last executing test programs: 6m27.078451127s ago: executing program 1 (id=271): r0 = ioctl$KVM_GET_STATS_FD_cpu(0xffffffffffffffff, 0xaece) ioctl$BTRFS_IOC_DEFAULT_SUBVOL(r0, 0x40089413, &(0x7f0000000000)=0x6) mount(&(0x7f0000000100)=@filename='./cgroup\x00', &(0x7f0000000040)='./cgroup\x00', &(0x7f0000000080)='udf\x00', 0x208000, 0x0) 6m27.000321949s ago: executing program 1 (id=272): r0 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000001140), 0x60a00, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xf411119edabebbb5, 0x20011, r0, 0x52fbf000) (async) syz_genetlink_get_family_id$nl802154(&(0x7f0000007e00), 0xffffffffffffffff) madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x1) ioctl$KVM_CREATE_PIT2(0xffffffffffffffff, 0xaea3, 0x0) (async) r1 = syz_io_uring_complete(0x0) (async) getsockname$packet(0xffffffffffffffff, &(0x7f0000000040)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @multicast}, &(0x7f0000000080)=0x14) (async) r3 = socket$inet(0x2, 0x5, 0x0) setsockopt$sock_int(r3, 0x1, 0x2, &(0x7f0000000040)=0x7f, 0x4) (async) listen(r3, 0x4) (async) listen(r3, 0x0) (async) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f00000000c0)={'pim6reg\x00', 0x0}) sendmsg$MPTCP_PM_CMD_SUBFLOW_CREATE(r1, &(0x7f00000001c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000180)={&(0x7f0000000100)={0x58, 0x0, 0x400, 0x70bd29, 0x25dfdbfc, {}, [@MPTCP_PM_ATTR_ADDR_REMOTE={0x3c, 0x6, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @local}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0xa}, @MPTCP_PM_ADDR_ATTR_IF_IDX={0x8, 0x7, r2}, @MPTCP_PM_ADDR_ATTR_IF_IDX={0x8, 0x7, r4}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e24}]}, @MPTCP_PM_ATTR_LOC_ID={0x5, 0x5, 0x6}]}, 0x58}, 0x1, 0x0, 0x0, 0x800}, 0x0) (async) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) (async) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) 6m26.984477396s ago: executing program 1 (id=274): r0 = socket(0x2, 0x2, 0x0) setsockopt$inet_int(r0, 0x0, 0xb, &(0x7f00000000c0)=0x1002, 0x4) sendto$inet(r0, 0x0, 0xfffd, 0x80, &(0x7f0000000000)={0x2, 0x4e20}, 0x10) recvmsg$unix(r0, &(0x7f00000004c0)={0x0, 0x0, 0x0}, 0x2000) r1 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000001140), 0x66002, 0x0) r2 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000000040), 0x28200, 0x0) fallocate(r2, 0x2, 0xfff, 0x8001) r3 = socket$inet6(0xa, 0x80002, 0x0) r4 = mmap$IORING_OFF_SQ_RING(&(0x7f00005cc000/0x2000)=nil, 0x2000, 0x7, 0x11, 0xffffffffffffffff, 0x0) r5 = socket$pppoe(0x18, 0x1, 0x0) ioctl$KVM_SET_SREGS(0xffffffffffffffff, 0x4138ae84, &(0x7f0000000100)={{0x0, 0xdddd1000, 0x10, 0x0, 0x8, 0x2, 0x3, 0x4, 0x0, 0x4, 0x9, 0x10}, {0xcccff001, 0x0, 0xc, 0x0, 0x0, 0x0, 0x2, 0x2, 0x8, 0x4}, {0xeeef0000, 0xdddd0000, 0x0, 0x0, 0x7, 0x4, 0x0, 0x0, 0x3, 0x0, 0x0, 0xfc}, {0x3000, 0xffff1000, 0x0, 0x0, 0x0, 0x0, 0xff, 0x0, 0x0, 0x0, 0x4, 0x8}, {0xeeee8000, 0x3000, 0xb, 0x0, 0x0, 0x4, 0x0, 0xe, 0x0, 0x3c}, {0x5000, 0xd000, 0x0, 0x7, 0xc, 0x0, 0x2, 0x0, 0x4, 0x10, 0x80}, {0xdddd1000, 0x0, 0xa, 0x6, 0x0, 0x0, 0x2, 0x4, 0x10}, {0xeeee8000, 0x3000, 0x0, 0x1, 0xb, 0x3, 0x0, 0x1a, 0x26, 0x0, 0xff}, {0x80ac000}, {0x1, 0x2}, 0xddf8ffdb, 0x0, 0xf000, 0x70, 0x0, 0x0, 0x5000, [0xfffffffffffffffc, 0x0, 0x1, 0xfffffffffffffffc]}) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='memory.numa_stat\x00', 0x275a, 0x0) write$cgroup_subtree(r6, &(0x7f0000000100)=ANY=[], 0x32600) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r6, 0x0) connect$pppoe(r5, &(0x7f00000000c0)={0x18, 0x0, {0x2, @random="6ed1aa9df489", 'bond0\x00'}}, 0x1e) syz_io_uring_setup(0x48f5, &(0x7f0000000200)={0x0, 0xcbd8, 0x8000, 0x3, 0x1ff}, &(0x7f0000000280), &(0x7f00000002c0)=0x0) syz_io_uring_submit(r4, r7, &(0x7f0000000400)=@IORING_OP_RECV=@pass_buffer={0x1b, 0xb, 0x0, r3, 0x0, &(0x7f0000000300)="c37839c38213aab7c61fa4d1b328f856aec6c973bf40e77f3a30989e1731ba4debe955d41f5f8fdcde242d2fdfe1d042a0448ab66783fd8da2ce80b35614936733d37e89b8c9bd3a48cc5820f12e093dee05abb2959389d3232aa4af8eec20e123a32c52cc10497d97b046b46ec85a4ee67df5b1d472120f642fb6ed765bc523730b5449a219d99dc3247a3f13f79834b55e9f1a139fb99df94062375765f3998a3259b8733f6d65e4d7d18ce1bfcfc001bbb2bc972c64957219a2ca69c1b6dfc53ed5998a65e3f44a91e35692afc47c54f6bf2992639ea96e", 0xd9, 0x20, 0x1}) connect$inet6(r3, &(0x7f0000000140)={0xa, 0x4e24, 0x1ff, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x2a}}, 0x6}, 0x1c) connect$inet6(r3, &(0x7f0000000080)={0xa, 0x4e20, 0xeac0, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x6}, 0x1c) r8 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) r9 = ioctl$KVM_CREATE_VM(r8, 0xae01, 0x0) r10 = ioctl$KVM_CREATE_VCPU(r9, 0xae41, 0x2) syz_kvm_setup_cpu$x86(r9, r10, &(0x7f0000fe6000/0x18000)=nil, &(0x7f00000001c0)=[@text64={0x40, &(0x7f0000000780)="440f017701430f23a2aaf9f8f1f13806160f08460f20802ef30fa7c848b8e3b00000000004020f23d80f21f835800000f052c4c17dfca7000000800fc7b6b34e0000360f07", 0x45}], 0x1, 0x5b, 0x0, 0x0) ioctl$KVM_RUN(r10, 0xae80, 0x0) sendmmsg$inet6(r3, &(0x7f0000003cc0)=[{{0x0, 0x0, &(0x7f0000003980), 0x171}}], 0x400000000000172, 0x4001c00) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3000001, 0x22052, r1, 0x2000) r11 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x2802, 0x1) ppoll(&(0x7f0000000040)=[{r11, 0x100}], 0x1, &(0x7f00000000c0), &(0x7f0000000100)={[0x3]}, 0x8) 6m26.846433124s ago: executing program 1 (id=277): r0 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000001140), 0xa00, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) mount$bind(&(0x7f0000000040)='.\x00', &(0x7f0000000080)='./file0\x00', 0x0, 0x2a05004, 0x0) chroot(&(0x7f0000000100)='./file0\x00') mount$bind(&(0x7f0000000880)='./file0\x00', &(0x7f00000008c0)='./file0\x00', 0x0, 0x5200, 0x0) pivot_root(&(0x7f0000000240)='./file0\x00', &(0x7f0000000000)='./file0/../file0\x00') r2 = syz_genetlink_get_family_id$SEG6(&(0x7f0000002040), r1) sendmsg$SEG6_CMD_SETHMAC(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000002100)={&(0x7f0000002080)={0x34, r2, 0x1, 0x70bd29, 0x25dfdbfd, {}, [@SEG6_ATTR_HMACKEYID={0x8, 0x3, 0x7}, @SEG6_ATTR_SECRET={0x8, 0x4, [0x4]}, @SEG6_ATTR_SECRETLEN={0x5, 0x5, 0x3}, @SEG6_ATTR_ALGID={0x5, 0x6, 0x1}]}, 0x34}, 0x1, 0x0, 0x0, 0x882}, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3000004, 0x20011, r0, 0xf648d000) r3 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r3, 0x6, 0xa, &(0x7f0000000080), 0x4) syz_emit_vhci(&(0x7f0000000180)=ANY=[@ANYBLOB="040e041e0b20"], 0x7) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) 6m26.760760835s ago: executing program 1 (id=279): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER_VALUE(r0, 0x84, 0x7c, &(0x7f0000000100)={0x0, 0x2, 0x8}, 0x8) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x0, 0x0) lseek(r1, 0x0, 0x4) creat(&(0x7f0000000080)='./file0\x00', 0xac) mount(&(0x7f0000000180)=@rnullb, &(0x7f0000000140)='./file0\x00', &(0x7f0000000000)='jfs\x00', 0x8010, 0x0) 6m26.561562831s ago: executing program 1 (id=283): r0 = openat$null(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) lseek(r0, 0x0, 0x0) r1 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000001140), 0x141342, 0x0) ioctl$F2FS_IOC_GARBAGE_COLLECT_RANGE(r0, 0x4018f50b, &(0x7f0000000040)={0xfffffffd, 0x8, 0x1001}) sendfile(r1, r1, 0x0, 0x7ffff003) 6m26.436470312s ago: executing program 32 (id=283): r0 = openat$null(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) lseek(r0, 0x0, 0x0) r1 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000001140), 0x141342, 0x0) ioctl$F2FS_IOC_GARBAGE_COLLECT_RANGE(r0, 0x4018f50b, &(0x7f0000000040)={0xfffffffd, 0x8, 0x1001}) sendfile(r1, r1, 0x0, 0x7ffff003) 3m35.851087828s ago: executing program 0 (id=1375): socket$nl_netfilter(0x10, 0x3, 0xc) (async) socket$nl_netfilter(0x10, 0x3, 0xc) mount(&(0x7f00000000c0)=@nbd={'/dev/nbd', 0x0}, &(0x7f0000000040)='./cgroup\x00', &(0x7f0000000000)='erofs\x00', 0x20, 0x0) 3m35.822653183s ago: executing program 0 (id=1376): mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) (async) gettid() (async) mbind(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x2, &(0x7f0000000000)=0x9, 0x8, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0xa) (async, rerun: 32) madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x3) (async, rerun: 32) r0 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000001140), 0x141342, 0x0) writev(r0, &(0x7f0000000380)=[{&(0x7f0000000280)="b7c3e67f3437123a9d16a63bbdc9beacf1ec770d3b96c8c2743fe7d9184d7b538ea52ead53439f82d0534482011e3de3ad319f051fdfbd43ac420f2976edb0799396232c6ad3e6b5bc67c80f84721785fc2781f07d5903d1911e0a5904090f07035606bd44282c2b7635f5ff91c967c54ea2744c91215339e64e5f28dd74a754c3a44b7ac5edcc866469b78585b8f7d1a5aabc510a8937adb441ef64372b64eb111fd35b4fc3a67514c478f94e3478acd0700124a7ed63fcb73f4a6ef37e0f764dfb725689a41e808e1a4d8efafd3552", 0xd0}], 0x1) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) r1 = syz_open_dev$ndb(&(0x7f0000000000), 0x0, 0x0) (async) pipe(&(0x7f0000000000)={0xffffffffffffffff}) (async) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r2, 0x0, r3, 0x0, 0xfffffffffffffff8, 0x6) ioctl$VHOST_SET_VRING_ADDR(r3, 0x4028af11, &(0x7f0000000240)={0x2, 0x1, &(0x7f0000000040)=""/249, &(0x7f0000000140)=""/124, &(0x7f00000001c0)=""/105, 0xd000}) (async, rerun: 32) ioctl$NBD_SET_FLAGS(r1, 0x401070c9, 0x0) (async, rerun: 32) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) 3m35.623968202s ago: executing program 0 (id=1377): r0 = creat(&(0x7f0000001380)='./file0\x00', 0x4) (async, rerun: 64) r1 = syz_init_net_socket$ax25(0x3, 0x2, 0x7) (rerun: 64) ioctl$SIOCAX25DELUID(r1, 0x89e2, 0x0) (async, rerun: 64) mount(&(0x7f0000001400)=@rnullb, &(0x7f0000001440)='./file0\x00', &(0x7f0000000000)='omfs\x00', 0x0, 0x0) (rerun: 64) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(r0, 0xc018937d, &(0x7f0000000040)={{0x1, 0x1, 0x18, r0, {0x9}}, './file0\x00'}) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) ioctl$KVM_SET_MSRS(r4, 0x4008ae89, &(0x7f00000002c0)=ANY=[@ANYBLOB="0100000000000000040001c0"]) (async) link(&(0x7f0000000080)='./file0\x00', &(0x7f0000000100)='./file0\x00') (async) openat$ppp(0xffffffffffffff9c, &(0x7f00000000c0), 0x500, 0x0) 3m35.522671002s ago: executing program 0 (id=1378): r0 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000000000), 0x301802, 0x0) r1 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r1, &(0x7f0000000200)={0x2, 0x4e20, @empty}, 0x10) setsockopt$inet_tcp_int(r1, 0x6, 0x2, &(0x7f0000000040)=0x2800, 0x4) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f0000000400)={0x1, &(0x7f00000000c0)=[{0x6, 0x0, 0x0, 0x7654}]}, 0x10) connect$inet(r1, &(0x7f0000000000)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x1c}}, 0x10) r2 = socket$inet(0x2, 0x4000000000000001, 0x0) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r2, 0x89f1, &(0x7f0000000280)={'sit0\x00', &(0x7f00000001c0)={'gretap0\x00', 0x0, 0x7, 0x7840, 0x4, 0x400, {{0x6, 0x4, 0x0, 0x2, 0x18, 0x4, 0x0, 0x1, 0x29, 0x0, @private=0xa010102, @private=0xa010101, {[@generic={0x83, 0x2}]}}}}}) setsockopt$inet_tcp_TCP_CONGESTION(r1, 0x6, 0xd, &(0x7f00000001c0)='illinois\x00', 0x9) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0) mount$bind(&(0x7f0000000000)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101097, 0x0) mount$bind(&(0x7f0000000100)='./file0/../file0\x00', &(0x7f00000000c0)='./file0/file0\x00', 0x0, 0x8b100a, 0x0) umount2(&(0x7f00000002c0)='./file0\x00', 0xc) sendmsg$inet(r1, &(0x7f00000015c0)={0x0, 0x14, &(0x7f0000001600)=[{&(0x7f0000000240)=' ', 0x100120}], 0x1}, 0x0) r3 = openat$sysfs(0xffffffffffffff9c, &(0x7f00000002c0)='/sys/power/resume', 0x141a82, 0x40) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) copy_file_range(r4, 0x0, r3, 0x0, 0x7, 0x0) recvmsg(r1, &(0x7f0000000580)={0x0, 0x2, &(0x7f0000000500)=[{&(0x7f0000000740)=""/4096, 0xa15b0}], 0x1, 0x0, 0x2000000000000}, 0x700) mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x0) r5 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) setsockopt$inet_sctp6_SCTP_DELAYED_SACK(r5, 0x84, 0x10, &(0x7f0000000080)=@sack_info={0x0, 0x210801, 0x1}, 0xc) ioprio_set$uid(0x3, 0x0, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5}, 0x0) writev(r0, &(0x7f0000000300)=[{&(0x7f0000000680)="580000004b80", 0x6}], 0x1) 3m34.66102963s ago: executing program 0 (id=1389): ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x89e2, &(0x7f0000000280)={0xffffffffffffffff}) r1 = epoll_create1(0x0) ioctl$FS_IOC_SETFLAGS(r1, 0x40088a01, &(0x7f0000002200)=0xc0100100) ioctl$BTRFS_IOC_SEND(r0, 0x40489426, &(0x7f0000000300)={{r1}, 0x1, &(0x7f00000002c0)=[0x4239], 0x3, 0x2, 0x1}) r2 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000001140), 0x66002, 0x0) r3 = socket$inet6(0xa, 0x80002, 0x0) getsockopt$IPT_SO_GET_INFO(0xffffffffffffffff, 0x0, 0x40, &(0x7f0000000000)={'filter\x00', 0x0, [0x3, 0x5, 0xfffffff8, 0x800, 0x7c]}, &(0x7f00000000c0)=0x54) connect$inet6(r3, &(0x7f0000000140)={0xa, 0x4e24, 0x1ff, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x2a}}, 0x6}, 0x1c) connect$inet6(r3, &(0x7f0000000080)={0xa, 0x4e20, 0xeac0, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x6}, 0x1c) sendmmsg$inet6(r3, &(0x7f0000000240)=[{{0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000180)="17d3005713a0ab543f59347a5df7d9aef28171341055c57b6d75e22c8ed5540e2c545be19915dad258248fb804e075e83d5c15d9ecda22a43de3ae430481d0399ce22bff3fa72673ad2d5e58540e62dc0c7b0488c27718badd357b86daf7ccdd7a5b28467bafc11e476b689bd1f0e65c2e65186b07b11de2ccd76b108185055b18f1e761", 0x84}], 0x1}}], 0x1, 0x4008010) sendmmsg$inet6(r3, &(0x7f0000003cc0)=[{{0x0, 0x0, &(0x7f0000003980), 0x171}}], 0x400000000000172, 0x4001c00) r4 = syz_usb_connect$hid(0x2, 0x36, &(0x7f0000000100)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40, 0x5543, 0x45, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x40, 0xb1, [{{0x9, 0x4, 0x0, 0x0, 0x2, 0x3, 0x0, 0x1, 0x0, {0x9, 0x21, 0x101, 0x0, 0x1, {0x22, 0x5}}, {{{0x9, 0x5, 0x81, 0x3, 0x3ff, 0xf}}}}}]}}]}}, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) read$FUSE(0xffffffffffffffff, 0x0, 0x0) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r5, 0x2) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r6, 0x0) r7 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r7, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) syz_usb_control_io(r4, 0x0, 0x0) syz_usb_control_io(r4, &(0x7f0000000340)={0x2c, &(0x7f0000000040)={0x0, 0x7, 0x5, {0x5, 0x0, "00f400"}}, 0x0, 0x0, 0x0, 0x0}, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3000001, 0x22052, r2, 0x2000) ioctl$sock_SIOCSIFVLAN_GET_VLAN_INGRESS_PRIORITY_CMD(0xffffffffffffffff, 0x8983, &(0x7f0000000380)) 3m34.460240073s ago: executing program 0 (id=1391): r0 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000001140), 0x66002, 0x0) (async) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) fstat(r1, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0}) setreuid(0x0, r3) (async) fcntl$F_SET_RW_HINT(r2, 0x40c, &(0x7f0000000000)=0x4) (async) r4 = socket$alg(0x26, 0x5, 0x0) bind$alg(r4, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-camellia-asm\x00'}, 0x58) (async) setsockopt$ALG_SET_KEY(r4, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) (async) r5 = accept4(r4, 0x0, 0x0, 0x800) sendmmsg$alg(r5, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0x10}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe", 0x2c}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722", 0x44}], 0x3}], 0x1, 0x40800) (async) recvmsg(r5, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000440)=[{&(0x7f00000002c0)=""/127, 0x7f}, {&(0x7f0000000340)=""/90, 0x5a}], 0x2}, 0x0) (async) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3000001, 0x22052, r0, 0x2000) 3m34.367492183s ago: executing program 33 (id=1391): r0 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000001140), 0x66002, 0x0) (async) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) fstat(r1, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0}) setreuid(0x0, r3) (async) fcntl$F_SET_RW_HINT(r2, 0x40c, &(0x7f0000000000)=0x4) (async) r4 = socket$alg(0x26, 0x5, 0x0) bind$alg(r4, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-camellia-asm\x00'}, 0x58) (async) setsockopt$ALG_SET_KEY(r4, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) (async) r5 = accept4(r4, 0x0, 0x0, 0x800) sendmmsg$alg(r5, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0x10}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe", 0x2c}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722", 0x44}], 0x3}], 0x1, 0x40800) (async) recvmsg(r5, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000440)=[{&(0x7f00000002c0)=""/127, 0x7f}, {&(0x7f0000000340)=""/90, 0x5a}], 0x2}, 0x0) (async) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3000001, 0x22052, r0, 0x2000) 2.986806009s ago: executing program 2 (id=2874): r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000040), 0x62181) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc08c5332, &(0x7f00000001c0)={0x0, 0x0, 0x0, 'queue0\x00'}) write$sndseq(r0, &(0x7f0000000300)=[{0x84, 0x77, 0x0, 0x0, @tick, {0xfd}, {0x7}, @raw32={[0x2, 0x0, 0x8000000]}}, {0x2, 0x0, 0x5, 0x84, @tick, {0xfd}, {0x0, 0x8}, @note={0x81}}, {0x6, 0x3, 0x9, 0xff, @time={0x0, 0xe392}, {0x10, 0x5}, {0x8, 0x2}, @control={0x3, 0xa, 0x7fff}}], 0x54) r1 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000001140), 0x66002, 0x0) r2 = socket$inet6(0xa, 0x80002, 0x0) connect$inet6(r2, &(0x7f0000000140)={0xa, 0x4e24, 0x1ff, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x2a}}, 0x6}, 0x1c) connect$inet6(r2, &(0x7f0000000080)={0xa, 0x4e20, 0xeac0, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x6}, 0x1c) modify_ldt$read_default(0x2, 0xffffffffffffffff, 0x0) sendmmsg$inet6(r2, &(0x7f0000003cc0)=[{{0x0, 0x0, &(0x7f0000003980), 0x171}}], 0x400000000000172, 0x4001c00) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3000001, 0x22052, r1, 0x2000) openat$sndseq(0xffffffffffffff9c, &(0x7f0000000040), 0x62181) (async) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc08c5332, &(0x7f00000001c0)={0x0, 0x0, 0x0, 'queue0\x00'}) (async) write$sndseq(r0, &(0x7f0000000300)=[{0x84, 0x77, 0x0, 0x0, @tick, {0xfd}, {0x7}, @raw32={[0x2, 0x0, 0x8000000]}}, {0x2, 0x0, 0x5, 0x84, @tick, {0xfd}, {0x0, 0x8}, @note={0x81}}, {0x6, 0x3, 0x9, 0xff, @time={0x0, 0xe392}, {0x10, 0x5}, {0x8, 0x2}, @control={0x3, 0xa, 0x7fff}}], 0x54) (async) openat$rnullb(0xffffffffffffff9c, &(0x7f0000001140), 0x66002, 0x0) (async) socket$inet6(0xa, 0x80002, 0x0) (async) connect$inet6(r2, &(0x7f0000000140)={0xa, 0x4e24, 0x1ff, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x2a}}, 0x6}, 0x1c) (async) connect$inet6(r2, &(0x7f0000000080)={0xa, 0x4e20, 0xeac0, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x6}, 0x1c) (async) modify_ldt$read_default(0x2, 0xffffffffffffffff, 0x0) (async) sendmmsg$inet6(r2, &(0x7f0000003cc0)=[{{0x0, 0x0, &(0x7f0000003980), 0x171}}], 0x400000000000172, 0x4001c00) (async) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3000001, 0x22052, r1, 0x2000) (async) 2.800353624s ago: executing program 2 (id=2875): r0 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000001140), 0x60a00, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xf411119ed8bebbb9, 0x20011, r0, 0x52fbf000) syz_genetlink_get_family_id$nl802154(&(0x7f0000007e00), 0xffffffffffffffff) madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x1) madvise(&(0x7f0000862000/0x3000)=nil, 0x3000, 0x17) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) openat$rnullb(0xffffffffffffff9c, &(0x7f0000001140), 0x60a00, 0x0) (async) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xf411119ed8bebbb9, 0x20011, r0, 0x52fbf000) (async) syz_genetlink_get_family_id$nl802154(&(0x7f0000007e00), 0xffffffffffffffff) (async) madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x1) (async) madvise(&(0x7f0000862000/0x3000)=nil, 0x3000, 0x17) (async) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) (async) 2.428326729s ago: executing program 2 (id=2878): r0 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000001140), 0x141342, 0x0) r1 = syz_open_dev$usbmon(&(0x7f0000000040), 0x8, 0x43) ioctl$MON_IOCQ_URB_LEN(r1, 0x9201) r2 = openat$cuse(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) r3 = syz_usb_connect(0x0, 0x1cb, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000122f0d4071040403dfe4000000010902b901010000003f0904"], 0x0) syz_usb_control_io(r3, 0x0, 0x0) syz_usb_control_io(r3, 0x0, &(0x7f0000000980)={0x84, &(0x7f00000003c0)=ANY=[@ANYBLOB="200556010000b0"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_ep_write$ath9k_ep2(r3, 0x83, 0x10, &(0x7f0000000040)=@ready={0x0, 0x0, 0x8, "577768f5", {0x1, 0x2, 0x0, 0x7, 0x7b}}) sendfile(r2, r0, 0x0, 0x7ffff002) openat$rnullb(0xffffffffffffff9c, &(0x7f0000001140), 0x141342, 0x0) (async) syz_open_dev$usbmon(&(0x7f0000000040), 0x8, 0x43) (async) ioctl$MON_IOCQ_URB_LEN(r1, 0x9201) (async) openat$cuse(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) (async) syz_usb_connect(0x0, 0x1cb, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000122f0d4071040403dfe4000000010902b901010000003f0904"], 0x0) (async) syz_usb_control_io(r3, 0x0, 0x0) (async) syz_usb_control_io(r3, 0x0, &(0x7f0000000980)={0x84, &(0x7f00000003c0)=ANY=[@ANYBLOB="200556010000b0"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) (async) syz_usb_ep_write$ath9k_ep2(r3, 0x83, 0x10, &(0x7f0000000040)=@ready={0x0, 0x0, 0x8, "577768f5", {0x1, 0x2, 0x0, 0x7, 0x7b}}) (async) sendfile(r2, r0, 0x0, 0x7ffff002) (async) 2.406033917s ago: executing program 5 (id=2880): ioctl$vim2m_VIDIOC_ENUM_FMT(0xffffffffffffffff, 0xc0405602, &(0x7f0000000040)={0xa, 0x2, 0x0, "268100ba7af9819e79b058d9f2a15b8c4800000000010011000000000200"}) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000380), 0x8200, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000000)=0x15) ioctl$TCSETS(r0, 0x40384708, &(0x7f0000000040)={0x8, 0x2, 0x9, 0x3, 0x7, "3eccd2000500"}) r1 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000001140), 0x66002, 0x0) r2 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_TCP_MD5SIG(r2, 0x6, 0xe, &(0x7f0000000200)={@in={{0x2, 0x1, @local}}, 0x0, 0x0, 0x48, 0x0, "43cad7b04bde5bbd8035d89034a56bad61a87c614899a37c5d0d7da4d7fc948375f3593dbd21eb7618ffb4ff4984e01eedc3f9dfeade7787ea64309c01ae05fb7000"}, 0xd8) setsockopt$inet_tcp_TCP_MD5SIG(r2, 0x6, 0xe, &(0x7f0000000300)={@in={{0x2, 0x4e24, @broadcast}}, 0x0, 0x0, 0x1f, 0x0, "966e49d5b8a5f9bcbb98226a8aa02da2fa3bc307e45f0ac0835e9df4172024ab39323390f33b09244f06fade849a1328407c710ad5f3d8132174a1ad1a6bd5a5b361d6681b400175cd366a76294b5610"}, 0xd8) setsockopt$inet_tcp_int(r2, 0x6, 0x20, &(0x7f0000000040)=0x2, 0xf6) fadvise64(r1, 0x94, 0x6e, 0x5) mprotect(&(0x7f00002c3000/0x2000)=nil, 0x2000, 0x1) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3000001, 0x22052, r1, 0x2000) 2.26198906s ago: executing program 5 (id=2881): openat$rnullb(0xffffffffffffff9c, &(0x7f0000000140), 0x64802, 0x0) prlimit64(0x0, 0xe, 0x0, 0x0) r0 = socket$packet(0x11, 0x2, 0x300) r1 = socket(0x11, 0x3, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x121301, 0x0) ioctl$TIOCSETD(r3, 0x5423, &(0x7f0000000040)=0xd) ioctl$TIOCOUTQ(r3, 0x5411, &(0x7f0000000100)) r4 = fsopen(&(0x7f0000000280)='ceph\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r4, 0x1, &(0x7f0000000000)='source', &(0x7f0000000100)='::,:/', 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f00000005c0)={'gre0\x00', 0x0}) bind$packet(r1, &(0x7f0000000180)={0x11, 0x0, r5, 0x1, 0x0, 0x6, @remote}, 0x14) setsockopt$packet_int(r1, 0x107, 0xf, &(0x7f0000000000)=0xe9, 0x4) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000000), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000100)={'caif0\x00', 0x0}) sendmsg$ETHTOOL_MSG_LINKMODES_SET(r6, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000140)={0x20, r7, 0x1, 0x1000, 0x0, {0x2a}, [@ETHTOOL_A_LINKMODES_HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r8}]}]}, 0x20}, 0x1, 0x0, 0x0, 0x40040}, 0x0) r9 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000100)='./binderfs/binder0\x00', 0x802, 0x0) r10 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000780), 0x0, 0x0) r11 = ioctl$KVM_CREATE_VM(r10, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r11, 0x4020ae46, &(0x7f0000000180)={0x0, 0x1, 0xeeee0000, 0x2000, &(0x7f000000f000/0x2000)=nil}) ioctl$KVM_SET_USER_MEMORY_REGION(r11, 0x4020ae46, &(0x7f00000000c0)={0x2515, 0x0, 0x0, 0x1000, &(0x7f0000fec000/0x1000)=nil}) close_range(r9, 0xffffffffffffffff, 0x0) sendmsg$ETHTOOL_MSG_PRIVFLAGS_SET(r2, &(0x7f0000000300)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000240)={&(0x7f0000000f80)={0x454, r7, 0x100, 0x70bd2a, 0x25dfdbfd, {}, [@ETHTOOL_A_PRIVFLAGS_HEADER={0x44, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'team0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r5}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'pim6reg0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r5}]}, @ETHTOOL_A_PRIVFLAGS_FLAGS={0x24, 0x2, 0x0, 0x1, [@ETHTOOL_A_BITSET_NOMASK={0x4}, @ETHTOOL_A_BITSET_VALUE={0x19, 0x4, "8ff07729cd51edbae733b32fb208525c0109f3cc1b"}]}, @ETHTOOL_A_PRIVFLAGS_FLAGS={0x3d8, 0x2, 0x0, 0x1, [@ETHTOOL_A_BITSET_NOMASK={0x4}, @ETHTOOL_A_BITSET_NOMASK={0x4}, @ETHTOOL_A_BITSET_VALUE={0xe5, 