last executing test programs: 1m13.232016474s ago: executing program 3 (id=639): r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) dup(r0) read$FUSE(0xffffffffffffffff, &(0x7f00000008c0)={0x2020}, 0x2020) 1m13.152520248s ago: executing program 3 (id=640): r0 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000040)=ANY=[@ANYBLOB="1800000002000000000000000000082295"], &(0x7f0000000180)='syzkaller\x00', 0x0, 0x0, 0x0, 0x1e00, 0x21}, 0x94) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000080)={'syz_tun\x00', 0x0}) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000100)={0x0, &(0x7f0000000f40)=""/4089, 0x3f, 0xff9, 0x8}, 0x28) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000000c0)={r0, r2, 0x25, 0x2, @void}, 0x10) syz_emit_ethernet(0x88, &(0x7f00000000c0)=ANY=[@ANYBLOB="aaaaaaaaaaaa00000000000086dd61d53a0600522f00fe8000000000000000000000000000bbfe8000000000000000000000000000aa0c2088be00060001bf3f030b7d27010088a8"], 0x0) 1m13.152063287s ago: executing program 3 (id=641): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x2) ioctl$KVM_SET_DEVICE_ATTR(r2, 0x4018aee1, 0x0) 1m12.983878745s ago: executing program 3 (id=642): r0 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_ADD_ADDR(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000004c0)=ANY=[@ANYBLOB='0\x00\x00\x00', @ANYRES16=r0, @ANYBLOB="01000000000000000000010000001c0001800600010002000000080003"], 0x30}, 0x1, 0x0, 0x0, 0xaa34a4cfdf933201}, 0x10) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$mptcp(&(0x7f00000002c0), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000380)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="0100000000000000000007000000140001800500020001000000080006001a"], 0x28}, 0x1, 0x0, 0x0, 0x80}, 0x14000818) 1m12.983554182s ago: executing program 3 (id=643): mkdir(&(0x7f0000000180)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000400)='cgroup2\x00', 0x0, 0x0) chdir(&(0x7f0000000240)='./file0\x00') mkdir(&(0x7f0000000580)='./file0\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) mkdir(&(0x7f00000004c0)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000400)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}]}) 1m12.874442024s ago: executing program 3 (id=645): r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, 0x0) sendmsg$NL80211_CMD_CHANNEL_SWITCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000140)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r0, @ANYBLOB="010008020000001800006600000008000300", @ANYRES32, @ANYBLOB="08002600940900000800b70099"], 0x2c}, 0x1, 0x0, 0x0, 0x805}, 0x0) 57.802983275s ago: executing program 32 (id=645): r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, 0x0) sendmsg$NL80211_CMD_CHANNEL_SWITCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000140)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r0, @ANYBLOB="010008020000001800006600000008000300", @ANYRES32, @ANYBLOB="08002600940900000800b70099"], 0x2c}, 0x1, 0x0, 0x0, 0x805}, 0x0) 16.51086532s ago: executing program 2 (id=1808): add_key$keyring(&(0x7f00000101c0), &(0x7f0000010180)={'syz', 0x1}, 0x0, 0x0, 0xffffffffffffffff) ioctl$VIDIOC_SUBDEV_S_EDID(0xffffffffffffffff, 0xc0285629, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000380), 0x8000, 0x0) close(r1) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$tipc(&(0x7f00000000c0), r2) sendmsg$TIPC_CMD_ENABLE_BEARER(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c657230"], 0x38}, 0x1, 0x0, 0x0, 0x44081}, 0x0) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x100, 0x0) close(r4) r5 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000440)=@newqdisc={0x4c, 0x24, 0x4ee4e6a52ff56541, 0x70bd2c, 0x0, {0x0, 0x0, 0x0, r6, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x1c, 0x2, {{0x3, 0x7, 0x635e, 0x5, 0xffffffff, 0xfff}}}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x240080c1}, 0x0) sendmsg$nl_route_sched(r5, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000240)=@newqdisc={0x5c, 0x24, 0x4ee4e6a52ff56541, 0x70bd2b, 0x80000, {0x0, 0x0, 0x0, r6, {0x0, 0xe}, {0x2, 0xb}, {0xffe0, 0x484c10e0d22b6613}}, [@qdisc_kind_options=@q_fq_pie={{0xb}, {0xfffffffffffffdc3, 0x2, [@TCA_FQ_PIE_MEMORY_LIMIT={0x8, 0x8, 0x10006}, @TCA_FQ_PIE_ALPHA={0x8, 0x5, 0x12}, @TCA_FQ_PIE_LIMIT={0x8, 0x1, 0x6}, @TCA_FQ_PIE_DQ_RATE_ESTIMATOR={0x8, 0xc, 0x1}, @TCA_FQ_PIE_QUANTUM={0x8, 0x7, 0x6}]}}]}, 0x5c}, 0x1, 0x0, 0x0, 0x20004061}, 0x4008000) ioctl$SIOCSIFHWADDR(r4, 0x8922, &(0x7f0000002280)={'syzkaller0\x00', @random="2b0100004ec6"}) 16.333090561s ago: executing program 2 (id=1811): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) bind$netlink(r0, &(0x7f0000000080)={0x10, 0x0, 0x0, 0x1}, 0xc) r1 = socket$inet6(0xa, 0x3, 0x7) setsockopt$inet6_IPV6_XFRM_POLICY(r1, 0x29, 0x23, &(0x7f0000000340)={{{@in6=@dev={0xfe, 0x80, '\x00', 0x1e}, @in6=@loopback, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x20}, {0x0, 0x0, 0xfffffffffffffffe, 0x0, 0x0, 0x0, 0x4, 0x2}, {}, 0x0, 0x6e6bb9, 0x1}, {{@in=@broadcast, 0xfffffffc, 0x32}, 0x0, @in=@empty, 0x0, 0x0, 0x2, 0x7, 0x200}}, 0xe8) sendmmsg(r1, &(0x7f0000000480), 0x2e9, 0x0) sendmsg$nl_xfrm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000001c0)=ANY=[@ANYBLOB="fc000000160033060000000000000080ff0100000000000000000000000000017f00000100000000000000000000000000000000000000000a00000000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="ffffffff000000000000000000000000000004d232000000fc02000000000000000000230000000100000000000000000000000000000000000000000000000000000000000000000000000000000000ffffffffffffffff000000000000000000000000000000000500000000000000ffffffffffffffff000000000000000005000000000000000400000002000000000000000600000002000000", @ANYRESDEC=0x0], 0xfc}}, 0x8000) 16.33267126s ago: executing program 2 (id=1812): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-twofish-avx\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r1 = accept4(r0, 0x0, 0x0, 0x0) sendmmsg$alg(r1, &(0x7f0000001c80)=[{0x0, 0x0, 0x0}], 0x1, 0x40800) recvmsg(r1, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000001800)=""/81, 0x51}], 0x1}, 0xf0ff) 16.257246544s ago: executing program 2 (id=1815): sendmmsg$inet(0xffffffffffffffff, &(0x7f0000000b00)=[{{&(0x7f0000000000)={0x2, 0x4e24, @multicast1}, 0x10, 0x0, 0x0, 0x0, 0x30}}], 0x1, 0x0) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff7000/0x1000)=nil, &(0x7f0000ff9000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff8000/0x2000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ff5000/0x1000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x24004045) r0 = io_uring_setup(0x1b7b, &(0x7f0000000040)={0x0, 0x973, 0x1c080, 0x0, 0x44a}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000002040)=@newtaction={0x1110, 0x30, 0x400, 0x70bd2c, 0x25dfdbfd, {}, [{0x10fc, 0x1, [@m_nat={0xa8, 0x4, 0x0, 0x0, {{0x8}, {0x7c, 0x2, 0x0, 0x1, [@TCA_NAT_PARMS={0x28, 0x1, {{0x3, 0x5, 0x3edfe111b2fb543, 0x5d, 0x3}, @private=0xa010100, @local, 0xffff00}}, @TCA_NAT_PARMS={0x28, 0x1, {{0x5bad, 0x8, 0x3, 0x4, 0x3}, @initdev={0xac, 0x1e, 0x1, 0x0}, @broadcast}}, @TCA_NAT_PARMS={0x28, 0x1, {{0x3, 0x5, 0x3, 0x4, 0x9}, @empty, @dev={0xac, 0x14, 0x14, 0x29}, 0xff, 0x1}}]}, {0x5, 0x6, "e5"}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x2}}}}, @m_ctinfo={0x118, 0x2, 0x0, 0x0, {{0xb}, {0x4}, {0xe9, 0x6, "07113795b7aff68e37d6c1d4a48add8414f76c510e066d7360662d924787caa644479e56da34f82297f6ccfeb93c4bb0143caef6ecabfa2040b6b632eaf178d1ba7386d660ad8aa8b2cfa07c956bef8d926df64f728a77f22ba843040ac4fdaff7e0567cd38d29647f2da33195f7588c0b0deb6a83877d8be542cfcf30ec6ccbad54f20d22dc0f9b48dcb7d08bc875c1f2fdfc9d081476750845212432843f51b0f1055c7d08457a81b867ac2a0c3c61f3267346d3e585e647bfb92f9112e7409425e689c7df360157a6aea41b7d716643cf7873b8e137ebef4f3da72691fbde762b8d4056"}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x3, 0x3}}}}, @m_sample={0x68, 0x10, 0x0, 0x0, {{0xb}, {0x3c, 0x2, 0x0, 0x1, [@TCA_SAMPLE_TRUNC_SIZE={0x8, 0x4, 0x5}, @TCA_SAMPLE_PSAMPLE_GROUP={0x8, 0x5, 0xcced}, @TCA_SAMPLE_PARMS={0x18, 0x2, {0xffffc87c, 0x1, 0xffffffffffffffff, 0x9, 0xc}}, @TCA_SAMPLE_PSAMPLE_GROUP={0x8, 0x5, 0xc}, @TCA_SAMPLE_PSAMPLE_GROUP={0x8, 0x5, 0x7f}]}, {0x4}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x1, 0x2}}}}, @m_skbedit={0x68, 0xe, 0x0, 0x0, {{0xc}, {0x3c, 0x2, 0x0, 0x1, [@TCA_SKBEDIT_PTYPE={0x6, 0x7, 0x5}, @TCA_SKBEDIT_QUEUE_MAPPING={0x6, 0x4, 0x7fff}, @TCA_SKBEDIT_PTYPE={0x6, 0x7, 0x3}, @TCA_SKBEDIT_PTYPE={0x6, 0x7, 0x3}, @TCA_SKBEDIT_PARMS={0x18, 0x2, {0x25, 0x9, 0x0, 0x4, 0x9}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x2, 0x1}}}}, @m_pedit={0xe68, 0x1d, 0x0, 0x0, {{0xa}, {0xe3c, 0x2, 0x0, 0x1, [@TCA_PEDIT_PARMS={0xe38, 0x2, {{{0x3, 0x8, 0x4, 0xffff, 0xfffff000}, 0x4, 0x4, [{0x5, 0x6, 0x8, 0x10001, 0x4743, 0xa}]}, [{0x1, 0x0, 0x1, 0x1, 0xda9, 0x1ff}, {0x3, 0x2, 0x9, 0x9, 0x7, 0xd7}, {0x20000000, 0x1, 0x1, 0x1, 0x5, 0x8}, {0xffff541c, 0x8, 0x4, 0x8b, 0x6, 0x7c3538ea}, {0x6, 0x1, 0x2, 0x4, 0x1, 0x4}, {0x2, 0x0, 0x6, 0xf, 0xb, 0x4}, {0x3, 0x7fff, 0x5, 0x71b, 0x8000, 0xccf}, {0x5, 0x0, 0x81, 0x6, 0x2, 0x4}, {0x301bc54f, 0x1f, 0x1, 0xe, 0x81, 0x9}, {0x4834ffd, 0x40, 0xb6, 0x2, 0x7, 0xe918}, {0x2, 0x1ff, 0x400, 0x101, 0x10000, 0x66}, {0x8, 0x7, 0x5, 0x695, 0x800, 0x8}, {0x4, 0x7, 0xd2c, 0x6, 0x8, 0xb1c}, {0x6, 0xa6, 0x3, 0x0, 0x3ff, 0x3}, {0xfffffffc, 0xd29c, 0x9, 0xb4, 0x6, 0x2}, {0x1f, 0x6, 0xffff, 0x3, 0xd4a9, 0x4}, {0x7, 0x5, 0x5, 0x8, 0xffff, 0x3}, {0x2, 0x95, 0x4, 0x3, 0x0, 0x86}, {0x101, 0xffffffff, 0x80000000, 0x800, 0x6, 0x5}, {0x7e7d, 0x9, 0xfffffff8, 0x4, 0xfffffff9, 0x8}, {0x3, 0x7ff, 0x4, 0x2, 0x3, 0x5}, {0x2, 0x0, 0x8, 0x8, 0x8, 0x86}, {0x49, 0xdae, 0x8c2, 0x78dd, 0xfffffffb, 0x7}, {0x18000, 0x559, 0x9, 0x3, 0x6, 0x2}, {0x0, 0xfaa, 0x9, 0xc, 0x1, 0x8001}, {0xa, 0x10, 0x5, 0x7, 0x0, 0xc39f}, {0x5, 0xfff, 0x8, 0x9, 0x4506, 0x10}, {0x9, 0x5, 0x9, 0x8, 0x5}, {0xe1c6, 0x11, 0x9, 0x200, 0xdedd, 0xfffffffe}, {0x7, 0x8, 0x1, 0x40, 0xfffffff8, 0x5a}, {0xab, 0x80000000, 0x7, 0x3, 0x4, 0x100000}, {0xc, 0x0, 0x7, 0x78c, 0x7, 0x9773}, {0x7, 0x3, 0xb, 0xccc2, 0x1, 0x6}, {0x1, 0x4, 0x1, 0x200, 0x4, 0x6}, {0xdc1, 0x8000000, 0x6, 0xe, 0xc, 0x40}, {0x5, 0x4, 0x3, 0x5, 0x3, 0x4}, {0x80, 0x3, 0x4, 0x5, 0x1, 0x7c47}, {0xffff, 0x7f, 0x9, 0x8, 0x7, 0x58b}, {0x7, 0xb01c522b, 0x5, 0x9, 0x3ff, 0x1000}, {0x4, 0x0, 0x10000, 0x10000, 0x6, 0x571bcc93}, {0x8, 0x7, 0xb1, 0x6f7, 0x0, 0x1}, {0xfe3, 0x50, 0x2, 0x600, 0xf, 0x40}, {0x8, 0x8, 0x8, 0xbe, 0xd6d, 0xc}, {0x7, 0x18000, 0x1b32, 0x7, 0x9, 0x8}, {0xfffffff8, 0x0, 0x3ff, 0x9, 0x9, 0x1}, {0x1, 0x2, 0x1, 0x6, 0x8, 0x100}, {0x0, 0x1, 0xf, 0xa0, 0x7, 0xff}, {0x3, 0x3, 0x6, 0x80, 0x75d8, 0x40}, {0x9, 0x4, 0x1, 0x3, 0x1, 0x6c94}, {0xfffffc01, 0x5, 0x4, 0x6, 0x9, 0x6}, {0x0, 0x5ed, 0x3, 0x80000001, 0x7ff, 0x4}, {0x1de, 0x0, 0xe72, 0x8001, 0xb89, 0x9}, {0x101, 0xfffffffb, 0x9, 0xa0000000, 0x2}, {0x7000000, 0x0, 0x1, 0xcaa9, 0x7d2c, 0x2}, {0x8, 0x8, 0xfffffffe, 0x3ff, 0x4, 0x4}, {0x6, 0x0, 0x80000001, 0x9, 0x5, 0xaa4e}, {0x9, 0x80000000, 0x0, 0x0, 0x4, 0x8}, {0x1, 0x7fff, 0xffffffff, 0x9, 0x0, 0xf}, {0x6, 0x7, 0xa70e, 0x7fffffff, 0xd6dd, 0x9}, {0x5, 0x7, 0x200, 0xffffffff, 0x1, 0x1695}, {0xfffff049, 0x0, 0x38e0511a, 0xa9, 0x8, 0xcc7}, {0x2, 0x785b, 0x5, 0xc, 0xc, 0xf732}, {0xffffff00, 0x80000001, 0x2, 0x80000001, 0x200, 0x80000001}, {0x712c, 0x7, 0x10, 0xfffffffa, 0x5, 0x3ff}, {0x993, 0xa, 0x5, 0x4, 0x8, 0x8}, {0x6, 0x2, 0xd, 0xd, 0x7ad, 0x7ff}, {0xb, 0x4a, 0x7, 0xd, 0x0, 0x800}, {0x5, 0xe1, 0x8, 0xfffff621, 0x2, 0xffff}, {0x40, 0x3, 0x2, 0x10, 0x0, 0x3ff}, {0x7, 0x59f4, 0x5, 0x3, 0x10000, 0x8000}, {0x2, 0x0, 0x2534dbb0, 0x1, 0x5, 0xd}, {0x9, 