e\xac\x03\x00\x00\xec\xff\x00\x00\xdb\xa0\xc2\xf7\xf0\x9f\xf5<~M\x1a\xd6n-\a\x01\x98\x01\x9f0\x11\x84G\xaau\xf8$k\xccB\xea\xa8\xc61\xc0\xc5\x00\x95\x9at\xf5\x16\x85\xf5\x06\xae\x89H\x06\x87\x82g\xd5\xa1)\x8dy,J7\xf2\xe1\xcb\xbd$\x82\x92\x9a\r\x89r\xb5\xcfs.\xa5\xb0\xd7#\x85\x93\xae\xd3\xb4.\xe7\xca\xc0}\xe0\x9d\x1dh\xa6\x033\xa8\x82F}+1\xaa\xfbV\xc5}}\xc6&\xe49\a\x96\xa1\xebH\'Fi\xab\x13\xf8\xb1\x1d\x14`Y\xf3\x10\xe2cMY?\xece\xd5)\xf3\x82\x06fd\xc0\xfbNL\x90W\np\x04\x9f9\x9f\x06\x1fu\xb7y|\xe1\xfe\x11\xea\x91\x96\t\xd5\x1aA\xdd=\xe3\x04\xbd|~\xd0\xa4V\xf0\xae\x12.a\x05\xc9\xce\x88}\xf5\xa6\xe0\xb6\xa7}Yl\xf8\x8b\xa6\xe5\xc69|}P!\xd7\x98\x95(\xfd\x179\xe1\xc2\xd8\x7f\xc2\x00\x00\x000\xe4\xee+\xfc\x7f\x80P\x85\x11C\xe5\x16\x1a\xcdG\x15\n\xcb\xaft8\"\xdf\xe2\x03\xb1\b\xd3~\x91M\xc1\xe5>#LP\x9e\xcaA\a\xa1q,\xaa\x9d\xa5=\x05\x1c6\x88Ly\x18&a\xf3\xca6\xbc\xdb\xfb\xbd&q\t\xf81\x9d\x8d\xd5\xc0p\x99\xeb\x1b\x11\x03\x06U\xf5biOat=\x19B\x1bJ\x19\xef\x8b\x8bL\xe9\xc9\x93\xc7\xd6\xcb0\fNezNP\xa3[\\\xc1k\x8c\x16\x1a\x8e=\xf9\x03k\xbc\xf2\x8a\xdc\xd1\x9alL)\x17\t\xae\xe5\xab>[\xc5\xae)\xf4u\xe4\xd2D\b\xb5\x16}\x0f\xaf_\xc1Vkp\\\x8b`\xaf\xa8\xac\xa4/~\x04i\x18\x8a\x0e\xf0b\xca\x18\xe3\x8f\x9e\xe1\n\xc7}+~\xb9\xd6\x0e\xa7\x9f\xdbUd\x11H[\x1b\x13\xdb\xb8\xa2\xa6b.\xbc\xf8Lio\xa4\xda!\xba\xd22\r\rh\xe9\xbfCF\xf0ha\x19\xa3\x9e@\x03\x95\xc8\xf2\x82^\xa0i\xae\x0e\x14;\xd1\xa4Ay\xedlTp,^\x9a\x19\xcc\x7f\xfaP\x0f\xa4\x1bl\x80I\xbd\xe4X\'\xd5N\xc9\x01\xd2z\xd1%\x05h\x89\xb33k?\x06\x83\x8c[fz\xe2.\xfe;\xc1[\x82_\x7f\xbc\xe4\x80\'(\x1c\xf9\xfe\x8f\xc2\x1f\xc7|$=\xe2g\x051\x0e\xb8\x1c\xf7M\xe0)1\x92\xa1?j\xd0W\xdea\xfd\x8a\xba\x8e\xf4C\x9b\xc0jE\xb2\xb01bQZ#C:\xfe\xb5*\xed\xb5\xabo3FS8\x05\x15\xf7y\xf3]\xc8\xa7\x8c7w$\x92\xa2(L!\xd2\x13V\xd4s\xf0\x0f\x85\x13|{\xf0cou}5(\x86\x9b?\x00w5\xcf\xf8\\\x9d\x97\x8b\xf5]\xcc&\xd6-%\xe3\b\xf0\x88\'\xa9\x1f\xf4{\xec\x92\xf8\xe9\x1ey\bfT\x00\xaaN9\xb3Y\x86#\x9d\\{\x94\x92\xc5\xbb&\xbcU\xb5[I\xedpHnn}\xa3\x8c \x84P\xf9\xf7\x9e\x1bA\x00'/769, 0xffffffffffffffff, 0xee01}}, 0x50e) 31m41.939964521s ago: executing program 2 (id=244): r0 = socket(0x2, 0x5, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newtaction={0x60, 0x30, 0x20, 0x0, 0x0, {}, [{0x4c, 0x1, [@m_ife={0x48, 0x1, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x60}, 0x1, 0x0, 0x0, 0x804}, 0x0) prlimit64(0x0, 0xe, &(0x7f00000001c0)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x0, 0x0) sched_setscheduler(r1, 0x2, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sendmsg$RDMA_NLDEV_CMD_NEWLINK(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000001200)={&(0x7f00000004c0)={0x38, 0x1403, 0x1, 0x70bd2d, 0x0, "", [{{0x9, 0x2, 'syz0\x00'}, {0x8, 0x41, 'siw\x00'}, {0x14, 0x33, 'lo\x00'}}]}, 0x38}, 0x1, 0x0, 0x0, 0x854}, 0x0) connect$inet(0xffffffffffffffff, &(0x7f0000001980)={0x2, 0x1, @loopback}, 0x10) connect$inet6(0xffffffffffffffff, &(0x7f0000000200)={0xa, 0x0, 0x0, @empty}, 0x1c) setsockopt$SO_TIMESTAMPING(0xffffffffffffffff, 0x1, 0x41, &(0x7f0000000000)=0x655e, 0x4) write$tun(0xffffffffffffffff, &(0x7f0000000180)=ANY=[@ANYRES64, @ANYRESHEX=r1], 0x46) recvmmsg(0xffffffffffffffff, &(0x7f00000049c0)=[{{0x0, 0x0, 0x0}}], 0x1, 0x2000, 0x0) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$netlbl_cipso(&(0x7f00000002c0), r4) sendmsg$NLBL_CIPSOV4_C_ADD(r4, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)={0x50, r5, 0x1, 0x70bd27, 0x25dfdbfb, {}, [@NLBL_CIPSOV4_A_DOI={0x8, 0x1, 0x3}, @NLBL_CIPSOV4_A_TAGLST={0x2c, 0x4, 0x0, 0x1, [{0x5, 0x3, 0x1}, {0x5}, {0x5, 0x3, 0x2}, {0x5}, {0x5, 0x3, 0x2}]}, @NLBL_CIPSOV4_A_MTYPE={0x8, 0x2, 0x2}]}, 0x50}}, 0x0) ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f0000000280)={'macvlan1\x00', &(0x7f00000000c0)=@ethtool_cmd={0x1, 0x9, 0x8, 0x82e8, 0x2, 0x2, 0x4, 0x9, 0x8, 0x1, 0x5, 0x6, 0x5ef, 0x9, 0xbe, 0xd1, [0x1, 0xf2]}}) 31m40.939733281s ago: executing program 2 (id=245): r0 = fsopen(0x0, 0x0) fsmount(r0, 0x0, 0x0) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000380)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="180100"/13], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000280)='sched_switch\x00', r1}, 0x18) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x6) r5 = io_uring_setup(0x3c8e, &(0x7f0000000340)={0x0, 0x3, 0x800, 0x2}) r6 = socket$netlink(0x10, 0x3, 0xc) bind$netlink(r6, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) close_range(r5, 0xffffffffffffffff, 0x0) 31m39.978078279s ago: executing program 2 (id=246): r0 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_TX_BITRATE_MASK(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000640)={0x2c, r0, 0x1, 0x70bd27, 0x0, {{}, {@val={0x8, 0x3, r1}, @void}}, [@NL80211_ATTR_TX_RATES={0x10, 0x5a, 0x0, 0x1, [@NL80211_BAND_2GHZ={0xc, 0x0, 0x0, 0x1, [@NL80211_TXRATE_LEGACY={0x6, 0x1, [0x48, 0x2]}]}]}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4010}, 0xc0) 31m39.870191321s ago: executing program 2 (id=247): mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x0) mount$fuse(0x0, 0x0, 0x0, 0xfc5cd7921c2c19c4, &(0x7f0000000400)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=0x0]) mount(0x0, &(0x7f0000000380)='./file1\x00', &(0x7f0000000040)='autofs\x00', 0x0, &(0x7f0000000400)) chdir(&(0x7f0000000080)='./file1\x00') mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x220) openat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x40000, 0x120) mount(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000000080)='sysfs\x00', 0x1214040, 0x0) r0 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000000), 0x888000, 0x0) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(r0, 0xc018937c, 0x0) 31m39.849687772s ago: executing program 2 (id=248): socket$nl_rdma(0x10, 0x3, 0x14) r0 = socket$inet6_mptcp(0xa, 0x1, 0x106) ioctl$sock_inet6_SIOCDELRT(r0, 0x890c, &(0x7f0000000140)={@private1={0xfc, 0x1, '\x00', 0x1}, @rand_addr=' \x01\x00', @mcast2, 0x8, 0x3c80, 0x85, 0x400, 0x1, 0x200170}) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg(r2, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x9, 0x0, 0xfffffffffffffffd, 0x400009, 0x8, 0xa}, 0x0) syz_open_dev$media(0x0, 0x80000006, 0xd01840) socket$netlink(0x10, 0x3, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000006940)=[{{0x0, 0x0, 0x0}, 0x3}], 0x1, 0x2, 0x0) socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000080)) r3 = socket(0x10, 0x803, 0x0) ioctl$sock_SIOCETHTOOL(r3, 0x8946, &(0x7f0000000140)={'veth0_to_team\x00', &(0x7f0000000280)=@ethtool_channels={0x3d, 0xffffffff, 0x0, 0x0, 0x4, 0x2, 0x1}}) ioctl$sock_SIOCETHTOOL(r3, 0x8946, &(0x7f00000002c0)={'veth0_to_team\x00', &(0x7f0000000000)=@ethtool_cmd={0x38, 0x2, 0x818, 0x0, 0x0, 0x0, 0x2, 0x7, 0x9, 0x8, 0x0, 0x8001, 0x6, 0x9, 0x0, 0x3, [0x1, 0x6]}}) ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x1) socket(0x10, 0x3, 0x0) timer_create(0x0, 0x0, &(0x7f0000000300)) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b00000000000000000000000080000000000000", @ANYRES32, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\x00\b\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x1, 0x14, &(0x7f0000000140)=ANY=[@ANYBLOB="180000000200000000000000fcffffff18110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf090000000000005509010000000000950000000000000085000000a000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7020000010000008500000086000000bf91000000000000b7020000000000008500000085000000b70000000000000095"], &(0x7f0000000000)='GPL\x00', 0xa, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x30, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 31m37.803461962s ago: executing program 32 (id=220): r0 = syz_clone(0x1206c100, 0x0, 0xfffffffffffffdc1, 0x0, 0x0, 0x0) r1 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000015c0), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r1, 0xaf01, 0x0) r2 = eventfd(0x0) ioctl$VHOST_SET_LOG_FD(r1, 0x4004af07, &(0x7f0000000240)=r2) ioctl$VHOST_SET_VRING_KICK(r1, 0x4008af20, &(0x7f0000000040)={0x1, r2}) ioctl$VHOST_SET_VRING_ADDR(r1, 0x4028af11, &(0x7f0000000140)={0x0, 0x0, 0x0, &(0x7f0000000180)=""/53, 0x0}) ppoll(&(0x7f0000000000)=[{r2, 0x4040}], 0x1, 0x0, 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000000)={'netpci0\x00'}) timer_create(0x3, 0x0, &(0x7f0000000280)) setsockopt$ax25_SO_BINDTODEVICE(0xffffffffffffffff, 0x101, 0x19, &(0x7f0000000000)=@bpq0, 0xfffffffffffffe1d) ioctl$sock_netdev_private(0xffffffffffffffff, 0x8914, &(0x7f0000000000)) ioctl$sock_ax25_SIOCADDRT(0xffffffffffffffff, 0x890b, &(0x7f00000000c0)={@default, @default, 0x8, [@rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}, @bcast, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @bcast, @bcast]}) r3 = syz_open_procfs(0x0, &(0x7f00000000c0)='task\x00') fchdir(r3) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x2) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) r4 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r4, &(0x7f0000019680)=""/102392, 0x18ff8) socket$inet6(0xa, 0x2, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r5 = openat$comedi(0xffffffffffffff9c, &(0x7f0000000080)='/dev/comedi3\x00', 0x400, 0x0) ioctl$COMEDI_DEVCONFIG(r5, 0x40946400, 0x0) ioctl$COMEDI_DEVCONFIG(r5, 0x40946400, &(0x7f00000000c0)={'adq12b\x00', [0x4f27, 0x2, 0x10000, 0x4, 0xe, 0x0, 0x3, 0x7, 0xa, 0x1, 0x8001, 0x4, 0xff6b, 0x801, 0xfffffffe, 0xb4c, 0x0, 0x2, 0x3, 0x40000003, 0x89, 0xcaa7, 0x201ff, 0x20001e58, 0xb, 0xe6b, 0x3c, 0x8, 0x65c, 0x0, 0xfffffff8]}) 31m33.76199875s ago: executing program 33 (id=230): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000000)={0x0}}, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) accept4(r0, &(0x7f00000006c0)=@pppol2tpv3in6, &(0x7f0000000780)=0x80, 0x80000) ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, 0x0) faccessat2(0xffffffffffffff9c, 0x0, 0x6, 0x1280) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x400000, 0x3, &(0x7f0000000000/0x400000)=nil) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='tlb_flush\x00'}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r2 = syz_io_uring_setup(0x49a, &(0x7f0000000400)={0x0, 0x79af, 0x3180, 0x8000, 0x40024e}, &(0x7f0000000340)=0x0, 0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r3, 0x4, &(0x7f0000000000)=0xffb, 0x0, 0x4) syz_io_uring_submit(r3, 0x0, &(0x7f00000002c0)=@IORING_OP_STATX={0x15, 0x0, 0x0, 0xffffffffffffff9c, 0x0, &(0x7f00000000c0)='./file0\x00', 0x200}) newfstatat(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', &(0x7f00000001c0), 0x100) io_uring_enter(r2, 0x627, 0x4c1, 0x43, 0x0, 0x0) r4 = syz_open_dev$sndctrl(&(0x7f0000000180), 0xb, 0x121841) ioctl$SNDRV_CTL_IOCTL_ELEM_WRITE(r4, 0xc4c85513, &(0x7f00000001c0)={{0x2, 0x5, 0x7, 0xff, 'syz0\x00', 0xffe0}, 0x1, [0x0, 0x3, 0x8001, 0x0, 0xb1a4, 0xaf8c, 0x4, 0xb, 0x70c, 0x7, 0x5, 0x7, 0xfffffffffffffffa, 0x80000000401, 0x2, 0x2, 0x2, 0x3, 0x6, 0xfffffffffffffffd, 0x9, 0xfffffffffffffffc, 0x1, 0x101, 0x8000000000000001, 0x3, 0x7, 0x0, 0x100000001, 0x8, 0xa, 0x9, 0x6, 0x6, 0xfff, 0x1, 0x4, 0x8, 0x9, 0x4, 0x2, 0xa5a, 0x3, 0x400000000, 0x2, 0xffffffff, 0x2, 0x208, 0xa2e, 0x10, 0x4, 0x2, 0xc, 0x1, 0x8, 0x5, 0x0, 0x0, 0x2, 0x8, 0x6, 0x6, 0x7fffffff, 0x400, 0x6, 0x8, 0x7, 0x8, 0x3, 0xff, 0x6d6, 0x0, 0x3, 0x7, 0xffffffffffffffbe, 0x60, 0x19, 0x7, 0x101, 0x2, 0xffffffffffffff66, 0x3, 0x1, 0x6, 0x5e, 0xaf, 0x2, 0x0, 0x6, 0x5, 0x3, 0x3, 0xd, 0x7, 0x5b9, 0x2000000, 0x4, 0x89b7, 0x946, 0x800, 0xffffffffcb5b2d7d, 0x3, 0xc3f, 0x5, 0x4, 0x4fbcc26, 0x3, 0x5, 0x1, 0x7, 0x1, 0x8001, 0xfffffffffffffffe, 0x7, 0x5, 0x89, 0x2, 0xf8b, 0x8, 0x80, 0x4, 0x7, 0xb11, 0xaf, 0x5, 0x1, 0xd, 0xfffffffffffffffa]}) 31m30.857004137s ago: executing program 4 (id=251): r0 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r0}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) r1 = open(&(0x7f00000005c0)='./file0\x00', 0x2a4c0, 0x13) r2 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000340), 0x42, 0x0) mount$fuse(0x0, &(0x7f0000000a40)='./file0\x00', &(0x7f0000000000), 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r2, @ANYBLOB=',rootmode=00000000000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_i', @ANYRESDEC=0x0]) read$FUSE(r2, &(0x7f0000006380)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r2, &(0x7f0000000100)={0x50, 0x0, r3, {0x7, 0x1f, 0x0, 0x0, 0x0, 0x7ff, 0xbf5}}, 0x50) syz_fuse_handle_req(r2, &(0x7f00000041c0)="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", 0x2000, &(0x7f0000000e40)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000500)={0x20, 0x0, 0x0, {0x0, 0x18}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r4 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x20d01, 0x0) close_range(r1, r4, 0x2) syz_fuse_handle_req(r2, &(0x7f0000000f00)="8e70073c23ce0561d4ea11c04a536f64c22e4b1ae368164536088298c749c6c4cd9cf4ca01b6052b508054309db879ab731cb9248b4fe3843ecf6a9c055baef1634d07299c08a5e5138b01208cefbadb7a75b641b2d2dd4a60b546f058dac06180ef64d154b11611eecb8685afd9f76028f46fbb2b3e9a34ca58a33c49f4b86f9f0b12e711cce06dc3c83d4a934301f1e9a448125655c5db44ff2e81ef38f3311e42c557128bc15d8e5c8d96fb448e9ef60678fe85ad00225015f3928de202e72f3d9250d8341099e589aa0ffbf42607851160dede186719b21d632ab37ad1f217b885b9728cb85ff75acd24cc025b4666435fc0f58c22f4e952a27dd08943eb823db68d04f91692c29e75f73cc650a8ef3ee8fcab623a8c52474e57d1fb71da7b528eb91a9c36b880d6387fc441ae1aef9365bc55d999fa37511c84066be1ca3c8c95c5a2429a2e75519254a862f9c479dda695fe3800a263ba46b398649dd77bf5af33614c76a9e18cef83b5b28da5dc87e2ce288e0c1ff3e0c56866e99580471f45c641ec1f1c9840cf2cd2db3dff3f2d5f5c47517836fb42f5132105e89455178585ec20599e64332059efa5dbedc901b249e9e3be819111c56b8980b3f21ab23881bb57f3adc32130a009c22864b30369fa65e484c3d43a0af64eadc3974e72a9d9bf6452f7c72acb40d276d7dd4f45d623ff7de2bc3147a45d96b988db3c3592ca0a3c0b4d43ad41f3ae546b07b82f0c3a93cc3c019540f574053ca015e9db2ef203cdc20f70ffdd0150aa240fc34529f50ffe1a3918ae02f0e76732458a3c76ae001f1f144de00c3d19afd0a5b6a99f08215de3de98689d2c4626c18834811ac9640399d58d757a900707c86005c60f939c7792adb16325b7cc7c775b42d052e4852eb95da047116220df95089c0043d01524705eeb03ddd58780cca04c4757fc65ec368cc2fc638202dbe0620a0c583758ca6ab954ab247933af065bdd2dd306fb00f5ac4d1896754481e0dce78a6e63bf568bbd06675d7995c131c86fc6ea7ac64651488c12849d3a509eac3c9785002e843f97f7f6acba78c5a7f61f149de8afc0db7019bedda0a225587ee2b53317770a5e5b63373fced5b03c9a454a7fe56ea365228a404ff1682b4326274ab90d0a6ae6742dd429907b229c3bc749ff9c81c85e1293e5d3cef342ae9989e9fd6c3a23130966f05edcc65d9b52e26d36a40237f0a57c0e5fdaf397cfb1c71d7dc62b9e90ec1cdbcd4b8c78e243b3937f2a2fd2301283e9e3eaf87b9666eea78ca8be1e28f1afbccc18ce01a9d29532c6e612af52e5af7d5785378044457ef2dd5534658f9a4608b0fce69fb35b58ba40ba84ce734b46442eda2bc055e2e3bffcfb94071fe88d1280fc5fda0227fb2c50af50df7223fdd6942f54d2c171f5cf2232cb3f7c4d8b8125a5a222e4f4c4c11d71208823a4ca184f9b6054b370f7d15d86cc6e426c81df2a6720551773311b36ee6e6ab8227d93d74991fe15ef9eaf44e4c9f3673a5c95379d9e2bc39299d12378715d62ae9ff815fc0752ffeb819d6dfe1a6484905938436a887b1eeace1bb308a8467056b6a7e30c3131655381efa7c9713e3885e57282641794acb88df50f8193eead01ebfadd1ef5b087a589dc898f29490c48c186d9ca512bc021a364568dc7dd3375d2bbf9e6c79ea7607b353ae743f58deb4d4daa9dacf90879c698bc4159ce3b1d0fc099b704ae00b822684ddc32167b24af6cfbfb57a31c98b336a4822a4e65c0309f75a0dcf5e39e283ffc66d3c03d5e26daab1bb020720eb94dcb881e02cb3e49ee0328818285ee001cf9753c8a427850ef91824b66b0909ecad85986c11a8f8518546ee90132fffd9f7ff544fa27bf8adb0d6c0bc2c685b689290b2a1b3cf34de13271ed3dd8ff2a1ed152fdb1f45aa44bb38ec2ae491f001e851dbff5d49e4f37d8e58fe1f9009f01332b1307a2d48df676b9bd6eccaa9d01d4166dd761c3c63564eb905bbad30246021aeb7a63dbd5158b584092ec4fef88790b57885ca02e9454cd0dffc44a0ba1d191b0dae699663098c04362f189ceb1d93c1f349b0afaac289e347babcf96445fe8dfe9ba57f8dd0c2530e6f2b34ca2937caf6228ff0e9256f376ee0a0a4040df62a15240157dfdb743a286c778d1ef260f1626a5eddb7e60e29bf466f00196a300edae9c1147f9eaeac734dedda940d77d43afd688bc7ecabd43a14994509bc66d60a6aaa8a20515b448eb292e2b4d4ecfd4b61e25951e0a613ecd34bc54d9bbf54aa768c7757286d594d2319cc14790f1da2156bf72f3e713e2751f40f05ea5518b0162567d799ff93aa7542a1cd6f0a295cc291f67654007b7d35d6a59e2e69e0ad411be58fdd2021753ee54a426bf74774e2902d3eb1192ab3f7d6dec5c87936fdc18b6d871fedd482bea9365bfa979d721319d41493dcaf2a8b67279767b4a7b58b9817d7d104032e13338c5a5c5f3d78deaa552d6fb02d6b78c7c90d532bcc6bbabe985e85da71f370fad6f97cea640d4c812d076e37fe149e743ad0bd66a05a312f23b861b0cdca46d2d89bdd8fcce28cbacd1e1b1ee99c7ed0145f61d0993bfd485f5b87a21605f3afdcbf41df0bbc667da4717a6f1a92b8a526d27b4228f121445004039ba82b1dbee092061daf716e6b2b6789a085819c132b9bbbdcd7c1c99a6af0476337a9206be0bc9b72c13a691e86ed2e789fa6da651c99bcb349cbd8bb4fa74d14bca7e5814f383ee11ba46c85e9f8b6fc040ef5318737678bd256ba8cd4e8779d341f45e7d8b72794689437a68edb0578dbf412b8a9498eabd817af5bf94b703fb38be5353744d8ce921dd1b7fb6e168a09bedb5367fc8bfb16e3a69c0bbdd2e3b94c2067b0509e08a45235cda7edab56aa7e3811b4f40287f81266e2e43693726e2d2d3b5f58648f59ea0ae0d9f6424508787740371e9a6b8e58980c489de07e1d58b7b39a4d973cc6bbcbfe3184babf0106a697b3eaa57be43fcdbe4d7ff5b497871a45b419437ca483400f0c36123d5afe8a1dc85ac204e8893272daca062623d37f76a739039017d53a5562579c1bad5c3275759d13618d2bd4e34ed84863074249bd19f176aa0ebbae220d305d61019ff3aadedae7838b8230e3dd126610392718b1560036853df7c2b1ac1369a5b4960344fdb30c30548ec9af8e18da99235136b4760843b7f89ab995d25d4bfbace9629ad365aec97be339b747d89e47ff489415a5d3e3c37ff973d3cabcc6fd97b122ff3d78c9c4f665dd9344c7cb8fd959276e6daf8baffa0b3c4af78803329cf98454c2b71d1c44d57222c8aafa45632bbbf3aa937dc7e46d02ed29a84e0dd9961080b0fd6963a8817a645cb76f3cb271f18d8120c5097930b0eac5bbb7e3c935fb5516718fe3c6e5b273b77de6eff7a1c162b9a5da8ef77543ff90f5d8ffb2a2a393d619099cdc151d99a0e9f9b22190fc0f24c77c2f2de3a98964b9475305bfe7709f95439fab200ffe3610cc058c1f4ed44cd4e886f4f9ed5c4b66c2eb91d54a444d11ed0e5707922da1f386914ee501e4018935cd7abdad409cac916a4ffdb6535e32cb9d73d145f94d2f620893926aa1c31246ba6de86923affec4a246f48a2b4d0d5fc62a3a8648cc424a0b0cdda8fbb6551d32593e1c5c6e4a30a773fc11c0b7fc4b63b7a967258677b7b6ce723ecb99ab85af2a269d7d80ef2503f44e7f23e0268e84ab9af90eab0c8c0749fa0dc0d14f060db5de4f2241f80e09aaea83b67193a8bd1be013a521592e2610f6615aad8b00e9cdd1d68c69f9b2ff586ef20871441168e78f818c9d7163f6487a564dd16d45d05898034f1e5ba8fab8d838bff9ca33605eeba1e7095a6deeda2005ab89d301e822fb2f1c34485e26f4163d073f1ed9d110376cc816519ce6cf114be17d40a1f4d3815cf4754e0f23fd816a778114fab2f94f90ec28d51f98ac99aac054d4ecca59220353299a907398974d497cba95d24c9ecc4636061efdd96fa5e03b83929dcdecec326c25e80e911022a6bec29561b122ed9a7538e353f8bab097d90ba443fe613f4982d2636490211d12214865018253ddd5562f27245c986424f7d3f9fe8e1f6ec3bb61fa23b86cf93b499b13fc73936183ea1d77e762d258f1560d33a2c8582b1b3d249bbb1f955b3401ba9755cf4ff49f27644f262b14629c9bef1bf5c5ea7cbb34db7f3d8c590b074b4ac0fe51c30c50067d985b7cba55c9d0bec3bc910fd66792b14e3714d5751c2d09b6c8cde56ee68a2b2845d8c578e6ad09add15654370dbdff415f9972a511fa86ed7e09f11b0dee7ef030c4f9908f3efd3418a692d8f5a560381558940a4a55987487fa69203963f5a01c82d76b8a1e65419acc29fb07bcf8f1b0c313b3f2f21891e995501a8e25e2c736f39304242fe490001f5e637a3706933341af0e0edaa4a92825446a8c78f4db06f70ac2d02467f2c2e9fb878dd41ad17e18d6c3b13257aa242904683b06056d07016168bf9066cd7d3a9fffdfde2ac4fbd374a310eda160eb4c3f8db182e4db5a3d4e50f4ef9769c17c5ccd857e5c6833649a3842c31a73c780bef917c7b0e2c9378a29dc56414886dc90e54e5814873345f060d75d897bef9cb4b4f7c0b0d75f3d862012a72df384aa9461d8e04d1a80b4cacdfa3abe728550e7d0c47f11e599d9efc0867f405736161d4039699769b908fda98a49725d92f44889d250134f12355e4f941d6780a78329855471c22ca432bfeeaaa8f83661c228f2015949efc0c21f052143941d756af2549fcc2506b4b85e1a85491aa7995fb04a8c5f56af4fccfc7f62e3b76f024a289784170968739e44444f9aba3a3f61a641bd93e318aaedceb70f34c4e568111536d450fe140e273408278235c88e90282a6518c17ebda6941c7c2c91f56f5c8b790083f6597b8b4a50823d44a8fc254a3213b49570c4dbc8cf3026cd18f1e6ff82b479b1e4ab2630c563776a4dcc1a3e24df6bcffbea15aef1c6d4913c3437c7cfe21c6c6bf6f498ca31dd4e73b2c49f33893d2f633595176759e946b4387fcd93159ffe5f71f2d4f70bc1403ea909126d46b6f1e2e6736ec78a391d2efea2caa01c939e5a63e7aa7a6cadd4304e8cf2001f7faa07f569bba69bb446c99cb60936b000aaa979337720ffb82102177685f0330ecc65cbae48ed59728d334e3c38a5ffec976bf7e3d736d50b584f697b6a520b89c725fb4b09ce52a4ec5506695cbdfeb68593ebbe91b1a917d6ae7ab82ba35cb7282507912b58380c1235e7ecf392617bbbf4c06cb492e710c5ba1aa3b707e1f56efd50764e1a84ea301782f7acc8063e8613999baf79f187c0e141f64f2a88c9e6c8e60c9ef065ca44d7885c1a1df2fa20cbdf6eb8cfdf78458c7863b57942d6f7c6a945458da9c9470fe01f8224a1e5a562d7dfdd6a3a745d1e34f778d56ac682c7970c1cb14d5d09c70b49fe60c55b3e3538d6e4461503a50ccba357c270dd7afd97fa07cd118a9158dae2eecaf05c8a2accc037a5d15a26dc1a7496cdb5c1f6348358f3fd90400f572834b6cf59da78856ec957d326cbd0102786b61b06033ba9a156236b543c8c0fc282f0ced3cda66b68ab39a4775aeb4e173f5b6e1748964665fac3b2f54d354c197d1cbb7f81cddced65bba0a152a3ab9598277ff1b81afbc1ccec1786ae8fd804434b4b2efb5dd29b94ba9db53f247f7939495a5bf95720f15852aebeb67d28f2572d238b86dde4e01a04b6729b92c377a0867f26c478ee62638b34ec716da4d903dcc60d39306341e3a5c7caee6233353a41a5d947567a4ea0af1d80f78d4ef5348a2d5f2cbb2dfdd7d17028b79ad5e1496ecdcc8557284ad7d8ab1aa63fe944836349dedd4961e220b439aa600e442d7a1678082fcfcfcfe437818f280e6f5be817ac6da421682758500fbee07ea8503a920d765bbd5ef8dd80d21c43faceb2f226d2aea46daf815bc08009286cda8cb493003e7dd5abd51451c558be2487f420660b7eb1f21f89dd2bb36b165f4cb29f6d5fca3be7998b364305233e85f1d7ce4e176c892412ef9903b112eeede9437e9546c4e611492da5631d4291942ad8d5f74810e19d32ef830a0bc69554f7e12dfa89daa3abd5860b724cc284d18aa06b32e7fae2b9495b17067255a22b8858800bcebb6c3680d9900e2ab20b05f53ad20257e46f5ae015ee2a909541e8df35445f02e735e5912a8cc8374a6d9f1321fb6761c7fd413686f397b8236022b84d0a0cb610c693e2a737be5e02e16ffe63bfaec85dbd82a7afad4e6205dc364356c4bd7272e06bc86434099d5cc8a789e24e9b5768a480f635dd13a5d5c150c6721ab4a7a029a1f5998928e21a9a8147bd6b8f836cc898a27c0cba331f8f8a4f0c9aee1bdd64e675788ddabbf37a7d7771795ec72a32c15662e30979d1035ebd789dd9542aa822c57902f457fd9eeeb06c343d69147b5179f45749da783ddfbb5a34440e90a737f33db3460f58fbe16e64fdd96a0ba880993b31bc239f76306712d7eb34a015ee8b06473e8d10d58a2fcb93cb3aca093ec225842db369e67a8f2e743c5e413b904c48689ce947027aeb366267ea89b52ad5bb3f333ac2ed2106b3b87a9e2640ebb3aa0228842991150bcc29c009ef4139d5c65d0f794c6524a528a555780fb427c1484ebadf69832b3b77d0f20c9f2e0e699045b43254e79e88d3511c67ecbfccdbde0e883e5c15aaa549d5549374e98b84164dc2c34218eeaeb1d3e387a32c985886a39e496b2deee62714374bc00ecd1dddc88d89ac7212dda21376d512e781ba33e3b515bdcbd211afaf6087f88847b4113992fd805a796b64ff446bd6fa27269e562ca2989cb5d3dbc04fb2b082c6b1d05966a125a848940dc24da3a5f3320bcf8e46ef521568182560ff57cdc428ce1419f8516bfececd9e60ea9010eb526c6798a16054fe11435515bc4d4fee7e8fcf5274537eac0a5c0920ec328e359aa0e12d7c05cf9467d171f6906570ef8a46daa0748e3645196d8bd7f87b7625d20365c477c174426a6f772b0d39e75aa43dbf72df40215262507fd6e3e94284cf28e6687d0e9fe40ac0743ab2d4653df653cf75b6abae8edde7af569b756a08dc32cbd4abc5b4b207425e509c314535c43805d5159425a16135aad496aa2c3bd73151e765da52440c052c4d7adf79a3ddc79757999ae71e92442c644700a19a7de14d4a2bad98019226d6e482a1347f9c933358894c2222dbb26eb9dc2d17a7083f4fab156a2ba31fca1d6c9967d6675994eec8f817e2a0c2d0a60eb529ffe09991d11871e5f04aaf3b01cbca0f1b726546b3b163199e34a96b87a9244cf487d1ac330551cd5f501a6f59e29af7db0eced5e29d411b7c000b8ab95d2b307b5f6a908e093d9553b074e5015702b284b4f807979387d1a7fec198d3b3895e7577a6eca64c5c26529c3d98b2d7b17dae6d5a7a6829a34febc0eabe78eec8e91540f19065f7f9d03cb38a9a117f607ac693ee928fdb5de83ae9573ff7b3d8abf56d071c86b0b48f2740dcd9169ce125d83a9577771619bac1f0dcef6638b5679f467fabc62f85e5a081b3ec298107bbfa3d2e942f000d6dc676b0540aba7c35ddccc82346d191f46a0108f2d6a6059c3be4b4d5f7cd24b1ec4e70c1ed8431bc4f68218d88a3eeb5e3b4b272701686bda247a4aadb6416024069b6143a4637a0f932a8f39ce063fbb65408752bc75bd4dfbb39a20599b6877597f42831978640fb1d1a9e54298c9320d41820eba8b4e904a42d8eaa865aa984227e0345ebf7239dd7116f9048f3dcdfc94226be9000d93ce3f7763f2aafdad25cf846c9af1a3fb3391e4b97e42f72d443a26cb5195449c8af87cc30da7620255611166209ead6a098a75467079cd23a9548de6af4edb00699aab68f6600d5d189a14caffa8633ba97637bdff414b99eccb1511a191d1aa585aa4f118cdb24648e796332b4f661c4c67ffa68cac5b22fddc90ea4a6fbb16b9204de086c65c795cb46a3d76d5031c8032616bd5d977705f8439d0f6863bb502d2fc8d5123ec5c475f8dee6c72738582028e1e4f711ae13e2908d08bcf77c1095d5dc4c262c861e8206773f07f4638bd7ea794d2b03d22a85620184cb0f6ca844b209675c416f43f3b4ce3fa0c2a4d99e45fea72c7c4af4335d7fdf1ffb0296032dd510f35292017934c9cfd2ecf5511e902a7b90e7ff3aeccc423954a6f54e721f00e8e8ff9b72dfce5bb9e059cfa9333015c57e7fd9d09a4b127d64bc7f9b98903ee7eee944c10c2e2c81e4436327ad764102eb8c63721f125424617824a11501cb958333f07a898b3a4fe302325ba71600470b5d17d7ef288ad2a33fbd05b3690fc5b6b2f0ab870db0b28d42e12e62be8b8ebceb8d0862a46d40c893286c5d7a9d2cc7186967d2d7b9d5b4cff301cfd8f5e86af7ef578852126fee73116576c457e1f264d824c4369b4774e2c538e8c92cadee1a96972784ed1d3494205840ade24671dcf010ab574f95c6775ed4d9d23aad46022523f67634d4b66e74fc7e491162bd2ebca4aa5787c616b0e4353ef6bab584ff08f619fe60912bb7bcb09ab0a5c432185d972f04fde9cf9592025900733a658c207f9b00ba046ed95e73c6c1ea9c201803fc5ead910e64985a46acf83077ebcbb90e0322ecbc82bd80472f13a56ba2c66ec06a65ec033ea12b5dcf50a9afc4f618441ce63053943ccad1e36356eabd3b727df9058a84cd89d055ad07c0076288ed95e45578b5a03d597ac9193de18f92cd16a9bf5467c6fc4dcfcfd95a913180a7262923e1d2e2df7578ac1eea72b39f6c6dc0fb94d7564047e7d5613d22a7b494b5fdd2eb4233364e574db6c18913a5a051edcb6c4a6d666c237e576b3fedf8d2e8643866a7f971d77bf492b74cec1bd6ab1cd55cfbfbeeb6a515503e18746b32af45375044bd82c18a1b1b42e0e21b1d9afc912d68858f3384ab140dc0d81442e2f93099b8e92c4de6c46267cf7bc4c0142459306ac713a2ecb9c56907086b0c4759de8ca0f9672e5d74821923da7ddd3242ccf2bfa9880e9ee7599f365391f14b8cbc9f30aa33efad7cc039929f6078f81278a010ad63d60e11f938c55a970c1cb91b72ff413d1578f5ebffbef0a759f9c410e75d091364f6e11a1c297de304dc390dd3b5dfebad52d19b7eddc531fb30b16363d4d5253b1c9eac55f5cfdb774b964bce38071345fb50d536f3d5a8501bc3be8568952454b105c9358e74a0be13064b1c24dd95c2c9ae1b7432484760b5b01e0e1b77fc73a744fa7b2244cb735efd3f353b7f1d543d697d32208d5c9006d5d07ed53772cbaa4337c920fb78a2352fe9ae520cb5e774328d5a8fadc824ee4a48c66030480117c8ff0fbdd1a0e8c69a593df6d94c002135cb282635c51fb69ee194a361edac6d542f379e22e373f720a36e1e675638995f8d2dc15eb12910507a965ed64c4648bdfffa9f1ebfd00408dc7d1eea0bd7acd00c9558ed5e935aca4a29d7979b83c2612663db8ab9b55d2ca0dd6a1a995a941a9685ceefdca37f42151112570b496ca37b4b33c3dd861826e1c70811a0072e8fe58713214249604120c09bb1d768f30320ec997cc33e44713c6435a5eeaf1dda43bab51131b757c25aa2e3212b559292f8acb5b2ff7d99e9a1f0f0fafd652fb63f6d3eb1a139345a92069b8bb6f529ae969fe9e512028dd9c122b20b75da095114c0dcd6abda90008c241bc868d955dbadcd387880a09926a0f0cfd207b405aa704bebd9a85c05abe75539e58ff1258163e3ac91686454edff2652262377b778971029a9408e60885e0be3adaaeae3ad5d4e05e591a42240fa338f8b14230aab25cf7663eed4046d494744329cf8817239139dc3f995ed2946fb233eb5f8f8448a5a3e5957ebf82a1f6076f2292841fda9dcd950d128203bd155cb4646a8c62ced0deaa44cd5a890c6f2646bf7ae1917b8bae1ba3d6ef28bb42001d8c7406edef2dfdd40d6ccf25558997d491ae59037f67d38a8161df065961072dece8e273e11c661f7be302efd5d76c616261a03cc0c353d0a28fccf7018ca1daed1b2560ed58a7582353dd63c6f39b7e65036efd29693357d84bed0db2cb101b19b3277614fd0158fd93650b734cc68bc55af08f0259290b74d075944d122c44739cd5a92c38460f9216f3a356cc45dc4f1ddcaff41c81b925b75ae5a36b008a9851f1d7107ecebce1a8fee6b175a63c79c3bebf9bae391274ca57e6d9b30108042be2e5c9a6f4952e3a024decdea5d00eb235d277c287d21cd4f1c9b883dc7cd2ac277cf1b7b2b9a89f188aad2302c078c8f56b6277c2c9a7440de750de5ec7033947e25bd0198304d98294cb59bb7ad6c89b18532de5a870623e99332c2a406a3bef026bdb55d155b95500576a8677e282b31a279559a4f7dd65710b45598661d4499f9532f568f43994de040b47be517c4b576eb7f0748b089bf02a094df96857e01238d4ba46734ec812b7e1fd23d173dd5700e059314fd632ff2a825b766217555486d645431f08151eb5b7cae8b4c636bf132ad79830bbf48fb581edfd3aefb2edfb01eaeb76ceb862a7e42787172daeabb3e30557c7ea3a68f5be73c6b8b91d66c45a6bd4973524155b2c515a071684f82304700b1b7489e23f510108088a2abf44795d1cda03dc76aa77bdb62a81e6fd51d1150cd3eac4272de61cb403a873a8c759dd00b7e78ae17cc42187968c516b7394ac591d63ab16047d8ca6da664ce4bef7127b2630e4df903a9b4cd2ee5aca9f387063e3d8bc1315b31feae26fe581eb053f9d71516672e1328c18014366c42a434d993ee46250200528d433576a3b856b8bfde05b2ef079c2dedfa8c15a5f790c5f3ca752552173bf0eea0bb4e6be7467ffd41452c607d797e4bdd702541617d9a6e7d3eb0017aa5691b703d9262418ba83fbec0d1fba8351ff5200a8ecdb562e59c33763db6b2db800403a3fa4c3a9b53c03ea2cf6aeb4bc4a3820a94820c0ed65e0a50cca72288771c5f6ddc0b0316a1303220f17dfae852e5125e4391edbc53383d334e880e2aa0156081c58f77b208ef7b5d1d1769cd3229577c1680e56016b52ca0ece64947dcd25b378711b12682adb9320b098f5aa4e9b580f38c4a646ca2f5018fa9d636cb76ef8fa6b4c8152f11902fb626937187497b3d8da47f8adcfe7e27e39b7503ffa8f524825c19444c65272c1792da9dc80fe9ccf70be686a14fb601ef5611da402491b97c3c53acfddb4f5fd52ac8cfa37f16dbfce0d53cd0cf7b17ac3d24d301d469220a1e9480d419b2167ca0422f215e3344f3094db092e0f0387fe4ac3d14b68aae1bb25b01175cc11ff76934c2bdbd1b31796a5a402e68bda1c2c21300f32ac5076fdcef6053184e9bb2a7f29f36f258b2c9dd4db080343be169fcd619b826941d8d13520c6b0a9518c97906509321984b7c80cdb817755e1ef3ac7340f9adb4e95282c68c2d50388ef242991e6d7d53c3871951f8273464f1d02f0eaf7b2562583ce7d3e0462a4332c8fa4142123e2efdff8bd1d975ec503c6238f", 0x2000, &(0x7f0000003440)={&(0x7f0000000240)={0x50, 0xffffffffffffffda, 0xfffffffffffffffc, {0x7, 0x2b, 0x401, 0x14800100, 0x2, 0x0, 0x9, 0x1, 0x0, 0x0, 0x8, 0x9}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 31m30.723139719s ago: executing program 4 (id=252): io_setup(0x6, &(0x7f00000003c0)=0x0) r1 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x62081, 0x0) io_submit(r0, 0x1, &(0x7f00000000c0)=[&(0x7f0000000000)={0x0, 0x0, 0x0, 0x5, 0x0, r1, 0x0}]) r2 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000040), 0x8002, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f0000000300)=@abs, 0x6e) socket$nl_audit(0x10, 0x3, 0x9) sendmmsg$unix(r4, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg(r4, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0xb4c, 0x9, 0x6, 0x0, 0x3}, 0x0) sendmsg$NL80211_CMD_NEW_STATION(0xffffffffffffffff, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000001040)={&(0x7f00000004c0)=ANY=[@ANYBLOB="1c000000", @ANYRES16=0x0, @ANYBLOB="d93c3979db996d1c840ab40697d7281cd758d64c70f852a5e15edbe646cd0f03dd2d697423615b73684c141e61752f8c91460dfe6ce21bd90f07f28c2298b4656d07"], 0x1c}}, 0x0) r5 = syz_open_dev$usbfs(&(0x7f0000000100), 0x76, 0x101301) ioctl$USBDEVFS_DISCONNECT_CLAIM(r5, 0x8108551b, 0x0) r6 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r7 = ioctl$KVM_CREATE_VM(r6, 0xae01, 0x0) r8 = ioctl$KVM_CREATE_VCPU(r7, 0xae41, 0x0) ioctl$KVM_SET_MSRS(r8, 0xc008ae88, &(0x7f0000000080)={0x1, 0x0, [{0xc0010003, 0x0, 0x4}]}) r9 = open$dir(&(0x7f0000000240)='./file0\x00', 0x800, 0x100) openat$incfs(r9, &(0x7f0000000280)='.log\x00', 0x800, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000140), 0x8417f, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, 0x0) r10 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x189240, 0x0) ioctl$TUNSETIFF(r10, 0x400454ca, &(0x7f0000000000)={'\x00', 0x2}) ioctl$TUNSETTXFILTER(r10, 0x400454d1, 0x0) ioctl$USBDEVFS_CLAIM_PORT(0xffffffffffffffff, 0x80045518, &(0x7f0000000000)=0x1) ioctl$USBDEVFS_BULK(r5, 0xc0185502, &(0x7f0000000380)={{{0xf}}, 0x4a, 0x6, &(0x7f00000001c0)="99ba00a7504a61422015234472a6dd06c922df098ea59d3a34e59164b56488280af5a015b5a82d8b93d1ba7e5056f5d6c1a7178da6d4cb7e1c1e3e45de1236c3b1d5e18cef67166b1a52"}) write$P9_RSTATu(r2, &(0x7f0000000080)={0x50e, 0x7d, 0x0, {{0x500, 0x1f8, 0x0, 0x40, {0x0, 0x0, 0x2}, 0x0, 0x0, 0xc, 0x0, 0x10f, '\x04nodZ=\xbfd`\xd2\xc2\x97D,\x027\xfcb%\xff\xff\xff\x80\x05\x00\x00\x00\x00\x00\x00\xff\x03\xff\x92\xe9\x16\x00\x05\x00\x00\x00,\x93\xcb=\xb6\xc21\xd1\x19\xaa\xa1ou\xc5\x8f\xa6\x88\x9f\xf3\xc8\xf7\xab\xc6\x1bY\xa1\xd2o\fJ\xf8\xe2\x93\xd3\xf8l\xcd\xc6o\xf5{\xe9\x00\x00\x00\x00\x00\x00\x00\x03\xd5\x89-\x8e\xfe\xbb\x9e\x05\xac\nk\xc5)`z\xc6\x8a8\x13\xaf\xe7\x9e\x85cj\xfdl]\x15\xb2\xae\xbb\xb7\xee;\x1e\xae\x8a\x7f\xbe.\x85\x88s\x14\xcb\xec\xf0\xa1\xa5\x124z\x8c\x15\xb3 \xd1\xe1\xc0\x10Uz\xaaw\x16^Q`208^|\'\x01\x00\xacB3\x00D\xa9\b=\xe5\xbe\xd8\xe0\xbd(h\"\x94\xf68\xc3\x8e%uj\xb0\xb0\x7fe\xdb\xd6$\xee\x95_}\xa7\x8e\xe1\x96I7?0\xe3\xf7\xb9d\xf0\xa2f\xc3\xac\x9ePwS\xa3\xc4\x03\xc8{\xf1Jv\x87%\x91h\xb4[\xbdz\x1f\xd8`\x0e\xa1.\x00\xdb\xfeL\x1a\xfe\xea\xaf\x9d{\xb4\xa7Z\x1c\x82\x18\x93\xf7\xf4|\xff\xeb\t\xb55\x1f[\xde\x05@\x00\x00\x00Y_\xcb\x14\x03CT\xb9\xfd\x9e\xf1\x96\xa5\x1c\xd5\x15z\xdc\x81\x06\xb4\x94\xe1', 0x35, '\xcf`7-a\xcc\xea\xb8\xc8\x86A\xeb\x93\xb4\xcc\xf6\x00*\xb8{\xfc\x01\'\x96\t?h0\\M\" \x83~\x01\b\xe2\xe7HP\x1cQHK\xa0/\x10\x9c\xaa\xf9\x15\t\xa2', 0x56, '\xf8\xf6i\xfbqk\xcf1^\xca\xf3\x85@\x9a\xc6[\x94\bg\x8c,;\x9e\x1dR\xc3l\xde{\xa4\xa4\x00\xb4\xb0\xb4\xf1t\xa6f\xa8R\x9aE\x1b4\a\xdb\xda\xb2\x88K\xaf\x05\x00\x00\x00\x00\x00\x00\x00G\xec!\xca\xbf\xf2\x0f\x9c\x15\xbe6\xf4\xfd\x1aL\xdb\x80\xe8\xd4\a\x00\x00\x007\x00C'}, 0x301, 'odev/n\xb1{#\x00\xf9\xda\xa5\xee#&n\xcf\x85\xfe\xa6^B\xd9y\xa3\xfd\xe5\xf4u\xda\xf0;\x11r\xd9{\xad\xc7\tZ\xfdv\xfeO\fA\xf7\xf7t\x1e\xac\x03\x00\x00\xec\xff\x00\x00\xdb\xa0\xc2\xf7\xf0\x9f\xf5<~M\x1a\xd6n-\a\x01\x98\x01\x9f0\x11\x84G\xaau\xf8$k\xccB\xea\xa8\xc61\xc0\xc5\x00\x95\x9at\xf5\x16\x85\xf5\x06\xae\x89H\x06\x87\x82g\xd5\xa1)\x8dy,J7\xf2\xe1\xcb\xbd$\x82\x92\x9a\r\x89r\xb5\xcfs.\xa5\xb0\xd7#\x85\x93\xae\xd3\xb4.\xe7\xca\xc0}\xe0\x9d\x1dh\xa6\x033\xa8\x82F}+1\xaa\xfbV\xc5}}\xc6&\xe49\a\x96\xa1\xebH\'Fi\xab\x13\xf8\xb1\x1d\x14`Y\xf3\x10\xe2cMY?\xece\xd5)\xf3\x82\x06fd\xc0\xfbNL\x90W\np\x04\x9f9\x9f\x06\x1fu\xb7y|\xe1\xfe\x11\xea\x91\x96\t\xd5\x1aA\xdd=\xe3\x04\xbd|~\xd0\xa4V\xf0\xae\x12.a\x05\xc9\xce\x88}\xf5\xa6\xe0\xb6\xa7}Yl\xf8\x8b\xa6\xe5\xc69|}P!\xd7\x98\x95(\xfd\x179\xe1\xc2\xd8\x7f\xc2\x00\x00\x000\xe4\xee+\xfc\x7f\x80P\x85\x11C\xe5\x16\x1a\xcdG\x15\n\xcb\xaft8\"\xdf\xe2\x03\xb1\b\xd3~\x91M\xc1\xe5>#LP\x9e\xcaA\a\xa1q,\xaa\x9d\xa5=\x05\x1c6\x88Ly\x18&a\xf3\xca6\xbc\xdb\xfb\xbd&q\t\xf81\x9d\x8d\xd5\xc0p\x99\xeb\x1b\x11\x03\x06U\xf5biOat=\x19B\x1bJ\x19\xef\x8b\x8bL\xe9\xc9\x93\xc7\xd6\xcb0\fNezNP\xa3[\\\xc1k\x8c\x16\x1a\x8e=\xf9\x03k\xbc\xf2\x8a\xdc\xd1\x9alL)\x17\t\xae\xe5\xab>[\xc5\xae)\xf4u\xe4\xd2D\b\xb5\x16}\x0f\xaf_\xc1Vkp\\\x8b`\xaf\xa8\xac\xa4/~\x04i\x18\x8a\x0e\xf0b\xca\x18\xe3\x8f\x9e\xe1\n\xc7}+~\xb9\xd6\x0e\xa7\x9f\xdbUd\x11H[\x1b\x13\xdb\xb8\xa2\xa6b.\xbc\xf8Lio\xa4\xda!\xba\xd22\r\rh\xe9\xbfCF\xf0ha\x19\xa3\x9e@\x03\x95\xc8\xf2\x82^\xa0i\xae\x0e\x14;\xd1\xa4Ay\xedlTp,^\x9a\x19\xcc\x7f\xfaP\x0f\xa4\x1bl\x80I\xbd\xe4X\'\xd5N\xc9\x01\xd2z\xd1%\x05h\x89\xb33k?\x06\x83\x8c[fz\xe2.\xfe;\xc1[\x82_\x7f\xbc\xe4\x80\'(\x1c\xf9\xfe\x8f\xc2\x1f\xc7|$=\xe2g\x051\x0e\xb8\x1c\xf7M\xe0)1\x92\xa1?j\xd0W\xdea\xfd\x8a\xba\x8e\xf4C\x9b\xc0jE\xb2\xb01bQZ#C:\xfe\xb5*\xed\xb5\xabo3FS8\x05\x15\xf7y\xf3]\xc8\xa7\x8c7w$\x92\xa2(L!\xd2\x13V\xd4s\xf0\x0f\x85\x13|{\xf0cou}5(\x86\x9b?\x00w5\xcf\xf8\\\x9d\x97\x8b\xf5]\xcc&\xd6-%\xe3\b\xf0\x88\'\xa9\x1f\xf4{\xec\x92\xf8\xe9\x1ey\bfT\x00\xaaN9\xb3Y\x86#\x9d\\{\x94\x92\xc5\xbb&\xbcU\xb5[I\xedpHnn}\xa3\x8c \x84P\xf9\xf7\x9e\x1bA\x00'/769, 0xffffffffffffffff, 0xee01}}, 0x50e) 31m29.758447598s ago: executing program 34 (id=239): getpid() getpid() prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) connect$unix(0xffffffffffffffff, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000000), 0x651, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$BPF_GET_BTF_INFO(0xf, &(0x7f0000000380)={0xffffffffffffffff, 0x20, &(0x7f0000000280)={&(0x7f00000004c0)=""/224, 0xe0, 0x0, &(0x7f0000000a00)=""/4096, 0x1000}}, 0x10) r2 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r2, &(0x7f0000001ac0)={0x0, 0x0, &(0x7f0000000440)=[{&(0x7f0000000000)=ANY=[@ANYBLOB="140100001400210200000000fcdbdf25031100800c0002"], 0x114}], 0x1}, 0x40014) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f00000005c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r1, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socket$inet(0x2, 0x2, 0x0) bind$alg(0xffffffffffffffff, &(0x7f0000000000)={0x26, 'rng\x00', 0x0, 0x0, 'drbg_nopr_ctr_aes128\x00'}, 0x58) socket$netlink(0x10, 0x3, 0x0) 31m27.58338324s ago: executing program 4 (id=254): bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={0x0, 0xffffffffffffffff, 0x0, 0xffffffffffffffff}, 0x18) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000000), 0x651, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) ioctl$LOOP_GET_STATUS64(0xffffffffffffffff, 0x4c05, 0x0) r1 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000080), 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_PORT(r1, 0xc0a85320, 0x0) ioctl$SNDRV_SEQ_IOCTL_QUERY_NEXT_PORT(r1, 0xc0a85352, &(0x7f0000000200)={{0x80, 0x9}, 'port1\x00', 0x89, 0x14, 0x4, 0xfffffeff, 0x0, 0x0, 0x200000, 0x0, 0x4875c99660ff2b2d}) mkdir(&(0x7f0000000440)='./file1\x00', 0x0) mount(0x0, &(0x7f0000000280)='./file1\x00', 0x0, 0x0, &(0x7f0000000300)='usrquota') chdir(&(0x7f0000000080)='./file1\x00') r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='hugetlb.2MB.rsvd.usage_in_bytes\x00', 0x275a, 0x0) quotactl_fd$Q_SETQUOTA(r2, 0xffffffff80000800, 0x0, &(0x7f00000000c0)={0x0, 0x9, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0xfffffff7}) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) write$cgroup_subtree(r3, &(0x7f0000000100)=ANY=[], 0x32600) 31m27.036828021s ago: executing program 4 (id=255): r0 = fsopen(0x0, 0x0) fsmount(r0, 0x0, 0x0) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000380)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000280)='sched_switch\x00', r1}, 0x18) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x6) r5 = io_uring_setup(0x3c8e, &(0x7f0000000340)={0x0, 0x3, 0x800, 0x2}) r6 = socket$netlink(0x10, 0x3, 0xc) bind$netlink(r6, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) close_range(r5, 0xffffffffffffffff, 0x0) 31m25.993311501s ago: executing program 4 (id=256): mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x0) mount$fuse(0x0, 0x0, 0x0, 0xfc5cd7921c2c19c4, &(0x7f0000000400)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=0x0]) mount(0x0, &(0x7f0000000380)='./file1\x00', &(0x7f0000000040)='autofs\x00', 0x0, &(0x7f0000000400)) chdir(&(0x7f0000000080)='./file1\x00') mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x220) openat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x40000, 0x120) mount(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000000080)='sysfs\x00', 0x1214040, 0x0) r0 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000000), 0x888000, 0x0) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(r0, 0xc018937c, 0x0) 31m25.835470324s ago: executing program 4 (id=257): socket$nl_netfilter(0x10, 0x3, 0xc) r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) close(r1) r2 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r1, &(0x7f0000000080)={0xa, 0x4e22, 0x0, @empty}, 0x1c) listen(r2, 0x0) r3 = socket$inet_mptcp(0x2, 0x1, 0x106) connect$inet(r3, &(0x7f0000000000)={0x2, 0x4e22, @local}, 0x10) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r4, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000300)={0x28, 0x0, 0x1, 0x0, 0x0, {}, [@MPTCP_PM_ATTR_ADDR={0x14, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @multicast1=0xac1414aa}]}]}, 0x28}}, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$mptcp(&(0x7f0000000740), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_FLUSH_ADDRS(r5, 0x0, 0x800) close_range(r0, 0xffffffffffffffff, 0x0) 31m24.218425815s ago: executing program 35 (id=248): socket$nl_rdma(0x10, 0x3, 0x14) r0 = socket$inet6_mptcp(0xa, 0x1, 0x106) ioctl$sock_inet6_SIOCDELRT(r0, 0x890c, &(0x7f0000000140)={@private1={0xfc, 0x1, '\x00', 0x1}, @rand_addr=' \x01\x00', @mcast2, 0x8, 0x3c80, 0x85, 0x400, 0x1, 0x200170}) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg(r2, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x9, 0x0, 0xfffffffffffffffd, 0x400009, 0x8, 0xa}, 0x0) syz_open_dev$media(0x0, 0x80000006, 0xd01840) socket$netlink(0x10, 0x3, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000006940)=[{{0x0, 0x0, 0x0}, 0x3}], 0x1, 0x2, 0x0) socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000080)) r3 = socket(0x10, 0x803, 0x0) ioctl$sock_SIOCETHTOOL(r3, 0x8946, &(0x7f0000000140)={'veth0_to_team\x00', &(0x7f0000000280)=@ethtool_channels={0x3d, 0xffffffff, 0x0, 0x0, 0x4, 0x2, 0x1}}) ioctl$sock_SIOCETHTOOL(r3, 0x8946, &(0x7f00000002c0)={'veth0_to_team\x00', &(0x7f0000000000)=@ethtool_cmd={0x38, 0x2, 0x818, 0x0, 0x0, 0x0, 0x2, 0x7, 0x9, 0x8, 0x0, 0x8001, 0x6, 0x9, 0x0, 0x3, [0x1, 0x6]}}) ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x1) socket(0x10, 0x3, 0x0) timer_create(0x0, 0x0, &(0x7f0000000300)) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b00000000000000000000000080000000000000", @ANYRES32, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\x00\b\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x1, 0x14, &(0x7f0000000140)=ANY=[@ANYBLOB="180000000200000000000000fcffffff18110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf090000000000005509010000000000950000000000000085000000a000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7020000010000008500000086000000bf91000000000000b7020000000000008500000085000000b70000000000000095"], &(0x7f0000000000)='GPL\x00', 0xa, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x30, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 31m18.381547239s ago: executing program 5 (id=259): r0 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r0}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) r1 = open(&(0x7f00000005c0)='./file0\x00', 0x2a4c0, 0x13) r2 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000340), 0x42, 0x0) mount$fuse(0x0, &(0x7f0000000a40)='./file0\x00', &(0x7f0000000000), 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r2, @ANYBLOB=',rootmode=00000000000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_i', @ANYRESDEC=0x0]) read$FUSE(r2, &(0x7f0000006380)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r2, &(0x7f0000000100)={0x50, 0x0, r3, {0x7, 0x1f, 0x0, 0x0, 0x0, 0x7ff, 0xbf5}}, 0x50) syz_fuse_handle_req(r2, &(0x7f00000041c0)="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", 0x2000, &(0x7f0000000e40)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000500)={0x20, 0x0, 0x0, {0x0, 0x18}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r4 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x20d01, 0x0) close_range(r1, r4, 0x2) syz_fuse_handle_req(r2, &(0x7f0000000f00)="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", 0x2000, &(0x7f0000003440)={&(0x7f0000000240)={0x50, 0xffffffffffffffda, 0xfffffffffffffffc, {0x7, 0x2b, 0x401, 0x14800100, 0x2, 0x0, 0x9, 0x1, 0x0, 0x0, 0x8, 0x9}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 31m18.253550611s ago: executing program 5 (id=260): io_setup(0x6, &(0x7f00000003c0)=0x0) r1 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x62081, 0x0) io_submit(r0, 0x1, &(0x7f00000000c0)=[&(0x7f0000000000)={0x0, 0x0, 0x0, 0x5, 0x0, r1, 0x0}]) r2 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000040), 0x8002, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f0000000300)=@abs, 0x6e) socket$nl_audit(0x10, 0x3, 0x9) sendmmsg$unix(r4, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg(r4, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0xb4c, 0x9, 0x6, 0x0, 0x3}, 0x0) sendmsg$NL80211_CMD_NEW_STATION(0xffffffffffffffff, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000001040)={&(0x7f00000004c0)=ANY=[@ANYBLOB="1c000000", @ANYRES16=0x0, @ANYBLOB="d93c3979db996d1c840ab40697d7281cd758d64c70f852a5e15edbe646cd0f03dd2d697423615b73684c141e61752f8c91460dfe6ce21bd90f07f28c2298b4656d07"], 0x1c}}, 0x0) r5 = syz_open_dev$usbfs(&(0x7f0000000100), 0x76, 0x101301) ioctl$USBDEVFS_DISCONNECT_CLAIM(r5, 0x8108551b, 0x0) r6 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r7 = ioctl$KVM_CREATE_VM(r6, 0xae01, 0x0) r8 = ioctl$KVM_CREATE_VCPU(r7, 0xae41, 0x0) ioctl$KVM_SET_MSRS(r8, 0xc008ae88, &(0x7f0000000080)={0x1, 0x0, [{0xc0010003, 0x0, 0x4}]}) r9 = open$dir(&(0x7f0000000240)='./file0\x00', 0x800, 0x100) openat$incfs(r9, &(0x7f0000000280)='.log\x00', 0x800, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000140), 0x8417f, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, 0x0) r10 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x189240, 0x0) ioctl$TUNSETIFF(r10, 0x400454ca, &(0x7f0000000000)={'\x00', 0x2}) ioctl$TUNSETTXFILTER(r10, 0x400454d1, &(0x7f0000000040)=ANY=[]) ioctl$USBDEVFS_CLAIM_PORT(0xffffffffffffffff, 0x80045518, &(0x7f0000000000)=0x1) ioctl$USBDEVFS_BULK(r5, 0xc0185502, &(0x7f0000000380)={{{0xf}}, 0x4a, 0x6, &(0x7f00000001c0)="99ba00a7504a61422015234472a6dd06c922df098ea59d3a34e59164b56488280af5a015b5a82d8b93d1ba7e5056f5d6c1a7178da6d4cb7e1c1e3e45de1236c3b1d5e18cef67166b1a52"}) write$P9_RSTATu(r2, &(0x7f0000000080)={0x50e, 0x7d, 0x0, {{0x500, 0x1f8, 0x0, 0x40, {0x0, 0x0, 0x2}, 0x0, 0x0, 0xc, 0x0, 0x10f, '\x04nodZ=\xbfd`\xd2\xc2\x97D,\x027\xfcb%\xff\xff\xff\x80\x05\x00\x00\x00\x00\x00\x00\xff\x03\xff\x92\xe9\x16\x00\x05\x00\x00\x00,\x93\xcb=\xb6\xc21\xd1\x19\xaa\xa1ou\xc5\x8f\xa6\x88\x9f\xf3\xc8\xf7\xab\xc6\x1bY\xa1\xd2o\fJ\xf8\xe2\x93\xd3\xf8l\xcd\xc6o\xf5{\xe9\x00\x00\x00\x00\x00\x00\x00\x03\xd5\x89-\x8e\xfe\xbb\x9e\x05\xac\nk\xc5)`z\xc6\x8a8\x13\xaf\xe7\x9e\x85cj\xfdl]\x15\xb2\xae\xbb\xb7\xee;\x1e\xae\x8a\x7f\xbe.