last executing test programs: 14m32.542311157s ago: executing program 32 (id=2696): r0 = socket$pppl2tp(0x18, 0x1, 0x1) r1 = socket$inet6_udp(0xa, 0x2, 0x0) connect$pppl2tp(r0, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x3, r1, {0x2, 0x0, @rand_addr=0x640100fd}, 0x2}}, 0x2e) r2 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000040), 0xffffffffffffffff) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$L2TP_CMD_SESSION_DELETE(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000500)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="01002cbd70100400000005000000080009000200000008000c00a80a000008000b000000000006000100", @ANYRESHEX=0x0], 0x34}, 0x1, 0x0, 0x0, 0x40811}, 0x20) 11m58.141197422s ago: executing program 1 (id=4640): bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000e07b8af8ff00000000bfa200000000000007020000f8ffffffb703000002000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x94) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="17000000000000000400000003"], 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000003c0)={{r0}, 0x0, &(0x7f0000000380)}, 0x20) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000006c0)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000059"], 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x28}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @fallback=0x31, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_GET_PROG_INFO(0xa, &(0x7f0000000740)={r1, 0x0, 0x0}, 0x10) 11m57.997642721s ago: executing program 1 (id=4642): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x1) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000180)={0x4, 0x0, 0x0, 0x1000, &(0x7f0000004000/0x1000)=nil}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_PRE_FAULT_MEMORY(r2, 0xc040aed5, &(0x7f0000000140)={0x0, 0x107000}) ioctl$KVM_SET_MEMORY_ATTRIBUTES(r1, 0x4020aed2, &(0x7f0000000000)={0x0, 0xe000, 0x8}) 11m57.779620125s ago: executing program 1 (id=4647): madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0xe) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) mbind(&(0x7f0000001000/0x800000)=nil, 0x800000, 0x0, 0x0, 0x0, 0x2) r0 = syz_open_procfs$pagemap(0x0, &(0x7f0000001080)) ioctl$PAGEMAP_SCAN(r0, 0xc0606610, &(0x7f00000001c0)={0x60, 0x0, &(0x7f00003c9000/0x4000)=nil, &(0x7f0000678000/0x3000)=nil, 0x3, 0x0, 0x0, 0x403, 0x0, 0x10, 0x0, 0xde}) 11m57.429011478s ago: executing program 1 (id=4651): syz_mount_image$fuse(0x0, &(0x7f00000000c0)='./file0\x00', 0x20d036, 0x0, 0x0, 0x0, 0x0) r0 = open_tree(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x89901) move_mount(r0, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000300)='./file0\x00', 0x0) r1 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r1, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000300)='./file0\x00', 0x41) mount$fuse(0x0, &(0x7f0000000280)='./file0\x00', 0x0, 0x104000, 0x0) 11m57.354382183s ago: executing program 1 (id=4652): r0 = socket$key(0xf, 0x3, 0x2) r1 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000040)=ANY=[@ANYBLOB="12010000000018105e04da0700000000000109022400010000000009040000090300000009210000000122220009058103"], 0x0) syz_usb_control_io$hid(r1, 0x0, 0x0) syz_usb_control_io$hid(r1, &(0x7f00000001c0)={0x24, 0x0, 0x0, &(0x7f0000000000)={0x0, 0x22, 0x22, {[@global=@item_012={0x2, 0x1, 0x9, '\t\x00'}, @global=@item_012={0x2, 0x1, 0x0, "a844"}, @global=@item_4={0x3, 0x1, 0x0, '\f\x00'}, @local=@item_012={0x2, 0x2, 0x2, '\x000'}, @local=@item_4={0x3, 