0x8, 0x5, 0x6, 0xdd, 0x9}, {0x40, 0x1000, 0x5, 0x100, 0xffffffff, 0x2}, {0x4, 0x8, 0x0, 0x4, 0x8}, {0x0, 0x685, 0x7f, 0x9, 0x81, 0xb3}, {0xe4, 0x8001, 0x0, 0x8, 0x101}, {0x0, 0x80000000, 0x0, 0x9, 0x7, 0x4}, {0x4, 0x8, 0x1, 0x80000001, 0x1, 0x1000}, {0x1, 0xffffffff, 0xfffffff7, 0x5, 0xa73, 0x80000000}, {0x3, 0x1ff, 0x3, 0xfffffffe, 0x1, 0x4}, {0x21d, 0xf27a, 0x5, 0x5}, {0x6, 0x7, 0x7fffffff, 0xa7ac, 0x8, 0x7}, {0x2, 0x8, 0x458, 0x9, 0x5ce, 0x4}, {0x200, 0x0, 0x5, 0xfffffffd, 0x5, 0x451}, {0xa, 0xffff0000, 0xfffff2d3, 0x7320, 0x4, 0x6}, {0x0, 0x81, 0x3, 0x1f1, 0x8, 0x7}, {0xff, 0x81, 0x8001, 0xfffff001, 0x2, 0x7}, {0x6, 0x0, 0x3, 0x15, 0xb, 0xbc}, {0xffffffff, 0xffffff81, 0xf974, 0x10001, 0x800, 0xd}, {0x8000, 0x0, 0x1ff, 0x8, 0x6, 0xc}, {0x932, 0x0, 0x101, 0x3, 0x0, 0x8}, {0xd, 0x4, 0xffffffff, 0x7, 0x400, 0xfff}, {0x1, 0x9, 0x3ff, 0x9, 0x2000, 0x2}, {0x8001, 0xff, 0x6, 0xd, 0x8, 0x8371}, {0xffffff81, 0x1, 0x9, 0xffffffff, 0x71fa92e8, 0x5}, {0x7, 0x330c, 0x7fffffff, 0x0, 0x1, 0x36ae3b65}, {0xffff7d5f, 0x8000, 0x8, 0x9a2, 0x1d, 0x99}, {0xfffffff7, 0x5, 0x4, 0x10000, 0xf64, 0x8000}, {0x1, 0x4ec, 0x0, 0x5, 0x7, 0x200}, {0x7fffffff, 0xffffffff, 0x2, 0x3d0b, 0x2, 0x28000000}, {0x4, 0x200, 0x1, 0x9a6, 0x1, 0x3}, {0x0, 0xffffff2c, 0x7, 0x228cb442, 0x7, 0x6}, {0x5, 0x9, 0x3, 0x5, 0x1, 0x7ff}, {0x7, 0x7f, 0x3, 0x30720acc, 0x3, 0xfffffffd}, {0x4, 0x0, 0x0, 0x9, 0x80000001, 0x1}, {0x101, 0xd0, 0x80000001, 0x4, 0xfff, 0x80}, {0xbd5, 0x61a1, 0x0, 0x3, 0x3, 0x80000000}, {0x9, 0xd089bc0, 0x9, 0x10001, 0x1, 0x4}, {0x6, 0xd8c, 0x7f, 0x5, 0x93, 0x5}, {0xe33, 0x82, 0xd36, 0x408, 0x1}, {0x0, 0x3, 0x7fff, 0x8, 0x0, 0x7}, {0x3, 0x3, 0x7, 0x7, 0x4}, {0x0, 0x5, 0x8, 0x100, 0xad3e, 0x8}, {0x4, 0x2, 0x0, 0x3, 0x8, 0x81}, {0xbb, 0x7, 0xbf, 0xfdd, 0x8}, {0x5, 0xe, 0x0, 0x2, 0xba3, 0x5}, {0x2, 0x72b, 0x9, 0x4, 0x0, 0x7}, {0x6f45, 0x7fff, 0x6, 0x10, 0x1000, 0x9}, {0x6, 0x10, 0x4, 0x7, 0x0, 0x3}, {0x3, 0x7ff, 0x1, 0x4, 0x6, 0x4}, {0x8, 0x7, 0x6, 0x7, 0x8, 0x3453f28f}, {0x8, 0x9, 0x7f, 0xc47a, 0x4, 0x9}, {0x7, 0xd7a4, 0x2, 0x2, 0xffffffff, 0xffff}, {0x2, 0x4, 0xf4d7, 0xffffffff, 0xff}, {0x2, 0x2, 0x0, 0x373, 0x1000, 0xf9e}, {0x1, 0x4a0a, 0x0, 0x7, 0x8, 0xa}, {0x8, 0x8, 0x0, 0x3, 0x3, 0x6}, {0x0, 0x24, 0x9, 0x1, 0xa523, 0x4}], [{0x0, 0x1}, {0x2}, {0x4}, {0x2, 0x1}, {0x0, 0x42d2991b73f0f57a}, {0x71a8a145a2bf5926, 0x1}, {0x3}, {0x5, 0x1}, {0x1, 0x1}, {}, {0x2}, {0x1}, {0x1}, {0x3}, {0x6, 0x1}, {0x5}, {0x4, 0x1}, {0x2, 0x1}, {0x4, 0x1}, {0x0, 0x1}, {0x4}, {0x2, 0x1}, {0x4, 0x1}, {0x3, 0x1}, {0x3}, {0x1, 0x1}, {0x2, 0x1}, {0x5, 0x1}, {0x16f9a539fa755baf, 0x1}, {0x3, 0x1}, {0x0, 0x1}, {0x4}, {0x4, 0x1}, {0x1, 0x1}, {0x3}, {0x5, 0x1}, {0x4}, {0x2}, {0x3, 0x1}, {0x4}, {0x0, 0x1}, {0x1, 0x1}, {0x0, 0x1}, {0x5}, {0x5, 0x1}, {0x2}, {0x2}, {0x3, 0x1}, {0x1}, {0x3, 0x1}, {0x2}, {0x3, 0x1}, {}, {0x1, 0x1}, {0x5, 0x1}, {0x0, 0x7f79f1de00e1912c}, {0x2}, {0x0, 0x1}, {0x4, 0x1}, {0x2}, {0x0, 0x1}, {0x3, 0x1}, {0x4}, {0x4, 0x1}, {0x2, 0x1}, {0x4, 0x2}, {}, {}, {0x3}, {0x1}, {0x3, 0x1}, {}, {0x1, 0x1}, {0x5, 0x1}, {0x3}, {0x4, 0x1}, {0x3}, {0x2}, {}, {}, {0x2}, {0x2}, {0x4}, {}, {0x4, 0x1}, {0x0, 0x1}, {0x4, 0x1}, {0x1, 0x1}, {0x2, 0x1}, {0x1, 0x1}, {0x5}, {0x2, 0x1}, {0x2, 0x1}, {0x4}, {0x3, 0x1}, {0x1}, {0x5}, {0x4}, {0x4, 0x1}, {0x5}, {0x3}, {0x3, 0x1}, {0x1}, {}, {0x4}, {0x5}, {0x4}, {0x2, 0x1}, {0x2}, {0x2, 0x1}, {0x0, 0x1}, {0x2}, {0x2, 0x1}, {0x1}, {0x4, 0x1}, {}, {0x4}, {}, {0x3, 0x1}, {}, {0x4}, {0x2, 0x1}, {0x3, 0x1}, {0x1}, {0x2, 0x1}, {0x2, 0x1}, {0x4}, {0x3}]}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x1, 0x3}}}}]}]}, 0x1110}, 0x1, 0x0, 0x0, 0x20000800}, 0x20008000) io_uring_enter(r0, 0x2219, 0x7721, 0x16, 0x0, 0x0) 16.256591269s ago: executing program 2 (id=1817): mkdirat(0xffffffffffffff9c, &(0x7f0000000400)='./file1\x00', 0x0) pipe(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) mount$fuse(0x0, 0x0, 0x0, 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0]) mount(0x0, &(0x7f0000000380)='./file1\x00', &(0x7f0000000040)='autofs\x00', 0x0, &(0x7f0000000400)) chdir(&(0x7f0000000140)='./file1\x00') mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0) r1 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000180), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000002140)={{'fd', 0x3d, r1}, 0x2c, {'rootmode', 0x3d, 0x4000}}) r2 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) ioctl$AUTOFS_IOC_EXPIRE_MULTI(r2, 0x40049366, &(0x7f0000000500)=0x1) 15.386928282s ago: executing program 2 (id=1839): r0 = openat$vicodec0(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) sendmsg$unix(0xffffffffffffffff, &(0x7f0000000680)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000140)=[@rights={{0x18, 0x1, 0x1, [r0, 0xffffffffffffffff]}}], 0x18, 0x810}, 0xc800) 12.394758339s ago: executing program 4 (id=1874): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_MD5SIG(r0, 0x6, 0xe, &(0x7f0000000440)={@in6={{0xa, 0x4e20, 0x7f, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0xa}}, 0x200}}, 0x0, 0x0, 0x4c, 0x0, "31147913b33c3a73b15671127ff6f31689cad56b325f545024f1a12f45542d0fffccc86fa580e196d48631b7e928ee1ac1b7c95fea0403b7e2594df579b15de0dec74cafbd20cb332feff5a895e19408"}, 0xd8) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, r0, 0xe4776000) setsockopt$inet6_tcp_TCP_MD5SIG(r0, 0x6, 0xe, &(0x7f0000000340)={@in6={{0xa, 0x4e21, 0xc, @loopback, 0x400}}, 0x0, 0x0, 0x40, 0x0, "947116a1a606754bab1cb61212bb07a2bd205f00f81bef965a071f0d1aadd97b9640d9a0cd9ea71a5e9aec7f03d4406a7710c42cb5e754b089928abcd7589d209bc45b4064028eb7fafaa8b125736e00"}, 0xd8) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x4e62, 0x1ff, @loopback, 0x23}, 0x1c) timer_create(0x0, &(0x7f0000000200)={0x0, 0x21, 0x2, @tid=0xffffffffffffffff}, &(0x7f0000000300)=0x0) fcntl$lock(0xffffffffffffffff, 0x6, &(0x7f0000000040)={0x0, 0x0, 0x60d3, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r1, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) mmap(&(0x7f0000000000/0xa000)=nil, 0xa000, 0xd3283d0368e269b3, 0x8031, 0xffffffffffffffff, 0x0) 12.302000983s ago: executing program 4 (id=1875): r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f0000000040), 0x4) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000000a80)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0x2ca}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r1, 0x18000000000002a0, 0x2f9, 0xffffca88, &(0x7f0000000040)="b90103600040f000009e0ff008001fffffe100004000632f77fb7f0200017f020001be3e7d2a182fff", 0x0, 0x104, 0x6000000000000000, 0x0, 0xfeb9, &(0x7f0000000400)="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"}, 0x28) 12.20336301s ago: executing program 4 (id=1876): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={0x0}}, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000300)=@newnexthop={0x24, 0x68, 0x1, 0x2, 0x7ffffffc, {}, [@NHA_GROUP={0xc, 0x2, [{0x1, 0x4}]}]}, 0x24}, 0x1, 0x0, 0x0, 0x24008000}, 0x4000) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000000)=@ipv4_newroute={0x24, 0x18, 0x35f32a6dfa748ddd, 0x0, 0x0, {0x2, 0x0, 0x10, 0x0, 0x0, 0x4, 0x0, 0x1, 0x20000000}, [@RTA_NH_ID={0x8, 0x1e, 0x2}]}, 0x24}, 0x1, 0x0, 0x0, 0x4a044}, 0x4010) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000280)={0x0, 0xfffffffffffffda3, &(0x7f0000000180)={&(0x7f0000000200)=@delnexthop={0x20, 0x69, 0xb, 0x0, 0x0, {}, [{0x8, 0x1, 0x1}]}, 0x20}}, 0x4000000) 12.202850498s ago: executing program 4 (id=1877): mkdirat(0xffffffffffffff9c, &(0x7f0000000400)='./file1\x00', 0x0) pipe(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) mount$fuse(0x0, 0x0, 0x0, 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0]) mount(0x0, &(0x7f0000000380)='./file1\x00', &(0x7f0000000040)='autofs\x00', 0x0, &(0x7f0000000400)) chdir(&(0x7f0000000140)='./file1\x00') mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0) r1 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000180), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000002140)={{'fd', 0x3d, r1}, 0x2c, {'rootmode', 0x3d, 0x4000}}) ioctl$AUTOFS_IOC_EXPIRE_MULTI(0xffffffffffffffff, 0x40049366, &(0x7f0000000500)=0x1) 12.143595012s ago: executing program 4 (id=1878): r0 = fanotify_init(0x0, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) 11.973371805s ago: executing program 4 (id=1879): r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_int(r0, 0x0, 0x32, &(0x7f0000000f00)=0x1000000, 0x4) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000200)={'veth0_to_team\x00', 0x0}) sendmmsg$inet(r0, &(0x7f0000002240)=[{{&(0x7f0000000000)={0x2, 0x4e20, @broadcast}, 0x10, 0x0, 0x0, &(0x7f0000000100)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {r1, @rand_addr=0x64010100, @rand_addr=0x64010101}}}], 0x20}}], 0x1, 0x0) 11.959187957s ago: executing program 33 (id=1879): r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_int(r0, 0x0, 0x32, &(0x7f0000000f00)=0x1000000, 0x4) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000200)={'veth0_to_team\x00', 0x0}) sendmmsg$inet(r0, &(0x7f0000002240)=[{{&(0x7f0000000000)={0x2, 0x4e20, @broadcast}, 0x10, 0x0, 0x0, &(0x7f0000000100)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {r1, @rand_addr=0x64010100, @rand_addr=0x64010101}}}], 0x20}}], 0x1, 0x0) 1.722940094s ago: executing program 5 (id=1962): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000680)=@newqdisc={0x34, 0x28, 0x4ee4e6a52ff56541, 0x4001, 0xfffffdfc, {0x0, 0x0, 0x0, 0x0, {0x9}, {0xffff, 0xffff}, {0x0, 0xc}}, [@qdisc_kind_options=@q_gred={{0x9}, {0x4}}]}, 0x34}, 0x1, 0x0, 0x0, 0x400dc}, 0x4000080) 1.722603288s ago: executing program 5 (id=1963): r0 = openat$iommufd(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r0, 0x3b81, &(0x7f0000000400)={0xc, 0x0, 0x0}) ioctl$IOMMU_IOAS_MAP$PAGES(r0, 0x3b85, &(0x7f0000000140)={0x28, 0x5, r1, 0x0, &(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1000000000000}) ioctl$IOMMU_TEST_OP_MOCK_DOMAIN(r0, 0x3ba0, &(0x7f0000000540)={0x48, 0x2, r1}) 1.660789129s ago: executing program 5 (id=1964): r0 = syz_open_dev$vim2m(&(0x7f0000000000), 0x4, 0x2) ioctl$vim2m_VIDIOC_S_FMT(r0, 0xc0d05605, &(0x7f00000002c0)={0x1, @pix={0x1, 0x80000000, 0x32314247, 0x9, 0x0, 0x5, 0x8, 0x100400, 0x1, 0x6, 0x1, 0x7}}) 1.660427943s ago: executing program 5 (id=1967): mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz1\x00', 0x1ff) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r1 = openat$cgroup_ro(r0, &(0x7f0000000040)='cgroup.freeze\x00', 0x275a, 0x0) write$cgroup_int(r1, &(0x7f0000000200)=0x1, 0x12) write$cgroup_int(r1, &(0x7f00000000c0), 0x12) 1.593633278s ago: executing program 5 (id=1970): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000040)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40, 0x44f, 0xb65d, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x5}}}}]}}]}}, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f0000000b80)={0x24, 0x0, 0x0, &(0x7f0000000000)={0x0, 0x22, 0x5, {[@main=@item_4]}}, 0x0}, 0x0) syz_open_dev$hidraw(&(0x7f0000002300), 0x0, 0x0) syz_open_dev$hidraw(&(0x7f0000002300), 0x0, 0x0) 1.432585201s ago: executing program 0 (id=1977): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000005c0), 0x48) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000000)={r0}, 0x4) bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x5, 0x10, &(0x7f0000000440)=@framed={{0x18, 0x8, 0x0, 0x0, 0xfffffffd}, [@snprintf={{}, {}, {}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r0}}]}, &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 1.432405901s ago: executing program 0 (id=1978): r0 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) ioctl$VHOST_SET_OWNER(r0, 