last executing test programs: 3m11.363297923s ago: executing program 2 (id=1231): mkdir(&(0x7f00000002c0)='./file0\x00', 0x0) mkdir(&(0x7f0000000180)='./file1\x00', 0x0) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000500)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}]}) chdir(&(0x7f0000000140)='./bus\x00') openat(0xffffffffffffff9c, &(0x7f0000001740)='.\x00', 0x51f001, 0x488) 3m11.363120996s ago: executing program 2 (id=1232): mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x0, 0x3032, 0xffffffffffffffff, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="9feb01001800000000000000240000002400000002000000000000000300000d0000000609000000000000430200"], &(0x7f0000000f40)=""/4096, 0x3e, 0x1000, 0x1, 0x0, 0x0, @void, @value}, 0x28) r0 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000001c0)={'bridge0\x00', 0x0}) setsockopt$packet_int(r0, 0x107, 0xf, &(0x7f0000000000)=0xf3f, 0x4) sendto$packet(r0, &(0x7f0000000080)="3f031c000302140006001e0089003307258000000000000000c988a807008100000088a800ff", 0x26, 0x4000014, &(0x7f00000007c0)={0xc9, 0x8100, r1, 0x1, 0x8, 0x6, @random="c52f686e467e"}, 0x14) 3m11.346098775s ago: executing program 2 (id=1233): r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000000)=ANY=[@ANYBLOB="120100001d9167204f17316a3f26010203010902120001400000000904"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$printer(r0, 0x0, 0x0) syz_usb_control_io$printer(r0, 0x0, 0x0) 3m9.046490305s ago: executing program 2 (id=1266): mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) mount$bind(&(0x7f00000002c0)='.\x00', &(0x7f0000000200)='./file0\x00', 0x0, 0x101091, 0x0) mount$bind(0x0, &(0x7f0000000140)='./file0\x00', 0x0, 0x100000, 0x0) mount$bind(&(0x7f0000000080)='./file0\x00', &(0x7f0000000300)='./file0/file0\x00', 0x0, 0x2101c84, 0x0) r0 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r0, &(0x7f0000008080)='./file0\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x167) 3m9.022730795s ago: executing program 2 (id=1267): openat$sequencer2(0xffffffffffffff9c, 0x0, 0x0, 0x0) r0 = socket$rxrpc(0x21, 0x2, 0xa) ioctl$int_in(r0, 0x5452, &(0x7f0000000040)=0x8) poll(&(0x7f00000000c0)=[{r0}], 0x1, 0xf45) setsockopt$sock_int(r0, 0x1, 0x7, &(0x7f0000000240), 0x4) 3m8.787214601s ago: executing program 2 (id=1268): r0 = userfaultfd(0x1) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000000040)) r1 = syz_io_uring_setup(0x88f, &(0x7f0000000200)={0x0, 0xaee2, 0x0, 0xffffffff, 0xbfdffffe}, &(0x7f0000000000)=0x0, &(0x7f0000000280)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r2, r3, &(0x7f00000002c0)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x3}) io_uring_enter(r1, 0x47f6, 0x0, 0x0, 0x0, 0x0) 3m8.747848384s ago: executing program 32 (id=1268): r0 = userfaultfd(0x1) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000000040)) r1 = syz_io_uring_setup(0x88f, &(0x7f0000000200)={0x0, 0xaee2, 0x0, 0xffffffff, 0xbfdffffe}, &(0x7f0000000000)=0x0, &(0x7f0000000280)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r2, r3, &(0x7f00000002c0)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x3}) io_uring_enter(r1, 0x47f6, 0x0, 0x0, 0x0, 0x0) 1m10.284718055s ago: executing program 5 (id=2191): syz_io_uring_setup(0x0, &(0x7f0000000400)={0x0, 0x0, 0x10, 0xfffffffe}, 0x0, 0x0) r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) ioctl$VHOST_SET_OWNER(r0, 0xaf01, 0x0) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000300)={0x1, 0x0, 0x0, &(0x7f0000001600)=""/78, 0x0}) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000280)={0x0, 0x0, 0x0, &(0x7f0000000340)=""/185, &(0x7f0000000140)=""/92}) pwritev2(0xffffffffffffffff, &(0x7f00000012c0)=[{&(0x7f0000000100)="7270aa3f0c63ef31716980d71af481e691d156e5c690c37493c965008b713ed133a85027d43b49d05b8ec0e538f674752205f76fb42632a5233a7d64e1cea692029b6a", 0x43}], 0x1, 0x0, 0x0, 0x0) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000000ac0)) ioctl$VHOST_VSOCK_SET_RUNNING(r0, 0x4004af61, &(0x7f00000000c0)=0x1) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000400)=""/253, 0x0, &(0x7f0000000600)=""/91}) ioctl$VHOST_VSOCK_SET_GUEST_CID(r0, 0x4008af60, &(0x7f0000000040)={@my=0x1}) r1 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r1, &(0x7f00000001c0)={0x28, 0x0, 0x0, @my=0x1}, 0x10) 1m9.322884875s ago: executing program 5 (id=2194): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x6, 0x4, &(0x7f00000006c0)=ANY=[@ANYBLOB="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"], &(0x7f00000000c0)='GPL\x00', 0x0, 0x1000, &(0x7f0000001400)=""/4106, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x18) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000380)=ANY=[@ANYBLOB="34000000100001f8ffffff000000000000000000", @ANYRES32=0x0, @ANYBLOB="00000000000000000c002b8008000100", @ANYRES32=r2, @ANYBLOB="08001b"], 0x34}}, 0x4004010) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000580)=@newlink={0x34, 0x10, 0x801, 0x0, 0x4, {0x0, 0x0, 0x0, 0x0, 0x4000}, [@IFLA_XDP={0xc, 0x2b, 0x0, 0x1, [@IFLA_XDP_FD={0x8}]}, @IFLA_GROUP={0x8}]}, 0x34}}, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0x1, 0x7, 0x44, 0x2, 0x1, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) symlinkat(&(0x7f0000001040)='./file0/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa/file0\x00', 0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00') bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000000)={{r3, 0xffffffffffffffff}, &(0x7f0000000580), &(0x7f00000005c0)}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x11, 0xc, &(0x7f00000002c0)=ANY=[@ANYBLOB="180000803013e600000001000005000000f79f94", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000030000009500000000000000"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) write$FUSE_OPEN(r5, &(0x7f0000000080)={0x20, 0x0, 0x0, {0x0, 0x14}}, 0x20) 1m9.111803618s ago: executing program 5 (id=2197): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) close(r1) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x1}) close(r2) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)) ioctl$SIOCSIFHWADDR(r1, 0x8922, &(0x7f0000002280)={'syzkaller0\x00', @random="2b0100004ec6"}) ioctl$TUNSETLINK(r3, 0x400454cd, 0x308) close(r0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)) ioctl$SIOCSIFHWADDR(r0, 0x8914, &(0x7f0000000140)={'syzkaller0\x00', @random="371692e7f7ef"}) 1m9.034799913s ago: executing program 5 (id=2199): mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x0) mount$fuse(0x0, 0x0, 0x0, 0x2b38094, &(0x7f0000000400)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=0x0]) mount(0x0, &(0x7f0000000380)='./file1\x00', &(0x7f0000000040)='autofs\x00', 0x0, &(0x7f0000000400)) chdir(&(0x7f0000000080)='./file1\x00') r0 = open(&(0x7f0000000000)='.\x00', 0x0, 0x0) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) chdir(&(0x7f0000000140)='./bus\x00') mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) mount$tmpfs(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000000300), 0x2008000, 0x0) mkdir(&(0x7f0000000040)='./file1\x00', 0x0) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000340)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}]}) ioctl$AUTOFS_IOC_PROTOSUBVER(r0, 0x40049366, &(0x7f0000000180)) 1m8.192944315s ago: executing program 5 (id=2205): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = dup(r1) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000080)={0x0, 0x2, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f00000000c0)=[@text64={0x40, 0x0}], 0x1, 0x50, 0x0, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000200)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0) r4 = socket$inet_sctp(0x2, 0x5, 0x84) getsockopt$inet_sctp_SCTP_PEER_ADDR_THLDS(r4, 0x84, 0x23, 0x0, &(0x7f0000000400)) ioctl$KVM_REGISTER_COALESCED_MMIO(r1, 0x4010ae67, &(0x7f00000001c0)={0x0, 0xd000}) ioctl$KVM_NMI(r3, 0xae9a) ioctl$KVM_RUN(r3, 0xae80, 0x0) 1m8.136800415s ago: executing program 5 (id=2206): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000280)={0x18, 0x5, &(0x7f0000000040)=ANY=[@ANYBLOB="180100002100000000000000000000008500000075000000a50000002300000095"], &(0x7f00000000c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) openat$fuse(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) r3 = socket(0x848000000015, 0x805, 0x0) bind$inet6(r3, &(0x7f00000000c0)={0xa, 0x0, 0x0, @dev={0xfe, 0x80, '\x00', 0x1a}, 0x10}, 0x1c) sendto$inet6(r3, 0x0, 0x0, 0x0, &(0x7f0000000000)={0xa, 0x0, 0x0, @private2}, 0x1c) 1m8.036058201s ago: executing program 33 (id=2206): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000280)={0x18, 0x5, &(0x7f0000000040)=ANY=[@ANYBLOB="180100002100000000000000000000008500000075000000a50000002300000095"], &(0x7f00000000c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) openat$fuse(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) r3 = socket(0x848000000015, 0x805, 0x0) bind$inet6(r3, &(0x7f00000000c0)={0xa, 0x0, 0x0, @dev={0xfe, 0x80, '\x00', 0x1a}, 0x10}, 0x1c) sendto$inet6(r3, 0x0, 0x0, 0x0, &(0x7f0000000000)={0xa, 0x0, 0x0, @private2}, 0x1c) 11.846391028s ago: executing program 0 (id=2453): syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$l2tp(&(0x7f0000000080), 0xffffffffffffffff) setsockopt$packet_fanout_data(0xffffffffffffffff, 0x107, 0x16, &(0x7f0000000100)={0x0, &(0x7f0000000080)}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) sched_setaffinity(0x0, 0x0, 0x0) sendmmsg$inet(0xffffffffffffffff, &(0x7f0000001400), 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x3) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) syz_open_procfs(0x0, &(0x7f00000004c0)='net/wireless\x00') r1 = socket$inet_smc(0x2b, 0x1, 0x0) setsockopt$inet_tcp_int(r1, 0x6, 0x1e, &(0x7f0000000380)=0x1, 0x4) 11.12990251s ago: executing program 0 (id=2458): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x3) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) ioctl$PIO_FONTX(0xffffffffffffffff, 0x4b6c, 0x0) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f0000000240)={0x26, 'hash\x00', 0x0, 0x0, 'michael_mic-generic\x00'}, 0x3a) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000000040)="050000000091c700", 0x8) r2 = accept4(r1, 0x0, 0x0, 0x0) sendto$inet(r2, &(0x7f0000000440)="308f6fdcd8ef95ac180e28e3b7dafa546e208e23230c54cd672deb128dccb3484fc090000000000000abc8c5ed1d0658fe873325c8de8347cf2d7dbcf7", 0xfffffffffffffc65, 0x240400c4, 0x0, 0x0) 10.486701173s ago: executing program 4 (id=2461): ioctl$KVM_SET_PIT(0xffffffffffffffff, 0x4048aec9, &(0x7f0000000080)={[{0x0, 0x0, 0xff}, {0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffa}, {0x0, 0x0, 0x8, 0x3e}]}) socket$key(0xf, 0x3, 0x2) sendmsg$key(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={0x0}}, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000008c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000840)={0x0, 0x0, &(0x7f0000000800)={&(0x7f00000002c0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0xa}}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x5, 0x0, 0x0, {0x7, 0x0, 0x1}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_DELTABLE={0x14, 0x2, 0xa, 0x201, 0x0, 0x0, {0x0, 0x0, 0x6}}, @NFT_MSG_NEWCHAIN={0x20, 0x3, 0xa, 0x101, 0x0, 0x0, {0x2, 0x0, 0x8}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0xa}}}, 0x7c}, 0x1, 0x0, 0x0, 0x8000}, 0x20000000) sendmsg$key(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="020a040007000000b6f1ffff0000854105001a"], 0x38}}, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x3, &(0x7f0000000500)=ANY=[@ANYBLOB="1800fbe3e301033658f9"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r1 = openat$cgroup_int(0xffffffffffffffff, &(0x7f0000000240)='memory.high\x00', 0x2, 0x0) mmap(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x8, 0x12, r1, 0x3aeae000) r2 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$F2FS_IOC_START_VOLATILE_WRITE(r2, 0x40186f40, 0x20000502) r3 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000100), 0x202) ioctl$SNDRV_SEQ_IOCTL_PVERSION(r3, 0x80045300, &(0x7f0000000140)) 9.849270153s ago: executing program 0 (id=2462): syz_open_dev$video4linux(0x0, 0x101, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) syz_genetlink_get_family_id$tipc(0x0, 0xffffffffffffffff) io_setup(0x3, 0x0) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$lock(r1, 0x26, &(0x7f00000002c0)={0x0, 0x1, 0x32c4000, 0x9}) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01010000000000000000020000000900010073797a300000000048000000030a01010000000000000000020000000900010073797a30000000000900030073797a3200000000080007006e617400140004800800014000000001080002"], 0xa4}}, 0x0) 9.848722134s ago: executing program 4 (id=2465): sendmsg$WG_CMD_SET_DEVICE(0xffffffffffffffff, 0x0, 0x20000010) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './bus\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = socket(0x10, 0x3, 0x0) write(r3, &(0x7f00000000c0)="1c0000001e005f0214fffffffffffff8070000001700000000000000", 0x1c) 8.903051118s ago: executing program 4 (id=2467): open(&(0x7f0000000140)='./file0\x00', 0x149442, 0x95) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000200), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000000100), 0x0, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=00000000000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r0, &(0x7f00000021c0)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r0, &(0x7f0000000040)={0x50, 0x0, r1, {0x7, 0x1f, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff}}, 0x50) syz_fuse_handle_req(r0, &(0x7f0000008380)="000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000080000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000dc4e00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ba045abcd5dfc67d000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000230000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000050000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000209bfd66eea210560000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000020000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000040000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001354c4b600", 0x2000, &(0x7f00000062c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) newfstatat(0xffffffffffffff9c, &(0x7f00000001c0)='./file0\x00', 0x0, 0x0) syz_fuse_handle_req(r0, &(0x7f000000a380)="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", 0x2000, &(0x7f0000000d00)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000500)={0x20}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r2 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x101001, 0x0) syz_fuse_handle_req(r0, &(0x7f0000006380)="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", 0x2000, &(0x7f0000000dc0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000340)={0x18}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) writev(r2, &(0x7f00000007c0)=[{&(0x7f0000000440)='e', 0x1}], 0x1) syz_fuse_handle_req(r0, &(0x7f0000004200)="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", 0x2000, &(0x7f0000001500)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000380)={0x18, 0x0, 0x7, {0x8001}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 8.162355725s ago: executing program 0 (id=2468): r0 = syz_usb_connect(0x0, 0x1cb, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000122f0d4071040403dfe4000000010902b901010000003f0904"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$uac1(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$printer(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$uac1(r0, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$printer(r0, 0x0, &(0x7f0000000540)={0x34, &(0x7f00000000c0)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0}) 7.07494047s ago: executing program 1 (id=2473): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$sock_ifreq(r0, 0x891d, &(0x7f00000004c0)={'batadv0\x00', @ifru_settings={0x0, 0x0, @te1=0x0}}) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x4) sched_setaffinity(r1, 0x0, 0x0) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nfc(&(0x7f0000000c80), r2) r3 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) read$nci(r3, 0x0, 0x0) ioctl$IOCTL_GET_NCIDEV_IDX(r3, 0x0, &(0x7f00000000c0)=0x0) r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r5) sendmsg$NFC_CMD_DEV_UP(r5, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000280)={0x1c, r6, 0x1, 0x0, 0xfffffffd, {}, [@NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r4}]}, 0x1c}}, 0x0) 6.203748965s ago: executing program 1 (id=2485): socket$inet6(0xa, 0x5, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0xfffffffffffffffc}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, 0x0) socket$nl_route(0x10, 0x3, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, 0x0, 0x0, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_RTOINFO(r3, 0x84, 0x85, &(0x7f0000005f40), &(0x7f0000005e80)=0xfc9e) madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0xa) 4.728196995s ago: executing program 4 (id=2477): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000840)={0x18, 0x3, &(0x7f00000000c0)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x8, 0x0, 0x0, 0x41000, 0x3, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x37, @void, @value}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x6) syz_clone(0x800c000, &(0x7f0000001480), 0x0, 0x0, 0x0, 0x0) r0 = getpid() bpf$MAP_CREATE(0x0, 0x0, 0x50) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount(&(0x7f0000000180)=@nullb, &(0x7f00000001c0)='./file0\x00', &(0x7f0000000200)='bfs\x00', 0x0, 0x0) 4.715352621s ago: executing program 0 (id=2478): r0 = socket$inet6(0xa, 0x3, 0xff) r1 = socket$kcm(0x10, 0x2, 0x0) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) socket$inet_icmp_raw(0x2, 0x3, 0x1) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) futex_waitv(0x0, 0x0, 0x0, 0x0, 0x1) r4 = socket$kcm(0x29, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0x5, 0x0, &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @flow_dissector, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) socket(0x10, 0x3, 0x0) pwritev2(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, 0x0}, 0x20000811) ioctl$sock_kcm_SIOCKCMATTACH(r4, 0x89e0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_xfrm(r2, &(0x7f0000000900)={0x0, 0x0, &(0x7f00000008c0)={&(0x7f0000000080)=@polexpire={0xc0, 0x1b, 0x1, 0x70bd29, 0x0, {{{@in6=@private0, @in6=@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x0, 0x0, 0x1}}}}, 0xc0}}, 0x0) sendmsg$kcm(r1, 0x0, 0x0) connect$inet6(r0, &(0x7f0000000200)={0xa, 0x0, 0x0, @mcast2, 0x4}, 0x1c) r5 = dup2(r0, r0) write$FUSE_NOTIFY_STORE(r5, &(0x7f0000000000)={0x28, 0x4, 0x0, {0x3, 0x7}}, 0x28) syz_open_dev$vcsn(&(0x7f0000000040), 0x5, 0x801) 4.435126055s ago: executing program 1 (id=2481): ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000000)={'syztnl0\x00', &(0x7f00000002c0)={'syztnl1\x00', 0x0, 0x0, 0x0, 0x0, 0x0, {{0xe, 0x4, 0x0, 0x2, 0x38, 0x67, 0x0, 0x0, 0x0, 0x0, @broadcast, @remote, {[@timestamp={0x44, 0x8, 0x0, 0x0, 0x9, [0x4]}, @noop, @noop, @rr={0x7, 0x17, 0x33, [@multicast1, @remote, @multicast1, @private=0xa010102, @remote]}]}}}}}) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='hugetlb.2MB.usage_in_bytes\x00', 0x275a, 0x0) write$binfmt_script(r2, &(0x7f0000000240), 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x280000b, 0x28011, r2, 0x0) r3 = dup(r1) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000080)={0x0, 0x2, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000300)=[@text64={0x40, 0x0}], 0xffff, 0x0, 0x0, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000200)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_REGISTER_COALESCED_MMIO(r1, 0x4010ae67, &(0x7f00000001c0)={0x0, 0xd000}) ioctl$KVM_NMI(r4, 0xae9a) ioctl$KVM_RUN(r4, 0xae80, 0x0) 3.985531052s ago: executing program 3 (id=2482): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000400)=0x6) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x15d74000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = open(&(0x7f00009e1000)='./file0\x00', 0x60840, 0x0) fcntl$setlease(r3, 0x400, 0x0) fcntl$setlease(r3, 0x400, 0x1) openat$sequencer2(0xffffffffffffff9c, 0x0, 0x86783, 0x0) 3.786578195s ago: executing program 4 (id=2483): ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000000)={'sit0\x00', &(0x7f00000002c0)={'syztnl1\x00', 0x0, 0x0, 0x0, 0x0, 0x0, {{0x16, 0x4, 0x0, 0x0, 0x58, 0x64, 0x0, 0x0, 0x0, 0x0, @broadcast, @remote, {[@timestamp={0x44, 0xc, 0x0, 0x0, 0x9, [0x5, 0xfffffff9]}, @timestamp_prespec={0x44, 0x34, 0xc0, 0x3, 0x1, [{@private=0xa010100}, {@multicast1, 0x5}, {@remote}, {@broadcast, 0x2}, {@empty, 0x3}, {@private=0xa010100, 0xa}]}, @noop]}}}}}) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='hugetlb.2MB.usage_in_bytes\x00', 0x275a, 