last executing test programs: 15m22.655629206s ago: executing program 1 (id=1197): sendmsg$inet(0xffffffffffffffff, 0x0, 0x0) r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000001a80)="d8000000180081064e81f782db4cb904021d0800fd007c05e8fe50a10a000600014002020c600e41b0000900ac000a0501000000160012000a00ff120048035c3b61c1d67f6f94007134cf6efb8007a007a290457f01a7cee4092000001fb791643a5ee4ce1b14d6d930dfe1d9d322fe7c9f8775730d16a4683f5ae24e25ccca9e00360db79826835d3a71d95667daffffffffff1f215ce3bb9ad809d5e1cace81ed0bffece0b42a9ecbee5b7276505de6ccd40dd6e4edef3d93452a92954b43370e9703920723f9000001008af26c8b7b55f4d2a6823a45", 0xd8}], 0x1}, 0x894) 15m18.836785722s ago: executing program 1 (id=1203): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a3c000000120a01020000000000100000020000000900020073797a310000000008000440000000000900010073"], 0x64}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000640)={{0x14}, [@NFT_MSG_DELOBJ={0x14, 0x14, 0xa, 0x307, 0x0, 0x0, {0x2, 0x0, 0x9}}, @NFT_MSG_DELTABLE={0x14, 0x2, 0xa, 0x101, 0x0, 0x0, {0x0, 0x0, 0xa}}], {0x14}}, 0x50}, 0x1, 0x0, 0x0, 0x1000000}, 0x24040810) 15m18.785101538s ago: executing program 0 (id=1204): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000002c0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x1}}, [@NFT_MSG_NEWTABLE={0x28, 0x0, 0xa, 0x3, 0x0, 0x0, {0x1, 0x0, 0x9}, [@NFTA_TABLE_FLAGS={0x8, 0x2, 0x1, 0x0, 0x4}, @NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWTABLE={0x28, 0x0, 0xa, 0x3, 0x0, 0x0, {0x1, 0x0, 0x9}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}, @NFTA_TABLE_FLAGS={0x8, 0x2, 0x1, 0x0, 0x6}]}], {0x14, 0x10}}, 0x78}}, 0x500) 15m18.59764592s ago: executing program 1 (id=1206): mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xf, 0x4008032, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) syz_clone(0x42080000, 0x0, 0x0, 0x0, 0x0, 0x0) r0 = openat$kvm(0xffffff9c, &(0x7f0000000000), 0x40080, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_IRQCHIP(r1, 0x4048aec9, &(0x7f0000000740)={0x3, 0x0, @ioapic={0x0, 0x4, 0x0, 0x0, 0x0, [{0xff}, {0x0, 0x4}, {0x0, 0x0, 0x10}, {0x0, 0x2}, {0x0, 0x0, 0x2}, {0x0, 0x0, 0x0, '\x00', 0x3}, {}, {0x0, 0x0, 0x0, '\x00', 0x1}, {0x0, 0x0, 0xd7}, {}, {0x0, 0x0, 0x0, '\x00', 0x1}, {}, {0x0, 0x0, 0x1, '\x00', 0x3}, {}, {}, {}, {0x5, 0x0, 0xfe}, {}, {0x20, 0x0, 0x0, '\x00', 0x2}, {}, {0x0, 0x0, 0x5}, {}, {0x7f}, {0x0, 0xfd}]}}) rseq(&(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={0x0, 0x4, 0x2, 0x28, 0x7}, 0xfb7f70e7234e2315}, 0x20, 0x0, 0x0) 15m18.407899549s ago: executing program 0 (id=1208): openat$nullb(0xffffffffffffff9c, 0x0, 0x2c240, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) syz_open_dev$dri(0x0, 0x1, 0x0) ioctl$DRM_IOCTL_MODE_ADDFB2(0xffffffffffffffff, 0xc06864b8, &(0x7f00000001c0)={0x0, 0xae, 0x3ff, 0x34325241, 0x0, [], [0x2b8]}) r3 = socket$pppl2tp(0x18, 0x1, 0x1) r4 = socket$inet6_udp(0xa, 0x2, 0x0) connect$pppl2tp(r3, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x3, r4, {0x2, 0x4e21, @initdev={0xac, 0x1e, 0xff, 0x0}}, 0x2}}, 0x2e) r5 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000040), 0xffffffffffffffff) r6 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$L2TP_CMD_SESSION_DELETE(r6, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000380)={0x3c, r5, 0x1, 0x70bd2b, 0x25dfdbfe, {0x5}, [@L2TP_ATTR_PW_TYPE={0x6, 0x1, 0x5}, @L2TP_ATTR_CONN_ID={0x8, 0x9, 0x2}, @L2TP_ATTR_PEER_SESSION_ID={0x8, 0xc, 0xaaa}, @L2TP_ATTR_SESSION_ID={0x8, 0xb, 0x4}, @L2TP_ATTR_L2SPEC_TYPE={0x5, 0x5, 0x1}]}, 0x3c}, 0x1, 0x0, 0x0, 0x20006911}, 0xffb6) 15m17.405612496s ago: executing program 0 (id=1210): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000a00)=ANY=[@ANYBLOB="140000b41000010000000000000000000000000a20000000000a01030000000000000000010000010900010073797a31000000002c000000030a01020000000000000000c70000000900030073797a32000000000900010073797a31000000002c000000050a01020000000000000000010000000c00024000000000000000010900010073797a31"], 0xc8}}, 0x0) 15m17.132071352s ago: executing program 0 (id=1211): bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[], 0x50) socket$nl_netfilter(0x10, 0x3, 0xc) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) prlimit64(0x0, 0xe, 0x0, 0x0) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) openat$sequencer(0xffffffffffffff9c, &(0x7f00000001c0), 0x80280, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0) mount$bind(&(0x7f0000000380)='./file0\x00', &(0x7f0000000300)='./file0\x00', 0x0, 0x2125099, 0x0) mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0) r1 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r1, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) mount$bind(&(0x7f0000000000)='./file0/../file0\x00', &(0x7f0000000340)='./file0/file0\x00', 0x0, 0x891018, 0x0) mount$bind(0x0, &(0x7f0000000140)='./file0/file0\x00', 0x0, 0x80000, 0x0) mount$bind(&(0x7f0000000100)='./file0\x00', &(0x7f0000000280)='./file0/../file0\x00', 0x0, 0x1adc51, 0x0) mount$bind(&(0x7f00000002c0)='./file0/file0\x00', &(0x7f0000000240)='./file0/../file0\x00', 0x0, 0x101091, 0x0) mount$bind(&(0x7f00000003c0)='./file0\x00', &(0x7f0000000440)='./file0/file0\x00', 0x0, 0x12f451, 0x0) mount$bind(&(0x7f00000000c0)='.\x00', &(0x7f0000000080)='./file0/file0/file0\x00', 0x0, 0x80700a, 0x0) 15m16.252217929s ago: executing program 1 (id=1213): bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[], 0x50) socket$nl_netfilter(0x10, 0x3, 0xc) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) prlimit64(0x0, 0xe, 0x0, 0x0) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) openat$sequencer(0xffffffffffffff9c, &(0x7f00000001c0), 0x80280, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0) mount$bind(&(0x7f0000000380)='./file0\x00', &(0x7f0000000300)='./file0\x00', 0x0, 0x2125099, 0x0) mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0) r1 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r1, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) mount$bind(&(0x7f0000000000)='./file0/../file0\x00', &(0x7f0000000340)='./file0/file0\x00', 0x0, 0x891018, 0x0) mount$bind(0x0, &(0x7f0000000140)='./file0/file0\x00', 0x0, 0x80000, 0x0) mount$bind(&(0x7f0000000100)='./file0\x00', &(0x7f0000000280)='./file0/../file0\x00', 0x0, 0x1adc51, 0x0) mount$bind(&(0x7f00000002c0)='./file0/file0\x00', &(0x7f0000000240)='./file0/../file0\x00', 0x0, 0x101091, 0x0) mount$bind(&(0x7f00000003c0)='./file0\x00', &(0x7f0000000440)='./file0/file0\x00', 0x0, 0x12f451, 0x0) mount$bind(&(0x7f00000000c0)='.\x00', &(0x7f0000000080)='./file0/file0/file0\x00', 0x0, 0x80700a, 0x0) (fail_nth: 1) 15m16.226874341s ago: executing program 0 (id=1214): socket$packet(0x11, 0x3, 0x300) r0 = openat$tun(0xffffffffffffff9c, 0x0, 0x1c1341, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r1) socket$nl_generic(0x10, 0x3, 0x10) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) writev(r0, &(0x7f0000000100)=[{&(0x7f0000000000)="89e7ee2c7cdad9b4b47380c988ca", 0xe}, {&(0x7f0000000040)="ee1bc38a371c1633c91508fa4902a7c0", 0x10}], 0x2) 15m15.815899024s ago: executing program 0 (id=1215): bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[], 0x50) socket$nl_netfilter(0x10, 0x3, 0xc) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) prlimit64(0x0, 0xe, 0x0, 0x0) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) openat$sequencer(0xffffffffffffff9c, &(0x7f00000001c0), 0x80280, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0) mount$bind(&(0x7f00000003c0)='./file0/file1\x00', &(0x7f0000000300)='./file0\x00', 0x0, 0x10, 0x0) mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000040)={0x3, 0xc, &(0x7f0000000140)=ANY=[@ANYBLOB="18020000010004000000000000000000850000000f00000020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000009b0000009500"/96], &(0x7f00000001c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x25}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r1, 0x0, 0xe, 0x0, &(0x7f0000000100)="e0b9547ed387dbe9abc89b6f5bec", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) r2 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(0xffffffffffffff9c, &(0x7f0000000380)='.\x00', r2, &(0x7f0000000180)='./file0\x00', 0x0) mount$bind(&(0x7f0000000000)='./file0/../file0\x00', &(0x7f0000000340)='./file0/file0\x00', 0x0, 0x891018, 0x0) mount$bind(0x0, &(0x7f0000000140)='./file0/file0\x00', 0x0, 0x80000, 0x0) mount$bind(&(0x7f0000000100)='./file0\x00', &(0x7f0000000280)='./file0/../file0\x00', 0x0, 0x1adc51, 0x0) mount$bind(&(0x7f0000000400)='./file0/file1\x00', &(0x7f0000000240)='./file0/../file0\x00', 0x0, 0x2995043, 0x0) socket$rds(0x15, 0x5, 0x0) socket$inet6(0xa, 0x400000000001, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r3 = getpid() sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x110, r1, 0x803000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x2000000}, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x0, 0x4000040) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) 15m14.757414168s ago: executing program 32 (id=1215): bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[], 0x50) socket$nl_netfilter(0x10, 0x3, 0xc) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) prlimit64(0x0, 0xe, 0x0, 0x0) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) openat$sequencer(0xffffffffffffff9c, &(0x7f00000001c0), 0x80280, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0) mount$bind(&(0x7f00000003c0)='./file0/file1\x00', &(0x7f0000000300)='./file0\x00', 0x0, 0x10, 0x0) mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000040)={0x3, 0xc, &(0x7f0000000140)=ANY=[@ANYBLOB="18020000010004000000000000000000850000000f00000020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000009b0000009500"/96], &(0x7f00000001c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x25}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r1, 0x0, 0xe, 0x0, &(0x7f0000000100)="e0b9547ed387dbe9abc89b6f5bec", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) r2 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(0xffffffffffffff9c, &(0x7f0000000380)='.\x00', r2, &(0x7f0000000180)='./file0\x00', 0x0) mount$bind(&(0x7f0000000000)='./file0/../file0\x00', &(0x7f0000000340)='./file0/file0\x00', 0x0, 0x891018, 0x0) mount$bind(0x0, &(0x7f0000000140)='./file0/file0\x00', 0x0, 0x80000, 0x0) mount$bind(&(0x7f0000000100)='./file0\x00', &(0x7f0000000280)='./file0/../file0\x00', 0x0, 0x1adc51, 0x0) mount$bind(&(0x7f0000000400)='./file0/file1\x00', &(0x7f0000000240)='./file0/../file0\x00', 0x0, 0x2995043, 0x0) socket$rds(0x15, 0x5, 0x0) socket$inet6(0xa, 0x400000000001, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r3 = getpid() sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x110, r1, 0x803000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x2000000}, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x0, 0x4000040) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) 15m14.751375265s ago: executing program 1 (id=1218): ioprio_set$pid(0x1, 0x0, 0x0) r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) ioctl$sock_ifreq(r0, 0x8910, &(0x7f0000000000)={'vlan1\x00', @ifru_map={0x20000000000004}}) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) syz_open_dev$vim2m(&(0x7f0000000000), 0x5, 0x2) setsockopt$bt_hci_HCI_TIME_STAMP(r1, 0x0, 0x3, 0x0, 0x0) syz_init_net_socket$rose(0xb, 0x5, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000900)={0x7, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x1) sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x6) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) gettid() timer_create(0x7, 0x0, 0x0) r3 = syz_genetlink_get_family_id$ipvs(&(0x7f00000001c0), 0xffffffffffffffff) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IPVS_CMD_NEW_DAEMON(r4, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000000)=ANY=[@ANYBLOB='P\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="01000000000000000000090000003c000380140002007663616e30000000000000000000000014000600ff0500000000000000000000000000020800010001000000080003"], 0x50}}, 0x0) 15m14.071913815s ago: executing program 1 (id=1225): socket$packet(0x11, 0x3, 0x300) r0 = openat$tun(0xffffffffffffff9c, 0x0, 0x1c1341, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r1) socket$nl_generic(0x10, 0x3, 0x10) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) writev(r0, &(0x7f0000000100)=[{&(0x7f0000000000)="89e7ee2c7cdad9b4b47380c988ca", 0xe}, {&(0x7f0000000040)="ee1bc38a371c1633c91508fa4902a7c0", 0x10}], 0x2) 15m13.553172486s ago: executing program 33 (id=1225): socket$packet(0x11, 0x3, 0x300) r0 = openat$tun(0xffffffffffffff9c, 0x0, 0x1c1341, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r1) socket$nl_generic(0x10, 0x3, 0x10) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) writev(r0, &(0x7f0000000100)=[{&(0x7f0000000000)="89e7ee2c7cdad9b4b47380c988ca", 0xe}, {&(0x7f0000000040)="ee1bc38a371c1633c91508fa4902a7c0", 0x10}], 0x2) 14m36.596099179s ago: executing program 5 (id=1306): socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000940)={&(0x7f00000013c0)=ANY=[@ANYBLOB="640000001000030400000000000000000000fe0f", @ANYRES32=0x0, @ANYBLOB="e5fda988000000002800128009000100766c616e00000000180002800c0002001c0000001f000000060001000000000008000500", @ANYRES32=r0, @ANYBLOB='\b\x00\n\x00', @ANYRES32, @ANYBLOB="0a000100000070"], 0x64}, 0x1, 0x0, 0x0, 0x8811}, 0x0) 14m33.814116684s ago: executing program 5 (id=1313): r0 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r0}, &(0x7f0000bbdffc)) (async) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) (async) socket$inet6_sctp(0xa, 0x5, 0x84) (async) r1 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_add_memb(r1, 0x107, 0x1, &(0x7f0000000080)={0x0, 0x13, 0x6, @local}, 0x10) (async) r2 = syz_open_dev$vbi(&(0x7f0000000140), 0x0, 0x2) (async) io_uring_setup(0x2471, 0x0) prlimit64(r0, 0x1, &(0x7f0000000040)={0x800002005, 0x8e}, 0x0) (async) sched_setscheduler(0x0, 0x1, &(0x7f0000000100)=0x2) sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bce) (async) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) (async) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000002000)=""/102400, 0x19000) (async) r4 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000440)={0x6, 0x3, &(0x7f00000003c0)=ANY=[@ANYBLOB="1800000003000000000000000000000095"], &(0x7f00000001c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x4}, 0x94) (async) r5 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000080)={'syz_tun\x00', 0x0}) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000000c0)={r4, r6, 0x25, 0x0, @void}, 0x10) (async) syz_emit_ethernet(0x36, &(0x7f00000005c0)=ANY=[@ANYBLOB="aaaaaaaaaaaa0180c20000000800450000280000000000069078ac1414bbac1414aa00004e22", @ANYRES32=0x41424344, @ANYRES32=0x41424344, @ANYBLOB="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"], 0x0) (async) syz_extract_tcp_res(&(0x7f0000000400), 0x8, 0x10001) write$FUSE_NOTIFY_RESEND(0xffffffffffffffff, 0x0, 0x0) (async) socket(0x10, 0x3, 0x0) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8b14, &(0x7f0000000000)={'wlan1\x00', @random="0100008dffff"}) ioctl$VIDIOC_S_INPUT(r2, 0xc0045627, 0x0) ioctl$VIDIOC_SUBDEV_S_DV_TIMINGS(r2, 0xc0845657, &(0x7f0000000200)={0x0, @bt={0x408a5, 0x93, 0x1, 0x2, 0x100000d59f80, 0x19ef, 0x3de, 0x19ef, 0x3, 0x6, 0x27ff, 0x2800, 0x2, 0xbb6, 0x0, 0x8, {0x8, 0xffffffff}, 0xd0, 0x7}}) setsockopt$packet_add_memb(r1, 0x107, 0x1, 0x0, 0x0) (async) r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000400), 0xffffffffffffffff) sendmsg$TIPC_NL_KEY_SET(r7, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)=ANY=[@ANYBLOB="df12aa66", @ANYRES16=r8, @ANYBLOB="0100000000000000000003000000400001802c0004001400010002000000e000000100000000000000001400020002000000e000000100000000000000000d0001007564703a73797a3200000000"], 0x54}}, 0x0) (async) socket$nl_generic(0x10, 0x3, 0x10) 14m31.244140601s ago: executing program 5 (id=1318): r0 = syz_io_uring_setup(0x241d, &(0x7f0000000380)={0x0, 0x0, 0x13090}, &(0x7f0000000100)=0x0, &(0x7f0000000080)=0x0) syz_usb_connect(0x2, 0x36, &(0x7f0000000040)=ANY=[@ANYBLOB="1201100199b9a208fd0b0b011019010205010902240001830f80020904f20d0261134c0409050202951d02030e09050c"], 0x0) setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, &(0x7f0000000400)={0x1, &(0x7f0000000200)=[{0x30, 0x9}]}, 0x10) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) syz_io_uring_submit(r1, r2, &(0x7f0000000200)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0}) r3 = socket$inet_sctp(0x2, 0x1, 0x84) r4 = socket$inet6_sctp(0xa, 0x1, 0x84) shutdown(r4, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r6, &(0x7f0000001600)={0x0, 0x0, &(0x7f00000003c0)=[{&(0x7f0000000900)='T', 0x1}], 0x1}, 0x4048841) recvmsg(r5, &(0x7f0000000840)={0x0, 0x0, 0x0}, 0x10001) sendmsg$inet(r6, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000340)=[{&(0x7f0000000300)="0490", 0x2}], 0x1}, 0x20000811) recvmsg(r5, &(0x7f0000000200)={0x0, 0x0, 0x0}, 0x22100) close(0x3) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r4, 0x84, 0x6f, &(0x7f0000000200)={0x0, 0x10, &(0x7f00000001c0)=[@in={0x2, 0x4e23, @rand_addr=0x64010100}]}, &(0x7f0000000140)=0x10) getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r4, 0x84, 0x7a, &(0x7f0000000340)={r7, @in6={{0xa, 0x3, 0x4, @mcast1}}}, &(0x7f0000000040)=0x84) getsockopt$inet_sctp_SCTP_DELAYED_SACK(r3, 0x84, 0x10, &(0x7f0000000000)=@assoc_value={r8, 0x7ef5}, &(0x7f0000000100)=0x8) io_uring_enter(r0, 0x1, 0x0, 0x1, 0x0, 0x0) r9 = syz_open_dev$usbfs(&(0x7f0000000100), 0x76, 0x101301) ioctl$USBDEVFS_CONTROL(r9, 0xc0185500, &(0x7f0000000040)={0x80, 0x8, 0xd780, 0x3, 0x0, 0x5, 0x0}) 14m28.972161175s ago: executing program 5 (id=1324): bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[], 0x50) socket$nl_netfilter(0x10, 0x3, 0xc) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) prlimit64(0x0, 0xe, 0x0, 0x0) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) openat$sequencer(0xffffffffffffff9c, &(0x7f00000001c0), 0x80280, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0) mount$bind(&(0x7f0000000380)='./file0\x00', &(0x7f0000000300)='./file0\x00', 0x0, 0x2125099, 0x0) mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0) r1 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r1, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) mount$bind(&(0x7f0000000000)='./file0/../file0\x00', &(0x7f0000000340)='./file0/file0\x00', 0x0, 0x891018, 0x0) mount$bind(0x0, &(0x7f0000000140)='./file0/file0\x00', 0x0, 0x80000, 0x0) mount$bind(&(0x7f0000000100)='./file0\x00', &(0x7f0000000280)='./file0/../file0\x00', 0x0, 0x1adc51, 0x0) mount$bind(&(0x7f00000002c0)='./file0/file0\x00', &(0x7f0000000240)='./file0/../file0\x00', 0x0, 0x101091, 0x0) mount$bind(&(0x7f00000003c0)='./file0\x00', &(0x7f0000000440)='./file0/file0\x00', 0x0, 0x12f451, 0x0) mount$bind(&(0x7f00000000c0)='.\x00', &(0x7f0000000080)='./file0/file0/file0\x00', 0x0, 0x80700a, 0x0) 14m28.310167756s ago: executing program 5 (id=1327): openat$qrtrtun(0xffffffffffffff9c, &(0x7f0000000100), 0x8000) r0 = socket$qrtr(0x2a, 0x2, 0x0) connect$qrtr(r0, &(0x7f0000000040)={0x2a, 0xffffffffffffffff, 0xfffffffe}, 0xc) socketpair$unix(0x1, 0x5, 0x0, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={0x0}, 0x1, 0x0, 0x0, 0x800}, 0x40000) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) syz_emit_ethernet(0x153, &(0x7f0000000500)={@broadcast, @random="6487a2bed3d6", @void, {@ipv4={0x800, @igmp={{0x5, 0x4, 0x0, 0x9, 0x145, 0x0, 0x0, 0x0, 0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @multicast1}, {0x14, 0x0, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, "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"}}}}}, 0x0) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) socket(0x2c, 0x4, 0x0) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f00000003c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x0) r4 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r4, 0x3b81, &(0x7f00000000c0)={0xc, 0x0, 0x0}) ioctl$IOMMU_TEST_OP_MOCK_DOMAIN(r4, 0x3ba0, &(0x7f0000000100)={0x48, 0x2, r5, 0x0, 0x0, 0x0, 0x0}) ioctl$IOMMU_HWPT_ALLOC$NONE(r4, 0x3b89, &(0x7f0000000180)={0x28, 0x0, r6, r5, 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$IOMMU_IOAS_MAP$PAGES(r4, 0x3b85, &(0x7f0000000280)={0x28, 0x4, r5, 0x0, &(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x1}) ioctl$IOMMU_IOAS_MAP$PAGES(r4, 0x3b85, &(0x7f0000000000)={0x28, 0x4, r5, 0x0, &(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x8}) ioctl$IOMMU_DESTROY$hwpt(r4, 0x3b80, &(0x7f0000000340)={0x8, r7}) mount$9p_virtio(&(0x7f00000001c0), &(0x7f0000000480)='./file0\x00', &(0x7f00000004c0), 0x0, &(0x7f0000000c00)=ANY=[@ANYBLOB="56c78e3c733d76697274696f2c6e6f657874656e642c6163638173733d616e792c63616368653d667363616368652c76657273696f6e3d3970"]) 14m22.951785506s ago: executing program 5 (id=1339): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000002c0)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x3, 0x0, 0x0, {0x7, 0x0, 0x2}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWSETELEM={0x20, 0xb, 0xa, 0x201, 0x0, 0x0, {0x7}, [@NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14, 0x10, 0x1, 0x2000000, 0x0, {0x0, 0x84}}}, 0x68}}, 0x0) 14m21.440273689s ago: executing program 34 (id=1339): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000002c0)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x3, 0x0, 0x0, {0x7, 0x0, 0x2}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWSETELEM={0x20, 0xb, 0xa, 0x201, 0x0, 0x0, {0x7}, [@NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14, 0x10, 0x1, 0x2000000, 0x0, {0x0, 0x84}}}, 0x68}}, 0x0) 13m44.848043605s ago: executing program 2 (id=1445): r0 = socket$nl_generic(0x10, 0x3, 0x10) bind$vsock_stream(r0, &(0x7f0000000000)={0x10}, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f00000003c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_CHANNEL_SWITCH(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000400)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010008020000001800006600000008000300", @ANYRES32=r3, @ANYBLOB="08002600940900000800b7"], 0x2c}, 0x1, 0x0, 0x0, 0x4000000}, 0x0) 13m44.68171065s ago: executing program 2 (id=1447): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000a40)=ANY=[@ANYBLOB="140000001000010000000000000000000100240a20000000000a01040000000000000000010080030900010073797a30000000002c000000030a010100000000000000000100004a0900010073797a30000000000900030073797a320000000050000000060a010400000000000000000100000008000b400000000028000480240001800b0001007470726f7879000014000280080001400000000008000340000000000900010073797a30"], 0xc4}}, 0x0) 13m43.025676383s ago: executing program 2 (id=1450): mknod$loop(&(0x7f0000000140)='./file0\x00', 0xfff, 0x0) execve(&(0x7f00000000c0)='./file0\x00', 0x0, &(0x7f0000000500)={[&(0x7f0000000000)='.+-:\x00', &(0x7f0000000540)=' T\xfc\x81\x8e\x9f5\x0e \x043[B\xad\x13\x9f\xae\x8f\xbb\x9a\x0f\x9f\x13\xa5\xfc9\xbb\xa4.\xf4\xeb\x03\xf1\xb6\x8c\xc4E\x93\n&k\xec\xc8\\h\xd6\x1e\xcb\fA\\da/O\xdcn7\x1b@\xbf\xfb\x17J\xaaD\xe4\x01\xbc\xdc\n\x88\xfc\xcci\xc1\xe8\xf8\x1e6&\bE\x8f\x9b\xc6\x8d0\xa7 -\xecC8O*7\xfa&\xf9\aC\xab\x03g\x06\xda\x8c)\xae\xe3\x16\x9dz\x87\xd6OZX\xa4\xee\xa7\xebe\x14Qp\x96\x00\xd0VK\xe2$i\xd4\xcb-\xd4\x82w\x13\x98\xfcW\x9d\xff\xed\xd4\x14;]\xf8\xccS\xddl\x96v\x97\x988\xa7sQ\x1aN\xbdU.\x89\\\xfa\xc2\xcd\xde', &(0x7f0000000100)='security.']