0xaf01, 0x0) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4001af84, 0x0) 1.383214628s ago: executing program 0 (id=1979): r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r1 = openat$cgroup_ro(r0, &(0x7f0000000040)='cgroup.freeze\x00', 0x275a, 0x0) write$cgroup_int(r1, &(0x7f0000000200)=0x1, 0x12) write$cgroup_int(r1, &(0x7f00000000c0), 0x12) 1.383133608s ago: executing program 0 (id=1980): r0 = fanotify_init(0x0, 0x0) r1 = syz_open_dev$cec(&(0x7f0000000d00), 0x0, 0xc0b02) ioctl$CEC_TRANSMIT(r1, 0xc0386105, &(0x7f0000000d40)={0x0, 0x1, 0x4, 0x0, 0x0, 0x4063, "57c1169b6664ea61326ac71ae7213059"}) ioctl$CEC_TRANSMIT(r1, 0xc0386105, &(0x7f0000000140)={0x100000000, 0x800, 0xf, 0x80000001, 0xfe1c, 0x6, "72aba977db089b65fdfdc5bd97abc350", 0x74, 0x3, 0xa7, 0x7, 0x8, 0x7, 0x29}) close_range(r0, 0xffffffffffffffff, 0x0) 1.323344722s ago: executing program 0 (id=1981): mkdirat$cgroup_root(0xffffffffffffff9c, 0x0, 0x1ff) openat$cgroup_procs(0xffffffffffffffff, 0x0, 0x2, 0x0) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r1 = openat$cgroup_ro(r0, &(0x7f0000000040)='cgroup.freeze\x00', 0x275a, 0x0) write$cgroup_int(r1, &(0x7f0000000200)=0x1, 0x12) 1.323183697s ago: executing program 0 (id=1982): openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/bus/input/handlers\x00', 0x0, 0x0) syz_open_dev$video(&(0x7f0000000400), 0x9, 0x0) syz_usb_connect(0x5, 0x3d, &(0x7f0000000500)=ANY=[@ANYBLOB="12011001c2bc7710fd0b060189ec01"], 0x0) pipe2$watch_queue(&(0x7f0000000540), 0x80) pselect6(0x40, &(0x7f0000000140)={0xfc, 0x0, 0x0, 0x4}, 0x0, 0x0, 0x0, 0x0) r0 = syz_open_dev$video(&(0x7f0000000000), 0x7, 0x40) ioctl$VIDIOC_S_INPUT(r0, 0xc0045627, &(0x7f00000001c0)=0x2) 581.325236ms ago: executing program 1 (id=1985): r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000200)={0x2, 0x4e20, @multicast1}, 0x10) connect$inet(r0, &(0x7f0000000000)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x18}}, 0x10) r1 = socket(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000080)=@newqdisc={0x60, 0x24, 0xd0f, 0x70bd2d, 0x0, {0x60, 0x0, 0x0, r3, {0x0, 0xa}, {0xffff, 0xffff}, {0x0, 0xffff}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x34, 0x2, [@TCA_TBF_PARMS={0x28, 0x1, {{0xea, 0x0, 0xfffd, 0x0, 0x9, 0x5}, {0x12, 0x2, 0x0, 0x401, 0x8001, 0x1400}, 0xa5, 0x5, 0x10000000}}, @TCA_TBF_BURST={0x8, 0x6, 0x8057}]}}]}, 0x60}}, 0x44080) sendmsg$nl_route_sched(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000002c0)=@newqdisc={0x30, 0x24, 0xd0f, 0x70bd2b, 0x25dfdbfb, {0x60, 0x0, 0x0, r3, {}, {0xffe0, 0xa}, {0x1, 0x5}}, [@qdisc_kind_options=@q_fq={{0x7}, {0x4}}]}, 0x30}, 0x1, 0x0, 0x0, 0x55}, 0xc010) sendmsg$inet(r0, &(0x7f00000015c0)={0x0, 0x0, &(0x7f0000001600)=[{&(0x7f0000000340)='\x00', 0x1}], 0x1}, 0x80) 580.147813ms ago: executing program 1 (id=1986): ioctl$IOCTL_VMCI_VERSION2(0xffffffffffffffff, 0x7a7, &(0x7f0000000080)=0xb0000) r0 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./file1\x00', 0x601c2, 0x0) ftruncate(r0, 0x8800000) r1 = open(&(0x7f00000001c0)='./bus\x00', 0x4c27e, 0x53) timer_create(0x0, 0x0, 0x0) ioctl$UFFDIO_REGISTER(0xffffffffffffffff, 0xc020aa00, 0x0) close(r1) r2 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r2, &(0x7f0000000000)={0x2, 0x4e21, @broadcast}, 0x2f) connect$inet(r2, &(0x7f0000000180)={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x1b}}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r2, 0x6, 0xd, &(0x7f0000000040)='bbr', 0x3) setsockopt$RXRPC_UPGRADEABLE_SERVICE(0xffffffffffffffff, 0x110, 0x5, &(0x7f0000000100)=[0x1, 0x3], 0x2) recvfrom$inet(r2, &(0x7f0000000080)=""/8, 0xfffffffffffffd0b, 0x720, 0x0, 0xfffffffffffffd25) mknodat(0xffffffffffffff9c, 0x0, 0xc1c0, 0x0) sendfile(r1, r0, 0x0, 0x578410ef) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)) 513.106595ms ago: executing program 1 (id=1987): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFULNL_MSG_CONFIG(r0, &(0x7f0000000340)={0x0, 0x0, 0x0}, 0x0) 512.942095ms ago: executing program 1 (id=1988): r0 = socket$inet6(0xa, 0x802, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000180)=@newlink={0x30, 0x10, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x40004}, [@IFLA_MTU={0x8, 0x4, 0x3f9}, @IFLA_GROUP={0x8}]}, 0x30}}, 0x0) connect$inet6(r0, &(0x7f0000000240)={0xa, 0xffff, 0x1, @dev={0xfe, 0x80, '\x00', 0x32}, 0x9}, 0x1c) sendmmsg$inet6(r0, &(0x7f0000001840), 0x3b, 0x5000) 422.640466ms ago: executing program 1 (id=1989): r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r1 = openat$cgroup_ro(r0, &(0x7f0000000040)='cgroup.freeze\x00', 0x275a, 0x0) write$cgroup_int(r1, &(0x7f0000000200)=0x1, 0x12) write$cgroup_int(r1, &(0x7f00000000c0), 0x12) 422.403537ms ago: executing program 1 (id=1990): r0 = syz_usb_connect(0x0, 0x2d, &(0x7f0000000040)=ANY=[@ANYBLOB="1201000050cb5340450c10108e492940a80909021b00090000000009040002010035040009058dff86"], 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x3, 0x13, &(0x7f00000009c0)=@framed={{}, [@printk={@p, {}, {0x5, 0x1, 0xb, 0x1, 0xa, 0x7}, {}, {}, {}, {0x85, 0x0, 0x0, 0x5}}, @printk={@p, {0x3, 0x3, 0x3, 0xa, 0xa}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$USBDEVFS_FREE_STREAMS(0xffffffffffffffff, 0x802c550a, &(0x7f0000000000)=ANY=[]) r1 = socket$inet6(0xa, 0x3, 0x7) setsockopt$inet6_int(r1, 0x29, 0x24, 0x0, 0x0) fsopen(0x0, 0x1) r2 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$tipc2(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$TIPC_NL_MEDIA_GET(r2, &(0x7f0000000000)={0x0, 0x0, 0x0}, 0x0) r3 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) setsockopt$inet_sctp6_SCTP_RECVRCVINFO(r1, 0x84, 0x20, &(0x7f0000000080)=0x7, 0x4) write$char_usb(r3, 0x0, 0x0) read$char_usb(r3, 0x0, 0x0) syz_usb_disconnect(r0) 367.538444ms ago: executing program 34 (id=1839): r0 = openat$vicodec0(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) sendmsg$unix(0xffffffffffffffff, &(0x7f0000000680)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000140)=[@rights={{0x18, 0x1, 0x1, [r0, 0xffffffffffffffff]}}], 0x18, 0x810}, 0xc800) 0s ago: executing program 5 (id=1992): vmsplice(0xffffffffffffffff, &(0x7f0000000c80)=[{&(0x7f0000000480)}, {&(0x7f0000001800)="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", 0x601}], 0x2, 0xa) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000300)='/sys/kernel/profiling', 0x22042, 0x0) write$binfmt_misc(r1, &(0x7f0000000000), 0xfffffecc) splice(r0, 0x0, r2, 0x0, 0xbfd1, 0x0) kernel console output (not intermixed with test programs): `syz.4.1287'. [ 116.982712][ T8942] netlink: 32 bytes leftover after parsing attributes in process `syz.1.1295'. [ 117.154380][ T6028] usb 9-1: new full-speed USB device number 4 using dummy_hcd [ 117.307675][ T6028] usb 9-1: New USB device found, idVendor=09c0, idProduct=0203, bcdDevice=d3.43 [ 117.311390][ T6028] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 117.324617][ T6028] usb 9-1: config 0 descriptor?? [ 117.329877][ T6028] dvb-usb: found a 'Genpix SkyWalker-1 DVB-S receiver' in warm state. [ 117.732707][ T6028] gp8psk: usb out operation failed. [ 117.739688][ T6028] dvb-usb: This USB2.0 device cannot be run on a USB1.1 port. (it lacks a hardware PID filter) [ 117.744874][ T6028] dvb-usb: Genpix SkyWalker-1 DVB-S receiver error while loading driver (-19) [ 117.750597][ T6028] usb 9-1: USB disconnect, device number 4 [ 117.882490][ T8988] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1310'. [ 117.887279][ T8988] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1310'. [ 117.948478][ T8995] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1312'. [ 117.953394][ T8995] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1312'. [ 117.958123][ T8995] netlink: 64 bytes leftover after parsing attributes in process `syz.0.1312'. [ 118.013713][ T8997] sch_tbf: peakrate 7 is lower than or equals to rate 19 ! [ 118.103382][ T9003] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1316'. [ 118.189872][ T9010] netlink: 'syz.1.1318': attribute type 64 has an invalid length. [ 118.731460][ T9062] netlink: 'syz.0.1343': attribute type 4 has an invalid length. [ 119.135079][ T9086] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 119.256771][ T9093] lo speed is unknown, defaulting to 1000 [ 119.440433][ T9109] netlink: 'syz.2.1362': attribute type 64 has an invalid length. [ 120.411715][ T9230] tipc: Enabling of bearer rejected, failed to enable media [ 120.714552][ T10] usb 6-1: new high-speed USB device number 21 using dummy_hcd [ 120.864199][ T10] usb 6-1: Using ep0 maxpacket: 32 [ 120.867793][ T10] usb 6-1: config index 0 descriptor too short (expected 35577, got 27) [ 120.870714][ T10] usb 6-1: config 1 has too many interfaces: 92, using maximum allowed: 32 [ 120.873720][ T10] usb 6-1: config 1 has 1 interface, different from the descriptor's value: 92 [ 120.875082][ T34] usb 5-1: new high-speed USB device number 17 using dummy_hcd [ 120.877902][ T10] usb 6-1: config 1 has no interface number 0 [ 120.881520][ T10] usb 6-1: config 1 interface 1 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 120.886753][ T10] usb 6-1: config 1 interface 1 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 17 [ 120.891570][ T10] usb 6-1: New USB device found, idVendor=0e41, idProduct=5051, bcdDevice=d5.e8 [ 120.894866][ T10] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 120.902080][ T10] snd_usb_pod 6-1:1.1: Line 6 Pocket POD found [ 120.984253][ T6028] usb 9-1: new high-speed USB device number 5 using dummy_hcd [ 121.034224][ T34] usb 5-1: Using ep0 maxpacket: 16 [ 121.039898][ T34] usb 5-1: New USB device found, idVendor=1604, idProduct=8007, bcdDevice=af.a6 [ 121.043823][ T34] usb 5-1: New USB device strings: Mfr=1, Product=23, SerialNumber=3 [ 121.047885][ T34] usb 5-1: Product: syz [ 121.049771][ T34] usb 5-1: Manufacturer: syz [ 121.051809][ T34] usb 5-1: SerialNumber: syz [ 121.055833][ T34] usb 5-1: config 0 descriptor?? [ 121.104065][ T10] snd_usb_pod 6-1:1.1: Line 6 Pocket POD now attached [ 121.134198][ T6028] usb 9-1: Using ep0 maxpacket: 8 [ 121.139382][ T6028] usb 9-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 56832, setting to 1024 [ 121.143669][ T6028] usb 9-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024 [ 121.147660][ T6028] usb 9-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 121.151670][ T6028] usb 9-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 121.158102][ T6028] usb 9-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 121.161875][ T6028] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 121.267797][ T10] usb 5-1: USB disconnect, device number 17 [ 121.379670][ T6028] usb 9-1: GET_CAPABILITIES returned 0 [ 121.381714][ T6028] usbtmc 9-1:16.0: can't read capabilities [ 121.517147][ T6004] usb 6-1: USB disconnect, device number 21 [ 121.520549][ T6004] snd_usb_pod 6-1:1.1: Line 6 Pocket POD now disconnected [ 121.581904][ T1021] usb 9-1: USB disconnect, device number 5 [ 121.614290][ T10] usb 7-1: new high-speed USB device number 18 using dummy_hcd [ 121.776066][ T10] usb 7-1: unable to read config index 0 descriptor/start: -61 [ 121.779640][ T10] usb 7-1: can't read configurations, error -61 [ 121.915232][ T10] usb 7-1: new high-speed USB device number 19 using dummy_hcd [ 122.076151][ T10] usb 7-1: unable to read config index 0 descriptor/start: -61 [ 122.079492][ T10] usb 7-1: can't read configurations, error -61 [ 122.082428][ T10] usb usb7-port1: attempt power cycle [ 122.126815][ T9313] __nla_validate_parse: 12 callbacks suppressed [ 122.126827][ T9313] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1458'. [ 122.132449][ T9313] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1458'. ./file0/file0[ 122.284289][ T6028] usb 6-1: new high-speed USB device number 22 using dummy_hcd ./file0./file0fuse[ 122.424326][ T10] usb 7-1: new high-speed USB device number 20 using dummy_hcd [ 122.447243][ T10] usb 7-1: unable to read config index 0 descriptor/start: -61 [ 122.450857][ T10] usb 7-1: can't read configurations, error -61 [ 122.584234][ T10] usb 7-1: new high-speed USB device number 21 using dummy_hcd [ 122.606970][ T10] usb 7-1: unable to read config index 0 descriptor/start: -61 [ 122.610847][ T10] usb 7-1: can't read configurations, error -61 [ 122.613695][ T10] usb usb7-port1: unable to enumerate USB device .file0ރm#։!f۪y&jAcaAC|D9 ^瀘hyfH8fC2l%S`-$mRFZ|H7M[ >Q,EGXIQ5J?V9g4aS3% FhM^6)Q7:L]>]bHYv€r8`)5ݺŦ.