last executing test programs: 5m7.377984388s ago: executing program 1 (id=1755): syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) socket$inet_sctp(0x2, 0x5, 0x84) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) ioctl$BLKTRACESETUP(0xffffffffffffffff, 0xc0481273, &(0x7f0000000280)={'\x00', 0x8001, 0x9, 0x8, 0xfffffffffffffffc, 0x6, 0xffffffffffffffff}) write$cgroup_pid(0xffffffffffffffff, 0x0, 0x0) sched_setscheduler(r0, 0x7, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x1, &(0x7f00000000c0)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) prctl$PR_SET_TAGGED_ADDR_CTRL(0x37, 0x1) syz_open_dev$usbfs(&(0x7f0000000000), 0x1ff, 0x2) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff) sendmsg$NL80211_CMD_LEAVE_IBSS(0xffffffffffffffff, &(0x7f00000003c0)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000380)={&(0x7f0000000340)={0x14, 0x0, 0x400, 0x70bd2c, 0x25dfdbfd, {{}, {@void, @void}}}, 0x14}, 0x1, 0x0, 0x0, 0x800}, 0x4000) mount(0x0, &(0x7f0000000080)='./sys\x00', &(0x7f00000000c0)='sysfs\x00', 0x0, 0x0) r4 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./sys/bus/usb/drivers/usb/unbind\x00', 0x1, 0x0) write(r4, &(0x7f0000000200)='usb1\x00', 0x5) syz_genetlink_get_family_id$nl802154(0x0, 0xffffffffffffffff) 5m7.028131859s ago: executing program 1 (id=1763): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x19, 0x3, &(0x7f00000003c0)=ANY=[@ANYBLOB="1800000001000000000000000000000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, @cgroup_sockopt=0x16, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = fsopen(&(0x7f0000000000)='cgroup2\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r1, 0x6, 0x0, 0x0, 0x0) r2 = fsmount(r1, 0x0, 0x80) bpf$BPF_LINK_CREATE(0x1c, &(0x7f00000000c0)={r0, r2, 0x16, 0x0, @void}, 0x10) r3 = socket(0x1e, 0x2, 0x0) setsockopt$TIPC_DEST_DROPPABLE(r3, 0x10f, 0x81, &(0x7f0000000480), 0x4) 5m6.980807959s ago: executing program 1 (id=1764): setsockopt$packet_tx_ring(0xffffffffffffffff, 0x107, 0xd, &(0x7f0000000100)=@req3={0x10000, 0x100000001, 0x10000, 0x1}, 0x1c) setsockopt$packet_int(0xffffffffffffffff, 0x107, 0xe, &(0x7f0000000000)=0xd, 0x4) 5m6.980627064s ago: executing program 1 (id=1765): mkdir(&(0x7f0000000000)='my_tracefs\x00', 0x1ff) mount(0x0, &(0x7f0000000200)='my_tracefs\x00', &(0x7f0000000300)='tracefs\x00', 0x0, 0x0) mkdir(&(0x7f0000000280)='./file0\x00', 0x124) mount$bind(&(0x7f00000002c0)='.\x00', &(0x7f0000000200)='./file0\x00', 0x0, 0x103090, 0x0) mount$bind(&(0x7f0000001900)='.\x00', &(0x7f0000000380)='./file0/file0\x00', 0x0, 0x2a05004, 0x0) mount$bpf(0x0, &(0x7f0000000040)='./file0\x00', 0x0, 0x84000, 0x0) 5m6.8937732s ago: executing program 1 (id=1767): r0 = syz_usb_connect(0x0, 0x32, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$uac3(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000f40)={0x84, &(0x7f0000000a80)={0x20, 0x14, 0xf, "ba575414d488a924d3fd79e4f41e6c"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_open_dev$dvb_frontend(&(0x7f0000000100), 0x1, 0x802) 5m6.727086502s ago: executing program 1 (id=1768): r0 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000180)={'syz_tun\x00', 0x0}) r2 = bpf$MAP_CREATE(0x1900000000000000, &(0x7f0000000040)=@base={0x1b, 0x0, 0x0, 0x2000}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r2}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x6, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000000)={r3, r1, 0x25, 0x0, @void}, 0x10) syz_emit_ethernet(0x32, &(0x7f0000001200)={@local, @local, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x24, 0x2, 0x0, 0x0, 0x11, 0x0, @empty, @empty}, {0x0, 0x4e20, 0x10, 0x0, @gue={{0x2, 0x0, 0x1}}}}}}}, 0x0) 5m6.71244763s ago: executing program 32 (id=1768): r0 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000180)={'syz_tun\x00', 0x0}) r2 = bpf$MAP_CREATE(0x1900000000000000, &(0x7f0000000040)=@base={0x1b, 0x0, 0x0, 0x2000}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r2}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x6, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000000)={r3, r1, 0x25, 0x0, @void}, 0x10) syz_emit_ethernet(0x32, &(0x7f0000001200)={@local, @local, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x24, 0x2, 0x0, 0x0, 0x11, 0x0, @empty, @empty}, {0x0, 0x4e20, 0x10, 0x0, @gue={{0x2, 0x0, 0x1}}}}}}}, 0x0) 2m24.206821849s ago: executing program 0 (id=3444): r0 = fsopen(&(0x7f0000000140)='pipefs\x00', 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x40042, 0x1) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000080), 0x0, &(0x7f0000000500)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r0}}) 2m24.137436809s ago: executing program 0 (id=3446): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() r1 = socket$inet6(0xa, 0x800000000000002, 0x0) setsockopt$inet_opts(r1, 0x0, 0xd, &(0x7f00000008c0)=';', 0x1) setsockopt$SO_TIMESTAMPING(r1, 0x1, 0x41, &(0x7f0000000200)=0x67db, 0x4) setsockopt$inet6_int(r1, 0x29, 0x4, &(0x7f00000000c0)=0xb2, 0x4) sendmmsg$inet6(r1, &(0x7f0000000e00)=[{{&(0x7f0000000080)={0xa, 0x4e23, 0x0, @ipv4={'\x00', '\xff\xff', @empty}}, 0x1c, 0x0}}], 0x1, 0x0) recvmmsg(r1, &(0x7f0000003600)=[{{0x0, 0x0, 0x0}, 0x7f}], 0x1, 0x12023, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f066bbeeb, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000002100)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r2, &(0x7f0000000040), 0x80002c1, 0x2, 0x0) r4 = socket$inet6_udp(0xa, 0x2, 0x0) getsockopt$inet6_mreq(r4, 0x29, 0x50, 0x0, &(0x7f0000000180)) r5 = socket(0xa, 0x3, 0x87) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = timerfd_create(0x0, 0x0) timerfd_gettime(r7, &(0x7f0000000040)) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000080)={'lo\x00', 0x0}) ioctl$sock_inet6_SIOCSIFADDR(r5, 0x8916, &(0x7f0000000000)={@private2={0xfc, 0x2, '\x00', 0x1}, 0x18, r8}) ioctl$sock_inet6_tcp_SIOCINQ(r5, 0x8936, &(0x7f0000000000)) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x12, 0x4, &(0x7f0000000280)=ANY=[@ANYBLOB="18000000010000000000000000000000711816000000000095"], &(0x7f00000000c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_sock_addr=0x1e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 2m22.367278472s ago: executing program 0 (id=3464): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CAP_X2APIC_API(r1, 0x4068aea3, &(0x7f0000000140)={0x81, 0x0, 0x2}) 2m22.29732794s ago: executing program 0 (id=3468): socket$nl_route(0x10, 0x3, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) mknodat(0xffffffffffffff9c, &(0x7f00000000c0)='./file2\x00', 0x81c0, 0x0) execveat(0xffffffffffffff9c, 0x0, 0x0, 0x0, 0x0) pipe2$9p(&(0x7f0000000140), 0x4000) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)) 2m21.357022675s ago: executing program 0 (id=3476): r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000003480)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0) read$FUSE(r0, &(0x7f0000007fc0)={0x2020}, 0x2020) 2m21.356668647s ago: executing program 0 (id=3478): setitimer(0x0, &(0x7f0000000040)={{0x6, 0x9}, {0x1ff, 0x32e3}}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x400000000008d}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x1, &(0x7f0000000040)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x4000087, 0x2, 0x0) alarm(0x38) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000040)='./sys\x00', &(0x7f0000000080)='sysfs\x00', 0x0, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000080)=ANY=[@ANYBLOB="2c0000001a00010029bd700000000000"], 0x2c}}, 0x0) write(0xffffffffffffffff, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) setxattr$trusted_overlay_upper(&(0x7f0000000380)='./file1\x00', &(0x7f0000000100), 0x0, 0x835, 0x0) r4 = socket(0x10, 0x3, 0x0) bind$netlink(r4, 0x0, 0x0) write(r4, &(0x7f0000000140)="2600000022004701050000070000000000000020002b1f000a4a51f1ee839cd53400b017ca5b", 0x26) r5 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r5, 0x107, 0xe, &(0x7f0000006ffc)=0x4000000000000200, 0x4) 2m5.833162267s ago: executing program 33 (id=3478): setitimer(0x0, &(0x7f0000000040)={{0x6, 0x9}, {0x1ff, 0x32e3}}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x400000000008d}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x1, &(0x7f0000000040)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x4000087, 0x2, 0x0) alarm(0x38) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000040)='./sys\x00', &(0x7f0000000080)='sysfs\x00', 0x0, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000080)=ANY=[@ANYBLOB="2c0000001a00010029bd700000000000"], 0x2c}}, 0x0) write(0xffffffffffffffff, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) setxattr$trusted_overlay_upper(&(0x7f0000000380)='./file1\x00', &(0x7f0000000100), 0x0, 0x835, 0x0) r4 = socket(0x10, 0x3, 0x0) bind$netlink(r4, 0x0, 0x0) write(r4, &(0x7f0000000140)="2600000022004701050000070000000000000020002b1f000a4a51f1ee839cd53400b017ca5b", 0x26) r5 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r5, 0x107, 0xe, &(0x7f0000006ffc)=0x4000000000000200, 0x4) 1m1.47666523s ago: executing program 5 (id=3584): socket$inet6(0xa, 0x3, 0x81) r0 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, 0x0, 0x0) setsockopt$inet6_int(r0, 0x29, 0x1000000000021, &(0x7f0000000040)=0x5, 0x4) sendmsg$inet6(r0, &(0x7f00000000c0)={&(0x7f00000001c0)={0xa, 0x4e23, 0x80000, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}}, 0x1c, 0x0, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="120000000000000029000000", @ANYRES16=r0], 0x18}, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) syz_open_procfs(0x0, &(0x7f0000000000)='fd/3\x00') syz_clone(0x88280, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000240)='oom_adj\x00') fchdir(r1) r2 = inotify_init() inotify_add_watch(r2, &(0x7f0000000000)='./file0\x00', 0x21d) getresgid(&(0x7f0000000100), &(0x7f0000000180), &(0x7f0000000140)) r3 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/cgroups\x00', 0x0, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) io_setup(0x1, &(0x7f0000000600)=0x0) io_submit(r4, 0x1, &(0x7f00000008c0)=[&(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x7fff, 0xffffffffffffffff, &(0x7f0000000140)="b7", 0x1, 0x0, 0x0, 0x2}]) preadv2(r3, 0x0, 0x0, 0x2b, 0x0, 0x0) 59.128482449s ago: executing program 5 (id=3588): mknod$loop(&(0x7f0000000140)='./file0\x00', 0xfff, 0x1) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f00000001c0), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x80, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id', @ANYRESDEC=0x0]) read$FUSE(r0, &(0x7f0000006300)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r0, &(0x7f0000000040)={0x50, 0x0, r1, {0x7, 0x1f, 0x0, 0x34014c40, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x10}}, 0x50) syz_fuse_handle_req(r0, &(0x7f00000021c0)="0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000e00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000800000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000060000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000dc4e00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ba045abcd5dfc67d00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000081000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000230000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000050000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000090000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000dc000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000209bfd66eea210560000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000020000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000003dc150f400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000040000000000000000001d000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000030000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f50000000000000000000000000000000000000000000000000000000000000000000000000000000000c6d90000000000001354c4b6000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f8000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001a00", 0x2000, &(0x7f00000062c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000300)={0x20, 0x0, 0x0, {0x0, 0x1a}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r2 = openat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x80101, 0x101) r3 = dup2(r2, r0) ioctl$FUSE_DEV_IOC_CLONE(r3, 0x8004e500, 0x0) 56.94916762s ago: executing program 5 (id=3590): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000008b}, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) close(r1) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x15) 48.99964392s ago: executing program 3 (id=3596): r0 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, 0x0, 0x0) setsockopt$inet6_int(r0, 0x29, 0x1000000000021, &(0x7f0000000040)=0x5, 0x4) sendmsg$inet6(r0, &(0x7f00000000c0)={&(0x7f00000001c0)={0xa, 0x4e23, 0x80000, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}}, 0x1c, 0x0, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="120000000000000029000000", @ANYRES16=r0], 0x18}, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) syz_open_procfs(0x0, &(0x7f0000000000)='fd/3\x00') 47.780862075s ago: executing program 3 (id=3598): mknod$loop(&(0x7f0000000140)='./file0\x00', 0xfff, 0x1) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f00000001c0), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x80, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id', @ANYRESDEC=0x0]) read$FUSE(r0, &(0x7f0000006300)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r0, &(0x7f0000000040)={0x50, 0x0, r1, {0x7, 0x1f, 0x0, 0x34014c40, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x10}}, 0x50) syz_fuse_handle_req(r0, &(0x7f00000021c0)="0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000e00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000800000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000060000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000dc4e00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ba045abcd5dfc67d00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000081000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000230000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000050000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000090000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000dc000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000209bfd66eea210560000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000020000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000003dc150f400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000040000000000000000001d000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000030000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f50000000000000000000000000000000000000000000000000000000000000000000000000000000000c6d90000000000001354c4b6000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f8000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001a00", 0x2000, &(0x7f00000062c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000300)={0x20, 0x0, 0x0, {0x0, 0x1a}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r2 = openat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x80101, 0x101) r3 = dup2(r2, r0) ioctl$FUSE_DEV_IOC_CLONE(r3, 0x8004e500, 0x0) 45.892857792s ago: executing program 3 (id=3601): socket$inet6(0xa, 0x3, 0x81) r0 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, 0x0, 0x0) setsockopt$inet6_int(r0, 0x29, 0x1000000000021, &(0x7f0000000040)=0x5, 0x4) sendmsg$inet6(r0, &(0x7f00000000c0)={&(0x7f00000001c0)={0xa, 0x4e23, 0x80000, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}}, 0x1c, 0x0, 0x0, &(0x7f0000000000)=ANY=[@ANYRES16=r0], 0x18}, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) syz_open_procfs(0x0, &(0x7f0000000000)='fd/3\x00') syz_clone(0x88280, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) syz_open_procfs(0xffffffffffffffff, &(0x7f0000000240)='oom_adj\x00') 44.469853845s ago: executing program 3 (id=3603): r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) bind$bt_l2cap(r0, &(0x7f00000007c0)={0x1f, 0x0, @any, 0x4, 0x2}, 0xe) setsockopt$bt_l2cap_L2CAP_OPTIONS(r0, 0x6, 0x1, 0x0, 0x0) 43.350845846s ago: executing program 5 (id=3604): r0 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, 0x0, 0x0) setsockopt$inet6_int(r0, 0x29, 0x1000000000021, &(0x7f0000000040)=0x5, 0x4) sendmsg$inet6(r0, &(0x7f00000000c0)={&(0x7f00000001c0)={0xa, 0x4e23, 0x80000, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}}, 0x1c, 0x0, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="120000000000000029000000", @ANYRES16=r0], 0x18}, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) syz_open_procfs(0x0, &(0x7f0000000000)='fd/3\x00') syz_clone(0x88280, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000240)='oom_adj\x00') fchdir(r1) r2 = inotify_init() inotify_add_watch(r2, &(0x7f0000000000)='./file0\x00', 0x21d) getresgid(&(0x7f0000000100), &(0x7f0000000180), &(0x7f0000000140)) openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/cgroups\x00', 0x0, 0x0) 42.795345656s ago: executing program 3 (id=3605): r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000180), 0x2982, 0x0) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/vmallocinfo\x00', 0x0, 0x0) sendfile(r0, r1, 0x0, 0x20000023896) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cpu.stat\x00', 0x275a, 0x0) write$UHID_INPUT(r2, &(0x7f0000000940)={0x8, {"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", 0x1000}}, 0x1006) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1, 0x10012, r2, 0x0) r3 = socket(0x10, 0x803, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r3, 0x8914, &(0x7f0000000240)={'macsec0\x00', 0x1}) ioctl$TCSETSF(r0, 0x5404, &(0x7f0000000000)={0xf, 0x3e, 0x6, 0x3, 0x2, "a0e1c601283700"}) 41.56968479s ago: executing program 5 (id=3606): openat(0xffffffffffffff9c, 0x0, 0x101042, 0x40) timerfd_create(0x1, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) setrlimit(0x1, 0x0) fdatasync(r0) r1 = socket(0xa, 0x1, 0x0) mmap(&(0x7f0000000000/0xa000)=nil, 0xa000, 0xd3283d0368e269b3, 0x8031, 0xffffffffffffffff, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x19, 0x3, &(0x7f00000003c0)=ANY=[@ANYBLOB="1800000001000000000000000000000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x9, '\x00', 0x0, @cgroup_sockopt=0x16, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) fsconfig$FSCONFIG_CMD_CREATE(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) r3 = fsmount(0xffffffffffffffff, 0x0, 0x80) bpf$BPF_LINK_CREATE(0x1c, &(0x7f00000000c0)={r2, r3, 0x16, 0x0, @void}, 0x10) setsockopt$inet6_group_source_req(r1, 0x29, 0x2e, &(0x7f00000001c0)={0x3, {{0xa, 0x4e24, 0x2, @mcast1, 0xff7ffffd}}, {{0xa, 0x4e08, 0x4a3, @local, 0x4f1}}}, 0x108) setsockopt$inet6_MCAST_MSFILTER(r1, 0x29, 0x30, &(0x7f00000004c0)={0x3, {{0xa, 0x4e22, 0xc, @mcast1, 0xfffffffa}}}, 0x90) 40.374302542s ago: executing program 5 (id=3607): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000280)=0x5) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x3, 0x6, &(0x7f0000000000)=ANY=[@ANYBLOB="0500000000000000631149000000000085100000020000008500000005000000950000000000001b9500a505000000"], 0x0, 0x5, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x6}, 0x94) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) epoll_pwait2(0xffffffffffffffff, &(0x7f0000000100), 0x0, 0x0, 0x0, 0x0) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './cgroup/../file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = syz_open_procfs(0x0, &(0x7f00000190c0)='mountinfo\x00') pread64(r3, &(0x7f0000000080)=""/102356, 0x18fd4, 0x6) getrlimit(0x4, &(0x7f0000000040)) 37.032788541s ago: executing program 3 (id=3609): socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000240), 0xffffffffffffffff) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'batadv_slave_0\x00', 0x0}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000840)=@newtfilter={0x444, 0x2c, 0xf3f, 0x30bd29, 0x25dfdbfd, {0x0, 0x0, 0x0, r3, {0xb, 0xd}, {}, {0x7, 0xffe0}}, [@filter_kind_options=@f_basic={{0xa}, {0x414, 0x2, [@TCA_BASIC_POLICE={0x410, 0x4, [@TCA_POLICE_RATE={0x404, 0x2, [0x6, 0x3, 0xc396, 0x2, 0x2, 0x9, 0x2, 0xfffffff9, 0x8, 0x101, 0xff, 0x9, 0x4, 0x9, 0x0, 0xf, 0x5, 0x4, 0x4a96, 0x4, 0xffffffff, 0x5, 0x1000, 0x2, 0x2, 0x1, 0x6, 0x7, 0x9, 0x68a2, 0x6, 0x7, 0x3, 0x4, 0x7, 0x7ff, 0x2, 0x4, 0xfffffff9, 0x6, 0x7, 0x1, 0x5, 0xffffff7f, 0x6e, 0x0, 0x5, 0x0, 0x3, 0x9674, 0x9, 0x401, 0x7, 0x5, 0x5, 0x101, 0x5, 0x6, 0xa8e, 0xfe, 0xa9, 0x60, 0x80000001, 0x5, 0x1, 0x401, 0x800, 0x5, 0x6, 0x6, 0x9, 0x0, 0x2, 0xc32, 0x6, 0xfffffff8, 0x9, 0x1, 0x3, 0x77a, 0x7, 0x7, 0x31, 0x9, 0x4, 0x6, 0x5, 0xa58, 0x8, 0xffff, 0x8000, 0x9, 0x6, 0x2, 0x1, 0x0, 0x1, 0x2, 0x0, 0xa, 0xe1f, 0x7, 0xfffffffd, 0x1, 0xc4, 0x2, 0x80000001, 0x28, 0xe, 0xff, 0x4cd2, 0xfffffffa, 0x6e, 0xff, 0x0, 0x2, 0x57c6, 0x8, 0x80000001, 0x7, 0x7, 0x2, 0x3ff, 0xa, 0x5, 0x81a, 0x3, 0x5, 0x3, 0x8, 0x2, 0x9, 0x9, 0x91, 0x9, 0x8, 0x800, 0x2, 0x3, 0x7, 0x4, 0x10, 0xfffffffb, 0xfff, 0xfffffff8, 0x7, 0x1, 0x8, 0x1, 0x6, 0x4000020, 0x2026ee35, 0x0, 0x7fffffff, 0xfffffffc, 0x1, 0x4, 0x6, 0xf, 0x9, 0x1, 0xc, 0x4, 0xc166, 0x6, 0xfffffffa, 0xfffff466, 0x0, 0x0, 0x8, 0x8, 0x6, 0x7fffffff, 0xe5f, 0x5, 0xe0, 0x4, 0xfffffffd, 0x1, 0x247800, 0x0, 0xa6f7, 0x2, 0x5, 0xf, 0x0, 0x9, 0x9, 0x9, 0x2, 0x2, 0xb91, 0x401, 0x73a7, 0x0, 0xa9fd, 0x4, 0x0, 0x10001, 0x0, 0xff, 0xfffffff3, 0x2, 0xb8ec, 0x8, 0x1, 0x8, 0xb, 0x7fff, 0x0, 0xa2a, 0xe, 0x80000001, 0x10000, 0x17c3, 0xfffffffe, 0x1, 0x80000000, 0x8, 0x7e54, 0x2, 0xe6, 0x9, 0x5b, 0x9, 0x5, 0x3, 0x1, 0xd25, 0x3, 0xa, 0x8, 0x0, 0xdd55, 0x6, 0x1, 0x400, 0x4, 0x8, 0xe8, 0x8bef, 0x4, 0x400, 0x2, 0x2, 0x1, 0x6, 0x3fb9, 0x7, 0x5, 0x4, 0x0, 0x62e0, 0x9, 0x4, 0x4]}, @TCA_POLICE_AVRATE={0x8, 0x4, 0xfff}]}]}}]}, 0x444}, 0x1, 0x0, 0x0, 0x20041090}, 0xd0) socket$pptp(0x18, 0x1, 0x2) munmap(&(0x7f0000002000/0x1000)=nil, 0x1000) syz_emit_ethernet(0x4c, &(0x7f0000000000)={@broadcast, @remote, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "122d92", 0x16, 0x3a, 0xff, @local, @mcast2, {[], @ndisc_ns={0x87, 0x0, 0x0, @empty, [{}]}}}}}}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x7, 0x6, &(0x7f0000000000)=@framed={{0x5, 0x0, 0x0, 0x0, 0x0, 0x71, 0x11, 0xab}, [@func={0x85, 0x0, 0x1, 0x0, 0x2}, @call={0x85, 0x0, 0x0, 0x5}, @exit], {0x95, 0x0, 0x5a5}}, &(0x7f0000000080)='GPL\x00', 0x5, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x6}, 0x94) syz_clone(0x42164000, 0x0, 0x0, 0x0, 0x0, 0x0) 25.763417365s ago: executing program 4 (id=3614): r0 = socket$inet6(0xa, 0x80003, 0x6) connect$inet6(r0, &(0x7f0000000100)={0xa, 0x0, 0x4, @loopback}, 0x1c) setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f0000000340)={{{@in6=@private0, @in=@rand_addr=0x64010100, 0x0, 0x0, 0x4e24, 0x0, 0xa, 0x0, 0x0, 0x21}, {0x0, 0x0, 0x4}, {0x0, 0x4, 0xfffffffffffffc01, 0xa78a}, 0xfffffffe, 0x0, 0x1, 0x0, 0x0, 0x3}, {{@in=@loopback, 0x4d6, 0x33}, 0x0, @in=@loopback, 0x0, 0x3, 0x1, 0x7}}, 0xe8) sendmmsg(r0, &(0x7f0000000480), 0x2e9, 0x0) 24.901632353s ago: executing program 34 (id=3607): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000280)=0x5) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x3, 0x6, &(0x7f0000000000)=ANY=[@ANYBLOB="0500000000000000631149000000000085100000020000008500000005000000950000000000001b9500a505000000"], 0x0, 0x5, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x6}, 0x94) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) epoll_pwait2(0xffffffffffffffff, &(0x7f0000000100), 0x0, 0x0, 0x0, 0x0) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './cgroup/../file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = syz_open_procfs(0x0, &(0x7f00000190c0)='mountinfo\x00') pread64(r3, &(0x7f0000000080)=""/102356, 0x18fd4, 0x6) getrlimit(0x4, &(0x7f0000000040)) 24.25953371s ago: executing program 4 (id=3616): socket$nl_route(0x10, 0x3, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000380)='./file0\x00', 0x40, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000840)={0x18, 0x3, &(0x7f00000000c0)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x2, 0xba, &(0x7f0000000140)=""/186, 0x41100, 0xb, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x39}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) syz_emit_ethernet(0x0, 0x0, 0x0) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) ioctl$sock_SIOCSIFVLAN_ADD_VLAN_CMD(r1, 0x8983, &(0x7f0000000100)={0x0, 'erspan0\x00', {0x1}, 0x26}) mknodat(0xffffffffffffff9c, &(0x7f00000000c0)='./file2\x00', 0x81c0, 0x0) execveat(0xffffffffffffff9c, &(0x7f0000000280)='./file2\x00', 0x0, 0x0, 0x0) symlink(0x0, &(0x7f0000000300)='./file0/file0\x00') r3 = syz_open_dev$evdev(0x0, 0x9, 0x32803) ioctl$EVIOCGREP(r3, 0x80084503, &(0x7f00000000c0)=""/78) bind$inet6(0xffffffffffffffff, &(0x7f0000000140)={0xa, 0x4e22, 0x4, @ipv4={'\x00', '\xff\xff', @empty}}, 0x1c) openat(0xffffffffffffff9c, &(0x7f0000000340)='./file0\x00', 0x4400c2, 0x5) r4 = socket(0x28, 0x801, 0x0) connect$vsock_stream(r4, &(0x7f0000000880)={0x28, 0x0, 0x0, @local}, 0x10) shutdown(r4, 0x1) 22.229667037s ago: executing program 2 (id=3618): mkdirat(0xffffffffffffff9c, 0x0, 0x11e) openat$fuse(0xffffffffffffff9c, 0x0, 0x2, 0x0) r0 = syz_open_dev$usbfs(&(0x7f0000000100), 0x76, 0x101b01) r1 = syz_open_dev$usbfs(&(0x7f0000000080), 0x206, 0x20182) ioctl$USBDEVFS_ALLOW_SUSPEND(r1, 0x5522) ioctl$USBDEVFS_BULK(r1, 0x5523, 0x0) ioctl$USBDEVFS_DISCONNECT_CLAIM(r0, 0x8108551b, &(0x7f0000002600)={0x0, 0x2, "5a77bd318786aeb879ca62cdab2a02fa560186d85b25a5665a3247e500f61681905db88235f8a5447dd2a2ed6e91626f068881e50f68530c2b21a100efb76cba37ff3111d6847e0c7f719e169a596e5fc008daefba68f6222103472bc55704cdb72b4b996ed82ccb1eaae27969d008ba7d34171113d80672e65a6a0a72e19c2b60bd6276fd8bb6366e9d1ed9a60fd53ded22c87eb2be010e4a62fb73c33424b437bb192c9d06ea6ed04983fe5c5ca033dfce0a82575ef14eee686be0fc58e384f93a13e4e8bbf599394baea3a9ca1864f0a35d6cc38fca32ad6b39905a9727d2001457df7be7e1aefe3635b2ee97c143f28def4b73905ca14d10d1f600"}) ioctl$USBDEVFS_ALLOW_SUSPEND(r0, 0x5522) ioctl$USBDEVFS_SETINTERFACE(r0, 0x80045510, &(0x7f0000000040)={0x0, 0x200000}) 20.301445284s ago: executing program 35 (id=3609): socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000240), 0xffffffffffffffff) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'batadv_slave_0\x00', 0x0}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000840)=@newtfilter={0x444, 0x2c, 0xf3f, 0x30bd29, 0x25dfdbfd, {0x0, 0x0, 0x0, r3, {0xb, 0xd}, {}, {0x7, 0xffe0}}, [@filter_kind_options=@f_basic={{0xa}, {0x414, 0x2, [@TCA_BASIC_POLICE={0x410, 0x4, [@TCA_POLICE_RATE={0x404, 0x2, [0x6, 0x3, 0xc396, 0x2, 0x2, 0x9, 0x2, 0xfffffff9, 0x8, 0x101, 0xff, 0x9, 0x4, 0x9, 0x0, 0xf, 0x5, 0x4, 0x4a96, 0x4, 0xffffffff, 0x5, 0x1000, 0x2, 0x2, 0x1, 0x6, 0x7, 0x9, 0x68a2, 0x6, 0x7, 0x3, 0x4, 0x7, 0x7ff, 0x2, 0x4, 0xfffffff9, 0x6, 0x7, 0x1, 0x5, 0xffffff7f, 0x6e, 0x0, 0x5, 0x0, 0x3, 0x9674, 0x9, 0x401, 0x7, 0x5, 0x5, 0x101, 0x5, 0x6, 0xa8e, 0xfe, 0xa9, 0x60, 0x80000001, 0x5, 0x1, 0x401, 0x800, 0x5, 0x6, 0x6, 0x9, 0x0, 0x2, 0xc32, 0x6, 0xfffffff8, 0x9, 0x1, 0x3, 0x77a, 0x7, 0x7, 0x31, 0x9, 0x4, 0x6, 0x5, 0xa58, 0x8, 0xffff, 0x8000, 0x9, 0x6, 0x2, 0x1, 0x0, 0x1, 0x2, 0x0, 0xa, 0xe1f, 0x7, 0xfffffffd, 0x1, 0xc4, 0x2, 0x80000001, 0x28, 0xe, 0xff, 0x4cd2, 0xfffffffa, 0x6e, 0xff, 0x0, 0x2, 0x57c6, 0x8, 0x80000001, 0x7, 0x7, 0x2, 0x3ff, 0xa, 0x5, 0x81a, 0x3, 0x5, 0x3, 0x8, 0x2, 0x9, 0x9, 0x91, 0x9, 0x8, 0x800, 0x2, 0x3, 0x7, 0x4, 0x10, 0xfffffffb, 0xfff, 0xfffffff8, 0x7, 0x1, 0x8, 0x1, 0x6, 0x4000020, 0x2026ee35, 0x0, 0x7fffffff, 0xfffffffc, 0x1, 0x4, 0x6, 0xf, 0x9, 0x1, 0xc, 0x4, 0xc166, 0x6, 0xfffffffa, 0xfffff466, 0x0, 0x0, 0x8, 0x8, 0x6, 0x7fffffff, 0xe5f, 0x5, 0xe0, 0x4, 0xfffffffd, 0x1, 0x247800, 0x0, 0xa6f7, 0x2, 0x5, 0xf, 0x0, 0x9, 0x9, 0x9, 0x2, 0x2, 0xb91, 0x401, 0x73a7, 0x0, 0xa9fd, 0x4, 0x0, 0x10001, 0x0, 0xff, 0xfffffff3, 0x2, 0xb8ec, 0x8, 0x1, 0x8, 0xb, 0x7fff, 0x0, 0xa2a, 0xe, 0x80000001, 0x10000, 0x17c3, 0xfffffffe, 0x1, 0x80000000, 0x8, 0x7e54, 0x2, 0xe6, 0x9, 0x5b, 0x9, 0x5, 0x3, 0x1, 0xd25, 0x3, 0xa, 0x8, 0x0, 0xdd55, 0x6, 0x1, 0x400, 0x4, 0x8, 0xe8, 0x8bef, 0x4, 0x400, 0x2, 0x2, 0x1, 0x6, 0x3fb9, 0x7, 0x5, 0x4, 0x0, 0x62e0, 0x9, 0x4, 0x4]}, @TCA_POLICE_AVRATE={0x8, 0x4, 0xfff}]}]}}]}, 0x444}, 0x1, 0x0, 0x0, 0x20041090}, 0xd0) socket$pptp(0x18, 0x1, 0x2) munmap(&(0x7f0000002000/0x1000)=nil, 0x1000) syz_emit_ethernet(0x4c, &(0x7f0000000000)={@broadcast, @remote, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "122d92", 0x16, 0x3a, 0xff, @local, @mcast2, {[], @ndisc_ns={0x87, 0x0, 0x0, @empty, [{}]}}}}}}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x7, 0x6, &(0x7f0000000000)=@framed={{0x5, 0x0, 0x0, 0x0, 0x0, 0x71, 0x11, 0xab}, [@func={0x85, 0x0, 0x1, 0x0, 0x2}, @call={0x85, 0x0, 0x0, 0x5}, @exit], {0x95, 0x0, 0x5a5}}, &(0x7f0000000080)='GPL\x00', 0x5, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x6}, 0x94) syz_clone(0x42164000, 0x0, 0x0, 0x0, 0x0, 0x0) 18.77277681s ago: executing program 2 (id=3620): mkdirat(0xffffffffffffff9c, 0x0, 0x1ff) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) fcntl$lock(0xffffffffffffffff, 0x7, 0x0) read$FUSE(0xffffffffffffffff, 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x6, 0x3, &(0x7f0000000480)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], &(0x7f0000000500)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000004c0)={'veth1_virt_wifi\x00', 0x0}) r3 = bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000800)={r1, r2, 0x25, 0x4, @val=@tcx}, 0x1c) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000009c0)=@newlink={0x28, 0x10, 0xc362e63b3f31ba5f, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x20080, 0x80e1}, [@IFLA_GROUP={0x8}]}, 0x28}}, 0x0) bpf$BPF_LINK_UPDATE(0x1d, &(0x7f0000000680)={r3, r1, 0x4, r1}, 0x10) 16.267058713s ago: executing program 4 (id=3621): timerfd_create(0x1, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) setrlimit(0x1, 0x0) fdatasync(r0) r1 = socket(0xa, 0x1, 0x0) mmap(&(0x7f0000000000/0xa000)=nil, 0xa000, 0xd3283d0368e269b3, 0x8031, 0xffffffffffffffff, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x19, 0x3, &(0x7f00000003c0)=ANY=[@ANYBLOB="1800000001000000000000000000000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x9, '\x00', 0x0, @cgroup_sockopt=0x16, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) fsconfig$FSCONFIG_CMD_CREATE(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) r3 = fsmount(0xffffffffffffffff, 0x0, 0x80) bpf$BPF_LINK_CREATE(0x1c, &(0x7f00000000c0)={r2, r3, 0x16, 0x0, @void}, 0x10) setsockopt$inet6_group_source_req(r1, 0x29, 0x2e, &(0x7f00000001c0)={0x3, {{0xa, 0x4e24, 0x2, @mcast1, 0xff7ffffd}}, {{0xa, 0x4e08, 0x4a3, @local, 0x4f1}}}, 0x108) setsockopt$inet6_MCAST_MSFILTER(r1, 0x29, 0x30, &(0x7f00000004c0)={0x3, {{0xa, 0x4e22, 0xc, @mcast1, 0xfffffffa}}}, 0x90) 14.23728504s ago: executing program 4 (id=3622): keyctl$negate(0xd, 0x0, 0x40, 0x0) socket$can_raw(0x1d, 0x3, 0x1) bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="12000000060000000400"], 0x50) socket$netlink(0x10, 0x3, 0x12) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x92}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) open_tree(0xffffffffffffffff, &(0x7f0000000040)='./file0\x00', 0x0) 9.390620431s ago: executing program 2 (id=3623): mknod$loop(&(0x7f0000000140)='./file0\x00', 0xfff, 0x1) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f00000001c0), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x80, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r0, &(0x7f0000006300)={0x2020, 0x0, 0x0, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r0, &(0x7f0000000040)={0x50, 0x0, r1, {0x7, 0x1f, 0x0, 0x34014c40, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x10}}, 0x50) syz_fuse_handle_req(r0, &(0x7f00000021c0)="0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000e00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000800000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000060000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000dc4e00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ba045abcd5dfc67d00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000081000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000230000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000050000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000090000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000dc000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000209bfd66eea210560000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000020000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000003dc150f400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000040000000000000000001d000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000030000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f50000000000000000000000000000000000000000000000000000000000000000000000000000000000c6d90000000000001354c4b6000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f8000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001a00", 0x2000, &(0x7f00000062c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000300)={0x20, 0x0, 0x0, {0x0, 0x1a}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_fuse_handle_req(r0, &(0x7f0000004200)="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", 0x2000, &(0x7f0000000c80)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000580)={0x78, 0x0, 0x6, {0x8, 0xfffffffe, 0x0, {0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x1, 0x3966, 0x1, 0x8000, 0xfffffffc, r2, r3, 0x1, 0x4}}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r4 = openat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x80101, 0x101) write$tcp_congestion(r4, &(0x7f00000000c0)='lp\x00', 0xfffffdef) fsync(r4) dup2(r4, r0) mount$fuse(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB, @ANYRESOCT, @ANYBLOB=',rootmode=0000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) 6.388949272s ago: executing program 2 (id=3624): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x22, &(0x7f0000001680)=0x1, 0x4) shutdown(r0, 0x1) bind$inet6(r0, &(0x7f0000000240)={0xa, 0x4e20, 0x9, @loopback, 0x7}, 0x1c) sendmmsg$inet6(r0, &(0x7f0000000140)=[{{&(0x7f0000000100)={0xa, 0x4e20, 0x2, @empty, 0xfffffffe}, 0x1c, &(0x7f0000000b40)=[{&(0x7f0000000a40)="fb", 0x1}], 0x1}}, {{0x0, 0x0, 0x0}}], 0x2, 0x20080058) 4.763690845s ago: executing program 2 (id=3625): syz_open_dev$tty1(0xc, 0x4, 0x4) r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f00000000c0), 0x20800, 0x0) ioctl$TCSBRKP(r0, 0x5425, 0xac1) syz_clone(0x11, 0x0, 0xb, 0x0, 0x0, 0x0) ioctl$TCSBRKP(r0, 0x5425, 0x0) 3.486778832s ago: executing program 2 (id=3626): r0 = socket$nl_route(0x10, 0x3, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000380)='./file0\x00', 0x40, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000840)={0x18, 0x3, &(0x7f00000000c0)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x2, 0xba, &(0x7f0000000140)=""/186, 0x41100, 0xb, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x39}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) syz_emit_ethernet(0x0, 0x0, 0x0) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) ioctl$sock_SIOCSIFVLAN_ADD_VLAN_CMD(r2, 0x8983, &(0x7f0000000100)={0x0, 'erspan0\x00', {0x1}, 0x26}) mknodat(0xffffffffffffff9c, &(0x7f00000000c0)='./file2\x00', 0x81c0, 0x0) execveat(0xffffffffffffff9c, &(0x7f0000000280)='./file2\x00', 0x0, 0x0, 0x0) symlink(0x0, &(0x7f0000000300)='./file0/file0\x00') r4 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000500)='status\x00') read$FUSE(r4, &(0x7f0000001180)={0x2020}, 0x2020) pipe2$9p(&(0x7f0000000140)={0xffffffffffffffff}, 0x4000) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000180), 0x0, &(0x7f0000000040)={'trans=fd,', {'rfdno', 0x3d, r5}, 0x2c, {}, 0x2c, {[{@msize={'msize', 0x3d, 0x7fffffff}}, {@noextend}], [], 0x6b}}) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=@newlink={0x50, 0x10, 0x401, 0x0, 0x25dfdbff, {0x0, 0x0, 0x0, 0x0, 0x1b7b}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @veth={{0x9}, {0x18, 0x2, 0x0, 0x1, @val=@VETH_INFO_PEER={0x14, 0x1, {{0x0, 0x0, 0x0, 0x0, 0x40000, 0x100a8}}}}}}, @IFLA_NUM_TX_QUEUES={0x8, 0x1f, 0x9}]}, 0x50}}, 0x40080) 3.119204945s ago: executing program 4 (id=3627): r0 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./file0\x00', 0x401c2, 0x2) ftruncate(r0, 0x8800000) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) recvmmsg(r2, &(0x7f00000034c0)=[{{0x0, 0x0, &(0x7f0000001e40)=[{&(0x7f0000000b80)=""/4096, 0x20001b80}, {&(0x7f0000001b80)=""/112, 0x70}], 0x2, 0x0, 0xa0028cb4}}], 0x40000000000013c, 0x700, 0x0) sendfile(r1, r0, 0x0, 0x578410eb) 0s ago: executing program 4 (id=3628): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./configfs\x00', 0x1ed) mount(0x0, &(0x7f0000000000)='./configfs\x00', &(0x7f0000000040)='configfs\x00', 0x0, 0x0) chdir(&(0x7f0000000000)='./configfs\x00') mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='usb_gadget/g1\x00', 0x1ed) mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='usb_gadget/g1/functions/mass_storage.0\x00', 0x1ed) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='usb_gadget/g1/configs/c.1\x00', 0x1ed) symlinkat(&(0x7f00000000c0)='usb_gadget/g1/functions/mass_storage.0\x00', 0xffffffffffffff9c, &(0x7f0000000140)='usb_gadget/g1/configs/c.1/mass_storage.0\x00') mount(&(0x7f0000000240)=@sr0, &(0x7f0000000280)='usb_gadget/g1/configs/c.1/mass_storage.0\x00', &(0x7f00000002c0)='gfs2\x00', 0x403402, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000180)='usb_gadget/g1/UDC\x00', 0x2, 0x0) r1 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000000), 0x802, 0x0) write$UHID_CREATE(r1, &(0x7f0000000240)={0x0, {'syz0\x00', 'syz0\x00', 'syz0\x00', &(0x7f0000000400)=""/2, 0x2}}, 0x120) write$UHID_INPUT(r1, &(0x7f0000003840)={0xc, {"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", 0x1000}}, 0x4) write(r0, &(0x7f00000001c0)='dummy_udc.0\x00', 0xb) kernel console output (not intermixed with test programs): , SerialNumber=0 [ 223.026479][ T9] usb 5-1: Manufacturer: syz [ 223.029538][ T9] usb 5-1: config 0 descriptor?? [ 223.445896][ T9] hid_parser_main: 13 callbacks suppressed [ 223.445917][ T9] appleir 0003:05AC:8243.0011: unknown main item tag 0x0 [ 223.457478][ T9] appleir 0003:05AC:8243.0011: hiddev0,hidraw1: USB HID v0.00 Device [syz] on usb-dummy_hcd.0-1/input0 [ 224.259256][ T24] usb 5-1: USB disconnect, device number 58 [ 224.475345][ T5841] usb 9-1: USB disconnect, device number 11 [ 224.813731][ T5841] usb 9-1: new high-speed USB device number 12 using dummy_hcd [ 224.963667][ T5841] usb 9-1: Using ep0 maxpacket: 8 [ 224.966905][ T5841] usb 9-1: New USB device found, idVendor=0ccd, idProduct=0039, bcdDevice=90.7b [ 224.969865][ T5841] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 224.976895][ T5841] pvrusb2: Hardware description: Terratec Grabster AV400 [ 224.979390][ T5841] pvrusb2: ********** [ 224.980956][ T5841] pvrusb2: ***WARNING*** Support for this device (Terratec Grabster AV400) is experimental. [ 224.984470][ T5841] pvrusb2: Important functionality might not be entirely working. [ 224.986893][ T5841] pvrusb2: Please consider contacting the driver author to help with further stabilization of the driver. [ 224.990227][ T5841] pvrusb2: ********** [ 225.033793][ T34] usb 5-1: new high-speed USB device number 59 using dummy_hcd [ 225.178030][ T2517] pvrusb2: Invalid write control endpoint [ 225.183688][ T34] usb 5-1: Using ep0 maxpacket: 8 [ 225.186584][ T34] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x8D has an invalid bInterval 42, changing to 9 [ 225.190945][ T34] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 225.195621][ T34] usb 5-1: config 0 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 225.199574][ T34] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x8B has invalid maxpacket 12592, setting to 1024 [ 225.204356][ T34] usb 5-1: config 0 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 1024 [ 225.208536][ T34] usb 5-1: New USB device found, idVendor=05ac, idProduct=8215, bcdDevice=8f.58 [ 225.212095][ T34] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 225.222254][ T2517] pvrusb2: Invalid write control endpoint [ 225.222674][ T34] usb 5-1: config 0 descriptor?? [ 225.224664][ T2517] pvrusb2: ***WARNING*** Detected a wedged cx25840 chip; the device will not work. [ 225.230805][T10731] raw-gadget.2 gadget.0: fail, usb_ep_enable returned -22 [ 225.231634][ T2517] pvrusb2: ***WARNING*** Try power cycling the pvrusb2 device. [ 225.243972][ T2517] pvrusb2: ***WARNING*** Disabling further access to the device to prevent other foul-ups. [ 225.249114][ T2517] pvrusb2: Device being rendered inoperable [ 225.251559][ T2517] cx25840 2-0044: Unable to detect h/w, assuming cx23887 [ 225.254287][ T2517] cx25840 2-0044: cx23887 A/V decoder found @ 0x88 (pvrusb2_b) [ 225.265104][ T2517] pvrusb2: Attached sub-driver cx25840 [ 225.267412][ T2517] pvrusb2: ***WARNING*** pvrusb2 device hardware appears to be jammed and I can't clear it. [ 225.271424][ T2517] pvrusb2: You might need to power cycle the pvrusb2 device in order to recover. [ 225.386009][T10727] pvrusb2: Attempted to execute control transfer when device not ok [ 225.391071][ T24] usb 9-1: USB disconnect, device number 12 [ 225.441837][ T5760] Bluetooth: hci4: unexpected event 0x12 length: 1 < 8 [ 225.446494][ T5760] Bluetooth: hci4: Malformed Event: 0x02 [ 225.448558][ T5760] Bluetooth: hci4: unexpected event 0x04 length: 15 > 10 [ 225.448735][ T5760] Bluetooth: hci4: connection err: -111 [ 225.646108][ T5104] Bluetooth: hci4: Opcode 0x0c03 failed: -71 [ 225.650053][ T61] usb 5-1: USB disconnect, device number 59 [ 226.163669][ T10] usb 9-1: new high-speed USB device number 13 using dummy_hcd [ 226.333677][ T10] usb 9-1: Using ep0 maxpacket: 8 [ 226.338510][ T10] usb 9-1: unable to get BOS descriptor or descriptor too short [ 226.346285][ T10] usb 9-1: config 1 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 16 [ 226.351645][ T10] usb 9-1: New USB device found, idVendor=249c, idProduct=9006, bcdDevice= 0.40 [ 226.361383][ T10] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 226.364904][ T10] usb 9-1: Product: syz [ 226.366809][ T10] usb 9-1: Manufacturer: syz [ 226.373073][ T10] usb 9-1: SerialNumber: syz [ 226.377103][T10734] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 226.413766][ T5854] usb 5-1: new high-speed USB device number 60 using dummy_hcd [ 226.563679][ T5854] usb 5-1: Using ep0 maxpacket: 16 [ 226.567849][ T5854] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 226.572322][ T5854] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 226.575488][ T5854] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 226.579574][ T5854] usb 5-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 226.583090][ T5854] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 226.584739][T10734] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 226.587928][ T5854] usb 5-1: config 0 descriptor?? [ 226.589721][T10734] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 226.600089][ T10] usb 9-1: Quirk or no altset; falling back to MIDI 1.0 [ 226.602340][ T10] usb 9-1: MIDIStreaming interface descriptor not found [ 226.625207][ T10] usb 9-1: USB disconnect, device number 13 [ 226.646573][ T5759] udevd[5759]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb9/9-1/9-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 226.998824][ T5854] microsoft 0003:045E:07DA.0012: unknown main item tag 0x0 [ 227.001235][ T5854] microsoft 0003:045E:07DA.0012: ignoring exceeding usage max [ 227.014000][ T5854] input: HID 045e:07da as /devices/platform/dummy_hcd.0/usb5/5-1/5-1:0.0/0003:045E:07DA.0012/input/input25 [ 227.094045][ T5854] microsoft 0003:045E:07DA.0012: input,hidraw1: USB HID v0.00 Device [HID 045e:07da] on usb-dummy_hcd.0-1/input0 [ 227.113824][ T10] usb 9-1: new high-speed USB device number 14 using dummy_hcd [ 227.200047][T10736] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 227.204085][T10736] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 227.210335][ T61] usb 5-1: USB disconnect, device number 60 [ 227.273960][ T10] usb 9-1: Using ep0 maxpacket: 16 [ 227.279976][ T10] usb 9-1: unable to get BOS descriptor or descriptor too short [ 227.284608][ T10] usb 9-1: config 159 has an invalid interface number: 195 but max is 0 [ 227.287868][ T10] usb 9-1: config 159 has no interface number 0 [ 227.289852][ T10] usb 9-1: config 159 interface 195 altsetting 5 bulk endpoint 0x1 has invalid maxpacket 16 [ 227.293002][ T10] usb 9-1: config 159 interface 195 has no altsetting 0 [ 227.298455][ T10] usb 9-1: New USB device found, idVendor=17e9, idProduct=b889, bcdDevice=ec.5c [ 227.302267][ T10] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 227.305932][ T10] usb 9-1: Product: syz [ 227.307805][ T10] usb 9-1: Manufacturer: syz [ 227.309947][ T10] usb 9-1: SerialNumber: syz [ 227.322760][T10734] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 