last executing test programs: 16.684211684s ago: executing program 4 (id=604): r0 = socket(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000040)={'sit0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000080)={0xffffffffffffffff, 0x0, &(0x7f00000000c0)={&(0x7f0000000280)=@ipv6_newnexthop={0x28, 0x68, 0x1, 0x0, 0x0, {0x2}, [@NHA_ID={0x8, 0x6, 0xf2}, @NHA_OIF={0x8, 0x5, r1}]}, 0x28}, 0xfffd}, 0x0) 16.542977194s ago: executing program 4 (id=606): socket$nl_netfilter(0x10, 0x3, 0xc) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000080), 0x42, 0x0) mount$fuse(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB, @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r0, &(0x7f0000006200)={0x2020, 0x0, 0x0, 0x0}, 0x2020) syz_fuse_handle_req(r0, &(0x7f00000041c0)="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", 0x2000, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000400)={0x90, 0x0, 0x1, {0x1, 0x100000000, 0x0, 0x2, 0x9, 0x0, {0x2, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa000, 0x0, r2, 0x0, 0x0, 0x8}}}, 0x0, 0x0, 0x0, 0x0}) write$FUSE_INIT(r0, &(0x7f0000000380)={0x50, 0x0, r1}, 0x50) rename(&(0x7f0000000100)='./file0/../file0/file0\x00', &(0x7f0000000140)='./file0/../file0/file0\x00') 16.22212597s ago: executing program 4 (id=608): rseq(&(0x7f00000004c0), 0x20, 0x0, 0x0) socket$inet_sctp(0x2, 0x5, 0x84) pipe2(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) syz_usb_connect$uac1(0x0, 0xa4, &(0x7f0000000080)=ANY=[@ANYBLOB="2a01000020000040b708000000000000030109029200030172e5000904000000010100000a24010000000201020c0d2407000005000000000000000c240000e9fffff5ffffffff092403f3ff000005024524", @ANYRES8=r0], 0x0) syz_open_dev$ptys(0xc, 0x3, 0x1) openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x40, 0x0) r1 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000080), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000000100), 0x0, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r1, @ANYBLOB=',rootmode=00000000000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',grou', @ANYRESDEC=0x0]) listxattr(&(0x7f0000000400)='./file0\x00', 0x0, 0x0) chown(&(0x7f0000000040)='./file0\x00', 0x0, 0xffffffffffffffff) umount2(&(0x7f0000001540)='./file0\x00', 0x2) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) ioctl$KDGKBENT(0xffffffffffffffff, 0x4b46, &(0x7f0000000200)={0x52, 0x37, 0x2}) 14.776006096s ago: executing program 4 (id=615): syz_usb_connect(0x5, 0x36, &(0x7f0000000040)={{0x12, 0x1, 0x0, 0x5d, 0xad, 0x9e, 0x10, 0x257a, 0x2607, 0x715f, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0xce, 0x0, 0x2, 0xe3, 0xb9, 0x76, 0x0, [], [{{0x9, 0x5, 0x9}}, {{0x9, 0x5, 0x2, 0x0, 0x0, 0x0, 0xfd}}]}}]}}]}}, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000380)=@newlink={0x44, 0x10, 0x401, 0x70bd28, 0x0, {}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @ip6erspan={{0xe}, {0x10, 0x2, 0x0, 0x1, [@IFLA_GRE_COLLECT_METADATA={0x4}, @IFLA_GRE_OKEY={0x8, 0x5, 0x6}]}}}]}, 0x44}}, 0x0) 12.084156209s ago: executing program 4 (id=623): r0 = syz_open_dev$vim2m(0x0, 0x1, 0x2) ioctl$vim2m_VIDIOC_ENUM_FRAMESIZES(r0, 0xc02c564a, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x3000002, 0x5d031, 0xffffffffffffffff, 0x0) ioctl$UFFDIO_API(0xffffffffffffffff, 0xc018aa3f, &(0x7f0000000600)) ioctl$UFFDIO_REGISTER(0xffffffffffffffff, 0xc020aa00, &(0x7f0000000040)={{&(0x7f0000400000/0xc00000)=nil, 0xc00000}, 0x4}) ioctl$UFFDIO_COPY(0xffffffffffffffff, 0xc028aa03, &(0x7f0000000000)={&(0x7f0000800000/0x800000)=nil, &(0x7f0000199000/0x800000)=nil, 0x800000}) 11.887218662s ago: executing program 4 (id=624): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000000)={0x26, 'aead\x00', 0x0, 0x0, 'aegis128-generic\x00'}, 0x58) r1 = accept4(r0, 0x0, 0x0, 0x0) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000200)="ad00"/16, 0x10) read$alg(r1, &(0x7f0000000080)=""/16, 0x10) recvmmsg(r1, &(0x7f0000002440), 0x3ffffffffffff67, 0x0, 0x0) r2 = socket$inet6_sctp(0xa, 0x1, 0x84) getsockopt$inet_sctp6_SCTP_STATUS(r2, 0x84, 0xe, &(0x7f00000002c0)={0x0, 0x15b7, 0x3, 0x0, 0xd, 0x7, 0x0, 0x404, {0x0, @in={{0x2, 0x4f23, @empty}}, 0x9, 0x9, 0x0, 0x4, 0x1}}, &(0x7f0000000100)=0xb0) syz_open_dev$dri(&(0x7f0000000240), 0x200, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cpuacct.usage_percpu_user\x00', 0x275a, 0x0) r4 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) waitid(0x0, 0x0, 0x0, 0x4, 0x0) r5 = syz_pidfd_open(r4, 0x0) pidfd_send_signal(r5, 0x2, 0x0, 0x0) write$binfmt_aout(r3, &(0x7f0000000000)=ANY=[@ANYRESHEX=r3], 0xc1) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x3000005, 0x4000010, r3, 0x0) chroot(&(0x7f0000000080)='./file0\x00') r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), r1) r8 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r8, 0x8933, &(0x7f0000000300)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_GET_MPATH(r6, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000400)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r7, @ANYBLOB="010027bd7000fedbdf251500000008000300aedb9aec529c653916df7208407354128fc3a41ff021791a28af5b8d08d4d6ad36a0309a14ff562fea2bfd05a114f5343de91c83276a890294a49039a474ef11e80cd8cd632536d9b2bd26a3d661e49381b1fffe18cc6e33f04ea7d3b83a6ae6a5a698c2e722576944e2c096291642e758df0f2533c4b5366f2b7abf71ea4a9f88779ef0a54c4fc64a3c61fea809efdaf38a6dbe75a01fbc2dd4b02e1a2f6ea9004288c7d9eeda9a27ec378fac63223a3bd613495ca3aa1a290d2480ace6", @ANYRES32=r9, @ANYBLOB="0a0006000802110000000000"], 0x28}, 0x1, 0x0, 0x0, 0x4c000}, 0x8000000) r10 = socket(0x1, 0x2, 0x5) socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_TIMEOUT_DEFAULT_SET(r10, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000640)={&(0x7f0000000140)=ANY=[@ANYBLOB="5c00000003080104000000000000000000000000050003008400000014000480080001400000000108000140000000ff2c000480080009b68f5bd2f80800014000000005080003400000000008000140000000000800064000000009"], 0x5c}, 0x1, 0x0, 0x0, 0x20008000}, 0x0) getsockname$packet(r10, 0x0, &(0x7f0000000100)) ioctl$NS_GET_OWNER_UID(r3, 0xb704, &(0x7f0000000500)) r11 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_EVENTS(r11, 0x84, 0xb, &(0x7f0000000280)={0x0, 0x4}, 0xe) shutdown(r11, 0x0) 6.037971732s ago: executing program 1 (id=644): r0 = syz_open_dev$vim2m(0x0, 0x1, 0x2) ioctl$vim2m_VIDIOC_ENUM_FRAMESIZES(r0, 0xc02c564a, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x3000002, 0x5d031, 0xffffffffffffffff, 0x0) ioctl$UFFDIO_API(0xffffffffffffffff, 0xc018aa3f, &(0x7f0000000600)) ioctl$UFFDIO_REGISTER(0xffffffffffffffff, 0xc020aa00, &(0x7f0000000040)={{&(0x7f0000400000/0xc00000)=nil, 0xc00000}, 0x4}) ioctl$UFFDIO_COPY(0xffffffffffffffff, 0xc028aa03, &(0x7f0000000000)={&(0x7f0000800000/0x800000)=nil, &(0x7f0000199000/0x800000)=nil, 0x800000}) 5.8321529s ago: executing program 1 (id=645): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_TCP_CONGESTION(r1, 0x6, 0xd, &(0x7f00000003c0)='dctcp\x00', 0x6) bind$inet(r1, &(0x7f0000000000)={0x2, 0x4e23, @broadcast}, 0x10) sendto$inet(r1, 0x0, 0x0, 0x200007fd, &(0x7f0000000040)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x17}}, 0x10) sendto$inet(r1, &(0x7f0000000700)="0c268a927f1f6588b967481241ba78600a34f65ac618ded8974895abeaf4b4834ff959bcecc7a95425a3a07e758044ab4ea6f7c555d88fecf90b037511bf746bec66ba", 0x994b6e03113064ae, 0x0, 0x0, 0x0) recvmsg(r1, &(0x7f0000001500)={0x0, 0xa, &(0x7f0000002200)=[{&(0x7f00000035c0)=""/4106, 0x200045ca}], 0x1, 0x0, 0xfffffffffffffee2, 0x407006}, 0x104) setsockopt$inet_mreqn(r1, 0x0, 0x20, 0x0, 0x0) sendmsg$nl_route(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000800)=@newlink={0x40, 0x10, 0x403, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x400}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @vti={{0x8}, {0x14, 0x2, 0x0, 0x1, [@IFLA_VTI_LOCAL={0x8, 0x4, @local}, @vti_common_policy=[@IFLA_VTI_OKEY={0x8, 0x3, 0x424}]]}}}]}, 0x40}}, 0x0) 4.538606918s ago: executing program 3 (id=650): r0 = syz_usb_connect(0x0, 0x24, &(0x7f00000007c0)=ANY=[@ANYBLOB="12010000ed3ec908cd0cb300ea2d010203010902120001000000000904"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) (async, rerun: 64) syz_usb_control_io(r0, 0x0, 0x0) (async, rerun: 64) syz_usb_control_io$cdc_ecm(r0, 0x0, &(0x7f00000004c0)={0x1c, &(0x7f0000000dc0)=ANY=[], 0x0, 0x0}) (async) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) (async) syz_usb_control_io$cdc_ncm(r0, 0x0, &(0x7f00000003c0)={0x44, &(0x7f0000000180)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) (async) syz_usb_control_io(r0, 0x0, 0x0) (async, rerun: 64) syz_usb_control_io(r0, 0x0, 0x0) (async, rerun: 64) syz_usb_control_io$hid(r0, 0x0, 0x0) (async, rerun: 32) r1 = socket$igmp(0x2, 0x3, 0x2) (rerun: 32) setsockopt$IPT_SO_SET_REPLACE(r1, 0x0, 0x40, &(0x7f0000000800)=@nat={'nat\x00', 0x1b, 0x5, 0x3c4, 0xd4, 0x268, 0xffffffff, 0x1c4, 0xd4, 0x330, 0x330, 0xffffffff, 0x330, 0x330, 0x5, &(0x7f0000000000), {[{{@ip={@multicast1, @empty, 0xffffff00, 0xffffffff, 'ipvlan1\x00', 'geneve0\x00', {}, {0xff}, 0x32, 0x3, 0x41}, 0x0, 0xb0, 0xd4, 0x0, {}, [@common=@set={{0x40}, {{0x2, [0x3, 0x2, 0x4, 0x3, 0x3, 0x2], 0x5, 0x6}}}]}, @common=@inet=@SYNPROXY={0x24, 'SYNPROXY\x00', 0x0, {0x2, 0xc8, 0x9}}}, {{@ip={@initdev={0xac, 0x1e, 0x1, 0x0}, @broadcast, 0xff, 0xff, 'veth1_macvtap\x00', 'veth1_to_team\x00', {}, {}, 0x32, 0x6, 0x42}, 0x0, 0xa8, 0xf0, 0x0, {}, [@common=@unspec=@quota={{0x38}, {0x1, 0x0, 0x6, {0xe1}}}]}, @unspec=@DNAT1={0x48, 'DNAT\x00', 0x1, {0x1, @ipv4=@private=0xa010100, @ipv6=@empty, @port=0x4e22, @icmp_id=0x66}}}, {{@uncond, 0x0, 0x70, 0xa4}, @DNAT0={0x34, 'DNAT\x00', 0x0, {0x1, {0x10, @local, @empty, @icmp_id=0x65, @port=0x4e21}}}}, {{@ip={@multicast1, @private=0xa010102, 0x0, 0x0, 'syz_tun\x00', 'vlan0\x00', {}, {0xff}, 0x5d, 0x3, 0x20}, 0x0, 0x94, 0xc8, 0x0, {}, [@common=@ttl={{0x24}, {0x1, 0x80}}]}, @SNAT0={0x34, 'SNAT\x00', 0x0, {0x1, {0x8, @remote, @multicast1, @icmp_id=0x65, @gre_key=0x7}}}}], {{'\x00', 0x0, 0x70, 0x94}, {0x24}}}}, 0x420) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$uac1(r0, 0x0, 0x0) (async) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$uac1(r0, 0x0, 0x0) syz_usb_control_io$printer(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) (async, rerun: 32) syz_usb_control_io$hid(r0, 0x0, 0x0) (rerun: 32) syz_usb_control_io$printer(r0, 0x0, 0x0) (async) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) (async) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$uac1(r0, 0x0, &(0x7f0000000580)={0x24, &(0x7f0000000000)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$uac1(r0, 0x0, 0x0) (async) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000340)={0x18, &(0x7f0000000200)=ANY=[], 0x0, 0x0, 0x0, 0x0}) 4.450944398s ago: executing program 1 (id=651): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000600)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb(twofish)\x00'}, 0x58) r1 = accept4(r0, 0x0, 0x0, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), r1) sendmsg$nl_route_sched_retired(r1, &(0x7f000001be80)={0x0, 0x0, &(0x7f000001be40)={&(0x7f0000008d80)=@newtfilter={0x48, 0x2c, 0x700, 0x70bd25, 0x25dfdbfd, {0x0, 0x0, 0x0, 0x0, {0xfff1, 0x3}, {0xe, 0xfff2}, {0x6, 0xc}}, [@f_rsvp6={{0xa}, {0x18, 0x2, [@TCA_RSVP_DST={0x14, 0x2, @loopback}]}}]}, 0x48}, 0x1, 0x0, 0x0, 0x80}, 0x0) 4.22909492s ago: executing program 1 (id=654): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000580)={'wlan0\x00'}) sendmsg$NL80211_CMD_PROBE_MESH_LINK(r1, 0x0, 0x0) r2 = syz_open_dev$vbi(&(0x7f0000000000), 0x1, 0x2) ioctl$VIDIOC_DQBUF(r2, 0xc04c5611, &(0x7f0000000180)=@overlay={0x0, 0x5, 0x4, 0x0, 0x0, {0x77359400}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "e73b7cdb"}}) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r3 = socket(0xa, 0x1, 0x0) close(r3) r4 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r4, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x1c, &(0x7f00000020c0)=[@in6={0xa, 0x4e21, 0x0, @mcast1, 0x34}]}, &(0x7f0000002100)=0xc) getsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r3, 0x84, 0x4, &(0x7f0000000300)={0x0, @in6={{0xa, 0x0, 0x0, @local}}}, &(0x7f0000003c00)=0x90) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x300000b, 0x4031, 0xffffffffffffffff, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000040)=0x10001) r5 = openat$hwrng(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) preadv(r5, &(0x7f0000000580)=[{&(0x7f0000000640)=""/102396, 0x18ffc}], 0x1, 0x0, 0x0) syz_open_dev$radio(0x0, 0xffffffffffffffff, 0x2) r6 = socket(0xa, 0x1, 0x0) setsockopt$IP_VS_SO_SET_ADD(r6, 0x0, 0x482, &(0x7f0000000040)={0x100000011, @remote, 0x0, 0x1, 'none\x00'}, 0x2c) r7 = openat$vimc1(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) ioctl$VIDIOC_EXPBUF(r7, 0xc0405610, &(0x7f0000000180)={0xa}) setsockopt$IP_VS_SO_SET_ADD(r6, 0x0, 0x482, &(0x7f0000000000)={0x11, @multicast1, 0x0, 0x1000002, 'lblcr\x00'}, 0x2c) setsockopt$IP_VS_SO_SET_FLUSH(r6, 0x0, 0x485, 0x0, 0x0) r8 = syz_usb_connect$cdc_ecm(0x0, 0x5c, &(0x7f0000000240)=ANY=[@ANYBLOB="12010000020000102505a1a440000000010109024a00010100000009040000160202000005241b000a05240000000d240f01000000000000000000062407000000090581034000000000090582020800000000090503"], 0x0) syz_usb_ep_read(r8, 0x0, 0x73, &(0x7f0000000000)=""/115) r9 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r9, 0xae60) r10 = ioctl$KVM_CREATE_VCPU(r9, 0xae41, 0x0) ioctl$KVM_SET_REGS(r10, 0x4090ae82, &(0x7f0000000200)={[], 0x0, 0x240310}) 4.148220471s ago: executing program 2 (id=655): syz_open_dev$vim2m(0x0, 0x1, 0x2) r0 = userfaultfd(0x801) mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x3000002, 0x5d031, 0xffffffffffffffff, 0x0) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000000600)) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000040)={{&(0x7f0000400000/0xc00000)=nil, 0xc00000}, 0x4}) ioctl$UFFDIO_COPY(r0, 0xc028aa03, &(0x7f0000000000)={&(0x7f0000800000/0x800000)=nil, &(0x7f0000199000/0x800000)=nil, 0x800000}) 3.993255189s ago: executing program 0 (id=656): syz_emit_ethernet(0x4a, &(0x7f00000000c0)={@local, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x2b}, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x0, 0x3c, 0x4, 0x0, 0x0, 0x6, 0x0, @rand_addr=0x64010108, @local}, {{0x0, 0x0, 0x41424344, 0x41424344, 0x0, 0x6, 0xa, 0x0, 0x5, 0x0, 0x0, {[@md5sig={0x13, 0x12, "000000fb000000000000801100"}]}}}}}}}, 0x0) 3.757983424s ago: executing program 2 (id=657): syz_open_dev$dri(&(0x7f0000000340), 0x8, 0x0) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x8, 0x4, &(0x7f0000000580)=ANY=[@ANYBLOB="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"], &(0x7f0000003ff6)='GPL\x00', 0x5, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @cgroup_skb, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x21e, 0x10, &(0x7f00000002c0), 0x83419149c3b785d0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48) r0 = socket(0x840000000002, 0x3, 0x100) connect$inet(r0, &(0x7f0000000080)={0x2, 0x0, @remote}, 0x10) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r1, &(0x7f0000000100)={0xa, 0x4e22, 0x0, @private1={0xfc, 0x1, '\x00', 0x1}, 0x8ef50}, 0x1c) listen(r1, 0x0) syz_emit_ethernet(0xa9, &(0x7f0000000400)=ANY=[@ANYBLOB="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"/446], 0x0) dup(0xffffffffffffffff) openat$nullb(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) fcntl$setlease(0xffffffffffffffff, 0x400, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000400)=0x1000000000010001) r2 = openat$hwrng(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) preadv(r2, &(0x7f0000000240)=[{&(0x7f0000033a80)=""/102386, 0x18ff2}], 0x1, 0x0, 0x0) syz_open_dev$vim2m(0x0, 0x0, 0x2) r3 = socket$igmp6(0xa, 0x3, 0x2) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$wireguard(&(0x7f0000000040), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_wireguard(r3, 0x8933, &(0x7f0000000080)={'wg2\x00', 0x0}) sendmsg$WG_CMD_SET_DEVICE(r4, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000380)=ANY=[@ANYBLOB="44010000", @ANYRES16=r5, @ANYBLOB="01000000000000000000010000002400030000000000000000000000000000000000020000000000000000000000000000000800050000000000060006000000000008000100", @ANYRES32=r6, @ANYBLOB="f4000880"], 0x144}}, 0x0) r7 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000002540), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r2, &(0x7f0000000140)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000600)={0xffffffffffffffff}, 0x106}}, 0x20) write$RDMA_USER_CM_CMD_LISTEN(r7, &(0x7f0000000040)={0x7, 0x8, 0xfa00, {r8}}, 0x10) sendmmsg$inet(r0, &(0x7f0000005240), 0x4000095, 0x0) setsockopt$inet_group_source_req(r0, 0x0, 0x2c, 0x0, 0x0) r9 = socket$nl_route(0x10, 0x3, 0x0) r10 = fsopen(&(0x7f0000000200)='efivarfs\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r10, 0x6, 0x0, 0x0, 0x0) sendmsg$nl_route(r9, 0x0, 0x0) 3.688174486s ago: executing program 0 (id=658): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, 0x0) sendmsg$NL80211_CMD_PROBE_MESH_LINK(r1, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000680)={&(0x7f00000005c0)={0x28, r2, 0x1, 0x0, 0x0, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_MAC={0xa}]}, 0x28}}, 0x0) r3 = syz_open_dev$vbi(&(0x7f0000000000), 0x1, 0x2) ioctl$VIDIOC_DQBUF(r3, 0xc04c5611, &(0x7f0000000180)=@overlay={0x0, 0x5, 0x4, 0x0, 0x0, {0x77359400}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "e73b7cdb"}}) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r4 = socket(0xa, 0x1, 0x0) close(r4) r5 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r5, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x1c, &(0x7f00000020c0)=[@in6={0xa, 0x4e21, 0x0, @mcast1, 0x34}]}, &(0x7f0000002100)=0xc) getsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r4, 0x84, 0x4, &(0x7f0000000300)={0x0, @in6={{0xa, 0x0, 0x0, @local}}}, &(0x7f0000003c00)=0x90) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x300000b, 0x4031, 0xffffffffffffffff, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000040)=0x10001) r6 = openat$hwrng(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) preadv(r6, &(0x7f0000000580)=[{&(0x7f0000000640)=""/102396, 0x18ffc}], 0x1, 0x0, 0x0) syz_open_dev$radio(0x0, 0xffffffffffffffff, 0x2) r7 = socket(0xa, 0x1, 0x0) setsockopt$IP_VS_SO_SET_ADD(r7, 0x0, 0x482, &(0x7f0000000040)={0x100000011, @remote, 0x0, 0x1, 'none\x00'}, 0x2c) r8 = openat$vimc1(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) ioctl$VIDIOC_EXPBUF(r8, 0xc0405610, &(0x7f0000000180)={0xa}) setsockopt$IP_VS_SO_SET_ADD(r7, 0x0, 0x482, &(0x7f0000000000)={0x11, @multicast1, 0x0, 0x1000002, 'lblcr\x00'}, 0x2c) setsockopt$IP_VS_SO_SET_FLUSH(r7, 0x0, 0x485, 0x0, 0x0) r9 = syz_usb_connect$cdc_ecm(0x0, 0x5c, &(0x7f0000000240)=ANY=[@ANYBLOB="12010000020000102505a1a440000000010109024a00010100000009040000160202000005241b000a05240000000d240f01000000000000000000062407000000090581034000000000090582020800000000090503"], 0x0) syz_usb_ep_read(r9, 0x0, 0x73, &(0x7f0000000000)=""/115) r10 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r10, 0xae60) r11 = ioctl$KVM_CREATE_VCPU(r10, 0xae41, 0x0) ioctl$KVM_SET_REGS(r11, 0x4090ae82, &(0x7f0000000200)={[], 0x0, 0x240310}) 3.500048746s ago: executing program 3 (id=659): syz_emit_ethernet(0x42, &(0x7f00000000c0)={@broadcast, @random="1704b45adbde", @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x34, 0x0, 0x0, 0x0, 0x1, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @local}, @time_exceeded={0x5, 0x0, 0x0, 0xe0, 0x0, 0xe000, {0x6, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x11, 0x0, @empty=0xac1414aa, @remote, {[@lsrr={0x83, 0x3}]}}}}}}}, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_NMI(r2, 0xae9a) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000380)={[0x400, 0x100, 0x0, 0x0, 0x0, 0x0, 0x2004c8, 0x400, 0x0, 0x0, 0xfffffffffffffffe, 0x2, 0x0, 0x100]}) preadv2(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000180)=ANY=[@ANYBLOB='@'], 0x40}}, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 3.242706617s ago: executing program 3 (id=660): syz_usb_connect(0x0, 0x36, &(0x7f00000001c0)={{0x12, 0x1, 0x0, 0x22, 0xe, 0xdf, 0x10, 0x54c, 0x6c1, 0xc287, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x2, 0x4f, 0x69, 0x96, 0x0, [], [{{0x9, 0x5, 0xf}}, {{0x9, 0x5, 0x2}}]}}]}}]}}, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) fcntl$lock(0xffffffffffffffff, 0x6, &(0x7f0000000040)={0x0, 0x0, 0x2, 0x8000}) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='cpuset.effective_cpus\x00', 0x275a, 0x0) fcntl$lock(r1, 0x26, &(0x7f0000000000)={0x1}) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='cpuset.effective_cpus\x00', 