=W&W!s.)#>01A'^䮅nȈgQR~UvCD/p%E:b& Zq`CJjM37`xl!Xۀv`6o{FН,gIKL,gPe[^++ǀ bQ=䌸+?0?Znv?60EFy#H5LⅯ unK"qYBfQdiq kxcK]۠y18_MQAİ"Ϸ RUZWlˌ[dtgvb-Bl\[;ΑŏqM?Xdr ]O "?]:n6Sq\R`V U]Q\@|ή)tP3H8dh.gjo9j|:5yX566 ڔX$ogX?q=w2H*xxBaubrx;21#[v#U~vv'1A T!kmzMxqFQe[ԙcS[K@|ZYŸ 'ĩÊU^B0Sd ;޻p) 5G~M(ylU ou&&3+ 1u䦗fCU-mΖQ0qD"^._g|t>ˊ6y#!rb6hԘki$әhN.v^wkXȔn; 6#< ޏ*t\^M9y [qU7f!:; Nѫ.a w*uU@m`K|0e)^ޔ8c~)$Kt^x,Q ;*5'e\ݖ~sq :,D)0RP=1HT{OM,᐀x(P6M4>s~z͡]y"inkP&;t(v>%`lOsZO6qԑ]8G\{E_Q;CLa M&Fn67I4W֘E-&xܥKJR[hCB:n 8ȿAr'J4-g qĕQQo!˱&]sLr])U;:y]-`Bxo rI?ǒvCfJ52 о j$l6Wƹ܃zCީH`cs̄"M3"Bȕ@uqg86ʹaUj`dfSEz֮"IFBxH`"s٠ϠڎrG^ND(7QI4G>ն>@HMUK?.x?L:5dPU:}"BWXYyTՌt*lv2knRsd$MC?ȁ? *$3Ij{ E* r=ڏem!{U4+\<|뻝OLf]EMҋ!~a1x^ڼH&q}ZX6;K9/PHto^FPByF FN9SM3Ke5)h* mF/.X{7.b!HqqW]Dž^zg1ZFhd`ڷjc̀&:IUkHz X_-LAFg|J,K^Jtk~oKqKp(I (wk¨|ao 2G?';[:@Ic}̼/ zfq|YlV h^ޖ{>拌YVL;k,X8~08,QEe QkyVj g?ت`w7WIDQzh$PFG$wʆbAr"mf+$>]ܨ(|WQ @,6 4}KI^/xɥ;cd>dGnh[;-͉<hhI&}o+N{iu*Jgh4/B$|R|+ `dPz-&7YF*hh C㖹t5a%GТ'7 6oCKI/]b0|6oԅ|@IXqU5/R$mF.p2vdMŘo'?9Q!B@EƼ6bs <'C"L5p})dn u|eM;)oz$VQ6*YVZƱث̔Ƴ;1OnP`WdU]O@,~%ˤ"9IXuC:"\BwFv}z:Je:f?*;&^i"pX*K\!,4_O~$fOs|`gd_]KlFK<~rŵˮsd!<F׸ln;^(+|n{Ѱ!0̯zY)Qdut<]ɁK;%bGy50~nÀ q0³UHSIVS%sn|$\)Z=^:ra(5 j0) u=u)-+6iY ^@}ދĖq#&jvk@$a)gmGwBn>Im.q(r֮3 yȶNز L,K 0K{ݜf@"0Al_~A)GRa?J((HR̫.axzݨ<wH׵$8HC-Y.aq,/qC*#IU$@#44L{j/''dϕxF.;>bCZg^%65ߪh>օA?[Q ЦFt,娇FLF $Q-(՗. I۾gc"N2;ԽTDR.#14>fbj:r^C9`@#|K^tӮ|DVpT7q,nQc*LMoÄ#ո( 5Ad*kpPPu/OkC߃ h*ogzL[;{cʦ{q1UU,q88a] {%Js?%&3b]=C K{Z ;6 {5y, _ u(;8\ rB^Q D<^Ő؝`t* ,/E}] kO].ox"VO/N^^1e7LΎxrc8'g0b;*p!qzKqKr9ľ ]9d4A ;Mgz8ke=ݮ[0ג>4!Y!)d]n!]SkNb:C^ A K,I{~>✌ &d66LHQOU6$A\_704x¬;E(O| } 76%8gTtwyMfJ'dsuc0LlIdThR3JVXDA|u ;hhkVmw%[ 123.027033][ T6028] usb 6-1: USB disconnect, device number 22 0&q;ɑ[ 123.027819][ T5946] Bluetooth: hci1: Opcode 0x0c03 failed: -71 3̼'7AoRB :Fj O[ 123.197327][ T9329] netlink: 104 bytes leftover after parsing attributes in process `syz.0.1464'. [ 123.200524][ T9329] netlink: 104 bytes leftover after parsing attributes in process `syz.0.1464'. [ 123.367479][ T9339] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1469'. [ 123.370653][ T9339] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1469'. [ 123.393115][ T9341] netlink: 32 bytes leftover after parsing attributes in process `syz.0.1470'. [ 123.562959][ T9353] rdma_rxe: rxe_newlink: failed to add syz_tun [ 123.655738][ T6028] usb 9-1: new high-speed USB device number 6 using dummy_hcd [ 123.710638][ T9361] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1480'. [ 123.724953][ T9361] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1480'. [ 123.765908][ T9366] batman_adv: batadv0: Adding interface: dummy0 [ 123.768136][ T9366] batman_adv: batadv0: The MTU of interface dummy0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 123.777423][ T9366] batman_adv: batadv0: Interface activated: dummy0 [ 123.787792][ T9366] batadv0: mtu less than device minimum [ 123.790210][ T9366] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 123.793994][ T9366] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 123.797917][ T9366] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 123.801704][ T9366] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 123.804309][ T6028] usb 9-1: Using ep0 maxpacket: 16 [ 123.805562][ T9366] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 123.811046][ T9366] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 123.811114][ T6028] usb 9-1: New USB device found, idVendor=1604, idProduct=8007, bcdDevice=af.a6 [ 123.815065][ T9366] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 123.818273][ T6028] usb 9-1: New USB device strings: Mfr=1, Product=23, SerialNumber=3 [ 123.822845][ T9366] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 123.825896][ T6028] usb 9-1: Product: syz [ 123.832036][ T6028] usb 9-1: Manufacturer: syz [ 123.832050][ T6028] usb 9-1: SerialNumber: syz [ 123.834565][ T6028] usb 9-1: config 0 descriptor?? ./file0/file0[ 124.049178][ T6028] usb 9-1: USB disconnect, device number 6 ./file0./file0fuse[ 124.169070][ T9381] netlink: 32 bytes leftover after parsing attributes in process `syz.1.1489'. .file0ރm#։!f۪y&jAcaAC|D9 ^瀘hyfH8fC2l%S`-$mRFZ|H7M[ >Q,EGXIQ5J?V9g4aS3% FhM^6)Q7:L]>]bHYv€r8`)5ݺŦ.=W&W!s.)#>01A'^䮅nȈgQR~UvCD/p%E:b& Zq`CJjM37`xl!Xۀv`6o{FН,gIKL,gPe[^++ǀ bQ=䌸+?0?Znv?60EFy#H5LⅯ unK"qYBfQdiq kxcK]۠y18_MQAİ"Ϸ RUZWlˌ[dtgvb-Bl\[;ΑŏqM?Xdr ]O "?]:n6Sq\R`V U]Q\@|ή)tP3H8dh.gjo9j|:5yX566 ڔX$ogX?q=w2H*xxBaubrx;21#[v#U~vv'1A T!kmzMxqFQe[ԙcS[K@|ZYŸ 'ĩÊU^B0Sd ;޻p) 5G~M(ylU ou&&3+ 1u䦗fCU-mΖQ0qD"^._g|t>ˊ6y#!rb6hԘki$әhN.v^wkXȔn; 6#< ޏ*t\^M9y [qU7f!:; Nѫ.a w*uU@m`K|0e)^ޔ8c~)$Kt^x,Q ;*5'e\ݖ~sq :,D)0RP=1HT{OM,᐀x(P6M4>s~z͡]y"inkP&;t(v>%`lOsZO6qԑ]8G\{E_Q;CLa M&Fn67I4W֘E-&xܥKJR[hCB:n 8ȿAr'J4-g qĕQQo!˱&]sLr])U;:y]-`Bxo rI?ǒvCfJ52 о j$l6Wƹ܃zCީH`cs̄"M3"Bȕ@uqg86ʹaUj`dfSEz֮"IFBxH`"s٠ϠڎrG^ND(7QI4G>ն>@HMUK?.x?L:5dPU:}"BWXYyTՌt*lv2knRsd$MC?ȁ? *$3Ij{ E* r=ڏem!{U4+\<|뻝OLf]EMҋ!~a1x^ڼH&q}ZX6;K9/PHto^FPByF FN9SM3Ke5)h* mF/.X{7.b!HqqW]Dž^zg1ZFhd`ڷjc̀&:IUkHz X_-LAFg|J,K^Jtk~oKqKp(I (wk¨|ao 2G?';[:@Ic}̼/ zfq|YlV h^ޖ{>拌YVL;k,X8~08,QEe QkyVj g?ت`w7WIDQzh$PFG$wʆbAr"mf+$>]ܨ(|WQ @,6 4}KI^/xɥ;cd>dGnh[;-͉<hhI&}o+N{iu*Jgh4/B$|R|+ `dPz-&7YF*hh C㖹t5a%GТ'7 6oCKI/]b0|6oԅ|@IXqU5/R$mF.p2vdMŘo'?9Q!B@EƼ6bs <'C"L5p})dn u|eM;)oz$VQ6*YVZƱث̔Ƴ;1OnP`WdU]O@,~%ˤ"9IXuC:"\BwFv}z:Je:f?*;&^i"pX*K\!,4_O~$fOs|`gd_]KlFK<~rŵˮsd!<F׸ln;^(+|n{Ѱ!0̯zY)Qdut<]ɁK;%bGy50~nÀ q0³UHSIVS%sn|$\)Z=^:ra(5 j0) u=u)-+6iY ^@}ދĖq#&jvk@$a)gmGwBn>Im.q(r֮3 yȶNز L,K 0K{ݜf@"0Al_~A)GRa?J((HR̫.axzݨ<wH׵$8HC-Y.aq,/qC*#IU$@#44L{j/''dϕxF.;>bCZg^%65ߪh>օA?[Q ЦFt,娇FLF $Q-(՗. I۾gc"N2;ԽTDR.#14>fbj:r^C9`@#|K^tӮ|DVpT7q,nQc*LMoÄ#ո( 5Ad*kpPPu/OkC߃ h*ogzL[;{cʦ{q1UU,q88a] {%Js?%&3b]=C K{Z ;6 {5y, _ u(;8\ rB^Q D<^Ő؝`t* ,/E}] kO].ox"VO/N^^1e7LΎxrc8'g0b;*p!qzKqKr9ľ ]9d4A ;Mgz8ke=ݮ[0ג>4!Y!)d]n!]SkNb:C^ A K,I{~>✌ &d66LHQOU6$A\_704x¬;E(O| } 76%8gTtwyMfJ'dsuc0LlIdThR3JVXDA|u ;hhkVmw%0&q;ɑ3̼'7AoRB :Fj O-м/Ƕ6(~h-s[ 124.724390][ T9400] siw: device registration error -23 [ 124.804221][ T6028] usb 7-1: new high-speed USB device number 22 using dummy_hcd [ 124.934350][ T6028] usb 7-1: device descriptor read/64, error -71 [ 125.054261][ T60] usb 5-1: new high-speed USB device number 18 using dummy_hcd [ 125.184333][ T6028] usb 7-1: new high-speed USB device number 23 using dummy_hcd [ 125.216183][ T60] usb 5-1: unable to read config index 0 descriptor/start: -61 [ 125.218693][ T60] usb 5-1: can't read configurations, error -61 [ 125.314212][ T6028] usb 7-1: device descriptor read/64, error -71 [ 125.344215][ T60] usb 5-1: new high-speed USB device number 19 using dummy_hcd [ 125.424480][ T6028] usb usb7-port1: attempt power cycle [ 125.497160][ T60] usb 5-1: unable to read config index 0 descriptor/start: -61 [ 125.500372][ T60] usb 5-1: can't read configurations, error -61 [ 125.502715][ T60] usb usb5-port1: attempt power cycle [ 125.774293][ T6028] usb 7-1: new high-speed USB device number 24 using dummy_hcd [ 125.804827][ T6028] usb 7-1: device descriptor read/8, error -71 [ 125.854253][ T60] usb 5-1: new high-speed USB device number 20 using dummy_hcd [ 125.877160][ T60] usb 5-1: unable to read config index 0 descriptor/start: -61 [ 125.879834][ T60] usb 5-1: can't read configurations, error -61 [ 126.004267][ T60] usb 5-1: new high-speed USB device number 21 using dummy_hcd [ 126.026540][ T60] usb 5-1: unable to read config index 0 descriptor/start: -61 [ 126.029703][ T60] usb 5-1: can't read configurations, error -61 [ 126.032770][ T60] usb usb5-port1: unable to enumerate USB device [ 126.044206][ T6028] usb 7-1: new high-speed USB device number 25 using dummy_hcd [ 126.065007][ T6028] usb 7-1: device descriptor read/8, error -71 [ 126.174616][ T6028] usb usb7-port1: unable to enumerate USB device [ 126.369066][ T40] audit: type=1326 audit(1767273010.970:5): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9439 comm="syz.4.1515" exe="/syz-executor" sig=31 arch=40000003 syscall=240 compat=1 ip=0xf7ff1579 code=0x0 [ 126.376614][ T6028] usb 6-1: new high-speed USB device number 23 using dummy_hcd [ 126.524212][ T6028] usb 6-1: Using ep0 maxpacket: 8 [ 126.527369][ T6028] usb 6-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 56832, setting to 1024 [ 126.530895][ T6028] usb 6-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024 [ 126.535403][ T6028] usb 6-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 126.538641][ T6028] usb 6-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 126.542785][ T6028] usb 6-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 126.546003][ T6028] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 126.756372][ T6028] usb 6-1: usb_control_msg returned -71 [ 126.759576][ T6028] usbtmc 6-1:16.0: can't read capabilities [ 126.767182][ T6028] usb 6-1: USB disconnect, device number 23 [ 127.459111][ T9464] syz_tun: Device is already in use. [ 127.879010][ T54] usb 7-1: new high-speed USB device number 26 using dummy_hcd [ 128.004632][ T54] usb 7-1: device descriptor read/64, error -71 [ 128.010686][ T9490] input: syz0 as /devices/virtual/input/input8 [ 128.078066][ T9494] __nla_validate_parse: 5 callbacks suppressed [ 128.078079][ T9494] netlink: 104 bytes leftover after parsing attributes in process `syz.0.1541'. [ 128.083323][ T9494] netlink: 104 bytes leftover after parsing attributes in process `syz.0.1541'. ./file0/file0./file0./file0fuse[ 128.426929][ T54] usb 7-1: new high-speed USB device number 27 using dummy_hcd [ 128.571556][ T54] usb 7-1: device descriptor read/64, error -71 .file0ރm#։!f۪y&jAcaAC|D9 ^瀘hyfH8fC2l%S`-$mRFZ|H7M[ >Q,EGXIQ5J?V9g4aS3% FhM^6)Q7:L]>]bHYv€r8`)5ݺŦ.=W&W!s.)#>01A'^䮅nȈgQR~UvCD/p%E:b& Zq`CJjM37`xl!Xۀv`6o{FН,gIKL,gPe[^++ǀ bQ=䌸+?0?Znv?60EFy#H5LⅯ unK"qYBfQdiq kxcK]۠y18_MQAİ"Ϸ RUZWlˌ[dtgvb-Bl\[;ΑŏqM?Xdr ]O "?]:n6Sq\R`V U]Q\@|ή)tP3H8dh.gjo9j|:5yX566 ڔX$ogX?q=w2H*xxBaubrx;21#[v#U~vv'1A T!kmzMxqFQe[ԙcS[K@|ZYŸ 'ĩÊU^B0Sd ;޻p) 5G~M(ylU ou&&3+ 1u䦗fCU-mΖQ0qD"^._g|t>ˊ6y#!rb6hԘki$әhN.v^wkXȔn; 6#< ޏ*t\^M9y [qU7f!:; Nѫ.a w*uU@m`K|0e)^ޔ8c~)$Kt^x,Q ;*5'e\ݖ~sq :,D)0RP=1HT{OM,᐀x(P6M4>s~z͡]y"inkP&;t(v>%`lOsZO6qԑ]8G\{E_Q;CLa M&Fn67I4W֘E-&xܥKJR[hCB:n 8ȿAr'J4-g qĕQQo!˱&]sLr])U;:y]-`Bxo rI?ǒvCfJ52 о j$l6Wƹ܃zCީH`cs̄"M3"Bȕ@uqg86ʹaUj`dfSEz֮"IFBxH`"s٠ϠڎrG^ND(7QI4G>ն>@HMUK?.x?L:5dPU:}"BWXYyTՌt*lv2knRsd$MC?ȁ? *$3Ij{ E* r=ڏem!{U4+\<|뻝OLf]EMҋ!~a1x^ڼH&q}ZX6;K9/PHto^FPByF FN9SM3Ke5)h* mF/.X{7.b!HqqW]Dž^zg1ZFhd`ڷjc̀&:IUkHz X_-LAFg|J,K^Jtk~oKqKp(I (wk¨|ao 2G?';[:@Ic}̼/ zfq|YlV h^ޖ{>拌YVL;k,X8~08,QEe QkyVj g?ت`w7WIDQzh$PFG$wʆbAr"mf+$>]ܨ(|WQ @,6 4}KI^/xɥ;cd>dGnh[;-͉<hhI&}o+N{iu*Jgh4/B$|R|+ `dPz-&7YF*hh C㖹t5a%GТ'7 6oCKI/]b0|6oԅ|@IXqU5/R$mF.p2vdMŘo'?9Q!B@EƼ6bs <'C"L5p})dn u|eM;)oz$VQ6*YVZƱث̔Ƴ;1OnP`WdU]O@,~%ˤ"9IXuC:"\BwFv}z:Je:f?*;&^i"pX*K\!,4_O~$fOs|`gd_]KlFK<~rŵˮsd!<F׸ln;^(+|n{Ѱ!0̯zY)Qdut<]ɁK;%bGy50~nÀ q0³UHSIVS%sn|$\)Z=^:ra(5 j0) u=u)-+6iY ^@}ދĖq#&jvk@$a)gmGwBn>Im.q(r֮3 yȶNز L,K 0K{ݜf@"0Al_~A)GRa?J((HR̫.axzݨ<wH׵$8HC-Y.aq,/qC*#IU$@#44L{j/''dϕxF.;>bCZg^%65ߪh>օA?