227.948755][ T10] udl 9-1:159.195: [drm] Unrecognized vendor firmware descriptor [ 227.964959][ T10] [drm] Initialized udl 0.0.1 for 9-1:159.195 on minor 3 [ 227.967716][ T10] [drm] Initialized udl on minor 3 [ 227.983659][ T61] usb 5-1: new high-speed USB device number 61 using dummy_hcd [ 228.143764][ T61] usb 5-1: Using ep0 maxpacket: 16 [ 228.147367][ T61] usb 5-1: config 7 has an invalid descriptor of length 0, skipping remainder of the config [ 228.150629][ T61] usb 5-1: config 7 interface 0 altsetting 5 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 228.154850][ T10] udl 9-1:159.195: [drm] *ERROR* Read EDID byte 0 failed err ffffffb9 [ 228.155111][ T61] usb 5-1: config 7 interface 0 altsetting 5 endpoint 0x81 has invalid wMaxPacketSize 0 [ 228.163403][ T61] usb 5-1: config 7 interface 0 altsetting 5 has 1 endpoint descriptor, different from the interface descriptor's value: 5 [ 228.165756][ T10] udl 9-1:159.195: [drm] Cannot find any crtc or sizes [ 228.167474][ T61] usb 5-1: config 7 interface 0 has no altsetting 0 [ 228.167509][ T61] usb 5-1: New USB device found, idVendor=0458, idProduct=5010, bcdDevice= 0.00 [ 228.167529][ T61] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 228.186145][ T10] usb 9-1: USB disconnect, device number 14 [ 228.190265][ T5832] udl 9-1:159.195: [drm] *ERROR* Read EDID byte 0 failed err ffffffb9 [ 228.195703][ T5832] udl 9-1:159.195: [drm] Cannot find any crtc or sizes [ 228.586829][ T61] input: HID 0458:5010 as /devices/platform/dummy_hcd.0/usb5/5-1/5-1:7.0/0003:0458:5010.0013/input/input26 [ 228.681025][ T61] kye 0003:0458:5010.0013: input,hiddev0,hidraw1: USB HID v2.00 Device [HID 0458:5010] on usb-dummy_hcd.0-1/input0 [ 228.840629][ T34] usb 5-1: USB disconnect, device number 61 [ 228.934375][ T5854] usb 9-1: new high-speed USB device number 15 using dummy_hcd [ 229.095392][ T5854] usb 9-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 229.098347][ T5854] usb 9-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config [ 229.101524][ T5854] usb 9-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 229.104753][ T5854] usb 9-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 52, changing to 9 [ 229.108725][ T5854] usb 9-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8241, setting to 1024 [ 229.113976][ T5854] usb 9-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 229.117335][ T5854] usb 9-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 229.120535][ T5854] usb 9-1: Product: syz [ 229.122076][ T5854] usb 9-1: Manufacturer: syz [ 229.127362][ T5854] cdc_wdm 9-1:1.0: skipping garbage [ 229.129057][ T5854] cdc_wdm 9-1:1.0: skipping garbage [ 229.132459][ T5854] cdc_wdm 9-1:1.0: cdc-wdm0: USB WDM device [ 229.134568][ T5854] cdc_wdm 9-1:1.0: Unknown control protocol [ 229.335462][T10746] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 229.339753][T10746] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 229.343969][T10746] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 229.348367][T10746] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 229.609096][ C0] cdc_wdm 9-1:1.0: Unexpected error -71 [ 229.612516][ C0] cdc_wdm 9-1:1.0: nonzero urb status received: -71 [ 229.614744][ C0] cdc_wdm 9-1:1.0: wdm_int_callback - 0 bytes [ 229.617815][ C0] cdc_wdm 9-1:1.0: nonzero urb status received: -71 [ 229.619891][ C0] cdc_wdm 9-1:1.0: wdm_int_callback - 0 bytes [ 229.622011][ C0] cdc_wdm 9-1:1.0: nonzero urb status received: -71 [ 229.624109][ C0] cdc_wdm 9-1:1.0: wdm_int_callback - 0 bytes [ 229.626199][ C0] cdc_wdm 9-1:1.0: nonzero urb status received: -71 [ 229.628255][ C0] cdc_wdm 9-1:1.0: wdm_int_callback - 0 bytes [ 229.630231][ T10] usb 5-1: new high-speed USB device number 62 using dummy_hcd [ 229.632646][ C0] cdc_wdm 9-1:1.0: nonzero urb status received: -71 [ 229.632657][ C0] cdc_wdm 9-1:1.0: wdm_int_callback - 0 bytes [ 229.633897][ T24] usb 9-1: USB disconnect, device number 15 [ 229.634839][ C0] cdc_wdm 9-1:1.0: nonzero urb status received: -71 [ 229.640450][ C0] cdc_wdm 9-1:1.0: wdm_int_callback - 0 bytes [ 229.642265][ C0] cdc_wdm 9-1:1.0: wdm_int_callback - usb_submit_urb failed with result -19 [ 229.793833][ T10] usb 5-1: Using ep0 maxpacket: 8 [ 229.799585][ T10] usb 5-1: config index 0 descriptor too short (expected 301, got 45) [ 229.802302][ T10] usb 5-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 229.805384][ T10] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 229.808405][ T10] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 229.811456][ T10] usb 5-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 229.815737][ T10] usb 5-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 229.819020][ T10] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 230.027364][ T10] usb 5-1: usb_control_msg returned -32 [ 230.029202][ T10] usbtmc 5-1:16.0: can't read capabilities [ 230.233849][ T34] usb 5-1: USB disconnect, device number 62 [ 230.603777][ T24] usb 9-1: new high-speed USB device number 16 using dummy_hcd [ 230.754316][ T24] usb 9-1: Using ep0 maxpacket: 8 [ 230.759366][ T24] usb 9-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 230.762825][ T24] usb 9-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 230.765938][ T24] usb 9-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 100, changing to 10 [ 230.769611][ T24] usb 9-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 24936, setting to 1024 [ 230.773085][ T24] usb 9-1: New USB device found, idVendor=0225, idProduct=0000, bcdDevice= 0.00 [ 230.776256][ T24] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 230.783064][ T24] hub 9-1:1.0: bad descriptor, ignoring hub [ 230.785813][ T24] hub 9-1:1.0: probe with driver hub failed with error -5 [ 230.788799][ T24] cdc_wdm 9-1:1.0: skipping garbage [ 230.790453][ T24] cdc_wdm 9-1:1.0: skipping garbage [ 230.792780][ T24] cdc_wdm 9-1:1.0: cdc-wdm0: USB WDM device [ 230.795059][ T24] cdc_wdm 9-1:1.0: Unknown control protocol [ 231.289404][T10760] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 231.293714][T10760] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 231.423696][ T24] usb 5-1: new high-speed USB device number 63 using dummy_hcd [ 231.435364][ C0] cdc_wdm 9-1:1.0: nonzero urb status received: -71 [ 231.435827][ T5854] usb 9-1: USB disconnect, device number 16 [ 231.437352][ C0] cdc_wdm 9-1:1.0: wdm_int_callback - 0 bytes [ 231.441690][ C0] cdc_wdm 9-1:1.0: wdm_int_callback - usb_submit_urb failed with result -19 [ 231.603691][ T24] usb 5-1: Using ep0 maxpacket: 16 [ 231.607592][ T24] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 231.611955][ T24] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 231.616742][ T24] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x2 has an invalid bInterval 0, changing to 7 [ 231.621167][ T24] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 231.625228][ T24] usb 5-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 231.630635][ T24] usb 5-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 231.634514][ T24] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 231.640657][ T24] usb 5-1: config 0 descriptor?? [ 231.703705][ T24] rc_core: IR keymap rc-hauppauge not found [ 231.705751][ T24] Registered IR keymap rc-empty [ 231.707754][ T24] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 231.723797][ T24] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 231.746659][ T24] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.0/usb5/5-1/5-1:0.0/rc/rc0 [ 231.751564][ T24] input: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.0/usb5/5-1/5-1:0.0/rc/rc0/input27 [ 231.758607][ T24] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 231.784969][ T24] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 231.813740][ T24] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 231.843834][ T24] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 231.863736][ T24] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 231.883767][ T24] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 231.903727][ T24] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 231.923711][ T24] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 231.943683][ T24] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 231.963690][ T24] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 231.987481][ T24] mceusb 5-1:0.0: Registered with mce emulator interface version 1 [ 231.992553][ T24] mceusb 5-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active) [ 232.261962][T10759] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 232.266276][T10759] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 232.270675][T10759] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 232.275288][T10759] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 232.481669][ T24] usb 5-1: USB disconnect, device number 63 [ 233.025112][T10774] netlink: 'syz.0.2117': attribute type 21 has an invalid length. [ 233.027633][T10774] netlink: 'syz.0.2117': attribute type 6 has an invalid length. [ 233.030225][T10774] netlink: 132 bytes leftover after parsing attributes in process `syz.0.2117'. [ 233.373694][ T5832] usb 9-1: new high-speed USB device number 17 using dummy_hcd [ 233.403685][ T5841] usb 5-1: new high-speed USB device number 64 using dummy_hcd [ 233.533669][ T5832] usb 9-1: Using ep0 maxpacket: 32 [ 233.538895][ T5832] usb 9-1: config 0 interface 0 altsetting 0 bulk endpoint 0x85 has invalid maxpacket 1024 [ 233.546030][ T5832] usb 9-1: New USB device found, idVendor=12d8, idProduct=0001, bcdDevice=de.79 [ 233.549797][ T5832] usb 9-1: New USB device strings: Mfr=1, Product=236, SerialNumber=2 [ 233.553078][ T5832] usb 9-1: Product: syz [ 233.554929][ T5832] usb 9-1: Manufacturer: syz [ 233.556824][ T5832] usb 9-1: SerialNumber: syz [ 233.560825][ T5832] usb 9-1: config 0 descriptor?? [ 233.565595][ T5841] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a7, bcdDevice= 1.00 [ 233.567137][T10782] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 233.568622][ T5841] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 233.572730][ T5832] hub 9-1:0.0: bad descriptor, ignoring hub [ 233.576463][ T5832] hub 9-1:0.0: probe with driver hub failed with error -5 [ 233.767679][T10787] netlink: 60 bytes leftover after parsing attributes in process `syz.2.2123'. [ 233.776453][T10787] netlink: 60 bytes leftover after parsing attributes in process `syz.2.2123'. [ 233.780992][T10787] netlink: 60 bytes leftover after parsing attributes in process `syz.2.2123'. [ 233.783068][ T5841] cdc_acm 5-1:1.0: ttyACM0: USB ACM device [ 233.898233][T10794] netlink: 'syz.2.2126': attribute type 29 has an invalid length. [ 234.247257][T10782] usb 9-1: reset high-speed USB device number 17 using dummy_hcd [ 234.419772][T10782] usb 9-1: device firmware changed [ 234.428074][ T5832] usb 9-1: USB disconnect, device number 17 [ 234.573657][ T5832] usb 9-1: new high-speed USB device number 18 using dummy_hcd [ 234.733660][ T5832] usb 9-1: Using ep0 maxpacket: 32 [ 234.736731][ T5832] usb 9-1: config 0 interface 0 altsetting 0 bulk endpoint 0x85 has invalid maxpacket 1024 [ 234.742209][ T5832] usb 9-1: string descriptor 0 read error: -22 [ 234.744448][ T5832] usb 9-1: New USB device found, idVendor=12d8, idProduct=0001, bcdDevice=de.79 [ 234.747408][ T5832] usb 9-1: New USB device strings: Mfr=1, Product=236, SerialNumber=2 [ 234.752215][ T5832] usb 9-1: config 0 descriptor?? [ 234.755063][T10792] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 234.758563][ T5832] hub 9-1:0.0: bad descriptor, ignoring hub [ 234.760527][ T5832] hub 9-1:0.0: probe with driver hub failed with error -5 [ 235.074684][ T5832] usb 9-1: USB disconnect, device number 18 [ 235.651180][ T5760] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 235.658444][ T5760] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 235.662273][ T5760] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 235.665528][ T5760] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 235.671932][ T5760] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 236.054279][T10815] bridge0: port 1(bridge_slave_0) entered blocking state [ 236.056650][T10815] bridge0: port 1(bridge_slave_0) entered disabled state [ 236.058953][T10815] bridge_slave_0: entered allmulticast mode [ 236.061977][T10815] bridge_slave_0: entered promiscuous mode [ 236.066413][T10815] bridge0: port 2(bridge_slave_1) entered blocking state [ 236.069295][T10815] bridge0: port 2(bridge_slave_1) entered disabled state [ 236.072474][T10815] bridge_slave_1: entered allmulticast mode [ 236.076468][T10815] bridge_slave_1: entered promiscuous mode [ 236.099915][T10815] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 236.105306][T10815] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 236.133411][T10815] team0: Port device team_slave_0 added [ 236.137380][T10815] team0: Port device team_slave_1 added [ 236.153115][ T61] usb 5-1: USB disconnect, device number 64 [ 236.155591][T10815] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 236.157851][T10815] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 236.167465][T10815] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 236.172413][T10815] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 236.175705][T10815] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 236.184082][T10815] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 236.211179][T10815] hsr_slave_0: entered promiscuous mode [ 236.214625][T10815] hsr_slave_1: entered promiscuous mode [ 236.217592][T10815] debugfs: 'hsr0' already exists in 'hsr' [ 236.219884][T10815] Cannot create hsr debugfs directory [ 236.328319][T10815] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 236.429298][T10815] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 236.536799][T10815] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 236.619819][T10815] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 236.772420][T10815] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 236.776906][T10815] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 236.780262][T10815] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 236.786823][T10815] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 236.796787][T10815] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 236.800983][T10815] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 236.804512][T10815] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 236.809262][T10815] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 236.825901][T10815] bridge0: port 2(bridge_slave_1) entered blocking state [ 236.828208][T10815] bridge0: port 2(bridge_slave_1) entered forwarding state [ 236.830565][T10815] bridge0: port 1(bridge_slave_0) entered blocking state [ 236.832730][T10815] bridge0: port 1(bridge_slave_0) entered forwarding state [ 236.838875][ T1172] bridge0: port 1(bridge_slave_0) entered disabled state [ 236.841595][ T1172] bridge0: port 2(bridge_slave_1) entered disabled state [ 236.876292][T10815] 8021q: adding VLAN 0 to HW filter on device bond0 [ 236.887484][T10815] 8021q: adding VLAN 0 to HW filter on device team0 [ 236.894656][ T501] bridge0: port 1(bridge_slave_0) entered blocking state [ 236.897161][ T501] bridge0: port 1(bridge_slave_0) entered forwarding state [ 236.903689][ T501] bridge0: port 2(bridge_slave_1) entered blocking state [ 236.906033][ T501] bridge0: port 2(bridge_slave_1) entered forwarding state [ 236.925791][ T5841] usb 5-1: new high-speed USB device number 65 using dummy_hcd [ 237.053755][ T61] usb 9-1: new high-speed USB device number 19 using dummy_hcd [ 237.075137][ T5841] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 237.078369][ T5841] usb 5-1: config 1 has 0 interfaces, different from the descriptor's value: 1 [ 237.081170][ T5841] usb 5-1: New USB device found, idVendor=1ba6, idProduct=0001, bcdDevice= 0.01 [ 237.084552][ T5841] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 237.174574][T10815] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 237.204757][T10815] veth0_vlan: entered promiscuous mode [ 237.207403][ T61] usb 9-1: New USB device found, idVendor=0525, idProduct=a4a7, bcdDevice= 1.00 [ 237.214770][ T61] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 237.217794][T10815] veth1_vlan: entered promiscuous mode [ 237.239563][T10815] veth0_macvtap: entered promiscuous mode [ 237.244586][T10815] veth1_macvtap: entered promiscuous mode [ 237.254616][T10815] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 237.262428][T10815] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 237.308170][ T5797] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 237.323527][ T5797] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 237.335910][ T5797] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 237.353662][ T1172] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 237.359411][ T1172] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 237.377351][ T1164] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 237.380677][ T1164] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 237.384235][ T5797] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 237.438209][ T61] cdc_acm 9-1:1.0: ttyACM0: USB ACM device [ 237.724265][ T5104] Bluetooth: hci4: command tx timeout [ 238.403157][T10913] Freezing with imperfect legacy cgroup freezer. See cgroup.freeze of cgroup v2 [ 239.772483][ T5854] usb 5-1: USB disconnect, device number 65 [ 239.806442][ T5104] Bluetooth: hci4: command tx timeout [ 239.811562][ T847] usb 9-1: USB disconnect, device number 19 [ 240.474121][ T5854] usb 5-1: new high-speed USB device number 66 using dummy_hcd [ 240.629780][ T5854] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 240.648357][ T5854] usb 5-1: config 1 has 0 interfaces, different from the descriptor's value: 1 [ 240.658151][ T5854] usb 5-1: New USB device found, idVendor=1ba6, idProduct=0001, bcdDevice= 0.01 [ 240.666507][ T5854] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 241.400612][ T41] audit: type=1326 audit(1785807305.080:20): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10966 comm="syz.2.2185" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf6fdefec code=0x7ffc0000 [ 241.413163][ T41] audit: type=1326 audit(1785807305.090:21): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10966 comm="syz.2.2185" exe="/syz-executor" sig=0 arch=40000003 syscall=55 compat=1 ip=0xf6fdefec code=0x7ffc0000 [ 241.423989][ T41] audit: type=1326 audit(1785807305.090:22): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10966 comm="syz.2.2185" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf6fdefec code=0x7ffc0000 [ 241.430786][ T41] audit: type=1326 audit(1785807305.090:23): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10966 comm="syz.2.2185" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf6fdefec code=0x7ffc0000 [ 241.437670][ T41] audit: type=1326 audit(1785807305.090:24): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10966 comm="syz.2.2185" exe="/syz-executor" sig=0 arch=40000003 syscall=3 compat=1 ip=0xf6fdefec code=0x7ffc0000 [ 241.444562][ T41] audit: type=1326 audit(1785807305.090:25): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10966 comm="syz.2.2185" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf6fdefec code=0x7ffc0000 [ 241.451446][ T41] audit: type=1326 audit(1785807305.090:26): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10966 comm="syz.2.2185" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf6fdefec code=0x7ffc0000 [ 241.458126][ T41] audit: type=1326 audit(1785807305.090:27): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10966 comm="syz.2.2185" exe="/syz-executor" sig=0 arch=40000003 syscall=54 compat=1 ip=0xf6fdefec code=0x7ffc0000 [ 241.465943][ T41] audit: type=1326 audit(1785807305.090:28): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10966 comm="syz.2.2185" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf6fdefec code=0x7ffc0000 [ 241.478351][ T41] audit: type=1326 audit(1785807305.090:29): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10966 comm="syz.2.2185" exe="/syz-executor" sig=0 arch=40000003 syscall=54 compat=1 ip=0xf6fdefec code=0x7ffc0000 [ 241.736868][T10977] process 'syz.4.2186' launched './file2' with NULL argv: empty string added [ 241.886075][ T5104] Bluetooth: hci4: command tx timeout [ 243.411852][T11003] netlink: 32 bytes leftover after parsing attributes in process `syz.4.2196'. [ 243.417479][T11003] netlink: 'syz.4.2196': attribute type 13 has an invalid length. [ 243.653215][ T1043] usb 5-1: USB disconnect, device number 66 [ 243.753785][ T10] usb 9-1: new high-speed USB device number 20 using dummy_hcd [ 243.905461][ T10] usb 9-1: config 0 interface 0 altsetting 255 bulk endpoint 0x4 has invalid maxpacket 61 [ 243.909534][ T10] usb 9-1: config 0 interface 0 has no altsetting 0 [ 243.914674][ T10] usb 9-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 243.918440][ T10] usb 9-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 243.921738][ T10] usb 9-1: Product: syz [ 243.923466][ T10] usb 9-1: Manufacturer: syz [ 243.925657][ T10] usb 9-1: SerialNumber: syz [ 243.930628][ T10] usb 9-1: config 0 descriptor?? [ 243.933448][T11005] raw-gadget.3 gadget.4: fail, usb_ep_enable returned -22 [ 243.941071][ T10] usb 9-1: selecting invalid altsetting 0 [ 243.956057][ T5104] Bluetooth: hci4: command tx timeout [ 244.063976][ T1043] usb 5-1: new high-speed USB device number 67 using dummy_hcd [ 244.147646][ T5854] usb 9-1: USB disconnect, device number 20 [ 244.215307][ T1043] usb 5-1: Using ep0 maxpacket: 32 [ 244.219311][ T1043] usb 5-1: config 0 interface 0 altsetting 0 bulk endpoint 0x85 has invalid maxpacket 1024 [ 244.226473][ T1043] usb 5-1: New USB device found, idVendor=12d8, idProduct=0001, bcdDevice=de.79 [ 244.230209][ T1043] usb 5-1: New USB device strings: Mfr=1, Product=236, SerialNumber=2 [ 244.232781][ T1043] usb 5-1: Product: syz [ 244.234754][ T1043] usb 5-1: Manufacturer: syz [ 244.236347][ T1043] usb 5-1: SerialNumber: syz [ 244.240789][ T1043] usb 5-1: config 0 descriptor?? [ 244.244877][T11011] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 244.248259][ T1043] hub 5-1:0.0: bad descriptor, ignoring hub [ 244.250596][ T1043] hub 5-1:0.0: probe with driver hub failed with error -5 [ 245.226798][ T1164] raw-gadget.0 gadget.0: failed to queue suspend event [ 245.293964][T11011] raw-gadget.0 gadget.0: failed to queue resume event [ 245.314675][ T501] raw-gadget.0 gadget.0: failed to queue suspend event [ 245.403796][T11011] raw-gadget.0 gadget.0: failed to queue resume event [ 245.435605][ T1164] raw-gadget.0 gadget.0: failed to queue suspend event [ 245.513708][T11011] raw-gadget.0 gadget.0: failed to queue resume event [ 245.534827][ T501] raw-gadget.0 gadget.0: failed to queue suspend event [ 245.604016][T11011] raw-gadget.0 gadget.0: failed to queue resume event [ 245.635783][ T501] raw-gadget.0 gadget.0: failed to queue suspend event [ 245.703791][T11011] raw-gadget.0 gadget.0: failed to queue resume event [ 245.724622][ T501] raw-gadget.0 gadget.0: failed to queue suspend event [ 245.795303][T11011] raw-gadget.0 gadget.0: failed to queue resume event [ 245.814933][ T501] raw-gadget.0 gadget.0: failed to queue suspend event [ 245.883965][T11011] raw-gadget.0 gadget.0: failed to queue resume event [ 245.914859][ T501] raw-gadget.0 gadget.0: failed to queue suspend event [ 245.983848][T11011] raw-gadget.0 gadget.0: failed to queue resume event [ 246.011787][ T501] raw-gadget.0 gadget.0: failed to queue suspend event [ 246.103685][T11011] raw-gadget.0 gadget.0: failed to queue resume event [ 246.128729][ T60] raw-gadget.0 gadget.0: failed to queue suspend event [ 246.194439][T11011] raw-gadget.0 gadget.0: failed to queue resume event [ 246.215128][ T1172] raw-gadget.0 gadget.0: failed to queue suspend event [ 246.293822][T11011] raw-gadget.0 gadget.0: failed to queue resume event [ 246.314883][ T501] raw-gadget.0 gadget.0: failed to queue suspend event [ 246.383810][T11011] raw-gadget.0 gadget.0: failed to queue resume event [ 246.409045][ T1164] raw-gadget.0 gadget.0: failed to queue suspend event [ 246.474033][T11011] raw-gadget.0 gadget.0: failed to queue resume event [ 246.504454][ T60] raw-gadget.0 gadget.0: failed to queue suspend event [ 246.573797][T11011] raw-gadget.0 gadget.0: failed to queue resume event [ 246.603126][ T60] raw-gadget.0 gadget.0: failed to queue suspend event [ 246.674156][T11011] raw-gadget.0 gadget.0: failed to queue resume event [ 246.694713][ T1164] raw-gadget.0 gadget.0: failed to queue suspend event [ 246.763810][T11011] raw-gadget.0 gadget.0: failed to queue resume event [ 246.794804][ T1164] raw-gadget.0 gadget.0: failed to queue suspend event [ 246.803896][T11011] raw-gadget.0 gadget.0: failed to queue disconnect event [ 246.814869][ T847] usb 5-1: USB disconnect, device number 67 [ 247.193721][ T847] usb 5-1: new high-speed USB device number 68 using dummy_hcd [ 247.376694][ T847] usb 5-1: Using ep0 maxpacket: 8 [ 247.380807][ T847] usb 5-1: config index 0 descriptor too short (expected 301, got 45) [ 247.383519][ T847] usb 5-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 247.386579][ T847] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 247.390812][ T847] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 247.395244][ T847] usb 5-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 247.400464][ T847] usb 5-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 247.405778][ T847] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 247.514388][T11052] Invalid logical block size (8) [ 247.618605][ T847] usb 5-1: usb_control_msg returned -32 [ 247.621304][ T847] usbtmc 5-1:16.0: can't read capabilities [ 247.964312][ T6897] usb 9-1: new high-speed USB device number 21 using dummy_hcd [ 248.113658][ T6897] usb 9-1: Using ep0 maxpacket: 32 [ 248.117279][ T6897] usb 9-1: config 0 interface 0 altsetting 0 bulk endpoint 0x85 has invalid maxpacket 1024 [ 248.122360][ T6897] usb 9-1: New USB device found, idVendor=12d8, idProduct=0001, bcdDevice=de.79 [ 248.125211][ T6897] usb 9-1: New USB device strings: Mfr=1, Product=236, SerialNumber=2 [ 248.127679][ T6897] usb 9-1: Product: syz [ 248.129041][ T6897] usb 9-1: Manufacturer: syz [ 248.130537][ T6897] usb 9-1: SerialNumber: syz [ 248.133279][ T6897] usb 9-1: config 0 descriptor?? [ 248.135394][T11060] raw-gadget.3 gadget.4: fail, usb_ep_enable returned -22 [ 248.138680][ T6897] hub 9-1:0.0: bad descriptor, ignoring hub [ 248.140508][ T6897] hub 9-1:0.0: probe with driver hub failed with error -5 [ 248.343809][T11060] usbtmc 5-1:16.0: send_request_dev_dep_msg_in returned -90 [ 248.455327][ T6897] usb 9-1: USB disconnect, device number 21 [ 249.886211][ T6897] usb 5-1: USB disconnect, device number 68 [ 250.830622][T11088] futex_wake_op: syz.3.2233 tries to shift op by 144; fix this program [ 250.844383][ T10] usb 9-1: new high-speed USB device number 22 using dummy_hcd [ 250.997723][ T10] usb 9-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 251.001921][ T10] usb 9-1: config 1 has 0 interfaces, different from the descriptor's value: 1 [ 251.005616][ T10] usb 9-1: New USB device found, idVendor=1ba6, idProduct=0001, bcdDevice= 0.01 [ 251.008579][ T10] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 253.275522][T11133] usb usb8: usbfs: process 11133 (syz.0.2247) did not claim interface 0 before use [ 253.600581][T11146] overlayfs: failed to clone lowerpath [ 253.613109][T11146] overlayfs: failed to clone lowerpath [ 253.615230][ T5854] usb 5-1: new high-speed USB device number 69 using dummy_hcd [ 253.672179][ T10] usb 9-1: USB disconnect, device number 22 [ 253.763688][ T5854] usb 5-1: Using ep0 maxpacket: 32 [ 253.766963][ T5854] usb 5-1: unable to get BOS descriptor or descriptor too short [ 253.771108][ T5854] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 253.776852][ T5854] usb 5-1: New USB device found, idVendor=0499, idProduct=1054, bcdDevice= 0.40 [ 253.779731][ T5854] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 253.782553][ T5854] usb 5-1: Product: syz [ 253.784047][ T5854] usb 5-1: Manufacturer: syz [ 253.786504][ T5854] usb 5-1: SerialNumber: syz [ 253.986616][T11162] netlink: 28 bytes leftover after parsing attributes in process `syz.4.2260'. [ 254.001125][ T5854] usb 5-1: 1:1 : unsupported format bits 0x2004 [ 254.003877][ T5854] usb 5-1: parse_audio_format_rates_v2v3(): unable to find clock source (clock -22) [ 254.009547][ T5854] usb 5-1: unit 37 not found! [ 254.011703][ T5854] usb 5-1: unit 0 not found! [ 254.021574][ T5854] usb 5-1: Quirk or no altset; falling back to MIDI 1.0 [ 254.029706][ T5854] usb 5-1: MIDIStreaming interface descriptor not found [ 254.104147][ T5854] usb 5-1: USB disconnect, device number 69 [ 254.186469][T11170] udevd[11170]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb5/5-1/5-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 254.241779][ T41] kauditd_printk_skb: 5 callbacks suppressed [ 254.241791][ T41] audit: type=1326 audit(1785807317.920:35): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11172 comm="syz.3.2263" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf6fdefec code=0x7ffc0000 [ 254.251255][ T41] audit: type=1326 audit(1785807317.920:36): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11172 comm="syz.3.2263" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf6fdefec code=0x7ffc0000 [ 254.262024][ T41] audit: type=1326 audit(1785807317.930:37): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11172 comm="syz.3.2263" exe="/syz-executor" sig=0 arch=40000003 syscall=171 compat=1 ip=0xf6fdefec code=0x7ffc0000 [ 254.273323][ T41] audit: type=1326 audit(1785807317.930:38): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11172 comm="syz.3.2263" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf6fdefec code=0x7ffc0000 [ 254.280324][ T41] audit: type=1326 audit(1785807317.930:39): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11172 comm="syz.3.2263" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf6fdefec code=0x7ffc0000 [ 254.287679][ T41] audit: type=1326 audit(1785807317.940:40): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11172 comm="syz.3.2263" exe="/syz-executor" sig=0 arch=40000003 syscall=359 compat=1 ip=0xf6fdefec code=0x7ffc0000 [ 254.293987][ T41] audit: type=1326 audit(1785807317.940:41): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11172 comm="syz.3.2263" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf6fdefec code=0x7ffc0000 [ 254.301132][ T41] audit: type=1326 audit(1785807317.940:42): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11172 comm="syz.3.2263" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf6fdefec code=0x7ffc0000 [ 254.310844][ T41] audit: type=1326 audit(1785807317.940:43): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11172 comm="syz.3.2263" exe="/syz-executor" sig=0 arch=40000003 syscall=340 compat=1 ip=0xf6fdefec code=0x7ffc0000 [ 254.317799][ T41] audit: type=1326 audit(1785807317.940:44): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11172 comm="syz.3.2263" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf6fdefec code=0x7ffc0000 [ 255.474648][ T1441] ieee802154 phy0 wpan0: encryption failed: -22 [ 255.581915][T11199] NOTICE: Automounting of tracing to debugfs is deprecated and will be removed in 2030 [ 255.661064][T11204] bochs-drm 0000:00:01.0: vgaarb: VGA decodes changed: olddecodes=io+mem,decodes=io+mem:owns=io+mem [ 256.541233][T11242] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2291'. [ 257.388516][T11258] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2298'. [ 257.423973][T11258] macsec1: entered promiscuous mode [ 257.428087][T11258] dummy0: entered promiscuous mode [ 257.431284][T11258] macsec1: entered allmulticast mode [ 257.433080][T11258] dummy0: entered allmulticast mode [ 257.449195][T11258] dummy0: left allmulticast mode [ 257.471399][ T5854] dummy0: left promiscuous mode [ 257.732251][T11270] netlink: 304 bytes leftover after parsing attributes in process `syz.2.2303'. [ 257.736268][T11270] netlink: 304 bytes leftover after parsing attributes in process `syz.2.2303'. [ 258.251621][T11292] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 258.254919][T11292] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 258.295527][ T5824] netdevsim netdevsim2 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 258.305957][ T5824] netdevsim netdevsim2 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 258.314058][ T5824] netdevsim netdevsim2 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 258.323735][ T5824] netdevsim netdevsim2 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 258.364339][ T6897] usb 9-1: new high-speed USB device number 23 using dummy_hcd [ 258.535755][ T6897] usb 9-1: unable to get BOS descriptor or descriptor too short [ 258.539581][ T6897] usb 9-1: config 1 interface 2 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 258.547562][ T6897] usb 9-1: string descriptor 0 read error: -22 [ 258.549614][ T6897] usb 9-1: New USB device found, idVendor=200c, idProduct=100b, bcdDevice= 0.40 [ 258.554601][ T6897] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 259.168186][ T6897] usb 9-1: 1:1: cannot get freq at ep 0x1 [ 259.226177][ T6897] usb 9-1: USB disconnect, device number 23 [ 259.564025][T11341] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2332'. [ 259.916538][T11368] 9p: Bad value for 'rfdno' [ 260.473700][ T5832] usb 9-1: new high-speed USB device number 24 using dummy_hcd [ 260.627012][ T5832] usb 9-1: unable to get BOS descriptor or descriptor too short [ 260.631210][ T5832] usb 9-1: config 1 interface 2 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 260.639095][ T5832] usb 9-1: string descriptor 0 read error: -22 [ 260.642218][ T5832] usb 9-1: New USB device found, idVendor=200c, idProduct=100b, bcdDevice= 0.40 [ 260.646080][ T5832] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 261.260568][ T5832] usb 9-1: 1:1: cannot get freq at ep 0x1 [ 261.306201][ T5832] usb 9-1: USB disconnect, device number 24 [ 261.507512][T11391] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 261.509586][T11391] Bluetooth: hci2: Opcode 0x0406 failed: -4 [ 261.513939][T11391] Bluetooth: hci2: Opcode 0x0406 failed: -4 [ 261.516198][T11391] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 261.518087][T11391] Bluetooth: hci0: Opcode 0x0406 failed: -4 [ 261.520788][T11391] Bluetooth: hci0: Opcode 0x0406 failed: -4 [ 261.524193][T11391] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 261.526182][T11391] Bluetooth: hci4: Opcode 0x0406 failed: -4 [ 261.531472][T11391] Bluetooth: hci4: Opcode 0x0406 failed: -4 [ 261.587977][T11402] netlink: 28 bytes leftover after parsing attributes in process `syz.0.2356'. [ 262.023660][ T5841] usb 5-1: new high-speed USB device number 70 using dummy_hcd [ 262.173726][ T5841] usb 5-1: Using ep0 maxpacket: 16 [ 262.178047][ T5841] usb 5-1: too many endpoints for config 0 interface 0 altsetting 16: 254, using maximum allowed: 30 [ 262.181492][ T5841] usb 5-1: config 0 interface 0 altsetting 16 has 1 endpoint descriptor, different from the interface descriptor's value: 254 [ 262.185865][ T5841] usb 5-1: config 0 interface 0 has no altsetting 0 [ 262.188593][ T5841] usb 5-1: New USB device found, idVendor=07c0, idProduct=1125, bcdDevice= 0.00 [ 262.191467][ T5841] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 262.198466][ T5841] usb 5-1: config 0 descriptor?? [ 262.404706][ T5841] usb 5-1: language id specifier not provided by device, defaulting to English [ 262.612559][ T5841] usbhid 5-1:0.0: can't add hid device: -71 [ 262.614677][ T5841] usbhid 5-1:0.0: probe with driver usbhid failed with error -71 [ 262.620148][ T5841] usb 5-1: USB disconnect, device number 70 [ 262.754583][ T5104] Bluetooth: hci2: command 0x0406 tx timeout [ 262.761182][T11427] netlink: 48 bytes leftover after parsing attributes in process `syz.3.2367'. [ 263.023683][ T5841] usb 9-1: new high-speed USB device number 25 using dummy_hcd [ 263.186066][ T5841] usb 9-1: unable to get BOS descriptor or descriptor too short [ 263.190708][ T5841] usb 9-1: config 1 interface 2 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 263.202209][ T5841] usb 9-1: string descriptor 0 read error: -22 [ 263.205376][ T5841] usb 9-1: New USB device found, idVendor=200c, idProduct=100b, bcdDevice= 0.40 [ 263.209174][ T5841] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 263.358799][T11443] usb usb8: usbfs: process 11443 (syz.0.2374) did not claim interface 0 before use [ 263.553689][ T5104] Bluetooth: hci4: command 0x0c1a tx timeout [ 263.553757][ T5760] Bluetooth: hci0: command 0x0c1a tx timeout [ 263.823167][ T5841] usb 9-1: 1:1: cannot get freq at ep 0x1 [ 263.866812][T11460] vlan2: entered allmulticast mode [ 263.877637][T11460] veth0_vlan: entered allmulticast mode [ 263.886997][ T5841] usb 9-1: USB disconnect, device number 25 [ 264.012316][T11460] vlan2: left allmulticast mode [ 264.018852][T11460] veth0_vlan: left allmulticast mode [ 264.451154][T11476] bridge0: port 2(bridge_slave_1) entered disabled state [ 264.453864][T11476] bridge0: port 1(bridge_slave_0) entered disabled state [ 264.525022][T11476] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 264.531183][T11476] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 264.666446][ T5797] netdevsim netdevsim3 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 264.673749][ T5797] netdevsim netdevsim3 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 264.681405][ T5797] netdevsim netdevsim3 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 264.690421][ T5797] netdevsim netdevsim3 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 264.751117][T11507] fuse: fd is not a fuse device [ 264.756232][ T10] usb 5-1: new high-speed USB device number 71 using dummy_hcd [ 264.834733][ T5760] Bluetooth: hci2: command 0x0406 tx timeout [ 264.914664][ T10] usb 5-1: Using ep0 maxpacket: 8 [ 264.917884][ T10] usb 5-1: config 0 interface 0 altsetting 254 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 264.921347][ T10] usb 5-1: config 0 interface 0 altsetting 254 endpoint 0x81 has invalid wMaxPacketSize 0 [ 264.924752][ T10] usb 5-1: config 0 interface 0 has no altsetting 0 [ 264.927208][ T10] usb 5-1: New USB device found, idVendor=04d8, idProduct=00dd, bcdDevice= 0.00 [ 264.930053][ T10] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 264.934426][ T10] usb 5-1: config 0 descriptor?? [ 265.023658][ T5832] usb 9-1: new high-speed USB device number 26 using dummy_hcd [ 265.173728][ T5832] usb 9-1: Using ep0 maxpacket: 16 [ 265.177231][ T5832] usb 9-1: config 182 has an invalid interface number: 81 but max is 0 [ 265.179944][ T5832] usb 9-1: config 182 has no interface number 0 [ 265.182035][ T5832] usb 9-1: config 182 interface 81 has no altsetting 0 [ 265.186838][ T5832] usb 9-1: New USB device found, idVendor=0b49, idProduct=064f, bcdDevice=99.33 [ 265.189832][ T5832] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 265.192499][ T5832] usb 9-1: Product: syz [ 265.193951][ T5832] usb 9-1: Manufacturer: syz [ 265.195465][ T5832] usb 9-1: SerialNumber: syz [ 265.343415][ T10] mcp2221 0003:04D8:00DD.0014: unknown main item tag 0x0 [ 265.347656][ T10] mcp2221 0003:04D8:00DD.0014: unknown main item tag 0x0 [ 265.350282][ T10] mcp2221 0003:04D8:00DD.0014: unknown main item tag 0x0 [ 265.352596][ T10] mcp2221 0003:04D8:00DD.0014: unknown main item tag 0x0 [ 265.356205][ T10] mcp2221 0003:04D8:00DD.0014: unknown main item tag 0x0 [ 265.359032][ T10] mcp2221 0003:04D8:00DD.0014: USB HID vff.ff Device [HID 04d8:00dd] on usb-dummy_hcd.0-1/input0 [ 265.407044][ T5832] usb 9-1: USB disconnect, device number 26 [ 265.547358][ T10] usb 5-1: USB disconnect, device number 71 [ 265.634209][ T5104] Bluetooth: hci0: command 0x0c1a tx timeout [ 265.636215][ T5760] Bluetooth: hci4: command 0x0c1a tx timeout [ 265.965537][T11527] loop7: detected capacity change from 0 to 16384 [ 266.260089][T11537] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2414'. [ 266.268388][T11537] veth2: entered promiscuous mode [ 266.270014][T11537] veth2: entered allmulticast mode qemu-system-x86_64: ahci: PRDT length for NCQ command (0x0) is smaller than the requested size (0x19f000) [ 266.469604][T11546] netlink: 16 bytes leftover after parsing attributes in process `syz.3.2416'. [ 266.913776][ T5760] Bluetooth: hci2: command 0x0406 tx timeout [ 267.004691][ T1134] ata1.00: Read log 0x10 page 0x00 failed, Emask 0x1 [ 267.007018][ T1134] ata1: failed to read log page 10h (errno=-5) [ 267.009399][ T1134] ata1.00: exception Emask 0x1 SAct 0x8000200 SErr 0x0 action 0x0 [ 267.011964][ T1134] ata1.00: irq_stat 0x40000000 [ 267.013712][ T1134] ata1.00: failed command: WRITE FPDMA QUEUED [ 267.015731][ T1134] ata1.00: cmd 61/18:48:fe:0b:10/00:00:00:00:00/40 tag 9 ncq dma 12288 out [ 267.015731][ T1134] res 50/00:00:00:00:00/00:00:00:00:00/00 Emask 0x1 (device error) [ 267.021134][ T1134] ata1.00: status: { DRDY } [ 267.022700][ T1134] ata1.00: failed command: READ FPDMA QUEUED [ 267.024885][ T1134] ata1.00: cmd 60/f8:d8:b6:12:08/0c:00:00:00:00/40 tag 27 ncq dma 1699840 in [ 267.024885][ T1134] res 50/00:00:00:00:00/00:00:00:00:00/00 Emask 0x1 (device error) [ 267.030294][ T1134] ata1.00: status: { DRDY } [ 267.032581][ T1134] ata1.00: configured for UDMA/100 [ 267.037861][ T1134] sd 0:0:0:0: [sda] tag#27 FAILED Result: hostbyte=DID_OK driverbyte=DRIVER_OK cmd_age=0s [ 267.042279][ T1134] sd 0:0:0:0: [sda] tag#27 Sense Key : Aborted Command [current] [ 267.045671][ T1134] sd 0:0:0:0: [sda] tag#27 Add. Sense: No additional sense information [ 267.048976][ T1134] sd 0:0:0:0: [sda] tag#27 CDB: Read(10) 28 00 00 08 12 b6 00 0c f8 00 [ 267.052002][ T1134] I/O error, dev sda, sector 529078 op 0x0:(READ) flags 0x80700 phys_seg 29 prio class 2 [ 267.058039][ T1134] ata1: EH complete [ 267.231235][T11565] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2423'. [ 267.239450][T11565] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2423'. [ 267.724209][ T5760] Bluetooth: hci4: command 0x0c1a tx timeout [ 267.726205][ T5760] Bluetooth: hci0: command 0x0c1a tx timeout [ 268.012622][T11591] fuse: fd is not a fuse device [ 268.218460][ T41] kauditd_printk_skb: 85 callbacks suppressed [ 268.218473][ T41] audit: type=1326 audit(1785807331.900:130): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11603 comm="syz.2.2442" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf6fdefec code=0x7ffc0000 [ 268.231171][ T41] audit: type=1326 audit(1785807331.900:131): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11603 comm="syz.2.2442" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf6fdefec code=0x7ffc0000 [ 268.238965][ T41] audit: type=1326 audit(1785807331.910:132): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11603 comm="syz.2.2442" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf6fdefec code=0x7ffc0000 [ 268.247498][ T41] audit: type=1326 audit(1785807331.910:133): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11603 comm="syz.2.2442" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf6fdefec code=0x7ffc0000 [ 268.254420][ T41] audit: type=1326 audit(1785807331.910:134): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11603 comm="syz.2.2442" exe="/syz-executor" sig=0 arch=40000003 syscall=39 compat=1 ip=0xf6fdefec code=0x7ffc0000 [ 268.261046][ T41] audit: type=1326 audit(1785807331.910:135): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11603 comm="syz.2.2442" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf6fdefec code=0x7ffc0000 [ 268.268098][ T41] audit: type=1326 audit(1785807331.910:136): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11603 comm="syz.2.2442" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf6fdefec code=0x7ffc0000 [ 268.276361][ T41] audit: type=1326 audit(1785807331.910:137): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11603 comm="syz.2.2442" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf6fdefec code=0x7ffc0000 [ 268.282993][ T41] audit: type=1326 audit(1785807331.910:138): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11603 comm="syz.2.2442" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf6fdefec code=0x7ffc0000 [ 268.289841][ T41] audit: type=1326 audit(1785807331.910:139): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11603 comm="syz.2.2442" exe="/syz-executor" sig=0 arch=40000003 syscall=295 compat=1 ip=0xf6fdefec code=0x7ffc0000 [ 268.296585][ T5832] usb 5-1: new high-speed USB device number 72 using dummy_hcd [ 268.347629][T11604] : renamed from bond0 [ 268.445790][ T5832] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 268.449310][ T5832] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 268.452427][ T5832] usb 5-1: New USB device found, idVendor=0d8c, idProduct=0022, bcdDevice= 