}) 13m42.80173304s ago: executing program 2 (id=1451): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x6, 0x89}, 0x0) sched_setscheduler(0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000000c0)=0xa) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$MSR(0x0, 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) r1 = openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) r2 = socket$pppoe(0x18, 0x1, 0x0) connect$pppoe(r2, 0x0, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) r3 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_RX_RING(r3, 0x11b, 0x2, &(0x7f0000000040)=0x20, 0x4) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r5 = fcntl$getown(r1, 0x9) syz_open_procfs(r5, &(0x7f00000001c0)='totmaps\x00') r6 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$PIO_CMAP(r6, 0x4b71, &(0x7f0000000000)={0x100000000, 0x100000001, 0x54379481, 0x9, 0x800, 0x1}) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$netlbl_cipso(&(0x7f0000000200), r4) sendmsg$NLBL_CIPSOV4_C_REMOVE(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000900)={0x1c, r7, 0x1, 0x70bd2a, 0x25dfdbfc, {}, [@NLBL_CIPSOV4_A_DOI={0x8, 0x1, 0xffffffffffffffff}]}, 0x1c}, 0x1, 0x0, 0x0, 0x20004004}, 0x8014) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$batadv(&(0x7f0000000400), 0xffffffffffffffff) syz_open_procfs(0xffffffffffffffff, &(0x7f0000000080)='attr/fscreate\x00') r8 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000340), 0x0, 0x0) r9 = ioctl$KVM_CREATE_VM(r8, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r9, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) r10 = ioctl$KVM_CREATE_VCPU(r9, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r10, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000005700)=[@text32={0x20, &(0x7f00000000c0)="260f799f050000000f35f3af66baf80cb87cdbde82ef66bafc0c66ed0f20d835080000000f22d8b805000000b9000000000f01d967660fdb19c7442400f0000000c744240252b30000c7442406000000000f011c24c744240000400000c744240200000000c7442406000000000f011c240f01c4", 0x74}], 0x1, 0x14, 0x0, 0x0) ioctl$KVM_SET_NESTED_STATE(r10, 0x4080aebf, &(0x7f0000003680)={{0x0, 0x0, 0x80}, "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", "cfb220c7d481332f3f1f8079dfe27e23185fd67a407358db7892789f96b7fa9b14daa48617a10d8a91b820ecbaa470ec0bb1f3cbce7f70ec70b19a4cad082229c2788f8611d7dc306d9a45761a97828c36ed87ebde5d4a3e1609c1422a8ae2f7cca428ebdb0dd38b90b9598a353b18a600bf35a369e6e3e5abb0a1c5c0c0e48e014e7ef1b7d768b3c5657f1adfbb7ff2985082b16c99eb83ec3660990dcf1106efa6b7f8a4798fec811c2c85faec0235c83b7093b3d02367421abc40a554e0b0d7fc1bcaece4222c594f8d20e368fe625ca433c75486fe5c94103cd17291349ee12b877602936688666f82ecd8f4f83d50bb1650e08b96cd25ad147c4c956c98649806a3736d072c8d97c6e3a46a7c18535df8d828b86662400d8e9cc861fa1dd5dc193892d3168396c499e07b279fb76c7e289f2fd955691363bc1de74536dc571817615c88b0d594a136966c129e424ccb7ef1c7c7461eac7ca5f03d72ea4c9c3d1156ee4cb1bb70e097357588b5c49f6716bbae1bd118104b42786f09a3b9f7cb80f383cadfd0c462096ff2bb637b7cf79764b6a4b7ffc5d87c1f063fb48e7f08ad5af534c70079f12f28e8921abbd4280801cdf6101ea494768b1274afd0eea5939843d56022a83590920fe446d52dfe699c33977d5592dbf7e0e236b8175d7faae06e0c50f7402174023ce4b996564e945c416fa823f2f9c3213ac50b20bd1fd55bb8d9fe70ee31ea2f404ae0fcbf857bebcc9196c8c622059fea2e248e4058905b69fb98be312d3193ea1d8ff653173e8c2371371b77a5bea45b3cd6fba19b6336f94ec04c8f86d24e9ca959874577d7ca0baf3c4ff30b554bc3ccc06df46d925373fbf7863e2cf684d3bc9603ab72b851ca4728294de87f2dec6f23ca9e43ed2e5cbba662d13137fc1ce0f6ae6aeb974f72f4b750825fafb67715e425f40c7da83b92d4249a0a4e96b789cceb7b07f38cb83f72dd093a345ab3cb8ae760fc14e40ea182a0d7fe1facc62a1ab0902349fd7e27bb0cd349fb5053f4734823abf020739b4b43bb11f5d69b61295068df31177959903c2ea1bb82d24eeaa93d0d4738d5d15b2a401e7ebe0d3cfbd45b2db2882cdb41408aaa718f8320fbb7f9da4f68d0eebeef175442e807e9908132731fe5e268582dcf6dffa4251ebb7121db8e412089fa9d8af9919799547a26b6b8eb44c28f1ce5f9a3021fe30841be204c1b4b3813dccae6baeef9b53fe413cbec46bb0cd95d3793cdc9bfe6cdd96ce0c4aa4a25e1cbbeeee6c9fa558b279048c7e31d07b125bac68d4e1f4253bd4dc7824cf3d722c94cf2b8f61bc8155731f072fd447082b181a13ffb8c08a1d568298c5de2d969fae2bea070a9e2688f294e76b8c200dfb993ec19778eb56ae3127c1116ccc85ef8806fdcb9ee0cb66ff03fbb0fa6c52b9b101b3830fc1650efa859163a264b4059092e5dc9a415ec09bfd1460f142fe5ef00beb6aa9032bd0de97aefc6f65e8cfeea761b3d8174caf528b6627682ff4d4450cb0f34251fc000ed01dd538ef13260984f44703b89dfb511bfb538d0b1c8aded964e1bcc5ca57437468b14a31ec0000a17e4d24369c40500449c37e7dccedba3eceb59d827dace246b5c48afb6a5988e64c560b3dc76c32d831f51cdbc5cfc4364ac8b25372b87c92bacfedc6bc8feb44098dbebc89cda03c59e4c58a31372bd574704b9e788834b9f83c6703f6709efad97c4ce499ea580dae1de282a019247cb3dce5c1906322e6d3ca5157ea6428bc42416936fac194efe136089c07faf7adf1e923003f1dc63fcbc634b389a4f351a6acee785e23c6bb04ca2f265be1e634362b87c6f9fd369bbe62a1db6b286c7ffde6370bb4d6e9e27c3ec451e1a99d134726c9075e71319d3a683e91e4b900061c0e6d086481069cd32f4cde7816f8e3a0ac6428a7488f31f06ee0da10df3ed0c150d29085879d064f914407f60018bb588735663647bfeda930407d69abef3f72fd461c2b85b00988b412a180fd267fc646a86d297e7e40912607157b6fa873df6442579b1523d8117f0c06c87adf75843b8bff30a5bfb4fe1e9846b7fdd58774641baf9cc9c4e38e53ed24a9d9e9dbc7657aa9b220a8545852b0409f5c0812e953823e841967bf55059acc7a4600818134359e72cfae0d04a0738ac8acca133d6395a455b22cdd6f901d4cdea1cf17415f7d7895a4b65f80d2f7c5c60a0dc04b40c9ae5ffc922e074a82afd704673e1766d19db9f60eab0238fb4a3169a08aded607847e5d752d4e24c4914b95bac3892bcfc2076f16a7f07583f0d418b9dec03afdb2e93335a392e1b1ef2910eb2a4b6a63fe61641f3c02bef73cd7e4a77a6f30ae821598c3160511603541bea89022b54f321c2a55cdeeb19335d78a821ab6ca0f36588a9a79a41e2123905a491d658c2a1caeee998c995bb0f816c92c5dc2b862183f80b9f9786c9c5524723c944d11f6894c7f008ab8194f577e22c03631d2a33205f508ea49653e7600639242dbaba704f700ac227f32dc575c559a0a1f4fe0cf6c22fbf7e1ca2ab4b1e4724e8379021e3c9a7c1509c6a413bd7d9c98938e440762eda2546d636597defa86c1ad31126a1182d365f858927d140fb0a97f80adcc5f4ed5efe11ac503453917a263f1d64692348d30f382e85e464ef7616067a42df5de1a1b622fabefe2ca4ceffa4801f7a02fdef40644cd1d079590d900727628d54b44db7ac700d8d664f7eea12837fcf347360d8e43a354fe51b4c49e8fcda3c322b738ed2b800b5cc06e22c72af2a67ee7bc8ae894e841f2cf2b0a7e381caf944bf4e91ded63b6f82f7474e4f81e986fff7e5339b8e9f60103a1af81833e120f0c88893ecabac044a4a2867cda4fdcb084459a00507aa9e5a8e761a72df3322a1ae8cd918b4994c23bdb1e459b4f21651bd7fa067a00e2a2877bf6b29f289ed8018e0a78f6fb4ded9749640e0e37f6381b320ab72da404f3d70d60152f6fa6738932387b83250cb3148141edb52f109bfd4bda8054959db01f4c550609a63c08cf01ecd110cfc6f0055638c0dde039d2ac2daafe59e561f9f08a8830c3f661e4325de63e98f4a4216ec3b83fd200201ed3f647147611424286ffc6c4a8aca64a6874743242d4feeaa9153de06e51c512d9cab7ae712c6424069f3e5db4ddebe9b48b5f6caa741162edf97674d2368e03a387f798151a4b9b9fa9e3a5838a343133158364a9fe3bb4b9a3c464c0c54a4c64ca774ad200925ac6bf59508c10a8574afde9b821741af43ec64cedc13aa220b39772195283506dfe899dd6a7b37eb21f154056a2df3564ef2bb918a928651de88c3613b84e7960bddd7b46b1304deb30f57b6fe5a3b4788629e91bcc2456a72fabb16b47da71624d2e9081de748b3387f52da4bb094782326dcfde0827e2d674e41bb375247d749cade9c704e5431785009b0e53f1b45c70b237c9432e07e4c7a8464ed11608a3d2184338dd9e6f6ef4b3d751e979667b6a3953c89aff4eead7a978071a912b3de21a85a5849c57933cf53cd74a610f3e60f699766fbc7e0bb8a891a429c77bb6f3b6f9f8eb0b1bd9588ef2ce98fdf0a0838e4b0bed807d8b673093c717feec8d697e32542274887d039db7a2daed5d52c8e9767443229f8003c5d67e907376ea2f393484fa70deee159cb56f8d097b8fe2736e95f540137e20725f0940a8d049068ead4c46bb3771a671bb00de88931e03445a55868de0c220db05cbda9f996d5fe7c1070efe5e718fed4d4cb4ecacad3d6b643bc0ffe9a71b720ba7b5adbbdefe29106ef6a6ffe4547f5d02bec312147df0abe80efb2d5e598fc7c8b268e58b59e0d75728e9a18126f013c963ddc92d251405f857fe3a5cbacf443be7772975b7bf4f6d7ed6f80dfcc47a88c6d19120942adb5385be6ef3c0d7e396bcac5affc8f9276d6cd1a0b069aed72a98cde8ea7aabe6cc091b19efcfaf9368dfeb3087a05a42e3b893dae5ffeb72e6ac06e995a2a75ea0b5f7876247bb4c38cf3f0153f1f7473b522f1c440b632270e2b1d654d3a5ae16cb788482760d34ca79c8951b29c628e21029715683a3e6f8f77c5d89ecdae37e0190f79c4c1dbc9d0160e359cd6c94d6662ed53bb01a83374ff593c823acc59241b11f020902069fc0054a9b26cb320bef4fb1f8cc5bd8ae76eb029afab731b9876bc4e8708a8315512823cff1f9375d284ce66e53d4efad6c76d17bb532fc938b8f80c13ce86b5ba3e540164bc5a5d47cd321c241d8740f453ef95bd3878d578561ad6ce20877ffbd44062dce8df1d048d8d5e4045be647886108cbb1f0b26a8b74b66858afedb830a161bb02bde4c46a688a0ea3a7018ce24666aab0f422ede2f78ea29f77e28d87c744cba0285ce33d0d9ac45774829699de6d725a9b6db6e7d03ad4ec9d075c386e68ca0bcd9e9911d741ed0168cbddb87a7918a964d206629da4e887277b0ef7d3f9c7082f3f15f29a0dfb39f3b0877a5ec3ac4343e0d808f5aee8f1869923aab6dfc3016821c013109f34aece6183994b853d0e9561375c02cdd26b1b55194757341929a8038864cedd6b5a3b8b51ade44637044c4ebddb190f173969a0ca4cf5d42153763a0b91da0110ae7a25204850927d81b00176d4568a3d444d8029bd010df784e3f673fe855601ec4f1b26b2df58841e6a65f0db66373f63cc14a8b07dfc52ac9957eb542d05ed687c79519609de96df18b63cb294b534ddf7d2e8f41bcc1e5a006191c4db057b6709f0a96f18e7e8f67b8be2a19c015b9c4b0b3f42e4de366b71f8da8888809473c3c7a02a1158e375f29997a43bc7118ca4d1abb8f8f21972fc589aaa3d73a4d40a1e1705e169ac6e56cff50d89fc45b6863c8fc67bb2b5939a7f33072539ba4c24077be5711ba368bf7efd4897931531d388eb5c2e56bef337777150dd59518652145c9594e110e41d2615196c6b197916c88cc2814e13a3a922b4ecb044bf31cc90e0bfe0ce07de29188bbcb0ec1a12b509f52582fbb948c3cbe0c6964f46991cec0704bfac08aec6ad8ddfc36dc68c7f547c5ee6af4a8d55c79e3dc1c49b045379811f81e9a185a92cd37ae4ee32c5d3c82d36d6202a6c84fd231fe467071d42072827fd77afa5d757e6f37247f783ef09bdfd7536b666e84bc4bb878005b7829293a04ba090272dec844f4ef0e934617c08518bdc6b915ac6f3f03e4a6ab88e21c3f21f93b31d95ea3b9228e0031cb69795de5abd19c4cb4a0cf2984e53ca391cc66e33ee0d510151670331fa264753704fea5e4b1760f74890c49a74a47e0da13155c5470013d53dea0f05b5e088f1511c209f5be940232318af2757951d399e32eb862d915784713baa8ba93645caf04ba78fa3cf600ff92b9c5be58ad87438a340bac00a5ea9fb17e39478ba61fe36335e48d8c5a0b25f024cbd2ec7f217d0f260951da396dc13a2a74cd90df4b52db686e3b34d27cfa4cebd7bf59cbcfaf4007dc943a1da6e0bd1799a21ab449d7bb42935e50c839c5b567c59742436af15bc8d46095520dcd9273ae2b6f3c1cc2b4311ac9e5d297f0940b1552c5955adb302022022bb7457978998b56328629b7725dfbe3dedb37f37af0697a4471d1d6ff6bec633a38540adeba903f3eaaec5785fbb3c6a598f49dbd9ff93c67dea1ef39a614331b119fa8efccc8bac01595fb95a2a57eec9fc6c6fe82782aa89ea971866fd9a3bca4010182092ab6d1e2b49b964be9e3bb13bd6b77850e435f55bdd46e5bcb3330c7edefd31c33f61275e516"}) ioctl$KVM_RUN(r10, 0xae80, 0x0) 13m40.849592203s ago: executing program 2 (id=1456): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000010140)=ANY=[@ANYBLOB="170000000000000004000000ff"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0}, 0x90) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000058"], 0x0}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x16, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='syzkaller\x00', 0x0, 0xd0, 0x0, 0x0, 0x0, '\x00', 0x0, @flow_dissector, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) 13m40.10855138s ago: executing program 2 (id=1459): r0 = socket(0x80000000000000a, 0x2, 0x0) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r0, 0x89f3, &(0x7f0000000180)={'sit0\x00', 0x0}) r1 = socket$netlink(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$devlink(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_RATE_NEW(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000000300)={0x34, r2, 0x1, 0x0, 0x25dfdbfb, {0x25}, [@handle=@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}]}, 0x34}, 0x1, 0x10000000, 0x0, 0x41}, 0x0) r3 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_IPV6_XFRM_POLICY(r3, 0x29, 0x23, &(0x7f00000004c0)={{{@in=@remote, @in6=@private0, 0x0, 0x0, 0x0, 0x0, 0xa}, {}, {}, 0x0, 0x0, 0x0, 0x0, 0x3}, {{@in6=@mcast2, 0x0, 0x2b}, 0x0, @in=@empty}}, 0xe8) 13m24.236251267s ago: executing program 35 (id=1459): r0 = socket(0x80000000000000a, 0x2, 0x0) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r0, 0x89f3, &(0x7f0000000180)={'sit0\x00', 0x0}) r1 = socket$netlink(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$devlink(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_RATE_NEW(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000000300)={0x34, r2, 0x1, 0x0, 0x25dfdbfb, {0x25}, [@handle=@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}]}, 0x34}, 0x1, 0x10000000, 0x0, 0x41}, 0x0) r3 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_IPV6_XFRM_POLICY(r3, 0x29, 0x23, &(0x7f00000004c0)={{{@in=@remote, @in6=@private0, 0x0, 0x0, 0x0, 0x0, 0xa}, {}, {}, 0x0, 0x0, 0x0, 0x0, 0x3}, {{@in6=@mcast2, 0x0, 0x2b}, 0x0, @in=@empty}}, 0xe8) 8.972027642s ago: executing program 6 (id=3863): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), 0xffffffffffffffff) sendmsg$NL80211_CMD_GET_REG(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)={0x14, r1, 0x1, 0x70bd28, 0x25dfdbfd}, 0x14}, 0x1, 0x0, 0x0, 0x45144}, 0x8000) 8.943881011s ago: executing program 6 (id=3864): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f00000000c0)={0xa, 0x4e22, 0x9, @ipv4={'\x00', '\xff\xff', @loopback}, 0x7}, 0x1c) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x4e22, 0x7, @ipv4={'\x00', '\xff\xff', @empty}, 0x106}, 0x1c) r1 = getpgrp(0x0) fcntl$setown(r0, 0x8, r1) ioctl$int_in(r0, 0x5452, &(0x7f0000000140)=0x7f) sendmsg$NL80211_CMD_GET_COALESCE(r0, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000040)=ANY=[], 0x14}}, 0x4044057) 8.007427365s ago: executing program 6 (id=3880): r0 = socket$kcm(0x10, 0x400000002, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)=@newqdisc={0x78, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r3, {0x0, 0xfff1}, {0xffff, 0xffff}, {0xffe0, 0xf}}, [@qdisc_kind_options=@q_sfq={{0x8}, {0x4c, 0x2, {{0x6, 0x3, 0xc06a2f6, 0x1, 0x7}, 0x6, 0x0, 0xa, 0x4, 0x6, 0x8, 0x18, 0x9, 0x3, 0x4, {0x0, 0x2, 0x9, 0x800, 0x8704, 0x27000000}}}}]}, 0x78}}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000280)=@newtfilter={0x74, 0x2c, 0xd2b, 0x800, 0x25dfdbfb, {0x0, 0x0, 0x0, r3, {0x9}, {}, {0x7, 0xb}}, [@filter_kind_options=@f_u32={{0x8}, {0x48, 0x2, [@TCA_U32_SEL={0x44, 0x5, {0xd, 0x1, 0x3, 0x1, 0x4, 0x401, 0xe, 0xfffffffa, [{0x200, 0x500, 0x3, 0xe}, {0x6783, 0x2, 0x8001, 0x10}, {0x40000, 0x53, 0xa9, 0x80000001}]}}]}}]}, 0x74}}, 0x20000000) r4 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000140)=@newtfilter={0x24, 0x2c, 0xd27, 0x30bd29, 0x21dfdbfc, {0x0, 0x0, 0x0, r5, {0x0, 0xf}, {}, {0x7}}}, 0x24}, 0x1, 0x0, 0x0, 0x24000014}, 0x200c4004) sendmsg$inet(r0, &(0x7f0000000100)={0x0, 0x2, &(0x7f0000000080)=[{&(0x7f0000000140)="600000002e000d190a762d7f089e", 0xfca2}, {&(0x7f0000000280)="68cabf2dfb58fc0a1d6b689866f05d490d010088a8ffff0200258f2e4409b8f9e6aaeb88bea123dc2c6726e89b1ae2f6e8bcb5ee52dcd7298d39093c510293bca0b646a3ce904f6e6b788b3204c233e60ddc", 0x52}], 0x2}, 0x0) 7.397920183s ago: executing program 6 (id=3889): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x3, 0x8, &(0x7f0000006680)=ANY=[], &(0x7f0000000100)='GPL\x00', 0x4, 0x0, 0x0, 0x0, 0x55, '\x00', 0x0, @fallback=0x33}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x3, 0x8, 0x0, &(0x7f00000006c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, r0, 0x0, 0x0, 0x0, 0x10, 0x7}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000080)={{0xffffffffffffffff, 0xffffffffffffffff}, 0x0, &(0x7f0000000040)}, 0x20) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000800)={0x28, 0xb, &(0x7f0000000540)=@raw=[@tail_call={{0x18, 0x2, 0x1, 0x0, 0x1}}, @generic={0x80, 0xe, 0xe, 0xfffb, 0xa}, @kfunc={0x85, 0x0, 0x2, 0x0, 0x3}, @map_idx_val={0x18, 0x4, 0x6, 0x0, 0x5, 0x0, 0x0, 0x0, 0x81}, @map_idx_val={0x18, 0x4, 0x6, 0x0, 0x7, 0x0, 0x0, 0x0, 0x8}], &(0x7f0000000300)='syzkaller\x00', 0x45, 0x6c, &(0x7f0000000600)=""/108, 0x41100, 0x20, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000700)={0xa, 0x5}, 0x8, 0x10, &(0x7f0000000740)={0x3, 0x0, 0x8f, 0x5}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000000780)=[r1, r1, r1, r1], &(0x7f00000007c0), 0x10, 0x4}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000008c0)={&(0x7f00000002c0)='jbd2_write_superblock\x00', r2, 0x0, 0x8}, 0x18) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000340)={0xffffffffffffffff, &(0x7f0000000140), 0x0}, 0x20) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = socket$alg(0x26, 0x5, 0x0) bind$alg(r4, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-camellia-asm\x00'}, 0x58) setsockopt$ALG_SET_KEY(r4, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r5 = accept4(r4, 0x0, 0x0, 0x800) sendmmsg$alg(r5, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048"}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r5, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$NL80211_CMD_FRAME(r3, &(0x7f0000001380)={0x0, 0x0, &(0x7f0000001340)={&(0x7f0000000680)=ANY=[@ANYBLOB="f4060000", @ANYRES16=r6, @ANYBLOB="01000000000000e14f003b00000008000300", @ANYRES32, @ANYBLOB="d506330080000000ffffffffffff080211000001"], 0x6f4}}, 0x0) 7.35065448s ago: executing program 3 (id=3891): r0 = syz_usb_connect$cdc_ecm(0x0, 0x56, &(0x7f0000000240)=ANY=[@ANYBLOB="12010000090000102505a1a4400000000101090244000101000000090400001202060000052406000005240000000d240f010000000000000000000905810340000000000905820260000000000905030208"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000240)={'veth0_macvtap\x00'}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000840)=ANY=[@ANYBLOB="300000001d000100000000000000000007000000", @ANYRES32, @ANYBLOB="000096f8090002"], 0x30}}, 0x0) syz_usb_control_io(r0, 0x0, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000500), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_DEBUG_SET(r1, &(0x7f0000001540)={0x0, 0x0, &(0x7f0000001500)={&(0x7f0000000000)=ANY=[@ANYBLOB='D\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="0100000000000000000008000000180001801400020073797a5f74756e00000000000000000018000280080002001100000004000100080004"], 0x44}, 0x1, 0x0, 0x0, 0x10}, 0x8090) 7.125912457s ago: executing program 6 (id=3895): syz_emit_ethernet(0x15d, &(0x7f0000000500)=ANY=[], 0x0) setsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, 0x0, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000e00)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000180)=ANY=[@ANYBLOB="640000001800000825bd7000ffdbdf251c801401fd04fe0a000000000500", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="0c4a000000001d000071b600", @ANYRES32=0x0, @ANYBLOB], 0x64}, 0x1, 0x0, 0x0, 0x20000080}, 0x800) r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000280), 0x2982, 0x0) ioctl$TCSETSF2(r0, 0x402c542d, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x0, &(0x7f0000000340), &(0x7f0000001dc0)='syzkaller\x00', 0xc, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000280)={&(0x7f0000000100)='kmem_cache_free\x00', r1}, 0x18) r2 = socket$inet(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r2, 0x6, 0x10000000013, &(0x7f0000d06000)=0x1, 0x4) setsockopt$inet_opts(r2, 0x0, 0x4, &(0x7f0000000000), 0x0) setsockopt$inet_opts(r2, 0x0, 0x1, &(0x7f0000000980), 0x0) bind$packet(0xffffffffffffffff, &(0x7f0000000140)={0x27, 0x10, 0x0, 0x1, 0x0, 0x6, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x3a}}, 0x14) r3 = socket$alg(0x26, 0x5, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x102}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x7) r4 = getpid() sched_setscheduler(r4, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r5, &(0x7f000057eff8)=@abs={0x0, 0x0, 0xfffffffe}, 0x6e) sendmmsg$unix(r6, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r5, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) bind$alg(r3, &(0x7f0000000080)={0x26, 'hash\x00', 0x0, 0x0, 'crc32c-generic\x00'}, 0x58) recvmmsg$unix(0xffffffffffffffff, &(0x7f0000003700)=[{{0x0, 0x700, 0x0, 0x0, 0x0, 0x500}}], 0x600, 0x0, 0x0) 6.06108213s ago: executing program 6 (id=3897): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYBLOB], 0x14}}, 0x84) 4.741669484s ago: executing program 3 (id=3907): syz_emit_ethernet(0x15d, &(0x7f0000000500)=ANY=[], 0x0) setsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, 0x0, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000e00)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000180)=ANY=[@ANYBLOB="640000001800000825bd7000ffdbdf251c801401fd04fe0a000000000500", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="0c4a000000001d000071b600", @ANYRES32=0x0, @ANYBLOB], 0x64}, 0x1, 0x0, 0x0, 0x20000080}, 0x800) r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000280), 0x2982, 0x0) ioctl$TCSETSF2(r0, 0x402c542d, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x0, &(0x7f0000000340), &(0x7f0000001dc0)='syzkaller\x00', 0xc, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000280)={&(0x7f0000000100)='kmem_cache_free\x00', r1}, 0x18) r2 = socket$inet(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r2, 0x6, 0x10000000013, &(0x7f0000d06000)=0x1, 0x4) setsockopt$inet_opts(r2, 0x0, 0x4, &(0x7f0000000000), 0x0) setsockopt$inet_opts(r2, 0x0, 0x1, &(0x7f0000000980), 0x0) bind$packet(0xffffffffffffffff, &(0x7f0000000140)={0x27, 0x10, 0x0, 0x1, 0x0, 0x6, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x3a}}, 0x14) r3 = socket$alg(0x26, 0x5, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x102}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x7) r4 = getpid() sched_setscheduler(r4, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r5, &(0x7f000057eff8)=@abs={0x0, 0x0, 0xfffffffe}, 0x6e) sendmmsg$unix(r6, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r5, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) bind$alg(r3, &(0x7f0000000080)={0x26, 'hash\x00', 0x0, 0x0, 'crc32c-generic\x00'}, 0x58) recvmmsg$unix(0xffffffffffffffff, &(0x7f0000003700)=[{{0x0, 0x700, 0x0, 0x0, 0x0, 0x500}}], 0x600, 0x0, 0x0) 3.451565904s ago: executing program 3 (id=3914): sendmsg$SEG6_CMD_SETHMAC(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4008000}, 0x10) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000400)=[{&(0x7f0000000200)="da467702e2520108dcebc5560e4f93142974b51221138c2cdf5b4d5781", 0x1d}], 0x1, 0x0, 0x0, 0x4000}, 0x0) connect$can_bcm(0xffffffffffffffff, &(0x7f00000005c0), 0x10) sendmsg$can_bcm(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000240)=ANY=[@ANYBLOB="050000007f"], 0x48}}, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-camellia-asm\x00'}, 0x58) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r2 = accept4(r1, 0x0, 0x0, 0x800) sendmmsg$alg(r2, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048"}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r2, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000013c0)={'wlan1\x00', 0x0}) syz_usb_control_io(0xffffffffffffffff, &(0x7f0000000600)={0x2c, &(0x7f00000006c0)={0x20, 0x0, 0xba, {0xba, 0x8, "48c3024f5e5555be6758d6c9eebeed8b9e1616b2ea6a8c2eac1722da766a97ef907a39ac79296d04615526fdbd675eff0cc292b8dd23b74dc838ec487d9be664f53813043c5c6632f20d661840d6e70a500c078292d90825c20f1f494f4b95480b7cd5524624bff725f3189d1a6895830f4a24d71927e558447cbc153393f30063b32095d20d97ab503f07878e88d3a422d390773ab9c28c3cc2717f8b5c263e45f6fe9f5b9079aec39fd8399e6ec0d66e8151241e71edec"}}, &(0x7f0000000800)={0x0, 0x3, 0x69, @string={0x69, 0x3, "0ffeb1ef89db84d5f1581570f3bb30ef95f5fb3c39800b956aec6910cf4d0cdbe394a471ccfcf3113329490f65d8c778e12abccbbeac43426fe30eba53a298cfbc71bf60c47ad247681106c0158bc3909c4a3fcfb1f769ba382c888a2d627e65fdfd718b3cd514"}}, &(0x7f0000000900)={0x0, 0xf, 0x3f, {0x5, 0xf, 0x3f, 0x1, [@generic={0x3a, 0x10, 0x0, "a02672632e96ca9a71f677bb2d4881fca8bd68a7b685a09a88ebcaac71fadda6b04d5f3734c0e3335d4dda2688cc2c0ccae31837d03abf"}]}}, 0x0, 0x0}, &(0x7f0000000e40)={0x84, &(0x7f00000009c0)={0x20, 0x17, 0x48, "ff4658d0a0793b4ee5d2ee60f288af2fb7ffc56f45b2b5339ceb2febafa6555deb8da2ab157aac7d5a84866779463a46971c8ab86af456dee0cc8308aec81906128e80e87794f4b4"}, 0x0, &(0x7f0000000ac0)={0x0, 0x8, 0x1}, &(0x7f0000000b00)={0x20, 0x0, 0x4, {0x2, 0x2}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000001380)={0x0, 0x0, &(0x7f0000001340)={&(0x7f0000000680)=ANY=[@ANYBLOB="f4060000", @ANYRES16=r3, @ANYBLOB="01000000000000e14f003b00000008000300", @ANYRES32=r4, @ANYBLOB="d506330080000000ffffffffffff080211000001"], 0x6f4}}, 0x0) 2.996021098s ago: executing program 4 (id=3917): mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x2, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000002140)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x4000}}) read$FUSE(r0, &(0x7f00000021c0)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r0, &(0x7f0000004200)={0x50, 0x0, r1}, 0x50) r2 = openat$dir(0xffffffffffffff9c, &(0x7f0000004280)='./file0\x00', 0x0, 0x0) syz_fuse_handle_req(r0, &(0x7f00000042c0), 0x2000, &(0x7f00000062c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000006380)={0x20, 0x0, 0x0, {0x0, 0x8}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) getdents64(r2, 0x0, 0x0) syz_fuse_handle_req(r0, &(0x7f00000067c0), 0x2000, &(0x7f00000087c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000008880)=ANY=[@ANYBLOB="30000000000000000000000000000000000000000400000000000000232c2c2d08"], 0x0, 0x0, 0x0, 0x0}) 2.925710825s ago: executing program 8 (id=3918): newfstatat(0xffffffffffffff9c, &(0x7f00000000c0)='.