[Q ЦFt,娇FLF $Q-(՗. I۾gc"N2;ԽTDR.#14>fbj:r^C9`@#|K^tӮ|DVpT7q,nQc*LMoÄ#ո( 5Ad*kpPPu/OkC߃ h*ogzL[;{cʦ{q1UU,q88a] {%Js?%&3b]=C K{Z ;6 {5y, _ u(;8\ rB^Q D<^Ő؝`t* ,/E}] kO].ox"VO/N^^1e7LΎxrc8'g0b;*p!qzKqKr9ľ ]9d4A ;Mgz8ke=ݮ[0ג>4!Y!)d]n!]SkNb:C^ A K,I{~>✌ &d66LHQOU6$A\_704x¬;E(O| } 76%8gTtwyMfJ'dsuc0LlIdThR3JVXDA|u ;hhkVmw%0&q;ɑ3̼'7AoRB :Fj O-м/Ƕ6(~h-s[ 128.934069][ T54] usb usb7-port1: attempt power cycle [ 129.047233][ T9507] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1546'. [ 129.054525][ T9507] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1546'. [ 129.093536][ T9510] netlink: 44 bytes leftover after parsing attributes in process `syz.0.1547'. [ 129.284429][ T54] usb 7-1: new high-speed USB device number 28 using dummy_hcd [ 129.304912][ T54] usb 7-1: device descriptor read/8, error -71 [ 129.489403][ T9532] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1557'. [ 129.554209][ T54] usb 7-1: new high-speed USB device number 29 using dummy_hcd [ 129.574915][ T54] usb 7-1: device descriptor read/8, error -71 [ 129.584762][ T9536] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1559'. [ 129.589389][ T9536] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1559'. [ 129.694599][ T54] usb usb7-port1: unable to enumerate USB device [ 129.803513][ T9544] netlink: 44 bytes leftover after parsing attributes in process `syz.1.1563'. [ 129.942361][ T9557] netlink: 104 bytes leftover after parsing attributes in process `syz.4.1570'. [ 129.946512][ T9558] fuse: Unknown parameter 'grou00000000000000000000' [ 130.866161][ T9604] fuse: Unknown parameter 'group_i00000000000000000000' [ 130.924647][ T6004] usb 5-1: new high-speed USB device number 22 using dummy_hcd [ 130.953272][ T9612] process 'syz.1.1596' launched './file0' with NULL argv: empty string added [ 131.075911][ T6004] usb 5-1: device descriptor read/64, error -71 [ 131.144806][ T6028] usb 7-1: new full-speed USB device number 30 using dummy_hcd [ 131.314275][ T6004] usb 5-1: new high-speed USB device number 23 using dummy_hcd [ 131.325768][ T6028] usb 7-1: unable to get BOS descriptor or descriptor too short [ 131.328623][ T6028] usb 7-1: not running at top speed; connect to a high speed hub [ 131.332158][ T6028] usb 7-1: config 1 has an invalid interface number: 6 but max is 2 [ 131.335298][ T6028] usb 7-1: config 1 has no interface number 1 [ 131.337303][ T6028] usb 7-1: config 1 interface 6 altsetting 11 has 0 endpoint descriptors, different from the interface descriptor's value: 9 [ 131.341825][ T6028] usb 7-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 0, changing to 4 [ 131.346841][ T6028] usb 7-1: config 1 interface 6 has no altsetting 0 [ 131.351270][ T6028] usb 7-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 131.354326][ T6028] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 131.355866][ T9642] ======================================================= [ 131.355866][ T9642] WARNING: The mand mount option has been deprecated and [ 131.355866][ T9642] and is ignored by this kernel. Remove the mand [ 131.355866][ T9642] option from the mount to silence this warning. [ 131.355866][ T9642] ======================================================= [ 131.356842][ T6028] usb 7-1: Product: syz [ 131.356852][ T6028] usb 7-1: Manufacturer: syz [ 131.356859][ T6028] usb 7-1: SerialNumber: syz [ 131.454459][ T6004] usb 5-1: device descriptor read/64, error -71 [ 131.574373][ T6004] usb usb5-port1: attempt power cycle [ 131.584355][ T6028] usb 7-1: 2:1 : format type 0 is detected, processed as PCM [ 131.589743][ T6028] usb 7-1: failed to enable PITCH for EP 0x82 [ 131.592013][ T6028] usb 7-1: 2:1: cannot set freq 9536114 to ep 0x82 [ 131.613335][ T6028] usb 7-1: USB disconnect, device number 30 [ 131.631318][ T6035] udevd[6035]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb7/7-1/7-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 131.924441][ T6004] usb 5-1: new high-speed USB device number 24 using dummy_hcd [ 131.944555][ T6004] usb 5-1: device descriptor read/8, error -71 [ 132.116629][ T9649] fuse: Unknown parameter 'group_id00000000000000000000' [ 132.184369][ T6004] usb 5-1: new high-speed USB device number 25 using dummy_hcd [ 132.205719][ T6004] usb 5-1: device descriptor read/8, error -71 [ 132.314548][ T6004] usb usb5-port1: unable to enumerate USB device [ 132.454183][ T6028] usb 7-1: new high-speed USB device number 31 using dummy_hcd [ 132.604208][ T6028] usb 7-1: Using ep0 maxpacket: 8 [ 132.607123][ T6028] usb 7-1: config 16 has an invalid descriptor of length 0, skipping remainder of the config [ 132.610430][ T6028] usb 7-1: config 16 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 3 [ 132.615303][ T6028] usb 7-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 132.618267][ T6028] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 132.628079][ T6028] usbtmc 7-1:16.0: bulk endpoints not found [ 133.504210][ T54] usb 6-1: new high-speed USB device number 24 using dummy_hcd [ 133.655360][ T54] usb 6-1: config 0 has no interfaces? [ 133.657204][ T54] usb 6-1: New USB device found, idVendor=17e9, idProduct=8b4e, bcdDevice=9c.08 [ 133.660209][ T54] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 133.663880][ T54] usb 6-1: config 0 descriptor?? [ 133.720986][ T9692] ieee802154 phy0 wpan0: encryption failed: -22 [ 133.791645][ T9696] syzkaller0: entered promiscuous mode [ 133.793517][ T9696] syzkaller0: entered allmulticast mode [ 133.871279][ T54] usb 6-1: USB disconnect, device number 24 [ 134.032302][ T9708] fuse: Bad value for 'user_id' [ 134.036821][ T9708] fuse: Bad value for 'user_id' [ 134.107111][ T9716] __nla_validate_parse: 5 callbacks suppressed [ 134.107125][ T9716] netlink: 52 bytes leftover after parsing attributes in process `syz.4.1644'. [ 134.130392][ T9718] tipc: Started in network mode [ 134.132031][ T9718] tipc: Node identity e2b5e6039de8, cluster identity 4711 [ 134.134470][ T9718] tipc: Enabled bearer , priority 0 [ 134.137278][ T9718] syzkaller0: entered promiscuous mode [ 134.139144][ T9718] syzkaller0: entered allmulticast mode [ 134.145373][ T9718] netlink: 44 bytes leftover after parsing attributes in process `syz.0.1645'. [ 134.150897][ T9718] tipc: Resetting bearer [ 134.155194][ T9717] tipc: Resetting bearer [ 134.162711][ T9717] tipc: Disabling bearer [ 134.404338][ T54] usb 9-1: new high-speed USB device number 7 using dummy_hcd [ 134.534232][ T53] usb 5-1: new high-speed USB device number 26 using dummy_hcd [ 134.554199][ T54] usb 9-1: device descriptor read/64, error -71 [ 134.589773][ T9736] netlink: 52 bytes leftover after parsing attributes in process `syz.1.1654'. [ 134.670789][ T9738] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1655'. [ 134.684244][ T53] usb 5-1: Using ep0 maxpacket: 16 [ 134.687887][ T53] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 134.691654][ T53] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 134.695847][ T53] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 134.699908][ T53] usb 5-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 134.703449][ T53] usb 5-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 134.709259][ T53] usb 5-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 134.712753][ T53] usb 5-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 134.715906][ T53] usb 5-1: Manufacturer: syz [ 134.719443][ T53] usb 5-1: config 0 descriptor?? [ 134.794217][ T54] usb 9-1: new high-speed USB device number 8 using dummy_hcd [ 134.934247][ T54] usb 9-1: device descriptor read/64, error -71 [ 134.954253][ T1021] usb 6-1: new high-speed USB device number 25 using dummy_hcd [ 134.994184][ T53] rc_core: IR keymap rc-hauppauge not found [ 134.996766][ T53] Registered IR keymap rc-empty [ 134.999253][ T53] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 135.014237][ T53] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 135.037086][ T53] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.0/usb5/5-1/5-1:0.0/rc/rc0 [ 135.043824][ T53] input: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.0/usb5/5-1/5-1:0.0/rc/rc0/input13 [ 135.044461][ T54] usb usb9-port1: attempt power cycle [ 135.052254][ T53] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 135.084379][ T53] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 135.114261][ T53] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 135.114511][ T1021] usb 6-1: Using ep0 maxpacket: 8 [ 135.122663][ T1021] usb 6-1: New USB device found, idVendor=0ccd, idProduct=10a3, bcdDevice=23.a2 [ 135.126540][ T1021] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 135.129792][ T1021] usb 6-1: Product: syz [ 135.131607][ T1021] usb 6-1: Manufacturer: syz [ 135.133561][ T1021] usb 6-1: SerialNumber: syz [ 135.137514][ T1021] usb 6-1: config 0 descriptor?? [ 135.144365][ T53] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 135.164259][ T53] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 135.184272][ T53] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 135.204374][ T53] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 135.213756][ T6004] usb 7-1: USB disconnect, device number 31 [ 135.224299][ T53] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 135.244262][ T53] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 135.264269][ T53] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 135.287523][ T53] mceusb 5-1:0.0: Registered with mce emulator interface version 1 [ 135.291167][ T53] mceusb 5-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active) [ 135.343557][ T1021] usb 6-1: dvb_usb_v2: found a 'Terratec H7' in warm state [ 135.372162][ T6028] usb 5-1: USB disconnect, device number 26 [ 135.384334][ T54] usb 9-1: new high-speed USB device number 9 using dummy_hcd [ 135.404687][ T54] usb 9-1: device descriptor read/8, error -71 [ 135.498545][ T9756] fuse: Bad value for 'fd' [ 135.654259][ T54] usb 9-1: new high-speed USB device number 10 using dummy_hcd [ 135.688516][ T54] usb 9-1: device descriptor read/8, error -71 [ 135.794599][ T54] usb usb9-port1: unable to enumerate USB device [ 136.553348][ T9784] syzkaller0: entered promiscuous mode [ 136.556710][ T9784] syzkaller0: entered allmulticast mode [ 136.605393][ T9788] fuse: Bad value for 'fd' [ 136.756148][ T1021] usb write operation failed. (-71) [ 136.765418][ T1021] usb 6-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 136.774505][ T1021] dvbdev: DVB: registering new adapter (Terratec H7) [ 136.776710][ T1021] usb 6-1: media controller created [ 136.781188][ T1021] usb read operation failed. (-71) [ 136.783105][ T1021] usb write operation failed. (-71) [ 136.787522][ T1021] dvb_usb_az6007 6-1:0.0: probe with driver dvb_usb_az6007 failed with error -5 [ 136.792282][ T1021] usb 6-1: USB disconnect, device number 25 [ 137.000087][ T9810] fuse: Bad value for 'fd' [ 137.083386][ T9814] syzkaller0: entered promiscuous mode [ 137.088260][ T9814] syzkaller0: entered allmulticast mode [ 137.185241][ T9816] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1689'. [ 137.516616][ T1417] ieee802154 phy0 wpan0: encryption failed: -22 [ 137.518709][ T1417] ieee802154 phy1 wpan1: encryption failed: -22 [ 137.544438][ T1021] usb 7-1: new high-speed USB device number 32 using dummy_hcd [ 137.574229][ T6028] usb 6-1: new high-speed USB device number 26 using dummy_hcd [ 137.674260][ T1021] usb 7-1: device descriptor read/64, error -71 [ 137.724195][ T6028] usb 6-1: Using ep0 maxpacket: 8 [ 137.728264][ T6028] usb 6-1: config 1 interface 0 