0.00 [ 268.455625][ T5832] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 268.459521][ T5832] usb 5-1: config 0 descriptor?? [ 268.853622][ T1043] usb 9-1: new high-speed USB device number 27 using dummy_hcd [ 269.003651][ T1043] usb 9-1: Using ep0 maxpacket: 8 [ 269.007244][ T1043] usb 9-1: config index 0 descriptor too short (expected 341, got 85) [ 269.010086][ T1043] usb 9-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 269.013352][ T1043] usb 9-1: config 1 interface 0 altsetting 128 has 0 endpoint descriptors, different from the interface descriptor's value: 2 [ 269.017646][ T1043] usb 9-1: config 1 interface 0 has no altsetting 0 [ 269.021870][ T1043] usb 9-1: New USB device found, idVendor=053c, idProduct=a4a1, bcdDevice= 0.40 [ 269.024808][ T1043] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 269.027328][ T1043] usb 9-1: Product: syz [ 269.028791][ T1043] usb 9-1: Manufacturer: syz [ 269.030309][ T1043] usb 9-1: SerialNumber: syz [ 269.071271][ T5832] cm6533_jd 0003:0D8C:0022.0015: unknown main item tag 0x0 [ 269.074549][ T5832] cm6533_jd 0003:0D8C:0022.0015: unknown main item tag 0x0 [ 269.076952][ T5832] cm6533_jd 0003:0D8C:0022.0015: unknown main item tag 0x0 [ 269.079329][ T5832] cm6533_jd 0003:0D8C:0022.0015: unknown main item tag 0x0 [ 269.081698][ T5832] cm6533_jd 0003:0D8C:0022.0015: unknown main item tag 0x0 [ 269.092979][ T5832] cm6533_jd 0003:0D8C:0022.0015: hiddev0,hidraw1: USB HID v0.00 Device [HID 0d8c:0022] on usb-dummy_hcd.0-1/input0 [ 269.325287][ T5747] usb 5-1: USB disconnect, device number 72 [ 269.653405][T11634] fuse: fd is not a fuse device [ 271.549487][ T1043] usb 9-1: No union descriptors [ 271.559565][ T1043] usb 9-1: USB disconnect, device number 27 [ 272.024996][ T24] usb 5-1: new high-speed USB device number 73 using dummy_hcd [ 272.056767][T11685] fuse: fd is not a fuse device [ 272.195477][ T24] usb 5-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 16 [ 272.200368][ T24] usb 5-1: config 0 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 64 [ 272.205800][ T24] usb 5-1: New USB device found, idVendor=0a46, idProduct=9621, bcdDevice=4f.32 [ 272.208778][ T24] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 272.211314][ T24] usb 5-1: Product: syz [ 272.212630][ T24] usb 5-1: Manufacturer: syz [ 272.215304][ T24] usb 5-1: SerialNumber: syz [ 272.218484][ T24] usb 5-1: config 0 descriptor?? [ 272.220652][T11679] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 272.223036][T11679] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 272.493269][ T24] dm9601 5-1:0.0: probe with driver dm9601 failed with error -71 [ 272.501220][ T24] usb 5-1: USB disconnect, device number 73 [ 273.284947][ T5747] usb 5-1: new high-speed USB device number 74 using dummy_hcd [ 273.443718][ T5747] usb 5-1: Using ep0 maxpacket: 32 [ 273.458532][ T5747] usb 5-1: config 0 interface 0 altsetting 0 bulk endpoint 0x85 has invalid maxpacket 1024 [ 273.464811][ T5747] usb 5-1: New USB device found, idVendor=12d8, idProduct=0001, bcdDevice=de.79 [ 273.468661][ T5747] usb 5-1: New USB device strings: Mfr=1, Product=236, SerialNumber=2 [ 273.471946][ T5747] usb 5-1: Product: syz [ 273.474449][ T5747] usb 5-1: Manufacturer: syz [ 273.476341][ T5747] usb 5-1: SerialNumber: syz [ 273.480582][ T5747] usb 5-1: config 0 descriptor?? [ 273.486345][T11704] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 273.490353][ T5747] hub 5-1:0.0: bad descriptor, ignoring hub [ 273.501838][ T5747] hub 5-1:0.0: probe with driver hub failed with error -5 [ 273.803850][ T1043] usb 5-1: USB disconnect, device number 74 [ 273.900684][T11730] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2496'. [ 273.947349][T11732] bond1: option lacp_active: mode dependency failed, not supported in mode balance-rr(0) [ 273.952851][T11732] bond1 (unregistering): Released all slaves [ 274.044631][ T24] usb 9-1: new high-speed USB device number 28 using dummy_hcd [ 274.143770][ T1043] usb 5-1: new high-speed USB device number 75 using dummy_hcd [ 274.225529][ T24] usb 9-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 16 [ 274.229176][ T24] usb 9-1: config 0 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 64 [ 274.235203][ T24] usb 9-1: New USB device found, idVendor=0a46, idProduct=9621, bcdDevice=4f.32 [ 274.239055][ T24] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 274.242349][ T24] usb 9-1: Product: syz [ 274.244289][ T24] usb 9-1: Manufacturer: syz [ 274.246191][ T24] usb 9-1: SerialNumber: syz [ 274.251061][ T24] usb 9-1: config 0 descriptor?? [ 274.254132][T11724] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 274.257332][T11724] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 274.293636][ T1043] usb 5-1: Using ep0 maxpacket: 32 [ 274.296789][ T1043] usb 5-1: config 0 interface 0 altsetting 0 bulk endpoint 0x85 has invalid maxpacket 1024 [ 274.304017][ T1043] usb 5-1: string descriptor 0 read error: -22 [ 274.306879][ T1043] usb 5-1: New USB device found, idVendor=12d8, idProduct=0001, bcdDevice=de.79 [ 274.309807][ T1043] usb 5-1: New USB device strings: Mfr=1, Product=236, SerialNumber=2 [ 274.314458][ T1043] usb 5-1: config 0 descriptor?? [ 274.317360][T11704] raw-gadget.2 gadget.0: fail, usb_ep_enable returned -22 [ 274.321703][ T1043] hub 5-1:0.0: bad descriptor, ignoring hub [ 274.326730][ T1043] hub 5-1:0.0: probe with driver hub failed with error -5 [ 274.552531][ T24] dm9601 9-1:0.0: probe with driver dm9601 failed with error -71 [ 274.561507][ T24] usb 9-1: USB disconnect, device number 28 [ 274.633840][ T5747] usb 5-1: USB disconnect, device number 75 [ 274.963511][T11738] netlink: 'syz.3.2499': attribute type 2 has an invalid length. [ 274.966291][T11738] netlink: 132 bytes leftover after parsing attributes in process `syz.3.2499'. [ 274.992739][T11738] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2499'. [ 275.006075][T11738] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2499'. [ 275.184002][T11747] netlink: 'syz.4.2503': attribute type 2 has an invalid length. [ 275.186521][T11747] netlink: 132 bytes leftover after parsing attributes in process `syz.4.2503'. [ 275.204796][T11747] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2503'. [ 275.293694][ T5747] usb 5-1: new high-speed USB device number 76 using dummy_hcd [ 275.444572][ T34] usb 9-1: new high-speed USB device number 29 using dummy_hcd [ 275.453855][ T5747] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 275.458824][ T5747] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 275.461710][ T5747] usb 5-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 275.467549][ T5747] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a7, bcdDevice= 1.00 [ 275.470477][ T5747] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 275.476322][ T5747] cdc_acm 5-1:1.0: skipping garbage [ 275.593735][ T34] usb 9-1: Using ep0 maxpacket: 16 [ 275.597119][ T34] usb 9-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xF3, changing to 0x83 [ 275.605419][ T34] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 275.611518][ T34] usb 9-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 275.614788][ T34] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 275.617301][ T34] usb 9-1: Product: syz [ 275.618623][ T34] usb 9-1: Manufacturer: syz [ 275.620076][ T34] usb 9-1: SerialNumber: syz [ 275.622834][ T34] usb 9-1: config 0 descriptor?? [ 275.629164][ T34] em28xx 9-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0) [ 275.634315][ T34] em28xx 9-1:0.0: Audio interface 0 found (Vendor Class) [ 276.243506][ T34] em28xx 9-1:0.0: unknown em28xx chip ID (0) [ 276.246063][ T34] em28xx 9-1:0.0: Config register raw data: 0xfffffffb [ 276.748384][T11764] netlink: 'syz.3.2508': attribute type 1 has an invalid length. [ 277.314419][ T34] em28xx 9-1:0.0: AC97 chip type couldn't be determined [ 277.316737][ T34] em28xx 9-1:0.0: No AC97 audio processor [ 278.070969][ T1043] usb 5-1: USB disconnect, device number 76 [ 278.196073][ T24] usb 9-1: USB disconnect, device number 29 [ 278.207953][ T24] em28xx 9-1:0.0: Disconnecting em28xx [ 278.231962][ T24] em28xx 9-1:0.0: Freeing device [ 278.299436][T11788] syzkaller1: entered promiscuous mode [ 278.301741][T11788] syzkaller1: entered allmulticast mode [ 278.684403][T11814] fuse: fd is not a fuse device [ 278.901384][T11819] fuse: fd is not a fuse device [ 280.239288][ T24] hid-generic 0000:0000:0000.0016: unknown main item tag 0x0 [ 280.256307][ T24] hid-generic 0000:0000:0000.0016: hidraw1: HID v0.00 Device [syz1] on syz0 [ 280.912060][T11862] syzkaller1: entered promiscuous mode [ 280.920190][T11862] syzkaller1: entered allmulticast mode [ 281.614712][ T10] usb 9-1: new high-speed USB device number 30 using dummy_hcd [ 281.697502][ T5797] netdevsim netdevsim0 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 281.702741][ T5797] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 281.746752][ T5104] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 281.751538][ T5104] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 281.756403][ T5104] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 281.760898][ T5104] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 281.767645][ T5104] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 281.778677][ T10] usb 9-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 281.787017][ T10] usb 9-1: New USB device found, idVendor=1ba6, idProduct=0001, bcdDevice= 0.01 [ 281.791517][ T10] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 281.817213][ T10] as10x_usb: device has been detected [ 281.824840][ T10] dvbdev: DVB: registering new adapter (Abilis Systems DVB-Titan) [ 281.884197][ T10] usb 9-1: DVB: registering adapter 1 frontend 0 (Abilis Systems DVB-Titan)... [ 281.936925][ T10] as10x_usb: error during firmware upload part1 [ 281.940147][ T10] Registered device Abilis Systems DVB-Titan [ 281.952162][ T5797] netdevsim netdevsim0 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 281.961976][ T5797] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 282.037717][ T5797] netdevsim netdevsim0 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 282.042419][ T5797] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 282.141679][ T5797] netdevsim netdevsim0 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 282.150968][ T5797] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 282.322034][ T5797] bridge_slave_1: left allmulticast mode [ 282.325854][ T5797] bridge_slave_1: left promiscuous mode [ 282.331011][ T5797] bridge0: port 2(bridge_slave_1) entered disabled state [ 282.338977][ T5797] bridge_slave_0: left allmulticast mode [ 282.340931][ T5797] bridge_slave_0: left promiscuous mode [ 282.344133][ T5797] bridge0: port 1(bridge_slave_0) entered disabled state [ 282.544543][ T5797] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 282.549250][ T5797] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 282.552906][ T5797] bond0 (unregistering): Released all slaves [ 282.566288][ T5797] bond1 (unregistering): Released all slaves [ 282.775392][T11892] bridge0: port 1(bridge_slave_0) entered blocking state [ 282.780912][T11892] bridge0: port 1(bridge_slave_0) entered disabled state [ 282.784329][T11892] bridge_slave_0: entered allmulticast mode [ 282.787541][T11892] bridge_slave_0: entered promiscuous mode [ 282.802801][T11892] bridge0: port 2(bridge_slave_1) entered blocking state [ 282.805959][T11892] bridge0: port 2(bridge_slave_1) entered disabled state [ 282.808945][T11892] bridge_slave_1: entered allmulticast mode [ 282.812373][T11892] bridge_slave_1: entered promiscuous mode [ 282.861100][T11892] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 282.878467][T11892] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 282.882732][ T5458] 8021q: adding VLAN 0 to HW filter on device eth2 [ 282.934341][ T5797] hsr_slave_0: left promiscuous mode [ 282.939081][ T5797] hsr_slave_1: left promiscuous mode [ 282.943864][ T5797] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 282.948086][ T5797] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 282.952313][ T5797] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 282.954762][ T5797] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 282.975989][ T5797] veth1_macvtap: left promiscuous mode [ 282.982087][ T5797] veth0_macvtap: left promiscuous mode [ 282.986510][ T5797] veth1_vlan: left promiscuous mode [ 282.988274][ T5797] veth0_vlan: left promiscuous mode [ 283.046951][T11923] fuse: fd is not a fuse device [ 283.184494][ T5797] team0 (unregistering): Port device team_slave_1 removed [ 283.192340][ T5797] team0 (unregistering): Port device team_slave_0 removed [ 283.277655][T11892] team0: Port device team_slave_0 added [ 283.283474][T11892] team0: Port device team_slave_1 added [ 283.308539][T11892] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 283.311470][T11892] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 283.322022][T11892] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 283.328443][T11892] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 283.331324][T11892] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 283.341844][T11892] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 283.380821][T11892] hsr_slave_0: entered promiscuous mode [ 283.383229][T11892] hsr_slave_1: entered promiscuous mode [ 283.385685][T11892] debugfs: 'hsr0' already exists in 'hsr' [ 283.387551][T11892] Cannot create hsr debugfs directory [ 283.592256][ T5458] 8021q: adding VLAN 0 to HW filter on device eth3 [ 283.640776][ T1043] usb 9-1: USB disconnect, device number 30 [ 283.694064][ T1043] Unregistered device Abilis Systems DVB-Titan [ 283.697435][ T1043] as10x_usb: device has been disconnected [ 283.875999][ T5760] Bluetooth: hci1: command tx timeout [ 284.047210][T11892] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 284.054558][T11892] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 284.057814][T11892] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 284.063950][T11892] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 284.067381][T11892] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 284.071492][T11892] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 284.074923][T11892] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 284.078881][T11892] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 284.135880][T11892] 8021q: adding VLAN 0 to HW filter on device bond0 [ 284.145310][T11892] 8021q: adding VLAN 0 to HW filter on device team0 [ 284.160521][ T1164] bridge0: port 1(bridge_slave_0) entered blocking state [ 284.162855][ T1164] bridge0: port 1(bridge_slave_0) entered forwarding state [ 284.184590][ T1164] bridge0: port 2(bridge_slave_1) entered blocking state [ 284.186886][ T1164] bridge0: port 2(bridge_slave_1) entered forwarding state [ 284.551910][T11892] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 284.591261][T11892] veth0_vlan: entered promiscuous mode [ 284.609877][T11892] veth1_vlan: entered promiscuous mode [ 284.645551][T11892] veth0_macvtap: entered promiscuous mode [ 284.651230][T11892] veth1_macvtap: entered promiscuous mode [ 284.667944][T11892] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 284.673316][T11892] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 284.680636][ T5824] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 284.686397][ T5824] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 284.748417][ T501] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 284.751675][ T501] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 284.764191][ T1164] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 284.768489][ T1164] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 284.774100][ T5797] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 284.777623][ T5797] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 284.933760][ T6897] usb 9-1: new high-speed USB device number 31 using dummy_hcd [ 285.085326][ T6897] usb 9-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 285.097199][ T6897] usb 9-1: New USB device found, idVendor=1ba6, idProduct=0001, bcdDevice= 0.01 [ 285.101679][ T6897] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 285.119700][ T6897] as10x_usb: device has been detected [ 285.127108][ T6897] dvbdev: DVB: registering new adapter (Abilis Systems DVB-Titan) [ 285.153778][ T6897] usb 9-1: DVB: registering adapter 1 frontend 0 (Abilis Systems DVB-Titan)... [ 285.170236][ T6897] as10x_usb: error during firmware upload part1 [ 285.177044][ T6897] Registered device Abilis Systems DVB-Titan [ 285.953893][ T5760] Bluetooth: hci1: command tx timeout [ 286.143673][ T1043] usb 5-1: new high-speed USB device number 77 using dummy_hcd [ 286.303834][ T1043] usb 5-1: Using ep0 maxpacket: 8 [ 286.307480][ T1043] usb 5-1: config index 0 descriptor too short (expected 301, got 45) [ 286.310463][ T1043] usb 5-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 286.313921][ T1043] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 286.317327][ T1043] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 286.320577][ T1043] usb 5-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 286.325072][ T1043] usb 5-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 286.328223][ T1043] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 286.928625][ T6897] usb 9-1: USB disconnect, device number 31 [ 286.945386][ T6897] Unregistered device Abilis Systems DVB-Titan [ 286.947674][ T6897] as10x_usb: device has been disconnected [ 287.582231][T12044] sctp: [Deprecated]: syz.3.2584 (pid 12044) Use of int in maxseg socket option. [ 287.582231][T12044] Use struct sctp_assoc_value instead [ 288.035040][ T5760] Bluetooth: hci1: command tx timeout [ 288.210821][ T41] kauditd_printk_skb: 80 callbacks suppressed [ 288.210841][ T41] audit: type=1326 audit(1785807351.890:220): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12062 comm="syz.4.2591" exe="/syz-executor" sig=31 arch=40000003 syscall=240 compat=1 ip=0xf709efec code=0x0 [ 288.904579][ T1043] usb 5-1: USB disconnect, device number 77 [ 289.313731][ T1043] usb 5-1: new full-speed USB device number 78 using dummy_hcd [ 289.465338][ T1043] usb 5-1: config 5 has an invalid interface number: 123 but max is 0 [ 289.468859][ T1043] usb 5-1: config 5 has no interface number 0 [ 289.469903][T12096] netlink: 16 bytes leftover after parsing attributes in process `syz.3.2603'. [ 289.471371][ T1043] usb 5-1: config 5 interface 123 altsetting 7 has an endpoint descriptor with address 0xEB, changing to 0x8B [ 289.480319][ T1043] usb 5-1: config 5 interface 123 altsetting 7 endpoint 0x4 has invalid wMaxPacketSize 0 [ 289.484397][ T1043] usb 5-1: config 5 interface 123 has no altsetting 0 [ 289.489138][ T1043] usb 5-1: New USB device found, idVendor=3923, idProduct=718a, bcdDevice=d8.d7 [ 289.492973][ T1043] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 289.497011][ T1043] usb 5-1: Product: syz [ 289.498789][ T1043] usb 5-1: Manufacturer: syz [ 289.500766][ T1043] usb 5-1: SerialNumber: syz [ 289.563947][ T5856] usb 9-1: new high-speed USB device number 32 using dummy_hcd [ 289.595657][T12103] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2606'. [ 289.604113][T12103] hsr_slave_1 (unregistering): left promiscuous mode [ 289.726077][ T5856] usb 9-1: Using ep0 maxpacket: 32 [ 289.734615][ T5856] usb 9-1: unable to get BOS descriptor or descriptor too short [ 289.737938][T12086] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 289.742972][ T5856] usb 9-1: config 1 interface 1 altsetting 1 bulk endpoint 0x3 has invalid maxpacket 8 [ 289.746349][T12086] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 289.751710][ T5856] usb 9-1: string descriptor 0 read error: -22 [ 289.753768][ T5856] usb 9-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 289.756877][ T5856] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 289.967158][ T5856] cdc_ncm 9-1:1.0: bind() failure [ 289.974021][ T5856] cdc_ncm 9-1:1.1: CDC Union missing and no IAD found [ 289.976304][ T5856] cdc_ncm 9-1:1.1: bind() failure [ 289.981999][ T5856] usb 9-1: USB disconnect, device number 32 [ 290.004705][T12117] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2613'. [ 290.123778][ T5760] Bluetooth: hci1: command tx timeout [ 290.176876][T12122] netlink: 28 bytes leftover after parsing attributes in process `syz.2.2614'. [ 290.367857][ T1043] ni6501 5-1:5.123: driver 'ni6501' failed to auto-configure device. [ 290.378027][ T1043] usb 5-1: USB disconnect, device number 78 [ 291.395313][ T5104] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 291.406900][ T5104] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 291.410072][ T5104] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 291.415157][ T5104] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 291.418838][ T5104] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 291.936693][T12181] netlink: 72 bytes leftover after parsing attributes in process `syz.4.2631'. [ 292.089118][T12158] bridge0: port 1(bridge_slave_0) entered blocking state [ 292.091552][T12158] bridge0: port 1(bridge_slave_0) entered disabled state [ 292.095052][T12158] bridge_slave_0: entered allmulticast mode [ 292.097831][T12158] bridge_slave_0: entered promiscuous mode [ 292.102416][T12158] bridge0: port 2(bridge_slave_1) entered blocking state [ 292.106273][T12158] bridge0: port 2(bridge_slave_1) entered disabled state [ 292.108808][T12158] bridge_slave_1: entered allmulticast mode [ 292.111582][T12158] bridge_slave_1: entered promiscuous mode [ 292.132909][T12158] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 292.138538][T12158] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 292.156188][T12158] team0: Port device team_slave_0 added [ 292.159503][T12158] team0: Port device team_slave_1 added [ 292.181983][T12158] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 292.188582][T12158] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 292.203735][T12158] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 292.217604][T12158] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 292.223332][T12158] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 292.244838][T12158] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 292.273949][ T5856] usb 9-1: new high-speed USB device number 33 using dummy_hcd [ 292.282148][T12158] hsr_slave_0: entered promiscuous mode [ 292.285850][T12158] hsr_slave_1: entered promiscuous mode [ 292.288060][T12158] debugfs: 'hsr0' already exists in 'hsr' [ 292.291022][T12158] Cannot create hsr debugfs directory [ 292.428189][ T5856] usb 9-1: Using ep0 maxpacket: 32 [ 292.431223][ T5856] usb 9-1: config 0 has an invalid interface number: 239 but max is 0 [ 292.434767][ T5856] usb 9-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 292.445605][ T5856] usb 9-1: config 0 has no interface number 0 [ 292.447589][ T5856] usb 9-1: config 0 interface 239 altsetting 4 bulk endpoint 0x2 has invalid maxpacket 8 [ 292.460821][ T5856] usb 9-1: config 0 interface 239 altsetting 4 endpoint 0x8 has invalid maxpacket 1023, setting to 64 [ 292.476922][ T5856] usb 9-1: config 0 interface 239 altsetting 4 has an endpoint descriptor with address 0xA9, changing to 0x89 [ 292.495017][ T5856] usb 9-1: config 0 interface 239 altsetting 4 endpoint 0x89 has invalid maxpacket 28648, setting to 1024 [ 292.508593][ T5856] usb 9-1: config 0 interface 239 altsetting 4 bulk endpoint 0x89 has invalid maxpacket 1024 [ 292.522190][ T5856] usb 9-1: config 0 interface 239 altsetting 4 has an endpoint descriptor with address 0xD5, changing to 0x85 [ 292.551725][ T5856] usb 9-1: config 0 interface 239 altsetting 4 endpoint 0x85 has an invalid bInterval 252, changing to 11 [ 292.556828][ T5856] usb 9-1: config 0 interface 239 altsetting 4 endpoint 0x85 has invalid wMaxPacketSize 0 [ 292.563189][ T5856] usb 9-1: config 0 interface 239 has no altsetting 0 [ 292.577509][ T5856] usb 9-1: New USB device found, idVendor=105b, idProduct=1799, bcdDevice=36.e9 [ 292.590022][ T5856] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 292.597541][ T5856] usb 9-1: Product: syz [ 292.599326][ T5856] usb 9-1: Manufacturer: syz [ 292.604158][ T5856] usb 9-1: SerialNumber: syz [ 292.613404][ T5856] usb 9-1: config 0 descriptor?? [ 292.623770][T12188] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 292.630867][T12188] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 292.656071][ T5760] Bluetooth: hci2: urb ffff88806bee0d00 submission failed (90) [ 292.849874][T12188] netlink: 60 bytes leftover after parsing attributes in process `syz.4.2631'. [ 292.852786][T12188] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 292.858566][T12188] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 293.108395][T12158] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 293.132221][T12158] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 293.136744][T12158] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 293.144846][T12158] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 293.149272][T12158] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 293.165314][T12158] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 293.169968][T12158] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 293.177512][T12158] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 293.232204][ T6897] usb 9-1: USB disconnect, device number 33 [ 293.265120][T12273] fuse: fd is not a fuse device [ 293.320651][T12158] 8021q: adding VLAN 0 to HW filter on device bond0 [ 293.346998][T12158] 8021q: adding VLAN 0 to HW filter on device team0 [ 293.359075][ T60] bridge0: port 1(bridge_slave_0) entered blocking state [ 293.361490][ T60] bridge0: port 1(bridge_slave_0) entered forwarding state [ 293.368077][ T60] bridge0: port 2(bridge_slave_1) entered blocking state [ 293.370386][ T60] bridge0: port 2(bridge_slave_1) entered forwarding state [ 293.474084][ T5760] Bluetooth: hci3: command tx timeout [ 293.669836][T12158] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 293.722474][T12158] veth0_vlan: entered promiscuous mode [ 293.731472][T12158] veth1_vlan: entered promiscuous mode [ 293.770323][T12158] veth0_macvtap: entered promiscuous mode [ 293.782400][T12158] veth1_macvtap: entered promiscuous mode [ 293.802381][T12158] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 293.831989][T12158] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 293.845390][ T12] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 293.849113][ T12] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 293.864689][ T12] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 293.869861][ T12] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 294.050477][ T34] usb 5-1: new full-speed USB device number 79 using dummy_hcd [ 294.063149][ T1170] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 294.068038][ T1170] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 294.099948][ T60] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 294.115814][ T60] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 294.184277][T12304] IPVS: rr: TCP 127.0.0.1:5376 - no destination available [ 294.190765][ T1043] IPVS: starting estimator thread 0... [ 294.228026][ T34] usb 5-1: config 0 has an invalid interface number: 176 but max is 0 [ 294.235300][ T34] usb 5-1: config 0 has no interface number 0 [ 294.237324][ T34] usb 5-1: config 0 interface 176 altsetting 0 endpoint 0x4 has invalid maxpacket 59391, setting to 64 [ 294.254765][ T34] usb 5-1: New USB device found, idVendor=0499, idProduct=1039, bcdDevice= c.76 [ 294.257949][ T34] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 294.266098][ T34] usb 5-1: Product: syz [ 294.268816][ T34] usb 5-1: Manufacturer: syz [ 294.271632][ T34] usb 5-1: SerialNumber: syz [ 294.276668][ T34] usb 5-1: config 0 descriptor?? [ 294.279569][T12315] netlink: 24 bytes leftover after parsing attributes in process `syz.2.2655'. [ 294.280665][T12284] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 294.283693][T12305] IPVS: using max 43 ests per chain, 103200 per kthread [ 294.285510][T12284] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 294.287848][ T34] usb 5-1: Quirk or no altset; falling back to MIDI 1.0 [ 295.209239][T12328] netlink: 'syz.4.2660': attribute type 4 has an invalid length. [ 295.239405][ T41] audit: type=1804 audit(1785807358.920:221): pid=12331 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.2.2661" name="/newroot/5/file1" dev="tmpfs" ino=44 res=1 errno=0 [ 295.329717][T12335] netlink: 'syz.3.2663': attribute type 12 has an invalid length. [ 295.332982][T12335] netlink: 'syz.3.2663': attribute type 29 has an invalid length. [ 295.337904][T12335] netlink: 148 bytes leftover after parsing attributes in process `syz.3.2663'. [ 295.341729][T12335] netlink: 'syz.3.2663': attribute type 1 has an invalid length. [ 295.347076][T12335] netlink: 'syz.3.2663': attribute type 2 has an invalid length. [ 295.349539][T12335] netlink: 7 bytes leftover after parsing attributes in process `syz.3.2663'. [ 295.553780][ T5760] Bluetooth: hci3: command tx timeout [ 295.915934][T12344] raw_sendmsg: syz.3.2667 forgot to set AF_INET. Fix it! [ 296.381237][T12356] fuse: fd is not a fuse device [ 296.443009][T12356] fuse: fd is not a fuse device [ 296.594470][ T5841] usb 5-1: USB disconnect, device number 79 [ 297.564708][T12387] macvlan2: entered allmulticast mode [ 297.566574][T12387] veth0: entered promiscuous mode [ 297.569480][T12387] veth0: entered allmulticast mode [ 297.576176][T12387] team0: Port device macvlan2 added [ 297.634821][ T5760] Bluetooth: hci3: command tx timeout [ 297.843775][ T24] usb 5-1: new high-speed USB device number 80 using dummy_hcd [ 297.993645][ T24] usb 5-1: Using ep0 maxpacket: 16 [ 297.996830][ T24] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x84 has invalid wMaxPacketSize 0 [ 298.001633][ T24] usb 5-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 298.004591][ T24] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 298.007228][ T24] usb 5-1: Product: syz [ 298.008556][ T24] usb 5-1: Manufacturer: syz [ 298.010070][ T24] usb 5-1: SerialNumber: syz [ 298.013084][ T24] usb 5-1: config 0 descriptor?? [ 298.017951][ T24] em28xx 5-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0) [ 298.021027][ T24] em28xx 5-1:0.0: DVB interface 0 found: bulk [ 298.620856][ T24] em28xx 5-1:0.0: unknown em28xx chip ID (0) [ 299.035289][ T24] em28xx 5-1:0.0: reading from i2c device at 0xa0 failed (error=-5) [ 299.040170][ T24] em28xx 5-1:0.0: board has no eeprom [ 299.303695][ T24] em28xx 5-1:0.0: Identified as PCTV tripleStick (292e) (card=94) [ 299.307126][ T24] em28xx 5-1:0.0: dvb set to bulk mode. [ 299.310442][ T6897] em28xx 5-1:0.0: Binding DVB extension [ 299.327223][ T24] usb 5-1: USB disconnect, device number 80 [ 299.345486][ T24] em28xx 5-1:0.0: Disconnecting em28xx [ 299.350645][ T6897] em28xx 5-1:0.0: Registering input extension [ 299.361603][ T24] em28xx 5-1:0.0: Closing input extension [ 299.383929][ T24] em28xx 5-1:0.0: Freeing device [ 299.687200][T12415] netlink: 'syz.4.2693': attribute type 3 has an invalid length. [ 299.689782][T12415] netlink: 'syz.4.2693': attribute type 3 has an invalid length. [ 299.692221][T12415] netlink: 'syz.4.2693': attribute type 3 has an invalid length. [ 299.695274][T12415] netlink: 'syz.4.2693': attribute type 3 has an invalid length. [ 299.697762][T12415] netlink: 'syz.4.2693': attribute type 3 has an invalid length. [ 299.723695][ T5760] Bluetooth: hci3: command tx timeout [ 300.830757][T12440] i2c i2c-1: Frontend requested software zigzag, but didn't set the frequency step size [ 300.830771][T12442] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2702'. [ 301.123702][ T1043] usb 5-1: new high-speed USB device number 81 using dummy_hcd [ 301.283628][ T1043] usb 5-1: Using ep0 maxpacket: 8 [ 301.286588][ T1043] usb 5-1: config 0 interface 0 altsetting 88 endpoint 0x2 has an invalid bInterval 135, changing to 11 [ 301.290103][ T1043] usb 5-1: config 0 interface 0 altsetting 88 has 2 endpoint descriptors, different from the interface descriptor's value: 9 [ 301.294394][ T1043] usb 5-1: config 0 interface 0 has no altsetting 0 [ 301.296525][ T1043] usb 5-1: New USB device found, idVendor=1e7d, idProduct=319c, bcdDevice= 0.00 [ 301.299387][ T1043] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 301.304139][ T1043] usb 5-1: config 0 descriptor?? [ 301.506007][T12454] bridge0: port 2(bridge_slave_1) entered disabled state [ 301.508663][T12454] bridge0: port 1(bridge_slave_0) entered disabled state [ 301.534933][T12454] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 301.557668][T12457] netlink: 164 bytes leftover after parsing attributes in process `syz.3.2704'. [ 301.561158][T12457] netlink: 164 bytes leftover after parsing attributes in process `syz.3.2704'. [ 301.613938][ T12] netdevsim netdevsim4 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 301.618002][ T12] netdevsim netdevsim4 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 301.623815][T12457] nfs: Unknown parameter '' [ 301.628112][ T12] netdevsim netdevsim4 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 301.631077][ T12] netdevsim netdevsim4 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 301.736976][ T1043] isku 0003:1E7D:319C.0017: unknown main item tag 0x4 [ 301.742463][ T1043] isku 0003:1E7D:319C.0017: unknown main item tag 0x5 [ 301.745147][ T1043] isku 0003:1E7D:319C.0017: unknown main item tag 0x2 [ 301.747380][ T1043] isku 0003:1E7D:319C.0017: item fetching failed at offset 27/44 [ 301.750354][ T1043] isku 0003:1E7D:319C.0017: parse failed [ 301.752568][ T1043] isku 0003:1E7D:319C.0017: probe with driver isku failed with error -22 [ 301.953708][ T5832] usb 9-1: new high-speed USB device number 34 using dummy_hcd [ 302.105398][ T5832] usb 9-1: config 27 has an invalid descriptor of length 0, skipping remainder of the config [ 302.109693][ T5832] usb 9-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 302.114898][ T5832] usb 9-1: config 27 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 302.120246][ T5832] usb 9-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 302.124400][ T5832] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 302.137397][ T5832] usb 9-1: Quirk or no altset; falling back to MIDI 1.0 [ 302.144993][ T5832] usb 9-1: invalid MIDI out EP 0 [ 302.236007][ T5832] snd-usb-audio 9-1:27.0: probe with driver snd-usb-audio failed with error -22 [ 302.341415][ T5832] usb 9-1: USB disconnect, device number 34 [ 303.742766][T12488] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2719'. [ 304.185753][T12486] Set syz1 is full, maxelem 65536 reached [ 305.172726][ T6897] IPVS: starting estimator thread 0... [ 305.175642][T12512] validate_nla: 47 callbacks suppressed [ 305.175652][T12512] netlink: 'syz.0.2728': attribute type 13 has an invalid length. [ 305.273637][T12521] IPVS: using max 43 ests per chain, 103200 per kthread [ 306.049612][T12529] loop5: detected capacity change from 0 to 7 [ 306.059842][T12529] Dev loop5: unable to read RDB block 7 [ 306.062614][T12529] loop5: unable to read partition table [ 306.067354][T12529] loop5: partition table beyond EOD, truncated [ 306.069451][T12529] loop_reread_partitions: partition scan of loop5 (þ被xü—ŸÑà– ) failed (rc=-5) [ 308.246953][T12572] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2751'. [ 308.249893][T12572] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 308.254941][T12572] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2751'. [ 309.199029][T12595] netlink: 5212 bytes leftover after parsing attributes in process `syz.0.2759'. [ 309.209253][T12595] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2759'. [ 310.375001][T12631] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 310.379447][T12631] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 311.600318][T12667] netlink: 'syz.4.2789': attribute type 1 has an invalid length. [ 311.612913][T12667] bond1: entered promiscuous mode [ 311.616866][T12667] 8021q: adding VLAN 0 to HW filter on device bond1 [ 311.630669][T12667] 8021q: adding VLAN 0 to HW filter on device bond1 [ 311.633098][T12667] bond1: (slave vti0): The slave device specified does not support setting the MAC address [ 311.636784][T12667] bond1: (slave vti0): Setting fail_over_mac to active for active-backup mode [ 311.645582][T12667] bond1: (slave vti0): making interface the new active one [ 311.648362][T12667] vti0: entered promiscuous mode [ 311.651787][T12667] bond1: (slave vti0): Enslaving as an active interface with an up link [ 313.333131][T12718] configfs-gadget.g1 gadget.32: uvc: uvc_function_unbind() [ 315.422329][T12757] Bluetooth: hci0: invalid length 0, exp 2 for type 22 [ 315.762905][T12780] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2835'. [ 316.919831][ T1441] ieee802154 phy0 wpan0: encryption failed: -22 [ 317.133724][ T5747] usb 9-1: new full-speed USB device number 35 using dummy_hcd [ 317.285016][ T5747] usb 9-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 317.289353][ T5747] usb 9-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 512, setting to 64 [ 317.292887][ T5747] usb 9-1: config 1 interface 1 altsetting 1 endpoint 0x82 has invalid maxpacket 512, setting to 64 [ 317.298037][ T5747] usb 9-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 317.301017][ T5747] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 317.303894][ T5747] usb 9-1: Product: syz [ 317.305312][ T5747] usb 9-1: Manufacturer: syz [ 317.306887][ T5747] usb 9-1: SerialNumber: syz [ 317.310588][T12824] raw-gadget.2 gadget.4: fail, usb_ep_enable returned -22 [ 317.396289][T12828] fuse: fd is not a fuse device [ 317.520897][T12824] raw-gadget.2 gadget.4: fail, usb_ep_enable returned -22 [ 318.127279][T12824] raw-gadget.2 gadget.4: fail, usb_ep_enable returned -22 [ 318.331078][ T5747] cdc_ncm 9-1:1.0: MAC-Address: 42:42:42:42:42:42 [ 318.334066][ T5747] cdc_ncm 9-1:1.0: dwNtbInMaxSize=43 is too small. Using 2048 [ 318.337079][ T5747] cdc_ncm 9-1:1.0: setting rx_max = 2048 [ 318.388568][T12840] fuse: fd is not a fuse device [ 318.548090][ T5747] cdc_ncm 9-1:1.0 usb0: register 'cdc_ncm' at usb-dummy_hcd.4-1, CDC NCM (NO ZLP), 42:42:42:42:42:42 [ 318.555461][ T5747] usb 9-1: USB disconnect, device number 35 [ 318.558511][ T5747] cdc_ncm 9-1:1.0 usb0: unregister 'cdc_ncm' usb-dummy_hcd.4-1, CDC NCM (NO ZLP) [ 319.503198][T12880] batadv_slave_1: entered promiscuous mode [ 319.505471][ T847] usb 9-1: new full-speed USB device number 36 using dummy_hcd [ 319.505973][T12879] batadv_slave_1: left promiscuous mode [ 319.666620][ T847] usb 9-1: config 0 has an invalid interface number: 176 but max is 2 [ 319.669293][ T847] usb 9-1: config 0 has no interface number 1 [ 319.671357][ T847] usb 9-1: New USB device found, idVendor=05c6, idProduct=9205, bcdDevice=29.ac [ 319.675086][ T847] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 319.679274][ T847] usb 9-1: config 0 descriptor?? [ 319.947819][ T847] usb 9-1: Could not set interface, error -71 [ 319.957819][ T847] usb 9-1: USB disconnect, device number 36 [ 319.959614][T12900] vhci_hcd: not connected 4 [ 320.051447][T12906] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 320.054578][T12906] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 320.263427][T12906] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 320.267198][T12906] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 320.788096][T12933] fuse: Unknown parameter '' [ 321.600745][T12950] bridge1: entered promiscuous mode [ 321.602450][T12950] bridge1: entered allmulticast mode [ 323.477403][T13008] netlink: 32 bytes leftover after parsing attributes in process `syz.3.2937'. [ 323.661190][ T5760] Bluetooth: hci4: unexpected event 0x03 length: 1 < 11 [ 324.205686][T13050] netlink: 24 bytes leftover after parsing attributes in process `syz.0.2956'. [ 324.255600][T13054] fuse: fd is not a fuse device [ 324.599830][T13067] binder: 13066:13067 ioctl c0306201 0 returned -14 [ 324.857856][T13090] loop6: detected capacity change from 0 to 8 [ 324.865934][ C3] critical medium error, dev loop6, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 324.869745][ C3] Buffer I/O error on dev loop6, logical block 0, async page read [ 324.873763][ C2] critical medium error, dev loop6, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 324.877200][ C2] Buffer I/O error on dev loop6, logical block 0, async page read [ 324.881484][ C2] critical medium error, dev loop6, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 324.884952][ C2] Buffer I/O error on dev loop6, logical block 0, async page read [ 324.887631][ C2] critical medium error, dev loop6, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 324.891051][ C2] Buffer I/O error on dev loop6, logical block 0, async page read [ 324.893896][ C2] critical medium error, dev loop6, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 324.899844][ C2] Buffer I/O error on dev loop6, logical block 0, async page read [ 324.902617][ C2] critical medium error, dev loop6, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 324.906094][ C2] Buffer I/O error on dev loop6, logical block 0, async page read [ 324.910446][ C2] critical medium error, dev loop6, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 324.914067][ C2] Buffer I/O error on dev loop6, logical block 0, async page read [ 324.916756][ C2] critical medium error, dev loop6, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 324.920191][ C2] Buffer I/O error on dev loop6, logical block 0, async page read [ 324.924259][T13090] ldm_validate_partition_table(): Disk read failed. [ 324.926654][ C0] critical medium error, dev loop6, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 324.930042][ C0] Buffer I/O error on dev loop6, logical block 0, async page read [ 324.934087][ C0] critical medium error, dev loop6, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 324.937416][ C0] Buffer I/O error on dev loop6, logical block 0, async page read [ 324.940173][T13090] Dev loop6: unable to read RDB block 0 [ 324.942630][T13090] loop6: unable to read partition table [ 324.945352][T13090] loop6: partition table beyond EOD, truncated [ 324.947728][T13090] loop_reread_partitions: partition scan of loop6 (ÄNùh*h‘…ÿìžÝ×pਸ਼ "ýo§æ?