\x00', &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x0}, 0x6000) setresuid(r0, r0, r0) semop(0x0, &(0x7f0000000040)=[{0x0, 0x7fff, 0x1800}], 0x1) 2.771877933s ago: executing program 8 (id=3920): mknodat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0, 0x0) pipe2$9p(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r1, &(0x7f0000000300)=ANY=[@ANYBLOB="1500000065ffff017f000e0800395032303030"], 0x15) r2 = dup(r1) write$FUSE_BMAP(r2, &(0x7f0000000000)={0x18}, 0x18) write$FUSE_DIRENTPLUS(r2, &(0x7f00000003c0)=ANY=[@ANYBLOB="b0"], 0xb0) write$FUSE_GETXATTR(r2, &(0x7f00000004c0)={0x18}, 0x18) write$FUSE_INIT(r2, &(0x7f0000000200)={0x50, 0x0, 0x0, {0x7, 0x29, 0x20200}}, 0x50) mount$9p_fd(0x0, &(0x7f00000002c0)='./file0\x00', &(0x7f0000000080), 0x0, &(0x7f0000000400)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r2}, 0x2c, {[{@cache_fscache}]}}) openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x20842, 0x0) 2.739908863s ago: executing program 4 (id=3921): r0 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$IOCTL_GET_NCIDEV_IDX(r0, 0x0, &(0x7f00000000c0)=0x0) sendmsg$NFC_CMD_DEV_UP(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000740)=ANY=[@ANYBLOB="1c000000", @ANYRES16, @ANYBLOB="010026bd70003c0200000200000008000100", @ANYRES32=r2], 0x1c}}, 0x0) write$nci(r0, &(0x7f0000001800)=ANY=[@ANYBLOB="7240082b0102020681055a03997713fa06070202267a"], 0x16) close(r0) 2.684117571s ago: executing program 3 (id=3922): r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0xa2f01, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) r1 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$tun(r0, &(0x7f0000000200)={@val={0xa}, @void, @eth={@multicast, @remote, @void, {@ipv6={0x86dd, @udp={0xd, 0x6, '\x00 \x00', 0x18, 0x11, 0xff, @empty, @mcast2, {[], {0x4f19, 0x4e20, 0x18, 0x0, @wg=@data={0x4, 0xb, 0x10000}}}}}}}}, 0x52) 2.514988958s ago: executing program 8 (id=3923): syz_emit_ethernet(0x15d, &(0x7f0000000500)=ANY=[], 0x0) setsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, 0x0, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000e00)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000180)=ANY=[@ANYBLOB="640000001800000825bd7000ffdbdf251c801401fd04fe0a000000000500", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="0c4a000000001d000071b600", @ANYRES32=0x0, @ANYBLOB], 0x64}, 0x1, 0x0, 0x0, 0x20000080}, 0x800) r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000280), 0x2982, 0x0) ioctl$TCSETSF2(r0, 0x402c542d, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x0, &(0x7f0000000340), &(0x7f0000001dc0)='syzkaller\x00', 0xc, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000280)={&(0x7f0000000100)='kmem_cache_free\x00', r1}, 0x18) r2 = socket$inet(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r2, 0x6, 0x10000000013, &(0x7f0000d06000)=0x1, 0x4) setsockopt$inet_opts(r2, 0x0, 0x4, &(0x7f0000000000), 0x0) setsockopt$inet_opts(r2, 0x0, 0x1, &(0x7f0000000980), 0x0) bind$packet(0xffffffffffffffff, &(0x7f0000000140)={0x27, 0x10, 0x0, 0x1, 0x0, 0x6, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x3a}}, 0x14) r3 = socket$alg(0x26, 0x5, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x102}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x7) r4 = getpid() sched_setscheduler(r4, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r5, &(0x7f000057eff8)=@abs={0x0, 0x0, 0xfffffffe}, 0x6e) sendmmsg$unix(r6, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r5, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) bind$alg(r3, &(0x7f0000000080)={0x26, 'hash\x00', 0x0, 0x0, 'crc32c-generic\x00'}, 0x58) recvmmsg$unix(0xffffffffffffffff, &(0x7f0000003700)=[{{0x0, 0x700, 0x0, 0x0, 0x0, 0x500}}], 0x600, 0x0, 0x0) 2.43380524s ago: executing program 4 (id=3925): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000200)={0x0, 0x0, 0xf000, 0x2000, &(0x7f0000f9a000/0x2000)=nil}) keyctl$KEYCTL_PKEY_ENCRYPT(0x19, 0x0, &(0x7f0000000100)={'enc=', 'raw', ' hash=', {'crc32\x00'}}, 0x0, 0x0) r3 = dup(r2) syz_emit_ethernet(0x42, &(0x7f00000000c0)=ANY=[], 0x0) ioctl$KVM_SET_VCPU_EVENTS(r2, 0x4400ae8f, &(0x7f0000000000)=@arm64={0x8, 0x2, 0x2, '\x00', 0x2}) ioctl$KVM_SET_VAPIC_ADDR(r3, 0x4008ae93, &(0x7f00000002c0)=0x10000) ioctl$KVM_RUN(r2, 0xae80, 0x0) 1.952340718s ago: executing program 4 (id=3928): r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000003c0), 0x1c1341, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2}) r1 = socket(0x400000000010, 0x3, 0x0) socket$unix(0x1, 0x5, 0x0) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)=@newqdisc={0x44, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, 0x0, {0x0, 0xffff}, {0xffff, 0xffff}, {0x0, 0xf}}, [@qdisc_kind_options=@q_hfsc={{0x9}, {0x14, 0x2, @TCA_HFSC_FSC={0x10, 0x2, {0xa30e, 0x1, 0xfffffffa}}}}]}, 0x44}}, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000400)=@newqdisc={0x24, 0x28, 0x4ee4e6a52ff56541, 0x70bd2a, 0xfffffdfc, {0x0, 0x0, 0x0, r4, {0xffff}, {0xffff, 0xffff}, {0x2, 0xb}}}, 0x24}, 0x1, 0x0, 0x0, 0x4040000}, 0x4000080) 1.185096655s ago: executing program 8 (id=3929): mount(0x0, 0x0, 0x0, 0x0, &(0x7f0000000300)='usrquota') sendmsg$SEG6_CMD_SETHMAC(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4008000}, 0x10) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000400)=[{&(0x7f0000000200)="da467702e2520108dcebc5560e4f93142974b51221138c2cdf5b4d5781b800c423ace69c1eba8d0c505baa2acdddff4bc6e17bd735b3576550a4b33160cad82f3df56db53fbf5fbad6125c8b79", 0x4d}], 0x1, 0x0, 0x0, 0x4000}, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-camellia-asm\x00'}, 0x58) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r2 = accept4(r1, 0x0, 0x0, 0x800) sendmmsg$alg(r2, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048"}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r2, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000013c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000001380)={0x0, 0x0, &(0x7f0000001340)={&(0x7f0000000680)=ANY=[@ANYBLOB="f4060000", @ANYRES16=r3, @ANYBLOB="01000000000000e14f003b00000008000300", @ANYRES32=r4, @ANYBLOB="d506330080000000ffffffffffff080211000001"], 0x6f4}}, 0x0) 1.057127361s ago: executing program 3 (id=3930): add_key$fscrypt_v1(0x0, &(0x7f0000000000)={'fscrypt:', @desc1}, 0x0, 0x0, 0x0) ioctl$KVM_SET_MSRS(0xffffffffffffffff, 0xc008ae88, &(0x7f0000000000)=ANY=[@ANYBLOB="01090000000000000f478e"]) r0 = openat$kvm(0xffffff9c, &(0x7f0000000100), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000200)={0x0, 0x18}, 0x1, 0x0, 0x0, 0x8001}, 0x4000) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, 0x0) r3 = syz_usb_connect$hid(0x0, 0x36, 0x0, 0x0) syz_usb_control_io$hid(r3, &(0x7f00000001c0)={0x24, &(0x7f0000000dc0)=ANY=[], 0x0, 0x0, 0x0}, 0x0) syz_usb_control_io$hid(r3, 0x0, &(0x7f0000000080)={0x2c, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r3, 0x0, 0x0) syz_usb_control_io(r3, 0x0, 0x0) syz_usb_control_io(r3, 0x0, &(0x7f0000000900)={0x84, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r3, 0x0, 0x0) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000200)={[0x2, 0x9, 0xfffffffffffffffd, 0x0, 0x10000, 0xb0, 0x4002004c4, 0x1000, 0x0, 0x0, 0x0, 0x5, 0x0, 0x9, 0x0, 0x7], 0xf000, 0x2113c0}) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$USBDEVFS_CLAIMINTERFACE(0xffffffffffffffff, 0x8004550f, 0x0) setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, &(0x7f0000000140)={0x0, &(0x7f0000000280)}, 0x10) sendmmsg$inet(0xffffffffffffffff, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 1.056250448s ago: executing program 7 (id=3931): connect(0xffffffffffffffff, 0x0, 0x0) syz_emit_vhci(&(0x7f0000000000)=@HCI_EVENT_PKT={0x4, @hci_ev_remote_ext_features={{0x23, 0xd}, {0x3, 0xc8, 0x10, 0x6, "1b77b9b3158cf6d6"}}}, 0x10) 839.608289ms ago: executing program 7 (id=3932): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000200), r0) sendmsg$IEEE802154_LLSEC_ADD_DEVKEY(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000001200)={&(0x7f00000004c0)={0x14, r1, 0x607}, 0x14}}, 0x0) 784.031239ms ago: executing program 8 (id=3933): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x3, 0x8, &(0x7f0000006680)=ANY=[], &(0x7f0000000100)='GPL\x00', 0x4, 0x0, 0x0, 0x0, 0x55, '\x00', 0x0, @fallback=0x33}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x3, 0x8, 0x0, &(0x7f00000006c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, r0, 0x0, 0x0, 0x0, 0x10, 0x7}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000080)={{0xffffffffffffffff, 0xffffffffffffffff}, 0x0, &(0x7f0000000040)}, 0x20) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000800)={0x28, 0xb, &(0x7f0000000540)=@raw=[@tail_call={{0x18, 0x2, 0x1, 0x0, 0x1}}, @generic={0x80, 0xe, 0xe, 0xfffb, 0xa}, @kfunc={0x85, 0x0, 0x2, 0x0, 0x3}, @map_idx_val={0x18, 0x4, 0x6, 0x0, 0x5, 0x0, 0x0, 0x0, 0x81}, @map_idx_val={0x18, 0x4, 0x6, 0x0, 0x7, 0x0, 0x0, 0x0, 0x8}], &(0x7f0000000300)='syzkaller\x00', 0x45, 0x6c, &(0x7f0000000600)=""/108, 0x41100, 0x20, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000700)={0xa, 0x5}, 0x8, 0x10, &(0x7f0000000740)={0x3, 0x0, 0x8f, 0x5}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000000780)=[r1, r1, r1, r1], &(0x7f00000007c0), 0x10, 0x4}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000008c0)={&(0x7f00000002c0)='jbd2_write_superblock\x00', r2, 0x0, 0x8}, 0x18) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000340)={0xffffffffffffffff, &(0x7f0000000140), 0x0}, 0x20) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = socket$alg(0x26, 0x5, 0x0) bind$alg(r4, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-camellia-asm\x00'}, 0x58) setsockopt$ALG_SET_KEY(r4, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r5 = accept4(r4, 0x0, 0x0, 0x800) sendmmsg$alg(r5, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048"}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r5, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f00000013c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r3, &(0x7f0000001380)={0x0, 0x0, &(0x7f0000001340)={&(0x7f0000000680)=ANY=[@ANYBLOB="f4060000", @ANYRES16, @ANYBLOB="01000000000000e14f003b00000008000300", @ANYRES32=r6, @ANYBLOB="d506330080000000ffffffffffff080211000001"], 0x6f4}}, 0x0) 752.028863ms ago: executing program 7 (id=3934): r0 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$IOCTL_GET_NCIDEV_IDX(r0, 0x0, &(0x7f00000000c0)=0x0) sendmsg$NFC_CMD_DEV_UP(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000740)=ANY=[@ANYBLOB="1c000000", @ANYRES16, @ANYBLOB="010026bd70003c0200000200000008000100", @ANYRES32=r2], 0x1c}}, 0x0) write$nci(r0, &(0x7f0000001800)=ANY=[@ANYBLOB="7240082b0102020681055a03997713fa06070202267a"], 0x16) close(r0) 687.663305ms ago: executing program 8 (id=3935): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f00000000c0)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40, 0x54c, 0x24b, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x4f8}}}}]}}]}}, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(0xffffffffffffffff, &(0x7f00000001c0)={0x2c, &(0x7f0000000040)=ANY=[@ANYBLOB="000706000000ff0309"], 0x0, 0x0, 0x0, 0x0}, 0x0) syz_usb_control_io$hid(r0, &(0x7f0000000340)={0x24, 0x0, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="00220508"], 0x0}, 0x0) 643.919408ms ago: executing program 4 (id=3936): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000740)=ANY=[@ANYBLOB="4000000009060100a8cdb40000080000000000000900020073797a31000000000500010007000000180007800c00018008000140fffffffe050003000800"], 0x40}, 0x1, 0x0, 0x0, 0x10000047}, 0x4000084) 453.824976ms ago: executing program 7 (id=3937): r0 = syz_open_procfs(0x0, &(0x7f00000001c0)='mounts\x00') read$FUSE(r0, &(0x7f0000000200)={0x2020}, 0x2020) 399.785385ms ago: executing program 4 (id=3938): syz_emit_ethernet(0x15d, &(0x7f0000000500)=ANY=[], 0x0) setsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, 0x0, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000e00)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000180)=ANY=[@ANYBLOB="640000001800000825bd7000ffdbdf251c801401fd04fe0a000000000500", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="0c4a000000001d000071b600", @ANYRES32=0x0, @ANYBLOB], 0x64}, 0x1, 0x0, 0x0, 0x20000080}, 0x800) r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000280), 0x2982, 0x0) ioctl$TCSETSF2(r0, 0x402c542d, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x0, &(0x7f0000000340), &(0x7f0000001dc0)='syzkaller\x00', 0xc, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000280)={&(0x7f0000000100)='kmem_cache_free\x00', r1}, 0x18) r2 = socket$inet(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r2, 0x6, 0x10000000013, &(0x7f0000d06000)=0x1, 0x4) setsockopt$inet_opts(r2, 0x0, 0x4, &(0x7f0000000000), 0x0) setsockopt$inet_opts(r2, 0x0, 0x1, &(0x7f0000000980), 0x0) bind$packet(0xffffffffffffffff, &(0x7f0000000140)={0x27, 0x10, 0x0, 0x1, 0x0, 0x6, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x3a}}, 0x14) r3 = socket$alg(0x26, 0x5, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x102}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x7) r4 = getpid() sched_setscheduler(r4, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r5, &(0x7f000057eff8)=@abs={0x0, 0x0, 0xfffffffe}, 0x6e) sendmmsg$unix(r6, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r5, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r7 = accept4(r3, 0x0, 0x0, 0x0) recvmmsg$unix(r7, &(0x7f0000003700)=[{{0x0, 0x700, 0x0, 0x0, 0x0, 0x500}}], 0x600, 0x0, 0x0) 375.641847ms ago: executing program 7 (id=3939): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x76dc) connect$inet6(r0, &(0x7f0000000080), 0x1c) r1 = fcntl$dupfd(r0, 0x0, r0) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f0000000000)=0x2, 0x4) sendmsg$IPVS_CMD_GET_CONFIG(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000180)=ANY=[], 0x14}}, 0x4000) sendmsg$WG_CMD_GET_DEVICE(r1, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000002e80)={&(0x7f0000002fc0)=ANY=[], 0x2b08}}, 0x6) recvmmsg(r0, &(0x7f0000001040)=[{{0x0, 0x0, 0x0}, 0x4}], 0x1, 0x40000002, 0x0) 253.743199ms ago: executing program 7 (id=3940): futex(&(0x7f000000cffc), 0x80000000000b, 0x0, 0x0, &(0x7f0000048000)=0x2000000, 0x0) futex(&(0x7f000000cffc)=0x2, 0x3, 0x1, 0x0, &(0x7f0000048000)=0x1, 0x0) mount(&(0x7f0000000100)=@filename='./file0\x00', &(0x7f0000000080)='\x00', &(0x7f0000000000)='affs\x00', 0x170012, 0x0) ioctl$EVIOCSFF(0xffffffffffffffff, 0x40304580, &(0x7f0000000300)={0x57, 0x0, 0x8, {0x0, 0x1}, {0x74, 0x2}, @rumble={0x1, 0x8}}) r0 = syz_open_dev$evdev(&(0x7f00000000c0), 0x0, 0x822b01) ioctl$EVIOCSMASK(r0, 0x40104593, &(0x7f00000001c0)={0x1, 0x10, &(0x7f00000024c0)="739c17c2c2cc029eecad068741dfda99"}) write$char_usb(r0, &(0x7f0000000040)="e2", 0xff0f) setxattr$trusted_overlay_origin(&(0x7f0000000040)='./file0\x00', &(0x7f00000000c0), &(0x7f0000000140), 0x2, 0x0) 0s ago: executing program 3 (id=3941): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000440), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x2) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1000003, 0x13, r2, 0x0) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r4, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r5, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r5, 0xae80, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3000003, 0x22052, 0xffffffffffffffff, 0xa4717000) kernel console output (not intermixed with test programs): ndpoint 0x81 has invalid wMaxPacketSize 0 [ 1110.427515][ T10] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 1111.171055][ T10] usb 5-1: New USB device found, idVendor=0458, idProduct=5011, bcdDevice= 0.00 [ 1111.194441][ T10] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1111.344038][ T10] usb 5-1: config 0 descriptor?? [ 1111.858408][T15917] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1114.325938][ T10] usbhid 5-1:0.0: can't add hid device: -71 [ 1114.332528][ T10] usbhid 5-1:0.0: probe with driver usbhid failed with error -71 [ 1114.561929][T15920] binder_alloc: 15918: binder_alloc_buf size 12280 failed, no address space [ 1114.570916][T15920] binder_alloc: allocated: 8 (num: 1 largest: 8), free: 8184 (num: 1 largest: 8184) [ 1114.948045][ T10] usb 5-1: USB disconnect, device number 27 [ 1115.370278][T15931] overlayfs: failed to resolve './file0': -2 [ 1115.557604][T11224] usb 5-1: new high-speed USB device number 28 using dummy_hcd [ 1115.817749][T11224] usb 5-1: Using ep0 maxpacket: 8 [ 1115.896666][T11224] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1115.962901][T11224] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 1115.987715][T11224] usb 5-1: config 1 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 1116.063832][T11224] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 1116.087102][ T1301] ieee802154 phy0 wpan0: encryption failed: -22 [ 1116.095633][ T1301] ieee802154 phy1 wpan1: encryption failed: -22 [ 1116.225729][T11224] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 1116.293036][T11224] usb 5-1: New USB device found, idVendor=0225, idProduct=0000, bcdDevice= 0.00 [ 1116.333480][T11224] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1116.414344][T15930] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 1116.457866][T11224] hub 5-1:1.0: bad descriptor, ignoring hub [ 1116.487848][T11224] hub 5-1:1.0: probe with driver hub failed with error -5 [ 1116.518088][T11224] cdc_wdm 5-1:1.0: skipping garbage [ 1116.552552][T11224] cdc_wdm 5-1:1.0: skipping garbage [ 1116.623709][T15945] block device autoloading is deprecated and will be removed. [ 1116.633329][T11224] cdc_wdm 5-1:1.0: cdc-wdm0: USB WDM device [ 1116.872827][T11224] cdc_wdm 5-1:1.0: Unknown control protocol [ 1118.216829][T15960] binder: BINDER_SET_CONTEXT_MGR already set [ 1118.223379][T15960] binder: 15958:15960 ioctl 4018620d 200000000040 returned -16 [ 1119.237804][T12595] usb 5-1: USB disconnect, device number 28 [ 1120.127549][T15967] workqueue: Failed to create a rescuer kthread for wq "xfs-blockgc/nullb0": -EINTR [ 1121.633419][T15989] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2659'. [ 1121.702762][T15989] bridge_slave_1: left allmulticast mode [ 1121.711932][T15989] bridge_slave_1: left promiscuous mode [ 1121.718251][T15989] bridge0: port 2(bridge_slave_1) entered disabled state [ 1122.114577][T15989] bridge_slave_0: left allmulticast mode [ 1122.137551][T15989] bridge_slave_0: left promiscuous mode [ 1122.143833][T15989] bridge0: port 1(bridge_slave_0) entered disabled state [ 1124.689737][T16014] netlink: 28 bytes leftover after parsing attributes in process `syz.3.2668'. [ 1124.753187][T16014] netlink: 28 bytes leftover after parsing attributes in process `syz.3.2668'. [ 1125.138866][T16018] netlink: 'syz.6.2670': attribute type 1 has an invalid length. [ 1125.169031][T16018] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 1125.510873][T16022] IPVS: set_ctl: invalid protocol: 50 10.1.1.2:20002 [ 1128.303185][T16051] netlink: 8 bytes leftover after parsing attributes in process `syz.6.2681'. [ 1128.312875][T16051] netlink: 'syz.6.2681': attribute type 5 has an invalid length. [ 1128.321528][T16051] netlink: 20 bytes leftover after parsing attributes in process `syz.6.2681'. [ 1128.390812][T16051] geneve4: entered promiscuous mode [ 1128.396287][T16051] geneve4: entered allmulticast mode [ 1128.631787][T16060] netlink: 'syz.4.2685': attribute type 3 has an invalid length. [ 1128.678375][T16062] netlink: 28 bytes leftover after parsing attributes in process `syz.7.2683'. [ 1128.707680][T16062] netlink: 28 bytes leftover after parsing attributes in process `syz.7.2683'. [ 1128.858186][T11224] usb 9-1: new high-speed USB device number 20 using dummy_hcd [ 1129.037685][T11224] usb 9-1: Using ep0 maxpacket: 16 [ 1129.049144][T16071] netlink: 'syz.6.2689': attribute type 1 has an invalid length. [ 1129.060880][T11224] usb 9-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xF3, changing to 0x83 [ 1129.082726][T16071] nbd: couldn't find device at index 20 [ 1129.087426][T11224] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 1129.108192][T11224] usb 9-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 1129.127517][T11224] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1129.140683][T11224] usb 9-1: Product: syz [ 1129.144908][T11224] usb 9-1: Manufacturer: syz [ 1129.177526][T11224] usb 9-1: SerialNumber: syz [ 1129.202741][T11224] usb 9-1: config 0 descriptor?? [ 1129.241704][T11224] em28xx 9-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0) [ 1129.387206][T11224] em28xx 9-1:0.0: Audio interface 0 found (Vendor Class) [ 1129.500286][T16083] netlink: 8 bytes leftover after parsing attributes in process `syz.7.2691'. [ 1129.520309][T16055] x_tables: duplicate underflow at hook 4 [ 1129.705224][T16083] netlink: 8 bytes leftover after parsing attributes in process `syz.7.2691'. [ 1129.877938][T11224] em28xx 9-1:0.0: unknown em28xx chip ID (0) [ 1129.890853][T11224] em28xx 9-1:0.0: Config register raw data: 0xfffffffb [ 1129.934265][T11224] em28xx 9-1:0.0: AC97 chip type couldn't be determined [ 1130.079597][T11224] em28xx 9-1:0.0: No AC97 audio processor [ 1130.100740][T11224] usb 9-1: USB disconnect, device number 20 [ 1130.129407][T11224] em28xx 9-1:0.0: Disconnecting em28xx [ 1130.299685][T11224] em28xx 9-1:0.0: Freeing device [ 1131.257522][T16102] binder: BINDER_SET_CONTEXT_MGR already set [ 1131.263676][T16102] binder: 16099:16102 ioctl 4018620d 200000000040 returned -16 [ 1135.636758][T16122] netdevsim netdevsim3 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1135.649001][T16122] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1137.102095][T16122] netdevsim netdevsim3 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1137.252624][T16122] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1137.615795][T16122] netdevsim netdevsim3 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1137.707762][T16122] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1137.787590][ T2150] usb 5-1: new high-speed USB device number 30 using dummy_hcd [ 1137.856149][T16151] netlink: 24 bytes leftover after parsing attributes in process `syz.6.2711'. [ 1137.908925][T16122] netdevsim netdevsim3 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1137.937610][ T2150] usb 5-1: device descriptor read/64, error -71 [ 1137.950102][T16122] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1138.177543][ T2150] usb 5-1: new high-speed USB device number 31 using dummy_hcd [ 1138.362556][ T2150] usb 5-1: device descriptor read/64, error -71 [ 1138.503248][ T2150] usb usb5-port1: attempt power cycle [ 1138.619079][T16122] netdevsim netdevsim3 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 1138.628548][T16122] netdevsim netdevsim3 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1138.655714][T16122] netdevsim netdevsim3 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 1138.677486][T16122] netdevsim netdevsim3 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1138.925092][ T2150] usb 5-1: new high-speed USB device number 32 using dummy_hcd [ 1139.022108][T16167] binder: BINDER_SET_CONTEXT_MGR already set [ 1139.029177][T16167] binder: 16164:16167 ioctl 4018620d 200000000040 returned -16 [ 1139.171465][ T2150] usb 5-1: device descriptor read/8, error -71 [ 1139.180083][T16122] netdevsim netdevsim3 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 1139.198738][T16122] netdevsim netdevsim3 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1139.225707][T16122] netdevsim netdevsim3 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 1139.467676][ T2150] usb 5-1: new high-speed USB device number 33 using dummy_hcd [ 1139.527145][T16166] random: crng reseeded on system resumption [ 1139.559650][ T2150] usb 5-1: device descriptor read/8, error -71 [ 1139.569789][T16122] netdevsim netdevsim3 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1139.723075][ T2150] usb usb5-port1: unable to enumerate USB device [ 1143.337999][T12595] usb 7-1: new full-speed USB device number 25 using dummy_hcd [ 1143.457518][ T10] usb 5-1: new high-speed USB device number 34 using dummy_hcd [ 1143.523511][T16192] netlink: 8 bytes leftover after parsing attributes in process `syz.7.2723'. [ 1143.533177][T16192] netlink: 'syz.7.2723': attribute type 5 has an invalid length. [ 1143.542611][T16192] netlink: 20 bytes leftover after parsing attributes in process `syz.7.2723'. [ 1143.630081][T16192] netdevsim netdevsim7 netdevsim0: set [1, 1] type 2 family 0 port 256 - 0 [ 1143.639879][T16192] netdevsim netdevsim7 netdevsim1: set [1, 1] type 2 family 0 port 256 - 0 [ 1143.652341][T16192] netdevsim netdevsim7 netdevsim2: set [1, 1] type 2 family 0 port 256 - 0 [ 1143.672535][T16192] netdevsim netdevsim7 netdevsim3: set [1, 1] type 2 family 0 port 256 - 0 [ 1143.682623][T16192] geneve2: entered promiscuous mode [ 