0x0) write$binfmt_script(r2, &(0x7f0000000240), 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x280000b, 0x28011, r2, 0x0) r3 = dup(r1) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000080)={0x0, 0x2, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000300)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000200)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_REGISTER_COALESCED_MMIO(r1, 0x4010ae67, &(0x7f0000000180)={0x0, 0xd000}) ioctl$KVM_NMI(r4, 0xae9a) ioctl$KVM_RUN(r4, 0xae80, 0x0) 3.140198017s ago: executing program 6 (id=2484): ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) socket$inet(0x2, 0x80007, 0xd035) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000040), 0x8002, 0x0) mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) creat(&(0x7f0000000040)='./bus\x00', 0x0) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/partitions\x00', 0x0, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x10101, 0x0) r0 = syz_open_dev$dri(&(0x7f0000000040), 0xd1d, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r0, 0xc04064a0, &(0x7f00000001c0)={0x0, &(0x7f00000000c0), 0x0, 0x0}) ioctl$DRM_IOCTL_GEM_FLINK(r0, 0xc008640a, &(0x7f0000000100)={0x0, 0x0}) ioctl$DRM_IOCTL_GEM_OPEN(0xffffffffffffffff, 0xc0106442, &(0x7f0000000180)={r1}) open$dir(&(0x7f0000000040)='./file0\x00', 0x0, 0x0) 3.014457213s ago: executing program 3 (id=2486): setsockopt(0xffffffffffffffff, 0x84, 0x7f, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) memfd_create(0x0, 0x0) r3 = socket$alg(0x26, 0x5, 0x0) bind$alg(r3, &(0x7f0000000200)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-twofish-3way\x00'}, 0x58) setsockopt$ALG_SET_KEY(r3, 0x117, 0x1, &(0x7f0000000300)="c99b57381801238c09d0ff0f1d0dbd30", 0x20) 2.363208129s ago: executing program 6 (id=2487): socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x1, 0x1b, 0x0, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) close(r0) r1 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r0, &(0x7f00000000c0)={0xa, 0x4e22, 0x0, @empty, 0x4000006}, 0x1c) listen(r1, 0x6) r2 = socket$inet_mptcp(0x2, 0x1, 0x106) connect$inet(r2, &(0x7f0000000000)={0x2, 0x4e22, @local}, 0x10) r3 = accept(r0, 0x0, 0x0) sendmsg$TEAM_CMD_OPTIONS_SET(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)=ANY=[], 0xfffffdef}}, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000740), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r4, &(0x7f0000000a80)={0x0, 0x0, &(0x7f0000000a40)={&(0x7f0000000980)=ANY=[@ANYBLOB="84000000", @ANYRES16=r5, @ANYBLOB="010000000000fbdbdf25010000000800020000000000050005000000000008000300010000004800018005000200200000000600010002000000080006000a000000080003"], 0x84}}, 0x0) recvfrom(r2, &(0x7f0000000180)=""/60, 0xfffffffffffffecb, 0x3e8, 0x0, 0x0) 2.339200773s ago: executing program 1 (id=2488): openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_ADAPTATION_LAYER(r3, 0x84, 0x7, &(0x7f00000000c0)={0xa}, 0x4) bind$inet6(r3, &(0x7f00004b8fe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) sendto$inet6(r3, &(0x7f0000847fff)='X', 0x34000, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) 2.064100353s ago: executing program 3 (id=2489): sendmsg$NFT_MSG_GETSETELEM(0xffffffffffffffff, 0x0, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) close(r0) r1 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @ipv4={'\x00', '\xff\xff', @empty}, 0xf}, 0x1c) listen(r1, 0x0) r2 = socket$inet_mptcp(0x2, 0x1, 0x106) connect$inet(r2, &(0x7f0000000000)={0x2, 0x4e22, @local}, 0x10) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r3, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000300)={0x30, r4, 0x1, 0x0, 0x0, {}, [@MPTCP_PM_ATTR_ADDR={0x1c, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @multicast1=0xac1414aa}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x1}]}]}, 0x30}}, 0x0) 1.587293116s ago: executing program 4 (id=2490): r0 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000300)={0x6, 0x3, &(0x7f00000003c0)=ANY=[@ANYBLOB="1800000003000000000000000000000095"], &(0x7f00000001c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r1 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r1, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x10) connect$inet(r1, &(0x7f0000000480)={0x2, 0x0, @multicast2}, 0x10) sendmmsg(r1, &(0x7f0000007fc0), 0x800001d, 0x0) r2 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000080)={'syz_tun\x00', 0x0}) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000000c0)={r0, r3}, 0x10) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f04ebbeea, 0x8031, 0xffffffffffffffff, 0x0) syz_emit_ethernet(0x6a, &(0x7f0000000000)={@local, @local, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x5c, 0x67, 0x0, 0x0, 0x11, 0x0, @empty, @empty}, {0x0, 0x0, 0x48, 0x0, @wg=@cookie={0x3, 0x0, "6d4dfdeb8cf7bbfe143803bec204cd32308cdd8dde0400", "c71cb8adfce542a4bc5a026c208fd0c45787e4aa384e3d26b21ea41cc128364c"}}}}}}, 0x0) 1.407276247s ago: executing program 6 (id=2491): r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) connect$bt_l2cap(r0, &(0x7f0000000000)={0x1f, 0x1, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}}, 0xe) getsockopt$sock_buf(r0, 0x1, 0x1c, 0x0, &(0x7f00000001c0)) 1.400268211s ago: executing program 6 (id=2492): socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$SO_TIMESTAMPING(0xffffffffffffffff, 0x1, 0x25, &(0x7f0000000100)=0x8, 0x4) ioctl$SNDRV_TIMER_IOCTL_CONTINUE(0xffffffffffffffff, 0x54a2) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r1, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000380)=[@text64={0x40, 0x0}], 0x1, 0x40, 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x22000, 0x1000, &(0x7f0000000000/0x1000)=nil}) ioctl$KVM_RUN(r2, 0xae80, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000012c0)={0x0, 0x0, 0x0}, 0x0) 1.332045597s ago: executing program 1 (id=2493): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x5, 0x1000087}, 0x0) epoll_pwait2(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x43, &(0x7f0000000040)=0x2) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) r1 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r1, 0x3b81, &(0x7f0000000040)={0xc, 0x0, 0x0}) ioctl$IOMMU_TEST_OP_MOCK_DOMAIN(r1, 0x3ba0, &(0x7f0000000100)={0x48, 0x2, r2}) close(r1) 972.88783ms ago: executing program 1 (id=2494): sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x200c8004, &(0x7f0000000280)={0xa, 0xe21, 0x0, @mcast1}, 0x1c) r0 = syz_open_dev$sndctrl(&(0x7f0000000000), 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_PCM_PREFER_SUBDEVICE(r0, 0x40045532, &(0x7f0000000040)) r1 = openat$audio(0xffffffffffffff9c, &(0x7f0000000140), 0x40000000040201, 0x0) r2 = syz_open_dev$sndpcmp(&(0x7f00000001c0), 0x0, 0xa2c65) write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f0000000500)={0x0, 0xfffffffffffffd83, 0xfa00, {0x0, 0x0}}, 0xfdbc) ioctl$SNDRV_PCM_IOCTL_STATUS_EXT32(r2, 0x4141, 0x0) r3 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r3, &(0x7f0000000040)={0x2, 0x4e22, @empty}, 0x67) setsockopt$SO_BINDTODEVICE(r3, 0x1, 0x19, &(0x7f00000005c0)='syz_tun\x00', 0x10) sendto$inet(r3, 0x0, 0x0, 0x20000800, &(0x7f0000000080)={0x2, 0x0, @remote}, 0x10) syz_emit_ethernet(0x42, &(0x7f0000000240)={@local, @remote, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x0, 0x34, 0x0, 0x0, 0x0, 0x6, 0x0, @remote, @local}, {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x6, 0x8, 0x10, 0x0, 0x0, 0x0, {[@timestamp={0x8, 0xa}]}}}}}}}, 0x0) 972.37432ms ago: executing program 0 (id=2495): ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000000)={'sit0\x00', &(0x7f00000002c0)={'syztnl1\x00', 0x0, 0x0, 0x0, 0x0, 0x0, {{0x26, 0x4, 0x0, 0x0, 0x98, 0x2, 0x0, 0x0, 0x0, 0x0, @broadcast, @remote, {[@timestamp={0x44, 0x1c, 0x0, 0x0, 0x0, [0x401, 0x1000, 0x0, 0x0, 0x0, 0x1]}, @timestamp_prespec={0x44, 0x34, 0x0, 0x3, 0x0, [{@multicast1}, {@dev, 0x659}, {@broadcast, 0x8000}, {@empty}, {@multicast1, 0xffd200}, {@private}]}, @timestamp_prespec={0x44, 0x24, 0x0, 0x3, 0x0, [{@dev={0xac, 0x14, 0x14, 0x37}}, {@multicast2}, {@private=0xa010104}, {@rand_addr, 0x3}]}, @noop, @noop, @lsrr={0x83, 0xb, 0x0, [@private, @rand_addr]}]}}}}}) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='hugetlb.2MB.usage_in_bytes\x00', 0x275a, 0x0) write$binfmt_script(r2, &(0x7f0000000240), 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x280000b, 0x28011, r2, 0x0) r3 = dup(r1) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000080)={0x2, 0x2, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000300)=[@textreal={0x8, 0x0}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_REGISTER_COALESCED_MMIO(r1, 0x4010ae67, &(0x7f00000001c0)={0x0, 0xd000}) ioctl$FS_IOC_REMOVE_ENCRYPTION_KEY(0xffffffffffffffff, 0x8004587d, &(0x7f0000000080)={@desc={0x1, 0x0, @desc2}}) ioctl$KVM_NMI(r4, 0xae9a) ioctl$KVM_RUN(r4, 0xae80, 0x0) 900.873949ms ago: executing program 6 (id=2496): syz_open_dev$video4linux(0x0, 0x101, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) syz_genetlink_get_family_id$tipc(0x0, 0xffffffffffffffff) io_setup(0x3, 0x0) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$lock(r1, 0x26, &(0x7f00000002c0)={0x0, 0x1, 0x32c4000, 0x9}) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01010000000000000000020000000900010073797a300000000048000000030a01010000000000000000020000000900010073797a30000000000900030073797a3200000000080007006e617400140004800800014000000001080002"], 0xa4}}, 0x0) 484.210194ms ago: executing program 3 (id=2497): r0 = socket$inet6(0xa, 0x3, 0xff) r1 = socket$kcm(0x10, 0x2, 0x0) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) socket$inet_icmp_raw(0x2, 0x3, 0x1) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) futex_waitv(0x0, 0x0, 0x0, 0x0, 0x1) r4 = socket$kcm(0x29, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0x5, 0x0, &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @flow_dissector, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) socket(0x10, 0x3, 0x0) pwritev2(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, 0x0}, 0x20000811) ioctl$sock_kcm_SIOCKCMATTACH(r4, 0x89e0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_xfrm(r2, &(0x7f0000000900)={0x0, 0x0, &(0x7f00000008c0)={&(0x7f0000000080)=@polexpire={0xc0, 0x1b, 0x1, 0x70bd29, 0x0, {{{@in6=@private0, @in6=@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x0, 0x0, 0x1}}}}, 0xc0}}, 0x0) sendmsg$kcm(r1, 0x0, 0x0) connect$inet6(r0, &(0x7f0000000200)={0xa, 0x0, 0x0, @mcast2, 0x4}, 0x1c) r5 = dup2(r0, r0) write$FUSE_NOTIFY_STORE(r5, 0x0, 0x0) syz_open_dev$vcsn(&(0x7f0000000040), 0x5, 0x801) 173.311923ms ago: executing program 3 (id=2498): ioctl$UI_BEGIN_FF_UPLOAD(0xffffffffffffffff, 0xc06855c8, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) getpid() r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r0}, 0x10) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) sched_setaffinity(0x0, 0xfffffef7, &(0x7f0000000740)=0x410000002) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) semctl$IPC_INFO(0x0, 0x7, 0x3, 0x0) shmat(0x0, &(0x7f0000000000/0x2000)=nil, 0x5000) setsockopt$inet6_tcp_TCP_MD5SIG(r2, 0x6, 0xe, 0x0, 0x0) sendmsg$inet(0xffffffffffffffff, 0x0, 0x0) 150.45254ms ago: executing program 6 (id=2499): ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000000)={'syztnl0\x00', &(0x7f00000002c0)={'syztnl1\x00', 0x0, 0x0, 0x0, 0x0, 0x0, {{0xe, 0x4, 0x0, 0x2, 0x38, 0x67, 0x0, 0x0, 0x0, 0x0, @broadcast, @remote, {[@timestamp={0x44, 0x8, 0x0, 0x0, 0x9, [0x4]}, @noop, @noop, @rr={0x7, 0x17, 0x33, [@multicast1, @remote, @multicast1, @private=0xa010102, @remote]}]}}}}}) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='hugetlb.2MB.usage_in_bytes\x00', 0x275a, 0x0) write$binfmt_script(r2, &(0x7f0000000240), 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x280000b, 0x28011, r2, 0x0) r3 = dup(r1) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000080)={0x0, 0x2, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000300)=[@text64={0x40, 0x0}], 0xffff, 0x0, 0x0, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000200)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_REGISTER_COALESCED_MMIO(r1, 0x4010ae67, &(0x7f00000001c0)={0x0, 0xd000}) ioctl$KVM_NMI(r4, 0xae9a) ioctl$KVM_RUN(r4, 0xae80, 0x0) 0s ago: executing program 3 (id=2500): clock_settime(0x0, &(0x7f0000000240)={0x77359400}) clock_adjtime(0x0, &(0x7f0000000640)={0x7, 0x9, 0x380000, 0x8, 0xfffffffffffffff9, 0xfffffffffffffff7, 0x9, 0x0, 0xae, 0x6, 0x7, 0x4, 0xfffffffffffff04f, 0x7, 0x80000000, 0xfffffffffffffff8, 0xffffffffffffffff, 0x6, 0x0, 0x100, 0x4, 0x2, 0x5, 0x3, 0x8, 0x8}) clock_adjtime(0x0, &(0x7f0000000900)={0x6, 0xe, 0xf, 0x0, 0xf, 0x8000000000000000, 0xa, 0x2, 0x9, 0x2, 0x4, 0x8000000000000000, 0xc, 0x9, 0x7, 0x9, 0x7, 0x3, 0x8, 0xfffffffffffffffa, 0x0, 0x5, 0x8, 0x7, 0x3, 0x6}) kernel console output (not intermixed with test programs): to 0x8A [ 308.568716][ T5911] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 308.582069][ T5875] usb 4-1: config 0 interface 186 altsetting 0 endpoint 0x8A has an invalid bInterval 0, changing to 7 [ 308.590564][ T5911] hub 2-1:1.0: bad descriptor, ignoring hub [ 308.605194][ T5875] usb 4-1: config 0 interface 186 altsetting 0 has 4 endpoint descriptors, different from the interface descriptor's value: 3 [ 308.606085][ T5827] usb 5-1: USB disconnect, device number 20 [ 308.629963][ T5875] usb 4-1: New USB device found, idVendor=07c0, idProduct=1505, bcdDevice=b8.c5 [ 308.630341][ T5911] hub 2-1:1.0: probe with driver hub failed with error -5 [ 308.647237][ T5875] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 308.650834][ T5911] cdc_wdm 2-1:1.0: skipping garbage [ 308.663074][ T5911] cdc_wdm 2-1:1.0: skipping garbage [ 308.665634][ T5875] usb 4-1: Product: syz [ 308.670821][ T5911] cdc_wdm 2-1:1.0: cdc-wdm0: USB WDM device [ 308.675805][ T5875] usb 4-1: Manufacturer: syz [ 308.681074][ T5911] cdc_wdm 2-1:1.0: Unknown control protocol [ 308.688359][ T5875] usb 4-1: SerialNumber: syz [ 308.696438][ T5875] usb 4-1: config 0 descriptor?? [ 308.912275][ T5875] iowarrior 4-1:0.186: IOWarrior product=0x1505, serial=42424242 interface=186 now attached to iowarrior1 [ 308.949868][ T5827] usb 2-1: USB disconnect, device number 23 [ 309.187403][ T5911] usb 4-1: USB disconnect, device number 29 [ 309.278465][ T5827] usb 2-1: new high-speed USB device number 24 using dummy_hcd [ 309.508277][ T5827] usb 2-1: Using ep0 maxpacket: 8 [ 309.556016][ T5827] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 309.566713][ T5827] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 309.578995][ T5827] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 100, changing to 10 [ 309.623710][ T5827] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 24936, setting to 1024 [ 309.636092][ T5827] usb 2-1: New USB device found, idVendor=0225, idProduct=0000, bcdDevice= 0.00 [ 309.646284][ T5827] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 309.660933][ T5827] hub 2-1:1.0: bad descriptor, ignoring hub [ 309.673486][ T5827] hub 2-1:1.0: probe with driver hub failed with error -5 [ 309.681604][ T5827] cdc_wdm 2-1:1.0: skipping garbage [ 309.687172][ T5827] cdc_wdm 2-1:1.0: skipping garbage [ 309.703457][ T5827] cdc_wdm 2-1:1.0: cdc-wdm0: USB WDM device [ 309.711544][ T5827] cdc_wdm 2-1:1.0: Unknown control protocol [ 309.988457][ T5827] usb 2-1: USB disconnect, device number 24 [ 310.295604][ T9562] vlan2: entered promiscuous mode [ 310.327062][ T9562] veth1_virt_wifi: entered promiscuous mode [ 310.353085][ T9562] vlan2: entered allmulticast mode [ 310.367026][ T9562] veth1_virt_wifi: entered allmulticast mode [ 310.413138][ T9562] veth1_virt_wifi: left allmulticast mode [ 310.421203][ T9562] veth1_virt_wifi: left promiscuous mode [ 310.569607][ T29] audit: type=1326 audit(1737517378.662:210): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9571 comm="syz.3.1205" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8627f85d29 code=0x7ffc0000 [ 310.619961][ T29] audit: type=1326 audit(1737517378.662:211): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9571 comm="syz.3.1205" exe="/root/syz-executor" sig=0 arch=c000003e syscall=99 compat=0 ip=0x7f8627f85d29 code=0x7ffc0000 [ 310.643579][ T29] audit: type=1326 audit(1737517378.662:212): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9571 comm="syz.3.1205" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8627f85d29 code=0x7ffc0000 [ 311.135193][ T9592] loop8: detected capacity change from 0 to 7 [ 311.145453][ T9592] Dev loop8: unable to read RDB block 7 [ 311.154729][ T9592] loop8: unable to read partition table [ 311.161579][ T9592] loop8: partition table beyond EOD, truncated [ 311.167870][ T9592] loop_reread_partitions: partition scan of loop8 (þ被xüŸÑø éÚ¬§½dƤ´à–ƒÝ¡¯¨â·û [ 311.167870][ T9592] ) failed (rc=-5) [ 311.230252][ T9595] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 311.236772][ T9595] Bluetooth: hci2: Opcode 0x0406 failed: -4 [ 311.824418][ T51] usb 2-1: new high-speed USB device number 25 using dummy_hcd [ 311.978845][ T51] usb 2-1: Using ep0 maxpacket: 32 [ 311.983514][ T9628] atomic_op ffff88805abc4998 conn xmit_atomic 0000000000000000 [ 311.985309][ T51] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 312.003426][ T51] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 312.013261][ T51] usb 2-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 312.022481][ T51] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 312.031903][ T51] usb 2-1: config 0 descriptor?? [ 312.038426][ T51] hub 2-1:0.0: USB hub found [ 312.240751][ T51] hub 2-1:0.0: 1 port detected [ 312.853153][ T5911] hub 2-1:0.0: activate --> -90 [ 312.888219][ T51] usb 3-1: new high-speed USB device number 26 using dummy_hcd [ 313.062044][ T5911] usb 2-1-port1: config error [ 313.069223][ T51] usb 3-1: Using ep0 maxpacket: 32 [ 313.088124][ T51] usb 3-1: New USB device found, idVendor=174f, idProduct=6a31, bcdDevice=26.3f [ 313.099924][ T51] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 313.111906][ T51] usb 3-1: Product: syz [ 313.116231][ T51] usb 3-1: Manufacturer: syz [ 313.121188][ T51] usb 3-1: SerialNumber: syz [ 313.129723][ T51] gspca_main: stk1135-2.14.0 probing 174f:6a31 [ 313.250188][ T54] Bluetooth: hci2: command 0x0406 tx timeout [ 313.262600][ T5827] usb 2-1: USB disconnect, device number 25 [ 313.268724][ T5911] usb 2-1-port1: cannot disable (err = -71) [ 313.274981][ T5911] usb 2-1-port1: attempt power cycle [ 313.767126][ T9685] input: syz0 as /devices/virtual/input/input11 [ 313.871294][ T9693] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 314.404011][ T51] gspca_stk1135: reg_w 0xd err -71 [ 314.411449][ T51] gspca_stk1135: serial bus timeout: status=0x00 [ 314.419595][ T51] gspca_stk1135: Sensor write failed [ 314.425096][ T51] gspca_stk1135: serial bus timeout: status=0x00 [ 314.431912][ T51] gspca_stk1135: Sensor write failed [ 314.437397][ T51] gspca_stk1135: serial bus timeout: status=0x00 [ 314.443958][ T51] gspca_stk1135: Sensor read failed [ 314.450070][ T51] gspca_stk1135: serial bus timeout: status=0x00 [ 314.450727][ T9] usb 4-1: new high-speed USB device number 30 using dummy_hcd [ 314.469061][ T51] gspca_stk1135: Sensor read failed [ 314.474368][ T51] gspca_stk1135: Detected sensor type unknown (0x0) [ 314.482023][ T51] gspca_stk1135: serial bus timeout: status=0x00 [ 314.488488][ T51] gspca_stk1135: Sensor read failed [ 314.494001][ T51] gspca_stk1135: serial bus timeout: status=0x00 [ 314.500590][ T51] gspca_stk1135: Sensor read failed [ 314.505842][ T51] gspca_stk1135: serial bus timeout: status=0x00 [ 314.512321][ T51] gspca_stk1135: Sensor write failed [ 314.517646][ T51] gspca_stk1135: serial bus timeout: status=0x00 [ 314.524706][ T51] gspca_stk1135: Sensor write failed [ 314.530107][ T51] stk1135 3-1:64.0: probe with driver stk1135 failed with error -71 [ 314.539625][ T51] usb 3-1: USB disconnect, device number 26 [ 314.618272][ T9] usb 4-1: Using ep0 maxpacket: 16 [ 314.628887][ T9] usb 4-1: config 1 contains an unexpected descriptor of type 0x2, skipping [ 314.637752][ T9] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 314.648252][ T9] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 314.659930][ T9] usb 4-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 314.669060][ T9] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 314.677045][ T9] usb 4-1: Product: syz [ 314.681496][ T9] usb 4-1: Manufacturer: syz [ 314.686100][ T9] usb 4-1: SerialNumber: syz [ 315.096839][ T9] usb 4-1: 0:2 : does not exist [ 315.318233][ T54] Bluetooth: hci2: command 0x0406 tx timeout [ 315.360447][ T5826] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 315.367808][ T5826] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 315.375639][ T5826] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 315.387371][ T5826] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 315.394978][ T5826] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 315.404903][ T5826] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 315.585760][ T9721] chnl_net:caif_netlink_parms(): no params data found [ 315.712478][ T9] usb 4-1: USB disconnect, device number 30 [ 315.733501][ T9721] bridge0: port 1(bridge_slave_0) entered blocking state [ 315.743003][ T9721] bridge0: port 1(bridge_slave_0) entered disabled state [ 315.751993][ T9721] bridge_slave_0: entered allmulticast mode [ 316.125691][ T9721] bridge_slave_0: entered promiscuous mode [ 316.148026][ T9721] bridge0: port 2(bridge_slave_1) entered blocking state [ 316.155535][ T9721] bridge0: port 2(bridge_slave_1) entered disabled state [ 316.164966][ T9721] bridge_slave_1: entered allmulticast mode [ 316.171844][ T9721] bridge_slave_1: entered promiscuous mode [ 316.211789][ T9721] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 316.227209][ T9721] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 316.248726][ T9721] team0: Port device team_slave_0 added [ 316.255560][ T9721] team0: Port device team_slave_1 added [ 316.271018][ T9721] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 316.278019][ T9721] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 316.305551][ T9721] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 316.337027][ T9721] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 316.352024][ T9721] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 316.402424][ T9721] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 316.671282][ T9721] hsr_slave_0: entered promiscuous mode [ 316.677457][ T9721] hsr_slave_1: entered promiscuous mode [ 316.684025][ T9721] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 316.691761][ T9721] Cannot create hsr debugfs directory [ 316.831546][ T9721] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 316.843856][ T9721] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 316.858431][ T9721] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 316.870578][ T9721] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 316.947867][ T9721] 8021q: adding VLAN 0 to HW filter on device bond0 [ 316.988525][ T9721] 8021q: adding VLAN 0 to HW filter on device team0 [ 317.044896][ T61] bridge0: port 1(bridge_slave_0) entered blocking state [ 317.052096][ T61] bridge0: port 1(bridge_slave_0) entered forwarding state [ 317.080707][ T61] bridge0: port 2(bridge_slave_1) entered blocking state [ 317.087907][ T61] bridge0: port 2(bridge_slave_1) entered forwarding state [ 317.110577][ T9764] mac80211_hwsim hwsim4 wlan0: entered promiscuous mode [ 317.117669][ T9764] macvlan3: entered allmulticast mode [ 317.123236][ T9764] mac80211_hwsim hwsim4 wlan0: entered allmulticast mode [ 317.134239][ T9764] mac80211_hwsim hwsim4 wlan0: left allmulticast mode [ 317.141192][ T9764] mac80211_hwsim hwsim4 wlan0: left promiscuous mode [ 317.300772][ T51] usb 2-1: new high-speed USB device number 30 using dummy_hcd [ 317.301137][ T9721] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 317.443891][ T29] audit: type=1326 audit(1737517385.532:213): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9793 comm="syz.0.1291" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc46dd85d29 code=0x7ffc0000 [ 317.478928][ T5826] Bluetooth: hci4: command tx timeout [ 317.488852][ T51] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 317.500097][ T29] audit: type=1326 audit(1737517385.532:214): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9793 comm="syz.0.1291" exe="/root/syz-executor" sig=0 arch=c000003e syscall=319 compat=0 ip=0x7fc46dd85d29 code=0x7ffc0000 [ 317.522561][ T29] audit: type=1326 audit(1737517385.532:215): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9793 comm="syz.0.1291" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc46dd85d29 code=0x7ffc0000 [ 317.528699][ T51] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 317.544823][ T29] audit: type=1326 audit(1737517385.532:216): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9793 comm="syz.0.1291" exe="/root/syz-executor" sig=0 arch=c000003e syscall=77 compat=0 ip=0x7fc46dd85d29 code=0x7ffc0000 [ 317.577466][ T1296] ieee802154 phy0 wpan0: encryption failed: -22 [ 317.593750][ T9721] veth0_vlan: entered promiscuous mode [ 317.602658][ T51] usb 2-1: New USB device found, idVendor=1e7d, idProduct=2cf6, bcdDevice= 0.00 [ 317.615872][ T9721] veth1_vlan: entered promiscuous mode [ 317.624650][ T51] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 317.636362][ T29] audit: type=1326 audit(1737517385.532:217): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9793 comm="syz.0.1291" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc46dd85d29 code=0x7ffc0000 [ 317.664270][ T51] usb 2-1: config 0 descriptor?? [ 317.681107][ T29] audit: type=1326 audit(1737517385.562:218): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9793 comm="syz.0.1291" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc46dd85d29 code=0x7ffc0000 [ 317.699837][ T9721] veth0_macvtap: entered promiscuous mode [ 317.711399][ T9797] "syz.0.1292" (9797) uses obsolete ecb(arc4) skcipher [ 317.724400][ T9721] veth1_macvtap: entered promiscuous mode [ 317.749660][ T9721] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 317.761270][ T9721] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 317.764254][ T9807] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1294'. [ 317.771345][ T9721] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 317.771368][ T9721] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 317.771379][ T9721] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 317.771391][ T9721] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 317.771401][ T9721] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 317.771411][ T9721] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 317.784247][ T9807] netlink: 'syz.3.1294': attribute type 7 has an invalid length. [ 317.791092][ T9721] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 317.801346][ T9807] netlink: 'syz.3.1294': attribute type 8 has an invalid length. [ 317.811657][ T9721] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 317.825103][ T9807] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1294'. [ 317.832971][ T9721] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 317.916160][ T9721] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 317.927333][ T9721] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 317.937477][ T9721] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 317.948951][ T9721] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 317.958990][ T9721] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 317.976495][ T9721] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 317.993698][ T9721] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 318.004724][ T9721] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 318.017134][ T9721] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 318.030137][ T9721] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 318.044633][ T9721] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 318.065295][ T9721] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 318.088217][ T9721] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 318.101389][ T51] pyra 0003:1E7D:2CF6.0016: hidraw0: USB HID v0.00 Device [HID 1e7d:2cf6] on usb-dummy_hcd.1-1/input0 [ 318.107257][ T9721] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 318.122758][ T9721] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 318.185993][ T61] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 318.210226][ T61] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 318.240790][ T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 318.251310][ T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 318.613188][ T3555] nci: nci_rf_intf_activated_ntf_packet: unsupported activation_rf_tech_and_mode 0x68 [ 318.818264][ T5875] usb 5-1: new high-speed USB device number 21 using dummy_hcd [ 318.878441][ T25] usb 6-1: new high-speed USB device number 2 using dummy_hcd [ 318.937147][ T51] pyra 0003:1E7D:2CF6.0016: couldn't init struct pyra_device [ 318.945649][ T51] pyra 0003:1E7D:2CF6.0016: couldn't install mouse [ 318.956565][ T51] pyra 0003:1E7D:2CF6.0016: probe with driver pyra failed with error -71 [ 318.969539][ T5875] usb 5-1: Using ep0 maxpacket: 16 [ 318.973706][ T51] usb 2-1: USB disconnect, device number 30 [ 318.980503][ T5875] usb 5-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xF3, changing to 0x83 [ 318.993588][ T5875] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 319.007042][ T5875] usb 5-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 319.016510][ T5875] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 319.024630][ T5875] usb 5-1: Product: syz [ 319.028412][ T25] usb 6-1: Using ep0 maxpacket: 8 [ 319.029175][ T5875] usb 5-1: Manufacturer: syz [ 319.037502][ T25] usb 6-1: config 0 has an invalid interface number: 186 but max is 0 [ 319.038571][ T5875] usb 5-1: SerialNumber: syz [ 319.051832][ T25] usb 6-1: config 0 has no interface number 0 [ 319.059360][ T25] usb 6-1: config 0 interface 186 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 319.072255][ T25] usb 6-1: config 0 interface 186 altsetting 0 has an endpoint descriptor with address 0x9A, changing to 0x8A [ 319.073399][ T5875] usb 5-1: config 0 descriptor?? [ 319.084686][ T25] usb 6-1: config 0 interface 186 altsetting 0 endpoint 0x8A has an invalid bInterval 0, changing to 7 [ 319.101434][ T25] usb 6-1: config 0 interface 186 altsetting 0 has 4 endpoint descriptors, different from the interface descriptor's value: 3 [ 319.102567][ T5875] em28xx 5-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0) [ 319.125865][ T5875] em28xx 5-1:0.0: Audio interface 0 found (Vendor Class) [ 319.126615][ T25] usb 6-1: New USB device found, idVendor=07c0, idProduct=1505, bcdDevice=b8.c5 [ 319.142883][ T25] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 319.151023][ T25] usb 6-1: Product: syz [ 319.155365][ T25] usb 6-1: Manufacturer: syz [ 319.161335][ T25] usb 6-1: SerialNumber: syz [ 319.167473][ T25] usb 6-1: config 0 descriptor?? [ 319.383273][ T25] iowarrior 6-1:0.186: IOWarrior product=0x1505, serial=42424242 interface=186 now attached to iowarrior0 [ 319.486156][ C1] vcan0: j1939_tp_rxtimer: 0xffff888078f16c00: rx timeout, send abort [ 319.494598][ C1] vcan0: j1939_xtp_rx_abort_one: 0xffff888078f16c00: 0x3ff01: (3) A timeout occurred and this is the connection abort to close the session. [ 319.559147][ T54] Bluetooth: hci4: command tx timeout [ 319.726896][ T5875] em28xx 5-1:0.0: unknown em28xx chip ID (0) [ 319.744570][ T9] usb 6-1: USB disconnect, device number 2 [ 319.753690][ T5875] em28xx 5-1:0.0: Config register raw data: 0x56 [ 319.956480][ T5875] em28xx 5-1:0.0: AC97 chip type couldn't be determined [ 319.966493][ T5875] em28xx 5-1:0.0: No AC97 audio processor [ 319.976690][ T5875] usb 5-1: USB disconnect, device number 21 [ 319.987296][ T5875] em28xx 5-1:0.0: Disconnecting em28xx [ 319.994946][ T5875] em28xx 5-1:0.0: Freeing device [ 320.728429][ T5827] usb 6-1: new high-speed USB device number 3 using dummy_hcd [ 320.879883][ T5827] usb 6-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 320.890716][ T29] audit: type=1326 audit(1737517388.982:219): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9929 comm="syz.1.1342" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6e2cf85d29 code=0x7ffc0000 [ 320.914638][ T5827] usb 6-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config [ 320.927137][ T5827] usb 6-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 320.932071][ T29] audit: type=1326 audit(1737517388.982:220): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9929 comm="syz.1.1342" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f6e2cf85d29 code=0x7ffc0000 [ 320.960707][ T5827] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 52, changing to 9 [ 320.969729][ T29] audit: type=1326 audit(1737517388.982:221): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9929 comm="syz.1.1342" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6e2cf85d29 code=0x7ffc0000 [ 320.971879][ C1] vcan0: j1939_tp_rxtimer: 0xffff888078f17000: rx timeout, send abort [ 320.994710][ T29] audit: type=1326 audit(1737517388.982:222): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9929 comm="syz.1.1342" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6e2cf85d29 code=0x7ffc0000 [ 321.001462][ C1] vcan0: j1939_tp_rxtimer: 0xffff88802790dc00: rx timeout, send abort [ 321.001699][ C1] vcan0: j1939_xtp_rx_abort_one: 0xffff888078f17000: 0x00000: (3) A timeout occurred and this is the connection abort to close the session. [ 321.001782][ C1] vcan0: j1939_xtp_rx_abort_one: 0xffff88802790dc00: 0x00000: (3) A timeout occurred and this is the connection abort to close the session. [ 321.018248][ T5827] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8241, setting to 1024 [ 321.076383][ T5827] usb 6-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 321.078105][ T9934] netlink: 'syz.3.1343': attribute type 1 has an invalid length. [ 321.085677][ T5827] usb 6-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 321.110716][ T5827] usb 6-1: Product: syz [ 321.121916][ T5827] usb 6-1: Manufacturer: syz [ 321.129449][ T5827] cdc_wdm 6-1:1.0: skipping garbage [ 321.137423][ T5827] cdc_wdm 6-1:1.0: skipping garbage [ 321.140087][ T9934] bond1: (slave ip6erspan0): making interface the new active one [ 321.151285][ T9934] bond1: (slave ip6erspan0): Enslaving as an active interface with an up link [ 321.152372][ T5827] cdc_wdm 6-1:1.0: cdc-wdm0: USB WDM device [ 321.168708][ T5827] cdc_wdm 6-1:1.0: Unknown control protocol [ 321.204305][ T9941] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 321.638422][ T54] Bluetooth: hci4: command tx timeout [ 322.178637][ T9956] 9pnet: p9_errstr2errno: server reported unknown error õ1 g;-‡~  [ 322.231219][ T9] kernel write not supported for file /701/attr/exec (pid: 9 comm: kworker/0:1) [ 322.378936][ T9978] bond0: entered promiscuous mode [ 322.384151][ T9978] bond_slave_0: entered promiscuous mode [ 322.392887][ T9978] bond_slave_1: entered promiscuous mode [ 322.399263][ T9978] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 322.407197][ T9978] bond0: left promiscuous mode [ 322.412277][ T9978] bond_slave_0: left promiscuous mode [ 322.417923][ T9978] bond_slave_1: left promiscuous mode [ 322.421375][ T9982] trusted_key: syz.1.1365 sent an empty control message without MSG_MORE. [ 322.518993][ T29] kauditd_printk_skb: 10 callbacks suppressed [ 322.519011][ T29] audit: type=1326 audit(1737517390.612:233): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9986 comm="syz.4.1367" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f93b0185d29 code=0x7ffc0000 [ 322.549532][ T29] audit: type=1326 audit(1737517390.612:234): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9986 comm="syz.4.1367" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f93b0185d29 code=0x7ffc0000 [ 322.571576][ T29] audit: type=1326 audit(1737517390.612:235): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9986 comm="syz.4.1367" exe="/root/syz-executor" sig=0 arch=c000003e syscall=245 compat=0 ip=0x7f93b0185d29 code=0x7ffc0000 [ 322.582138][ T9989] macvtap1: entered promiscuous mode [ 322.593550][ T29] audit: type=1326 audit(1737517390.612:236): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9986 comm="syz.4.1367" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f93b0185d29 code=0x7ffc0000 [ 322.602603][ T9989] macvtap1: entered allmulticast mode [ 322.621448][ T29] audit: type=1326 audit(1737517390.612:237): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9986 comm="syz.4.1367" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f93b0185d29 code=0x7ffc0000 [ 322.628999][ T9989] vlan0: entered allmulticast mode [ 322.653287][ T9989] veth0_vlan: entered allmulticast mode [ 322.658929][ T9989] vlan0: entered promiscuous mode [ 322.665337][ T9989] team0: Device macvtap1 failed to register rx_handler [ 322.672535][ T9989] vlan0: left allmulticast mode [ 322.677499][ T9989] veth0_vlan: left allmulticast mode [ 322.684667][ T9989] vlan0: left promiscuous mode [ 322.748291][ T9] usb 4-1: new high-speed USB device number 31 using dummy_hcd [ 322.900019][ T9] usb 4-1: Using ep0 maxpacket: 32 [ 322.906745][ T9] usb 4-1: config 2 has an invalid interface number: 114 but max is 0 [ 322.919943][ T9] usb 4-1: config 2 has no interface number 0 [ 322.926347][ T9] usb 4-1: config 2 interface 114 has no altsetting 0 [ 322.935523][ T9] usb 4-1: New USB device found, idVendor=0586, idProduct=343e, bcdDevice=36.25 [ 322.946576][ T9] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 322.967704][ T9] usb 4-1: Product: syz [ 322.977812][ T9] usb 4-1: Manufacturer: syz [ 322.985871][ T9] usb 4-1: SerialNumber: syz [ 323.011132][T10006] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1374'. [ 323.027424][ T29] audit: type=1800 audit(1737517391.112:238): pid=10008 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed(directio) comm="syz.4.1375" name="file1" dev="overlay" ino=1663 res=0 errno=0 [ 323.084781][T10012] netlink: 96 bytes leftover after parsing attributes in process `syz.4.1377'. [ 323.205580][ T9] usb 4-1: USB disconnect, device number 31 [ 323.523291][ T9] usb 6-1: USB disconnect, device number 3 [ 323.719058][ T54] Bluetooth: hci4: command tx timeout [ 323.988340][ T25] usb 4-1: new high-speed USB device number 32 using dummy_hcd [ 324.150015][ T25] usb 4-1: New USB device found, idVendor=1645, idProduct=0008, bcdDevice=cf.36 [ 324.170677][ T25] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 324.181873][ T25] usb 4-1: config 0 descriptor?? [ 324.406966][ T25] kaweth 4-1:0.0: Firmware present in device. [ 324.597981][ T25] kaweth 4-1:0.0: Statistics collection: 0 [ 324.604103][ T25] kaweth 4-1:0.0: Multicast filter limit: 0 [ 324.610074][ T25] kaweth 4-1:0.0: MTU: 0 [ 324.614340][ T25] kaweth 4-1:0.0: Read MAC address 00:00:00:00:00:00 [ 324.788282][ T5827] usb 5-1: new high-speed USB device number 22 using dummy_hcd [ 324.938369][ T5827] usb 5-1: Using ep0 maxpacket: 16 [ 324.944824][ T5827] usb 5-1: config 0 has an invalid interface number: 214 but max is 0 [ 324.953249][ T5827] usb 5-1: config 0 has no interface number 0 [ 324.959447][ T5827] usb 5-1: config 0 interface 214 altsetting 0 endpoint 0x83 has invalid maxpacket 1023, setting to 64 [ 324.972187][ T5827] usb 5-1: New USB device found, idVendor=0596, idProduct=0001, bcdDevice= 5.f5 [ 324.981500][ T5827] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 324.991379][ T5827] usb 5-1: Product: syz [ 324.995591][ T5827] usb 5-1: Manufacturer: syz [ 325.000984][ T5827] usb 5-1: SerialNumber: syz [ 325.012941][ T5827] usb 5-1: config 0 descriptor?? [ 325.210887][ T25] kaweth 4-1:0.0: kaweth interface created at eth1 [ 325.468366][ T5873] usb 6-1: new high-speed USB device number 4 using dummy_hcd [ 325.485813][ T5875] usb 4-1: USB disconnect, device number 32 [ 325.622999][ T5827] usbtouchscreen 5-1:0.214: probe with driver usbtouchscreen failed with error -71 [ 325.634322][ T5827] usb 5-1: USB disconnect, device number 22 [ 325.639676][ T5873] usb 6-1: config 0 has an invalid interface number: 255 but max is 0 [ 325.650485][ T5873] usb 6-1: config 0 has no interface number 0 [ 325.656645][ T5873] usb 6-1: New USB device found, idVendor=0733, idProduct=0401, bcdDevice=ad.7d [ 325.665857][ T5873] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 325.674922][ T5873] usb 6-1: config 0 descriptor?? [ 325.681562][ T5873] gspca_main: spca501-2.14.0 probing 0733:0401 [ 326.052046][T10082] pim6reg1: entered promiscuous mode [ 326.057492][T10082] pim6reg1: entered allmulticast mode [ 326.118849][T10084] netlink: 'syz.1.1408': attribute type 10 has an invalid length. [ 326.169541][T10084] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 326.204255][T10084] bond0: (slave batadv0): Enslaving as an active interface with an up link [ 326.426410][T10110] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1418'. [ 326.948242][ T9] usb 4-1: new high-speed USB device number 33 using dummy_hcd [ 327.033317][ T5873] gspca_spca501: reg write: error -71 [ 327.039135][ T5873] spca501 6-1:0.255: Reg write failed for 0x00,0x00,0x05 [ 327.046210][ T5873] spca501 6-1:0.255: probe with driver spca501 failed with error -22 [ 327.056818][ T5873] usb 6-1: USB disconnect, device number 4 [ 327.108221][ T9] usb 4-1: Using ep0 maxpacket: 16 [ 327.116333][ T9] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 