<í ¯ÊºöÙXDˆÚbÔÌp0ìO{š¸›>.) failed (rc=-5) [ 325.373685][ T5854] usb 9-1: new high-speed USB device number 37 using dummy_hcd [ 325.536664][ T5854] usb 9-1: New USB device found, idVendor=0a5c, idProduct=bd1f, bcdDevice=53.1a [ 325.539516][ T5854] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 325.541903][ T5854] usb 9-1: Product: syz [ 325.543272][ T5854] usb 9-1: Manufacturer: syz [ 325.545093][ T5854] usb 9-1: SerialNumber: syz [ 325.550017][ T5854] usb 9-1: config 0 descriptor?? [ 325.755889][ T5747] usb 9-1: USB disconnect, device number 37 [ 327.475243][T13175] bridge0: port 3(wlan1) entered blocking state [ 327.478711][T13175] bridge0: port 3(wlan1) entered disabled state [ 327.481343][T13175] mac80211_hwsim hwsim11 wlan1: entered allmulticast mode [ 327.489277][T13175] mac80211_hwsim hwsim11 wlan1: entered promiscuous mode [ 327.608400][T13181] batadv_slave_1: entered promiscuous mode [ 327.611548][T13180] batadv_slave_1: left promiscuous mode [ 328.355256][T13201] futex_wake_op: syz.0.3019 tries to shift op by -1; fix this program [ 329.016787][T13222] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci3/hci3:200/input32 [ 329.241742][T13235] netlink: 96 bytes leftover after parsing attributes in process `syz.2.3035'. [ 329.614000][T13266] netlink: 27 bytes leftover after parsing attributes in process `syz.0.3050'. [ 329.758035][T13279] binder_alloc: 13278: binder_alloc_buf, no vma [ 329.781795][T13277] virt_wifi0: default qdisc (pfifo_fast) fail, fallback to noqueue [ 329.826577][T13277] macvlan2: left allmulticast mode [ 329.828836][T13277] veth0: left allmulticast mode [ 330.122000][T13293] veth6: entered allmulticast mode [ 331.432627][T13326] tc_dump_action: action bad kind [ 332.233771][ T5854] usb 9-1: new high-speed USB device number 38 using dummy_hcd [ 332.383695][ T5854] usb 9-1: Using ep0 maxpacket: 32 [ 332.386903][ T5854] usb 9-1: config 0 has an invalid interface number: 67 but max is 0 [ 332.389644][ T5854] usb 9-1: config 0 has no interface number 0 [ 332.393103][ T5854] usb 9-1: New USB device found, idVendor=0424, idProduct=9901, bcdDevice=c2.57 [ 332.396049][ T5854] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 332.398530][ T5854] usb 9-1: Product: syz [ 332.400024][ T5854] usb 9-1: Manufacturer: syz [ 332.401499][ T5854] usb 9-1: SerialNumber: syz [ 332.404675][ T5854] usb 9-1: config 0 descriptor?? [ 332.815521][ T5747] hid-generic 0000:0000:0000.0018: unknown main item tag 0x0 [ 332.819073][ T5747] hid-generic 0000:0000:0000.0018: unknown main item tag 0x0 [ 332.822984][ T5747] hid-generic 0000:0000:0000.0018: hidraw1: HID v0.00 Device [syz0] on syz0 [ 332.882729][T13363] fido_id[13363]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 333.018524][ T5854] smsc95xx 9-1:0.67 (unnamed net_device) (uninitialized): Failed to write reg index 0x00000030: -71 [ 333.026436][ T5854] smsc95xx 9-1:0.67 (unnamed net_device) (uninitialized): Error writing E2P_CMD [ 333.030421][ T5854] smsc95xx 9-1:0.67 (unnamed net_device) (uninitialized): Failed to write reg index 0x00000014: -71 [ 333.034693][ T5854] smsc95xx 9-1:0.67: probe with driver smsc95xx failed with error -71 [ 333.042715][ T5854] usb 9-1: USB disconnect, device number 38 [ 334.098409][T13424] fuse: fd is not a fuse device [ 334.243742][ T6897] usb 9-1: new high-speed USB device number 39 using dummy_hcd [ 334.396571][ T6897] usb 9-1: New USB device found, idVendor=0499, idProduct=1041, bcdDevice= 0.40 [ 334.399489][ T6897] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 334.402368][ T6897] usb 9-1: Product: syz [ 334.406242][ T6897] usb 9-1: Manufacturer: syz [ 334.407935][ T6897] usb 9-1: SerialNumber: syz [ 334.622230][ T6897] usb 9-1: Quirk or no altset; falling back to MIDI 1.0 [ 334.646159][ T6897] snd-usb-audio 9-1:1.0: probe with driver snd-usb-audio failed with error -2 [ 334.654987][ T6897] usb 9-1: USB disconnect, device number 39 [ 334.677612][ T5752] udevd[5752]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb9/9-1/9-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 335.867914][T13496] veth0_to_hsr: Caught tx_queue_len zero misconfig [ 336.433732][ T5747] usb 9-1: new full-speed USB device number 40 using dummy_hcd [ 336.585511][ T5747] usb 9-1: config 4 has an invalid interface number: 159 but max is 0 [ 336.588723][ T5747] usb 9-1: config 4 has no interface number 0 [ 336.591173][ T5747] usb 9-1: config 4 interface 159 altsetting 5 endpoint 0xC has invalid maxpacket 1024, setting to 64 [ 336.595728][ T5747] usb 9-1: config 4 interface 159 altsetting 5 endpoint 0x8 has invalid maxpacket 1024, setting to 64 [ 336.599780][ T5747] usb 9-1: config 4 interface 159 has no altsetting 0 [ 336.604554][ T5747] usb 9-1: New USB device found, idVendor=1b3d, idProduct=0198, bcdDevice=dc.b7 [ 336.608062][ T5747] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 336.611048][ T5747] usb 9-1: Product: syz [ 336.612736][ T5747] usb 9-1: Manufacturer: syz [ 336.614668][ T5747] usb 9-1: SerialNumber: syz [ 336.619805][T13514] raw-gadget.2 gadget.4: fail, usb_ep_enable returned -22 [ 336.623734][T13514] raw-gadget.2 gadget.4: fail, usb_ep_enable returned -22 [ 336.830660][ T5747] ftdi_sio 9-1:4.159: FTDI USB Serial Device converter detected [ 336.833956][ T5747] ftdi_sio ttyUSB0: unknown device type: 0xdcb7 [ 336.840663][ T5747] usb 9-1: USB disconnect, device number 40 [ 336.846343][ T5747] ftdi_sio 9-1:4.159: device disconnected [ 337.115715][T13534] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 337.118789][T13534] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 337.447685][ T41] audit: type=1326 audit(1785807401.130:222): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13537 comm="syz.3.3164" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf6fdefec code=0x7fc00000 [ 337.449823][T13548] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3168'. [ 337.456623][ T41] audit: type=1326 audit(1785807401.130:223): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13537 comm="syz.3.3164" exe="/syz-executor" sig=0 arch=40000003 syscall=252 compat=1 ip=0xf6fdefec code=0x7fc00000 [ 337.493991][ T41] audit: type=1326 audit(1785807401.170:224): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13537 comm="syz.3.3164" exe="/syz-executor" sig=0 arch=40000003 syscall=119 compat=1 ip=0xf6fdf008 code=0x7fc00000 [ 338.057333][T13586] devtmpfs: Bad value for 'size' [ 338.149655][T13592] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 338.154388][T13592] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 338.280104][T13596] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3190'. [ 338.488771][T13608] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3191'. [ 338.758792][T13624] tracefs: Unknown parameter 'fd' [ 339.930297][T13649] Bluetooth: hci0: Opcode 0x0401 failed: -4 [ 340.050680][T13675] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 340.058633][T13675] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 340.831371][T13702] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3233'. [ 340.924034][T13710] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 340.927415][T13710] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 341.153773][ T5760] Bluetooth: hci0: command 0x0c1a tx timeout [ 342.618343][T13751] netlink: 'syz.0.3256': attribute type 3 has an invalid length. [ 342.621703][T13751] netlink: 'syz.0.3256': attribute type 3 has an invalid length. [ 342.694709][T13757] kvm: emulating exchange as write [ 343.270444][T13803] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 343.274543][T13803] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 343.365061][T13810] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3282'. [ 343.532808][T13825] cgroup: Unknown subsys name 'cpuset' [ 343.969076][T13854] netlink: 28 bytes leftover after parsing attributes in process `syz.3.3299'. [ 343.972146][T13854] netlink: 28 bytes leftover after parsing attributes in process `syz.3.3299'. [ 343.975811][T13854] netlink: 28 bytes leftover after parsing attributes in process `syz.3.3299'. [ 343.978818][T13854] netlink: 28 bytes leftover after parsing attributes in process `syz.3.3299'. [ 343.981748][T13854] netlink: 28 bytes leftover after parsing attributes in process `syz.3.3299'. [ 343.984918][T13854] netlink: 28 bytes leftover after parsing attributes in process `syz.3.3299'. [ 343.988010][T13854] netlink: 28 bytes leftover after parsing attributes in process `syz.3.3299'. [ 343.991054][T13854] netlink: 28 bytes leftover after parsing attributes in process `syz.3.3299'. [ 343.993756][ T24] usb 9-1: new high-speed USB device number 41 using dummy_hcd [ 343.994297][T13854] netlink: 28 bytes leftover after parsing attributes in process `syz.3.3299'. [ 344.143847][ T24] usb 9-1: Using ep0 maxpacket: 16 [ 344.147917][ T24] usb 9-1: config 0 has an invalid interface number: 84 but max is 0 [ 344.151704][ T24] usb 9-1: config 0 has no interface number 0 [ 344.155385][ T24] usb 9-1: config 0 interface 84 has no altsetting 0 [ 344.161885][ T24] usb 9-1: New USB device found, idVendor=18ec, idProduct=3188, bcdDevice=91.33 [ 344.168236][ T24] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 344.172727][ T24] usb 9-1: Product: syz [ 344.175466][ T24] usb 9-1: Manufacturer: syz [ 344.178047][ T24] usb 9-1: SerialNumber: syz [ 344.191220][ T24] usb 9-1: config 0 descriptor?? [ 344.501722][ T24] uvcvideo 9-1:0.84: probe with driver uvcvideo failed with error -22 [ 344.511211][ T24] usb 9-1: USB disconnect, device number 41 [ 347.011599][T13970] syzkaller0: entered promiscuous mode [ 347.016261][T13970] syzkaller0: entered allmulticast mode [ 347.556484][T13994] fuse: Bad value for 'fd' [ 347.895107][ C3] IPv4: Oversized IP packet from 127.0.0.1 [ 348.935096][ T41] audit: type=1326 audit(1785807412.620:225): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14068 comm="syz.0.3398" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf703efec code=0x7ffc0000 [ 348.942789][ T41] audit: type=1326 audit(1785807412.620:226): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14068 comm="syz.0.3398" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf703efec code=0x7ffc0000 [ 348.957689][ T41] audit: type=1326 audit(1785807412.640:227): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14068 comm="syz.0.3398" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf703efec code=0x7ffc0000 [ 348.973049][ T41] audit: type=1326 audit(1785807412.640:228): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14068 comm="syz.0.3398" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf703efec code=0x7ffc0000 [ 348.985345][ T41] audit: type=1326 audit(1785807412.640:229): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14068 comm="syz.0.3398" exe="/syz-executor" sig=0 arch=40000003 syscall=313 compat=1 ip=0xf703efec code=0x7ffc0000 [ 348.999890][ T41] audit: type=1326 audit(1785807412.640:230): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14068 comm="syz.0.3398" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf703efec code=0x7ffc0000 [ 349.014131][ T41] audit: type=1326 audit(1785807412.640:231): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14068 comm="syz.0.3398" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf703efec code=0x7ffc0000 [ 349.026027][ T41] audit: type=1326 audit(1785807412.640:232): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14068 comm="syz.0.3398" exe="/syz-executor" sig=0 arch=40000003 syscall=436 compat=1 ip=0xf703efec code=0x7ffc0000 [ 349.033474][ T41] audit: type=1326 audit(1785807412.640:233): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14068 comm="syz.0.3398" exe="/syz-executor" sig=0 arch=40000003 syscall=252 compat=1 ip=0xf703efec code=0x7ffc0000 [ 349.352069][T14104] fuse: Bad value for 'fd' [ 349.815158][T14121] veth3: entered promiscuous mode [ 349.821336][T14121] veth3: entered allmulticast mode [ 351.854538][ T1043] usb 9-1: new high-speed USB device number 42 using dummy_hcd [ 352.014479][ T1043] usb 9-1: Using ep0 maxpacket: 16 [ 352.018962][ T1043] usb 9-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 352.029943][ T1043] usb 9-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 352.040147][ T1043] usb 9-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 352.046281][ T1043] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 352.051109][ T1043] usb 9-1: Product: syz [ 352.052447][ T1043] usb 9-1: Manufacturer: syz [ 352.057967][ T1043] usb 9-1: SerialNumber: syz [ 352.073517][ T1043] usb 9-1: 0:2 : does not exist [ 352.275623][ T1043] usb 9-1: 5:0: failed to get current value for ch 0 (-22) [ 352.312875][ T1043] usb 9-1: USB disconnect, device number 42 [ 352.357692][ T5752] udevd[5752]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb9/9-1/9-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 353.219617][T14263] __nla_validate_parse: 12 callbacks suppressed [ 353.219632][T14263] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3469'. [ 353.358386][T14270] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3472'. [ 354.143166][ C3] Scheduler tracepoints stat_sleep, stat_iowait, stat_blocked and stat_runtime require the kernel parameter schedstats=enable or kernel.sched_schedstats=1 [ 359.299921][T14299] netlink: 48 bytes leftover after parsing attributes in process `syz.2.3484'. [ 360.634416][T14301] binder: 14300:14301 unknown command 25363 [ 360.643758][T14301] binder: 14300:14301 ioctl c0306201 800000c0 returned -22 [ 371.086095][ T5841] usb 5-1: USB disconnect, device number 81 [ 372.942876][ T5104] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 372.960871][ T5104] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 372.981942][ T5104] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 373.004664][ T5104] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 373.020463][ T5104] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 375.025382][T14367] overlayfs: failed to clone lowerpath [ 375.159226][ T5104] Bluetooth: hci2: command tx timeout [ 377.234517][ T5104] Bluetooth: hci2: command tx timeout [ 378.395523][ T1441] ieee802154 phy0 wpan0: encryption failed: -22 [ 378.768040][T14380] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3509'. [ 379.315453][ T5104] Bluetooth: hci2: command tx timeout [ 381.394591][ T5104] Bluetooth: hci2: command tx timeout [ 385.509113][T14403] program syz.4.3518 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 386.680624][T14411] fuse: Bad value for 'fd' [ 386.858763][T14351] bridge0: port 1(bridge_slave_0) entered blocking state [ 386.867853][T14351] bridge0: port 1(bridge_slave_0) entered disabled state [ 386.875380][T14351] bridge_slave_0: entered allmulticast mode [ 386.937484][T14351] bridge_slave_0: entered promiscuous mode [ 387.023504][T14351] bridge0: port 2(bridge_slave_1) entered blocking state [ 387.030158][T14351] bridge0: port 2(bridge_slave_1) entered disabled state [ 387.036341][T14351] bridge_slave_1: entered allmulticast mode [ 387.068364][T14351] bridge_slave_1: entered promiscuous mode [ 387.132928][T14413] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3521'. [ 387.701220][T14351] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 387.824954][T14351] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 388.811423][T14351] team0: Port device team_slave_0 added [ 388.916371][T14351] team0: Port device team_slave_1 added [ 389.850536][T14351] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 389.860318][T14351] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 389.895032][T14351] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 389.962143][T14351] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 389.973775][T14351] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 390.000393][T14351] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 390.197176][T14426] netlink: 'syz.3.3526': attribute type 1 has an invalid length. [ 391.388997][T14351] hsr_slave_0: entered promiscuous mode [ 391.437205][T14351] hsr_slave_1: entered promiscuous mode [ 391.475232][T14351] debugfs: 'hsr0' already exists in 'hsr' [ 391.481897][T14351] Cannot create hsr debugfs directory [ 397.439069][T14351] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 397.550201][T14351] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 397.592440][T14351] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 397.714135][T14351] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 397.749533][T14351] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 397.942607][T14351] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 397.971012][T14351] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 398.182062][T14351] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 400.688255][T14351] 8021q: adding VLAN 0 to HW filter on device bond0 [ 400.988722][T14351] 8021q: adding VLAN 0 to HW filter on device team0 [ 401.147504][ T36] bridge0: port 1(bridge_slave_0) entered blocking state [ 401.150894][ T36] bridge0: port 1(bridge_slave_0) entered forwarding state [ 401.468801][ T60] bridge0: port 2(bridge_slave_1) entered blocking state [ 401.472135][ T60] bridge0: port 2(bridge_slave_1) entered forwarding state [ 406.040080][ T5760] Bluetooth: hci1: command 0x0406 tx timeout [ 409.265637][T14507] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3550'. [ 411.310475][T14351] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 411.330400][T14516] fuse: fd is not a fuse device [ 417.066369][T14351] veth0_vlan: entered promiscuous mode [ 417.261524][T14351] veth1_vlan: entered promiscuous mode [ 418.290298][T14351] veth0_macvtap: entered promiscuous mode [ 418.361111][T14351] veth1_macvtap: entered promiscuous mode [ 419.188867][T14351] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 419.490540][T14351] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 420.007132][ T12] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 420.074972][ T5824] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 420.078097][ T5824] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 420.080904][ T5824] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 422.268706][ T36] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 422.271656][ T36] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 422.886676][ T1170] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 422.909744][ T1170] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 431.008732][ T5797] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 431.926582][ T5797] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 432.759219][ T5797] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 433.587951][ T5797] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 436.278999][ T5797] bridge_slave_1: left allmulticast mode [ 436.288209][ T5797] bridge_slave_1: left promiscuous mode [ 436.295240][ T5797] bridge0: port 2(bridge_slave_1) entered disabled state [ 436.456546][ T5797] bridge_slave_0: left allmulticast mode [ 436.478295][ T5797] bridge_slave_0: left promiscuous mode [ 436.490575][ T5797] bridge0: port 1(bridge_slave_0) entered disabled state [ 437.622677][T14616] fuse: Unknown parameter 'group_id00000000000000000000' [ 438.644862][T14619] fuse: fd is not a fuse device [ 439.808983][ T1441] ieee802154 phy0 wpan0: encryption failed: -22 [ 441.943211][ T5797] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 442.066494][ T5797] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 442.241410][ T5797] bond0 (unregistering): Released all slaves [ 447.089875][ T5797] hsr_slave_0: left promiscuous mode [ 447.174562][ T5797] hsr_slave_1: left promiscuous mode [ 447.199216][ T5797] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 447.209652][ T5797] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 447.262640][ T5797] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 447.276785][ T5797] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 447.594251][ T5797] veth0: left promiscuous mode [ 447.600141][ T5797] veth1_macvtap: left promiscuous mode [ 447.602369][ T5797] veth0_macvtap: left promiscuous mode [ 447.616933][ T5797] veth1_vlan: left promiscuous mode [ 447.627673][ T5797] veth0_vlan: left promiscuous mode [ 448.858999][T14657] fuse: fd is not a fuse device [ 450.380220][ T5797] team0 (unregistering): Port device macvlan2 removed [ 454.991327][ T5797] team0 (unregistering): Port device team_slave_1 removed [ 455.310381][ T5797] team0 (unregistering): Port device team_slave_0 removed [ 457.239338][ T5760] Bluetooth: hci3: command 0x0406 tx timeout [ 457.611055][ T5458] 8021q: adding VLAN 0 to HW filter on device eth2 [ 460.859382][ T5797] IPVS: stop unused estimator thread 0... [ 464.216839][ T5458] 8021q: adding VLAN 0 to HW filter on device eth3 [ 472.266505][ T5458] 8021q: adding VLAN 0 to HW filter on device eth4 [ 472.381635][T14730] fuse: Unknown parameter '0x0000000000000003' [ 472.721500][T14729] Scheduler tracepoints stat_sleep, stat_iowait, stat_blocked and stat_runtime require the kernel parameter schedstats=enable or kernel.sched_schedstats=1 [ 473.919863][ T5760] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 473.942058][ T5760] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 473.967313][ T5760] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 474.002877][ T5760] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 474.055304][ T5760] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 476.196275][ T5104] Bluetooth: hci1: command tx timeout [ 478.286878][ T5104] Bluetooth: hci1: command tx timeout [ 480.079095][ T5760] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 480.110750][ T5760] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 480.130788][T14485] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 480.166588][T14485] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 480.200820][T14485] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 480.363907][T14485] Bluetooth: hci1: command tx timeout [ 481.338805][T14746] bridge0: port 2(bridge_slave_1) entered disabled state [ 481.347282][T14746] bridge0: port 1(bridge_slave_0) entered disabled state [ 482.286741][T14485] Bluetooth: hci5: command tx timeout [ 482.436657][T14485] Bluetooth: hci1: command tx timeout [ 483.432158][T14746] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 483.541561][T14746] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 484.354052][T14485] Bluetooth: hci5: command tx timeout [ 485.884890][ T5458] 8021q: adding VLAN 0 to HW filter on device eth5 [ 485.934113][T14628] netdevsim netdevsim2 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 485.941541][T14628] netdevsim netdevsim2 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 486.386542][ T5824] netdevsim netdevsim2 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 486.409813][ T5824] netdevsim netdevsim2 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 486.448852][T14485] Bluetooth: hci5: command tx timeout [ 486.914223][T14628] netdevsim netdevsim5 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 487.325749][T14774] fuse: fd is not a fuse device [ 487.527194][T14628] netdevsim netdevsim5 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 487.602325][T14777] fuse: Unknown parameter '01777777777777777777777' [ 487.939055][T14628] netdevsim netdevsim5 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 488.514189][T14485] Bluetooth: hci5: command tx timeout [ 488.644816][T14628] netdevsim netdevsim5 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 490.886388][T14628] bridge_slave_1: left allmulticast mode [ 490.888360][T14628] bridge_slave_1: left promiscuous mode [ 490.903422][T14628] bridge0: port 2(bridge_slave_1) entered disabled state [ 491.015441][T14628] bridge_slave_0: left allmulticast mode [ 491.018021][T14628] bridge_slave_0: left promiscuous mode [ 491.021293][T14628] bridge0: port 1(bridge_slave_0) entered disabled state [ 493.755587][T14628] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 493.822369][T14628] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 493.863508][T14628] bond0 (unregistering): Released all slaves [ 494.685679][T14805] 9p: Bad value for 'wfdno' [ 495.017893][T14805] veth5: entered promiscuous mode [ 495.019543][T14805] veth5: entered allmulticast mode [ 496.051803][T14808] Mass Storage Function, version: 2009/09/11 [ 496.063012][T14808] LUN: removable file: (no medium) [ 496.287300][ T41] audit: type=1800 audit(1785807559.960:234): pid=14809 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.4.3628" name="UDC" dev="configfs" ino=57424 res=0 errno=0 [ 496.504372][T14808] configfs-gadget.g1 gadget.0: uvc: uvc_function_bind() [ 496.514059][T14808] configfs-gadget.g1 gadget.0: uvc: Unable to allocate streaming EP [ 496.524983][T14808] ================================================================== [ 496.527861][T14808] BUG: KASAN: slab-use-after-free in trace_event_raw_event_udc_log_req+0x665/0x6c0 [ 496.531097][T14808] Read of size 4 at addr ffff88802614ee10 by task