\x85\x88s\x14\xcb\xec\xf0\xa1\xa5\x124z\x8c\x15\xb3 \xd1\xe1\xc0\x10Uz\xaaw\x16^Q`208^|\'\x01\x00\xacB3\x00D\xa9\b=\xe5\xbe\xd8\xe0\xbd(h\"\x94\xf68\xc3\x8e%uj\xb0\xb0\x7fe\xdb\xd6$\xee\x95_}\xa7\x8e\xe1\x96I7?0\xe3\xf7\xb9d\xf0\xa2f\xc3\xac\x9ePwS\xa3\xc4\x03\xc8{\xf1Jv\x87%\x91h\xb4[\xbdz\x1f\xd8`\x0e\xa1.\x00\xdb\xfeL\x1a\xfe\xea\xaf\x9d{\xb4\xa7Z\x1c\x82\x18\x93\xf7\xf4|\xff\xeb\t\xb55\x1f[\xde\x05@\x00\x00\x00Y_\xcb\x14\x03CT\xb9\xfd\x9e\xf1\x96\xa5\x1c\xd5\x15z\xdc\x81\x06\xb4\x94\xe1', 0x35, '\xcf`7-a\xcc\xea\xb8\xc8\x86A\xeb\x93\xb4\xcc\xf6\x00*\xb8{\xfc\x01\'\x96\t?h0\\M\" \x83~\x01\b\xe2\xe7HP\x1cQHK\xa0/\x10\x9c\xaa\xf9\x15\t\xa2', 0x56, '\xf8\xf6i\xfbqk\xcf1^\xca\xf3\x85@\x9a\xc6[\x94\bg\x8c,;\x9e\x1dR\xc3l\xde{\xa4\xa4\x00\xb4\xb0\xb4\xf1t\xa6f\xa8R\x9aE\x1b4\a\xdb\xda\xb2\x88K\xaf\x05\x00\x00\x00\x00\x00\x00\x00G\xec!\xca\xbf\xf2\x0f\x9c\x15\xbe6\xf4\xfd\x1aL\xdb\x80\xe8\xd4\a\x00\x00\x007\x00C'}, 0x301, 'odev/n\xb1{#\x00\xf9\xda\xa5\xee#&n\xcf\x85\xfe\xa6^B\xd9y\xa3\xfd\xe5\xf4u\xda\xf0;\x11r\xd9{\xad\xc7\tZ\xfdv\xfeO\fA\xf7\xf7t\x1e\xac\x03\x00\x00\xec\xff\x00\x00\xdb\xa0\xc2\xf7\xf0\x9f\xf5<~M\x1a\xd6n-\a\x01\x98\x01\x9f0\x11\x84G\xaau\xf8$k\xccB\xea\xa8\xc61\xc0\xc5\x00\x95\x9at\xf5\x16\x85\xf5\x06\xae\x89H\x06\x87\x82g\xd5\xa1)\x8dy,J7\xf2\xe1\xcb\xbd$\x82\x92\x9a\r\x89r\xb5\xcfs.\xa5\xb0\xd7#\x85\x93\xae\xd3\xb4.\xe7\xca\xc0}\xe0\x9d\x1dh\xa6\x033\xa8\x82F}+1\xaa\xfbV\xc5}}\xc6&\xe49\a\x96\xa1\xebH\'Fi\xab\x13\xf8\xb1\x1d\x14`Y\xf3\x10\xe2cMY?\xece\xd5)\xf3\x82\x06fd\xc0\xfbNL\x90W\np\x04\x9f9\x9f\x06\x1fu\xb7y|\xe1\xfe\x11\xea\x91\x96\t\xd5\x1aA\xdd=\xe3\x04\xbd|~\xd0\xa4V\xf0\xae\x12.a\x05\xc9\xce\x88}\xf5\xa6\xe0\xb6\xa7}Yl\xf8\x8b\xa6\xe5\xc69|}P!\xd7\x98\x95(\xfd\x179\xe1\xc2\xd8\x7f\xc2\x00\x00\x000\xe4\xee+\xfc\x7f\x80P\x85\x11C\xe5\x16\x1a\xcdG\x15\n\xcb\xaft8\"\xdf\xe2\x03\xb1\b\xd3~\x91M\xc1\xe5>#LP\x9e\xcaA\a\xa1q,\xaa\x9d\xa5=\x05\x1c6\x88Ly\x18&a\xf3\xca6\xbc\xdb\xfb\xbd&q\t\xf81\x9d\x8d\xd5\xc0p\x99\xeb\x1b\x11\x03\x06U\xf5biOat=\x19B\x1bJ\x19\xef\x8b\x8bL\xe9\xc9\x93\xc7\xd6\xcb0\fNezNP\xa3[\\\xc1k\x8c\x16\x1a\x8e=\xf9\x03k\xbc\xf2\x8a\xdc\xd1\x9alL)\x17\t\xae\xe5\xab>[\xc5\xae)\xf4u\xe4\xd2D\b\xb5\x16}\x0f\xaf_\xc1Vkp\\\x8b`\xaf\xa8\xac\xa4/~\x04i\x18\x8a\x0e\xf0b\xca\x18\xe3\x8f\x9e\xe1\n\xc7}+~\xb9\xd6\x0e\xa7\x9f\xdbUd\x11H[\x1b\x13\xdb\xb8\xa2\xa6b.\xbc\xf8Lio\xa4\xda!\xba\xd22\r\rh\xe9\xbfCF\xf0ha\x19\xa3\x9e@\x03\x95\xc8\xf2\x82^\xa0i\xae\x0e\x14;\xd1\xa4Ay\xedlTp,^\x9a\x19\xcc\x7f\xfaP\x0f\xa4\x1bl\x80I\xbd\xe4X\'\xd5N\xc9\x01\xd2z\xd1%\x05h\x89\xb33k?\x06\x83\x8c[fz\xe2.\xfe;\xc1[\x82_\x7f\xbc\xe4\x80\'(\x1c\xf9\xfe\x8f\xc2\x1f\xc7|$=\xe2g\x051\x0e\xb8\x1c\xf7M\xe0)1\x92\xa1?j\xd0W\xdea\xfd\x8a\xba\x8e\xf4C\x9b\xc0jE\xb2\xb01bQZ#C:\xfe\xb5*\xed\xb5\xabo3FS8\x05\x15\xf7y\xf3]\xc8\xa7\x8c7w$\x92\xa2(L!\xd2\x13V\xd4s\xf0\x0f\x85\x13|{\xf0cou}5(\x86\x9b?\x00w5\xcf\xf8\\\x9d\x97\x8b\xf5]\xcc&\xd6-%\xe3\b\xf0\x88\'\xa9\x1f\xf4{\xec\x92\xf8\xe9\x1ey\bfT\x00\xaaN9\xb3Y\x86#\x9d\\{\x94\x92\xc5\xbb&\xbcU\xb5[I\xedpHnn}\xa3\x8c \x84P\xf9\xf7\x9e\x1bA\x00'/769, 0xffffffffffffffff, 0xee01}}, 0x50e) 31m16.015676825s ago: executing program 5 (id=261): bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={0x0, 0xffffffffffffffff, 0x0, 0xffffffffffffffff}, 0x18) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000000), 0x651, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) ioctl$LOOP_GET_STATUS64(0xffffffffffffffff, 0x4c05, 0x0) r1 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000080), 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_PORT(r1, 0xc0a85320, 0x0) ioctl$SNDRV_SEQ_IOCTL_QUERY_NEXT_PORT(r1, 0xc0a85352, &(0x7f0000000200)={{0x80, 0x9}, 'port1\x00', 0x89, 0x14, 0x4, 0xfffffeff, 0x0, 0x0, 0x200000, 0x0, 0x4875c99660ff2b2d}) mkdir(&(0x7f0000000440)='./file1\x00', 0x0) mount(0x0, &(0x7f0000000280)='./file1\x00', &(0x7f0000000240)='tmpfs\x00', 0x0, 0x0) chdir(&(0x7f0000000080)='./file1\x00') r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='hugetlb.2MB.rsvd.usage_in_bytes\x00', 0x275a, 0x0) quotactl_fd$Q_SETQUOTA(r2, 0xffffffff80000800, 0x0, &(0x7f00000000c0)={0x0, 0x9, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0xfffffff7}) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) write$cgroup_subtree(r3, &(0x7f0000000100)=ANY=[], 0x32600) 31m15.636080302s ago: executing program 5 (id=262): r0 = fsopen(0x0, 0x0) fsmount(r0, 0x0, 0x0) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000380)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000280)='sched_switch\x00', r1}, 0x18) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x6) r5 = io_uring_setup(0x3c8e, &(0x7f0000000340)={0x0, 0x3, 0x800, 0x2}) r6 = socket$netlink(0x10, 0x3, 0xc) bind$netlink(r6, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) close_range(r5, 0xffffffffffffffff, 0x0) 31m14.540559363s ago: executing program 5 (id=263): mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x0) mount$fuse(0x0, 0x0, 0x0, 0xfc5cd7921c2c19c4, &(0x7f0000000400)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=0x0]) mount(0x0, &(0x7f0000000380)='./file1\x00', &(0x7f0000000040)='autofs\x00', 0x0, &(0x7f0000000400)) chdir(&(0x7f0000000080)='./file1\x00') mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x220) openat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x40000, 0x120) mount(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000000080)='sysfs\x00', 0x1214040, 0x0) r0 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000000), 0x888000, 0x0) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(r0, 0xc018937c, 0x0) 31m14.279694508s ago: executing program 5 (id=264): prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, 0x0) getpid() mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) connect$unix(r0, &(0x7f00000004c0)=@abs, 0x6e) r1 = gettid() timer_create(0x0, &(0x7f0000000240)={0x0, 0x21, 0x800000000004, @tid=r1}, &(0x7f0000000040)) prlimit64(0x0, 0xe, &(0x7f0000000240)={0x8, 0x248}, 0x0) io_uring_setup(0x2c93, 0x0) timer_settime(0x0, 0x0, &(0x7f0000000000)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={0x0}, 0x18) mkdir(&(0x7f0000000100)='./control\x00', 0xa0) mount$afs(&(0x7f0000000080)=@cell={0x25, 'syz1:', 'syz1', '.readonly'}, &(0x7f00000000c0)='./control\x00', &(0x7f0000000000), 0x200000, 0x0) 31m10.740936727s ago: executing program 36 (id=257): socket$nl_netfilter(0x10, 0x3, 0xc) r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) close(r1) r2 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r1, &(0x7f0000000080)={0xa, 0x4e22, 0x0, @empty}, 0x1c) listen(r2, 0x0) r3 = socket$inet_mptcp(0x2, 0x1, 0x106) connect$inet(r3, &(0x7f0000000000)={0x2, 0x4e22, @local}, 0x10) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r4, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000300)={0x28, 0x0, 0x1, 0x0, 0x0, {}, [@MPTCP_PM_ATTR_ADDR={0x14, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @multicast1=0xac1414aa}]}]}, 0x28}}, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$mptcp(&(0x7f0000000740), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_FLUSH_ADDRS(r5, 0x0, 0x800) close_range(r0, 0xffffffffffffffff, 0x0) 30m58.73870229s ago: executing program 37 (id=264): prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, 0x0) getpid() mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) connect$unix(r0, &(0x7f00000004c0)=@abs, 0x6e) r1 = gettid() timer_create(0x0, &(0x7f0000000240)={0x0, 0x21, 0x800000000004, @tid=r1}, &(0x7f0000000040)) prlimit64(0x0, 0xe, &(0x7f0000000240)={0x8, 0x248}, 0x0) io_uring_setup(0x2c93, 0x0) timer_settime(0x0, 0x0, &(0x7f0000000000)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={0x0}, 0x18) mkdir(&(0x7f0000000100)='./control\x00', 0xa0) mount$afs(&(0x7f0000000080)=@cell={0x25, 'syz1:', 'syz1', '.readonly'}, &(0x7f00000000c0)='./control\x00', &(0x7f0000000000), 0x200000, 0x0) 10.98383409s ago: executing program 8 (id=3857): fanotify_init(0x1a, 0x800) r0 = fsopen(0x0, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) socket$inet6(0xa, 0x2, 0x0) r2 = gettid() fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) ioctl$BTRFS_IOC_QGROUP_LIMIT(r1, 0x8030942b, &(0x7f0000000040)={0x4, {0x21, 0xc7, 0x1ff, 0x8000000000000001, 0x9}}) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(r2, 0x2, &(0x7f00000000c0)=0x3) sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400400bce) r3 = syz_open_dev$MSR(&(0x7f0000000340), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) socket(0x1d, 0x2, 0x6) syz_clone3(0x0, 0x0) write$FUSE_LK(0xffffffffffffffff, 0x0, 0x0) mq_notify(0xffffffffffffffff, 0x0) r4 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r4, 0x0, 0x0) close(0x3) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r5, 0x0, 0x0) setsockopt$inet6_tcp_int(r5, 0x6, 0x2000000000000022, &(0x7f0000000200)=0x1, 0x4) sendto$inet6(r5, &(0x7f0000000280)='2', 0x1, 0x20000045, &(0x7f00000001c0)={0xa, 0x2, 0xffff, @loopback, 0x3}, 0x1c) setsockopt$inet6_tcp_TCP_CONGESTION(r5, 0x6, 0xd, &(0x7f0000000100)='cdg\x00', 0x4) shutdown(r5, 0x1) 10.862302373s ago: executing program 9 (id=3860): r0 = socket(0x10, 0x803, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r4 = io_uring_setup(0x2754, &(0x7f0000000080)={0x0, 0xfffffffc, 0x800, 0xfffffffe, 0x800001b4}) io_uring_register$IORING_REGISTER_BUFFERS(r4, 0x0, &(0x7f00000002c0), 0x0) ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x89f1, 0x0) socket$inet_smc(0x2b, 0x1, 0x0) r5 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r5, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000a40)=@newsa={0x154, 0x10, 0x1, 0x8000000, 0x0, {{@in=@remote, @in6=@loopback, 0x2, 0x0, 0x4e20, 0x50, 0x0, 0x20, 0x0, 0x16}, {@in6=@local, 0xfffffffc, 0x33}, @in=@local, {0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, {0x5680000000, 0x0, 0x0, 0x10000}, {0x401, 0x9}, 0x0, 0x0, 0xa, 0x1, 0x0, 0x90}, [@algo_auth={0x48, 0x1, {{'sha256\x00'}}}, @replay_esn_val={0x1c, 0x17, {0x0, 0x70bd2d, 0x70bd28, 0x70bd2b, 0x70bd2b, 0x8}}]}, 0x154}}, 0x24000058) sendto(r0, &(0x7f0000000740)="120000001200e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0) recvmmsg(r0, &(0x7f00000037c0)=[{{&(0x7f00000004c0)=@ethernet={0x0, @random}, 0xfdf4, &(0x7f0000000380)=[{&(0x7f0000000140)=""/100, 0x365}, {&(0x7f0000000280)=""/85, 0x7c}, {&(0x7f0000000fc0)=""/4096, 0x197}, {&(0x7f0000000400)=""/106, 0x645}, {&(0x7f0000000980)=""/73, 0x1b}, {&(0x7f0000000200)=""/77, 0x14}, {&(0x7f00000007c0)=""/154, 0x21}, {&(0x7f00000001c0)=""/17, 0x1d8}], 0x21, &(0x7f0000000600)=""/191, 0xffffffffffffff2f}}], 0x4000000000003b4, 0x2040000, &(0x7f0000003700)={0x77359400}) 8.152127254s ago: executing program 9 (id=3862): bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000040)='contention_end\x00'}, 0x10) r0 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000080), 0x1, 0x0) ioctl$IOMMU_IOAS_ALLOC(r0, 0x3b81, &(0x7f0000000200)={0xc, 0x0, 0x0}) ioctl$IOMMU_VFIO_IOAS$SET(r0, 0x3b88, &(0x7f0000000000)={0xc, r1}) ioctl$IOMMU_IOAS_MAP$PAGES(r0, 0x3b85, &(0x7f0000000340)={0x28, 0x2, r1, 0x0, &(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x10}) ioctl$IOMMU_VFIO_SET_IOMMU(r0, 0x3b66, 0x1) ioctl$IOMMU_VFIO_IOMMU_UNMAP_DMA(r0, 0x3b72, &(0x7f0000000440)=ANY=[@ANYBLOB="1800007f000000000020"]) 7.973060318s ago: executing program 9 (id=3864): socket$nl_netfilter(0x10, 0x3, 0xc) socket$inet_smc(0x2b, 0x1, 0x0) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f00000002c0)) socket$nl_generic(0x10, 0x3, 0x10) syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) socket$nl_route(0x10, 0x3, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0e000000040000000800000005"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xc, &(0x7f00000001c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bc82000000000000a6"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp=0xedf0e51957efc755, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000280)={{r0}, &(0x7f0000000240), &(0x7f0000000380)=r1}, 0x20) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000000)={r1, 0x18000000000002a0, 0xd50, 0x0, &(0x7f0000000580)="b9ff03076804268c989e14f088a8", 0x0, 0x500, 0x60000000, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x50) 7.881869019s ago: executing program 8 (id=3866): bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r3 = socket(0x40000000015, 0x5, 0x0) getsockopt(r3, 0x200000000114, 0x2721, 0x0, 0x0) 7.762079412s ago: executing program 9 (id=3867): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x11, 0x3, &(0x7f0000001680)=ANY=[@ANYBLOB="1800000000030000000000000000000095"], &(0x7f0000001700)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x20}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f00000000c0)='contention_end\x00', r0}, 0x18) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0xfffffffffffffffe, 0x4031, 0xffffffffffffffff, 0x0) r1 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000080), 0x20000, 0x0) ioctl$IOMMU_TEST_OP_ADD_RESERVED(r1, 0x3ba0, &(0x7f0000000440)={0x48, 0x1, 0x0, 0x0, 0x97, 0x8000000}) ioctl$IOMMU_IOAS_MAP$PAGES(r1, 0x3b85, &(0x7f0000000140)={0x28, 0x6, 0x0, 0x0, &(0x7f0000ff6000/0xa000)=nil, 0xa000}) ioctl$IOMMU_IOAS_MAP$PAGES(r1, 0x3b85, &(0x7f0000000500)={0x28, 0x4, 0x0, 0x0, &(0x7f0000931000/0x3000)=nil, 0x3000, 0x6}) ioctl$IOMMU_TEST_OP_MOCK_DOMAIN_FLAGS(r1, 0x3ba0, &(0x7f0000000180)={0x48}) 6.030656575s ago: executing program 9 (id=3869): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) r0 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) bind$netlink(0xffffffffffffffff, &(0x7f0000000440)={0x10, 0x0, 0x25dfdbfd, 0x100}, 0xc) sendmmsg$unix(r2, &(0x7f0000000000), 0x52, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) fcntl$setstatus(r0, 0x4, 0x41d15765412494c6) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r3, 0x6, 0x8, 0x0, 0x0) sendmsg$BATADV_CMD_GET_MESH(0xffffffffffffffff, &(0x7f00000004c0)={0x0, 0x0, 0x0}, 0x0) r4 = socket$inet6(0xa, 0x80001, 0x0) mount(&(0x7f0000000040)=@nullb, &(0x7f0000000100)='.\x00', &(0x7f0000000200)='qnx6\x00', 0x8000, 0x0) setsockopt$inet6_MCAST_JOIN_GROUP(r3, 0x29, 0x2a, &(0x7f0000000540)={0x5, {{0xa, 0x0, 0x0, @mcast1}}}, 0x88) setsockopt$inet6_MCAST_MSFILTER(r4, 0x29, 0x30, &(0x7f0000000240)=ANY=[], 0x310) setsockopt$inet6_MCAST_MSFILTER(r4, 0x29, 0x30, &(0x7f0000000640)=ANY=[@ANYBLOB="01000000000000000a00000000000000ff010000000000000000000000000001"], 0x110) connect$inet6(r3, 0x0, 0x0) getsockopt$inet_pktinfo(0xffffffffffffffff, 0x0, 0x8, 0x0, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000000c0)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000480)={&(0x7f0000000400)=@newtfilter={0x2c, 0x2c, 0x300, 0x70bd26, 0x25dfdbff, {0x0, 0x0, 0x0, 0x0, {0xfff2, 0x6}, {0x9, 0x8}, {0x8, 0x7}}, [@TCA_RATE={0x6, 0x5, {0x7, 0x2}}]}, 0x2c}, 0x1, 0x0, 0x0, 0x20000000}, 0x1) r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000240), r5) sendmsg$IEEE802154_START_REQ(r5, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000000)=ANY=[@ANYBLOB='l\x00\x00\x00', @ANYRES16=r6, @ANYBLOB="010000000000000000000d0000000500070012000000050018007f00000006000800feff0000050017000000000005001a000000000006000a00ffff00000500190004000000050007000700000005001b00ff0000000500010001000000060008"], 0x6c}, 0x1, 0x0, 0x0, 0x18000}, 0x0) 5.952796536s ago: executing program 6 (id=3870): r0 = socket(0x10, 0x803, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r4 = io_uring_setup(0x2754, &(0x7f0000000080)={0x0, 0xfffffffc, 0x800, 0xfffffffe, 0x800001b4}) io_uring_register$IORING_REGISTER_BUFFERS(r4, 0x0, &(0x7f00000002c0), 0x0) ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x89f1, 0x0) socket$inet_smc(0x2b, 0x1, 0x0) r5 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r5, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000a40)=@newsa={0x154, 0x10, 0x1, 0x8000000, 0x0, {{@in=@remote, @in6=@loopback, 0x2, 0x0, 0x4e20, 0x50, 0x0, 0x20, 0x0, 0x16}, {@in6=@local, 0xfffffffc, 0x33}, @in=@local, {0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, {0x5680000000, 0x0, 0x0, 0x10000}, {0x401, 0x9}, 0x0, 0x0, 0xa, 0x1, 0x0, 0x90}, [@algo_auth={0x48, 0x1, {{'sha256\x00'}}}, @replay_esn_val={0x1c, 0x17, {0x0, 0x70bd2d, 0x70bd28, 0x70bd2b, 0x70bd2b, 0x8}}]}, 0x154}}, 0x24000058) sendto(r0, &(0x7f0000000740)="120000001200e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0) recvmmsg(r0, &(0x7f00000037c0)=[{{&(0x7f00000004c0)=@ethernet={0x0, @random}, 0xfdf4, &(0x7f0000000380)=[{&(0x7f0000000140)=""/100, 0x365}, {&(0x7f0000000280)=""/85, 0x7c}, {&(0x7f0000000fc0)=""/4096, 0x197}, {&(0x7f0000000400)=""/106, 0x645}, {&(0x7f0000000980)=""/73, 0x1b}, {&(0x7f0000000200)=""/77, 0x14}, {&(0x7f00000007c0)=""/154, 0x21}, {&(0x7f00000001c0)=""/17, 0x1d8}], 0x21, &(0x7f0000000600)=""/191, 0xffffffffffffff2f}}], 0x4000000000003b4, 0x2040000, &(0x7f0000003700)={0x77359400}) 4.871774157s ago: executing program 6 (id=3871): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, 0x0}, 0x84000) openat$dlm_monitor(0xffffffffffffff9c, &(0x7f0000000100), 0x420000, 0x0) inotify_init() openat$userio(0xffffffffffffff9c, &(0x7f0000000000), 0x2002, 0x0) timerfd_create(0x0, 0x0) r1 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f00000007c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000030000008500000084000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000003c0)={&(0x7f0000000140)='sys_enter\x00', r2}, 0x10) pselect6(0x40, &(0x7f00000001c0)={0x2, 0x0, 0x6, 0xfffffffffffffffd, 0x3, 0x0, 0x0, 0xe}, 0x0, &(0x7f0000000300)={0x3ff, 0x7e7, 0x0, 0x9, 0x5, 0x0, 0x7fffffff, 0x3fb}, 0x0, 0x0) setsockopt$packet_fanout(0xffffffffffffffff, 0x107, 0x12, &(0x7f0000000200)={0x0, 0x2000}, 0x4) bind$inet6(0xffffffffffffffff, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r3 = syz_open_dev$MSR(&(0x7f0000000040), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) r4 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000380)=ANY=[@ANYBLOB="30010000170001000000000000000000fc0000000000000000000000000000000000000000000000fe8000000000000000000000000000bbfc0000000000000000000000000000002001000000000000000000000000000100"/104, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="ff010000000000000000000000000001ffffffff00000000000000000000000000000000000000000a00000000000000", @ANYRES32=0x0, @ANYRES32=0xee00, @ANYBLOB="00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000200000000000000000000000000000000000000000000000000000000000000000000000000000008001f00"], 0x130}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000004c0)=ANY=[@ANYBLOB="140000001000010000000000000000000300000a98000000060a0b040000000000000000020000006c000480680001800a000100696e6e65720000005800028008000240000000840800034000000007080004400000000f0800014000000000340005800c0001007061796c6f61640024000280080004400000002708000340000000b9080002400000000608000140000000080900010073797a3000000000090002"], 0xc0}, 0x1, 0x0, 0x0, 0x8054}, 0x0) 4.71478057s ago: executing program 7 (id=3872): socket$nl_netfilter(0x10, 0x3, 0xc) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) connect$inet6(r0, 0x0, 0x0) setsockopt$inet6_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000000)='vegas\x00', 0x6) write$binfmt_script(r0, &(0x7f0000000200), 0xfffffd9d) 3.971676724s ago: executing program 8 (id=3873): fsopen(&(0x7f00000001c0)='ramfs\x00', 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL802154_CMD_GET_WPAN_PHY(r1, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4800}, 0x200040c0) socket$nl_route(0x10, 0x3, 0x0) r2 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000780), 0x2, 0x0) ioctl$VHOST_SET_FEATURES(r2, 0x4008af00, &(0x7f0000000000)=0x200000000) write$vhost_msg_v2(r2, &(0x7f0000000200)={0x2, 0x0, {&(0x7f0000000340)=""/177, 0xb1, 0x0, 0x2, 0x2}}, 0x48) write$vhost_msg_v2(r2, &(0x7f0000000640)={0x2, 0x0, {&(0x7f0000001900)=""/4096, 0x1000, 0x0, 0x2, 0x2}}, 0x48) write$vhost_msg_v2(r2, &(0x7f0000000100)={0x2, 0x0, {&(0x7f00000006c0)=""/185, 0x3dbf7297e0015883, 0x0, 0x3, 0x3}}, 0x48) socket$nl_route(0x10, 0x3, 0x0) 3.971000164s ago: executing program 7 (id=3874): socket$kcm(0x11, 0xa, 0x300) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x3, &(0x7f0000000380)=ANY=[@ANYBLOB="180000000000070000000000000000"], &(0x7f0000000040)='syzkaller\x00'}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f00000000c0)='sock_rcvqueue_full\x00', r0}, 0x10) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000000d00)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00'}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r1, 0x18000000000002a0, 0xe2c, 0x60000000, &(0x7f0000000100)="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", 0x0, 0xfe, 0x60000000}, 0x2c) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x3, &(0x7f0000000380)=ANY=[], &(0x7f0000000040)='syzkaller\x00'}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f00000000c0)='sock_rcvqueue_full\x00', r2}, 0x10) syz_genetlink_get_family_id$ethtool(&(0x7f0000000780), 0xffffffffffffffff) 3.830522057s ago: executing program 6 (id=3875): socket$nl_netfilter(0x10, 0x3, 0xc) socket$inet_smc(0x2b, 0x1, 0x0) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f00000002c0)) socket$nl_generic(0x10, 0x3, 0x10) syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) socket$nl_route(0x10, 0x3, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0e000000040000000800000005"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xc, &(0x7f00000001c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bc82000000000000a6020000f8ffffffb703000008000000cd"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp=0xedf0e51957efc755, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000280)={{r0}, &(0x7f0000000240), &(0x7f0000000380)=r1}, 0x20) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000000)={r1, 0x18000000000002a0, 0xd50, 0x0, &(0x7f0000000580)="b9ff03076804268c989e14f088a8", 0x0, 0x500, 0x60000000, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x50) 3.512262433s ago: executing program 6 (id=3876): prlimit64(0x0, 0xe, &(0x7f00000007c0)={0x8, 0x88}, 0x0) syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) getpid() r0 = openat$ubi_ctrl(0xffffffffffffff9c, 0x0, 0x8400, 0x0) ioctl$FS_IOC_SETFLAGS(r0, 0x40046f41, 0x0) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000480)={r0, 0xe0, &(0x7f0000000500)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, &(0x7f0000000140)=[0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, &(0x7f0000000180)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000280), 0x0, 0x27, &(0x7f0000000300)=[{}, {}, {}, {}], 0x20, 0x10, &(0x7f00000003c0), &(0x7f0000000400), 0x8, 0xa0, 0x8, 0x8, &(0x7f0000000440)}}, 0x10) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000002000), 0x2480, 0x0) r1 = syz_open_dev$sndctrl(&(0x7f0000000100), 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_SUBSCRIBE_EVENTS(r1, 0xc0045516, 0x0) r2 = gettid() ioctl$SNDRV_CTL_IOCTL_ELEM_ADD(r1, 0xc1105517, &(0x7f0000000900)={{0x0, 0x4, 0x1, 0x0, 'syz1\x00', 0xd3}, 0x1, 0x40, 0x2, r2, 0x0, 0x3, 'syz1\x00', 0x0}) ptrace$peekuser(0x3, r2, 0xffffffff) r3 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r3, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0xb, 0x59032, 0xffffffffffffffff, 0x0) r4 = userfaultfd(0x80801) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) close(r5) ioctl$UFFDIO_API(r4, 0xc018aa3f, &(0x7f0000002040)={0xaa, 0x22c}) syz_open_dev$loop(&(0x7f0000000000), 0x7, 0x103001) ioctl$UFFDIO_REGISTER(r4, 0xc020aa00, &(0x7f0000000040)={{&(0x7f0000400000/0xc00000)=nil, 0xc00000}, 0x4}) ioctl$UFFDIO_COPY(r4, 0xc028aa03, &(0x7f0000000100)={&(0x7f0000800000/0x800000)=nil, &(0x7f0000339000/0x1000)=nil, 0x800000}) 3.511122333s ago: executing program 7 (id=3877): openat(0xffffffffffffff9c, &(0x7f0000000080)='.\x00', 0x200002, 0x0) ioctl$DRM_IOCTL_MODE_GETCRTC(0xffffffffffffffff, 0xc06864a1, 0x0) pipe2$9p(&(0x7f0000001900)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r1, 0x0, 0x15) mount$9p_fd(0x0, 0x0, 0x0, 0x0, &(0x7f0000000140)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {}, 0x2c, {[], [], 0x6b}}) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) writev(0xffffffffffffffff, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) open(&(0x7f0000000140)='./file0\x00', 0x2a4c0, 0x0) r2 = socket$kcm(0x10, 0x2, 0x0) sendmsg$inet(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000440)="5c00000012006bab9e3fe3d86e17aa31070000007ea60864160af365da8fb21a38001d008fbd983247f07251ca60bc24eab556a71a251e6182949a3651f60a84c9f4d4938037e786a6d0bdd7fcf50e450998530000000080bcc7", 0x5a}], 0x1, 0x0, 0x0, 0x1f000008}, 0x0) ptrace$ARCH_GET_FS(0x1e, 0x0, &(0x7f00000001c0), 0x1003) bind$inet(0xffffffffffffffff, &(0x7f00000003c0)={0x2, 0x4e21, @remote}, 0x10) r3 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000000000), 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB='fd', @ANYRESHEX=r3, @ANYBLOB=',rootmode=00000000000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB, @ANYRESDEC=0x0]) read$FUSE(r3, &(0x7f0000006380)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r3, &(0x7f0000000340)={0x50, 0x0, r4, {0x7, 0x1f, 0x0, 0x34808521, 0x401, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0xa4001f7e}}, 0x50) syz_fuse_handle_req(r3, 0x0, 0x0, &(0x7f0000000e40)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000500)={0x20, 0x0, 0x0, {0x0, 0x1}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r5 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000100), 0x0) ioctl$SNDRV_SEQ_IOCTL_SET_PORT_INFO(r5, 0xc0a85320, &(0x7f0000001400)={{0x80}, 'port0\x00', 0xe3, 0x1b1c07}) ioctl$SNDRV_SEQ_IOCTL_SET_CLIENT_POOL(r5, 0x4058534c, &(0x7f0000000000)={0x80, 0x9, 0x2, 0xe05, 0x20000, 0x28e7}) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000140), 0x8417f, 0x0) read(r5, 0x0, 0x0) io_setup(0x202, &(0x7f0000000200)) r6 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r6, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000200)=@gettaction={0x1c, 0x5a, 0xc6b747b6bf1c6b95, 0x0, 0x0, {}, [@action_dump_flags=@TCA_ROOT_TIME_DELTA={0x8}]}, 0x1c}}, 0x0) 2.261155737s ago: executing program 6 (id=3878): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x11, 0x3, &(0x7f0000001680)=ANY=[@ANYBLOB="1800000000030000000000000000000095"], &(0x7f0000001700)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x20}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f00000000c0)='contention_end\x00', r0}, 0x18) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0xfffffffffffffffe, 0x4031, 0xffffffffffffffff, 0x0) r1 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000080), 0x20000, 0x0) ioctl$IOMMU_TEST_OP_ADD_RESERVED(r1, 0x3ba0, &(0x7f0000000440)={0x48, 0x1, 0x0, 0x0, 0x97, 0x8000000}) ioctl$IOMMU_IOAS_MAP$PAGES(r1, 0x3b85, &(0x7f0000000140)={0x28, 0x6, 0x0, 0x0, &(0x7f0000ff6000/0xa000)=nil, 0xa000}) ioctl$IOMMU_IOAS_MAP$PAGES(r1, 0x3b85, &(0x7f0000000500)={0x28, 0x4, 0x0, 0x0, &(0x7f0000931000/0x3000)=nil, 0x3000, 0x6}) ioctl$IOMMU_TEST_OP_MOCK_DOMAIN_FLAGS(r1, 0x3ba0, &(0x7f0000000180)={0x48}) 2.253514847s ago: executing program 7 (id=3879): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x7) r0 = getpid() ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, &(0x7f0000000280)={'macsec0\x00', &(0x7f00000001c0)=@ethtool_pauseparam={0x13, 0xfffffffb, 0x4, 0x8000}}) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) sendmsg$nl_xfrm(0xffffffffffffffff, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) bpf$BPF_BTF_GET_FD_BY_ID(0x13, 0x0, 0x0) bind$alg(0xffffffffffffffff, 0x0, 0x0) r3 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$AUTOFS_DEV_IOCTL_ISMOUNTPOINT(0xffffffffffffffff, 0xc0189374, &(0x7f0000000240)={{0x1, 0x1, 0x1018, 0xffffffffffffffff, {0x29}}, './file0\x00'}) ioctl$IOMMU_IOAS_ALLOC(r3, 0x3b81, 0x0) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NLBL_MGMT_C_ADDDEF(r5, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)=ANY=[@ANYBLOB='L\x00\x00\x00', @ANYRES16, @ANYBLOB="01000000000000000000040000001400050003030000000a0000005dc00000000001080002000500000014000600ff01000a00f2f3f31f000a00000000010600"], 0x4c}, 0x1, 0x0, 0x0, 0x8014}, 0x404c000) sendmsg$NLBL_MGMT_C_ADDDEF(r5, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)=ANY=[], 0x4c}, 0x1, 0x0, 0x0, 0x4008004}, 0x4040000) syz_genetlink_get_family_id$ieee802154(&(0x7f0000000380), r4) sendmsg$IEEE802154_SCAN_REQ(r4, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000440)=ANY=[], 0x1c}, 0x1, 0x0, 0x0, 0x24000050}, 0x400000d0) 2.217063538s ago: executing program 8 (id=3880): sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x20000080) r0 = socket(0x10, 0x803, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r4 = io_uring_setup(0x2754, &(0x7f0000000080)={0x0, 0xfffffffc, 0x800, 0xfffffffe, 0x800001b4}) io_uring_register$IORING_REGISTER_BUFFERS(r4, 0x0, &(0x7f00000002c0), 0x0) ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x89f1, 0x0) socket$inet_smc(0x2b, 0x1, 0x0) r5 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r5, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000a40)=@newsa={0x154, 0x10, 0x1, 0x8000000, 0x0, {{@in=@remote, @in6=@loopback, 0x2, 0x0, 0x4e20, 0x50, 0x0, 0x20, 0x0, 0x16}, {@in6=@local, 0xfffffffc, 0x33}, @in=@local, {0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, {0x5680000000, 0x0, 0x0, 0x10000}, {0x401, 0x9}, 0x0, 0x0, 0xa, 0x1, 0x0, 0x90}, [@algo_auth={0x48, 0x1, {{'sha256\x00'}}}, @replay_esn_val={0x1c, 0x17, {0x0, 0x70bd2d, 0x70bd28, 0x70bd2b, 0x70bd2b, 0x8}}]}, 0x154}}, 0x24000058) sendto(r0, &(0x7f0000000740)="120000001200e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0) recvmmsg(r0, &(0x7f00000037c0)=[{{&(0x7f00000004c0)=@ethernet={0x0, @random}, 0xfdf4, &(0x7f0000000380)=[{&(0x7f0000000140)=""/100, 0x365}, {&(0x7f0000000280)=""/85, 0x7c}, {&(0x7f0000000fc0)=""/4096, 0x197}, {&(0x7f0000000400)=""/106, 0x645}, {&(0x7f0000000980)=""/73, 0x1b}, {&(0x7f0000000200)=""/77, 0x14}, {&(0x7f00000007c0)=""/154, 0x21}, {&(0x7f00000001c0)=""/17, 0x1d8}], 0x21, &(0x7f0000000600)=""/191, 0xffffffffffffff2f}}], 0x4000000000003b4, 0x2040000, &(0x7f0000003700)={0x77359400}) 2.023753721s ago: executing program 6 (id=3881): bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r3 = socket(0x40000000015, 0x5, 0x0) getsockopt(r3, 0x200000000114, 0x2721, 0x0, 0x0) 1.119115578s ago: executing program 8 (id=3882): openat$vicodec0(0xffffffffffffff9c, &(0x7f00000004c0), 0x2, 0x0) write$uinput_user_dev(0xffffffffffffffff, 0x0, 0x0) socket$inet6_sctp(0xa, 0x1, 0x84) r0 = socket$inet(0xa, 0x801, 0x84) listen(r0, 0x8) r1 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000800000000bf91000000000000b702000043e7b5538500000085000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000140)='kmem_cache_free\x00', r2}, 0x10) r3 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_int(r3, 0x107, 0xa, 0x0, 0x0) setsockopt$packet_rx_ring(r3, 0x107, 0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x11, 0x6, &(0x7f0000000cc0)=ANY=[@ANYBLOB="050000000000000061110c00000000008510000002000000850000000500000095000000000000009500a5050000000077d8f3b423cdac8d80000000000000002be16ad10a48b243ccc42606d25dfd73a015e0ca7fc2506a0f7535f7866907dc0200000000000000ae669e17fd6587d452d6453559c3421eed73d56615fe6c54c3b3ffe1b4ce25d7c983c044c03bf3a48dfe47ec9dd6c091c30b93bfae76d9ebacd3ed3e26e7a23129d6606fd28a69989d552af6bda9df2c3af36effff9af2551ce896165127cb3f011a7d06602e2fc40848228567ffb400000000003ed38ae89d24e1cebfba2f87925bfacba83109751fe6c05405d027edd68149ee99eef6a6992308a4fc0b7c70bc677d6dd4aed4af7500d7900a820b6347184e9a217b5614cd50cbe43a1ed2526814bc0000e9e086ce48e90defb6670c3df2624f56da648d28ad0a97aec7291c25447c106a99893e10db21901eb397b2f5fd71400fa7a050fbbef9e326ea27e513e96068fd1e8a43e89f9c85c822a961546ed5363c17ff1432d08806bc376e3e49ee52b59d13182e1f24ed200ada10eb1affb87ba55b2d72078e9f40b4ae7d01000000d11cd22c35d32940000088dde499000000fdffffff00000000000f000000ef0000000000000000000000000c52f4ebd2c893bb97a068bd10734a83584898eccb26f7b789cfc4cd995fa3e11a5c74c85404e2df3ad37b729ac83b0dcb4f48f3c3356b9997fc455a17690b6f7f9ccbe4b1701941b18aba6b16455a66c3b84b138efc20a546d3d5227e23b03f2a834391ade2ff3e93ee296c4082ee73e7c353312c9d75711ce1623e9c54bdff59d2a69dcb7d84c235b23a4480c2461b405cfd1a38992f295ad3adc94cd07c850d1ce6d0b2fea02c24e9280333152fb794e4ddea02017a6c139b50101caecaf2abc0847a1ff2f7fc3c2b99a96fc4275ad107274e2934a87a4ddcdb112754ca5bdec0ead14b6c0f19a43a2f05c7f0be31491eb8c9ff68236c8600040000000000000000000066e034c81c3cab64e4fc8dc55ce0ada18dcbf31c6e82893add3bee3e10fc873d1d922b0877cbcd95b839d3059d5140a1f742f6e75741e39e5cb6a193e06a1043375b0f61b5d4e17c81baa31b924d84f224baf1221c15fa12313ffbfa7c2730309f66705b71e6205e7cbf3643561eabb9a63fcd604d5cc27e1317ad94cf438d71873e540be16b6ca205081173bd03c4754fc4674812daab482fd390a1c903b5d28a1eb247b5837d7603b92495d5c569f6433c3fca5206cb0000003fdbbd3892c52c2e7612e05de32322e980a3d69931e2c9312dd517c96f2ee90362476ed853c4c9b7d4ebf13cbaa795860e92a3d7d004f2c491db38eb769f094d5d48b262cc35c40682138cf13a49aa9f27abec00002f01ba1251aaf2385416ca719300"], &(0x7f0000000080)='GPL\x00', 0x5, 0x29e, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x6}, 0x70) pselect6(0x40, &(0x7f00000001c0)={0x0, 0x2, 0x3, 0xfffffffffffffffd}, 0x0, &(0x7f0000000240)={0x3ff, 0x0, 0x0, 0x9, 0x0, 0x0, 0x7fffffff}, 0x0, 0x0) 1.113992738s ago: executing program 7 (id=3883): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, 0x0}, 0x84000) openat$dlm_monitor(0xffffffffffffff9c, &(0x7f0000000100), 0x420000, 0x0) inotify_init() openat$userio(0xffffffffffffff9c, &(0x7f0000000000), 0x2002, 0x0) timerfd_create(0x0, 0x0) r1 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f00000007c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000030000008500000084000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000003c0)={&(0x7f0000000140)='sys_enter\x00', r2}, 0x10) pselect6(0x40, &(0x7f00000001c0)={0x2, 0x0, 0x6, 0xfffffffffffffffd, 0x3, 0x0, 0x0, 0xe}, 0x0, &(0x7f0000000300)={0x3ff, 0x7e7, 0x0, 0x9, 0x5, 0x0, 0x7fffffff, 0x3fb}, 0x0, 0x0) setsockopt$packet_fanout(0xffffffffffffffff, 0x107, 0x12, &(0x7f0000000200)={0x0, 0x2000}, 0x4) bind$inet6(0xffffffffffffffff, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r3 = syz_open_dev$MSR(&(0x7f0000000040), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) r4 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000380)=ANY=[@ANYBLOB="30010000170001000000000000000000fc0000000000000000000000000000000000000000000000fe8000000000000000000000000000bbfc0000000000000000000000000000002001000000000000000000000000000100"/104, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="ff010000000000000000000000000001ffffffff00000000000000000000000000000000000000000a00000000000000", @ANYRES32=0x0, @ANYRES32=0xee00, @ANYBLOB="00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000200000000000000000000000000000000000000000000000000000000000000000000000000000008001f00"], 0x130}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000004c0)=ANY=[@ANYBLOB="140000001000010000000000000000000300000a98000000060a0b040000000000000000020000006c000480680001800a000100696e6e65720000005800028008000240000000840800034000000007080004400000000f0800014000000000340005800c0001007061796c6f61640024000280080004400000002708000340000000b9080002400000000608000140000000080900010073797a3000000000090002"], 0xc0}, 0x1, 0x0, 0x0, 0x8054}, 0x0) 111.334478ms ago: executing program 7 (id=3884): socket$nl_netfilter(0x10, 0x3, 0xc) socket$inet_smc(0x2b, 0x1, 0x0) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f00000002c0)) socket$nl_generic(0x10, 0x3, 0x10) syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) socket$nl_route(0x10, 0x3, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0e000000040000000800000005"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xc, &(0x7f00000001c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bc82000000000000a6020000f8ffffffb703000008000000cd"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp=0xedf0e51957efc755, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000280)={{r0}, &(0x7f0000000240), &(0x7f0000000380)=r1}, 0x20) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000000)={r1, 0x18000000000002a0, 0xd50, 0x0, &(0x7f0000000580)="b9ff03076804268c989e14f088a8", 0x0, 0x500, 0x60000000, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x50) 73.098508ms ago: executing program 8 (id=3885): socket$kcm(0x11, 0xa, 0x300) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x3, &(0x7f0000000380)=ANY=[@ANYBLOB="180000000000070000000000000000"], &(0x7f0000000040)='syzkaller\x00'}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f00000000c0)='sock_rcvqueue_full\x00', r0}, 0x10) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000000d00)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00'}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r1, 0x18000000000002a0, 0xe2c, 0x60000000, &(0x7f0000000100)="b9ff03076844268cb89e14f008004be0ffff00124000638877fbac141416ac14141644089f034d2f87e5070f0cab845013f2325f1a39010702038da1880b25181aa59d943be3f4aed50ea5a6b8686731cb89ef77123c899b699eeaa8eaa0073461119663906400f30c0600000000000059b6d3296e8ca31bce1d8392078b72f24996ae17dffc2e43c8174b54b620636894aaacf28ff62616363c70a440aec4014caf28c0adc043084617d7ecf41e9d134589d46e5dfc4ca5780d38cae870b9a1df48b238190da450296b0ac01496ace23eefc9d4246dd14afbf79a2283a0bb7e1d235f3df126c3acc240d75a058f6efa6d1f5f7ff4000000000000000000", 0x0, 0xfe, 0x60000000}, 0x2c) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x3, &(0x7f0000000380)=ANY=[], &(0x7f0000000040)='syzkaller\x00'}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f00000000c0)='sock_rcvqueue_full\x00', r2}, 0x10) syz_genetlink_get_family_id$ethtool(&(0x7f0000000780), 0xffffffffffffffff) 0s ago: executing program 9 (id=3886): openat(0xffffffffffffff9c, &(0x7f0000000080)='.