1143.688434][T16192] geneve2: entered allmulticast mode [ 1143.885620][T12595] usb 7-1: config 5 has an invalid interface number: 123 but max is 0 [ 1143.962226][T12595] usb 7-1: config 5 has no interface number 0 [ 1144.024729][T12595] usb 7-1: config 5 interface 123 altsetting 7 endpoint 0x4 has invalid wMaxPacketSize 0 [ 1144.128325][T12595] usb 7-1: config 5 interface 123 has no altsetting 0 [ 1144.346045][T12595] usb 7-1: New USB device found, idVendor=3923, idProduct=718a, bcdDevice=d8.d7 [ 1144.393721][T12595] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1144.413972][T12595] usb 7-1: Product: syz [ 1144.422461][T12595] usb 7-1: Manufacturer: syz [ 1144.433565][T12595] usb 7-1: SerialNumber: syz [ 1144.507507][ T10] usb 5-1: Using ep0 maxpacket: 16 [ 1144.521465][ T10] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1144.535828][ T10] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 1144.547106][ T10] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 1144.572267][ T10] usb 5-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 1144.583417][ T10] usb 5-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 1144.685051][T12595] ni6501 7-1:5.123: driver 'ni6501' failed to auto-configure device. [ 1144.694482][ T10] usb 5-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 1144.727569][ T10] usb 5-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 1144.757171][T12595] usb 7-1: USB disconnect, device number 25 [ 1144.761620][ T10] usb 5-1: Manufacturer: syz [ 1145.063172][ T10] usb 5-1: config 0 descriptor?? [ 1146.417230][ T10] rc_core: IR keymap rc-hauppauge not found [ 1146.431386][ T10] Registered IR keymap rc-empty [ 1146.449021][ T10] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 1146.502568][ T10] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 1146.529949][ T10] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/rc/rc0 [ 1146.572218][ T10] input: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/rc/rc0/input19 [ 1146.647763][ T10] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 1146.706505][ T10] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 1146.788784][ T10] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 1146.821772][ T10] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 1146.891588][ T10] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 1146.946556][ T10] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 1147.055527][ T10] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 1147.101592][ T10] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 1147.147673][ T10] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 1147.198398][ T10] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 1147.360080][ T10] mceusb 5-1:0.0: Registered 424242424242 with mce emulator interface version 1 [ 1147.382271][ T10] mceusb 5-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active) [ 1147.412134][ T10] usb 5-1: USB disconnect, device number 34 [ 1148.818431][T16233] netlink: 12 bytes leftover after parsing attributes in process `syz.8.2733'. [ 1153.774922][T16278] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2743'. [ 1153.854441][T16287] xt_CT: You must specify a L4 protocol and not use inversions on it [ 1154.291377][T16297] netlink: 332 bytes leftover after parsing attributes in process `syz.3.2751'. [ 1154.384143][T16297] netlink: 'syz.3.2751': attribute type 9 has an invalid length. [ 1154.409016][T16297] netlink: 108 bytes leftover after parsing attributes in process `syz.3.2751'. [ 1154.475515][T16297] netlink: 32 bytes leftover after parsing attributes in process `syz.3.2751'. [ 1154.519494][T16301] netlink: 16 bytes leftover after parsing attributes in process `syz.8.2752'. [ 1159.015356][T16330] bond_slave_0: entered promiscuous mode [ 1159.021191][T16330] bond_slave_1: entered promiscuous mode [ 1159.067746][T16330] vlan2: entered promiscuous mode [ 1159.074139][T16330] bond0: entered promiscuous mode [ 1159.521898][ T44] usb 7-1: new high-speed USB device number 26 using dummy_hcd [ 1159.820706][ T44] usb 7-1: Using ep0 maxpacket: 8 [ 1160.048858][ T44] usb 7-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1160.071892][T16344] ieee802154 phy0 wpan0: encryption failed: -22 [ 1160.075901][ T44] usb 7-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 1160.128830][ T44] usb 7-1: config 1 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 1160.230407][ T44] usb 7-1: config 1 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 1160.259264][ T44] usb 7-1: config 1 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 1160.271218][ T44] usb 7-1: New USB device found, idVendor=0225, idProduct=0000, bcdDevice= 0.00 [ 1160.295414][ T44] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1160.328000][T16337] raw-gadget.0 gadget.6: fail, usb_ep_enable returned -22 [ 1160.357682][ T44] hub 7-1:1.0: bad descriptor, ignoring hub [ 1160.363686][ T44] hub 7-1:1.0: probe with driver hub failed with error -5 [ 1160.376636][ T44] cdc_wdm 7-1:1.0: skipping garbage [ 1160.382107][ T44] cdc_wdm 7-1:1.0: skipping garbage [ 1160.394030][ T44] cdc_wdm 7-1:1.0: cdc-wdm0: USB WDM device [ 1160.407873][ T44] cdc_wdm 7-1:1.0: Unknown control protocol [ 1160.569533][T16351] netlink: 8 bytes leftover after parsing attributes in process `syz.8.2769'. [ 1160.583252][T16351] netlink: 8 bytes leftover after parsing attributes in process `syz.8.2769'. [ 1162.261045][T16360] netlink: 'syz.4.2772': attribute type 10 has an invalid length. [ 1162.948995][ T44] usb 9-1: new high-speed USB device number 21 using dummy_hcd [ 1163.059650][ T2150] usb 7-1: USB disconnect, device number 26 [ 1163.187663][ T44] usb 9-1: Using ep0 maxpacket: 8 [ 1163.195407][ T44] usb 9-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1163.221343][ T44] usb 9-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 1163.232539][ T44] usb 9-1: config 1 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 1163.258846][ T44] usb 9-1: config 1 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 1163.270517][ T44] usb 9-1: config 1 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 1163.350090][ T44] usb 9-1: New USB device found, idVendor=0225, idProduct=0000, bcdDevice= 0.00 [ 1163.380769][T16374] sch_tbf: burst 1023 is lower than device lo mtu (65550) ! [ 1163.387415][ T44] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1163.437136][T16363] raw-gadget.2 gadget.8: fail, usb_ep_enable returned -22 [ 1163.459163][ T44] hub 9-1:1.0: bad descriptor, ignoring hub [ 1163.465177][ T44] hub 9-1:1.0: probe with driver hub failed with error -5 [ 1163.508222][ T44] cdc_wdm 9-1:1.0: skipping garbage [ 1163.513794][ T44] cdc_wdm 9-1:1.0: skipping garbage [ 1163.568845][ T44] cdc_wdm 9-1:1.0: cdc-wdm0: USB WDM device [ 1163.595408][ T44] cdc_wdm 9-1:1.0: Unknown control protocol [ 1163.727552][T12595] usb 7-1: new high-speed USB device number 27 using dummy_hcd [ 1165.354259][T12595] usb 7-1: Using ep0 maxpacket: 8 [ 1165.500607][T12595] usb 7-1: New USB device found, idVendor=0458, idProduct=7003, bcdDevice=7a.1a [ 1165.510220][T12595] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1165.518960][T12595] usb 7-1: Product: syz [ 1165.529394][T12595] usb 7-1: Manufacturer: syz [ 1165.534531][T12595] usb 7-1: SerialNumber: syz [ 1165.547488][T12595] usb 7-1: config 0 descriptor?? [ 1165.556861][T12595] gspca_main: sn9c2028-2.14.0 probing 0458:7003 [ 1165.654060][T16396] usb usb8: usbfs: process 16396 (syz.4.2783) did not claim interface 0 before use [ 1165.780711][T12595] gspca_sn9c2028: read1 error -32 [ 1165.804909][T12595] gspca_sn9c2028: read1 error -32 [ 1165.843094][ T2150] usb 9-1: USB disconnect, device number 21 [ 1166.474303][T16405] fuse: Bad value for 'user_id' [ 1166.479505][T16405] fuse: Bad value for 'user_id' [ 1167.686386][T16431] sch_tbf: peakrate 8 is lower than or equals to rate 12 ! [ 1168.311127][T12688] usb 7-1: USB disconnect, device number 27 [ 1172.187010][T16480] netlink: 8 bytes leftover after parsing attributes in process `syz.6.2804'. [ 1172.327557][T16480] netlink: 4 bytes leftover after parsing attributes in process `syz.6.2804'. [ 1172.447662][T16480] netlink: 12 bytes leftover after parsing attributes in process `syz.6.2804'. [ 1172.524791][T16480] ip6gretap1: left promiscuous mode [ 1172.531035][T16480] bridge0: port 3(ip6gretap1) entered disabled state [ 1172.853193][T16480] bridge_slave_1: left allmulticast mode [ 1172.868926][T16480] bridge_slave_1: left promiscuous mode [ 1172.874882][T16480] bridge0: port 2(bridge_slave_1) entered disabled state [ 1172.913490][T16480] bridge_slave_0: left allmulticast mode [ 1172.923775][T16480] bridge_slave_0: left promiscuous mode [ 1172.932087][T16480] bridge0: port 1(bridge_slave_0) entered disabled state [ 1173.302010][T16499] vlan3: entered promiscuous mode [ 1173.593281][T16504] xt_CHECKSUM: unsupported CHECKSUM operation 68 [ 1173.735881][T16506] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2815'. [ 1174.686732][T16506] vlan3: entered promiscuous mode [ 1174.919616][T16517] hsr0: entered promiscuous mode [ 1174.924925][T16517] macsec1: entered allmulticast mode [ 1174.930445][T16517] hsr0: entered allmulticast mode [ 1174.935562][T16517] hsr_slave_0: entered allmulticast mode [ 1174.941301][T16517] hsr_slave_1: entered allmulticast mode [ 1175.567478][ T10] usb 4-1: new high-speed USB device number 57 using dummy_hcd [ 1175.827915][ T10] usb 4-1: Using ep0 maxpacket: 32 [ 1175.841731][ T10] usb 4-1: unable to get BOS descriptor or descriptor too short [ 1175.852707][ T10] usb 4-1: config 1 contains an unexpected descriptor of type 0x2, skipping [ 1175.864525][ T10] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1175.876997][ T10] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 1176.632746][ T10] usb 4-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 1176.647534][ T10] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1176.805641][ T10] usb 4-1: Product: syz [ 1176.811422][ T10] usb 4-1: Manufacturer: syz [ 1176.816159][ T10] usb 4-1: SerialNumber: syz [ 1177.052094][T16524] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1177.095043][T16524] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1177.125142][T16542] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1177.169750][T16542] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1177.180050][ T10] usb 4-1: 0:2 : does not exist [ 1177.210804][T16540] input: syz1 as /devices/virtual/input/input20 [ 1177.226387][T16540] input: failed to attach handler leds to device input20, error: -6 [ 1177.420969][ T10] usb 4-1: USB disconnect, device number 57 [ 1177.514588][ T1301] ieee802154 phy0 wpan0: encryption failed: -22 [ 1177.521461][ T1301] ieee802154 phy1 wpan1: encryption failed: -22 [ 1177.537415][T14257] udevd[14257]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1177.808556][ T10] usb 4-1: new high-speed USB device number 58 using dummy_hcd [ 1178.011251][ T10] usb 4-1: config 1 contains an unexpected descriptor of type 0x2, skipping [ 1178.020422][ T10] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1178.031172][ T10] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 1178.980842][ T10] usb 4-1: string descriptor 0 read error: -71 [ 1178.997652][ T2150] usb 7-1: new high-speed USB device number 28 using dummy_hcd [ 1179.045413][ T10] usb 4-1: New USB device found, idVendor=0763, idProduct=2030, bcdDevice= 0.40 [ 1179.065174][ T10] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1179.104268][ T10] usb 4-1: can't set config #1, error -71 [ 1179.198066][T16567] netlink: 28 bytes leftover after parsing attributes in process `syz.4.2834'. [ 1179.219807][T16567] netlink: 28 bytes leftover after parsing attributes in process `syz.4.2834'. [ 1179.272657][T16567] team0: entered promiscuous mode [ 1179.291160][T16567] team_slave_0: entered promiscuous mode [ 1179.306970][T16567] team_slave_1: entered promiscuous mode [ 1179.326002][T16567] batadv_slave_1: entered promiscuous mode [ 1179.349408][ T10] usb 4-1: USB disconnect, device number 58 [ 1179.377161][T16567] debugfs: Directory 'hsr1' with parent 'hsr' already present! [ 1179.396347][T16567] Cannot create hsr debugfs directory [ 1179.407638][ T2150] usb 7-1: Using ep0 maxpacket: 32 [ 1179.424071][ T2150] usb 7-1: config 0 interface 0 has no altsetting 0 [ 1179.478931][T16574] sch_tbf: peakrate 8 is lower than or equals to rate 12 ! [ 1180.162863][ T2150] usb 7-1: New USB device found, idVendor=16d0, idProduct=10b8, bcdDevice=de.8e [ 1180.187952][ T2150] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1180.196117][ T2150] usb 7-1: Product: syz [ 1180.203540][ T2150] usb 7-1: Manufacturer: syz [ 1180.208281][ T2150] usb 7-1: SerialNumber: syz [ 1180.216537][ T2150] usb 7-1: config 0 descriptor?? [ 1180.239949][ T2150] gs_usb 7-1:0.0: Required endpoints not found [ 1180.267736][T16578] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2837'. [ 1180.350405][T16578] vlan2: entered promiscuous mode [ 1181.400458][T16606] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1181.487549][ T10] usb 7-1: USB disconnect, device number 28 [ 1182.837926][ T10] usb 7-1: new full-speed USB device number 29 using dummy_hcd [ 1182.999714][ T10] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x6 has invalid maxpacket 1023, setting to 64 [ 1183.060668][ T44] usb 9-1: new full-speed USB device number 22 using dummy_hcd [ 1183.065818][ T10] usb 7-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xBA, changing to 0x8A [ 1183.114018][ T10] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x8A has invalid maxpacket 121, setting to 64 [ 1183.145487][ T10] usb 7-1: New USB device found, idVendor=2294, idProduct=425b, bcdDevice=a2.10 [ 1183.163358][ T10] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1183.173316][ T10] usb 7-1: Product: syz [ 1183.180846][ T10] usb 7-1: Manufacturer: syz [ 1183.186044][ T10] usb 7-1: SerialNumber: syz [ 1183.203205][ T10] usb 7-1: config 0 descriptor?? [ 1183.304859][T16612] raw-gadget.1 gadget.6: fail, usb_ep_enable returned -22 [ 1183.329768][T16612] raw-gadget.1 gadget.6: fail, usb_ep_enable returned -22 [ 1183.423482][ T44] usb 9-1: not running at top speed; connect to a high speed hub [ 1183.442150][ T44] usb 9-1: config 0 interface 0 has no altsetting 0 [ 1183.448051][ T10] usb 7-1: ucan: probing device on interface #0 [ 1183.453144][ T44] usb 9-1: New USB device found, idVendor=05ac, idProduct=0272, bcdDevice=2b.5c [ 1184.117785][ T44] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1184.125992][ T44] usb 9-1: Product: syz [ 1184.157507][ T44] usb 9-1: Manufacturer: syz [ 1184.162339][ T44] usb 9-1: SerialNumber: syz [ 1184.328430][ T10] usb 7-1: ucan: could not read protocol version, ret=0 [ 1184.329820][ T44] usb 9-1: config 0 descriptor?? [ 1184.346856][T16623] netlink: 2980 bytes leftover after parsing attributes in process `syz.4.2853'. [ 1184.514584][ T10] usb 7-1: ucan: probe failed; try to update the device firmware [ 1184.745809][T16618] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1184.754807][T16618] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1185.010825][ T44] input: bcm5974 as /devices/platform/dummy_hcd.8/usb9/9-1/9-1:0.0/input/input21 [ 1185.045259][ T10] usb 7-1: USB disconnect, device number 29 [ 1185.717084][ T5189] bcm5974 9-1:0.0: could not read from device [ 1185.753591][ T5189] bcm5974 9-1:0.0: could not read from device [ 1185.825966][ T5189] bcm5974 9-1:0.0: could not read from device [ 1185.839161][ T44] usb 9-1: USB disconnect, device number 22 [ 1185.893978][ T5189] bcm5974 9-1:0.0: could not read from device [ 1186.236889][T16649] tipc: Enabled bearer , priority 0 [ 1186.807467][T16649] syzkaller0: entered promiscuous mode [ 1186.859220][T16649] syzkaller0: entered allmulticast mode [ 1186.911040][T16649] tipc: Resetting bearer [ 1186.929960][T16646] tipc: Resetting bearer [ 1186.957555][T11224] usb 7-1: new high-speed USB device number 30 using dummy_hcd [ 1187.257433][T11224] usb 7-1: Using ep0 maxpacket: 32 [ 1187.289840][T11224] usb 7-1: config 0 interface 0 has no altsetting 0 [ 1187.308071][T11224] usb 7-1: New USB device found, idVendor=16d0, idProduct=10b8, bcdDevice=de.8e [ 1187.328228][T11224] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1187.347191][T11224] usb 7-1: Product: syz [ 1187.357028][T11224] usb 7-1: Manufacturer: syz [ 1187.367551][T11224] usb 7-1: SerialNumber: syz [ 1187.398417][T11224] usb 7-1: config 0 descriptor?? [ 1188.008365][T11224] gs_usb 7-1:0.0: Couldn't get device config: (err=-32) [ 1188.017756][T11224] gs_usb 7-1:0.0: probe with driver gs_usb failed with error -32 [ 1190.171190][T12688] usb 7-1: USB disconnect, device number 30 [ 1190.731574][T16646] tipc: Disabling bearer [ 1191.027279][T16693] netlink: 'syz.3.2871': attribute type 1 has an invalid length. [ 1191.088051][T16693] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 1192.187048][T16708] netlink: 12 bytes leftover after parsing attributes in process `syz.7.2876'. [ 1192.219096][T16707] netlink: 28 bytes leftover after parsing attributes in process `syz.3.2875'. [ 1192.259736][T16707] netlink: 28 bytes leftover after parsing attributes in process `syz.3.2875'. [ 1192.269865][T16708] vlan2: entered promiscuous mode [ 1193.347885][T12688] usb 5-1: new high-speed USB device number 35 using dummy_hcd [ 1193.521015][T12688] usb 5-1: New USB device found, idVendor=046d, idProduct=0870, bcdDevice=61.47 [ 1193.533897][T12688] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1194.408800][T12688] usb 5-1: config 0 descriptor?? [ 1194.420523][T12688] gspca_main: STV06xx-2.14.0 probing 046d:0870 [ 1196.174596][T16752] netlink: 332 bytes leftover after parsing attributes in process `syz.6.2892'. [ 1196.197763][T16752] netlink: 'syz.6.2892': attribute type 9 has an invalid length. [ 1196.205614][T16752] netlink: 108 bytes leftover after parsing attributes in process `syz.6.2892'. [ 1196.247851][T16752] netlink: 32 bytes leftover after parsing attributes in process `syz.6.2892'. [ 1196.416087][T16757] netlink: 8 bytes leftover after parsing attributes in process `syz.7.2894'. [ 1196.425506][T16757] netlink: 'syz.7.2894': attribute type 5 has an invalid length. [ 1196.433564][T16757] netlink: 20 bytes leftover after parsing attributes in process `syz.7.2894'. [ 1196.487304][T16757] geneve3: entered promiscuous mode [ 1196.493202][T16757] geneve3: entered allmulticast mode [ 1197.009248][T16762] netlink: 3 bytes leftover after parsing attributes in process `syz.8.2896'. [ 1197.173707][T16762] batadv1: entered promiscuous mode [ 1197.179222][T16762] batadv1: entered allmulticast mode [ 1197.554865][T12688] usb 5-1: USB disconnect, device number 35 [ 1198.399550][T16787] pim6reg: entered allmulticast mode [ 1199.997148][T16799] netlink: 12 bytes leftover after parsing attributes in process `syz.8.2907'. [ 1200.044110][T16799] vlan2: entered promiscuous mode [ 1200.776435][T16816] netlink: 20 bytes leftover after parsing attributes in process `syz.6.2911'. [ 1200.787845][T16816] netlink: 4 bytes leftover after parsing attributes in process `syz.6.2911'. [ 1201.639917][T16833] netlink: 28 bytes leftover after parsing attributes in process `syz.6.2915'. [ 1202.489624][T16840] tipc: Enabled bearer , priority 0 [ 1202.676620][T16843] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1202.719533][T16843] tmpfs: Unknown parameter '' [ 1203.027740][ T10] usb 5-1: new high-speed USB device number 36 using dummy_hcd [ 1203.862737][ T10] usb 5-1: config 0 has no interfaces? [ 1203.949005][T16840] syzkaller0: entered promiscuous mode [ 1203.955620][T16840] syzkaller0: entered allmulticast mode [ 1203.961723][ T10] usb 5-1: New USB device found, idVendor=18b4, idProduct=fffb, bcdDevice=dc.7b [ 1203.975842][ T10] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1203.995176][T16840] tipc: Resetting bearer [ 1204.005033][ T10] usb 5-1: Product: syz [ 1204.036243][ T10] usb 5-1: Manufacturer: syz [ 1204.166538][ T10] usb 5-1: SerialNumber: syz [ 1204.188204][ T10] usb 5-1: config 0 descriptor?? [ 1204.203390][T16839] tipc: Resetting bearer [ 1204.907635][T16858] netlink: 28 bytes leftover after parsing attributes in process `syz.7.2921'. [ 1204.947540][T16858] netlink: 28 bytes leftover after parsing attributes in process `syz.7.2921'. [ 1205.165539][T16860] netlink: 2384 bytes leftover after parsing attributes in process `syz.4.2916'. [ 1206.556604][T16864] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1206.567717][T16864] 9pnet: Unknown protocol version 9p [ 1207.437680][ T5939] usb 9-1: new high-speed USB device number 23 using dummy_hcd [ 1207.617658][ T5939] usb 9-1: Using ep0 maxpacket: 32 [ 1207.677198][ T5939] usb 9-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xD8, changing to 0x88 [ 1207.696810][ T5939] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x88 has an invalid bInterval 0, changing to 7 [ 1207.736373][ T5939] usb 9-1: New USB device found, idVendor=05e1, idProduct=0408, bcdDevice=25.11 [ 1207.756240][ T5939] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1207.767502][ T5939] usb 9-1: Product: syz [ 1207.784364][ T5939] usb 9-1: Manufacturer: syz [ 1207.794269][ T5939] usb 9-1: SerialNumber: syz [ 1207.828266][ T5939] usb 9-1: config 0 descriptor?? [ 1207.849872][ T5939] usb 9-1: no audio or video endpoints found [ 1210.132637][T16839] tipc: Disabling bearer [ 1210.170049][ T5939] usb 9-1: USB disconnect, device number 23 [ 1210.389807][T16870] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 1210.834000][T16875] netlink: 2980 bytes leftover after parsing attributes in process `syz.3.2925'. [ 1211.250075][T12688] usb 5-1: USB disconnect, device number 36 [ 1211.257762][ T44] usb 7-1: new high-speed USB device number 31 using dummy_hcd [ 1211.457550][ T44] usb 7-1: Using ep0 maxpacket: 8 [ 1211.504770][ T44] usb 7-1: New USB device found, idVendor=110a, idProduct=1450, bcdDevice=62.cb [ 1211.533064][ T44] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1211.567849][ T44] usb 7-1: Product: syz [ 1211.572098][ T44] usb 7-1: Manufacturer: syz [ 1211.588171][ T44] usb 7-1: SerialNumber: syz [ 1211.782971][T16892] netlink: 'syz.8.2929': attribute type 1 has an invalid length. [ 1212.010372][T16896] netlink: 3 bytes leftover after parsing attributes in process `syz.3.2932'. [ 1212.038403][ T44] mxuport 7-1:254.0: mxuport_recv_ctrl_urb - short read (0 / 4) [ 1212.047984][ T44] mxuport 7-1:254.0: probe with driver mxuport failed with error -5 [ 1212.094191][T16896] batadv1: entered promiscuous mode [ 1212.102469][T16896] batadv1: entered allmulticast mode [ 1212.968142][ T10] usb 7-1: USB disconnect, device number 31 [ 1213.115656][T16891] orangefs_mount: mount request failed with -4 [ 1213.425926][T16913] netlink: 32 bytes leftover after parsing attributes in process `syz.3.2936'. [ 1215.218456][T16930] netlink: 'syz.6.2941': attribute type 11 has an invalid length. [ 1215.226615][T16930] netlink: 4 bytes leftover after parsing attributes in process `syz.6.2941'. [ 1215.233441][T16928] pimreg3: entered allmulticast mode [ 1215.367793][T16930] netdevsim netdevsim6 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 1215.376712][T16930] netdevsim netdevsim6 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 1215.385901][T16930] netdevsim netdevsim6 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 1215.394830][T16930] netdevsim netdevsim6 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 1215.674099][T16942] netlink: 12 bytes leftover after parsing attributes in process `syz.6.2941'. [ 1216.557480][ T5910] usb 5-1: new high-speed USB device number 37 using dummy_hcd [ 1216.762115][T16946] netlink: 'syz.8.2946': attribute type 8 has an invalid length. [ 1216.836140][T16946] netlink: 8 bytes leftover after parsing attributes in process `syz.8.2946'. [ 1217.050201][T11224] usb 4-1: new full-speed USB device number 59 using dummy_hcd [ 1217.097421][ T5910] usb 5-1: Using ep0 maxpacket: 32 [ 1217.119802][ T5910] usb 5-1: config 0 interface 0 has no altsetting 0 [ 1217.155177][ T5910] usb 5-1: New USB device found, idVendor=16d0, idProduct=10b8, bcdDevice=de.8e [ 1217.179650][ T5910] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1217.204742][ T5910] usb 5-1: Product: syz [ 1217.225674][ T5910] usb 5-1: Manufacturer: syz [ 1217.238174][ T5910] usb 5-1: SerialNumber: syz [ 1217.259157][T11224] usb 4-1: not running at top