0x4, "2596e1958abb75d49a9e38b575c30bd1e218e677742df552e8b40f79a12e54132f2d2ab7520f1cd66ab2733eb85c788c2415f3b65c188436b96746ad29a6d613e1d6c946e662c95d83b3a3b46bfa0d73f56dde48eb2d8b8b7c752a529d769d90135442751da9b94083828db924bd1c98da3bffe22f08a92b6b98bc1a9e9f59391b3f4356a73ed06db4dc182095ba01efbac234dd46053660d29020a62fbabac2aea5847db55c226a27f7da2408fdebd133bde5faf7a26f5273cfe57dab23d1c0530544de44906592cff863aa536670e395ff77b7555600"/225}, @ETHTOOL_A_BITSET_VALUE={0x51, 0x4, "086127b7658de0b5e5840ab04b2131d080685bbb6780e7b12722b555f99e66cd4f571631104615e91f5ebcc8ace8983304b4c9c2a02e629f7efcb1c89fe061e5ad6521f673fa90313dc627a1ae"}, @ETHTOOL_A_BITSET_SIZE={0x8, 0x2, 0xfffffffc}, @ETHTOOL_A_BITSET_VALUE={0xdc, 0x4, "822c8473668c005277fea38adb221cc3daddad2ddc80198c63cc1923c004d069125834ab13dd54deb49772b7de57e7f6792c1dee67c5d1b4cdb97e653721fdd0361056324a4021ac3be92b4062f17e8fdf7739e8ea0c5c4a814f39bdfb6bfe2c669f69833f0087baf4c94447739eca8d570dffc6da4d0ce6d0656a3ffcd8dd10cdaeaec8462567da5ff583c9b5df97d63a68987d203ce50882218114ddcf9f1db283d25d9f937885f62861dfafea7c88cfcbb025e13771fe1522e5253be849ba953801b9bc3b755c050a6634e9d162dead9282d03612ebe4"}, @ETHTOOL_A_BITSET_VALUE={0xc7, 0x4, "2973ba0879e4c97a6e82b281be24c9a9e69e1ed2d87a6ec5a7d2fbcd4e0b54dbef4dd49ce34c4efb259d4c90e9bb60e9f0c4b5bf1f45cd822e86be7fa5c73f0c2bb8d4fb410de6f178d87589d63ae3ad3d012c1407290526a0c8c4b40eed29f16d314fa09499d4252502e28e3ecf1b6dca0ce2a674fc63bdb93e7633b0014f6b0679d853b98a6b90811385af7203b24e965282c77ab8cf0227d7ea06d8ea48dd404e8793c7edce80e3ec86e70c819e488848f3591938106d29310a894d15b42d4e948c"}, @ETHTOOL_A_BITSET_NOMASK={0x4}, @ETHTOOL_A_BITSET_BITS={0x18, 0x3, 0x0, 0x1, [{0x14, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x2}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x7}]}]}, @ETHTOOL_A_BITSET_MASK={0xc8, 0x5, "aa77e4baacb51a829750503158816ae383733a3182ace54312c4e8b9f9ffa6217bbb14f3f0bfd902fae06fe592045f346f726c44f301e5b341826bf2c9207fce04190003aedde4fb957c8e57a5fbf37fa253a8b253e257c315cdb2aaf1788a67297e60eef73b0ef1a864f7cd0160ec36571c05ee6809db11e8549385ebbf059e571d1abefb3b773dba3ab0c74cfe6206dbe86799ef1b3c9f9b8d4b023064e4a56a6599e805fbeed2d3c92f69ea9ab1a66a33e46c3aaf9ae6c95637913d59fd64c656e7b7"}]}]}, 0x454}, 0x1, 0x0, 0x0, 0x40d0}, 0x0) r12 = syz_open_dev$sndctrl(&(0x7f0000000080), 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_ADD(r12, 0xc0405519, 0x0) sendmsg$netlink(r1, &(0x7f0000002ac0)={0x0, 0x0, &(0x7f0000000540)=[{&(0x7f0000000280)=ANY=[@ANYBLOB="020114008cdc18000e3580009f000114600000060600ac141414e0000003808a8972bd0b72e41082b1a3d2061fd7fdfe4b88942a31f48597e36e039b1c599db6e466749c2d4c8303a0f7fbda34fb8825f80200e3c0ab42e32a097dbd4be5ffca88faca"], 0xdd12}, {&(0x7f0000000440)=ANY=[], 0x10}], 0x2}, 0x20040051) r13 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TIOCSTI(r13, 0x5412, &(0x7f00000001c0)=0x4) setsockopt$packet_int(r0, 0x107, 0x8, &(0x7f0000000100)=0x40049, 0x4) 1.868315814s ago: executing program 5 (id=2885): r0 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000001140), 0x60a00, 0x0) mmap(&(0x7f0000199000/0x800000)=nil, 0x800000, 0xf411119edbbebbb3, 0x20011, r0, 0x52fbf000) r1 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000015c0), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r1, 0xaf01, 0x0) r2 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000400)='/proc/sys/net/ipv4/vs/sync_ports\x00', 0x2, 0x0) write$char_usb(r2, &(0x7f0000000000)='-0 ', 0x3) (async) write$char_usb(r2, &(0x7f0000000000)='-0 ', 0x3) ioctl$VHOST_SET_MEM_TABLE(r1, 0x4008af03, 0x0) ioctl$FS_IOC_GET_ENCRYPTION_POLICY_EX(r1, 0xc0096616, &(0x7f0000000000)={0x2, [0x0, 0x0]}) syz_io_uring_setup(0x497, &(0x7f0000000200)={0x0, 0x7278, 0x0, 0x2, 0x156}, 0x0, 0x0) (async) syz_io_uring_setup(0x497, &(0x7f0000000200)={0x0, 0x7278, 0x0, 0x2, 0x156}, 0x0, 0x0) r3 = syz_open_procfs(0x0, &(0x7f00000000c0)='smaps\x00') preadv(r3, &(0x7f0000000440)=[{&(0x7f0000000100)=""/230, 0xe6}], 0x1, 0x5f0e, 0x0) syz_genetlink_get_family_id$nl802154(&(0x7f0000007e00), 0xffffffffffffffff) (async) syz_genetlink_get_family_id$nl802154(&(0x7f0000007e00), 0xffffffffffffffff) ioctl$TUNSETVNETLE(r3, 0x400454dc, &(0x7f0000000040)) (async) ioctl$TUNSETVNETLE(r3, 0x400454dc, &(0x7f0000000040)) madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x1) ioctl$KVM_CREATE_PIT2(0xffffffffffffffff, 0xaea3, 0x0) (async) ioctl$KVM_CREATE_PIT2(0xffffffffffffffff, 0xaea3, 0x0) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) 1.684549321s ago: executing program 5 (id=2886): r0 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) fadvise64(r0, 0x7f, 0x5, 0x3) open$dir(&(0x7f0000000080)='./cgroup/pids.max\x00', 0x480, 0x40) r1 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup/pids.max\x00', 0x315802, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_REPAIR(r2, 0x6, 0x13, &(0x7f00000021c0)=0x1, 0x4) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_int(r3, 0x29, 0x4e, &(0x7f0000000080)=0x3, 0x4) bind$inet6(r3, &(0x7f0000000240)={0xa, 0x4e20, 0x3, @ipv4={'\x00', '\xff\xff', @broadcast}}, 0x1c) r4 = socket$can_bcm(0x1d, 0x2, 0x2) ioctl$ifreq_SIOCGIFINDEX_vcan(r4, 0x8933, &(0x7f0000000100)={'vcan0\x00', 0x0}) connect$can_bcm(r4, &(0x7f00000000c0)={0x1d, r5}, 0x10) sendmsg$can_bcm(r4, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000480)={0x1, 0x16b, 0x1, {}, {0x0, 0x2710}, {}, 0x1, @can={{0x2}, 0x88, 0x3, 0x0, 0x0, "ae771949a0cb35d4"}}, 0x48}}, 0x0) setsockopt(r2, 0x1, 0x10000000000009, &(0x7f0000000100)="0100ddff", 0x507b420f2d51f971) ioctl$VHOST_SET_OWNER(r1, 0xaf01, 0x0) ioctl$VIDIOC_G_PARM(r1, 0xc0cc5615, &(0x7f0000000140)={0xc, @output={0x0, 0x1, {0x2, 0x7ff}, 0x6, 0x8399}}) connect$inet6(r2, &(0x7f0000000000)={0xa, 0xfffc, 0x7, @empty, 0x200}, 0x1c) setsockopt(r2, 0x1, 0x9, &(0x7f0000000040), 0x29) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3000003, 0x22052, r0, 0x56f73000) 1.463988281s ago: executing program 4 (id=2888): socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) (async) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x19) (async) socketpair$unix(0x1, 0x1, 0x0, 0x0) (async) mremap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x1000, 0x7, &(0x7f0000001000/0x1000)=nil) (async, rerun: 64) r1 = openat$fuse(0xffffffffffffff9c, &(0x7f00000000c0), 0x42, 0x0) (rerun: 64) mount$fuse(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000000), 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r1, @ANYBLOB=',rootmode=00000000000000000100000,user_id=', @ANYRESDEC=r0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0, @ANYRES64=r0]) (async) read$FUSE(r1, &(0x7f00000021c0)={0x2020, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r1, &(0x7f0000000240)={0x50, 0x0, r2, {0x7, 0x1f, 0x0, 0x202, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40000000}}, 0x50) syz_fuse_handle_req(r1, &(0x7f0000008380)="000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000080000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000dc4e00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ba045abcd5dfc67d000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000230000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000050000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000209bfd66eea210560000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000020000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000040000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001354c4b600", 0x2000, &(0x7f00000062c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000500)={0x20, 0x0, 0x20000}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) (async) syz_fuse_handle_req(r1, &(0x7f000000a380)="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", 0x2000, &(0x7f0000000580)={0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000300)={0x28, 0x0, 0x1000000000000, {{0x3, 0x0, 0x7caef2bd5608ec51, r3}}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) (async) getpgid(r3) r4 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000000040), 0x175341, 0x0) write(r4, &(0x7f0000000400)="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", 0x1f000) 1.434870991s ago: executing program 4 (id=2890): mount(&(0x7f0000000080)=@sr0, &(0x7f00000000c0)='./cgroup\x00', &(0x7f0000000000)='efivarfs\x00', 0x2208080, 0x0) 1.323018338s ago: executing program 4 (id=2892): mount(&(0x7f0000000100)=@sr0, &(0x7f0000000040)='./cgroup\x00', &(0x7f0000000240)='udf\x00', 0x1020001, 0x0) 1.244163509s ago: executing program 5 (id=2893): openat$rnullb(0xffffffffffffff9c, &(0x7f0000001140), 0x66002, 0x0) r0 = socket$inet6(0xa, 0x80002, 0x0) r1 = socket(0x10, 0x3, 0x0) sendmsg$NFT_BATCH(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)=ANY=[@ANYBLOB="140000001000011000000000ffe680000700000a140000001100010000deffffff2e7f000100000a"], 0x28}, 0x1, 0x0, 0x0, 0x20000040}, 0x8000000) connect$inet6(r0, &(0x7f0000000140)={0xa, 0x4e24, 0x1ff, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x2a}}, 0x6}, 0x1c) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) ioctl$KVM_GET_MSRS_cpu(0xffffffffffffffff, 0xc008ae88, &(0x7f0000000400)={0x1, 0x0, [{0x20f, 0x0, 0x67c7}]}) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x4e64, 0xeac0, @private0={0xfc, 0x0, '\x00', 0x1}, 0x26}, 0x1c) r3 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r3, 0x89f3, &(0x7f0000000640)={'ip_vti0\x00', &(0x7f00000005c0)={'gretap0\x00', 0x0, 0x8, 0x40, 0x7, 0xdca9, {{0x9, 0x4, 0x3, 0x8, 0x24, 0x64, 0x0, 0x9, 0x4, 0x0, @empty, @rand_addr=0x64010100, {[@ssrr={0x89, 0xf, 0x55, [@initdev={0xac, 0x1e, 0x0, 0x0}, @local, @multicast1]}]}}}}}) r4 = openat$sequencer2(0xffffffffffffff9c, &(0x7f00000004c0), 0x400, 0x0) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), 0xffffffffffffffff) r6 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r6, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_JOIN_MESH(r6, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000540)=ANY=[@ANYBLOB='0\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="010027bd7000fbdbdf254400000008000300", @ANYRES32=r7, @ANYBLOB="0a92e20057b6a6c409f445a1d9e7f017313ae0f8bfb8eb89bf7c3c0080c2ef02fe7be819aa537b33fd000000003d8b6ad1ea4a9b60"], 0x30}, 0x1, 0x0, 0x0, 0x14}, 0x0) ioctl$SNDCTL_SYNTH_MEMAVL(r4, 0xc004510e, &(0x7f0000000500)=0x9) r8 = openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$IOCTL_STOP_ACCEL_DEV(r8, 0x541b, 0x0) r9 = getpgrp(0xffffffffffffffff) syz_open_dev$sg(&(0x7f0000000000), 0xa73, 0x0) ioctl$SG_IO(0xffffffffffffffff, 0x2285, &(0x7f0000000440)={0x53, 0xfffffffe, 0x5, 0x0, @buffer={0x0, 0x18, &(0x7f00000003c0)=""/24}, &(0x7f0000000380)="1666ce20db", 0x0, 0xfffffffb, 0x39, 0x0, 0x0}) move_pages(r9, 0x2, &(0x7f0000000200)=[&(0x7f0000ffc000/0x1000)=nil, &(0x7f0000428000/0x2000)=nil], &(0x7f0000000300)=[0xec, 0x4, 0x6, 0x4, 0x7], &(0x7f0000000340)=[0x0], 0x2) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) r10 = syz_open_dev$vim2m(&(0x7f0000000140), 0x10002, 0x2) ioctl$vim2m_VIDIOC_REQBUFS(r10, 0xc0145608, &(0x7f00000000c0)={0x3, 0x2, 0x1}) r11 = syz_open_procfs(0x0, &(0x7f0000000240)='fd/3\x00') ioctl$vim2m_VIDIOC_DQBUF(r11, 0xc0585611, &(0x7f0000000280)=@multiplanar_overlay={0x271722de, 0x2, 0x4, 0x0, 0x1006, {0x0, 0xea60}, {0x5, 0xc, 0x2, 0x93, 0x7, 0xa, "00000004"}, 0x80, 0x3, {0x0}, 0x6, 0x0, r11}) 1.240803663s ago: executing program 4 (id=2894): r0 = memfd_create(&(0x7f0000000280)='\x01\xfd\xae.+\xa6\x8c\xb6?2\x199\x94S,|x?Ue[\xbd\xe1!\x033\xbc\'#\xff\x17\x9b%\xf3[d \x97\xf5G\x97A\xc2\xd8\xf0Uq\xe6+\xa5l\x94\v\xb6\a\x17\\\xfb\x04!\xe4\xc4\xb1\xa2\x1c\xffC;\x94Q\r\xb6}\x9c\xecC\v\xcf\xeb\xe4\x9aR\xe5,\x82\x03\x00\x19\x8d\xe8\xc6\xb9\xe4\xb4\x99\x8a\x19P\xb8\x8cx\b\x99\x04R\x05\xaf\xa2\xea5\f\xcc\x1a\x9b\x00Uf\xa5\xf7\x80Tgiz\nX\b\x91\xfd0\x8e\xb6\xa3\v#\xa1\xdf\xb4\xc0\xe6\xb4\xef\xa8i\xd8\xa2\xd2(\x98\x9bA\x8f\x13\xeb\xf4b/\xef!\x8f\xf6]-\xe9k\xb62\x89gEv\x13\xf4\xc7\xb2\xf5\\\x17\x90\xb5\xa6\xa8\xb8o\x0f\xe2 \xe7\x9c$\xd7\xf2@\xf7cdv[\t\x00\x8d\xf3\xcc1\r$\x1e\xff\xf0P\xb2\x97\xb8\xbc\xeb\x91\x87\x8bu\xbf\xd4\'\xff\x1f\f\x016\x9dQ\xeeT\xe8\bY\x00\xb2\x06\xa6\xbel\x9b.o\xbe\x80\x9dx\xd5O\xd6h\\I\xc9\x8d\a\x1d\xc9\x0f\x82\xdbs\xc7\x83L\x9e\xa2\xd1\xb3\xac\x8d\xd8\xb4\xb4\xea\x90Q\xd8\xc7\xeb%\x8bOp\x1ab\x96\xcf\xbb\x15\xcf\xfcN\xed\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00s\xaf\xa2\x14]p+\x96\x1ei|n\xda\xee\\\xae\x96*\x82*\xb8j\xda\xaa\x14\x1f\x1d\xf8\xf8\xae\xfcH\xc4\xb3j\xe8\xcfO\xef\x0e\xafe\xb5*\x89\x18\xb2w\x96\b\x1by\xeaT\xdd\xb3g6\xbc\x85\xb2Y\xccv\x06\x00\x00\x00\xc5e\x90\xc51\x9f\v_# \b\xa5\xbcP,|\xe9\xd6s\x1f\x1f\xbe\xd3\x80\xb1\xa8 \xce|df\x903\v\x02\xea.\x03X\xb5\xe4,8\xb7\xadEI\xdcA\xa7\xcc\xd7\xf9n\x1b\x95\xf8\x11Z\xe6:\x03\xce\xfe\x02\x8ctdy~_oC\x9e\xef\xf0\xa2K\xe9;\x8e:\x01\x03C\x92\xeb\x16\x1c\xbf\xbe\xef\xccUxhg\xffY\xe6\x83\xa6z\xff\x01\x9d o_{!O\xaajU\x84 \xe9\xb59r\x9cw\x18Z\xd3\xcd\x0e\xba\\\xdb\xf0\xe1\x86\t\xaf\vi\xdc\xbf?\xf5\n\xbd^\x05\xc0\xceuC}\xa8\xc7\xad\x86\xd7\x15&\xb9]1\x05J\x96\xf0\x84\xc1\f\xa6p\x96\xb8\x02\x13pA\x19\tf\x12\x88\xc8\x9c\xc9Cn\xd4\xa47V\'+\xcc\xbf\r\xa9\x10\x1d\xcf\xebKlb\xe5:\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00G\xdf\xbb\xc0_\x99F\xf4n]\x14\xbc\xcd\xd3\x9f\x9fe\xc5\xe6\xe8Mb\xc6\x82\x82\xcc\xcaXe\xe1\xa2\xaa\x02\x86\xb8\x18\xe2C\xeb\xa9\x17&\x01&\'w\xa1t0\x80\xf0\x93\x80\x9f\x9b\xe0\x9f\xea\xb9\x9eD]#V\xda\x92\xca\xc6\xfa.\xd6\xe31\xfe\xe8\x02\xebX\xbd\nz\x01O\xd3r\xa2\xa9u\x93', 0x6) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0xe, 0x12, r0, 0x0) mount(&(0x7f0000000000)=@rnullb, &(0x7f00000000c0)='./cgroup\x00', &(0x7f0000000040)='squashfs\x00', 0x20c002, 0x0) r1 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000100), 0x60a040, 0x0) r2 = dup3(r1, r1, 0x80000) ioctl$VT_RESIZEX(r2, 0x560a, &(0x7f00000001c0)={0xff81, 0x2, 0x1156, 0xa, 0x43, 0x5}) bind$bt_l2cap(0xffffffffffffffff, &(0x7f0000000080)={0x1f, 0x6, @any, 0x3, 0x1}, 0xe) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='blkio.bfq.io_service_bytes_recursive\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x0, 0x50, r0, 0xeecf3000) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x3}, 0x0) r3 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) setsockopt$bt_BT_DEFER_SETUP(r3, 0x112, 0x7, &(0x7f0000000180), 0x4) memfd_create(&(0x7f0000000280)='\x01\xfd\xae.+\xa6\x8c\xb6?2\x199\x94S,|x?Ue[\xbd\xe1!\x033\xbc\'#\xff\x17\x9b%\xf3[d \x97\xf5G\x97A\xc2\xd8\xf0Uq\xe6+\xa5l\x94\v\xb6\a\x17\\\xfb\x04!\xe4\xc4\xb1\xa2\x1c\xffC;\x94Q\r\xb6}\x9c\xecC\v\xcf\xeb\xe4\x9aR\xe5,\x82\x03\x00\x19\x8d\xe8\xc6\xb9\xe4\xb4\x99\x8a\x19P\xb8\x8cx\b\x99\x04R\x05\xaf\xa2\xea5\f\xcc\x1a\x9b\x00Uf\xa5\xf7\x80Tgiz\nX\b\x91\xfd0\x8e\xb6\xa3\v#\xa1\xdf\xb4\xc0\xe6\xb4\xef\xa8i\xd8\xa2\xd2(\x98\x9bA\x8f\x13\xeb\xf4b/\xef!\x8f\xf6]-\xe9k\xb62\x89gEv\x13\xf4\xc7\xb2\xf5\\\x17\x90\xb5\xa6\xa8\xb8o\x0f\xe2 \xe7\x9c$\xd7\xf2@\xf7cdv[\t\x00\x8d\xf3\xcc1\r$\x1e\xff\xf0P\xb2\x97\xb8\xbc\xeb\x91\x87\x8bu\xbf\xd4\'\xff\x1f\f\x016\x9dQ\xeeT\xe8\bY\x00\xb2\x06\xa6\xbel\x9b.o\xbe\x80\x9dx\xd5O\xd6h\\I\xc9\x8d\a\x1d\xc9\x0f\x82\xdbs\xc7\x83L\x9e\xa2\xd1\xb3\xac\x8d\xd8\xb4\xb4\xea\x90Q\xd8\xc7\xeb%\x8bOp\x1ab\x96\xcf\xbb\x15\xcf\xfcN\xed\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00s\xaf\xa2\x14]p+\x96\x1ei|n\xda\xee\\\xae\x96*\x82*\xb8j\xda\xaa\x14\x1f\x1d\xf8\xf8\xae\xfcH\xc4\xb3j\xe8\xcfO\xef\x0e\xafe\xb5*\x89\x18\xb2w\x96\b\x1by\xeaT\xdd\xb3g6\xbc\x85\xb2Y\xccv\x06\x00\x00\x00\xc5e\x90\xc51\x9f\v_# \b\xa5\xbcP,|\xe9\xd6s\x1f\x1f\xbe\xd3\x80\xb1\xa8 \xce|df\x903\v\x02\xea.\x03X\xb5\xe4,8\xb7\xadEI\xdcA\xa7\xcc\xd7\xf9n\x1b\x95\xf8\x11Z\xe6:\x03\xce\xfe\x02\x8ctdy~_oC\x9e\xef\xf0\xa2K\xe9;\x8e:\x01\x03C\x92\xeb\x16\x1c\xbf\xbe\xef\xccUxhg\xffY\xe6\x83\xa6z\xff\x01\x9d o_{!O\xaajU\x84 \xe9\xb59r\x9cw\x18Z\xd3\xcd\x0e\xba\\\xdb\xf0\xe1\x86\t\xaf\vi\xdc\xbf?\xf5\n\xbd^\x05\xc0\xceuC}\xa8\xc7\xad\x86\xd7\x15&\xb9]1\x05J\x96\xf0\x84\xc1\f\xa6p\x96\xb8\x02\x13pA\x19\tf\x12\x88\xc8\x9c\xc9Cn\xd4\xa47V\'+\xcc\xbf\r\xa9\x10\x1d\xcf\xebKlb\xe5:\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00G\xdf\xbb\xc0_\x99F\xf4n]\x14\xbc\xcd\xd3\x9f\x9fe\xc5\xe6\xe8Mb\xc6\x82\x82\xcc\xcaXe\xe1\xa2\xaa\x02\x86\xb8\x18\xe2C\xeb\xa9\x17&\x01&\'w\xa1t0\x80\xf0\x93\x80\x9f\x9b\xe0\x9f\xea\xb9\x9eD]#V\xda\x92\xca\xc6\xfa.\xd6\xe31\xfe\xe8\x02\xebX\xbd\nz\x01O\xd3r\xa2\xa9u\x93', 0x6) (async) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0xe, 0x12, r0, 0x0) (async) mount(&(0x7f0000000000)=@rnullb, &(0x7f00000000c0)='./cgroup\x00', &(0x7f0000000040)='squashfs\x00', 0x20c002, 0x0) (async) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000100), 0x60a040, 0x0) (async) dup3(r1, r1, 0x80000) (async) ioctl$VT_RESIZEX(r2, 0x560a, &(0x7f00000001c0)={0xff81, 0x2, 0x1156, 0xa, 0x43, 0x5}) (async) bind$bt_l2cap(0xffffffffffffffff, &(0x7f0000000080)={0x1f, 0x6, @any, 0x3, 0x1}, 0xe) (async) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='blkio.bfq.io_service_bytes_recursive\x00', 0x275a, 0x0) (async) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x0, 0x50, r0, 0xeecf3000) (async) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x3}, 0x0) (async) syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) (async) setsockopt$bt_BT_DEFER_SETUP(r3, 0x112, 0x7, &(0x7f0000000180), 0x4) (async) 1.13421756s ago: executing program 2 (id=2897): newfstatat(0xffffffff0000005d, 0x0, 0x0, 0x1000) r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$inet(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000011c0)=[{&(0x7f0000000140)="5c00000013006b6c1d0000007ea60864160af3653c001ac00400080208000c000300010004000000eab556a705251e618294ff0051f60a84c9f4d4938037e786a6d0fd0000000000000200ffffc6c95300000000000000000000000014077182bf10b78bbc193b4924f67806aa7412607c8b2f1330759cda7d029cc8696091aa10fa5bf5d2bd95f6cc98b0c199aef0ed4642bfd1e8f4f5f389841d0cd299bc8bbeaef7df3aa1a528cb4921a4c74a21dbb442e116a6ad0d214b344222c68544fe40037f308badda56edf24aa8b8d0d78b5f27f91e0443307d18c96b35be0d7584876bdb4fbb755dec25ed2daad8f55575aa6ee98450e068c7c7", 0xf9}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) syz_clone(0x42441100, 0x0, 0x0, 0x0, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) futex(&(0x7f000000cffc)=0x1, 0x6, 0xffffffff, 0x0, 0x0, 0x0) r1 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) syz_open_dev$dri(&(0x7f00000000c0), 0x1ff, 0x20) r2 = syz_open_dev$radio(&(0x7f0000000080), 0x1, 0x2) ioctl$VIDIOC_S_EXT_CTRLS(r2, 0xc0205648, &(0x7f0000000100)={0x0, 0x1, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000180)={0x98f911, 0x8000, '\x00', @string=&(0x7f00000000c0)}}) r3 = getpgid(r1) r4 = syz_pidfd_open(r3, 0x0) pidfd_send_signal(r4, 0x0, 0x0, 0x4) futex(&(0x7f000000cffc)=0x1, 0x6, 0xf0, 0x0, 0x0, 0x0) r5 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$GIO_UNIMAP(r5, 0x4b66, &(0x7f0000000000)={0xfffffc64, 0x0}) timer_create(0x0, &(0x7f0000000680)={0x0, 0x21, 0x0, @tid=0xffffffffffffffff}, &(0x7f0000000100)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) mount(&(0x7f0000000100)=@rnullb, &(0x7f0000000040)='./cgroup\x00', &(0x7f0000000240)='udf\x00', 0x200000, 0x0) 1.048192809s ago: executing program 4 (id=2898): r0 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000001140), 0x141342, 0x0) (async) r1 = syz_usb_connect(0x0, 0x24, &(0x7f0000001140)={{0x12, 0x1, 0x0, 0xbd, 0xf7, 0x13, 0x8, 0x2770, 0x930c, 0x8d6a, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x2a, 0xc5, 0x98}}]}}]}}, 0x0) syz_usb_control_io$cdc_ncm(r1, 0x0, &(0x7f00000003c0)={0x24, &(0x7f00000000c0)={0x0, 0x13, 0x1, "fc"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) (async, rerun: 64) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) (rerun: 64) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x3) syz_kvm_setup_cpu$x86(r3, r4, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000080)=[@text64={0x40, &(0x7f0000000000)="2ef36644f7e62e3e672e450f078f29d095abaa960000b890a4f084ef66bafc0c6d8f297812cf66ba410066ef48b800100000000000000f23d00f21f835100000080f23f866baf80cb88ef01480ef66bafc0c66b80c0066efc7442402d8650000c7442406000000000f011c2466ba4200ec2e64f30f5a8e6c000000", 0x7b}], 0x1, 0x52, &(0x7f0000000200)=[@vmwrite={0x8, 0x0, 0x1, 0x0, 0x0, 0x0, 0x2, 0x0, 0x85200000c}], 0x1) (async) ioctl$KVM_SET_REGS(r4, 0x4090ae82, &(0x7f0000000240)={[0x3, 0xec, 0x401, 0x3, 0x7, 0x4, 0x8000000000000001, 0x80000001, 0x1, 0x200, 0x4, 0x6, 0x9, 0x10000000003a, 0x9, 0x9], 0x0, 0x2a80}) ioctl$KVM_RUN(r4, 0xae80, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000140)=[@textreal={0x8, &(0x7f0000000380)="66b9800000c00f326635001000000f8466b9800000c00f346635000400000f3066b98902000066b80080000066ba000000006fee0fc76b000f9d1a660f38035e000f20e06635400000000f22e066b98e0800000f320f01c32ede42dc", 0x5c}], 0x1, 0x75, 0x0, 0x0) (async, rerun: 64) ioctl$KVM_RUN(r4, 0xae80, 0x0) (async, rerun: 64) r5 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_int(r5, 0x29, 0x3c, &(0x7f0000311ffc)=0x1, 0x4) setsockopt$inet6_buf(r5, 0x29, 0x3e, &(0x7f00002cef88)="d84f7398", 0x4) (async) setsockopt$SO_TIMESTAMP(r5, 0x1, 0x23, &(0x7f0000000040)=0x2c1, 0x4) sendto$inet6(r5, &(0x7f0000000800)="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"/1453, 0x5ad, 0x0, &(0x7f0000000080)={0xa, 0x5e20, 0x3, @mcast2}, 0x1c) (async) recvmmsg(r5, &(0x7f0000000280)=[{{0x0, 0x0, 0x0}}], 0x1, 0x10100, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x50010, r0, 0x2c39000) 1.024543899s ago: executing program 5 (id=2899): socket$qrtr(0x2a, 0x2, 0x0) r0 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000000000), 0x1f5bc2, 0x0) munmap(&(0x7f0000012000/0x4000)=nil, 0x4000) r1 = gettid() tkill(r1, 0x13) prlimit64(r1, 0x5, &(0x7f0000000080)={0xe7f6, 0x7}, &(0x7f00000000c0)) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000040)=ANY=[@ANYBLOB="1c0000002d00090027bd7000000000000400000008001a"], 0x1c}}, 0x84) write(r0, &(0x7f0000001400)="547bbee68789313efe846d6698abfeac0d12b144933fa6f684f1ba13b34680bf4b9ea70f71faa2a82a45ab47458c1f827355ad34033fbb8b9699eb0b279252dfcf29e377e14dcfbde42857cbf2aa88d3dad8ec2deea7afe4e747fa392fe01d425970fb2dd7a000ea3889f0d9021f347818106963e18c256e3df26b41c61d30284a8ad61c6269756119d62e3a7a24c1dcd09d3eb35dfee6ec945ac190c4797988e0d7f6f38bf9b124431dd8208a9208195a70c8e558c216e78d5f5b3f6df6f155e16bf7dd8f4e9eaf61d5142a82da7a87aeca19c25b631cd8a14ce9f2fc8dbcd05f51dc9260abc82d780c9358bd6411ebf48520694d413024432d0bfc3759a620289c9c8705009fd829da6eb5b72b454436b0af8e9dc4941ca2cff92561cad984e15849dcd73f04c7f70a30304da2fbc17f421767ad5ce47ed79d6698428eada9a39faa02f978699bc8c482224a2d5f85cc1135ea92ac1c610e32f1e7c82da6d91e0c8634da679760c32c3e891db352b76b61a65bbdd023e093a8e0d37fd8cd00679cb1bceaac84b05861740c221b2cb4afa1ce8b091c815fc4bd83995b5bf5dcdf2912572cf6180ec27445404917ff9e8e6604e2afc19a1bb3745914f0a101e03e44ea5f64d40402f12a81310c97086fb01d04e82799c40f29348eb283ad58a40d608a47fbf9a25dbb308aa03b2425ffa896e1a70a37cf49e6dbdeda39ee88aadb26811eba78a0dfe5400a51428c31582edcc5f75b5dd963707a54b9b1e35f9966995d6474acbf7094124cecf38369aba3f6a5e3ad071f5e3df902843a3947623fe01571d97625c3e27721b08a6f85fd7b879acd400de5beabdd2603d566fdb4018bf8bd74c3ea1ae67c988992c7dab4ebcf501a73815e1b527d3ff1cf9e729d55127118565f794d253fef25609e5a415615d1b5fca5381b49446d9b9e75fbfcdd9218b0d8d8d965871b897544e32fd0b4cb5600ffdcdb0056bcad75216759590f8a94db82b0acd2a5a34e5c34241a19f1a7a7cceb894341f55c6b474f3cc052f9863a67519dfadee6576f08d7448929424c13e845e2e636b87dc14e1ab4ad05d69f896ca1bc5c1267befb686c4207e21aa30bdae1d1602d3e4080784834e213c426ba5446f90d3b3885a5d6942c6b0e637f5bb9c7908460bd7d04497ab054c8fc7f89068f7535976ad051bfe94c243ce7604a63b2099b69f1ed73590a318fad9a170fa0cddfe60e981a92de2e1aab3465b11a968108e08deadfa1fa546c4cbc0c34ac28597848562583ae8d93cb60f2e06c7a1f743add51eb8cd732b40d48fde00117cb2d654100dfcc66b7c9fefac80e137caa5cf43ae897780251a3ebbc4ddd3b003168963c9e2c9446cb29731fc4bbb5e551aca6913f7b8576ce34012581b5a363917970399ca369688e637cf06ff3c8114383d2fcbf9c69f1ca63cd21695254a440df5ef0a8abfdbd0a651a533b6cdb82382e3bd70f87c1d3eb0a6e22452605026fafe6d35158c0728c1050a39330c80ee2ee0b09366fc6382883ecd0796feec657b36aee4091471e406e9faffd5ede27943e5fbf1b7249ab8bad71f60063697f04db52e980a9fb3eb5e53b89be8a5f0e6afea7435789ecd444c28eb411cdc2158e434178749f36cc957dbd17efb2b218592f78d6864f2708e8c6db2da0d3f6de53959afec0c90d3d62a13a0bc3857bce58d81223eddd05cf3c1ec6b3fc5307d0f16d470f2065300295197e9fa81d2e5574b2c7b18f1c6c85156a9b1174d62dcd3cb026f4b67e6babd66c8f427b9687585f37b18c82e0100507035e78ce010b78ea1b5d3884db25df36ae929dd535a854a31cba5e47655873df72be7463c600b704e9da0e7cb2d61d0710248814ecced2eef8f227c8aec308c2c9d0a39d1a6b306080e8eaef8edece0f6d0d1612c582d70c3999a1a6bd529538f51ba4869ce74bc8509a7126d96db118cdb55411a36f4361d53c8027c12a7486e9c84e4de445b454630be27bdc2ec268702d9c1890297bdd1fc7a235f1a47f4645d286146f3cb9a7ce650f4157a1e7f134eb1815001d59905d3103efad3c66479330e8a5da941c9c38bf21bc0770e3fd56cafa19ad6e9d51f94ed4f900062b5602653aacdcc956aeecfb1dd613caf918e1ca8ef2e1504c42768e77df43569d5fe4b48c237cad5285c578b26b4e47c8ce06fd2686e17eb6d5df5645d0fdde7782216be07a1135dabc3a59598bdbab249c5391832f18ac5163aa7a1a890128a4520835a53eb750604c5e328ecb3216516b3eba3f97652caeb4327da8865880a932dc8e7668666ac3b76a2a424ca37b5dfb52495710611e20790427a9f9e7ac59bb86f0fb7a17a5def347a98dd8e733b784d78d5c7f16f327a2606d4252411457465540a60b0757802f470d08337c0fe4eee5f5cfe4f296d0f7068e80828a022c95632beb7b7f802135e246b1adebebf24c821dee7205e9fe1a437b16aaa8dcb4a58b0bdbc8dbc2fce09271c27430cc9ca8141955ec5ff4228627c3816cfe1bb2c0f40f6a61e8bfa4e2dd744e41ed80b83e9aef77119f4b062b98e86690711e83e795bafa7a8db16f241cee76aa01ff749100c113fda966aa8c83ebe975f760c18e3864065a5de6e8028a9e3199f4acff11e14bb13bc50faf97fdeab46edc371e55cab78841a2de17ca116b0183ac38b658c57a64ab11bb0de071c971a7a5175