0x275a, 0x0) fcntl$lock(r2, 0x26, &(0x7f0000000000)={0x1}) close_range(r0, 0xffffffffffffffff, 0x0) 2.969154013s ago: executing program 2 (id=661): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000600)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb(twofish)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000140)="2c385aa3d49100dc6626c892b6bc436a", 0x10) r1 = accept4(r0, 0x0, 0x0, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), r1) sendmsg$nl_route_sched_retired(r1, &(0x7f000001be80)={0x0, 0x0, &(0x7f000001be40)={&(0x7f0000008d80)=@newtfilter={0xc78, 0x2c, 0x700, 0x70bd25, 0x25dfdbfd, {0x0, 0x0, 0x0, 0x0, {0xfff1, 0x3}, {0xe, 0xfff2}, {0x6, 0xc}}, [@f_rsvp6={{0xa}, {0x18, 0x2, [@TCA_RSVP_DST={0x14, 0x2, @loopback}]}}, @f_rsvp6={{0xa}, {0xc24, 0x2, [@TCA_RSVP_POLICE={0xc20, 0x5, [@TCA_POLICE_RESULT={0x8, 0x5, 0x80}, @TCA_POLICE_RATE={0x404, 0x2, [0x7f, 0x8, 0x7, 0x0, 0x3, 0xfff, 0x9, 0x9, 0xe, 0x2, 0x5, 0x3, 0x8, 0x4, 0x9, 0x1, 0x7ff, 0x9b, 0x3, 0x2, 0x5, 0x7, 0x4, 0x3, 0x1, 0x8, 0x2, 0x8, 0x8000, 0xfc, 0xf055c80, 0xd0e, 0x4627b6a0, 0x21a83034, 0x0, 0x5, 0x8, 0x2, 0xd0d, 0xfffffff9, 0x7, 0x800000, 0x1, 0x90, 0x3, 0x86, 0x9, 0x400, 0xff, 0x9, 0x1, 0x5, 0x6ec, 0x2, 0x4, 0xffffffff, 0x0, 0x7fff, 0x7, 0x3, 0x9a8b, 0x3, 0x667, 0x0, 0x400, 0x5, 0x24, 0x81, 0x80, 0x3, 0x7fffffff, 0x9, 0x3, 0x9, 0xc, 0x7, 0x1, 0x6, 0x9, 0xfff, 0xa, 0x7, 0x7, 0x7, 0x7e9a, 0x2bdb, 0x888, 0x1ff, 0xff, 0xfffffffc, 0x7ff, 0x2, 0x7, 0x1, 0xfff, 0x2, 0x401, 0x0, 0xcb, 0x7, 0x4, 0xfff, 0x3072, 0x7, 0x10000, 0x8, 0x2, 0xe2, 0x3, 0x200, 0x4d9, 0x8, 0x81, 0x1, 0x8, 0x84a, 0x5, 0x9, 0xf6, 0x7d, 0x81, 0x6, 0x0, 0xf00000, 0x7, 0x0, 0x1, 0x40, 0x7f, 0x0, 0x468, 0x2, 0x80000000, 0x9, 0x7, 0x7ff, 0x6, 0x8, 0x6, 0x9, 0xd890, 0x8, 0xb, 0x800, 0x4, 0xc000000, 0x5, 0x3, 0x6, 0x1, 0x1, 0x463b, 0x9, 0x5, 0x2, 0x5, 0x0, 0x0, 0x2, 0x4, 0x1, 0x5, 0x8000, 0x101, 0xaff1, 0x101, 0x80000001, 0x81, 0xdd84, 0x3a3d, 0x100, 0x36, 0x17b, 0x3, 0xdeb, 0x3e, 0x5, 0xa, 0x8, 0x2, 0x4, 0x800, 0x9, 0x8, 0x4e, 0xb021, 0x7ce, 0x1, 0x2, 0x4, 0xfffffffc, 0xa, 0x0, 0x8, 0x8, 0x0, 0x1, 0x9, 0x80, 0x9, 0xfbc, 0x8, 0x4, 0x9, 0xd, 0x10, 0x18000, 0x5, 0x6, 0x1, 0x4, 0x3, 0x7, 0x9, 0x401, 0xfffffff9, 0x80000000, 0x8, 0x4, 0x1, 0x51, 0x5, 0x3, 0x4, 0x5, 0x1, 0x7ff, 0x3, 0xfffffffc, 0x5, 0x5, 0x0, 0x6, 0x0, 0x92e, 0x6, 0x8001, 0xf, 0x7fff, 0x6, 0x7, 0x10001, 0x400000, 0x9, 0x9, 0x7, 0x9, 0x8, 0xff, 0xc, 0xb2, 0x8, 0x800, 0x7fffffff, 0x0, 0x1]}, @TCA_POLICE_PEAKRATE={0x404, 0x3, [0x3, 0x1, 0x1c, 0x9, 0x7, 0x0, 0x3, 0xfe, 0x9, 0x8, 0x7fffffff, 0x7f, 0x8, 0x8, 0x6, 0x2, 0x8, 0x0, 0x2c, 0x80000001, 0x72, 0x9, 0x7ff, 0x7, 0x6, 0x80, 0x2, 0xfffff119, 0x0, 0x5, 0xd4, 0x8001, 0x7ff, 0x800, 0x53bb, 0x0, 0x9, 0xf52, 0x5, 0xe09, 0xc8d6, 0x8, 0x6, 0x5, 0x1ff, 0x4, 0x6, 0x2, 0x8, 0x93c, 0xd90, 0x0, 0x6, 0x5, 0x6, 0x8000, 0x2, 0x800, 0x5, 0x0, 0x6, 0x7, 0x8, 0x5, 0x7, 0x210a4bf4, 0x2, 0xfffffff7, 0x0, 0x1, 0x100, 0xffffffff, 0x3, 0x7, 0x200, 0x50fc, 0x2, 0x5, 0xfffffffc, 0x6, 0x2, 0x3ff, 0x71bcaf8b, 0x800, 0x9, 0x0, 0x4, 0x80, 0xffffff15, 0x3, 0x80, 0x1000, 0x1, 0xb32, 0x9, 0x9, 0xfffffff9, 0x200, 0x400, 0x5e4, 0x7, 0x80, 0x80000000, 0x8, 0x8, 0x3, 0x3, 0x7f, 0xfffff000, 0x5079, 0x7, 0x0, 0x7fff, 0x4, 0xff, 0x3, 0x2, 0x2, 0x7, 0xd, 0x36a0, 0x5c6, 0x10001, 0x6, 0x1, 0x31, 0x1, 0x10001, 0x3, 0x7fff, 0x2cb, 0x401, 0x3, 0x6, 0x3, 0x8, 0x5, 0x3, 0x0, 0x7, 0x76d, 0x5, 0xc, 0x9, 0x3, 0x4, 0x8, 0x4, 0x7, 0xe, 0xc, 0x7, 0x80000001, 0x7aa9d004, 0x8, 0x10000, 0x8000, 0x5, 0x9, 0x101, 0xffffff1b, 0x3ff, 0x5, 0xa, 0x7, 0x2, 0x80000000, 0x0, 0x5, 0xffffffff, 0x10001, 0x0, 0x2, 0x0, 0x80, 0x2, 0x0, 0x5, 0x5, 0x4, 0x61, 0x1, 0x5411, 0xc, 0x20, 0xe, 0xc0, 0xa, 0x6, 0x1000, 0xa, 0x1, 0xfff, 0x2, 0xfffffff9, 0x6, 0x0, 0x3, 0x7, 0x5, 0x8, 0x0, 0x0, 0x2, 0x6, 0x2, 0x11b, 0x400, 0x2, 0x9, 0xa914, 0x3e, 0x6, 0x5, 0x5, 0x4, 0xff, 0x2, 0xa, 0x2965, 0x9, 0x3, 0x2, 0x6, 0x3, 0x9a3, 0xc8, 0x5de6358e, 0x5, 0x9, 0xff, 0x4, 0x4, 0x59, 0x9, 0x3, 0x8, 0x6, 0x5, 0x0, 0x3, 0x401, 0x3, 0x9, 0xebb6, 0x81, 0xb, 0x200, 0x1, 0x854, 0x6, 0x9, 0x597fbdf0, 0x6, 0x1, 0x6]}, @TCA_POLICE_RESULT={0x8, 0x5, 0x10000}, @TCA_POLICE_RATE={0x404, 0x2, [0x7fff, 0x8, 0x3, 0xeb16, 0xa, 0xfffff5f0, 0x7, 0xa, 0x3, 0x3, 0xc2, 0x7fff, 0x9, 0x1, 0x8, 0x7, 0x5, 0x4, 0x37, 0x6, 0x0, 0x30000000, 0x4, 0x10, 0x4, 0x6, 0x7ff, 0x7, 0x1000, 0x400, 0x3, 0x5, 0x4, 0x5, 0x6f, 0x8, 0x24c, 0x10001, 0x5, 0x7, 0x7ca4, 0x2, 0x7, 0x1, 0x4, 0x10, 0x80, 0x1ff, 0x2, 0x6, 0x134, 0x7fffffff, 0x53, 0x4bdd1cef, 0x3d320973, 0x0, 0x80000000, 0x5, 0x2, 0x2, 0x0, 0x4, 0x0, 0x9, 0x80000001, 0xfffff656, 0x6, 0x6, 0x1, 0x8, 0x0, 0x4256, 0x7ff, 0x8000, 0x8001, 0x3, 0xc8, 0x6, 0x2, 0xa5f, 0x1, 0xb, 0x9, 0x4, 0x1, 0x0, 0x8, 0x3, 0x9, 0xc, 0x8, 0x1, 0xb3, 0x5, 0x101, 0x5, 0x1, 0x6, 0xd9, 0xffffffff, 0x8, 0xb, 0x6, 0x4, 0x80000001, 0x80000000, 0x4ee, 0x2, 0x1, 0x3, 0x9, 0x9, 0x400, 0x7b, 0x8, 0x6, 0x4, 0x10000, 0x244c8d3c, 0x5, 0xd, 0xb, 0x7ff, 0x9, 0x1f, 0x8, 0x1000, 0x1, 0xfffffffa, 0x5, 0x4, 0x3, 0x401, 0x2, 0x80000000, 0xfffffffa, 0x7f4, 0x200, 0x0, 0x2, 0x0, 0x1, 0x8, 0xc, 0x2, 0x1000, 0xc, 0x2, 0x4, 0x7, 0x9, 0x3, 0x4, 0x8, 0x2, 0x5, 0xfffffff8, 0x4, 0x101, 0x4, 0x7c, 0x34, 0xf7c2, 0x8, 0x1ff, 0xfffffffa, 0x0, 0x1a5, 0xf, 0xb, 0x4e1df37a, 0x1, 0x0, 0xe81, 0xc, 0x9, 0xf335, 0x7, 0x7, 0xd, 0x200, 0xfffffffa, 0xff, 0xcf4, 0x4f8, 0x6, 0x7, 0xfffffffb, 0x81, 0xfff, 0xf, 0x0, 0xa6b6, 0x6, 0xf00000, 0x8, 0x4, 0x6, 0x4, 0xa94, 0x8, 0x8, 0xa510, 0x9, 0xfffffffe, 0x8, 0x7fff, 0x40, 0x5, 0x3, 0x0, 0x7, 0x788c, 0x2, 0x759, 0x1, 0x200, 0x1, 0x4, 0x4, 0x1, 0x7, 0xe51, 0x1, 0x6195, 0x7, 0x6b, 0xff82, 0x0, 0x100, 0x1, 0xa, 0x6, 0x6, 0x8, 0x6, 0x7cc9a233, 0x0, 0x10, 0x10001, 0x4, 0x1, 0x5, 0x4, 0x4cf, 0x6, 0x5, 0x22, 0x77, 0x8, 0x6, 0x8000, 0x401, 0x2, 0x0, 0x5]}]}]}}]}, 0xc78}, 0x1, 0x0, 0x0, 0x80}, 0x0) 2.647986323s ago: executing program 2 (id=662): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_TCP_CONGESTION(r1, 0x6, 0xd, &(0x7f00000003c0)='dctcp\x00', 0x6) bind$inet(r1, &(0x7f0000000000)={0x2, 0x4e23, @broadcast}, 0x10) sendto$inet(r1, 0x0, 0x0, 0x200007fd, &(0x7f0000000040)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x17}}, 0x10) sendto$inet(r1, &(0x7f0000000700)="0c268a927f1f6588b967481241ba78600a34f65ac618ded8974895abeaf4b4834ff959bcecc7a95425a3a07e758044ab4ea6f7c555d88fecf90b037511bf746bec66ba", 0x994b6e03113064ae, 0x0, 0x0, 0x0) recvmsg(r1, &(0x7f0000001500)={0x0, 0xa, &(0x7f0000002200)=[{&(0x7f00000035c0)=""/4106, 0x200045ca}], 0x1, 0x0, 0xfffffffffffffee2, 0x407006}, 0x104) setsockopt$inet_mreqn(r1, 0x0, 0x20, 0x0, 0x0) sendmsg$nl_route(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000800)=@newlink={0x40, 0x10, 0x403, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x400}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @vti={{0x8}, {0x14, 0x2, 0x0, 0x1, [@IFLA_VTI_LOCAL={0x8, 0x4, @local}, @vti_common_policy=[@IFLA_VTI_OKEY={0x8, 0x3, 0x424}]]}}}]}, 0x40}}, 0x0) 2.138665494s ago: executing program 1 (id=663): mknod(&(0x7f0000000040)='./file0\x00', 0x8001420, 0x0) r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e21, @empty}, 0x10) connect$inet(r0, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000340)='veno\x00', 0x5) sendto$inet(r0, &(0x7f0000000000), 0xffffffffffffff94, 0xb, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) recvfrom$inet(r0, &(0x7f0000000080)=""/8, 0xfffffffffffffd0b, 0x0, 0x0, 0xfffffffffffffd25) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_MSG_GETFLOWTABLE(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000600)={0x24, 0x17, 0xa, 0x301, 0x0, 0x0, {0x2}, [@NFTA_FLOWTABLE_FLAGS={0x0, 0x7, 0x1, 0x0, 0x1}, @NFTA_FLOWTABLE_HOOK={0xcc770d83371ea46d}]}, 0x24}, 0x1, 0x0, 0x0, 0x10}, 0x0) r2 = open$dir(&(0x7f0000000100)='./file0\x00', 0x149800, 0x0) r3 = socket$rxrpc(0x21, 0x2, 0xa) bind$rxrpc(r3, &(0x7f0000000040)=@in6={0x21, 0x0, 0x2, 0x0, {0xa, 0x0, 0x0, @loopback}}, 0x24) r4 = syz_io_uring_setup(0xed0, &(0x7f0000000080)={0x0, 0x0, 0x10300}, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r5, r6, &(0x7f00000001c0)=@IORING_OP_POLL_ADD={0x6, 0x14, 0x0, @fd=r2}) io_uring_enter(r4, 0xa3d, 0x0, 0x0, 0x0, 0xff39) linkat(r2, &(0x7f0000000000)='.\x00', r2, &(0x7f0000000200)='./file0\x00', 0x1000) r7 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000340), 0x0, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) ioctl$KVM_CHECK_EXTENSION(r7, 0xae03, 0x9f) creat(&(0x7f0000000040)='./file0\x00', 0x0) r8 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r8, 0x29, 0x40, &(0x7f00000003c0)=@raw={'raw\x00', 0x3c1, 0x3, 0x334, 0x26c, 0x2b8, 0x0, 0x160, 0x6000000, 0x26c, 0x3a8, 0x3a8, 0x26c, 0x3a8, 0x3, 0x0, {[{{@uncond, 0x0, 0xf8, 0x160, 0x0, {0xd2030000}, [@common=@frag={{0x30}}, @common=@inet=@ecn={{0x24}, {0x9}}]}, @unspec=@CT1={0x68, 'CT\x00', 0x1, {0x0, 0x0, 0x0, 0x0, 'snmp_trap\x00', 'syz0\x00'}}}, {{@uncond, 0x0, 0xa4, 0x10c}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x0, 0x0, 0x0, 0x0, 'pptp\x00', 'syz0\x00'}}}], {{'\x00', 0x0, 0xa4, 0xc8}, {0x24}}}}, 0x390) 1.654728042s ago: executing program 0 (id=664): r0 = socket$alg(0x26, 0x5, 0x0) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000140)="2c385aa3d49100dc6626c892b6bc436a", 0x10) r1 = accept4(r0, 0x0, 0x0, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), r1) sendmsg$nl_route_sched_retired(r1, &(0x7f000001be80)={0x0, 0x0, &(0x7f000001be40)={&(0x7f0000008d80)=@newtfilter={0x48, 0x2c, 0x700, 0x70bd25, 0x25dfdbfd, {0x0, 0x0, 0x0, 0x0, {0xfff1, 0x3}, {0xe, 0xfff2}, {0x6, 0xc}}, [@f_rsvp6={{0xa}, {0x18, 0x2, [@TCA_RSVP_DST={0x14, 0x2, @loopback}]}}]}, 0x48}, 0x1, 0x0, 0x0, 0x80}, 0x0) 1.359307843s ago: executing program 0 (id=666): r0 = socket$inet6(0xa, 0x800000000000002, 0x0) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x41, &(0x7f0000000200)=0x632a, 0x4) sendmmsg$inet6(r0, &(0x7f0000000e00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0) r1 = syz_io_uring_setup(0x7279, &(0x7f0000000080)={0x0, 0x0, 0x13100}, &(0x7f0000000180)=0x0, &(0x7f00000001c0)=0x0) syz_io_uring_submit(r2, r3, &(0x7f0000000040)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x3}) io_uring_enter(r1, 0x2def, 0x0, 0x0, 0x0, 0x0) 1.358843624s ago: executing program 2 (id=667): r0 = userfaultfd(0x801) mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x3000002, 0x5d031, 0xffffffffffffffff, 0x0) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000000600)) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000040)={{&(0x7f0000400000/0xc00000)=nil, 0xc00000}, 0x4}) ioctl$UFFDIO_COPY(r0, 0xc028aa03, &(0x7f0000000000)={&(0x7f0000800000/0x800000)=nil, &(0x7f0000199000/0x800000)=nil, 0x800000}) 1.358174027s ago: executing program 3 (id=668): syz_emit_ethernet(0x0, 0x0, 0x0) 995.166207ms ago: executing program 2 (id=669): r0 = openat$procfs(0xffffffffffffff9c, &(0x7f00000006c0)='/proc/schedstat\x00', 0x0, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$KVM_CREATE_DEVICE(r0, 0xc00caee0, &(0x7f0000000240)={0x8, 0xffffffffffffffff}) close(r2) r3 = syz_genetlink_get_family_id$smc(&(0x7f0000001980), 0xffffffffffffffff) sendmsg$SMC_PNETID_GET(r1, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000280)=ANY=[@ANYBLOB="14000000", @ANYRES16=r3, @ANYBLOB="1b2307bd70000000000001000000"], 0x14}}, 0x0) r4 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_TCP_REPAIR(r4, 0x6, 0x13, &(0x7f00000000c0)=0x1, 0x4) connect$inet(r4, &(0x7f0000000080)={0x2, 0x2, @loopback}, 0x10) setsockopt$inet_tcp_TCP_REPAIR(r4, 0x6, 0x13, &(0x7f00000001c0)=0xffffffffffffffff, 0x4) sendfile(r4, r0, 0x0, 0x4000000000010046) syz_genetlink_get_family_id$batadv(&(0x7f0000000040), r0) socket$nl_route(0x10, 0x3, 0x0) syz_usb_connect(0x0, 0x2d, &(0x7f0000000040)={{0x12, 0x1, 0x0, 0x98, 0xf4, 0xbf, 0x20, 0x2c42, 0x16f8, 0x7d12, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x1b, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x58, 0x0, 0x1, 0x6f, 0xe4, 0x14, 0x0, [], [{{0x9, 0x5, 0x1a, 0x0, 0x40, 0x0, 0x0, 0x10}}]}}]}}]}}, 0x0) syz_open_dev$vim2m(&(0x7f0000000000), 0x0, 0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000040)=0x10001) setsockopt$netlink_NETLINK_ADD_MEMBERSHIP(0xffffffffffffffff, 0x10e, 0xb, &(0x7f0000000000)=0x5, 0x4) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), 0xffffffffffffffff) sendmsg$NL80211_CMD_AUTHENTICATE(0xffffffffffffffff, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000100)=ANY=[@ANYBLOB=' \x00\x00\x00\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="01000000000000000000250000000c0017010000"], 0x20}}, 0x0) r6 = openat$hwrng(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) preadv(r6, &(0x7f0000000240)=[{&(0x7f0000033a80)=""/102386, 0x18ff2}], 0x1, 0x0, 0x1) r7 = syz_open_dev$evdev(&(0x7f0000000080), 0x0, 0x0) madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00304, 0x15) ioctl$EVIOCGSND(r7, 0x8040451a, &(0x7f00000001c0)=""/230) socket$inet_tcp(0x2, 0x1, 0x0) r8 = socket$inet6(0xa, 0x0, 0x0) bind$inet6(r8, &(0x7f0000f5dfe4)={0xa, 0x4e24, 0x0, @empty, 0x2}, 0xffffffffffffff91) setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x4a, &(0x7f0000000040), 0x4) fsopen(&(0x7f0000000040)='sysfs\x00', 0x0) 882.140318ms ago: executing program 3 (id=670): syz_emit_ethernet(0x42, &(0x7f00000000c0)={@broadcast, @random="1704b45adbde", @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x34, 0x0, 0x0, 0x0, 0x1, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @local}, @time_exceeded={0x5, 0x0, 0x0, 0xe0, 0x0, 0xe000, {0x6, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x11, 0x0, @empty=0xac1414aa, @remote, {[@lsrr={0x83, 0x3}]}}}}}}}, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_NMI(r2, 0xae9a) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000380)={[0x400, 0x100, 0x0, 0x0, 0x0, 0x0, 0x2004c8, 0x400, 0x0, 0x0, 0xfffffffffffffffe, 0x2, 0x0, 0x100]}) preadv2(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000180)=ANY=[@ANYBLOB='@'], 0x40}}, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 881.66465ms ago: executing program 0 (id=671): socket$nl_netfilter(0x10, 0x3, 0xc) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000080), 0x42, 0x0) mount$fuse(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=000000000000000004000', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r0, &(0x7f0000006200)={0x2020, 0x0, 0x0, 0x0}, 0x2020) syz_fuse_handle_req(r0, &(0x7f00000041c0)="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", 0x2000, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000400)={0x90, 0x0, 0x1, {0x1, 0x100000000, 0x0, 0x2, 0x9, 0x0, {0x2, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa000, 0x0, r2, 0x0, 0x0, 0x8}}}, 0x0, 0x0, 0x0, 0x0}) write$FUSE_INIT(r0, &(0x7f0000000380)={0x50, 0x0, r1}, 0x50) rename(&(0x7f0000000100)='./file0/../file0/file0\x00', &(0x7f0000000140)='./file0/../file0/file0\x00') 431.553255ms ago: executing program 0 (id=672): rseq(&(0x7f00000004c0), 0x20, 0x0, 0x0) syz_clone3(&(0x7f0000000380)={0x2000080, &(0x7f00000000c0), &(0x7f0000000140), &(0x7f0000000180), {0x22}, &(0x7f0000000240)=""/213, 0xd5, &(0x7f0000000500)=""/182, &(0x7f00000001c0)=[0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0x0], 0x6}, 0x58) socket$inet_sctp(0x2, 0x5, 0x84) pipe2(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) syz_usb_connect$uac1(0x0, 0xa4, &(0x7f0000000080)=ANY=[@ANYBLOB="2a01000020000040b708000000000000030109029200030172e5000904000000010100000a24010000000201020c0d2407000005000000000000000c240000e9fffff5ffffffff092403f3ff0000050245", @ANYRES8=r0], 0x0) r1 = syz_open_dev$ptys(0xc, 0x3, 0x1) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x40, 0x0) r4 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000080), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000000100), 0x0, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r4, @ANYBLOB=',rootmode=00000000000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) listxattr(&(0x7f0000000400)='./file0\x00', 0x0, 0x0) chown(&(0x7f0000000040)='./file0\x00', 0x0, 0xffffffffffffffff) umount2(&(0x7f0000001540)='./file0\x00', 0x2) r5 = dup3(r3, r4, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000000)={'pim6reg1\x00', 0x1a003}) ioctl$TUNSETLINK(r2, 0x400454cd, 0x305) accept4$packet(r5, &(0x7f00000000c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @remote}, &(0x7f0000000180)=0x14, 0x800) close_range(r1, r1, 0x2) r6 = socket$nl_route(0x10, 0x3, 0x0) r7 = socket$nl_route(0x10, 0x3, 0x0) sendfile(r7, r7, 0x0, 0x5) getsockopt$sock_int(r7, 0x1, 0x8, 0x0, 0x0) sendmsg$nl_route(r6, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000480)=ANY=[@ANYBLOB="2000000010c40001000000567bfcb6de0769d81fe6635185a58d00", @ANYRES32=0x0, @ANYRESHEX], 0x20}}, 0x0) ioctl$KDGKBENT(0xffffffffffffffff, 0x4b46, &(0x7f0000000200)={0x52, 0x37, 0x2}) 214.169718ms ago: executing program 1 (id=673): r0 = openat$audio(0xffffffffffffff9c, &(0x7f0000000140), 0x40000000040201, 0x0) r1 = syz_open_dev$ttys(0xc, 0x2, 0x0) ioctl$TCSBRK(r1, 0x5409, 0x1) ioctl$SNDCTL_DSP_GETCAPS(r0, 0x8004500f, &(0x7f00000002c0)) memfd_create(&(0x7f0000000000)='\x00', 0x3) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = openat$hwrng(0xffffffffffffff9c, &(0x7f000001aac0), 0x0, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000001c0)=0x5) preadv(r2, &(0x7f0000001880)=[{&(0x7f0000001a80)=""/102400, 0x19000}], 0x1, 0x4000009, 0x4) madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0x80000000e) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x400000, 0x3, &(0x7f0000000000/0x400000)=nil) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) munlockall() mbind(&(0x7f0000001000/0x800000)=nil, 0x800000, 0x0, 0x0, 0x0, 0x2) modify_ldt$write(0x1, &(0x7f0000000080), 0x10) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) socket$igmp6(0xa, 0x3, 0x2) madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00003, 0x8) bind$alg(0xffffffffffffffff, &(0x7f0000000480)={0x26, 'hash\x00', 0x0, 0x0, 'hmac(sha256)\x00'}, 0x58) accept4$alg(0xffffffffffffffff, 0x0, 0x0, 0x0) r3 = io_uring_setup(0x1694, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x10}) io_uring_register$IORING_REGISTER_BUFFERS(r3, 0x0, &(0x7f00000002c0)=[{&(0x7f0000001700)=""/4095, 0x440000}], 0x100000000000011a) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_GET_DYING(r4, &(0x7f0000001580)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x10}, 0xd4) recvmmsg$unix(0xffffffffffffffff, &(0x7f0000000400)=[{{&(0x7f0000000140), 0x6e, &(0x7f0000000280)=[{&(0x7f0000000200)=""/108, 0x6c}], 0x1}}], 0x1, 0x40, &(0x7f0000000440)={0x77359400}) syz_usb_connect(0x0, 0x2d, &(0x7f0000000100)=ANY=[@ANYBLOB="12010000183b9220b113420016580102030109021b00010000000009040000012e459e00090504"], 0x0) write$P9_RVERSION(0xffffffffffffffff, &(0x7f0000000300)=ANY=[@ANYBLOB="1300000065ffff0a00000006003950323030300c068342076176af9c9d63a0581e306728fb2110a2b832ffbc7a282b173f8318f8cfca2ae0fe809fcc02b090795b4b6ff26d8fdfac9383b7c7a900d6f04e84b889b4e198415da18849881eea68fc4a85ccb38cb83196cde811de01bed406df2beb063b6b8f5d2e71b747c44fa3a46374ff6d2e2d7cb49c36952f739d7beb2aa253409e7ecc7fa3cdb1084cc7b2793e25f4671dbbf764eecce4940a9d3a0524e36a6ca4749777edc5e61ddec508f613ba6220a3b92637ca318125852f7669532df9d798c1d3166d892a5773b4519a3e4d5d83157791e36e063a3af9135d55d9c3ced287"], 0x13) 0s ago: executing program 3 (id=674): syz_open_procfs(0x0, &(0x7f0000000040)='task\x00') recvmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) unshare(0x400) socket$rxrpc(0x21, 0x2, 0xa) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) syz_emit_ethernet(0x46, &(0x7f0000000000)=ANY=[@ANYBLOB="aaaaaaaaaaaaffffffffffff86ddf9fffffffffffffffc010000000000000000000000000000fe8000000000000000000000000000aa000000"], 0x0) openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) syz_open_dev$usbfs(&(0x7f0000000080), 0x76, 0x101301) connect$l2tp6(0xffffffffffffffff, &(0x7f0000000000)={0xa, 0x0, 0x0, @remote, 0xa}, 0x20) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000004c0), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) ioctl$SNDRV_CTL_IOCTL_ELEM_WRITE(0xffffffffffffffff, 0xc1105518, &(0x7f0000000040)={{0x0, 0x0, 0x0, 0x0, 'syz0\x00'}, 0x1, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40000]}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$IOCTL_VMCI_VERSION2(0xffffffffffffffff, 0x7a7, &(0x7f0000000040)=0x90000) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000140)=[@text32={0x20, &(0x7f0000000180)="66b80e010f00d0b0060f21a20f01c40f009b2700000066b80c008ee00f3235008000000f30b80e0000000f23d80f21f835800000a00f23f8c9b9490300000f60b932c00a00b9730200000f32328fe858b660002fb90d090000b800680000ba000000000f30", 