327.135256][ T9] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 327.167028][ T9] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 327.183397][ T9] usb 4-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 327.193887][ T9] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 327.207810][ T9] usb 4-1: config 0 descriptor?? [ 327.259761][T10131] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 327.630924][ T9] microsoft 0003:045E:07DA.0017: report is too long [ 327.657775][ T9] microsoft 0003:045E:07DA.0017: item 0 4 0 8 parsing failed [ 327.679861][ T9] microsoft 0003:045E:07DA.0017: parse failed [ 327.686694][ T9] microsoft 0003:045E:07DA.0017: probe with driver microsoft failed with error -22 [ 327.833333][ T9] usb 4-1: USB disconnect, device number 33 [ 330.371461][ T25] usb 2-1: new high-speed USB device number 31 using dummy_hcd [ 330.478406][ T5827] usb 6-1: new high-speed USB device number 5 using dummy_hcd [ 330.588364][ T25] usb 2-1: Using ep0 maxpacket: 32 [ 330.630759][ T25] usb 2-1: config 0 has an invalid interface number: 89 but max is 0 [ 330.655228][ T25] usb 2-1: config 0 has no interface number 0 [ 330.669915][ T25] usb 2-1: New USB device found, idVendor=12d1, idProduct=7ef3, bcdDevice=54.68 [ 330.683368][ T25] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 330.711777][ T5827] usb 6-1: config 0 has no interfaces? [ 330.728517][ T25] usb 2-1: Product: syz [ 330.732981][ T5827] usb 6-1: New USB device found, idVendor=1645, idProduct=0008, bcdDevice=cf.36 [ 330.747343][ T25] usb 2-1: Manufacturer: syz [ 330.752301][ T25] usb 2-1: SerialNumber: syz [ 330.757433][ T5827] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 330.778539][ T25] usb 2-1: config 0 descriptor?? [ 330.800118][ T25] hub 2-1:0.89: bad descriptor, ignoring hub [ 330.806842][ T5827] usb 6-1: config 0 descriptor?? [ 330.812687][ T25] hub 2-1:0.89: probe with driver hub failed with error -5 [ 330.830459][ T25] option 2-1:0.89: GSM modem (1-port) converter detected [ 330.848492][ T25] usb 2-1: GSM modem (1-port) converter now attached to ttyUSB0 [ 331.191079][ T25] usb 6-1: USB disconnect, device number 5 [ 331.318388][ T5911] usb 2-1: USB disconnect, device number 31 [ 331.326323][ T5911] option1 ttyUSB0: GSM modem (1-port) converter now disconnected from ttyUSB0 [ 331.337706][ T5911] option 2-1:0.89: device disconnected [ 331.376730][T10213] netlink: 2120 bytes leftover after parsing attributes in process `syz.0.1454'. [ 332.017022][ T29] audit: type=1804 audit(1737517400.102:239): pid=10239 uid=0 auid=4294967295 ses=4294967295 subj=_ op=invalid_pcr cause=open_writers comm="syz.5.1464" name="/" dev="pidfs" ino=10242 res=1 errno=0 [ 332.882764][T10279] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 333.198297][ T973] usb 4-1: new high-speed USB device number 34 using dummy_hcd [ 333.205974][ T5873] usb 2-1: new high-speed USB device number 32 using dummy_hcd [ 333.248359][ T5875] usb 6-1: new high-speed USB device number 6 using dummy_hcd [ 333.358239][ T5873] usb 2-1: Using ep0 maxpacket: 8 [ 333.366196][ T5873] usb 2-1: config index 0 descriptor too short (expected 301, got 45) [ 333.374697][ T5873] usb 2-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 333.384978][ T973] usb 4-1: New USB device found, idVendor=0af0, idProduct=7a05, bcdDevice= 0.00 [ 333.394287][ T5873] usb 2-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 333.404561][ T973] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 333.414560][ T5873] usb 2-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 333.424746][ T5875] usb 6-1: Using ep0 maxpacket: 32 [ 333.431172][ T973] usb 4-1: Product: syz [ 333.437561][ T973] usb 4-1: Manufacturer: syz [ 333.442468][ T5873] usb 2-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 333.455572][ T973] usb 4-1: SerialNumber: syz [ 333.460901][ T5873] usb 2-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 333.470581][ T973] usb 4-1: config 0 descriptor?? [ 333.475649][ T5875] usb 6-1: config 0 has an invalid interface number: 132 but max is 0 [ 333.483976][ T5875] usb 6-1: config 0 has no interface number 0 [ 333.490868][ T5873] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 333.498979][ T5875] usb 6-1: config 0 interface 132 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 32 [ 333.512043][ T5875] usb 6-1: New USB device found, idVendor=0413, idProduct=6023, bcdDevice=ec.e5 [ 333.521877][ T5875] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 333.529977][ T5875] usb 6-1: Product: syz [ 333.534205][ T5875] usb 6-1: Manufacturer: syz [ 333.538984][ T5875] usb 6-1: SerialNumber: syz [ 333.545445][ T5875] usb 6-1: config 0 descriptor?? [ 333.550982][T10292] raw-gadget.3 gadget.5: fail, usb_ep_enable returned -22 [ 333.560704][ T5875] em28xx 6-1:0.132: New device syz syz @ 480 Mbps (0413:6023, interface 132, class 132) [ 333.571001][ T5875] em28xx 6-1:0.132: Video interface 132 found: bulk [ 333.691495][ T973] hso 4-1:0.0: Failed to find INT IN ep [ 333.697699][ T973] usb-storage 4-1:0.0: USB Mass Storage device detected [ 333.715526][ T5873] usb 2-1: usb_control_msg returned -32 [ 333.721492][ T5873] usbtmc 2-1:16.0: can't read capabilities [ 333.894774][ T25] usb 4-1: USB disconnect, device number 34 [ 333.963656][ T5875] em28xx 6-1:0.132: chip ID is em28174 [ 334.895953][ T5875] em28xx 6-1:0.132: failed to read eeprom (err=-110) [ 334.903127][ T5875] em28xx 6-1:0.132: em28xx_i2c_register: em28xx_i2_eeprom failed! retval [-110] [ 335.148591][ T5875] em28xx 6-1:0.132: Identified as Leadtek Winfast USB II (card=7) [ 335.148591][ T25] usb 5-1: new high-speed USB device number 23 using dummy_hcd [ 335.164146][ T5875] em28xx 6-1:0.132: analog set to bulk mode. [ 335.170617][ T973] em28xx 6-1:0.132: Registering V4L2 extension [ 335.178952][ T5875] usb 6-1: USB disconnect, device number 6 [ 335.185257][ T5875] em28xx 6-1:0.132: Disconnecting em28xx [ 335.223064][ T973] usb 6-1: Decoder not found [ 335.227707][ T973] em28xx 6-1:0.132: failed to create media graph [ 335.234842][ T973] em28xx 6-1:0.132: V4L2 device video103 deregistered [ 335.244158][ T973] em28xx 6-1:0.132: Remote control support is not available for this card. [ 335.252950][ T5875] em28xx 6-1:0.132: Closing input extension [ 335.260397][ T5875] em28xx 6-1:0.132: Freeing device [ 335.300369][ T25] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 335.311818][ T25] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 335.321968][ T25] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 335.336349][ T25] usb 5-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 335.346536][ T25] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 335.355593][ T25] usb 5-1: config 0 descriptor?? [ 335.766083][ T25] plantronics 0003:047F:FFFF.0018: No inputs registered, leaving [ 335.775318][ T25] plantronics 0003:047F:FFFF.0018: hiddev1,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.4-1/input0 [ 335.970565][ T973] usb 5-1: USB disconnect, device number 23 [ 335.983626][ T25] usb 2-1: USB disconnect, device number 32 [ 336.001719][ T5875] usb 6-1: new high-speed USB device number 7 using dummy_hcd [ 336.158559][ T5875] usb 6-1: Using ep0 maxpacket: 32 [ 336.168351][ T5875] usb 6-1: config 0 has an invalid interface number: 132 but max is 0 [ 336.177811][ T5875] usb 6-1: config 0 has no interface number 0 [ 336.197192][ T5875] usb 6-1: config 0 interface 132 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 32 [ 336.214296][ T5875] usb 6-1: New USB device found, idVendor=0413, idProduct=6023, bcdDevice=ec.e5 [ 336.230456][ T5875] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 336.239473][ T5875] usb 6-1: Product: syz [ 336.243772][ T5875] usb 6-1: Manufacturer: syz [ 336.250215][ T5875] usb 6-1: SerialNumber: syz [ 336.250224][T10352] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1505'. [ 336.294051][ T5875] usb 6-1: config 0 descriptor?? [ 336.306975][T10335] raw-gadget.3 gadget.5: fail, usb_ep_enable returned -22 [ 336.317552][ T5875] em28xx 6-1:0.132: New device syz syz @ 480 Mbps (0413:6023, interface 132, class 132) [ 336.339282][ T5875] em28xx 6-1:0.132: Video interface 132 found: bulk [ 336.358490][ T54] Bluetooth: hci4: Controller not accepting commands anymore: ncmd = 0 [ 336.366792][ T54] Bluetooth: hci4: Injecting HCI hardware error event [ 336.374035][ T54] Bluetooth: hci4: hardware error 0x00 [ 336.628277][ T973] usb 2-1: new high-speed USB device number 33 using dummy_hcd [ 336.722010][ T5875] em28xx 6-1:0.132: unknown em28xx chip ID (0) [ 336.779896][ T973] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 336.795265][ T973] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 336.806072][ T973] usb 2-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 336.818772][ T973] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 336.826886][ T973] usb 2-1: SerialNumber: syz [ 336.831711][ T9] usb 5-1: new full-speed USB device number 24 using dummy_hcd [ 337.005696][ T9] usb 5-1: unable to get BOS descriptor or descriptor too short [ 337.018012][ T9] usb 5-1: not running at top speed; connect to a high speed hub [ 337.029217][ T9] usb 5-1: config 0 has an invalid interface number: 215 but max is 0 [ 337.037507][ T9] usb 5-1: config 0 has no interface number 0 [ 337.051989][ T973] usb 2-1: 0:2 : does not exist [ 337.057632][ T9] usb 5-1: config 0 interface 215 has no altsetting 0 [ 337.072344][ T9] usb 5-1: New USB device found, idVendor=0402, idProduct=5602, bcdDevice=b7.bd [ 337.088216][ T973] usb 2-1: USB disconnect, device number 33 [ 337.095408][ T9] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 337.110682][ T9] usb 5-1: Product: syz [ 337.114894][ T9] usb 5-1: Manufacturer: syz [ 337.125547][ T9] usb 5-1: SerialNumber: syz [ 337.132296][ T5875] em28xx 6-1:0.132: reading from i2c device at 0xa0 failed: couldn't get the received message from the bridge (error=-5) [ 337.147658][ T9] usb 5-1: config 0 descriptor?? [ 337.153119][ T5875] em28xx 6-1:0.132: board has no eeprom [ 337.258767][ T5875] em28xx 6-1:0.132: Identified as Leadtek Winfast USB II (card=7) [ 337.267195][ T5875] em28xx 6-1:0.132: analog set to bulk mode. [ 337.273341][ T5873] em28xx 6-1:0.132: Registering V4L2 extension [ 337.369494][ T9] gspca_main: ALi m5602-2.14.0 probing 0402:5602 [ 337.380547][ T5875] usb 6-1: USB disconnect, device number 7 [ 337.387152][ T5875] em28xx 6-1:0.132: Disconnecting em28xx [ 337.393276][ T5873] em28xx 6-1:0.132: failed to trigger read from i2c address 0x4a (error=-5) [ 337.404508][ T9] gspca_m5602: Failed to find a sensor [ 337.410775][ T9] ALi m5602 5-1:0.215: ALi m5602 webcam failed [ 337.429103][ T9] usb 5-1: USB disconnect, device number 24 [ 337.453602][ T5873] em28xx 6-1:0.132: Config register raw data: 0xffffffed [ 337.460940][ T5873] em28xx 6-1:0.132: AC97 chip type couldn't be determined [ 337.468080][ T5873] em28xx 6-1:0.132: No AC97 audio processor [ 337.486644][ T5873] usb 6-1: Decoder not found [ 337.493715][ T5873] em28xx 6-1:0.132: failed to create media graph [ 337.500725][ T5873] em28xx 6-1:0.132: V4L2 device video103 deregistered [ 337.512457][ T5873] em28xx 6-1:0.132: Remote control support is not available for this card. [ 337.521838][ T5875] em28xx 6-1:0.132: Closing input extension [ 337.536242][ T5875] em28xx 6-1:0.132: Freeing device [ 337.634424][T10370] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1511'. [ 337.946294][T10379] overlayfs: failed to decode file handle (len=6, type=248, flags=0, err=-61) [ 338.178206][ T5875] usb 5-1: new high-speed USB device number 25 using dummy_hcd [ 338.358458][ T5875] usb 5-1: Using ep0 maxpacket: 8 [ 338.371817][ T5875] usb 5-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 338.381532][ T5875] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 338.390041][ T5875] usb 5-1: Product: syz [ 338.394418][ T5875] usb 5-1: Manufacturer: syz [ 338.399411][ T5875] usb 5-1: SerialNumber: syz [ 338.406186][ T5875] usb 5-1: config 0 descriptor?? [ 338.438297][ T9] usb 2-1: new high-speed USB device number 34 using dummy_hcd [ 338.438454][ T54] Bluetooth: hci4: Opcode 0x0c03 failed: -110 [ 338.518322][ T25] usb 4-1: new high-speed USB device number 35 using dummy_hcd [ 338.610190][ T9] usb 2-1: New USB device found, idVendor=046d, idProduct=0870, bcdDevice=61.47 [ 338.619549][ T9] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 338.628093][ T5875] usb 5-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 338.638000][ T9] usb 2-1: config 0 descriptor?? [ 338.644611][ T9] gspca_main: STV06xx-2.14.0 probing 046d:0870 [ 338.679118][ T25] usb 4-1: Using ep0 maxpacket: 8 [ 338.690523][ T25] usb 4-1: unable to get BOS descriptor or descriptor too short [ 338.699342][ T25] usb 4-1: unable to read config index 0 descriptor/start: -71 [ 338.706962][ T25] usb 4-1: can't read configurations, error -71 [ 339.178253][ T5911] usb 6-1: new high-speed USB device number 8 using dummy_hcd [ 339.330834][ T5911] usb 6-1: New USB device found, idVendor=8086, idProduct=0110, bcdDevice=bf.ad [ 339.340139][ T5911] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 339.349958][ T5911] usb 6-1: config 0 descriptor?? [ 339.356685][ T5911] gspca_main: spca508-2.14.0 probing 8086:0110 [ 339.434310][ T5875] dvb_usb_rtl28xxu 5-1:0.0: probe with driver dvb_usb_rtl28xxu failed with error -32 [ 339.445643][ T5875] usb 5-1: USB disconnect, device number 25 [ 339.543730][ T25] usb 4-1: new high-speed USB device number 36 using dummy_hcd [ 339.560098][ T5911] gspca_spca508: reg_read err -32 [ 339.565672][ T5911] gspca_spca508: reg_read err -32 [ 339.572126][ T5911] gspca_spca508: reg_read err -32 [ 339.577659][ T5911] gspca_spca508: reg_read err -32 [ 339.584287][ T5911] gspca_spca508: reg_read err -32 [ 339.651094][T10425] overlayfs: failed to decode file handle (len=5, type=248, flags=0, err=-22) [ 339.701308][ T25] usb 4-1: Using ep0 maxpacket: 16 [ 339.710228][ T25] usb 4-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xF3, changing to 0x83 [ 339.725097][ T25] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 339.741154][ T25] usb 4-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 339.750823][ T25] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 339.759183][ T25] usb 4-1: Product: syz [ 339.763394][ T25] usb 4-1: Manufacturer: syz [ 339.768016][ T25] usb 4-1: SerialNumber: syz [ 339.773993][ T25] usb 4-1: config 0 descriptor?? [ 339.781132][ T25] em28xx 4-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0) [ 339.791148][ T25] em28xx 4-1:0.0: Audio interface 0 found (Vendor Class) [ 339.800767][ T5911] gspca_spca508: reg write: error -71 [ 339.806402][ T5911] spca508 6-1:0.0: probe with driver spca508 failed with error -71 [ 339.815837][ T5911] usb 6-1: USB disconnect, device number 8 [ 339.861735][ T9] gspca_stv06xx: I2C: Read error writing address: -71 [ 339.873252][ T9] usb 2-1: USB disconnect, device number 34 [ 340.386987][ T25] em28xx 4-1:0.0: unknown em28xx chip ID (0) [ 340.393913][ T25] em28xx 4-1:0.0: Config register raw data: 0xfa [ 340.403022][ T25] em28xx 4-1:0.0: I2S Audio (3 sample rate(s)) [ 340.412349][ T25] em28xx 4-1:0.0: No AC97 audio processor [ 340.413203][ T29] audit: type=1326 audit(1737517408.502:240): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10451 comm="syz.5.1545" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f78be785d29 code=0x7ffc0000 [ 340.428270][ T5911] usb 5-1: new full-speed USB device number 26 using dummy_hcd [ 340.449230][ T29] audit: type=1326 audit(1737517408.502:241): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10451 comm="syz.5.1545" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f78be785d29 code=0x7ffc0000 [ 340.474228][ T29] audit: type=1326 audit(1737517408.512:242): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10451 comm="syz.5.1545" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f78be784690 code=0x7ffc0000 [ 340.510328][ T29] audit: type=1326 audit(1737517408.512:243): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10451 comm="syz.5.1545" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f78be784690 code=0x7ffc0000 [ 340.535192][ T29] audit: type=1326 audit(1737517408.512:244): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10451 comm="syz.5.1545" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f78be785d29 code=0x7ffc0000 [ 340.557723][ T29] audit: type=1326 audit(1737517408.512:245): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10451 comm="syz.5.1545" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f78be785d29 code=0x7ffc0000 [ 340.562902][T10459] syz_tun: entered promiscuous mode [ 340.580099][ T29] audit: type=1326 audit(1737517408.512:246): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10451 comm="syz.5.1545" exe="/root/syz-executor" sig=0 arch=c000003e syscall=319 compat=0 ip=0x7f78be785d29 code=0x7ffc0000 [ 340.611661][T10459] batadv_slave_0: entered promiscuous mode [ 340.617794][ T29] audit: type=1326 audit(1737517408.512:247): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10451 comm="syz.5.1545" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f78be785d29 code=0x7ffc0000 [ 340.641001][T10459] hsr1: entered allmulticast mode [ 340.646293][T10459] syz_tun: entered allmulticast mode [ 340.652094][T10459] batadv_slave_0: entered allmulticast mode [ 340.660678][ T29] audit: type=1326 audit(1737517408.512:248): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10451 comm="syz.5.1545" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f78be785d29 code=0x7ffc0000 [ 340.688280][ T5911] usb 5-1: unable to get BOS descriptor or descriptor too short [ 340.704164][T10463] syzkaller0: entered promiscuous mode [ 340.708004][ T5911] usb 5-1: not running at top speed; connect to a high speed hub [ 340.710194][T10463] syzkaller0: entered allmulticast mode [ 340.718747][ T5911] usb 5-1: config 2 has an invalid interface number: 131 but max is 0 [ 340.731737][ T5911] usb 5-1: config 2 has an invalid descriptor of length 0, skipping remainder of the config [ 340.744740][ T29] audit: type=1326 audit(1737517408.512:249): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10451 comm="syz.5.1545" exe="/root/syz-executor" sig=0 arch=c000003e syscall=1 compat=0 ip=0x7f78be785d29 code=0x7ffc0000 [ 340.775794][ T5911] usb 5-1: config 2 has no interface number 0 [ 340.783317][ T5911] usb 5-1: config 2 interface 131 altsetting 8 endpoint 0x82 has invalid wMaxPacketSize 0 [ 340.797994][ T5911] usb 5-1: config 2 interface 131 altsetting 8 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 340.814482][ T5911] usb 5-1: config 2 interface 131 has no altsetting 0 [ 340.853025][ T5911] usb 5-1: New USB device found, idVendor=2013, idProduct=8461, bcdDevice=57.30 [ 340.863433][ T5911] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 340.872043][ T5911] usb 5-1: Product: syz [ 340.876516][ T5911] usb 5-1: Manufacturer: syz [ 340.882831][ T5911] usb 5-1: SerialNumber: syz [ 341.050437][ T25] usb 4-1: USB disconnect, device number 36 [ 341.118739][ T5911] em28xx 5-1:2.131: New device syz syz @ 12 Mbps (2013:8461, interface 131, class 131) [ 341.128685][ T5911] em28xx 5-1:2.131: Device initialization failed. [ 341.135302][ T5911] em28xx 5-1:2.131: Device must be connected to a high-speed USB 2.0 port. [ 341.150187][ T5911] usb 5-1: USB disconnect, device number 26 [ 341.698324][ T5911] usb 6-1: new high-speed USB device number 9 using dummy_hcd [ 341.900461][ T5911] usb 6-1: Using ep0 maxpacket: 16 [ 341.961640][ T5911] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 342.066373][ T5911] usb 6-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 4 [ 342.165221][ T5911] usb 6-1: New USB device found, idVendor=1e7d, idProduct=2d50, bcdDevice= 0.00 [ 342.176246][ T5911] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 342.186487][ T5911] usb 6-1: config 0 descriptor?? [ 342.600456][ T5911] usb 6-1: string descriptor 0 read error: -71 [ 342.608107][ T5911] usbhid 6-1:0.0: couldn't find an input interrupt endpoint [ 342.616791][ T5911] usb 6-1: USB disconnect, device number 9 [ 343.811502][T10541] sch_tbf: burst 32855 is lower than device lo mtu (65550) ! [ 344.180935][ T5873] usb 6-1: new high-speed USB device number 10 using dummy_hcd [ 344.348652][ T5873] usb 6-1: Using ep0 maxpacket: 16 [ 344.355488][ T5873] usb 6-1: config 8 has an invalid interface number: 179 but max is 0 [ 344.364437][ T5873] usb 6-1: config 8 has an invalid descriptor of length 252, skipping remainder of the config [ 344.374831][ T5873] usb 6-1: config 8 has no interface number 0 [ 344.381709][ T5873] usb 6-1: config 8 interface 179 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 344.396327][ T5873] usb 6-1: New USB device