ad0bac6ac1d1118230a5412a35bd005b369df0e04e749ea93d7e56f713b9ceff580547a2a76ea4753a78b4a5cd0311024c5536b536c8ede63bac8e8b4c5851248d9098a7c6bcc3d5f209178b45aef3c1afa4ab73d8feac3e1f771626d73d85f72dc15d16bd3b7b93e622626f6f3d96b4425d328236cf1579f1ca834a7b318b012e27b9a2dc528189cf1eb3705d90de50ce7ac0c256b7e41500113e164fb7d53c74c6f829552a5bce73eeab9a46d01551bdab18fd3a7e82b036872f1e876b12c5676f63a6ef0c6ff159788a0c2fc40f179a259c656e8aba9295e90027e74ef910ce3c56d6e2de917947410b05603b6a5052453f13e6ac058b3f621573bfe6224bad8c3a5f575e1eb774839cb554c53c9b3ad623df6c5c9627cce856f9ba5847557bc9f854cbb37a936f20a733ba352ee5b343b941290a399fb862434d1b551da420053cad3bad65195cde40b345740e30e9a22619add8aedb763473b729c0649f7a1ea45325534c9b629a1fe3a54a78fe44969715182c6df5c9ecf6878380831b2996579332ac37286e72ab16824c3fc9ef8d74a7f1f5cf80fa37f6bb990db3a7a70139887a4eba0763247c58f4fe770a0496a5ef49a3ba4d62bb900644d49b5fba7e58d58af6ae50c96da346618434ed46b8f4c27cde5e8863d5b090dc117f3b16db2c4273fa84f8b06d3df436bf4a8cfa6d33d7f0e78ef422d5d7640c821398c9adf4d6ccb1b2f7cd0e497023cfdd6b5bb9ad6a29edb8b78fb3322414cad1458eb12699853acb165076db7088f518386380850c111cbe74034ddbfe217db714325ebc4d6b46eba640cf125b87eed0832077ab775e475e431079756b3da6f9bb3c861ce7eabf6adf70b76eb9642a1bab3d7afef2d7b40c8a19b98123ad7449c1039c494e73bc91a86e8e92c39a9482cf60605b9e5c209262c4fcfde76ee370bd6a78253b64c5cbb19a11b34c5a9ccf634c52751277268cd97e795b43867af5a4db51bd631ac547906fd52aff43eb98edacecf08f94a060902b5cb82e87ec856305005bd1150e581d9717460e31ba724da5e7ad72fa580f8509fe838dbc1bfbbf53e29688f25ca602d2de702e4411d3d133e2ab2f454f71f98efc2cd0eb468544cacf608c6689ef122009cf61e813e26b7b2b1695143fcd510f509ec2bf7205e674ba6767eaa29605c51e434c298bde0969617292e960d22b085632d241aa2a8e0f6ac6f2d56d0ed2c6bd3eca306a3224915065894480e737c7d7a11901bb7f977525cfcab652476baab0fd3b68dc59fd14ccdd6248bd5c5a0ab1dbae28a848b2d4ad0d973bb149ff4115b0436b7d145a6f8081d314039131f60dc8ed0ccf2c4971f0a59a65b3b1ef638e6d009dff793a4b7266c58f88bb117d665cae8fc6f6c2840470333bdbc8df12c6633a6ac7b664e089a85dc6d49f52459dd2df1be552194eef6027c1b45f62b97647788c3325f05609c1e02cbc9a18be72e4b502df719e4f9cb82615e3a03b5732328e552023dbfdcf91ed5ab51242e7d09a9b73674f0946976d8a8fa9288dce4d54d5820a0f0053b892685f79a6c8dbac724fce4d24a7b75e383f54ac58af3951d666a22f158637acc4f0e09e248e85f8e1439501afc0d5b7e9eab40fa737ae93482a1e29f3e327fa31d0d764c65ab976af1eb91fe08c5bc10a48b93453ad192d1d538cf93b792a70246bde99f46a78b670edea552840e08c787c928ee311f954b73d07287a59b470e38d4e624ddba8e4b21a74d7c07cc684b0ea82212129901029e74312866722dfa2dc53de3e8ddc00adc21deb7510ed15c50d139296297408da3d6beb589e7bb3f1d74e4e8dddec14b9cdf371d7f142136cdca5644d09edd97228a0abcd2e7b402c5cc68683cb980f50ca7aea8338dc5990a6ebb2d2b95a3deecc45f5a4f4e0e40a57e29f3e227c41db00e17dc962e2ea3184b5057c89974bcab651a22e588a527d7d8ec695e7ab5622c1ad3763d045a8393b7acfa04488556ac957777d1aebfc5d0e2a8150a6984d5607ac2400789d8f622c837d6a9b78fcc2d8aa872949edde53e3a99b5f5bf35bff5f0db7874ad3f172f9d8dd6cbb17a770b1482c79b9a15605cd0d89c6bae9aa6db8e886cfff8f843b99df95dde88c96202ae6ced4d539a3f70997ee7b2bdb7bbe529f9bc55b143066de8d9dcd7fa38c54094f2235e4a17ef8e910b4d48c373ce5e6fc9824ca8f115e579b002df16c591557cd6cac1363b8d8fc656075ca703a87f1efa76e4122eb7358389f659681fb49cb82215f73b284a7678b8b1528472d0cfab1980ee3d4410bdc1c31f1f798c3ca5744077e2f6cb4ca6e415f1e3afc8c00dd95d3307de5428883513f01ed19dde487e1c103619fd78583f09d02982512e0ee20a670b3b24986dcb7431f1ef3fd12e801bb2454213ff7b1962a464647eb4c8125cf2ed098160da880024a98add9b2917e133dcee7a8e25387fd5bf2b3f8fb05b2f7ed5f719b30b9cca4b1754e31d48bd2ec79e7e9c155130ea5f0876f3bb4d94ac74b209633ecb03deb8b9448e8cf4b4bcb04ffdb38ac457881f84636246a4e5e7773166129fb8b7803c6dde0ee69fd1f76f1d93b729eacc9d8dbd6e61e638a3f8de972a824936b1d869a15daaa21db04760e9110c5b7c736671d31a72fcd57a6f7424c898791cafa21a48921215a78d60a367aa7c6284a1aaa1fee0c5291bdc91bf8c032c9917fd28e68fc046ea4b17952f1abbe01af5f19e4fa99fc6a985f6264f9efbb208e6146d3465cc603ef36d3d59b5197bca1696bf5658b60cf0e0455cb1e174e52c4acb712a3ed9202a1ae334427b93305939c7f15e9e5eed09b5fc8d1e3836720d46d133841d4482ec2427d3002d95bce996b4b2d5b59b2a43970afe35517674bfdd8807931697422045f60641138fefa27865b9d477ef04847dd02d305e8f15e228522e54d1ffda6d5b26ad831146c66e6f9153ebeb0785ea75283df66816d771c7e4297c1686d06494a59046313169f2e2b4988a2758198fcb166d9d112d187a4456503e6c0bdfb390c89dcebf3cb8260a27fdebddbc6071857010ad4c59c062db35a4", 0x1000) 556.334921ms ago: executing program 3 (id=2901): r0 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000001140), 0x66802, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) r2 = socket$can_j1939(0x1d, 0x2, 0x7) getsockopt$sock_int(r2, 0x1, 0xf, 0x0, &(0x7f0000000240)) r3 = socket$inet6_sctp(0xa, 0x5, 0x84) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x3, 0x50, 0xffffffffffffffff, 0x0) r4 = openat$adsp1(0xffffffffffffff9c, &(0x7f00000001c0), 0x2, 0x0) ioctl$SNDCTL_DSP_SETFRAGMENT(r4, 0xc004500a, &(0x7f0000000180)=0xffff0018) ioctl$SOUND_PCM_READ_RATE(r4, 0x80045002, 0x0) mincore(&(0x7f0000578000/0x2000)=nil, 0x2000, &(0x7f0000000080)=""/45) getsockopt$inet_sctp6_SCTP_PEER_AUTH_CHUNKS(0xffffffffffffffff, 0x84, 0x1a, &(0x7f0000000000)={0x0, 0x33, "c13b89069a3b24982cdca43b43268afc82dc892098fbdac32fe5d782f7424348f015d83faee1f6654174ce6c7a74448218aaae"}, &(0x7f0000000040)=0x3b) getsockopt$inet_sctp6_SCTP_DELAYED_SACK(r3, 0x84, 0x10, &(0x7f0000000080)=@sack_info={r5, 0x1, 0x7}, &(0x7f00000000c0)=0xc) fstat(r1, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0}) setsockopt$sock_int(r3, 0x1, 0xc, &(0x7f0000000100)=0x2, 0x4) r7 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x32) r8 = ioctl$KVM_CREATE_GUEST_MEMFD(0xffffffffffffffff, 0xc040aed4, &(0x7f0000000140)={0x4, 0xfffffffffffffff8}) ioctl$KVM_SET_USER_MEMORY_REGION2(r7, 0x40a0ae49, &(0x7f0000000280)={0x10000, 0x8, 0xdddd1000, 0x2000, &(0x7f0000ffd000/0x2000)=nil, 0x18, r8}) r9 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r9, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)=ANY=[@ANYBLOB="3c0000004800010000000000000000000a0000000f00000000000000140001800d2a79075827af5aa534d6815c2e93f10c0002"], 0x3c}}, 0x0) setreuid(0x0, r6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3000001, 0x22052, r0, 0x2000) 488.944382ms ago: executing program 3 (id=2902): r0 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000001140), 0x60a00, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3000001, 0x20011, r0, 0xd3b43000) (async) renameat2(0xffffffffffffffff, 0x0, 0xffffffffffffffff, &(0x7f0000000200)='.\x02\x00', 0x0) (async) madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x1) (async) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) r1 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000000040), 0x101802, 0x0) writev(r1, &(0x7f0000000300)=[{&(0x7f0000000680)="580000004b80", 0x6}], 0x1) r2 = socket$tipc(0x1e, 0x5, 0x0) bind$tipc(r2, &(0x7f0000000180)=@nameseq={0x1e, 0x1, 0x0, {0x42, 0x2, 0x4}}, 0x10) bind$tipc(r2, &(0x7f0000000140)=@name={0x1e, 0x2, 0x0, {{0x42, 0x2}}}, 0x10) r3 = socket$tipc(0x1e, 0x5, 0x0) sendmsg$tipc(r3, &(0x7f0000000380)={&(0x7f0000000140)=@name={0x1e, 0x2, 0x3, {{0x42, 0x2}}}, 0x10, 0x0, 0x0, 0x0, 0x0, 0x4000884}, 0x48004) (async) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) (async) close(0xffffffffffffffff) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r5, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="640000000001010400000000141a000002000000240001801400018008000100e000000108000200e00000010c00028005000100000000002400028014000180080001000000000008000200ac1e00010c00028005000100000000000800074000000001"], 0x64}}, 0x0) (async) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r6, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000003c0)=ANY=[@ANYBLOB="dc00000000010104000000000000000002000000240002801400018008000100e000000108000200e00000010c000280050001000000000008000480040003800800084000000000080008400000000734000f8008000240000000050800024000000b8608000340000047510800034000000003080001"], 0xdc}}, 0x0) (async) sendmsg$NFT_BATCH(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000100)=ANY=[@ANYRESDEC=r0, @ANYRES8=r4], 0x7c}, 0x1, 0x0, 0x0, 0x4046080}, 0x8c884) openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x2c040, 0x0) (async) setuid(0xee01) r7 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCETHTOOL(r7, 0x89f0, &(0x7f0000001440)={'team_slave_1\x00', &(0x7f0000000100)=@ethtool_ringparam={0xa, 0xcce9, 0x300, 0xed}}) (async) sendmsg$unix(0xffffffffffffffff, 0x0, 0xc045) (async) socket$nl_netfilter(0x10, 0x3, 0xc) (async) r8 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) r9 = ioctl$KVM_CREATE_VM(r8, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r9, 0xae60) r10 = ioctl$KVM_CREATE_VCPU(r9, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r9, r10, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000040)=[@textreal={0x8, 0x0}], 0x1, 0x0, 0x0, 0x0) 440.488147ms ago: executing program 3 (id=2903): r0 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000000), 0x2000, 0x0) ioctl$SNDCTL_SEQ_TESTMIDI(r0, 0x40045108, &(0x7f0000000040)=0x7d) getsockopt$MRT6(0xffffffffffffffff, 0x29, 0xd0, &(0x7f0000000080), &(0x7f00000000c0)=0x4) readahead(r0, 0x800, 0xfc00000000000000) setsockopt$inet_MCAST_JOIN_GROUP(0xffffffffffffffff, 0x0, 0x2a, &(0x7f0000000100)={0x9, {{0x2, 0x4e23, @initdev={0xac, 0x1e, 0x0, 0x0}}}}, 0x88) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) sendmsg$NL80211_CMD_START_SCHED_SCAN(r1, &(0x7f00000024c0)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000002480)={&(0x7f0000000240)={0x2238, r2, 0x1, 0x70bd2b, 0x25dfdbfe, {{}, {@void, @val={0xc, 0x99, {0xb8ff, 0x2d}}}}, [@NL80211_ATTR_SCAN_SSIDS={0x8c, 0x2d, 0x0, 0x1, [{0x1f, 0x0, @random="444b2a2f5478c410049d6763c02e88c39a4698f0f19443641be109"}, {0xa, 0x0, @default_ibss_ssid}, {0xd, 0x0, @random="70e51ddbf231d87c78"}, {0xa, 0x0, @default_ibss_ssid}, {0xa, 0x0, @default_ibss_ssid}, {0x1a, 0x0, @random="a17ae6325e72038e217261172a46be5524e40c063635"}, {0xa, 0x0, @default_ap_ssid}, {0xa, 0x0, @default_ap_ssid}]}, @NL80211_ATTR_BSSID={0xa, 0xf5, @from_mac=@broadcast}, @NL80211_ATTR_SCAN_SUPP_RATES={0x2180, 0x7d, 0x0, 0x1, [@NL80211_BAND_2GHZ={0x1004, 0x0, "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"}, @NL80211_BAND_6GHZ={0x4}, @NL80211_BAND_2GHZ={0x1004, 0x0, "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"}, @NL80211_BAND_5GHZ={0x2a, 0x1, "dc913053eb94d46ae1ee6245f095ef712fa7a928805d2acf96116f5f0fc4b7bf48709571af2a"}, @NL80211_BAND_5GHZ={0x50, 0x1, "a420dd1e9de4e52874941725527d38032be8c67ef6bd8e62c1e0d77ba32fd4890a08ac636ba9bb864a582b8a863859946448d06ff1d996e5f973086c8cee574d4f4a03106ec2a46221c6d289"}, @NL80211_BAND_5GHZ={0xf4, 0x1, "ed5fa3f4a794636cb5f89d250a133c21ee0d1422b1c6ddc5afbe0f2ddab48815ef8e2b1ee00a3d5077b5f16181b14df0839683c8b11f2db9af23223d6ca6c346b5639ca7239bc0853811774ced494944163513575a653e1f71b275455503e18d28fd656fc213f5de3217de7883b56b255f74b0aa773f07d8ec29cbd6223e16a5e5fa2b07ba2e8497a7586d8beee3453878bab582bd40d0317d15db36c87d439d7b7999e7b65a76328cb1715341b65a2e6436fc8e1788037f22a2e2da0d2300e4eb860caa6c6940f7018db0c6543b3ad210d55da45e6e5ea2e2360eba6c37b8bfaee932e9aa1c73e607209dff5e32d8f9"}]}]}, 0x2238}, 0x1, 0x0, 0x0, 0x8081}, 0x8040000) close(r1) r3 = openat$vsock(0xffffffffffffff9c, &(0x7f0000002500), 0x20001, 0x0) setsockopt$TIPC_CONN_TIMEOUT(r3, 0x10f, 0x82, &(0x7f0000002540)=0xb, 0x4) read$FUSE(r3, &(0x7f0000002580)={0x2020, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x2020) fcntl$lock(r1, 0x7, &(0x7f00000045c0)={0x1, 0x3, 0xab, 0xffff, r6}) ioctl$SNDCTL_SEQ_OUTOFBAND(r0, 0x40085112, &(0x7f0000004600)=@v={0x93, 0x2, 0x80, 0x1c, @generic=0xf, 0xc, 0x9}) ioctl$sock_SIOCDELDLCI(r1, 0x8981, &(0x7f0000004640)={'veth1_to_bridge\x00', 0x3}) getsockopt$inet6_IPV6_IPSEC_POLICY(r3, 0x29, 0x22, &(0x7f0000004680)={{{@in=@broadcast, @in=@empty, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@ipv4={""/10, ""/2, @dev}}, 0x0, @in=@broadcast}}, &(0x7f0000004780)=0xe8) write$FUSE_ATTR(r3, &(0x7f00000047c0)={0x78, 0x0, r4, {0x6d, 0x8, 0x0, {0x0, 0x63b3, 0x800, 0x1, 0x1, 0x7, 0x7, 0x681, 0x19a, 0x1000, 0x7, r7, r5, 0xa72, 0x8}}}, 0x78) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000004900)={0x24, 0x0, &(0x7f0000004840)=[@acquire, @increfs_done={0x40106308, 0x2}, @decrefs={0x40046307, 0x1}], 0x5c, 0x0, &(0x7f0000004880)="0b16ee46b9e029eb2cb2ce07378dda1f844efc68b76f7cd0b177aad1998e930205489d056644bd13444b770ac93d30b283532b23fa025a077857dd322de06285a0056bf6714646fe6e4770fdd097979a91737b9f21f9141c87e1a8b6"}) recvfrom$inet(r3, &(0x7f0000004940)=""/36, 0x24, 0x20, 0x0, 0x0) syz_create_resource$binfmt(&(0x7f0000004980)='./file0\x00') read$FUSE(r3, &(0x7f00000049c0)={0x2020}, 0x2020) mmap(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x8, 0x10, r3, 0x2e4e000) unshare(0x10000) r8 = socket$tipc(0x1e, 0x2, 0x0) sendmsg$tipc(r8, &(0x7f0000006cc0)={&(0x7f0000006a00)=@nameseq={0x1e, 0x1, 0x0, {0x0, 0x4}}, 0x10, &(0x7f0000006bc0)=[{&(0x7f0000006a40)="41617785ee5a405399a67da2918c1dfb25b0990535b2a89fdb2b7b54bfc29f5de208fd338fa14ad4a28dbb04582fbd27efb26aa84a7e", 0x36}, {&(0x7f0000006a80)="5a6836fa469f21f9ecb8ec6075020cece14b0aca65b73affe7bd75f425ddbb443e373a18c1589094c7ec790cf0449076ae5785d8aa286e9795321db66fd0fd3b93d0a76cffcc3be76d3b50a489d4c82b4af3ac2f280b779a08d57ae4cb50e95676927f0fc4f2a371e478be11f922a38cfeb5828634a423479f4cce14d6d38b7faad341e5b7d372d3574aad27591f68044693f3b192a1922767b4d2c893550f4dd9202bcec31b51023d0e5ed72470b59184e4152a401f3b485e9069c457", 0xbd}, {&(0x7f0000006b40)="001b2254fce8cfbf804e32ceb93f3b53b0fa6d83e353181c0af5c98e8e2091a9f6ac89819db31407e5faed26ccf09a3d4da09d531d84865414afc40f72e89df0979a175a08b336c3accf0591f2d0f035d78b3f1ee0301c71206268107bff489e8c", 0x61}], 0x3, &(0x7f0000006c00)="f29213faac83a92e92c0fe601e2eaf0dd47aa6c2f0eaa19927cff8d2ba6d731e64099782c1e4ecbda75ed75b171fa3d5b63cb8b81fb3fa7523625b2e503b49348f5034ad4c21f2ef948e1a09f9e5ab32bff4fd795ccf9c43270206119ebaed7da6ea69460d943e11a66a22193c46bc85d8cd87efdf2c55de34b1039707d8831c3992d6da65d922edde0c95572986c33bc947f81b2d51ee057518aabf49bacb", 0x9f, 0x4040054}, 0x4000000) r9 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000006d00), 0x10100, 0x0) close_range(r9, r3, 0x2) fsopen(&(0x7f0000006d40)='securityfs\x00', 0x0) statfs(&(0x7f0000006d80)='./file0\x00', &(0x7f0000006dc0)=""/91) recvfrom$inet_nvme(r3, &(0x7f0000006e40)=""/182, 0xb6, 0x12003, &(0x7f0000006f00)=@un=@file={0x0, './file0\x00'}, 0x80) 340.39734ms ago: executing program 3 (id=2904): r0 = open(&(0x7f0000000280)='.\x00', 0x141080, 0x0) mount$9p_fd(0x0, 0x0, 0x0, 0x0, &(0x7f0000000000)) write(0xffffffffffffffff, &(0x7f0000000000)="240000001a005f0214f9f407000904000a000000fe00000000000000", 0x1c) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x2) (async) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x2) ioctl$KVM_SET_MSRS(r3, 0x4008ae89, &(0x7f0000000000)=ANY=[@ANYBLOB="02000000000000001000000000000000f0ffffffffffffff10"]) (async) ioctl$KVM_SET_MSRS(r3, 0x4008ae89, &(0x7f0000000000)=ANY=[@ANYBLOB="02000000000000001000000000000000f0ffffffffffffff10"]) fcntl$notify(r0, 0x402, 0x80000033) mknodat(r0, &(0x7f00000000c0)='./file2\x00', 0x81c0, 0x80000) mount(&(0x7f0000000000)=@rnullb, &(0x7f00000000c0)='./cgroup\x00', &(0x7f0000000040)='squashfs\x00', 0x208002, 0x0) (async) mount(&(0x7f0000000000)=@rnullb, &(0x7f00000000c0)='./cgroup\x00', &(0x7f0000000040)='squashfs\x00', 0x208002, 0x0) 181.172294ms ago: executing program 3 (id=2905): r0 = gettid() r1 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000001500)={0x40, 0x14, 0x1, 0x0, 0x0, {0xa}, [@nested={0x18, 0x95, 0x0, 0x1, [@typed={0x14, 0xb, 0x0, 0x0, @ipv6=@empty}]}, @typed={0x14, 0x1, 0x0, 0x0, @ipv6=@mcast1}]}, 0x40}}, 0x20000000) timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r0}, &(0x7f0000bbdffc)=0x0) timer_settime(r2, 0x1, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x3938700}}, 0x0) futex(&(0x7f000000cffc)=0x1, 0x86, 0x2, 0x0, 0x0, 0xfffffffc) r3 = syz_open_dev$evdev(&(0x7f0000000000), 0x3, 0x8800) ioctl$EVIOCREVOKE(r3, 0x40044591, 0x0) r4 = epoll_create1(0x80000) epoll_ctl$EPOLL_CTL_ADD(r4, 0x1, r3, &(0x7f00000000c0)={0x20000011}) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cgroup.controllers\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xa, 0x28011, r5, 0x0) mount(&(0x7f0000000080)=@rnullb, &(0x7f0000000040)='./cgroup\x00', &(0x7f0000000100)='erofs\x00', 0x200004, 0x0) 138.393172ms ago: executing program 4 (id=2906): r0 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000001140), 0x60a00, 0x0) syz_io_uring_setup(0x1f87, &(0x7f0000000080)={0x0, 0x0, 0x13580}, 0x0, 0x0) poll(0x0, 0x0, 0x72) sendmsg$inet(0xffffffffffffffff, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000007a80), 0x101000, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) ioctl$KVM_CAP_EXIT_HYPERCALL(r4, 0x4068aea3, &(0x7f0000000000)={0xc9, 0x0, 0xc}) sendmsg$inet(r2, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0) recvmsg$unix(r1, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000580), 0x100}, 0x0) select(0x2a, 0x0, 0x0, &(0x7f0000000400)={0xfefdffffffffffff, 0x1, 0x2, 0x300}, &(0x7f0000000440)={0x0, 0x2710}) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x6, 0x12, r0, 0x8ee4a000) memfd_create(&(0x7f0000000000)='\xfb\"a&\x8fe\x11\x8c\xd64\xf9 \x00\x00\x00\x00\x00\x12\x1a\'<\xf5\xbeV\x12\xaal\xfa\xf0o\xd8\xb1,\xbd>M\xe3\x98?\xd9\x96\xab\xc7\x06F\x9b\xab\xc8\x1e\x89]\x13bZ\x8d /#k\x95\x9eLV(\x8a\x0e\x93\x93Vc]mP\xbativ\xce\xa4K\xfb\xf2\xe0\xbf\x9d\xa1\xa2\xcd\xb39\xb4\x17a9\x1c\x82\x1aLT\xd0\xb9\x1a\xafB\x95\xb4\xcf\x91X\x8c\x87\xc2\xa1\x1b\xfe\xe7\xbc\xf7\xeb\xdeL\x1d\x98Zq\xcc%\x98\xb0Yc\xec\xb7\xb5m(9\xde\xd3\xefB\xd4\xee\xb5\xee\xe0\xaa\xdd\x00\xb1jOB\xdas\xe3\xb47}%)\xb9\xbf{\xce\x94^\xec\xdf\xbcW\xe0I\x0e\xa4\x1e}\x06\vK\xed\x11\x880\x0e\x9c\xaeVU\x88\xb0\x842kgA]\x1e\x88\xecif\xee\xba\x8b\xc6\"\xcej\x84\x06\x8a\x99\x80\xd7\xcf\x96\xed\x89\x1e6\x93+\xec#\x1d2\xb8\x80Z\xf7\x06\xbe\xc9[L\xc5\xc9\xb5\xd6{\xee\xce\x17\x89\xa6r\xc5j\xec\x1b\xaa\x996\x14e\xcf\x8axQ\x8fXeT\'0.\x85\xa2\xc8\xb3c\t\xe8\x1a\x89\xecL\xcf\xd8\xb5\xfb\xbc\tX\x88\xbe\xf4@[\xb2\xd5\x8c\xb9\x0e\x17\x8b\xce\xd09\xd2\xfb\x9e\xef\xabR\x88\x17\x9et\xf7\x9c\x01\x91\xacH\xdb\xf9\xcb\x7fh\x83>\x8e\xe1=\xedR\xc9\xe68h\x19\xafLD\x94\x93\xebT\x15\x817\x9d#\xea\xd2\xa8\xfb^\x8c\x87#\x10', 0x7) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r5, &(0x7f00000bd000), 0x318, 0x0) 112.945269ms ago: executing program 2 (id=2907): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_MSG_GETRULE(r1, &(0x7f0000000140)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000100)={&(0x7f0000000340)={0x114, 0x7, 0xa, 0x401, 0x0, 0x0, {0x0, 0x0, 0x3}, [@NFTA_RULE_ID={0x8, 0x9, 0x1, 0x0, 0x2}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_ID={0x8, 0x9, 0x1, 0x0, 0x2}, @NFTA_RULE_COMPAT={0x34, 0x5, 0x0, 0x1, [@NFTA_RULE_COMPAT_FLAGS={0x8, 0x2, 0x1, 0x0, 0x2}, @NFTA_RULE_COMPAT_PROTO_IPV4={0x8, 0x1, 0x1, 0x0, 0x6c}, @NFTA_RULE_COMPAT_PROTO_BRIDGE={0x8, 0x1, 0x1, 0x0, 0xfbfb}, @NFTA_RULE_COMPAT_PROTO_IPV6={0x8, 0x1, 0x1, 0x0, 0x16}, @NFTA_RULE_COMPAT_PROTO_IPV6={0x8, 0x1, 0x1, 0x0, 0xba}, @NFTA_RULE_COMPAT_PROTO_BRIDGE={0x8, 0x1, 0x1, 0x0, 0x6006}]}, @NFTA_RULE_HANDLE={0xc, 0x3, 0x1, 0x0, 0x3}, @NFTA_RULE_USERDATA={0x7c, 0x7, 0x1, 0x0, "6293acbab1c0ecba9cac10160841c9ff39e11a53bb1a32347ac1ad551fddcfadf2597c9baeb1fc77e9d2dbe6d185a60734c16557e7b1ca4ccc1a5eb16dc9c0389b567def27b47c15fd16cb5947b7ed9da5e20eb1a39dd656506ae4fe450664cdd2c23173f6ef92b695d6fcb7410a334dda1c1461224f0af7"}, @NFTA_RULE_CHAIN_ID={0x8, 0xb, 0x1, 0x0, 0x3}, @NFTA_RULE_POSITION_ID={0x8, 0xa, 0x1, 0x0, 0x3}, @NFTA_RULE_HANDLE={0xc, 0x3, 0x1, 0x0, 0x3}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}]}, 0x114}, 0x1, 0x0, 0x0, 0x8000}, 0x4000800) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'rose0\x00', 0x112}) ioctl$TUNATTACHFILTER(r0, 0x400454d1, 0x0) r2 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCL_GETKMSGREDIRECT(r2, 0x4b3c, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) r4 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) r5 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$ETHTOOL_MSG_TSINFO_GET(r5, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000280)={0x20, r4, 0x6a98047402e98331, 0x70bd21, 0x25dfdbff, {}, [@HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8}]}]}, 0x20}, 0x1, 0x0, 0x0, 0x24004041}, 0x4008800) sendmsg$NFT_BATCH(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a05000000000000000000010000000900010073797a300000000040000000030a01010000000000000000010000000900030073797a310000000014000480080002400000000008000140000000000900010073797a300000000070000000060a010400000000000000000100000048000480240001800b00010072656a65637400001400028008000140000000000500020000000000200001800700010072740000140002800800014000000009080002400000000008000b40000000000900010073797a300000000014000000110001"], 0xf8}, 0x1, 0x0, 0x0, 0x2040441}, 0x0) mount(&(0x7f0000000000)=@rnullb, &(0x7f00000000c0)='./cgroup\x00', &(0x7f0000000040)='squashfs\x00', 0x208002, 0x0) 301.743µs ago: executing program 3 (id=2908): ioprio_set$pid(0x1, 0x0, 0x0) openat$rnullb(0xffffffffffffff9c, &(0x7f0000001140), 0x141342, 0x0) (async) r0 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000001140), 0x141342, 0x0) socket$alg(0x26, 0x5, 0x0) (async) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f0000000080)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-cast5-avx\x00'}, 0x58) accept4(r1, 0x0, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket$netlink(0x10, 0x3, 0x4) socket$inet6_tcp(0xa, 0x1, 0x0) (async) socket$inet6_tcp(0xa, 0x1, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r2, &(0x7f0000000140)={0x0, 0x300, &(0x7f0000001ac0)={&(0x7f0000001b00)=ANY=[@ANYBLOB="200000002d00010026bd7000fcdbdf25040000ec04000d8008001700", @ANYRES32=r2], 0x20}, 0x1, 0x0, 0x0, 0x4000d}, 0x20000000) sendfile(r0, r0, 0x0, 0x7ffff000) 0s ago: executing program 2 (id=2909): r0 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) fadvise64(r0, 0x92, 0x5, 0x2) ioctl$AUTOFS_DEV_IOCTL_PROTOVER(0xffffffffffffffff, 0xc0189372, &(0x7f0000000000)={{0x1, 0x1, 0x18, r0, {0x3}}, './file0\x00'}) ioctl$IOCTL_GET_NCIDEV_IDX(r1, 0x0, &(0x7f0000000080)) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3000003, 0x22052, r0, 0xa471a000) kernel console output (not intermixed with test programs): 67][T11284] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 417.402272][ T1164] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 417.436555][T11284] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 417.459766][T11284] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 417.499084][ T1164] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 417.517904][ T1164] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 417.657371][ C1] IPVS: sed: UDP 224.0.0.2:0 - no destination available [ 417.744331][T13544] tipc: Disabling bearer [ 417.755859][T13544] tipc: Left network mode [ 417.776403][T13544] IPVS: stopping backup sync thread 6882 ... [ 417.827572][T14272] /dev/rnullb0: Can't open blockdev [ 417.970416][T14285] usb usb7: usbfs: process 14285 (syz.2.2439) did not claim interface 0 before use [ 417.988224][T14285] /dev/rnullb0: Can't open blockdev [ 418.017787][T13544] hsr_slave_0: left promiscuous mode [ 418.055127][T14283] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 418.065948][T13544] hsr_slave_1: left promiscuous mode [ 418.070029][T14283] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 418.071813][T13544] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 418.112474][T13544] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 418.124743][T13544] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 418.133640][T13544] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 418.150198][T13544] veth1_macvtap: left promiscuous mode [ 418.156451][T13544] veth0_macvtap: left promiscuous mode [ 418.164814][T13544] veth1_vlan: left promiscuous mode [ 418.171497][T13544] veth0_vlan: left promiscuous mode [ 418.322945][T14293] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 418.348618][T14293] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 418.403418][T13544] team0 (unregistering): Port device team_slave_1 removed [ 418.474695][T13542] smc: removing ib device syz0 [ 418.505956][T14291] netlink: 830 bytes leftover after parsing attributes in process `syz.2.2442'. [ 418.523389][ T5913] vcan0 speed is unknown, defaulting to 1000 [ 418.530182][ T5926] lo speed is unknown, defaulting to 1000 [ 418.554567][ T5926] infiniband syz2: ib_query_port failed (-19) [ 418.563033][ T5913] syz0: Port: 1 Link DOWN [ 419.000042][T14307] netlink: 16 bytes leftover after parsing attributes in process `syz.4.2447'. [ 419.148381][T13544] IPVS: stop unused estimator thread 0... [ 419.215912][T14313] /dev/rnullb0: Can't open blockdev [ 419.378832][ T5864] Bluetooth: hci4: command tx timeout [ 419.615797][ T8617] raw-gadget.0 gadget.4: failed to queue disconnect event [ 420.063152][ T5187] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 420.070783][ T5187] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 420.078670][ T5187] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 420.086955][ T5187] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 420.094969][ T5187] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 420.169287][T14327] IPVS: length: 68 != 24 [ 420.198702][T14327] netdevsim netdevsim2: Firmware load for 'nel/address_bits0/../file0' refused, path