altsetting 158 endpoint 0x81 has an invalid bInterval 64, changing to 10 [ 137.731816][ T6028] usb 6-1: config 1 interface 0 has no altsetting 0 [ 137.735621][ T6028] usb 6-1: New USB device found, idVendor=1e71, idProduct=170e, bcdDevice= 0.40 [ 137.738964][ T6028] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 137.742062][ T6028] usb 6-1: Product: syz [ 137.743442][ T6028] usb 6-1: Manufacturer: syz [ 137.745114][ T6028] usb 6-1: SerialNumber: syz [ 137.904247][ T60] usb 9-1: new high-speed USB device number 11 using dummy_hcd [ 137.914182][ T1021] usb 7-1: new high-speed USB device number 33 using dummy_hcd [ 137.956597][ T6028] usbhid 6-1:1.0: can't add hid device: -71 [ 137.959082][ T6028] usbhid 6-1:1.0: probe with driver usbhid failed with error -71 [ 137.965542][ T6028] usb 6-1: USB disconnect, device number 26 [ 138.055797][ T60] usb 9-1: config 0 has an invalid interface number: 117 but max is 0 [ 138.058469][ T60] usb 9-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 138.062270][ T60] usb 9-1: config 0 has no interface number 0 [ 138.064188][ T1021] usb 7-1: device descriptor read/64, error -71 [ 138.064506][ T60] usb 9-1: config 0 interface 117 altsetting 0 endpoint 0xA has invalid wMaxPacketSize 0 [ 138.069650][ T60] usb 9-1: config 0 interface 117 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 138.075679][ T60] usb 9-1: New USB device found, idVendor=0afa, idProduct=03e8, bcdDevice=99.d0 [ 138.078527][ T60] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 138.080986][ T60] usb 9-1: Product: syz [ 138.082350][ T60] usb 9-1: Manufacturer: syz [ 138.083826][ T60] usb 9-1: SerialNumber: syz [ 138.087313][ T60] usb 9-1: config 0 descriptor?? [ 138.184391][ T1021] usb usb7-port1: attempt power cycle [ 138.295953][ T6004] usb 9-1: USB disconnect, device number 11 [ 138.524198][ T1021] usb 7-1: new high-speed USB device number 34 using dummy_hcd [ 138.544717][ T1021] usb 7-1: device descriptor read/8, error -71 [ 138.699348][ T9848] netlink: 44 bytes leftover after parsing attributes in process `syz.1.1703'. [ 138.797615][ T9854] input: syz0 as /devices/virtual/input/input14 [ 138.805239][ T1021] usb 7-1: new high-speed USB device number 35 using dummy_hcd [ 138.825253][ T1021] usb 7-1: device descriptor read/8, error -71 [ 138.872031][ T9858] netlink: 5 bytes leftover after parsing attributes in process `syz.1.1708'. [ 138.875197][ T9858] netlink: 44 bytes leftover after parsing attributes in process `syz.1.1708'. [ 138.878479][ T9858] netlink: 5 bytes leftover after parsing attributes in process `syz.1.1708'. [ 138.911418][ T9862] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1710'. [ 138.934363][ T1021] usb usb7-port1: unable to enumerate USB device [ 138.982783][ T9867] fuse: Bad value for 'rootmode' [ 139.027131][ T9869] program syz.1.1713 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 139.030260][ T9869] ata1.00: invalid command format 0 [ 139.294238][ T6028] usb 6-1: new high-speed USB device number 27 using dummy_hcd [ 139.444253][ T6028] usb 6-1: Using ep0 maxpacket: 8 [ 139.447707][ T6028] usb 6-1: config 0 has an invalid interface number: 191 but max is 0 [ 139.453031][ T6028] usb 6-1: config 0 has no interface number 0 [ 139.456861][ T6028] usb 6-1: New USB device found, idVendor=0dba, idProduct=5000, bcdDevice=f5.41 [ 139.459815][ T6028] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 139.462839][ T6028] usb 6-1: Product: syz [ 139.464926][ T6028] usb 6-1: Manufacturer: syz [ 139.466487][ T6028] usb 6-1: SerialNumber: syz [ 139.469297][ T6028] usb 6-1: config 0 descriptor?? [ 139.677410][ T6028] usb 6-1: MBOX3: Invalid descriptor size=18. [ 139.691291][ T6028] usb 6-1: USB disconnect, device number 27 [ 139.697084][ T5941] udevd[5941]: setting owner of /dev/bus/usb/006/027 to uid=0, gid=0 failed: No such file or directory [ 139.846504][ T9877] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1717'. [ 139.918202][ T9879] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 139.922967][ T9879] block device autoloading is deprecated and will be removed. [ 140.262520][ T9886] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1721'. [ 140.267951][ T9886] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1721'. [ 140.634277][ T1021] usb 6-1: new high-speed USB device number 28 using dummy_hcd [ 140.724236][ T10] usb 7-1: new high-speed USB device number 36 using dummy_hcd [ 140.785556][ T1021] usb 6-1: config 0 has no interfaces? [ 140.787483][ T1021] usb 6-1: New USB device found, idVendor=17e9, idProduct=8b4e, bcdDevice=9c.08 [ 140.790442][ T1021] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 140.794491][ T1021] usb 6-1: config 0 descriptor?? [ 140.854701][ T10] usb 7-1: device descriptor read/64, error -71 [ 141.004961][ T1021] usb 6-1: USB disconnect, device number 28 [ 141.015093][ T9935] fuse: Bad value for 'fd' [ 141.057598][ T9937] tipc: Enabled bearer , priority 0 [ 141.060750][ T9937] syzkaller0: entered promiscuous mode [ 141.063086][ T9937] syzkaller0: entered allmulticast mode [ 141.069660][ T9936] tipc: Resetting bearer [ 141.080310][ T9936] tipc: Disabling bearer [ 141.094444][ T10] usb 7-1: new high-speed USB device number 37 using dummy_hcd [ 141.224638][ T10] usb 7-1: device descriptor read/64, error -71 [ 141.260631][ T9943] fuse: Unknown parameter 'user_i00000000000000000000' [ 141.339538][ T9947] loop0: detected capacity change from 0 to 16384 [ 141.344534][ T10] usb usb7-port1: attempt power cycle [ 141.395353][ T9949] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1752'. [ 141.399734][ T9949] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1752'. [ 141.555088][ T9955] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1755'. [ 141.619066][ T9962] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1758'. [ 141.684223][ T10] usb 7-1: new high-speed USB device number 38 using dummy_hcd [ 141.704712][ T10] usb 7-1: device descriptor read/8, error -71 [ 141.834746][ T6028] usb 6-1: new high-speed USB device number 29 using dummy_hcd [ 141.944449][ T10] usb 7-1: new high-speed USB device number 39 using dummy_hcd [ 141.975115][ T10] usb 7-1: device descriptor read/8, error -71 [ 141.984203][ T6028] usb 6-1: Using ep0 maxpacket: 16 [ 141.987283][ T6028] usb 6-1: no configurations [ 141.989319][ T6028] usb 6-1: can't read configurations, error -22 [ 142.084505][ T10] usb usb7-port1: unable to enumerate USB device [ 142.114202][ T6028] usb 6-1: new high-speed USB device number 30 using dummy_hcd [ 142.234033][ T9967] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1761'. [ 142.237726][ T9967] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1761'. [ 142.269280][ T6028] usb 6-1: Using ep0 maxpacket: 16 [ 142.272752][ T6028] usb 6-1: no configurations [ 142.275297][ T6028] usb 6-1: can't read configurations, error -22 [ 142.278842][ T6028] usb usb6-port1: attempt power cycle [ 142.617008][ T6028] usb 6-1: new high-speed USB device number 31 using dummy_hcd [ 142.634796][ T6028] usb 6-1: Using ep0 maxpacket: 16 [ 142.636985][ T6028] usb 6-1: no configurations [ 142.638602][ T6028] usb 6-1: can't read configurations, error -22 [ 142.679793][ T9983] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1767'. [ 142.764210][ T6028] usb 6-1: new high-speed USB device number 32 using dummy_hcd [ 142.785947][ T6028] usb 6-1: Using ep0 maxpacket: 16 [ 142.789369][ T6028] usb 6-1: no configurations [ 142.790954][ T6028] usb 6-1: can't read configurations, error -22 [ 142.793140][ T6028] usb usb6-port1: unable to enumerate USB device [ 143.742694][T10016] tipc: Started in network mode [ 143.744886][T10016] tipc: Node identity 6ac970d4cc1, cluster identity 4711 [ 143.747356][T10016] tipc: Enabled bearer , priority 0 [ 143.750308][T10016] syzkaller0: entered promiscuous mode [ 143.752299][T10016] syzkaller0: entered allmulticast mode [ 143.768251][T10015] tipc: Resetting bearer [ 143.782057][T10015] tipc: Disabling bearer [ 144.021256][T10042] siw: device registration error -23 [ 144.344089][T10069] tipc: Started in network mode [ 144.346183][T10069] tipc: Node identity c6d8865715f5, cluster identity 4711 [ 144.349258][T10069] tipc: Enabled bearer , priority 0 [ 144.352701][T10069] syzkaller0: entered promiscuous mode [ 144.355335][T10069] syzkaller0: entered allmulticast mode [ 144.361606][T10069] tipc: Resetting bearer [ 144.364586][T10068] tipc: Resetting bearer [ 144.372824][T10068] tipc: Disabling bearer [ 144.580898][T10085] syzkaller0: entered promiscuous mode [ 144.582745][T10085] syzkaller0: entered allmulticast mode [ 144.897394][T10105] __nla_validate_parse: 7 callbacks suppressed [ 144.897406][T10105] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1826'. [ 145.004361][ T6028] usb 6-1: new high-speed USB device number 33 using dummy_hcd [ 145.123413][T10117] tipc: Enabled bearer , priority 0 [ 145.126542][T10117] syzkaller0: entered promiscuous mode [ 145.128407][T10117] syzkaller0: entered allmulticast mode [ 145.137525][T10117] netlink: 44 bytes leftover after parsing attributes in process `syz.4.1832'. [ 145.143016][T10116] tipc: Resetting bearer [ 145.154250][T10116] tipc: Disabling bearer [ 145.165481][ T6028] usb 6-1: config 4 has an invalid descriptor of length 0, skipping remainder of the config [ 145.169040][ T6028] usb 6-1: New USB device found, idVendor=041e, idProduct=4007, bcdDevice=5d.18 [ 145.172194][ T6028] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 145.179142][ T6028] gspca_main: stv0680-2.14.0 probing 041e:4007 [ 146.235468][ T6028] gspca_stv0680: usb_control_msg error 0, request = 0x88, error = -32 [ 146.239626][ T6028] stv0680 6-1:4.0: STV(e): camera ping failed!! [ 146.244060][ T6028] stv0680 6-1:4.0: last error: 0, command = 0x0 [ 146.445390][ T54] usb 6-1: USB disconnect, device number 33 [ 146.710936][T10138] tipc: Enabled bearer , priority 0 [ 146.713684][T10138] syzkaller0: entered promiscuous mode [ 146.715665][T10138] syzkaller0: entered allmulticast mode [ 146.724000][T10138] netlink: 44 bytes leftover after parsing attributes in process `syz.0.1842'. [ 146.729316][T10137] tipc: Resetting bearer [ 146.737796][T10137] tipc: Disabling bearer [ 147.058184][T10156] fuse: Unknown parameter '0x0000000000000003' [ 147.287130][T10169] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1856'. [ 147.384990][T10175] fuse: Unknown parameter '0x0000000000000003' [ 147.644315][ T10] usb 5-1: new high-speed USB device number 27 using dummy_hcd [ 147.774494][ T10] usb 5-1: device descriptor read/64, error -71 [ 148.014490][ T10] usb 5-1: new high-speed USB device number 28 using dummy_hcd [ 148.100403][T10187] tipc: Started in network mode [ 148.102394][T10187] tipc: Node identity f2872fb2a75e, cluster identity 4711 [ 148.107140][T10187] tipc: Enabled bearer , priority 0 [ 148.111631][T10187] netlink: 44 bytes leftover after parsing attributes in process `syz.1.1865'. [ 148.117863][T10187] tipc: Resetting bearer [ 148.125417][T10186] tipc: Disabling bearer [ 148.154568][ T10] usb 5-1: device descriptor read/64, error -71 [ 148.264386][ T10] usb usb5-port1: attempt power cycle [ 148.624424][ T10] usb 5-1: new high-speed USB device number 29 using dummy_hcd [ 148.644577][ T10] usb 5-1: device descriptor read/8, error -71 [ 148.694766][ T9] usb 6-1: new high-speed USB device number 34 using dummy_hcd [ 148.854883][ T9] usb 6-1: Using ep0 maxpacket: 16 [ 148.857207][ T9] usb 6-1: no configurations [ 148.858738][ T9] usb 6-1: can't read configurations, error -22 [ 148.904234][ T10] usb 5-1: new high-speed USB device