syz.4.3628/14808 [ 496.534855][T14808] [ 496.536373][T14808] CPU: 3 UID: 0 PID: 14808 Comm: syz.4.3628 Not tainted syzkaller #0 PREEMPT(full) [ 496.536389][T14808] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 496.536397][T14808] Call Trace: [ 496.536406][T14808] [ 496.536413][T14808] dump_stack_lvl+0x100/0x190 [ 496.536447][T14808] print_report+0x13d/0x4b0 [ 496.536479][T14808] ? __virt_addr_valid+0x239/0x430 [ 496.536802][T14808] ? trace_event_raw_event_udc_log_req+0x665/0x6c0 [ 496.536827][T14808] kasan_report+0xdf/0x1c0 [ 496.536862][T14808] ? trace_event_raw_event_udc_log_req+0x665/0x6c0 [ 496.536909][T14808] trace_event_raw_event_udc_log_req+0x665/0x6c0 [ 496.536938][T14808] ? __pfx_trace_event_raw_event_udc_log_req+0x10/0x10 [ 496.537008][T14808] usb_ep_free_request+0x1cc/0x280 [ 496.537033][T14808] uvc_function_bind+0x181a/0x1939 [ 496.537073][T14808] ? __pfx_uvc_function_bind+0x10/0x10 [ 496.537093][T14808] usb_add_function+0x219/0x890 [ 496.537133][T14808] configfs_composite_bind+0xd83/0x1960 [ 496.537170][T14808] ? kernfs_create_link+0x1bd/0x240 [ 496.537227][T14808] gadget_bind_driver+0x28c/0xbf0 [ 496.537247][T14808] ? __pfx_dummy_udc_set_speed+0x10/0x10 [ 496.537275][T14808] ? __pfx_gadget_bind_driver+0x10/0x10 [ 496.537299][T14808] really_probe+0x241/0xa60 [ 496.537337][T14808] __driver_probe_device+0x20e/0x450 [ 496.537357][T14808] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 496.537387][T14808] driver_probe_device+0x4a/0x140 [ 496.537413][T14808] __driver_attach+0x21f/0x5b0 [ 496.537438][T14808] ? __pfx___driver_attach+0x10/0x10 [ 496.537458][T14808] bus_for_each_dev+0x13e/0x1d0 [ 496.537482][T14808] ? __pfx_bus_for_each_dev+0x10/0x10 [ 496.537497][T14808] ? bus_add_driver+0x2b5/0x5b0 [ 496.537546][T14808] bus_add_driver+0x305/0x5b0 [ 496.537577][T14808] driver_register+0x1e2/0x360 [ 496.537610][T14808] usb_gadget_register_driver_owner+0x132/0x210 [ 496.537635][T14808] gadget_dev_desc_UDC_store+0x1b0/0x2e0 [ 496.537668][T14808] configfs_write_iter+0x302/0x4e0 [ 496.537707][T14808] vfs_write+0x6ac/0x1050 [ 496.537734][T14808] ? __pfx_configfs_write_iter+0x10/0x10 [ 496.537759][T14808] ? __pfx_vfs_write+0x10/0x10 [ 496.537774][T14808] ? find_held_lock+0x2b/0x80 [ 496.537853][T14808] ksys_write+0x12a/0x250 [ 496.537871][T14808] ? __pfx_ksys_write+0x10/0x10 [ 496.537883][T14808] ? trace_syscall_enter+0xd9/0x110 [ 496.537928][T14808] __do_fast_syscall_32+0xe7/0x970 [ 496.537963][T14808] do_fast_syscall_32+0x32/0x70 [ 496.537986][T14808] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 496.538008][T14808] RIP: 0023:0xf709efec [ 496.538032][T14808] Code: Unable to access opcode bytes at 0xf709efc2. [ 496.538049][T14808] RSP: 002b:00000000f548d50c EFLAGS: 00000292 ORIG_RAX: 0000000000000004 [ 496.538062][T14808] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 00000000800001c0 [ 496.538070][T14808] RDX: 000000000000000b RSI: 0000000000000000 RDI: 0000000000000000 [ 496.538077][T14808] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 496.538084][T14808] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000 [ 496.538095][T14808] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 496.538149][T14808] [ 496.538154][T14808] [ 496.638872][T14808] Allocated by task 14351: [ 496.640289][T14808] kasan_save_stack+0x30/0x50 [ 496.641829][T14808] kasan_save_track+0x14/0x30 [ 496.643337][T14808] __kasan_kmalloc+0xaa/0xb0 [ 496.644791][T14808] __kmalloc_cache_noprof+0x2e5/0x6c0 [ 496.646458][T14808] __devl_resource_register+0x178/0x630 [ 496.648183][T14808] devl_port_resource_register+0x5f/0x90 [ 496.649933][T14808] __nsim_dev_port_add+0x35f/0x8f0 [ 496.651666][T14808] nsim_drv_probe+0xdbd/0x13a0 [ 496.653466][T14808] really_probe+0x241/0xa60 [ 496.654912][T14808] __driver_probe_device+0x20e/0x450 [ 496.656742][T14808] driver_probe_device+0x4a/0x140 [ 496.658638][T14808] __device_attach_driver+0x1df/0x320 [ 496.660390][T14808] bus_for_each_drv+0x159/0x1e0 [ 496.662198][T14808] __device_attach+0x1e4/0x4d0 [ 496.663993][T14808] device_initial_probe+0xaf/0xd0 [ 496.665751][T14808] bus_probe_device+0x64/0x160 [ 496.667471][T14808] device_add+0x121d/0x1970 [ 496.669055][T14808] new_device_store+0x40b/0x700 [ 496.670561][T14808] bus_attr_store+0x74/0xb0 [ 496.672121][T14808] sysfs_kf_write+0xf2/0x150 [ 496.673651][T14808] kernfs_fop_write_iter+0x3e0/0x5f0 [ 496.675547][T14808] vfs_write+0x6ac/0x1050 [ 496.677226][T14808] ksys_write+0x12a/0x250 [ 496.678767][T14808] do_int80_emulation+0x14b/0x720 [ 496.680359][T14808] asm_int80_emulation+0x1a/0x20 [ 496.682151][T14808] [ 496.683017][T14808] Freed by task 14628: [ 496.684465][T14808] kasan_save_stack+0x30/0x50 [ 496.686106][T14808] kasan_save_track+0x14/0x30 [ 496.687867][T14808] kasan_save_free_info+0x3b/0x70 [ 496.689750][T14808] __kasan_slab_free+0x5f/0x80 [ 496.691376][T14808] kfree+0x22b/0x6c0 [ 496.692658][T14808] __devl_resources_unregister+0x179/0x2e0 [ 496.694485][T14808] __nsim_dev_port_del+0x225/0x2b0 [ 496.696331][T14808] nsim_dev_reload_destroy+0x10a/0x4a0 [ 496.698176][T14808] nsim_dev_reload_down+0x66/0xd0 [ 496.700031][T14808] devlink_reload+0x1ae/0x7a0 [ 496.701599][T14808] devlink_pernet_pre_exit+0x247/0x370 [ 496.703600][T14808] ops_undo_list+0x187/0xab0 [ 496.705220][T14808] cleanup_net+0x499/0x920 [ 496.706767][T14808] process_one_work+0xa23/0x1940 [ 496.708396][T14808] worker_thread+0x5ef/0xe50 [ 496.709883][T14808] kthread+0x370/0x450 [ 496.711169][T14808] ret_from_fork+0x72b/0xd50 [ 496.712703][T14808] ret_from_fork_asm+0x1a/0x30 [ 496.714497][T14808] [ 496.715340][T14808] The buggy address belongs to the object at ffff88802614ee00 [ 496.715340][T14808] which belongs to the cache kmalloc-128 of size 128 [ 496.719549][T14808] The buggy address is located 16 bytes inside of [ 496.719549][T14808] freed 128-byte region [ffff88802614ee00, ffff88802614ee80) [ 496.723762][T14808] [ 496.724549][T14808] The buggy address belongs to the physical page: [ 496.726580][T14808] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0xffff88802614e400 pfn:0x2614e [ 496.729704][T14808] flags: 0xfff00000000200(workingset|node=0|zone=1|lastcpupid=0x7ff) [ 496.732232][T14808] page_type: f5(slab) [ 496.733528][T14808] raw: 00fff00000000200 ffff88801bc42a00 ffffea00008a09d0 ffffea000039f290 [ 496.736207][T14808] raw: ffff88802614e400 000000080010000d 00000000f5000000 0000000000000000 [ 496.738899][T14808] page dumped because: kasan: bad access detected [ 496.740879][T14808] page_owner tracks the page as allocated [ 496.742774][T14808] page last allocated via order 0, migratetype Unmovable, gfp_mask 0xd2cc0(GFP_KERNEL|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP|__GFP_NOMEMALLOC), pid 5171, tgid 5171 (udevd), ts 24372012460, free_ts 22742895399 [ 496.749536][T14808] post_alloc_hook+0xfd/0x120 [ 496.751309][T14808] get_page_from_freelist+0xf48/0x3530 [ 496.753349][T14808] __alloc_frozen_pages_noprof+0x299/0x2dc0 [ 496.755511][T14808] new_slab+0xa2/0x640 [ 496.757079][T14808] refill_objects+0xe3/0x410 [ 496.758914][T14808] __pcs_replace_empty_main+0x376/0x680 [ 496.761080][T14808] __kmalloc_cache_noprof+0x479/0x6c0 [ 496.763201][T14808] kernfs_fop_open+0x9fa/0xd50 [ 496.765084][T14808] do_dentry_open+0x6ab/0x14d0 [ 496.766990][T14808] vfs_open+0x82/0x3f0 [ 496.768608][T14808] path_openat+0x2873/0x4280 [ 496.770438][T14808] do_file_open+0x20e/0x430 [ 496.772191][T14808] do_sys_openat2+0x10f/0x1e0 [ 496.773878][T14808] __x64_sys_openat+0x12d/0x210 [ 496.775629][T14808] do_syscall_64+0x115/0x840 [ 496.777282][T14808] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 496.779377][T14808] page last free pid 5304 tgid 5304 stack trace: [ 496.781627][T14808] __free_frozen_pages+0x79f/0x1090 [ 496.783405][T14808] qlist_free_all+0x47/0xf0 [ 496.784806][T14808] kasan_quarantine_reduce+0x1a0/0x1f0 [ 496.786440][T14808] __kasan_slab_alloc+0x69/0x90 [ 496.787932][T14808] kmem_cache_alloc_noprof+0x26b/0x6a0 [ 496.789561][T14808] do_getname+0x35/0x390 [ 496.790850][T14808] do_sys_openat2+0xc7/0x1e0 [ 496.792283][T14808] __x64_sys_openat+0x12d/0x210 [ 496.793778][T14808] do_syscall_64+0x115/0x840 [ 496.795379][T14808] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 496.797842][T14808] [ 496.798883][T14808] Memory state around the buggy address: [ 496.800814][T14808] ffff88802614ed00: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 fc fc [ 496.803305][T14808] ffff88802614ed80: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 496.805707][T14808] >ffff88802614ee00: fa fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 496.808136][T14808] ^ [ 496.809561][T14808] ffff88802614ee80: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 496.812108][T14808] ffff88802614ef00: fa fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 496.815178][T14808] ================================================================== [ 496.820123][T14808] Kernel panic - not syncing: KASAN: panic_on_warn set ... [ 496.823009][T14808] CPU: 3 UID: 0 PID: 14808 Comm: syz.4.3628 Not tainted syzkaller #0 PREEMPT(full) [ 496.826584][T14808] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 496.830310][T14808] Call Trace: [ 496.831611][T14808] [ 496.832784][T14808] dump_stack_lvl+0x100/0x190 [ 496.834643][T14808] vpanic+0x552/0x970 [ 496.836213][T14808] ? __pfx_vpanic+0x10/0x10 [ 496.838044][T14808] ? mark_held_locks+0x40/0x70 [ 496.839898][T14808] ? irqentry_exit+0x24d/0xa00 [ 496.841772][T14808] ? trace_event_raw_event_udc_log_req+0x665/0x6c0 [ 496.844317][T14808] panic+0xd1/0xe0 [ 496.845820][T14808] ? __pfx_panic+0x10/0x10 [ 496.847420][T14808] check_panic_on_warn.cold+0x19/0x34 [ 496.849489][T14808] end_report.part.0+0x3a/0x90 [ 496.851353][T14808] kasan_report.cold+0xe/0x18 [ 496.853034][T14808] ? trace_event_raw_event_udc_log_req+0x665/0x6c0 [ 496.855079][T14808] trace_event_raw_event_udc_log_req+0x665/0x6c0 [ 496.857026][T14808] ? __pfx_trace_event_raw_event_udc_log_req+0x10/0x10 [ 496.859134][T14808] usb_ep_free_request+0x1cc/0x280 [ 496.860767][T14808] uvc_function_bind+0x181a/0x1939 [ 496.862412][T14808] ? __pfx_uvc_function_bind+0x10/0x10 [ 496.864122][T14808] usb_add_function+0x219/0x890 [ 496.865664][T14808] configfs_composite_bind+0xd83/0x1960 [ 496.867374][T14808] ? kernfs_create_link+0x1bd/0x240 [ 496.868996][T14808] gadget_bind_driver+0x28c/0xbf0 [ 496.870578][T14808] ? __pfx_dummy_udc_set_speed+0x10/0x10 [ 496.872334][T14808] ? __pfx_gadget_bind_driver+0x10/0x10 [ 496.874050][T14808] really_probe+0x241/0xa60 [ 496.875482][T14808] __driver_probe_device+0x20e/0x450 [ 496.877100][T14808] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 496.878936][T14808] driver_probe_device+0x4a/0x140 [ 496.880446][T14808] __driver_attach+0x21f/0x5b0 [ 496.881967][T14808] ? __pfx___driver_attach+0x10/0x10 [ 496.883590][T14808] bus_for_each_dev+0x13e/0x1d0 [ 496.885076][T14808] ? __pfx_bus_for_each_dev+0x10/0x10 [ 496.886702][T14808] ? bus_add_driver+0x2b5/0x5b0 [ 496.888188][T14808] bus_add_driver+0x305/0x5b0 [ 496.889678][T14808] driver_register+0x1e2/0x360 [ 496.891169][T14808] usb_gadget_register_driver_owner+0x132/0x210 [ 496.893072][T14808] gadget_dev_desc_UDC_store+0x1b0/0x2e0 [ 496.894789][T14808] configfs_write_iter+0x302/0x4e0 [ 496.896367][T14808] vfs_write+0x6ac/0x1050 [ 496.897712][T14808] ? __pfx_configfs_write_iter+0x10/0x10 [ 496.899444][T14808] ? __pfx_vfs_write+0x10/0x10 [ 496.900923][T14808] ? find_held_lock+0x2b/0x80 [ 496.902484][T14808] ksys_write+0x12a/0x250 [ 496.903855][T14808] ? __pfx_ksys_write+0x10/0x10 [ 496.905384][T14808] ? trace_syscall_enter+0xd9/0x110 [ 496.907031][T14808] __do_fast_syscall_32+0xe7/0x970 [ 496.908650][T14808] do_fast_syscall_32+0x32/0x70 [ 496.910189][T14808] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 496.912179][T14808] RIP: 0023:0xf709efec [ 496.913480][T14808] Code: Unable to access opcode bytes at 0xf709efc2. [ 496.915530][T14808] RSP: 002b:00000000f548d50c EFLAGS: 00000292 ORIG_RAX: 0000000000000004 [ 496.918076][T14808] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 00000000800001c0 [ 496.920503][T14808] RDX: 000000000000000b RSI: 0000000000000000 RDI: 0000000000000000 [ 496.922930][T14808] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 496.925355][T14808] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000 [ 496.927730][T14808] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 496.930222][T14808] [ 496.931916][T14808] Kernel Offset: disabled [ 496.933289][T14808] Rebooting in 86400 seconds.. VM DIAGNOSIS: 01:39:21 Registers: info registers vcpu 0 CPU#0 RAX=0000000000000002 RBX=0000000000000003 RCX=ffffffff820c3c30 RDX=0000000000000006 RSI=000000000000001d RDI=0000000000000001 RBP=ffffffff8bd64720 RSP=ffffc90006c6f218 R8 =0000000000000001 R9 =000000000000001c R10=0000000000000006 R11=0000000000000000 R12=0000000000000006 R13=0000000000000005 R14=0000000000000001 R15=ffff888050f96010 RIP=ffffffff8209ac1f RFL=00000206 [-----P-] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =002b 0000000000000000 ffffffff 00c0f300 DPL=3 DS [-WA] CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =002b 0000000000000000 ffffffff 00c0f300 DPL=3 DS [-WA] FS =0000 0000000000000000 ffffffff 00c00000 GS =0063 ffff888096bdf000 ffffffff 00d0f300 DPL=3 DS [-WA] LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe0000003000 00000067 00008b00 DPL=0 TSS64-busy GDT= fffffe0000001000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=00007ffcfbea36b8 CR3=00000000743f0000 CR4=00352ef0 DR0=ffffffffffffffff DR1=0000000000005544 DR2=0000000000000083 DR3=ffffffffefffff15 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=00000000c0f90000 Opmask01=0000000000003fff Opmask02=00000000bfffbfff Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ffff000000000000 ffffffffff0000ff ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 2e2e2e2e2e2e2e2e 2e2e2e2e2e2e2e2e ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 2e2e2e2e2e2e2e2e 2e2e2e2e2e2e2e2e ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ffff000000000000 ffffffffff0000ff ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 70002f74656e2f73 73616c632f737973 2f002f74656e2f73 79732f636f72702f ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0030303130303030 3030303230786c77 004300303d73656d 616e66692e74656e ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 000d0d0c0d0d0d0d 0d0d0d0f0d45514a 0043000d004e5850 5c535b5413495853 ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0008000500000000 0000000000000000 0000000000070014 0000000000000000 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 80410004803e0004 0000000000000000 0000000000000000 0000000000000000 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000e002400000000 0008000500000000 0000000000000000 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000070014 0000000000000000 0000000000000000 0000000000000000 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000007 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 4662200a330a6561 0064612045204d44 3030000a32533030 0a30300045205365 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 bfbfbfbfbfbfbfbf bfbfbfbfbfbfbfbf bfbfbfbfbfbfbfbf bfbff52532232d20 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 262821df2e2e33df 3228df3232202b22 df312e232d2435bf 2324353124322431 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 4141414141414141 4141414141414141 4141414141414141 4141414141414141 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 1a1a1a1a1a1a1a1a 1a1a1a1a1a1a1a1a 1a1a1a1a1a1a1a1a 1a1a1a1a1a1a1a1a ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 2020202020202020 2020202020202020 2020202020202020 2020202020202020 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 info registers vcpu 1 CPU#1 RAX=0000000000000000 RBX=0000000000000006 RCX=ffffffff81b51eaa RDX=ffff88801c352540 RSI=ffffffff81b51ece RDI=ffff88801c352540 RBP=0000000000000001 RSP=ffffc9000046fdf8 R8 =0000000000000001 R9 =0000000000000003 R10=0000000000000006 R11=0000000000000000 R12=0000000000000000 R13=0000000000000000 R14=1ffff9200008dfc4 R15=0000000000000000 RIP=ffffffff81b51ecf RFL=00000093 [--S-A-C] CPL=0 II=0 A20=1 SMM=0 HLT=1 ES =0000 0000000000000000 ffffffff 00c00000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 ffffffff 00c00000 FS =0000 0000000000000000 ffffffff 00c00000 GS =0000 ffff888096cdf000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe000004a000 00004087 00008b00 DPL=0 TSS64-busy GDT= fffffe0000048000 0000007f IDT= fffffe0000000000 00000fff CR0=80050033 CR2=00000000f72f5e9c CR3=000000000e994000 CR4=00350ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=00000000fefeff00 Opmask01=000000000000007f Opmask02=00000000fffeff7f Opmask03=0000000000000000 Opmask04=00000000ffffffff Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00005644a2bf9af0 00005644a2bf9af0 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00005644a2be90c8 ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f34b93f1b20 ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f34b93f1b20 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ffff000000000000 ffff000000000000 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ffff0000ff000000 0000000000000000 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f34b9352c80 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 4f4a414d003d454d 414e564544003d58 45444e494649003d 4550595456454400 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 4f4a414d0018454d 414e564544001858 45444e4946490018 4550595456454400 ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 7361647c2a737369 63637c2a65686361 63627c2a6476787c 2a64767c2a64737c ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 003a6166703a756b 733a302e30312d35 33712d6370727663 3a3174633a554d45 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 516e76633a302e30 312d3533712d6370 7276703a29393030 322c394843492b35 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 3351284350647261 646e6174536e703a 554d45516e76733a 302e3072623a3431 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 30322f31302f3430 64623a322d332e36 312e312d6e616962 65642d332e36312e ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 323032302c313032 302c394631302c32 4331302c38423130 2c464131302c4541 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 info registers vcpu 2 CPU#2 RAX=0000000000000000 RBX=ffff888050559010 RCX=ffffffff820c3c8a RDX=0000000000000420 RSI=000000000000002c RDI=ffff888029f0ca80 RBP=0000000000000000 RSP=ffffc90000538178 R8 =0000000000000004 R9 =000000000000002c R10=0000000000000420 R11=00000000000a98f7 R12=0000000000000420 R13=000000000000002c R14=000000739eb25b2c R15=ffff888050559010 RIP=ffffffff8209a9db RFL=00000246 [---Z-P-] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =002b 0000000000000000 ffffffff 00c0f300 DPL=3 DS [-WA] CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =002b 0000000000000000 ffffffff 00c0f300 DPL=3 DS [-WA] FS =0000 0000000000000000 ffffffff 00c00000 GS =0063 ffff888096ddf000 ffffffff 00d0f300 DPL=3 DS [-WA] LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe0000091000 00000067 00008b00 DPL=0 TSS64-busy GDT= fffffe000008f000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=000000002ef11ff8 CR3=0000000072640000 CR4=00352ef0 DR0=ffffffffffffffff DR1=0000000000005544 DR2=0000000000000083 DR3=ffffffffefffff15 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000000104080 Opmask01=0000000000000000 Opmask02=00000000bfdfdfdf Opmask03=0000000020400004 Opmask04=00000000fffdffff Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fff31a69790 0000003000000018 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00005644a2bd8680 ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00005644a2bf1730 ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f34b93f1b20 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ffff000000000000 ffff000000000000 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ffff0000ff000000 0000000000000000 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000000000000ff00 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 73732537d1ccebe9 73732537d1cceb07 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 a0fa4d1bfd3b5b2d 73737376173958a3 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 393130302e303030 303a303030303a30 3030302f64696875 2f6373696d2f6c61 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 005600051f40494c 43055c5155484005 424b4c55554c4e53 004057005b1a0f00 ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 d3893e688e48285e 00000005644a2be3 00000000000000e1 0000000000003931 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 d3893e688e48285e 00000005644a2bd6 0000000000000141 0000000000000020 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 d389682c2cf5e43e fffffffa9bb5d42a 00007f34b92bfc2b 00007fff31a61588 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 d3897f3cfcffff7f fffffffefbf7fcff 00007f74ffbffffb ffffffff77e7f7cc ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 332c312c30652d30 3030306541443730 7045353430763330 3030623a7475706e ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00484c41494b4544 0000000000000021 00004e4453412750 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00000005493f1b31 0000000000000021 0000000000000020 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 info registers vcpu 3 CPU#3 RAX=0000000000000007 RBX=0000000000000026 RCX=ffffffff820c6655 RDX=0000000000000000 RSI=0000000000000000 RDI=0000000000000005 RBP=ffff88801bcab800 RSP=ffffc900031671e8 R8 =0000000000000000 R9 =ffffed1003a57500 R10=ffff88801d2ba807 R11=0000000000002499 R12=0000000000000000 R13=0000000000000001 R14=ffff88801bcab810 R15=ffff88801d2ba800 RIP=ffffffff8209a9b0 RFL=00000046 [---Z-P-] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =002b 0000000000000000 ffffffff 00c0f300 DPL=3 DS [-WA] CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =002b 0000000000000000 ffffffff 00c0f300 DPL=3 DS [-WA] FS =0000 0000000000000000 ffffffff 00c00000 GS =0063 ffff888096edf000 ffffffff 00d0f300 DPL=3 DS [-WA] LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe00000d8000 00000067 00008b00 DPL=0 TSS64-busy GDT= fffffe00000d6000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=00000000f74543e4 CR3=0000000073e76000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000000000000 Opmask01=0000000000000000 Opmask02=0000000000000000 Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000052 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000