contains '..' component [ 420.273065][T13544] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 420.420919][T13544] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 420.454334][T14322] chnl_net:caif_netlink_parms(): no params data found [ 420.501494][T13544] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 420.608833][T14322] bridge0: port 1(bridge_slave_0) entered blocking state [ 420.616167][T14322] bridge0: port 1(bridge_slave_0) entered disabled state [ 420.635016][T14322] bridge_slave_0: entered allmulticast mode [ 420.649792][T14322] bridge_slave_0: entered promiscuous mode [ 420.657184][T14343] MTD: Attempt to mount non-MTD device "/dev/rnullb0" [ 420.684701][T13544] netdevsim netdevsim4 netdevsim0 (unregistering): left allmulticast mode [ 420.696656][T14343] /dev/rnullb0: Can't open blockdev [ 420.711303][T13544] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 420.742654][T14322] bridge0: port 2(bridge_slave_1) entered blocking state [ 420.761383][T14322] bridge0: port 2(bridge_slave_1) entered disabled state [ 420.782330][T14322] bridge_slave_1: entered allmulticast mode [ 420.799013][T14322] bridge_slave_1: entered promiscuous mode [ 420.876633][T14322] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 420.889998][T14322] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 420.943958][T14322] team0: Port device team_slave_0 added [ 420.958326][T14322] team0: Port device team_slave_1 added [ 421.034295][T13544] bridge_slave_1: left allmulticast mode [ 421.041469][T13544] bridge_slave_1: left promiscuous mode [ 421.050118][T13544] bridge0: port 2(bridge_slave_1) entered disabled state [ 421.061524][T13544] bridge_slave_0: left allmulticast mode [ 421.070123][T13544] bridge_slave_0: left promiscuous mode [ 421.076189][T13544] bridge0: port 1(bridge_slave_0) entered disabled state [ 421.233873][T13544] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 421.246095][T13544] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 421.261235][T13544] bond0 (unregistering): Released all slaves [ 421.274204][T14322] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 421.282958][T14322] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 421.313490][T14322] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 421.331645][T14322] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 421.352695][T14322] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 421.446929][T14322] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 421.515298][T11286] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 421.544254][T14350] kAFS: unparsable volume name [ 421.588408][T14354] /dev/rnullb0: Can't open blockdev [ 421.594014][ T5187] Bluetooth: hci4: command tx timeout [ 421.637740][T14322] hsr_slave_0: entered promiscuous mode [ 421.656157][T14322] hsr_slave_1: entered promiscuous mode [ 421.668832][T14322] debugfs: 'hsr0' already exists in 'hsr' [ 421.685574][T14322] Cannot create hsr debugfs directory [ 421.952721][T14375] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 421.990506][T14375] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 422.054463][T13544] hsr_slave_0: left promiscuous mode [ 422.076827][T13544] hsr_slave_1: left promiscuous mode [ 422.083048][T13544] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 422.090658][T13544] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 422.110905][T13544] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 422.123261][T13544] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 422.139132][T13544] veth1_macvtap: left promiscuous mode [ 422.159208][T13544] veth0_macvtap: left promiscuous mode [ 422.164871][T13544] veth1_vlan: left promiscuous mode [ 422.178966][T13544] veth0_vlan: left promiscuous mode [ 422.276411][ T5187] Bluetooth: hci2: command tx timeout [ 422.294955][T13544] pim6reg (unregistering): left allmulticast mode [ 422.350834][T13544] team0 (unregistering): Port device team_slave_1 removed [ 422.364731][T13544] team0 (unregistering): Port device team_slave_0 removed [ 422.552922][ T5885] usb 4-1: new high-speed USB device number 121 using dummy_hcd [ 422.656161][T14397] /dev/rnullb0: Can't open blockdev [ 422.714131][ T5885] usb 4-1: Using ep0 maxpacket: 16 [ 422.728021][ T5885] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 422.761322][ T5885] usb 4-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 422.777540][ T5885] usb 4-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 422.799077][ T5885] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 422.820728][ T5885] usb 4-1: config 0 descriptor?? [ 422.874621][T14410] /dev/rnullb0: Can't open blockdev [ 422.880800][T13542] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 422.929666][T13544] IPVS: stop unused estimator thread 0... [ 423.070644][T14322] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 423.082954][T14417] /dev/rnullb0: Can't open blockdev [ 423.118437][T14322] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 423.151954][T14322] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 423.204534][T14322] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 423.289713][ T1212] usb 4-1: USB disconnect, device number 121 [ 423.524730][T14322] 8021q: adding VLAN 0 to HW filter on device bond0 [ 423.564633][T14322] 8021q: adding VLAN 0 to HW filter on device team0 [ 423.607626][T13542] bridge0: port 1(bridge_slave_0) entered blocking state [ 423.615332][T13542] bridge0: port 1(bridge_slave_0) entered forwarding state [ 423.658883][T13542] bridge0: port 2(bridge_slave_1) entered blocking state [ 423.666158][T13542] bridge0: port 2(bridge_slave_1) entered forwarding state [ 423.778014][T14436] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2474'. [ 423.798738][T14436] netlink: 16 bytes leftover after parsing attributes in process `syz.2.2474'. [ 423.811565][T14436] /dev/rnullb0: Can't open blockdev [ 423.818154][ T5187] Bluetooth: hci4: command tx timeout [ 424.081169][T14322] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 424.151786][T14463] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 424.170874][T14463] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 424.368465][T14322] veth0_vlan: entered promiscuous mode [ 424.404977][T14322] veth1_vlan: entered promiscuous mode [ 424.463944][T14322] veth0_macvtap: entered promiscuous mode [ 424.498517][ T5187] Bluetooth: hci2: command tx timeout [ 424.506932][T14322] veth1_macvtap: entered promiscuous mode [ 424.525563][T14322] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 424.540482][T14322] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 424.563929][T11284] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 424.599641][T14477] i2c i2c-0: Invalid block write size 34 [ 424.653037][T11284] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 424.688302][T11284] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 424.720913][T11284] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 424.813458][T11286] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 424.844271][T11286] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 424.898107][T11284] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 424.916576][T11284] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 425.246816][ T5926] usb 5-1: new high-speed USB device number 38 using dummy_hcd [ 425.422511][ T5926] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 425.435292][ T5926] usb 5-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 425.483506][ T5926] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 425.499430][ T5926] usb 5-1: config 0 descriptor?? [ 425.518512][ T5926] pwc: Askey VC010 type 2 USB webcam detected. [ 425.538094][T14510] /dev/rnullb0: Can't open blockdev [ 425.612802][ T1212] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 425.735506][ T5926] pwc: send_video_command error -71 [ 425.745480][ T5926] pwc: Failed to set video mode CIF@30 fps; return code = -71 [ 425.759843][ T5926] Philips webcam 5-1:0.0: probe with driver Philips webcam failed with error -71 [ 425.787138][ T5926] usb 5-1: USB disconnect, device number 38 [ 426.295371][ T5926] usb 5-1: new high-speed USB device number 39 using dummy_hcd [ 426.360452][T14535] /dev/rnullb0: Can't open blockdev [ 426.467127][ T5926] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 426.486622][ T5926] usb 5-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 426.496039][ T5926] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 426.526089][ T5926] usb 5-1: config 0 descriptor?? [ 426.544943][ T5926] pwc: Askey VC010 type 2 USB webcam detected. [ 426.722137][ T5187] Bluetooth: hci2: command tx timeout [ 426.971138][ T5926] pwc: recv_control_msg error -32 req 02 val 2b00 [ 427.347680][ T5926] pwc: recv_control_msg error -71 req 02 val 2c00 [ 427.376926][ T5926] pwc: recv_control_msg error -71 req 04 val 1000 [ 427.383724][ T5926] pwc: recv_control_msg error -71 req 04 val 1300 [ 427.391481][ T5926] pwc: recv_control_msg error -71 req 04 val 1400 [ 427.401175][ T5926] pwc: recv_control_msg error -71 req 02 val 2000 [ 427.411777][ T5926] pwc: recv_control_msg error -71 req 02 val 2100 [ 427.419052][ T5926] pwc: recv_control_msg error -71 req 04 val 1500 [ 427.427256][ T5926] pwc: recv_control_msg error -71 req 02 val 2500 [ 427.434087][ T5926] pwc: recv_control_msg error -71 req 02 val 2400 [ 427.444761][ T5926] pwc: recv_control_msg error -71 req 02 val 2600 [ 427.451802][ T5926] pwc: recv_control_msg error -71 req 02 val 2900 [ 427.459152][ T5926] pwc: recv_control_msg error -71 req 02 val 2800 [ 427.466579][ T5926] pwc: recv_control_msg error -71 req 04 val 1100 [ 427.473845][ T5926] pwc: recv_control_msg error -71 req 04 val 1200 [ 427.482436][ T5926] pwc: Registered as video103. [ 427.489435][ T5926] input: PWC snapshot button as /devices/platform/dummy_hcd.4/usb5/5-1/input/input40 [ 427.513059][ T5926] usb 5-1: USB disconnect, device number 39 [ 427.662764][ T10] usb 4-1: new high-speed USB device number 122 using dummy_hcd [ 427.671098][T13542] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 427.789360][T14581] /dev/rnullb0: Can't open blockdev [ 427.859777][ T10] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x7 has invalid wMaxPacketSize 0 [ 427.875303][T14584] /dev/nullb0: Can't open blockdev [ 427.881031][ T10] usb 4-1: config 0 interface 0 altsetting 0 bulk endpoint 0x7 has invalid maxpacket 0 [ 427.900954][ T10] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x89 has invalid wMaxPacketSize 0 [ 427.921841][T14584] /dev/nullb0: Can't open blockdev [ 427.927176][ T10] usb 4-1: config 0 interface 0 altsetting 0 bulk endpoint 0x89 has invalid maxpacket 0 [ 427.948734][ T10] usb 4-1: New USB device found, idVendor=2040, idProduct=4900, bcdDevice=4d.8b [ 427.965477][ T10] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 427.985753][ T10] usb 4-1: config 0 descriptor?? [ 428.014328][T14594] erofs (device nbd5): cannot find valid erofs superblock [ 428.037370][T14594] binfmt_misc: Unknown parameter 'erofs' [ 428.210299][ T10] hdpvr 4-1:0.0: firmware version 0x0 dated [ 428.216574][ T10] hdpvr 4-1:0.0: untested firmware, the driver might not work. [ 428.296941][T14582] syz.2.2499 invoked oom-killer: gfp_mask=0xcc0(GFP_KERNEL), order=0, oom_score_adj=1000 [ 428.310184][T14582] CPU: 1 UID: 0 PID: 14582 Comm: syz.2.2499 Not tainted syzkaller #0 PREEMPT(full) [ 428.310211][T14582] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 428.310223][T14582] Call Trace: [ 428.310230][T14582] [ 428.310238][T14582] dump_stack_lvl+0x189/0x250 [ 428.310267][T14582] ? __pfx_dump_stack_lvl+0x10/0x10 [ 428.310292][T14582] ? __pfx__printk+0x10/0x10 [ 428.310318][T14582] ? rcu_is_watching+0x15/0xb0 [ 428.310340][T14582] dump_header+0xd3/0x480 [ 428.310358][T14582] oom_kill_process+0x387/0x920 [ 428.310379][T14582] out_of_memory+0xf09/0x12a0 [ 428.310399][T14582] ? rcu_is_watching+0x15/0xb0 [ 428.310419][T14582] ? __pfx_out_of_memory+0x10/0x10 [ 428.310435][T14582] ? percpu_ref_put+0x19/0x180 [ 428.310452][T14582] ? lock_release+0x4b/0x3e0 [ 428.310470][T14582] mem_cgroup_out_of_memory+0x145/0x240 [ 428.310490][T14582] ? __pfx_mem_cgroup_out_of_memory+0x10/0x10 [ 428.310513][T14582] ? _raw_spin_unlock+0x28/0x50 [ 428.310533][T14582] ? memcg1_oom_prepare+0x37f/0x450 [ 428.310556][T14582] try_charge_memcg+0xdff/0x1290 [ 428.310586][T14582] ? __pfx_try_charge_memcg+0x10/0x10 [ 428.310609][T14582] ? get_mem_cgroup_from_mm+0x38/0x2a0 [ 428.310628][T14582] ? rcu_is_watching+0x15/0xb0 [ 428.310646][T14582] ? lock_release+0x4b/0x3e0 [ 428.310671][T14582] ? percpu_ref_tryget+0x15/0x180 [ 428.310689][T14582] charge_memcg+0x9f/0x180 [ 428.310713][T14582] __mem_cgroup_charge+0x25/0x80 [ 428.310735][T14582] filemap_add_folio+0x49/0x270 [ 428.310755][T14582] filemap_get_pages+0xb45/0x1de0 [ 428.310774][T14582] ? kfree+0x18e/0x440 [ 428.310794][T14582] ? direct_splice_actor+0x101/0x160 [ 428.310811][T14582] ? __se_sys_sendfile64+0x13e/0x190 [ 428.310830][T14582] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 428.310855][T14582] ? __pfx_filemap_get_pages+0x10/0x10 [ 428.310875][T14582] ? folios_put_refs+0x560/0x640 [ 428.310896][T14582] ? __pfx___might_resched+0x10/0x10 [ 428.310927][T14582] ? mlock_drain_local+0x79/0x490 [ 428.310945][T14582] ? mlock_drain_local+0x28e/0x490 [ 428.310965][T14582] filemap_splice_read+0x581/0xc60 [ 428.310993][T14582] ? __pfx_filemap_splice_read+0x10/0x10 [ 428.311023][T14582] ? __pfx_pipe_lock_cmp_fn+0x10/0x10 [ 428.311042][T14582] ? file_end_write+0xd8/0x250 [ 428.311061][T14582] ? direct_splice_actor+0x10c/0x160 [ 428.311080][T14582] ? __pfx_filemap_splice_read+0x10/0x10 [ 428.311100][T14582] splice_direct_to_actor+0x4a6/0xcc0 [ 428.311125][T14582] ? __pfx_direct_splice_actor+0x10/0x10 [ 428.311144][T14582] ? __pfx_splice_direct_to_actor+0x10/0x10 [ 428.311167][T14582] do_splice_direct+0x181/0x270 [ 428.311186][T14582] ? __pfx_do_splice_direct+0x10/0x10 [ 428.311204][T14582] ? common_file_perm+0x1b5/0x230 [ 428.311226][T14582] ? __pfx_direct_file_splice_eof+0x10/0x10 [ 428.311247][T14582] ? bpf_lsm_file_permission+0x9/0x20 [ 428.311270][T14582] ? security_file_permission+0x75/0x290 [ 428.311288][T14582] ? rw_verify_area+0x255/0x4d0 [ 428.311307][T14582] do_sendfile+0x4da/0x7e0 [ 428.311328][T14582] ? do_raw_spin_unlock+0x122/0x240 [ 428.311352][T14582] ? __pfx_do_sendfile+0x10/0x10 [ 428.311372][T14582] ? __se_sys_futex+0x36f/0x400 [ 428.311393][T14582] __se_sys_sendfile64+0x13e/0x190 [ 428.311412][T14582] ? __pfx___se_sys_sendfile64+0x10/0x10 [ 428.311433][T14582] ? rcu_is_watching+0x15/0xb0 [ 428.311453][T14582] do_syscall_64+0xfa/0xfa0 [ 428.311475][T14582] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 428.311492][T14582] ? clear_bhb_loop+0x60/0xb0 [ 428.311511][T14582] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 428.311528][T14582] RIP: 0033:0x7fa16db8ebe9 [ 428.311543][T14582] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 428.311558][T14582] RSP: 002b:00007fa16e96a038 EFLAGS: 00000246 ORIG_RAX: 0000000000000028 [ 428.311578][T14582] RAX: ffffffffffffffda RBX: 00007fa16ddb6090 RCX: 00007fa16db8ebe9 [ 428.311592][T14582] RDX: 0000000000000000 RSI: 0000000000000003 RDI: 0000000000000003 [ 428.311602][T14582] RBP: 00007fa16dc11e19 R08: 0000000000000000 R09: 0000000000000000 [ 428.311614][T14582] R10: 000000007ffff003 R11: 0000000000000246 R12: 0000000000000000 [ 428.311624][T14582] R13: 00007fa16ddb6128 R14: 00007fa16ddb6090 R15: 00007ffcb0fa59c8 [ 428.311645][T14582] [ 428.311660][T14582] memory: usage 307200kB, limit 307200kB, failcnt 45488 [ 428.734836][ T10] hdpvr 4-1:0.0: Could not setup controls [ 428.736440][ T5926] usb 5-1: new high-speed USB device number 40 using dummy_hcd [ 428.743792][T14582] memory+swap: usage 431680kB, limit 9007199254740988kB, failcnt 0 [ 428.770326][ T10] hdpvr 4-1:0.0: registering videodev failed [ 428.774381][T14582] kmem: usage 6844kB, limit 9007199254740988kB, failcnt 0 [ 428.787278][ T10] hdpvr 4-1:0.0: probe with driver hdpvr failed with error -71 [ 428.795137][T14582] Memory cgroup stats for /syz2: [ 428.795260][T14582] cache 307023872 [ 428.805414][ T10] usb 4-1: USB disconnect, device number 122 [ 428.809883][T14582] rss 348160 [ 428.814851][T14582] rss_huge 0 [ 428.822463][T14582] shmem 307011584 [ 428.824154][T14602] 9pnet: p9_errstr2errno: server reported unknown error @cÿÿÿÿÿÿÿÿ [ 428.830309][T14582] mapped_file 0 [ 428.838736][T14582] dirty 0 [ 428.841785][T14582] writeback 0 [ 428.845071][T14582] workingset_refault_anon 401 [ 428.851687][T14582] workingset_refault_file 11597 [ 428.858167][T14582] swap 127467520 [ 428.863650][T14582] swapcached 212992 [ 428.867824][T14582] pgpgin 453781 [ 428.871703][T14582] pgpgout 383354 [ 428.875509][T14582] pgfault 327316 [ 428.879076][T14582] pgmajfault 3022 [ 428.883815][T14582] inactive_anon 296673280 [ 428.888232][T14582] active_anon 10878976 [ 428.892643][T14582] inactive_file 12288 [ 428.892654][T14582] active_file 0 [ 428.892659][T14582] unevictable 0 [ 428.892664][T14582] hierarchical_memory_limit 314572800 [ 428.892670][T14582] hierarchical_memsw_limit 9223372036854771712 [ 428.892676][T14582] total_cache 307023872 [ 428.892681][T14582] total_rss 348160 [ 428.892686][T14582] total_rss_huge 0 [ 428.892691][T14582] total_shmem 307011584 [ 428.892696][T14582] total_mapped_file 0 [ 428.892701][T14582] total_dirty 0 [ 428.892706][T14582] total_writeback 0 [ 428.892711][T14582] total_workingset_refault_anon 401 [ 428.892717][T14582] total_workingset_refault_file 11597 [ 428.892722][T14582] total_swap 127467520 [ 428.892727][T14582] total_swapcached 212992 [ 428.892732][T14582] total_pgpgin 453781 [ 428.892737][T14582] total_pgpgout 383354 [ 428.892742][T14582] total_pgfault 327316 [ 428.892748][T14582] total_pgmajfault 3022 [ 428.892753][T14582] total_inactive_anon 296673280 [ 428.892759][T14582] total_active_anon 10878976 [ 428.892764][T14582] total_inactive_file 12288 [ 428.892770][T14582] total_active_file 0 [ 428.892776][T14582] total_unevictable 0 [ 428.892781][T14582] anon_cost 0 [ 428.892787][T14582] file_cost 0 [ 428.892794][T14582] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=/,mems_allowed=0-1,oom_memcg=/syz2,task_memcg=/syz2,task=syz.2.2496,pid=14573,uid=0 [ 428.892882][T14582] Memory cgroup out of memory: Killed process 14573 (syz.2.2496) total-vm:101828kB, anon-rss:1108kB, file-rss:33152kB, shmem-rss:0kB, UID:0 pgtables:132kB oom_score_adj:1000 [ 428.922254][T14602] /dev/rnullb0: Can't open blockdev [ 428.922425][ T5885] IPVS: starting estimator thread 0... [ 428.923754][ T5926] usb 5-1: Using ep0 maxpacket: 32 [ 428.926144][ T5926] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x9 has invalid wMaxPacketSize 0 [ 428.927841][ T5926] usb 5-1: New USB device found, idVendor=0c72, idProduct=0011, bcdDevice= 9.75 [ 428.927867][ T5926] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 428.927884][ T5926] usb 5-1: Product: syz [ 428.927896][ T5926] usb 5-1: Manufacturer: syz [ 428.927910][ T5926] usb 5-1: SerialNumber: syz [ 428.929408][ T5926] usb 5-1: config 0 descriptor?? [ 428.947271][ T5187] Bluetooth: hci2: command tx timeout [ 429.011912][T14606] IPVS: using max 54 ests per chain, 129600 per kthread [ 429.031912][ T1164] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 429.042610][ T5862] syz-executor invoked oom-killer: gfp_mask=0x100cca(GFP_HIGHUSER_MOVABLE), order=0, oom_score_adj=0 [ 429.042654][ T5862] CPU: 1 UID: 0 PID: 5862 Comm: syz-executor Not tainted syzkaller #0 PREEMPT(full) [ 429.042674][ T5862] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 429.042685][ T5862] Call Trace: [ 429.042691][ T5862] [ 429.042698][ T5862] dump_stack_lvl+0x189/0x250 [ 429.042724][ T5862] ? __pfx_dump_stack_lvl+0x10/0x10 [ 429.042746][ T5862] ? __pfx__printk+0x10/0x10 [ 429.042768][ T5862] ? rcu_is_watching+0x15/0xb0 [ 429.042786][ T5862] dump_header+0xd3/0x480 [ 429.042802][ T5862] oom_kill_process+0x387/0x920 [ 429.042822][ T5862] out_of_memory+0xf09/0x12a0 [ 429.042841][ T5862] ? rcu_is_watching+0x15/0xb0 [ 429.042857][ T5862] ? __pfx_out_of_memory+0x10/0x10 [ 429.042869][ T5862] ? percpu_ref_put+0x19/0x180 [ 429.042883][ T5862] ? lock_release+0x4b/0x3e0 [ 429.042900][ T5862] mem_cgroup_out_of_memory+0x145/0x240 [ 429.042916][ T5862] ? __pfx_mem_cgroup_out_of_memory+0x10/0x10 [ 429.042938][ T5862] ? _raw_spin_unlock+0x28/0x50 [ 429.042956][ T5862] ? memcg1_oom_prepare+0x37f/0x450 [ 429.042977][ T5862] try_charge_memcg+0xdff/0x1290 [ 429.043005][ T5862] ? __pfx_try_charge_memcg+0x10/0x10 [ 429.043024][ T5862] ? get_mem_cgroup_from_mm+0x38/0x2a0 [ 429.043039][ T5862] ? rcu_is_watching+0x15/0xb0 [ 429.043051][ T5862] ? get_mem_cgroup_from_mm+0x38/0x2a0 [ 429.043065][ T5862] ? lock_release+0x4b/0x3e0 [ 429.043077][ T5862] ? percpu_ref_tryget+0x15/0x180 [ 429.043089][ T5862] ? percpu_ref_tryget+0x15/0x180 [ 429.043103][ T5862] charge_memcg+0x9f/0x180 [ 429.043121][ T5862] __mem_cgroup_charge+0x25/0x80 [ 429.043139][ T5862] filemap_add_folio+0x49/0x270 [ 429.043156][ T5862] __filemap_get_folio+0x4f6/0xaf0 [ 429.043174][ T5862] filemap_fault+0x94c/0x12b0 [ 429.043192][ T5862] ? __pfx_filemap_fault+0x10/0x10 [ 429.043210][ T5862] ? __pfx_filemap_map_pages+0x10/0x10 [ 429.043227][ T5862] ? rcu_is_watching+0x15/0xb0 [ 429.043242][ T5862] ? __handle_mm_fault+0x2789/0x5400 [ 429.043262][ T5862] ? rcu_is_watching+0x15/0xb0 [ 429.043275][ T5862] ? __handle_mm_fault+0x2789/0x5400 [ 429.043292][ T5862] __do_fault+0x138/0x390 [ 429.043308][ T5862] __handle_mm_fault+0x35e3/0x5400 [ 429.043331][ T5862] ? __pfx___handle_mm_fault+0x10/0x10 [ 429.043351][ T5862] ? rcu_is_watching+0x15/0xb0 [ 429.043370][ T5862] ? lock_vma_under_rcu+0x3cb/0x450 [ 429.043384][ T5862] ? __pfx_lock_vma_under_rcu+0x10/0x10 [ 429.043400][ T5862] handle_mm_fault+0x40a/0x8e0 [ 429.043423][ T5862] do_user_addr_fault+0xa81/0x1390 [ 429.043440][ T5862] ? rcu_is_watching+0x15/0xb0 [ 429.043455][ T5862] ? trace_page_fault_user+0x84/0x1e0 [ 429.043471][ T5862] exc_page_fault+0x82/0x100 [ 429.043488][ T5862] asm_exc_page_fault+0x26/0x30 [ 429.043502][ T5862] RIP: 0033:0x7fa16da65c24 [ 429.043515][ T5862] Code: 85 ed 09 00 00 48 b8 db 34 b6 d7 82 de 1b 43 48 f7 a4 24 98 00 00 00 48 8b 05 78 fb e7 00 48 69 8c 24 90 00 00 00 e8 03 00 00 <8b> 78 08 48 8b 44 24 18 48 c1 ea 12 4c 8b 0d 89 fa e7 00 48 01 d1 [ 429.043529][ T5862] RSP: 002b:00007ffcb0fa5d50 EFLAGS: 00010202 [ 429.043541][ T5862] RAX: 0000001b32c24000 RBX: 00000000000006a3 RCX: 0000000000067070 [ 429.043551][ T5862] RDX: 00000000023482f8 RSI: 00007ffcb0fa5de0 RDI: 0000000000000001 [ 429.043561][ T5862] RBP: 00007ffcb0fa5d8c R08: 00000000086970dc R09: 7fffffffffffffff [ 429.043572][ T5862] R10: 3fffffffffffffff R11: 0000000000000293 R12: 0000000000001388 [ 429.043583][ T5862] R13: 00000000000927c0 R14: 0000000000066f52 R15: 00007ffcb0fa5de0 [ 429.043601][ T5862] [ 429.043608][ T5862] memory: usage 307200kB, limit 307200kB, failcnt 45731 [ 429.043621][ T5862] memory+swap: usage 431680kB, limit 9007199254740988kB, failcnt 0 [ 429.043641][ T5862] kmem: usage 6840kB, limit 9007199254740988kB, failcnt 0 [ 429.043652][ T5862] Memory cgroup stats for /syz2: [ 429.043751][ T5862] cache 307027968 [ 429.043760][ T5862] rss 200704 [ 429.043766][ T5862] rss_huge 0 [ 429.043772][ T5862] shmem 307011584 [ 429.043778][ T5862] mapped_file 0 [ 429.043784][ T5862] dirty 0 [ 429.043790][ T5862] writeback 0 [ 429.043797][ T5862] workingset_refault_anon 401 [ 429.043803][ T5862] workingset_refault_file 11598 [ 429.043810][ T5862] swap 127467520 [ 429.043816][ T5862] swapcached 212992 [ 429.043822][ T5862] pgpgin 453782 [ 429.043827][ T5862] pgpgout 383354 [ 429.043833][ T5862] pgfault 327316 [ 429.043838][ T5862] pgmajfault 3022 [ 429.043843][ T5862] inactive_anon 11100160 [ 429.043849][ T5862] active_anon 296452096 [ 429.043855][ T5862] inactive_file 16384 [ 429.043861][ T5862] active_file 0 [ 429.043866][ T5862] unevictable 0 [ 429.043873][ T5862] hierarchical_memory_limit 314572800 [ 429.043879][ T5862] hierarchical_memsw_limit 9223372036854771712 [ 429.043885][ T5862] total_cache 307027968 [ 429.043890][ T5862] total_rss 200704 [ 429.043895][ T5862] total_rss_huge 0 [ 429.043900][ T5862] total_shmem 307011584 [ 429.043906][ T5862] total_mapped_file 0 [ 429.043912][ T5862] total_dirty 0 [ 429.043919][ T5862] total_writeback 0 [ 429.043925][ T5862] total_workingset_refault_anon 401 [ 429.043932][ T5862] total_workingset_refault_file 11598 [ 429.043938][ T5862] total_swap 127467520 [ 429.043944][ T5862] total_swapcached 212992 [ 429.043950][ T5862] total_pgpgin 453782 [ 429.043957][ T5862] total_pgpgout 383354 [ 429.043962][ T5862] total_pgfault 327316 [ 429.043969][ T5862] total_pgmajfault 3022 [ 429.043975][ T5862] total_inactive_anon 11100160 [ 429.043982][ T5862] total_active_anon 296452096 [ 429.043989][ T5862] total_inactive_file 16384 [ 429.043996][ T5862] total_active_file 0 [ 429.044002][ T5862] total_unevictable 0 [ 429.044008][ T5862] anon_cost 0 [ 429.044014][ T5862] file_cost 0 [ 429.044019][ T5862] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=/,mems_allowed=0-1,oom_memcg=/syz2,task_memcg=/syz2,task=syz.2.2499,pid=14578,uid=0 [ 429.044093][ T5862] Memory cgroup out of memory: Killed process 14578 (syz.2.2499) total-vm:101960kB, anon-rss:1080kB, file-rss:23208kB, shmem-rss:0kB, UID:0 pgtables:124kB oom_score_adj:1000 [ 429.399877][ T10] usb 5-1: USB disconnect, device number 40 [ 429.484850][ T5862] syz-executor invoked oom-killer: gfp_mask=0x100cca(GFP_HIGHUSER_MOVABLE), order=0, oom_score_adj=0 [ 429.880207][ T5862] CPU: 1 UID: 0 PID: 5862 Comm: syz-executor Not tainted syzkaller #0 PREEMPT(full) [ 429.880232][ T5862] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 429.880243][ T5862] Call Trace: [ 429.880249][ T5862] [ 429.880256][ T5862] dump_stack_lvl+0x189/0x250 [ 429.880284][ T5862] ? __pfx_dump_stack_lvl+0x10/0x10 [ 429.880306][ T5862] ? __pfx__printk+0x10/0x10 [ 429.880329][ T5862] ? rcu_is_watching+0x15/0xb0 [ 429.880349][ T5862] dump_header+0xd3/0x480 [ 429.880365][ T5862] oom_kill_process+0x387/0x920 [ 429.880386][ T5862] out_of_memory+0xf09/0x12a0 [ 429.880405][ T5862] ? rcu_is_watching+0x15/0xb0 [ 429.880423][ T5862] ? __pfx_out_of_memory+0x10/0x10 [ 429.880438][ T5862] ? percpu_ref_put+0x19/0x180 [ 429.880453][ T5862] ? lock_release+0x4b/0x3e0 [ 429.880471][ T5862] mem_cgroup_out_of_memory+0x145/0x240 [ 429.880488][ T5862] ? __pfx_mem_cgroup_out_of_memory+0x10/0x10 [ 429.880509][ T5862] ? _raw_spin_unlock+0x28/0x50 [ 429.880528][ T5862] ? memcg1_oom_prepare+0x37f/0x450 [ 429.880549][ T5862] try_charge_memcg+0xdff/0x1290 [ 429.880577][ T5862] ? __pfx_try_charge_memcg+0x10/0x10 [ 429.880599][ T5862] ? get_mem_cgroup_from_mm+0x38/0x2a0 [ 429.880617][ T5862] ? rcu_is_watching+0x15/0xb0 [ 429.880633][ T5862] ? get_mem_cgroup_from_mm+0x38/0x2a0 [ 429.880650][ T5862] ? lock_release+0x4b/0x3e0 [ 429.880664][ T5862] ? percpu_ref_tryget+0x15/0x180 [ 429.880678][ T5862] ? percpu_ref_tryget+0x15/0x180 [ 429.880695][ T5862] charge_memcg+0x9f/0x180 [ 429.880717][ T5862] __mem_cgroup_charge+0x25/0x80 [ 429.880746][ T5862] filemap_add_folio+0x49/0x270 [ 429.880764][ T5862] __filemap_get_folio+0x4f6/0xaf0 [ 429.880785][ T5862] filemap_fault+0x94c/0x12b0 [ 429.880807][ T5862] ? __pfx_filemap_fault+0x10/0x10 [ 429.880826][ T5862] ? __pfx_filemap_map_pages+0x10/0x10 [ 429.880843][ T5862] ? rcu_is_watching+0x15/0xb0 [ 429.880859][ T5862] ? __handle_mm_fault+0x2789/0x5400 [ 429.880880][ T5862] ? rcu_is_watching+0x15/0xb0 [ 429.880896][ T5862] ? __handle_mm_fault+0x2789/0x5400 [ 429.880917][ T5862] __do_fault+0x138/0x390 [ 429.880933][ T5862] __handle_mm_fault+0x35e3/0x5400 [ 429.880960][ T5862] ? __pfx___handle_mm_fault+0x10/0x10 [ 429.880981][ T5862] ? rcu_is_watching+0x15/0xb0 [ 429.881002][ T5862] ? lock_vma_under_rcu+0x3cb/0x450 [ 429.881018][ T5862] ? __pfx_lock_vma_under_rcu+0x10/0x10 [ 429.881034][ T5862] handle_mm_fault+0x40a/0x8e0 [ 429.881058][ T5862] do_user_addr_fault+0xa81/0x1390 [ 429.881078][ T5862] ? rcu_is_watching+0x15/0xb0 [ 429.881095][ T5862] ? trace_page_fault_user+0x84/0x1e0 [ 429.881111][ T5862] exc_page_fault+0x82/0x100 [ 429.881130][ T5862] asm_exc_page_fault+0x26/0x30 [ 429.881145][ T5862] RIP: 0033:0x7fa16da65c24 [ 429.881160][ T5862] Code: 85 ed 09 00 00 48 b8 db 34 b6 d7 82 de 1b 43 48 f7 a4 24 98 00 00 00 48 8b 05 78 fb e7 00 48 69 8c 24 90 00 00 00 e8 03 00 00 <8b> 78 08 48 8b 44 24 18 48 c1 ea 12 4c 8b 0d 89 fa e7 00 48 01 d1 [ 429.881172][ T5862] RSP: 002b:00007ffcb0fa5d50 EFLAGS: 00010202 [ 429.881188][ T5862] RAX: 0000001b32c24000 RBX: 00000000000006a6 RCX: 0000000000067458 [ 429.881198][ T5862] RDX: 0000000003c811e2 RSI: 00007ffcb0fa5de0 RDI: 0000000000000001 [ 429.881208][ T5862] RBP: 00007ffcb0fa5d8c R08: 000000000e6ce4ba R09: 7fffffffffffffff [ 429.881220][ T5862] R10: 3fffffffffffffff R11: 0000000000000293 R12: 0000000000001388 [ 429.881231][ T5862] R13: 00000000000927c0 R14: 00000000000674c1 R15: 00007ffcb0fa5de0 [ 429.881249][ T5862] [ 429.881256][ T5862] memory: usage 307200kB, limit 307200kB, failcnt 45833 [ 430.226564][ T5862] memory+swap: usage 431236kB, limit 9007199254740988kB, failcnt 0 [ 430.286571][ T5862] kmem: usage 5628kB, limit 9007199254740988kB, failcnt 0 [ 430.336186][ T5862] Memory cgroup stats for /syz2: [ 430.336522][ T5862] cache 307544064 [ 430.379041][ T5862] rss 57344 [ 430.382202][ T5862] rss_huge 0 [ 430.385408][ T5862] shmem 307011584 [ 430.400225][ T5862] mapped_file 0 [ 430.403970][ T5862] dirty 8192 [ 430.407200][ T5862] writeback 0 [ 430.420652][ T5862] workingset_refault_anon 401 [ 430.425552][ T5862] workingset_refault_file 11731 [ 430.430594][ T5862] swap 127467520 [ 430.445107][ T5862] swapcached 212992 [ 430.449134][ T5862] pgpgin 454020 [ 430.466596][ T5862] pgpgout 383537 [ 430.470325][ T5862] pgfault 327460 [ 430.484511][ T5862] pgmajfault 3029 [ 430.488347][ T5862] inactive_anon 296660992 [ 430.492864][ T5862] active_anon 10600448 [ 430.509926][ T5862] inactive_file 0 [ 430.513693][ T5862] active_file 532480 [ 430.531450][ T5862] unevictable 0 [ 430.534951][ T5862] hierarchical_memory_limit 314572800 [ 430.559261][ T5862] hierarchical_memsw_limit 9223372036854771712 [ 430.570154][ T5862] total_cache 307544064 [ 430.574520][ T5862] total_rss 57344 [ 430.591330][ T5862] total_rss_huge 0 [ 430.602187][ T5862] total_shmem 307011584 [ 430.617128][ T5862] total_mapped_file 0 [ 430.632126][ T5862] total_dirty 8192 [ 430.644845][ T5862] total_writeback 0 [ 430.657810][ T5862] total_workingset_refault_anon 401 [ 430.676956][ T5862] total_workingset_refault_file 11731 [ 430.682367][ T5862] total_swap 127467520 [ 430.715360][ T5862] total_swapcached 212992 [ 430.731541][ T5862] total_pgpgin 454020 [ 430.736018][ T5862] total_pgpgout 383537 [ 430.752920][ T5862] total_pgfault 327460 [ 430.757338][ T5862] total_pgmajfault 3029 [ 430.761514][ T5862] total_inactive_anon 296660992 [ 430.826685][ T5862] total_active_anon 10600448 [ 430.831323][ T5862] total_inactive_file 0 [ 430.835559][ T5862] total_active_file 532480 [ 430.840182][ T5862] total_unevictable 0 [ 430.844179][ T5862] anon_cost 0 [ 430.847659][ T5862] file_cost 0 [ 430.869217][ T5862] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=/,mems_allowed=0-1,oom_memcg=/syz2,task_memcg=/syz2,task=syz.2.2507,pid=14612,uid=0 [ 430.923511][ T5862] Memory cgroup out of memory: OOM victim 14612 (syz.2.2507) is already exiting. Skip killing the task [ 431.086773][T14630] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 431.097760][T14630] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 431.107405][T14630] /dev/rnullb0: Can't open blockdev [ 431.130723][T14623] fuse: Bad value for 'user_id' [ 431.138249][T14623] fuse: Bad value for 'user_id' [ 431.193799][T14631] /dev/sg0: Can't lookup blockdev [ 431.784544][T14638] syz.2.2515 invoked oom-killer: gfp_mask=0xcc0(GFP_KERNEL), order=0, oom_score_adj=1000 [ 431.812633][T14638] CPU: 0 UID: 0 PID: 14638 Comm: syz.2.2515 Not tainted syzkaller #0 PREEMPT(full) [ 431.812661][T14638] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 431.812673][T14638] Call Trace: [ 431.812679][T14638] [ 431.812687][T14638] dump_stack_lvl+0x189/0x250 [ 431.812717][T14638] ? __pfx_dump_stack_lvl+0x10/0x10 [ 431.812741][T14638] ? __pfx__printk+0x10/0x10 [ 431.812768][T14638] ? rcu_is_watching+0x15/0xb0 [ 431.812790][T14638] dump_header+0xd3/0x480 [ 431.812809][T14638] oom_kill_process+0x387/0x920 [ 431.812831][T14638] out_of_memory+0xf09/0x12a0 [ 431.812854][T14638] ? rcu_is_watching+0x15/0xb0 [ 431.812875][T14638] ? __pfx_out_of_memory+0x10/0x10 [ 431.812892][T14638] ? percpu_ref_put+0x19/0x180 [ 431.812909][T14638] ? lock_release+0x4b/0x3e0 [ 431.812929][T14638] mem_cgroup_out_of_memory+0x145/0x240 [ 431.812950][T14638] ? __pfx_mem_cgroup_out_of_memory+0x10/0x10 [ 431.812974][T14638] ? _raw_spin_unlock+0x28/0x50 [ 431.813008][T14638] ? memcg1_oom_prepare+0x37f/0x450 [ 431.813033][T14638] try_charge_memcg+0xdff/0x1290 [ 431.813056][T14638] ? rcu_is_watching+0x15/0xb0 [ 431.813081][T14638] ? __pfx_try_charge_memcg+0x10/0x10 [ 431.813106][T14638] ? get_mem_cgroup_from_mm+0x38/0x2a0 [ 431.813126][T14638] ? rcu_is_watching+0x15/0xb0 [ 431.813150][T14638] ? get_mem_cgroup_from_mm+0x38/0x2a0 [ 431.813170][T14638] ? lock_release+0x4b/0x3e0 [ 431.813186][T14638] ? percpu_ref_tryget+0x15/0x180 [ 431.813201][T14638] ? percpu_ref_tryget+0x15/0x180 [ 431.813217][T14638] charge_memcg+0x9f/0x180 [ 431.813257][T14638] __mem_cgroup_charge+0x25/0x80 [ 431.813288][T14638] shmem_alloc_and_add_folio+0x7c1/0xf60 [ 431.813315][T14638] ? filemap_get_entry+0xad/0x2f0 [ 431.813334][T14638] ? filemap_get_entry+0xad/0x2f0 [ 431.813353][T14638] ? shmem_huge_global_enabled+0x174/0x3a0 [ 431.813374][T14638] ? __pfx_shmem_alloc_and_add_folio+0x10/0x10 [ 431.813400][T14638] ? shmem_allowable_huge_orders+0x4c6/0x4f0 [ 431.813422][T14638] shmem_get_folio_gfp+0x59d/0x1660 [ 431.813451][T14638] shmem_fault+0x179/0x390 [ 431.813469][T14638] __do_fault+0x138/0x390 [ 431.813487][T14638] __handle_mm_fault+0x35e3/0x5400 [ 431.813515][T14638] ? __pfx___handle_mm_fault+0x10/0x10 [ 431.813541][T14638] ? rcu_is_watching+0x15/0xb0 [ 431.813571][T14638] ? follow_page_pte+0x7ef/0x13e0 [ 431.813598][T14638] handle_mm_fault+0x40a/0x8e0 [ 431.813626][T14638] __get_user_pages+0x1699/0x2ce0 [ 431.813661][T14638] populate_vma_page_range+0x29f/0x3a0 [ 431.813686][T14638] ? __pfx_populate_vma_page_range+0x10/0x10 [ 431.813713][T14638] ? userfaultfd_unmap_complete+0x278/0x2d0 [ 431.813734][T14638] ? down_read+0x1ad/0x2e0 [ 431.813751][T14638] __mm_populate+0x24c/0x380 [ 431.813774][T14638] ? __pfx___mm_populate+0x10/0x10 [ 431.813795][T14638] ? up_write+0x1c4/0x420 [ 431.813818][T14638] vm_mmap_pgoff+0x387/0x4d0 [ 431.813838][T14638] ? __se_sys_futex+0x36f/0x400 [ 431.813862][T14638] ? __pfx_vm_mmap_pgoff+0x10/0x10 [ 431.813886][T14638] ? ksys_mmap_pgoff+0xf4/0x760 [ 431.813908][T14638] ? __x64_sys_mmap+0x7f/0x140 [ 431.813930][T14638] do_syscall_64+0xfa/0xfa0 [ 431.813952][T14638] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 431.813969][T14638] ? clear_bhb_loop+0x60/0xb0 [ 431.813987][T14638] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 431.814004][T14638] RIP: 0033:0x7fa16db8ebe9 [ 431.814021][T14638] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 431.814036][T14638] RSP: 002b:00007fa16e98b038 EFLAGS: 00000246 ORIG_RAX: 0000000000000009 [ 431.814053][T14638] RAX: ffffffffffffffda RBX: 00007fa16ddb5fa0 RCX: 00007fa16db8ebe9 [ 431.814065][T14638] RDX: 0000000000000003 RSI: 0000000000b36000 RDI: 0000200000000000 [ 431.814076][T14638] RBP: 00007fa16dc11e19 R08: ffffffffffffffff R09: 0000000000000000 [ 431.814089][T14638] R10: 0000000000008031 R11: 0000000000000246 R12: 0000000000000000 [ 431.814117][T14638] R13: 00007fa16ddb6038 R14: 00007fa16ddb5fa0 R15: 00007ffcb0fa59c8 [ 431.814143][T14638] [ 432.219542][ C0] vkms_vblank_simulate: vblank timer overrun [ 432.228024][T14638] memory: usage 307200kB, limit 307200kB, failcnt 46067 [ 432.236644][T14638] memory+swap: usage 431680kB, limit 9007199254740988kB, failcnt 0 [ 432.245276][T14638] kmem: usage 5760kB, limit 9007199254740988kB, failcnt 0 [ 432.253575][T14638] Memory cgroup stats for /syz2: [ 432.253695][T14638] cache 308289536 [ 432.262736][T14638] rss 192512 [ 432.266026][T14638] rss_huge 0 [ 432.269369][T14638] shmem 308289536 [ 432.273960][T14638] mapped_file 1277952 [ 432.277982][T14638] dirty 0 [ 432.281166][T14638] writeback 0 [ 432.284724][T14638] workingset_refault_anon 401 [ 432.289497][T14638] workingset_refault_file 11731 [ 432.294413][T14638] swap 127467520 [ 432.298445][T14638] swapcached 212992 [ 432.302498][T14638] pgpgin 454428 [ 432.306325][T14638] pgpgout 383730 [ 432.310018][T14638] pgfault 328043 [ 432.313102][T14640] /dev/rnullb0: Can't open blockdev [ 432.313616][T14638] pgmajfault 3029 [ 432.322420][T14638] inactive_anon 297320448 [ 432.327191][T14638] active_anon 11354112 [ 432.331452][T14638] inactive_file 0 [ 432.335360][T14638] active_file 0 [ 432.338828][T14638] unevictable 0 [ 432.342624][T14638] hierarchical_memory_limit 314572800 [ 432.348490][T14638] hierarchical_memsw_limit 9223372036854771712 [ 432.355225][T14638] total_cache 308289536 [ 432.360494][T14638] total_rss 192512 [ 432.364356][T14638] total_rss_huge 0 [ 432.368695][T14638] total_shmem 308289536 [ 432.373202][T14638] total_mapped_file 1277952 [ 432.377858][T14638] total_dirty 0 [ 432.381414][T14638] total_writeback 0 [ 432.386033][T14638] total_workingset_refault_anon 401 [ 432.394008][T14638] total_workingset_refault_file 11731 [ 432.402620][T14638] total_swap 127467520 [ 432.407115][T14638] total_swapcached 212992 [ 432.411886][T14638] total_pgpgin 454428 [ 432.416287][T14638] total_pgpgout 383730 [ 432.421056][T14638] total_pgfault 328043 [ 432.425322][T14638] total_pgmajfault 3029 [ 432.429669][T14638] total_inactive_anon 297320448 [ 432.434554][T14642] sp0: Synchronizing with TNC [ 432.439278][T14638] total_active_anon 11354112 [ 432.439294][T14638] total_inactive_file 0 [ 432.439300][T14638] total_active_file 0 [ 432.439307][T14638] total_unevictable 0 [ 432.439314][T14638] anon_cost 0 [ 432.439320][T14638] file_cost 0 [ 432.454924][T14644] /dev/rnullb0: Can't open blockdev [ 432.457583][T14638] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=/,mems_allowed=0-1,oom_memcg=/syz2,task_memcg=/syz2,task=syz.2.2515,pid=14637,uid=0 [ 432.486230][T14638] Memory cgroup out of memory: Killed process 14637 (syz.2.2515) total-vm:101828kB, anon-rss:1080kB, file-rss:23592kB, shmem-rss:1152kB, UID:0 pgtables:128kB oom_score_adj:1000 [ 432.512857][T14644] 9p: Unknown parameter 'fsuuid' [ 432.601537][T14648] sp0: Synchronizing with TNC [ 432.613569][T14650] netlink: 9896 bytes leftover after parsing attributes in process `syz.3.2521'. [ 432.623974][T14650] /dev/rnullb0: Can't open blockdev [ 432.626152][T14648] trusted_key: encrypted_key: keyword 'update' not allowed when called from .instantiate method [ 432.759425][T14659] netlink: 16 bytes leftover after parsing attributes in process `syz.2.2523'. [ 432.778582][T14661] netlink: 300 bytes leftover after parsing attributes in process `syz.5.2524'. [ 432.961700][T14672] netlink: 830 bytes leftover after parsing attributes in process `syz.2.2526'. [ 432.996342][T14672] /dev/rnullb0: Can't open blockdev [ 433.143409][T14677] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 433.183194][T14677] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 433.358199][T14685] netlink: 'syz.5.2530': attribute type 10 has an invalid length. [ 433.380893][T14685] veth0_vlan: left promiscuous mode [ 433.389509][T14685] veth0_vlan: entered promiscuous mode [ 433.401832][T14685] team0: Device veth0_vlan failed to register rx_handler [ 433.640781][T14690] tmpfs: Bad value for 'mpol' [ 433.798993][T14698] /dev/rnullb0: Can't open blockdev [ 433.821492][T11286] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 433.880842][T14704] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2537'. [ 433.899906][T14704] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2537'. [ 434.246031][T14736] overlayfs: failed to resolve './file1': -2 [ 434.506403][ T36] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 434.760615][ T5187] Bluetooth: hci2: command tx timeout [ 435.337089][T14746] syz.2.2549 invoked oom-killer: gfp_mask=0xcc0(GFP_KERNEL), order=0, oom_score_adj=1000 [ 435.351439][T14746] CPU: 1 UID: 0 PID: 14746 Comm: syz.2.2549 Not tainted syzkaller #0 PREEMPT(full) [ 435.351464][T14746] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 435.351475][T14746] Call Trace: [ 435.351482][T14746] [ 435.351490][T14746] dump_stack_lvl+0x189/0x250 [ 435.351520][T14746] ? __pfx_dump_stack_lvl+0x10/0x10 [ 435.351543][T14746] ? __pfx__printk+0x10/0x10 [ 435.351567][T14746] ? rcu_is_watching+0x15/0xb0 [ 435.351588][T14746] dump_header+0xd3/0x480 [ 435.351605][T14746] oom_kill_process+0x387/0x920 [ 435.351626][T14746] out_of_memory+0xf09/0x12a0 [ 435.351645][T14746] ? rcu_is_watching+0x15/0xb0 [ 435.351663][T14746] ? __pfx_out_of_memory+0x10/0x10 [ 435.351679][T14746] ? percpu_ref_put+0x19/0x180 [ 435.351697][T14746] ? lock_release+0x4b/0x3e0 [ 435.351716][T14746] mem_cgroup_out_of_memory+0x145/0x240 [ 435.351736][T14746] ? __pfx_mem_cgroup_out_of_memory+0x10/0x10 [ 435.351757][T14746] ? _raw_spin_unlock+0x28/0x50 [ 435.351776][T14746] ? memcg1_oom_prepare+0x37f/0x450 [ 435.351799][T14746] try_charge_memcg+0xdff/0x1290 [ 435.351826][T14746] ? __pfx_try_charge_memcg+0x10/0x10 [ 435.351849][T14746] ? get_mem_cgroup_from_mm+0x38/0x2a0 [ 435.351868][T14746] ? rcu_is_watching+0x15/0xb0 [ 435.351885][T14746] ? lock_release+0x4b/0x3e0 [ 435.351901][T14746] ? percpu_ref_tryget+0x15/0x180 [ 435.351917][T14746] charge_memcg+0x9f/0x180 [ 435.351949][T14746] __mem_cgroup_charge+0x25/0x80 [ 435.351971][T14746] folio_prealloc+0x51/0x180 [ 435.351988][T14746] __handle_mm_fault+0x2a8b/0x5400 [ 435.352017][T14746] ? __pfx___handle_mm_fault+0x10/0x10 [ 435.352041][T14746] ? rcu_is_watching+0x15/0xb0 [ 435.352063][T14746] ? follow_page_pte+0x7ef/0x13e0 [ 435.352088][T14746] handle_mm_fault+0x40a/0x8e0 [ 435.352114][T14746] __get_user_pages+0x1699/0x2ce0 [ 435.352147][T14746] populate_vma_page_range+0x29f/0x3a0 [ 435.352169][T14746] ? __pfx_populate_vma_page_range+0x10/0x10 [ 435.352189][T14746] ? apply_vma_lock_flags+0x344/0x3c0 [ 435.352212][T14746] ? down_read+0x1ad/0x2e0 [ 435.352227][T14746] __mm_populate+0x24c/0x380 [ 435.352248][T14746] ? __pfx___mm_populate+0x10/0x10 [ 435.352269][T14746] ? up_write+0x1c4/0x420 [ 435.352288][T14746] do_mlock+0x625/0x740 [ 435.352310][T14746] ? __pfx_do_mlock+0x10/0x10 [ 435.352330][T14746] ? rcu_is_watching+0x15/0xb0 [ 435.352349][T14746] __x64_sys_mlock+0x60/0x70 [ 435.352365][T14746] do_syscall_64+0xfa/0xfa0 [ 435.352387][T14746] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 435.352404][T14746] ? clear_bhb_loop+0x60/0xb0 [ 435.352423][T14746] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 435.352439][T14746] RIP: 0033:0x7fa16db8ebe9 [ 435.352454][T14746] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 435.352473][T14746] RSP: 002b:00007fa16e98b038 EFLAGS: 00000246 ORIG_RAX: 0000000000000095 [ 435.352492][T14746] RAX: ffffffffffffffda RBX: 00007fa16ddb5fa0 RCX: 00007fa16db8ebe9 [ 435.352505][T14746] RDX: 0000000000000000 RSI: 0000000000800000 RDI: 0000200000000000 [ 435.352517][T14746] RBP: 00007fa16dc11e19 R08: 0000000000000000 R09: 0000000000000000 [ 435.352527][T14746] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 435.352538][T14746] R13: 00007fa16ddb6038 R14: 00007fa16ddb5fa0 R15: 00007ffcb0fa59c8 [ 435.352556][T14746] [ 435.352676][T14746] memory: usage 307200kB, limit 307200kB, failcnt 46260 [ 435.699369][T14746] memory+swap: usage 431680kB, limit 9007199254740988kB, failcnt 0 [ 435.710556][T14746] kmem: usage 5496kB, limit 9007199254740988kB, failcnt 0 [ 435.718211][T14746] Memory cgroup stats for /syz2: [ 435.718373][T14746] cache 307011584 [ 435.727981][T14746] rss 1720320 [ 435.731340][T14746] rss_huge 0 [ 435.734832][T14746] shmem 307011584 [ 435.738469][T14746] mapped_file 0 [ 435.741983][T14746] dirty 0 [ 435.745095][T14746] writeback 0 [ 435.748385][T14746] workingset_refault_anon 401 [ 435.753354][T14746] workingset_refault_file 11732 [ 435.759455][T14746] swap 127467520 [ 435.763119][T14746] swapcached 212992 [ 435.767219][T14746] pgpgin 455950 [ 435.770715][T14746] pgpgout 385191 [ 435.774415][T14746] pgfault 329743 [ 435.778622][T14746] pgmajfault 3030 [ 435.782672][T14746] inactive_anon 10739712 [ 435.787529][T14746] active_anon 296660992 [ 435.791836][T14746] inactive_file 0 [ 435.795482][T14746] active_file 0 [ 435.799654][T14746] unevictable 1523712 [ 435.803785][T14746] hierarchical_memory_limit 314572800 [ 435.809291][T14746] hierarchical_memsw_limit 9223372036854771712 [ 435.815659][T14746] total_cache 307011584 [ 435.820868][T14746] total_rss 1720320 [ 435.824731][T14746] total_rss_huge 0 [ 435.828865][T14746] total_shmem 307011584 [ 435.833306][T14746] total_mapped_file 0 [ 435.837376][T14746] total_dirty 0 [ 435.840010][ T5885] usb 5-1: new high-speed USB device number 41 using dummy_hcd [ 435.840869][T14746] total_writeback 0 [ 435.852326][T14746] total_workingset_refault_anon 401 [ 435.857774][T14746] total_workingset_refault_file 11732 [ 435.863501][T14746] total_swap 127467520 [ 435.867885][T14746] total_swapcached 212992 [ 435.872503][T14746] total_pgpgin 455950 [ 435.876518][T14746] total_pgpgout 385191 [ 435.880748][T14746] total_pgfault 329743 [ 435.885208][T14746] total_pgmajfault 3030 [ 435.889529][T14746] total_inactive_anon 10739712 [ 435.894420][T14746] total_active_anon 296660992 [ 435.899238][T14746] total_inactive_file 0 [ 435.903468][T14746] total_active_file 0 [ 435.907606][T14746] total_unevictable 1523712 [ 435.912108][T14746] anon_cost 0 [ 435.915486][T14746] file_cost 0 [ 435.918866][T14746] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=/,mems_allowed=0-1,oom_memcg=/syz2,task_memcg=/syz2,task=syz.2.2549,pid=14745,uid=0 [ 435.934177][T14746] Memory cgroup out of memory: Killed process 14745 (syz.2.2549) total-vm:101828kB, anon-rss:2616kB, file-rss:23208kB, shmem-rss:0kB, UID:0 pgtables:128kB oom_score_adj:1000 [ 435.956166][ T10] usb 4-1: new full-speed USB device number 123 using dummy_hcd [ 436.039830][T14776] /dev/rnullb0: Can't open blockdev [ 436.048714][ T5885] usb 5-1: config 0 interface 0 altsetting 7 endpoint 0x81 has invalid wMaxPacketSize 0 [ 436.059811][ T5885] usb 5-1: config 0 interface 0 has no altsetting 0 [ 436.068266][ T5885] usb 5-1: New USB device found, idVendor=05ac, idProduct=0269, bcdDevice= 0.00 [ 436.077912][ T5885] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 436.087936][ T5885] usb 5-1: config 0 descriptor?? [ 436.117351][T14778] netlink: 24 bytes leftover after parsing attributes in process `syz.2.2560'. [ 436.129390][ T10] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 436.140980][ T10] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 512, setting to 64 [ 436.155526][ T10] usb 4-1: New USB device found, idVendor=22d4, idProduct=1503, bcdDevice= 0.00 [ 436.165262][ T10] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 436.175497][ T10] usb 4-1: config 0 descriptor?? [ 436.182482][T14767] raw-gadget.2 gadget.3: fail, usb_ep_enable returned -22 [ 436.220504][T14778] syz.2.2560 invoked oom-killer: gfp_mask=0x100cc0(GFP_USER), order=0, oom_score_adj=1000 [ 436.230797][T14778] CPU: 0 UID: 0 PID: 14778 Comm: syz.2.2560 Not tainted syzkaller #0 PREEMPT(full) [ 436.230826][T14778] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 436.230837][T14778] Call Trace: [ 436.230844][T14778] [ 436.230851][T14778] dump_stack_lvl+0x189/0x250 [ 436.230880][T14778] ? __pfx_dump_stack_lvl+0x10/0x10 [ 436.230900][T14778] ? __pfx__printk+0x10/0x10 [ 436.230923][T14778] ? rcu_is_watching+0x15/0xb0 [ 436.230940][T14778] dump_header+0xd3/0x480 [ 436.230953][T14778] oom_kill_process+0x387/0x920 [ 436.230969][T14778] out_of_memory+0xf09/0x12a0 [ 436.230984][T14778] ? rcu_is_watching+0x15/0xb0 [ 436.230998][T14778] ? __pfx_out_of_memory+0x10/0x10 [ 436.231010][T14778] ? percpu_ref_put+0x19/0x180 [ 436.231024][T14778] ? lock_release+0x4b/0x3e0 [ 436.231041][T14778] mem_cgroup_out_of_memory+0x145/0x240 [ 436.231058][T14778] ? __pfx_mem_cgroup_out_of_memory+0x10/0x10 [ 436.231078][T14778] ? _raw_spin_unlock+0x28/0x50 [ 436.231096][T14778] ? memcg1_oom_prepare+0x37f/0x450 [ 436.231116][T14778] try_charge_memcg+0xdff/0x1290 [ 436.231146][T14778] ? __pfx_try_charge_memcg+0x10/0x10 [ 436.231167][T14778] ? get_mem_cgroup_from_mm+0x38/0x2a0 [ 436.231197][T14778] ? rcu_is_watching+0x15/0xb0 [ 436.231212][T14778] ? get_mem_cgroup_from_mm+0x38/0x2a0 [ 436.231230][T14778] ? lock_release+0x4b/0x3e0 [ 436.231244][T14778] ? percpu_ref_tryget+0x15/0x180 [ 436.231257][T14778] ? percpu_ref_tryget+0x15/0x180 [ 436.231274][T14778] charge_memcg+0x9f/0x180 [ 436.231295][T14778] __mem_cgroup_charge+0x25/0x80 [ 436.231316][T14778] filemap_add_folio+0x49/0x270 [ 436.231335][T14778] __filemap_get_folio+0x4f6/0xaf0 [ 436.231356][T14778] filemap_fault+0x94c/0x12b0 [ 436.231378][T14778] ? __pfx_filemap_fault+0x10/0x10 [ 436.231397][T14778] ? __pfx_filemap_map_pages+0x10/0x10 [ 436.231415][T14778] ? rcu_is_watching+0x15/0xb0 [ 436.231432][T14778] ? __handle_mm_fault+0x2789/0x5400 [ 436.231453][T14778] ? rcu_is_watching+0x15/0xb0 [ 436.231469][T14778] ? __handle_mm_fault+0x2789/0x5400 [ 436.231492][T14778] __do_fault+0x138/0x390 [ 436.231509][T14778] __handle_mm_fault+0x35e3/0x5400 [ 436.231535][T14778] ? __pfx___handle_mm_fault+0x10/0x10 [ 436.231555][T14778] ? rcu_is_watching+0x15/0xb0 [ 436.231576][T14778] ? follow_page_pte+0x7ef/0x13e0 [ 436.231602][T14778] handle_mm_fault+0x40a/0x8e0 [ 436.231627][T14778] __get_user_pages+0x1699/0x2ce0 [ 436.231660][T14778] populate_vma_page_range+0x29f/0x3a0 [ 436.231682][T14778] ? __pfx_populate_vma_page_range+0x10/0x10 [ 436.231702][T14778] ? userfaultfd_unmap_complete+0x278/0x2d0 [ 436.231721][T14778] ? down_read+0x1ad/0x2e0 [ 436.231734][T14778] __mm_populate+0x24c/0x380 [ 436.231754][T14778] ? __pfx___mm_populate+0x10/0x10 [ 436.231771][T14778] ? up_write+0x1c4/0x420 [ 436.231791][T14778] vm_mmap_pgoff+0x387/0x4d0 [ 436.231813][T14778] ? __pfx_vm_mmap_pgoff+0x10/0x10 [ 436.231832][T14778] ? lock_release+0x4b/0x3e0 [ 436.231847][T14778] ? __se_sys_futex+0x36f/0x400 [ 436.231870][T14778] ? __fget_files+0x2a/0x420 [ 436.231889][T14778] ? __fget_files+0x2a/0x420 [ 436.231908][T14778] ksys_mmap_pgoff+0x51f/0x760 [ 436.231931][T14778] do_syscall_64+0xfa/0xfa0 [ 436.231951][T14778] ? rcu_is_watching+0x15/0xb0 [ 436.231969][T14778] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 436.231985][T14778] ? clear_bhb_loop+0x60/0xb0 [ 436.232005][T14778] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 436.232021][T14778] RIP: 0033:0x7fa16db8ebe9 [ 