found, idVendor=c21c, idProduct=79d3, bcdDevice=56.9d [ 344.405430][ T5873] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 344.413465][ T5873] usb 6-1: Product: syz [ 344.417627][ T5873] usb 6-1: Manufacturer: syz [ 344.422257][ T5873] usb 6-1: SerialNumber: syz [ 344.428725][ T5873] usb 6-1: bad CDC descriptors [ 344.598375][ T5826] Bluetooth: hci2: command 0x0406 tx timeout [ 344.613900][T10563] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 344.654366][ T5873] usb 6-1: USB disconnect, device number 10 [ 344.681922][ T5911] kernel write not supported for file /snd/seq (pid: 5911 comm: kworker/1:7) [ 345.252589][T10580] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1596'. [ 345.360337][T10586] netlink: 'syz.5.1599': attribute type 4 has an invalid length. [ 345.394757][T10586] netlink: 'syz.5.1599': attribute type 4 has an invalid length. [ 346.338340][ T5873] usb 5-1: new high-speed USB device number 27 using dummy_hcd [ 346.509441][ T5873] usb 5-1: config 0 has an invalid interface number: 98 but max is 0 [ 346.518054][ T5873] usb 5-1: config 0 has no interface number 0 [ 346.526509][ T5873] usb 5-1: config 0 interface 98 has no altsetting 0 [ 346.540356][ T5873] usb 5-1: New USB device found, idVendor=1110, idProduct=9024, bcdDevice=db.24 [ 346.550202][ T5873] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 346.564418][ T5873] usb 5-1: Product: syz [ 346.569341][ T5873] usb 5-1: Manufacturer: syz [ 346.575171][ T5873] usb 5-1: SerialNumber: syz [ 346.597153][ T5873] usb 5-1: config 0 descriptor?? [ 346.810022][ T5873] usb 5-1: [ueagle-atm] ADSL device founded vid (0X1110) pid (0X9024) Rev (0XDB24): Eagle II [ 347.438381][ T5873] usb 5-1: reset high-speed USB device number 27 using dummy_hcd [ 347.450651][ T5873] usb 5-1: device reset changed ep0 maxpacket size! [ 347.464123][ T5873] usb 5-1: [ueagle-atm] pre-firmware device, uploading firmware [ 347.481393][ T5873] usb 5-1: [ueagle-atm] loading firmware ueagle-atm/eagleII.fw [ 347.490001][ T9] usb 5-1: Direct firmware load for ueagle-atm/eagleII.fw failed with error -2 [ 347.515989][ T9] usb 5-1: Falling back to sysfs fallback for: ueagle-atm/eagleII.fw [ 347.529877][ T5873] usb 5-1: USB disconnect, device number 27 [ 347.678605][ T5873] usb 5-1: new high-speed USB device number 28 using dummy_hcd [ 347.868440][ T5873] usb 5-1: Using ep0 maxpacket: 16 [ 347.955885][ T5873] usb 5-1: config 0 has an invalid descriptor of length 122, skipping remainder of the config [ 347.971442][ T5873] usb 5-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 347.991765][ T5873] usb 5-1: New USB device found, idVendor=6161, idProduct=4d15, bcdDevice= 0.00 [ 348.011418][ T5873] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 348.037298][ T5873] usb 5-1: config 0 descriptor?? [ 348.055315][ T5873] usbhid 5-1:0.0: couldn't find an input interrupt endpoint [ 348.293276][ T25] usb 5-1: USB disconnect, device number 28 [ 348.307488][T10661] Bluetooth: MGMT ver 1.23 [ 348.443783][T10668] team0: No ports can be present during mode change [ 349.248239][ T5872] usb 2-1: new high-speed USB device number 35 using dummy_hcd [ 349.398268][ T5872] usb 2-1: Using ep0 maxpacket: 8 [ 349.942237][ T5872] usb 2-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ee [ 349.951475][ T5872] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 349.959642][ T5872] usb 2-1: Product: syz [ 349.964125][ T5872] usb 2-1: Manufacturer: syz [ 349.989772][ T5872] usb 2-1: SerialNumber: syz [ 349.997169][ T5872] usb 2-1: config 0 descriptor?? [ 350.243206][ T5872] usb 2-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 350.370087][T10712] Mount JFS Failure: -22 [ 350.527838][T10719] bridge_slave_0: left allmulticast mode [ 350.533994][T10719] bridge_slave_0: left promiscuous mode [ 350.540771][T10719] bridge0: port 1(bridge_slave_0) entered disabled state [ 350.557673][T10719] bridge_slave_1: left allmulticast mode [ 350.565872][T10719] bridge_slave_1: left promiscuous mode [ 350.573448][T10719] bridge0: port 2(bridge_slave_1) entered disabled state [ 350.592872][T10719] bond0: (slave bond_slave_0): Releasing backup interface [ 350.603445][T10719] bond0: (slave bond_slave_1): Releasing backup interface [ 350.623948][T10719] team0: Port device team_slave_0 removed [ 350.637361][T10719] team0: Port device team_slave_1 removed [ 350.644363][T10719] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 350.654326][T10719] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 350.668639][T10719] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 350.676178][T10719] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 350.712841][ T29] kauditd_printk_skb: 10 callbacks suppressed [ 350.712859][ T29] audit: type=1326 audit(1737517418.802:260): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10734 comm="syz.4.1654" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f93b0185d29 code=0x0 [ 350.744003][T10731] bridge: RTM_NEWNEIGH with invalid ether address [ 350.857809][ T5872] dvb_usb_rtl28xxu 2-1:0.0: probe with driver dvb_usb_rtl28xxu failed with error -71 [ 350.878098][ T5872] usb 2-1: USB disconnect, device number 35 [ 351.771692][T10770] kvm: pic: single mode not supported [ 351.772662][T10770] kvm: pic: single mode not supported [ 351.778487][T10770] kvm: pic: level sensitive irq not supported [ 351.792273][T10770] kvm: pic: single mode not supported [ 352.279599][T10781] binder: 10779:10781 ioctl c0306201 200001c0 returned -22 [ 352.452360][T10793] xt_hashlimit: invalid rate [ 353.505921][T10804] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 353.513795][T10804] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 353.523602][T10804] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 353.531638][T10804] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 353.543244][T10804] bond0: (slave batadv0): Releasing backup interface [ 353.788288][ T5872] usb 6-1: new high-speed USB device number 11 using dummy_hcd [ 353.937112][T10817] netlink: 'syz.3.1683': attribute type 10 has an invalid length. [ 353.945345][T10817] netdevsim netdevsim3 netdevsim0: left promiscuous mode [ 353.946444][ T5872] usb 6-1: Using ep0 maxpacket: 16 [ 353.953952][T10817] netdevsim netdevsim3 netdevsim0: entered promiscuous mode [ 353.959478][ T5872] usb 6-1: unable to get BOS descriptor or descriptor too short [ 353.967902][T10817] team0: Port device netdevsim0 added [ 353.975821][ T5872] usb 6-1: config 5 has an invalid interface number: 183 but max is 0 [ 353.986744][ T5872] usb 6-1: config 5 has no interface number 0 [ 353.994888][ T5872] usb 6-1: config 5 interface 183 has no altsetting 0 [ 354.000373][T10817] netlink: 'syz.3.1683': attribute type 10 has an invalid length. [ 354.005148][ T5872] usb 6-1: New USB device found, idVendor=0ac8, idProduct=303b, bcdDevice=5b.98 [ 354.018972][ T5872] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 354.026996][ T5872] usb 6-1: Product: syz [ 354.031332][ T5872] usb 6-1: Manufacturer: syz [ 354.031536][T10817] team0: Failed to send options change via netlink (err -105) [ 354.035931][ T5872] usb 6-1: SerialNumber: syz [ 354.048865][T10817] team0: Failed to send port change of device netdevsim0 via netlink (err -105) [ 354.058501][T10817] team0: Port device netdevsim0 removed [ 354.064872][T10817] netdevsim netdevsim3 netdevsim0: left promiscuous mode [ 354.073721][T10817] bond0: (slave netdevsim0): Enslaving as an active interface with an up link [ 354.247195][ T5872] gspca_main: gspca_zc3xx-2.14.0 probing 0ac8:303b [ 354.255821][ T5872] gspca_zc3xx: reg_w_i err -71 [ 354.336949][T10829] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 354.753018][T10841] netlink: 'syz.1.1691': attribute type 5 has an invalid length. [ 354.858371][ T5872] gspca_zc3xx: Unknown sensor - set to TAS5130C [ 354.864714][ T5872] gspca_zc3xx 6-1:5.183: probe with driver gspca_zc3xx failed with error -71 [ 354.967770][ T5872] usb 6-1: USB disconnect, device number 11 [ 355.457820][T10865] netlink: 'syz.4.1699': attribute type 10 has an invalid length. [ 355.484186][T10865] bond0: (slave wlan1): Enslaving as an active interface with an up link [ 356.830964][T10897] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1709'. [ 357.241335][T10911] input: syz0 as /devices/virtual/input/input13 [ 357.478510][ T5875] usb 4-1: new high-speed USB device number 37 using dummy_hcd [ 357.968210][ T5875] usb 4-1: Using ep0 maxpacket: 32 [ 357.979279][ T5875] usb 4-1: config index 0 descriptor too short (expected 29220, got 36) [ 357.987665][ T5875] usb 4-1: config 0 has too many interfaces: 81, using maximum allowed: 32 [ 357.997528][ T5875] usb 4-1: config 0 has 1 interface, different from the descriptor's value: 81 [ 358.008102][ T5875] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 358.017907][ T5875] usb 4-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 358.027915][ T5875] usb 4-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 358.041716][ T5875] usb 4-1: New USB device found, idVendor=03f0, idProduct=6c17, bcdDevice= 0.40 [ 358.074627][ T5875] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 358.109299][ T5875] usb 4-1: config 0 descriptor?? [ 358.414332][ T5875] usblp 4-1:0.0: usblp0: USB Bidirectional printer dev 37 if 0 alt 0 proto 3 vid 0x03F0 pid 0x6C17 [ 358.446402][ T5875] usb 4-1: USB disconnect, device number 37 [ 358.460864][ T5875] usblp0: removed [ 359.098531][ T5827] usb 5-1: new high-speed USB device number 29 using dummy_hcd [ 359.148395][ T5875] usb 4-1: new high-speed USB device number 38 using dummy_hcd [ 359.280894][ T5827] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 359.291948][ T5827] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 359.301857][ T5827] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 359.315500][ T5827] usb 5-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 359.325331][ T5827] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 359.336484][ T5827] usb 5-1: config 0 descriptor?? [ 359.349068][ T5875] usb 4-1: Using ep0 maxpacket: 32 [ 359.365805][ T5875] usb 4-1: config index 0 descriptor too short (expected 29220, got 36) [ 359.384738][ T5875] usb 4-1: config 0 has too many interfaces: 81, using maximum allowed: 32 [ 359.395335][ T5875] usb 4-1: config 0 has 1 interface, different from the descriptor's value: 81 [ 359.405333][ T5875] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 359.417808][ T5875] usb 4-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 359.436100][ T5875] usb 4-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 359.451497][ T5875] usb 4-1: New USB device found, idVendor=03f0, idProduct=6c17, bcdDevice= 0.40 [ 359.461194][ T5875] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 359.470790][ T5875] usb 4-1: config 0 descriptor?? [ 359.565747][T10961] binder_alloc: 10960: binder_alloc_buf, no vma [ 359.686777][ T5875] usblp 4-1:0.0: usblp0: USB Bidirectional printer dev 38 if 0 alt 0 proto 3 vid 0x03F0 pid 0x6C17 [ 359.789701][ T5827] plantronics 0003:047F:FFFF.0019: No inputs registered, leaving [ 359.919457][ T5827] plantronics 0003:047F:FFFF.0019: hiddev1,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.4-1/input0 [ 360.138650][ T25] usb 5-1: USB disconnect, device number 29 [ 360.170361][T10975] netlink: 24 bytes leftover after parsing attributes in process `syz.5.1736'. [ 361.225576][ T5875] usb 4-1: USB disconnect, device number 38 [ 361.245570][ T5875] usblp0: removed [ 362.348316][ T5875] usb 2-1: new high-speed USB device number 36 using dummy_hcd [ 362.512506][ T5875] usb 2-1: New USB device found, idVendor=20b7, idProduct=1540, bcdDevice=b7.5a [ 362.527214][ T5875] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 362.541478][ T5875] usb 2-1: Product: syz [ 362.549976][ T5875] usb 2-1: Manufacturer: syz [ 362.559990][ T5875] usb 2-1: SerialNumber: syz [ 362.568108][T11048] netlink: 24 bytes leftover after parsing attributes in process `syz.3.1763'. [ 362.580472][ T5875] usb 2-1: config 0 descriptor?? [ 362.994433][ T5875] usb 2-1: Firmware: major: 0, minor: 11, hardware type: RZUSB (3) [ 363.195724][ T5875] usb 2-1: failed to fetch extended address, random address set [ 363.310305][ T5875] usb 2-1: USB disconnect, device number 36 [ 364.028293][ T973] usb 5-1: new high-speed USB device number 30 using dummy_hcd [ 364.249793][ T973] usb 5-1: config 27 has an invalid descriptor of length 0, skipping remainder of the config [ 364.268648][ T973] usb 5-1: config 27 has 0 interfaces, different from the descriptor's value: 1 [ 364.281348][T11098] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1780'. [ 364.288250][ T973] usb 5-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 364.309919][ T973] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 364.670590][T11074] Bluetooth: MGMT ver 1.23 [ 364.764649][ T973] usb 5-1: USB disconnect, device number 30 [ 365.522506][T11121] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 365.648224][ T5875] usb 4-1: new high-speed USB device number 39 using dummy_hcd [ 365.829236][ T5875] usb 4-1: Using ep0 maxpacket: 16 [ 365.869672][ T5875] usb 4-1: New USB device found, idVendor=0471, idProduct=0327, bcdDevice=61.a4 [ 365.879902][ T5875] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 365.889329][ T5875] usb 4-1: config 0 descriptor?? [ 365.896649][ T5875] gspca_main: sonixj-2.14.0 probing 0471:0327 [ 367.898437][ T5875] gspca_sonixj: i2c_w8 err -110 [ 367.941468][ T5875] sonixj 4-1:0.0: probe with driver sonixj failed with error -110 [ 371.245269][ T25] usb 4-1: USB disconnect, device number 39 [ 371.558239][ T5827] usb 5-1: new high-speed USB device number 31 using dummy_hcd [ 371.708199][ T5827] usb 5-1: Using ep0 maxpacket: 32 [ 371.721125][ T5827] usb 5-1: config index 0 descriptor too short (expected 35577, got 27) [ 371.739093][ T5827] usb 5-1: config 1 has too many interfaces: 92, using maximum allowed: 32 [ 371.755503][ T5827] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 371.782728][ T5827] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 92 [ 371.807894][ T5827] usb 5-1: config 1 has no interface number 0 [ 371.814494][ T5827] usb 5-1: New USB device found, idVendor=0e41, idProduct=5051, bcdDevice=d5.e8 [ 371.827236][ T5827] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 371.843207][ T5827] snd_usb_pod 5-1:1.1: Line 6 Pocket POD found [ 372.040824][T11214] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1819'. [ 372.078586][ T5827] snd_usb_pod 5-1:1.1: set_interface failed [ 372.084750][ T5827] snd_usb_pod 5-1:1.1: Line 6 Pocket POD now disconnected [ 372.094210][ T5827] snd_usb_pod 5-1:1.1: probe with driver snd_usb_pod failed with error -71 [ 372.110778][ T5827] usb 5-1: USB disconnect, device number 31 [ 372.196412][T11220] kvm: emulating exchange as write [ 372.811172][T11233] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1826'. [ 374.178256][ T25] usb 6-1: new high-speed USB device number 12 using dummy_hcd [ 374.345995][ T25] usb 6-1: config 0 has more interface descriptors, than it declares in bNumInterfaces, ignoring interface number: 255 [ 374.394179][T11296] program syz.1.1846 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 374.403493][ T25] usb 6-1: config 0 has an invalid descriptor of length 10, skipping remainder of the config [ 374.403647][ T25] usb 6-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 2 [ 374.563619][ T25] usb 6-1: New USB device found, idVendor=1908, idProduct=1315, bcdDevice= 0.00 [ 375.109900][ T25] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 375.203313][ T25] usb 6-1: config 0 descriptor?? [ 375.436970][ T25] usb-storage 6-1:0.0: USB Mass Storage device detected [ 375.462920][ T25] usb-storage 6-1:0.0: Quirks match for vid 1908 pid 1315: 20000 [ 375.536599][T11314] kvm: requested 4190 ns i8254 timer period limited to 200000 ns [ 375.659792][ T5827] usb 6-1: USB disconnect, device number 12 [ 375.778543][T11330] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 375.981042][T11349] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1864'. [ 376.915163][T11368] netlink: 76 bytes leftover after parsing attributes in process `syz.1.1870'. [ 378.484386][T11404] netlink: 24 bytes leftover after parsing attributes in process `syz.5.1883'. [ 378.838518][ T973] usb 6-1: new full-speed USB device number 13 using dummy_hcd [ 379.094295][ T973] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 379.105295][ T973] usb 6-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 379.219913][ T973] usb 6-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 379.261520][ T973] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 379.319955][ T973] usb 6-1: Product: syz [ 379.324256][ T973] usb 6-1: Manufacturer: syz [ 379.329702][ T973] usb 6-1: SerialNumber: syz [ 379.590887][ T973] usb 6-1: 0:2 : does not exist [ 379.593219][ T973] usb 6-1: 5:0: failed to get current value for ch 0 (-22) [ 379.614689][ T973] usb 6-1: USB disconnect, device number 13 [ 379.623235][T11424] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1891'. [ 381.259643][T11458] syz.5.1902: attempt to access beyond end of device [ 381.259643][T11458] nbd5: rw=0, sector=0, nr_sectors = 1 limit=0 [ 381.273115][T11458] FAT-fs (nbd5): unable to read boot sector [ 381.730375][T11468] binder_alloc: 11465: binder_install_single_page failed to insert page at offset 0 with -14 [ 382.240896][ T973] usb 4-1: new high-speed USB device number 40 using dummy_hcd [ 382.408284][ T973] usb 4-1: Using ep0 maxpacket: 32 [ 382.415885][ T973] usb 4-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 64, changing to 7 [ 382.493305][ T973] usb 4-1: config 1 interface 1 altsetting 1 endpoint 0x1 has invalid wMaxPacketSize 0 [ 382.509651][ T973] usb 4-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 382.532220][ T973] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 382.540860][ T973] usb 4-1: Product: syz [ 382.545120][ T973] usb 4-1: Manufacturer: syz [ 382.553990][ T973] usb 4-1: SerialNumber: syz [ 383.492485][ T29] audit: type=1326 audit(1737517451.582:261): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=11487 comm="syz.0.1913" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc46dd85d29 code=0x7ffc0000 [ 383.529503][ T29] audit: type=1326 audit(1737517451.582:262): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=11487 comm="syz.0.1913" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc46dd85d29 code=0x7ffc0000 [ 383.551628][ T29] audit: type=1326 audit(1737517451.612:263): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=11487 comm="syz.0.1913" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fc46dd85d29 code=0x7ffc0000 [ 383.573823][ T29] audit: type=1326 audit(1737517451.612:264): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=11487 comm="syz.0.1913" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc46dd85d29 code=0x7ffc0000 [ 383.580689][ T973] usb 4-1: 2:1 : format type 0 is detected, processed as PCM [ 383.596230][ T29] audit: type=1326 audit(1737517451.612:265): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=11487 comm="syz.0.1913" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc46dd85d29 code=0x7ffc0000 [ 383.661329][ T973] usb 4-1: USB disconnect, device number 40 [ 383.684275][ T29] audit: type=1326 audit(1737517451.612:266): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=11487 comm="syz.0.1913" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fc46dd85d29 code=0x7ffc0000 [ 383.711648][ T29] audit: type=1326 audit(1737517451.612:267): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=11487 comm="syz.0.1913" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc46dd85d29 code=0x7ffc0000 [ 383.733698][ T29] audit: type=1326 audit(1737517451.612:268): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=11487 comm="syz.0.1913" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fc46dd85d29 code=0x7ffc0000 [ 383.773589][ T29] audit: type=1326 audit(1737517451.612:269): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=11487 comm="syz.0.1913" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc46dd85d29 code=0x7ffc0000 [ 383.797502][ T29] audit: type=1326 audit(1737517451.622:270): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=11487 comm="syz.0.1913" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fc46dd85d29 code=0x7ffc0000 [ 384.343983][T11513] netlink: 'syz.0.1923': attribute type 29 has an invalid length. [ 384.601846][T11513] netlink: 'syz.0.1923': attribute type 29 has an invalid length. [ 384.666082][T11513] netlink: 516 bytes leftover after parsing attributes in process `syz.0.1923'. [ 384.696592][T11513] unsupported nla_type 40 [ 386.192595][T11558] ipvlan2: entered promiscuous mode [ 389.507283][ T1155] syzkaller0: tun_net_xmit 76 [ 389.518691][ T1155] syzkaller0: tun_net_xmit 48 [ 389.528458][ T5827] syzkaller0: tun_net_xmit 76 [ 389.550895][T11616] syzkaller0: create flow: hash 3109591793 index 1 [ 389.567718][T11614] syzkaller0: delete flow: hash 3109591793 index 1 [ 389.898470][ T973] usb 5-1: new high-speed USB device number 32 using dummy_hcd [ 390.103271][ T973] usb 5-1: New USB device found, idVendor=0757, idProduct=0a00, bcdDevice= 0.00 [ 390.116758][ T973] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 390.134065][ T973] usb 5-1: config 0 descriptor?? [ 390.274830][T11629] netlink: 'syz.0.1959': attribute type 2 has an invalid length. [ 390.897264][ T973] nti 0003:0757:0A00.001A: unknown main item tag 0x0 [ 390.907727][ T973] nti 0003:0757:0A00.001A: unknown main item tag 0x0 [ 390.918292][ T973] nti 0003:0757:0A00.001A: unknown main item tag 0x0 [ 390.935242][ T973] nti 0003:0757:0A00.001A: unknown main item tag 0x0 [ 390.942231][ T973] nti 0003:0757:0A00.001A: unknown main item tag 0x0 [ 390.960286][ T973] nti 0003:0757:0A00.001A: hidraw0: USB HID v0.00 Device [HID 0757:0a00] on usb-dummy_hcd.4-1/input0 [ 390.989666][T11639] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1963'. [ 391.152678][ T51] usb 5-1: USB disconnect, device number 32 [ 391.581146][ T5875] usb 4-1: new high-speed USB device number 41 using dummy_hcd [ 391.588356][ T5911] usb 6-1: new high-speed USB device number 14 using dummy_hcd [ 391.748210][ T5911] usb 6-1: Using ep0 maxpacket: 8 [ 391.756873][ T5911] usb 6-1: New USB device found, idVendor=0c45, idProduct=613b, bcdDevice=c4.6d [ 391.766771][ T5911] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 391.776831][ T5911] usb 6-1: Product: syz [ 391.776932][ T5875] usb 4-1: New USB device found, idVendor=9710, idProduct=7730, bcdDevice=96.33 [ 391.790771][ T5875] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 391.800588][ T5911] usb 6-1: Manufacturer: syz [ 391.805402][ T5911] usb 6-1: SerialNumber: syz [ 391.813981][ T5911] usb 6-1: config 0 descriptor?? [ 391.814007][ T5875] usb 4-1: config 0 descriptor?? [ 391.830148][ T5911] gspca_main: sonixj-2.14.0 probing 0c45:613b [ 392.373137][ T5911] gspca_sonixj: reg_r err -71 [ 392.377928][ T5911] sonixj 6-1:0.0: probe with driver sonixj failed with error -71 [ 392.388917][ T5911] usb 6-1: USB disconnect, device number 14 [ 394.107769][ T5875] usb 4-1: Cannot set autoneg [ 394.130018][ T5875] MOSCHIP usb-ethernet driver 4-1:0.0: probe with driver MOSCHIP usb-ethernet driver failed with error -71 [ 394.163490][ T5875] usb 4-1: USB disconnect, device number 41 [ 395.589722][ T51] usb 6-1: new high-speed USB device number 15 using dummy_hcd [ 395.748346][ T51] usb 6-1: Using ep0 maxpacket: 32 [ 395.783165][ T51] usb 6-1: config 4 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 395.789839][T11764] netlink: 'syz.0.2001': attribute type 1 has an invalid length. [ 395.816354][ T51] usb 6-1: config 4 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 395.844911][ T51] usb 6-1: New USB device found, idVendor=046d, idProduct=c314, bcdDevice= 0.40 [ 395.856205][ T51] usb 6-1: New USB device strings: Mfr=255, Product=255, SerialNumber=0 [ 395.865228][ T51] usb 6-1: Product: syz [ 395.869835][ T51] usb 6-1: Manufacturer: syz [ 395.915559][ T51] hub 6-1:4.0: USB hub found [ 396.106815][T11764] 8021q: adding VLAN 0 to HW filter on device bond1 [ 396.341425][ T51] hub 6-1:4.0: 2 ports detected [ 396.351919][T11766] bond1: (slave bridge2): making interface the new active one [ 396.365747][T11766] bond1: (slave bridge2): Enslaving as an active interface with an up link [ 396.394033][T11771] vlan2: entered promiscuous mode [ 396.404855][T11771] bond0: entered promiscuous mode [ 396.422032][T11771] bond_slave_0: entered promiscuous mode [ 396.427880][T11771] bond_slave_1: entered promiscuous mode [ 396.437378][T11771] bond0: left promiscuous mode [ 396.460468][T11771] bond_slave_0: left promiscuous mode [ 396.468786][T11771] bond_slave_1: left promiscuous mode [ 396.495843][T11764] vlan2: entered promiscuous mode [ 396.519582][T11764] bond1: entered promiscuous mode [ 396.524691][T11764] bridge2: entered promiscuous mode [ 396.566982][T11764] vlan2: entered allmulticast mode [ 396.577161][T11764] bond1: entered allmulticast mode [ 396.590557][T11764] bridge2: entered allmulticast mode [ 397.737794][ T51] hub 6-1:4.0: activate --> -90 [ 398.630883][ T5827] usb 6-1: USB disconnect, device number 15 [ 398.638683][ T51] usb 6-1-port2: cannot reset (err = -71) [ 398.652408][ T51] usb 6-1-port2: attempt power cycle [ 399.577135][T11825] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2017'. [ 399.596663][T11825] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2017'. [ 399.603558][T11829] binder: BINDER_SET_CONTEXT_MGR already set [ 399.618101][T11825] netlink: 32 bytes leftover after parsing attributes in process `syz.1.2017'. [ 399.708381][T11829] binder: 11828:11829 ioctl 4018620d 20000100 returned -16 [ 400.196019][T11829] binder: BINDER_SET_CONTEXT_MGR already set [ 400.228516][T11829] binder: 11828:11829 ioctl 4018620d 20000040 returned -16 [ 401.246765][T11872] trusted_key: encrypted_key: master key parameter is missing [ 405.578304][ T8] usb 6-1: new high-speed USB device number 20 using dummy_hcd [ 405.753485][ T8] usb 6-1: Using ep0 maxpacket: 16 [ 405.862110][ T8] usb 6-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xF3, changing to 0x83 [ 405.882118][ T8] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 406.005563][ T8] usb 6-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 406.078219][ T8] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 406.102462][ T8] usb 6-1: Product: syz [ 406.118261][ T8] usb 6-1: Manufacturer: syz [ 406.123118][ T8] usb 6-1: SerialNumber: syz [ 406.154926][T11976] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2065'. [ 406.158840][ T8] usb 6-1: config 0 descriptor?? [ 406.164312][T11976] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2065'. [ 406.181361][ T8] em28xx 6-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0) [ 406.208248][ T8] em28xx 6-1:0.0: Audio interface 0 found (Vendor Class) [ 406.785801][ T8] em28xx 6-1:0.0: unknown em28xx chip ID (0) [ 406.794530][ T8] em28xx 6-1:0.0: Config register raw data: 0xfffffffb [ 407.408587][ T8] em28xx 6-1:0.0: Unknown AC97 audio processor detected! [ 407.416227][ T8] em28xx 6-1:0.0: couldn't setup AC97 register 2 [ 407.423275][ T8] em28xx 6-1:0.0: couldn't setup AC97 register 4 [ 407.578438][ T5827] usb 5-1: new high-speed USB device number 33 using dummy_hcd [ 407.795342][ T8] em28xx 6-1:0.0: couldn't setup AC97 register 6 [ 407.801358][ T5827] usb 5-1: Using ep0 maxpacket: 8 [ 407.810394][ T5827] usb 5-1: New USB device found, idVendor=1557, idProduct=7720, bcdDevice=b7.eb [ 407.836085][ T5827] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 407.853881][ T8] em28xx 6-1:0.0: couldn't setup AC97 register 54 [ 407.860939][ T8] em28xx 6-1:0.0: couldn't setup AC97 register 56 [ 407.864220][ T5827] usb 5-1: config 0 descriptor?? [ 407.870670][ T8] usb 6-1: USB disconnect, device number 20 [ 408.274052][ T5827] asix 5-1:0.0 (unnamed net_device) (uninitialized): invalid hw address, using random [ 408.369546][ T29] kauditd_printk_skb: 15 callbacks suppressed [ 408.369566][ T29] audit: type=1804 audit(1737517476.442:286): pid=12016 uid=0 auid=4294967295 ses=4294967295 subj=_ op=invalid_pcr cause=ToMToU comm="syz.1.2079" name="/newroot/414/file1" dev="fuse" ino=1 res=1 errno=0 [ 408.474017][ T5826] Bluetooth: hci2: command 0x0406 tx timeout [ 409.760202][ T9] usb 5-1: [UEAGLE-ATM] firmware is not available [ 410.209726][ T5827] asix 5-1:0.0 (unnamed net_device) (uninitialized): Failed to write reg index 0x0000: -71 [ 410.263989][ T5827] asix 5-1:0.0 (unnamed net_device) (uninitialized): Failed to send software reset: ffffffb9 [ 410.291667][ T5827] asix 5-1:0.0: probe with driver asix failed with error -71 [ 410.324537][ T5827] usb 5-1: USB disconnect, device number 33 [ 411.358257][ T29] audit: type=1326 audit(1737517479.442:287): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=12072 comm="syz.0.2095" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc46dd85d29 code=0x7ffc0000 [ 411.768495][ T29] audit: type=1326 audit(1737517479.442:288): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=12072 comm="syz.0.2095" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc46dd85d29 code=0x7ffc0000 [ 411.863144][ T29] audit: type=1326 audit(1737517479.552:289): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=12072 comm="syz.0.2095" exe="/root/syz-executor" sig=0 arch=c000003e syscall=319 compat=0 ip=0x7fc46dd85d29 code=0x7ffc0000 [ 412.769654][ T29] audit: type=1326 audit(1737517479.552:290): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=12072 comm="syz.0.2095" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc46dd85d29 code=0x7ffc0000 [ 412.796904][ T29] audit: type=1326 audit(1737517479.552:291): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=12072 comm="syz.0.2095" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc46dd85d29 code=0x7ffc0000 [ 413.138220][ T29] audit: type=1326 audit(1737517479.552:292): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=12072 comm="syz.0.2095" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7fc46dd84690 code=0x7ffc0000 [ 413.192191][ T29] audit: type=1326 audit(1737517479.552:293): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=12072 comm="syz.0.2095" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7fc46dd84690 code=0x7ffc0000 [ 413.249296][ T29] audit: type=1326 audit(1737517479.552:294): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=12072 comm="syz.0.2095" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc46dd85d29 code=0x7ffc0000 [ 413.994961][ T29] audit: type=1326 audit(1737517479.552:295): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=12072 comm="syz.0.2095" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc46dd85d29 code=0x7ffc0000 [ 414.031791][ T29] audit: type=1326 audit(1737517479.552:296): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=12072 comm="syz.0.2095" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7fc46dd84690 code=0x7ffc0000 [ 414.109768][ T29] audit: type=1326 audit(1737517479.552:297): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=12072 comm="syz.0.2095" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc46dd85d29 code=0x7ffc0000 [ 414.131634][ T29] audit: type=1326 audit(1737517479.552:298): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=12072 comm="syz.0.2095" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc46dd85d29 code=0x7ffc0000 [ 414.179129][ T29] audit: type=1326 audit(1737517479.562:299): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=12072 comm="syz.0.2095" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7fc46dd85d29 code=0x7ffc0000 [ 414.235070][T12104] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2101'. [ 414.248052][ T29] audit: type=1326 audit(1737517479.562:300): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=12072 comm="syz.0.2095" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc46dd85d29 code=0x7ffc0000 [ 414.264119][T12104] bridge_slave_1: left allmulticast mode [ 414.288394][ T29] audit: type=1326 audit(1737517479.562:301): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=12072 comm="syz.0.2095" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc46dd85d29 code=0x7ffc0000 [ 414.353947][T12104] bridge_slave_1: left promiscuous mode [ 414.360837][T12104] bridge0: port 2(bridge_slave_1) entered disabled state [ 414.858317][ T29] audit: type=1326 audit(1737517479.562:302): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=12072 comm="syz.0.2095" exe="/root/syz-executor" sig=0 arch=c000003e syscall=105 compat=0 ip=0x7fc46dd85d29 code=0x7ffc0000 [ 414.895582][ T29] audit: type=1326 audit(1737517479.562:303): auid=4294967295 uid=6 gid=0 ses=4294967295 subj=_ pid=12072 comm="syz.0.2095" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc46dd85d29 code=0x7ffc0000 [ 414.922895][T12104] bridge3: port 1(bridge_slave_1) entered blocking state [ 414.936998][T12104] bridge3: port 1(bridge_slave_1) entered disabled state [ 414.946309][T12104] bridge_slave_1: entered allmulticast mode [ 414.968779][T12104] bridge_slave_1: entered promiscuous mode [ 415.247427][ T29] audit: type=1326 audit(1737517479.562:304): auid=4294967295 uid=6 gid=0 ses=4294967295 subj=_ pid=12072 comm="syz.0.2095" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc46dd85d29 code=0x7ffc0000 [ 417.714232][T12147] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 418.275946][T12150] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 419.660817][ T29] kauditd_printk_skb: 18 callbacks suppressed [ 419.660850][ T29] audit: type=1326 audit(1737517487.742:323): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=12183 comm="syz.4.2126" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f93b0185d29 code=0x7ffc0000 [ 419.920712][ T29] audit: type=1326 audit(1737517487.742:324): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=12183 comm="syz.4.2126" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f93b0185d29 code=0x7ffc0000 [ 419.942508][ T29] audit: type=1326 audit(1737517487.782:325): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=12183 comm="syz.4.2126" exe="/root/syz-executor" sig=0 arch=c000003e syscall=83 compat=0 ip=0x7f93b0185d29 code=0x7ffc0000 [ 419.966510][ T29] audit: type=1326 audit(1737517487.782:326): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=12183 comm="syz.4.2126" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f93b0185d29 code=0x7ffc0000 [ 419.991195][ T5911] usb 4-1: new high-speed USB device number 42 using dummy_hcd [ 419.999144][ T29] audit: type=1326 audit(1737517487.792:327): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=12183 comm="syz.4.2126" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f93b0185d29 code=0x7ffc0000 [ 420.023383][ T29] audit: type=1326 audit(1737517487.802:328): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=12183 comm="syz.4.2126" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f93b0185d29 code=0x7ffc0000 [ 420.047256][ T29] audit: type=1326 audit(1737517487.812:329): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=12183 comm="syz.4.2126" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f93b0185d29 code=0x7ffc0000 [ 420.143713][ T29] audit: type=1326 audit(1737517487.812:330): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=12183 comm="syz.4.2126" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f93b0185d29 code=0x7ffc0000 [ 420.170691][ T29] audit: type=1326 audit(1737517487.842:331): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=12183 comm="syz.4.2126" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f93b0185d29 code=0x7ffc0000 [ 420.188351][ T5911] usb 4-1: Using ep0 maxpacket: 32 [ 420.192688][ T29] audit: type=1326 audit(1737517487.842:332): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=12183 comm="syz.4.2126" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f93b0185d29 code=0x7ffc0000 [ 420.224530][ T5911] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 420.278512][ T5875] usb 5-1: new full-speed USB device number 34 using dummy_hcd [ 420.306051][ T5911] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 420.315983][ T5911] usb 4-1: New USB device found, idVendor=1e7d, idProduct=2d5a, bcdDevice= 0.00 [ 420.325369][ T5911] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 420.344545][ T5911] usb 4-1: config 0 descriptor?? [ 420.954064][ T5875] usb 5-1: config 0 has an invalid interface number: 140 but max is 0 [ 421.027696][ T5875] usb 5-1: config 0 has no interface number 0 [ 421.106459][ T5875] usb 5-1: New USB device found, idVendor=0fd9, idProduct=002c, bcdDevice=71.01 [ 421.147037][ T5875] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 421.198331][ T5911] savu 0003:1E7D:2D5A.001B: hiddev0,hidraw0: USB HID v0.00 Device [HID 1e7d:2d5a] on usb-dummy_hcd.3-1/input0 [ 421.220478][ T5875] usb 5-1: Product: syz [ 421.236932][ T5875] usb 5-1: Manufacturer: syz [ 421.262781][ T5875] usb 5-1: SerialNumber: syz [ 421.270599][ T5875] usb 5-1: config 0 descriptor?? [ 421.497893][ T5911] usb 4-1: USB disconnect, device number 42 [ 421.505444][ T5875] as10x_usb: device has been detected [ 421.511281][ T5875] dvbdev: DVB: registering new adapter (Elgato EyeTV DTT Deluxe) [ 421.534860][ T5875] usb 5-1: DVB: registering adapter 1 frontend 0 (Elgato EyeTV DTT Deluxe)... [ 421.627548][ T5875] as10x_usb: error during firmware upload part1 [ 421.652432][ T5875] Registered device Elgato EyeTV DTT Deluxe [ 421.664461][ T5875] usb 5-1: USB disconnect, device number 34 [ 421.951035][T12212] netlink: 'syz.5.2133': attribute type 12 has an invalid length. [ 421.969843][ T5875] Unregistered device Elgato EyeTV DTT Deluxe [ 421.970726][ T5875] as10x_usb: device has been disconnected [ 423.466059][T12233] netlink: 56 bytes leftover after parsing attributes in process `syz.3.2139'. [ 424.168614][ T973] usb 4-1: new high-speed USB device number 43 using dummy_hcd [ 424.458229][ T973] usb 4-1: Using ep0 maxpacket: 32 [ 424.464826][ T973] usb 4-1: config 0 has an invalid interface number: 16 but max is 0 [ 424.473139][ T973] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 424.483366][ T973] usb 4-1: config 0 has no interface number 0 [ 424.493599][ T973] usb 4-1: config 0 interface 16 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 2 [ 424.508561][ T973] usb 4-1: New USB device found, idVendor=0499, idProduct=102a, bcdDevice=85.2d [ 424.517787][ T973] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 424.528420][T12252] block nbd1: shutting down sockets [ 424.536752][ T973] usb 4-1: Product: syz [ 424.547807][T12253] block nbd1: NBD_DISCONNECT [ 424.553308][T12253] block nbd1: Send disconnect failed -32 [ 424.554144][ T973] usb 4-1: Manufacturer: syz [ 424.563673][ T973] usb 4-1: SerialNumber: syz [ 424.576408][ T973] usb 4-1: config 0 descriptor?? [ 424.589970][ T973] usb 4-1: Quirk or no altset; falling back to MIDI 1.0 [ 424.612779][ T973] snd-usb-audio 4-1:0.16: probe with driver snd-usb-audio failed with error -2 [ 424.817697][ T25] usb 4-1: USB disconnect, device number 43 [ 426.431396][T12275] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 426.505254][T12282] A link change request failed with some changes committed already. Interface bond0 may have been left with an inconsistent configuration, please check. [ 426.764392][T12282] bridge0: port 2(bridge_slave_1) entered disabled state [ 426.771732][T12282] bridge0: port 1(bridge_slave_0) entered disabled state [ 426.888799][ T5875] usb 6-1: new high-speed USB device number 21 using dummy_hcd [ 427.010587][T12282] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 427.048219][ T5875] usb 6-1: Using ep0 maxpacket: 16 [ 427.055292][ T5875] usb 6-1: config 0 interface 0 altsetting 13 endpoint 0x81 has an invalid bInterval 253, changing to 11 [ 427.067248][ T5875] usb 6-1: config 0 interface 0 has no altsetting 0 [ 427.074163][ T5875] usb 6-1: New USB device found, idVendor=056a, idProduct=002a, bcdDevice= 0.00 [ 427.081681][T12282] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 427.084063][ T5875] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 427.101210][ T5875] usb 6-1: config 0 descriptor?? [ 427.109778][T12282] xfrm0: left allmulticast mode [ 427.217610][T12282] netdevsim netdevsim4 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 427.227420][T12282] netdevsim netdevsim4 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 427.240774][T12282] netdevsim netdevsim4 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 427.252356][T12282] netdevsim netdevsim4 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 427.324970][ T52] syzkaller0: tun_net_xmit 76 [ 427.332708][ T52] syzkaller0: tun_net_xmit 48 [ 427.357832][T12299] syzkaller0: tun_net_xmit 76 [ 427.529736][ T5875] wacom 0003:056A:002A.001C: unknown main item tag 0x0 [ 427.536696][ T5875] wacom 0003:056A:002A.001C: unknown main item tag 0x0 [ 427.544533][ T5875] wacom 0003:056A:002A.001C: unknown main item tag 0x0 [ 427.551503][ T5875] wacom 0003:056A:002A.001C: unknown main item tag 0x0 [ 427.559127][ T5875] wacom 0003:056A:002A.001C: unknown main item tag 0x0 [ 427.566637][ T5875] wacom 0003:056A:002A.001C: Unknown device_type for 'HID 056a:002a'. Assuming pen. [ 427.797241][T12276] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 427.831628][ T5875] wacom 0003:056A:002A.001C: hidraw0: USB HID v0.05 Device [HID 056a:002a] on usb-dummy_hcd.5-1/input0 [ 427.901288][T12276] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 427.964066][ T5875] input: Wacom