speed; connect to a high speed hub [ 1217.288121][ T5910] usb 5-1: config 0 descriptor?? [ 1217.301966][T11224] usb 4-1: config 0 interface 0 has no altsetting 0 [ 1217.340872][T11224] usb 4-1: New USB device found, idVendor=05ac, idProduct=0272, bcdDevice=2b.5c [ 1217.391304][T11224] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1217.426878][T11224] usb 4-1: Product: syz [ 1217.471263][T11224] usb 4-1: Manufacturer: syz [ 1217.511160][T11224] usb 4-1: SerialNumber: syz [ 1217.662127][T11224] usb 4-1: config 0 descriptor?? [ 1217.900322][ T5910] gs_usb 5-1:0.0: Couldn't get device config: (err=-32) [ 1218.589374][ T5910] gs_usb 5-1:0.0: probe with driver gs_usb failed with error -32 [ 1218.618048][T16940] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1218.627196][T16940] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1219.939692][T16978] netlink: 2896 bytes leftover after parsing attributes in process `syz.7.2953'. [ 1220.252798][T11224] input: bcm5974 as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/input/input22 [ 1220.285152][ T5189] bcm5974 4-1:0.0: could not read from device [ 1220.347087][ T5189] bcm5974 4-1:0.0: could not read from device [ 1220.355125][T11224] usb 4-1: USB disconnect, device number 59 [ 1220.455462][T12595] usb 5-1: USB disconnect, device number 37 [ 1223.699591][T17026] netlink: 'syz.4.2971': attribute type 1 has an invalid length. [ 1223.708089][T17026] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 1224.831634][T17037] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2973'. [ 1224.846818][T17037] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2973'. [ 1225.084532][T17040] tipc: Enabled bearer , priority 0 [ 1225.329494][T17041] syzkaller0: entered promiscuous mode [ 1225.347851][T17041] syzkaller0: entered allmulticast mode [ 1225.430201][T17041] tipc: Resetting bearer [ 1225.557523][T17039] tipc: Resetting bearer [ 1233.697691][ T5903] usb 5-1: new high-speed USB device number 38 using dummy_hcd [ 1233.867612][ T5903] usb 5-1: Using ep0 maxpacket: 8 [ 1233.875700][ T5903] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1233.889955][ T5903] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 1233.910045][ T5903] usb 5-1: config 1 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 1233.929747][ T5903] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 1233.940840][ T5903] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 1233.952228][ T5903] usb 5-1: New USB device found, idVendor=0225, idProduct=0000, bcdDevice= 0.00 [ 1233.961593][ T5903] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1233.974267][T17111] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 1233.988263][ T5903] hub 5-1:1.0: bad descriptor, ignoring hub [ 1233.994318][ T5903] hub 5-1:1.0: probe with driver hub failed with error -5 [ 1234.006555][ T5903] cdc_wdm 5-1:1.0: skipping garbage [ 1234.012254][ T5903] cdc_wdm 5-1:1.0: skipping garbage [ 1234.039382][ T5903] cdc_wdm 5-1:1.0: cdc-wdm0: USB WDM device [ 1234.045357][ T5903] cdc_wdm 5-1:1.0: Unknown control protocol [ 1234.602980][T12688] usb 5-1: USB disconnect, device number 38 [ 1234.904720][T17039] tipc: Disabling bearer [ 1235.484328][T11224] usb 9-1: new high-speed USB device number 24 using dummy_hcd [ 1236.283633][T11224] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1236.437503][T11224] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1236.450489][T11224] usb 9-1: New USB device found, idVendor=1e7d, idProduct=30d4, bcdDevice= 0.00 [ 1236.460265][T11224] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1236.740611][T11224] usb 9-1: config 0 descriptor?? [ 1237.350665][T11224] usbhid 9-1:0.0: can't add hid device: -71 [ 1237.357653][T11224] usbhid 9-1:0.0: probe with driver usbhid failed with error -71 [ 1237.663379][T17138] netlink: 28 bytes leftover after parsing attributes in process `syz.3.3003'. [ 1237.673792][T17138] netlink: 28 bytes leftover after parsing attributes in process `syz.3.3003'. [ 1237.703818][T11224] usb 9-1: USB disconnect, device number 24 [ 1237.798177][T17136] binder_alloc: 17134: binder_alloc_buf size 12280 failed, no address space [ 1237.806962][T17136] binder_alloc: allocated: 8 (num: 1 largest: 8), free: 8184 (num: 1 largest: 8184) [ 1238.757582][T11224] usb 9-1: new high-speed USB device number 25 using dummy_hcd [ 1238.919849][T11224] usb 9-1: Using ep0 maxpacket: 16 [ 1238.954181][ T1301] ieee802154 phy0 wpan0: encryption failed: -22 [ 1238.967989][ T1301] ieee802154 phy1 wpan1: encryption failed: -22 [ 1239.157643][T10312] Bluetooth: hci5: link tx timeout [ 1239.163033][T10312] Bluetooth: hci5: killing stalled connection 10:aa:aa:aa:aa:aa [ 1239.249558][T11224] usb 9-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1239.972901][T11224] usb 9-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 1240.177684][T11224] usb 9-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 1240.186803][T11224] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1240.282412][T11224] usb 9-1: Product: syz [ 1240.302404][T11224] usb 9-1: Manufacturer: syz [ 1240.308866][T17197] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 1240.319899][T17197] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 1240.347827][T17197] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 1240.349436][T11224] usb 9-1: SerialNumber: syz [ 1240.371064][T17197] Bluetooth: hci5: Opcode 0x0c1a failed: -4 [ 1240.856914][T11224] usb 9-1: 0:2 : does not exist [ 1240.870478][T11224] usb 9-1: 5:0: failed to get current value for ch 0 (-22) [ 1240.927825][T11224] usb 9-1: USB disconnect, device number 25 [ 1241.146946][T14233] udevd[14233]: error opening ATTR{/sys/devices/platform/dummy_hcd.8/usb9/9-1/9-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1242.387460][T10312] Bluetooth: hci5: command 0x0406 tx timeout [ 1242.393685][T10312] Bluetooth: hci3: command 0x0406 tx timeout [ 1242.399878][T10312] Bluetooth: hci0: command 0x0406 tx timeout [ 1242.406165][T10312] Bluetooth: hci1: command 0x0c1a tx timeout [ 1243.465712][T17219] ubi31: attaching mtd0 [ 1243.545550][T17222] netlink: 24 bytes leftover after parsing attributes in process `syz.6.3019'. [ 1243.547005][T17219] ubi31: scanning is finished [ 1243.727723][T17219] ubi31: empty MTD device detected [ 1245.704724][T17219] ubi31: attached mtd0 (name "mtdram test device", size 0 MiB) [ 1245.747791][T17219] ubi31: PEB size: 4096 bytes (4 KiB), LEB size: 3968 bytes [ 1245.780252][ T30] audit: type=1326 audit(1246.736:96): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=17244 comm="syz.8.3026" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f843c38ebe9 code=0x7ffc0000 [ 1245.826818][T17219] ubi31: min./max. I/O unit sizes: 1/64, sub-page size 1 [ 1245.965276][T17249] netlink: 'syz.8.3026': attribute type 10 has an invalid length. [ 1245.973514][T17249] netlink: 40 bytes leftover after parsing attributes in process `syz.8.3026'. [ 1246.025030][T17249] batman_adv: batadv0: Adding interface: virt_wifi0 [ 1246.032373][T17249] batman_adv: batadv0: The MTU of interface virt_wifi0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1246.059402][T17249] batman_adv: batadv0: Interface activated: virt_wifi0 [ 1246.397569][ T30] audit: type=1326 audit(1246.736:97): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=17244 comm="syz.8.3026" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f843c38ebe9 code=0x7ffc0000 [ 1246.430054][T17219] ubi31: VID header offset: 64 (aligned 64), data offset: 128 [ 1246.439720][ T30] audit: type=1326 audit(1246.736:98): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=17244 comm="syz.8.3026" exe="/root/syz-executor" sig=0 arch=c000003e syscall=105 compat=0 ip=0x7f843c38ebe9 code=0x7ffc0000 [ 1246.482216][T17219] ubi31: good PEBs: 32, bad PEBs: 0, corrupted PEBs: 0 [ 1246.502602][T17219] ubi31: user volume: 0, internal volumes: 1, max. volumes count: 23 [ 1246.523054][T17219] ubi31: max/mean erase counter: 0/0, WL threshold: 4096, image sequence number: 4139469655 [ 1246.561933][T17219] ubi31: available PEBs: 28, total reserved PEBs: 4, PEBs reserved for bad PEB handling: 0 [ 1246.583076][ T30] audit: type=1326 audit(1246.736:99): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=17244 comm="syz.8.3026" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f843c38ebe9 code=0x7ffc0000 [ 1246.609868][T17252] netlink: 24 bytes leftover after parsing attributes in process `syz.3.3027'. [ 1246.619269][T17245] ubi31: background thread "ubi_bgt31d" started, PID 17245 [ 1246.717773][ T30] audit: type=1326 audit(1246.736:100): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=17244 comm="syz.8.3026" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f843c38ebe9 code=0x7ffc0000 [ 1246.790099][ T30] audit: type=1326 audit(1246.736:101): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=17244 comm="syz.8.3026" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f843c38ebe9 code=0x7ffc0000 [ 1246.879209][ T30] audit: type=1326 audit(1246.736:102): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=17244 comm="syz.8.3026" exe="/root/syz-executor" sig=0 arch=c000003e syscall=46 compat=0 ip=0x7f843c38ebe9 code=0x7ffc0000 [ 1246.997422][ T30] audit: type=1326 audit(1246.736:103): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=17244 comm="syz.8.3026" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f843c38ebe9 code=0x7ffc0000 [ 1247.031915][T17172] hid (null): invalid report_count 457358831 [ 1247.071800][T17172] hid (null): unknown global tag 0xc [ 1247.106281][ T30] audit: type=1326 audit(1246.746:104): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=17244 comm="syz.8.3026" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f843c38ebe9 code=0x7ffc0000 [ 1247.139236][T17172] hid (null): unknown global tag 0xc [ 1247.148379][T17172] hid (null): unknown global tag 0xe [ 1247.153845][T17172] hid (null): report_id 0 is invalid [ 1247.215121][ T30] audit: type=1326 audit(1246.746:105): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=17244 comm="syz.8.3026" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f843c38ebe9 code=0x7ffc0000 [ 1247.232640][T17172] hid-generic 0009:80000001:7FFF.000E: invalid report_count 457358831 [ 1247.379028][T17172] hid-generic 0009:80000001:7FFF.000E: item 0 4 1 9 parsing failed [ 1247.554944][T17172] hid-generic 0009:80000001:7FFF.000E: probe with driver hid-generic failed with error -22 [ 1247.964064][T17268] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check. [ 1248.453756][T17286] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1248.487575][T17286] 9pnet: Unknown protocol version 9p [ 1251.597494][T11224] usb 5-1: new full-speed USB device number 39 using dummy_hcd [ 1251.857938][T11224] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1251.935194][T11224] usb 5-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 1252.030808][T11224] usb 5-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 1252.091203][T11224] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1252.131089][T11224] usb 5-1: Product: syz [ 1252.138871][T11224] usb 5-1: Manufacturer: syz [ 1252.146328][T11224] usb 5-1: SerialNumber: syz [ 1252.167162][T11224] usb 5-1: config 0 descriptor?? [ 1252.887609][T17172] usb 7-1: new high-speed USB device number 32 using dummy_hcd [ 1253.037409][T17172] usb 7-1: Using ep0 maxpacket: 16 [ 1253.048689][T17172] usb 7-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1253.067387][T17172] usb 7-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 1253.092095][T17172] usb 7-1: New USB device found, idVendor=05ac, idProduct=f3da, bcdDevice=4b.a9 [ 1253.101547][T17172] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1253.109858][T17172] usb 7-1: Product: syz [ 1253.114062][T17172] usb 7-1: Manufacturer: syz [ 1253.126604][T17172] usb 7-1: SerialNumber: syz [ 1253.134600][T17172] usb 7-1: config 0 descriptor?? [ 1253.722899][T17350] FAULT_INJECTION: forcing a failure. [ 1253.722899][T17350] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1253.736571][T17350] CPU: 1 UID: 0 PID: 17350 Comm: syz.3.3059 Not tainted 6.16.0-syzkaller #0 PREEMPT(full) [ 1253.736604][T17350] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 1253.736616][T17350] Call Trace: [ 1253.736625][T17350] [ 1253.736634][T17350] dump_stack_lvl+0x189/0x250 [ 1253.736663][T17350] ? __pfx____ratelimit+0x10/0x10 [ 1253.736686][T17350] ? __pfx_dump_stack_lvl+0x10/0x10 [ 1253.736709][T17350] ? __pfx__printk+0x10/0x10 [ 1253.736736][T17350] ? __might_fault+0xb0/0x130 [ 1253.736770][T17350] should_fail_ex+0x414/0x560 [ 1253.736798][T17350] _copy_from_user+0x2d/0xb0 [ 1253.736829][T17350] ___sys_sendmsg+0x158/0x2a0 [ 1253.736865][T17350] ? __pfx____sys_sendmsg+0x10/0x10 [ 1253.736938][T17350] ? __fget_files+0x2a/0x420 [ 1253.736962][T17350] ? __fget_files+0x3a0/0x420 [ 1253.736997][T17350] __sys_sendmmsg+0x227/0x430 [ 1253.737034][T17350] ? __pfx___sys_sendmmsg+0x10/0x10 [ 1253.737062][T17350] ? __mutex_unlock_slowpath+0x1cd/0x700 [ 1253.737116][T17350] ? ksys_write+0x22a/0x250 [ 1253.737140][T17350] ? __pfx_ksys_write+0x10/0x10 [ 1253.737157][T17350] ? rcu_is_watching+0x15/0xb0 [ 1253.737188][T17350] __x64_sys_sendmmsg+0xa0/0xc0 [ 1253.737222][T17350] do_syscall_64+0xfa/0x3b0 [ 1253.737243][T17350] ? lockdep_hardirqs_on+0x9c/0x150 [ 1253.737264][T17350] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1253.737293][T17350] ? clear_bhb_loop+0x60/0xb0 [ 1253.737315][T17350] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1253.737335][T17350] RIP: 0033:0x7f458958ebe9 [ 1253.737354][T17350] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1253.737371][T17350] RSP: 002b:00007f458a419038 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 1253.737393][T17350] RAX: ffffffffffffffda RBX: 00007f45897b5fa0 RCX: 00007f458958ebe9 [ 1253.737408][T17350] RDX: 0000000000000002 RSI: 0000200000000680 RDI: 0000000000000003 [ 1253.737421][T17350] RBP: 00007f458a419090 R08: 0000000000000000 R09: 0000000000000000 [ 1253.737434][T17350] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1253.737446][T17350] R13: 00007f45897b6038 R14: 00007f45897b5fa0 R15: 00007fff486fef08 [ 1253.737480][T17350] [ 1254.848522][T17172] usb 7-1: USB disconnect, device number 32 [ 1254.851786][ T5939] usb 5-1: USB disconnect, device number 39 [ 1255.270307][T17361] program syz.4.3062 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 1255.634066][T17369] FAULT_INJECTION: forcing a failure. [ 1255.634066][T17369] name failslab, interval 1, probability 0, space 0, times 0 [ 1255.837493][T17369] CPU: 0 UID: 0 PID: 17369 Comm: syz.4.3064 Not tainted 6.16.0-syzkaller #0 PREEMPT(full) [ 1255.837522][T17369] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 1255.837534][T17369] Call Trace: [ 1255.837543][T17369] [ 1255.837552][T17369] dump_stack_lvl+0x189/0x250 [ 1255.837580][T17369] ? __pfx____ratelimit+0x10/0x10 [ 1255.837602][T17369] ? __pfx_dump_stack_lvl+0x10/0x10 [ 1255.837624][T17369] ? __pfx__printk+0x10/0x10 [ 1255.837656][T17369] ? ref_tracker_alloc+0x318/0x460 [ 1255.837681][T17369] should_fail_ex+0x414/0x560 [ 1255.837707][T17369] should_failslab+0xa8/0x100 [ 1255.837731][T17369] kmem_cache_alloc_noprof+0x73/0x3c0 [ 1255.837750][T17369] ? skb_clone+0x212/0x3a0 [ 1255.837775][T17369] skb_clone+0x212/0x3a0 [ 1255.837799][T17369] __netlink_deliver_tap+0x404/0x850 [ 1255.837841][T17369] ? netlink_deliver_tap+0x2e/0x1b0 [ 1255.837869][T17369] netlink_deliver_tap+0x19c/0x1b0 [ 1255.837898][T17369] netlink_unicast+0x730/0x8e0 [ 1255.837944][T17369] netlink_sendmsg+0x805/0xb30 [ 1255.837983][T17369] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1255.838020][T17369] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 1255.838039][T17369] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1255.838067][T17369] __sock_sendmsg+0x21c/0x270 [ 1255.838094][T17369] ____sys_sendmsg+0x505/0x830 [ 1255.838131][T17369] ? __pfx_____sys_sendmsg+0x10/0x10 [ 1255.838172][T17369] ? import_iovec+0x74/0xa0 [ 1255.838202][T17369] ___sys_sendmsg+0x21f/0x2a0 [ 1255.838234][T17369] ? __pfx____sys_sendmsg+0x10/0x10 [ 1255.838307][T17369] ? __fget_files+0x2a/0x420 [ 1255.838326][T17369] ? __fget_files+0x3a0/0x420 [ 1255.838360][T17369] __x64_sys_sendmsg+0x19b/0x260 [ 1255.838393][T17369] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 1255.838433][T17369] ? __pfx_ksys_write+0x10/0x10 [ 1255.838449][T17369] ? rcu_is_watching+0x15/0xb0 [ 1255.838476][T17369] ? do_syscall_64+0xbe/0x3b0 [ 1255.838502][T17369] do_syscall_64+0xfa/0x3b0 [ 1255.838521][T17369] ? lockdep_hardirqs_on+0x9c/0x150 [ 1255.838541][T17369] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1255.838560][T17369] ? clear_bhb_loop+0x60/0xb0 [ 1255.838584][T17369] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1255.838602][T17369] RIP: 0033:0x7f989618ebe9 [ 1255.838619][T17369] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1255.838635][T17369] RSP: 002b:00007f989701a038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1255.838656][T17369] RAX: ffffffffffffffda RBX: 00007f98963b5fa0 RCX: 00007f989618ebe9 [ 1255.838670][T17369] RDX: 0000000000000000 RSI: 0000200000000080 RDI: 0000000000000003 [ 1255.838682][T17369] RBP: 00007f989701a090 R08: 0000000000000000 R09: 0000000000000000 [ 1255.838694][T17369] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1255.838705][T17369] R13: 00007f98963b6038 R14: 00007f98963b5fa0 R15: 00007fff24859b28 [ 1255.838734][T17369] [ 1259.687113][T17404] kvm: MONITOR instruction emulated as NOP! [ 1261.027509][ T10] usb 9-1: new high-speed USB device number 26 using dummy_hcd [ 1262.042013][T17419] netlink: 2384 bytes leftover after parsing attributes in process `syz.3.3077'. [ 1262.404438][ T10] usb 9-1: Using ep0 maxpacket: 16 [ 1262.419837][ T10] usb 9-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1262.440331][ T10] usb 9-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 1262.474837][ T10] usb 9-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 1262.487365][ T10] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1262.508775][ T10] usb 9-1: Product: syz [ 1262.513021][ T10] usb 9-1: Manufacturer: syz [ 1262.572935][ T10] usb 9-1: SerialNumber: syz [ 1262.818583][ T10] usb 9-1: 0:2 : does not exist [ 1262.989328][ T10] usb 9-1: 5:0: failed to get current value for ch 0 (-22) [ 1263.015200][T17428] netlink: 'syz.3.3080': attribute type 1 has an invalid length. [ 1263.764548][ T10] usb 9-1: USB disconnect, device number 26 [ 1263.971249][T17426] orangefs_mount: mount request failed with -4 [ 1264.000644][T14233] udevd[14233]: error opening ATTR{/sys/devices/platform/dummy_hcd.8/usb9/9-1/9-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1266.154960][T17172] usb 5-1: new high-speed USB device number 40 using dummy_hcd [ 1266.214204][T17461] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1266.242698][T17461] 9pnet: Unknown protocol version 9p [ 1266.657550][T17172] usb 5-1: Using ep0 maxpacket: 32 [ 1266.686485][T17172] usb 5-1: config index 0 descriptor too short (expected 256, got 36) [ 1266.735983][T17172] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1266.917919][T17172] usb 5-1: config 0 has no interfaces? [ 1266.975993][T17172] usb 5-1: New USB device found, idVendor=056a, idProduct=0094, bcdDevice= 0.00 [ 1267.421155][T17172] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1267.453170][T17172] usb 5-1: config 0 descriptor?? [ 1267.821665][ T5939] IPVS: starting estimator thread 0... [ 1267.847526][T17172] usb 5-1: string descriptor 0 read error: -71 [ 1267.889281][T17172] usb 5-1: USB disconnect, device number 40 [ 1267.931273][T17475] IPVS: using max 44 ests per chain, 105600 per kthread [ 1268.130563][T17482] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3095'. [ 1268.997495][ T5939] usb 5-1: new full-speed USB device number 41 using dummy_hcd [ 1269.127648][ T5939] usb 5-1: device descriptor read/64, error -71 [ 1269.313803][T17494] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3099'. [ 1269.380293][ T5939] usb 5-1: new full-speed USB device number 42 using dummy_hcd [ 1269.495010][T17496] FAULT_INJECTION: forcing a failure. [ 1269.495010][T17496] name failslab, interval 1, probability 0, space 0, times 0 [ 1269.512567][T17496] CPU: 0 UID: 0 PID: 17496 Comm: syz.6.3100 Not tainted 6.16.0-syzkaller #0 PREEMPT(full) [ 1269.512598][T17496] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 1269.512610][T17496] Call Trace: [ 1269.512619][T17496] [ 1269.512628][T17496] dump_stack_lvl+0x189/0x250 [ 1269.512657][T17496] ? __pfx____ratelimit+0x10/0x10 [ 1269.512680][T17496] ? __pfx_dump_stack_lvl+0x10/0x10 [ 1269.512702][T17496] ? __pfx__printk+0x10/0x10 [ 1269.512735][T17496] ? __pfx___might_resched+0x10/0x10 [ 1269.512757][T17496] ? fs_reclaim_acquire+0x7d/0x100 [ 1269.512787][T17496] should_fail_ex+0x414/0x560 [ 1269.512815][T17496] should_failslab+0xa8/0x100 [ 1269.512839][T17496] kmem_cache_alloc_noprof+0x73/0x3c0 [ 1269.512868][T17496] ? skb_clone+0x212/0x3a0 [ 1269.512894][T17496] skb_clone+0x212/0x3a0 [ 1269.512912][T17496] ? nfnetlink_rcv+0x486/0x2520 [ 1269.512937][T17496] nfnetlink_rcv+0x4b4/0x2520 [ 1269.512964][T17496] ? __dev_queue_xmit+0x1cd7/0x3a70 [ 1269.512999][T17496] ? _raw_spin_unlock_irqrestore+0x85/0x110 [ 1269.513032][T17496] ? lockdep_hardirqs_on+0x9c/0x150 [ 1269.513055][T17496] ? _raw_spin_unlock_irqrestore+0xad/0x110 [ 1269.513086][T17496] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 1269.513116][T17496] ? __pfx_nfnetlink_rcv+0x10/0x10 [ 1269.513168][T17496] ? __pfx_rcu_preempt_deferred_qs_irqrestore+0x10/0x10 [ 1269.513209][T17496] ? rcu_is_watching+0x15/0xb0 [ 1269.513233][T17496] ? rcu_read_unlock_special+0x3fe/0x4c0 [ 1269.513260][T17496] ? skb_clone+0x246/0x3a0 [ 1269.513286][T17496] ? __pfx_rcu_read_unlock_special+0x10/0x10 [ 1269.513312][T17496] ? netlink_deliver_tap+0x2e/0x1b0 [ 1269.513348][T17496] ? netlink_deliver_tap+0x2e/0x1b0 [ 1269.513385][T17496] netlink_unicast+0x75c/0x8e0 [ 1269.513425][T17496] netlink_sendmsg+0x805/0xb30 [ 1269.513464][T17496] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1269.513503][T17496] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 1269.513523][T17496] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1269.513553][T17496] __sock_sendmsg+0x21c/0x270 [ 1269.513582][T17496] ____sys_sendmsg+0x505/0x830 [ 1269.513619][T17496] ? __pfx_____sys_sendmsg+0x10/0x10 [ 1269.513657][T17496] ? import_iovec+0x74/0xa0 [ 1269.513689][T17496] ___sys_sendmsg+0x21f/0x2a0 [ 1269.513722][T17496] ? __pfx____sys_sendmsg+0x10/0x10 [ 1269.513796][T17496] ? __fget_files+0x2a/0x420 [ 1269.513818][T17496] ? __fget_files+0x3a0/0x420 [ 1269.513861][T17496] __x64_sys_sendmsg+0x19b/0x260 [ 1269.513895][T17496] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 1269.513936][T17496] ? __pfx_ksys_write+0x10/0x10 [ 1269.513953][T17496] ? rcu_is_watching+0x15/0xb0 [ 1269.513982][T17496] ? do_syscall_64+0xbe/0x3b0 [ 1269.514009][T17496] do_syscall_64+0xfa/0x3b0 [ 1269.514031][T17496] ? lockdep_hardirqs_on+0x9c/0x150 [ 1269.514051][T17496] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1269.514071][T17496] ? clear_bhb_loop+0x60/0xb0 [ 1269.514096][T17496] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1269.514115][T17496] RIP: 0033:0x7f418778ebe9 [ 1269.514135][T17496] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1269.514153][T17496] RSP: 002b:00007f41885cf038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1269.514177][T17496] RAX: ffffffffffffffda RBX: 00007f41879b5fa0 RCX: 00007f418778ebe9 [ 1269.514192][T17496] RDX: 0000000000000000 RSI: 0000200000000080 RDI: 0000000000000003 [ 1269.514204][T17496] RBP: 00007f41885cf090 R08: 0000000000000000 R09: 0000000000000000 [ 1269.514217][T17496] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1269.514229][T17496] R13: 00007f41879b6038 R14: 00007f41879b5fa0 R15: 00007ffd60528f98 [ 1269.514264][T17496] [ 1269.869759][ C0] vkms_vblank_simulate: vblank timer overrun [ 1269.876948][ T5939] usb 5-1: device descriptor read/64, error -71 [ 1269.992871][ T5939] usb usb5-port1: attempt power cycle [ 1270.145675][T17499] ubi: mtd0 is already attached to ubi31 [ 1270.388233][ T5939] usb 5-1: new full-speed USB device number 43 using dummy_hcd [ 1270.589673][ T5939] usb 5-1: device descriptor read/8, error -71 [ 1271.078007][ T5939] usb 5-1: new full-speed USB device number 44 using dummy_hcd [ 1271.123636][ T5939] usb 5-1: device descriptor read/8, error -71 [ 1271.248312][ T5939] usb usb5-port1: unable to enumerate USB device [ 1271.307404][ T10] usb 4-1: new high-speed USB device number 60 using dummy_hcd [ 1271.603251][ T10] usb 4-1: Using ep0 maxpacket: 32 [ 1271.638692][ T10] usb 4-1: config 0 interface 0 has no altsetting 0 [ 1271.737004][ T10] usb 4-1: New USB device found, idVendor=16d0, idProduct=10b8, bcdDevice=de.8e [ 1271.761122][ T10] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1271.820446][ T10] usb 4-1: Product: syz [ 1271.825413][ T10] usb 4-1: Manufacturer: syz [ 1271.853819][ T10] usb 4-1: SerialNumber: syz [ 1271.903422][ T10] usb 4-1: config 0 descriptor?? [ 1272.811105][ T10] gs_usb 4-1:0.0: Couldn't get device config: (err=-121) [ 1272.818461][ T10] gs_usb 4-1:0.0: probe with driver gs_usb failed with error -121 [ 1273.297746][ T10] usb 7-1: new high-speed USB device number 33 using dummy_hcd [ 1273.790808][ T10] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1273.790845][ T10] usb 7-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 1273.790894][ T10] usb 7-1: New USB device found, idVendor=0458, idProduct=5011, bcdDevice= 0.00 [ 1273.790921][ T10] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1273.794446][ T10] usb 7-1: config 0 descriptor?? [ 1274.897054][T17172] usb 4-1: USB disconnect, device number 60 [ 1274.978303][T17534] netlink: 'syz.8.3109': attribute type 10 has an invalid length. [ 1275.769167][ T10] usbhid 7-1:0.0: can't add hid device: -71 [ 1275.861033][ T10] usbhid 7-1:0.0: probe with driver usbhid failed with error -71 [ 1276.105070][ T10] usb 7-1: USB disconnect, device number 33 [ 1277.396855][T17563] netlink: 4 bytes leftover after parsing attributes in process `syz.7.3117'. [ 1277.433919][T17564] binder_alloc: 17561: binder_alloc_buf size 12280 failed, no address space [ 1277.457425][T17564] binder_alloc: allocated: 8 (num: 1 largest: 8), free: 8184 (num: 1 largest: 8184) [ 1277.607523][T17172] usb 4-1: new high-speed USB device number 61 using dummy_hcd [ 1277.787394][T17172] usb 4-1: Using ep0 maxpacket: 16 [ 1277.812704][T17172] usb 4-1: unable to get BOS descriptor or descriptor too short [ 1277.848233][T17172] usb 4-1: config 13 has an invalid interface number: 50 but max is 0 [ 1277.877480][T17172] usb 4-1: config 13 has no interface number 0 [ 1277.884777][T17172] usb 4-1: config 13 interface 50 altsetting 167 bulk endpoint 0x8 has invalid maxpacket 16 [ 1277.957437][T17172] usb 4-1: config 13 interface 50 has no altsetting 0 [ 1277.977243][T17172] usb 4-1: New USB device found, idVendor=1aca, idProduct=b28e, bcdDevice=92.32 [ 1277.998854][T17172] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1278.035188][T17172] usb 4-1: Product: syz [ 1278.046095][T17172] usb 4-1: Manufacturer: syz [ 1278.058365][T17172] usb 4-1: SerialNumber: syz [ 1278.077040][T17548] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 1278.333202][T17172] usb 4-1: Quirk or no altset; falling back to MIDI 1.0 [ 1278.350660][T17172] usb 4-1: MIDIStreaming interface descriptor not found [ 1278.499344][T17172] usb 4-1: USB disconnect, device number 61 [ 1278.528502][T17582] tmpfs: Bad value for 'mpol' [ 1280.665790][T17607] ubi: mtd0 is already attached to ubi31 [ 1281.636326][T17172] usb 5-1: new high-speed USB device number 45 using dummy_hcd [ 1281.932035][T17611] netlink: 8 bytes leftover after parsing attributes in process `syz.8.3128'. [ 1281.941304][T17611] netlink: 24 bytes leftover after parsing attributes in process `syz.8.3128'. [ 1282.505966][T17172] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1282.527548][T17172] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1282.554654][T17618] binder: BINDER_SET_CONTEXT_MGR already set [ 1282.560935][T17618] binder: 17614:17618 ioctl 4018620d 200000000040 returned -16 [ 1282.571668][T17617] binder_alloc: 17616: binder_alloc_buf size 12280 failed, no address space [ 1282.580640][T17617] binder_alloc: allocated: 8 (num: 1 largest: 8), free: 8184 (num: 1 largest: 8184) [ 1282.597408][T17172] usb 5-1: New USB device found, idVendor=1e7d, idProduct=30d4, bcdDevice= 0.00 [ 1282.613353][T17172] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1282.658542][T17172] usb 5-1: config 0 descriptor?? [ 1283.181081][T17625] ubi: mtd0 is already attached to ubi31 [ 1283.592341][T17172] usbhid 5-1:0.0: can't add hid device: -71 [ 1283.636455][T17172] usbhid 5-1:0.0: probe with driver usbhid failed with error -71 [ 1283.663787][T17172] usb 5-1: USB disconnect, device number 45 [ 1285.243519][ T10] usb 9-1: new high-speed USB device number 27 using dummy_hcd [ 1285.458506][ T10] usb 9-1: Using ep0 maxpacket: 16 [ 1285.524548][T17652] ubi31: detaching mtd0 [ 1285.535652][T17652] ubi31: mtd0 is detached [ 1285.600270][ T10] usb 9-1: unable to get BOS descriptor or descriptor too short [ 1285.967483][ T10] usb 9-1: config 13 has an invalid interface number: 50 but max is 0 [ 1285.975911][ T10] usb 9-1: config 13 has no interface number 0 [ 1286.028314][ T10] usb 9-1: config 13 interface 50 altsetting 167 bulk endpoint 0x8 has invalid maxpacket 16 [ 1286.043820][ T10] usb 9-1: config 13 interface 50 has no altsetting 0 [ 1286.095117][ T10] usb 9-1: New USB device found, idVendor=1aca, idProduct=b28e, bcdDevice=92.32 [ 1286.127433][ T10] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1286.135498][ T10] usb 9-1: Product: syz [ 1286.186544][ T10] usb 9-1: Manufacturer: syz [ 1286.207344][ T10] usb 9-1: SerialNumber: syz [ 1286.239232][T17635] raw-gadget.0 gadget.8: fail, usb_ep_enable returned -22 [ 1286.317811][T17172] usb 4-1: new high-speed USB device number 62 using dummy_hcd [ 1286.389737][T17659] binder_alloc: 17658: binder_alloc_buf size 12280 failed, no address space [ 1286.398759][T17659] binder_alloc: allocated: 8 (num: 1 largest: 8), free: 8184 (num: 1 largest: 8184) [ 1286.487464][T17172] usb 4-1: Using ep0 maxpacket: 8 [ 1286.503576][T17172] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1286.525965][ T10] usb 9-1: Quirk or no altset; falling back to MIDI 1.0 [ 1286.542177][T17172] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 1286.562531][ T10] usb 9-1: MIDIStreaming interface descriptor not found [ 1286.564679][T17172] usb 4-1: config 1 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 1286.615333][T17172] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 1286.651152][T17172] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 1286.670765][ T10] usb 9-1: USB disconnect, device number 27 [ 1286.700541][T17172] usb 4-1: New USB device found, idVendor=0225, idProduct=0000, bcdDevice= 0.00 [ 1286.732645][T17172] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1286.803321][T17655] raw-gadget.1 gadget.3: fail, usb_ep_enable returned -22 [ 1286.808285][T14166] udevd[14166]: error opening ATTR{/sys/devices/platform/dummy_hcd.8/usb9/9-1/9-1:13.50/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1286.863997][T17172] hub 4-1:1.0: bad descriptor, ignoring hub [ 1286.872725][T17172] hub 4-1:1.0: probe with driver hub failed with error -5 [ 1286.896825][T17172] cdc_wdm 4-1:1.0: skipping garbage [ 1286.916650][T17172] cdc_wdm 4-1:1.0: skipping garbage [ 1286.942904][T17172] cdc_wdm 4-1:1.0: cdc-wdm0: USB WDM device [ 1286.974733][T17172] cdc_wdm 4-1:1.0: Unknown control protocol [ 1287.167805][T17172] usb 4-1: USB disconnect, device number 62 [ 1287.577739][T17172] usb 5-1: new full-speed USB device number 46 using dummy_hcd [ 1287.754415][T17667] netlink: 2384 bytes leftover after parsing attributes in process `syz.8.3146'. [ 1287.758332][T17172] usb 5-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 1287.883566][T17172] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1287.962108][T17172] usb 5-1: Product: syz [ 1287.966696][T17172] usb 5-1: Manufacturer: syz [ 1288.038040][T17172] usb 5-1: SerialNumber: syz [ 1288.195162][T17172] usb 5-1: config 0 descriptor?? [ 1288.461446][T17172] usb 5-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 1289.247961][T17172] dvb_usb_rtl28xxu 5-1:0.0: probe with driver dvb_usb_rtl28xxu failed with error -71 [ 1289.267986][T17172] usb 5-1: USB disconnect, device number 46 [ 1289.878437][T17682] netlink: 8 bytes leftover after parsing attributes in process `syz.7.3152'. [ 1290.878059][T17694] netlink: 4 bytes leftover after parsing attributes in process `syz.7.3155'. [ 1291.345861][T17651] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 1291.387795][T17651] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 1292.201443][T17651] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 1292.213380][T17651] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 1292.222189][T17651] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 1294.308767][T17651] Bluetooth: hci4: command tx timeout [ 1295.667900][T17749] binder_alloc: 17746: binder_alloc_buf size 12280 failed, no address space [ 1295.676949][T17749] binder_alloc: allocated: 8 (num: 1 largest: 8), free: 8184 (num: 1 largest: 8184) [ 1295.796558][T17705] chnl_net:caif_netlink_parms(): no params data found [ 1296.387956][T17651] Bluetooth: hci4: command tx timeout [ 1296.717817][T17705] bridge0: port 1(bridge_slave_0) entered blocking state [ 1296.734616][T17705] bridge0: port 1(bridge_slave_0) entered disabled state [ 1296.750099][T17705] bridge_slave_0: entered allmulticast mode [ 1296.807400][T17705] bridge_slave_0: entered promiscuous mode [ 1296.833970][T17705] bridge0: port 2(bridge_slave_1) entered blocking state [ 1296.873592][T17705] bridge0: port 2(bridge_slave_1) entered disabled state [ 1296.937444][T17705] bridge_slave_1: entered allmulticast mode [ 1296.965842][T17705] bridge_slave_1: entered promiscuous mode [ 1297.166447][T17705] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1297.218526][T17705] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1297.380554][T17705] team0: Port device team_slave_0 added [ 1297.412758][T17705] team0: Port device team_slave_1 added [ 1297.524630][T17705] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1297.566202][T17705] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1297.627470][T17705] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1298.528764][T17705] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1298.535846][T17705] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1298.572807][T17651] Bluetooth: hci4: command tx timeout [ 1298.577467][T17705] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1298.792045][T17705] hsr_slave_0: entered promiscuous mode [ 1298.799520][T17705] hsr_slave_1: entered promiscuous mode [ 1298.806381][T17705] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 1298.815794][T17705] Cannot create hsr debugfs directory [ 1300.096422][T17779] ubi31: attaching mtd0 [ 1300.114562][T17779] ubi31: scanning is finished [ 1300.404497][ T1301] ieee802154 phy0 wpan0: encryption failed: -22 [ 1300.421388][ T1301] ieee802154 phy1 wpan1: encryption failed: -22 [ 1300.529134][T17779] ubi31: attached mtd0 (name "mtdram test device", size 0 MiB) [ 1300.536905][T17779] ubi31: PEB size: 4096 bytes (4 KiB), LEB size: 3968 bytes [ 1300.555816][T17779] ubi31: min./max. I/O unit sizes: 1/64, sub-page size 1 [ 1300.569394][T17779] ubi31: VID header offset: 64 (aligned 64), data offset: 128 [ 1300.627599][T17779] ubi31: good PEBs: 32, bad PEBs: 0, corrupted PEBs: 0 [ 1300.632819][T17651] Bluetooth: hci4: command tx timeout [ 1300.692693][ T30] kauditd_printk_skb: 29 callbacks suppressed [ 1300.692715][ T30] audit: type=1400 audit(1301.646:135): lsm=SMACK fn=smack_task_setpgid action=denied subject="w" object="_" requested=w pid=17783 comm="syz.6.3176" opid=17783 ocomm="syz.6.3176" [ 1300.748003][T17779] ubi31: user volume: 0, internal volumes: 1, max. volumes count: 23 [ 1300.772602][T17779] ubi31: max/mean erase counter: 1/1, WL threshold: 4096, image sequence number: 4139469655 [ 1300.794237][T17787] netlink: 'syz.7.3177': attribute type 1 has an invalid length. [ 1300.802607][T17779] ubi31: available PEBs: 28, total reserved PEBs: 4, PEBs reserved for bad PEB handling: 0 [ 1300.849451][T17784] ubi31: background thread "ubi_bgt31d" started, PID 17784 [ 1300.915100][T17791] kvm: user requested TSC rate below hardware speed [ 1300.957136][T17787] 8021q: adding VLAN 0 to HW filter on device bond1 [ 1301.003486][T17788] vlan2: entered allmulticast mode [ 1301.009603][T17788] macvtap0: entered allmulticast mode [ 1301.015102][T17788] veth0_macvtap: entered allmulticast mode [ 1301.031399][T17788] bond1: (slave vlan2): making interface the new active one [ 1301.053651][T17788] bond1: (slave vlan2): Enslaving as an active interface with an up link [ 1301.224448][T17705] netdevsim netdevsim3 eth3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1301.237525][ T44] usb 7-1: new high-speed USB device number 34 using dummy_hcd [ 1301.278065][T17705] netdevsim netdevsim3 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1301.509612][T17705] netdevsim netdevsim3 eth2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1301.523556][T17705] netdevsim netdevsim3 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1301.535412][ T44] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1301.576332][ T44] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1302.308118][ T44] usb 7-1: New USB device found, idVendor=1e7d, idProduct=30d4, bcdDevice= 0.00 [ 1302.398797][ T44] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1302.424318][ T44] usb 7-1: config 0 descriptor?? [ 1302.893749][ T44] usbhid 7-1:0.0: can't add hid device: -71 [ 1302.923369][ T44] usbhid 7-1:0.0: probe with driver usbhid failed with error -71 [ 1303.306466][ T44] usb 7-1: USB disconnect, device number 34 [ 1303.698806][T17705] netdevsim netdevsim3 eth1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1303.698883][T17705] netdevsim netdevsim3 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1303.836202][T17705] netdevsim netdevsim3 eth0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1303.836230][T17705] netdevsim netdevsim3 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1304.743615][T17705] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 1304.921962][T17705] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 1305.209283][T17705] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 1305.285164][T17705] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 1305.795303][T17705] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1307.702750][T17705] 8021q: adding VLAN 0 to HW filter on device team0 [ 1307.770230][ T5936] bridge0: port 1(bridge_slave_0) entered blocking state [ 1307.777504][ T5936] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1307.840427][ T5936] bridge0: port 2(bridge_slave_1) entered blocking state [ 1307.847703][ T5936] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1309.723788][T17873] infiniband syz!: set active [ 1309.723860][T17873] infiniband syz!: added team_slave_0 [ 1309.776169][T17873] RDS/IB: syz!: added [ 1309.776617][T17873] smc: adding ib device syz! with port count 1 [ 1309.776708][T17873] smc: ib device syz! port 1 has pnetid [ 1310.722522][T17705] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1311.172324][T17705] veth0_vlan: entered promiscuous mode [ 1311.204263][T17705] veth1_vlan: entered promiscuous mode [ 1311.320534][T17705] veth0_macvtap: entered promiscuous mode [ 1311.384679][T17705] veth1_macvtap: entered promiscuous mode [ 1311.411769][T17891] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1311.457881][T17891] bond0: (slave ip6tnl0): The slave device specified does not support setting the MAC address [ 1311.705928][T17891] bond0: (slave ip6tnl0): Error -95 calling set_mac_address [ 1311.736643][T17705] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1311.794515][T17705] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1311.869083][T17705] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1311.869166][T17705] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1311.869214][T17705] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1311.869260][T17705] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1312.017652][T17897] binder_alloc: 17892: binder_alloc_buf size 12280 failed, no address space [ 1312.017700][T17897] binder_alloc: allocated: 8 (num: 1 largest: 8), free: 8184 (num: 1 largest: 8184) [ 1312.690383][ T6254] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1312.721856][ T6254] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1312.989361][ T6254] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1313.300437][ T6254] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1313.442240][T17909] vlan3: entered promiscuous mode [ 1314.476745][T17931] netlink: 332 bytes leftover after parsing attributes in process `syz.3.3214'. [ 1314.602076][T12595] usb 9-1: new high-speed USB device number 28 using dummy_hcd [ 1314.665592][T17931] netlink: 'syz.3.3214': attribute type 9 has an invalid length. [ 1314.817773][T12595] usb 9-1: Using ep0 maxpacket: 16 [ 1314.854156][T12595] usb 9-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1315.415543][T12595] usb 9-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 1315.448110][T17931] netlink: 108 bytes leftover after parsing attributes in process `syz.3.3214'. [ 1315.479696][T12595] usb 9-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 1315.479732][T12595] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1315.479754][T12595] usb 9-1: Product: syz [ 1315.479770][T12595] usb 9-1: Manufacturer: syz [ 1315.479787][T12595] usb 9-1: SerialNumber: syz [ 1315.494860][T17931] netlink: 32 bytes leftover after parsing attributes in process `syz.3.3214'. [ 1315.566875][T17937] loop9: detected capacity change from 0 to 7 [ 1315.615241][T14233] Dev loop9: unable to read RDB block 7 [ 1315.615299][T14233] loop9: AHDI p1 p2 p3 [ 1315.615365][T14233] loop9: partition table partially beyond EOD, truncated [ 1315.616588][T14233] loop9: p1 start 1601398130 is beyond EOD, truncated [ 1315.618277][T14233] loop9: p2 start 1702059890 is beyond EOD, truncated [ 1315.655861][T17937] Dev loop9: unable to read RDB block 7 [ 1315.655903][T17937] loop9: AHDI p1 p2 p3 [ 1315.655936][T17937] loop9: partition table partially beyond EOD, truncated [ 1315.656245][T17937] loop9: p1 start 1601398130 is beyond EOD, truncated [ 1315.656270][T17937] loop9: p2 start 1702059890 is beyond EOD, truncated [ 1315.777867][T12595] usb 9-1: 0:2 : does not exist [ 1315.784809][T12595] usb 9-1: 5:0: failed to get current value for ch 0 (-22) [ 1316.107736][ T10] usb 5-1: new high-speed USB device number 47 using dummy_hcd [ 1316.210095][T17942] ubi: mtd0 is already attached to ubi31 [ 1316.393519][ T10] usb 5-1: config 0 has an invalid interface number: 133 but max is 0 [ 1316.393551][ T10] usb 5-1: config 0 has an invalid descriptor of length 152, skipping remainder of the config [ 1316.393564][ T10] usb 5-1: config 0 has no interface number 0 [ 1316.393591][ T10] usb 5-1: config 0 interface 133 altsetting 0 endpoint 0xB has invalid maxpacket 30183, setting to 64 [ 1316.393611][ T10] usb 5-1: config 0 interface 133 altsetting 0 endpoint 0x1 has an invalid bInterval 75, changing to 10 [ 1316.393628][ T10] usb 5-1: config 0 interface 133 altsetting 0 endpoint 0xA has invalid maxpacket 512, setting to 64 [ 1316.393644][ T10] usb 5-1: config 0 interface 133 altsetting 0 endpoint 0x7 has invalid maxpacket 1023, setting to 64 [ 1316.393660][ T10] usb 5-1: config 0 interface 133 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 1316.393674][ T10] usb 5-1: config 0 interface 133 altsetting 0 has a duplicate endpoint with address 0x9, skipping [ 1316.393688][ T10] usb 5-1: config 0 interface 133 altsetting 0 endpoint 0x6 has invalid maxpacket 512, setting to 64 [ 1316.393704][ T10] usb 5-1: config 0 interface 133 altsetting 0 has a duplicate endpoint with address 0x6, skipping [ 1316.393717][ T10] usb 5-1: config 0 interface 133 altsetting 0 has 9 endpoint descriptors, different from the interface descriptor's value: 12 [ 1316.396413][ T10] usb 5-1: New USB device found, idVendor=1460, idProduct=9150, bcdDevice= 8.65 [ 1316.396445][ T10] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1316.396465][ T10] usb 5-1: Product: syz [ 1316.396482][ T10] usb 5-1: Manufacturer: syz [ 1316.396498][ T10] usb 5-1: SerialNumber: syz [ 1316.408411][ T10] usb 5-1: config 0 descriptor?? [ 1316.690073][T12595] usb 9-1: USB disconnect, device number 28 [ 1316.803582][T14257] udevd[14257]: error opening ATTR{/sys/devices/platform/dummy_hcd.8/usb9/9-1/9-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1317.444371][T17944] binder: BINDER_SET_CONTEXT_MGR already set [ 1317.450590][T17944] binder: 17943:17944 ioctl 4018620d 200000000040 returned -16 [ 1319.396517][T17959] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 1320.043953][T17971] netlink: 24 bytes leftover after parsing attributes in process `syz.6.3224'. [ 1320.070167][T17966] netlink: 212376 bytes leftover after parsing attributes in process `syz.6.3224'. [ 1320.300345][T12688] usb 5-1: USB disconnect, device number 47 [ 1320.592851][ T10] usb 7-1: new high-speed USB device number 35 using dummy_hcd [ 1320.678433][T17986] netlink: 28 bytes leftover after parsing attributes in process `syz.4.3232'. [ 1320.688073][T17986] netlink: 28 bytes leftover after parsing attributes in process `syz.4.3232'. [ 1320.777090][T17988] binder: BINDER_SET_CONTEXT_MGR already set [ 1320.783588][T17988] binder: 17983:17988 ioctl 4018620d 200000000040 returned -16 [ 1321.217440][ T10] usb 7-1: Using ep0 maxpacket: 32 [ 1321.245950][ T10] usb 7-1: New USB device found, idVendor=1e7d, idProduct=2dbe, bcdDevice= 0.00 [ 1321.269933][ T10] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1321.378083][ T10] usb 7-1: config 0 descriptor?? [ 1322.974953][ T10] konepure 0003:1E7D:2DBE.000F: hidraw0: USB HID v1.01 Device [HID 1e7d:2dbe] on usb-dummy_hcd.6-1/input0 [ 1322.990051][ T10] usb 7-1: USB disconnect, device number 35 [ 1324.402389][T18005] fido_id[18005]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.6/usb7/report_descriptor': No such file or directory [ 1324.441519][T18020] netlink: 8 bytes leftover after parsing attributes in process `syz.6.3239'. [ 1324.497146][T18020] netlink: 8 bytes leftover after parsing attributes in process `syz.6.3239'. [ 1324.525153][T18020] netlink: 4 bytes leftover after parsing attributes in process `syz.6.3239'. [ 1325.195239][T11224] usb 4-1: new full-speed USB device number 63 using dummy_hcd [ 1325.419197][T11224] usb 4-1: not running at top speed; connect to a high speed hub [ 1325.440095][T11224] usb 4-1: config 0 interface 0 has no altsetting 0 [ 1325.463485][T11224] usb 4-1: New USB device found, idVendor=05ac, idProduct=0272, bcdDevice=2b.5c [ 1325.619761][T18041] binder: BINDER_SET_CONTEXT_MGR already set [ 1325.628364][T18041] binder: 18035:18041 ioctl 4018620d 200000000040 returned -16 [ 1325.636256][T11224] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1325.636288][T11224] usb 4-1: Product: syz [ 1325.636304][T11224] usb 4-1: Manufacturer: syz [ 1325.636322][T11224] usb 4-1: SerialNumber: syz [ 1325.649602][T11224] usb 4-1: config 0 descriptor?? [ 1326.645331][T18029] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1326.654791][T18029] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1326.705016][T11224] input: bcm5974 as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/input/input23 [ 1326.926833][ T5189] bcm5974 4-1:0.0: could not read from device [ 1327.032570][ T5189] bcm5974 4-1:0.0: could not read from device [ 1327.054052][T11224] usb 4-1: USB disconnect, device number 63 [ 1328.996321][T18065] netlink: 12 bytes leftover after parsing attributes in process `syz.7.3255'. [ 1329.191753][T18065] vlan3: entered promiscuous mode [ 1329.435885][T18070] program syz.3.3256 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 1329.597383][T18074] netlink: 332 bytes leftover after parsing attributes in process `syz.8.3257'. [ 1329.627563][T18074] netlink: 'syz.8.3257': attribute type 9 has an invalid length. [ 1329.635573][T18074] netlink: 108 bytes leftover after parsing attributes in process `syz.8.3257'. [ 1329.717589][T18074] netlink: 32 bytes leftover after parsing attributes in process `syz.8.3257'. [ 1329.966889][T18084] netlink: 8 bytes leftover after parsing attributes in process `syz.6.3261'. [ 