436.232038][T14778] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 436.232053][T14778] RSP: 002b:00007fa16e98b038 EFLAGS: 00000246 ORIG_RAX: 0000000000000009 [ 436.232073][T14778] RAX: ffffffffffffffda RBX: 00007fa16ddb5fa0 RCX: 00007fa16db8ebe9 [ 436.232086][T14778] RDX: 0000000003000001 RSI: 0000000000b36000 RDI: 0000200000000000 [ 436.232097][T14778] RBP: 00007fa16dc11e19 R08: 0000000000000003 R09: 0000000000002000 [ 436.232108][T14778] R10: 0000000000022052 R11: 0000000000000246 R12: 0000000000000000 [ 436.232119][T14778] R13: 00007fa16ddb6038 R14: 00007fa16ddb5fa0 R15: 00007ffcb0fa59c8 [ 436.232138][T14778] [ 436.232179][T14778] memory: usage 307200kB, limit 307200kB, failcnt 46356 [ 436.643396][T14767] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 436.656886][ T5885] hid_parser_main: 6 callbacks suppressed [ 436.656906][ T5885] magicmouse 0003:05AC:0269.0019: unknown main item tag 0x3 [ 436.667225][T14778] memory+swap: usage 431680kB, limit 9007199254740988kB, failcnt 0 [ 436.673939][T14767] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 436.699145][T14778] kmem: usage 5552kB, limit 9007199254740988kB, failcnt 0 [ 436.703226][ T5885] magicmouse 0003:05AC:0269.0019: unknown main item tag 0x7 [ 436.711600][T14778] Memory cgroup stats for /syz2: [ 436.714045][T14778] cache 308568064 [ 436.720107][ T5885] magicmouse 0003:05AC:0269.0019: hidraw0: USB HID v10.00 Device [HID 05ac:0269] on usb-dummy_hcd.4-1/input0 [ 436.746167][T14778] rss 126976 [ 436.749329][ T10] glorious 0003:22D4:1503.001A: item fetching failed at offset 6/7 [ 436.752772][T14778] rss_huge 0 [ 436.758240][ T10] glorious 0003:22D4:1503.001A: probe with driver glorious failed with error -22 [ 436.767451][T14778] shmem 307011584 [ 436.774703][T14778] mapped_file 1556480 [ 436.778695][T14778] dirty 0 [ 436.787506][T14778] writeback 0 [ 436.800195][T14778] workingset_refault_anon 401 [ 436.813101][T14778] workingset_refault_file 11735 [ 436.818078][T14778] swap 127467520 [ 436.821730][T14778] swapcached 212992 [ 436.831045][T14778] pgpgin 456161 [ 436.836759][T14778] pgpgout 385717 [ 436.840405][T14778] pgfault 330229 [ 436.844065][T14778] pgmajfault 3038 [ 436.849783][T14778] inactive_anon 10670080 [ 436.854210][T14778] active_anon 296660992 [ 436.858544][T14778] inactive_file 131072 [ 436.862824][T14778] active_file 0 [ 436.866969][T14778] unevictable 1425408 [ 436.872091][T14778] hierarchical_memory_limit 314572800 [ 436.877783][T14778] hierarchical_memsw_limit 9223372036854771712 [ 436.884032][T14778] total_cache 308568064 [ 436.888548][T14778] total_rss 126976 [ 436.892280][T14778] total_rss_huge 0 [ 436.896177][T14778] total_shmem 307011584 [ 436.902189][T14778] total_mapped_file 1556480 [ 436.906858][T14778] total_dirty 0 [ 436.912187][T14778] total_writeback 0 [ 436.916297][T14778] total_workingset_refault_anon 401 [ 436.923547][T14778] total_workingset_refault_file 11735 [ 436.929028][T14778] total_swap 127467520 [ 436.933486][T14778] total_swapcached 212992 [ 436.938207][T14778] total_pgpgin 456161 [ 436.943527][T14778] total_pgpgout 385717 [ 436.947784][T14778] total_pgfault 330229 [ 436.952428][T14764] block nbd4: NBD_DISCONNECT [ 436.953923][T14778] total_pgmajfault 3038 [ 436.959945][T14764] block nbd4: Disconnected due to user request. [ 436.964365][ T30] audit: type=1400 audit(2000000471.114:123): apparmor="DENIED" operation="change_profile" class="file" info="label not found" error=-2 profile="unconfined" name=26263AEFC98B6C339EC19B53DA18B1B311B03A189D6AB8FAD1CE069AD2426A4B8A074F3876C56B31E21305708B15C88BAA23ED4B6772D3D0AFFDF7B41AEFCE5591D1B2C8E02C1E535DF75650BF17AA6A8F3CDE2E2582E2693FBC8FB77067 pid=14763 comm="syz.4.2555" [ 436.969008][ T48] usb 5-1: USB disconnect, device number 41 [ 437.005258][T14778] total_inactive_anon 10670080 [ 437.011485][T14764] block nbd4: shutting down sockets [ 437.032736][T14778] total_active_anon 296660992 [ 437.041949][T14778] total_inactive_file 131072 [ 437.046755][T14778] total_active_file 0 [ 437.051030][T14778] total_unevictable 1425408 [ 437.056048][T14778] anon_cost 0 [ 437.061290][T14778] file_cost 0 [ 437.064739][T14778] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=/,mems_allowed=0-1,oom_memcg=/syz2,task_memcg=/syz2,task=syz.2.2560,pid=14777,uid=0 [ 437.086115][T14778] Memory cgroup out of memory: Killed process 14777 (syz.2.2560) total-vm:98120kB, anon-rss:952kB, file-rss:30176kB, shmem-rss:0kB, UID:0 pgtables:128kB oom_score_adj:1000 [ 437.196678][ T5885] usb 4-1: USB disconnect, device number 123 [ 437.637838][ T5885] usb 3-1: USB disconnect, device number 71 [ 437.691514][ T5864] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 437.699096][ T5864] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 437.706728][ T5864] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 437.714682][ T5864] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 437.722908][ T5864] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 437.859507][T14808] /dev/rnullb0: Can't open blockdev [ 438.654967][T14804] chnl_net:caif_netlink_parms(): no params data found [ 438.783605][T14830] /dev/rnullb0: Can't open blockdev [ 438.825519][T14804] bridge0: port 1(bridge_slave_0) entered blocking state [ 438.832720][T14804] bridge0: port 1(bridge_slave_0) entered disabled state [ 438.880623][T14804] bridge_slave_0: entered allmulticast mode [ 438.901574][T14804] bridge_slave_0: entered promiscuous mode [ 438.922253][T14804] bridge0: port 2(bridge_slave_1) entered blocking state [ 438.954719][T14804] bridge0: port 2(bridge_slave_1) entered disabled state [ 438.968583][T14804] bridge_slave_1: entered allmulticast mode [ 438.978068][T14804] bridge_slave_1: entered promiscuous mode [ 439.010280][T14804] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 439.042013][T14804] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 439.084829][T14837] /dev/rnullb0: Can't open blockdev [ 439.094200][T14804] team0: Port device team_slave_0 added [ 439.113204][T14804] team0: Port device team_slave_1 added [ 439.161508][T14804] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 439.180667][T14804] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 439.219203][T14804] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 439.263142][T14804] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 439.275563][T14804] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 439.310918][T14804] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 439.327363][ T48] usb 5-1: new high-speed USB device number 42 using dummy_hcd [ 439.383148][T14804] hsr_slave_0: entered promiscuous mode [ 439.394050][T14804] hsr_slave_1: entered promiscuous mode [ 439.506414][ T48] usb 5-1: Using ep0 maxpacket: 8 [ 439.521795][ T48] usb 5-1: config 0 has no interfaces? [ 439.529591][ T48] usb 5-1: New USB device found, idVendor=0582, idProduct=e6ca, bcdDevice=d3.0b [ 439.539351][ T48] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 439.547644][ T48] usb 5-1: Product: syz [ 439.548811][T14804] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 439.552598][ T48] usb 5-1: Manufacturer: syz [ 439.567821][ T48] usb 5-1: SerialNumber: syz [ 439.576342][ T48] usb 5-1: config 0 descriptor?? [ 439.621708][T14804] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 439.698874][ T5885] usb 4-1: new high-speed USB device number 124 using dummy_hcd [ 439.714476][T14804] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 439.814270][T14804] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 439.817065][T14834] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 439.836762][T14834] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 439.874291][ T5885] usb 4-1: config 4 has 1 interface, different from the descriptor's value: 2 [ 439.884070][ T5885] usb 4-1: too many endpoints for config 4 interface 0 altsetting 0: 101, using maximum allowed: 30 [ 439.897037][ T5187] Bluetooth: hci1: command tx timeout [ 439.898497][T14804] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 439.911892][ T5885] usb 4-1: config 4 interface 0 altsetting 0 has an endpoint descriptor with address 0xE7, changing to 0x87 [ 439.916316][T14804] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 439.936143][ T5885] usb 4-1: config 4 interface 0 altsetting 0 endpoint 0x87 has an invalid bInterval 0, changing to 7 [ 439.947768][ T5885] usb 4-1: config 4 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 101 [ 439.961451][ T5885] usb 4-1: New USB device found, idVendor=0cf3, idProduct=9374, bcdDevice=bc.3b [ 439.971167][ T5885] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 439.974054][T14804] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 439.987087][T13544] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 440.017794][T14804] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 440.034201][T14834] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 440.050297][T14834] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 440.128967][ T10] usb 5-1: USB disconnect, device number 42 [ 440.186394][T14804] 8021q: adding VLAN 0 to HW filter on device bond0 [ 440.208280][T14804] 8021q: adding VLAN 0 to HW filter on device team0 [ 440.230091][ T5885] ath6kl: Failed to submit usb control message: -71 [ 440.240580][ T5885] ath6kl: unable to send the bmi data to the device: -71 [ 440.254026][ T5885] ath6kl: Unable to send get target info: -71 [ 440.268357][T13542] bridge0: port 1(bridge_slave_0) entered blocking state [ 440.276027][T13542] bridge0: port 1(bridge_slave_0) entered forwarding state [ 440.291368][ T5885] ath6kl: Failed to init ath6kl core: -71 [ 440.298593][ T5885] ath6kl_usb 4-1:4.0: probe with driver ath6kl_usb failed with error -71 [ 440.317501][T11284] bridge0: port 2(bridge_slave_1) entered blocking state [ 440.319152][ T5885] usb 4-1: USB disconnect, device number 124 [ 440.324942][T11284] bridge0: port 2(bridge_slave_1) entered forwarding state [ 440.386738][T13542] team0: left allmulticast mode [ 440.392173][T13542] team_slave_0: left allmulticast mode [ 440.402349][T13542] team_slave_1: left allmulticast mode [ 440.409452][T13542] bridge0: port 3(team0) entered disabled state [ 440.419391][T13542] bridge_slave_1: left allmulticast mode [ 440.425166][T13542] bridge_slave_1: left promiscuous mode [ 440.431426][T13542] bridge0: port 2(bridge_slave_1) entered disabled state [ 440.440545][T13542] bridge_slave_0: left allmulticast mode [ 440.446578][T13542] bridge_slave_0: left promiscuous mode [ 440.453613][T13542] bridge0: port 1(bridge_slave_0) entered disabled state [ 440.592878][T13542] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 440.613745][T13542] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 440.624493][T13542] bond0 (unregistering): Released all slaves [ 440.661327][T11285] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 440.674767][T14862] fuse: Unknown parameter '§çï00000000000000000000004ÿ00000000000000000000005' [ 440.713991][T14804] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 440.727052][T13542] tipc: Left network mode [ 440.786148][T14804] veth0_vlan: entered promiscuous mode [ 440.808447][T14804] veth1_vlan: entered promiscuous mode [ 440.918328][T14804] veth0_macvtap: entered promiscuous mode [ 440.938067][T13542] hsr_slave_0: left promiscuous mode [ 440.960399][T13542] hsr_slave_1: left promiscuous mode [ 441.003184][T13542] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 441.018489][T13542] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 441.056974][T13542] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 441.073086][T13542] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 441.114640][T13542] veth0_macvtap: left promiscuous mode [ 441.125086][T13542] veth1_vlan: left promiscuous mode [ 441.136280][T13542] veth0_vlan: left promiscuous mode [ 441.545840][T13542] team_slave_1 (unregistering): left promiscuous mode [ 441.553680][T13542] team0 (unregistering): Port device team_slave_1 removed [ 441.586066][T13542] team_slave_0 (unregistering): left promiscuous mode [ 441.606333][T13542] team0 (unregistering): Port device team_slave_0 removed [ 441.699668][T14885] /dev/rnullb0: Can't open blockdev [ 441.758433][T14804] veth1_macvtap: entered promiscuous mode [ 441.781292][T14804] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 441.818591][T14804] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 441.868393][ T1164] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 441.891806][ T1164] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 441.907353][ T1164] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 441.916669][ T1164] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 441.978275][T11285] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 441.990598][T11285] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 442.012747][T11285] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 442.023257][T11285] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 442.112083][T13542] IPVS: stop unused estimator thread 0... [ 442.125397][ T5864] Bluetooth: hci1: command tx timeout [ 442.131128][T14893] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 442.140568][T14893] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 442.161605][T14893] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 442.194295][T14893] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 442.348403][T14909] netlink: 84 bytes leftover after parsing attributes in process `syz.5.2596'. [ 442.359478][T14909] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 442.403189][ T48] usb 4-1: new high-speed USB device number 125 using dummy_hcd [ 442.575662][ T48] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 442.588807][ T48] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 442.599609][ T48] usb 4-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 442.613277][ T48] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 442.630115][ T48] usb 4-1: SerialNumber: syz [ 442.875279][ T48] usb 4-1: 0:2 : does not exist [ 442.917501][ T48] usb 4-1: USB disconnect, device number 125 [ 442.954527][ T9774] udevd[9774]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 443.325444][T14933] IPVS: set_ctl: invalid protocol: 0 0.0.0.0:0 [ 443.536441][ T48] usb 3-1: new high-speed USB device number 72 using dummy_hcd [ 443.696652][ T48] usb 3-1: Using ep0 maxpacket: 16 [ 443.703396][ T48] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 443.708780][T14952] ufs: failed to set blocksize [ 443.715476][ T48] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 443.730776][ T48] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 443.743955][ T48] usb 3-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 443.754002][ T48] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 443.766515][ T48] usb 3-1: config 0 descriptor?? [ 443.792962][ T10] usb 4-1: new high-speed USB device number 126 using dummy_hcd [ 443.965749][ T10] usb 4-1: Using ep0 maxpacket: 8 [ 443.969461][T14967] qnx4: no qnx4 filesystem (no root dir). [ 443.972367][ T10] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 443.990843][ T10] usb 4-1: config 1 interface 0 altsetting 129 has 0 endpoint descriptors, different from the interface descriptor's value: 3 [ 444.005389][ T10] usb 4-1: config 1 interface 0 has no altsetting 0 [ 444.021033][ T10] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 444.030606][T14969] vivid-004: ================= START STATUS ================= [ 444.031012][ T10] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 444.038562][T14969] vivid-004: RDS Tx I/O Mode: Controls [ 444.047776][ T10] usb 4-1: Product: syz [ 444.052488][T14969] vivid-004: RDS Program ID: 32904 [ 444.057103][ T10] usb 4-1: Manufacturer: syz [ 444.062003][T14969] vivid-004: RDS Program Type: 3 [ 444.068451][ T10] usb 4-1: SerialNumber: syz [ 444.072107][T14969] vivid-004: RDS PS Name: VIVID-TX [ 444.086165][T14969] vivid-004: RDS Radio Text: This is a VIVID default Radio Text template text, change at will [ 444.097523][T14969] vivid-004: RDS Stereo: true [ 444.102454][T14969] vivid-004: RDS Artificial Head: false [ 444.108779][T14969] vivid-004: RDS Compressed: false [ 444.114553][T14969] vivid-004: RDS Dynamic PTY: false [ 444.119896][T14969] vivid-004: RDS Traffic Announcement: false [ 444.126497][T14969] vivid-004: RDS Traffic Program: true [ 444.132142][T14969] vivid-004: RDS Music: true [ 444.137267][T14969] vivid-004: ================== END STATUS ================== [ 444.186214][T14973] vxfs: WRONG superblock magic 00000000 at 1 [ 444.193301][T14973] vxfs: WRONG superblock magic 00000000 at 8 [ 444.200497][T14973] vxfs: can't find superblock. [ 444.210587][T14931] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 444.225292][T14931] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 444.272963][T14931] Mount JFS Failure: -22 [ 444.282389][T14976] hfs: can't find a HFS filesystem on dev rnullb0 [ 444.285526][T14931] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 444.318117][T14931] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 444.349182][ T5864] Bluetooth: hci1: command 0x040f tx timeout [ 444.368634][ T48] usbhid 3-1:0.0: can't add hid device: -71 [ 444.391266][T14982] syzkaller1: entered promiscuous mode [ 444.397065][ T48] usbhid 3-1:0.0: probe with driver usbhid failed with error -71 [ 444.407054][T14985] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 444.412952][T14982] syzkaller1: entered allmulticast mode [ 444.428565][ T48] usb 3-1: USB disconnect, device number 72 [ 444.544808][ T10] usb 4-1: bad CDC descriptors [ 444.560134][ T10] usb 4-1: USB disconnect, device number 126 [ 445.098761][T15010] block nbd5: shutting down sockets [ 445.195210][T15014] /dev/rnullb0: Can't open blockdev [ 445.208664][T14980] Bluetooth: hci0: Opcode 0x0401 failed: -4 [ 445.535423][ T5953] usb 4-1: new high-speed USB device number 127 using dummy_hcd [ 445.536627][ T5906] usb 5-1: new high-speed USB device number 43 using dummy_hcd [ 445.684925][ T10] usb 3-1: new high-speed USB device number 73 using dummy_hcd [ 445.706282][ T5953] usb 4-1: Using ep0 maxpacket: 16 [ 445.713961][ T5953] usb 4-1: config 0 has no interfaces? [ 445.721601][ T5953] usb 4-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 445.727683][ T5906] usb 5-1: Using ep0 maxpacket: 16 [ 445.731098][ T5953] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 445.741530][ T5906] usb 5-1: New USB device found, idVendor=05d1, idProduct=2001, bcdDevice=10.00 [ 445.745614][ T5953] usb 4-1: Product: syz [ 445.755741][ T5906] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 445.758864][ T5953] usb 4-1: Manufacturer: syz [ 445.766634][ T5906] usb 5-1: Product: syz [ 445.771908][ T5953] usb 4-1: SerialNumber: syz [ 445.775546][ T5906] usb 5-1: Manufacturer: syz [ 445.781752][ T5953] usb 4-1: config 0 descriptor?? [ 445.787136][ T5906] usb 5-1: SerialNumber: syz [ 445.798934][ T5906] usb 5-1: config 0 descriptor?? [ 445.809271][ T5906] ftdi_sio 5-1:0.0: FTDI USB Serial Device converter detected [ 445.818073][ T5906] usb 5-1: Detected FT-X [ 445.856586][ T10] usb 3-1: too many configurations: 9, using maximum allowed: 8 [ 445.865810][ T10] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 445.875562][ T10] usb 3-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 445.887360][ T10] usb 3-1: config 0 interface 0 has no altsetting 0 [ 445.895428][ T10] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 445.905180][ T10] usb 3-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 445.917023][ T10] usb 3-1: config 0 interface 0 has no altsetting 0 [ 445.926509][ T10] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 445.936153][ T10] usb 3-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 445.947933][ T10] usb 3-1: config 0 interface 0 has no altsetting 0 [ 445.957060][ T10] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 445.966964][ T10] usb 3-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 445.978125][ T10] usb 3-1: config 0 interface 0 has no altsetting 0 [ 445.985810][ T10] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 445.995031][ T10] usb 3-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 446.006732][ T10] usb 3-1: config 0 interface 0 has no altsetting 0 [ 446.014565][ T10] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 446.024068][ T10] usb 3-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 446.024324][ T5906] ftdi_sio ttyUSB0: Unable to read latency timer: -32 [ 446.035255][ T10] usb 3-1: config 0 interface 0 has no altsetting 0 [ 446.036274][ T10] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 446.062134][ T10] usb 3-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 446.074944][ T10] usb 3-1: config 0 interface 0 has no altsetting 0 [ 446.084870][ T10] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 446.094544][ T10] usb 3-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 446.106658][ T10] usb 3-1: config 0 interface 0 has no altsetting 0 [ 446.115654][ T10] usb 3-1: New USB device found, idVendor=0c45, idProduct=1010, bcdDevice=49.8e [ 446.126197][ T10] usb 3-1: New USB device strings: Mfr=41, Product=64, SerialNumber=168 [ 446.136549][ T1164] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 446.148942][ T10] usb 3-1: Product: syz [ 446.153130][ T10] usb 3-1: Manufacturer: syz [ 446.157984][ T10] usb 3-1: SerialNumber: syz [ 446.164107][ T10] usb 3-1: config 0 descriptor?? [ 446.182802][ T10] yurex 3-1:0.0: USB YUREX device now attached to Yurex #0 [ 446.218337][ T5926] usb 4-1: USB disconnect, device number 127 [ 446.404881][ T10] usb 3-1: USB disconnect, device number 73 [ 446.412855][ T10] yurex 3-1:0.0: USB YUREX #0 now disconnected [ 446.476444][ T5187] Bluetooth: hci0: command 0x0405 tx timeout [ 446.505202][ T5906] usb 5-1: FTDI USB Serial Device converter now attached to ttyUSB0 [ 446.561525][ T5187] Bluetooth: hci1: command 0x040f tx timeout [ 446.727365][ T10] usb 5-1: USB disconnect, device number 43 [ 446.735510][ T10] ftdi_sio ttyUSB0: FTDI USB Serial Device converter now disconnected from ttyUSB0 [ 446.747000][ T10] ftdi_sio 5-1:0.0: device disconnected [ 446.819416][T11284] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 447.399348][T15045] /dev/rnullb0: Can't open blockdev [ 447.504880][ T1304] ieee802154 phy0 wpan0: encryption failed: -22 [ 447.511492][ T1304] ieee802154 phy1 wpan1: encryption failed: -22 [ 447.546120][ T10] IPVS: starting estimator thread 0... [ 447.662703][T15064] IPVS: using max 52 ests per chain, 124800 per kthread [ 447.814979][T15071] /dev/rnullb0: Can't open blockdev [ 447.865516][ T5906] usb 5-1: new high-speed USB device number 44 using dummy_hcd [ 448.063838][ T5906] usb 5-1: config 220 has an invalid interface number: 76 but max is 2 [ 448.089062][ T5906] usb 5-1: config 220 contains an unexpected descriptor of type 0x2, skipping [ 448.110723][ T5906] usb 5-1: config 220 has an invalid descriptor of length 13, skipping remainder of the config [ 448.134013][ T5906] usb 5-1: config 220 has no interface number 2 [ 448.140327][ T5906] usb 5-1: config 220 interface 1 altsetting 5 has 0 endpoint descriptors, different from the interface descriptor's value: 12 [ 448.179934][ T5906] usb 5-1: config 220 interface 0 has no altsetting 0 [ 448.197094][ T5906] usb 5-1: config 220 interface 76 has no altsetting 0 [ 448.204083][ T5906] usb 5-1: config 220 interface 1 has no altsetting 0 [ 448.219036][ T5906] usb 5-1: New USB device found, idVendor=8086, idProduct=0b07, bcdDevice=6c.b9 [ 448.228468][ T5906] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 448.250334][ T5906] usb 5-1: Product: syz [ 448.255026][ T5906] usb 5-1: Manufacturer: syz [ 448.259692][ T5906] usb 5-1: SerialNumber: syz [ 448.384229][T15088] MTD: Attempt to mount non-MTD device "/dev/rnullb0" [ 448.393309][T15088] /dev/rnullb0: Can't open blockdev [ 448.464125][ T5926] usb 4-1: new high-speed USB device number 2 using dummy_hcd [ 448.502490][T15067] netlink: 'syz.4.2646': attribute type 39 has an invalid length. [ 448.627001][ T5926] usb 4-1: Using ep0 maxpacket: 8 [ 448.640055][ T5926] usb 4-1: unable to get BOS descriptor or descriptor too short [ 448.653281][ T5926] usb 4-1: config 2 has an invalid interface number: 254 but max is 1 [ 448.672553][ T5926] usb 4-1: config 2 has an invalid descriptor of length 0, skipping remainder of the config [ 448.688594][ T5926] usb 4-1: config 2 has 1 interface, different from the descriptor's value: 2 [ 448.699408][ T48] usb 3-1: new high-speed USB device number 74 using dummy_hcd [ 448.709075][ T5926] usb 4-1: config 2 has no interface number 0 [ 448.720730][ T5926] usb 4-1: config 2 interface 254 altsetting 2 has an endpoint descriptor with address 0xF2, changing to 0x82 [ 448.734734][ T5926] usb 4-1: config 2 interface 254 altsetting 2 endpoint 0x82 has invalid wMaxPacketSize 0 [ 448.745341][ T5926] usb 4-1: config 2 interface 254 altsetting 2 has 2 endpoint descriptors, different from the interface descriptor's value: 4 [ 448.760488][ T5926] usb 4-1: config 2 interface 254 has no altsetting 0 [ 448.771902][ T5926] usb 4-1: New USB device found, idVendor=2040, idProduct=8268, bcdDevice=a9.71 [ 448.785312][ T5187] Bluetooth: hci1: command 0x040f tx timeout [ 448.791602][ T5926] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 448.807753][ T5926] usb 4-1: Product: syz [ 448.817177][ T5926] usb 4-1: Manufacturer: syz [ 448.821942][ T5926] usb 4-1: SerialNumber: syz [ 448.862903][T15096] tc_dump_action: action bad kind [ 448.870828][ T48] usb 3-1: Using ep0 maxpacket: 8 [ 448.880011][ T48] usb 3-1: config 0 has no interfaces? [ 448.890574][ T48] usb 3-1: New USB device found, idVendor=0582, idProduct=e6ca, bcdDevice=d3.0b [ 448.919262][ T48] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 448.948575][ T48] usb 3-1: Product: syz [ 448.953415][ T48] usb 3-1: Manufacturer: syz [ 448.961099][ T48] usb 3-1: SerialNumber: syz [ 448.979833][ T48] usb 3-1: config 0 descriptor?? [ 449.170885][ T5926] em28xx 4-1:2.254: New device syz syz @ 480 Mbps (2040:8268, interface 254, class 254) [ 449.182857][ T5926] em28xx 4-1:2.254: Video interface 254 found: [ 449.215772][ T48] usb 3-1: USB disconnect, device number 74 [ 449.244882][ T5926] em28xx 4-1:2.254: unknown em28xx chip ID (0) [ 449.322413][ T5926] em28xx 4-1:2.254: reading from i2c device at 0xa0 failed (error=-5) [ 449.332731][ T5926] em28xx 4-1:2.254: board has no eeprom [ 449.404757][ T5926] em28xx 4-1:2.254: Identified as PCTV tripleStick (292e) (card=94) [ 449.413183][ T5926] em28xx 4-1:2.254: Currently, V4L2 is not supported on this model [ 449.423720][ T48] em28xx 4-1:2.254: Binding DVB extension [ 449.440751][ T5926] usb 4-1: USB disconnect, device number 2 [ 449.454920][ T48] em28xx 4-1:2.254: no endpoint for DVB mode and transfer type 0 [ 449.466219][ T5926] em28xx 4-1:2.254: Disconnecting em28xx [ 449.475268][ T48] em28xx 4-1:2.254: failed to pre-allocate USB transfer buffers for DVB. [ 449.485169][ T48] em28xx 4-1:2.254: Registering input extension [ 449.498284][ T5926] em28xx 4-1:2.254: Closing input extension [ 449.512656][ T5926] em28xx 4-1:2.254: Freeing device [ 449.637938][T15099] /dev/rnullb0: Can't open blockdev [ 450.066195][T15120] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 450.616034][T15128] /dev/rnullb0: Can't open blockdev [ 450.643811][ T30] audit: type=1800 audit(2000000483.911:124): pid=15128 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.2664" name="SYSV00000000" dev="hugetlbfs" ino=0 res=0 errno=0 [ 451.010366][ T5906] usb 5-1: selecting invalid altsetting 0 [ 451.032903][ T5906] usb 5-1: Found UVC 7.01 device syz (8086:0b07) [ 451.039289][ T5906] usb 5-1: No valid video chain found. [ 451.096885][ T5906] usb 5-1: selecting invalid altsetting 0 [ 451.098927][T15137] /dev/rnullb0: Can't open blockdev [ 451.115795][ T5906] usbtest 5-1:220.1: probe with driver usbtest failed with error -22 [ 451.149843][ T5906] usb 5-1: USB disconnect, device number 44 [ 451.238909][T15144] evm: overlay not supported [ 451.274022][T15149] /dev/rnullb0: Can't open blockdev [ 451.306106][T15151] /dev/rnullb0: Can't open blockdev [ 451.338778][T15154] /dev/rnullb0: Can't open blockdev [ 451.610606][T13542] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 451.670479][T15170] hfs: can't find a HFS filesystem on dev rnullb0 [ 451.677803][T15170] hfs: can't find a HFS filesystem on dev rnullb0 [ 451.703038][ T5906] usb 3-1: new high-speed USB device number 75 using dummy_hcd [ 451.703079][ T5953] usb 5-1: new high-speed USB device number 45 using dummy_hcd [ 451.852837][ T5906] usb 3-1: device descriptor read/64, error -71 [ 451.852884][ T5953] usb 5-1: device descriptor read/64, error -71 [ 452.077231][ T5926] usb 4-1: new high-speed USB device number 3 using dummy_hcd [ 452.119950][ T5953] usb 5-1: new high-speed USB device number 46 using dummy_hcd [ 452.119950][ T5906] usb 3-1: new high-speed USB device number 76 using dummy_hcd [ 452.240065][ T5926] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 452.251134][ T5926] usb 4-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 452.260727][ T5906] usb 3-1: device descriptor read/64, error -71 [ 452.267148][ T5926] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 452.276527][ T5926] usb 4-1: config 0 descriptor?? [ 452.281714][ T5953] usb 5-1: device descriptor read/64, error -71 [ 452.285860][ T5926] pwc: Askey VC010 type 2 USB webcam detected. [ 452.294813][T13542] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 452.377755][ T5906] usb usb3-port1: attempt power cycle [ 452.398232][ T5953] usb usb5-port1: attempt power cycle [ 452.713811][ T5926] pwc: recv_control_msg error -32 req 02 val 2b00 [ 452.721393][ T5926] pwc: recv_control_msg error -32 req 02 val 2700 [ 452.735066][ T5926] pwc: recv_control_msg error -32 req 02 val 2c00 [ 452.742160][ T5906] usb 3-1: new high-speed USB device number 77 using dummy_hcd [ 452.750473][ T5926] pwc: recv_control_msg error -32 req 04 val 1000 [ 452.757740][ T5926] pwc: recv_control_msg error -32 req 04 val 1300 [ 452.765092][ T5926] pwc: recv_control_msg error -32 req 04 val 1400 [ 452.771640][ T5906] usb 3-1: device descriptor read/8, error -71 [ 452.773319][ T5953] usb 5-1: new high-speed USB device number 47 using dummy_hcd [ 452.778472][ T5926] pwc: recv_control_msg error -32 req 02 val 2000 [ 452.789367][T15177] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 452.802261][T15177] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 452.804656][ T5953] usb 5-1: device descriptor read/8, error -71 [ 452.812963][ T5926] pwc: recv_control_msg error -32 req 02 val 2100 [ 453.029499][ T5906] usb 3-1: new high-speed USB device number 78 using dummy_hcd [ 453.051568][ T5906] usb 3-1: device descriptor read/8, error -71 [ 453.071946][ T5953] usb 5-1: new high-speed USB device number 48 using dummy_hcd [ 453.102694][ T5953] usb 5-1: device descriptor read/8, error -71 [ 453.170733][ T5906] usb usb3-port1: unable to enumerate USB device [ 453.221115][ T5953] usb usb5-port1: unable to enumerate USB device [ 454.747866][T15183] /dev/rnullb0: Can't open blockdev [ 454.847776][T15185] /dev/rnullb0: Can't open blockdev [ 455.115425][ T5926] pwc: recv_control_msg error -71 req 02 val 2500 [ 455.126254][ T5926] pwc: recv_control_msg error -71 req 02 val 2400 [ 455.133258][ T5926] pwc: recv_control_msg error -71 req 02 val 2600 [ 455.141837][ T5926] pwc: recv_control_msg error -71 req 02 val 2900 [ 455.152440][ T5926] pwc: recv_control_msg error -71 req 02 val 2800 [ 455.159600][ T5926] pwc: recv_control_msg error -71 req 04 val 1100 [ 455.166601][ T5926] pwc: recv_control_msg error -71 req 04 val 1200 [ 455.174205][ T5926] pwc: Registered as video103. [ 455.187895][ T5926] input: PWC snapshot button as /devices/platform/dummy_hcd.3/usb4/4-1/input/input43 [ 455.227371][ T5926] usb 4-1: USB disconnect, device number 3 [ 455.230697][ T10] usb 5-1: new full-speed USB device number 49 using dummy_hcd [ 455.273529][ T5906] usb 3-1: new high-speed USB device number 79 using dummy_hcd [ 455.414279][ T10] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 1024, setting to 64 [ 455.426883][ T10] usb 5-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 7 [ 455.440037][ T10] usb 5-1: New USB device found, idVendor=0eef, idProduct=72c4, bcdDevice= 0.00 [ 455.450844][ T10] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 455.455188][ T5906] usb 3-1: Invalid ep0 maxpacket: 9 [ 455.470337][ T10] usb 5-1: config 0 descriptor?? [ 455.476542][T15192] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 455.583498][ T5926] usb 4-1: new high-speed USB device number 4 using dummy_hcd [ 455.604762][ T5906] usb 3-1: new high-speed USB device number 80 using dummy_hcd [ 455.710675][T15192] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 455.720707][T15192] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 455.731351][ T10] usbhid 5-1:0.0: can't add hid device: -71 [ 455.737488][ T10] usbhid 5-1:0.0: probe with driver usbhid failed with error -71 [ 455.747038][ T10] usb 5-1: USB disconnect, device number 49 [ 455.757846][ T5926] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 455.768408][ T5926] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 455.777691][ T5906] usb 3-1: Invalid ep0 maxpacket: 9 [ 455.783166][ T5906] usb usb3-port1: attempt power cycle [ 455.789404][ T5926] usb 4-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 455.798695][ T5926] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 455.806968][ T5926] usb 4-1: SerialNumber: syz [ 456.040159][ T5926] usb 4-1: 0:2 : does not exist [ 456.051762][ T5926] usb 4-1: USB disconnect, device number 4 [ 456.069432][ T9774] udevd[9774]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 456.160579][ T5906] usb 3-1: new high-speed USB device number 81 using dummy_hcd [ 456.183585][ T5906] usb 3-1: Invalid ep0 maxpacket: 9 [ 456.203339][ T10] usb 5-1: new high-speed USB device number 50 using dummy_hcd [ 456.222797][T15205] I/O error, dev loop5, sector 0 op 0x0:(READ) flags 0x800 phys_seg 1 prio class 2 [ 456.232495][T15205] SQUASHFS error: Failed to read block 0x0: -5 [ 456.238820][T15205] unable to read squashfs_super_block [ 456.320924][ T5906] usb 3-1: new high-speed USB device number 82 using dummy_hcd [ 456.352966][ T5906] usb 3-1: Invalid ep0 maxpacket: 9 [ 456.359096][ T5906] usb usb3-port1: unable to enumerate USB device [ 456.375088][ T10] usb 5-1: Using ep0 maxpacket: 32 [ 456.381849][ T10] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x2 has an invalid bInterval 129, changing to 11 [ 456.393915][ T10] usb 5-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 7 [ 456.409028][ T10] usb 5-1: New USB device found, idVendor=0eef, idProduct=72c4, bcdDevice= 0.00 [ 456.431801][ T10] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 456.441814][ T10] usb 5-1: config 0 descriptor?? [ 456.448724][ T10] hub 5-1:0.0: bad descriptor, ignoring hub [ 456.456368][ T10] hub 5-1:0.0: probe with driver hub failed with error -5 [ 456.917066][ T10] hid-multitouch 0003:0EEF:72C4.001B: hidraw0: USB HID v0.00 Device [HID 0eef:72c4] on usb-dummy_hcd.4-1/input0 [ 456.931657][ T5953] usb 4-1: new high-speed USB device number 5 using dummy_hcd [ 457.105413][ T5953] usb 4-1: New USB device found, idVendor=05ac, idProduct=b301, bcdDevice=e4.00 [ 457.114953][ T5953] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 457.131269][ T5953] usb 4-1: Product: syz [ 457.145874][ T5953] usb 4-1: Manufacturer: syz [ 457.153722][T15192] tmpfs: Bad value for 'mpol' [ 457.159053][ T5953] usb 4-1: SerialNumber: syz [ 457.173857][ T5953] usb 4-1: config 0 descriptor?? [ 457.422185][ T5953] usb 5-1: USB disconnect, device number 50 [ 457.767836][T11284] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 457.783081][T13544] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 459.089513][ T10] usb 3-1: new high-speed USB device number 83 using dummy_hcd [ 459.239611][ T10] usb 3-1: device descriptor read/64, error -71 [ 459.263567][T15245] /dev/sg0: Can't lookup blockdev [ 459.507932][ T10] usb 3-1: new high-speed USB device number 84 using dummy_hcd [ 459.826459][T15272] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2715'. [ 459.859078][ T10] usb 3-1: device descriptor read/64, error -71 [ 459.893937][ T48] usb 4-1: USB disconnect, device number 5 [ 459.973241][T15279] /dev/rnullb0: Can't open blockdev [ 459.976917][ T10] usb usb3-port1: attempt power cycle [ 460.115719][ T5906] usb 5-1: new low-speed USB device number 51 using dummy_hcd [ 460.278009][ T5906] usb 5-1: config 7 has an invalid interface number: 252 but max is 0 [ 460.286209][ T5906] usb 5-1: config 7 has no interface number 0 [ 460.292576][ T5906] usb 5-1: config 7 interface 252 altsetting 8 endpoint 0xF has invalid wMaxPacketSize 0 [ 460.302979][ T5906] usb 5-1: config 7 interface 252 has no altsetting 0 [ 460.312425][ T5906] usb 5-1: string descriptor 0 read error: -22 [ 460.318823][ T5906] usb 5-1: New USB device found, idVendor=0681, idProduct=0005, bcdDevice=56.c0 [ 460.327858][ T5906] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 460.339406][ T5906] idmouse 5-1:7.252: Unable to find bulk-in endpoint. [ 460.346351][ T48] usb 4-1: new low-speed USB device number 6 using dummy_hcd [ 460.350784][ T10] usb 3-1: new high-speed USB device number 85 using dummy_hcd [ 460.383710][ T10] usb 3-1: device descriptor read/8, error -71 [ 460.522613][ T48] usb 4-1: too many configurations: 9, using maximum allowed: 8 [ 460.531964][ T48] usb 4-1: unable to read config index 0 descriptor/start: -61 [ 460.539819][ T48] usb 4-1: can't read configurations, error -61 [ 460.639485][ T10] usb 3-1: new high-speed USB device number 86 using dummy_hcd [ 460.661620][ T10] usb 3-1: device descriptor read/8, error -71 [ 460.684161][ T48] usb 4-1: new low-speed USB device number 7 using dummy_hcd [ 460.706031][ T5953] usb 5-1: USB disconnect, device number 51 [ 460.778534][ T10] usb usb3-port1: unable to enumerate USB device [ 460.856441][ T48] usb 4-1: too many configurations: 9, using maximum allowed: 8 [ 460.865788][ T48] usb 4-1: unable to read config index 0 descriptor/start: -61 [ 460.873654][ T48] usb 4-1: can't read configurations, error -61 [ 460.882077][ T48] usb usb4-port1: attempt power cycle [ 461.147176][T15306] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2727'. [ 461.248791][ T48] usb 4-1: new low-speed USB device number 8 using dummy_hcd [ 461.271745][ T48] usb 4-1: too many configurations: 9, using maximum allowed: 8 [ 461.284158][ T48] usb 4-1: unable to read config index 0 descriptor/start: -61 [ 461.291998][ T48] usb 4-1: can't read configurations, error -61 [ 461.430629][ T48] usb 4-1: new low-speed USB device number 9 using dummy_hcd [ 461.452964][ T48] usb 4-1: too many configurations: 9, using maximum allowed: 8 [ 461.462149][ T48] usb 4-1: unable to read config index 0 descriptor/start: -61 [ 461.462528][ T5953] usb 5-1: new high-speed USB device number 52 using dummy_hcd [ 461.469857][ T48] usb 4-1: can't read configurations, error -61 [ 461.484253][ T48] usb usb4-port1: unable to enumerate USB device [ 461.644286][ T5953] usb 5-1: Using ep0 maxpacket: 32 [ 461.651187][ T5953] usb 5-1: New USB device found, idVendor=041e, idProduct=403c, bcdDevice=cc.d7 [ 461.660602][ T5953] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 461.669997][ T5953] usb 5-1: config 0 descriptor?? [ 461.677156][ T5953] gspca_main: sq930x-2.14.0 probing 041e:403c [ 461.921819][T15321] /dev/rnullb0: Can't open blockdev [ 462.406149][ T5953] gspca_sq930x: ucbus_write failed -71 [ 462.416574][ T5953] sq930x 5-1:0.0: probe with driver sq930x failed with error -71 [ 462.430971][ T5953] usb 5-1: USB disconnect, device number 52 [ 463.095034][T15345] sctp: [Deprecated]: syz.2.2739 (pid 15345) Use of int in max_burst socket option. [ 463.095034][T15345] Use struct sctp_assoc_value instead [ 463.133838][T15349] netlink: 8 bytes leftover after parsing attributes in process `syz.5.2740'. [ 463.247914][T13544] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 463.259899][T13542] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 463.389789][T15356] UDF-fs: warning (device rnullb0): udf_load_vrs: No VRS found [ 463.397646][T15356] UDF-fs: Scanning with blocksize 4096 failed [ 463.516118][T15360] serio: Serial port ptm1 [ 463.718180][ T5906] usb 4-1: new high-speed USB device number 10 using dummy_hcd [ 463.889405][ T5906] usb 4-1: Using ep0 maxpacket: 32 [ 463.900342][ T5906] usb 4-1: config 90 has an invalid descriptor of length 105, skipping remainder of the config [ 464.110527][ T5906] usb 4-1: config 90 has 0 interfaces, different from the descriptor's value: 1 [ 464.127616][ T5906] usb 4-1: New USB device found, idVendor=0ccd, idProduct=10af, bcdDevice=38.4e [ 464.137277][ T5906] usb 4-1: New USB device strings: Mfr=1, Product=3, SerialNumber=3 [ 464.145380][ T5906] usb 4-1: Product: syz [ 464.157251][ T5906] usb 4-1: Manufacturer: syz [ 464.161882][ T5906] usb 4-1: SerialNumber: syz [ 464.661597][T15407] /dev/rnullb0: Can't open blockdev [ 464.763928][T15413] netlink: 45 bytes leftover after parsing attributes in process `syz.4.2748'. [ 464.798538][T15413] erofs (device rnullb0): cannot find valid erofs superblock [ 465.028008][T15445] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 465.041333][T15445] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 465.100332][T15445] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 465.289678][ T6084] usb 3-1: new high-speed USB device number 87 using dummy_hcd [ 465.463951][ T6084] usb 3-1: New USB device found, idVendor=172f, idProduct=0032, bcdDevice= 0.00 [ 465.475921][ T6084] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 465.500539][ T6084] usb 3-1: config 0 descriptor?? [ 465.732031][T15486] /dev/rnullb0: Can't open blockdev [ 465.789941][ T6084] usbhid 3-1:0.0: can't add hid device: -71 [ 465.806509][ T6084] usbhid 3-1:0.0: probe with driver usbhid failed with error -71 [ 465.819833][ T6084] usb 3-1: USB disconnect, device number 87 [ 466.210049][T11285] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 466.257702][T11285] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 466.338580][T11285] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 466.378721][T15498] batadv_slave_1: entered promiscuous mode [ 466.415416][T11285] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 466.511506][ T5187] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 466.518983][ T5187] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 466.526338][ T5187] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 466.535122][ T5187] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 466.543259][ T5187] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 466.659005][T11285] bridge_slave_1: left allmulticast mode [ 466.672359][T11285] bridge_slave_1: left promiscuous mode [ 466.686203][T11285] bridge0: port 2(bridge_slave_1) entered disabled state [ 466.706381][T11285] bridge_slave_0: left allmulticast mode [ 466.709675][ T10] usb 4-1: USB disconnect, device number 10 [ 466.715574][T11285] bridge_slave_0: left promiscuous mode [ 466.756064][T11285] bridge0: port 1(bridge_slave_0) entered disabled state [ 466.943957][T15519] Malformed UNC in devname [ 466.943957][T15519] [ 466.965128][T15519] CIFS: VFS: Malformed UNC in devname [ 467.091473][T11285] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 467.116515][T11285] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 467.126777][T11285] bond0 (unregistering): Released all slaves [ 467.136950][T15497] batadv_slave_1: left promiscuous mode [ 467.369118][T15502] chnl_net:caif_netlink_parms(): no params data found [ 467.454990][T11285] hsr_slave_0: left promiscuous mode [ 467.472398][T11285] hsr_slave_1: left promiscuous mode [ 467.478367][T11285] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 467.488012][T11285] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 467.496325][T11285] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 467.505068][T11285] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 467.517815][T11285] veth1_macvtap: left promiscuous mode [ 467.524962][T11285] veth0_macvtap: left promiscuous mode [ 467.530635][T11285] veth1_vlan: left promiscuous mode [ 467.537898][T11285] veth0_vlan: left promiscuous mode [ 467.599518][ T48] usb 3-1: new high-speed USB device number 88 using dummy_hcd [ 467.713388][T11285] team0 (unregistering): Port device team_slave_1 removed [ 467.738569][T11285] team0 (unregistering): Port device team_slave_0 removed [ 467.769357][ T48] usb 3-1: Using ep0 maxpacket: 16 [ 467.775898][ T48] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 467.789980][ T48] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 467.805832][ T48] usb 3-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 467.815356][ T48] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 467.823489][ T48] usb 3-1: Product: syz [ 467.827669][ T48] usb 3-1: Manufacturer: syz [ 467.832300][ T48] usb 3-1: SerialNumber: syz [ 467.868507][T15502] bridge0: port 1(bridge_slave_0) entered blocking state [ 467.875749][T15502] bridge0: port 1(bridge_slave_0) entered disabled state [ 467.883738][T15502] bridge_slave_0: entered allmulticast mode [ 467.891470][T15502] bridge_slave_0: entered promiscuous mode [ 467.899571][T15502] bridge0: port 2(bridge_slave_1) entered blocking state [ 467.906902][T15502] bridge0: port 2(bridge_slave_1) entered disabled state [ 467.914379][T15502] bridge_slave_1: entered allmulticast mode [ 467.921651][T15502] bridge_slave_1: entered promiscuous mode [ 467.948100][T15502] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 467.964294][T15502] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 467.992053][T15502] team0: Port device team_slave_0 added [ 468.000368][T15502] team0: Port device team_slave_1 added [ 468.030892][T15502] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 468.043819][T15502] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 468.074348][T15502] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 468.090792][T15535] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 468.099620][T15535] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 468.110881][T15537] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 468.113266][T11285] IPVS: stop unused estimator thread 0... [ 468.120463][T15537] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 468.134978][T15502] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 468.142058][T15502] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 468.168655][T15502] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 468.275966][T15502] hsr_slave_0: entered promiscuous mode [ 468.294616][T15502] hsr_slave_1: entered promiscuous mode [ 468.313592][T15502] debugfs: 'hsr0' already exists in 'hsr' [ 468.333930][T15502] Cannot create hsr debugfs directory [ 468.429306][T15575] /dev/rnullb0: Can't open blockdev [ 468.726588][ T5864] Bluetooth: hci2: command tx timeout [ 468.929793][T15502] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 468.969762][T15502] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 468.996978][T15502] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 469.026626][T15502] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 469.272484][T15502] 8021q: adding VLAN 0 to HW filter on device bond0 [ 469.336209][T15502] 8021q: adding VLAN 0 to HW filter on device team0 [ 469.385977][T11286] bridge0: port 1(bridge_slave_0) entered blocking state [ 469.393126][T11286] bridge0: port 1(bridge_slave_0) entered forwarding state [ 469.400891][T13542] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 469.401628][T13544] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 469.434407][T11286] bridge0: port 2(bridge_slave_1) entered blocking state [ 469.441688][T11286] bridge0: port 2(bridge_slave_1) entered forwarding state [ 469.480760][T15502] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 469.491746][T15502] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 469.574184][T15601] /dev/rnullb0: Can't open blockdev [ 469.814240][T15502] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 469.855220][ T6084] usb 4-1: new high-speed USB device number 11 using dummy_hcd [ 470.035791][ T6084] usb 4-1: Using ep0 maxpacket: 32 [ 470.045597][ T6084] usb 4-1: config index 0 descriptor too short (expected 29220, got 36) [ 470.057439][ T6084] usb 4-1: config 0 has too many interfaces: 81, using maximum allowed: 32 [ 470.066530][ T6084] usb 4-1: config 0 has 1 interface, different from the descriptor's value: 81 [ 470.081286][ T6084] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 470.102442][ T6084] usb 4-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 470.126998][ T6084] usb 4-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 470.150325][ T6084] usb 4-1: New USB device found, idVendor=03f0, idProduct=6c17, bcdDevice= 0.40 [ 470.162375][ T6084] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 470.179303][ T6084] usb 4-1: config 0 descriptor?? [ 470.231357][T15502] veth0_vlan: entered promiscuous mode [ 470.260873][T15502] veth1_vlan: entered promiscuous mode [ 470.366212][T15502] veth0_macvtap: entered promiscuous mode [ 470.377135][T15627] /dev/rnullb0: Can't open blockdev [ 470.384892][T15502] veth1_macvtap: entered promiscuous mode [ 470.402329][T15502] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 470.405550][T15601] sctp: [Deprecated]: syz.3.2777 (pid 15601) Use of int in max_burst socket option. [ 470.405550][T15601] Use struct sctp_assoc_value instead [ 470.414573][T15502] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 470.442843][T15601] bfs: Unknown parameter 'sha1-ssse3' [ 470.449276][ T6084] usblp 4-1:0.0: usblp0: USB Bidirectional printer dev 11 if 0 alt 0 proto 3 vid 0x03F0 pid 0x6C17 [ 470.466522][ T6084] usb 4-1: USB disconnect, device number 11 [ 470.475881][ T6084] usblp0: removed [ 470.491103][T11286] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 470.553358][T11286] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 470.567929][T11286] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 470.577365][T11286] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 470.597099][ T48] usb 3-1: 0:2 : does not exist [ 470.620912][ T48] usb 3-1: 5:0: failed to get current value for ch 0 (-22) [ 470.655732][ T48] usb 3-1: USB disconnect, device number 88 [ 470.663245][T13542] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 470.684024][T13542] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 470.732104][ T9774] udevd[9774]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 470.790710][T13542] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 470.828590][T13542] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 470.944830][ T5864] Bluetooth: hci2: command tx timeout [ 471.098574][T15655] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2782'. [ 471.111151][T15655] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2782'. [ 472.094289][T15662] /dev/rnullb0: Can't open blockdev [ 472.340552][ T6084] usb 5-1: new low-speed USB device number 53 using dummy_hcd [ 472.697801][T15669] Dead loop on virtual device ip6_vti0, fix it urgently! [ 472.813687][T15673] netlink: 'syz.2.2789': attribute type 4 has an invalid length. [ 472.822650][T15673] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2789'. [ 472.836078][ T6084] usb 5-1: Invalid ep0 maxpacket: 16 [ 472.985830][ T6084] usb 5-1: new low-speed USB device number 54 using dummy_hcd [ 473.167911][ T5864] Bluetooth: hci2: command tx timeout [ 473.222130][ T6084] usb 5-1: Invalid ep0 maxpacket: 16 [ 473.231876][ T6084] usb usb5-port1: attempt power cycle [ 473.295760][ T10] usb 4-1: new high-speed USB device number 12 using dummy_hcd [ 473.488126][ T10] usb 4-1: Using ep0 maxpacket: 8 [ 473.495379][ T10] usb 4-1: unable to get BOS descriptor or descriptor too short [ 473.506427][ T10] usb 4-1: config 2 has an invalid interface number: 227 but max is 0 [ 473.515530][ T10] usb 4-1: config 2 has no interface number 0 [ 473.523038][ T10] usb 4-1: config 2 interface 227 has no altsetting 0 [ 473.540721][ T10] usb 4-1: New USB device found, idVendor=0abf, idProduct=3370, bcdDevice=60.04 [ 473.550334][ T10] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 473.562938][ T10] usb 4-1: Product: syz [ 473.572028][ T10] usb 4-1: Manufacturer: syz [ 473.585149][ T10] usb 4-1: SerialNumber: syz [ 473.627119][ T6084] usb 5-1: new low-speed USB device number 55 using dummy_hcd [ 473.670680][ T6084] usb 5-1: Invalid ep0 maxpacket: 16 [ 473.821093][ T10] usb 4-1: USB disconnect, device number 12 [ 473.830270][ T6084] usb 5-1: new low-speed USB device number 56 using dummy_hcd [ 473.873617][ T6084] usb 5-1: Invalid ep0 maxpacket: 16 [ 473.885327][ T6084] usb usb5-port1: unable to enumerate USB device [ 474.730737][T15696] netlink: 'syz.5.2796': attribute type 10 has an invalid length. [ 474.738879][T15696] veth0_vlan: left promiscuous mode [ 474.745528][T15696] veth0_vlan: entered promiscuous mode [ 474.753450][T15696] team0: Device veth0_vlan failed to register rx_handler [ 474.875186][T11286] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 474.945659][T15704] /dev/rnullb0: Can't open blockdev [ 475.301191][T15715] /dev/rnullb0: Can't open blockdev [ 475.305437][ T5926] usb 3-1: new full-speed USB device number 89 using dummy_hcd [ 475.391766][ T5864] Bluetooth: hci2: command tx timeout [ 475.479645][ T5926] usb 3-1: config 0 has an invalid interface number: 1 but max is 0 [ 475.496286][T15719] /dev/rnullb0: Can't open blockdev [ 475.504622][ T5926] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 475.536919][ T5926] usb 3-1: config 0 has no interface number 0 [ 475.552081][T11285] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 475.572399][ T5926] usb 3-1: New USB device found, idVendor=0572, idProduct=58a2, bcdDevice=27.0a [ 475.583142][ T5926] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 475.592993][ T5926] usb 3-1: Product: syz [ 475.597657][ T5926] usb 3-1: Manufacturer: syz [ 475.602443][ T5926] usb 3-1: SerialNumber: syz [ 475.616624][ T5926] usb 3-1: config 0 descriptor?? [ 475.629078][ T5926] cx231xx 3-1:0.1: New device syz syz @ 12 Mbps (0572:58a2) with 1 interfaces [ 475.647619][ T5926] cx231xx 3-1:0.1: Not found matching IAD interface [ 475.848803][ T5926] usb 3-1: USB disconnect, device number 89 [ 476.331570][ T5885] usb 4-1: new high-speed USB device number 13 using dummy_hcd [ 476.495910][T15747] netlink: 'syz.2.2813': attribute type 8 has an invalid length. [ 476.504974][T15747] omfs: Invalid superblock (0) [ 476.515972][ T5885] usb 4-1: config 255 has an invalid interface number: 38 but max is 0 [ 476.534818][ T5885] usb 4-1: config 255 has no interface number 0 [ 476.549410][ T5885] usb 4-1: New USB device found, idVendor=10b8, idProduct=1ebc, bcdDevice= 1.7d [ 476.565883][ T5885] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 476.582401][ T5885] usb 4-1: Product: syz [ 476.591458][ T5885] usb 4-1: Manufacturer: syz [ 476.596189][ T5885] usb 4-1: SerialNumber: syz [ 476.660873][T15753] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 476.671311][T15753] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 476.831282][ T5885] dvb-usb: found a 'DiBcom STK7070P reference design' in cold state, will try to load a firmware [ 476.884188][ T5885] dvb-usb: downloading firmware from file 'dvb-usb-dib0700-1.20.fw' [ 476.898215][ T5885] dib0700: firmware download failed at 7 with -22 [ 477.715151][T15766] netlink: 40 bytes leftover after parsing attributes in process `syz.2.2819'. [ 477.769391][T15770] binder: 15769:15770 ioctl c0306201 2000000001c0 returned -22 [ 478.086919][ T5926] usb 3-1: new full-speed USB device number 90 using dummy_hcd [ 478.258423][ T5926] usb 3-1: config 0 has an invalid interface number: 214 but max is 0 [ 478.267076][ T5926] usb 3-1: config 0 has no interface number 0 [ 478.273370][ T5926] usb 3-1: config 0 interface 214 altsetting 2 endpoint 0x2 has invalid maxpacket 512, setting to 64 [ 478.286414][ T5926] usb 3-1: config 0 interface 214 has no altsetting 0 [ 478.304338][ T5926] usb 3-1: New USB device found, idVendor=07c9, idProduct=000e, bcdDevice=5d.4f [ 478.314301][ T5926] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 478.324225][ T5926] usb 3-1: Product: syz [ 478.328608][ T5926] usb 3-1: Manufacturer: syz [ 478.333597][ T5926] usb 3-1: SerialNumber: syz [ 478.339934][ T5926] usb 3-1: config 0 descriptor?? [ 478.347349][T15774] raw-gadget.2 gadget.2: fail, usb_ep_enable returned -22 [ 478.571261][T15774] raw-gadget.2 gadget.2: fail, usb_ep_enable returned -22 [ 478.833270][ T5926] ax88179_178a 3-1:0.214 (unnamed net_device) (uninitialized): Failed to write reg index 0x0002: -71 [ 479.003591][T15801] netlink: 72 bytes leftover after parsing attributes in process `syz.2.2830'. [ 479.137629][T15818] could not allocate digest TFM handle cryptd(streebog512-generic) [ 479.315318][ T24] usb 4-1: USB disconnect, device number 13 [ 479.445635][T15843] ./cgroup: Can't lookup blockdev [ 479.547393][T15847] nfs: Unknown parameter '/dev/rnullb0' [ 480.552946][T11284] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 481.557263][ T5926] ax88179_178a 3-1:0.214 (unnamed net_device) (uninitialized): Failed to write reg index 0x0001: -71 [ 482.463963][ T5926] ax88179_178a 3-1:0.214 (unnamed net_device) (uninitialized): Failed to read reg index 0x0001: -71 [ 483.487922][T11284] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 483.522808][ T5926] ax88179_178a 3-1:0.214 (unnamed net_device) (uninitialized): Failed to read reg index 0x0006: -71 [ 483.567292][ T5926] ax88179_178a 3-1:0.214 (unnamed net_device) (uninitialized): invalid MAC address, using random [ 483.587012][ T5926] ax88179_178a 3-1:0.214 (unnamed net_device) (uninitialized): Failed to write reg index 0x0006: -71 [ 483.627216][T15853] /dev/sg0: Can't lookup blockdev [ 483.637135][ T5926] ax88179_178a 3-1:0.214 (unnamed net_device) (uninitialized): Failed to write reg index 0x0005: -71 [ 483.670603][ T5926] ax88179_178a 3-1:0.214 (unnamed net_device) (uninitialized): Failed to write reg index 0x0001: -71 [ 483.702812][ T5926] ax88179_178a 3-1:0.214 (unnamed net_device) (uninitialized): Failed to write reg index 0x0001: -71 [ 483.746072][ T5926] ax88179_178a 3-1:0.214 (unnamed net_device) (uninitialized): Failed to write reg index 0x0001: -71 [ 483.786973][ T5926] ax88179_178a 3-1:0.214 (unnamed net_device) (uninitialized): Failed to write reg index 0x0001: -71 [ 483.801355][ T5926] ax88179_178a 3-1:0.214 (unnamed net_device) (uninitialized): Failed to write reg index 0x0002: -71 [ 484.050512][ C0] wlan1: beacon TX faster than countdown (channel/color switch) completion [ 484.442196][ T5926] ax88179_178a 3-1:0.214 (unnamed net_device) (uninitialized): Failed to write reg index 0x0001: -71 [ 484.461040][ T5926] ax88179_178a 3-1:0.214 (unnamed net_device) (uninitialized): Failed to write reg index 0x0002: -71 [ 484.473696][ T5926] ax88179_178a 3-1:0.214 (unnamed net_device) (uninitialized): Failed to read reg index 0x0001: -71 [ 484.531465][ T5926] ax88179_178a 3-1:0.214 (unnamed net_device) (uninitialized): Failed to read reg index 0x0001: -71 [ 484.569622][ T5926] ax88179_178a 3-1:0.214 (unnamed net_device) (uninitialized): Failed to write reg index 0x0001: -71 [ 484.994018][T15864] /dev/rnullb0: Can't open blockdev [ 485.174790][T15870] tmpfs: Unknown parameter 'usrquotaSòžn)ÿ“üò½wÉ<Pl³Æ¨«ûX¢ðÎ^Bùô„Œþ/íº®]’¢í頵ቡçexƒ.ö4N#|6øÕ«ˆÑoÞû<3EšÁæ>5Æ' [ 485.443332][ T5926] ax88179_178a 3-1:0.214 (unnamed net_device) (uninitialized): Failed to write reg index 0x001f: -71 [ 485.460728][ T5926] ax88179_178a 3-1:0.214 (unnamed net_device) (uninitialized): Failed to write reg index 0x0019: -71 [ 485.482039][ T5926] ax88179_178a 3-1:0.214 (unnamed net_device) (uninitialized): Failed to write reg index 0x001f: -71 [ 485.503401][ T5926] ax88179_178a 3-1:0.214 (unnamed net_device) (uninitialized): Failed to write reg index 0x000d: -71 [ 485.524799][ T5926] ax88179_178a 3-1:0.214 (unnamed net_device) (uninitialized): Failed to write reg index 0x000e: -71 [ 485.536263][ T5926] ax88179_178a 3-1:0.214 (unnamed net_device) (uninitialized): Failed to write reg index 0x000d: -71 [ 485.557125][ T5926] ax88179_178a 3-1:0.214 (unnamed net_device) (uninitialized): Failed to read reg index 0x000e: -71 [ 485.578256][ T5926] ax88179_178a 3-1:0.214 (unnamed net_device) (uninitialized): Failed to write reg index 0x000d: -71 [ 485.599600][ T5926] ax88179_178a 3-1:0.214 (unnamed net_device) (uninitialized): Failed to write reg index 0x000e: -71 [ 485.610924][ T5926] ax88179_178a 3-1:0.214 (unnamed net_device) (uninitialized): Failed to write reg index 0x000d: -71 [ 485.631690][ T5926] ax88179_178a 3-1:0.214 (unnamed net_device) (uninitialized): Failed to write reg index 0x000e: -71 [ 485.658123][T15884] ./cgroup: Can't lookup blockdev [ 485.663479][ T5926] ax88179_178a 3-1:0.214 (unnamed net_device) (uninitialized): Failed to read reg index 0x0000: -71 [ 485.679830][ T5926] ax88179_178a 3-1:0.214 eth5: register 'ax88179_178a' at usb-dummy_hcd.2-1, AT-UMC2000 USB 3.0/USB 3.1 Gen 1 to Gigabit Ethernet Adapter, 62:8e:90:fa:09:3c [ 485.720162][ T5926] usb 3-1: USB disconnect, device number 90 [ 485.727473][ T5926] ax88179_178a 3-1:0.214 eth5: unregister 'ax88179_178a' usb-dummy_hcd.2-1, AT-UMC2000 USB 3.0/USB 3.1 Gen 1 to Gigabit Ethernet Adapter [ 486.208630][ T5926] usb 3-1: new high-speed USB device number 91 using dummy_hcd [ 486.508230][T11285] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 486.537439][ T5926] usb 3-1: New USB device found, idVendor=0af0, idProduct=7a05, bcdDevice= 0.00 [ 486.562741][ T5926] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 486.590550][ T5926] usb 3-1: Product: syz [ 486.606616][ T5926] usb 3-1: Manufacturer: syz [ 486.616687][ T5926] usb 3-1: SerialNumber: syz [ 486.636008][ T5926] usb 3-1: config 0 descriptor?? [ 486.863705][ T5926] usb-storage 3-1:0.0: USB Mass Storage device detected [ 486.941638][ T5926] usb 3-1: USB disconnect, device number 91 [ 487.214603][T15926] /dev/rnullb0: Can't open blockdev [ 487.964755][T15959] /dev/rnullb0: Can't open blockdev [ 488.501743][T15976] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2872'. [ 488.549394][T15979] /dev/rnullb0: Can't open blockdev [ 489.008751][T15991] /dev/rnullb0: Can't open blockdev [ 489.234413][T13542] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 489.397596][ T5926] usb 3-1: new high-speed USB device number 92 using dummy_hcd [ 489.569650][ T5926] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 489.600377][ T5926] usb 3-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 489.632543][ T5926] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 489.660440][ T5926] usb 3-1: config 0 descriptor?? [ 489.684262][ T5926] pwc: Askey VC010 type 2 USB webcam detected. [ 490.042331][T16024] /dev/rnullb0: Can't open blockdev [ 490.122081][T16033] deleting an unspecified loop device is not supported. [ 490.285187][T16043] /dev/rnullb0: Can't open blockdev [ 490.348049][T16045] netlink: 20 bytes leftover after parsing attributes in process `syz.5.2893'. [ 490.353353][T16000] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 490.359547][T16045] QAT: Invalid ioctl 21531 [ 490.369070][ T5926] pwc: recv_control_msg error -32 req 02 val 2700 [ 490.377926][T16000] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 490.401728][T16048] /dev/rnullb0: Can't open blockdev [ 490.467472][ T5926] pwc: recv_control_msg error -71 req 02 val 2c00 [ 490.470116][T16062] netlink: 60 bytes leftover after parsing attributes in process `syz.2.2897'. [ 490.483796][ T5926] pwc: recv_control_msg error -71 req 04 val 1000 [ 490.492592][ T5926] pwc: recv_control_msg error -71 req 04 val 1300 [ 490.500866][ T5926] pwc: recv_control_msg error -71 req 04 val 1400 [ 490.510439][ T5926] pwc: recv_control_msg error -71 req 02 val 2000 [ 490.521482][ T5926] pwc: recv_control_msg error -71 req 02 val 2100 [ 490.531262][ T5926] pwc: recv_control_msg error -71 req 04 val 1500 [ 490.539474][ T5926] pwc: recv_control_msg error -71 req 02 val 2500 [ 490.546505][ T5926] pwc: recv_control_msg error -71 req 02 val 2400 [ 490.556781][ T5926] pwc: recv_control_msg error -71 req 02 val 2600 [ 490.566307][ T5926] pwc: recv_control_msg error -71 req 02 val 2900 [ 490.577152][ T5926] pwc: recv_control_msg error -71 req 02 val 2800 [ 490.587762][ T5926] pwc: recv_control_msg error -71 req 04 val 1100 [ 490.602908][ T5926] pwc: recv_control_msg error -71 req 04 val 1200 [ 490.618080][ T5926] pwc: Registered as video103. [ 490.628474][ T5926] input: PWC snapshot button as /devices/platform/dummy_hcd.2/usb3/3-1/input/input45 [ 490.659352][ T5926] usb 3-1: USB disconnect, device number 92 [ 490.770055][T16072] /dev/rnullb0: Can't open blockdev [ 490.794560][ T5885] usb 5-1: new high-speed USB device number 57 using dummy_hcd [ 490.954733][ T5885] usb 5-1: Using ep0 maxpacket: 8 [ 490.966790][ T5885] usb 5-1: New USB device found, idVendor=2770, idProduct=930c, bcdDevice=8d.6a [ 490.996664][ T5885] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 491.004915][ T5885] usb 5-1: Product: syz [ 491.009534][ T5885] usb 5-1: Manufacturer: syz [ 491.015346][ T5885] usb 5-1: SerialNumber: syz [ 491.028827][ T5885] usb 5-1: config 0 descriptor?? [ 491.048733][ T5885] gspca_main: sq930x-2.14.0 probing 2770:930c [ 491.252509][T16086] /dev/rnullb0: Can't open blockdev [ 491.259072][T16087] /dev/rnullb0: Can't open blockdev [ 491.431711][T16093] netlink: 'syz.3.2905': attribute type 11 has an invalid length. [ 491.439812][ T5885] gspca_sq930x: ucbus_write failed -71 [ 491.640858][ C0] ------------[ cut here ]------------ [ 491.646389][ C0] WARNING: ./include/linux/skbuff.h:1165 at nf_send_unreach6+0x828/0xa20, CPU#0: kworker/0:2/1212 [ 491.657161][ C0] Modules linked in: [ 491.661101][ C0] CPU: 0 UID: 0 PID: 1212 Comm: kworker/0:2 Not tainted syzkaller #0 PREEMPT(full) [ 491.670497][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 491.680869][ C0] Workqueue: wg-crypt-wg0 wg_packet_tx_worker [ 491.686996][ C0] RIP: 0010:nf_send_unreach6+0x828/0xa20 [ 491.692761][ C0] Code: 85 f6 74 0a e8 39 1b 6f f7 e9 c8 fc ff ff e8 2f 1b 6f f7 4c 8b 7c 24 18 e9 34 fa ff ff e8 20 1b 6f f7 eb 9b e8 19 1b 6f f7 90 <0f> 0b 90 e9 c7 fb ff ff 48 85 db 0f 84 81 00 00 00 4c 8d a4 24 20 [ 491.712595][ C0] RSP: 0018:ffffc900000073c0 EFLAGS: 00010246 [ 491.718721][ C0] RAX: ffffffff8a51b3b7 RBX: ffff88802f1d13c0 RCX: ffff888027695a00 [ 491.726742][ C0] RDX: 0000000000000100 RSI: 0000000000000000 RDI: 0000000000000000 [ 491.734824][ C0] RBP: ffffc90000007568 R08: ffff888054044b83 R09: 1ffff1100a808970 [ 491.742960][ C0] R10: dffffc0000000000 R11: ffffed100a808971 R12: ffff88802b45a101 [ 491.750981][ C0] R13: dffffc0000000001 R14: 1ffff11005e3a283 R15: 0000000000000000 [ 491.759110][ C0] FS: 0000000000000000(0000) GS:ffff8881257c4000(0000) knlGS:0000000000000000 [ 491.768086][ C0] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 491.774766][ C0] CR2: 0000200000000080 CR3: 000000007aa7a000 CR4: 00000000003526f0 [ 491.782886][ C0] Call Trace: [ 491.786177][ C0] [ 491.789053][ C0] ? wg_packet_receive+0x11e9/0x25b0 [ 491.794373][ C0] ? __pfx_nf_send_unreach6+0x10/0x10 [ 491.799807][ C0] ? udp4_lib_lookup2+0x3bc/0x950 [ 491.804866][ C0] ? udp4_lib_lookup2+0x946/0x950 [ 491.810119][ C0] ? xfrm4_policy_check+0x3e3/0x6c0 [ 491.815351][ C0] ? udp_queue_rcv_one_skb+0x1867/0x19e0 [ 491.821250][ C0] nft_reject_inet_eval+0x441/0x690 [ 491.826485][ C0] nft_do_chain+0x40c/0x1920 [ 491.831243][ C0] ? __pfx_nft_do_chain+0x10/0x10 [ 491.836281][ C0] ? ipv6_find_hdr+0xc78/0x1050 [ 491.841170][ C0] ? rcu_is_watching+0x15/0xb0 [ 491.846018][ C0] ? ip_protocol_deliver_rcu+0x357/0x440 [ 491.851680][ C0] nft_do_chain_inet+0x25d/0x340 [ 491.856783][ C0] ? __pfx_nft_do_chain_inet+0x10/0x10 [ 491.862252][ C0] ? NF_HOOK+0x9a/0x3a0 [ 491.866474][ C0] ? rcu_is_watching+0x15/0xb0 [ 491.871437][ C0] ? lock_acquire+0x5f/0x360 [ 491.876081][ C0] ? ip_sabotage_in+0x57/0x270 [ 491.880951][ C0] ? __pfx_nft_do_chain_inet+0x10/0x10 [ 491.886458][ C0] nf_hook_slow+0xc5/0x220 [ 491.890894][ C0] NF_HOOK+0x206/0x3a0 [ 491.894995][ C0] ? skb_orphan+0xaf/0xd0 [ 491.900001][ C0] ? __pfx_ip6_rcv_finish+0x10/0x10 [ 491.905224][ C0] ? NF_HOOK+0x9a/0x3a0 [ 491.909446][ C0] ? __pfx_NF_HOOK+0x10/0x10 [ 491.914063][ C0] ? __pfx_ip6_rcv_finish+0x10/0x10 [ 491.919547][ C0] __netif_receive_skb+0xd3/0x380 [ 491.924783][ C0] ? process_backlog+0x2d5/0x14f0 [ 491.929955][ C0] process_backlog+0x60e/0x14f0 [ 491.934942][ C0] ? __pfx_process_backlog+0x10/0x10 [ 491.940372][ C0] ? xdp_do_check_flushed+0x21b/0x240 [ 491.945781][ C0] __napi_poll+0xc4/0x360 [ 491.950156][ C0] ? rcu_is_watching+0x15/0xb0 [ 491.955117][ C0] net_rx_action+0x707/0xe30 [ 491.959764][ C0] ? __pfx_net_rx_action+0x10/0x10 [ 491.964898][ C0] ? kvm_sched_clock_read+0x11/0x20 [ 491.970186][ C0] ? __pfx_sched_clock_cpu+0x10/0x10 [ 491.975497][ C0] handle_softirqs+0x283/0x870 [ 491.980295][ C0] ? do_softirq+0xec/0x180 [ 491.985071][ C0] ? __pfx_handle_softirqs+0x10/0x10 [ 491.990565][ C0] ? wg_socket_send_skb_to_peer+0x16b/0x1d0 [ 491.996594][ C0] do_softirq+0xec/0x180 [ 492.000869][ C0] [ 492.003847][ C0] [ 492.006786][ C0] ? __pfx_do_softirq+0x10/0x10 [ 492.011756][ C0] ? rcu_is_watching+0x15/0xb0 [ 492.016572][ C0] __local_bh_enable_ip+0x17d/0x1c0 [ 492.021793][ C0] ? __pfx___local_bh_enable_ip+0x10/0x10 [ 492.027652][ C0] ? do_raw_read_unlock+0x3d/0x80 [ 492.032711][ C0] wg_socket_send_skb_to_peer+0x16b/0x1d0 [ 492.038479][ C0] wg_packet_tx_worker+0x1c8/0x7c0 [ 492.043748][ C0] ? rcu_is_watching+0x15/0xb0 [ 492.048645][ C0] ? process_scheduled_works+0x9ef/0x17b0 [ 492.054475][ C0] process_scheduled_works+0xae1/0x17b0 [ 492.060261][ C0] ? __pfx_process_scheduled_works+0x10/0x10 [ 492.066331][ C0] worker_thread+0x8a0/0xda0 [ 492.070972][ C0] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 492.077355][ C0] ? _raw_spin_unlock_irqrestore+0xad/0x110 [ 492.083358][ C0] ? __kthread_parkme+0x7b/0x200 [ 492.088525][ C0] kthread+0x711/0x8a0 [ 492.092633][ C0] ? __pfx_worker_thread+0x10/0x10 [ 492.097791][ C0] ? __pfx_kthread+0x10/0x10 [ 492.102544][ C0] ? rcu_is_watching+0x15/0xb0 [ 492.107434][ C0] ? __pfx_kthread+0x10/0x10 [ 492.112180][ C0] ret_from_fork+0x47c/0x820 [ 492.116932][ C0] ? __pfx_ret_from_fork+0x10/0x10 [ 492.122107][ C0] ? __switch_to_asm+0x39/0x70 [ 492.126919][ C0] ? __switch_to_asm+0x33/0x70 [ 492.131815][ C0] ? __pfx_kthread+0x10/0x10 [ 492.136524][ C0] ret_from_fork_asm+0x1a/0x30 [ 492.141376][ C0] [ 492.144427][ C0] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 492.151809][ C0] CPU: 0 UID: 0 PID: 1212 Comm: kworker/0:2 Not tainted syzkaller #0 PREEMPT(full) [ 492.161189][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 492.171267][ C0] Workqueue: wg-crypt-wg0 wg_packet_tx_worker [ 492.177553][ C0] Call Trace: [ 492.180939][ C0] [ 492.183894][ C0] dump_stack_lvl+0x99/0x250 [ 492.188522][ C0] ? __asan_memcpy+0x40/0x70 [ 492.193295][ C0] ? __pfx_dump_stack_lvl+0x10/0x10 [ 492.198625][ C0] ? __pfx__printk+0x10/0x10 [ 492.203250][ C0] vpanic+0x281/0x750 [ 492.207257][ C0] ? __pfx_vpanic+0x10/0x10 [ 492.211870][ C0] ? is_bpf_text_address+0x292/0x2b0 [ 492.217179][ C0] ? is_bpf_text_address+0x26/0x2b0 [ 492.222644][ C0] panic+0xb9/0xc0 [ 492.226391][ C0] ? __pfx_panic+0x10/0x10 [ 492.230834][ C0] ? ret_from_fork_asm+0x1a/0x30 [ 492.235801][ C0] __warn+0x334/0x4c0 [ 492.239904][ C0] ? nf_send_unreach6+0x828/0xa20 [ 492.244961][ C0] ? nf_send_unreach6+0x828/0xa20 [ 492.250100][ C0] report_bug+0x2be/0x4f0 [ 492.254548][ C0] ? nf_send_unreach6+0x828/0xa20 [ 492.259603][ C0] ? nf_send_unreach6+0x828/0xa20 [ 492.264658][ C0] ? nf_send_unreach6+0x82a/0xa20 [ 492.269899][ C0] handle_bug+0x84/0x160 [ 492.274173][ C0] exc_invalid_op+0x1a/0x50 [ 492.278808][ C0] asm_exc_invalid_op+0x1a/0x20 [ 492.283864][ C0] RIP: 0010:nf_send_unreach6+0x828/0xa20 [ 492.289563][ C0] Code: 85 f6 74 0a e8 39 1b 6f f7 e9 c8 fc ff ff e8 2f 1b 6f f7 4c 8b 7c 24 18 e9 34 fa ff ff e8 20 1b 6f f7 eb 9b e8 19 1b 6f f7 90 <0f> 0b 90 e9 c7 fb ff ff 48 85 db 0f 84 81 00 00 00 4c 8d a4 24 20 [ 492.309447][ C0] RSP: 0018:ffffc900000073c0 EFLAGS: 00010246 [ 492.315629][ C0] RAX: ffffffff8a51b3b7 RBX: ffff88802f1d13c0 RCX: ffff888027695a00 [ 492.323631][ C0] RDX: 0000000000000100 RSI: 0000000000000000 RDI: 0000000000000000 [ 492.331705][ C0] RBP: ffffc90000007568 R08: ffff888054044b83 R09: 1ffff1100a808970 [ 492.339791][ C0] R10: dffffc0000000000 R11: ffffed100a808971 R12: ffff88802b45a101 [ 492.347784][ C0] R13: dffffc0000000001 R14: 1ffff11005e3a283 R15: 0000000000000000 [ 492.355876][ C0] ? nf_send_unreach6+0x827/0xa20 [ 492.361019][ C0] ? wg_packet_receive+0x11e9/0x25b0 [ 492.366422][ C0] ? __pfx_nf_send_unreach6+0x10/0x10 [ 492.371816][ C0] ? udp4_lib_lookup2+0x3bc/0x950 [ 492.376954][ C0] ? udp4_lib_lookup2+0x946/0x950 [ 492.382005][ C0] ? xfrm4_policy_check+0x3e3/0x6c0 [ 492.387228][ C0] ? udp_queue_rcv_one_skb+0x1867/0x19e0 [ 492.392932][ C0] nft_reject_inet_eval+0x441/0x690 [ 492.398153][ C0] nft_do_chain+0x40c/0x1920 [ 492.402775][ C0] ? __pfx_nft_do_chain+0x10/0x10 [ 492.407814][ C0] ? ipv6_find_hdr+0xc78/0x1050 [ 492.412704][ C0] ? rcu_is_watching+0x15/0xb0 [ 492.417749][ C0] ? ip_protocol_deliver_rcu+0x357/0x440 [ 492.423408][ C0] nft_do_chain_inet+0x25d/0x340 [ 492.428415][ C0] ? __pfx_nft_do_chain_inet+0x10/0x10 [ 492.434002][ C0] ? NF_HOOK+0x9a/0x3a0 [ 492.438272][ C0] ? rcu_is_watching+0x15/0xb0 [ 492.443068][ C0] ? lock_acquire+0x5f/0x360 [ 492.447776][ C0] ? ip_sabotage_in+0x57/0x270 [ 492.452659][ C0] ? __pfx_nft_do_chain_inet+0x10/0x10 [ 492.458151][ C0] nf_hook_slow+0xc5/0x220 [ 492.462582][ C0] NF_HOOK+0x206/0x3a0 [ 492.466654][ C0] ? skb_orphan+0xaf/0xd0 [ 492.470989][ C0] ? __pfx_ip6_rcv_finish+0x10/0x10 [ 492.476488][ C0] ? NF_HOOK+0x9a/0x3a0 [ 492.480756][ C0] ? __pfx_NF_HOOK+0x10/0x10 [ 492.485417][ C0] ? __pfx_ip6_rcv_finish+0x10/0x10 [ 492.490613][ C0] __netif_receive_skb+0xd3/0x380 [ 492.495628][ C0] ? process_backlog+0x2d5/0x14f0 [ 492.500732][ C0] process_backlog+0x60e/0x14f0 [ 492.505664][ C0] ? __pfx_process_backlog+0x10/0x10 [ 492.510939][ C0] ? xdp_do_check_flushed+0x21b/0x240 [ 492.516487][ C0] __napi_poll+0xc4/0x360 [ 492.520827][ C0] ? rcu_is_watching+0x15/0xb0 [ 492.525861][ C0] net_rx_action+0x707/0xe30 [ 492.530494][ C0] ? __pfx_net_rx_action+0x10/0x10 [ 492.536042][ C0] ? kvm_sched_clock_read+0x11/0x20 [ 492.541408][ C0] ? __pfx_sched_clock_cpu+0x10/0x10 [ 492.546685][ C0] handle_softirqs+0x283/0x870 [ 492.551445][ C0] ? do_softirq+0xec/0x180 [ 492.556036][ C0] ? __pfx_handle_softirqs+0x10/0x10 [ 492.561318][ C0] ? wg_socket_send_skb_to_peer+0x16b/0x1d0 [ 492.567453][ C0] do_softirq+0xec/0x180 [ 492.571700][ C0] [ 492.574667][ C0] [ 492.577762][ C0] ? __pfx_do_softirq+0x10/0x10 [ 492.582607][ C0] ? rcu_is_watching+0x15/0xb0 [ 492.587364][ C0] __local_bh_enable_ip+0x17d/0x1c0 [ 492.592642][ C0] ? __pfx___local_bh_enable_ip+0x10/0x10 [ 492.598534][ C0] ? do_raw_read_unlock+0x3d/0x80 [ 492.603550][ C0] wg_socket_send_skb_to_peer+0x16b/0x1d0 [ 492.609353][ C0] wg_packet_tx_worker+0x1c8/0x7c0 [ 492.614457][ C0] ? rcu_is_watching+0x15/0xb0 [ 492.619229][ C0] ? process_scheduled_works+0x9ef/0x17b0 [ 492.625026][ C0] process_scheduled_works+0xae1/0x17b0 [ 492.630583][ C0] ? __pfx_process_scheduled_works+0x10/0x10 [ 492.636757][ C0] worker_thread+0x8a0/0xda0 [ 492.641439][ C0] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 492.648150][ C0] ? _raw_spin_unlock_irqrestore+0xad/0x110 [ 492.654121][ C0] ? __kthread_parkme+0x7b/0x200 [ 492.659137][ C0] kthread+0x711/0x8a0 [ 492.663287][ C0] ? __pfx_worker_thread+0x10/0x10 [ 492.668390][ C0] ? __pfx_kthread+0x10/0x10 [ 492.672982][ C0] ? rcu_is_watching+0x15/0xb0 [ 492.677923][ C0] ? __pfx_kthread+0x10/0x10 [ 492.682547][ C0] ret_from_fork+0x47c/0x820 [ 492.687148][ C0] ? __pfx_ret_from_fork+0x10/0x10 [ 492.692257][ C0] ? __switch_to_asm+0x39/0x70 [ 492.697100][ C0] ? __switch_to_asm+0x33/0x70 [ 492.701950][ C0] ? __pfx_kthread+0x10/0x10 [ 492.706549][ C0] ret_from_fork_asm+0x1a/0x30 [ 492.711307][ C0] [ 492.714926][ C0] Kernel Offset: disabled [ 492.719255][ C0] Rebooting in 86400 seconds..