\x00', 0x200002, 0x0) ioctl$DRM_IOCTL_MODE_GETCRTC(0xffffffffffffffff, 0xc06864a1, 0x0) pipe2$9p(&(0x7f0000001900)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r1, 0x0, 0x15) mount$9p_fd(0x0, 0x0, 0x0, 0x0, &(0x7f0000000140)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {}, 0x2c, {[], [], 0x6b}}) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) open(&(0x7f0000000140)='./file0\x00', 0x2a4c0, 0x0) r2 = socket$kcm(0x10, 0x2, 0x0) sendmsg$inet(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000440)="5c00000012006bab9e3fe3d86e17aa31070000007ea60864160af365da8fb21a38001d008fbd983247f07251ca60bc24eab556a71a251e6182949a3651f60a84c9f4d4938037e786a6d0bdd7fcf50e450998530000000080bcc7", 0x5a}], 0x1, 0x0, 0x0, 0x1f000008}, 0x0) ptrace$ARCH_GET_FS(0x1e, 0x0, &(0x7f00000001c0), 0x1003) bind$inet(0xffffffffffffffff, &(0x7f00000003c0)={0x2, 0x4e21, @remote}, 0x10) r3 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000000000), 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB='fd', @ANYRESHEX=r3, @ANYBLOB=',rootmode=00000000000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB, @ANYRESDEC=0x0]) read$FUSE(r3, &(0x7f0000006380)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r3, &(0x7f0000000340)={0x50, 0x0, r4, {0x7, 0x1f, 0x0, 0x34808521, 0x401, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0xa4001f7e}}, 0x50) syz_fuse_handle_req(r3, 0x0, 0x0, &(0x7f0000000e40)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000500)={0x20, 0x0, 0x0, {0x0, 0x1}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r5 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000100), 0x0) ioctl$SNDRV_SEQ_IOCTL_SET_PORT_INFO(r5, 0xc0a85320, &(0x7f0000001400)={{0x80}, 'port0\x00', 0xe3, 0x1b1c07}) ioctl$SNDRV_SEQ_IOCTL_SET_CLIENT_POOL(r5, 0x4058534c, &(0x7f0000000000)={0x80, 0x9, 0x2, 0xe05, 0x20000, 0x28e7}) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000140), 0x8417f, 0x0) read(r5, 0x0, 0x0) io_setup(0x202, &(0x7f0000000200)) r6 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r6, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000200)=@gettaction={0x1c, 0x5a, 0xc6b747b6bf1c6b95, 0x0, 0x0, {}, [@action_dump_flags=@TCA_ROOT_TIME_DELTA={0x8}]}, 0x1c}}, 0x0) kernel console output (not intermixed with test programs): 1: Product: syz [ 544.956659][ T7556] usb 10-1: Manufacturer: syz [ 544.961593][ T7556] usb 10-1: SerialNumber: syz [ 545.029666][ T7556] usb 10-1: config 0 descriptor?? [ 545.282431][ T7556] usb 10-1: selecting invalid altsetting 0 [ 546.631017][ T785] usb 10-1: USB disconnect, device number 11 [ 548.156627][T10513] binder_alloc: 10509: binder_alloc_buf, no vma [ 553.925174][T10568] tmpfs: Unknown parameter 'uÿÿÿÿota_inode_hardliŽt' [ 558.920350][ T8505] usb 9-1: new high-speed USB device number 10 using dummy_hcd [ 559.357118][ T8505] usb 9-1: config 0 interface 0 altsetting 251 endpoint 0x9 has invalid wMaxPacketSize 0 [ 559.400148][ T8505] usb 9-1: config 0 interface 0 has no altsetting 0 [ 559.411621][ T8505] usb 9-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 559.431161][ T8505] usb 9-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 559.456829][ T8505] usb 9-1: Product: syz [ 559.470610][ T8505] usb 9-1: Manufacturer: syz [ 559.484373][ T8505] usb 9-1: SerialNumber: syz [ 559.566139][ T8505] usb 9-1: config 0 descriptor?? [ 559.605950][ T8505] usb 9-1: selecting invalid altsetting 0 [ 561.938498][ T785] usb 9-1: USB disconnect, device number 10 [ 563.512602][ T1289] ieee802154 phy0 wpan0: encryption failed: -22 [ 563.518982][ T1289] ieee802154 phy1 wpan1: encryption failed: -22 [ 564.942347][T10687] binder_alloc: 10686: binder_alloc_buf, no vma [ 566.712349][T10719] befs: (nbd9): No write support. Marking filesystem read-only [ 566.745625][T10719] syz.9.906: attempt to access beyond end of device [ 566.745625][T10719] nbd9: rw=0, sector=0, nr_sectors = 2 limit=0 [ 566.775524][T10719] befs: (nbd9): unable to read superblock [ 567.402659][T10723] fuse: Bad value for 'fd' [ 569.573601][T10742] binder_alloc: 10740: binder_alloc_buf, no vma [ 570.996128][T10763] IPVS: sync thread started: state = BACKUP, mcast_ifn = veth0_to_team, syncid = 0, id = 0 [ 571.721844][T10766] befs: (nbd7): No write support. Marking filesystem read-only [ 571.738852][T10766] syz.7.918: attempt to access beyond end of device [ 571.738852][T10766] nbd7: rw=0, sector=0, nr_sectors = 2 limit=0 [ 571.759581][T10766] befs: (nbd7): unable to read superblock [ 572.044121][T10773] fuse: Bad value for 'fd' [ 573.103247][ T786] usb 9-1: new high-speed USB device number 11 using dummy_hcd [ 573.305882][ T786] usb 9-1: Using ep0 maxpacket: 8 [ 573.337261][ T786] usb 9-1: config index 0 descriptor too short (expected 301, got 45) [ 573.349450][ T786] usb 9-1: config 16 has an invalid descriptor of length 0, skipping remainder of the config [ 573.389249][ T786] usb 9-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 573.433175][ T786] usb 9-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 573.475629][ T786] usb 9-1: config 16 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 573.612975][ T786] usb 9-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 573.622966][ T786] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 573.649507][ T786] usbtmc 9-1:16.0: bulk endpoints not found [ 575.903022][ T5875] usb 9-1: USB disconnect, device number 11 [ 576.107210][T10836] befs: (nbd7): No write support. Marking filesystem read-only [ 576.148985][T10836] syz.7.928: attempt to access beyond end of device [ 576.148985][T10836] nbd7: rw=0, sector=0, nr_sectors = 2 limit=0 [ 576.226491][T10836] befs: (nbd7): unable to read superblock [ 576.640406][T10850] fuse: Bad value for 'fd' [ 579.849922][ T5835] usb 9-1: new high-speed USB device number 12 using dummy_hcd [ 580.060363][ T5835] usb 9-1: Using ep0 maxpacket: 8 [ 580.069064][ T5835] usb 9-1: config index 0 descriptor too short (expected 301, got 45) [ 580.086476][ T5835] usb 9-1: config 16 has an invalid descriptor of length 0, skipping remainder of the config [ 580.118277][ T5835] usb 9-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 580.162604][ T5835] usb 9-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 580.186379][T10885] netlink: 44 bytes leftover after parsing attributes in process `syz.6.938'. [ 580.206950][ T5835] usb 9-1: config 16 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 580.226122][T10886] netlink: 44 bytes leftover after parsing attributes in process `syz.6.938'. [ 580.249560][ T5835] usb 9-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 580.315453][ T5835] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 580.351763][ T5835] usbtmc 9-1:16.0: bulk endpoints not found [ 580.616292][T10896] binder_alloc: 10889: binder_alloc_buf, no vma [ 583.170088][ T5835] usb 7-1: new high-speed USB device number 11 using dummy_hcd [ 583.870996][ T5835] usb 7-1: config 0 interface 0 altsetting 251 endpoint 0x9 has invalid wMaxPacketSize 0 [ 583.910083][ T5835] usb 7-1: config 0 interface 0 has no altsetting 0 [ 583.961358][ T5835] usb 7-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 584.019715][ T786] usb 9-1: USB disconnect, device number 12 [ 584.024540][ T5835] usb 7-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 584.064079][ T5835] usb 7-1: Product: syz [ 584.073513][ T5835] usb 7-1: Manufacturer: syz [ 584.084398][ T5835] usb 7-1: SerialNumber: syz [ 584.122217][ T5835] usb 7-1: config 0 descriptor?? [ 584.153638][ T5835] usb 7-1: selecting invalid altsetting 0 [ 586.770838][T10929] befs: (nbd8): No write support. Marking filesystem read-only [ 586.784660][T10929] syz.8.947: attempt to access beyond end of device [ 586.784660][T10929] nbd8: rw=0, sector=0, nr_sectors = 2 limit=0 [ 586.888333][T10925] syz.9.946: attempt to access beyond end of device [ 586.888333][T10925] loop9: rw=0, sector=16, nr_sectors = 2 limit=0 [ 586.939618][T10929] befs: (nbd8): unable to read superblock [ 587.201106][T10934] fuse: Bad value for 'fd' [ 587.710090][ T5842] usb 7-1: USB disconnect, device number 11 [ 589.621098][T10963] binder_alloc: 10956: binder_alloc_buf, no vma [ 589.918278][T10970] IPVS: sync thread started: state = MASTER, mcast_ifn = veth0_virt_wifi, syncid = 33554432, id = 0 [ 589.935388][T10969] IPVS: stopping master sync thread 10970 ... [ 591.340294][ T5856] usb 7-1: new high-speed USB device number 12 using dummy_hcd [ 591.560106][ T5856] usb 7-1: Using ep0 maxpacket: 8 [ 591.584525][ T5856] usb 7-1: config index 0 descriptor too short (expected 301, got 45) [ 591.619954][ T5856] usb 7-1: config 16 has an invalid descriptor of length 0, skipping remainder of the config [ 591.654895][ T5856] usb 7-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 591.700663][ T5856] usb 7-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 591.732118][ T5856] usb 7-1: config 16 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 591.780318][ T5856] usb 7-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 591.795053][ T5856] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 591.861647][ T5856] usbtmc 7-1:16.0: bulk endpoints not found [ 591.868481][T10992] befs: (nbd8): No write support. Marking filesystem read-only [ 592.177113][T10992] syz.8.957: attempt to access beyond end of device [ 592.177113][T10992] nbd8: rw=0, sector=0, nr_sectors = 2 limit=0 [ 592.319653][T10992] befs: (nbd8): unable to read superblock [ 592.570829][T10999] fuse: Bad value for 'fd' [ 593.151038][T11005] binder: 11004:11005 ioctl c018620c 200000000100 returned -1 [ 593.223250][T11005] IPVS: set_ctl: invalid protocol: 1 172.20.20.170:20000 [ 593.575074][T11011] IPVS: stopping master sync thread 11013 ... [ 593.582365][T11013] IPVS: sync thread started: state = MASTER, mcast_ifn = veth0_virt_wifi, syncid = 33554432, id = 0 [ 593.890246][ T5856] usb 9-1: new high-speed USB device number 13 using dummy_hcd [ 594.772228][ T5835] usb 7-1: USB disconnect, device number 12 [ 595.072793][ T5856] usb 9-1: config 0 interface 0 altsetting 251 endpoint 0x9 has invalid wMaxPacketSize 0 [ 595.089912][ T5856] usb 9-1: config 0 interface 0 has no altsetting 0 [ 595.131480][ T5856] usb 9-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 595.161516][ T5856] usb 9-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 595.218007][ T5856] usb 9-1: Product: syz [ 595.229897][ T5856] usb 9-1: Manufacturer: syz [ 595.246744][ T5856] usb 9-1: SerialNumber: syz [ 595.329282][ T5856] usb 9-1: config 0 descriptor?? [ 595.343599][ T5856] usb 9-1: selecting invalid altsetting 0 [ 595.540003][ T5835] usb 8-1: new high-speed USB device number 15 using dummy_hcd [ 595.720055][ T5835] usb 8-1: Using ep0 maxpacket: 16 [ 595.737626][ T5835] usb 8-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 595.759243][ T5835] usb 8-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 595.778629][ T5835] usb 8-1: New USB device found, idVendor=04d8, idProduct=00dd, bcdDevice= 0.00 [ 595.790283][ T5835] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 595.808750][ T5835] usb 8-1: config 0 descriptor?? [ 595.832963][ T5835] usbhid 8-1:0.0: couldn't find an input interrupt endpoint [ 597.588910][ T5835] usb 9-1: USB disconnect, device number 13 [ 598.366053][T11054] netlink: 44 bytes leftover after parsing attributes in process `syz.6.968'. [ 598.468305][T11056] netlink: 44 bytes leftover after parsing attributes in process `syz.6.968'. [ 599.273135][ T27] usb 8-1: USB disconnect, device number 15 [ 599.949938][ T27] usb 8-1: new high-speed USB device number 16 using dummy_hcd [ 600.180576][ T27] usb 8-1: Using ep0 maxpacket: 8 [ 600.197540][ T27] usb 8-1: config index 0 descriptor too short (expected 301, got 45) [ 600.230194][ T27] usb 8-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 600.286431][ T27] usb 8-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 600.318329][ T27] usb 8-1: config 16 interface 0 altsetting 0 has an invalid endpoint with address 0x0, skipping [ 600.339684][ T27] usb 8-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 600.368492][ T27] usb 8-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 600.379908][ T27] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 600.417729][ T27] usbtmc 8-1:16.0: bulk endpoints not found [ 600.420357][T11088] binder_alloc: 11080: binder_alloc_buf, no vma [ 602.120016][ T5835] usb 9-1: new high-speed USB device number 14 using dummy_hcd [ 602.331687][ T5835] usb 9-1: config 0 interface 0 altsetting 251 endpoint 0x9 has invalid wMaxPacketSize 0 [ 602.356808][ T5835] usb 9-1: config 0 interface 0 has no altsetting 0 [ 602.387636][ T5835] usb 9-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 602.411265][ T5835] usb 9-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 602.433807][ T5835] usb 9-1: Product: syz [ 602.446123][ T5835] usb 9-1: Manufacturer: syz [ 602.654185][ T27] usb 8-1: USB disconnect, device number 16 [ 602.658139][ T5835] usb 9-1: SerialNumber: syz [ 602.711697][ T5835] usb 9-1: config 0 descriptor?? [ 602.755359][ T5835] usb 9-1: selecting invalid altsetting 0 [ 602.902421][ T8505] usb 10-1: new high-speed USB device number 12 using dummy_hcd [ 603.520412][ T8505] usb 10-1: Using ep0 maxpacket: 16 [ 603.528131][ T8505] usb 10-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 603.545418][ T8505] usb 10-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 603.559194][ T8505] usb 10-1: New USB device found, idVendor=04d8, idProduct=00dd, bcdDevice= 0.00 [ 603.646357][ T8505] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 603.690242][ T8505] usb 10-1: config 0 descriptor?? [ 603.714357][ T8505] usbhid 10-1:0.0: couldn't find an input interrupt endpoint [ 605.551714][ T5842] usb 9-1: USB disconnect, device number 14 [ 606.114917][ T5842] usb 10-1: USB disconnect, device number 12 [ 606.612167][T11190] netlink: 44 bytes leftover after parsing attributes in process `syz.8.989'. [ 606.645745][T11190] netlink: 44 bytes leftover after parsing attributes in process `syz.8.989'. [ 606.825423][T11194] binder_alloc: 11187: binder_alloc_buf, no vma [ 608.651695][T11211] comedi comedi3: 8255: I/O port conflict (0x5,4) [ 608.658852][T11211] comedi comedi3: 8255: I/O port conflict (0x2,4) [ 608.665789][T11211] comedi comedi3: 8255: I/O port conflict (0x1,4) [ 608.673008][T11211] comedi comedi3: 8255: I/O port conflict (0x5c952399,4) [ 608.680583][T11211] comedi comedi3: 8255: I/O port conflict (0x5,4) [ 608.687273][T11211] comedi comedi3: 8255: I/O port conflict (0x3ff,4) [ 608.694564][T11211] comedi comedi3: 8255: I/O port conflict (0x1,4) [ 608.755624][T11211] comedi comedi3: 8255: I/O port conflict (0x1,4) [ 608.762528][T11211] comedi comedi3: 8255: I/O port conflict (0x9,4) [ 608.769375][T11211] comedi comedi3: 8255: I/O port conflict (0x6,4) [ 608.776200][T11211] comedi comedi3: 8255: I/O port conflict (0x4,4) [ 608.782948][T11211] comedi comedi3: 8255: I/O port conflict (0x3,4) [ 608.789811][T11211] comedi comedi3: 8255: I/O port conflict (0xffffffff80000089,4) [ 608.797894][T11211] comedi comedi3: 8255: I/O port conflict (0xfffffffffffffffd,4) [ 610.725316][ T786] usb 8-1: new high-speed USB device number 17 using dummy_hcd [ 610.835406][T11237] netlink: 44 bytes leftover after parsing attributes in process `syz.8.998'. [ 610.846456][T11237] netlink: 44 bytes leftover after parsing attributes in process `syz.8.998'. [ 610.919963][ T8] usb 7-1: new high-speed USB device number 13 using dummy_hcd [ 610.924778][ T786] usb 8-1: Using ep0 maxpacket: 16 [ 610.942158][ T786] usb 8-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 610.985308][ T786] usb 8-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 611.001415][ T786] usb 8-1: New USB device found, idVendor=04d8, idProduct=00dd, bcdDevice= 0.00 [ 611.011258][ T786] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 611.036110][ T786] usb 8-1: config 0 descriptor?? [ 611.055754][ T786] usbhid 8-1:0.0: couldn't find an input interrupt endpoint [ 611.122643][ T8] usb 7-1: config 0 interface 0 altsetting 251 endpoint 0x9 has invalid wMaxPacketSize 0 [ 611.138100][ T8] usb 7-1: config 0 interface 0 has no altsetting 0 [ 611.158360][ T8] usb 7-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 611.177076][ T8] usb 7-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 611.197265][ T8] usb 7-1: Product: syz [ 611.224957][ T8] usb 7-1: Manufacturer: syz [ 611.242372][ T8] usb 7-1: SerialNumber: syz [ 611.358361][ T8] usb 7-1: config 0 descriptor?? [ 611.404033][ T8] usb 7-1: selecting invalid altsetting 0 [ 613.132438][ T8] usb 7-1: USB disconnect, device number 13 [ 613.358712][ T5779] usb 8-1: USB disconnect, device number 17 [ 613.481086][T11262] udevd[11262]: error opening ATTR{/sys/devices/platform/dummy_hcd.6/usb7/7-1/7-1:0.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 616.998749][T11302] netlink: 44 bytes leftover after parsing attributes in process `syz.9.1008'. [ 617.040966][T11302] netlink: 44 bytes leftover after parsing attributes in process `syz.9.1008'. [ 618.770486][ T27] usb 10-1: new high-speed USB device number 13 using dummy_hcd [ 618.979947][ T27] usb 10-1: Using ep0 maxpacket: 16 [ 619.919392][ T27] usb 10-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 619.932662][ T27] usb 10-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 619.947207][ T27] usb 10-1: New USB device found, idVendor=04d8, idProduct=00dd, bcdDevice= 0.00 [ 619.959062][ T27] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 619.976352][ T27] usb 10-1: config 0 descriptor?? [ 620.012563][ T27] usbhid 10-1:0.0: couldn't find an input interrupt endpoint [ 620.234268][T11339] IPVS: sync thread started: state = MASTER, mcast_ifn = veth0_virt_wifi, syncid = 33554432, id = 0 [ 620.234715][T11338] IPVS: stopping master sync thread 11339 ... [ 622.187521][ T785] usb 10-1: USB disconnect, device number 13 [ 625.339871][ T1289] ieee802154 phy0 wpan0: encryption failed: -22 [ 625.346975][ T1289] ieee802154 phy1 wpan1: encryption failed: -22 [ 627.233143][ T5856] libceph: connect (1)[c::]:6789 error -101 [ 627.293236][ T5856] libceph: mon0 (1)[c::]:6789 connect error [ 627.327447][ T5856] libceph: connect (1)[c::]:6789 error -101 [ 627.334569][T11391] ceph: No mds server is up or the cluster is laggy [ 627.354079][ T5856] libceph: mon0 (1)[c::]:6789 connect error [ 627.388153][ T27] libceph: connect (1)[b::]:6789 error -101 [ 627.424983][ T27] libceph: mon0 (1)[b::]:6789 connect error [ 627.480198][T11398] ceph: No mds server is up or the cluster is laggy [ 627.578886][ T5856] libceph: connect (1)[b::]:6789 error -101 [ 627.587669][ T5856] libceph: mon0 (1)[b::]:6789 connect error [ 627.691954][ T27] libceph: connect (1)[c::]:6789 error -101 [ 627.712783][ T27] libceph: mon0 (1)[c::]:6789 connect error [ 628.111145][ T27] libceph: connect (1)[b::]:6789 error -101 [ 628.117283][ T27] libceph: mon0 (1)[b::]:6789 connect error [ 628.241854][ T5856] libceph: connect (1)[c::]:6789 error -101 [ 628.247923][ T5856] libceph: mon0 (1)[c::]:6789 connect error [ 628.862513][T11415] befs: (nbd7): No write support. Marking filesystem read-only [ 628.870388][T11415] syz.7.1027: attempt to access beyond end of device [ 628.870388][T11415] nbd7: rw=0, sector=0, nr_sectors = 2 limit=0 [ 628.883179][T11415] befs: (nbd7): unable to read superblock [ 629.035179][T11419] fuse: Bad value for 'fd' [ 629.608727][T11430] netlink: 24 bytes leftover after parsing attributes in process `syz.6.1029'. [ 629.721160][T11432] sg_write: data in/out 91/42 bytes for SCSI command 0x7-- guessing data in; [ 629.721160][T11432] program syz.8.1030 not setting count and/or reply_len properly [ 632.253874][T11471] netlink: 24 bytes leftover after parsing attributes in process `syz.9.1039'. [ 634.195339][T11498] sg_write: data in/out 91/42 bytes for SCSI command 0x7-- guessing data in; [ 634.195339][T11498] program syz.6.1042 not setting count and/or reply_len properly [ 637.184048][ T8952] Bluetooth: hci2: command 0x0406 tx timeout [ 639.040091][T11550] befs: (nbd6): No write support. Marking filesystem read-only [ 639.049399][T11550] syz.6.1052: attempt to access beyond end of device [ 639.049399][T11550] nbd6: rw=0, sector=0, nr_sectors = 2 limit=0 [ 639.062449][T11550] befs: (nbd6): unable to read superblock [ 639.290481][T11552] fuse: Bad value for 'fd' [ 640.562347][ T5856] usb 10-1: new high-speed USB device number 14 using dummy_hcd [ 641.819124][ T5856] usb 10-1: config 0 interface 0 altsetting 251 endpoint 0x9 has invalid wMaxPacketSize 0 [ 641.878929][ T5856] usb 10-1: config 0 interface 0 has no altsetting 0 [ 642.312632][ T5856] usb 10-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 642.350013][ T5856] usb 10-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 642.384568][ T5856] usb 10-1: config 0 descriptor?? [ 642.587551][ T5856] usb 10-1: can't set config #0, error -71 [ 643.556305][ T5856] usb 10-1: USB disconnect, device number 14 [ 645.402260][T11594] befs: (nbd9): No write support. Marking filesystem read-only [ 645.411136][T11594] syz.9.1061: attempt to access beyond end of device [ 645.411136][T11594] nbd9: rw=0, sector=0, nr_sectors = 2 limit=0 [ 645.426002][T11594] befs: (nbd9): unable to read superblock [ 645.668176][T11597] fuse: Bad value for 'fd' [ 647.324065][T11603] befs: (nbd6): No write support. Marking filesystem read-only [ 647.333150][T11603] syz.6.1063: attempt to access beyond end of device [ 647.333150][T11603] nbd6: rw=0, sector=0, nr_sectors = 2 limit=0 [ 647.346768][T11603] befs: (nbd6): unable to read superblock [ 647.584592][T11606] fuse: Bad value for 'fd' [ 648.950246][ T5779] usb 10-1: new high-speed USB device number 15 using dummy_hcd [ 649.241319][ T5779] usb 10-1: config 0 interface 0 altsetting 251 endpoint 0x9 has invalid wMaxPacketSize 0 [ 649.474631][ T5779] usb 10-1: config 0 interface 0 has no altsetting 0 [ 649.504465][ T5779] usb 10-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 649.521488][ T5779] usb 10-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 649.535436][ T5779] usb 10-1: Product: syz [ 649.545243][ T5779] usb 10-1: Manufacturer: syz [ 649.552404][ T5779] usb 10-1: SerialNumber: syz [ 649.622804][ T5779] usb 10-1: config 0 descriptor?? [ 649.824084][ T5779] usb 10-1: selecting invalid altsetting 0 [ 650.092720][T11624] siw: device registration error -23 [ 651.172133][ T5803] Bluetooth: hci2: command 0x0406 tx timeout [ 652.302620][ T5856] usb 10-1: USB disconnect, device number 15 [ 656.016826][T11672] befs: (nbd9): No write support. Marking filesystem read-only [ 656.024730][T11672] syz.9.1076: attempt to access beyond end of device [ 656.024730][T11672] nbd9: rw=0, sector=0, nr_sectors = 2 limit=0 [ 656.037632][T11672] befs: (nbd9): unable to read superblock [ 656.231245][T11681] fuse: Bad value for 'fd' [ 660.470627][ T8] usb 9-1: new high-speed USB device number 15 using dummy_hcd [ 660.983355][ T8] usb 9-1: config 0 interface 0 altsetting 251 endpoint 0x9 has invalid wMaxPacketSize 0 [ 661.000802][ T8] usb 9-1: config 0 interface 0 has no altsetting 0 [ 661.012389][ T8] usb 9-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 661.053687][ T8] usb 9-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 661.110366][ T8] usb 9-1: Product: syz [ 661.139432][ T8] usb 9-1: Manufacturer: syz [ 661.184375][ T8] usb 9-1: SerialNumber: syz [ 661.293328][ T8] usb 9-1: config 0 descriptor?? [ 661.463821][ T8] usb 9-1: selecting invalid altsetting 0 [ 662.041237][ T8] usb 9-1: USB disconnect, device number 15 [ 662.142172][T11228] udevd[11228]: error opening ATTR{/sys/devices/platform/dummy_hcd.8/usb9/9-1/9-1:0.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 666.721606][ T5779] usb 8-1: new high-speed USB device number 18 using dummy_hcd [ 666.941332][ T5779] usb 8-1: Using ep0 maxpacket: 16 [ 666.967766][ T5779] usb 8-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 666.967954][ T5779] usb 8-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 666.968095][ T5779] usb 8-1: New USB device found, idVendor=04d8, idProduct=00dd, bcdDevice= 0.00 [ 666.968138][ T5779] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 667.074075][ T5779] usb 8-1: config 0 descriptor?? [ 667.080685][ T5779] usbhid 8-1:0.0: couldn't find an input interrupt endpoint [ 668.347536][T11779] netlink: 'syz.6.1102': attribute type 10 has an invalid length. [ 668.396634][T11779] netlink: 40 bytes leftover after parsing attributes in process `syz.6.1102'. [ 668.405713][T11779] dummy0: entered promiscuous mode [ 668.411653][T11779] bridge0: port 3(dummy0) entered blocking state [ 668.418268][T11779] bridge0: port 3(dummy0) entered disabled state [ 668.424882][T11779] dummy0: entered allmulticast mode [ 668.433732][T11779] bridge0: port 3(dummy0) entered blocking state [ 668.441560][T11779] bridge0: port 3(dummy0) entered forwarding state [ 669.464044][T11806] netlink: 116 bytes leftover after parsing attributes in process `syz.9.1105'. [ 670.080864][ T785] usb 8-1: USB disconnect, device number 18 [ 673.614388][T11846] netlink: 16 bytes leftover after parsing attributes in process `syz.7.1113'. [ 674.200032][ T5856] usb 7-1: new high-speed USB device number 14 using dummy_hcd [ 674.291996][ T8] usb 8-1: new high-speed USB device number 19 using dummy_hcd [ 674.299649][ T5779] usb 9-1: new high-speed USB device number 16 using dummy_hcd [ 674.398649][ T5856] usb 7-1: Using ep0 maxpacket: 16 [ 674.412492][ T5856] usb 7-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 674.430849][ T5856] usb 7-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 674.444207][ T5856] usb 7-1: New USB device found, idVendor=04d8, idProduct=00dd, bcdDevice= 0.00 [ 674.453751][ T5856] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 674.467125][ T5856] usb 7-1: config 0 descriptor?? [ 674.477243][ T5856] usbhid 7-1:0.0: couldn't find an input interrupt endpoint [ 674.498837][ T8] usb 8-1: config 0 interface 0 altsetting 251 endpoint 0x9 has invalid wMaxPacketSize 0 [ 674.510140][ T5779] usb 9-1: New USB device found, idVendor=1645, idProduct=0008, bcdDevice=cf.36 [ 674.532974][ T8] usb 8-1: config 0 interface 0 has no altsetting 0 [ 674.541979][ T5779] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 674.552767][ T8] usb 8-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 674.563241][ T8] usb 8-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 674.572944][ T5779] usb 9-1: config 0 descriptor?? [ 674.587764][ T8] usb 8-1: Product: syz [ 674.600094][ T8] usb 8-1: Manufacturer: syz [ 674.605376][ T8] usb 8-1: SerialNumber: syz [ 674.620861][ T8] usb 8-1: config 0 descriptor?? [ 674.634206][ T8] usb 8-1: selecting invalid altsetting 0 [ 674.925355][ T5779] kaweth 9-1:0.0: Firmware present in device. [ 675.021235][ T8] usb 8-1: USB disconnect, device number 19 [ 675.057223][ T5779] kaweth 9-1:0.0: Statistics collection: 0 [ 675.094219][ T5779] kaweth 9-1:0.0: Multicast filter limit: 0 [ 675.156913][ T5779] kaweth 9-1:0.0: MTU: 0 [ 675.187528][ T5779] kaweth 9-1:0.0: Read MAC address 00:00:00:00:00:00 [ 675.687604][ T5779] kaweth 9-1:0.0: Error setting receive filter [ 675.775065][ T5779] kaweth: probe of 9-1:0.0 failed with error -5 [ 675.904894][ T5779] usb 9-1: USB disconnect, device number 16 [ 677.523652][T11870] tipc: Started in network mode [ 677.528767][T11870] tipc: Node identity fe5c8432e754, cluster identity 4711 [ 677.554230][T11870] tipc: Enabled bearer , priority 0 [ 677.631547][ T5779] usb 7-1: USB disconnect, device number 14 [ 678.545323][T11870] syzkaller0: entered promiscuous mode [ 678.673314][T11870] syzkaller0: entered allmulticast mode [ 678.673432][ T8505] tipc: Node number set to 419988530 [ 678.849004][T11870] tipc: Resetting bearer [ 679.128548][T11869] tipc: Resetting bearer [ 679.355863][T11884] netlink: 8 bytes leftover after parsing attributes in process `syz.7.1125'. [ 681.881994][T11898] siw: device registration error -23 [ 682.990508][ T786] usb 10-1: new high-speed USB device number 16 using dummy_hcd [ 683.220408][ T786] usb 10-1: Using ep0 maxpacket: 16 [ 683.272548][ T786] usb 10-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 683.297922][ T786] usb 10-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 683.311452][ T786] usb 10-1: New USB device found, idVendor=04d8, idProduct=00dd, bcdDevice= 0.00 [ 683.320773][ T786] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 683.352768][ T786] usb 10-1: config 0 descriptor?? [ 683.372382][ T786] usbhid 10-1:0.0: couldn't find an input interrupt endpoint [ 684.531664][T11869] tipc: Disabling bearer [ 685.722336][ T5856] usb 10-1: USB disconnect, device number 16 [ 686.604402][ T1289] ieee802154 phy0 wpan0: encryption failed: -22 [ 686.610829][ T1289] ieee802154 phy1 wpan1: encryption failed: -22 [ 687.562365][T11940] siw: device registration error -23 [ 689.845398][T11955] binder_alloc: 11930: binder_alloc_buf, no vma [ 691.732274][T11969] IPVS: sync thread started: state = MASTER, mcast_ifn = veth0_virt_wifi, syncid = 33554432, id = 0 [ 691.749504][T11968] IPVS: stopping master sync thread 11969 ... [ 696.583603][T11993] netlink: 44 bytes leftover after parsing attributes in process `syz.7.1151'. [ 696.595107][T11993] netlink: 44 bytes leftover after parsing attributes in process `syz.7.1151'. [ 696.780045][T11996] IPVS: stopping master sync thread 11997 ... [ 696.780069][T11997] IPVS: sync thread started: state = MASTER, mcast_ifn = veth0_virt_wifi, syncid = 33554432, id = 0 [ 697.226893][T12004] binder_alloc: 11998: binder_alloc_buf, no vma [ 700.458747][T12020] netlink: 'syz.9.1159': attribute type 10 has an invalid length. [ 700.468011][T12020] netlink: 40 bytes leftover after parsing attributes in process `syz.9.1159'. [ 700.981073][T12020] team0: Port device geneve0 added [ 701.896894][T12031] netlink: 44 bytes leftover after parsing attributes in process `syz.8.1162'. [ 701.929063][T12031] netlink: 44 bytes leftover after parsing attributes in process `syz.8.1162'. [ 701.958092][T12035] IPVS: sync thread started: state = MASTER, mcast_ifn = veth0_virt_wifi, syncid = 33554432, id = 0 [ 701.969658][T12034] IPVS: stopping master sync thread 12035 ... [ 704.894372][T12057] siw: device registration error -23 [ 706.811263][T12073] IPVS: sync thread started: state = MASTER, mcast_ifn = veth0_virt_wifi, syncid = 33554432, id = 0 [ 706.823213][T12071] IPVS: stopping master sync thread 12073 ... [ 707.029933][ T785] usb 7-1: new high-speed USB device number 15 using dummy_hcd [ 707.041058][T12079] netlink: 8 bytes leftover after parsing attributes in process `syz.9.1176'. [ 707.314959][ T785] usb 7-1: config 0 interface 0 altsetting 251 endpoint 0x9 has invalid wMaxPacketSize 0 [ 707.344592][ T785] usb 7-1: config 0 interface 0 has no altsetting 0 [ 707.421321][T12088] binder_alloc: 12077: binder_alloc_buf, no vma [ 708.067392][ T785] usb 7-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 708.076670][ T785] usb 7-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 708.085367][ T785] usb 7-1: Product: syz [ 708.089688][ T785] usb 7-1: Manufacturer: syz [ 708.094839][ T785] usb 7-1: SerialNumber: syz [ 708.126918][ T785] usb 7-1: config 0 descriptor?? [ 708.137883][ T785] usb 7-1: selecting invalid altsetting 0 [ 708.364284][ T785] usb 7-1: USB disconnect, device number 15 [ 708.510447][T12099] ptrace attach of "./syz-executor exec"[7007] was attempted by "./syz-executor exec"[12099] [ 712.678326][T12140] comedi comedi3: 8255: I/O port conflict (0x5,4) [ 712.686175][T12140] comedi comedi3: 8255: I/O port conflict (0x2,4) [ 712.693269][T12140] comedi comedi3: 8255: I/O port conflict (0x1,4) [ 712.700731][T12140] comedi comedi3: 8255: I/O port conflict (0x5c952399,4) [ 712.708035][T12140] comedi comedi3: 8255: I/O port conflict (0x5,4) [ 712.714671][T12140] comedi comedi3: 8255: I/O port conflict (0x3ff,4) [ 712.721815][T12140] comedi comedi3: 8255: I/O port conflict (0x1,4) [ 712.759575][T12140] comedi comedi3: 8255: I/O port conflict (0x1,4) [ 712.766453][T12140] comedi comedi3: 8255: I/O port conflict (0x9,4) [ 712.774117][T12140] comedi comedi3: 8255: I/O port conflict (0x6,4) [ 712.781051][T12140] comedi comedi3: 8255: I/O port conflict (0x4,4) [ 712.790181][T12140] comedi comedi3: 8255: I/O port conflict (0x3,4) [ 712.797119][T12140] comedi comedi3: 8255: I/O port conflict (0xffffffff80000089,4) [ 712.805272][T12140] comedi comedi3: 8255: I/O port conflict (0xfffffffffffffffd,4) [ 716.386086][T12167] IPVS: sync thread started: state = MASTER, mcast_ifn = veth0_virt_wifi, syncid = 33554432, id = 0 [ 716.397699][T12166] IPVS: stopping master sync thread 12167 ... [ 717.286942][T12174] befs: (nbd9): No write support. Marking filesystem read-only [ 717.295669][T12174] syz.9.1197: attempt to access beyond end of device [ 717.295669][T12174] nbd9: rw=0, sector=0, nr_sectors = 2 limit=0 [ 717.308559][T12174] befs: (nbd9): unable to read superblock [ 717.514291][T12176] fuse: Bad value for 'fd' [ 718.768001][T12187] binder_alloc: 12178: binder_alloc_buf, no vma [ 720.193254][T12197] IPVS: sync thread started: state = MASTER, mcast_ifn = veth0_virt_wifi, syncid = 33554432, id = 0 [ 720.204842][T12196] IPVS: stopping master sync thread 12197 ... [ 721.093418][T12200] netlink: 116 bytes leftover after parsing attributes in process `syz.6.1205'. [ 723.274536][T12222] befs: (nbd8): No write support. Marking filesystem read-only [ 723.283230][T12222] syz.8.1211: attempt to access beyond end of device [ 723.283230][T12222] nbd8: rw=0, sector=0, nr_sectors = 2 limit=0 [ 723.296310][T12222] befs: (nbd8): unable to read superblock [ 723.555487][T12227] fuse: Bad value for 'fd' [ 737.793143][T12333] befs: (nbd8): No write support. Marking filesystem read-only [ 737.802191][T12333] syz.8.1234: attempt to access beyond end of device [ 737.802191][T12333] nbd8: rw=0, sector=0, nr_sectors = 2 limit=0 [ 737.815203][T12333] befs: (nbd8): unable to read superblock [ 738.053323][T12335] fuse: Bad value for 'fd' [ 747.964357][ T1289] ieee802154 phy0 wpan0: encryption failed: -22 [ 747.972103][ T1289] ieee802154 phy1 wpan1: encryption failed: -22 [ 748.442699][T12399] netlink: 44 bytes leftover after parsing attributes in process `syz.9.1253'. [ 748.455584][T12399] netlink: 44 bytes leftover after parsing attributes in process `syz.9.1253'. [ 748.549902][ T5779] usb 8-1: new high-speed USB device number 20 using dummy_hcd [ 748.665035][T12402] befs: (nbd8): No write support. Marking filesystem read-only [ 748.674044][T12402] syz.8.1254: attempt to access beyond end of device [ 748.674044][T12402] nbd8: rw=0, sector=0, nr_sectors = 2 limit=0 [ 748.687021][T12402] befs: (nbd8): unable to read superblock [ 748.803409][ T5779] usb 8-1: config 0 interface 0 altsetting 251 endpoint 0x9 has invalid wMaxPacketSize 0 [ 748.941529][T12405] fuse: Bad value for 'fd' [ 750.840663][ T5779] usb 8-1: config 0 interface 0 has no altsetting 0 [ 751.051626][ T5779] usb 8-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 751.060909][ T5779] usb 8-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 751.070176][ T5779] usb 8-1: Product: syz [ 751.080274][ T5779] usb 8-1: Manufacturer: syz [ 751.084945][ T5779] usb 8-1: SerialNumber: syz [ 751.117516][ T5779] usb 8-1: config 0 descriptor?? [ 751.162936][ T5779] usb 8-1: selecting invalid altsetting 0 [ 751.316040][ T5779] usb 8-1: USB disconnect, device number 20 [ 751.412063][T12419] udevd[12419]: error opening ATTR{/sys/devices/platform/dummy_hcd.7/usb8/8-1/8-1:0.