1329.976233][T18084] netlink: 'syz.6.3261': attribute type 5 has an invalid length. [ 1329.984283][T18084] netlink: 20 bytes leftover after parsing attributes in process `syz.6.3261'. [ 1330.159793][T17172] usb 5-1: new high-speed USB device number 48 using dummy_hcd [ 1330.407556][T17172] usb 5-1: device descriptor read/64, error -71 [ 1330.717875][T17172] usb 5-1: new high-speed USB device number 49 using dummy_hcd [ 1330.794582][T18089] netlink: 20 bytes leftover after parsing attributes in process `syz.3.3262'. [ 1330.982920][T18089] netlink: 'syz.3.3262': attribute type 6 has an invalid length. [ 1330.994785][T18089] netlink: 36 bytes leftover after parsing attributes in process `syz.3.3262'. [ 1331.117422][T17172] usb 5-1: device descriptor read/64, error -71 [ 1331.240092][T17172] usb usb5-port1: attempt power cycle [ 1331.887748][T18101] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3268'. [ 1331.907503][T18101] netlink: 'syz.3.3268': attribute type 5 has an invalid length. [ 1331.915404][T18101] netlink: 20 bytes leftover after parsing attributes in process `syz.3.3268'. [ 1331.965849][T18101] netdevsim netdevsim3 netdevsim0: set [1, 1] type 2 family 0 port 256 - 0 [ 1331.975371][T18101] netdevsim netdevsim3 netdevsim1: set [1, 1] type 2 family 0 port 256 - 0 [ 1331.986902][T18101] netdevsim netdevsim3 netdevsim2: set [1, 1] type 2 family 0 port 256 - 0 [ 1331.996542][T18101] netdevsim netdevsim3 netdevsim3: set [1, 1] type 2 family 0 port 256 - 0 [ 1332.005963][T18101] geneve2: entered promiscuous mode [ 1332.011897][T18101] geneve2: entered allmulticast mode [ 1332.097446][T17172] usb 5-1: new high-speed USB device number 50 using dummy_hcd [ 1332.138892][T17172] usb 5-1: device descriptor read/8, error -71 [ 1333.190231][T12688] usb 7-1: new high-speed USB device number 36 using dummy_hcd [ 1333.257447][T17172] usb 5-1: new high-speed USB device number 51 using dummy_hcd [ 1333.442147][T12595] usb 9-1: new high-speed USB device number 29 using dummy_hcd [ 1333.557582][T12688] usb 7-1: Using ep0 maxpacket: 16 [ 1333.592955][T12688] usb 7-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1333.621686][T12688] usb 7-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 1333.650433][T12688] usb 7-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 1333.670654][T17172] usb 5-1: device not accepting address 51, error -71 [ 1333.698503][T17172] usb usb5-port1: unable to enumerate USB device [ 1333.736424][T12688] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1333.754097][T12688] usb 7-1: Product: syz [ 1333.759557][T12688] usb 7-1: Manufacturer: syz [ 1333.764947][T12688] usb 7-1: SerialNumber: syz [ 1333.777924][T12595] usb 9-1: device descriptor read/64, error -71 [ 1333.855766][T18116] binder: BINDER_SET_CONTEXT_MGR already set [ 1333.862331][T18116] binder: 18112:18116 ioctl 4018620d 200000000040 returned -16 [ 1334.000471][T12688] usb 7-1: 0:2 : does not exist [ 1334.017068][T12688] usb 7-1: 5:0: failed to get current value for ch 0 (-22) [ 1334.047522][T12595] usb 9-1: new high-speed USB device number 30 using dummy_hcd [ 1334.061260][T12688] usb 7-1: USB disconnect, device number 36 [ 1334.176656][T14233] udevd[14233]: error opening ATTR{/sys/devices/platform/dummy_hcd.6/usb7/7-1/7-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1334.250143][T12595] usb 9-1: device descriptor read/64, error -71 [ 1334.451654][T12595] usb usb9-port1: attempt power cycle [ 1337.084011][T18138] ubi: mtd0 is already attached to ubi31 [ 1337.096907][T18138] netlink: 24 bytes leftover after parsing attributes in process `syz.3.3280'. [ 1338.611560][T18150] netlink: 12 bytes leftover after parsing attributes in process `syz.8.3284'. [ 1338.667233][T18150] vlan2: entered promiscuous mode [ 1339.730313][T18156] netlink: 20 bytes leftover after parsing attributes in process `syz.3.3286'. [ 1341.893386][T18181] ubi: mtd0 is already attached to ubi31 [ 1341.901784][T18181] netlink: 24 bytes leftover after parsing attributes in process `syz.8.3294'. [ 1343.254196][ T5903] usb 5-1: new high-speed USB device number 52 using dummy_hcd [ 1344.153695][ T5939] usb 4-1: new high-speed USB device number 64 using dummy_hcd [ 1344.169820][ T5903] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1344.258954][ T5903] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 1344.340048][ T5903] usb 5-1: New USB device found, idVendor=0458, idProduct=5011, bcdDevice= 0.00 [ 1344.357726][ T5903] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1344.396316][ T5903] usb 5-1: config 0 descriptor?? [ 1344.408294][ T5939] usb 4-1: too many configurations: 249, using maximum allowed: 8 [ 1344.671042][ T5939] usb 4-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 1344.687405][ T5939] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1344.695684][ T5939] usb 4-1: Product: syz [ 1345.882661][ T5939] usb 4-1: Manufacturer: syz [ 1345.923138][ T5939] usb 4-1: SerialNumber: syz [ 1345.994139][ T5903] usbhid 5-1:0.0: can't add hid device: -71 [ 1346.017677][ T5903] usbhid 5-1:0.0: probe with driver usbhid failed with error -71 [ 1346.043028][ T5903] usb 5-1: USB disconnect, device number 52 [ 1346.078944][ T5939] usb 4-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 1346.126347][T12688] usb 4-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 1346.137573][T11224] usb 7-1: new high-speed USB device number 37 using dummy_hcd [ 1346.227607][ T44] usb 9-1: new high-speed USB device number 32 using dummy_hcd [ 1346.307859][T11224] usb 7-1: Using ep0 maxpacket: 32 [ 1346.351925][T18213] binder_alloc: 18211: binder_alloc_buf size 12280 failed, no address space [ 1346.355444][T11224] usb 7-1: config index 0 descriptor too short (expected 256, got 36) [ 1346.370776][T18213] binder_alloc: allocated: 8 (num: 1 largest: 8), free: 8184 (num: 1 largest: 8184) [ 1346.378278][T11224] usb 7-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1346.393110][ T44] usb 9-1: Using ep0 maxpacket: 16 [ 1346.425716][T11224] usb 7-1: config 0 has no interfaces? [ 1346.434078][T11224] usb 7-1: New USB device found, idVendor=056a, idProduct=0094, bcdDevice= 0.00 [ 1346.445754][ T44] usb 9-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1346.456460][ T44] usb 9-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 1346.465791][T11224] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1346.479471][ T44] usb 9-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 1346.489003][ T44] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1346.514326][T11224] usb 7-1: config 0 descriptor?? [ 1346.530798][ T44] usb 9-1: Product: syz [ 1346.545929][ T44] usb 9-1: Manufacturer: syz [ 1346.568839][ T44] usb 9-1: SerialNumber: syz [ 1347.778538][T12688] ath9k_htc 4-1:1.0: ath9k_htc: Target is unresponsive [ 1347.850536][T12688] ath9k_htc: Failed to initialize the device [ 1347.901951][ T44] usb 9-1: 0:2 : does not exist [ 1347.935720][ T44] usb 9-1: 5:0: failed to get current value for ch 0 (-22) [ 1347.999449][T12688] usb 4-1: ath9k_htc: USB layer deinitialized [ 1348.036241][ T5941] IPVS: starting estimator thread 0... [ 1348.060645][T11224] usb 7-1: string descriptor 0 read error: -71 [ 1348.150934][T18218] IPVS: using max 46 ests per chain, 110400 per kthread [ 1348.165218][T11224] usb 7-1: USB disconnect, device number 37 [ 1348.215742][ T44] usb 9-1: USB disconnect, device number 32 [ 1348.383699][T14233] udevd[14233]: error opening ATTR{/sys/devices/platform/dummy_hcd.8/usb9/9-1/9-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1348.454011][ T5941] usb 4-1: USB disconnect, device number 64 [ 1348.509982][T18224] netlink: 56 bytes leftover after parsing attributes in process `syz.7.3305'. [ 1348.826150][T18228] netlink: 2384 bytes leftover after parsing attributes in process `syz.3.3306'. [ 1351.171644][T18250] ubi: mtd0 is already attached to ubi31 [ 1351.235289][T18250] netlink: 24 bytes leftover after parsing attributes in process `syz.6.3312'. [ 1351.818022][T18253] netlink: 'syz.8.3314': attribute type 1 has an invalid length. [ 1351.941011][T18253] 8021q: adding VLAN 0 to HW filter on device bond1 [ 1352.224425][T18257] vlan2: entered allmulticast mode [ 1352.258881][T18257] macvtap0: entered allmulticast mode [ 1352.328393][T18260] netlink: 2384 bytes leftover after parsing attributes in process `syz.6.3315'. [ 1352.344075][T18259] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1352.354261][T18259] 9pnet: Unknown protocol version 9p [ 1352.467613][T18257] veth0_macvtap: entered allmulticast mode [ 1352.565742][T18257] bond1: (slave vlan2): making interface the new active one [ 1352.655054][T18257] bond1: (slave vlan2): Enslaving as an active interface with an up link [ 1352.994375][T18263] tipc: Enabled bearer , priority 0 [ 1353.648558][T18263] syzkaller0: entered promiscuous mode [ 1353.687528][T18263] syzkaller0: entered allmulticast mode [ 1353.781379][T18263] tipc: Resetting bearer [ 1353.841479][T18262] tipc: Resetting bearer [ 1354.823285][T18278] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=557834564 (4462676512 ns) > initial count (1329094896 ns). Using initial count to start timer. [ 1357.357443][T11224] usb 5-1: new high-speed USB device number 53 using dummy_hcd [ 1357.537697][T11224] usb 5-1: Using ep0 maxpacket: 32 [ 1357.640384][T11224] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1357.738541][T11224] usb 5-1: New USB device found, idVendor=05e1, idProduct=0408, bcdDevice=25.11 [ 1357.821802][T11224] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1358.029945][T11224] usb 5-1: Product: syz [ 1358.034979][T11224] usb 5-1: Manufacturer: syz [ 1358.040374][T11224] usb 5-1: SerialNumber: syz [ 1358.152196][T11224] usb 5-1: config 0 descriptor?? [ 1358.202500][T11224] usb 5-1: no audio or video endpoints found [ 1360.932200][T12688] usb 5-1: USB disconnect, device number 53 [ 1361.854051][ T1301] ieee802154 phy0 wpan0: encryption failed: -22 [ 1361.864332][ T1301] ieee802154 phy1 wpan1: encryption failed: -22 [ 1362.763698][T18331] slcan: can't register candev [ 1362.769200][T18331] Falling back ldisc for ttyS3. [ 1364.251008][T18262] tipc: Disabling bearer [ 1364.270619][T18280] macsec3: entered promiscuous mode [ 1364.276188][T18280] macsec3: entered allmulticast mode [ 1364.281913][T18280] dummy0: entered allmulticast mode [ 1364.294165][T18280] dummy0: left allmulticast mode [ 1364.347488][ T44] usb 5-1: new high-speed USB device number 54 using dummy_hcd [ 1364.526810][ T44] usb 5-1: Using ep0 maxpacket: 32 [ 1364.558615][ T44] usb 5-1: config 0 interface 0 altsetting 2 endpoint 0x82 has invalid wMaxPacketSize 0 [ 1364.597380][ T44] usb 5-1: config 0 interface 0 altsetting 2 bulk endpoint 0x82 has invalid maxpacket 0 [ 1364.622317][ T44] usb 5-1: config 0 interface 0 has no altsetting 0 [ 1364.685296][ T44] usb 5-1: New USB device found, idVendor=16d0, idProduct=10b8, bcdDevice=de.8e [ 1364.715091][ T44] usb 5-1: New USB device strings: Mfr=229, Product=1, SerialNumber=3 [ 1364.731311][ T44] usb 5-1: Product: syz [ 1364.735713][ T44] usb 5-1: Manufacturer: syz [ 1364.743653][ T44] usb 5-1: SerialNumber: syz [ 1364.778717][ T44] usb 5-1: config 0 descriptor?? [ 1364.903577][T18357] 9pnet: p9_errstr2errno: server reported unknown error ÿÿÿÿ [ 1365.001111][T18340] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1365.010834][T18340] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1365.067496][ T44] gs_usb 5-1:0.0: Couldn't send data format (err=-71) [ 1365.074982][ T44] gs_usb 5-1:0.0: probe with driver gs_usb failed with error -71 [ 1365.132180][ T44] usb 5-1: USB disconnect, device number 54 [ 1365.345875][T12688] kernel write not supported for file bpf-prog (pid: 12688 comm: kworker/0:6) [ 1366.518177][T18409] bridge1: entered allmulticast mode [ 1367.293149][T18445] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 1368.536496][T18489] 9pnet_fd: Insufficient options for proto=fd [ 1369.647971][T18521] support for the xor transformation has been removed. [ 1370.255411][T18532] 9pnet: Could not find request transport: xen [ 1370.435213][T18543] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 1370.803168][T18550] bridge0: entered allmulticast mode [ 1371.582056][T18581] kvm: emulating exchange as write [ 1375.945542][T18615] wg2: entered promiscuous mode [ 1375.956758][T18615] wg2: entered allmulticast mode [ 1375.974304][T18619] wg2: entered promiscuous mode [ 1375.980753][T18619] wg2: entered allmulticast mode [ 1376.149855][ T5941] kernel write not supported for file bpf-prog (pid: 5941 comm: kworker/0:5) [ 1377.952749][T18665] vlan0: entered allmulticast mode [ 1377.965777][T18665] veth0_vlan: entered allmulticast mode [ 1390.965473][T18749] veth1_macvtap: left promiscuous mode [ 1390.971236][T18749] macsec0: entered promiscuous mode [ 1391.725203][T18776] ÿÿÿÿÿÿ: renamed from vlan1 [ 1391.804785][T18767] pim6reg1: entered promiscuous mode [ 1391.811250][T18767] pim6reg1: entered allmulticast mode [ 1392.094238][ T5989] Bluetooth: hci2: Frame reassembly failed (-84) [ 1392.707517][T11224] usb 9-1: new full-speed USB device number 33 using dummy_hcd [ 1392.915977][T11224] usb 9-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 512, setting to 64 [ 1392.954972][T11224] usb 9-1: config 1 interface 1 altsetting 1 endpoint 0x82 has invalid maxpacket 512, setting to 64 [ 1392.973557][T11224] usb 9-1: config 1 interface 1 altsetting 1 endpoint 0x3 has invalid maxpacket 512, setting to 64 [ 1392.989189][T11224] usb 9-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 1393.014680][T11224] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1393.023725][T11224] usb 9-1: Product: syz [ 1393.028426][T11224] usb 9-1: Manufacturer: syz [ 1393.033090][T11224] usb 9-1: SerialNumber: syz [ 1393.057550][T18788] raw-gadget.0 gadget.8: fail, usb_ep_enable returned -22 [ 1393.276343][T18788] raw-gadget.0 gadget.8: fail, usb_ep_enable returned -22 [ 1393.276523][T18805] bridge0: entered allmulticast mode [ 1393.289894][T18788] raw-gadget.0 gadget.8: fail, usb_ep_enable returned -22 [ 1393.726154][T18819] overlayfs: "xino" feature enabled using 3 upper inode bits. [ 1393.753731][T18819] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 1393.773805][T18819] overlayfs: "xino" feature enabled using 2 upper inode bits. [ 1393.901502][T18788] raw-gadget.0 gadget.8: fail, usb_ep_enable returned -22 [ 1393.919345][T18788] raw-gadget.0 gadget.8: fail, usb_ep_enable returned -22 [ 1394.140476][T11224] cdc_ncm 9-1:1.0: MAC-Address: 42:42:42:42:42:42 [ 1394.147420][T17651] Bluetooth: hci2: Opcode 0x1003 failed: -110 [ 1394.147736][T14658] Bluetooth: hci2: command 0x1003 tx timeout [ 1394.157588][T11224] cdc_ncm 9-1:1.0: dwNtbInMaxSize=16 is too small. Using 2048 [ 1394.196885][T11224] cdc_ncm 9-1:1.0: setting rx_max = 2048 [ 1394.342638][T11224] cdc_ncm 9-1:1.0: setting tx_max = 88 [ 1394.379094][T11224] cdc_ncm 9-1:1.0 usb0: register 'cdc_ncm' at usb-dummy_hcd.8-1, CDC NCM (NO ZLP), 42:42:42:42:42:42 [ 1394.563357][T12688] usb 9-1: USB disconnect, device number 33 [ 1394.585358][T12688] cdc_ncm 9-1:1.0 usb0: unregister 'cdc_ncm' usb-dummy_hcd.8-1, CDC NCM (NO ZLP) [ 1394.607450][ T5941] usb 5-1: new high-speed USB device number 55 using dummy_hcd [ 1394.778971][ T5941] usb 5-1: Using ep0 maxpacket: 32 [ 1394.790849][ T5941] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1394.818006][ T5941] usb 5-1: config 0 interface 0 altsetting 16 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1394.842994][ T5941] usb 5-1: config 0 interface 0 altsetting 16 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1394.862803][ T5941] usb 5-1: config 0 interface 0 altsetting 16 has 1 endpoint descriptor, different from the interface descriptor's value: 5 [ 1394.897376][ T5941] usb 5-1: config 0 interface 0 has no altsetting 0 [ 1394.918851][ T5941] usb 5-1: New USB device found, idVendor=044f, idProduct=b65d, bcdDevice= 0.00 [ 1394.957452][ T5941] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1394.985720][ T5941] usb 5-1: config 0 descriptor?? [ 1395.412858][ T5941] hid-thrustmaster 0003:044F:B65D.0010: reserved main item tag 0xd [ 1395.437672][ T5941] hid-thrustmaster 0003:044F:B65D.0010: hidraw0: USB HID v0.00 Device [HID 044f:b65d] on usb-dummy_hcd.4-1/input0 [ 1395.496566][ T5941] hid-thrustmaster 0003:044F:B65D.0010: Wrong number of endpoints? [ 1395.627590][ C0] hid-thrustmaster 0003:044F:B65D.0010: URB to get model id failed with error -71 [ 1395.659379][T12688] usb 5-1: USB disconnect, device number 55 [ 1395.761175][T18850] fido_id[18850]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.4/usb5/report_descriptor': No such file or directory [ 1396.017384][T18862] Invalid logical block size (-1) [ 1396.067510][T11224] usb 4-1: new high-speed USB device number 65 using dummy_hcd [ 1396.237390][T11224] usb 4-1: Using ep0 maxpacket: 16 [ 1396.259762][T11224] usb 4-1: too many endpoints for config 0 interface 0 altsetting 0: 67, using maximum allowed: 30 [ 1396.282391][T11224] usb 4-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0x1D, changing to 0xD [ 1396.303805][T11224] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0xD has an invalid bInterval 0, changing to 7 [ 1396.317610][T11224] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0xD has invalid maxpacket 57789, setting to 1024 [ 1396.334959][T11224] usb 4-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 67 [ 1396.359159][T11224] usb 4-1: New USB device found, idVendor=057e, idProduct=2019, bcdDevice= 0.00 [ 1396.371776][T11224] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1396.390164][T11224] usb 4-1: config 0 descriptor?? [ 1396.406951][T11224] usbhid 4-1:0.0: couldn't find an input interrupt endpoint [ 1396.611909][T11224] usb 4-1: USB disconnect, device number 65 [ 1396.788842][ T30] audit: type=1326 audit(1397.746:136): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=18878 comm="syz.4.3551" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f989618ebe9 code=0x0 [ 1397.500475][T11224] usb 4-1: new full-speed USB device number 66 using dummy_hcd [ 1397.680783][T11224] usb 4-1: config 0 has an invalid interface number: 214 but max is 0 [ 1397.691882][T11224] usb 4-1: config 0 has no interface number 0 [ 1397.709119][T11224] usb 4-1: config 0 interface 214 altsetting 2 endpoint 0x2 has invalid maxpacket 512, setting to 64 [ 1397.755197][T11224] usb 4-1: config 0 interface 214 has no altsetting 0 [ 1397.792182][T11224] usb 4-1: New USB device found, idVendor=07c9, idProduct=000e, bcdDevice=5d.4f [ 1397.801697][T11224] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1397.811512][T11224] usb 4-1: Product: syz [ 1397.815735][T11224] usb 4-1: Manufacturer: syz [ 1397.820866][T11224] usb 4-1: SerialNumber: syz [ 1397.871982][T11224] usb 4-1: config 0 descriptor?? [ 1397.880218][T18891] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 1398.127654][T18891] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 1399.289952][T11224] ax88179_178a 4-1:0.214 (unnamed net_device) (uninitialized): Failed to read reg index 0x0001: -32 [ 1399.606481][T18917] overlayfs: failed to clone upperpath [ 1401.033870][T18926] binder: 18925:18926 ioctl c0306201 0 returned -14 [ 1401.048837][T18928] binder: 18927:18928 ioctl 40046205 0 returned -22 [ 1401.180279][T11224] ax88179_178a 4-1:0.214 (unnamed net_device) (uninitialized): Failed to write reg index 0x0002: -71 [ 1401.201242][T11224] ax88179_178a 4-1:0.214 (unnamed net_device) (uninitialized): Failed to read reg index 0x0001: -71 [ 1401.234514][T11224] ax88179_178a 4-1:0.214 (unnamed net_device) (uninitialized): Failed to read reg index 0x0001: -71 [ 1401.255476][T11224] ax88179_178a 4-1:0.214 (unnamed net_device) (uninitialized): Failed to write reg index 0x0001: -71 [ 1401.271510][T11224] ax88179_178a 4-1:0.214 (unnamed net_device) (uninitialized): Failed to write reg index 0x001f: -71 [ 1401.324401][T11224] ax88179_178a 4-1:0.214 (unnamed net_device) (uninitialized): Failed to write reg index 0x0019: -71 [ 1401.360351][T11224] ax88179_178a 4-1:0.214 (unnamed net_device) (uninitialized): Failed to write reg index 0x001f: -71 [ 1401.374700][T11224] ax88179_178a 4-1:0.214 (unnamed net_device) (uninitialized): Failed to write reg index 0x000d: -71 [ 1401.389173][T11224] ax88179_178a 4-1:0.214 (unnamed net_device) (uninitialized): Failed to write reg index 0x000e: -71 [ 1401.453675][T11224] ax88179_178a 4-1:0.214 (unnamed net_device) (uninitialized): Failed to write reg index 0x000d: -71 [ 1401.474232][T11224] ax88179_178a 4-1:0.214 (unnamed net_device) (uninitialized): Failed to read reg index 0x000e: -71 [ 1401.501683][T11224] ax88179_178a 4-1:0.214 (unnamed net_device) (uninitialized): Failed to write reg index 0x000d: -71 [ 1401.525316][T11224] ax88179_178a 4-1:0.214 (unnamed net_device) (uninitialized): Failed to write reg index 0x000e: -71 [ 1401.542395][T11224] ax88179_178a 4-1:0.214 (unnamed net_device) (uninitialized): Failed to write reg index 0x000d: -71 [ 1401.574375][T11224] ax88179_178a 4-1:0.214 (unnamed net_device) (uninitialized): Failed to write reg index 0x000e: -71 [ 1401.593579][T11224] ax88179_178a 4-1:0.214 (unnamed net_device) (uninitialized): Failed to read reg index 0x0000: -71 [ 1401.643287][T11224] ax88179_178a 4-1:0.214 eth17: register 'ax88179_178a' at usb-dummy_hcd.3-1, AT-UMC2000 USB 3.0/USB 3.1 Gen 1 to Gigabit Ethernet Adapter, 28:a2:ec:5e:a3:e6 [ 1401.714600][T11224] usb 4-1: USB disconnect, device number 66 [ 1401.741195][T11224] ax88179_178a 4-1:0.214 eth17: unregister 'ax88179_178a' usb-dummy_hcd.3-1, AT-UMC2000 USB 3.0/USB 3.1 Gen 1 to Gigabit Ethernet Adapter [ 1401.888478][T18946] netlink: 24 bytes leftover after parsing attributes in process `syz.6.3579'. [ 1402.014915][T18946] netlink: 4 bytes leftover after parsing attributes in process `syz.6.3579'. [ 1402.024889][T18951] tipc: Can't bind to reserved service type 0 [ 1402.702258][T18974] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3590'. [ 1402.793815][T18977] netlink: 28 bytes leftover after parsing attributes in process `syz.6.3592'. [ 1402.810782][T18977] netlink: 'syz.6.3592': attribute type 7 has an invalid length. [ 1402.857423][T18977] netlink: 'syz.6.3592': attribute type 8 has an invalid length. [ 1402.879285][T18977] netlink: 4 bytes leftover after parsing attributes in process `syz.6.3592'. [ 1402.900749][T18979] netlink: 796 bytes leftover after parsing attributes in process `syz.4.3593'. [ 1402.927215][T18977] ip6gretap0: entered promiscuous mode [ 1402.935061][T18977] syz_tun: entered promiscuous mode [ 1402.944987][T18977] ip6gretap0: left promiscuous mode [ 1402.954411][T18979] unsupported nla_type 8270 [ 1402.961122][T18977] syz_tun: left promiscuous mode [ 1403.375635][T18997] openvswitch: netlink: Multiple metadata blocks provided [ 1403.803108][T19013] openvswitch: netlink: Multiple metadata blocks provided [ 1404.102059][T19027] netlink: 'syz.6.3614': attribute type 1 has an invalid length. [ 1404.132651][T19027] 8021q: adding VLAN 0 to HW filter on device bond1 [ 1404.161651][T19027] 8021q: adding VLAN 0 to HW filter on device bond1 [ 1404.169548][T19027] bond1: (slave vxcan1): The slave device specified does not support setting the MAC address [ 1404.182608][T19027] bond1: (slave vxcan1): Error -95 calling set_mac_address [ 1404.224497][T19029] veth3: entered promiscuous mode [ 1404.233962][T19029] bond1: (slave veth3): Enslaving as an active interface with a down link [ 1404.251421][T19029] veth1_to_batadv: entered allmulticast mode [ 1404.265740][T19029] bond1: (slave veth1_to_batadv): making interface the new active one [ 1404.276440][T19029] bond1: (slave veth1_to_batadv): Enslaving as an active interface with an up link [ 1405.325479][T19063] tipc: Enabled bearer , priority 0 [ 1405.346920][T19063] syzkaller0: entered promiscuous mode [ 1405.374033][T19063] syzkaller0: entered allmulticast mode [ 1405.548204][T19063] tipc: Resetting bearer [ 1405.578138][T19062] tipc: Resetting bearer [ 1405.673133][T19062] tipc: Disabling bearer [ 1406.019828][T19092] 9pnet_fd: Insufficient options for proto=fd [ 1406.100215][T19095] bridge0: trying to set multicast startup query interval below minimum, setting to 100 (1000ms) [ 1406.156958][T19083] netlink: 8 bytes leftover after parsing attributes in process `syz.7.3639'. [ 1406.752868][T19117] syz_tun: entered allmulticast mode [ 1406.765545][T19116] syz_tun: left allmulticast mode [ 