number 30 using dummy_hcd [ 148.934416][ T5940] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 148.935253][ T10] usb 5-1: device descriptor read/8, error -71 [ 148.939528][ T5940] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 148.942443][ T5940] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 148.945522][ T5940] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 148.948218][ T5940] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 148.971838][T10214] lo speed is unknown, defaulting to 1000 [ 148.994686][ T9] usb 6-1: new high-speed USB device number 35 using dummy_hcd [ 149.045322][ T10] usb usb5-port1: unable to enumerate USB device [ 149.125574][T10214] chnl_net:caif_netlink_parms(): no params data found [ 149.144384][ T9] usb 6-1: Using ep0 maxpacket: 16 [ 149.146600][ T9] usb 6-1: no configurations [ 149.148140][ T9] usb 6-1: can't read configurations, error -22 [ 149.150357][ T9] usb usb6-port1: attempt power cycle [ 149.167140][T10214] bridge0: port 1(bridge_slave_0) entered blocking state [ 149.169531][T10214] bridge0: port 1(bridge_slave_0) entered disabled state [ 149.171809][T10214] bridge_slave_0: entered allmulticast mode [ 149.174628][T10214] bridge_slave_0: entered promiscuous mode [ 149.178843][T10214] bridge0: port 2(bridge_slave_1) entered blocking state [ 149.181798][T10214] bridge0: port 2(bridge_slave_1) entered disabled state [ 149.184841][T10214] bridge_slave_1: entered allmulticast mode [ 149.188194][T10214] bridge_slave_1: entered promiscuous mode [ 149.203993][T10214] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 149.210660][T10214] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 149.226503][T10214] team0: Port device team_slave_0 added [ 149.230220][T10214] team0: Port device team_slave_1 added [ 149.244699][T10214] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 149.247026][T10214] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 149.257353][T10214] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 149.262037][T10214] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 149.264847][T10214] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 149.274078][T10214] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 149.296551][T10214] hsr_slave_0: entered promiscuous mode [ 149.298813][T10214] hsr_slave_1: entered promiscuous mode [ 149.405714][T10214] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 149.410272][T10214] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 149.414732][T10214] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 149.419177][T10214] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 149.467885][T10214] 8021q: adding VLAN 0 to HW filter on device bond0 [ 149.483617][T10214] 8021q: adding VLAN 0 to HW filter on device team0 [ 149.487010][ T9] usb 6-1: new high-speed USB device number 36 using dummy_hcd [ 149.496795][ T1142] bridge0: port 1(bridge_slave_0) entered blocking state [ 149.499170][ T1142] bridge0: port 1(bridge_slave_0) entered forwarding state [ 149.507039][ T1142] bridge0: port 2(bridge_slave_1) entered blocking state [ 149.509318][ T1142] bridge0: port 2(bridge_slave_1) entered forwarding state [ 149.514991][ T9] usb 6-1: Using ep0 maxpacket: 16 [ 149.517550][ T9] usb 6-1: no configurations [ 149.519269][ T9] usb 6-1: can't read configurations, error -22 [ 149.630034][T10214] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 149.657611][ T9] usb 6-1: new high-speed USB device number 37 using dummy_hcd [ 149.674637][ T9] usb 6-1: Using ep0 maxpacket: 16 [ 149.676858][ T9] usb 6-1: no configurations [ 149.678442][ T9] usb 6-1: can't read configurations, error -22 [ 149.680682][ T9] usb usb6-port1: unable to enumerate USB device [ 149.797401][T10214] veth0_vlan: entered promiscuous mode [ 149.802414][T10214] veth1_vlan: entered promiscuous mode [ 149.818419][T10214] veth0_macvtap: entered promiscuous mode [ 149.822270][T10214] veth1_macvtap: entered promiscuous mode [ 149.831238][T10214] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 149.839415][T10214] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 149.845841][ T1142] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 149.848778][ T1142] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 149.852098][ T1142] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 149.855355][ T1142] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 149.888679][ T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 149.891476][ T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 149.902911][ T1142] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 149.906900][ T1142] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 150.284222][ T53] usb 10-1: new high-speed USB device number 2 using dummy_hcd [ 150.444373][ T53] usb 10-1: Using ep0 maxpacket: 16 [ 150.447748][ T53] usb 10-1: New USB device found, idVendor=0471, idProduct=0327, bcdDevice=61.a4 [ 150.461151][ T53] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 150.466540][ T53] usb 10-1: config 0 descriptor?? [ 150.471071][ T53] gspca_main: sonixj-2.14.0 probing 0471:0327 [ 151.044281][ T5940] Bluetooth: hci1: command tx timeout [ 151.576114][T10266] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1892'. [ 151.854255][ T10] usb 6-1: new high-speed USB device number 38 using dummy_hcd [ 151.984799][ T10] usb 6-1: device descriptor read/64, error -71 [ 152.224299][ T10] usb 6-1: new high-speed USB device number 39 using dummy_hcd [ 152.364538][ T10] usb 6-1: device descriptor read/64, error -71 [ 152.485063][ T10] usb usb6-port1: attempt power cycle [ 152.834174][ T10] usb 6-1: new high-speed USB device number 40 using dummy_hcd [ 152.854766][ T10] usb 6-1: device descriptor read/8, error -71 [ 153.094558][ T10] usb 6-1: new high-speed USB device number 41 using dummy_hcd [ 153.114776][ T10] usb 6-1: device descriptor read/8, error -71 [ 153.124222][ T5940] Bluetooth: hci1: command tx timeout [ 153.224371][ T10] usb usb6-port1: unable to enumerate USB device [ 153.281776][ T53] gspca_sonixj: reg_w err -71 [ 153.285331][ T53] sonixj 10-1:0.0: probe with driver sonixj failed with error -71 [ 153.289610][ T53] usb 10-1: USB disconnect, device number 2 [ 153.500164][T10292] lo speed is unknown, defaulting to 1000 [ 153.874961][T10328] netlink: 44 bytes leftover after parsing attributes in process `syz.5.1905'. [ 153.922729][T10338] ebtables: wrong size: *len 264, entries_size 144, replsz 144 [ 154.361458][T10379] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1919'. [ 154.641751][T10388] mmap: syz.5.1922 (10388) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 154.795208][ T34] IPVS: starting estimator thread 0... [ 154.884327][T10411] IPVS: using max 45 ests per chain, 108000 per kthread [ 154.927632][ T60] hid-generic 0000:0000:FFFFFFFD.0009: unknown main item tag 0x0 [ 154.931796][ T60] hid-generic 0000:0000:FFFFFFFD.0009: unknown main item tag 0x0 [ 154.934865][ T60] hid-generic 0000:0000:FFFFFFFD.0009: unknown main item tag 0x0 [ 154.937624][ T60] hid-generic 0000:0000:FFFFFFFD.0009: unknown main item tag 0x0 [ 154.940336][ T60] hid-generic 0000:0000:FFFFFFFD.0009: unknown main item tag 0x0 [ 154.943088][ T60] hid-generic 0000:0000:FFFFFFFD.0009: unknown main item tag 0x0 [ 154.947323][ T60] hid-generic 0000:0000:FFFFFFFD.0009: unknown main item tag 0x0 [ 154.949858][ T60] hid-generic 0000:0000:FFFFFFFD.0009: unknown main item tag 0x0 [ 154.952374][ T60] hid-generic 0000:0000:FFFFFFFD.0009: unknown main item tag 0x0 [ 154.957677][ T60] hid-generic 0000:0000:FFFFFFFD.0009: unknown main item tag 0x0 [ 154.968353][ T60] hid-generic 0000:0000:FFFFFFFD.0009: hidraw0: HID v0.00 Device [syz0] on syz0 [ 154.999466][T10428] fido_id[10428]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 155.035129][ T10] usb 6-1: new high-speed USB device number 42 using dummy_hcd [ 155.062998][T10440] fuse: Bad value for 'fd' [ 155.195049][ T5940] Bluetooth: hci1: command tx timeout [ 155.206271][ T10] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 155.209942][ T10] usb 6-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 21 [ 155.214663][ T10] usb 6-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 155.218051][ T10] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 155.224020][ T10] usb 6-1: config 0 descriptor?? [ 155.228491][ T10] usbhid 6-1:0.0: couldn't find an input interrupt endpoint [ 156.149093][ T60] hid-generic 0000:0000:FFFFFFFD.000A: hidraw0: HID v0.00 Device [syz0] on syz0 [ 156.168298][T10471] fido_id[10471]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 156.184473][ T10] usb 5-1: new high-speed USB device number 31 using dummy_hcd [ 156.236015][T10480] fuse: Bad value for 'fd' [ 156.354256][ T10] usb 5-1: Using ep0 maxpacket: 16 [ 156.365064][ T10] usb 5-1: New USB device found, idVendor=05d1, idProduct=2001, bcdDevice=10.00 [ 156.368095][ T10] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 156.370806][ T10] usb 5-1: Product: syz [ 156.372207][ T10] usb 5-1: Manufacturer: syz [ 156.373764][ T10] usb 5-1: SerialNumber: syz [ 156.378527][ T10] usb 5-1: config 0 descriptor?? [ 156.384826][ T10] ftdi_sio 5-1:0.0: FTDI USB Serial Device converter detected [ 156.387938][ T10] usb 5-1: Detected FT-X [ 156.584509][ T10] ftdi_sio ttyUSB0: Unable to read latency timer: -32 [ 156.993954][ T10] usb 5-1: FTDI USB Serial Device converter now attached to ttyUSB0 [ 157.192136][ T53] usb 5-1: USB disconnect, device number 31 [ 157.206716][ T53] ftdi_sio ttyUSB0: FTDI USB Serial Device converter now disconnected from ttyUSB0 [ 157.213646][ T53] ftdi_sio 5-1:0.0: device disconnected [ 157.274250][ T5940] Bluetooth: hci1: command tx timeout [ 157.697210][T10238] usb 6-1: USB disconnect, device number 42 [ 157.733602][T10530] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1954'. [ 157.741902][T10530] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 158.224241][T10238] usb 6-1: new high-speed USB device number 43 using dummy_hcd [ 158.384400][T10238] usb 6-1: Using ep0 maxpacket: 16 [ 158.388550][T10238] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 158.392932][T10238] usb 6-1: config 0 has no interfaces? [ 158.397900][T10238] usb 6-1: New USB device found, idVendor=1604, idProduct=8007, bcdDevice=af.a6 [ 158.401948][T10238] usb 6-1: New USB device strings: Mfr=1, Product=23, SerialNumber=3 [ 158.406064][T10238] usb 6-1: Product: syz [ 158.407918][T10238] usb 6-1: Manufacturer: syz [ 158.409961][T10238] usb 6-1: SerialNumber: syz [ 158.414375][T10238] usb 6-1: config 0 descriptor?? [ 158.625306][ T54] usb 6-1: USB disconnect, device number 43 [ 159.454241][ T60] usb 10-1: new high-speed USB device number 3 using dummy_hcd [ 159.605635][ T60] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 159.609343][ T60] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 159.612450][ T60] usb 10-1: New USB device found, idVendor=044f, idProduct=b65d, bcdDevice= 0.00 [ 159.616017][ T60] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 159.620684][ T60] usb 10-1: config 0 descriptor?? [ 159.744295][ T10] usb 5-1: new high-speed USB device number 32 using dummy_hcd [ 159.894274][ T10] usb 5-1: Using ep0 maxpacket: 16 [ 159.897776][ T10] usb 5-1: no configurations [ 159.899424][ T10] usb 5-1: can't read configurations, error -22 [ 160.024405][ T10] usb 5-1: new high-speed USB device number 33 using dummy_hcd [ 160.034053][ T60] hid_parser_main: 76 callbacks suppressed [ 160.034067][ T60] hid-thrustmaster 0003:044F:B65D.000B: unknown main item tag 0x0 [ 160.042430][ T60] hid-thrustmaster 