Intuos5 M Pen as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:0.0/0003:056A:002A.001C/input/input14 [ 428.795562][ T5875] usb 6-1: USB disconnect, device number 21 [ 430.695936][T12359] A link change request failed with some changes committed already. Interface bridge_slave_0 may have been left with an inconsistent configuration, please check. [ 430.876129][T12366] bridge0: port 2(bridge_slave_1) entered disabled state [ 430.883420][T12366] bridge0: port 1(bridge_slave_0) entered disabled state [ 431.046188][T12366] netdevsim netdevsim1 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 431.104796][T12366] netdevsim netdevsim1 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 431.114248][T12366] netdevsim netdevsim1 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 431.123269][T12366] netdevsim netdevsim1 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 432.501321][T12387] netlink: 108 bytes leftover after parsing attributes in process `syz.4.2178'. [ 432.511270][T12387] netlink: 108 bytes leftover after parsing attributes in process `syz.4.2178'. [ 432.521075][T12387] netlink: 108 bytes leftover after parsing attributes in process `syz.4.2178'. [ 432.522392][T12391] Failed to enqueue queue_pair DETACH event datagram for context (ID=0x0) [ 433.851935][ T29] kauditd_printk_skb: 53 callbacks suppressed [ 433.851952][ T29] audit: type=1326 audit(1737517501.942:386): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=12428 comm="syz.4.2192" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f93b0185d29 code=0x0 [ 434.672718][T12436] netlink: 'syz.1.2204': attribute type 11 has an invalid length. [ 434.816114][T12438] A link change request failed with some changes committed already. Interface syz_tun may have been left with an inconsistent configuration, please check. [ 434.883721][T12446] syzkaller0: entered allmulticast mode [ 435.112457][T12450] overlayfs: upper fs does not support tmpfile. [ 435.803943][ T9721] syz_tun (unregistering): left promiscuous mode [ 436.396239][T12473] fuse: Bad value for 'fd' [ 436.404811][T12463] Bluetooth: hci4: sending frame failed (-49) [ 436.411321][ T5826] Bluetooth: hci4: Opcode 0x1003 failed: -49 [ 436.418821][T12473] Bluetooth: received HCILL_WAKE_UP_IND in state 2 [ 436.821576][T12463] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 436.829578][T12463] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 436.836997][T12463] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 436.846145][T12463] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 436.853710][T12463] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 436.861165][T12463] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 436.908220][ T29] audit: type=1326 audit(1737517504.992:387): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=12475 comm="syz.0.2211" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fc46dd85d29 code=0x0 [ 437.038674][ T5828] usb 2-1: new high-speed USB device number 37 using dummy_hcd [ 437.104697][T12485] chnl_net:caif_netlink_parms(): no params data found [ 437.171545][T12485] bridge0: port 1(bridge_slave_0) entered blocking state [ 437.178897][T12485] bridge0: port 1(bridge_slave_0) entered disabled state [ 437.186096][T12485] bridge_slave_0: entered allmulticast mode [ 437.193183][T12485] bridge_slave_0: entered promiscuous mode [ 437.193400][ T5828] usb 2-1: config 0 has no interfaces? [ 437.200978][T12485] bridge0: port 2(bridge_slave_1) entered blocking state [ 437.211955][T12485] bridge0: port 2(bridge_slave_1) entered disabled state [ 437.219994][T12485] bridge_slave_1: entered allmulticast mode [ 437.223209][ T5828] usb 2-1: New USB device found, idVendor=060b, idProduct=700a, bcdDevice= 0.00 [ 437.226850][T12485] bridge_slave_1: entered promiscuous mode [ 437.244252][ T5828] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 437.253986][ T5828] usb 2-1: config 0 descriptor?? [ 437.271726][T12485] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 437.283379][T12485] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 437.304912][T12485] team0: Port device team_slave_0 added [ 437.312020][T12485] team0: Port device team_slave_1 added [ 437.331314][T12485] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 437.338506][T12485] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 437.364758][T12485] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 437.376932][T12485] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 437.384591][T12485] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 437.410662][T12485] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 437.768854][T12485] hsr_slave_0: entered promiscuous mode [ 437.778604][T12485] hsr_slave_1: entered promiscuous mode [ 437.786384][T12485] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 437.832526][T12485] Cannot create hsr debugfs directory [ 438.015445][T12485] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 438.027102][T12485] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 438.036123][T12485] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 438.044789][T12485] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 438.103318][T12485] bridge0: port 2(bridge_slave_1) entered blocking state [ 438.110452][T12485] bridge0: port 2(bridge_slave_1) entered forwarding state [ 438.117812][T12485] bridge0: port 1(bridge_slave_0) entered blocking state [ 438.124915][T12485] bridge0: port 1(bridge_slave_0) entered forwarding state [ 438.176708][ T3444] bridge0: port 1(bridge_slave_0) entered disabled state [ 438.184369][ T3444] bridge0: port 2(bridge_slave_1) entered disabled state [ 438.201328][T12516] ubi0: attaching mtd0 [ 438.297303][T12516] ubi0: scanning is finished [ 438.313195][T12516] ubi0: empty MTD device detected [ 438.337047][T12485] 8021q: adding VLAN 0 to HW filter on device bond0 [ 438.814720][T12485] 8021q: adding VLAN 0 to HW filter on device team0 [ 438.829201][ T35] bridge0: port 1(bridge_slave_0) entered blocking state [ 438.836364][ T35] bridge0: port 1(bridge_slave_0) entered forwarding state [ 438.893065][ T29] audit: type=1326 audit(1737517506.982:388): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=12524 comm="syz.0.2224" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc46dd85d29 code=0x7ffc0000 [ 438.915846][T12516] ubi0: attached mtd0 (name "mtdram test device", size 0 MiB) [ 438.924963][T12516] ubi0: PEB size: 4096 bytes (4 KiB), LEB size: 3968 bytes [ 438.928386][T12463] Bluetooth: hci4: command tx timeout [ 438.937904][T12516] ubi0: min./max. I/O unit sizes: 1/64, sub-page size 1 [ 438.945213][T12516] ubi0: VID header offset: 64 (aligned 64), data offset: 128 [ 438.953947][ T35] bridge0: port 2(bridge_slave_1) entered blocking state [ 438.961039][ T35] bridge0: port 2(bridge_slave_1) entered forwarding state [ 438.970309][T12516] ubi0: good PEBs: 32, bad PEBs: 0, corrupted PEBs: 0 [ 438.977341][T12516] ubi0: user volume: 0, internal volumes: 1, max. volumes count: 23 [ 438.985761][T12516] ubi0: max/mean erase counter: 0/0, WL threshold: 4096, image sequence number: 18505232 [ 438.987986][ T29] audit: type=1326 audit(1737517507.022:389): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=12524 comm="syz.0.2224" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc46dd85d29 code=0x7ffc0000 [ 439.017745][ T29] audit: type=1326 audit(1737517507.082:390): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=12524 comm="syz.0.2224" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fc46dd85d29 code=0x7ffc0000 [ 439.050965][T12485] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 439.097543][T12516] ubi0: available PEBs: 28, total reserved PEBs: 4, PEBs reserved for bad PEB handling: 0 [ 439.098587][T12485] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 439.115028][ T29] audit: type=1326 audit(1737517507.102:391): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=12524 comm="syz.0.2224" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc46dd85d29 code=0x7ffc0000 [ 439.211380][ T29] audit: type=1326 audit(1737517507.102:392): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=12524 comm="syz.0.2224" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc46dd85d29 code=0x7ffc0000 [ 439.225606][T12526] ubi0: background thread "ubi_bgt0d" started, PID 12526 [ 439.252097][ T29] audit: type=1326 audit(1737517507.102:393): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=12524 comm="syz.0.2224" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fc46dd85d29 code=0x7ffc0000 [ 439.275353][ T29] audit: type=1326 audit(1737517507.112:394): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=12524 comm="syz.0.2224" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc46dd85d29 code=0x7ffc0000 [ 439.315662][ T29] audit: type=1326 audit(1737517507.112:395): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=12524 comm="syz.0.2224" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc46dd85d29 code=0x7ffc0000 [ 439.399048][ T29] audit: type=1326 audit(1737517507.112:396): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=12524 comm="syz.0.2224" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fc46dd85d29 code=0x7ffc0000 [ 439.426968][ T29] audit: type=1326 audit(1737517507.112:397): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=12524 comm="syz.0.2224" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc46dd85d29 code=0x7ffc0000 [ 440.123757][ T5828] usb 2-1: USB disconnect, device number 37 [ 440.236013][T12485] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 441.333396][T12463] Bluetooth: hci4: command tx timeout [ 442.604504][T12485] veth0_vlan: entered promiscuous mode [ 442.615781][T12485] veth1_vlan: entered promiscuous mode [ 442.632726][T12485] veth0_macvtap: entered promiscuous mode [ 442.644322][T12485] veth1_macvtap: entered promiscuous mode [ 442.656507][T12485] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 442.667473][T12485] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 442.680913][T12485] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 442.696420][T12485] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 442.913890][T12485] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 443.252043][T12485] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 443.295142][T12485] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 443.323508][T12485] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 443.362966][T12485] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 443.398387][T12485] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 443.398400][T12463] Bluetooth: hci4: command tx timeout [ 443.398416][T12485] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 443.398427][T12485] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 443.439607][T12485] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 443.440240][T12568] openvswitch: netlink: nsh attribute has 65532 unknown bytes. [ 443.457195][T12568] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 443.481802][T12485] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 443.496748][T12485] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 443.505749][T12485] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 443.516317][T12485] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 443.549245][T12485] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 443.600506][ T61] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 443.622551][ T61] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 443.637604][ T61] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 443.647433][ T61] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 444.906069][T12582] A link change request failed with some changes committed already. Interface bridge_slave_0 may have been left with an inconsistent configuration, please check. [ 444.988741][T12582] bridge0: port 2(bridge_slave_1) entered disabled state [ 444.996019][T12582] bridge0: port 1(bridge_slave_0) entered disabled state [ 445.096766][T12582] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 445.113540][T12582] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 445.206389][T12582] netdevsim netdevsim6 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 445.225939][T12582] netdevsim netdevsim6 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 445.237256][T12582] netdevsim netdevsim6 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 445.248000][T12582] netdevsim netdevsim6 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 445.546604][T12463] Bluetooth: hci4: command tx timeout [ 446.638505][ T5828] usb 5-1: new high-speed USB device number 35 using dummy_hcd [ 446.859742][ T5828] usb 5-1: Using ep0 maxpacket: 16 [ 446.914329][ T5828] usb 5-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xF3, changing to 0x83 [ 446.998413][ T5828] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 447.034618][ T5828] usb 5-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 447.067953][ T5828] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 447.080412][T12604] syzkaller0: entered promiscuous mode [ 447.085907][T12604] syzkaller0: entered allmulticast mode [ 447.102522][ T5828] usb 5-1: Product: syz [ 447.128776][ T5828] usb 5-1: Manufacturer: syz [ 447.164642][ T5828] usb 5-1: SerialNumber: syz [ 447.291652][ T5828] usb 5-1: config 0 descriptor?? [ 447.433530][ T5828] em28xx 5-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0) [ 447.443004][ T5828] em28xx 5-1:0.0: Audio interface 0 found (Vendor Class) [ 448.054517][ T5828] em28xx 5-1:0.0: unknown em28xx chip ID (0) [ 448.066405][ T5828] em28xx 5-1:0.0: Config register raw data: 0xfffffffb [ 448.592457][T12618] kAFS: unable to lookup cell '/yz1' [ 448.689455][ T5828] em28xx 5-1:0.0: Unknown AC97 audio processor detected! [ 448.701459][ T5828] em28xx 5-1:0.0: couldn't setup AC97 register 2 [ 448.704498][T12621] syzkaller0: entered promiscuous mode [ 448.708769][ T5828] em28xx 5-1:0.0: couldn't setup AC97 register 4 [ 448.726841][ T5828] em28xx 5-1:0.0: couldn't setup AC97 register 6 [ 448.733913][T12621] syzkaller0: entered allmulticast mode [ 448.804277][T12623] A link change request failed with some changes committed already. Interface bond0 may have been left with an inconsistent configuration, please check. [ 448.907646][T12623] bridge0: port 2(bridge_slave_1) entered disabled state [ 448.914963][T12623] bridge0: port 1(bridge_slave_0) entered disabled state [ 448.929807][T12623] team_slave_0: left promiscuous mode [ 448.935501][T12623] team_slave_1: left promiscuous mode [ 448.967278][ T5828] em28xx 5-1:0.0: couldn't setup AC97 register 54 [ 448.980118][ T5828] em28xx 5-1:0.0: couldn't setup AC97 register 56 [ 448.990250][ T5828] usb 5-1: USB disconnect, device number 35 [ 449.022349][T12623] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 449.033622][T12623] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 449.114137][T12623] netdevsim netdevsim3 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 449.347621][T12623] netdevsim netdevsim3 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 449.357690][T12623] netdevsim netdevsim3 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 449.367062][T12623] netdevsim netdevsim3 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 455.186584][T12672] A link change request failed with some changes committed already. Interface bridge_slave_0 may have been left with an inconsistent configuration, please check. [ 457.972220][T12672] bridge0: port 3(syz_tun) entered disabled state [ 457.994981][T12672] A link change request failed with some changes committed already. Interface syz_tun may have been left with an inconsistent configuration, please check. [ 458.011119][T12685] netlink: 28 bytes leftover after parsing attributes in process `syz.1.2264'. [ 458.020351][T12685] netlink: 28 bytes leftover after parsing attributes in process `syz.1.2264'. [ 458.905905][T12741] netlink: 8 bytes leftover after parsing attributes in process `syz.6.2279'. [ 458.970867][T12741] vlan2: entered allmulticast mode [ 458.976059][T12741] macvlan1: entered allmulticast mode [ 459.876208][T12770] vhci_hcd vhci_hcd.0: pdev(1) rhport(0) sockfd(6) [ 459.882768][T12770] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 459.910102][T12770] vhci_hcd vhci_hcd.0: Device attached [ 460.148402][T12309] usb 35-1: new low-speed USB device number 2 using vhci_hcd [ 460.198325][ T5826] Bluetooth: hci4: command 0x0405 tx timeout [ 460.568406][T12781] vhci_hcd: connection reset by peer [ 460.599653][ T52] vhci_hcd: stop threads [ 460.612802][ T52] vhci_hcd: release socket [ 460.617520][ T52] vhci_hcd: disconnect device [ 461.432579][T12801] ttyS ttyS3: ldisc open failed (-12), clearing slot 3 [ 463.288573][ T5875] usb 4-1: new high-speed USB device number 44 using dummy_hcd [ 463.438201][ T5875] usb 4-1: Using ep0 maxpacket: 16 [ 463.445435][ T5875] usb 4-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xF3, changing to 0x83 [ 463.653903][ T5875] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 463.677105][ T5875] usb 4-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 463.688272][ T5875] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 463.696319][ T5875] usb 4-1: Product: syz [ 463.702909][ T5875] usb 4-1: Manufacturer: syz [ 463.707555][ T5875] usb 4-1: SerialNumber: syz [ 463.723298][ T5875] usb 4-1: config 0 descriptor?? [ 463.730434][ T5875] em28xx 4-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0) [ 463.742336][ T5875] em28xx 4-1:0.0: Audio interface 0 found (Vendor Class) [ 463.863825][T12837] netlink: 64 bytes leftover after parsing attributes in process `syz.1.2308'. [ 463.865716][T12839] netlink: 'syz.6.2309': attribute type 27 has an invalid length. [ 463.891895][T12839] macvlan1: left allmulticast mode [ 463.897139][T12839] vlan2: left allmulticast mode [ 463.961204][T12839] 8021q: adding VLAN 0 to HW filter on device bond0 [ 463.969316][T12839] 8021q: adding VLAN 0 to HW filter on device team0 [ 463.980208][T12839] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 464.599786][ T5875] em28xx 4-1:0.0: unknown em28xx chip ID (0) [ 464.606420][ T5875] em28xx 4-1:0.0: Config register raw data: 0xfffffffb [ 465.117551][T12851] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 465.499047][T12309] vhci_hcd: vhci_device speed not set [ 465.573805][ T5875] em28xx 4-1:0.0: Unknown AC97 audio processor detected! [ 465.681827][ T5875] em28xx 4-1:0.0: couldn't setup AC97 register 2 [ 465.891817][ T5875] em28xx 4-1:0.0: couldn't setup AC97 register 4 [ 466.343026][ T5875] em28xx 4-1:0.0: couldn't setup AC97 register 6 [ 466.351578][ T5875] em28xx 4-1:0.0: couldn't setup AC97 register 54 [ 466.368262][ T5875] em28xx 4-1:0.0: couldn't setup AC97 register 56 [ 466.382707][T12873] kvm: pic: non byte write [ 466.393982][ T5875] usb 4-1: USB disconnect, device number 44 [ 466.404193][T12873] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=3832186367 (7664372734 ns) > initial count (4194322 ns). Using initial count to start timer. [ 467.729450][T12897] set match dimension is over the limit! [ 467.984518][T12911] syz.4.2330[12911] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 467.984606][T12911] syz.4.2330[12911] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 467.997288][T12911] syz.4.2330[12911] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 468.025531][T12911] syz.4.2330[12911] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 468.041270][T12911] syz.4.2330[12911] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 468.054890][T12911] syz.4.2330[12911] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 468.407172][ T29] kauditd_printk_skb: 24 callbacks suppressed [ 468.407194][ T29] audit: type=1326 audit(1737517536.492:422): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=12918 comm="syz.0.2333" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fc46dd85d29 code=0x0 [ 468.942274][T12935] A link change request failed with some changes committed already. Interface bond0 may have been left with an inconsistent configuration, please check. [ 469.521343][T12954] netlink: 28 bytes leftover after parsing attributes in process `syz.4.2344'. [ 469.531358][T12954] netlink: 28 bytes leftover after parsing attributes in process `syz.4.2344'. [ 470.448428][T12307] usb 2-1: new high-speed USB device number 38 using dummy_hcd [ 470.814056][T12307] usb 2-1: Using ep0 maxpacket: 32 [ 470.865634][T12307] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 470.876755][T12307] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 470.897450][T12307] usb 2-1: New USB device found, idVendor=1e7d, idProduct=2d5a, bcdDevice= 0.00 [ 470.931275][T12307] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 