1406.865865][T19126] netlink: 4 bytes leftover after parsing attributes in process `syz.6.3652'. [ 1407.653951][T19149] ieee802154 phy0 wpan0: encryption failed: -22 [ 1408.063090][T19164] openvswitch: netlink: VXLAN extension 1 has unexpected len 0 expected 4 [ 1408.167883][ T10] usb 9-1: new high-speed USB device number 34 using dummy_hcd [ 1409.080886][T19186] netlink: 60 bytes leftover after parsing attributes in process `syz.4.3680'. [ 1410.770206][ T10] usb 9-1: unable to get BOS descriptor or descriptor too short [ 1410.787800][ T10] usb 9-1: no configurations [ 1410.797415][ T10] usb 9-1: can't read configurations, error -22 [ 1412.747812][T12595] usb 9-1: new high-speed USB device number 36 using dummy_hcd [ 1413.117394][T12595] usb 9-1: device descriptor read/64, error -71 [ 1413.263682][T19235] veth1_to_batadv: entered allmulticast mode [ 1413.328390][T19237] netlink: 16 bytes leftover after parsing attributes in process `syz.4.3697'. [ 1413.412986][T12595] usb 9-1: new high-speed USB device number 37 using dummy_hcd [ 1413.567369][T12595] usb 9-1: device descriptor read/64, error -71 [ 1413.677828][T12595] usb usb9-port1: attempt power cycle [ 1413.757538][T12688] usb 5-1: new high-speed USB device number 56 using dummy_hcd [ 1413.930219][T12688] usb 5-1: config 27 interface 0 altsetting 0 has an endpoint descriptor with address 0x98, changing to 0x88 [ 1413.962202][T12688] usb 5-1: config 27 interface 0 altsetting 0 endpoint 0x88 has an invalid bInterval 0, changing to 7 [ 1413.964863][ T5936] Bluetooth: hci2: Frame reassembly failed (-84) [ 1413.977377][T12688] usb 5-1: config 27 interface 0 altsetting 0 endpoint 0xB has an invalid bInterval 0, changing to 7 [ 1413.996894][ T5936] Bluetooth: hci2: Frame reassembly failed (-84) [ 1414.003665][T12688] usb 5-1: config 27 interface 0 altsetting 0 endpoint 0xB has invalid maxpacket 1477, setting to 1024 [ 1414.003723][T12688] usb 5-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 1414.003757][T12688] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1414.047942][T12595] usb 9-1: new high-speed USB device number 38 using dummy_hcd [ 1414.054019][T19246] raw-gadget.2 gadget.4: fail, usb_ep_enable returned -22 [ 1414.071241][T12595] usb 9-1: device descriptor read/8, error -71 [ 1414.075437][T12688] usb 5-1: Quirk or no altset; falling back to MIDI 1.0 [ 1414.292887][T12688] usb 5-1: USB disconnect, device number 56 [ 1414.327789][T12595] usb 9-1: new high-speed USB device number 39 using dummy_hcd [ 1414.360689][T12595] usb 9-1: device descriptor read/8, error -71 [ 1414.478344][T12595] usb usb9-port1: unable to enumerate USB device [ 1414.913388][T19281] netlink: 60 bytes leftover after parsing attributes in process `syz.4.3716'. [ 1415.108115][T10312] Bluetooth: hci4: command 0x0406 tx timeout [ 1415.315408][T19291] tipc: Enabling of bearer rejected, failed to enable media [ 1415.999634][T17651] Bluetooth: hci2: command 0x1003 tx timeout [ 1416.007126][T14658] Bluetooth: hci2: Opcode 0x1003 failed: -110 [ 1416.781615][T19307] 9pnet_fd: Insufficient options for proto=fd [ 1416.996882][T19315] syz_tun: entered allmulticast mode [ 1417.068131][T19313] syz_tun: left allmulticast mode [ 1418.692971][T19329] tipc: Started in network mode [ 1418.704371][T19329] tipc: Node identity 8e0ef4eb7df9, cluster identity 4711 [ 1418.718700][T19329] tipc: Enabled bearer , priority 0 [ 1418.732675][T19329] syzkaller0: entered promiscuous mode [ 1418.741295][T19329] syzkaller0: entered allmulticast mode [ 1418.771231][T19329] tipc: Resetting bearer [ 1418.779472][T19328] tipc: Resetting bearer [ 1418.838229][T19328] tipc: Disabling bearer [ 1418.997394][ T10] usb 5-1: new high-speed USB device number 57 using dummy_hcd [ 1419.170168][ T10] usb 5-1: Using ep0 maxpacket: 8 [ 1419.180043][ T10] usb 5-1: config 3 has an invalid interface number: 45 but max is 0 [ 1419.197709][ T10] usb 5-1: config 3 contains an unexpected descriptor of type 0x1, skipping [ 1419.206550][ T10] usb 5-1: config 3 has no interface number 0 [ 1419.216705][ T10] usb 5-1: config 3 interface 45 altsetting 2 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 1419.235213][ T10] usb 5-1: config 3 interface 45 has no altsetting 0 [ 1419.245165][ T10] usb 5-1: New USB device found, idVendor=0582, idProduct=e6ca, bcdDevice=d3.0b [ 1419.264748][ T10] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1419.280062][ T10] usb 5-1: Product: syz [ 1419.284302][ T10] usb 5-1: Manufacturer: syz [ 1419.289899][ T10] usb 5-1: SerialNumber: syz [ 1419.451305][T19355] netlink: 8 bytes leftover after parsing attributes in process `syz.8.3745'. [ 1419.592497][ T10] usb 5-1: USB disconnect, device number 57 [ 1419.671012][T18790] udevd[18790]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:3.45/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1420.539910][T19391] ipt_REJECT: ECHOREPLY no longer supported. [ 1423.279740][ T1301] ieee802154 phy0 wpan0: encryption failed: -22 [ 1423.286567][ T1301] ieee802154 phy1 wpan1: encryption failed: -22 [ 1423.329472][T19442] syzkaller0: entered promiscuous mode [ 1423.364949][T19442] syzkaller0: entered allmulticast mode [ 1424.240362][T19465] netlink: 36 bytes leftover after parsing attributes in process `syz.6.3781'. [ 1424.787642][ T5941] usb 9-1: new high-speed USB device number 40 using dummy_hcd [ 1424.987133][ T5941] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 129, changing to 11 [ 1425.016665][ T5941] usb 9-1: New USB device found, idVendor=046d, idProduct=ca03, bcdDevice= 0.00 [ 1425.033451][ T5941] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1425.129996][ T5941] usb 9-1: config 0 descriptor?? [ 1426.324533][ T5941] usbhid 9-1:0.0: can't add hid device: -71 [ 1426.342130][ T5941] usbhid 9-1:0.0: probe with driver usbhid failed with error -71 [ 1426.394534][ T5941] usb 9-1: USB disconnect, device number 40 [ 1426.779643][T19498] tipc: Enabling of bearer rejected, failed to enable media [ 1426.857615][ T5941] usb 4-1: new high-speed USB device number 67 using dummy_hcd [ 1427.050146][ T5941] usb 4-1: Using ep0 maxpacket: 16 [ 1427.062441][ T5941] usb 4-1: config 0 has an invalid interface number: 104 but max is 1 [ 1427.082264][ T5941] usb 4-1: config 0 has an invalid interface number: 104 but max is 1 [ 1427.098893][T17172] usb 5-1: new full-speed USB device number 58 using dummy_hcd [ 1427.116777][ T5941] usb 4-1: config 0 has 1 interface, different from the descriptor's value: 2 [ 1427.147582][ T5941] usb 4-1: config 0 has no interface number 0 [ 1427.153788][ T5941] usb 4-1: config 0 interface 104 altsetting 0 endpoint 0x8 has invalid wMaxPacketSize 0 [ 1427.182052][ T5941] usb 4-1: config 0 interface 104 has no altsetting 1 [ 1427.206270][ T5941] usb 4-1: New USB device found, idVendor=1189, idProduct=0893, bcdDevice= 0.00 [ 1427.257676][ T5941] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1427.282077][ T5941] usb 4-1: Product: syz [ 1427.305402][ T5941] usb 4-1: Manufacturer: syz [ 1427.326882][ T5941] usb 4-1: SerialNumber: syz [ 1427.403669][ T5941] usb 4-1: config 0 descriptor?? [ 1427.713468][ T5941] asix 4-1:0.104 (unnamed net_device) (uninitialized): Failed to write reg index 0x0000: -71 [ 1428.054098][ T5941] asix 4-1:0.104: probe with driver asix failed with error -71 [ 1428.093165][ T5941] usb 4-1: USB disconnect, device number 67 [ 1428.171517][T17172] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 1428.188999][T17172] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1428.198952][T17172] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 1428.213091][T17172] usb 5-1: New USB device found, idVendor=05ac, idProduct=029f, bcdDevice= 0.00 [ 1428.222292][T17172] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1428.234876][T17172] usb 5-1: config 0 descriptor?? [ 1428.702253][T17172] apple 0003:05AC:029F.0011: unknown main item tag 0x0 [ 1428.719005][T17172] apple 0003:05AC:029F.0011: unknown main item tag 0x0 [ 1428.734112][T17172] apple 0003:05AC:029F.0011: unknown main item tag 0x0 [ 1428.742489][T17172] apple 0003:05AC:029F.0011: unknown main item tag 0x0 [ 1428.790960][T17172] apple 0003:05AC:029F.0011: hidraw0: USB HID v0.00 Device [HID 05ac:029f] on usb-dummy_hcd.4-1/input0 [ 1428.925452][T17172] usb 5-1: USB disconnect, device number 58 [ 1429.012167][T19540] fido_id[19540]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.4/usb5/report_descriptor': No such file or directory [ 1430.049788][T19571] ipt_REJECT: ECHOREPLY no longer supported. [ 1430.978563][T19582] netlink: 60 bytes leftover after parsing attributes in process `syz.7.3829'. [ 1432.508552][T19615] ipt_REJECT: ECHOREPLY no longer supported. [ 1433.786664][T19642] netlink: 'syz.4.3853': attribute type 49 has an invalid length. [ 1434.413425][T19655] ipt_REJECT: ECHOREPLY no longer supported. [ 1435.329274][T19661] netlink: 60 bytes leftover after parsing attributes in process `syz.8.3860'. [ 1435.462160][T19672] openvswitch: netlink: VXLAN extension 1 has unexpected len 0 expected 4 [ 1435.681746][T19680] bridge1: entered allmulticast mode [ 1435.835442][T19686] netlink: 'syz.7.3873': attribute type 1 has an invalid length. [ 1436.128002][T19686] 8021q: adding VLAN 0 to HW filter on device bond2 [ 1436.244726][T19692] 8021q: adding VLAN 0 to HW filter on device bond2 [ 1436.252470][T19692] bond2: (slave vxcan3): The slave device specified does not support setting the MAC address [ 1436.306013][T19692] bond2: (slave vxcan3): Error -95 calling set_mac_address [ 1436.518411][T19695] veth3: entered promiscuous mode [ 1436.586587][T19686] veth1_to_batadv: entered allmulticast mode [ 1436.612625][T19686] bond2: (slave veth1_to_batadv): making interface the new active one [ 1436.633650][T19686] bond2: (slave veth1_to_batadv): Enslaving as an active interface with an up link [ 1436.651386][T19711] netlink: 60 bytes leftover after parsing attributes in process `syz.6.3880'. [ 1436.692896][T19716] bridge1: entered allmulticast mode [ 1436.919578][T19730] netlink: 24 bytes leftover after parsing attributes in process `syz.4.3890'. [ 1437.197517][T17172] usb 4-1: new high-speed USB device number 68 using dummy_hcd [ 1437.349467][T17172] usb 4-1: Using ep0 maxpacket: 16 [ 1437.372025][T17172] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1437.387345][T12688] usb 9-1: new high-speed USB device number 41 using dummy_hcd [ 1437.391126][T17172] usb 4-1: config 1 interface 0 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 96 [ 1437.591664][T17172] usb 4-1: config 1 interface 0 altsetting 0 bulk endpoint 0x3 has invalid maxpacket 8 [ 1437.680343][T17172] usb 4-1: config 1 interface 0 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 18 [ 1437.826059][T17172] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 1437.886078][T17172] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 1437.990134][T17172] usb 4-1: SerialNumber: syz [ 1438.013943][T19732] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 1438.034869][T19732] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 1438.060871][T17172] hub 4-1:1.0: bad descriptor, ignoring hub [ 1438.073293][T17172] hub 4-1:1.0: probe with driver hub failed with error -5 [ 1438.257505][T12688] usb 9-1: Using ep0 maxpacket: 32 [ 1438.264979][T12688] usb 9-1: config 0 has an invalid interface number: 67 but max is 0 [ 1438.286946][T19732] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 1438.306068][T12688] usb 9-1: config 0 has no interface number 0 [ 1438.317736][T19732] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 1438.356596][T12688] usb 9-1: New USB device found, idVendor=0424, idProduct=9901, bcdDevice=c2.57 [ 1438.381113][T12688] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1438.407488][T12688] usb 9-1: Product: syz [ 1438.427385][T12688] usb 9-1: Manufacturer: syz [ 1438.437913][T12688] usb 9-1: SerialNumber: syz [ 1438.475796][T12688] usb 9-1: config 0 descriptor?? [ 1438.511169][T12688] smsc95xx v2.0.0 [ 1438.797665][T17172] cdc_ether 4-1:1.0: probe with driver cdc_ether failed with error -71 [ 1438.871870][T17172] usb 4-1: USB disconnect, device number 68 [ 1438.921271][T12688] smsc95xx 9-1:0.67 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000030: -71 [ 1438.972837][T12688] smsc95xx 9-1:0.67 (unnamed net_device) (uninitialized): Error reading E2P_CMD [ 1439.018174][T12688] smsc95xx 9-1:0.67 (unnamed net_device) (uninitialized): Failed to write reg index 0x00000014: -71 [ 1439.073789][T12688] smsc95xx 9-1:0.67: probe with driver smsc95xx failed with error -71 [ 1439.146781][T12688] usb 9-1: USB disconnect, device number 41 [ 1439.307393][T17651] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 1439.328422][T17651] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 1439.358304][T17651] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 1439.402324][T17651] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 1439.412108][T17651] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 1440.616924][T17651] Bluetooth: hci0: ACL packet too small [ 1441.092149][ T1087] netdevsim netdevsim6 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1441.125784][ T1087] netdevsim netdevsim6 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1441.142875][ T1087] netdevsim netdevsim6 netdevsim3 (unregistering): unset [1, 1] type 2 family 0 port 256 - 0 [ 1441.324988][ T1087] netdevsim netdevsim6 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1441.367918][ T1087] netdevsim netdevsim6 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1441.387330][ T1087] netdevsim netdevsim6 netdevsim2 (unregistering): unset [1, 1] type 2 family 0 port 256 - 0 [ 1441.507605][T17651] Bluetooth: hci2: command tx timeout [ 1441.686118][ T1087] netdevsim netdevsim6 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1441.732073][ T1087] netdevsim netdevsim6 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1441.743366][ T1087] netdevsim netdevsim6 netdevsim1 (unregistering): unset [1, 1] type 2 family 0 port 256 - 0 [ 1441.953110][ T1087] netdevsim netdevsim6 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1442.091308][ T1087] netdevsim netdevsim6 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1442.117095][ T1087] netdevsim netdevsim6 netdevsim0 (unregistering): unset [1, 1] type 2 family 0 port 256 - 0 [ 1443.586769][ T1087] batman_adv: batadv0: Interface deactivated: gretap1 [ 1443.596306][T17651] Bluetooth: hci2: command tx timeout [ 1443.860704][ T10] usb 9-1: new high-speed USB device number 42 using dummy_hcd [ 1444.040032][ T10] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1444.110786][ T10] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1444.175049][ T10] usb 9-1: New USB device found, idVendor=054c, idProduct=024b, bcdDevice= 0.00 [ 1444.284417][ T10] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1444.738265][T19884] ------------[ cut here ]------------ [ 1444.744708][T19884] WARNING: CPU: 0 PID: 19884 at ./include/linux/memcontrol.h:371 folio_memcg+0x1a8/0x310 [ 1444.755139][T19884] Modules linked in: [ 1444.759850][T19884] CPU: 0 UID: 0 PID: 19884 Comm: syz.3.3941 Not tainted 6.16.0-syzkaller #0 PREEMPT(full) [ 1444.770131][T19884] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 1444.780472][T19884] RIP: 0010:folio_memcg+0x1a8/0x310 [ 1444.785783][T19884] Code: 80 3c 28 00 74 08 4c 89 f7 e8 74 ca 1b 00 4d 8b 36 4c 89 f0 5b 41 5c 41 5d 41 5e 41 5f 5d e9 7f 20 65 09 cc e8 19 e3 bb ff 90 <0f> 0b 90 eb c5 44 89 e1 80 e1 07 80 c1 03 38 c1 0f 8c fe fe ff ff [ 1444.806355][T19884] RSP: 0018:ffffc900045c7250 EFLAGS: 00010287 [ 1444.812561][T19884] RAX: ffffffff820442a7 RBX: 0000000000000000 RCX: 0000000000080000 [ 1444.821288][T19884] RDX: ffffc90012c62000 RSI: 00000000000019ae RDI: 00000000000019af [ 1444.829680][T19884] RBP: 0000000000000000 R08: ffffea0001784b47 R09: 1ffffd40002f0968 [ 1444.837964][T19884] R10: dffffc0000000000 R11: fffff940002f0969 R12: ffffea0001784b70 [ 1444.846026][T19884] R13: dffffc0000000000 R14: ffff888026bf5900 R15: 0000000000000002 [ 1444.854116][T19884] FS: 00007fa3db9f66c0(0000) GS:ffff888125c57000(0000) knlGS:0000000000000000 [ 1444.863244][T19884] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 1444.870640][T19884] CR2: 0000000000000000 CR3: 000000007cf10000 CR4: 00000000003526f0 [ 1444.878788][T19884] Call Trace: [ 1444.882155][T19884] [ 1444.885220][T19884] workingset_activation+0x5f/0x4a0 [ 1444.891211][T19884] ? folio_mark_accessed+0x361/0x4a0 [ 1444.896589][T19884] folio_mark_accessed+0x3b5/0x4a0 [ 1444.902392][T19884] kvm_release_page_clean+0x9a/0xe0 [ 1444.908303][T19884] kvm_tdp_page_fault+0x2dd/0x370 [ 1444.913404][T19884] kvm_mmu_do_page_fault+0x2c5/0x640 [ 1444.919054][T19884] ? vmx_vcpu_run+0xd8b/0x25d0 [ 1444.924161][T19884] ? __pfx_kvm_mmu_do_page_fault+0x10/0x10 [ 1444.930535][T19884] ? vmx_handle_exit_irqoff+0x29e/0xad0 [ 1444.936233][T19884] kvm_mmu_page_fault+0x22f/0xb70 [ 1444.941725][T19884] ? __pfx_handle_ept_violation+0x10/0x10 [ 1444.947843][T19884] vmx_handle_exit+0x1090/0x18a0 [ 1444.952973][T19884] ? vcpu_run+0x361c/0x6f70 [ 1444.957609][T19884] ? rcu_is_watching+0x15/0xb0 [ 1444.962658][T19884] vcpu_run+0x432e/0x6f70 [ 1444.967506][T19884] ? vcpu_run+0x361c/0x6f70 [ 1444.972387][T19884] ? __pfx_vcpu_run+0x10/0x10 [ 1444.977156][T19884] ? kvm_arch_vcpu_ioctl_run+0x1f3/0x1940 [ 1444.983210][T19884] ? rcu_is_watching+0x15/0xb0 [ 1444.988197][T19884] kvm_arch_vcpu_ioctl_run+0xfc9/0x1940 [ 1444.994137][T19884] ? kvm_arch_vcpu_ioctl_run+0x1f3/0x1940 [ 1445.000145][T19884] ? __pfx_kvm_arch_vcpu_ioctl_run+0x10/0x10 [ 1445.006198][T19884] ? rcu_is_watching+0x15/0xb0 [ 1445.011498][T19884] ? look_up_lock_class+0x74/0x170 [ 1445.016691][T19884] ? register_lock_class+0x51/0x320 [ 1445.022029][T19884] ? __lock_acquire+0xab9/0xd20 [ 1445.027947][T19884] kvm_vcpu_ioctl+0x95c/0xe90 [ 1445.033014][T19884] ? __pfx_kvm_vcpu_ioctl+0x10/0x10 [ 1445.038386][T19884] ? __lock_acquire+0xab9/0xd20 [ 1445.043399][T19884] ? __asan_memset+0x22/0x50 [ 1445.048105][T19884] ? smack_file_ioctl+0x302/0x340 [ 1445.053171][T19884] ? __pfx_smack_file_ioctl+0x10/0x10 [ 1445.059055][T19884] ? __fget_files+0x2a/0x420 [ 1445.063821][T19884] ? __fget_files+0x3a0/0x420 [ 1445.068568][T19884] ? __fget_files+0x2a/0x420 [ 1445.073194][T19884] ? bpf_lsm_file_ioctl+0x9/0x20 [ 1445.078615][T19884] ? __pfx_kvm_vcpu_ioctl+0x10/0x10 [ 1445.083955][T19884] __se_sys_ioctl+0xfc/0x170 [ 1445.088702][T19884] do_syscall_64+0xfa/0x3b0 [ 1445.093290][T19884] ? lockdep_hardirqs_on+0x9c/0x150 [ 1445.098638][T19884] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1445.104773][T19884] ? clear_bhb_loop+0x60/0xb0 [ 1445.109875][T19884] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1445.116061][T19884] RIP: 0033:0x7fa3dd78ebe9 [ 1445.120618][T19884] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1445.140952][T19884] RSP: 002b:00007fa3db9f6038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1445.149656][T19884] RAX: ffffffffffffffda RBX: 00007fa3dd9b5fa0 RCX: 00007fa3dd78ebe9 [ 1445.157790][T19884] RDX: 0000000000000000 RSI: 000000000000ae80 RDI: 0000000000000008 [ 1445.165911][T19884] RBP: 00007fa3dd811e19 R08: 0000000000000000 R09: 0000000000000000 [ 1445.174009][T19884] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1445.182347][T19884] R13: 00007fa3dd9b6038 R14: 00007fa3dd9b5fa0 R15: 00007ffeffa2b498 [ 1445.190607][T19884] [ 1445.193718][T19884] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 1445.201141][T19884] CPU: 0 UID: 0 PID: 19884 Comm: syz.3.3941 Not tainted 6.16.0-syzkaller #0 PREEMPT(full) [ 1445.211172][T19884] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 1445.221577][T19884] Call Trace: [ 1445.224873][T19884] [ 1445.227828][T19884] dump_stack_lvl+0x99/0x250 [ 1445.232550][T19884] ? __asan_memcpy+0x40/0x70 [ 1445.237338][T19884] ? __pfx_dump_stack_lvl+0x10/0x10 [ 1445.242667][T19884] ? __pfx__printk+0x10/0x10 [ 1445.247496][T19884] panic+0x2db/0x790 [ 1445.251540][T19884] ? __pfx_panic+0x10/0x10 [ 1445.256044][T19884] __warn+0x31b/0x4b0 [ 1445.260058][T19884] ? folio_memcg+0x1a8/0x310 [ 1445.264678][T19884] ? folio_memcg+0x1a8/0x310 [ 1445.269287][T19884] report_bug+0x2be/0x4f0 [ 1445.273627][T19884] ? folio_memcg+0x1a8/0x310 [ 1445.278237][T19884] ? folio_memcg+0x1a8/0x310 [ 1445.282850][T19884] ? folio_memcg+0x1aa/0x310 [ 1445.287542][T19884] handle_bug+0x84/0x160 [ 1445.291804][T19884] exc_invalid_op+0x1a/0x50 [ 1445.296352][T19884] asm_exc_invalid_op+0x1a/0x20 [ 1445.301322][T19884] RIP: 0010:folio_memcg+0x1a8/0x310 [ 1445.306555][T19884] Code: 80 3c 28 00 74 08 4c 89 f7 e8 74 ca 1b 00 4d 8b 36 4c 89 f0 5b 41 5c 41 5d 41 5e 41 5f 5d e9 7f 20 65 09 cc e8 19 e3 bb ff 90 <0f> 0b 90 eb c5 44 89 e1 80 e1 07 80 c1 03 38 c1 0f 8c fe fe ff ff [ 1445.326734][T19884] RSP: 0018:ffffc900045c7250 EFLAGS: 00010287 [ 1445.332939][T19884] RAX: ffffffff820442a7 RBX: 0000000000000000 RCX: 0000000000080000 [ 1445.340980][T19884] RDX: ffffc90012c62000 RSI: 00000000000019ae RDI: 00000000000019af [ 1445.349228][T19884] RBP: 0000000000000000 R08: ffffea0001784b47 R09: 1ffffd40002f0968 [ 1445.357303][T19884] R10: dffffc0000000000 R11: fffff940002f0969 R12: ffffea0001784b70 [ 1445.365304][T19884] R13: dffffc0000000000 R14: ffff888026bf5900 R15: 0000000000000002 [ 1445.373309][T19884] ? folio_memcg+0x1a7/0x310 [ 1445.377935][T19884] workingset_activation+0x5f/0x4a0 [ 1445.383151][T19884] ? folio_mark_accessed+0x361/0x4a0 [ 1445.388464][T19884] folio_mark_accessed+0x3b5/0x4a0 [ 1445.393688][T19884] kvm_release_page_clean+0x9a/0xe0 [ 1445.398909][T19884] kvm_tdp_page_fault+0x2dd/0x370 [ 1445.404139][T19884] kvm_mmu_do_page_fault+0x2c5/0x640 [ 1445.409442][T19884] ? vmx_vcpu_run+0xd8b/0x25d0 [ 1445.414220][T19884] ? __pfx_kvm_mmu_do_page_fault+0x10/0x10 [ 1445.420237][T19884] ? vmx_handle_exit_irqoff+0x29e/0xad0 [ 1445.425809][T19884] kvm_mmu_page_fault+0x22f/0xb70 [ 1445.430955][T19884] ? __pfx_handle_ept_violation+0x10/0x10 [ 1445.436692][T19884] vmx_handle_exit+0x1090/0x18a0 [ 1445.441650][T19884] ? vcpu_run+0x361c/0x6f70 [ 1445.446226][T19884] ? rcu_is_watching+0x15/0xb0 [ 1445.451039][T19884] vcpu_run+0x432e/0x6f70 [ 1445.455405][T19884] ? vcpu_run+0x361c/0x6f70 [ 1445.460050][T19884] ? __pfx_vcpu_run+0x10/0x10 [ 1445.464753][T19884] ? kvm_arch_vcpu_ioctl_run+0x1f3/0x1940 [ 1445.470495][T19884] ? rcu_is_watching+0x15/0xb0 [ 1445.475367][T19884] kvm_arch_vcpu_ioctl_run+0xfc9/0x1940 [ 1445.480948][T19884] ? kvm_arch_vcpu_ioctl_run+0x1f3/0x1940 [ 1445.486683][T19884] ? __pfx_kvm_arch_vcpu_ioctl_run+0x10/0x10 [ 1445.492859][T19884] ? rcu_is_watching+0x15/0xb0 [ 1445.497653][T19884] ? look_up_lock_class+0x74/0x170 [ 1445.502881][T19884] ? register_lock_class+0x51/0x320 [ 1445.508145][T19884] ? __lock_acquire+0xab9/0xd20 [ 1445.513045][T19884] kvm_vcpu_ioctl+0x95c/0xe90 [ 1445.517755][T19884] ? __pfx_kvm_vcpu_ioctl+0x10/0x10 [ 1445.523079][T19884] ? __lock_acquire+0xab9/0xd20 [ 1445.528058][T19884] ? __asan_memset+0x22/0x50 [ 1445.532683][T19884] ? smack_file_ioctl+0x302/0x340 [ 1445.537734][T19884] ? __pfx_smack_file_ioctl+0x10/0x10 [ 1445.543150][T19884] ? __fget_files+0x2a/0x420 [ 1445.547777][T19884] ? __fget_files+0x3a0/0x420 [ 1445.552567][T19884] ? __fget_files+0x2a/0x420 [ 1445.557182][T19884] ? bpf_lsm_file_ioctl+0x9/0x20 [ 1445.562226][T19884] ? __pfx_kvm_vcpu_ioctl+0x10/0x10 [ 1445.567561][T19884] __se_sys_ioctl+0xfc/0x170 [ 1445.572180][T19884] do_syscall_64+0xfa/0x3b0 [ 1445.576699][T19884] ? lockdep_hardirqs_on+0x9c/0x150 [ 1445.582444][T19884] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1445.588607][T19884] ? clear_bhb_loop+0x60/0xb0 [ 1445.593475][T19884] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1445.599395][T19884] RIP: 0033:0x7fa3dd78ebe9 [ 1445.604013][T19884] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1445.624251][T19884] RSP: 002b:00007fa3db9f6038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1445.632696][T19884] RAX: ffffffffffffffda RBX: 00007fa3dd9b5fa0 RCX: 00007fa3dd78ebe9 [ 1445.640770][T19884] RDX: 0000000000000000 RSI: 000000000000ae80 RDI: 0000000000000008 [ 1445.648926][T19884] RBP: 00007fa3dd811e19 R08: 0000000000000000 R09: 0000000000000000 [ 1445.657225][T19884] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1445.665279][T19884] R13: 00007fa3dd9b6038 R14: 00007fa3dd9b5fa0 R15: 00007ffeffa2b498 [ 1445.673387][T19884] [ 1445.677216][T19884] Kernel Offset: disabled [ 1445.681672][T19884] Rebooting in 86400 seconds..