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 754.183827][T12445] befs: (nbd8): No write support. Marking filesystem read-only [ 754.192413][T12445] syz.8.1264: attempt to access beyond end of device [ 754.192413][T12445] nbd8: rw=0, sector=0, nr_sectors = 2 limit=0 [ 754.205316][T12445] befs: (nbd8): unable to read superblock [ 754.394117][T12447] fuse: Bad value for 'fd' [ 755.760496][ T786] usb 8-1: new high-speed USB device number 21 using dummy_hcd [ 756.022874][ T786] usb 8-1: config 0 interface 0 altsetting 251 endpoint 0x9 has invalid wMaxPacketSize 0 [ 756.790598][ T786] usb 8-1: config 0 interface 0 has no altsetting 0 [ 756.813287][ T786] usb 8-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 756.822479][ T786] usb 8-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 756.830808][ T786] usb 8-1: Product: syz [ 756.835134][ T786] usb 8-1: Manufacturer: syz [ 756.839845][ T786] usb 8-1: SerialNumber: syz [ 756.846530][ T786] usb 8-1: config 0 descriptor?? [ 756.857414][ T786] usb 8-1: selecting invalid altsetting 0 [ 756.871473][T12456] netlink: 116 bytes leftover after parsing attributes in process `syz.6.1267'. [ 756.886466][T12464] netlink: 8 bytes leftover after parsing attributes in process `syz.8.1268'. [ 759.352851][ T5842] usb 8-1: USB disconnect, device number 21 [ 760.511110][T12495] befs: (nbd9): No write support. Marking filesystem read-only [ 760.519671][T12495] syz.9.1275: attempt to access beyond end of device [ 760.519671][T12495] nbd9: rw=0, sector=0, nr_sectors = 2 limit=0 [ 760.532735][T12495] befs: (nbd9): unable to read superblock [ 760.839555][T12498] fuse: Bad value for 'fd' [ 764.055426][T12519] netlink: 116 bytes leftover after parsing attributes in process `syz.6.1279'. [ 767.320761][T12543] netlink: 8 bytes leftover after parsing attributes in process `syz.6.1286'. [ 770.962034][T12589] binder: BINDER_SET_CONTEXT_MGR already set [ 770.968703][T12589] binder: 12583:12589 ioctl 4018620d 200000000040 returned -16 [ 772.014048][T12580] netlink: 116 bytes leftover after parsing attributes in process `syz.7.1292'. [ 772.630380][T12596] siw: device registration error -23 [ 774.877404][T12619] binder: BINDER_SET_CONTEXT_MGR already set [ 774.883689][T12619] binder: 12615:12619 ioctl 4018620d 200000000040 returned -16 [ 778.600722][T12630] netlink: 116 bytes leftover after parsing attributes in process `syz.7.1306'. [ 779.231488][T12631] siw: device registration error -23 [ 779.712987][T12649] process 'syz.9.1311' launched '/dev/fd/3' with NULL argv: empty string added [ 783.360110][ T23] usb 10-1: new high-speed USB device number 17 using dummy_hcd [ 784.119599][T12681] siw: device registration error -23 [ 784.260557][ T23] usb 10-1: config 0 interface 0 altsetting 251 endpoint 0x9 has invalid wMaxPacketSize 0 [ 784.271181][ T23] usb 10-1: config 0 interface 0 has no altsetting 0 [ 784.293143][ T23] usb 10-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 784.312185][ T23] usb 10-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 784.354807][ T23] usb 10-1: Product: syz [ 784.359249][ T23] usb 10-1: Manufacturer: syz [ 784.371988][ T23] usb 10-1: SerialNumber: syz [ 784.411088][ T23] usb 10-1: config 0 descriptor?? [ 784.434669][ T23] usb 10-1: selecting invalid altsetting 0 [ 788.545442][ T27] usb 10-1: USB disconnect, device number 17 [ 790.164916][T12714] befs: (nbd9): No write support. Marking filesystem read-only [ 790.248864][T12714] syz.9.1329: attempt to access beyond end of device [ 790.248864][T12714] nbd9: rw=0, sector=0, nr_sectors = 2 limit=0 [ 791.362920][T12714] befs: (nbd9): unable to read superblock [ 791.720604][T12722] fuse: Bad value for 'fd' [ 791.741426][T12725] siw: device registration error -23 [ 793.239846][ T5779] usb 10-1: new high-speed USB device number 18 using dummy_hcd [ 794.450844][ T5779] usb 10-1: config 0 interface 0 altsetting 251 endpoint 0x9 has invalid wMaxPacketSize 0 [ 794.460951][ T5779] usb 10-1: config 0 interface 0 has no altsetting 0 [ 794.481372][ T5779] usb 10-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 794.499994][ T5779] usb 10-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 794.552555][ T5779] usb 10-1: Product: syz [ 794.556897][ T5779] usb 10-1: Manufacturer: syz [ 794.640058][ T5779] usb 10-1: SerialNumber: syz [ 794.811611][T12751] netlink: 24 bytes leftover after parsing attributes in process `syz.6.1339'. [ 795.188367][ T5779] usb 10-1: config 0 descriptor?? [ 795.199406][ T5779] usb 10-1: selecting invalid altsetting 0 [ 797.459494][ T27] usb 10-1: USB disconnect, device number 18 [ 798.956715][T12793] ipvlan2: entered promiscuous mode [ 799.561228][T12795] siw: device registration error -23 [ 799.594567][T12797] befs: (nbd6): No write support. Marking filesystem read-only [ 799.662107][T12797] syz.6.1343: attempt to access beyond end of device [ 799.662107][T12797] nbd6: rw=0, sector=0, nr_sectors = 2 limit=0 [ 799.695936][T12797] befs: (nbd6): unable to read superblock [ 800.088640][T12810] fuse: Bad value for 'fd' [ 800.430771][T12367] usb 8-1: new full-speed USB device number 22 using dummy_hcd [ 800.582611][T12805] syzkaller0: entered promiscuous mode [ 800.592796][T12805] syzkaller0: entered allmulticast mode [ 800.684118][T12367] usb 8-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 800.704954][T12367] usb 8-1: config 0 interface 0 altsetting 0 has an invalid endpoint with address 0xBE, skipping [ 800.720971][T12367] usb 8-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 800.744556][T12367] usb 8-1: New USB device found, idVendor=10c5, idProduct=819a, bcdDevice=e4.46 [ 800.773700][T12367] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=35 [ 800.851798][T12367] usb 8-1: Product: syz [ 800.856035][T12367] usb 8-1: Manufacturer: syz [ 800.897172][T12367] usb 8-1: SerialNumber: syz [ 800.958881][T12367] usb 8-1: config 0 descriptor?? [ 801.051819][T12367] radio-si470x 8-1:0.0: could not find interrupt in endpoint [ 801.111530][T12367] radio-si470x: probe of 8-1:0.0 failed with error -5 [ 801.161625][T12367] usbhid 8-1:0.0: couldn't find an input interrupt endpoint [ 803.147788][ T786] usb 8-1: USB disconnect, device number 22 [ 803.382400][T12841] siw: device registration error -23 [ 804.817254][T12851] befs: (nbd7): No write support. Marking filesystem read-only [ 804.871521][T12851] syz.7.1359: attempt to access beyond end of device [ 804.871521][T12851] nbd7: rw=0, sector=0, nr_sectors = 2 limit=0 [ 804.948506][T12851] befs: (nbd7): unable to read superblock [ 805.001957][T12850] comedi comedi3: 8255: I/O port conflict (0x5,4) [ 805.008571][T12850] comedi comedi3: 8255: I/O port conflict (0x2,4) [ 805.015235][T12850] comedi comedi3: 8255: I/O port conflict (0x1,4) [ 805.022010][T12850] comedi comedi3: 8255: I/O port conflict (0x5c952399,4) [ 805.029121][T12850] comedi comedi3: 8255: I/O port conflict (0x5,4) [ 805.036367][T12850] comedi comedi3: 8255: I/O port conflict (0x3ff,4) [ 805.043139][T12850] comedi comedi3: 8255: I/O port conflict (0x1,4) [ 805.049594][T12850] comedi comedi3: 8255: I/O port conflict (0x1,4) [ 805.056159][T12850] comedi comedi3: 8255: I/O port conflict (0x9,4) [ 805.062727][T12850] comedi comedi3: 8255: I/O port conflict (0x6,4) [ 805.069192][T12850] comedi comedi3: 8255: I/O port conflict (0x4,4) [ 805.075705][T12850] comedi comedi3: 8255: I/O port conflict (0x3,4) [ 805.082240][T12850] comedi comedi3: 8255: I/O port conflict (0xffffffff80000089,4) [ 805.090224][T12850] comedi comedi3: 8255: I/O port conflict (0xfffffffffffffffd,4) [ 805.319439][T12857] fuse: Bad value for 'fd' [ 809.212747][T12882] siw: device registration error -23 [ 809.228692][T12869] Bluetooth: MGMT ver 1.22 [ 809.268401][ T1289] ieee802154 phy0 wpan0: encryption failed: -22 [ 809.274932][ T1289] ieee802154 phy1 wpan1: encryption failed: -22 [ 810.657981][T12894] befs: (nbd6): No write support. Marking filesystem read-only [ 810.686971][T12894] syz.6.1370: attempt to access beyond end of device [ 810.686971][T12894] nbd6: rw=0, sector=0, nr_sectors = 2 limit=0 [ 810.700891][T12894] befs: (nbd6): unable to read superblock [ 811.013325][T12894] fuse: Bad value for 'fd' [ 811.183763][T12883] Bluetooth: hci0: command tx timeout [ 811.260031][ T5803] Bluetooth: hci0: Opcode 0x0c1a failed: -110 [ 812.929240][T12911] comedi comedi3: 8255: I/O port conflict (0x5,4) [ 812.935840][T12911] comedi comedi3: 8255: I/O port conflict (0x2,4) [ 812.942448][T12911] comedi comedi3: 8255: I/O port conflict (0x1,4) [ 812.949007][T12911] comedi comedi3: 8255: I/O port conflict (0x5c952399,4) [ 812.956180][T12911] comedi comedi3: 8255: I/O port conflict (0x5,4) [ 812.962701][T12911] comedi comedi3: 8255: I/O port conflict (0x3ff,4) [ 812.969410][T12911] comedi comedi3: 8255: I/O port conflict (0x1,4) [ 812.975927][T12911] comedi comedi3: 8255: I/O port conflict (0x1,4) [ 812.982546][T12911] comedi comedi3: 8255: I/O port conflict (0x9,4) [ 812.989025][T12911] comedi comedi3: 8255: I/O port conflict (0x6,4) [ 812.995630][T12911] comedi comedi3: 8255: I/O port conflict (0x4,4) [ 813.002174][T12911] comedi comedi3: 8255: I/O port conflict (0x3,4) [ 813.008689][T12911] comedi comedi3: 8255: I/O port conflict (0xffffffff80000089,4) [ 813.016543][T12911] comedi comedi3: 8255: I/O port conflict (0xfffffffffffffffd,4) [ 814.032399][ T5803] Bluetooth: hci0: command tx timeout [ 816.866552][T12938] iommufd_mock iommufd_mock1: Adding to iommu group 0 [ 819.994693][T12977] comedi comedi3: 8255: I/O port conflict (0x5,4) [ 820.001343][T12977] comedi comedi3: 8255: I/O port conflict (0x2,4) [ 820.007840][T12977] comedi comedi3: 8255: I/O port conflict (0x1,4) [ 820.014422][T12977] comedi comedi3: 8255: I/O port conflict (0x5c952399,4) [ 820.021620][T12977] comedi comedi3: 8255: I/O port conflict (0x5,4) [ 820.028075][T12977] comedi comedi3: 8255: I/O port conflict (0x3ff,4) [ 820.034909][T12977] comedi comedi3: 8255: I/O port conflict (0x1,4) [ 820.041407][T12977] comedi comedi3: 8255: I/O port conflict (0x1,4) [ 820.047856][T12977] comedi comedi3: 8255: I/O port conflict (0x9,4) [ 820.054385][T12977] comedi comedi3: 8255: I/O port conflict (0x6,4) [ 820.061005][T12977] comedi comedi3: 8255: I/O port conflict (0x4,4) [ 820.067838][T12977] comedi comedi3: 8255: I/O port conflict (0x3,4) [ 820.074692][T12977] comedi comedi3: 8255: I/O port conflict (0xffffffff80000089,4) [ 820.082564][T12977] comedi comedi3: 8255: I/O port conflict (0xfffffffffffffffd,4) [ 824.259939][ T5835] usb 7-1: new low-speed USB device number 16 using dummy_hcd [ 824.495063][ T5835] usb 7-1: unable to get BOS descriptor or descriptor too short [ 824.744209][ T5835] usb 7-1: config 9 has an invalid interface number: 198 but max is 0 [ 824.817068][ T5835] usb 7-1: config 9 has no interface number 0 [ 824.878765][ T5835] usb 7-1: config 9 interface 198 has no altsetting 0 [ 825.709565][ T5835] usb 7-1: string descriptor 0 read error: -22 [ 825.725110][ T5835] usb 7-1: New USB device found, idVendor=15f4, idProduct=0015, bcdDevice=6f.2b [ 825.755197][ T5835] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 826.467467][ T5835] dvb-usb: found a 'Hanftek UMT-010 DVB-T USB2.0' in warm state. [ 826.602286][ T5835] dvb-usb: bulk message failed: -22 (3/0) [ 826.670837][T13034] comedi comedi3: 8255: I/O port conflict (0x5,4) [ 826.677360][T13034] comedi comedi3: 8255: I/O port conflict (0x2,4) [ 826.683987][T13034] comedi comedi3: 8255: I/O port conflict (0x1,4) [ 826.690528][T13034] comedi comedi3: 8255: I/O port conflict (0x5c952399,4) [ 826.697605][T13034] comedi comedi3: 8255: I/O port conflict (0x5,4) [ 826.704123][T13034] comedi comedi3: 8255: I/O port conflict (0x3ff,4) [ 826.710857][T13034] comedi comedi3: 8255: I/O port conflict (0x1,4) [ 826.717327][T13034] comedi comedi3: 8255: I/O port conflict (0x1,4) [ 826.723830][T13034] comedi comedi3: 8255: I/O port conflict (0x9,4) [ 826.730400][T13034] comedi comedi3: 8255: I/O port conflict (0x6,4) [ 826.736873][T13034] comedi comedi3: 8255: I/O port conflict (0x4,4) [ 826.744003][T13034] comedi comedi3: 8255: I/O port conflict (0x3,4) [ 826.750548][T13034] comedi comedi3: 8255: I/O port conflict (0xffffffff80000089,4) [ 826.758304][T13034] comedi comedi3: 8255: I/O port conflict (0xfffffffffffffffd,4) [ 826.785502][ T5835] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 826.800689][ T5835] dvbdev: DVB: registering new adapter (Hanftek UMT-010 DVB-T USB2.0) [ 826.809293][ T5835] usb 7-1: media controller created [ 828.059101][ T5835] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 828.239699][ T5835] DVB: Unable to find symbol mt352_attach() [ 828.248778][ T5835] dvb-usb: no frontend was attached by 'Hanftek UMT-010 DVB-T USB2.0' [ 828.268364][ T5835] dvb-usb: bulk message failed: -22 (3/0) [ 828.320593][ T5835] dvb-usb: Hanftek UMT-010 DVB-T USB2.0 successfully initialized and connected. [ 829.895290][ T5779] usb 7-1: USB disconnect, device number 16 [ 830.597999][ T5779] dvb-usb: Hanftek UMT-010 DVB-T USB2.0 successfully deinitialized and disconnected. [ 831.835766][T13068] netlink: 8 bytes leftover after parsing attributes in process `syz.6.1405'. [ 833.225747][T13076] netlink: 'syz.9.1407': attribute type 4 has an invalid length. [ 834.586973][T13093] netlink: 116 bytes leftover after parsing attributes in process `syz.6.1409'. [ 834.618858][T13097] comedi comedi3: 8255: I/O port conflict (0x5,4) [ 834.625711][T13097] comedi comedi3: 8255: I/O port conflict (0x2,4) [ 834.632949][T13097] comedi comedi3: 8255: I/O port conflict (0x1,4) [ 834.639448][T13097] comedi comedi3: 8255: I/O port conflict (0x5c952399,4) [ 834.646553][T13097] comedi comedi3: 8255: I/O port conflict (0x5,4) [ 834.653060][T13097] comedi comedi3: 8255: I/O port conflict (0x3ff,4) [ 834.659793][T13097] comedi comedi3: 8255: I/O port conflict (0x1,4) [ 834.666252][T13097] comedi comedi3: 8255: I/O port conflict (0x1,4) [ 834.672724][T13097] comedi comedi3: 8255: I/O port conflict (0x9,4) [ 834.679241][T13097] comedi comedi3: 8255: I/O port conflict (0x6,4) [ 834.685750][T13097] comedi comedi3: 8255: I/O port conflict (0x4,4) [ 834.692228][T13097] comedi comedi3: 8255: I/O port conflict (0x3,4) [ 834.698698][T13097] comedi comedi3: 8255: I/O port conflict (0xffffffff80000089,4) [ 834.706546][T13097] comedi comedi3: 8255: I/O port conflict (0xfffffffffffffffd,4) [ 835.619003][T13108] befs: (nbd6): No write support. Marking filesystem read-only [ 835.627600][T13108] syz.6.1412: attempt to access beyond end of device [ 835.627600][T13108] nbd6: rw=0, sector=0, nr_sectors = 2 limit=0 [ 835.640760][T13108] befs: (nbd6): unable to read superblock [ 835.867055][T13111] fuse: Bad value for 'fd' [ 841.404983][T13149] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 842.539038][T13178] netlink: 8 bytes leftover after parsing attributes in process `syz.8.1418'. [ 843.834606][ T5856] usb 10-1: new high-speed USB device number 19 using dummy_hcd [ 844.014131][T13190] mmap: syz.8.1419 (13190) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 844.538962][ T5856] usb 10-1: Using ep0 maxpacket: 16 [ 845.536018][ T5856] usb 10-1: device descriptor read/all, error -71 [ 845.613687][T13200] befs: (nbd8): No write support. Marking filesystem read-only [ 845.622180][T13200] syz.8.1422: attempt to access beyond end of device [ 845.622180][T13200] nbd8: rw=0, sector=0, nr_sectors = 2 limit=0 [ 845.635167][T13200] befs: (nbd8): unable to read superblock [ 845.870369][T13202] fuse: Bad value for 'fd' [ 849.490371][T13245] loop6: detected capacity change from 0 to 524287999 [ 849.761210][ C1] I/O error, dev loop6, sector 524287744 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 849.774237][ C1] I/O error, dev loop6, sector 524287744 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 849.784443][ C1] Buffer I/O error on dev loop6, logical block 65535968, async page read [ 849.899866][ T786] usb 10-1: new high-speed USB device number 21 using dummy_hcd [ 850.155162][ T786] usb 10-1: New USB device found, idVendor=0c45, idProduct=60a8, bcdDevice=b5.55 [ 850.168624][ T786] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 850.214951][ T786] usb 10-1: Product: syz [ 850.219277][ T786] usb 10-1: Manufacturer: syz [ 850.249886][ T786] usb 10-1: SerialNumber: syz [ 850.279114][ T786] usb 10-1: config 0 descriptor?? [ 850.312157][ T786] gspca_main: sonixb-2.14.0 probing 0c45:60a8 [ 850.695654][ C0] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x84700 phys_seg 128 prio class 2 [ 850.713518][ C0] I/O error, dev loop6, sector 1032 op 0x0:(READ) flags 0x80700 phys_seg 102 prio class 2 [ 850.727029][ C0] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 850.736356][ C0] Buffer I/O error on dev loop6, logical block 0, async page read [ 851.494552][ T786] sonixb 10-1:0.0: Error reading register 00: -71 [ 851.550512][ T786] usb 10-1: USB disconnect, device number 21 [ 851.839481][T13260] siw: device registration error -23 [ 852.152653][T13264] befs: (nbd9): No write support. Marking filesystem read-only [ 852.161964][T13264] syz.9.1434: attempt to access beyond end of device [ 852.161964][T13264] nbd9: rw=0, sector=0, nr_sectors = 2 limit=0 [ 852.174828][T13264] befs: (nbd9): unable to read superblock [ 852.403513][T13267] fuse: Bad value for 'fd' [ 855.570515][ T786] usb 8-1: new high-speed USB device number 23 using dummy_hcd [ 855.769840][ T786] usb 8-1: Using ep0 maxpacket: 8 [ 855.782590][ T786] usb 8-1: config 0 interface 0 has no altsetting 0 [ 855.792006][ T786] usb 8-1: New USB device found, idVendor=1e7d, idProduct=2dbe, bcdDevice= 0.00 [ 855.804860][ T786] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 855.819532][ T786] usb 8-1: config 0 descriptor?? [ 856.265638][T13295] befs: (nbd9): No write support. Marking filesystem read-only [ 856.275953][T13295] syz.9.1444: attempt to access beyond end of device [ 856.275953][T13295] nbd9: rw=0, sector=0, nr_sectors = 2 limit=0 [ 856.289363][T13295] befs: (nbd9): unable to read superblock [ 856.354847][ T786] konepure 0003:1E7D:2DBE.0003: unknown main item tag 0x0 [ 856.515233][T13297] fuse: Bad value for 'fd' [ 856.934666][ T786] konepure 0003:1E7D:2DBE.0003: hidraw0: USB HID v1.01 Device [HID 1e7d:2dbe] on usb-dummy_hcd.7-1/input0 [ 857.198749][ T786] usb 8-1: USB disconnect, device number 23 [ 858.526244][T13318] netlink: 116 bytes leftover after parsing attributes in process `syz.8.1448'. [ 863.426607][T13364] binder: 13363:13364 ioctl 4018620d 0 returned -22 [ 865.400024][T13379] netlink: 116 bytes leftover after parsing attributes in process `syz.7.1462'. [ 870.615126][T13445] binder: 13443:13445 ioctl 4018620d 0 returned -22 [ 870.705182][ T1289] ieee802154 phy0 wpan0: encryption failed: -22 [ 870.720051][ T1289] ieee802154 phy1 wpan1: encryption failed: -22 [ 878.623941][T13509] binder: 13508:13509 ioctl 4018620d 0 returned -22 [ 880.152381][T13515] tty tty4: ldisc open failed (-12), clearing slot 3 [ 882.443012][T13540] kvm: pic: non byte read [ 884.089350][T13561] binder: BINDER_SET_CONTEXT_MGR already set [ 884.095680][T13561] binder: 13553:13561 ioctl 4018620d 200000000040 returned -16 [ 885.283365][T13567] befs: (nbd8): No write support. Marking filesystem read-only [ 885.292589][T13567] syz.8.1496: attempt to access beyond end of device [ 885.292589][T13567] nbd8: rw=0, sector=0, nr_sectors = 2 limit=0 [ 885.305835][T13567] befs: (nbd8): unable to read superblock [ 886.710204][T13575] fuse: Bad value for 'fd' [ 888.954352][T13602] binder: BINDER_SET_CONTEXT_MGR already set [ 888.960640][T13602] binder: 13597:13602 ioctl 4018620d 200000000040 returned -16 [ 890.923979][T13618] befs: (nbd9): No write support. Marking filesystem read-only [ 891.106714][T13618] syz.9.1508: attempt to access beyond end of device [ 891.106714][T13618] nbd9: rw=0, sector=0, nr_sectors = 2 limit=0 [ 892.125468][T13618] befs: (nbd9): unable to read superblock [ 892.263331][T13615] fuse: Bad value for 'fd' [ 893.417341][T13644] binder: BINDER_SET_CONTEXT_MGR already set [ 893.423739][T13644] binder: 13636:13644 ioctl 4018620d 200000000040 returned -16 [ 897.406759][T13674] befs: (nbd9): No write support. Marking filesystem read-only [ 897.445016][T13674] syz.9.1521: attempt to access beyond end of device [ 897.445016][T13674] nbd9: rw=0, sector=0, nr_sectors = 2 limit=0 [ 897.807168][T13674] befs: (nbd9): unable to read superblock [ 898.250820][T13680] binder: 13678:13680 ioctl c0306201 0 returned -14 [ 899.552757][T13674] fuse: Bad value for 'fd' [ 900.667459][T13682] netlink: 'syz.6.1524': attribute type 10 has an invalid length. [ 900.981866][T13682] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 900.993056][T13682] bond0: (slave batadv0): Enslaving as an active interface with an up link [ 904.215971][T13722] binder: 13721:13722 ioctl c0306201 0 returned -14 [ 906.209485][T13734] befs: (nbd8): No write support. Marking filesystem read-only [ 907.175210][T13734] syz.8.1536: attempt to access beyond end of device [ 907.175210][T13734] nbd8: rw=0, sector=0, nr_sectors = 2 limit=0 [ 907.189885][T13734] befs: (nbd8): unable to read superblock [ 907.412084][T13748] fuse: Bad value for 'fd' [ 912.218057][T13795] befs: (nbd7): No write support. Marking filesystem read-only [ 912.279910][T13795] syz.7.1550: attempt to access beyond end of device [ 912.279910][T13795] nbd7: rw=0, sector=0, nr_sectors = 2 limit=0 [ 912.293220][T13795] befs: (nbd7): unable to read superblock [ 913.279226][T13797] fuse: Bad value for 'fd' [ 918.771445][T13854] befs: (nbd9): No write support. Marking filesystem read-only [ 918.771580][T13854] syz.9.1564: attempt to access beyond end of device [ 918.771580][T13854] nbd9: rw=0, sector=0, nr_sectors = 2 limit=0 [ 918.771602][T13854] befs: (nbd9): unable to read superblock [ 919.703595][T13853] fuse: Bad value for 'fd' [ 920.137090][T13868] fuse: Unknown parameter 'use00000000000000000000' [ 926.176205][T13903] siw: device registration error -23 [ 926.605208][T13910] fuse: Unknown parameter 'user_i00000000000000000000' [ 929.462555][T13937] netlink: 116 bytes leftover after parsing attributes in process `syz.8.1584'. [ 930.506212][T13946] netlink: 8 bytes leftover after parsing attributes in process `syz.8.1587'. [ 930.569742][T13954] siw: device registration error -23 [ 931.145144][T13958] fuse: Unknown parameter 'user_i00000000000000000000' [ 932.336221][ T1289] ieee802154 phy0 wpan0: encryption failed: -22 [ 932.347368][ T1289] ieee802154 phy1 wpan1: encryption failed: -22 [ 934.341769][T13988] netlink: 116 bytes leftover after parsing attributes in process `syz.6.1595'. [ 934.730476][T14004] fuse: Unknown parameter 'user_i00000000000000000000' [ 935.345261][T14007] siw: device registration error -23 [ 939.079369][T14062] netlink: 'syz.6.1608': attribute type 10 has an invalid length. [ 939.432196][T14064] befs: (nbd9): No write support. Marking filesystem read-only [ 939.440098][T14064] syz.9.1609: attempt to access beyond end of device [ 939.440098][T14064] nbd9: rw=0, sector=0, nr_sectors = 2 limit=0 [ 939.452883][T14064] befs: (nbd9): unable to read superblock [ 940.043099][T14069] fuse: Bad value for 'fd' [ 943.680971][T14106] netlink: 116 bytes leftover after parsing attributes in process `syz.9.1617'. [ 944.360049][T14109] netlink: 'syz.8.1618': attribute type 10 has an invalid length. [ 944.488517][T14109] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 944.503189][T14109] bond0: (slave batadv0): Enslaving as an active interface with an up link [ 945.360706][T14127] netlink: 4 bytes leftover after parsing attributes in process `syz.8.1622'. [ 948.620368][T14165] netlink: 116 bytes leftover after parsing attributes in process `syz.7.1628'. [ 949.659288][T14177] befs: (nbd8): No write support. Marking filesystem read-only [ 949.659427][T14177] syz.8.1631: attempt to access beyond end of device [ 949.659427][T14177] nbd8: rw=0, sector=0, nr_sectors = 2 limit=0 [ 949.659448][T14177] befs: (nbd8): unable to read superblock [ 950.338333][T14183] fuse: Bad value for 'fd' [ 950.863399][T14179] netlink: 'syz.7.1630': attribute type 10 has an invalid length. [ 951.190865][T14179] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 951.300527][T14179] bond0: (slave batadv0): Enslaving as an active interface with an up link [ 951.804943][T14202] netlink: 116 bytes leftover after parsing attributes in process `syz.7.1638'. [ 952.843798][T14215] befs: (nbd7): No write support. Marking filesystem read-only [ 952.851856][T14215] syz.7.1641: attempt to access beyond end of device [ 952.851856][T14215] nbd7: rw=0, sector=0, nr_sectors = 2 limit=0 [ 952.864756][T14215] befs: (nbd7): unable to read superblock [ 953.437614][T14222] fuse: Bad value for 'fd' [ 955.064610][T14240] netlink: 116 bytes leftover after parsing attributes in process `syz.9.1647'. [ 958.332525][T14261] befs: (nbd9): No write support. Marking filesystem read-only [ 958.332657][T14261] syz.9.1653: attempt to access beyond end of device [ 958.332657][T14261] nbd9: rw=0, sector=0, nr_sectors = 2 limit=0 [ 958.332678][T14261] befs: (nbd9): unable to read superblock [ 959.848563][T14272] fuse: Bad value for 'fd' [ 960.521048][T14278] netlink: 116 bytes leftover after parsing attributes in process `syz.6.1657'. [ 960.798873][T14284] binder_alloc: 14276: binder_alloc_buf, no vma [ 962.012085][T14297] siw: device registration error -23 [ 962.551913][T14300] netlink: 4 bytes leftover after parsing attributes in process `syz.8.1661'. [ 965.470517][T14319] fuse: Bad value for 'fd' [ 968.520300][T14323] netlink: 16 bytes leftover after parsing attributes in process `syz.7.1669'. [ 968.841686][T14325] sctp: [Deprecated]: syz.7.1669 (pid 14325) Use of struct sctp_assoc_value in delayed_ack socket option. [ 968.841686][T14325] Use struct sctp_sack_info instead [ 969.218342][T14328] netlink: 116 bytes leftover after parsing attributes in process `syz.6.1670'. [ 970.884744][T14351] fuse: Bad value for 'fd' [ 971.856999][T14356] netlink: 'syz.7.1675': attribute type 10 has an invalid length. [ 976.813762][T14391] binder_alloc: 14388: binder_alloc_buf, no vma [ 980.934752][T14425] netlink: 'syz.9.1697': attribute type 10 has an invalid length. [ 981.411880][T14425] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 981.436929][T14425] bond0: (slave batadv0): Enslaving as an active interface with an up link [ 981.803381][T14432] binder_alloc: 14428: binder_alloc_buf, no vma [ 982.933210][T14440] comedi comedi3: 8255: I/O port conflict (0x5,4) [ 982.940015][T14440] comedi comedi3: 8255: I/O port conflict (0x2,4) [ 982.946772][T14440] comedi comedi3: 8255: I/O port conflict (0x1,4) [ 982.954447][T14440] comedi comedi3: 8255: I/O port conflict (0x5c952399,4) [ 982.961850][T14440] comedi comedi3: 8255: I/O port conflict (0x5,4) [ 982.968610][T14440] comedi comedi3: 8255: I/O port conflict (0x3ff,4) [ 982.976093][T14440] comedi comedi3: 8255: I/O port conflict (0x1,4) [ 982.982889][T14440] comedi comedi3: 8255: I/O port conflict (0x1,4) [ 982.989545][T14440] comedi comedi3: 8255: I/O port conflict (0x9,4) [ 982.996598][T14440] comedi comedi3: 8255: I/O port conflict (0x6,4) [ 983.003486][T14440] comedi comedi3: 8255: I/O port conflict (0x4,4) [ 983.010928][T14440] comedi comedi3: 8255: I/O port conflict (0x3,4) [ 983.017995][T14440] comedi comedi3: 8255: I/O port conflict (0xffffffff80000089,4) [ 983.026289][T14440] comedi comedi3: 8255: I/O port conflict (0xfffffffffffffffd,4) [ 984.061080][T14442] tty tty2: ldisc open failed (-12), clearing slot 1 [ 989.153148][T14479] binder_alloc: 14473: binder_alloc_buf, no vma [ 989.818517][T14484] loop7: detected capacity change from 0 to 16384 [ 990.202105][T14484] loop7: detected capacity change from 16384 to 16383 [ 992.779811][T14524] binder_alloc: 14511: binder_alloc_buf, no vma [ 993.678972][ T1289] ieee802154 phy0 wpan0: encryption failed: -22 [ 993.685877][ T1289] ieee802154 phy1 wpan1: encryption failed: -22 [ 993.906757][T14525] netlink: 'syz.6.1718': attribute type 10 has an invalid length. [ 996.417422][T14549] siw: device registration error -23 [ 998.386509][T14573] binder_alloc: 14568: binder_alloc_buf, no vma [ 1001.115544][T14587] netlink: 'syz.6.1732': attribute type 10 has an invalid length. [ 1001.203045][T14594] hfsplus: unable to find HFS+ superblock [ 1003.028520][T14624] binder_alloc: 14617: binder_alloc_buf, no vma [ 1007.147195][T14663] binder_alloc: 14654: binder_alloc_buf, no vma [ 1008.270013][T14676] sctp: [Deprecated]: syz.8.1754 (pid 14676) Use of struct sctp_assoc_value in delayed_ack socket option. [ 1008.270013][T14676] Use struct sctp_sack_info instead [ 1010.882785][T14693] kvm: pic: non byte read [ 1011.077919][T14693] kvm: pic: non byte read [ 1011.162030][T14700] binder_alloc: 14695: binder_alloc_buf, no vma [ 1011.552033][T14693] kvm: pic: non byte read [ 1011.598232][T14693] kvm: pic: non byte read [ 1011.622466][T14693] kvm: pic: non byte read [ 1011.626902][T14693] kvm: pic: non byte read [ 1011.644008][T14693] kvm: pic: non byte read [ 1011.648508][T14693] kvm: pic: non byte read [ 1011.688470][T14693] kvm: pic: non byte read [ 1013.143993][T14709] netlink: 4 bytes leftover after parsing attributes in process `syz.9.1764'. [ 1014.076034][T12883] Bluetooth: hci4: Opcode 0x1003 failed: -110 [ 1015.416668][T14731] binder_alloc: 14726: binder_alloc_buf, no vma [ 1016.265294][T14738] netlink: 4 bytes leftover after parsing attributes in process `syz.7.1774'. [ 1016.537358][T14735] kvm: pic: non byte read [ 1016.548771][T14735] kvm: pic: non byte read [ 1017.257872][T14735] kvm: pic: non byte read [ 1017.263268][T14735] kvm: pic: non byte read [ 1017.268386][T14735] kvm: pic: non byte read [ 1017.273010][T14735] kvm: pic: non byte read [ 1017.277453][T14735] kvm: pic: non byte read [ 1017.282181][T14735] kvm: pic: non byte read [ 1017.286637][T14735] kvm: pic: non byte read [ 1017.291187][T14735] kvm: pic: non byte read [ 1018.539130][T14761] netlink: 16 bytes leftover after parsing attributes in process `syz.6.1780'. [ 1018.886506][T14766] binder_alloc: 14760: binder_alloc_buf, no vma [ 1019.608788][T14767] sctp: [Deprecated]: syz.6.1780 (pid 14767) Use of struct sctp_assoc_value in delayed_ack socket option. [ 1019.608788][T14767] Use struct sctp_sack_info instead [ 1020.161816][T14769] netlink: 4 bytes leftover after parsing attributes in process `syz.9.1783'. [ 1021.219873][ T5779] usb 9-1: new high-speed USB device number 17 using dummy_hcd [ 1021.412922][ T5779] usb 9-1: Using ep0 maxpacket: 32 [ 1021.436852][ T5779] usb 9-1: config 0 has an invalid interface number: 51 but max is 0 [ 1021.452764][ T5779] usb 9-1: config 0 has no interface number 0 [ 1021.462080][ T5779] usb 9-1: New USB device found, idVendor=061d, idProduct=c150, bcdDevice=ce.6f [ 1021.496689][ T5779] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1021.737236][ T5779] usb 9-1: Product: syz [ 1021.737345][ T5779] usb 9-1: Manufacturer: syz [ 1021.737402][ T5779] usb 9-1: SerialNumber: syz [ 1021.762981][ T5779] usb 9-1: config 0 descriptor?? [ 1021.770366][ T5779] quatech2 9-1:0.51: Quatech 2nd gen USB to Serial Driver converter detected [ 1022.271128][ C0] quatech-serial ttyUSB0: qt2_process_read_urb - change_port message too short [ 1022.305284][ T5779] usb 9-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB0 [ 1022.341357][ T5779] usb 9-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB1 [ 1022.502326][ C0] usb 9-1: qt2_read_bulk_callback - non-zero urb status: -71 [ 1022.514934][ T5779] usb 9-1: USB disconnect, device number 17 [ 1022.571008][ T5779] quatech-serial ttyUSB0: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB0 [ 1022.643354][ T5779] quatech-serial ttyUSB1: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB1 [ 1022.669092][ T5779] quatech2 9-1:0.51: device disconnected [ 1022.756298][T14801] netlink: 116 bytes leftover after parsing attributes in process `syz.6.1793'. [ 1023.000594][T14810] netlink: 4 bytes leftover after parsing attributes in process `syz.9.1795'. [ 1023.345487][T14814] hfsplus: unable to find HFS+ superblock [ 1024.083359][T14825] picdev_read: 77 callbacks suppressed [ 1024.083378][T14825] kvm: pic: non byte read [ 1024.118612][T14825] kvm: pic: non byte read [ 1024.131047][T14825] kvm: pic: non byte read [ 1024.135554][T14825] kvm: pic: non byte read [ 1024.168202][T14825] kvm: pic: non byte read [ 1024.177125][T14825] kvm: pic: non byte read [ 1024.184021][T14825] kvm: pic: non byte read [ 1024.196218][T14825] kvm: pic: non byte read [ 1024.210467][T14825] kvm: pic: non byte read [ 1024.226301][T14825] kvm: pic: non byte read [ 1024.596690][T14838] netlink: 116 bytes leftover after parsing attributes in process `syz.8.1802'. [ 1026.202874][T14860] netlink: 4 bytes leftover after parsing attributes in process `syz.8.1807'. [ 1033.503541][T14932] netlink: 'syz.6.1824': attribute type 10 has an invalid length. [ 1034.517859][T14938] hfsplus: unable to find HFS+ superblock [ 1035.793518][T14946] netlink: 16 bytes leftover after parsing attributes in process `syz.9.1831'. [ 1035.894807][T14947] sctp: [Deprecated]: syz.9.1831 (pid 14947) Use of struct sctp_assoc_value in delayed_ack socket option. [ 1035.894807][T14947] Use struct sctp_sack_info instead [ 1037.366673][T14958] picdev_read: 77 callbacks suppressed [ 1037.366694][T14958] kvm: pic: non byte read [ 1037.529436][T14958] kvm: pic: non byte read [ 1037.535115][T14958] kvm: pic: non byte read [ 1037.540061][T14958] kvm: pic: non byte read [ 1037.545169][T14958] kvm: pic: non byte read [ 1037.550672][T14958] kvm: pic: non byte read [ 1037.562709][T14958] kvm: pic: non byte read [ 1037.567614][T14958] kvm: pic: non byte read [ 1037.576639][T14958] kvm: pic: non byte read [ 1037.590816][T14958] kvm: pic: non byte read [ 1040.131455][T14981] hfsplus: unable to find HFS+ superblock [ 1042.894591][T15001] picdev_read: 77 callbacks suppressed [ 1042.894609][T15001] kvm: pic: non byte read [ 1042.916988][T15001] kvm: pic: non byte read [ 1042.930035][T15001] kvm: pic: non byte read [ 1042.934645][T15001] kvm: pic: non byte read [ 1042.970040][T15001] kvm: pic: non byte read [ 1042.985450][T15001] kvm: pic: non byte read [ 1043.000193][T15001] kvm: pic: non byte read [ 1043.029962][T15001] kvm: pic: non byte read [ 1043.059947][T15001] kvm: pic: non byte read [ 1043.064533][T15001] kvm: pic: non byte read [ 1043.187911][T15011] netlink: 16 bytes leftover after parsing attributes in process `syz.6.1851'. [ 1043.306006][T15012] sctp: [Deprecated]: syz.6.1851 (pid 15012) Use of struct sctp_assoc_value in delayed_ack socket option. [ 1043.306006][T15012] Use struct sctp_sack_info instead [ 1043.821001][T15014] hfsplus: unable to find HFS+ superblock [ 1044.849991][ T27] usb 9-1: new high-speed USB device number 18 using dummy_hcd [ 1045.083971][ T27] usb 9-1: config 0 interface 0 altsetting 251 endpoint 0x9 has invalid wMaxPacketSize 0 [ 1045.126064][ T27] usb 9-1: config 0 interface 0 has no altsetting 0 [ 1045.182215][ T27] usb 9-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 1045.214190][ T27] usb 9-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 1045.226736][ T27] usb 9-1: Product: syz [ 1045.234088][ T27] usb 9-1: Manufacturer: syz [ 1045.238886][ T27] usb 9-1: SerialNumber: syz [ 1045.289888][ T27] usb 9-1: config 0 descriptor?? [ 1045.371423][ T27] usb 9-1: selecting invalid altsetting 0 [ 1047.606436][ T5779] usb 9-1: USB disconnect, device number 18 [ 1048.587710][T15046] hfsplus: unable to find HFS+ superblock [ 1048.892057][T15050] netlink: 16 bytes leftover after parsing attributes in process `syz.6.1862'. [ 1049.389822][T15054] sctp: [Deprecated]: syz.6.1862 (pid 15054) Use of struct sctp_assoc_value in delayed_ack socket option. [ 1049.389822][T15054] Use struct sctp_sack_info instead [ 1053.080246][T15083] hfsplus: unable to find HFS+ superblock [ 1053.276427][ T5835] usb 7-1: new high-speed USB device number 17 using dummy_hcd [ 1053.596442][ T5835] usb 7-1: config 0 interface 0 altsetting 251 endpoint 0x9 has invalid wMaxPacketSize 0 [ 1053.756062][T15087] netlink: 'syz.7.1874': attribute type 10 has an invalid length. [ 1053.814218][ T5835] usb 7-1: config 0 interface 0 has no altsetting 0 [ 1053.888958][ T5835] usb 7-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 1053.908718][ T5835] usb 7-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 1053.924574][ T5835] usb 7-1: Product: syz [ 1053.928770][ T5835] usb 7-1: Manufacturer: syz [ 1053.944358][ T5835] usb 7-1: SerialNumber: syz [ 1054.180020][ T5835] usb 7-1: config 0 descriptor?? [ 1054.240363][T15090] netlink: 16 bytes leftover after parsing attributes in process `syz.9.1875'. [ 1054.364227][T15091] sctp: [Deprecated]: syz.9.1875 (pid 15091) Use of struct sctp_assoc_value in delayed_ack socket option. [ 1054.364227][T15091] Use struct sctp_sack_info instead [ 1054.520195][ T5835] usb 7-1: selecting invalid altsetting 0 [ 1055.626300][ T1289] ieee802154 phy0 wpan0: encryption failed: -22 [ 1055.632852][ T1289] ieee802154 phy1 wpan1: encryption failed: -22 [ 1056.319052][T15104] fuse: Bad value for 'fd' [ 1056.917797][ T23] usb 7-1: USB disconnect, device number 17 [ 1061.788845][T15137] netlink: 4 bytes leftover after parsing attributes in process `syz.7.1885'. [ 1061.870098][T15139] picdev_read: 77 callbacks suppressed [ 1061.870116][T15139] kvm: pic: non byte read [ 1061.919009][T15139] kvm: pic: non byte read [ 1061.938048][T15139] kvm: pic: non byte read [ 1061.950192][T15139] kvm: pic: non byte read [ 1061.972107][T15139] kvm: pic: non byte read [ 1061.977153][T15139] kvm: pic: non byte read [ 1062.004284][T15139] kvm: pic: non byte read [ 1062.013573][T15139] kvm: pic: non byte read [ 1062.028335][T15139] kvm: pic: non byte read [ 1062.033537][T15139] kvm: pic: non byte read [ 1063.565886][T15163] fuse: Bad value for 'fd' [ 1067.821132][T15180] comedi comedi3: 8255: I/O port conflict (0x5,4) [ 1067.827846][T15180] comedi comedi3: 8255: I/O port conflict (0x2,4) [ 1067.834761][T15180] comedi comedi3: 8255: I/O port conflict (0x1,4) [ 1067.841890][T15180] comedi comedi3: 8255: I/O port conflict (0x5c952399,4) [ 1067.849139][T15180] comedi comedi3: 8255: I/O port conflict (0x5,4) [ 1067.856001][T15180] comedi comedi3: 8255: I/O port conflict (0x3ff,4) [ 1067.863517][T15180] comedi comedi3: 8255: I/O port conflict (0x1,4) [ 1067.870210][T15180] comedi comedi3: 8255: I/O port conflict (0x1,4) [ 1067.881180][T15180] comedi comedi3: 8255: I/O port conflict (0x9,4) [ 1067.888084][T15180] comedi comedi3: 8255: I/O port conflict (0x6,4) [ 1067.895570][T15180] comedi comedi3: 8255: I/O port conflict (0x4,4) [ 1067.902503][T15180] comedi comedi3: 8255: I/O port conflict (0x3,4) [ 1067.909428][T15180] comedi comedi3: 8255: I/O port conflict (0xffffffff80000089,4) [ 1067.917583][T15180] comedi comedi3: 8255: I/O port conflict (0xfffffffffffffffd,4) [ 1070.517843][T15199] fuse: Bad value for 'fd' [ 1074.986503][T15230] fuse: Bad value for 'fd' [ 1075.019801][T15220] picdev_read: 164 callbacks suppressed [ 1075.019823][T15220] kvm: pic: non byte read [ 1080.090231][T15258] fuse: Bad value for 'fd' [ 1081.836803][T15279] fuse: Bad value for 'user_id' [ 1082.023287][T15284] hub 9-0:1.0: USB hub found [ 1082.064809][T15284] hub 9-0:1.0: 1 port detected [ 1084.438807][T15309] fuse: Bad value for 'fd' [ 1088.894602][T15348] fuse: Bad value for 'fd' [ 1091.231966][T15374] hfsplus: unable to find HFS+ superblock [ 1092.945075][T15389] kvm: pic: non byte read [ 1092.949510][T15389] kvm: pic: non byte read [ 1092.986829][T15389] kvm: pic: non byte read [ 1093.005356][T15389] kvm: pic: non byte read [ 1093.190252][T15389] kvm: pic: non byte read [ 1097.273391][T15409] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1106.200422][T15458] netlink: 20 bytes leftover after parsing attributes in process `syz.6.1966'. [ 1112.242778][ T27] usb 9-1: new high-speed USB device number 19 using dummy_hcd [ 1112.430222][ T27] usb 9-1: device descriptor read/64, error -71 [ 1112.709743][ T27] usb 9-1: new high-speed USB device number 20 using dummy_hcd [ 1112.981246][ T27] usb 9-1: device descriptor read/64, error -71 [ 1113.113725][ T27] usb usb9-port1: attempt power cycle [ 1113.729976][ T27] usb 9-1: new high-speed USB device number 21 using dummy_hcd [ 1113.907855][ T27] usb 9-1: device descriptor read/8, error -71 [ 1114.199773][ T27] usb 9-1: new high-speed USB device number 22 using dummy_hcd [ 1114.234408][ T27] usb 9-1: device descriptor read/8, error -71 [ 1114.368606][ T27] usb usb9-port1: unable to enumerate USB device [ 1116.767905][ T1289] ieee802154 phy0 wpan0: encryption failed: -22 [ 1116.774565][ T1289] ieee802154 phy1 wpan1: encryption failed: -22 [ 1116.843863][T15528] netlink: 16 bytes leftover after parsing attributes in process `syz.8.1986'. [ 1116.990982][T15530] sctp: [Deprecated]: syz.8.1986 (pid 15530) Use of struct sctp_assoc_value in delayed_ack socket option. [ 1116.990982][T15530] Use struct sctp_sack_info instead [ 1127.216730][T15610] comedi comedi3: 8255: I/O port conflict (0x5,4) [ 1127.223489][T15610] comedi comedi3: 8255: I/O port conflict (0x2,4) [ 1127.230736][T15610] comedi comedi3: 8255: I/O port conflict (0x1,4) [ 1127.237678][T15610] comedi comedi3: 8255: I/O port conflict (0x5c952399,4) [ 1127.245101][T15610] comedi comedi3: 8255: I/O port conflict (0x5,4) [ 1127.251768][T15610] comedi comedi3: 8255: I/O port conflict (0x3ff,4) [ 1127.258929][T15610] comedi comedi3: 8255: I/O port conflict (0x1,4) [ 1127.265721][T15610] comedi comedi3: 8255: I/O port conflict (0x1,4) [ 1127.272390][T15610] comedi comedi3: 8255: I/O port conflict (0x9,4) [ 1127.279191][T15610] comedi comedi3: 8255: I/O port conflict (0x6,4) [ 1127.285810][T15610] comedi comedi3: 8255: I/O port conflict (0x4,4) [ 1127.293367][T15610] comedi comedi3: 8255: I/O port conflict (0x3,4) [ 1127.300432][T15610] comedi comedi3: 8255: I/O port conflict (0xffffffff80000089,4) [ 1127.308390][T15610] comedi comedi3: 8255: I/O port conflict (0xfffffffffffffffd,4) [ 1138.259819][ T5835] usb 9-1: new high-speed USB device number 23 using dummy_hcd [ 1139.189809][ T5835] usb 9-1: Using ep0 maxpacket: 32 [ 1139.195883][ T5835] usb 9-1: no configurations [ 1139.207552][ T5835] usb 9-1: can't read configurations, error -22 [ 1139.367145][ T5835] usb 9-1: new high-speed USB device number 24 using dummy_hcd [ 1139.589829][ T5835] usb 9-1: Using ep0 maxpacket: 32 [ 1139.629909][ T9102] usb 10-1: new high-speed USB device number 22 using dummy_hcd [ 1139.680559][ T5835] usb 9-1: no configurations [ 1139.688284][ T5835] usb 9-1: can't read configurations, error -22 [ 1139.716666][ T5835] usb usb9-port1: attempt power cycle [ 1140.441077][ T9102] usb 10-1: config 0 interface 0 altsetting 251 endpoint 0x9 has invalid wMaxPacketSize 0 [ 1140.481730][ T9102] usb 10-1: config 0 interface 0 has no altsetting 0 [ 1140.619477][ T9102] usb 10-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 1140.629788][ T9102] usb 10-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 1140.638357][ T9102] usb 10-1: Product: syz [ 1140.643602][ T9102] usb 10-1: Manufacturer: syz [ 1140.648401][ T9102] usb 10-1: SerialNumber: syz [ 1140.656734][ T9102] usb 10-1: config 0 descriptor?? [ 1140.667195][ T9102] usb 10-1: selecting invalid altsetting 0 [ 1140.729850][ T5835] usb 9-1: new high-speed USB device number 25 using dummy_hcd [ 1140.840486][ T5835] usb 9-1: Using ep0 maxpacket: 32 [ 1140.846581][ T5835] usb 9-1: no configurations [ 1140.851785][ T5835] usb 9-1: can't read configurations, error -22 [ 1141.009827][ T5835] usb 9-1: new high-speed USB device number 26 using dummy_hcd [ 1141.240366][ C0] raw-gadget.0 gadget.8: ignoring, device is not running [ 1141.248028][ T5835] usb 9-1: device descriptor read/8, error -32 [ 1141.372294][ T5835] usb usb9-port1: unable to enumerate USB device [ 1143.265041][ T5835] usb 10-1: USB disconnect, device number 22 [ 1146.360172][ T5879] usb 7-1: new high-speed USB device number 18 using dummy_hcd [ 1146.600721][ T5879] usb 7-1: Using ep0 maxpacket: 32 [ 1146.634522][ T5879] usb 7-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1146.680148][ T5879] usb 