0x65}], 0x1, 0x0, 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000140)) ioctl$KVM_RUN(r2, 0xae80, 0x0) kernel console output (not intermixed with test programs): 088736][ T6086] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 125.099835][ T6086] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 125.110047][ T6086] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 125.126171][ T6086] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 125.136889][ T6086] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 125.155635][ T6086] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 125.174640][ T6086] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 125.185514][ T35] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 125.202091][ T35] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 125.211745][ T6086] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 125.221543][ T6086] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 125.231474][ T6086] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 125.244165][ T6086] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 125.416591][ T62] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 125.437216][ T62] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 125.532435][ T62] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 125.571118][ T62] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 125.928159][ T5283] usb 3-1: new high-speed USB device number 8 using dummy_hcd [ 126.200064][ T5283] usb 3-1: device descriptor read/64, error -71 [ 126.438377][ T5283] usb 3-1: new high-speed USB device number 9 using dummy_hcd [ 126.588441][ T5283] usb 3-1: device descriptor read/64, error -71 [ 126.708815][ T5283] usb usb3-port1: attempt power cycle [ 126.978812][ T51] IPVS: starting estimator thread 0... [ 127.047919][ T5283] usb 3-1: new high-speed USB device number 10 using dummy_hcd [ 127.068914][ T5283] usb 3-1: device descriptor read/8, error -71 [ 127.078628][ T6396] IPVS: using max 19 ests per chain, 45600 per kthread [ 127.098457][ T5281] usb 5-1: new high-speed USB device number 16 using dummy_hcd [ 127.260957][ T5281] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 127.272386][ T5281] usb 5-1: config 0 has no interfaces? [ 127.285774][ T5281] usb 5-1: New USB device found, idVendor=0458, idProduct=5003, bcdDevice= 0.00 [ 127.297868][ T51] usb 1-1: new high-speed USB device number 10 using dummy_hcd [ 127.301779][ T5281] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 127.315149][ T5282] usb 4-1: new high-speed USB device number 14 using dummy_hcd [ 127.323009][ T5283] usb 3-1: new high-speed USB device number 11 using dummy_hcd [ 127.347468][ T5281] usb 5-1: config 0 descriptor?? [ 127.362771][ T5283] usb 3-1: device descriptor read/8, error -71 [ 127.479611][ T5283] usb usb3-port1: unable to enumerate USB device [ 127.487943][ T51] usb 1-1: Using ep0 maxpacket: 16 [ 127.488107][ T5282] usb 4-1: Using ep0 maxpacket: 32 [ 127.501229][ T51] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 127.511535][ T5282] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 127.521058][ T51] usb 1-1: config 1 interface 0 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 8 [ 127.534803][ T5282] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 127.541659][ T51] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 127.553477][ T5282] usb 4-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 127.561267][ T51] usb 1-1: config 1 interface 0 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 22 [ 127.594988][ T5282] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 127.605231][ T51] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 127.622773][ T51] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 127.623755][ T5282] usb 4-1: config 0 descriptor?? [ 127.653029][ T51] usb 1-1: SerialNumber: syz [ 127.655462][ T5282] hub 4-1:0.0: USB hub found [ 127.675783][ T6395] raw-gadget.2 gadget.0: fail, usb_ep_enable returned -22 [ 127.866341][ T5282] hub 4-1:0.0: 1 port detected [ 127.873768][ T5281] usb 5-1: USB disconnect, device number 16 [ 128.173335][ T51] usb 1-1: USB disconnect, device number 10 [ 128.854936][ T6454] TCP: request_sock_subflow_v6: Possible SYN flooding on port [fe80::aa]:20002. Sending cookies. [ 129.026146][ T5282] hub 4-1:0.0: hub_hub_status failed (err = -32) [ 129.037323][ T5282] hub 4-1:0.0: config failed, can't get hub status (err -32) [ 129.113255][ T5282] usbhid 4-1:0.0: can't add hid device: -32 [ 129.132585][ T5282] usbhid 4-1:0.0: probe with driver usbhid failed with error -32 [ 129.374378][ T51] IPVS: starting estimator thread 0... [ 129.468834][ T6464] IPVS: using max 18 ests per chain, 43200 per kthread [ 129.553671][ T5233] Bluetooth: hci0: Controller not accepting commands anymore: ncmd = 0 [ 129.566153][ T5233] Bluetooth: hci0: Injecting HCI hardware error event [ 129.574881][ T5231] Bluetooth: hci0: hardware error 0x00 [ 129.618002][ T25] usb 3-1: new high-speed USB device number 12 using dummy_hcd [ 129.718762][ T2524] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 129.778953][ T29] audit: type=1326 audit(1727278878.594:7): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6457 comm="syz.0.259" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f85579 code=0x7fc00000 [ 129.803872][ T25] usb 3-1: Using ep0 maxpacket: 16 [ 129.824945][ T25] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 129.868948][ T25] usb 3-1: config 1 interface 0 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 8 [ 129.926612][ T2524] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 129.944014][ T25] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 129.964937][ T25] usb 3-1: config 1 interface 0 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 22 [ 129.988066][ T6471] kAFS: unable to lookup cell '' [ 129.996304][ T25] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 130.013770][ T25] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 130.039615][ T25] usb 3-1: SerialNumber: syz [ 130.070103][ T6463] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 130.149427][ T4622] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 130.166228][ T4622] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 130.175716][ T4622] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 130.184376][ T4622] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 130.193836][ T4622] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 130.204828][ T4622] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 130.266224][ T2524] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 130.306624][ T5282] usb 4-1: USB disconnect, device number 14 [ 130.570636][ T2524] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 130.627820][ T25] usb 4-1: new high-speed USB device number 15 using dummy_hcd [ 130.700059][ T5283] usb 3-1: USB disconnect, device number 12 [ 130.758028][ T25] usb 4-1: device descriptor read/64, error -71 [ 130.964327][ T2524] bridge_slave_1: left allmulticast mode [ 130.971305][ T2524] bridge_slave_1: left promiscuous mode [ 130.977262][ T2524] bridge0: port 2(bridge_slave_1) entered disabled state [ 130.990489][ T2524] bridge_slave_0: left allmulticast mode [ 130.998549][ T2524] bridge_slave_0: left promiscuous mode [ 131.004284][ T2524] bridge0: port 1(bridge_slave_0) entered disabled state [ 131.029586][ T25] usb 4-1: new high-speed USB device number 16 using dummy_hcd [ 131.168017][ T25] usb 4-1: device descriptor read/64, error -71 [ 131.280993][ T25] usb usb4-port1: attempt power cycle [ 131.487022][ T2524] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 131.501656][ T2524] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 131.514375][ T2524] bond0 (unregistering): Released all slaves [ 131.557897][ T6473] chnl_net:caif_netlink_parms(): no params data found [ 131.630685][ T5231] Bluetooth: hci0: Opcode 0x0c03 failed: -110 [ 131.667922][ T25] usb 4-1: new high-speed USB device number 17 using dummy_hcd [ 131.748893][ T25] usb 4-1: device descriptor read/8, error -71 [ 131.976476][ T6473] bridge0: port 1(bridge_slave_0) entered blocking state [ 131.986538][ T6473] bridge0: port 1(bridge_slave_0) entered disabled state [ 131.994572][ T25] usb 4-1: new high-speed USB device number 18 using dummy_hcd [ 132.005108][ T6473] bridge_slave_0: entered allmulticast mode [ 132.029186][ T6473] bridge_slave_0: entered promiscuous mode [ 132.038022][ T25] usb 4-1: device descriptor read/8, error -71 [ 132.063522][ T6473] bridge0: port 2(bridge_slave_1) entered blocking state [ 132.086892][ T6473] bridge0: port 2(bridge_slave_1) entered disabled state [ 132.104844][ T6473] bridge_slave_1: entered allmulticast mode [ 132.120284][ T6473] bridge_slave_1: entered promiscuous mode [ 132.148691][ T25] usb usb4-port1: unable to enumerate USB device [ 132.270472][ T5231] Bluetooth: hci2: command tx timeout [ 132.302168][ T6511] netlink: 8 bytes leftover after parsing attributes in process `syz.2.277'. [ 132.340239][ T2524] hsr_slave_0: left promiscuous mode [ 132.359475][ T2524] hsr_slave_1: left promiscuous mode [ 132.391445][ T2524] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 132.404926][ T2524] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 132.424165][ T2524] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 132.442613][ T2524] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 132.496869][ T2524] veth1_macvtap: left promiscuous mode [ 132.527918][ T2524] veth0_macvtap: left promiscuous mode [ 132.534259][ T2524] veth1_vlan: left promiscuous mode [ 132.539777][ T2524] veth0_vlan: left promiscuous mode [ 132.649430][ T6523] FAULT_INJECTION: forcing a failure. [ 132.649430][ T6523] name fail_usercopy, interval 1, probability 0, space 0, times 1 [ 132.688316][ T6523] CPU: 0 UID: 0 PID: 6523 Comm: syz.0.280 Not tainted 6.11.0-syzkaller-10547-g684a64bf32b6 #0 [ 132.698651][ T6523] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/06/2024 [ 132.708849][ T6523] Call Trace: [ 132.712159][ T6523] [ 132.715170][ T6523] dump_stack_lvl+0x241/0x360 [ 132.719906][ T6523] ? __pfx_dump_stack_lvl+0x10/0x10 [ 132.725161][ T6523] ? __pfx__printk+0x10/0x10 [ 132.729906][ T6523] ? __pfx_lock_release+0x10/0x10 [ 132.734983][ T6523] ? __lock_acquire+0x1384/0x2050 [ 132.740066][ T6523] should_fail_ex+0x3b0/0x4e0 [ 132.744830][ T6523] _copy_from_user+0x2f/0xe0 [ 132.749474][ T6523] sk_setsockopt+0x261/0x33b0 [ 132.754196][ T6523] ? __pfx_aa_label_sk_perm+0x10/0x10 [ 132.759663][ T6523] ? __pfx_sk_setsockopt+0x10/0x10 [ 132.764864][ T6523] ? __pfx___might_resched+0x10/0x10 [ 132.770206][ T6523] ? __lock_acquire+0x1384/0x2050 [ 132.775315][ T6523] udp_lib_setsockopt+0x11d/0xc10 [ 132.780395][ T6523] ? __pfx_udp_lib_setsockopt+0x10/0x10 [ 132.785999][ T6523] ? __pfx_aa_sk_perm+0x10/0x10 [ 132.790903][ T6523] ? __pfx_lock_acquire+0x10/0x10 [ 132.796042][ T6523] udp_setsockopt+0x73/0xb0 [ 132.800589][ T6523] ? __pfx_udp_push_pending_frames+0x10/0x10 [ 132.806612][ T6523] ? __pfx_sock_common_setsockopt+0x10/0x10 [ 132.812550][ T6523] do_sock_setsockopt+0x3af/0x720 [ 132.817630][ T6523] ? __pfx_do_sock_setsockopt+0x10/0x10 [ 132.823233][ T6523] ? __fget_files+0x3f3/0x470 [ 132.827952][ T6523] ? __fget_files+0x29/0x470 [ 132.832600][ T6523] __sys_setsockopt+0x1a2/0x250 [ 132.837508][ T6523] __ia32_sys_setsockopt+0xb5/0xd0 [ 132.842677][ T6523] __do_fast_syscall_32+0xb4/0x110 [ 132.847846][ T6523] ? exc_page_fault+0x590/0x8c0 [ 132.852761][ T6523] do_fast_syscall_32+0x34/0x80 [ 132.857669][ T6523] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 132.864055][ T6523] RIP: 0023:0xf7f85579 [ 132.868182][ T6523] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 [ 132.887842][ T6523] RSP: 002b:00000000f570656c EFLAGS: 00000206 ORIG_RAX: 000000000000016e [ 132.896322][ T6523] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000000000001 [ 132.904342][ T6523] RDX: 0000000000000019 RSI: 0000000000000000 RDI: 0000000000000000 [ 132.912358][ T6523] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 132.920391][ T6523] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 132.928419][ T6523] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 132.936567][ T6523] [ 133.075804][ T1267] ieee802154 phy0 wpan0: encryption failed: -22 [ 133.082386][ T1267] ieee802154 phy1 wpan1: encryption failed: -22 [ 133.096554][ T6530] netlink: 16 bytes leftover after parsing attributes in process `syz.2.282'. [ 133.528837][ T5282] usb 1-1: new high-speed USB device number 11 using dummy_hcd [ 133.657833][ T25] usb 5-1: new high-speed USB device number 17 using dummy_hcd [ 133.715996][ T5282] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 133.746721][ T5282] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 133.799976][ T5282] usb 1-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 133.808016][ T25] usb 5-1: Using ep0 maxpacket: 16 [ 133.809744][ T5282] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 133.822783][ T5282] usb 1-1: SerialNumber: syz [ 133.864303][ T25] usb 5-1: New USB device found, idVendor=09c0, idProduct=0201, bcdDevice= a.a4 [ 133.874953][ T25] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 133.893373][ T25] usb 5-1: Product: syz [ 133.900307][ T25] usb 5-1: Manufacturer: syz [ 133.905091][ T25] usb 5-1: SerialNumber: syz [ 133.917195][ T25] usb 5-1: config 0 descriptor?? [ 133.957072][ T25] dvb-usb: found a 'Genpix 8PSK-to-USB2 Rev.1 DVB-S receiver' in warm state. [ 134.065250][ T6539] fuse: Unknown parameter '0x0000000000000008' [ 134.082787][ T5282] usb 1-1: 0:2 : does not exist [ 134.097886][ T5282] usb 1-1: unit 5 not found! [ 134.118985][ T5282] usb 1-1: USB disconnect, device number 11 [ 134.144088][ T2524] team0 (unregistering): Port device team_slave_1 removed [ 134.201574][ T5338] udevd[5338]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 134.288022][ T2524] team0 (unregistering): Port device team_slave_0 removed [ 134.349260][ T5231] Bluetooth: hci2: command tx timeout [ 135.228110][ T6473] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 135.267545][ T6473] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 135.280205][ T25] gp8psk: usb in 128 operation failed. [ 135.294876][ T25] gp8psk: usb in 137 operation failed. [ 135.312622][ T25] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 135.335837][ T25] dvbdev: DVB: registering new adapter (Genpix 8PSK-to-USB2 Rev.1 DVB-S receiver) [ 135.375454][ T25] usb 5-1: media controller created [ 135.410421][ T6473] team0: Port device team_slave_0 added [ 135.437406][ T6473] team0: Port device team_slave_1 added [ 135.447057][ T25] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 135.528425][ T6473] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 135.529843][ T25] gp8psk_fe: Frontend revision 1 attached [ 135.536871][ T6473] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 135.578517][ T25] usb 5-1: DVB: registering adapter 1 frontend 0 (Genpix DVB-S)... [ 135.586687][ T6473] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 135.611977][ T25] dvbdev: dvb_create_media_entity: media entity 'Genpix DVB-S' registered. [ 135.622443][ T6473] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 135.639697][ T6473] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 135.741406][ T25] gp8psk: usb in 138 operation failed. [ 135.755214][ T25] dvb-usb: Genpix 8PSK-to-USB2 Rev.1 DVB-S receiver successfully initialized and connected. [ 135.759654][ T6473] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 135.771547][ T25] gp8psk: found Genpix USB device pID = 201 (hex) [ 135.805762][ T25] usb 5-1: USB disconnect, device number 17 [ 135.877896][ T5280] usb 3-1: new high-speed USB device number 13 using dummy_hcd [ 136.028572][ T5280] usb 3-1: device descriptor read/64, error -71 [ 136.030171][ T6473] hsr_slave_0: entered promiscuous mode [ 136.043795][ T25] dvb-usb: Genpix 8PSK-to-USB2 Rev.1 DVB-S receive successfully deinitialized and disconnected. [ 136.078149][ T6473] hsr_slave_1: entered promiscuous mode [ 136.105704][ T6473] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 136.138696][ T6473] Cannot create hsr debugfs directory [ 136.288235][ T5280] usb 3-1: new high-speed USB device number 14 using dummy_hcd [ 136.327864][ T51] usb 1-1: new high-speed USB device number 12 using dummy_hcd [ 136.428502][ T5280] usb 3-1: device descriptor read/64, error -71 [ 136.428611][ T5231] Bluetooth: hci2: command tx timeout [ 136.493249][ T51] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 136.526148][ T51] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 136.559624][ T5280] usb usb3-port1: attempt power cycle [ 136.614961][ T51] usb 1-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 136.624694][ T51] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 136.633210][ T51] usb 1-1: SerialNumber: syz [ 136.855756][ T6586] fuse: Unknown parameter '0x0000000000000008' [ 136.896695][ T51] usb 1-1: 0:2 : does not exist [ 136.920450][ T51] usb 1-1: unit 5 not found! [ 136.947823][ T5280] usb 3-1: new high-speed USB device number 15 using dummy_hcd [ 136.981303][ T5280] usb 3-1: device descriptor read/8, error -71 [ 136.981876][ T6473] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 137.025368][ T51] usb 1-1: USB disconnect, device number 12 [ 137.040798][ T6473] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 137.065546][ T6473] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 137.082231][ T5338] udevd[5338]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 137.103279][ T6473] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 137.240189][ T5280] usb 3-1: new high-speed USB device number 16 using dummy_hcd [ 137.246753][ T6473] 8021q: adding VLAN 0 to HW filter on device bond0 [ 137.272272][ T6473] 8021q: adding VLAN 0 to HW filter on device team0 [ 137.285784][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 137.293043][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 137.306195][ T5280] usb 3-1: device descriptor read/8, error -71 [ 137.362266][ T35] bridge0: port 2(bridge_slave_1) entered blocking state [ 137.369679][ T35] bridge0: port 2(bridge_slave_1) entered forwarding state [ 137.428251][ T5280] usb usb3-port1: unable to enumerate USB device [ 137.473687][ T6615] netlink: 16 bytes leftover after parsing attributes in process `syz.3.303'. [ 137.567472][ T6473] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 137.636683][ T6473] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 137.726820][ T6473] veth0_vlan: entered promiscuous mode [ 137.774624][ T6473] veth1_vlan: entered promiscuous mode [ 137.825673][ T6473] veth0_macvtap: entered promiscuous mode [ 137.836435][ T6473] veth1_macvtap: entered promiscuous mode [ 137.869944][ T6473] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 137.926592][ T6473] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 137.956352][ T6473] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 137.986781][ T6473] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 138.017880][ T6473] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 138.035142][ T6473] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 138.057764][ T6473] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 138.072750][ T6473] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 138.091894][ T6473] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 138.126755][ T6473] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 138.154705][ T6473] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 138.177839][ T6473] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 138.211033][ T6473] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 138.241767][ T6473] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 138.267116][ T6473] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 138.279747][ T5283] usb 4-1: new high-speed USB device number 19 using dummy_hcd [ 138.306235][ T6473] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 138.333955][ T6473] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 138.358784][ T6473] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 138.386628][ T6473] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 138.407121][ T6473] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 138.425802][ T6473] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 138.435765][ T6473] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 138.448220][ T5283] usb 4-1: Using ep0 maxpacket: 32 [ 138.460124][ T5283] usb 4-1: New USB device found, idVendor=1d50, idProduct=60a1, bcdDevice=a1.4f [ 138.508889][ T5283] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 138.519231][ T5231] Bluetooth: hci2: command tx timeout [ 138.544154][ T5283] usb 4-1: Product: syz [ 138.562461][ T5283] usb 4-1: Manufacturer: syz [ 138.567336][ T5283] usb 4-1: SerialNumber: syz [ 138.589656][ T6648] nft_compat: unsupported protocol 5 [ 138.615731][ T5283] usb 4-1: config 0 descriptor?? [ 138.626767][ T6648] netlink: 1452 bytes leftover after parsing attributes in process `syz.4.309'. [ 138.737277][ T11] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 138.757526][ T11] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 138.857377][ T2904] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 138.891478][ T2904] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 139.057438][ T5283] airspy 4-1:0.0: Board ID: 00 [ 139.067017][ T5283] airspy 4-1:0.0: Firmware version: [ 139.177882][ T25] usb 5-1: new high-speed USB device number 18 using dummy_hcd [ 139.337859][ T25] usb 5-1: Using ep0 maxpacket: 16 [ 139.348124][ T51] usb 3-1: new high-speed USB device number 17 using dummy_hcd [ 139.373587][ T25] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0xF has invalid wMaxPacketSize 0 [ 139.395033][ T5279] usb 2-1: new high-speed USB device number 16 using dummy_hcd [ 139.396336][ T25] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 139.442949][ T25] usb 5-1: New USB device found, idVendor=054c, idProduct=06c1, bcdDevice=c2.87 [ 139.463621][ T25] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 139.481444][ T25] usb 5-1: Product: syz [ 139.485706][ T25] usb 5-1: Manufacturer: syz [ 139.497817][ T25] usb 5-1: SerialNumber: syz [ 139.510245][ T25] usb 5-1: config 0 descriptor?? [ 139.528276][ T25] port100 5-1:0.0: NFC: Could not find bulk-in or bulk-out endpoint [ 139.539534][ T51] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 139.560317][ T51] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 139.578176][ T5279] usb 2-1: Using ep0 maxpacket: 32 [ 139.580287][ T51] usb 3-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 139.596619][ T5279] usb 2-1: unable to read config index 0 descriptor/start: -61 [ 139.604315][ T51] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 139.604349][ T51] usb 3-1: SerialNumber: syz [ 139.626851][ T5279] usb 2-1: can't read configurations, error -61 [ 139.779416][ T5279] usb 2-1: new high-speed USB device number 17 using dummy_hcd [ 139.812992][ T6662] fuse: Unknown parameter '0x0000000000000008' [ 139.852531][ T51] usb 3-1: 0:2 : does not exist [ 139.857583][ T51] usb 3-1: unit 5 not found! [ 139.886414][ T25] usb 5-1: USB disconnect, device number 18 [ 139.920404][ T51] usb 3-1: USB disconnect, device number 17 [ 139.958887][ T5279] usb 2-1: Using ep0 maxpacket: 32 [ 139.973049][ T5279] usb 2-1: unable to read config index 0 descriptor/start: -61 [ 139.983018][ T5279] usb 2-1: can't read configurations, error -61 [ 140.008028][ T5279] usb usb2-port1: attempt power cycle [ 140.038435][ T5242] udevd[5242]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 140.069790][ T5283] airspy 4-1:0.0: usb_control_msg() failed -71 request 10 [ 140.082961][ T5283] airspy 4-1:0.0: Registered as swradio16 [ 140.110584][ T5283] airspy 4-1:0.0: SDR API is still slightly experimental and functionality changes may follow [ 140.149840][ T5283] usb 4-1: USB disconnect, device number 19 [ 140.285239][ T6690] netlink: 16 bytes leftover after parsing attributes in process `syz.0.315'. [ 140.357999][ T5279] usb 2-1: new high-speed USB device number 18 using dummy_hcd [ 140.387928][ T5279] usb 2-1: Using ep0 maxpacket: 32 [ 140.396252][ T5279] usb 2-1: unable to read config index 0 descriptor/start: -61 [ 140.408618][ T5279] usb 2-1: can't read configurations, error -61 [ 140.568239][ T5279] usb 2-1: new high-speed USB device number 19 using dummy_hcd [ 140.615671][ T5279] usb 2-1: Using ep0 maxpacket: 32 [ 140.629589][ T5279] usb 2-1: unable to read config index 0 descriptor/start: -61 [ 140.654961][ T5279] usb 2-1: can't read configurations, error -61 [ 140.729619][ T5279] usb usb2-port1: unable to enumerate USB device [ 140.810801][ T6705] FAULT_INJECTION: forcing a failure. [ 140.810801][ T6705] name failslab, interval 1, probability 0, space 0, times 0 [ 140.830266][ T6705] CPU: 0 UID: 0 PID: 6705 Comm: syz.0.321 Not tainted 6.11.0-syzkaller-10547-g684a64bf32b6 #0 [ 140.840588][ T6705] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/06/2024 [ 140.850709][ T6705] Call Trace: [ 140.854021][ T6705] [ 140.856965][ T6705] dump_stack_lvl+0x241/0x360 [ 140.861677][ T6705] ? __pfx_dump_stack_lvl+0x10/0x10 [ 140.866975][ T6705] ? __pfx__printk+0x10/0x10 [ 140.871615][ T6705] ? kmem_cache_alloc_noprof+0x44/0x2a0 [ 140.877193][ T6705] ? __pfx___might_resched+0x10/0x10 [ 140.882524][ T6705] should_fail_ex+0x3b0/0x4e0 [ 140.887225][ T6705] ? sk_prot_alloc+0x58/0x210 [ 140.892034][ T6705] should_failslab+0xac/0x100 [ 140.896779][ T6705] ? sk_prot_alloc+0x58/0x210 [ 140.901492][ T6705] kmem_cache_alloc_noprof+0x6c/0x2a0 [ 140.907010][ T6705] sk_prot_alloc+0x58/0x210 [ 140.911634][ T6705] ? sk_alloc+0x26/0x370 [ 140.915915][ T6705] sk_alloc+0x38/0x370 [ 140.920019][ T6705] kcm_create+0xfb/0x580 [ 140.924349][ T6705] ? __sock_create+0x337/0x920 [ 140.929149][ T6705] __sock_create+0x490/0x920 [ 140.933795][ T6705] __sys_socket+0x150/0x3c0 [ 140.938395][ T6705] ? __pfx___sys_socket+0x10/0x10 [ 140.943458][ T6705] __ia32_sys_socket+0x7a/0x90 [ 140.948273][ T6705] __do_fast_syscall_32+0xb4/0x110 [ 140.953436][ T6705] ? exc_page_fault+0x590/0x8c0 [ 140.958322][ T6705] do_fast_syscall_32+0x34/0x80 [ 140.963211][ T6705] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 140.969593][ T6705] RIP: 0023:0xf7f85579 [ 140.973705][ T6705] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 [ 140.993384][ T6705] RSP: 002b:00000000f570656c EFLAGS: 00000206 ORIG_RAX: 0000000000000167 [ 141.001920][ T6705] RAX: ffffffffffffffda RBX: 0000000000000029 RCX: 0000000000000002 [ 141.009932][ T6705] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 141.017955][ T6705] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 141.025968][ T6705] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 141.033978][ T6705] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 141.042001][ T6705] [ 141.177817][ T5283] usb 5-1: new high-speed USB device number 19 using dummy_hcd [ 141.232214][ T6710] netlink: 8 bytes leftover after parsing attributes in process `syz.0.323'. [ 141.249092][ T6710] netlink: 84 bytes leftover after parsing attributes in process `syz.0.323'. [ 141.340074][ T5283] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 141.351606][ T5283] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 141.363818][ T5283] usb 5-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 141.374318][ T5283] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 141.390553][ T5283] usb 5-1: SerialNumber: syz [ 141.518371][ T5279] usb 1-1: new high-speed USB device number 13 using dummy_hcd [ 141.668942][ T5279] usb 1-1: device descriptor read/64, error -71 [ 141.946905][ T5279] usb 1-1: new high-speed USB device number 14 using dummy_hcd [ 142.078590][ T9] usb 3-1: new high-speed USB device number 18 using dummy_hcd [ 142.098185][ T5279] usb 1-1: device descriptor read/64, error -71 [ 142.239281][ T5279] usb usb1-port1: attempt power cycle [ 142.282248][ T9] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 142.300259][ T9] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 142.324701][ T9] usb 3-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 142.344486][ T9] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 142.363438][ T9] usb 3-1: SerialNumber: syz [ 142.437474][ T5283] usb 5-1: skipping empty audio interface (v1) [ 142.478786][ T5283] snd-usb-audio 5-1:1.0: probe with driver snd-usb-audio failed with error -22 [ 142.493952][ T5283] usb 5-1: USB disconnect, device number 19 [ 142.526449][ T5338] udevd[5338]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 142.582188][ T6721] fuse: Unknown parameter '0x0000000000000008' [ 142.596843][ T9] usb 3-1: 0:2 : does not exist [ 142.618846][ T5279] usb 1-1: new high-speed USB device number 15 using dummy_hcd [ 142.627069][ T9] usb 3-1: unit 5 not found! [ 142.653454][ T5279] usb 1-1: device descriptor read/8, error -71 [ 142.667869][ T9] usb 3-1: USB disconnect, device number 18 [ 142.722713][ T5338] udevd[5338]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 142.862317][ T6744] fuse: Unknown parameter 'fT0x0000000000000007' [ 142.918478][ T5279] usb 1-1: new high-speed USB device number 16 using dummy_hcd [ 142.957613][ T5279] usb 1-1: device descriptor read/8, error -71 [ 142.987536][ T6747] netlink: 24 bytes leftover after parsing attributes in process `syz.1.339'. [ 143.000214][ T6747] netlink: 24 bytes leftover after parsing attributes in process `syz.1.339'. [ 143.052332][ T6747] tap0: tun_chr_ioctl cmd 1074812118 [ 143.100534][ T5279] usb usb1-port1: unable to enumerate USB device [ 143.457894][ T25] usb 3-1: new low-speed USB device number 19 using dummy_hcd [ 143.617845][ T25] usb 3-1: Invalid ep0 maxpacket: 32 [ 143.758237][ T25] usb 3-1: new low-speed USB device number 20 using dummy_hcd [ 143.918351][ T25] usb 3-1: Invalid ep0 maxpacket: 32 [ 143.932926][ T25] usb usb3-port1: attempt power cycle [ 143.988438][ T939] usb 2-1: new high-speed USB device number 20 using dummy_hcd [ 144.160012][ T939] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 144.177743][ T939] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 144.198396][ T939] usb 2-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 144.207624][ T939] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 144.247804][ T939] usb 2-1: SerialNumber: syz [ 144.299092][ T25] usb 3-1: new low-speed USB device number 21 using dummy_hcd [ 144.334509][ T25] usb 3-1: Invalid ep0 maxpacket: 32 [ 144.375682][ T6781] netlink: 28 bytes leftover after parsing attributes in process `syz.0.350'. [ 144.467969][ T25] usb 3-1: new low-speed USB device number 22 using dummy_hcd [ 144.500230][ T25] usb 3-1: Invalid ep0 maxpacket: 32 [ 144.517838][ T25] usb usb3-port1: unable to enumerate USB device [ 144.627808][ T51] usb 1-1: new high-speed USB device number 17 using dummy_hcd [ 144.789842][ T51] usb 1-1: Using ep0 maxpacket: 8 [ 144.798698][ T51] usb 1-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 144.819930][ T51] usb 1-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 144.835080][ T51] usb 1-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 144.852578][ T51] usb 1-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 144.866088][ T51] usb 1-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 144.871487][ T6789] netlink: 4 bytes leftover after parsing attributes in process `syz.3.353'. [ 144.876157][ T51] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 144.905371][ T6789] netlink: 4 bytes leftover after parsing attributes in process `syz.3.353'. [ 145.028224][ T25] usb 5-1: new high-speed USB device number 20 using dummy_hcd [ 145.131820][ T51] usb 1-1: usb_control_msg returned -71 [ 145.137633][ T51] usbtmc 1-1:16.0: can't read capabilities [ 145.160032][ T51] usb 1-1: USB disconnect, device number 17 [ 145.180973][ T25] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 145.193233][ T25] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 145.206518][ T25] usb 5-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 145.220001][ T25] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 145.234322][ T25] usb 5-1: SerialNumber: syz [ 145.304085][ T939] usb 2-1: skipping empty audio interface (v1) [ 145.335137][ T939] snd-usb-audio 2-1:1.0: probe with driver snd-usb-audio failed with error -22 [ 145.346844][ T939] usb 2-1: USB disconnect, device number 20 [ 145.393084][ T5242] udevd[5242]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 145.466327][ T6787] fuse: Unknown parameter '0x0000000000000008' [ 145.484777][ T25] usb 5-1: 0:2 : does not exist [ 145.491695][ T25] usb 5-1: unit 5 not found! [ 145.520581][ T25] usb 5-1: USB disconnect, device number 20 [ 145.550911][ T5338] udevd[5338]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 145.996089][ T6801] fuse: Bad value for 'fd' [ 146.171670][ T6813] TCP: request_sock_subflow_v6: Possible SYN flooding on port [fe80::aa]:20002. Sending cookies. [ 146.967891][ T939] usb 5-1: new high-speed USB device number 21 using dummy_hcd [ 146.990057][ T25] usb 4-1: new high-speed USB device number 20 using dummy_hcd [ 147.149726][ T939] usb 5-1: Using ep0 maxpacket: 16 [ 147.165303][ T939] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 147.169591][ T25] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 147.189770][ T939] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 147.207123][ T25] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 147.219504][ T939] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 147.229317][ T25] usb 4-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 147.242178][ T939] usb 5-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 147.253245][ T939] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 147.265624][ T939] usb 5-1: config 0 descriptor?? [ 147.282397][ T25] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 147.290852][ T25] usb 4-1: SerialNumber: syz [ 147.389287][ T5279] usb 1-1: new high-speed USB device number 18 using dummy_hcd [ 147.568932][ T6839] netlink: 16 bytes leftover after parsing attributes in process `syz.2.369'. [ 147.609154][ T5279] usb 1-1: Using ep0 maxpacket: 16 [ 147.650274][ T5279] usb 1-1: config 0 has an invalid descriptor of length 155, skipping remainder of the config [ 147.724845][ T5279] usb 1-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 147.811933][ T5279] usb 1-1: New USB device found, idVendor=1e71, idProduct=170e, bcdDevice= 0.00 [ 147.840787][ T5279] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 147.850318][ T939] microsoft 0003:045E:07DA.0006: ignoring exceeding usage max [ 147.914498][ T5279] usb 1-1: config 0 descriptor?? [ 147.957434][ T5279] usbhid 1-1:0.0: couldn't find an input interrupt endpoint [ 147.972946][ T939] input: HID 045e:07da as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/0003:045E:07DA.0006/input/input18 [ 148.261022][ T939] microsoft 0003:045E:07DA.0006: input,hidraw0: USB HID v0.00 Device [HID 045e:07da] on usb-dummy_hcd.4-1/input0 [ 148.364960][ T939] usb 5-1: USB disconnect, device number 21 [ 148.463820][ T25] usb 4-1: skipping empty audio interface (v1) [ 148.540086][ T6847] TCP: request_sock_subflow_v6: Possible SYN flooding on port [fe80::aa]:20002. Sending cookies. [ 148.555710][ T25] snd-usb-audio 4-1:1.0: probe with driver snd-usb-audio failed with error -22 [ 148.597926][ T5280] usb 3-1: new high-speed USB device number 23 using dummy_hcd [ 148.668159][ T6850] usb usb2: usbfs: process 6850 (syz.3.372) did not claim interface 0 before use [ 148.693966][ T25] usb 4-1: USB disconnect, device number 20 [ 148.977190][ T5338] udevd[5338]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 149.179117][ T5280] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 149.189408][ T5280] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 149.199759][ T5280] usb 3-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 149.209204][ T5280] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 149.217310][ T5280] usb 3-1: SerialNumber: syz [ 149.307455][ T6867] netlink: 8 bytes leftover after parsing attributes in process `syz.1.377'. [ 149.398022][ T25] usb 4-1: new high-speed USB device number 21 using dummy_hcd [ 149.474459][ T6845] fuse: Unknown parameter '0x0000000000000008' [ 149.530986][ T5280] usb 3-1: 0:2 : does not exist [ 149.543075][ T5280] usb 3-1: unit 5 not found! [ 149.567798][ T25] usb 4-1: Using ep0 maxpacket: 8 [ 149.595832][ T25] usb 4-1: New USB device found, idVendor=0421, idProduct=798f, bcdDevice=86.54 [ 149.627915][ T25] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 149.636288][ T25] usb 4-1: Product: syz [ 149.640962][ T25] usb 4-1: Manufacturer: syz [ 149.645626][ T25] usb 4-1: SerialNumber: syz [ 149.752761][ T25] usb 4-1: config 0 descriptor?? [ 149.759623][ T5280] usb 3-1: USB disconnect, device number 23 [ 149.767467][ T25] cdc_phonet 4-1:0.0: skipping garbage [ 149.773154][ T25] cdc_phonet 4-1:0.0: probe with driver cdc_phonet failed with error -22 [ 149.958852][ T5338] udevd[5338]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 150.038624][ T939] usb 4-1: USB disconnect, device number 21 [ 150.205570][ T51] usb 1-1: USB disconnect, device number 18 [ 150.236413][ T6803] coredump: 219(syz.0.357): written to core: VMAs: 33, size 97423360; core: 60071678 bytes, pos 97427456 [ 150.626009][ T6883] TCP: request_sock_subflow_v6: Possible SYN flooding on port [fe80::aa]:20002. Sending cookies. [ 150.698798][ T5280] usb 3-1: new high-speed USB device number 24 using dummy_hcd [ 150.861000][ T6885] netlink: 8 bytes leftover after parsing attributes in process `syz.4.384'. [ 150.874121][ T5280] usb 3-1: Using ep0 maxpacket: 16 [ 150.884851][ T5280] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 150.897372][ T5280] usb 3-1: config 1 interface 0 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 8 [ 150.911349][ T5280] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 150.928115][ T5279] usb 2-1: new high-speed USB device number 21 using dummy_hcd [ 150.933227][ T5280] usb 3-1: config 1 interface 0 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 22 [ 150.961844][ T5280] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 150.991987][ T5280] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 151.001431][ T5280] usb 3-1: SerialNumber: syz [ 151.021607][ T6878] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 151.094695][ T5279] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 151.115022][ T5279] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 151.163751][ T5279] usb 2-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 151.184718][ T29] audit: type=1800 audit(1727278900.004:8): pid=6898 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.4.389" name="SYSV00000000" dev="hugetlbfs" ino=0 res=0 errno=0 [ 151.185710][ T5279] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 151.251053][ T5279] usb 2-1: SerialNumber: syz [ 151.367907][ T939] usb 4-1: new high-speed USB device number 22 using dummy_hcd [ 151.518112][ T5283] usb 3-1: USB disconnect, device number 24 [ 151.537331][ T939] usb 4-1: New USB device found, idVendor=0bda, idProduct=8153, bcdDevice=e2.3d [ 151.566906][ T939] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 151.576376][ T939] usb 4-1: Product: syz [ 151.582209][ T939] usb 4-1: Manufacturer: syz [ 151.587008][ T939] usb 4-1: SerialNumber: syz [ 151.596449][ T939] r8152-cfgselector 4-1: Unknown version 0x0000 [ 151.606154][ T939] r8152-cfgselector 4-1: config 0 descriptor?? [ 151.647843][ T25] usb 1-1: new high-speed USB device number 19 using dummy_hcd [ 151.809901][ T25] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 151.820218][ T25] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 151.830678][ T25] usb 1-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 151.844080][ T25] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 151.855047][ T25] usb 1-1: SerialNumber: syz [ 152.081490][ T6902] fuse: Unknown parameter 'fd0x0000000000000008' [ 152.104963][ T25] usb 1-1: 0:2 : does not exist [ 152.128597][ T25] usb 1-1: unit 5 not found! [ 152.172265][ T25] usb 1-1: USB disconnect, device number 19 [ 152.290183][ T5242] udevd[5242]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 152.326987][ T5279] usb 2-1: 0:2 : does not exist [ 152.398822][ T5279] usb 2-1: USB disconnect, device number 21 [ 152.460885][ T5338] udevd[5338]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 152.490150][ T6917] TCP: request_sock_subflow_v6: Possible SYN flooding on port [fe80::aa]:20002. Sending cookies. [ 152.757854][ T5279] usb 2-1: new high-speed USB device number 22 using dummy_hcd [ 152.937960][ T5279] usb 2-1: Using ep0 maxpacket: 8 [ 152.951853][ T5279] usb 2-1: config 150 has an invalid interface number: 204 but max is 1 [ 152.960815][ T5279] usb 2-1: config 150 has no interface number 0 [ 152.967286][ T5279] usb 2-1: config 150 interface 204 has no altsetting 0 [ 152.974528][ T5279] usb 2-1: config 150 interface 1 has no altsetting 0 [ 