470.941369][T12307] usb 2-1: config 0 descriptor?? [ 471.278726][ T29] audit: type=1326 audit(1737517539.362:423): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=12991 comm="syz.4.2358" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f93b0185d29 code=0x0 [ 471.362170][T12307] savu 0003:1E7D:2D5A.001D: hiddev0,hidraw0: USB HID v0.00 Device [HID 1e7d:2d5a] on usb-dummy_hcd.1-1/input0 [ 471.681946][T12307] usb 2-1: USB disconnect, device number 38 [ 471.744426][T13010] netlink: 28 bytes leftover after parsing attributes in process `syz.0.2362'. [ 471.754368][T13010] netlink: 28 bytes leftover after parsing attributes in process `syz.0.2362'. [ 473.805180][T13038] netlink: 36 bytes leftover after parsing attributes in process `syz.6.2372'. [ 473.815182][T13038] netlink: 16 bytes leftover after parsing attributes in process `syz.6.2372'. [ 473.834276][T13038] netlink: 36 bytes leftover after parsing attributes in process `syz.6.2372'. [ 473.845746][T13038] netlink: 36 bytes leftover after parsing attributes in process `syz.6.2372'. [ 474.781932][T13056] netlink: 28 bytes leftover after parsing attributes in process `syz.3.2376'. [ 474.791702][T13056] netlink: 28 bytes leftover after parsing attributes in process `syz.3.2376'. [ 475.425341][T13065] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2378'. [ 475.448937][T13065] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2378'. [ 480.922461][T13153] Process accounting resumed [ 480.932302][ T29] audit: type=1804 audit(1737517549.022:424): pid=13153 uid=0 auid=4294967295 ses=4294967295 subj=_ op=invalid_pcr cause=open_writers comm="syz.3.2407" name="/newroot/490/bus/bus" dev="overlay" ino=2609 res=1 errno=0 [ 482.186973][T13170] netlink: 'syz.1.2411': attribute type 12 has an invalid length. [ 483.547019][ T29] audit: type=1326 audit(1737517551.632:425): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=13188 comm="syz.3.2417" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8627f85d29 code=0x7ffc0000 [ 483.591955][ T29] audit: type=1326 audit(1737517551.632:426): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=13188 comm="syz.3.2417" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8627f85d29 code=0x7ffc0000 [ 483.644075][ T29] audit: type=1326 audit(1737517551.632:427): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=13188 comm="syz.3.2417" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f8627f85d29 code=0x7ffc0000 [ 483.667628][ T29] audit: type=1326 audit(1737517551.632:428): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=13188 comm="syz.3.2417" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8627f85d29 code=0x7ffc0000 [ 483.690030][T13189] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2417'. [ 483.691826][ T29] audit: type=1326 audit(1737517551.632:429): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=13188 comm="syz.3.2417" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8627f85d29 code=0x7ffc0000 [ 483.723074][ T29] audit: type=1326 audit(1737517551.632:430): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=13188 comm="syz.3.2417" exe="/root/syz-executor" sig=0 arch=c000003e syscall=120 compat=0 ip=0x7f8627f85d29 code=0x7ffc0000 [ 483.746955][ T29] audit: type=1326 audit(1737517551.632:431): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=13188 comm="syz.3.2417" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8627f85d29 code=0x7ffc0000 [ 483.746993][ T29] audit: type=1326 audit(1737517551.632:432): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=13188 comm="syz.3.2417" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8627f85d29 code=0x7ffc0000 [ 483.747019][ T29] audit: type=1326 audit(1737517551.632:433): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=13188 comm="syz.3.2417" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f8627f85d29 code=0x7ffc0000 [ 484.008614][T13199] block nbd6: shutting down sockets [ 484.015429][T13201] block nbd6: NBD_DISCONNECT [ 484.020425][T13201] block nbd6: Send disconnect failed -32 [ 485.248642][T13225] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2427'. [ 485.257911][T13225] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2427'. [ 485.270697][T13225] netlink: 'syz.1.2427': attribute type 1 has an invalid length. [ 485.279489][T13225] netlink: 10 bytes leftover after parsing attributes in process `syz.1.2427'. [ 485.348643][ T5826] block nbd1: Receive control failed (result -107) [ 485.680178][T13234] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 486.485602][T13244] netlink: 'syz.4.2433': attribute type 2 has an invalid length. [ 486.496376][T13244] fþ²¹¥‰!: entered promiscuous mode [ 488.921988][ T5875] usb 4-1: new high-speed USB device number 45 using dummy_hcd [ 489.359157][ T5875] usb 4-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 489.388269][ T5875] usb 4-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 489.428214][ T5875] usb 4-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 489.456140][ T5875] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 489.499720][T13272] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 489.530499][ T5875] usb 4-1: Quirk or no altset; falling back to MIDI 1.0 [ 489.745500][T13272] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 489.808510][T13272] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 491.654736][ T29] kauditd_printk_skb: 24 callbacks suppressed [ 491.654767][ T29] audit: type=1326 audit(1737517559.742:458): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=13303 comm="syz.4.2452" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f93b0185d29 code=0x0 [ 492.023106][ T5875] usb 4-1: USB disconnect, device number 45 [ 492.171518][T13317] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2455'. [ 492.190972][T13317] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2455'. [ 493.442306][T13336] netdevsim netdevsim1: loading /lib/firmware/. failed with error -22 [ 493.452014][T13336] netdevsim netdevsim1: Direct firmware load for . failed with error -22 [ 493.460810][T13336] netdevsim netdevsim1: Falling back to sysfs fallback for: . [ 497.187634][T13389] netdevsim netdevsim6: loading /lib/firmware/. failed with error -22 [ 497.196439][T13389] netdevsim netdevsim6: Direct firmware load for . failed with error -22 [ 497.205438][T13389] netdevsim netdevsim6: Falling back to sysfs fallback for: . [ 499.554127][T13421] BFS-fs: bfs_fill_super(): No BFS filesystem on nullb0 (magic=00000000) [ 501.683642][T13442] netlink: 36 bytes leftover after parsing attributes in process `syz.6.2487'. [ 501.708585][T13442] netlink: 16 bytes leftover after parsing attributes in process `syz.6.2487'. [ 501.727128][T13442] netlink: 36 bytes leftover after parsing attributes in process `syz.6.2487'. [ 501.744784][T13442] netlink: 36 bytes leftover after parsing attributes in process `syz.6.2487'. [ 502.373641][T13449] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 502.763128][T13461] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 609.008146][ C1] rcu: INFO: rcu_preempt detected stalls on CPUs/tasks: [ 609.015151][ C1] rcu: 0-...!: (1 ticks this GP) idle=5bec/1/0x4000000000000000 softirq=46528/46528 fqs=4 [ 609.025138][ C1] rcu: (detected by 1, t=10502 jiffies, g=44757, q=461 ncpus=2) [ 609.032864][ C1] Sending NMI from CPU 1 to CPUs 0: [ 609.032900][ C0] NMI backtrace for cpu 0 [ 609.032922][ C0] CPU: 0 UID: 0 PID: 13485 Comm: syz.3.2500 Not tainted 6.13.0-syzkaller-01141-g62de6e168526 #0 [ 609.032939][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 12/27/2024 [ 609.032950][ C0] RIP: 0010:kasan_check_range+0x1bf/0x290 [ 609.032972][ C0] Code: 48 85 ed 48 0f 49 dd 48 83 e3 f8 48 29 dd 74 12 41 80 3b 00 0f 85 a6 00 00 00 49 ff c3 48 ff cd 75 ee 5b 41 5c 41 5e 41 5f 5d cc cc cc cc 40 84 ed 75 5f f7 c5 00 ff 00 00 75 5c f7 c5 00 00 [ 609.032987][ C0] RSP: 0000:ffffc90000007b78 EFLAGS: 00000056 [ 609.033002][ C0] RAX: ffffffff8991e801 RBX: ffffffff89cbb562 RCX: ffffffff8991e831 [ 609.033014][ C0] RDX: 0000000000000001 RSI: 0000000000000008 RDI: ffff88807b5d1158 [ 609.033024][ C0] RBP: ffffc90000007c60 R08: ffff88807b5d115f R09: 1ffff1100f6ba22b [ 609.033036][ C0] R10: dffffc0000000000 R11: ffffed100f6ba22c R12: ffff88807b5d1000 [ 609.033048][ C0] R13: dffffc0000000000 R14: 1ffff92000000f74 R15: ffff88807b5d1360 [ 609.033060][ C0] FS: 0000000000000000(0000) GS:ffff8880b8600000(0000) knlGS:0000000000000000 [ 609.033073][ C0] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 609.033084][ C0] CR2: 00007f8628e42f98 CR3: 00000000244cc000 CR4: 00000000003526f0 [ 609.033098][ C0] Call Trace: [ 609.033105][ C0] [ 609.033114][ C0] ? nmi_cpu_backtrace+0x3c2/0x4d0 [ 609.033136][ C0] ? __pfx_lock_acquire+0x10/0x10 [ 609.033155][ C0] ? __pfx_nmi_cpu_backtrace+0x10/0x10 [ 609.033182][ C0] ? nmi_cpu_backtrace_handler+0xc/0x20 [ 609.033205][ C0] ? nmi_handle+0x14f/0x5a0 [ 609.033223][ C0] ? nmi_handle+0x2a/0x5a0 [ 609.033240][ C0] ? kasan_check_range+0x1bf/0x290 [ 609.033254][ C0] ? default_do_nmi+0x63/0x160 [ 609.033274][ C0] ? exc_nmi+0x123/0x1f0 [ 609.033306][ C0] ? end_repeat_nmi+0xf/0x53 [ 609.033324][ C0] ? advance_sched+0xa02/0xca0 [ 609.033345][ C0] ? __netif_schedule+0x61/0x310 [ 609.033362][ C0] ? __netif_schedule+0x91/0x310 [ 609.033381][ C0] ? kasan_check_range+0x1bf/0x290 [ 609.033396][ C0] ? kasan_check_range+0x1bf/0x290 [ 609.033411][ C0] ? kasan_check_range+0x1bf/0x290 [ 609.033426][ C0] [ 609.033431][ C0] [ 609.033436][ C0] __netif_schedule+0x91/0x310 [ 609.033454][ C0] ? __pfx_lock_release+0x10/0x10 [ 609.033472][ C0] ? __pfx___netif_schedule+0x10/0x10 [ 609.033491][ C0] ? do_raw_spin_unlock+0x13c/0x8b0 [ 609.033505][ C0] ? taprio_set_budgets+0x32c/0x370 [ 609.033526][ C0] ? advance_sched+0xa02/0xca0 [ 609.033545][ C0] ? advance_sched+0xa02/0xca0 [ 609.033565][ C0] advance_sched+0xaa9/0xca0 [ 609.033591][ C0] ? __pfx_advance_sched+0x10/0x10 [ 609.033611][ C0] __hrtimer_run_queues+0x59b/0xd30 [ 609.033646][ C0] ? __pfx___hrtimer_run_queues+0x10/0x10 [ 609.033666][ C0] ? sched_clock+0x4a/0x70 [ 609.033688][ C0] ? read_tsc+0x9/0x20 [ 609.033708][ C0] ? ktime_get_update_offsets_now+0x38e/0x3b0 [ 609.033729][ C0] hrtimer_interrupt+0x403/0xa40 [ 609.033759][ C0] __sysvec_apic_timer_interrupt+0x110/0x420 [ 609.033778][ C0] sysvec_apic_timer_interrupt+0xa1/0xc0 [ 609.033802][ C0] [ 609.033807][ C0] [ 609.033813][ C0] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 609.033831][ C0] RIP: 0010:__sanitizer_cov_trace_pc+0x8/0x70 [ 609.033849][ C0] Code: 8b 3d a4 b2 8e 0c 48 89 de 5b e9 83 7c 58 00 0f 1f 00 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 f3 0f 1e fa 48 8b 04 24 <65> 48 8b 0c 25 c0 d4 03 00 65 8b 15 f0 33 64 7e 81 e2 00 01 ff 00 [ 609.033862][ C0] RSP: 0000:ffffc900046c72d8 EFLAGS: 00000287 [ 609.033875][ C0] RAX: ffffffff81e94540 RBX: 0000000000000004 RCX: 0000000000001000 [ 609.033885][ C0] RDX: 00007f862678f000 RSI: 00000000000001fd RDI: 0000000000000188 [ 609.033896][ C0] RBP: ffffc900046c7610 R08: ffffffff81ee4d3d R09: 1ffffd400030632e [ 609.033908][ C0] R10: dffffc0000000000 R11: fffff9400030632f R12: dffffc0000000000 [ 609.033920][ C0] R13: 0000000000000001 R14: ffffc900046c7560 R15: ffff88804dbe2c78 [ 609.033934][ C0] ? __tlb_remove_folio_pages_size+0x23d/0x590 [ 609.033957][ C0] ? unmap_page_range+0x2080/0x4040 [ 609.033975][ C0] unmap_page_range+0x2080/0x4040 [ 609.033998][ C0] ? lock_release+0xbf/0xa30 [ 609.034020][ C0] ? __pfx_unmap_page_range+0x10/0x10 [ 609.034039][ C0] ? mas_next_slot+0xdc6/0xea0 [ 609.034064][ C0] ? uprobe_munmap+0x183/0x460 [ 609.034083][ C0] ? unmap_single_vma+0x1bd/0x2b0 [ 609.034101][ C0] unmap_vmas+0x3cc/0x5f0 [ 609.034119][ C0] ? __pfx_unmap_vmas+0x10/0x10 [ 609.034135][ C0] ? __pfx_lru_add_drain_cpu+0x10/0x10 [ 609.034157][ C0] ? tlb_gather_mmu_fullmm+0x160/0x210 [ 609.034180][ C0] exit_mmap+0x292/0xca0 [ 609.034203][ C0] ? __pfx_exit_mmap+0x10/0x10 [ 609.034228][ C0] ? __pfx_exit_aio+0x10/0x10 [ 609.034251][ C0] ? uprobe_clear_state+0x271/0x290 [ 609.034268][ C0] ? mm_update_next_owner+0xa2/0x8a0 [ 609.034285][ C0] ? do_raw_spin_unlock+0x13c/0x8b0 [ 609.034300][ C0] __mmput+0x115/0x3b0 [ 609.034323][ C0] exit_mm+0x220/0x310 [ 609.034340][ C0] ? __pfx_exit_mm+0x10/0x10 [ 609.034355][ C0] ? taskstats_exit+0x326/0xa60 [ 609.034375][ C0] do_exit+0x9ad/0x28e0 [ 609.034392][ C0] ? rcu_is_watching+0x15/0xb0 [ 609.034414][ C0] ? __pfx_do_exit+0x10/0x10 [ 609.034430][ C0] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 609.034453][ C0] ? do_raw_spin_unlock+0x13c/0x8b0 [ 609.034467][ C0] ? __pfx_lock_release+0x10/0x10 [ 609.034486][ C0] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 609.034502][ C0] ? _raw_spin_lock_irq+0xdf/0x120 [ 609.034525][ C0] do_group_exit+0x207/0x2c0 [ 609.034544][ C0] get_signal+0x16b2/0x1750 [ 609.034571][ C0] ? __pfx_get_signal+0x10/0x10 [ 609.034595][ C0] arch_do_signal_or_restart+0x96/0x860 [ 609.034619][ C0] ? __pfx_arch_do_signal_or_restart+0x10/0x10 [ 609.034651][ C0] ? rcu_is_watching+0x15/0xb0 [ 609.034671][ C0] ? rcu_is_watching+0x15/0xb0 [ 609.034693][ C0] syscall_exit_to_user_mode+0xce/0x340 [ 609.034710][ C0] do_syscall_64+0x100/0x230 [ 609.034726][ C0] ? clear_bhb_loop+0x35/0x90 [ 609.034743][ C0] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 609.034760][ C0] RIP: 0033:0x7f8627f85d29 [ 609.034777][ C0] Code: Unable to access opcode bytes at 0x7f8627f85cff. [ 609.034785][ C0] RSP: 002b:00007f8628e430e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 609.034800][ C0] RAX: fffffffffffffe00 RBX: 00007f8628175fa8 RCX: 00007f8627f85d29 [ 609.034812][ C0] RDX: 0000000000000000 RSI: 0000000000000080 RDI: 00007f8628175fa8 [ 609.034822][ C0] RBP: 00007f8628175fa0 R08: 0000000000000000 R09: 0000000000000000 [ 609.034832][ C0] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f8628175fac [ 609.034842][ C0] R13: 0000000000000000 R14: 00007ffd1d42ee80 R15: 00007ffd1d42ef68 [ 609.034859][ C0] [ 609.034895][ C1] rcu: rcu_preempt kthread starved for 10494 jiffies! g44757 f0x0 RCU_GP_WAIT_FQS(5) ->state=0x0 ->cpu=1 [ 609.698131][ C1] rcu: Unless rcu_preempt kthread gets sufficient CPU time, OOM is now expected behavior. [ 609.708099][ C1] rcu: RCU grace-period kthread stack dump: [ 609.713999][ C1] task:rcu_preempt state:R running task stack:25008 pid:17 tgid:17 ppid:2 flags:0x00004000 [ 609.725778][ C1] Call Trace: [ 609.729064][ C1] [ 609.731998][ C1] __schedule+0x181a/0x4b90 [ 609.736521][ C1] ? schedule+0x90/0x320 [ 609.740804][ C1] ? schedule+0x90/0x320 [ 609.745055][ C1] ? __pfx___schedule+0x10/0x10 [ 609.749922][ C1] ? __pfx_lock_release+0x10/0x10 [ 609.754953][ C1] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 609.761297][ C1] ? schedule+0x90/0x320 [ 609.765548][ C1] schedule+0x14b/0x320 [ 609.769711][ C1] schedule_timeout+0x15a/0x290 [ 609.774660][ C1] ? __pfx_schedule_timeout+0x10/0x10 [ 609.780037][ C1] ? __pfx_process_timeout+0x10/0x10 [ 609.785334][ C1] ? prepare_to_swait_event+0x330/0x350 [ 609.790887][ C1] rcu_gp_fqs_loop+0x2df/0x1330 [ 609.795747][ C1] ? __pfx_rcu_watching_snap_recheck+0x10/0x10 [ 609.801994][ C1] ? __pfx_rcu_gp_fqs_loop+0x10/0x10 [ 609.807286][ C1] ? _raw_spin_unlock_irqrestore+0xdd/0x140 [ 609.813188][ C1] ? finish_swait+0xd4/0x1e0 [ 609.817787][ C1] rcu_gp_kthread+0xa7/0x3b0 [ 609.822385][ C1] ? __pfx_rcu_gp_kthread+0x10/0x10 [ 609.827589][ C1] ? _raw_spin_unlock_irqrestore+0xdd/0x140 [ 609.833491][ C1] ? __kthread_parkme+0x169/0x1d0 [ 609.838522][ C1] ? __pfx_rcu_gp_kthread+0x10/0x10 [ 609.843728][ C1] kthread+0x2f0/0x390 [ 609.847972][ C1] ? __pfx_rcu_gp_kthread+0x10/0x10 [ 609.853172][ C1] ? __pfx_kthread+0x10/0x10 [ 609.857805][ C1] ret_from_fork+0x4b/0x80 [ 609.862229][ C1] ? __pfx_kthread+0x10/0x10 [ 609.866837][ C1] ret_from_fork_asm+0x1a/0x30 [ 609.871617][ C1] [ 609.874636][ C1] rcu: Stack dump where RCU GP kthread last ran: [ 609.880972][ C1] CPU: 1 UID: 0 PID: 35 Comm: kworker/u8:2 Not tainted 6.13.0-syzkaller-01141-g62de6e168526 #0 [ 609.891295][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 12/27/2024 [ 609.901350][ C1] Workqueue: events_unbound toggle_allocation_gate [ 609.907866][ C1] RIP: 0010:smp_call_function_many_cond+0x1ba4/0x2d30 [ 609.914644][ C1] Code: 03 84 c0 75 7e 45 8b 65 00 44 89 e6 83 e6 01 31 ff e8 60 ec 0b 00 41 83 e4 01 4c 8b 64 24 68 75 07 e8 10 e8 0b 00 eb 41 f3 90 <48> b8 00 00 00 00 00 fc ff df 0f b6 04 03 84 c0 75 11 41 f7 45 00 [ 609.934340][ C1] RSP: 0018:ffffc90000ab76e0 EFLAGS: 00000293 [ 609.940412][ C1] RAX: ffffffff8193b8d5 RBX: 1ffff110170c8c6d RCX: ffff8880202b5a00 [ 609.948385][ C1] RDX: 0000000000000000 RSI: 0000000000000001 RDI: 0000000000000000 [ 609.956354][ C1] RBP: ffffc90000ab78e0 R08: ffffffff8193b8a0 R09: 1ffffffff2032c36 [ 609.964332][ C1] R10: dffffc0000000000 R11: fffffbfff2032c37 R12: ffff8880b873f988 [ 609.972306][ C1] R13: ffff8880b8646368 R14: ffff8880b873f980 R15: 0000000000000000 [ 609.980364][ C1] FS: 0000000000000000(0000) GS:ffff8880b8700000(0000) knlGS:0000000000000000 [ 609.989292][ C1] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 609.995875][ C1] CR2: 0000001b2f50eff8 CR3: 000000000e738000 CR4: 00000000003526f0 [ 610.004022][ C1] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 610.011991][ C1] DR3: 000000000000000e DR6: 00000000ffff0ff0 DR7: 0000000000000400 [ 610.019983][ C1] Call Trace: [ 610.023267][ C1] [ 610.026112][ C1] ? rcu_check_gp_kthread_starvation+0x278/0x310 [ 610.032456][ C1] ? print_other_cpu_stall+0x1481/0x15c0 [ 610.038102][ C1] ? __pfx_print_other_cpu_stall+0x10/0x10 [ 610.043910][ C1] ? seqcount_lockdep_reader_access+0x1c6/0x220 [ 610.050161][ C1] ? __pfx_seqcount_lockdep_reader_access+0x10/0x10 [ 610.056758][ C1] ? lock_release+0xbf/0xa30 [ 610.061353][ C1] ? kvm_check_and_clear_guest_paused+0x6a/0xd0 [ 610.067605][ C1] ? rcu_sched_clock_irq+0xa26/0x10e0 [ 610.073167][ C1] ? __pfx_rcu_sched_clock_irq+0x10/0x10 [ 610.078825][ C1] ? acct_account_cputime+0x207/0x210 [ 610.084198][ C1] ? update_process_times+0x242/0x2f0 [ 610.089580][ C1] ? tick_nohz_handler+0x37c/0x500 [ 610.094691][ C1] ? __pfx_tick_nohz_handler+0x10/0x10 [ 610.100156][ C1] ? __hrtimer_run_queues+0x551/0xd30 [ 610.105626][ C1] ? __pfx___hrtimer_run_queues+0x10/0x10 [ 610.111352][ C1] ? handle_softirqs+0x7e0/0x9b0 [ 610.116297][ C1] ? read_tsc+0x9/0x20 [ 610.120371][ C1] ? ktime_get_update_offsets_now+0x38e/0x3b0 [ 610.126463][ C1] ? hrtimer_interrupt+0x403/0xa40 [ 610.131624][ C1] ? __sysvec_apic_timer_interrupt+0x110/0x420 [ 610.137792][ C1] ? sysvec_apic_timer_interrupt+0xa1/0xc0 [ 610.143608][ C1] [ 610.146539][ C1] [ 610.149464][ C1] ? asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 610.155620][ C1] ? smp_call_function_many_cond+0x1b90/0x2d30 [ 610.161784][ C1] ? smp_call_function_many_cond+0x1bc5/0x2d30 [ 610.167944][ C1] ? smp_call_function_many_cond+0x1ba4/0x2d30 [ 610.174119][ C1] ? kmem_cache_alloc_bulk_noprof+0x156/0x7c0 [ 610.180188][ C1] ? kmem_cache_alloc_bulk_noprof+0x156/0x7c0 [ 610.186263][ C1] ? kmem_cache_alloc_bulk_noprof+0x156/0x7c0 [ 610.192333][ C1] ? __pfx___text_poke+0x10/0x10 [ 610.197278][ C1] ? __pfx_smp_call_function_many_cond+0x10/0x10 [ 610.203612][ C1] ? __pfx___might_resched+0x10/0x10 [ 610.208897][ C1] ? __pfx___mutex_trylock_common+0x10/0x10 [ 610.214794][ C1] ? __pfx_do_sync_core+0x10/0x10 [ 610.219836][ C1] on_each_cpu_cond_mask+0x3f/0x80 [ 610.224956][ C1] text_poke_bp_batch+0x352/0xb30 [ 610.229990][ C1] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 610.235971][ C1] ? arch_jump_label_transform_apply+0x17/0x30 [ 610.242133][ C1] ? __pfx_text_poke_bp_batch+0x10/0x10 [ 610.247690][ C1] ? arch_jump_label_transform_queue+0x9b/0x100 [ 610.253940][ C1] ? process_scheduled_works+0x976/0x1840 [ 610.259676][ C1] text_poke_finish+0x30/0x50 [ 610.264365][ C1] arch_jump_label_transform_apply+0x1c/0x30 [ 610.270351][ C1] static_key_enable_cpuslocked+0x136/0x260 [ 610.276256][ C1] static_key_enable+0x1a/0x20 [ 610.281023][ C1] toggle_allocation_gate+0xbc/0x260 [ 610.286317][ C1] ? __pfx_toggle_allocation_gate+0x10/0x10 [ 610.292219][ C1] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 610.298557][ C1] process_scheduled_works+0xa66/0x1840 [ 610.304122][ C1] ? __pfx_process_scheduled_works+0x10/0x10 [ 610.310209][ C1] ? __pfx__raw_spin_lock_irq+0x10/0x10 [ 610.315760][ C1] ? assign_work+0x364/0x3d0 [ 610.320358][ C1] worker_thread+0x870/0xd30 [ 610.324955][ C1] ? __kthread_parkme+0x169/0x1d0 [ 610.329982][ C1] ? __pfx_worker_thread+0x10/0x10 [ 610.335090][ C1] kthread+0x2f0/0x390 [ 610.339163][ C1] ? __pfx_worker_thread+0x10/0x10 [ 610.344280][ C1] ? __pfx_kthread+0x10/0x10 [ 610.348894][ C1] ret_from_fork+0x4b/0x80 [ 610.353310][ C1] ? __pfx_kthread+0x10/0x10 [ 610.357903][ C1] ret_from_fork_asm+0x1a/0x30 [ 610.362697][ C1]