7-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 1146.768722][ T5879] usb 7-1: New USB device found, idVendor=8086, idProduct=9500, bcdDevice=b6.d8 [ 1146.826273][ T5879] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1146.885659][ T5879] usb 7-1: Product: syz [ 1146.915587][ T5879] usb 7-1: Manufacturer: syz [ 1146.951235][ T5879] usb 7-1: SerialNumber: syz [ 1147.031390][ T5879] usb 7-1: config 0 descriptor?? [ 1147.344479][ T8505] usb 7-1: USB disconnect, device number 18 [ 1149.419458][T15781] netlink: 'syz.7.2048': attribute type 10 has an invalid length. [ 1151.595578][T15807] comedi comedi3: 8255: I/O port conflict (0x5,4) [ 1151.602364][T15807] comedi comedi3: 8255: I/O port conflict (0x2,4) [ 1151.609134][T15807] comedi comedi3: 8255: I/O port conflict (0x1,4) [ 1151.616282][T15807] comedi comedi3: 8255: I/O port conflict (0x5c952399,4) [ 1151.623827][T15807] comedi comedi3: 8255: I/O port conflict (0x5,4) [ 1151.630781][T15807] comedi comedi3: 8255: I/O port conflict (0x3ff,4) [ 1151.637818][T15807] comedi comedi3: 8255: I/O port conflict (0x1,4) [ 1151.644883][T15807] comedi comedi3: 8255: I/O port conflict (0x1,4) [ 1151.651789][T15807] comedi comedi3: 8255: I/O port conflict (0x9,4) [ 1151.659423][T15807] comedi comedi3: 8255: I/O port conflict (0x6,4) [ 1151.666425][T15807] comedi comedi3: 8255: I/O port conflict (0x4,4) [ 1151.673462][T15807] comedi comedi3: 8255: I/O port conflict (0x3,4) [ 1151.680471][T15807] comedi comedi3: 8255: I/O port conflict (0xffffffff80000089,4) [ 1151.688385][T15807] comedi comedi3: 8255: I/O port conflict (0xfffffffffffffffd,4) [ 1155.428590][T15826] netlink: 'syz.7.2060': attribute type 10 has an invalid length. [ 1157.726604][T15835] netlink: 20 bytes leftover after parsing attributes in process `syz.7.2063'. [ 1158.026708][T15844] kvm: pic: non byte read [ 1158.037581][T15844] kvm: pic: non byte read [ 1158.056421][T15844] kvm: pic: non byte read [ 1158.078932][T15844] kvm: pic: non byte read [ 1158.102285][T15844] kvm: pic: non byte read [ 1158.122841][T15844] kvm: pic: non byte read [ 1158.136252][T15844] kvm: pic: non byte read [ 1158.163715][T15844] kvm: pic: non byte read [ 1158.194713][T15844] kvm: pic: non byte read [ 1158.226502][T15844] kvm: pic: non byte read [ 1158.640456][T15850] comedi comedi3: 8255: I/O port conflict (0x5,4) [ 1158.647183][T15850] comedi comedi3: 8255: I/O port conflict (0x2,4) [ 1158.654141][T15850] comedi comedi3: 8255: I/O port conflict (0x1,4) [ 1158.661132][T15850] comedi comedi3: 8255: I/O port conflict (0x5c952399,4) [ 1158.668336][T15850] comedi comedi3: 8255: I/O port conflict (0x5,4) [ 1158.675038][T15850] comedi comedi3: 8255: I/O port conflict (0x3ff,4) [ 1158.682416][T15850] comedi comedi3: 8255: I/O port conflict (0x1,4) [ 1158.689028][T15850] comedi comedi3: 8255: I/O port conflict (0x1,4) [ 1158.729400][T15850] comedi comedi3: 8255: I/O port conflict (0x9,4) [ 1158.736513][T15850] comedi comedi3: 8255: I/O port conflict (0x6,4) [ 1158.743315][T15850] comedi comedi3: 8255: I/O port conflict (0x4,4) [ 1158.750292][T15850] comedi comedi3: 8255: I/O port conflict (0x3,4) [ 1158.757164][T15850] comedi comedi3: 8255: I/O port conflict (0xffffffff80000089,4) [ 1158.765312][T15850] comedi comedi3: 8255: I/O port conflict (0xfffffffffffffffd,4) [ 1162.722046][T15864] netlink: 'syz.8.2071': attribute type 10 has an invalid length. [ 1166.922638][T15886] comedi comedi3: 8255: I/O port conflict (0x5,4) [ 1166.929106][T15886] comedi comedi3: 8255: I/O port conflict (0x2,4) [ 1166.936002][T15886] comedi comedi3: 8255: I/O port conflict (0x1,4) [ 1166.942949][T15886] comedi comedi3: 8255: I/O port conflict (0x5c952399,4) [ 1166.950243][T15886] comedi comedi3: 8255: I/O port conflict (0x5,4) [ 1166.956862][T15886] comedi comedi3: 8255: I/O port conflict (0x3ff,4) [ 1166.963744][T15886] comedi comedi3: 8255: I/O port conflict (0x1,4) [ 1166.970383][T15886] comedi comedi3: 8255: I/O port conflict (0x1,4) [ 1166.977053][T15886] comedi comedi3: 8255: I/O port conflict (0x9,4) [ 1166.983885][T15886] comedi comedi3: 8255: I/O port conflict (0x6,4) [ 1166.990539][T15886] comedi comedi3: 8255: I/O port conflict (0x4,4) [ 1166.997307][T15886] comedi comedi3: 8255: I/O port conflict (0x3,4) [ 1167.004206][T15886] comedi comedi3: 8255: I/O port conflict (0xffffffff80000089,4) [ 1167.012458][T15886] comedi comedi3: 8255: I/O port conflict (0xfffffffffffffffd,4) [ 1174.278259][T15937] comedi comedi3: 8255: I/O port conflict (0x5,4) [ 1174.285123][T15937] comedi comedi3: 8255: I/O port conflict (0x2,4) [ 1174.293040][T15937] comedi comedi3: 8255: I/O port conflict (0x1,4) [ 1174.300112][T15937] comedi comedi3: 8255: I/O port conflict (0x5c952399,4) [ 1174.307325][T15937] comedi comedi3: 8255: I/O port conflict (0x5,4) [ 1174.314169][T15937] comedi comedi3: 8255: I/O port conflict (0x3ff,4) [ 1174.321236][T15937] comedi comedi3: 8255: I/O port conflict (0x1,4) [ 1174.327898][T15937] comedi comedi3: 8255: I/O port conflict (0x1,4) [ 1174.334773][T15937] comedi comedi3: 8255: I/O port conflict (0x9,4) [ 1174.341679][T15937] comedi comedi3: 8255: I/O port conflict (0x6,4) [ 1174.348389][T15937] comedi comedi3: 8255: I/O port conflict (0x4,4) [ 1174.355242][T15937] comedi comedi3: 8255: I/O port conflict (0x3,4) [ 1174.362316][T15937] comedi comedi3: 8255: I/O port conflict (0xffffffff80000089,4) [ 1174.370426][T15937] comedi comedi3: 8255: I/O port conflict (0xfffffffffffffffd,4) [ 1178.301010][ T1289] ieee802154 phy0 wpan0: encryption failed: -22 [ 1178.307523][ T1289] ieee802154 phy1 wpan1: encryption failed: -22 [ 1184.088704][T16001] comedi comedi3: 8255: I/O port conflict (0x5,4) [ 1184.095519][T16001] comedi comedi3: 8255: I/O port conflict (0x2,4) [ 1184.102984][T16001] comedi comedi3: 8255: I/O port conflict (0x1,4) [ 1184.110119][T16001] comedi comedi3: 8255: I/O port conflict (0x5c952399,4) [ 1184.117473][T16001] comedi comedi3: 8255: I/O port conflict (0x5,4) [ 1184.125253][T16001] comedi comedi3: 8255: I/O port conflict (0x3ff,4) [ 1184.132661][T16001] comedi comedi3: 8255: I/O port conflict (0x1,4) [ 1184.171061][T16001] comedi comedi3: 8255: I/O port conflict (0x1,4) [ 1184.177857][T16001] comedi comedi3: 8255: I/O port conflict (0x9,4) [ 1184.184830][T16001] comedi comedi3: 8255: I/O port conflict (0x6,4) [ 1184.191629][T16001] comedi comedi3: 8255: I/O port conflict (0x4,4) [ 1184.198376][T16001] comedi comedi3: 8255: I/O port conflict (0x3,4) [ 1184.205356][T16001] comedi comedi3: 8255: I/O port conflict (0xffffffff80000089,4) [ 1184.213377][T16001] comedi comedi3: 8255: I/O port conflict (0xfffffffffffffffd,4) [ 1190.268654][T16044] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 1190.422499][T16050] comedi comedi3: 8255: I/O port conflict (0x5,4) [ 1190.429155][T16050] comedi comedi3: 8255: I/O port conflict (0x2,4) [ 1190.436064][T16050] comedi comedi3: 8255: I/O port conflict (0x1,4) [ 1190.443092][T16050] comedi comedi3: 8255: I/O port conflict (0x5c952399,4) [ 1190.450599][T16050] comedi comedi3: 8255: I/O port conflict (0x5,4) [ 1190.457319][T16050] comedi comedi3: 8255: I/O port conflict (0x3ff,4) [ 1190.464566][T16050] comedi comedi3: 8255: I/O port conflict (0x1,4) [ 1190.471881][T16050] comedi comedi3: 8255: I/O port conflict (0x1,4) [ 1190.478510][T16050] comedi comedi3: 8255: I/O port conflict (0x9,4) [ 1190.485470][T16050] comedi comedi3: 8255: I/O port conflict (0x6,4) [ 1190.492087][T16050] comedi comedi3: 8255: I/O port conflict (0x4,4) [ 1190.498777][T16050] comedi comedi3: 8255: I/O port conflict (0x3,4) [ 1190.505513][T16050] comedi comedi3: 8255: I/O port conflict (0xffffffff80000089,4) [ 1190.513609][T16050] comedi comedi3: 8255: I/O port conflict (0xfffffffffffffffd,4) [ 1190.913238][T16051] netlink: 8 bytes leftover after parsing attributes in process `syz.9.2114'. [ 1191.373594][T16051] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 1197.479992][T16103] comedi comedi3: 8255: I/O port conflict (0x5,4) [ 1197.486694][T16103] comedi comedi3: 8255: I/O port conflict (0x2,4) [ 1197.493541][T16103] comedi comedi3: 8255: I/O port conflict (0x1,4) [ 1197.500709][T16103] comedi comedi3: 8255: I/O port conflict (0x5c952399,4) [ 1197.508073][T16103] comedi comedi3: 8255: I/O port conflict (0x5,4) [ 1197.514907][T16103] comedi comedi3: 8255: I/O port conflict (0x3ff,4) [ 1197.522173][T16103] comedi comedi3: 8255: I/O port conflict (0x1,4) [ 1197.528875][T16103] comedi comedi3: 8255: I/O port conflict (0x1,4) [ 1197.573542][T16103] comedi comedi3: 8255: I/O port conflict (0x9,4) [ 1197.580568][T16103] comedi comedi3: 8255: I/O port conflict (0x6,4) [ 1197.587176][T16103] comedi comedi3: 8255: I/O port conflict (0x4,4) [ 1197.594045][T16103] comedi comedi3: 8255: I/O port conflict (0x3,4) [ 1197.600985][T16103] comedi comedi3: 8255: I/O port conflict (0xffffffff80000089,4) [ 1197.609019][T16103] comedi comedi3: 8255: I/O port conflict (0xfffffffffffffffd,4) [ 1205.370060][ T7556] usb 10-1: new high-speed USB device number 23 using dummy_hcd [ 1205.564657][ T7556] usb 10-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 1205.578308][ T7556] usb 10-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config [ 1205.620885][ T7556] usb 10-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 1205.631456][ T7556] usb 10-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 55, changing to 9 [ 1205.647020][ T7556] usb 10-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8496, setting to 1024 [ 1205.662359][ T7556] usb 10-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 1205.678320][ T7556] usb 10-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 1205.687429][ T7556] usb 10-1: Product: syz [ 1205.696962][ T7556] usb 10-1: Manufacturer: syz [ 1205.713257][ T7556] cdc_wdm 10-1:1.0: skipping garbage [ 1205.738266][ T7556] cdc_wdm 10-1:1.0: skipping garbage [ 1205.754789][ T7556] cdc_wdm 10-1:1.0: cdc-wdm0: USB WDM device [ 1205.762733][ T7556] cdc_wdm 10-1:1.0: Unknown control protocol [ 1205.772597][ T786] usb 7-1: new full-speed USB device number 19 using dummy_hcd [ 1206.019959][ T786] usb 7-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1206.055266][ T786] usb 7-1: config 0 has 1 interface, different from the descriptor's value: 2 [ 1206.095370][ C1] cdc_wdm 10-1:1.0: nonzero urb status received: -71 [ 1206.102376][ C1] cdc_wdm 10-1:1.0: wdm_int_callback - 0 bytes [ 1206.108840][ C1] cdc_wdm 10-1:1.0: nonzero urb status received: -71 [ 1206.115564][ C1] cdc_wdm 10-1:1.0: wdm_int_callback - 0 bytes [ 1206.122033][ C1] cdc_wdm 10-1:1.0: nonzero urb status received: -71 [ 1206.128784][ C1] cdc_wdm 10-1:1.0: wdm_int_callback - 0 bytes [ 1206.136915][ C1] cdc_wdm 10-1:1.0: nonzero urb status received: -71 [ 1206.143670][ C1] cdc_wdm 10-1:1.0: wdm_int_callback - 0 bytes [ 1206.150424][ C1] cdc_wdm 10-1:1.0: nonzero urb status received: -71 [ 1206.157163][ C1] cdc_wdm 10-1:1.0: wdm_int_callback - 0 bytes [ 1206.163686][ C1] cdc_wdm 10-1:1.0: nonzero urb status received: -71 [ 1206.165881][ T5875] usb 10-1: USB disconnect, device number 23 [ 1206.170389][ C1] cdc_wdm 10-1:1.0: wdm_int_callback - 0 bytes [ 1206.170408][ C1] cdc_wdm 10-1:1.0: wdm_int_callback - usb_submit_urb failed with result -19 [ 1206.185857][ T786] usb 7-1: New USB device found, idVendor=05d8, idProduct=810a, bcdDevice=92.b8 [ 1206.201472][ T786] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1206.222683][ T786] usb 7-1: config 0 descriptor?? [ 1206.237605][ T786] dvb-usb: found a 'Artec T1 USB2.0' in warm state. [ 1206.244973][ T786] dvb-usb: bulk message failed: -22 (3/0) [ 1206.268238][ T786] dvb-usb: will use the device's hardware PID filter (table count: 16). [ 1206.287074][ T786] dvbdev: DVB: registering new adapter (Artec T1 USB2.0) [ 1206.304519][ T786] usb 7-1: media controller created [ 1206.327304][ T786] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 1206.368656][ T786] dvb-usb: bulk message failed: -22 (6/0) [ 1206.398113][ T786] dvb-usb: no frontend was attached by 'Artec T1 USB2.0' [ 1206.445112][T16172] dvb-usb: bulk message failed: -22 (4/0) [ 1206.461605][ T786] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.6/usb7/7-1/input/input6 [ 1206.542563][ T786] dvb-usb: schedule remote query interval to 150 msecs. [ 1206.562436][ T786] dvb-usb: Artec T1 USB2.0 successfully initialized and connected. [ 1206.605942][ T786] usb 7-1: USB disconnect, device number 19 [ 1206.670503][ T786] dvb-usb: Artec T1 USB2.0 successfully deinitialized and disconnected. [ 1207.779470][T16189] binder: 16188:16189 unknown command 1074291477 [ 1207.798500][T16189] binder: 16188:16189 ioctl c0306201 2000000001c0 returned -22 [ 1210.984626][T16220] ptrace attach of ""[16221] was attempted by "./syz-executor exec"[16220] [ 1211.211834][T16220] qrtr: Invalid version 0 [ 1214.599783][ T786] usb 9-1: new high-speed USB device number 27 using dummy_hcd [ 1215.004088][ T786] usb 9-1: config 0 interface 0 altsetting 251 endpoint 0x9 has invalid wMaxPacketSize 0 [ 1215.042008][ T786] usb 9-1: config 0 interface 0 has no altsetting 0 [ 1215.064158][ T786] usb 9-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 1215.073696][ T786] usb 9-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 1215.107687][ T786] usb 9-1: Product: syz [ 1215.125740][ T786] usb 9-1: Manufacturer: syz [ 1215.137301][ T786] usb 9-1: SerialNumber: syz [ 1215.232880][ T786] usb 9-1: config 0 descriptor?? [ 1215.400208][ T786] usb 9-1: selecting invalid altsetting 0 [ 1217.310107][ T5779] usb 10-1: new high-speed USB device number 24 using dummy_hcd [ 1217.499919][ T5779] usb 10-1: Using ep0 maxpacket: 32 [ 1217.557484][ T5779] usb 10-1: config 0 has an invalid interface number: 1 but max is 0 [ 1217.600138][ T5779] usb 10-1: config 0 has no interface number 0 [ 1217.664292][ T5779] usb 10-1: New USB device found, idVendor=8086, idProduct=9500, bcdDevice=b6.d8 [ 1218.020609][ T5842] usb 9-1: USB disconnect, device number 27 [ 1218.032672][ T5779] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1218.070186][ T5779] usb 10-1: Product: syz [ 1218.092182][ T5779] usb 10-1: Manufacturer: syz [ 1218.096935][ T5779] usb 10-1: SerialNumber: syz [ 1218.127703][ T5779] usb 10-1: config 0 descriptor?? [ 1218.144825][ T5779] usb 10-1: dvb_usb_v2: found a 'Intel CE9500 reference design' in warm state [ 1218.154516][ T5779] usb 10-1: selecting invalid altsetting 1 [ 1218.160614][ T5779] usb 10-1: dvb_usb_ce6230: usb_set_interface() failed=-22 [ 1218.181345][ T5779] usb 10-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 1218.215313][ T5779] dvbdev: DVB: registering new adapter (Intel CE9500 reference design) [ 1218.236469][ T5779] usb 10-1: media controller created [ 1218.580452][T16258] usb 10-1: dvb_usb_ce6230: I2C read not implemented [ 1218.582014][ T5779] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 1218.751595][ T5779] usb 10-1: dvb_usb_ce6230: usb_control_msg() failed=-71 [ 1218.771728][ T5779] zl10353_read_register: readreg error (reg=127, ret==-71) [ 1218.784559][ T5779] usb 10-1: dvb_usb_ce6230: usb_set_interface() failed=-71 [ 1218.940124][ T5779] usb 10-1: USB disconnect, device number 24 [ 1219.794849][T16278] netlink: 16 bytes leftover after parsing attributes in process `syz.6.2176'. [ 1220.798354][T16282] sctp: [Deprecated]: syz.6.2176 (pid 16282) Use of struct sctp_assoc_value in delayed_ack socket option. [ 1220.798354][T16282] Use struct sctp_sack_info instead [ 1221.351691][T16286] vlan2: entered allmulticast mode [ 1221.777554][T16292] befs: (nbd6): No write support. Marking filesystem read-only [ 1221.786147][T16292] syz.6.2180: attempt to access beyond end of device [ 1221.786147][T16292] nbd6: rw=0, sector=0, nr_sectors = 2 limit=0 [ 1221.799059][T16292] befs: (nbd6): unable to read superblock [ 1222.024263][T16295] fuse: Bad value for 'fd' [ 1224.789264][T16298] hfsplus: unable to find HFS+ superblock [ 1227.506511][T16320] netlink: 16 bytes leftover after parsing attributes in process `syz.7.2188'. [ 1227.573279][T16321] sctp: [Deprecated]: syz.7.2188 (pid 16321) Use of struct sctp_assoc_value in delayed_ack socket option. [ 1227.573279][T16321] Use struct sctp_sack_info instead [ 1227.676269][T16323] TCP: request_sock_subflow_v4: Possible SYN flooding on port [::]:20002. Sending cookies. [ 1227.834829][T16326] befs: (nbd7): No write support. Marking filesystem read-only [ 1227.845045][T16326] syz.7.2190: attempt to access beyond end of device [ 1227.845045][T16326] nbd7: rw=0, sector=0, nr_sectors = 2 limit=0 [ 1227.857958][T16326] befs: (nbd7): unable to read superblock [ 1228.077509][T16328] fuse: Bad value for 'fd' [ 1230.242933][T16334] veth0: entered promiscuous mode [ 1230.250541][T16334] netlink: 4 bytes leftover after parsing attributes in process `syz.9.2191'. [ 1233.687683][T16359] netlink: 16 bytes leftover after parsing attributes in process `syz.6.2198'. [ 1233.850228][T16359] sctp: [Deprecated]: syz.6.2198 (pid 16359) Use of struct sctp_assoc_value in delayed_ack socket option. [ 1233.850228][T16359] Use struct sctp_sack_info instead [ 1234.832521][T16371] befs: (nbd6): No write support. Marking filesystem read-only [ 1234.841078][T16371] syz.6.2202: attempt to access beyond end of device [ 1234.841078][T16371] nbd6: rw=0, sector=0, nr_sectors = 2 limit=0 [ 1234.854078][T16371] befs: (nbd6): unable to read superblock [ 1235.122924][T16374] fuse: Bad value for 'fd' [ 1238.437564][T16391] netlink: 16 bytes leftover after parsing attributes in process `syz.7.2207'. [ 1239.351038][T16396] sctp: [Deprecated]: syz.7.2207 (pid 16396) Use of struct sctp_assoc_value in delayed_ack socket option. [ 1239.351038][T16396] Use struct sctp_sack_info instead [ 1239.384186][ T1289] ieee802154 phy0 wpan0: encryption failed: -22 [ 1239.390804][ T1289] ieee802154 phy1 wpan1: encryption failed: -22 [ 1239.759819][ T5842] usb 9-1: new high-speed USB device number 28 using dummy_hcd [ 1240.034770][ T5842] usb 9-1: config 0 interface 0 altsetting 251 endpoint 0x9 has invalid wMaxPacketSize 0 [ 1240.075613][ T5842] usb 9-1: config 0 interface 0 has no altsetting 0 [ 1240.103954][ T5842] usb 9-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 1240.123613][ T5842] usb 9-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 1240.135072][ T5842] usb 9-1: Product: syz [ 1240.139259][ T5842] usb 9-1: Manufacturer: syz [ 1240.145855][ T5842] usb 9-1: SerialNumber: syz [ 1240.158609][ T5842] usb 9-1: config 0 descriptor?? [ 1240.179276][ T5842] usb 9-1: selecting invalid altsetting 0 [ 1241.696367][T16414] befs: (nbd6): No write support. Marking filesystem read-only [ 1241.705442][T16414] syz.6.2213: attempt to access beyond end of device [ 1241.705442][T16414] nbd6: rw=0, sector=0, nr_sectors = 2 limit=0 [ 1241.718851][T16414] befs: (nbd6): unable to read superblock [ 1244.742612][ T27] usb 9-1: USB disconnect, device number 28 [ 1248.035180][T16445] binder_alloc: 16436: binder_alloc_buf, no vma [ 1249.103519][T16452] befs: (nbd9): No write support. Marking filesystem read-only [ 1249.112157][T16452] syz.9.2224: attempt to access beyond end of device [ 1249.112157][T16452] nbd9: rw=0, sector=0, nr_sectors = 2 limit=0 [ 1249.125241][T16452] befs: (nbd9): unable to read superblock [ 1249.732437][ T5875] usb 9-1: new high-speed USB device number 29 using dummy_hcd [ 1250.199610][ T5875] usb 9-1: Using ep0 maxpacket: 16 [ 1250.232805][ T5875] usb 9-1: New USB device found, idVendor=1604, idProduct=8007, bcdDevice=af.a6 [ 1251.781181][ T5875] usb 9-1: New USB device strings: Mfr=1, Product=23, SerialNumber=3 [ 1252.254293][ T5875] usb 9-1: Product: syz [ 1252.258530][ T5875] usb 9-1: Manufacturer: syz [ 1252.269195][ T5875] usb 9-1: SerialNumber: syz [ 1252.286816][ T5875] usb 9-1: config 0 descriptor?? [ 1252.300142][ T5875] usb 9-1: can't set config #0, error -71 [ 1252.323425][ T5875] usb 9-1: USB disconnect, device number 29 [ 1252.693433][T16487] binder_alloc: 16482: binder_alloc_buf, no vma [ 1254.838265][T16504] hfsplus: unable to find HFS+ superblock [ 1255.376948][T16509] befs: (nbd6): No write support. Marking filesystem read-only [ 1255.385637][T16509] syz.6.2235: attempt to access beyond end of device [ 1255.385637][T16509] nbd6: rw=0, sector=0, nr_sectors = 2 limit=0 [ 1255.399591][T16509] befs: (nbd6): unable to read superblock [ 1258.378068][T16536] binder_alloc: 16531: binder_alloc_buf, no vma [ 1262.073352][T16579] hfsplus: unable to find HFS+ superblock [ 1262.866956][T16584] binder_alloc: 16580: binder_alloc_buf, no vma [ 1265.745287][T16609] capability: warning: `syz.8.2262' uses deprecated v2 capabilities in a way that may be insecure [ 1265.831129][T16610] kernel profiling enabled (shift: 7) [ 1266.370888][ T786] usb 10-1: new high-speed USB device number 25 using dummy_hcd [ 1267.041786][ T786] usb 10-1: config 0 interface 0 altsetting 251 endpoint 0x9 has invalid wMaxPacketSize 0 [ 1267.052249][ T786] usb 10-1: config 0 interface 0 has no altsetting 0 [ 1267.073682][ T786] usb 10-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 1267.083112][ T786] usb 10-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 1267.099875][ T786] usb 10-1: Product: syz [ 1267.120347][ T786] usb 10-1: Manufacturer: syz [ 1267.125097][ T786] usb 10-1: SerialNumber: syz [ 1267.137769][ T786] usb 10-1: config 0 descriptor?? [ 1267.149454][ T786] usb 10-1: selecting invalid altsetting 0 [ 1267.187927][T16614] fuse: Bad value for 'user_id' [ 1267.226728][T16614] hub 9-0:1.0: USB hub found [ 1267.440129][T16614] hub 9-0:1.0: 1 port detected [ 1267.491971][T16621] binder_alloc: 16618: binder_alloc_buf, no vma [ 1267.629279][T16619] netlink: 'syz.8.2265': attribute type 10 has an invalid length. [ 1269.972484][ T5842] usb 10-1: USB disconnect, device number 25 [ 1270.275156][T16640] netlink: 96 bytes leftover after parsing attributes in process `syz.6.2271'. [ 1274.023975][T16663] binder_alloc: 16660: binder_alloc_buf, no vma [ 1274.197543][T16667] af_packet: tpacket_rcv: packet too big, clamped from 54 to 4294967286. macoff=82 [ 1274.779367][T16668] netlink: 'syz.6.2277': attribute type 10 has an invalid length. [ 1275.128126][T16675] hfsplus: unable to find HFS+ superblock [ 1275.487166][ T5779] usb 10-1: new high-speed USB device number 26 using dummy_hcd [ 1275.753588][ T5779] usb 10-1: config 0 interface 0 altsetting 251 endpoint 0x9 has invalid wMaxPacketSize 0 [ 1275.770466][ T5779] usb 10-1: config 0 interface 0 has no altsetting 0 [ 1275.786661][ T5779] usb 10-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 1275.806703][ T5779] usb 10-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 1275.816875][ T5779] usb 10-1: Product: syz [ 1275.825628][ T5779] usb 10-1: Manufacturer: syz [ 1275.832335][ T5779] usb 10-1: SerialNumber: syz [ 1276.338825][ T5779] usb 10-1: config 0 descriptor?? [ 1276.403287][ T5779] usb 10-1: selecting invalid altsetting 0 [ 1279.138416][ T27] usb 10-1: USB disconnect, device number 26 [ 1280.685865][T16711] binder_alloc: 16707: binder_alloc_buf, no vma [ 1281.544834][T16714] netlink: 'syz.8.2290': attribute type 10 has an invalid length. [ 1282.195066][T16718] netlink: 96 bytes leftover after parsing attributes in process `syz.6.2292'. [ 1285.764726][T16749] netlink: 96 bytes leftover after parsing attributes in process `syz.8.2303'. [ 1286.519336][T16755] netlink: 'syz.9.2305': attribute type 10 has an invalid length. [ 1300.801050][ T1289] ieee802154 phy0 wpan0: encryption failed: -22 [ 1300.821790][T16843] netlink: 'syz.8.2328': attribute type 10 has an invalid length. [ 1300.847934][ T1289] ieee802154 phy1 wpan1: encryption failed: -22 [ 1301.129281][T16846] hfsplus: unable to find HFS+ superblock [ 1306.181844][T16879] picdev_read: 77 callbacks suppressed [ 1306.181865][T16879] kvm: pic: non byte read [ 1306.240051][T16879] kvm: pic: non byte read [ 1306.244675][T16879] kvm: pic: non byte read [ 1306.249352][T16879] kvm: pic: non byte read [ 1306.254012][T16879] kvm: pic: non byte read [ 1306.258571][T16879] kvm: pic: non byte read [ 1306.263333][T16879] kvm: pic: non byte read [ 1306.268099][T16879] kvm: pic: non byte read [ 1306.272757][T16879] kvm: pic: non byte read [ 1306.277461][T16879] kvm: pic: non byte read [ 1306.676592][T16886] binder_alloc: 16880: binder_alloc_buf, no vma [ 1307.810759][T16885] hfsplus: unable to find HFS+ superblock [ 1308.741799][T16893] netlink: 'syz.8.2342': attribute type 10 has an invalid length. [ 1313.624109][T16932] binder_alloc: 16921: binder_alloc_buf, no vma [ 1314.530745][T16941] hfsplus: unable to find HFS+ superblock [ 1319.977828][T16976] netlink: 'syz.7.2361': attribute type 10 has an invalid length. [ 1322.966275][T17010] hfsplus: unable to find HFS+ superblock [ 1324.476242][T17022] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 1324.982681][T17032] netlink: 'syz.8.2373': attribute type 10 has an invalid length. [ 1325.954753][T17045] binder_alloc: 17038: binder_alloc_buf, no vma [ 1330.404065][T17072] netlink: 'syz.8.2383': attribute type 10 has an invalid length. [ 1332.594849][T17104] befs: (nbd9): No write support. Marking filesystem read-only [ 1332.604118][T17104] syz.9.2390: attempt to access beyond end of device [ 1332.604118][T17104] nbd9: rw=0, sector=0, nr_sectors = 2 limit=0 [ 1332.617071][T17104] befs: (nbd9): unable to read superblock [ 1332.843402][T17107] fuse: Bad value for 'fd' [ 1337.897666][T17122] netlink: 'syz.9.2393': attribute type 10 has an invalid length. [ 1339.848999][T17141] befs: (nbd9): No write support. Marking filesystem read-only [ 1339.857780][T17141] syz.9.2399: attempt to access beyond end of device [ 1339.857780][T17141] nbd9: rw=0, sector=0, nr_sectors = 2 limit=0 [ 1339.871401][T17141] befs: (nbd9): unable to read superblock [ 1340.079666][T17143] fuse: Bad value for 'fd' [ 1343.213333][T17151] hfsplus: unable to find HFS+ superblock [ 1346.658788][T17164] netlink: 'syz.7.2404': attribute type 10 has an invalid length. [ 1350.154290][T17190] befs: (nbd8): No write support. Marking filesystem read-only [ 1350.162870][T17190] syz.8.2411: attempt to access beyond end of device [ 1350.162870][T17190] nbd8: rw=0, sector=0, nr_sectors = 2 limit=0 [ 1350.175916][T17190] befs: (nbd8): unable to read superblock [ 1350.396114][T17193] fuse: Bad value for 'fd' [ 1355.180082][T17220] picdev_read: 77 callbacks suppressed [ 1355.180102][T17220] kvm: pic: non byte read [ 1355.191069][T17220] kvm: pic: non byte read [ 1355.195683][T17220] kvm: pic: non byte read [ 1355.201327][T17220] kvm: pic: non byte read [ 1355.205893][T17220] kvm: pic: non byte read [ 1355.211084][T17220] kvm: pic: non byte read [ 1355.215841][T17220] kvm: pic: non byte read [ 1355.221008][T17220] kvm: pic: non byte read [ 1355.226008][T17220] kvm: pic: non byte read [ 1355.233720][T17220] kvm: pic: non byte read [ 1357.459955][T17228] netlink: 'syz.6.2420': attribute type 10 has an invalid length. [ 1357.616919][T17235] befs: (nbd7): No write support. Marking filesystem read-only [ 1357.625368][T17235] syz.7.2422: attempt to access beyond end of device [ 1357.625368][T17235] nbd7: rw=0, sector=0, nr_sectors = 2 limit=0 [ 1357.650805][T17235] befs: (nbd7): unable to read superblock [ 1358.131491][T17239] fuse: Bad value for 'fd' [ 1358.780969][ T785] usb 7-1: new high-speed USB device number 20 using dummy_hcd [ 1359.079842][T15900] usb 10-1: new high-speed USB device number 27 using dummy_hcd [ 1359.135887][ T785] usb 7-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 1359.135917][ T785] usb 7-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config [ 1359.135931][ T785] usb 7-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 1359.135963][ T785] usb 7-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 55, changing to 9 [ 1359.135983][ T785] usb 7-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8496, setting to 1024 [ 1359.142086][ T785] usb 7-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 1359.142116][ T785] usb 7-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 1359.142131][ T785] usb 7-1: Product: syz [ 1359.142142][ T785] usb 7-1: Manufacturer: syz [ 1359.146589][ T785] cdc_wdm 7-1:1.0: skipping garbage [ 1359.146603][ T785] cdc_wdm 7-1:1.0: skipping garbage [ 1359.149214][ T785] cdc_wdm 7-1:1.0: cdc-wdm0: USB WDM device [ 1359.149228][ T785] cdc_wdm 7-1:1.0: Unknown control protocol [ 1359.340479][T15900] usb 10-1: Using ep0 maxpacket: 32 [ 1359.411334][T15900] usb 10-1: config 0 has an invalid interface number: 1 but max is 0 [ 1359.411366][T15900] usb 10-1: config 0 has no interface number 0 [ 1359.413979][T15900] usb 10-1: New USB device found, idVendor=8086, idProduct=9500, bcdDevice=b6.d8 [ 1359.414008][T15900] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1359.414029][T15900] usb 10-1: Product: syz [ 1359.414044][T15900] usb 10-1: Manufacturer: syz [ 1359.414059][T15900] usb 10-1: SerialNumber: syz [ 1359.416677][T15900] usb 10-1: config 0 descriptor?? [ 1359.422286][T15900] usb 10-1: dvb_usb_v2: found a 'Intel CE9500 reference design' in warm state [ 1359.422313][T15900] usb 10-1: selecting invalid altsetting 1 [ 1359.422332][T15900] usb 10-1: dvb_usb_ce6230: usb_set_interface() failed=-22 [ 1359.446528][T15900] usb 10-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 1359.446825][T15900] dvbdev: DVB: registering new adapter (Intel CE9500 reference design) [ 1359.446870][T15900] usb 10-1: media controller created [ 1359.476709][T15900] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 1359.496987][T17253] netlink: 96 bytes leftover after parsing attributes in process `syz.8.2427'. [ 1359.521993][ C0] cdc_wdm 7-1:1.0: nonzero urb status received: -71 [ 1359.522018][ C0] cdc_wdm 7-1:1.0: wdm_int_callback - 0 bytes [ 1359.522231][ C0] cdc_wdm 7-1:1.0: nonzero urb status received: -71 [ 1359.522251][ C0] cdc_wdm 7-1:1.0: wdm_int_callback - 0 bytes [ 1359.522462][ C0] cdc_wdm 7-1:1.0: nonzero urb status received: -71 [ 1359.522483][ C0] cdc_wdm 7-1:1.0: wdm_int_callback - 0 bytes [ 1359.522636][ T8505] usb 7-1: USB disconnect, device number 20 [ 1359.522685][ C0] cdc_wdm 7-1:1.0: nonzero urb status received: -71 [ 1359.522705][ C0] cdc_wdm 7-1:1.0: wdm_int_callback - 0 bytes [ 1359.522723][ C0] cdc_wdm 7-1:1.0: wdm_int_callback - usb_submit_urb failed with result -19 [ 1359.661399][T15900] usb 10-1: dvb_usb_ce6230: usb_control_msg() failed=-71 [ 1359.661494][T15900] zl10353_read_register: readreg error (reg=127, ret==-71) [ 1359.662484][T15900] usb 10-1: dvb_usb_ce6230: usb_set_interface() failed=-71 [ 1359.716271][T15900] usb 10-1: USB disconnect, device number 27 [ 1362.180003][T17276] netlink: 'syz.6.2432': attribute type 10 has an invalid length. [ 1362.237045][ T1289] ieee802154 phy0 wpan0: encryption failed: -22 [ 1362.244557][ T1289] ieee802154 phy1 wpan1: encryption failed: -22 [ 1362.553177][T17277] hfsplus: unable to find HFS+ superblock [ 1363.048958][T17283] befs: (nbd7): No write support. Marking filesystem read-only [ 1363.057991][T17283] syz.7.2434: attempt to access beyond end of device [ 1363.057991][T17283] nbd7: rw=0, sector=0, nr_sectors = 2 limit=0 [ 1363.071911][T17283] befs: (nbd7): unable to read superblock [ 1363.332193][T17286] fuse: Bad value for 'fd' [ 1366.229758][T15900] usb 7-1: new high-speed USB device number 21 using dummy_hcd [ 1366.529804][T15900] usb 7-1: Using ep0 maxpacket: 32 [ 1366.544943][T15900] usb 7-1: config 0 has an invalid interface number: 1 but max is 0 [ 1366.556733][T15900] usb 7-1: config 0 has no interface number 0 [ 1366.647160][T15900] usb 7-1: New USB device found, idVendor=8086, idProduct=9500, bcdDevice=b6.d8 [ 1366.659687][T15900] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1366.669573][T15900] usb 7-1: Product: syz [ 1366.684447][T15900] usb 7-1: Manufacturer: syz [ 1366.703617][T15900] usb 7-1: SerialNumber: syz [ 1366.727855][T15900] usb 7-1: config 0 descriptor?? [ 1366.744385][T15900] usb 7-1: dvb_usb_v2: found a 'Intel CE9500 reference design' in warm state [ 1366.759819][T15900] usb 7-1: selecting invalid altsetting 1 [ 1366.774927][T15900] usb 7-1: dvb_usb_ce6230: usb_set_interface() failed=-22 [ 1366.808668][T15900] usb 7-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 1366.837896][T15900] dvbdev: DVB: registering new adapter (Intel CE9500 reference design) [ 1366.849942][T15900] usb 7-1: media controller created [ 1366.920398][T15900] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 1367.111662][T15900] usb 7-1: dvb_usb_ce6230: usb_control_msg() failed=-71 [ 1367.144095][T15900] zl10353_read_register: readreg error (reg=127, ret==-71) [ 1367.177297][T15900] usb 7-1: dvb_usb_ce6230: usb_set_interface() failed=-71 [ 1367.387694][T15900] usb 7-1: USB disconnect, device number 21 [ 1369.358135][T17322] picdev_read: 77 callbacks suppressed [ 1369.358150][T17322] kvm: pic: non byte read [ 1369.415217][T17322] kvm: pic: non byte read [ 1369.439761][T17322] kvm: pic: non byte read [ 1369.468398][T17322] kvm: pic: non byte read [ 1369.481364][T17322] kvm: pic: non byte read [ 1369.485877][T17322] kvm: pic: non byte read [ 1369.494759][T17322] kvm: pic: non byte read [ 1369.499294][T17322] kvm: pic: non byte read [ 1369.510546][T17322] kvm: pic: non byte read [ 1369.515047][T17322] kvm: pic: non byte read [ 1370.620237][T17333] befs: (nbd6): No write support. Marking filesystem read-only [ 1370.629211][T17333] syz.6.2447: attempt to access beyond end of device [ 1370.629211][T17333] nbd6: rw=0, sector=0, nr_sectors = 2 limit=0 [ 1370.642309][T17333] befs: (nbd6): unable to read superblock [ 1370.912595][T17336] fuse: Bad value for 'fd' [ 1374.134207][T17347] ieee802154 phy0 wpan0: encryption failed: -22 [ 1377.180024][ T785] usb 9-1: new high-speed USB device number 30 using dummy_hcd [ 1377.373652][ T785] usb 9-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 1377.387468][ T785] usb 9-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config [ 1377.408524][ T785] usb 9-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 1377.418100][ T785] usb 9-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 55, changing to 9 [ 1377.435555][ T785] usb 9-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8496, setting to 1024 [ 1377.460667][ T785] usb 9-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 1377.476190][ T785] usb 9-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 1377.486609][ T785] usb 9-1: Product: syz [ 1377.498482][ T785] usb 9-1: Manufacturer: syz [ 1377.526668][ T785] cdc_wdm 9-1:1.0: skipping garbage [ 1377.586911][ T785] cdc_wdm 9-1:1.0: skipping garbage [ 1377.625527][ T785] cdc_wdm 9-1:1.0: cdc-wdm0: USB WDM device [ 1377.685706][ T785] cdc_wdm 9-1:1.0: Unknown control protocol [ 1378.437854][ T785] usb 9-1: USB disconnect, device number 30 [ 1383.411562][T17423] kvm: pic: non byte read [ 1383.417726][T17423] kvm: pic: non byte read [ 1383.424758][T17423] kvm: pic: non byte read [ 1383.432442][T17423] kvm: pic: non byte read [ 1383.437216][T17423] kvm: pic: non byte read [ 1383.447647][T17423] kvm: pic: non byte read [ 1383.454221][T17423] kvm: pic: non byte read [ 1383.459242][T17423] kvm: pic: non byte read [ 1383.464041][T17423] kvm: pic: non byte read [ 1383.468501][T17423] kvm: pic: non byte read [ 1383.493357][ T5779] usb 9-1: new high-speed USB device number 31 using dummy_hcd [ 1383.713062][ T5779] usb 9-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 1383.740147][ T5779] usb 9-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config [ 1383.901586][ T5779] usb 9-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 1383.916217][ T5779] usb 9-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 55, changing to 9 [ 1383.933162][ T5779] usb 9-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8496, setting to 1024 [ 1384.728741][ T5779] usb 9-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 1384.750373][ T5779] usb 9-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 1384.859812][ T5779] usb 9-1: Product: syz [ 1384.872220][ T5779] usb 9-1: Manufacturer: syz [ 1384.890838][ T5779] cdc_wdm 9-1:1.0: skipping garbage [ 1384.904876][ T5779] cdc_wdm 9-1:1.0: skipping garbage [ 1384.919115][ T5779] cdc_wdm 9-1:1.0: cdc-wdm0: USB WDM device [ 1384.929201][ T5779] cdc_wdm 9-1:1.0: Unknown control protocol [ 1385.235107][ T5779] usb 9-1: USB disconnect, device number 31 [ 1390.329702][ T785] usb 9-1: new high-speed USB device number 32 using dummy_hcd [ 1391.035633][T17474] (syz.7.2479,17474,0):ocfs2_fill_super:990 ERROR: superblock probe failed! [ 1391.044810][T17474] (syz.7.2479,17474,0):ocfs2_fill_super:1178 ERROR: status = -22 [ 1391.090219][ T785] usb 9-1: Using ep0 maxpacket: 8 [ 1391.114975][ T785] usb 9-1: config 1 has 1 interface, different from the descriptor's value: 7 [ 1391.362941][ T785] usb 9-1: New USB device found, idVendor=082d, idProduct=0100, bcdDevice=70.4b [ 1392.097811][ T785] usb 9-1: New USB device strings: Mfr=44, Product=2, SerialNumber=3 [ 1392.109078][ T785] usb 9-1: Product: syz [ 1392.122643][ T785] usb 9-1: Manufacturer: syz [ 1392.127305][ T785] usb 9-1: SerialNumber: syz [ 1392.133130][T17487] overlayfs: failed to resolve './file1': -2 [ 1392.360207][ T785] usb 9-1: Handspring Visor / Palm OS: No valid connect info available [ 1392.378988][ T785] usb 9-1: Handspring Visor / Palm OS: port 0, is for Generic use [ 1392.406156][ T785] usb 9-1: Handspring Visor / Palm OS: port 0, is for Generic use [ 1392.426470][ T785] usb 9-1: Handspring Visor / Palm OS: Number of ports: 2 [ 1392.499630][T15900] usb 10-1: new high-speed USB device number 28 using dummy_hcd [ 1392.565040][T17464] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1392.580259][T17464] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1392.613378][ T785] visor 9-1:1.0: Handspring Visor / Palm OS converter detected [ 1392.631438][ T785] usb 9-1: Handspring Visor / Palm OS converter now attached to ttyUSB0 [ 1392.658331][ T785] usb 9-1: Handspring Visor / Palm OS converter now attached to ttyUSB1 [ 1392.709244][T15900] usb 10-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 1392.735950][T15900] usb 10-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config [ 1392.810201][T15900] usb 10-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 1392.831989][ T785] usb 9-1: USB disconnect, device number 32 [ 1392.847422][ T785] visor ttyUSB0: Handspring Visor / Palm OS converter now disconnected from ttyUSB0 [ 1392.874232][ T785] visor ttyUSB1: Handspring Visor / Palm OS converter now disconnected from ttyUSB1 [ 1392.887862][T15900] usb 10-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 55, changing to 9 [ 1392.898553][ T785] visor 9-1:1.0: device disconnected [ 1392.930030][T15900] usb 10-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8496, setting to 1024 [ 1392.971944][T15900] usb 10-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 1392.991801][T15900] usb 10-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 1393.010359][T15900] usb 10-1: Product: syz [ 1393.019851][T15900] usb 10-1: Manufacturer: syz [ 1393.030130][T15900] cdc_wdm 10-1:1.0: skipping garbage [ 1393.035451][T15900] cdc_wdm 10-1:1.0: skipping garbage [ 1393.053304][T15900] cdc_wdm 10-1:1.0: cdc-wdm0: USB WDM device [ 1393.059357][T15900] cdc_wdm 10-1:1.0: Unknown control protocol [ 1393.257499][ C1] cdc_wdm 10-1:1.0: nonzero urb status received: -71 [ 1393.264229][ C1] cdc_wdm 10-1:1.0: wdm_int_callback - 0 bytes [ 1393.271025][ C1] cdc_wdm 10-1:1.0: nonzero urb status received: -71 [ 1393.277778][ C1] cdc_wdm 10-1:1.0: wdm_int_callback - 0 bytes [ 1393.284257][ C1] cdc_wdm 10-1:1.0: nonzero urb status received: -71 [ 1393.290987][ C1] cdc_wdm 10-1:1.0: wdm_int_callback - 0 bytes [ 1393.297514][ C1] cdc_wdm 10-1:1.0: nonzero urb status received: -71 [ 1393.304262][ C1] cdc_wdm 10-1:1.0: wdm_int_callback - 0 bytes [ 1393.312407][ C1] cdc_wdm 10-1:1.0: nonzero urb status received: -71 [ 1393.319151][ C1] cdc_wdm 10-1:1.0: wdm_int_callback - 0 bytes [ 1393.330347][ C1] cdc_wdm 10-1:1.0: nonzero urb status received: -71 [ 1393.337094][ C1] cdc_wdm 10-1:1.0: wdm_int_callback - 0 bytes [ 1393.343893][ C1] cdc_wdm 10-1:1.0: nonzero urb status received: -71 [ 1393.350626][ C1] cdc_wdm 10-1:1.0: wdm_int_callback - 0 bytes [ 1393.357215][ C1] cdc_wdm 10-1:1.0: nonzero urb status received: -71 [ 1393.364044][ C1] cdc_wdm 10-1:1.0: wdm_int_callback - 0 bytes [ 1393.370434][ C1] cdc_wdm 10-1:1.0: nonzero urb status received: -71 [ 1393.377171][ C1] cdc_wdm 10-1:1.0: wdm_int_callback - 0 bytes [ 1393.383657][ C1] cdc_wdm 10-1:1.0: nonzero urb status received: -71 [ 1393.390378][ C1] cdc_wdm 10-1:1.0: wdm_int_callback - 0 bytes [ 1393.400336][ T27] usb 10-1: USB disconnect, device number 28 [ 1393.406402][ C1] cdc_wdm 10-1:1.0: wdm_int_callback - usb_submit_urb failed with result -19 [ 1397.220967][T17523] netlink: 8 bytes leftover after parsing attributes in process `syz.7.2491'. [ 1397.999887][T17523] vlan2: entered allmulticast mode [ 1398.084127][T17526] hfsplus: unable to find HFS+ superblock [ 1398.217327][T17528] overlayfs: failed to resolve './file1': -2 [ 1399.309611][T15939] usb 7-1: new high-speed USB device number 22 using dummy_hcd [ 1399.861460][T15939] usb 7-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 1400.216695][T15939] usb 7-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config [ 1400.249760][T15939] usb 7-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 1400.270823][T15939] usb 7-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 55, changing to 9 [ 1400.282501][T15939] usb 7-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8496, setting to 1024 [ 1400.332579][T15939] usb 7-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 1400.880798][T15939] usb 7-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 1400.908387][T15939] usb 7-1: Product: syz [ 1400.913908][T15939] usb 7-1: Manufacturer: syz [ 1400.929074][T15939] cdc_wdm 7-1:1.0: skipping garbage [ 1400.934691][T15939] cdc_wdm 7-1:1.0: skipping garbage [ 1400.946920][T15939] cdc_wdm 7-1:1.0: cdc-wdm0: USB WDM device [ 1400.953240][T15939] cdc_wdm 7-1:1.0: Unknown control protocol [ 1401.349060][ C0] wdm_int_callback: 19 callbacks suppressed [ 1401.349087][ C0] cdc_wdm 7-1:1.0: nonzero urb status received: -71 [ 1401.361664][ C0] wdm_int_callback: 19 callbacks suppressed [ 1401.361683][ C0] cdc_wdm 7-1:1.0: wdm_int_callback - 0 bytes [ 1401.373881][ C0] vkms_vblank_simulate: vblank timer overrun [ 1401.383123][ C0] cdc_wdm 7-1:1.0: nonzero urb status received: -71 [ 1401.389785][ C0] cdc_wdm 7-1:1.0: wdm_int_callback - 0 bytes [ 1401.396160][ C0] cdc_wdm 7-1:1.0: nonzero urb status received: -71 [ 1401.402794][ C0] cdc_wdm 7-1:1.0: wdm_int_callback - 0 bytes [ 1401.409134][ C0] cdc_wdm 7-1:1.0: nonzero urb status received: -71 [ 1401.415775][ C0] cdc_wdm 7-1:1.0: wdm_int_callback - 0 bytes [ 1401.422885][ C0] cdc_wdm 7-1:1.0: nonzero urb status received: -71 [ 1401.429526][ C0] cdc_wdm 7-1:1.0: wdm_int_callback - 0 bytes [ 1401.435929][ C0] cdc_wdm 7-1:1.0: nonzero urb status received: -71 [ 1401.442556][ C0] cdc_wdm 7-1:1.0: wdm_int_callback - 0 bytes [ 1401.448859][ C0] cdc_wdm 7-1:1.0: nonzero urb status received: -71 [ 1401.455486][ C0] cdc_wdm 7-1:1.0: wdm_int_callback - 0 bytes [ 1401.461827][ C0] cdc_wdm 7-1:1.0: nonzero urb status received: -71 [ 1401.468455][ C0] cdc_wdm 7-1:1.0: wdm_int_callback - 0 bytes [ 1401.474749][ C0] cdc_wdm 7-1:1.0: nonzero urb status received: -71 [ 1401.481387][ C0] cdc_wdm 7-1:1.0: wdm_int_callback - 0 bytes [ 1401.487711][ C0] cdc_wdm 7-1:1.0: nonzero urb status received: -71 [ 1401.494373][ C0] cdc_wdm 7-1:1.0: wdm_int_callback - 0 bytes [ 1401.511940][T15939] usb 7-1: USB disconnect, device number 22 [ 1401.517923][ C0] cdc_wdm 7-1:1.0: wdm_int_callback - usb_submit_urb failed with result -19 [ 1402.224103][T17555] netlink: 8 bytes leftover after parsing attributes in process `syz.6.2504'. [ 1402.276907][T17555] vlan2: entered allmulticast mode [ 1403.966998][T17573] befs: (nbd7): No write support. Marking filesystem read-only [ 1403.977995][T17573] syz.7.2507: attempt to access beyond end of device [ 1403.977995][T17573] nbd7: rw=0, sector=0, nr_sectors = 2 limit=0 [ 1404.177044][T17573] befs: (nbd7): unable to read superblock [ 1404.418122][T17575] fuse: Bad value for 'fd' [ 1406.829694][T17581] picdev_read: 77 callbacks suppressed [ 1406.829714][T17581] kvm: pic: non byte read [ 1407.229152][ T5803] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 1407.239568][ T5803] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 1407.248438][ T5803] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 1407.256734][ T5803] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 1407.265468][ T5803] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 1407.273159][ T5803] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 1408.706858][ T58] netdevsim netdevsim6 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1408.812647][T17597] netlink: 'syz.8.2512': attribute type 10 has an invalid length. [ 1408.977990][ T58] netdevsim netdevsim6 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1409.619428][T12883] Bluetooth: hci3: command tx timeout [ 1409.956350][ T58] netdevsim netdevsim6 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1410.090644][T12883] sysfs: cannot create duplicate filename '/devices/virtual/bluetooth/hci1/hci1:201' [ 1410.102094][T12883] CPU: 0 PID: 12883 Comm: kworker/u5:1 Not tainted syzkaller #0 [ 1410.109783][T12883] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 1410.119883][T12883] Workqueue: hci1 hci_rx_work [ 1410.124626][T12883] Call Trace: [ 1410.127937][T12883] [ 1410.130903][T12883] dump_stack_lvl+0x16c/0x230 [ 1410.135632][T12883] ? show_regs_print_info+0x20/0x20 [ 1410.140977][T12883] ? load_image+0x3b0/0x3b0 [ 1410.145541][T12883] sysfs_create_dir_ns+0x256/0x280 [ 1410.150708][T12883] ? hci_rx_work+0x43a/0xd80 [ 1410.155333][T12883] ? sysfs_warn_dup+0xa0/0xa0 [ 1410.160048][T12883] ? do_raw_spin_unlock+0x121/0x230 [ 1410.165272][T12883] kobject_add_internal+0x6b8/0xc70 [ 1410.170505][T12883] kobject_add+0x156/0x220 [ 1410.174947][T12883] ? __rwlock_init+0x150/0x150 [ 1410.179729][T12883] ? kobject_init+0x1e0/0x1e0 [ 1410.184432][T12883] ? _raw_spin_unlock+0x28/0x40 [ 1410.189296][T12883] ? get_device_parent+0x366/0x390 [ 1410.194434][T12883] device_add+0x408/0xc20 [ 1410.198787][T12883] hci_conn_add_sysfs+0xd5/0x1e0 [ 1410.203746][T12883] le_conn_complete_evt+0xc37/0x1220 [ 1410.209042][T12883] ? hci_event_packet+0x4a7/0x1210 [ 1410.214177][T12883] ? hci_le_big_info_adv_report_evt+0x8e0/0x8e0 [ 1410.220433][T12883] ? __copy_skb_header+0xa7/0x550 [ 1410.225492][T12883] ? __mutex_unlock_slowpath+0x1a2/0x6a0 [ 1410.231665][T12883] ? skb_pull_data+0xfb/0x200 [ 1410.236815][T12883] hci_le_conn_complete_evt+0x187/0x440 [ 1410.242411][T12883] ? hci_remote_host_features_evt+0x160/0x160 [ 1410.248493][T12883] hci_event_packet+0x795/0x1210 [ 1410.253550][T12883] ? bis_list+0x290/0x290 [ 1410.257929][T12883] ? lockdep_hardirqs_on+0x98/0x150 [ 1410.263167][T12883] ? hci_send_to_monitor+0xd7/0x4f0 [ 1410.268385][T12883] hci_rx_work+0x43a/0xd80 [ 1410.272832][T12883] ? process_scheduled_works+0x957/0x15b0 [ 1410.278572][T12883] process_scheduled_works+0xa45/0x15b0 [ 1410.284238][T12883] ? assign_work+0x400/0x400 [ 1410.288843][T12883] ? assign_work+0x39e/0x400 [ 1410.293457][T12883] worker_thread+0xa55/0xfc0 [ 1410.298067][T12883] ? _raw_spin_unlock_irqrestore+0xae/0x110 [ 1410.303975][T12883] ? _raw_spin_unlock+0x40/0x40 [ 1410.308846][T12883] ? _raw_spin_unlock_irqrestore+0x86/0x110 [ 1410.314779][T12883] kthread+0x2fa/0x390 [ 1410.318864][T12883] ? pr_cont_work+0x560/0x560 [ 1410.323560][T12883] ? kthread_blkcg+0xd0/0xd0 [ 1410.328156][T12883] ret_from_fork+0x48/0x80 [ 1410.332608][T12883] ? kthread_blkcg+0xd0/0xd0 [ 1410.337221][T12883] ret_from_fork_asm+0x11/0x20 [ 1410.342010][T12883] [ 1410.352060][T12883] kobject: kobject_add_internal failed for hci1:201 with -EEXIST, don't try to register things with the same name in the same directory. [ 1410.369800][T12883] Bluetooth: hci1: failed to register connection device [ 1410.396399][ T58] netdevsim netdevsim6 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1410.426258][T17613] netlink: 96 bytes leftover after parsing attributes in process `syz.7.2517'. [ 1410.590285][T17616] hfsplus: unable to find HFS+ superblock [ 1411.381625][T17588] chnl_net:caif_netlink_parms(): no params data found [ 1411.719896][T12883] Bluetooth: hci3: command tx timeout [ 1412.312642][T17634] netlink: 'syz.8.2521': attribute type 10 has an invalid length. [ 1413.109774][T17588] bridge0: port 1(bridge_slave_0) entered blocking state [ 1413.127590][T17588] bridge0: port 1(bridge_slave_0) entered disabled state [ 1413.148154][T17588] bridge_slave_0: entered allmulticast mode [ 1413.178570][T17588] bridge_slave_0: entered promiscuous mode [ 1413.437211][T17588] bridge0: port 2(bridge_slave_1) entered blocking state [ 1413.680030][T17588] bridge0: port 2(bridge_slave_1) entered disabled state [ 1413.739740][T12883] Bluetooth: hci3: command tx timeout [ 1413.783517][T17588] bridge_slave_1: entered allmulticast mode [ 1414.026306][T17588] bridge_slave_1: entered promiscuous mode [ 1414.608377][T17662] hfsplus: unable to find HFS+ superblock [ 1414.649093][T17588] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1415.298671][T17588] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1415.687381][T17588] team0: Port device team_slave_0 added [ 1415.726143][T17588] team0: Port device team_slave_1 added [ 1415.819964][ T5803] Bluetooth: hci3: command tx timeout [ 1415.959853][ T5875] usb 9-1: new high-speed USB device number 33 using dummy_hcd [ 1416.017014][T17588] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1416.036108][T17588] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1416.080018][T17588] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1416.157292][T17588] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1416.175170][T17588] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1416.203276][ T5875] usb 9-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 1416.212561][ T5875] usb 9-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config [ 1416.245693][ T5875] usb 9-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 1416.255050][T17588] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1416.276630][ T5875] usb 9-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 55, changing to 9 [ 1416.404718][ T5875] usb 9-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8496, setting to 1024 [ 1416.847804][ T58] IPVS: stopping backup sync thread 10763 ... [ 1416.890062][ T5875] usb 9-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 1416.892716][T17588] hsr_slave_0: entered promiscuous mode [ 1416.906281][T17588] hsr_slave_1: entered promiscuous mode [ 1416.914983][ T5875] usb 9-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 1416.923500][T17588] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 1416.939534][T17588] Cannot create hsr debugfs directory [ 1416.990759][ T5875] usb 9-1: Product: syz [ 1417.001554][ T5875] usb 9-1: Manufacturer: syz [ 1417.022793][ T5875] cdc_wdm 9-1:1.0: skipping garbage [ 1417.030281][T12883] Bluetooth: hci1: command 0x0406 tx timeout [ 1417.038316][ T5875] cdc_wdm 9-1:1.0: skipping garbage [ 1417.057312][ T5875] cdc_wdm 9-1:1.0: cdc-wdm0: USB WDM device [ 1417.068735][ T5875] cdc_wdm 9-1:1.0: Unknown control protocol [ 1417.750470][ T8505] usb 9-1: USB disconnect, device number 33 [ 1418.780497][ T58] hsr_slave_0: left promiscuous mode [ 1419.047313][ T58] hsr_slave_1: left promiscuous mode [ 1419.086309][ T58] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1419.094683][ T58] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1419.113962][ T58] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1419.121617][ T58] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1419.135421][ T58] dummy0: left allmulticast mode [ 1419.314651][ T58] bridge0: port 3(dummy0) entered disabled state [ 1419.380183][ T58] bridge_slave_1: left allmulticast mode [ 1419.386028][ T58] bridge_slave_1: left promiscuous mode [ 1419.614865][ T58] bridge0: port 2(bridge_slave_1) entered disabled state [ 1420.024242][ T58] bridge_slave_0: left promiscuous mode [ 1420.062678][ T58] bridge0: port 1(bridge_slave_0) entered disabled state [ 1420.277650][T17713] hfsplus: unable to find HFS+ superblock [ 1420.818560][ T58] veth1_macvtap: left promiscuous mode [ 1420.854654][ T58] veth0_macvtap: left promiscuous mode [ 1420.905999][T17718] befs: (nbd9): No write support. Marking filesystem read-only [ 1420.915032][T17718] syz.9.2541: attempt to access beyond end of device [ 1420.915032][T17718] nbd9: rw=0, sector=0, nr_sectors = 2 limit=0 [ 1420.928088][T17718] befs: (nbd9): unable to read superblock [ 1420.972466][ T58] veth1_vlan: left promiscuous mode [ 1421.076552][ T58] veth0_vlan: left promiscuous mode [ 1421.144779][T17721] fuse: Bad value for 'fd' [ 1423.671140][T17745] sctp: [Deprecated]: syz.9.2546 (pid 17745) Use of struct sctp_assoc_value in delayed_ack socket option. [ 1423.671140][T17745] Use struct sctp_sack_info instead [ 1423.688647][ T1289] ieee802154 phy0 wpan0: encryption failed: -22 [ 1423.697844][ T1289] ieee802154 phy1 wpan1: encryption failed: -22 [ 1426.175243][ T58] team0 (unregistering): Port device team_slave_1 removed [ 1426.333778][T17762] befs: (nbd7): No write support. Marking filesystem read-only [ 1426.342168][T17762] syz.7.2550: attempt to access beyond end of device [ 1426.342168][T17762] nbd7: rw=0, sector=0, nr_sectors = 2 limit=0 [ 1426.355079][T17762] befs: (nbd7): unable to read superblock [ 1426.564793][T17764] fuse: Bad value for 'fd' [ 1426.864029][ T58] team0 (unregistering): Port device team_slave_0 removed [ 1427.184941][ T58] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1427.334119][ T58] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1428.935118][ T58] bond0 (unregistering): (slave batadv0): Releasing backup interface [ 1429.162541][T17777] kvm: pic: non byte read [ 1429.179641][T17777] kvm: pic: non byte read [ 1429.219962][T17777] kvm: pic: non byte read [ 1429.224518][T17777] kvm: pic: non byte read [ 1429.230105][T17777] kvm: pic: non byte read [ 1429.244452][T17777] kvm: pic: non byte read [ 1429.271612][T17777] kvm: pic: non byte read [ 1429.289626][T17777] kvm: pic: non byte read [ 1429.308063][T17777] kvm: pic: non byte read [ 1429.316406][T17777] kvm: pic: non byte read [ 1429.978511][T17782] overlayfs: overlapping lowerdir path [ 1430.195707][ T58] bond0 (unregistering): Released all slaves [ 1430.429686][T15900] usb 10-1: new high-speed USB device number 29 using dummy_hcd [ 1430.464204][T17746] netlink: 'syz.8.2545': attribute type 10 has an invalid length. [ 1430.616352][T15900] usb 10-1: config 0 interface 0 altsetting 251 endpoint 0x9 has invalid wMaxPacketSize 0 [ 1430.648187][T15900] usb 10-1: config 0 interface 0 has no altsetting 0 [ 1430.669850][T15900] usb 10-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 1430.694997][T15900] usb 10-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 1430.787846][T17791] befs: (nbd8): No write support. Marking filesystem read-only [ 1430.796273][T17791] syz.8.2559: attempt to access beyond end of device [ 1430.796273][T17791] nbd8: rw=0, sector=0, nr_sectors = 2 limit=0 [ 1430.809822][T17791] befs: (nbd8): unable to read superblock [ 1431.050353][T17791] fuse: Bad value for 'fd' [ 1431.068865][T15900] usb 10-1: Product: syz [ 1431.618544][T15900] usb 10-1: Manufacturer: syz [ 1431.689647][T15900] usb 10-1: SerialNumber: syz [ 1431.797712][T15900] usb 10-1: config 0 descriptor?? [ 1431.956778][T15900] usb 10-1: selecting invalid altsetting 0 [ 1433.706044][T15900] usb 10-1: USB disconnect, device number 29 [ 1434.878172][T17821] netlink: 96 bytes leftover after parsing attributes in process `syz.7.2564'. [ 1435.622048][T17588] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 1435.649148][T17588] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 1435.694095][T17588] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 1435.738522][T17832] befs: (nbd9): No write support. Marking filesystem read-only [ 1435.747203][T17832] syz.9.2567: attempt to access beyond end of device [ 1435.747203][T17832] nbd9: rw=0, sector=0, nr_sectors = 2 limit=0 [ 1435.760549][T17832] befs: (nbd9): unable to read superblock [ 1435.877324][T17588] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 1436.066265][T17836] fuse: Bad value for 'fd' [ 1438.529805][T17837] netlink: 'syz.7.2566': attribute type 10 has an invalid length. [ 1438.627377][T17588] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1438.682850][T17588] 8021q: adding VLAN 0 to HW filter on device team0 [ 1438.815413][ T58] bridge0: port 1(bridge_slave_0) entered blocking state [ 1438.822602][ T58] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1439.127058][T15940] bridge0: port 2(bridge_slave_1) entered blocking state [ 1439.134264][T15940] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1439.220071][T17857] vlan2: entered allmulticast mode [ 1440.883748][T17588] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1441.734213][T17588] veth0_vlan: entered promiscuous mode [ 1441.760446][T17887] hfsplus: unable to find HFS+ superblock [ 1441.808599][T17588] veth1_vlan: entered promiscuous mode [ 1442.390850][T17588] veth0_macvtap: entered promiscuous mode [ 1442.424045][T17588] veth1_macvtap: entered promiscuous mode [ 1442.527783][T17588] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1442.611417][T17903] befs: (nbd8): No write support. Marking filesystem read-only [ 1442.620580][T17903] syz.8.2575: attempt to access beyond end of device [ 1442.620580][T17903] nbd8: rw=0, sector=0, nr_sectors = 2 limit=0 [ 1442.633741][T17903] befs: (nbd8): unable to read superblock [ 1442.674628][T17588] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1442.792017][T17588] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1442.902586][T17588] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1442.931518][T17906] fuse: Bad value for 'fd' [ 1443.055298][T17588] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1443.198456][T17588] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1443.331848][T17588] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1443.535185][T17588] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1443.623314][T17588] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1443.728184][T17588] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1443.821072][T17588] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1443.902984][T17588] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1444.004954][T17588] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1444.148263][T17588] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1444.358346][T17588] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1444.427398][T17588] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1444.498939][T17588] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1444.572755][T17588] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1445.610074][ T6320] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1445.617964][ T6320] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1446.311671][ T9328] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1446.325182][ T9328] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1448.777826][T17954] befs: (nbd6): No write support. Marking filesystem read-only [ 1448.790193][T17954] syz.6.2584: attempt to access beyond end of device [ 1448.790193][T17954] nbd6: rw=0, sector=0, nr_sectors = 2 limit=0 [ 1448.803359][T17954] befs: (nbd6): unable to read superblock [ 1449.058118][T17957] fuse: Bad value for 'fd' [ 1450.061912][T17968] picdev_read: 77 callbacks suppressed [ 1450.061931][T17968] kvm: pic: non byte read [ 1450.251827][T17965] netlink: 'syz.8.2585': attribute type 10 has an invalid length. [ 1451.030126][T17968] kvm: pic: non byte read [ 1451.034691][T17968] kvm: pic: non byte read [ 1452.777399][T17994] befs: (nbd8): No write support. Marking filesystem read-only [ 1452.810326][T17994] syz.8.2592: attempt to access beyond end of device [ 1452.810326][T17994] nbd8: rw=0, sector=0, nr_sectors = 2 limit=0 [ 1452.824202][T17994] befs: (nbd8): unable to read superblock [ 1452.976040][T17996] fuse: Bad value for 'fd' [ 1456.078714][T18028] befs: (nbd9): No write support. Marking filesystem read-only [ 1456.088661][T18028] syz.9.2595: attempt to access beyond end of device [ 1456.088661][T18028] nbd9: rw=0, sector=0, nr_sectors = 2 limit=0 [ 1456.102195][T18028] befs: (nbd9): unable to read superblock [ 1456.362753][T18031] fuse: Bad value for 'fd' [ 1459.140206][T12883] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 1459.152954][T12883] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 1459.162872][T12883] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 1459.171739][T12883] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 1459.180392][T12883] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 1459.189063][T12883] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 1460.127867][T18051] fuse: Bad value for 'fd' [ 1460.970565][ T9328] netdevsim netdevsim7 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1461.128351][T18063] netlink: 116 bytes leftover after parsing attributes in process `syz.9.2602'. [ 1461.218530][ T5803] sysfs: cannot create duplicate filename '/devices/virtual/bluetooth/hci3/hci3:201' [ 1461.228630][ T5803] CPU: 1 PID: 5803 Comm: kworker/u5:7 Not tainted syzkaller #0 [ 1461.236238][ T5803] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 1461.246328][ T5803] Workqueue: hci3 hci_rx_work [ 1461.251073][ T5803] Call Trace: [ 1461.254374][ T5803] [ 1461.257327][ T5803] dump_stack_lvl+0x16c/0x230 [ 1461.262038][ T5803] ? show_regs_print_info+0x20/0x20 [ 1461.267286][ T5803] ? load_image+0x3b0/0x3b0 [ 1461.271929][ T5803] sysfs_create_dir_ns+0x256/0x280 [ 1461.277075][ T5803] ? hci_rx_work+0x43a/0xd80 [ 1461.281695][ T5803] ? sysfs_warn_dup+0xa0/0xa0 [ 1461.286411][ T5803] ? do_raw_spin_unlock+0x121/0x230 [ 1461.291644][ T5803] kobject_add_internal+0x6b8/0xc70 [ 1461.296876][ T5803] kobject_add+0x156/0x220 [ 1461.301347][ T5803] ? __rwlock_init+0x150/0x150 [ 1461.306146][ T5803] ? kobject_init+0x1e0/0x1e0 [ 1461.310855][ T5803] ? _raw_spin_unlock+0x28/0x40 [ 1461.315737][ T5803] ? get_device_parent+0x366/0x390 [ 1461.320879][ T5803] device_add+0x408/0xc20 [ 1461.325269][ T5803] hci_conn_add_sysfs+0xd5/0x1e0 [ 1461.330255][ T5803] le_conn_complete_evt+0xc37/0x1220 [ 1461.335595][ T5803] ? hci_event_packet+0x4a7/0x1210 [ 1461.340761][ T5803] ? hci_le_big_info_adv_report_evt+0x8e0/0x8e0 [ 1461.347066][ T5803] ? __copy_skb_header+0xa7/0x550 [ 1461.352154][ T5803] ? __mutex_unlock_slowpath+0x1a2/0x6a0 [ 1461.357830][ T5803] ? skb_pull_data+0xfb/0x200 [ 1461.362565][ T5803] hci_le_conn_complete_evt+0x187/0x440 [ 1461.368149][ T5803] ? hci_remote_host_features_evt+0x160/0x160 [ 1461.374243][ T5803] hci_event_packet+0x795/0x1210 [ 1461.379231][ T5803] ? bis_list+0x290/0x290 [ 1461.383604][ T5803] ? lockdep_hardirqs_on+0x98/0x150 [ 1461.388839][ T5803] ? hci_send_to_monitor+0xd7/0x4f0 [ 1461.394090][ T5803] hci_rx_work+0x43a/0xd80 [ 1461.398549][ T5803] ? process_scheduled_works+0x957/0x15b0 [ 1461.404294][ T5803] process_scheduled_works+0xa45/0x15b0 [ 1461.409891][ T5803] ? assign_work+0x400/0x400 [ 1461.414511][ T5803] ? assign_work+0x39e/0x400 [ 1461.419137][ T5803] worker_thread+0xa55/0xfc0 [ 1461.423779][ T5803] kthread+0x2fa/0x390 [ 1461.427871][ T5803] ? pr_cont_work+0x560/0x560 [ 1461.432574][ T5803] ? kthread_blkcg+0xd0/0xd0 [ 1461.437237][ T5803] ret_from_fork+0x48/0x80 [ 1461.441684][ T5803] ? kthread_blkcg+0xd0/0xd0 [ 1461.446297][ T5803] ret_from_fork_asm+0x11/0x20 [ 1461.451185][ T5803] [ 1461.465704][ T5803] kobject: kobject_add_internal failed for hci3:201 with -EEXIST, don't try to register things with the same name in the same directory. [ 1461.479973][ T5803] Bluetooth: hci3: failed to register connection device [ 1461.484669][ T9328] netdevsim netdevsim7 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1461.487995][ T5803] Bluetooth: hci0: command tx timeout [ 1461.812824][ T9328] netdevsim netdevsim7 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1462.743521][T18084] befs: (nbd9): No write support. Marking filesystem read-only [ 1462.753278][T18084] syz.9.2605: attempt to access beyond end of device [ 1462.753278][T18084] nbd9: rw=0, sector=0, nr_sectors = 2 limit=0 [ 1462.766557][T18084] befs: (nbd9): unable to read superblock [ 1463.047214][T18089] fuse: Bad value for 'fd' [ 1463.288284][ T9328] netdevsim netdevsim7 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1463.582316][T12883] Bluetooth: hci0: command tx timeout [ 1464.237670][T18037] chnl_net:caif_netlink_parms(): no params data found [ 1464.355048][T18104] kvm: pic: non byte read [ 1464.404971][T18104] kvm: pic: non byte read [ 1464.424400][T18104] kvm: pic: non byte read [ 1464.446141][T18104] kvm: pic: non byte read [ 1464.870964][T18104] kvm: pic: non byte read [ 1465.325226][T18113] fuse: Bad value for 'fd' [ 1465.659743][T12883] Bluetooth: hci0: command tx timeout [ 1466.452541][T18037] bridge0: port 1(bridge_slave_0) entered blocking state [ 1466.477493][T18037] bridge0: port 1(bridge_slave_0) entered disabled state [ 1466.502514][T18037] bridge_slave_0: entered allmulticast mode [ 1466.532376][T18037] bridge_slave_0: entered promiscuous mode [ 1466.705741][T18126] sctp: [Deprecated]: syz.8.2611 (pid 18126) Use of struct sctp_assoc_value in delayed_ack socket option. [ 1466.705741][T18126] Use struct sctp_sack_info instead [ 1466.790041][T18037] bridge0: port 2(bridge_slave_1) entered blocking state [ 1466.814211][T18037] bridge0: port 2(bridge_slave_1) entered disabled state [ 1466.851685][T18037] bridge_slave_1: entered allmulticast mode [ 1466.858779][T18037] bridge_slave_1: entered promiscuous mode [ 1467.107621][T18131] netlink: 116 bytes leftover after parsing attributes in process `syz.9.2612'. [ 1467.236956][T18037] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1467.288317][T18037] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1467.749642][T12883] Bluetooth: hci0: command tx timeout [ 1468.041104][T18037] team0: Port device team_slave_0 added [ 1468.153728][T18143] befs: (nbd9): No write support. Marking filesystem read-only [ 1468.162290][T18143] syz.9.2615: attempt to access beyond end of device [ 1468.162290][T18143] nbd9: rw=0, sector=0, nr_sectors = 2 limit=0 [ 1468.175352][T18143] befs: (nbd9): unable to read superblock [ 1468.260941][T18037] team0: Port device team_slave_1 added [ 1468.477874][T18146] fuse: Bad value for 'fd' [ 1469.994504][T18037] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1470.001798][T18037] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1470.085300][T18037] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1470.166504][T18037] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1470.175396][T18037] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1470.201905][T15939] usb 7-1: new high-speed USB device number 23 using dummy_hcd [ 1470.225187][T18037] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1470.320558][ T5875] usb 10-1: new high-speed USB device number 30 using dummy_hcd [ 1470.402186][T15939] usb 7-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 1470.411071][T15939] usb 7-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config [ 1470.453786][T15939] usb 7-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 1470.500088][T15939] usb 7-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 55, changing to 9 [ 1470.529551][T15939] usb 7-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8496, setting to 1024 [ 1470.548761][ T5875] usb 10-1: config 0 interface 0 altsetting 251 endpoint 0x9 has invalid wMaxPacketSize 0 [ 1470.574500][ T5875] usb 10-1: config 0 interface 0 has no altsetting 0 [ 1470.583218][T15939] usb 7-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 1470.592460][T15939] usb 7-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 1470.615602][T18037] hsr_slave_0: entered promiscuous mode [ 1470.621467][T15939] usb 7-1: Product: syz [ 1470.625994][T15939] usb 7-1: Manufacturer: syz [ 1470.634018][ T5875] usb 10-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 1470.648946][ T5875] usb 10-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 1470.658769][T18037] hsr_slave_1: entered promiscuous mode [ 1470.665977][T15939] cdc_wdm 7-1:1.0: skipping garbage [ 1470.681262][T15939] cdc_wdm 7-1:1.0: skipping garbage [ 1470.689243][T18037] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 1470.703554][ T5875] usb 10-1: Product: syz [ 1470.707875][ T5875] usb 10-1: Manufacturer: syz [ 1470.713361][T15939] cdc_wdm 7-1:1.0: cdc-wdm0: USB WDM device [ 1470.719308][T15939] cdc_wdm 7-1:1.0: Unknown control protocol [ 1470.726023][T18037] Cannot create hsr debugfs directory [ 1470.732987][ T5875] usb 10-1: SerialNumber: syz [ 1470.760350][ T5875] usb 10-1: config 0 descriptor?? [ 1470.773295][ T5875] usb 10-1: selecting invalid altsetting 0 [ 1470.871769][ T9328] IPVS: stopping backup sync thread 10103 ... [ 1470.907419][ C0] wdm_int_callback: 59 callbacks suppressed [ 1470.907445][ C0] cdc_wdm 7-1:1.0: nonzero urb status received: -71 [ 1470.920069][ C0] wdm_int_callback: 59 callbacks suppressed [ 1470.920089][ C0] cdc_wdm 7-1:1.0: wdm_int_callback - 0 bytes [ 1470.932532][ C0] cdc_wdm 7-1:1.0: nonzero urb status received: -71 [ 1470.939201][ C0] cdc_wdm 7-1:1.0: wdm_int_callback - 0 bytes [ 1470.946920][ C0] cdc_wdm 7-1:1.0: nonzero urb status received: -71 [ 1470.953591][ C0] cdc_wdm 7-1:1.0: wdm_int_callback - 0 bytes [ 1470.960234][ C0] cdc_wdm 7-1:1.0: nonzero urb status received: -71 [ 1470.966937][ C0] cdc_wdm 7-1:1.0: wdm_int_callback - 0 bytes [ 1470.979623][ C0] cdc_wdm 7-1:1.0: nonzero urb status received: -71 [ 1470.986294][ C0] cdc_wdm 7-1:1.0: wdm_int_callback - 0 bytes [ 1470.993053][ T5842] usb 7-1: USB disconnect, device number 23 [ 1470.999707][ C0] cdc_wdm 7-1:1.0: nonzero urb status received: -71 [ 1471.006360][ C0] cdc_wdm 7-1:1.0: wdm_int_callback - 0 bytes [ 1471.012462][ C0] cdc_wdm 7-1:1.0: wdm_int_callback - usb_submit_urb failed with result -19 [ 1471.432426][T18176] sctp: [Deprecated]: syz.8.2620 (pid 18176) Use of struct sctp_assoc_value in delayed_ack socket option. [ 1471.432426][T18176] Use struct sctp_sack_info instead [ 1471.768187][ T9328] hsr_slave_0: left promiscuous mode [ 1471.789662][ T9328] hsr_slave_1: left promiscuous mode [ 1471.807809][ T9328] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1471.828765][ T9328] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1471.867628][ T9328] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1471.905636][ T9328] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1471.949232][ T9328] bridge_slave_1: left allmulticast mode [ 1471.969666][ T9328] bridge_slave_1: left promiscuous mode [ 1471.976892][ T9328] bridge0: port 2(bridge_slave_1) entered disabled state [ 1471.995945][ T9328] bridge_slave_0: left promiscuous mode [ 1472.001937][ T9328] bridge0: port 1(bridge_slave_0) entered disabled state [ 1472.021091][T18187] netlink: 116 bytes leftover after parsing attributes in process `syz.6.2622'. [ 1472.045784][ T9328] veth1_macvtap: left promiscuous mode [ 1472.053843][ T9328] veth0_macvtap: left promiscuous mode [ 1472.065091][ T9328] veth1_vlan: left promiscuous mode [ 1472.074752][ T9328] veth0_vlan: left promiscuous mode [ 1472.956829][ T9328] team0 (unregistering): Port device team_slave_1 removed [ 1473.064713][ T9328] team0 (unregistering): Port device team_slave_0 removed [ 1473.092910][ T23] usb 10-1: USB disconnect, device number 30 [ 1473.198076][ T9328] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1473.319276][ T9328] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1474.339341][T18194] befs: (nbd9): No write support. Marking filesystem read-only [ 1474.348246][T18194] syz.9.2625: attempt to access beyond end of device [ 1474.348246][T18194] nbd9: rw=0, sector=0, nr_sectors = 2 limit=0 [ 1474.361512][T18194] befs: (nbd9): unable to read superblock [ 1474.556532][ T9328] bond0 (unregistering): (slave batadv0): Releasing backup interface [ 1475.677699][ T9328] bond0 (unregistering): Released all slaves [ 1476.779912][T18220] sctp: [Deprecated]: syz.8.2629 (pid 18220) Use of struct sctp_assoc_value in delayed_ack socket option. [ 1476.779912][T18220] Use struct sctp_sack_info instead [ 1477.416211][T18037] netdevsim netdevsim7 netdevsim0: renamed from eth0 [ 1477.448815][T18037] netdevsim netdevsim7 netdevsim1: renamed from eth1 [ 1477.495284][T18037] netdevsim netdevsim7 netdevsim2: renamed from eth2 [ 1477.544225][T18037] netdevsim netdevsim7 netdevsim3: renamed from eth3 [ 1478.046376][T18037] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1478.092692][T18037] 8021q: adding VLAN 0 to HW filter on device team0 [ 1478.158463][T18037] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 1478.189512][T18037] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 1478.275966][ T9328] bridge0: port 1(bridge_slave_0) entered blocking state [ 1478.283323][ T9328] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1479.056617][ T9328] bridge0: port 2(bridge_slave_1) entered blocking state [ 1479.063887][ T9328] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1479.279760][T18251] befs: (nbd8): No write support. Marking filesystem read-only [ 1479.288142][T18251] syz.8.2633: attempt to access beyond end of device [ 1479.288142][T18251] nbd8: rw=0, sector=0, nr_sectors = 2 limit=0 [ 1479.301182][T18251] befs: (nbd8): unable to read superblock [ 1482.134957][T18037] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1482.256278][T18269] netlink: 116 bytes leftover after parsing attributes in process `syz.6.2635'. [ 1482.806634][T18286] sctp: [Deprecated]: syz.6.2637 (pid 18286) Use of struct sctp_assoc_value in delayed_ack socket option. [ 1482.806634][T18286] Use struct sctp_sack_info instead [ 1483.283846][T18037] veth0_vlan: entered promiscuous mode [ 1483.336919][T18037] veth1_vlan: entered promiscuous mode [ 1483.552393][T18037] veth0_macvtap: entered promiscuous mode [ 1483.604202][T18037] veth1_macvtap: entered promiscuous mode [ 1483.685421][T18037] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1483.696945][T18037] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1483.733625][T18037] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1483.851133][T18037] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1483.909493][T18037] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1483.935002][T18037] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1484.001341][T18037] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1484.056952][T18037] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1484.090583][T18037] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1484.129678][T18037] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1484.178580][T18037] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1484.198360][T18037] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1484.215508][T18037] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1484.497595][T18037] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1485.290178][ T1289] ieee802154 phy0 wpan0: encryption failed: -22 [ 1485.296797][ T1289] ieee802154 phy1 wpan1: encryption failed: -22 [ 1485.407165][T18037] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1485.493172][T18316] befs: (nbd9): No write support. Marking filesystem read-only [ 1485.502003][T18316] syz.9.2641: attempt to access beyond end of device [ 1485.502003][T18316] nbd9: rw=0, sector=0, nr_sectors = 2 limit=0 [ 1485.515036][T18316] befs: (nbd9): unable to read superblock [ 1487.476184][T18037] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1487.568047][T18037] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1487.673451][T18037] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1487.926443][ T6301] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1487.946359][ T6301] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1488.205070][ T58] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1488.235935][ T58] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1488.513917][T18336] overlayfs: failed to resolve './file0': -2 [ 1488.602216][T18337] netlink: 116 bytes leftover after parsing attributes in process `syz.6.2644'. [ 1489.950954][T18354] netlink: 96 bytes leftover after parsing attributes in process `syz.6.2648'. [ 1490.849695][T18361] befs: (nbd6): No write support. Marking filesystem read-only [ 1490.858484][T18361] syz.6.2650: attempt to access beyond end of device [ 1490.858484][T18361] nbd6: rw=0, sector=0, nr_sectors = 2 limit=0 [ 1490.872245][T18361] befs: (nbd6): unable to read superblock [ 1491.182986][T18363] fuse: Bad value for 'fd' [ 1491.775526][T18369] netlink: 148 bytes leftover after parsing attributes in process `syz.6.2652'. [ 1492.030708][T18371] overlayfs: failed to resolve './file0': -2 [ 1492.546177][T18377] netlink: 116 bytes leftover after parsing attributes in process `syz.7.2655'. [ 1493.493918][T18386] netlink: 96 bytes leftover after parsing attributes in process `syz.7.2658'. [ 1494.545561][T18397] befs: (nbd8): No write support. Marking filesystem read-only [ 1494.553950][T18397] syz.8.2660: attempt to access beyond end of device [ 1494.553950][T18397] nbd8: rw=0, sector=0, nr_sectors = 2 limit=0 [ 1494.566879][T18397] befs: (nbd8): unable to read superblock [ 1494.844072][T18399] fuse: Bad value for 'fd' [ 1495.870057][T18403] netlink: 148 bytes leftover after parsing attributes in process `syz.9.2662'. [ 1496.069793][T18405] kvm: pic: non byte read [ 1496.074370][T18405] kvm: pic: non byte read [ 1496.078823][T18405] kvm: pic: non byte read [ 1496.113747][T18407] overlayfs: failed to resolve './file0': -2 [ 1496.163552][T18405] kvm: pic: non byte read [ 1496.168064][T18405] kvm: pic: non byte read [ 1496.345018][T18405] kvm: pic: non byte read [ 1496.349927][T18405] kvm: pic: non byte read [ 1496.354972][T18405] kvm: pic: non byte read [ 1496.359408][T18405] kvm: pic: non byte read [ 1496.384159][T18405] kvm: pic: non byte read [ 1498.089921][T18419] netlink: 116 bytes leftover after parsing attributes in process `syz.8.2667'. [ 1499.084657][T18429] netlink: 96 bytes leftover after parsing attributes in process `syz.7.2669'. [ 1499.110433][T18431] netlink: 148 bytes leftover after parsing attributes in process `syz.8.2671'. [ 1499.318490][T18439] overlayfs: overlapping lowerdir path [ 1499.427480][T18441] befs: (nbd9): No write support. Marking filesystem read-only [ 1499.440523][T18441] syz.9.2672: attempt to access beyond end of device [ 1499.440523][T18441] nbd9: rw=0, sector=0, nr_sectors = 2 limit=0 [ 1499.453510][T18441] befs: (nbd9): unable to read superblock [ 1499.645156][T18444] fuse: Bad value for 'fd' [ 1505.720224][T18468] netlink: 116 bytes leftover after parsing attributes in process `syz.8.2679'. [ 1506.914886][T18477] overlayfs: overlapping lowerdir path [ 1506.946953][T18478] netlink: 16 bytes leftover after parsing attributes in process `syz.8.2682'. [ 1507.014921][T18478] netlink: 52 bytes leftover after parsing attributes in process `syz.8.2682'. [ 1507.039703][T18478] netlink: 4 bytes leftover after parsing attributes in process `syz.8.2682'. [ 1507.076372][T18479] netlink: 96 bytes leftover after parsing attributes in process `syz.9.2681'. [ 1507.180565][T18485] befs: (nbd6): No write support. Marking filesystem read-only [ 1507.189155][T18485] syz.6.2684: attempt to access beyond end of device [ 1507.189155][T18485] nbd6: rw=0, sector=0, nr_sectors = 2 limit=0 [ 1507.203137][T18485] befs: (nbd6): unable to read superblock [ 1507.407647][T18487] fuse: Bad value for 'fd' [ 1512.205052][T18515] netlink: 116 bytes leftover after parsing attributes in process `syz.9.2690'. [ 1512.793129][T18532] netlink: 96 bytes leftover after parsing attributes in process `syz.8.2694'. [ 1512.976747][T18536] netlink: 16 bytes leftover after parsing attributes in process `syz.7.2695'. [ 1513.010979][T18536] netlink: 52 bytes leftover after parsing attributes in process `syz.7.2695'. [ 1513.029399][T18536] netlink: 4 bytes leftover after parsing attributes in process `syz.7.2695'. [ 1513.333364][T18543] befs: (nbd6): No write support. Marking filesystem read-only [ 1513.342490][T18543] syz.6.2697: attempt to access beyond end of device [ 1513.342490][T18543] nbd6: rw=0, sector=0, nr_sectors = 2 limit=0 [ 1513.355864][T18543] befs: (nbd6): unable to read superblock [ 1513.595795][T18545] fuse: Bad value for 'fd' [ 1518.315571][ T6324] netdevsim netdevsim9 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1518.766688][ T5803] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 1518.786335][ T5803] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 1518.794728][ T5803] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 