152.983976][ T5279] usb 2-1: New USB device found, idVendor=04e2, idProduct=1424, bcdDevice=c7.eb [ 152.993559][ T5279] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 153.001955][ T5279] usb 2-1: Product: syz [ 153.006380][ T5279] usb 2-1: Manufacturer: syz [ 153.011625][ T5279] usb 2-1: SerialNumber: syz [ 153.253790][ T5279] xr_serial 2-1:150.204: xr_serial converter detected [ 153.477110][ T6915] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 153.505868][ T6915] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 153.772058][ T5279] xr_serial ttyUSB0: Failed to set reg 0x0c: -71 [ 153.791769][ T5279] xr_serial ttyUSB0: probe with driver xr_serial failed with error -71 [ 153.812816][ T5279] usb 2-1: USB disconnect, device number 22 [ 153.822788][ T5279] xr_serial 2-1:150.204: device disconnected [ 154.056631][ T25] r8152-cfgselector 4-1: USB disconnect, device number 22 [ 154.189195][ T6946] TCP: request_sock_subflow_v6: Possible SYN flooding on port [fe80::aa]:20002. Sending cookies. [ 154.451210][ T6952] fuse: Unknown parameter 'grou00000000000000000000' [ 154.498122][ T25] usb 4-1: new high-speed USB device number 23 using dummy_hcd [ 154.621325][ T6958] x_tables: duplicate underflow at hook 1 [ 154.710848][ T25] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 154.721057][ T939] usb 1-1: new high-speed USB device number 20 using dummy_hcd [ 154.752626][ T25] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 154.779913][ T25] usb 4-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 154.797015][ T25] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 154.812582][ T25] usb 4-1: SerialNumber: syz [ 154.890750][ T939] usb 1-1: New USB device found, idVendor=13d3, idProduct=3333, bcdDevice=84.ed [ 154.906575][ T939] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 154.927377][ T939] usb 1-1: Product: syz [ 154.934728][ T939] usb 1-1: Manufacturer: syz [ 154.948059][ T939] usb 1-1: SerialNumber: syz [ 154.962981][ T939] usb 1-1: config 0 descriptor?? [ 154.975084][ T939] r8712u: register rtl8712_netdev_ops to netdev_ops [ 154.983773][ T939] usb 1-1: r8712u: USB_SPEED_HIGH with 0 endpoints [ 155.047094][ T6948] fuse: Unknown parameter 'fd0x0000000000000008' [ 155.099889][ T25] usb 4-1: 0:2 : does not exist [ 155.112376][ T25] usb 4-1: unit 5 not found! [ 155.150507][ T25] usb 4-1: USB disconnect, device number 23 [ 155.491109][ T6974] netlink: zone id is out of range [ 155.499640][ T6974] netlink: zone id is out of range [ 155.506400][ T6974] netlink: zone id is out of range [ 155.513721][ T6974] netlink: zone id is out of range [ 155.519055][ T6974] netlink: zone id is out of range [ 155.529982][ T6974] netlink: zone id is out of range [ 155.538422][ T6974] netlink: zone id is out of range [ 155.547860][ T6974] netlink: zone id is out of range [ 155.689148][ T939] usb 1-1: r8712u: Boot from EFUSE: Autoload Failed [ 155.715968][ T939] usb 1-1: r8712u: MAC Address from efuse = 00:e0:4c:87:00:00 [ 155.754571][ T939] usb 1-1: r8712u: Loading firmware from "rtlwifi/rtl8712u.bin" [ 155.809114][ T25] usb 1-1: USB disconnect, device number 20 [ 155.888953][ T6984] fuse: Unknown parameter 'grou00000000000000000000' [ 155.910930][ T6985] dlm: plock device version mismatch: kernel (1.2.0), user (1.3377463296.5852668) [ 156.648268][ T25] usb 4-1: new high-speed USB device number 24 using dummy_hcd [ 156.851728][ T25] usb 4-1: New USB device found, idVendor=0813, idProduct=0001, bcdDevice=3a.08 [ 156.891925][ T25] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 156.949289][ T25] usb 4-1: config 0 descriptor?? [ 156.988143][ T939] usb 3-1: new high-speed USB device number 25 using dummy_hcd [ 157.003270][ T25] gspca_main: cpia1-2.14.0 probing 0813:0001 [ 157.164822][ T7026] kvm: kvm [7025]: vcpu0, guest rIP: 0x1a3 Unhandled WRMSR(0xc1) = 0x8000 [ 157.204332][ T939] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 157.215319][ T939] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 157.235286][ T7029] fuse: Unknown parameter 'grou00000000000000000000' [ 157.265343][ T939] usb 3-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 157.274993][ T939] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 157.283545][ T939] usb 3-1: SerialNumber: syz [ 157.688038][ T7014] fuse: Unknown parameter 'fd0x0000000000000008' [ 157.759471][ T939] usb 3-1: 0:2 : does not exist [ 157.765033][ T939] usb 3-1: unit 5 not found! [ 157.799851][ T939] usb 3-1: USB disconnect, device number 25 [ 157.840633][ T25] cpia1 4-1:0.0: unexpected state after lo power cmd: 00 [ 158.477815][ T939] usb 1-1: new high-speed USB device number 21 using dummy_hcd [ 158.612328][ T7054] net_ratelimit: 76 callbacks suppressed [ 158.612347][ T7054] dccp_invalid_packet: P.Data Offset(0) too small [ 158.650123][ T939] usb 1-1: Using ep0 maxpacket: 16 [ 158.672421][ T939] usb 1-1: config 0 interface 0 altsetting 1 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 158.672464][ T939] usb 1-1: config 0 interface 0 altsetting 1 endpoint 0x81 has invalid wMaxPacketSize 0 [ 158.672492][ T939] usb 1-1: config 0 interface 0 altsetting 1 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 158.672525][ T939] usb 1-1: config 0 interface 0 has no altsetting 0 [ 158.672559][ T939] usb 1-1: New USB device found, idVendor=045e, idProduct=05da, bcdDevice= 0.00 [ 158.672588][ T939] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 158.692207][ T939] usb 1-1: config 0 descriptor?? [ 159.080706][ T7062] fuse: Unknown parameter ' ]\xc+ T#ʠrW 5 J:•˾A' [ 159.105744][ T2524] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 159.122617][ T7062] vhci_hcd: invalid port number 0 [ 159.144830][ T7058] netlink: 52 bytes leftover after parsing attributes in process `syz.2.446'. [ 159.149244][ T25] gspca_cpia1: usb_control_msg 02, error -110 [ 159.150898][ T25] gspca_cpia1: usb_control_msg 05, error -32 [ 159.151251][ T25] gspca_cpia1: usb_control_msg 05, error -32 [ 159.182148][ T939] hid (null): no more usage index available [ 159.260446][ T939] hid-generic 0003:045E:05DA.0007: ignoring exceeding usage max [ 159.261952][ T939] hid-generic 0003:045E:05DA.0007: ignoring exceeding usage max [ 159.261975][ T939] hid-generic 0003:045E:05DA.0007: no more usage index available [ 159.261994][ T939] hid-generic 0003:045E:05DA.0007: item 0 4 2 2 parsing failed [ 159.262540][ T939] hid-generic 0003:045E:05DA.0007: probe with driver hid-generic failed with error -22 [ 159.319353][ T25] gspca_cpia1: usb_control_msg 05, error -32 [ 159.319716][ T25] gspca_cpia1: usb_control_msg 05, error -32 [ 159.319738][ T25] cpia1 4-1:0.0: unexpected systemstate: 00 [ 159.418567][ T2524] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 159.436302][ T939] usb 1-1: USB disconnect, device number 21 [ 159.503665][ T25] usb 4-1: USB disconnect, device number 24 [ 159.654612][ T2524] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 159.810798][ T2524] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 160.162023][ T4622] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 160.173469][ T4622] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 160.181482][ T4622] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 160.191490][ T4622] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 160.200791][ T4622] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 160.244470][ T4622] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 160.301328][ T7080] loop7: detected capacity change from 0 to 16384 [ 160.364181][ T2524] bridge_slave_1: left allmulticast mode [ 160.407146][ T2524] bridge_slave_1: left promiscuous mode [ 160.435890][ T2524] bridge0: port 2(bridge_slave_1) entered disabled state [ 160.546301][ T2524] bridge_slave_0: left allmulticast mode [ 160.589850][ T2524] bridge_slave_0: left promiscuous mode [ 160.595675][ T2524] bridge0: port 1(bridge_slave_0) entered disabled state [ 160.628262][ T5279] usb 4-1: new high-speed USB device number 25 using dummy_hcd [ 160.849300][ T5279] usb 4-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 160.895981][ T5279] usb 4-1: config 1 has an invalid descriptor of length 156, skipping remainder of the config [ 160.925504][ T5279] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 160.971299][ T5279] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 55978, setting to 1024 [ 161.027741][ T5279] usb 4-1: config 1 interface 0 altsetting 0 bulk endpoint 0x81 has invalid maxpacket 1024 [ 161.153104][ T5279] usb 4-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 161.163800][ T5279] usb 4-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 161.172050][ T5279] usb 4-1: Product: syz [ 161.173815][ T5231] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 161.176330][ T5279] usb 4-1: Manufacturer: syz [ 161.186573][ T5231] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 161.197191][ T5231] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 161.205444][ T5231] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 161.213722][ T5231] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 161.219782][ T7082] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 161.231012][ T5231] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 161.233698][ T5279] cdc_wdm 4-1:1.0: skipping garbage [ 161.268083][ T5279] cdc_wdm 4-1:1.0: skipping garbage [ 161.296410][ T5279] cdc_wdm 4-1:1.0: probe with driver cdc_wdm failed with error -22 [ 161.351452][ T7103] netlink: 16 bytes leftover after parsing attributes in process `syz.2.465'. [ 161.466738][ T939] usb 4-1: USB disconnect, device number 25 [ 161.648781][ T7116] ======================================================= [ 161.648781][ T7116] WARNING: The mand mount option has been deprecated and [ 161.648781][ T7116] and is ignored by this kernel. Remove the mand [ 161.648781][ T7116] option from the mount to silence this warning. [ 161.648781][ T7116] ======================================================= [ 161.813893][ T2524] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 161.850419][ T2524] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 161.873091][ T2524] bond0 (unregistering): Released all slaves [ 161.930446][ T25] usb 4-1: new high-speed USB device number 26 using dummy_hcd [ 162.094608][ T25] usb 4-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 162.108069][ T5280] usb 1-1: new high-speed USB device number 22 using dummy_hcd [ 162.118587][ T25] usb 4-1: config 1 has an invalid descriptor of length 156, skipping remainder of the config [ 162.129787][ T25] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 162.139017][ T25] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 55978, setting to 1024 [ 162.159214][ T25] usb 4-1: config 1 interface 0 altsetting 0 bulk endpoint 0x81 has invalid maxpacket 1024 [ 162.186558][ T25] usb 4-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 162.197492][ T25] usb 4-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 162.207014][ T25] usb 4-1: Product: syz [ 162.211787][ T25] usb 4-1: Manufacturer: syz [ 162.219912][ T7082] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 162.232828][ T25] cdc_wdm 4-1:1.0: skipping garbage [ 162.242051][ T25] cdc_wdm 4-1:1.0: skipping garbage [ 162.251744][ T25] cdc_wdm 4-1:1.0: probe with driver cdc_wdm failed with error -22 [ 162.278168][ T5280] usb 1-1: Using ep0 maxpacket: 8 [ 162.290440][ T5280] usb 1-1: config 150 has an invalid interface number: 204 but max is 1 [ 162.302144][ T5280] usb 1-1: config 150 has no interface number 0 [ 162.308749][ T5280] usb 1-1: config 150 interface 204 has no altsetting 0 [ 162.315964][ T5280] usb 1-1: config 150 interface 1 has no altsetting 0 [ 162.325021][ T5280] usb 1-1: New USB device found, idVendor=04e2, idProduct=1424, bcdDevice=c7.eb [ 162.334470][ T5280] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 162.342686][ T5280] usb 1-1: Product: syz [ 162.347117][ T5280] usb 1-1: Manufacturer: syz [ 162.355268][ T5280] usb 1-1: SerialNumber: syz [ 162.361488][ T4622] Bluetooth: hci4: command tx timeout [ 162.376163][ T2524] hsr_slave_0: left promiscuous mode [ 162.382920][ T2524] hsr_slave_1: left promiscuous mode [ 162.392195][ T2524] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 162.402264][ T2524] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 162.413579][ T2524] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 162.422225][ T2524] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 162.430054][ T939] usb 3-1: new high-speed USB device number 26 using dummy_hcd [ 162.473985][ T2524] veth1_macvtap: left promiscuous mode [ 162.480129][ T2524] veth0_macvtap: left promiscuous mode [ 162.485985][ T2524] veth1_vlan: left promiscuous mode [ 162.498164][ T2524] veth0_vlan: left promiscuous mode [ 162.581952][ T5280] xr_serial 1-1:150.204: xr_serial converter detected [ 162.600128][ T939] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 162.618184][ T939] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 162.635890][ T939] usb 3-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 162.646858][ T939] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 162.661409][ T939] usb 3-1: SerialNumber: syz [ 162.899059][ T7122] fuse: Unknown parameter 'grou00000000000000000000' [ 162.944281][ T939] usb 3-1: 0:2 : does not exist [ 162.956513][ T939] usb 3-1: unit 5 not found! [ 162.992543][ T7135] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 163.030789][ T7135] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 163.042315][ T939] usb 3-1: USB disconnect, device number 26 [ 163.116782][ T5338] udevd[5338]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 163.250467][ T5280] xr_serial ttyUSB0: Failed to set reg 0x0d: -71 [ 163.268946][ T5280] xr_serial ttyUSB0: probe with driver xr_serial failed with error -71 [ 163.298087][ T5280] usb 1-1: USB disconnect, device number 22 [ 163.305474][ T5280] xr_serial 1-1:150.204: device disconnected [ 163.481553][ T4622] Bluetooth: hci2: command tx timeout [ 163.577368][ T7142] TCP: request_sock_subflow_v6: Possible SYN flooding on port [fe80::aa]:20002. Sending cookies. [ 163.771820][ T2524] team0 (unregistering): Port device team_slave_1 removed [ 163.863070][ T2524] team0 (unregistering): Port device team_slave_0 removed [ 164.158963][ T25] usb 4-1: USB disconnect, device number 26 [ 164.430803][ T4622] Bluetooth: hci4: command tx timeout [ 164.750849][ T7107] chnl_net:caif_netlink_parms(): no params data found [ 165.003184][ T7161] netlink: 16 bytes leftover after parsing attributes in process `syz.2.477'. [ 165.111639][ T7162] netlink: 16 bytes leftover after parsing attributes in process `syz.0.478'. [ 165.225132][ T7084] chnl_net:caif_netlink_parms(): no params data found [ 165.257560][ T7107] bridge0: port 1(bridge_slave_0) entered blocking state [ 165.287922][ T7107] bridge0: port 1(bridge_slave_0) entered disabled state [ 165.295359][ T7107] bridge_slave_0: entered allmulticast mode [ 165.333550][ T7107] bridge_slave_0: entered promiscuous mode [ 165.358578][ T7107] bridge0: port 2(bridge_slave_1) entered blocking state [ 165.379459][ T7172] kvm: kvm [7171]: vcpu0, guest rIP: 0x1a3 Unhandled WRMSR(0xc1) = 0x8000 [ 165.389016][ T7107] bridge0: port 2(bridge_slave_1) entered disabled state [ 165.396332][ T7107] bridge_slave_1: entered allmulticast mode [ 165.413861][ T7107] bridge_slave_1: entered promiscuous mode [ 165.518353][ T5283] usb 4-1: new high-speed USB device number 27 using dummy_hcd [ 165.551591][ T4622] Bluetooth: hci2: command tx timeout [ 165.600331][ T7107] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 165.698249][ T5283] usb 4-1: Using ep0 maxpacket: 32 [ 165.702507][ T2524] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 165.717493][ T5283] usb 4-1: config index 0 descriptor too short (expected 156, got 27) [ 165.729699][ T5283] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x87 has an invalid bInterval 0, changing to 7 [ 165.756675][ T5283] usb 4-1: New USB device found, idVendor=0f11, idProduct=1021, bcdDevice=86.66 [ 165.759191][ T25] usb 1-1: new high-speed USB device number 23 using dummy_hcd [ 165.766215][ T5283] usb 4-1: New USB device strings: Mfr=85, Product=120, SerialNumber=172 [ 165.783556][ T5283] usb 4-1: Product: syz [ 165.788400][ T5283] usb 4-1: Manufacturer: syz [ 165.793046][ T5283] usb 4-1: SerialNumber: syz [ 165.800348][ T7107] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 165.812137][ T5283] usb 4-1: config 0 descriptor?? [ 165.826933][ T5283] ldusb 4-1:0.0: Interrupt out endpoint not found (using control endpoint instead) [ 165.843058][ T5283] ldusb 4-1:0.0: LD USB Device #0 now attached to major 180 minor 0 [ 166.013022][ T2524] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 166.034225][ T25] usb 1-1: config 0 has no interfaces? [ 166.044178][ T25] usb 1-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 166.066895][ T25] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 166.078548][ T7157] ldusb 4-1:0.0: Write buffer overflow, 536873920 bytes dropped [ 166.089193][ T25] usb 1-1: config 0 descriptor?? [ 166.137886][ T7084] bridge0: port 1(bridge_slave_0) entered blocking state [ 166.146634][ T7084] bridge0: port 1(bridge_slave_0) entered disabled state [ 166.170021][ T7084] bridge_slave_0: entered allmulticast mode [ 166.179595][ T25] usb 4-1: USB disconnect, device number 27 [ 166.199051][ T7084] bridge_slave_0: entered promiscuous mode [ 166.208824][ T25] ldusb 4-1:0.0: LD USB Device #0 now disconnected [ 166.231727][ T7107] team0: Port device team_slave_0 added [ 166.281659][ T2524] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 166.295528][ T7084] bridge0: port 2(bridge_slave_1) entered blocking state [ 166.313626][ T7084] bridge0: port 2(bridge_slave_1) entered disabled state [ 166.321379][ T7084] bridge_slave_1: entered allmulticast mode [ 166.329655][ T7084] bridge_slave_1: entered promiscuous mode [ 166.340100][ T7107] team0: Port device team_slave_1 added [ 166.385868][ T2524] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 166.404469][ T7202] netem: change failed [ 166.421057][ T25] usb 1-1: USB disconnect, device number 23 [ 166.481343][ T7202] netlink: 28 bytes leftover after parsing attributes in process `syz.2.485'. [ 166.494791][ T7084] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 166.508603][ T4622] Bluetooth: hci4: command tx timeout [ 166.531835][ T7084] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 166.579853][ T7107] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 166.586896][ T7107] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 166.623378][ T7107] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 166.678286][ T7084] team0: Port device team_slave_0 added [ 166.685231][ T7107] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 166.692787][ T7107] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 166.721410][ T7107] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 166.790128][ T7084] team0: Port device team_slave_1 added [ 166.885199][ T7207] netlink: 16 bytes leftover after parsing attributes in process `syz.3.487'. [ 166.887980][ T25] usb 3-1: new full-speed USB device number 27 using dummy_hcd [ 166.943334][ T7107] hsr_slave_0: entered promiscuous mode [ 166.976318][ T7107] hsr_slave_1: entered promiscuous mode [ 166.983906][ T7107] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 167.004221][ T7107] Cannot create hsr debugfs directory [ 167.058749][ T25] usb 3-1: device descriptor read/64, error -71 [ 167.110100][ T7084] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 167.118411][ T7084] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 167.159926][ T7084] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 167.179685][ T2524] bridge_slave_1: left allmulticast mode [ 167.186707][ T2524] bridge_slave_1: left promiscuous mode [ 167.199933][ T2524] bridge0: port 2(bridge_slave_1) entered disabled state [ 167.299121][ T2524] bridge_slave_0: left allmulticast mode [ 167.304855][ T2524] bridge_slave_0: left promiscuous mode [ 167.317877][ T25] usb 3-1: new full-speed USB device number 28 using dummy_hcd [ 167.336152][ T2524] bridge0: port 1(bridge_slave_0) entered disabled state [ 167.387165][ T7227] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 167.430700][ T7227] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 167.477919][ T25] usb 3-1: device descriptor read/64, error -71 [ 167.590878][ T25] usb usb3-port1: attempt power cycle [ 167.618231][ T9] usb 4-1: new high-speed USB device number 28 using dummy_hcd [ 167.628736][ T4622] Bluetooth: hci2: command tx timeout [ 167.801608][ T9] usb 4-1: config 0 has more interface descriptors, than it declares in bNumInterfaces, ignoring interface number: 0 [ 167.814702][ T9] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 167.825334][ T9] usb 4-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 4 [ 167.845489][ T9] usb 4-1: New USB device found, idVendor=1908, idProduct=1315, bcdDevice= 0.00 [ 167.856337][ T9] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 167.865500][ T9] usb 4-1: Product: syz [ 167.885132][ T9] usb 4-1: Manufacturer: syz [ 167.890490][ T9] usb 4-1: SerialNumber: syz [ 167.898116][ T9] usb 4-1: config 0 descriptor?? [ 167.926710][ T9] usb-storage 4-1:0.0: USB Mass Storage device detected [ 167.948344][ T25] usb 3-1: new full-speed USB device number 29 using dummy_hcd [ 167.953721][ T9] usb-storage 4-1:0.0: Quirks match for vid 1908 pid 1315: 20000 [ 167.988729][ T25] usb 3-1: device descriptor read/8, error -71 [ 168.180230][ T7234] kvm: kvm [7233]: vcpu0, guest rIP: 0x1a3 Unhandled WRMSR(0xc1) = 0x8000 [ 168.237882][ T25] usb 3-1: new full-speed USB device number 30 using dummy_hcd [ 168.275546][ T25] usb 3-1: device descriptor read/8, error -71 [ 168.319085][ T2524] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 168.342341][ T2524] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 168.367041][ T2524] bond0 (unregistering): Released all slaves [ 168.384537][ T7084] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 168.388797][ T25] usb usb3-port1: unable to enumerate USB device [ 168.393813][ T7084] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 168.457527][ T7084] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 168.594674][ T4622] Bluetooth: hci4: command tx timeout [ 168.735695][ T7084] hsr_slave_0: entered promiscuous mode [ 168.742400][ T7084] hsr_slave_1: entered promiscuous mode [ 168.752350][ T7084] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 168.767831][ T7084] Cannot create hsr debugfs directory [ 168.978209][ T2524] hsr_slave_0: left promiscuous mode [ 168.996227][ T2524] hsr_slave_1: left promiscuous mode [ 169.015052][ T2524] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 169.023468][ T2524] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 169.032358][ T2524] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 169.040536][ T2524] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 169.075527][ T2524] veth1_macvtap: left promiscuous mode [ 169.081921][ T2524] veth0_macvtap: left promiscuous mode [ 169.087633][ T2524] veth1_vlan: left promiscuous mode [ 169.097196][ T2524] veth0_vlan: left promiscuous mode [ 169.116091][ T7246] FAULT_INJECTION: forcing a failure. [ 169.116091][ T7246] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 169.137986][ T7246] CPU: 1 UID: 0 PID: 7246 Comm: syz.0.494 Not tainted 6.11.0-syzkaller-10547-g684a64bf32b6 #0 [ 169.148389][ T7246] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/06/2024 [ 169.158526][ T7246] Call Trace: [ 169.161836][ T7246] [ 169.164799][ T7246] dump_stack_lvl+0x241/0x360 [ 169.169530][ T7246] ? __pfx_dump_stack_lvl+0x10/0x10 [ 169.174777][ T7246] ? __pfx__printk+0x10/0x10 [ 169.179416][ T7246] ? snprintf+0xda/0x120 [ 169.183723][ T7246] should_fail_ex+0x3b0/0x4e0 [ 169.188458][ T7246] _copy_to_user+0x2f/0xb0 [ 169.192918][ T7246] simple_read_from_buffer+0xca/0x150 [ 169.198346][ T7246] proc_fail_nth_read+0x1e9/0x250 [ 169.203430][ T7246] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 169.209031][ T7246] ? rw_verify_area+0x55e/0x6f0 [ 169.213936][ T7246] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 169.219540][ T7246] vfs_read+0x201/0xbc0 [ 169.223742][ T7246] ? __pfx_lock_release+0x10/0x10 [ 169.228820][ T7246] ? __pfx_vfs_read+0x10/0x10 [ 169.233556][ T7246] ? __fget_files+0x3f3/0x470 [ 169.238318][ T7246] ? fdget_pos+0x24e/0x320 [ 169.242778][ T7246] ksys_read+0x183/0x2b0 [ 169.247068][ T7246] ? __pfx_ksys_read+0x10/0x10 [ 169.251887][ T7246] ? syscall_enter_from_user_mode_prepare+0x7f/0xe0 [ 169.258608][ T7246] ? lockdep_hardirqs_on+0x99/0x150 [ 169.263878][ T7246] __do_fast_syscall_32+0xb4/0x110 [ 169.269114][ T7246] ? exc_page_fault+0x590/0x8c0 [ 169.274772][ T7246] do_fast_syscall_32+0x34/0x80 [ 169.279645][ T7246] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 169.286129][ T7246] RIP: 0023:0xf7f85579 [ 169.290225][ T7246] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 [ 169.310001][ T7246] RSP: 002b:00000000f56e55a0 EFLAGS: 00000206 ORIG_RAX: 0000000000000003 [ 169.318452][ T7246] RAX: ffffffffffffffda RBX: 0000000000000005 RCX: 00000000f56e5620 [ 169.326655][ T7246] RDX: 000000000000000f RSI: 00000000f740bff4 RDI: 0000000000000000 [ 169.334807][ T7246] RBP: 0000000000000001 R08: 0000000000000000 R09: 0000000000000000 [ 169.342878][ T7246] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 169.351034][ T7246] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 169.359217][ T7246] [ 169.717988][ T4622] Bluetooth: hci2: command tx timeout [ 170.094802][ T2524] team0 (unregistering): Port device team_slave_1 removed [ 170.148727][ T2524] team0 (unregistering): Port device team_slave_0 removed [ 170.389827][ T9] usb 4-1: USB disconnect, device number 28 [ 170.535331][ T7255] netlink: 16 bytes leftover after parsing attributes in process `syz.3.497'. [ 170.806575][ T7249] 8021q: adding VLAN 0 to HW filter on device macvtap1 [ 171.175931][ T7262] kvm: kvm [7261]: vcpu0, guest rIP: 0x1a3 Unhandled WRMSR(0xc1) = 0x8000 [ 171.635013][ T7283] xt_cgroup: invalid path, errno=-2 [ 171.660745][ T7279] netlink: 'syz.3.503': attribute type 8 has an invalid length. [ 172.538590][ T7308] netlink: 16 bytes leftover after parsing attributes in process `syz.2.509'. [ 172.806151][ T7107] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 172.856819][ T7107] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 172.905764][ T7107] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 172.931128][ T7313] kvm: kvm [7312]: vcpu0, guest rIP: 0x1a3 Unhandled WRMSR(0xc1) = 0x8000 [ 172.943381][ T7107] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 173.112254][ T7084] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 173.144217][ T7084] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 173.209094][ T7084] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 173.270266][ T7084] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 173.396536][ T7084] 8021q: adding VLAN 0 to HW filter on device bond0 [ 173.431325][ T7084] 8021q: adding VLAN 0 to HW filter on device team0 [ 173.502708][ T2970] bridge0: port 1(bridge_slave_0) entered blocking state [ 173.509990][ T2970] bridge0: port 1(bridge_slave_0) entered forwarding state [ 173.582866][ T2970] bridge0: port 2(bridge_slave_1) entered blocking state [ 173.590097][ T2970] bridge0: port 2(bridge_slave_1) entered forwarding state [ 173.665930][ T7107] 8021q: adding VLAN 0 to HW filter on device bond0 [ 173.726135][ T5283] usb 4-1: new high-speed USB device number 29 using dummy_hcd [ 173.756892][ T7107] 8021q: adding VLAN 0 to HW filter on device team0 [ 173.800362][ T2524] bridge0: port 1(bridge_slave_0) entered blocking state [ 173.807815][ T2524] bridge0: port 1(bridge_slave_0) entered forwarding state [ 173.855605][ T2524] bridge0: port 2(bridge_slave_1) entered blocking state [ 173.862905][ T2524] bridge0: port 2(bridge_slave_1) entered forwarding state [ 173.903218][ T5283] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 173.953843][ T5283] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 173.968907][ T7084] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 174.032000][ T5283] usb 4-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 174.062788][ T5283] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 174.129349][ T5283] usb 4-1: SerialNumber: syz [ 174.210910][ T7343] team_slave_0: entered promiscuous mode [ 174.217108][ T7343] team_slave_1: entered promiscuous mode [ 174.244544][ T7343] team_slave_0: left promiscuous mode [ 174.250525][ T7343] team_slave_1: left promiscuous mode [ 174.344861][ T7084] veth0_vlan: entered promiscuous mode [ 174.373157][ T7326] fuse: Unknown parameter 'grou00000000000000000000' [ 174.389391][ T5283] usb 4-1: 0:2 : does not exist [ 174.400453][ T7107] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 174.403504][ T5283] usb 4-1: unit 5 not found! [ 174.425684][ T5283] usb 4-1: USB disconnect, device number 29 [ 174.443856][ T7084] veth1_vlan: entered promiscuous mode [ 174.516176][ T5338] udevd[5338]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 174.638102][ T5280] usb 3-1: new high-speed USB device number 31 using dummy_hcd [ 174.646767][ T7084] veth0_macvtap: entered promiscuous mode [ 174.663762][ T7353] netlink: 16 bytes leftover after parsing attributes in process `syz.0.518'. [ 174.694024][ T7084] veth1_macvtap: entered promiscuous mode [ 174.753580][ T7107] veth0_vlan: entered promiscuous mode [ 174.789839][ T5280] usb 3-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 174.809540][ T7084] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 174.832006][ T5280] usb 3-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 174.843884][ T7084] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 174.855484][ T5280] usb 3-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 174.867900][ T7084] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 174.898563][ T5280] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 174.909199][ T7084] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 174.940995][ T7348] raw-gadget.1 gadget.2: fail, usb_ep_enable returned -22 [ 174.957411][ T7084] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 174.980929][ T5280] usb 3-1: Quirk or no altset; falling back to MIDI 1.0 [ 174.989331][ T7084] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 175.022181][ T7084] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 175.055059][ T7107] veth1_vlan: entered promiscuous mode [ 175.136012][ T7084] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 175.199565][ T7084] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 175.208533][ T7348] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 175.247078][ T7084] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 175.270564][ T7084] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 175.281690][ T7084] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 175.302630][ T7084] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 175.318431][ T7348] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 175.324221][ T7084] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 175.378050][ T9] usb 3-1: USB disconnect, device number 31 [ 175.400202][ T7367] kvm: kvm [7365]: vcpu0, guest rIP: 0x1a3 Unhandled WRMSR(0xc1) = 0x8000 [ 175.410524][ T7084] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 175.434938][ T7084] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 175.463210][ T7084] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 175.506084][ T7084] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 175.583364][ T7107] veth0_macvtap: entered promiscuous mode [ 175.646032][ T7107] veth1_macvtap: entered promiscuous mode [ 175.770168][ T7107] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 175.814941][ T7107] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 175.852270][ T7107] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 175.879656][ T7107] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 175.897337][ T7107] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 175.921913][ T7107] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 175.939345][ T7393] FAULT_INJECTION: forcing a failure. [ 175.939345][ T7393] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 175.939542][ T7107] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 175.974656][ T7107] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 175.982987][ T7393] CPU: 0 UID: 0 PID: 7393 Comm: syz.3.525 Not tainted 6.11.0-syzkaller-10547-g684a64bf32b6 #0 [ 175.986689][ T7107] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 175.994766][ T7393] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/06/2024 [ 175.994787][ T7393] Call Trace: [ 175.994798][ T7393] [ 175.994808][ T7393] dump_stack_lvl+0x241/0x360 [ 175.994848][ T7393] ? __pfx_dump_stack_lvl+0x10/0x10 [ 175.994879][ T7393] ? __pfx__printk+0x10/0x10 [ 175.994910][ T7393] ? __pfx_lock_release+0x10/0x10 [ 175.994952][ T7393] should_fail_ex+0x3b0/0x4e0 [ 175.994985][ T7393] ? __pfx_vlan_ioctl_handler+0x10/0x10 [ 175.995016][ T7393] _copy_from_user+0x2f/0xe0 [ 175.995044][ T7393] ? __pfx_vlan_ioctl_handler+0x10/0x10 [ 175.995072][ T7393] vlan_ioctl_handler+0xa5/0x9d0 [ 176.024957][ T62] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 176.028785][ T7393] ? sock_ioctl+0x661/0x8e0 [ 176.028823][ T7393] ? __pfx_vlan_ioctl_handler+0x10/0x10 [ 176.028862][ T7393] ? tomoyo_path_number_perm+0x71a/0x880 [ 176.028897][ T7393] ? __pfx_vlan_ioctl_handler+0x10/0x10 [ 176.028924][ T7393] sock_ioctl+0x680/0x8e0 [ 176.028950][ T7393] ? __pfx_sock_ioctl+0x10/0x10 [ 176.028988][ T7393] compat_sock_ioctl+0xc5c/0xf20 [ 176.029017][ T7393] ? __pfx_compat_sock_ioctl+0x10/0x10 [ 176.029047][ T7393] ? __fget_files+0x29/0x470 [ 176.029075][ T7393] ? __fget_files+0x3f3/0x470 [ 176.029113][ T7393] __se_compat_sys_ioctl+0x510/0xc90 [ 176.029153][ T7393] ? __pfx___se_compat_sys_ioctl+0x10/0x10 [ 176.029198][ T7393] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 176.029235][ T7393] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 176.029277][ T7393] ? syscall_enter_from_user_mode_prepare+0x7f/0xe0 [ 176.152731][ T7393] ? lockdep_hardirqs_on+0x99/0x150 [ 176.158159][ T7393] __do_fast_syscall_32+0xb4/0x110 [ 176.163347][ T7393] ? exc_page_fault+0x590/0x8c0 [ 176.168285][ T7393] do_fast_syscall_32+0x34/0x80 [ 176.173178][ T7393] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 176.179623][ T7393] RIP: 0023:0xf745d579 [ 176.183709][ T7393] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 [ 176.203339][ T7393] RSP: 002b:00000000f574656c EFLAGS: 00000206 ORIG_RAX: 0000000000000036 [ 176.211801][ T7393] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000000008982 [ 176.219799][ T7393] RDX: 0000000020000800 RSI: 0000000000000000 RDI: 0000000000000000 [ 176.227788][ T7393] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 176.235770][ T7393] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 176.243786][ T7393] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 176.251827][ T7393] [ 176.267130][ T62] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 176.296215][ T7107] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 176.309086][ T7107] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 176.319752][ T5284] usb 1-1: new high-speed USB device number 24 using dummy_hcd [ 176.334648][ T7107] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 176.345689][ T7107] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 176.361861][ T7107] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 176.373744][ T7107] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 176.384801][ T7107] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 176.396232][ T7107] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 176.461441][ T7107] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 176.507820][ T5284] usb 1-1: Using ep0 maxpacket: 32 [ 176.551766][ T5284] usb 1-1: config index 0 descriptor too short (expected 156, got 27) [ 176.563957][ T7107] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 176.583998][ T5284] usb 1-1: too many endpoints for config 0 interface 0 altsetting 191: 144, using maximum allowed: 30 [ 176.594316][ T7107] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 176.608276][ T5284] usb 1-1: config 0 interface 0 altsetting 191 endpoint 0x87 has an invalid bInterval 0, changing to 7 [ 176.619849][ T5284] usb 1-1: config 0 interface 0 altsetting 191 has 1 endpoint descriptor, different from the interface descriptor's value: 144 [ 176.636493][ T5284] usb 1-1: config 0 interface 0 has no altsetting 0 [ 176.643901][ T7107] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 176.648844][ T5284] usb 1-1: New USB device found, idVendor=0f11, idProduct=1021, bcdDevice=86.66 [ 176.667185][ T7107] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 176.681915][ T5284] usb 1-1: New USB device strings: Mfr=85, Product=120, SerialNumber=172 [ 176.732112][ T5284] usb 1-1: Product: syz [ 176.737026][ T5284] usb 1-1: Manufacturer: syz [ 176.746020][ T5284] usb 1-1: SerialNumber: syz [ 176.760529][ T2524] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 176.769048][ T2524] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 176.860638][ T5284] usb 1-1: config 0 descriptor?? [ 176.926685][ T5280] usb 4-1: new high-speed USB device number 30 using dummy_hcd [ 176.945524][ T5284] ldusb 1-1:0.0: Interrupt out endpoint not found (using control endpoint instead) [ 176.968097][ T2524] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 176.973795][ T5284] ldusb 1-1:0.0: LD USB Device #0 now attached to major 180 minor 0 [ 176.982503][ T2524] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 177.131057][ T2535] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 177.139237][ T2535] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 177.225407][ T5280] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 177.238290][ T5280] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 177.247443][ T5280] usb 4-1: config 1 interface 0 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 177.272032][ T5280] usb 4-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0 [ 177.302843][ T7416] netlink: 8 bytes leftover after parsing attributes in process `syz.4.451'. [ 177.350752][ T5280] usb 4-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 177.360323][ T5280] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 177.364228][ T7386] ldusb 1-1:0.0: Couldn't submit HID_REQ_SET_REPORT -71 [ 177.368468][ T5280] usb 4-1: SerialNumber: syz [ 177.442615][ T5282] usb 1-1: USB disconnect, device number 24 [ 177.442702][ C0] ldusb 1-1:0.0: usb_submit_urb failed (-19) [ 177.458194][ T7390] ldusb 1-1:0.0: Couldn't submit HID_REQ_SET_REPORT -19 [ 177.471677][ T5282] ldusb 1-1:0.0: LD USB Device #0 now disconnected [ 177.767804][ T939] usb 2-1: new high-speed USB device number 23 using dummy_hcd [ 177.988125][ T939] usb 2-1: Using ep0 maxpacket: 32 [ 177.999475][ T939] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 178.015126][ T939] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 178.034379][ T939] usb 2-1: New USB device found, idVendor=1e7d, idProduct=2ced, bcdDevice= 0.00 [ 178.053942][ T939] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 178.074058][ T939] usb 2-1: config 0 descriptor?? [ 178.077945][ T51] usb 5-1: new high-speed USB device number 22 using dummy_hcd [ 178.274551][ T51] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 178.305803][ T51] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 178.327188][ T51] usb 5-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 178.341920][ T51] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 178.360409][ T51] usb 5-1: SerialNumber: syz [ 178.585299][ T7445] fuse: Unknown parameter 'grou00000000000000000000' [ 178.639077][ T51] usb 5-1: 0:2 : does not exist [ 178.654537][ T939] kone 0003:1E7D:2CED.0008: hidraw0: USB HID v0.00 Device [HID 1e7d:2ced] on usb-dummy_hcd.1-1/input0 [ 178.697318][ T51] usb 5-1: unit 5 not found! [ 178.782492][ T5280] usb 4-1: 0:2 : does not exist [ 178.803534][ T51] usb 5-1: USB disconnect, device number 22 [ 178.814508][ T5280] usb 4-1: USB disconnect, device number 30 [ 178.850272][ T939] kone 0003:1E7D:2CED.0008: couldn't init struct kone_device [ 178.903503][ T939] kone 0003:1E7D:2CED.0008: couldn't install mouse [ 178.922165][ T5242] udevd[5242]: setting mode of /dev/mixer3 to 020660 failed: No such file or directory [ 178.950383][ T7473] netlink: 8 bytes leftover after parsing attributes in process `syz.3.535'. [ 178.974888][ T939] kone 0003:1E7D:2CED.0008: probe with driver kone failed with error -5 [ 178.984161][ T5242] udevd[5242]: setting owner of /dev/mixer3 to uid=0, gid=29 failed: No such file or directory [ 179.028369][ T939] usb 2-1: USB disconnect, device number 23 [ 179.924877][ T7498] netlink: 8 bytes leftover after parsing attributes in process `syz.2.541'. [ 180.328034][ T5280] usb 1-1: new high-speed USB device number 25 using dummy_hcd [ 180.405561][ T7524] netlink: 4 bytes leftover after parsing attributes in process `syz.3.547'. [ 180.487916][ T5280] usb 1-1: Using ep0 maxpacket: 16 [ 180.505780][ T5280] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 180.528571][ T5280] usb 1-1: config 1 interface 0 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 8 [ 180.560518][ T5280] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 180.572093][ T5280] usb 1-1: config 1 interface 0 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 22 [ 180.606760][ T5284] usb 3-1: new high-speed USB device number 32 using dummy_hcd [ 180.618233][ T5280] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 180.629880][ T5280] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 180.639382][ T5280] usb 1-1: SerialNumber: syz [ 180.652063][ T7512] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 180.758630][ T5284] usb 3-1: Using ep0 maxpacket: 8 [ 180.770518][ T5284] usb 3-1: descriptor type invalid, skip [ 180.786731][ T5284] usb 3-1: descriptor type invalid, skip [ 180.796898][ T5284] usb 3-1: descriptor type invalid, skip [ 180.807224][ T5284] usb 3-1: descriptor type invalid, skip [ 180.827412][ T5284] usb 3-1: config 1 interface 0 altsetting 110 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 180.845833][ T5284] usb 3-1: config 1 interface 0 has no altsetting 0 [ 180.848845][ T939] usb 4-1: new high-speed USB device number 31 using dummy_hcd [ 180.873387][ T5284] usb 3-1: New USB device found, idVendor=0dfc, idProduct=0100, bcdDevice= 0.40 [ 180.928190][ T5284] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 180.936304][ T5284] usb 3-1: Product: ᐇ [ 180.976364][ T5284] usb 3-1: SerialNumber: 〉 [ 181.053194][ T939] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 181.075853][ T939] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 181.123053][ T5282] usb 1-1: USB disconnect, device number 25 [ 181.140464][ T939] usb 4-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 181.173217][ T939] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 181.187455][ T939] usb 4-1: SerialNumber: syz [ 181.241599][ T7522] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 181.288695][ T7522] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 181.338334][ T5280] usb 2-1: new high-speed USB device number 24 using dummy_hcd [ 181.432767][ T5284] usbhid 3-1:1.0: can't add hid device: -71 [ 181.433821][ T7530] fuse: Unknown parameter 'grou00000000000000000000' [ 181.449616][ T5284] usbhid 3-1:1.0: probe with driver usbhid failed with error -71 [ 181.483240][ T5284] usb 3-1: USB disconnect, device number 32 [ 181.489493][ T939] usb 4-1: 0:2 : does not exist [ 181.518196][ T939] usb 4-1: unit 5 not found! [ 181.540031][ T5280] usb 2-1: Using ep0 maxpacket: 8 [ 181.572753][ T5280] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 181.574126][ T939] usb 4-1: USB disconnect, device number 31 [ 181.594566][ T5280] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 181.613222][ T5280] usb 2-1: New USB device found, idVendor=056a, idProduct=00e5, bcdDevice= 0.00 [ 181.623104][ T5280] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 181.665676][ T5280] usb 2-1: config 0 descriptor?? [ 181.693365][ T5338] udevd[5338]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 182.118177][ T5283] usb 1-1: new high-speed USB device number 26 using dummy_hcd [ 182.171892][ T7544] syzkaller0: entered allmulticast mode [ 182.239312][ T7564] netlink: 8 bytes leftover after parsing attributes in process `syz.3.556'. [ 182.262007][ T5280] wacom 0003:056A:00E5.0009: hidraw0: USB HID v0.00 Device [HID 056a:00e5] on usb-dummy_hcd.1-1/input0 [ 182.323150][ T5283] usb 1-1: New USB device found, idVendor=17e9, idProduct=8b4e, bcdDevice=9c.08 [ 182.342976][ T5283] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 182.360146][ T5283] usb 1-1: config 0 descriptor?? [ 182.577104][ T939] usb 2-1: USB disconnect, device number 24 [ 182.605247][ T7559] dccp_v4_rcv: dropped packet with invalid checksum [ 182.696110][ T7570] netlink: 8 bytes leftover after parsing attributes in process `syz.3.568'. [ 182.798431][ T5283] [drm] vendor descriptor length:e0 data:00 00 00 00 00 00 00 00 00 00 00 [ 182.827158][ T5283] [drm:udl_init] *ERROR* Unrecognized vendor firmware descriptor [ 182.877032][ T5283] [drm] Initialized udl 0.0.1 for 1-1:0.0 on minor 2 [ 182.923705][ T5283] [drm] Initialized udl on minor 2 [ 183.066954][ T5283] udl 1-1:0.0: [drm] *ERROR* Read EDID byte 0 failed [ 183.116925][ T5283] udl 1-1:0.0: [drm] Cannot find any crtc or sizes [ 183.155714][ T7580] netlink: 'syz.3.559': attribute type 29 has an invalid length. [ 183.211216][ T7580] netlink: 'syz.3.559': attribute type 29 has an invalid length. [ 183.311538][ T939] usb 1-1: USB disconnect, device number 26 [ 183.328013][ T5282] udl 1-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffb9 [ 183.386228][ T5282] udl 1-1:0.0: [drm] Cannot find any crtc or sizes [ 183.388097][ T5231] Bluetooth: hci3: command 0x0406 tx timeout [ 183.648291][ T5283] usb 2-1: new high-speed USB device number 25 using dummy_hcd [ 183.713513][ T7592] fuse: Unknown parameter 'measure' [ 183.850488][ T5283] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 183.867727][ T5283] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x4 has invalid wMaxPacketSize 0 [ 183.887895][ T51] usb 3-1: new high-speed USB device number 33 using dummy_hcd [ 183.926240][ T5283] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0xA has invalid wMaxPacketSize 0 [ 184.022115][ T5283] usb 2-1: New USB device found, idVendor=1385, idProduct=5f02, bcdDevice=d7.6a [ 184.032795][ T5283] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 184.042131][ T51] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 184.044956][ T5283] usb 2-1: Product: syz [ 184.057653][ T5283] usb 2-1: Manufacturer: syz [ 184.060013][ T51] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 184.080751][ T5283] usb 2-1: SerialNumber: syz [ 184.106267][ T5283] usb 2-1: config 0 descriptor?? [ 184.111088][ T51] usb 3-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 184.122038][ T5283] usb 2-1: Could not find all expected endpoints [ 184.127932][ T51] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 184.140275][ T7606] fuse: Bad value for 'fd' [ 184.143237][ T51] usb 3-1: SerialNumber: syz [ 184.159344][ T7605] netlink: 8 bytes leftover after parsing attributes in process `syz.0.570'. [ 184.359615][ T7617] netlink: 4 bytes leftover after parsing attributes in process `syz.3.572'. [ 184.388891][ T7597] fuse: Unknown parameter 'grou00000000000000000000' [ 184.401037][ T51] usb 3-1: 0:2 : does not exist [ 184.406037][ T51] usb 3-1: unit 5 not found! [ 184.417911][ T7617] delete_channel: no stack [ 184.455530][ T51] usb 3-1: USB disconnect, device number 33 [ 184.526325][ T5338] udevd[5338]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 184.805711][ T7628] netlink: 4 bytes leftover after parsing attributes in process `syz.3.576'. [ 184.848352][ T5284] usb 5-1: new high-speed USB device number 23 using dummy_hcd [ 184.956970][ T51] usb 2-1: USB disconnect, device number 25 [ 185.048331][ T5284] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 185.097938][ T5284] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 185.126099][ T5284] usb 5-1: New USB device found, idVendor=0079, idProduct=0006, bcdDevice= 0.00 [ 185.165468][ T5284] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 185.198203][ T5284] usb 5-1: config 0 descriptor?? [ 185.365292][ T7643] fuse: Bad value for 'fd' [ 185.437897][ T51] usb 4-1: new high-speed USB device number 32 using dummy_hcd [ 185.491035][ T5284] usbhid 5-1:0.0: can't add hid device: -71 [ 185.501019][ T5284] usbhid 5-1:0.0: probe with driver usbhid failed with error -71 [ 185.522901][ T5284] usb 5-1: USB disconnect, device number 23 [ 185.555247][ T5280] usb 1-1: new high-speed USB device number 27 using dummy_hcd [ 185.587886][ T51] usb 4-1: Using ep0 maxpacket: 32 [ 185.595894][ T51] usb 4-1: config 1 interface 1 altsetting 1 endpoint 0x82 has invalid maxpacket 1403, setting to 1024 [ 185.627480][ T51] usb 4-1: config 1 interface 1 altsetting 1 bulk endpoint 0x82 has invalid maxpacket 1024 [ 185.645498][ T51] usb 4-1: config 1 interface 1 altsetting 1 bulk endpoint 0x3 has invalid maxpacket 64 [ 185.698982][ T29] audit: type=1326 audit(1727278934.514:9): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7650 comm="syz.4.584" exe="/root/syz-executor" sig=31 arch=40000003 syscall=240 compat=1 ip=0xf740d579 code=0x0 [ 185.724014][ T5280] usb 1-1: Using ep0 maxpacket: 16 [ 185.734277][ T5280] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 185.752678][ T5280] usb 1-1: config 1 interface 0 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 8 [ 185.765183][ T5280] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 185.775594][ T5280] usb 1-1: config 1 interface 0 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 22 [ 185.797056][ T7649] netlink: 16 bytes leftover after parsing attributes in process `syz.2.583'. [ 185.804337][ T5280] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 185.850817][ T5280] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 185.865041][ T5280] usb 1-1: SerialNumber: syz [ 185.886103][ T7641] raw-gadget.2 gadget.0: fail, usb_ep_enable returned -22 [ 186.304744][ T5280] usb 1-1: USB disconnect, device number 27 [ 187.024846][ T7676] netlink: 8 bytes leftover after parsing attributes in process `syz.4.590'. [ 187.111032][ T5280] usb 3-1: new high-speed USB device number 34 using dummy_hcd [ 187.290953][ T7683] fuse: Bad value for 'fd' [ 187.320334][ T5280] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 187.330921][ T5280] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 187.381060][ T5280] usb 3-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 187.399879][ T5280] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 187.419342][ T5280] usb 3-1: SerialNumber: syz [ 187.657379][ T7674] fuse: Unknown parameter 'grou00000000000000000000' [ 187.690121][ T5280] usb 3-1: 0:2 : does not exist [ 187.714765][ T5280] usb 3-1: unit 5 not found! [ 187.800322][ T5280] usb 3-1: USB disconnect, device number 34 [ 187.859651][ T7690] fuse: Unknown parameter 'rol0000000004 000' [ 188.016575][ T35] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 188.110788][ T5338] udevd[5338]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 188.234453][ T51] usb 4-1: string descriptor 0 read error: -71 [ 188.268548][ T51] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 188.297487][ T51] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 188.356560][ T51] usb 4-1: can't set config #1, error -71 [ 188.438013][ T51] usb 4-1: USB disconnect, device number 32 [ 188.453165][ T35] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 188.467422][ T5231] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 188.484988][ T5231] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 188.494715][ T5231] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 188.503095][ T5231] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 188.512087][ T5231] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 188.532894][ T5231] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 188.782943][ T35] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 188.813792][ T7705] netlink: 8 bytes leftover after parsing attributes in process `syz.3.602'. [ 188.956665][ T35] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 188.957915][ T5278] usb 3-1: new high-speed USB device number 35 using dummy_hcd [ 189.138754][ T5278] usb 3-1: Using ep0 maxpacket: 16 [ 189.150391][ T5278] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 189.161670][ T5278] usb 3-1: config 1 interface 0 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 8 [ 189.172814][ T5278] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 189.183098][ T5278] usb 3-1: config 1 interface 0 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 22 [ 189.197838][ T5278] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 189.207560][ T5278] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 189.216402][ T5278] usb 3-1: SerialNumber: syz [ 189.229274][ T7703] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 189.268711][ T7719] fuse: Bad value for 'fd' [ 189.406486][ T7698] chnl_net:caif_netlink_parms(): no params data found [ 189.466730][ T35] bridge_slave_1: left allmulticast mode [ 189.501994][ T35] bridge_slave_1: left promiscuous mode [ 189.521319][ T35] bridge0: port 2(bridge_slave_1) entered disabled state [ 189.553046][ T35] bridge_slave_0: left allmulticast mode [ 189.585470][ T35] bridge_slave_0: left promiscuous mode [ 189.595109][ T35] bridge0: port 1(bridge_slave_0) entered disabled state [ 189.711463][ T939] usb 3-1: USB disconnect, device number 35 [ 189.738886][ T5283] usb 5-1: new high-speed USB device number 24 using dummy_hcd [ 189.911118][ T5283] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 189.927460][ T5283] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 189.940451][ T5283] usb 5-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 189.957436][ T5283] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 189.968033][ T5283] usb 5-1: SerialNumber: syz [ 190.098102][ T5282] usb 1-1: new low-speed USB device number 28 using dummy_hcd [ 190.183014][ T7725] fuse: Unknown parameter 'grou00000000000000000000' [ 190.212843][ T5283] usb 5-1: 0:2 : does not exist [ 190.220442][ T35] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 190.221290][ T5283] usb 5-1: unit 5 not found! [ 190.244930][ T35] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 190.260686][ T5283] usb 5-1: USB disconnect, device number 24 [ 190.268231][ T5282] usb 1-1: Invalid ep0 maxpacket: 64 [ 190.284570][ T35] bond0 (unregistering): Released all slaves [ 190.310885][ T5338] udevd[5338]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 190.418058][ T5282] usb 1-1: new low-speed USB device number 29 using dummy_hcd [ 190.588385][ T4622] Bluetooth: hci2: command tx timeout [ 190.597842][ T5282] usb 1-1: Invalid ep0 maxpacket: 64 [ 190.603596][ T5282] usb usb1-port1: attempt power cycle [ 190.726546][ T7698] bridge0: port 1(bridge_slave_0) entered blocking state [ 190.734087][ T7698] bridge0: port 1(bridge_slave_0) entered disabled state [ 190.741879][ T7698] bridge_slave_0: entered allmulticast mode [ 190.750537][ T7698] bridge_slave_0: entered promiscuous mode [ 190.758814][ T7698] bridge0: port 2(bridge_slave_1) entered blocking state [ 190.766102][ T7698] bridge0: port 2(bridge_slave_1) entered disabled state [ 190.773574][ T7698] bridge_slave_1: entered allmulticast mode [ 190.780838][ T7698] bridge_slave_1: entered promiscuous mode [ 190.916880][ T7747] netlink: 'syz.2.614': attribute type 14 has an invalid length. [ 190.958775][ T7698] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 190.958834][ T5282] usb 1-1: new low-speed USB device number 30 using dummy_hcd [ 191.010718][ T35] hsr_slave_0: left promiscuous mode [ 191.017548][ T5282] usb 1-1: Invalid ep0 maxpacket: 64 [ 191.024257][ T35] hsr_slave_1: left promiscuous mode [ 191.037354][ T35] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 191.045324][ T35] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 191.058484][ T35] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 191.065975][ T35] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 191.094835][ T35] veth1_macvtap: left promiscuous mode [ 191.102518][ T35] veth0_macvtap: left promiscuous mode [ 191.108849][ T35] veth1_vlan: left promiscuous mode [ 191.114380][ T35] veth0_vlan: left promiscuous mode [ 191.149086][ T5283] usb 5-1: new high-speed USB device number 25 using dummy_hcd [ 191.156861][ T5282] usb 1-1: new low-speed USB device number 31 using dummy_hcd [ 191.189421][ T5282] usb 1-1: Invalid ep0 maxpacket: 64 [ 191.195436][ T5282] usb usb1-port1: unable to enumerate USB device [ 191.332792][ T5283] usb 5-1: Using ep0 maxpacket: 16 [ 191.344366][ T5283] usb 5-1: config 0 has an invalid interface number: 206 but max is 0 [ 191.363771][ T5283] usb 5-1: config 0 has no interface number 0 [ 191.378340][ T5283] usb 5-1: config 0 interface 206 altsetting 0 endpoint 0x9 has invalid wMaxPacketSize 0 [ 191.398403][ T5283] usb 5-1: config 0 interface 206 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 191.419041][ T5283] usb 5-1: New USB device found, idVendor=257a, idProduct=2607, bcdDevice=71.5f [ 191.443712][ T5283] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 191.471203][ T5283] usb 5-1: Product: syz [ 191.474560][ T7765] netlink: 8 bytes leftover after parsing attributes in process `syz.3.616'. [ 191.475506][ T5283] usb 5-1: Manufacturer: syz [ 191.498767][ T5283] usb 5-1: SerialNumber: syz [ 191.505858][ T5283] usb 5-1: config 0 descriptor?? [ 191.514980][ T5283] option 5-1:0.206: GSM modem (1-port) converter detected [ 191.633992][ T7768] fuse: Bad value for 'fd' [ 192.070626][ T35] team0 (unregistering): Port device team_slave_1 removed [ 192.135846][ T35] team0 (unregistering): Port device team_slave_0 removed [ 192.668737][ T4622] Bluetooth: hci2: command tx timeout [ 192.714250][ T7698] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 192.751642][ T5280] usb 5-1: USB disconnect, device number 25 [ 192.763068][ T5280] option 5-1:0.206: device disconnected [ 192.903653][ T7698] team0: Port device team_slave_0 added [ 192.939773][ T7698] team0: Port device team_slave_1 added [ 193.114670][ T7698] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 193.143412][ T7698] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 193.206352][ T7698] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 193.229323][ T4622] Bluetooth: hci3: unexpected event for opcode 0x0809 [ 193.270284][ T7698] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 193.278729][ T7698] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 193.316471][ T7698] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 193.332251][ T4622] Bluetooth: hci3: unexpected event for opcode 0x0000 [ 193.437857][ T5280] usb 1-1: new high-speed USB device number 32 using dummy_hcd [ 193.630986][ T5280] usb 1-1: Using ep0 maxpacket: 32 [ 193.675806][ T5280] usb 1-1: config index 0 descriptor too short (expected 156, got 27) [ 193.713135][ T5280] usb 1-1: too many endpoints for config 0 interface 0 altsetting 191: 144, using maximum allowed: 30 [ 193.793322][ T5280] usb 1-1: config 0 interface 0 altsetting 191 endpoint 0x87 has an invalid bInterval 0, changing to 7 [ 193.829691][ T5280] usb 1-1: config 0 interface 0 altsetting 191 has 1 endpoint descriptor, different from the interface descriptor's value: 144 [ 193.877717][ T5280] usb 1-1: config 0 interface 0 has no altsetting 0 [ 193.899121][ T7698] hsr_slave_0: entered promiscuous mode [ 193.900956][ T5280] usb 1-1: New USB device found, idVendor=0f11, idProduct=1021, bcdDevice=86.66 [ 193.920449][ T7698] hsr_slave_1: entered promiscuous mode [ 193.956309][ T7698] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 193.957750][ T5280] usb 1-1: New USB device strings: Mfr=85, Product=120, SerialNumber=172 [ 193.964704][ T7698] Cannot create hsr debugfs directory [ 194.009875][ T5280] usb 1-1: Product: syz [ 194.032024][ T5280] usb 1-1: Manufacturer: syz [ 194.048609][ T5280] usb 1-1: SerialNumber: syz [ 194.071462][ T5280] usb 1-1: config 0 descriptor?? [ 194.098411][ T5280] ldusb 1-1:0.0: Interrupt out endpoint not found (using control endpoint instead) [ 194.141306][ T7815] netlink: 8 bytes leftover after parsing attributes in process `syz.2.626'. [ 194.153288][ T5280] ldusb 1-1:0.0: LD USB Device #0 now attached to major 180 minor 0 [ 194.516999][ T1267] ieee802154 phy0 wpan0: encryption failed: -22 [ 194.523561][ T1267] ieee802154 phy1 wpan1: encryption failed: -22 [ 194.753705][ T5231] Bluetooth: hci2: command tx timeout [ 194.825244][ T5283] usb 1-1: USB disconnect, device number 32 [ 194.859518][ T5283] ldusb 1-1:0.0: LD USB Device #0 now disconnected [ 195.260931][ T7835] netlink: 'syz.3.628': attribute type 1 has an invalid length. [ 195.278890][ T7835] netlink: 168864 bytes leftover after parsing attributes in process `syz.3.628'. [ 195.345125][ T7698] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 195.400653][ T7698] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 195.478203][ T7698] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 