0003:044F:B65D.000B: hidraw0: USB HID v0.00 Device [HID 044f:b65d] on usb-dummy_hcd.5-1/input0 [ 160.046610][ T60] hid-thrustmaster 0003:044F:B65D.000B: Wrong number of endpoints? [ 160.174253][ T10] usb 5-1: Using ep0 maxpacket: 16 [ 160.176517][ T10] usb 5-1: no configurations [ 160.178223][ T10] usb 5-1: can't read configurations, error -22 [ 160.180589][ T10] usb usb5-port1: attempt power cycle [ 160.287475][ C2] hid-thrustmaster 0003:044F:B65D.000B: URB to get model id failed with error -71 [ 160.287492][ T6004] usb 10-1: USB disconnect, device number 3 [ 160.537705][ T5946] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 160.540440][ T10] usb 5-1: new high-speed USB device number 34 using dummy_hcd [ 160.543425][ T5946] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 160.547785][ T5946] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 160.550945][ T5946] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 160.553845][ T5946] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 160.565049][ T10] usb 5-1: Using ep0 maxpacket: 16 [ 160.568898][ T10] usb 5-1: no configurations [ 160.570507][ T10] usb 5-1: can't read configurations, error -22 [ 160.586583][ T5948] syz_tun (unregistering): left allmulticast mode [ 160.588867][ T5948] syz_tun (unregistering): left promiscuous mode [ 160.591797][ T5948] bridge0: port 3(syz_tun) entered disabled state [ 160.598226][ T12] smc: removing ib device syz1 [ 160.603406][ T6004] syz1: Port: 1 Link DOWN [ 160.625952][T10655] lo speed is unknown, defaulting to 1000 [ 160.676129][ T54] usb 6-1: new high-speed USB device number 44 using dummy_hcd [ 160.694692][ T10] usb 5-1: new high-speed USB device number 35 using dummy_hcd [ 160.715097][ T10] usb 5-1: Using ep0 maxpacket: 16 [ 160.724587][ T10] usb 5-1: no configurations [ 160.726708][ T10] usb 5-1: can't read configurations, error -22 [ 160.729793][ T10] usb usb5-port1: unable to enumerate USB device [ 160.825950][T10655] chnl_net:caif_netlink_parms(): no params data found [ 160.845238][ T54] usb 6-1: too many configurations: 9, using maximum allowed: 8 [ 160.855097][ T54] usb 6-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 160.858136][ T54] usb 6-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 160.861783][ T54] usb 6-1: config 0 interface 0 has no altsetting 0 [ 160.865107][ T54] usb 6-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 160.868105][ T54] usb 6-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 160.871477][ T54] usb 6-1: config 0 interface 0 has no altsetting 0 [ 160.879947][ T54] usb 6-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 160.882888][ T54] usb 6-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 160.887061][ T54] usb 6-1: config 0 interface 0 has no altsetting 0 [ 160.891152][ T54] usb 6-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 160.894566][ T54] usb 6-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 160.898539][ T54] usb 6-1: config 0 interface 0 has no altsetting 0 [ 160.901526][ T54] usb 6-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 160.905588][ T54] usb 6-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 160.909572][ T54] usb 6-1: config 0 interface 0 has no altsetting 0 [ 160.913658][ T54] usb 6-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 160.916746][ T54] usb 6-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 160.921567][ T54] usb 6-1: config 0 interface 0 has no altsetting 0 [ 160.924688][ T54] usb 6-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 160.927723][ T54] usb 6-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 160.931324][ T54] usb 6-1: config 0 interface 0 has no altsetting 0 [ 160.934283][ T54] usb 6-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 160.937146][ T54] usb 6-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 160.941161][ T54] usb 6-1: config 0 interface 0 has no altsetting 0 [ 160.945003][ T54] usb 6-1: New USB device found, idVendor=0c45, idProduct=1010, bcdDevice=49.8e [ 160.948082][ T54] usb 6-1: New USB device strings: Mfr=41, Product=64, SerialNumber=168 [ 160.950784][ T54] usb 6-1: Product: syz [ 160.952222][ T54] usb 6-1: Manufacturer: syz [ 160.953771][ T54] usb 6-1: SerialNumber: syz [ 160.963080][ T54] usb 6-1: config 0 descriptor?? [ 160.976904][ T54] yurex 6-1:0.0: USB YUREX device now attached to Yurex #0 [ 160.980755][T10655] bridge0: port 1(bridge_slave_0) entered blocking state [ 160.983232][T10655] bridge0: port 1(bridge_slave_0) entered disabled state [ 160.986533][T10655] bridge_slave_0: entered allmulticast mode [ 160.990487][T10655] bridge_slave_0: entered promiscuous mode [ 160.994917][T10655] bridge0: port 2(bridge_slave_1) entered blocking state [ 160.998839][T10655] bridge0: port 2(bridge_slave_1) entered disabled state [ 161.001854][T10655] bridge_slave_1: entered allmulticast mode [ 161.004843][T10655] bridge_slave_1: entered promiscuous mode [ 161.051942][T10655] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 161.061712][T10655] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 161.109902][T10655] team0: Port device team_slave_0 added [ 161.114270][T10655] team0: Port device team_slave_1 added [ 161.141457][ T12] ------------[ cut here ]------------ [ 161.143435][ T12] GID entry ref leak for dev syz1 index 2 ref=1 [ 161.146406][ T12] WARNING: drivers/infiniband/core/cache.c:806 at gid_table_release_one+0x1ad/0x450, CPU#0: kworker/u32:0/12 [ 161.150266][ T12] Modules linked in: [ 161.151817][ T12] CPU: 0 UID: 0 PID: 12 Comm: kworker/u32:0 Not tainted syzkaller #0 PREEMPT(full) [ 161.152734][T10655] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 161.155565][ T12] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 161.158390][T10655] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 161.161854][ T12] Workqueue: ib-unreg-wq ib_unregister_work [ 161.161876][ T12] RIP: 0010:gid_table_release_one+0x1b6/0x450 [ 161.161894][ T12] Code: 4c 24 38 48 c1 e8 03 4d 01 fc 48 89 44 24 08 eb 54 48 89 34 24 e8 0a 67 4f f9 48 8d 3d c3 87 26 08 48 8b 34 24 89 e9 44 89 f2 <67> 48 0f b9 3a e8 f0 66 4f f9 48 89 d8 41 83 c6 01 48 c1 e8 03 42 [ 161.161905][ T12] RSP: 0018:ffffc900001e7ac8 EFLAGS: 00010293 [ 161.171852][T10655] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 161.173221][T10655] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 161.174009][ T12] [ 161.174015][ T12] RAX: 0000000000000000 RBX: ffff88805f1f6c00 RCX: 0000000000000001 SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 161.174024][ T12] RDX: 0000000000000002 RSI: ffff888023226ee0 RDI: ffffffff90958bb0 [ 161.174031][ T12] RBP: 0000000000000001 R08: 0000000000000000 R09: ffffed100d3fd760 [ 161.174038][ T12] R10: ffff888069febb03 R11: ffff88801d2e54b0 R12: ffffed100be3ed9b [ 161.176133][T10655] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 161.176151][T10655] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 161.200755][ T34] usb 6-1: USB disconnect, device number 44 [ 161.201085][ T12] R13: ffff8880696b8000 R14: 0000000000000002 R15: dffffc0000000000 [ 161.215688][ T34] yurex 6-1:0.0: USB YUREX #0 now disconnected [ 161.217381][ T12] FS: 0000000000000000(0000) GS:ffff8880976fc000(0000) knlGS:0000000000000000 [ 161.218403][T10655] hsr_slave_0: entered promiscuous mode [ 161.218861][T10655] hsr_slave_1: entered promiscuous mode [ 161.219156][T10655] debugfs: 'hsr0' already exists in 'hsr' [ 161.219168][T10655] Cannot create hsr debugfs directory [ 161.237647][ T12] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 161.239899][ T12] CR2: 000000005806c4ac CR3: 000000006f881000 CR4: 0000000000352ef0 [ 161.242797][ T12] Call Trace: [ 161.243998][ T12] [ 161.245427][ T12] ib_device_release+0xef/0x1e0 [ 161.247080][ T12] ? __pfx_ib_device_release+0x10/0x10 [ 161.249154][ T12] device_release+0xa4/0x240 [ 161.251222][ T12] kobject_put+0x1ef/0x6f0 [ 161.253153][ T12] put_device+0x1f/0x30 [ 161.255123][ T12] process_one_work+0x9ba/0x1b20 [ 161.257071][ T12] ? __pfx_process_one_work+0x10/0x10 [ 161.258970][ T12] ? assign_work+0x1a0/0x250 [ 161.260550][ T12] worker_thread+0x6c8/0xf10 [ 161.262155][ T12] ? __pfx_worker_thread+0x10/0x10 [ 161.264055][ T12] kthread+0x3c5/0x780 [ 161.265704][ T12] ? __pfx_kthread+0x10/0x10 [ 161.267262][ T12] ? rcu_is_watching+0x12/0xc0 [ 161.268867][ T12] ? __pfx_kthread+0x10/0x10 [ 161.270464][ T12] ret_from_fork+0x983/0xb10 [ 161.272084][ T12] ? __pfx_ret_from_fork+0x10/0x10 [ 161.273941][ T12] ? __switch_to+0x7af/0x10d0 [ 161.276427][ T12] ? __pfx_kthread+0x10/0x10 [ 161.278439][ T12] ret_from_fork_asm+0x1a/0x30 [ 161.280918][ T12] [ 161.282257][ T12] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 161.284850][ T12] CPU: 0 UID: 0 PID: 12 Comm: kworker/u32:0 Not tainted syzkaller #0 PREEMPT(full) [ 161.288114][ T12] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 161.291714][ T12] Workqueue: ib-unreg-wq ib_unregister_work [ 161.293769][ T12] Call Trace: [ 161.294894][ T12] [ 161.295899][ T12] dump_stack_lvl+0x3d/0x1f0 [ 161.297525][ T12] vpanic+0x640/0x6f0 [ 161.298862][ T12] ? gid_table_release_one+0x1ad/0x450 [ 161.300758][ T12] panic+0xca/0xd0 [ 161.302071][ T12] ? __pfx_panic+0x10/0x10 [ 161.303664][ T12] ? check_panic_on_warn+0x1f/0xb0 [ 161.305963][ T12] check_panic_on_warn+0xab/0xb0 [ 161.307849][ T12] __warn+0x108/0x3c0 [ 161.309484][ T12] __report_bug+0x2a0/0x520 [ 161.311394][ T12] ? gid_table_release_one+0x1ad/0x450 [ 161.313774][ T12] ? __pfx___report_bug+0x10/0x10 [ 161.315884][ T12] report_bug_entry+0xe1/0x290 [ 161.317636][ T12] ? gid_table_release_one+0x1b6/0x450 [ 161.319570][ T12] handle_bug+0x18a/0x260 [ 161.321231][ T12] exc_invalid_op+0x17/0x50 [ 161.322892][ T12] asm_exc_invalid_op+0x1a/0x20 [ 161.324591][ T12] RIP: 0010:gid_table_release_one+0x1b6/0x450 [ 161.326903][ T12] Code: 4c 24 38 48 c1 e8 03 4d 01 fc 48 89 44 24 08 eb 54 48 89 34 24 e8 0a 67 4f f9 48 8d 3d c3 87 26 08 48 8b 34 24 89 e9 44 89 f2 <67> 48 0f b9 3a e8 f0 66 4f f9 48 89 d8 41 83 c6 01 48 c1 e8 03 42 [ 161.333948][ T12] RSP: 0018:ffffc900001e7ac8 EFLAGS: 00010293 [ 161.336207][ T12] RAX: 0000000000000000 RBX: ffff88805f1f6c00 RCX: 0000000000000001 [ 161.338921][ T12] RDX: 0000000000000002 RSI: ffff888023226ee0 RDI: ffffffff90958bb0 [ 161.341639][ T12] RBP: 0000000000000001 R08: 0000000000000000 R09: ffffed100d3fd760 [ 161.344553][ T12] R10: ffff888069febb03 R11: ffff88801d2e54b0 R12: ffffed100be3ed9b [ 161.347244][ T12] R13: ffff8880696b8000 R14: 0000000000000002 R15: dffffc0000000000 [ 161.349992][ T12] ? gid_table_release_one+0x1a6/0x450 [ 161.351945][ T12] ib_device_release+0xef/0x1e0 [ 161.353967][ T12] ? __pfx_ib_device_release+0x10/0x10 [ 161.355912][ T12] device_release+0xa4/0x240 [ 161.357543][ T12] kobject_put+0x1ef/0x6f0 [ 161.359104][ T12] put_device+0x1f/0x30 [ 161.360565][ T12] process_one_work+0x9ba/0x1b20 [ 161.362313][ T12] ? __pfx_process_one_work+0x10/0x10 [ 161.364386][ T12] ? assign_work+0x1a0/0x250 [ 161.366538][ T12] worker_thread+0x6c8/0xf10 [ 161.368621][ T12] ? __pfx_worker_thread+0x10/0x10 [ 161.370390][ T12] kthread+0x3c5/0x780 [ 161.371791][ T12] ? __pfx_kthread+0x10/0x10 [ 161.373420][ T12] ? rcu_is_watching+0x12/0xc0 [ 161.375066][ T12] ? __pfx_kthread+0x10/0x10 [ 161.376641][ T12] ret_from_fork+0x983/0xb10 [ 161.378223][ T12] ? __pfx_ret_from_fork+0x10/0x10 [ 161.379928][ T12] ? __switch_to+0x7af/0x10d0 [ 161.381637][ T12] ? __pfx_kthread+0x10/0x10 [ 161.383224][ T12] ret_from_fork_asm+0x1a/0x30 [ 161.385200][ T12] [ 161.387220][ T12] Kernel Offset: disabled [ 161.388678][ T12] Rebooting in 86400 seconds..