1518.807147][ T5803] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 1518.816793][ T5803] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 1518.824492][ T5803] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 1519.136573][ T6324] netdevsim netdevsim9 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1519.563550][ T6324] netdevsim netdevsim9 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1519.742931][ T6324] netdevsim netdevsim9 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1519.840089][T18592] netlink: 96 bytes leftover after parsing attributes in process `syz.6.2703'. [ 1520.159757][T18600] netlink: 16 bytes leftover after parsing attributes in process `syz.6.2705'. [ 1520.179557][T18600] netlink: 52 bytes leftover after parsing attributes in process `syz.6.2705'. [ 1520.188579][T18600] netlink: 4 bytes leftover after parsing attributes in process `syz.6.2705'. [ 1521.106478][ T5803] Bluetooth: hci2: command tx timeout [ 1521.107663][T18564] chnl_net:caif_netlink_parms(): no params data found [ 1521.744431][T18611] befs: (nbd6): No write support. Marking filesystem read-only [ 1521.754405][T18611] syz.6.2707: attempt to access beyond end of device [ 1521.754405][T18611] nbd6: rw=0, sector=0, nr_sectors = 2 limit=0 [ 1521.767373][T18611] befs: (nbd6): unable to read superblock [ 1522.002613][T18613] fuse: Bad value for 'fd' [ 1523.270364][ T5803] Bluetooth: hci2: command tx timeout [ 1524.038525][T18564] bridge0: port 1(bridge_slave_0) entered blocking state [ 1524.197589][T18564] bridge0: port 1(bridge_slave_0) entered disabled state [ 1524.205373][T18564] bridge_slave_0: entered allmulticast mode [ 1524.213309][T18564] bridge_slave_0: entered promiscuous mode [ 1524.613373][T18564] bridge0: port 2(bridge_slave_1) entered blocking state [ 1524.642469][T18564] bridge0: port 2(bridge_slave_1) entered disabled state [ 1524.673016][T18564] bridge_slave_1: entered allmulticast mode [ 1524.718946][T18564] bridge_slave_1: entered promiscuous mode [ 1525.339662][ T5803] Bluetooth: hci2: command tx timeout [ 1525.973366][T18564] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1526.102480][T18564] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1527.419563][ T5803] Bluetooth: hci2: command tx timeout [ 1527.929013][T18564] team0: Port device team_slave_0 added [ 1527.988006][T18564] team0: Port device team_slave_1 added [ 1528.761166][T18564] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1528.803878][T18564] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1528.872496][T18564] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1528.890891][T18564] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1528.890912][T18564] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1528.890937][T18564] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1529.565928][T18564] hsr_slave_0: entered promiscuous mode [ 1529.598282][T18564] hsr_slave_1: entered promiscuous mode [ 1529.602583][ T6324] IPVS: stopping backup sync thread 9778 ... [ 1529.610529][T18564] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 1529.640912][T18564] Cannot create hsr debugfs directory [ 1531.148598][ T8505] usb 7-1: new high-speed USB device number 24 using dummy_hcd [ 1531.738335][ T6324] hsr_slave_0: left promiscuous mode [ 1531.811755][ T8505] usb 7-1: Using ep0 maxpacket: 32 [ 1531.858183][ T8505] usb 7-1: unable to get BOS descriptor or descriptor too short [ 1531.869310][ T8505] usb 7-1: config 125 has an invalid interface number: 27 but max is 0 [ 1531.888512][ T8505] usb 7-1: config 125 has no interface number 0 [ 1531.905206][ T8505] usb 7-1: config 125 interface 27 has no altsetting 0 [ 1531.982882][ T6324] hsr_slave_1: left promiscuous mode [ 1531.992807][ T8505] usb 7-1: New USB device found, idVendor=1199, idProduct=68aa, bcdDevice=a4.70 [ 1532.130963][ T6324] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1532.149782][ T8505] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1532.159530][ T6324] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1532.165963][ T8505] usb 7-1: Product: syz [ 1532.174104][ T8505] usb 7-1: Manufacturer: syz [ 1532.179873][ T8505] usb 7-1: SerialNumber: syz [ 1532.281579][ T6324] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1532.514311][ T6324] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1532.600197][ T8505] hub 7-1:125.27: bad descriptor, ignoring hub [ 1532.606828][ T8505] hub: probe of 7-1:125.27 failed with error -5 [ 1532.627673][ T8505] sierra 7-1:125.27: Sierra USB modem converter detected [ 1532.628510][ T6324] bridge_slave_1: left allmulticast mode [ 1532.661787][ T8505] usb 7-1: Sierra USB modem converter now attached to ttyUSB0 [ 1532.735669][ T8505] usb 7-1: USB disconnect, device number 24 [ 1532.780687][ T8505] sierra ttyUSB0: Sierra USB modem converter now disconnected from ttyUSB0 [ 1532.795379][ T8505] sierra 7-1:125.27: device disconnected [ 1532.811583][ T6324] bridge_slave_1: left promiscuous mode [ 1532.817589][ T6324] bridge0: port 2(bridge_slave_1) entered disabled state [ 1532.829385][ T6324] bridge_slave_0: left promiscuous mode [ 1532.868774][ T6324] bridge0: port 1(bridge_slave_0) entered disabled state [ 1533.007590][ T6324] veth1_macvtap: left promiscuous mode [ 1533.027580][ T6324] veth0_macvtap: left promiscuous mode [ 1533.040884][ T6324] veth1_vlan: left promiscuous mode [ 1533.046446][ T6324] veth0_vlan: left promiscuous mode [ 1533.259707][ T5803] Bluetooth: hci3: command 0x0406 tx timeout [ 1533.731104][ T6324] team0 (unregistering): Port device geneve0 removed [ 1537.773847][ T6324] team0 (unregistering): Port device team_slave_1 removed [ 1537.963517][ T6324] team0 (unregistering): Port device team_slave_0 removed [ 1538.170175][ T6324] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1538.410935][ T6324] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1539.794326][ T6324] bond0 (unregistering): (slave batadv0): Releasing backup interface [ 1542.178792][ T6324] bond0 (unregistering): Released all slaves [ 1542.380623][T18762] netlink: 16 bytes leftover after parsing attributes in process `syz.6.2741'. [ 1542.426288][T18762] netlink: 12 bytes leftover after parsing attributes in process `syz.6.2741'. [ 1546.555841][ T1289] ieee802154 phy0 wpan0: encryption failed: -22 [ 1546.562743][ T1289] ieee802154 phy1 wpan1: encryption failed: -22 [ 1549.847308][T18834] netlink: 96 bytes leftover after parsing attributes in process `syz.6.2756'. [ 1549.895130][T18564] netdevsim netdevsim9 netdevsim0: renamed from eth0 [ 1549.927898][T18564] netdevsim netdevsim9 netdevsim1: renamed from eth1 [ 1549.955804][T18564] netdevsim netdevsim9 netdevsim2: renamed from eth2 [ 1550.274154][T18564] netdevsim netdevsim9 netdevsim3: renamed from eth3 [ 1550.703349][T18564] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1551.872141][T18564] 8021q: adding VLAN 0 to HW filter on device team0 [ 1552.193534][T15940] bridge0: port 1(bridge_slave_0) entered blocking state [ 1552.200792][T15940] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1552.262185][ T6320] bridge0: port 2(bridge_slave_1) entered blocking state [ 1552.269498][ T6320] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1552.991505][T18860] sctp: [Deprecated]: syz.6.2762 (pid 18860) Use of struct sctp_assoc_value in delayed_ack socket option. [ 1552.991505][T18860] Use struct sctp_sack_info instead [ 1553.197041][T18564] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 1557.087455][T18564] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1557.475381][T18904] sctp: [Deprecated]: syz.8.2771 (pid 18904) Use of struct sctp_assoc_value in delayed_ack socket option. [ 1557.475381][T18904] Use struct sctp_sack_info instead [ 1561.163974][T18564] veth0_vlan: entered promiscuous mode [ 1562.624796][T18564] veth1_vlan: entered promiscuous mode [ 1562.770197][T18943] sctp: [Deprecated]: syz.6.2779 (pid 18943) Use of struct sctp_assoc_value in delayed_ack socket option. [ 1562.770197][T18943] Use struct sctp_sack_info instead [ 1563.273755][T18564] veth0_macvtap: entered promiscuous mode [ 1563.362820][T18564] veth1_macvtap: entered promiscuous mode [ 1563.594247][T18564] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1563.607112][T18947] comedi comedi3: 8255: I/O port conflict (0x5,4) [ 1563.616152][T18947] comedi comedi3: 8255: I/O port conflict (0x2,4) [ 1563.623661][T18947] comedi comedi3: 8255: I/O port conflict (0x1,4) [ 1563.632118][T18947] comedi comedi3: 8255: I/O port conflict (0x5c952399,4) [ 1563.639583][T18947] comedi comedi3: 8255: I/O port conflict (0x5,4) [ 1563.646192][T18947] comedi comedi3: 8255: I/O port conflict (0x3ff,4) [ 1563.654006][T18947] comedi comedi3: 8255: I/O port conflict (0x1,4) [ 1563.661690][T18947] comedi comedi3: 8255: I/O port conflict (0x1,4) [ 1563.668434][T18947] comedi comedi3: 8255: I/O port conflict (0x9,4) [ 1563.675150][T18947] comedi comedi3: 8255: I/O port conflict (0x6,4) [ 1563.682061][T18947] comedi comedi3: 8255: I/O port conflict (0x4,4) [ 1563.688579][T18947] comedi comedi3: 8255: I/O port conflict (0x3,4) [ 1563.695178][T18947] comedi comedi3: 8255: I/O port conflict (0xffffffff80000089,4) [ 1563.703147][T18947] comedi comedi3: 8255: I/O port conflict (0xfffffffffffffffd,4) [ 1563.751853][T18564] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1563.766046][T18564] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1563.795439][T18564] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1563.812974][T18564] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1563.885047][T18564] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1564.070818][T18564] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1564.096030][T18564] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1564.879471][T18564] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1564.900309][T18564] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1564.929570][T18564] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1564.948691][T18564] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1565.009565][T18564] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1565.032127][T18564] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1565.103843][T18564] netdevsim netdevsim9 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1565.118394][T18564] netdevsim netdevsim9 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1565.204116][T18564] netdevsim netdevsim9 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1565.916750][T18564] netdevsim netdevsim9 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1566.792118][ T1143] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1566.815910][ T1143] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1566.927005][ T6320] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1566.952609][ T6320] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1568.781382][T18989] sctp: [Deprecated]: syz.8.2788 (pid 18989) Use of struct sctp_assoc_value in delayed_ack socket option. [ 1568.781382][T18989] Use struct sctp_sack_info instead [ 1568.866142][T18990] overlayfs: overlapping lowerdir path [ 1571.602939][ T5803] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 1571.619491][ T5803] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 1571.628668][ T5803] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 1571.637684][ T5803] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 1571.647269][ T5803] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 1571.688080][ T5803] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 1572.417456][T13138] netdevsim netdevsim8 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1572.768285][T13138] netdevsim netdevsim8 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1573.011187][T13138] netdevsim netdevsim8 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1573.233795][T19041] binder: BINDER_SET_CONTEXT_MGR already set [ 1573.240851][T19041] binder: 19037:19041 ioctl 4018620d 200000000040 returned -16 [ 1574.048064][T12883] Bluetooth: hci1: command tx timeout [ 1574.293904][T19021] chnl_net:caif_netlink_parms(): no params data found [ 1574.386706][T13138] netdevsim netdevsim8 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1574.417887][T19050] overlayfs: overlapping lowerdir path [ 1574.828847][T19060] netlink: 16 bytes leftover after parsing attributes in process `syz.6.2801'. [ 1574.943445][T19064] hfsplus: unable to find HFS+ superblock [ 1574.971588][T19021] bridge0: port 1(bridge_slave_0) entered blocking state [ 1575.015038][T19021] bridge0: port 1(bridge_slave_0) entered disabled state [ 1575.034341][T19021] bridge_slave_0: entered allmulticast mode [ 1575.050829][T19021] bridge_slave_0: entered promiscuous mode [ 1575.273037][T19021] bridge0: port 2(bridge_slave_1) entered blocking state [ 1575.308891][T19021] bridge0: port 2(bridge_slave_1) entered disabled state [ 1575.359062][T19021] bridge_slave_1: entered allmulticast mode [ 1575.395179][T19021] bridge_slave_1: entered promiscuous mode [ 1575.814229][T13138] tipc: Left network mode [ 1575.862524][T19021] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1576.059542][T12883] Bluetooth: hci1: command tx timeout [ 1576.071437][T19021] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1576.495473][T19021] team0: Port device team_slave_0 added [ 1576.993380][T19021] team0: Port device team_slave_1 added [ 1578.139692][T12883] Bluetooth: hci1: command tx timeout [ 1578.367865][T19021] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1578.446271][T19021] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1578.491416][T19021] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1578.566358][T19021] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1578.578580][T19021] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1578.614820][T19021] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1578.860971][T19110] overlayfs: overlapping lowerdir path [ 1578.926019][T19021] hsr_slave_0: entered promiscuous mode [ 1578.933765][T19021] hsr_slave_1: entered promiscuous mode [ 1578.949577][T19021] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 1578.957757][T19021] Cannot create hsr debugfs directory [ 1579.082703][T13138] IPVS: stopping backup sync thread 10031 ... [ 1579.497435][T13138] hsr_slave_0: left promiscuous mode [ 1579.521784][T13138] hsr_slave_1: left promiscuous mode [ 1579.544650][T13138] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1579.562037][T13138] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1579.576111][T13138] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1579.593863][T13138] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1579.605773][T13138] bridge_slave_1: left allmulticast mode [ 1579.615721][T13138] bridge_slave_1: left promiscuous mode [ 1579.626980][T13138] bridge0: port 2(bridge_slave_1) entered disabled state [ 1579.646464][T13138] bridge_slave_0: left promiscuous mode [ 1579.653708][T13138] bridge0: port 1(bridge_slave_0) entered disabled state [ 1579.733569][T13138] veth1_macvtap: left promiscuous mode [ 1579.744546][T13138] veth0_macvtap: left allmulticast mode [ 1579.752404][T13138] veth0_macvtap: left promiscuous mode [ 1579.758370][T13138] veth1_vlan: left promiscuous mode [ 1579.772869][T13138] veth0_vlan: left promiscuous mode [ 1580.219667][T12883] Bluetooth: hci1: command tx timeout [ 1581.973748][T13138] team0 (unregistering): Port device geneve0 removed [ 1584.003868][T19154] overlayfs: overlapping lowerdir path [ 1584.541167][T13138] team0 (unregistering): Port device team_slave_1 removed [ 1584.630063][T12883] Bluetooth: hci0: command 0x0406 tx timeout [ 1584.643322][T13138] team0 (unregistering): Port device team_slave_0 removed [ 1584.739596][T13138] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1584.824125][T13138] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1585.278406][T13138] bond0 (unregistering): (slave batadv0): Releasing backup interface [ 1586.441499][T13138] bond0 (unregistering): Released all slaves [ 1586.574395][T19123] netlink: 16 bytes leftover after parsing attributes in process `syz.6.2809'. [ 1586.700418][T12883] Bluetooth: hci0: command 0x0406 tx timeout [ 1587.260305][T18207] usb 7-1: new high-speed USB device number 25 using dummy_hcd [ 1587.943967][T19021] netdevsim netdevsim8 netdevsim0: renamed from eth0 [ 1588.112027][T18207] usb 7-1: config 0 interface 0 altsetting 251 endpoint 0x9 has invalid wMaxPacketSize 0 [ 1588.125202][T18207] usb 7-1: config 0 interface 0 has no altsetting 0 [ 1588.142137][T18207] usb 7-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 1588.180904][T19021] netdevsim netdevsim8 netdevsim1: renamed from eth1 [ 1588.206423][T18207] usb 7-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 1588.287989][T19021] netdevsim netdevsim8 netdevsim2: renamed from eth2 [ 1588.320378][T18207] usb 7-1: Product: syz [ 1588.324621][T18207] usb 7-1: Manufacturer: syz [ 1588.334605][T18207] usb 7-1: SerialNumber: syz [ 1588.363324][T18207] usb 7-1: config 0 descriptor?? [ 1588.400597][T19021] netdevsim netdevsim8 netdevsim3: renamed from eth3 [ 1588.694689][T18207] usb 7-1: selecting invalid altsetting 0 [ 1590.128569][T19021] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1590.156035][T19021] 8021q: adding VLAN 0 to HW filter on device team0 [ 1590.208267][T19021] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 1590.257425][T19021] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 1590.788857][ T5842] usb 7-1: USB disconnect, device number 25 [ 1590.826800][T15940] bridge0: port 1(bridge_slave_0) entered blocking state [ 1590.834079][T15940] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1591.035996][T15940] bridge0: port 2(bridge_slave_1) entered blocking state [ 1591.043322][T15940] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1591.705128][T19227] netlink: 8 bytes leftover after parsing attributes in process `syz.7.2825'. [ 1592.156479][T19021] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1593.340706][ T5803] Bluetooth: hci2: command tx timeout [ 1596.102488][T19021] veth0_vlan: entered promiscuous mode [ 1596.185770][T19021] veth1_vlan: entered promiscuous mode [ 1596.202234][T19265] netlink: 8 bytes leftover after parsing attributes in process `syz.9.2833'. [ 1596.328214][T19021] veth0_macvtap: entered promiscuous mode [ 1596.365070][T19021] veth1_macvtap: entered promiscuous mode [ 1596.445477][T19021] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1596.461705][T19021] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1596.473680][T19021] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1596.484938][T19021] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1596.502745][T19021] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1596.518372][T19021] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1596.544856][T19021] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1596.564221][ T5803] Bluetooth: hci0: Ignoring HCI_Connection_Complete for existing connection [ 1596.588132][T19021] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1596.599112][T19021] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1596.611135][T19021] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1596.622585][T19021] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1596.634821][T19021] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1596.662460][T19021] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1596.678816][T19021] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1596.716517][T19021] netdevsim netdevsim8 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1596.726677][T19021] netdevsim netdevsim8 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1596.738961][T19021] netdevsim netdevsim8 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1596.755133][T19021] netdevsim netdevsim8 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1596.946960][ T9328] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1596.955804][ T9328] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1597.019055][ T1143] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1597.027602][ T1143] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1599.711461][T19291] PKCS8: Unsupported PKCS#8 version [ 1600.704803][T19300] netlink: 8 bytes leftover after parsing attributes in process `syz.9.2841'. [ 1602.667886][T12883] Bluetooth: hci0: Ignoring HCI_Connection_Complete for existing connection [ 1606.027903][T19341] netlink: 8 bytes leftover after parsing attributes in process `syz.8.2851'. [ 1606.786511][T12883] Bluetooth: hci3: Ignoring HCI_Connection_Complete for existing connection [ 1606.832094][T19349] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 1607.988773][ T1289] ieee802154 phy0 wpan0: encryption failed: -22 [ 1607.995894][ T1289] ieee802154 phy1 wpan1: encryption failed: -22 [ 1609.645999][T19372] netlink: 8 bytes leftover after parsing attributes in process `syz.6.2862'. [ 1610.680212][T19381] overlayfs: missing 'lowerdir' [ 1610.698004][ T5803] Bluetooth: hci3: Ignoring HCI_Connection_Complete for existing connection [ 1610.731963][T19381] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 1615.278850][T19423] overlayfs: missing 'lowerdir' [ 1615.303316][T19423] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 1615.517553][ T5803] Bluetooth: hci2: Ignoring HCI_Connection_Complete for existing connection [ 1620.256320][ T5803] Bluetooth: hci3: Ignoring HCI_Connection_Complete for existing connection [ 1628.164397][T12883] Bluetooth: hci3: Ignoring HCI_Connection_Complete for existing connection [ 1634.937816][ T5803] Bluetooth: hci0: Ignoring HCI_Connection_Complete for existing connection [ 1635.835356][T19558] netlink: 8 bytes leftover after parsing attributes in process `syz.8.2916'. [ 1639.674753][T19582] trusted_key: encrypted_key: key user:syz not found [ 1640.348304][T19584] comedi comedi3: 8255: I/O port conflict (0x5,4) [ 1640.362027][T19584] comedi comedi3: 8255: I/O port conflict (0x2,4) [ 1640.369250][T19584] comedi comedi3: 8255: I/O port conflict (0x1,4) [ 1640.376446][T19584] comedi comedi3: 8255: I/O port conflict (0x5c952399,4) [ 1640.383941][T19584] comedi comedi3: 8255: I/O port conflict (0x5,4) [ 1640.390951][T19584] comedi comedi3: 8255: I/O port conflict (0x3ff,4) [ 1640.398135][T19584] comedi comedi3: 8255: I/O port conflict (0x1,4) [ 1640.444724][T19584] comedi comedi3: 8255: I/O port conflict (0x1,4) [ 1640.452040][T19584] comedi comedi3: 8255: I/O port conflict (0x9,4) [ 1640.459833][T19584] comedi comedi3: 8255: I/O port conflict (0x6,4) [ 1640.467040][T19584] comedi comedi3: 8255: I/O port conflict (0x4,4) [ 1640.473965][T19584] comedi comedi3: 8255: I/O port conflict (0x3,4) [ 1640.481067][T19584] comedi comedi3: 8255: I/O port conflict (0xffffffff80000089,4) [ 1640.489883][T19584] comedi comedi3: 8255: I/O port conflict (0xfffffffffffffffd,4) [ 1641.821765][T19597] overlayfs: failed to resolve './file1': -2 [ 1641.886015][T12883] Bluetooth: hci3: Ignoring HCI_Connection_Complete for existing connection [ 1642.108994][ T5835] IPVS: starting estimator thread 0... [ 1643.044851][T19609] IPVS: using max 19 ests per chain, 45600 per kthread [ 1643.785193][T19625] netlink: 4 bytes leftover after parsing attributes in process `syz.7.2933'. [ 1645.214937][T19640] input: syz1 as /devices/virtual/input/input8 [ 1646.302173][ T5803] Bluetooth: hci2: command 0x0406 tx timeout [ 1646.382505][T19642] overlayfs: failed to resolve './file1': -2 [ 1646.412741][T12883] sysfs: cannot create duplicate filename '/devices/virtual/bluetooth/hci1/hci1:201' [ 1646.423978][T12883] CPU: 0 PID: 12883 Comm: kworker/u5:1 Not tainted syzkaller #0 [ 1646.431688][T12883] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 1646.441796][T12883] Workqueue: hci1 hci_rx_work [ 1646.446596][T12883] Call Trace: [ 1646.449893][T12883] [ 1646.452849][T12883] dump_stack_lvl+0x16c/0x230 [ 1646.457563][T12883] ? show_regs_print_info+0x20/0x20 [ 1646.462797][T12883] ? load_image+0x3b0/0x3b0 [ 1646.467363][T12883] sysfs_create_dir_ns+0x256/0x280 [ 1646.472536][T12883] ? hci_rx_work+0x43a/0xd80 [ 1646.477248][T12883] ? sysfs_warn_dup+0xa0/0xa0 [ 1646.482055][T12883] ? do_raw_spin_unlock+0x121/0x230 [ 1646.487368][T12883] kobject_add_internal+0x6b8/0xc70 [ 1646.492651][T12883] kobject_add+0x156/0x220 [ 1646.497094][T12883] ? __rwlock_init+0x150/0x150 [ 1646.501888][T12883] ? kobject_init+0x1e0/0x1e0 [ 1646.506619][T12883] ? _raw_spin_unlock+0x28/0x40 [ 1646.511522][T12883] ? get_device_parent+0x366/0x390 [ 1646.516698][T12883] device_add+0x408/0xc20 [ 1646.521113][T12883] hci_conn_add_sysfs+0xd5/0x1e0 [ 1646.526125][T12883] le_conn_complete_evt+0xc37/0x1220 [ 1646.531440][T12883] ? hci_event_packet+0x4a7/0x1210 [ 1646.536591][T12883] ? hci_le_big_info_adv_report_evt+0x8e0/0x8e0 [ 1646.542855][T12883] ? __copy_skb_header+0xa7/0x550 [ 1646.547914][T12883] ? __mutex_unlock_slowpath+0x1a2/0x6a0 [ 1646.553581][T12883] ? skb_pull_data+0xfb/0x200 [ 1646.558298][T12883] hci_le_conn_complete_evt+0x187/0x440 [ 1646.563875][T12883] ? hci_remote_host_features_evt+0x160/0x160 [ 1646.569965][T12883] hci_event_packet+0x795/0x1210 [ 1646.574938][T12883] ? bis_list+0x290/0x290 [ 1646.579328][T12883] ? lockdep_hardirqs_on+0x98/0x150 [ 1646.584563][T12883] ? hci_send_to_monitor+0xd7/0x4f0 [ 1646.589818][T12883] hci_rx_work+0x43a/0xd80 [ 1646.594277][T12883] ? process_scheduled_works+0x957/0x15b0 [ 1646.600041][T12883] process_scheduled_works+0xa45/0x15b0 [ 1646.605724][T12883] ? assign_work+0x400/0x400 [ 1646.610383][T12883] ? assign_work+0x39e/0x400 [ 1646.615004][T12883] worker_thread+0xa55/0xfc0 [ 1646.619650][T12883] ? _raw_spin_unlock_irqrestore+0xae/0x110 [ 1646.626109][T12883] ? _raw_spin_unlock+0x40/0x40 [ 1646.630985][T12883] ? _raw_spin_unlock_irqrestore+0x86/0x110 [ 1646.636956][T12883] kthread+0x2fa/0x390 [ 1646.641046][T12883] ? pr_cont_work+0x560/0x560 [ 1646.645749][T12883] ? kthread_blkcg+0xd0/0xd0 [ 1646.650363][T12883] ret_from_fork+0x48/0x80 [ 1646.654806][T12883] ? kthread_blkcg+0xd0/0xd0 [ 1646.659422][T12883] ret_from_fork_asm+0x11/0x20 [ 1646.664228][T12883] [ 1646.667278][ C0] vkms_vblank_simulate: vblank timer overrun [ 1646.675872][T12883] kobject: kobject_add_internal failed for hci1:201 with -EEXIST, don't try to register things with the same name in the same directory. [ 1646.690441][T12883] Bluetooth: hci1: failed to register connection device [ 1652.903165][ T5803] Bluetooth: hci1: command 0x0406 tx timeout [ 1653.421913][T19725] netlink: 96 bytes leftover after parsing attributes in process `syz.9.2952'. [ 1658.299247][T19754] trusted_key: encrypted_key: key user:syz not found [ 1658.912162][T19757] trusted_key: encrypted_key: key user:syz not found [ 1659.681585][T19763] netlink: 96 bytes leftover after parsing attributes in process `syz.9.2965'. [ 1661.243748][T19773] netlink: 24 bytes leftover after parsing attributes in process `syz.9.2967'. [ 1662.629733][T19792] netlink: 96 bytes leftover after parsing attributes in process `syz.7.2975'. [ 1665.020777][ T785] IPVS: starting estimator thread 0... [ 1665.119548][T19808] IPVS: using max 17 ests per chain, 40800 per kthread [ 1666.185074][T19823] netlink: 96 bytes leftover after parsing attributes in process `syz.8.2986'. [ 1667.487464][T19827] netlink: 'syz.9.2988': attribute type 10 has an invalid length. [ 1667.525504][T19827] bond0: (slave wlan1): Enslaving as an active interface with an up link [ 1667.633943][T19838] trusted_key: encrypted_key: key user:syz not found [ 1669.155684][ T27] IPVS: starting estimator thread 0... [ 1669.293266][T19847] IPVS: using max 26 ests per chain, 62400 per kthread [ 1669.500408][ T1289] ieee802154 phy0 wpan0: encryption failed: -22 [ 1669.506812][ T1289] ieee802154 phy1 wpan1: encryption failed: -22 [ 1669.590268][T19856] netlink: 96 bytes leftover after parsing attributes in process `syz.9.2997'. [ 1670.514812][T19870] trusted_key: encrypted_key: insufficient parameters specified [ 1675.726291][T19901] trusted_key: encrypted_key: key user:syz not found [ 1683.659574][ T28] audit: type=1800 audit(1757511063.359:2): pid=19963 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.8.3025" name="bus" dev="overlay" ino=264 res=0 errno=0 [ 1689.258399][T19996] netlink: 4 bytes leftover after parsing attributes in process `syz.6.3034'. [ 1690.249570][ T28] audit: type=1800 audit(1757511069.939:3): pid=20003 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.9.3035" name="bus" dev="overlay" ino=366 res=0 errno=0 [ 1694.504393][T20038] qnx6: unable to read the first superblock [ 1697.094330][T20060] netlink: 148 bytes leftover after parsing attributes in process `syz.8.3047'. [ 1697.105079][ T5803] Bluetooth: hci1: command 0x0406 tx timeout [ 1699.517136][T20093] trusted_key: encrypted_key: keyword 'R}A>te' not recognized [ 1701.166714][T20106] netlink: 148 bytes leftover after parsing attributes in process `syz.7.3058'. [ 1702.045814][T20118] befs: (nbd7): No write support. Marking filesystem read-only [ 1702.055317][T20118] syz.7.3060: attempt to access beyond end of device [ 1702.055317][T20118] nbd7: rw=0, sector=0, nr_sectors = 2 limit=0 [ 1702.068737][T20118] befs: (nbd7): unable to read superblock [ 1702.465330][T20127] fuse: Bad value for 'fd' [ 1706.100883][ T28] audit: type=1800 audit(1757511086.579:4): pid=20137 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.7.3063" name="bus" dev="overlay" ino=667 res=0 errno=0 [ 1708.370245][T20163] netlink: 148 bytes leftover after parsing attributes in process `syz.6.3067'. [ 1708.760230][T20169] befs: (nbd8): No write support. Marking filesystem read-only [ 1708.769630][T20169] syz.8.3069: attempt to access beyond end of device [ 1708.769630][T20169] nbd8: rw=0, sector=0, nr_sectors = 2 limit=0 [ 1708.783134][T20169] befs: (nbd8): unable to read superblock [ 1709.172877][T20171] fuse: Bad value for 'fd' [ 1712.749922][ T785] usb 7-1: new low-speed USB device number 26 using dummy_hcd [ 1712.979162][T20185] overlayfs: missing 'lowerdir' [ 1712.990979][ T785] usb 7-1: config index 0 descriptor too short (expected 1307, got 27) [ 1713.009832][ T785] usb 7-1: config 0 has an invalid interface number: 0 but max is -1 [ 1713.029772][ T785] usb 7-1: config 0 has 1 interface, different from the descriptor's value: 0 [ 1713.045268][ T785] usb 7-1: too many endpoints for config 0 interface 0 altsetting 0: 246, using maximum allowed: 30 [ 1713.079576][ T785] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x84 is Bulk; changing to Interrupt [ 1713.111099][ T785] usb 7-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 246 [ 1713.148182][ T785] usb 7-1: string descriptor 0 read error: -22 [ 1713.159866][ T785] usb 7-1: New USB device found, idVendor=0460, idProduct=0008, bcdDevice=e2.de [ 1713.175287][ T785] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1713.202755][ T785] usb 7-1: config 0 descriptor?? [ 1713.230450][T20175] raw-gadget.0 gadget.6: fail, usb_ep_enable returned -22 [ 1713.246310][ T785] hub 7-1:0.0: bad descriptor, ignoring hub [ 1713.287816][ T785] hub: probe of 7-1:0.0 failed with error -5 [ 1713.326610][ T785] input: USB Acecad 302 Tablet 0460:0008 as /devices/platform/dummy_hcd.6/usb7/7-1/7-1:0.0/input/input9 [ 1713.730404][ C0] usb_acecad 7-1:0.0: can't resubmit intr, dummy_hcd.6-1/input0, status -19 [ 1713.873474][ T785] usb 7-1: USB disconnect, device number 26 [ 1714.769582][T15900] usb 9-1: new high-speed USB device number 34 using dummy_hcd [ 1714.968942][T15900] usb 9-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 1714.979290][T15900] usb 9-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 1714.991876][T15900] usb 9-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 1715.032904][T15900] usb 9-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 1715.076820][T15900] usb 9-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 1715.148792][T15900] usb 9-1: Product: syz [ 1715.162894][T15900] usb 9-1: Manufacturer: syz [ 1715.202975][T15900] cdc_wdm 9-1:1.0: skipping garbage [ 1715.208815][T15900] cdc_wdm: probe of 9-1:1.0 failed with error -22 [ 1715.305311][T20214] netlink: 148 bytes leftover after parsing attributes in process `syz.6.3078'. [ 1715.465848][T15900] usb 9-1: USB disconnect, device number 34 [ 1717.128486][T20233] overlayfs: missing 'lowerdir' [ 1718.534454][T20258] netlink: 148 bytes leftover after parsing attributes in process `syz.7.3088'. [ 1718.815954][T20250] netlink: 'syz.6.3085': attribute type 10 has an invalid length. [ 1718.881697][ T28] audit: type=1800 audit(1757511099.419:5): pid=20262 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.7.3089" name="bus" dev="overlay" ino=711 res=0 errno=0 [ 1719.742518][T20250] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1719.772382][T20250] bond0: (slave batadv0): Enslaving as an active interface with an up link [ 1721.344826][T20300] overlayfs: option "workdir=./bus" is useless in a non-upper mount, ignore [ 1721.377914][T20300] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent [ 1727.367070][T20348] qnx6: unable to read the first superblock [ 1728.360363][T20359] trusted_key: encrypted_key: key user:syz not found [ 1731.077231][ T1289] ieee802154 phy0 wpan0: encryption failed: -22 [ 1731.121982][ T1289] ieee802154 phy1 wpan1: encryption failed: -22 [ 1733.511126][T20397] qnx6: unable to read the first superblock [ 1733.711163][T20396] input: syz1 as /devices/virtual/input/input10 [ 1734.821024][T20407] trusted_key: encrypted_key: key user:syz not found [ 1735.509650][ T5842] usb 7-1: new high-speed USB device number 27 using dummy_hcd [ 1735.729614][ T5842] usb 7-1: Using ep0 maxpacket: 32 [ 1735.780800][ T5842] usb 7-1: config 0 has an invalid interface number: 51 but max is 0 [ 1735.850223][ T5842] usb 7-1: config 0 has no interface number 0 [ 1735.870966][ T5842] usb 7-1: New USB device found, idVendor=061d, idProduct=c150, bcdDevice=ce.6f [ 1735.886088][ T5842] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1735.895765][ T5842] usb 7-1: Product: syz [ 1735.901400][ T5842] usb 7-1: Manufacturer: syz [ 1735.906589][ T5842] usb 7-1: SerialNumber: syz [ 1735.927655][ T5842] usb 7-1: config 0 descriptor?? [ 1736.257380][ T5842] quatech2 7-1:0.51: Quatech 2nd gen USB to Serial Driver converter detected [ 1736.856958][ T5842] usb 7-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB0 [ 1736.936377][ T5842] usb 7-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB1 [ 1737.026285][ C0] usb 7-1: qt2_read_bulk_callback - non-zero urb status: -71 [ 1737.073021][ T5842] usb 7-1: USB disconnect, device number 27 [ 1737.352142][ T5842] quatech-serial ttyUSB0: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB0 [ 1737.426435][ T5842] quatech-serial ttyUSB1: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB1 [ 1737.502952][ T5842] quatech2 7-1:0.51: device disconnected [ 1739.169651][T20461] qnx6: unable to read the first superblock [ 1750.881265][ T28] audit: type=1800 audit(1757511131.129:6): pid=20566 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.7.3154" name="bus" dev="overlay" ino=798 res=0 errno=0 [ 1752.428161][T20576] hfsplus: unable to find HFS+ superblock [ 1754.722216][ T5879] usb 7-1: new high-speed USB device number 28 using dummy_hcd [ 1755.189702][ T5879] usb 7-1: Using ep0 maxpacket: 8 [ 1755.215546][ T5879] usb 7-1: config 0 has an invalid descriptor of length 115, skipping remainder of the config [ 1755.228866][ T5879] usb 7-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 1755.275842][ T5879] usb 7-1: New USB device found, idVendor=0e9c, idProduct=0000, bcdDevice=5b.1e [ 1755.287210][ T5879] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1755.296133][ T5879] usb 7-1: Product: syz [ 1755.300857][ T5879] usb 7-1: Manufacturer: syz [ 1755.306259][ T5879] usb 7-1: SerialNumber: syz [ 1755.362324][ T5879] usb 7-1: config 0 descriptor?? [ 1755.439489][ T5879] streamzap 7-1:0.0: streamzap_probe: Unexpected desc.bNumEndpoints (0) [ 1756.054824][T20608] hub 9-0:1.0: USB hub found [ 1756.063836][T20608] hub 9-0:1.0: 1 port detected [ 1756.713727][ T5842] usb 7-1: USB disconnect, device number 28 [ 1757.190685][T20619] trusted_key: encrypted_key: key user:syz not found [ 1758.073000][T20627] hfsplus: unable to find HFS+ superblock [ 1759.409629][ T5842] usb 9-1: new high-speed USB device number 35 using dummy_hcd [ 1759.794490][ T5842] usb 9-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 1759.825269][ T5842] usb 9-1: config 1 has an invalid descriptor of length 48, skipping remainder of the config [ 1759.885636][ T5842] usb 9-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 1760.077249][ T5842] usb 9-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 1760.166579][ T5842] usb 9-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 1760.838521][ T5842] usb 9-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 1761.577279][ T5842] usb 9-1: Product: syz [ 1761.589457][ T5842] usb 9-1: Manufacturer: syz [ 1761.625066][ T5842] cdc_wdm 9-1:1.0: skipping garbage [ 1761.637594][ T5842] cdc_wdm 9-1:1.0: skipping garbage [ 1761.663956][ T5842] cdc_wdm: probe of 9-1:1.0 failed with error -22 [ 1761.996431][ T5842] usb 9-1: USB disconnect, device number 35 [ 1762.053903][T20656] trusted_key: encrypted_key: key user:syz not found [ 1762.388940][T20667] fuse: Unknown parameter 'fd0x000000000000000a' [ 1768.338296][T20707] trusted_key: encrypted_key: key user:syz not found [ 1769.937438][ T5842] usb 9-1: new high-speed USB device number 36 using dummy_hcd [ 1770.353243][ T5842] usb 9-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 1770.429448][ T5842] usb 9-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config [ 1770.629439][ T5842] usb 9-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 1770.664333][ T5842] usb 9-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 1770.799877][ T5842] usb 9-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 1770.845455][ T5842] usb 9-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 1770.871549][ T5842] usb 9-1: Product: syz [ 1770.875917][ T5842] usb 9-1: Manufacturer: syz [ 1770.930491][ T5842] cdc_wdm 9-1:1.0: skipping garbage [ 1770.984484][ T5842] cdc_wdm 9-1:1.0: skipping garbage [ 1771.034767][ T5842] cdc_wdm 9-1:1.0: skipping garbage [ 1771.069044][ T5842] cdc_wdm: probe of 9-1:1.0 failed with error -22 [ 1771.675287][ T5842] usb 9-1: USB disconnect, device number 36 [ 1773.505559][T20754] netlink: 256 bytes leftover after parsing attributes in process `syz.6.3200'. [ 1773.533209][T20754] netlink: 56 bytes leftover after parsing attributes in process `syz.6.3200'. [ 1774.479768][ T5879] usb 7-1: new full-speed USB device number 29 using dummy_hcd [ 1775.151699][T20767] trusted_key: encrypted_key: key user:syz not found [ 1775.222733][ T5879] usb 7-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 1775.248747][ T5879] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1775.339455][ T5879] usb 7-1: Product: syz [ 1775.345976][ T5879] usb 7-1: Manufacturer: syz [ 1775.352012][ T5879] usb 7-1: SerialNumber: syz [ 1775.395369][ T5879] usb 7-1: config 0 descriptor?? [ 1775.630385][ T5879] usb 7-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 1776.263208][ T5879] dvb_usb_rtl28xxu: probe of 7-1:0.0 failed with error -32 [ 1776.461867][T20784] hfsplus: unable to find HFS+ superblock [ 1778.030804][ T785] usb 7-1: USB disconnect, device number 29 [ 1782.206732][T20828] hfsplus: unable to find HFS+ superblock [ 1783.707739][T20831] syz.9.3219 (20831): /proc/20820/oom_adj is deprecated, please use /proc/20820/oom_score_adj instead. [ 1784.085270][T20850] fuse: Unknown parameter 'fd0x000000000000000a' [ 1787.704429][T20885] netlink: 4 bytes leftover after parsing attributes in process `syz.9.3234'. [ 1788.971882][ T23] usb 10-1: new high-speed USB device number 31 using dummy_hcd [ 1789.189761][ T23] usb 10-1: Using ep0 maxpacket: 16 [ 1789.227598][ T23] usb 10-1: config 0 interface 0 altsetting 0 has an invalid endpoint with address 0xD7, skipping [ 1789.308286][ T23] usb 10-1: New USB device found, idVendor=05ac, idProduct=9226, bcdDevice=b2.89 [ 1789.357531][ T23] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1789.430992][ T23] usb 10-1: Product: syz [ 1789.458496][ T23] usb 10-1: Manufacturer: syz [ 1789.511515][ T23] usb 10-1: SerialNumber: syz [ 1790.096472][ T23] usb 10-1: config 0 descriptor?? [ 1790.160967][ T23] appledisplay 10-1:0.0: Could not find int-in endpoint [ 1790.212370][ T23] usbhid 10-1:0.0: couldn't find an input interrupt