195.540708][ T7698] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 195.978484][ T7853] netlink: 'syz.2.632': attribute type 10 has an invalid length. [ 195.988517][ T7853] netlink: 199836 bytes leftover after parsing attributes in process `syz.2.632'. [ 196.026100][ T7698] 8021q: adding VLAN 0 to HW filter on device bond0 [ 196.047309][ T7698] 8021q: adding VLAN 0 to HW filter on device team0 [ 196.071048][ T2904] bridge0: port 1(bridge_slave_0) entered blocking state [ 196.078376][ T2904] bridge0: port 1(bridge_slave_0) entered forwarding state [ 196.148818][ T2904] bridge0: port 2(bridge_slave_1) entered blocking state [ 196.156146][ T2904] bridge0: port 2(bridge_slave_1) entered forwarding state [ 196.285808][ T7698] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 196.313492][ T7698] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 196.374214][ T7698] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 196.411716][ T7698] veth0_vlan: entered promiscuous mode [ 196.436078][ T7698] veth1_vlan: entered promiscuous mode [ 196.463821][ T7698] veth0_macvtap: entered promiscuous mode [ 196.473477][ T7698] veth1_macvtap: entered promiscuous mode [ 196.490873][ T7698] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 196.502063][ T7698] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 196.518466][ T7698] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 196.529067][ T7698] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 196.538990][ T7698] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 196.549816][ T7698] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 196.567814][ T7698] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 196.580822][ T7698] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 196.592875][ T7698] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 196.621394][ T7860] mmap: syz.2.634 (7860): VmData 37519360 exceed data ulimit 0. Update limits or use boot option ignore_rlimit_data. [ 196.643559][ T5231] Bluetooth: hci1: command 0x0406 tx timeout [ 196.712629][ T7698] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 196.724992][ T7698] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 196.768151][ T7698] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 196.795484][ T7698] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 196.817092][ T7698] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 196.829125][ T4622] Bluetooth: hci2: command tx timeout [ 196.843584][ T7698] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 196.856761][ T7698] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 196.880072][ T7698] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 196.917330][ T7698] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 196.938474][ T5284] IPVS: starting estimator thread 0... [ 196.970111][ T7698] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 196.991414][ T7698] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 197.008241][ T7698] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 197.023698][ T7698] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 197.033852][ T7877] IPVS: using max 16 ests per chain, 38400 per kthread [ 197.380864][ T35] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 197.541657][ T7890] netlink: 8 bytes leftover after parsing attributes in process `syz.0.638'. [ 197.557627][ T35] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 197.958164][ T5283] usb 3-1: new high-speed USB device number 36 using dummy_hcd [ 198.431615][ T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 198.459745][ T5283] usb 3-1: Using ep0 maxpacket: 16 [ 198.469207][ T5283] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 198.500807][ T5283] usb 3-1: config 1 interface 0 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 8 [ 198.518053][ T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 198.572933][ T5283] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 198.605169][ T5283] usb 3-1: config 1 interface 0 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 22 [ 198.717324][ T5283] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 198.759961][ T5283] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 198.805327][ T5283] usb 3-1: SerialNumber: syz [ 198.891636][ T7889] raw-gadget.1 gadget.2: fail, usb_ep_enable returned -22 [ 199.251880][ T5284] usb 4-1: new high-speed USB device number 33 using dummy_hcd [ 199.408882][ T5284] usb 4-1: Using ep0 maxpacket: 16 [ 199.418069][ T5284] usb 4-1: device descriptor read/all, error -71 [ 199.463003][ T5278] usb 3-1: USB disconnect, device number 36 [ 199.625936][ T7915] netlink: 'syz.0.643': attribute type 10 has an invalid length. [ 199.653697][ T7915] netlink: 199836 bytes leftover after parsing attributes in process `syz.0.643'. [ 200.604755][ T7918] netlink: 16 bytes leftover after parsing attributes in process `syz.3.642'. [ 200.732655][ T4622] Bluetooth: hci3: unexpected event for opcode 0x0809 [ 200.867338][ T4622] Bluetooth: hci3: unexpected event for opcode 0x0000 [ 201.467872][ T25] usb 4-1: new high-speed USB device number 35 using dummy_hcd [ 201.618003][ T25] usb 4-1: Using ep0 maxpacket: 8 [ 201.626814][ T25] usb 4-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 201.637501][ T25] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 201.657255][ T25] usb 4-1: Product: syz [ 201.678205][ T25] usb 4-1: Manufacturer: syz [ 201.682996][ T25] usb 4-1: SerialNumber: syz [ 201.712524][ T25] usb 4-1: config 0 descriptor?? [ 201.737229][ T939] IPVS: starting estimator thread 0... [ 201.868234][ T7963] IPVS: using max 16 ests per chain, 38400 per kthread [ 201.924145][ T25] usb 4-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 201.978082][ T5283] usb 2-1: new high-speed USB device number 26 using dummy_hcd [ 202.026961][ T25] dvb_usb_rtl28xxu 4-1:0.0: probe with driver dvb_usb_rtl28xxu failed with error -71 [ 202.085640][ T25] usb 4-1: USB disconnect, device number 35 [ 202.163848][ T5283] usb 2-1: Using ep0 maxpacket: 16 [ 202.193423][ T5283] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 202.223888][ T5283] usb 2-1: config 1 interface 0 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 8 [ 202.274874][ T5283] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 202.326329][ T5283] usb 2-1: config 1 interface 0 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 22 [ 202.417878][ T5283] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 202.427824][ T5280] usb 1-1: new high-speed USB device number 34 using dummy_hcd [ 202.444557][ T5283] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 202.473009][ T5283] usb 2-1: SerialNumber: syz [ 202.510178][ T7958] raw-gadget.1 gadget.1: fail, usb_ep_enable returned -22 [ 202.618002][ T5280] usb 1-1: Using ep0 maxpacket: 16 [ 202.632187][ T5280] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 202.677898][ T5280] usb 1-1: config 1 interface 0 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 8 [ 202.690138][ T5280] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 202.701525][ T5280] usb 1-1: config 1 interface 0 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 22 [ 202.716862][ T5280] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 202.745134][ T25] usb 4-1: new high-speed USB device number 36 using dummy_hcd [ 202.756879][ T5280] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 202.775574][ T5280] usb 1-1: SerialNumber: syz [ 202.789143][ T7976] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 202.898096][ T5280] usb 2-1: USB disconnect, device number 26 [ 202.926747][ T25] usb 4-1: Using ep0 maxpacket: 16 [ 202.979889][ T25] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0xF has invalid wMaxPacketSize 0 [ 202.989969][ T25] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 203.010523][ T25] usb 4-1: New USB device found, idVendor=054c, idProduct=06c1, bcdDevice=c2.87 [ 203.019762][ T25] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 203.031626][ T25] usb 4-1: Product: syz [ 203.038081][ T25] usb 4-1: Manufacturer: syz [ 203.047895][ T25] usb 4-1: SerialNumber: syz [ 203.065599][ T25] usb 4-1: config 0 descriptor?? [ 203.082106][ T25] port100 4-1:0.0: NFC: Could not find bulk-in or bulk-out endpoint [ 203.255129][ T5283] usb 1-1: USB disconnect, device number 34 [ 203.384821][ T5282] usb 4-1: USB disconnect, device number 36 [ 204.571538][ T7996] netlink: 16 bytes leftover after parsing attributes in process `syz.1.663'. [ 204.743466][ T5231] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 204.756598][ T5231] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 204.768318][ T5231] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 204.783623][ T5231] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 204.794138][ T5231] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3 [ 204.898015][ T5231] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 205.332156][ T62] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 205.474275][ T5282] usb 3-1: new high-speed USB device number 37 using dummy_hcd [ 205.486790][ T62] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 205.627034][ T62] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 205.628057][ T5282] usb 3-1: Using ep0 maxpacket: 32 [ 205.645288][ T5282] usb 3-1: config 0 has an invalid interface number: 88 but max is 0 [ 205.653825][ T5282] usb 3-1: config 0 has no interface number 0 [ 205.667119][ T5282] usb 3-1: config 0 interface 88 altsetting 0 has an endpoint descriptor with address 0x1A, changing to 0xA [ 205.705677][ T5282] usb 3-1: New USB device found, idVendor=2c42, idProduct=16f8, bcdDevice=7d.12 [ 205.725735][ T5282] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 205.738634][ T5283] usb 1-1: new high-speed USB device number 35 using dummy_hcd [ 205.752073][ T5282] usb 3-1: Product: syz [ 205.756315][ T5282] usb 3-1: Manufacturer: syz [ 205.777312][ T5282] usb 3-1: SerialNumber: syz [ 205.793311][ T5282] usb 3-1: config 0 descriptor?? [ 205.805441][ T62] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 205.900911][ T5283] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 205.911699][ T5283] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 205.923391][ T5283] usb 1-1: config 1 interface 0 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 205.934730][ T5283] usb 1-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0 [ 205.950036][ T5283] usb 1-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 205.968914][ T5283] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 205.980189][ T5283] usb 1-1: SerialNumber: syz [ 206.090678][ T8023] ------------[ cut here ]------------ [ 206.096802][ T8023] WARNING: CPU: 1 PID: 8023 at mm/huge_memory.c:1602 copy_huge_pmd+0x102c/0x1c60 [ 206.106120][ T8023] Modules linked in: [ 206.110212][ T8023] CPU: 1 UID: 0 PID: 8023 Comm: syz.1.673 Not tainted 6.11.0-syzkaller-10547-g684a64bf32b6 #0 [ 206.121008][ T8023] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/06/2024 [ 206.131180][ T8023] RIP: 0010:copy_huge_pmd+0x102c/0x1c60 [ 206.136812][ T8023] Code: ff 90 0f 0b 90 e9 2e f5 ff ff e8 8f a8 92 ff 48 ff cb e9 0f f7 ff ff e8 82 a8 92 ff 48 ff cb e9 8a f7 ff ff e8 75 a8 92 ff 90 <0f> 0b 90 e9 11 fd ff ff 4c 8d ac 24 00 01 00 00 48 b8 06 fe ff ff [ 206.156518][ T8023] RSP: 0018:ffffc9000d307140 EFLAGS: 00010287 [ 206.162698][ T8023] RAX: ffffffff82020ccb RBX: ffff8880617886e8 RCX: 0000000000040000 [ 206.170927][ T8023] RDX: ffffc9000a7ec000 RSI: 0000000000000a4a RDI: 0000000000000a4b [ 206.179217][ T8023] RBP: ffffc9000d3072c8 R08: ffffffff82020b96 R09: fffff52001a60e18 [ 206.187246][ T8023] R10: dffffc0000000000 R11: fffff52001a60e18 R12: ffff88804cb73b40 [ 206.195519][ T8023] R13: d7ffe7fff50bfe02 R14: 0000000000000020 R15: ffff88804cb73f60 [ 206.203604][ T8023] FS: 0000000000000000(0000) GS:ffff8880b8700000(0063) knlGS:00000000f5685b40 [ 206.212659][ T8023] CS: 0010 DS: 002b ES: 002b CR0: 0000000080050033 [ 206.219306][ T8023] CR2: 00000000f5735da4 CR3: 000000007bffe000 CR4: 00000000003526f0 [ 206.227342][ T8023] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 206.235572][ T8023] DR3: 000000000000000e DR6: 00000000ffff0ff0 DR7: 0000000000000400 [ 206.243653][ T8023] Call Trace: [ 206.246967][ T8023] [ 206.249963][ T8023] ? __warn+0x168/0x4e0 [ 206.254163][ T8023] ? copy_huge_pmd+0x102c/0x1c60 [ 206.259221][ T8023] ? report_bug+0x2b3/0x500 [ 206.263763][ T8023] ? copy_huge_pmd+0x102c/0x1c60 [ 206.268784][ T8023] ? handle_bug+0x60/0x90 [ 206.273158][ T8023] ? exc_invalid_op+0x1a/0x50 [ 206.277914][ T8023] ? asm_exc_invalid_op+0x1a/0x20 [ 206.283251][ T8023] ? copy_huge_pmd+0xef6/0x1c60 [ 206.288390][ T8023] ? copy_huge_pmd+0x102b/0x1c60 [ 206.293370][ T8023] ? copy_huge_pmd+0x102c/0x1c60 [ 206.298388][ T8023] ? __pfx_copy_huge_pmd+0x10/0x10 [ 206.303549][ T8023] ? _raw_spin_unlock+0x28/0x50 [ 206.308462][ T8023] ? __pmd_alloc+0x4ff/0x620 [ 206.313094][ T8023] ? __pfx___pmd_alloc+0x10/0x10 [ 206.318160][ T8023] ? look_up_lock_class+0x77/0x170 [ 206.323320][ T8023] copy_pmd_range+0x425/0x85f0 [ 206.328155][ T8023] ? __pfx_register_lock_class+0x10/0x10 [ 206.333856][ T8023] ? mark_lock+0x9a/0x360 [ 206.338322][ T8023] ? __lock_acquire+0x1384/0x2050 [ 206.343384][ T8023] ? __pfx_copy_pmd_range+0x10/0x10 [ 206.348712][ T8023] ? __pfx_lock_acquire+0x10/0x10 [ 206.353774][ T8023] ? __pud_alloc+0x389/0x4a0 [ 206.358465][ T8023] ? __pfx_lock_release+0x10/0x10 [ 206.363516][ T8023] ? do_raw_spin_lock+0x14f/0x370 [ 206.368680][ T8023] ? do_raw_spin_unlock+0x13c/0x8b0 [ 206.373944][ T8023] ? _raw_spin_unlock+0x28/0x50 [ 206.378875][ T8023] ? __pud_alloc+0x389/0x4a0 [ 206.383805][ T8023] ? __pfx___pud_alloc+0x10/0x10 [ 206.389087][ T8023] copy_page_range+0x99f/0xe90 [ 206.393940][ T8023] ? __pfx_copy_page_range+0x10/0x10 [ 206.399316][ T8023] ? __pfx_up_write+0x10/0x10 [ 206.404029][ T8023] copy_mm+0x11fb/0x1f40 [ 206.408591][ T8023] ? __pfx_copy_mm+0x10/0x10 [ 206.413238][ T8023] ? __init_rwsem+0x122/0x160 [ 206.417981][ T8023] ? copy_signal+0x52a/0x650 [ 206.422707][ T8023] copy_process+0x1845/0x3d50 [ 206.427437][ T8023] ? copy_process+0x9fa/0x3d50 [ 206.432321][ T8023] ? do_raw_spin_unlock+0x13c/0x8b0 [ 206.437602][ T8023] ? __pfx_copy_process+0x10/0x10 [ 206.442849][ T8023] ? futex_wake+0x523/0x5c0 [ 206.447389][ T8023] kernel_clone+0x226/0x8f0 [ 206.451988][ T8023] ? __mutex_unlock_slowpath+0x21d/0x750 [ 206.457703][ T8023] ? __pfx_kernel_clone+0x10/0x10 [ 206.462793][ T8023] ? up_write+0x1a9/0x590 [ 206.467165][ T8023] __ia32_compat_sys_ia32_clone+0x255/0x2a0 [ 206.473209][ T8023] ? __pfx___ia32_compat_sys_ia32_clone+0x10/0x10 [ 206.479758][ T8023] ? syscall_enter_from_user_mode_prepare+0x7f/0xe0 [ 206.486664][ T8023] ? lockdep_hardirqs_on+0x99/0x150 [ 206.492201][ T8023] __do_fast_syscall_32+0xb4/0x110 [ 206.497353][ T8023] ? ret_from_fork_asm+0x1a/0x30 [ 206.502366][ T8023] ? lockdep_hardirqs_on+0x99/0x150 [ 206.507608][ T8023] do_fast_syscall_32+0x34/0x80 [ 206.512659][ T8023] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 206.519147][ T8023] RIP: 0023:0xf73bd579 [ 206.523257][ T8023] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 [ 206.543104][ T8023] RSP: 002b:00000000f568551c EFLAGS: 00000206 ORIG_RAX: 0000000000000078 [ 206.551597][ T8023] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 0000000000000000 [ 206.559744][ T8023] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 206.567778][ T8023] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 206.575776][ T8023] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 206.583801][ T8023] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 206.592377][ T8023] [ 206.595440][ T8023] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 206.602738][ T8023] CPU: 1 UID: 0 PID: 8023 Comm: syz.1.673 Not tainted 6.11.0-syzkaller-10547-g684a64bf32b6 #0 [ 206.613006][ T8023] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/06/2024 [ 206.623075][ T8023] Call Trace: [ 206.626365][ T8023] [ 206.629317][ T8023] dump_stack_lvl+0x241/0x360 [ 206.634029][ T8023] ? __pfx_dump_stack_lvl+0x10/0x10 [ 206.639259][ T8023] ? __pfx__printk+0x10/0x10 [ 206.643881][ T8023] ? vscnprintf+0x5d/0x90 [ 206.648239][ T8023] panic+0x349/0x880 [ 206.652161][ T8023] ? __warn+0x177/0x4e0 [ 206.656355][ T8023] ? __pfx_panic+0x10/0x10 [ 206.660834][ T8023] __warn+0x34b/0x4e0 [ 206.664840][ T8023] ? copy_huge_pmd+0x102c/0x1c60 [ 206.669838][ T8023] report_bug+0x2b3/0x500 [ 206.674212][ T8023] ? copy_huge_pmd+0x102c/0x1c60 [ 206.679238][ T8023] handle_bug+0x60/0x90 [ 206.683419][ T8023] exc_invalid_op+0x1a/0x50 [ 206.687949][ T8023] asm_exc_invalid_op+0x1a/0x20 [ 206.692826][ T8023] RIP: 0010:copy_huge_pmd+0x102c/0x1c60 [ 206.698403][ T8023] Code: ff 90 0f 0b 90 e9 2e f5 ff ff e8 8f a8 92 ff 48 ff cb e9 0f f7 ff ff e8 82 a8 92 ff 48 ff cb e9 8a f7 ff ff e8 75 a8 92 ff 90 <0f> 0b 90 e9 11 fd ff ff 4c 8d ac 24 00 01 00 00 48 b8 06 fe ff ff [ 206.720480][ T8023] RSP: 0018:ffffc9000d307140 EFLAGS: 00010287 [ 206.726579][ T8023] RAX: ffffffff82020ccb RBX: ffff8880617886e8 RCX: 0000000000040000 [ 206.734576][ T8023] RDX: ffffc9000a7ec000 RSI: 0000000000000a4a RDI: 0000000000000a4b [ 206.742566][ T8023] RBP: ffffc9000d3072c8 R08: ffffffff82020b96 R09: fffff52001a60e18 [ 206.750556][ T8023] R10: dffffc0000000000 R11: fffff52001a60e18 R12: ffff88804cb73b40 [ 206.758557][ T8023] R13: d7ffe7fff50bfe02 R14: 0000000000000020 R15: ffff88804cb73f60 [ 206.766592][ T8023] ? copy_huge_pmd+0xef6/0x1c60 [ 206.771476][ T8023] ? copy_huge_pmd+0x102b/0x1c60 [ 206.776459][ T8023] ? __pfx_copy_huge_pmd+0x10/0x10 [ 206.781596][ T8023] ? _raw_spin_unlock+0x28/0x50 [ 206.786468][ T8023] ? __pmd_alloc+0x4ff/0x620 [ 206.791091][ T8023] ? __pfx___pmd_alloc+0x10/0x10 [ 206.796168][ T8023] ? look_up_lock_class+0x77/0x170 [ 206.801337][ T8023] copy_pmd_range+0x425/0x85f0 [ 206.806154][ T8023] ? __pfx_register_lock_class+0x10/0x10 [ 206.811846][ T8023] ? mark_lock+0x9a/0x360 [ 206.816212][ T8023] ? __lock_acquire+0x1384/0x2050 [ 206.821274][ T8023] ? __pfx_copy_pmd_range+0x10/0x10 [ 206.826510][ T8023] ? __pfx_lock_acquire+0x10/0x10 [ 206.831587][ T8023] ? __pud_alloc+0x389/0x4a0 [ 206.836217][ T8023] ? __pfx_lock_release+0x10/0x10 [ 206.841292][ T8023] ? do_raw_spin_lock+0x14f/0x370 [ 206.846361][ T8023] ? do_raw_spin_unlock+0x13c/0x8b0 [ 206.851683][ T8023] ? _raw_spin_unlock+0x28/0x50 [ 206.856579][ T8023] ? __pud_alloc+0x389/0x4a0 [ 206.861296][ T8023] ? __pfx___pud_alloc+0x10/0x10 [ 206.866289][ T8023] copy_page_range+0x99f/0xe90 [ 206.871100][ T8023] ? __pfx_copy_page_range+0x10/0x10 [ 206.876440][ T8023] ? __pfx_up_write+0x10/0x10 [ 206.881192][ T8023] copy_mm+0x11fb/0x1f40 [ 206.885486][ T8023] ? __pfx_copy_mm+0x10/0x10 [ 206.890210][ T8023] ? __init_rwsem+0x122/0x160 [ 206.894932][ T8023] ? copy_signal+0x52a/0x650 [ 206.899590][ T8023] copy_process+0x1845/0x3d50 [ 206.904317][ T8023] ? copy_process+0x9fa/0x3d50 [ 206.909133][ T8023] ? do_raw_spin_unlock+0x13c/0x8b0 [ 206.914384][ T8023] ? __pfx_copy_process+0x10/0x10 [ 206.919448][ T8023] ? futex_wake+0x523/0x5c0 [ 206.923986][ T8023] kernel_clone+0x226/0x8f0 [ 206.928612][ T8023] ? __mutex_unlock_slowpath+0x21d/0x750 [ 206.934275][ T8023] ? __pfx_kernel_clone+0x10/0x10 [ 206.939346][ T8023] ? up_write+0x1a9/0x590 [ 206.943714][ T8023] __ia32_compat_sys_ia32_clone+0x255/0x2a0 [ 206.949646][ T8023] ? __pfx___ia32_compat_sys_ia32_clone+0x10/0x10 [ 206.956106][ T8023] ? syscall_enter_from_user_mode_prepare+0x7f/0xe0 [ 206.962747][ T8023] ? lockdep_hardirqs_on+0x99/0x150 [ 206.968018][ T8023] __do_fast_syscall_32+0xb4/0x110 [ 206.973276][ T8023] ? ret_from_fork_asm+0x1a/0x30 [ 206.978773][ T8023] ? lockdep_hardirqs_on+0x99/0x150 [ 206.984000][ T8023] do_fast_syscall_32+0x34/0x80 [ 206.988877][ T8023] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 206.995260][ T8023] RIP: 0023:0xf73bd579 [ 206.999365][ T8023] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 [ 207.019112][ T8023] RSP: 002b:00000000f568551c EFLAGS: 00000206 ORIG_RAX: 0000000000000078 [ 207.027675][ T8023] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 0000000000000000 [ 207.035688][ T8023] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 207.043688][ T8023] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 207.051708][ T8023] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 207.059718][ T8023] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 207.067776][ T8023] [ 207.071161][ T8023] Kernel Offset: disabled [ 207.075966][ T8023] Rebooting in 86400 seconds..