endpoint [ 1790.969281][T20957] erofs: (device nbd9): erofs_read_superblock: cannot find valid erofs superblock [ 1792.310192][ T1289] ieee802154 phy0 wpan0: encryption failed: -22 [ 1792.322609][ T1289] ieee802154 phy1 wpan1: encryption failed: -22 [ 1793.152152][ T5842] usb 10-1: USB disconnect, device number 31 [ 1793.519635][T20992] netlink: 32 bytes leftover after parsing attributes in process `syz.6.3257'. [ 1794.562873][T20996] input: syz1 as /devices/virtual/input/input11 [ 1797.625863][T21035] netlink: 4 bytes leftover after parsing attributes in process `syz.7.3267'. [ 1798.067936][T21045] qnx6: unable to read the first superblock [ 1802.423858][T21087] batman_adv: batadv0: Adding interface: gretap1 [ 1802.432188][T21087] batman_adv: batadv0: The MTU of interface gretap1 is too small (1462) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1802.724121][T21087] batman_adv: batadv0: Interface activated: gretap1 [ 1804.652510][T21111] fuse: Unknown parameter 'fd0x000000000000000a' [ 1804.888861][T21107] netlink: 32 bytes leftover after parsing attributes in process `syz.8.3282'. [ 1805.192535][T21138] netlink: 4 bytes leftover after parsing attributes in process `syz.9.3284'. [ 1805.759519][ T23] usb 10-1: new high-speed USB device number 32 using dummy_hcd [ 1806.030014][ T23] usb 10-1: Using ep0 maxpacket: 16 [ 1806.091436][ T23] usb 10-1: config 0 interface 0 altsetting 0 has an invalid endpoint with address 0xD7, skipping [ 1806.134934][ T23] usb 10-1: New USB device found, idVendor=05ac, idProduct=9226, bcdDevice=b2.89 [ 1806.146269][ T23] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1806.155841][ T23] usb 10-1: Product: syz [ 1806.163334][ T23] usb 10-1: Manufacturer: syz [ 1806.168643][ T23] usb 10-1: SerialNumber: syz [ 1806.185385][ T23] usb 10-1: config 0 descriptor?? [ 1806.195154][ T23] appledisplay 10-1:0.0: Could not find int-in endpoint [ 1806.207058][ T23] usbhid 10-1:0.0: couldn't find an input interrupt endpoint [ 1806.621736][T15939] usb 10-1: USB disconnect, device number 32 [ 1810.878981][T21199] fuse: Unknown parameter 'fd0x000000000000000a' [ 1813.602300][T21215] Bluetooth: MGMT ver 1.22 [ 1819.294946][T12883] Bluetooth: hci0: Opcode 0x1407 failed: -110 [ 1819.304096][T12883] Bluetooth: hci0: command 0x0406 tx timeout [ 1821.562154][T15939] usb 9-1: new high-speed USB device number 37 using dummy_hcd [ 1821.947812][T15939] usb 9-1: Using ep0 maxpacket: 16 [ 1822.109972][T15939] usb 9-1: config 0 interface 0 altsetting 0 has an invalid endpoint with address 0xD7, skipping [ 1822.153706][T15939] usb 9-1: New USB device found, idVendor=05ac, idProduct=9226, bcdDevice=b2.89 [ 1822.165461][T15939] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1822.184725][T15939] usb 9-1: Product: syz [ 1822.194026][T15939] usb 9-1: Manufacturer: syz [ 1822.209550][T15939] usb 9-1: SerialNumber: syz [ 1822.248620][T15939] usb 9-1: config 0 descriptor?? [ 1822.263979][T15939] appledisplay 9-1:0.0: Could not find int-in endpoint [ 1822.314799][T15939] usbhid 9-1:0.0: couldn't find an input interrupt endpoint [ 1822.679763][ T785] usb 9-1: USB disconnect, device number 37 [ 1826.398283][ T28] audit: type=1800 audit(1757511206.929:7): pid=21300 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.6.3327" name="bus" dev="overlay" ino=1064 res=0 errno=0 [ 1826.773721][T21305] fuse: Unknown parameter 'fd0x000000000000000a' [ 1828.002550][T21311] qnx6: unable to read the first superblock [ 1828.543864][T21318] fuse: Unknown parameter 'fd0x000000000000000a' [ 1831.251411][T21348] overlayfs: failed to resolve './file0': -2 [ 1833.840401][T21361] fuse: Unknown parameter 'fd0x000000000000000a' [ 1836.168864][T21393] fuse: Unknown parameter 'fd0x000000000000000a' [ 1837.399555][ T9102] usb 7-1: new high-speed USB device number 30 using dummy_hcd [ 1837.669584][ T9102] usb 7-1: Using ep0 maxpacket: 8 [ 1837.709038][ T9102] usb 7-1: config 16 has an invalid descriptor of length 0, skipping remainder of the config [ 1837.757643][ T9102] usb 7-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 1837.769171][ T9102] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1838.507880][T21434] fuse: Unknown parameter 'fd0x000000000000000a' [ 1842.412298][T21458] fuse: Unknown parameter 'fd0x000000000000000a' [ 1844.216512][T21468] fuse: Unknown parameter 'fd0x000000000000000a' [ 1846.280851][T21478] netlink: 148 bytes leftover after parsing attributes in process `syz.9.3368'. [ 1846.293408][T21478] netlink: 56 bytes leftover after parsing attributes in process `syz.9.3368'. [ 1846.311226][T21478] netlink: 'syz.9.3368': attribute type 1 has an invalid length. [ 1847.496010][ T23] usb 7-1: USB disconnect, device number 30 [ 1850.084636][T21506] fuse: Unknown parameter 'fd0x000000000000000a' [ 1853.756101][ T1289] ieee802154 phy0 wpan0: encryption failed: -22 [ 1853.768375][ T1289] ieee802154 phy1 wpan1: encryption failed: -22 [ 1853.926726][T21544] fuse: Unknown parameter 'fd0x000000000000000a' [ 1854.498839][T21558] fuse: Unknown parameter 'fd0x000000000000000a' [ 1856.496919][T21570] netlink: 4 bytes leftover after parsing attributes in process `syz.9.3390'. [ 1856.839907][ T7556] usb 10-1: new high-speed USB device number 33 using dummy_hcd [ 1856.960470][ T28] audit: type=1800 audit(1757511237.499:8): pid=21574 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.6.3389" name="bus" dev="overlay" ino=1152 res=0 errno=0 [ 1857.199562][ T7556] usb 10-1: Using ep0 maxpacket: 16 [ 1857.222083][ T7556] usb 10-1: config 0 interface 0 altsetting 0 has an invalid endpoint with address 0xD7, skipping [ 1857.236444][ T7556] usb 10-1: New USB device found, idVendor=05ac, idProduct=9226, bcdDevice=b2.89 [ 1857.249878][ T7556] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1857.272314][ T7556] usb 10-1: Product: syz [ 1857.279748][ T7556] usb 10-1: Manufacturer: syz [ 1857.284488][ T7556] usb 10-1: SerialNumber: syz [ 1857.297799][ T7556] usb 10-1: config 0 descriptor?? [ 1857.315227][ T7556] appledisplay 10-1:0.0: Could not find int-in endpoint [ 1857.324564][ T7556] usbhid 10-1:0.0: couldn't find an input interrupt endpoint [ 1857.579835][ T23] usb 10-1: USB disconnect, device number 33 [ 1859.512169][T21594] fuse: Unknown parameter 'fd0x000000000000000a' [ 1860.848747][T21599] fuse: Unknown parameter 'fd0x000000000000000a' [ 1862.155759][ T9102] libceph: connect (1)[b::]:6789 error -101 [ 1862.246230][ T9102] libceph: mon0 (1)[b::]:6789 connect error [ 1862.452850][T15939] libceph: connect (1)[c::]:6789 error -101 [ 1862.459838][T15939] libceph: mon0 (1)[c::]:6789 connect error [ 1864.007147][T15939] libceph: connect (1)[c::]:6789 error -101 [ 1864.013810][ T9102] libceph: connect (1)[b::]:6789 error -101 [ 1864.059696][T15939] libceph: mon0 (1)[c::]:6789 connect error [ 1864.070764][ T9102] libceph: mon0 (1)[b::]:6789 connect error [ 1864.108658][ T28] audit: type=1800 audit(1757511244.609:9): pid=21627 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.7.3402" name="bus" dev="overlay" ino=1142 res=0 errno=0 [ 1864.300404][T21617] ceph: No mds server is up or the cluster is laggy [ 1864.342546][T21614] ceph: No mds server is up or the cluster is laggy [ 1866.157903][T21651] fuse: Unknown parameter 'fd0x000000000000000a' [ 1866.985925][T21654] fuse: Unknown parameter 'fd0x000000000000000a' [ 1871.658714][T21687] netlink: 4 bytes leftover after parsing attributes in process `syz.7.3420'. [ 1871.830679][T21690] fuse: Unknown parameter 'fd0x000000000000000a' [ 1873.156801][T21693] hfsplus: unable to find HFS+ superblock [ 1877.227976][T21731] fuse: Unknown parameter 'fd0x000000000000000a' [ 1878.451092][ T5835] delete_channel: no stack [ 1880.457235][T21759] qnx6: unable to read the first superblock [ 1881.190236][T21762] fuse: Unknown parameter 'fd0x000000000000000a' [ 1881.467290][T21767] fuse: Unknown parameter 'fd0x000000000000000a' [ 1883.030198][T21790] netlink: 12 bytes leftover after parsing attributes in process `syz.6.3447'. [ 1883.201609][T21805] fuse: Unknown parameter 'fd0x000000000000000a' [ 1886.753953][T21831] fuse: Unknown parameter 'fd0x000000000000000a' [ 1887.693583][T21836] fuse: Unknown parameter 'fd0x000000000000000a' [ 1892.684866][ T28] audit: type=1800 audit(1757511273.199:10): pid=21858 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.7.3462" name="bus" dev="overlay" ino=1232 res=0 errno=0 [ 1893.612258][T21880] fuse: Unknown parameter 'fd0x000000000000000a' [ 1893.889829][T20765] usb 9-1: new high-speed USB device number 38 using dummy_hcd [ 1894.690414][T20765] usb 9-1: Using ep0 maxpacket: 8 [ 1894.698142][T20765] usb 9-1: config 0 has an invalid interface number: 148 but max is 0 [ 1894.713163][T20765] usb 9-1: config 0 has no interface number 0 [ 1894.755802][T20765] usb 9-1: New USB device found, idVendor=0d46, idProduct=2012, bcdDevice=4d.36 [ 1894.779670][T20765] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1894.806403][T20765] usb 9-1: Product: syz [ 1894.821630][T20765] usb 9-1: Manufacturer: syz [ 1894.836605][T20765] usb 9-1: SerialNumber: syz [ 1895.012217][T20765] usb 9-1: config 0 descriptor?? [ 1895.079720][T20765] kobil_sct 9-1:0.148: KOBIL USB smart card terminal converter detected [ 1895.225077][T20765] usb 9-1: KOBIL USB smart card terminal converter now attached to ttyUSB0 [ 1895.773814][T20765] usb 9-1: USB disconnect, device number 38 [ 1895.942176][T20765] kobil ttyUSB0: KOBIL USB smart card terminal converter now disconnected from ttyUSB0 [ 1895.986428][T20765] kobil_sct 9-1:0.148: device disconnected [ 1903.890406][T21940] syz.7.3479: attempt to access beyond end of device [ 1903.890406][T21940] loop15: rw=0, sector=0, nr_sectors = 8 limit=0 [ 1903.968490][T21940] F2FS-fs (loop15): Unable to read 1th superblock [ 1904.003350][T21940] syz.7.3479: attempt to access beyond end of device [ 1904.003350][T21940] loop15: rw=0, sector=8, nr_sectors = 8 limit=0 [ 1904.043193][T21940] F2FS-fs (loop15): Unable to read 2th superblock [ 1909.443531][ T28] audit: type=1800 audit(1757511289.829:11): pid=21996 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.7.3492" name="bus" dev="overlay" ino=1298 res=0 errno=0 [ 1910.700440][T12883] Bluetooth: hci1: command 0x0406 tx timeout [ 1910.929073][T22013] infiniband syz1: RDMA CMA: cma_listen_on_dev, error -98 [ 1913.606298][T22046] fuse: Unknown parameter 'fd0x000000000000000a' [ 1914.910283][ T23] usb 7-1: new high-speed USB device number 31 using dummy_hcd [ 1914.972538][T22061] hfsplus: unable to find HFS+ superblock [ 1915.099558][ T23] usb 7-1: Using ep0 maxpacket: 8 [ 1915.202558][ T23] usb 7-1: New USB device found, idVendor=046d, idProduct=08dd, bcdDevice=ff.f4 [ 1915.219558][ T23] usb 7-1: New USB device strings: Mfr=8, Product=2, SerialNumber=3 [ 1915.219710][ T1289] ieee802154 phy0 wpan0: encryption failed: -22 [ 1915.227921][ T23] usb 7-1: Product: syz [ 1915.245647][ T23] usb 7-1: Manufacturer: syz [ 1915.253023][ T23] usb 7-1: SerialNumber: syz [ 1915.253087][ T1289] ieee802154 phy1 wpan1: encryption failed: -22 [ 1915.261801][ T23] usb 7-1: config 0 descriptor?? [ 1915.296870][ T23] gspca_main: gspca_zc3xx-2.14.0 probing 046d:08dd [ 1915.890362][ T23] gspca_zc3xx: reg_w_i err -71 [ 1915.913014][ T23] gspca_zc3xx: probe of 7-1:0.0 failed with error -71 [ 1915.940368][ T23] usb 7-1: USB disconnect, device number 31 [ 1917.003634][T22081] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 1917.013696][T22081] Bluetooth: hci3: Opcode 0x0406 failed: -4 [ 1917.151505][T22090] fuse: Unknown parameter 'fd0xffffffffffffffff' [ 1917.881848][T22081] Bluetooth: hci3: Opcode 0x0406 failed: -4 [ 1917.958039][T22081] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 1918.023098][T22081] Bluetooth: hci0: Opcode 0x0406 failed: -4 [ 1918.124929][T22081] Bluetooth: hci0: Opcode 0x0406 failed: -4 [ 1918.151200][T22081] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 1918.176683][T22081] Bluetooth: hci2: Opcode 0x0406 failed: -4 [ 1918.222269][T22081] Bluetooth: hci2: Opcode 0x0406 failed: -4 [ 1918.296418][T22081] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 1918.334725][T22081] Bluetooth: hci1: Opcode 0x0406 failed: -4 [ 1918.361355][T22081] Bluetooth: hci1: Opcode 0x0406 failed: -4 [ 1918.856084][T22120] fuse: Unknown parameter 'fd0x000000000000000a' [ 1918.877137][T12883] Bluetooth: hci3: command 0x0406 tx timeout [ 1919.757938][T22127] hfsplus: unable to find HFS+ superblock [ 1919.979463][T12883] Bluetooth: hci0: command 0x0406 tx timeout [ 1920.229500][T12883] Bluetooth: hci2: command 0x0406 tx timeout [ 1920.313893][T12883] Bluetooth: hci1: command 0x0406 tx timeout [ 1920.533005][T22138] fuse: Unknown parameter 'fd0x000000000000000a' [ 1921.369166][T12883] Bluetooth: hci3: command 0x0406 tx timeout [ 1921.442796][ T28] audit: type=1326 audit(1757511301.979:12): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22129 comm="syz.6.3531" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6bc198eba9 code=0x7ffc0000 [ 1921.510512][ T28] audit: type=1326 audit(1757511302.009:13): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22129 comm="syz.6.3531" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6bc198eba9 code=0x7ffc0000 [ 1921.533994][ T28] audit: type=1326 audit(1757511302.009:14): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22129 comm="syz.6.3531" exe="/root/syz-executor" sig=0 arch=c000003e syscall=44 compat=0 ip=0x7f6bc198eba9 code=0x7ffc0000 [ 1921.694796][ T28] audit: type=1326 audit(1757511302.009:15): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22129 comm="syz.6.3531" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6bc198eba9 code=0x7ffc0000 [ 1921.717347][ T28] audit: type=1326 audit(1757511302.009:16): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22129 comm="syz.6.3531" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f6bc198eba9 code=0x7ffc0000 [ 1921.742425][ T28] audit: type=1326 audit(1757511302.019:17): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22129 comm="syz.6.3531" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6bc198eba9 code=0x7ffc0000 [ 1921.764991][ T28] audit: type=1326 audit(1757511302.019:18): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22129 comm="syz.6.3531" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6bc198eba9 code=0x7ffc0000 [ 1921.788971][ T28] audit: type=1326 audit(1757511302.019:19): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22129 comm="syz.6.3531" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f6bc198eba9 code=0x7ffc0000 [ 1921.817867][ T28] audit: type=1326 audit(1757511302.349:20): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22129 comm="syz.6.3531" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6bc198eba9 code=0x7ffc0000 [ 1922.056990][ T28] audit: type=1326 audit(1757511302.349:21): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22129 comm="syz.6.3531" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6bc198eba9 code=0x7ffc0000 [ 1922.080689][T12883] Bluetooth: hci0: command 0x0406 tx timeout [ 1922.418964][T12883] Bluetooth: hci2: command 0x0406 tx timeout [ 1922.425272][T12883] Bluetooth: hci1: command 0x0406 tx timeout [ 1922.992416][T22158] fuse: Unknown parameter 'fd0x000000000000000a' [ 1923.419543][T21219] Bluetooth: hci3: command 0x0406 tx timeout [ 1924.269576][T21219] Bluetooth: hci0: command 0x0406 tx timeout [ 1924.459560][T21219] Bluetooth: hci1: command 0x0406 tx timeout [ 1924.466134][T21219] Bluetooth: hci2: command 0x0406 tx timeout [ 1925.329491][T22169] overlayfs: failed to resolve './file1': -2 [ 1925.359678][T22170] iommufd_mock iommufd_mock1: Adding to iommu group 0 [ 1927.843368][T22198] fuse: Unknown parameter 'fd0x000000000000000a' [ 1928.793489][ T28] kauditd_printk_skb: 25 callbacks suppressed [ 1928.793537][ T28] audit: type=1800 audit(1757511309.329:47): pid=22207 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.6.3554" name="bus" dev="overlay" ino=1372 res=0 errno=0 [ 1929.549418][ T5835] usb 9-1: new high-speed USB device number 39 using dummy_hcd [ 1929.751025][ T5835] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1929.765744][ T5835] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1929.797801][ T5835] usb 9-1: New USB device found, idVendor=10c4, idProduct=ea90, bcdDevice= 0.00 [ 1929.809190][ T5835] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1929.838000][ T5835] usb 9-1: config 0 descriptor?? [ 1930.105721][ T28] audit: type=1800 audit(1757511310.639:48): pid=22225 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.6.3558" name="bus" dev="overlay" ino=1391 res=0 errno=0 [ 1930.280545][ T5835] cp2112 0003:10C4:EA90.0004: unknown main item tag 0x0 [ 1930.287815][ T5835] cp2112 0003:10C4:EA90.0004: unknown main item tag 0x0 [ 1930.296571][ T5835] cp2112 0003:10C4:EA90.0004: unknown main item tag 0x0 [ 1930.304139][ T5835] cp2112 0003:10C4:EA90.0004: unknown main item tag 0x0 [ 1930.315712][ T5835] cp2112 0003:10C4:EA90.0004: unknown main item tag 0x0 [ 1930.327300][ T5835] cp2112 0003:10C4:EA90.0004: unknown main item tag 0x0 [ 1930.340559][ T5835] cp2112 0003:10C4:EA90.0004: unknown main item tag 0x0 [ 1930.368813][ T5835] cp2112 0003:10C4:EA90.0004: hidraw0: USB HID v0.00 Device [HID 10c4:ea90] on usb-dummy_hcd.8-1/input0 [ 1930.473609][ T5835] cp2112 0003:10C4:EA90.0004: Part Number: 0x00 Device Version: 0x00 [ 1931.076489][T22211] cp2112 0003:10C4:EA90.0004: Unsupported transaction 0 [ 1931.134743][T22211] cp2112 0003:10C4:EA90.0004: Error starting transaction: -38 [ 1931.185134][ T5835] cp2112 0003:10C4:EA90.0004: error reading lock byte: -71 [ 1931.256016][ T5835] usb 9-1: USB disconnect, device number 39 [ 1932.391514][T22258] binder: 22251:22258 ioctl c0306201 0 returned -14 [ 1932.634154][ T28] audit: type=1800 audit(1757511313.169:49): pid=22260 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.7.3565" name="bus" dev="overlay" ino=1382 res=0 errno=0 [ 1933.149667][ T28] audit: type=1800 audit(1757511313.659:50): pid=22263 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.8.3567" name="bus" dev="overlay" ino=1009 res=0 errno=0 [ 1935.199888][ T9102] usb 9-1: new high-speed USB device number 40 using dummy_hcd [ 1935.443570][ T9102] usb 9-1: Using ep0 maxpacket: 16 [ 1935.499817][ T9102] usb 9-1: config 0 interface 0 altsetting 0 has an invalid endpoint with address 0xD7, skipping [ 1935.746215][ T9102] usb 9-1: New USB device found, idVendor=05ac, idProduct=9226, bcdDevice=b2.89 [ 1936.315397][ T9102] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1936.326249][ T9102] usb 9-1: Product: syz [ 1936.785958][ T9102] usb 9-1: Manufacturer: syz [ 1936.809720][ T9102] usb 9-1: SerialNumber: syz [ 1936.846738][ T9102] usb 9-1: config 0 descriptor?? [ 1936.880187][ T9102] appledisplay 9-1:0.0: Could not find int-in endpoint [ 1936.888299][ T9102] usbhid 9-1:0.0: couldn't find an input interrupt endpoint [ 1937.114520][ T9102] usb 9-1: USB disconnect, device number 40 [ 1941.189831][T22347] kvm: vcpu 2: requested 128 ns lapic timer period limited to 200000 ns [ 1941.223131][T22347] kvm: vcpu 2: requested lapic timer restore with starting count register 0x390=1812281087 (231971979136 ns) > initial count (200000 ns). Using initial count to start timer. [ 1944.899133][T22380] fuse: Unknown parameter 'fd0x000000000000000a' [ 1947.017885][T22385] syz.9.3601: attempt to access beyond end of device [ 1947.017885][T22385] loop19: rw=0, sector=0, nr_sectors = 8 limit=0 [ 1947.064725][T22385] F2FS-fs (loop19): Unable to read 1th superblock [ 1947.263158][T22385] syz.9.3601: attempt to access beyond end of device [ 1947.263158][T22385] loop19: rw=0, sector=8, nr_sectors = 8 limit=0 [ 1947.299684][T22385] F2FS-fs (loop19): Unable to read 2th superblock [ 1951.816883][ T28] audit: type=1800 audit(1757511332.209:51): pid=22422 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.7.3609" name="bus" dev="overlay" ino=1477 res=0 errno=0 [ 1954.298031][T22441] syz.7.3614: attempt to access beyond end of device [ 1954.298031][T22441] loop15: rw=0, sector=0, nr_sectors = 8 limit=0 [ 1954.323006][T22441] F2FS-fs (loop15): Unable to read 1th superblock [ 1954.339072][T22441] syz.7.3614: attempt to access beyond end of device [ 1954.339072][T22441] loop15: rw=0, sector=8, nr_sectors = 8 limit=0 [ 1954.402401][T22441] F2FS-fs (loop15): Unable to read 2th superblock [ 1956.764529][ T5779] usb 10-1: new high-speed USB device number 34 using dummy_hcd [ 1957.037608][ T5779] usb 10-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 1957.499634][ T5779] usb 10-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 1957.510647][ T5779] usb 10-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 1957.520229][ T5779] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1957.554534][T22458] raw-gadget.0 gadget.9: fail, usb_ep_enable returned -22 [ 1957.606724][ T5779] usb 10-1: Quirk or no altest; falling back to MIDI 1.0 [ 1958.672429][ T5779] usb 10-1: USB disconnect, device number 34 [ 1958.723710][T21890] udevd[21890]: error opening ATTR{/sys/devices/platform/dummy_hcd.9/usb10/10-1/10-1:27.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1964.823403][T22511] syz.8.3630: attempt to access beyond end of device [ 1964.823403][T22511] loop17: rw=0, sector=0, nr_sectors = 8 limit=0 [ 1964.890297][T22511] F2FS-fs (loop17): Unable to read 1th superblock [ 1964.902227][T22511] syz.8.3630: attempt to access beyond end of device [ 1964.902227][T22511] loop17: rw=0, sector=8, nr_sectors = 8 limit=0 [ 1964.920549][T22511] F2FS-fs (loop17): Unable to read 2th superblock [ 1967.364733][T22540] siw: device registration error -23 [ 1972.226914][T22578] snd_dummy snd_dummy.0: control 4:1:0:syz1:211 is already present [ 1975.516389][T22598] syz.8.3650: attempt to access beyond end of device [ 1975.516389][T22598] loop17: rw=0, sector=0, nr_sectors = 8 limit=0 [ 1975.680967][T22598] F2FS-fs (loop17): Unable to read 1th superblock [ 1975.688157][T22598] syz.8.3650: attempt to access beyond end of device [ 1975.688157][T22598] loop17: rw=0, sector=8, nr_sectors = 8 limit=0 [ 1975.702818][T22598] F2FS-fs (loop17): Unable to read 2th superblock [ 1976.634914][ T1289] ieee802154 phy0 wpan0: encryption failed: -22 [ 1976.641417][ T1289] ieee802154 phy1 wpan1: encryption failed: -22 [ 1976.866522][T22610] netlink: 8 bytes leftover after parsing attributes in process `syz.6.3655'. [ 1977.011060][ T28] audit: type=1326 audit(1757511357.549:52): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22611 comm="syz.9.3652" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6cb6d8eba9 code=0x7ffc0000 [ 1977.061249][ T28] audit: type=1326 audit(1757511357.569:53): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22611 comm="syz.9.3652" exe="/root/syz-executor" sig=0 arch=c000003e syscall=44 compat=0 ip=0x7f6cb6d8eba9 code=0x7ffc0000 [ 1977.133088][ T28] audit: type=1326 audit(1757511357.569:54): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22611 comm="syz.9.3652" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6cb6d8eba9 code=0x7ffc0000 [ 1977.160784][ T28] audit: type=1326 audit(1757511357.569:55): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22611 comm="syz.9.3652" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6cb6d8eba9 code=0x7ffc0000 [ 1977.647076][ T28] audit: type=1326 audit(1757511357.579:56): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22611 comm="syz.9.3652" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f6cb6d8eba9 code=0x7ffc0000 [ 1977.682722][ T28] audit: type=1326 audit(1757511357.579:57): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22611 comm="syz.9.3652" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6cb6d8eba9 code=0x7ffc0000 [ 1977.709546][ T28] audit: type=1326 audit(1757511357.579:58): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22611 comm="syz.9.3652" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6cb6d8eba9 code=0x7ffc0000 [ 1977.744982][ T28] audit: type=1326 audit(1757511357.579:59): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22611 comm="syz.9.3652" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f6cb6d8eba9 code=0x7ffc0000 [ 1977.818810][ T28] audit: type=1326 audit(1757511358.219:60): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22611 comm="syz.9.3652" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6cb6d8eba9 code=0x7ffc0000 [ 1977.904695][ T28] audit: type=1326 audit(1757511358.219:61): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22611 comm="syz.9.3652" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6cb6d8eba9 code=0x7ffc0000 [ 1978.091916][T22622] fuse: Bad value for 'fd' [ 1980.986724][T22649] netlink: 8 bytes leftover after parsing attributes in process `syz.7.3664'. [ 1981.329910][T22656] fuse: Bad value for 'fd' [ 1982.437455][T22667] qnx6: unable to read the first superblock [ 1985.375058][ T28] kauditd_printk_skb: 24 callbacks suppressed [ 1985.375075][ T28] audit: type=1326 audit(1757511365.909:86): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22691 comm="syz.6.3671" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6bc198eba9 code=0x7ffc0000 [ 1985.517475][ T28] audit: type=1326 audit(1757511365.949:87): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22691 comm="syz.6.3671" exe="/root/syz-executor" sig=0 arch=c000003e syscall=44 compat=0 ip=0x7f6bc198eba9 code=0x7ffc0000 [ 1985.599740][ T28] audit: type=1326 audit(1757511365.949:88): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22691 comm="syz.6.3671" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6bc198eba9 code=0x7ffc0000 [ 1985.633457][ T28] audit: type=1326 audit(1757511365.959:89): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22691 comm="syz.6.3671" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f6bc198eba9 code=0x7ffc0000 [ 1985.829317][T22704] netlink: 8 bytes leftover after parsing attributes in process `syz.9.3673'. [ 1986.212805][ T28] audit: type=1326 audit(1757511365.959:90): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22691 comm="syz.6.3671" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6bc198eba9 code=0x7ffc0000 [ 1986.254357][ T28] audit: type=1326 audit(1757511365.959:91): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22691 comm="syz.6.3671" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f6bc198eba9 code=0x7ffc0000 [ 1986.282427][ T28] audit: type=1326 audit(1757511366.039:92): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22691 comm="syz.6.3671" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6bc198eba9 code=0x7ffc0000 [ 1986.328091][ T28] audit: type=1326 audit(1757511366.039:93): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22691 comm="syz.6.3671" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6bc198eba9 code=0x7ffc0000 [ 1986.457316][ T28] audit: type=1326 audit(1757511366.109:94): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22691 comm="syz.6.3671" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f6bc198eba9 code=0x7ffc0000 [ 1986.646813][ T28] audit: type=1326 audit(1757511366.109:95): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22691 comm="syz.6.3671" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6bc198eba9 code=0x7ffc0000 [ 1989.929320][T22740] netlink: 8 bytes leftover after parsing attributes in process `syz.9.3684'. [ 1991.720783][T22749] netlink: 44 bytes leftover after parsing attributes in process `syz.9.3688'. [ 1992.474703][T22759] fuse: Unknown parameter 'fd0xffffffffffffffff' [ 1995.519432][ T28] kauditd_printk_skb: 5 callbacks suppressed [ 1995.519451][ T28] audit: type=1326 audit(1757511375.429:101): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22770 comm="syz.9.3693" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6cb6d8eba9 code=0x7ffc0000 [ 1995.656811][ T28] audit: type=1326 audit(1757511376.039:102): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22770 comm="syz.9.3693" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6cb6d8eba9 code=0x7ffc0000 [ 1995.704917][ T28] audit: type=1326 audit(1757511376.039:103): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22770 comm="syz.9.3693" exe="/root/syz-executor" sig=0 arch=c000003e syscall=44 compat=0 ip=0x7f6cb6d8eba9 code=0x7ffc0000 [ 1995.749115][ T28] audit: type=1326 audit(1757511376.039:104): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22770 comm="syz.9.3693" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6cb6d8eba9 code=0x7ffc0000 [ 1995.849566][ T28] audit: type=1326 audit(1757511376.039:105): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22770 comm="syz.9.3693" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6cb6d8eba9 code=0x7ffc0000 [ 1995.872290][ T28] audit: type=1326 audit(1757511376.089:106): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22770 comm="syz.9.3693" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f6cb6d8eba9 code=0x7ffc0000 [ 1995.894961][ T28] audit: type=1326 audit(1757511376.089:107): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22770 comm="syz.9.3693" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6cb6d8eba9 code=0x7ffc0000 [ 1995.918933][ T28] audit: type=1326 audit(1757511376.089:108): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22770 comm="syz.9.3693" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6cb6d8eba9 code=0x7ffc0000 [ 1995.992932][ T28] audit: type=1326 audit(1757511376.089:109): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22770 comm="syz.9.3693" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f6cb6d8eba9 code=0x7ffc0000 [ 1996.049923][ T28] audit: type=1326 audit(1757511376.169:110): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22770 comm="syz.9.3693" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6cb6d8eba9 code=0x7ffc0000 [ 1996.559405][ T23] usb 9-1: new high-speed USB device number 41 using dummy_hcd [ 1996.776337][ T23] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1996.838400][ T23] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1996.875789][ T23] usb 9-1: New USB device found, idVendor=10c4, idProduct=ea90, bcdDevice= 0.00 [ 1996.916572][ T23] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1996.947905][ T23] usb 9-1: config 0 descriptor?? [ 1997.423070][ T23] cp2112 0003:10C4:EA90.0005: unknown main item tag 0x0 [ 1997.594502][ T23] cp2112 0003:10C4:EA90.0005: unknown main item tag 0x0 [ 1997.864322][ T23] cp2112 0003:10C4:EA90.0005: unknown main item tag 0x0 [ 1998.031315][ T23] cp2112 0003:10C4:EA90.0005: unknown main item tag 0x0 [ 1998.105797][ T23] cp2112 0003:10C4:EA90.0005: unknown main item tag 0x0 [ 1998.148217][ T23] cp2112 0003:10C4:EA90.0005: unknown main item tag 0x0 [ 1998.205200][ T23] cp2112 0003:10C4:EA90.0005: unknown main item tag 0x0 [ 1998.248167][ T23] cp2112 0003:10C4:EA90.0005: hidraw0: USB HID v0.00 Device [HID 10c4:ea90] on usb-dummy_hcd.8-1/input0 [ 1998.371512][ T23] cp2112 0003:10C4:EA90.0005: Part Number: 0x00 Device Version: 0x00 [ 1998.617106][ T23] cp2112 0003:10C4:EA90.0005: error reading lock byte: -71 [ 1999.410879][ T23] usb 9-1: USB disconnect, device number 41 [ 1999.540999][T22806] fido_id[22806]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.8/usb9/9-1/report_descriptor': No such file or directory [ 2001.051977][T22829] netlink: 44 bytes leftover after parsing attributes in process `syz.6.3708'. [ 2004.649447][ T5875] usb 7-1: new high-speed USB device number 32 using dummy_hcd [ 2005.048777][ T5875] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 2005.070113][ T5875] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 2005.309793][ T5875] usb 7-1: New USB device found, idVendor=10c4, idProduct=ea90, bcdDevice= 0.00 [ 2005.330706][ T5875] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2005.351357][ T5875] usb 7-1: config 0 descriptor?? [ 2006.132316][ T5875] cp2112 0003:10C4:EA90.0006: unknown main item tag 0x0 [ 2006.163553][ T5875] cp2112 0003:10C4:EA90.0006: unknown main item tag 0x0 [ 2006.182004][ T5875] cp2112 0003:10C4:EA90.0006: unknown main item tag 0x0 [ 2006.202394][ T5875] cp2112 0003:10C4:EA90.0006: unknown main item tag 0x0 [ 2006.231752][ T5875] cp2112 0003:10C4:EA90.0006: unknown main item tag 0x0 [ 2006.245470][ T5875] cp2112 0003:10C4:EA90.0006: unknown main item tag 0x0 [ 2006.255002][ T5875] cp2112 0003:10C4:EA90.0006: unknown main item tag 0x0 [ 2006.273976][ T5875] cp2112 0003:10C4:EA90.0006: hidraw0: USB HID v0.00 Device [HID 10c4:ea90] on usb-dummy_hcd.6-1/input0 [ 2006.350160][T22866] iommufd_mock iommufd_mock1: Adding to iommu group 0 [ 2006.371964][ T5875] cp2112 0003:10C4:EA90.0006: Part Number: 0x00 Device Version: 0x00 [ 2006.604142][T22872] overlayfs: failed to resolve './file1': -2 [ 2007.055823][ T5875] cp2112 0003:10C4:EA90.0006: error reading lock byte: -71 [ 2007.363800][ T5875] usb 7-1: USB disconnect, device number 32 [ 2008.041160][T22892] iommufd_mock iommufd_mock1: Adding to iommu group 0 [ 2009.584967][T22899] fuse: Unknown parameter 'fd0x000000000000000a' [ 2011.674976][T22909] overlayfs: failed to resolve './file1': -2 [ 2014.117115][T22927] fuse: Unknown parameter 'fd0x000000000000000a' [ 2015.697007][T22938] overlayfs: failed to resolve './file1': -2 [ 2016.633835][T22944] netlink: 8 bytes leftover after parsing attributes in process `syz.7.3741'. [ 2020.294933][T22967] syz.8.3747: attempt to access beyond end of device [ 2020.294933][T22967] loop17: rw=0, sector=0, nr_sectors = 8 limit=0 [ 2020.355957][T22967] F2FS-fs (loop17): Unable to read 1th superblock [ 2020.386945][T22967] syz.8.3747: attempt to access beyond end of device [ 2020.386945][T22967] loop17: rw=0, sector=8, nr_sectors = 8 limit=0 [ 2020.428331][T22967] F2FS-fs (loop17): Unable to read 2th superblock [ 2020.477348][ T28] kauditd_printk_skb: 13 callbacks suppressed [ 2020.501450][ T28] audit: type=1800 audit(1757511401.009:124): pid=22970 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.7.3748" name="bus" dev="overlay" ino=1637 res=0 errno=0 [ 2022.552999][ T28] audit: type=1800 audit(1757511403.059:125): pid=22985 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.7.3751" name="bus" dev="overlay" ino=1656 res=0 errno=0 [ 2023.712739][T22992] qnx6: unable to read the first superblock [ 2024.200983][T22993] netlink: 8 bytes leftover after parsing attributes in process `syz.8.3752'. [ 2024.958523][T23005] iommufd_mock iommufd_mock1: Adding to iommu group 0 [ 2025.978270][T23016] syz.6.3761: attempt to access beyond end of device [ 2025.978270][T23016] loop13: rw=0, sector=0, nr_sectors = 8 limit=0 [ 2026.009486][T23016] F2FS-fs (loop13): Unable to read 1th superblock [ 2026.038843][T23016] syz.6.3761: attempt to access beyond end of device [ 2026.038843][T23016] loop13: rw=0, sector=8, nr_sectors = 8 limit=0 [ 2026.059426][T23016] F2FS-fs (loop13): Unable to read 2th superblock [ 2026.547575][T23021] fuse: Unknown parameter 'fd0x000000000000000a' [ 2027.592701][T23023] snd_dummy snd_dummy.0: control 4:1:0:syz1:211 is already present [ 2031.284486][T23041] netlink: 8 bytes leftover after parsing attributes in process `syz.7.3767'. [ 2032.534277][T23061] snd_dummy snd_dummy.0: control 4:1:0:syz1:211 is already present [ 2033.982139][T23096] iommufd_mock iommufd_mock1: Adding to iommu group 0 [ 2035.553165][ T28] audit: type=1800 audit(1757511416.089:126): pid=23109 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.7.3779" name="bus" dev="overlay" ino=1706 res=0 errno=0 [ 2036.520312][T23118] netlink: 8 bytes leftover after parsing attributes in process `syz.6.3781'. [ 2038.097778][ T1289] ieee802154 phy0 wpan0: encryption failed: -22 [ 2038.107984][ T1289] ieee802154 phy1 wpan1: encryption failed: -22 [ 2038.133155][T23124] snd_dummy snd_dummy.0: control 4:1:0:syz1:211 is already present [ 2038.524271][T23129] batman_adv: batadv0: Adding interface: gretap1 [ 2038.531641][T23129] batman_adv: batadv0: The MTU of interface gretap1 is too small (1462) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 2038.609749][T23129] batman_adv: batadv0: Interface activated: gretap1 [ 2038.851366][ T5779] Process accounting resumed [ 2041.998693][T23132] Process accounting resumed [ 2042.159716][T23178] netlink: 8 bytes leftover after parsing attributes in process `syz.6.3792'. [ 2043.086297][T23191] fuse: Unknown parameter 'fd0x0000000000000009' [ 2046.197650][T23223] qnx6: unable to read the first superblock [ 2046.774560][T23235] fuse: Unknown parameter 'fd0x000000000000000a' [ 2049.418497][T23253] fuse: Unknown parameter 'fd0x0000000000000009' [ 2050.813520][T23261] iommufd_mock iommufd_mock1: Adding to iommu group 0 [ 2050.862339][T23263] fuse: Unknown parameter 'fd0x0000000000000009' [ 2055.060920][ T28] audit: type=1800 audit(1757511435.599:127): pid=23289 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.8.3817" name="bus" dev="overlay" ino=1317 res=0 errno=0 [ 2055.267059][T23293] netlink: 8 bytes leftover after parsing attributes in process `syz.6.3818'. [ 2055.810910][T23297] fuse: Unknown parameter 'fd0x0000000000000009' [ 2056.816326][T23304] netlink: 8 bytes leftover after parsing attributes in process `syz.7.3820'. [ 2059.429135][T23326] iommufd_mock iommufd_mock1: Adding to iommu group 0 [ 2060.628282][T23338] fuse: Unknown parameter 'fd0x0000000000000009' [ 2061.484846][ T28] audit: type=1800 audit(1757511442.019:128): pid=23339 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.7.3831" name="bus" dev="overlay" ino=1793 res=0 errno=0 [ 2066.164502][T23368] snd_dummy snd_dummy.0: control 4:1:0:syz1:211 is already present [ 2068.093424][ T28] audit: type=1800 audit(1757511448.629:129): pid=23376 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.9.3842" name="bus" dev="overlay" ino=1378 res=0 errno=0 [ 2068.489628][ T8505] usb 9-1: new high-speed USB device number 42 using dummy_hcd [ 2070.329091][ T8505] usb 9-1: Using ep0 maxpacket: 16 [ 2070.349890][ T8505] usb 9-1: no configurations [ 2070.369340][ T8505] usb 9-1: can't read configurations, error -22 [ 2071.355719][ T8505] usb 9-1: new high-speed USB device number 43 using dummy_hcd [ 2071.561670][T23413] iommufd_mock iommufd_mock1: Adding to iommu group 0 [ 2072.490605][T23415] netlink: 8 bytes leftover after parsing attributes in process `syz.6.3851'. [ 2072.680132][T23421] snd_dummy snd_dummy.0: control 4:1:0:syz1:211 is already present [ 2078.709017][T23465] iommufd_mock iommufd_mock1: Adding to iommu group 0 [ 2078.901160][T23466] netlink: 8 bytes leftover after parsing attributes in process `syz.6.3865'. [ 2080.063449][T23480] qnx6: unable to read the first superblock [ 2081.327994][T23488] netlink: 8 bytes leftover after parsing attributes in process `syz.6.3871'. Stopping sshd: stopped /usr/sbin/sshd (pid 5549) OK [ 2082.908063][T23504] fuse: Unknown parameter 'fd0x0000000000000009' Stopping crond: [ 2083.221783][T23508] iommufd_mock iommufd_mock1: Adding to iommu group 0 stopped /usr/sbin/crond (pid 5533) OK [ 2084.580842][T23527] netlink: 8 bytes leftover after parsing attributes in process `syz.7.3883'. Stopping dhcpcd... stopped /sbin/dhcpcd (pid 5454) [ 2085.571268][T23543] fuse: Unknown parameter 'fd0x000000000000000a' [ 2085.660775][T23545] fuse: Unknown parameter 'fd0x0000000000000009' Stopping network: [ 2087.575877][ T28] audit: type=1800 audit(1757511468.089:130): pid=23566 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.9.3892" name="bus" dev="overlay" ino=1453 res=0 errno=0 [ 2087.710129][T23571] netlink: 8 bytes leftover after parsing attributes in process `syz.8.3893'. OK Stopping iptables: OK Stopping system message bus: done Stopping klogd: OK Stopping acpid: OK Stopping syslogd: stopped /sbin/syslogd (pid 5142) OK umount: can't remount debugfs read-only umount: sysfs busy - remounted read-only umount: devtmpfs busy - remounted read-only umount: can't remount /dev/root read-only The system is going down NOW! Sent SIGTERM to all processes [ 2094.938369][ T6324] netdevsim netdevsim8 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 Sent SIGKILL to all processes Requesting system poweroff [ 2095.060814][ T6324] netdevsim netdevsim8 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2095.142892][ T6324] netdevsim netdevsim8 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2095.212899][ T6324] netdevsim netdevsim8 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2096.071615][T23662] sd 0:0:1:0: [sda] Synchronizing SCSI cache [ 2096.083608][T23662] ACPI: PM: Preparing to enter system sleep state S5 [ 2096.092526][T23662] kvm: exiting hardware virtualization [ 2096.098266][T23662] reboot: Power down serialport: VM disconnected.