0x2, 0x8, "0a52528d"}, @main=@item_4={0x3, 0x0, 0x8}, @local=@item_4={0x3, 0x2, 0x0, "09007a15"}, @local=@item_4={0x3, 0x2, 0x0, "5d8c3dda"}]}}, 0x0}, 0x0) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x25, &(0x7f0000000000)=0x28b7, 0x4) sendmsg$key(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={0x0, 0x10}}, 0x0) 11m56.929761255s ago: executing program 1 (id=4653): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000300)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb(blowfish)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000140)="ad76b6c5", 0x4) r1 = accept4(r0, 0x0, 0x0, 0x0) sendmmsg$alg(r1, &(0x7f0000004c00)=[{0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f00000003c0)="a9861869a566ef7d12e4230965648a02e444b356635d9d010100000000000000d4b1195e006faf1d27860004a2da9cc6f9b669d457bf7da5b858b15c0e2e0100af28f1a77685198fd252ffc0be21220182592d68b031cf570f09d9bc4c3084cd8264ed8f0573e95c72", 0x69}], 0x1, 0x0, 0x0, 0x4012}], 0x1, 0x0) recvmmsg$unix(r1, &(0x7f0000001a00)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, &(0x7f0000000c00)=[{&(0x7f0000001b80)=""/104, 0x68}, {&(0x7f0000000700)=""/235, 0xeb}], 0x2}}], 0x2, 0xa0, 0x0) 11m56.67013306s ago: executing program 33 (id=4653): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000300)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb(blowfish)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000140)="ad76b6c5", 0x4) r1 = accept4(r0, 0x0, 0x0, 0x0) sendmmsg$alg(r1, &(0x7f0000004c00)=[{0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f00000003c0)="a9861869a566ef7d12e4230965648a02e444b356635d9d010100000000000000d4b1195e006faf1d27860004a2da9cc6f9b669d457bf7da5b858b15c0e2e0100af28f1a77685198fd252ffc0be21220182592d68b031cf570f09d9bc4c3084cd8264ed8f0573e95c72", 0x69}], 0x1, 0x0, 0x0, 0x4012}], 0x1, 0x0) recvmmsg$unix(r1, &(0x7f0000001a00)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, &(0x7f0000000c00)=[{&(0x7f0000001b80)=""/104, 0x68}, {&(0x7f0000000700)=""/235, 0xeb}], 0x2}}], 0x2, 0xa0, 0x0) 11m35.834431533s ago: executing program 0 (id=4869): r0 = socket$inet6(0xa, 0x2, 0x0) r1 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000240), r1) getsockname$packet(r1, &(0x7f0000000180)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000000c0)=0x14) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000100)=@newlink={0x48, 0x10, 0x437, 0x4, 0x0, {0x0, 0x0, 0x0, r2, 0x50483}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @gre={{0x8}, {0x1c, 0x2, 0x0, 0x1, [@IFLA_GRE_LOCAL={0x8, 0x6, @remote}, @IFLA_GRE_ENCAP_TYPE={0x6, 0xe, 0x2}, @IFLA_GRE_ENCAP_FLAGS={0x6, 0xf, 0x4bb7}]}}}]}, 0x48}, 0x1, 0x0, 0x0, 0x40000}, 0x4000000) sendmmsg$inet(r0, &(0x7f0000000880)=[{{&(0x7f0000000040)={0x2, 0x4e1c, @multicast1}, 0x10, 0x0, 0x0, &(0x7f0000000000)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {r2, @empty, @multicast1}}}], 0x20}}], 0x1, 0x4880) 11m35.54079414s ago: executing program 0 (id=4873): r0 = syz_usb_connect(0x0, 0x1cb, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000122f0d4071040403dfe4000000010902b901010000003f0904"], 0x0) syz_usb_control_io$printer(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$printer(r0, 0x0, 0x0) syz_usb_control_io$uac3(r0, &(0x7f0000000140)={0x14, 0x0, 0x0}, &(0x7f00000004c0)={0x44, &(0x7f0000000200)={0x20, 0x14}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 11m33.60548331s ago: executing program 0 (id=4881): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000080)={0x26, 'hash\x00', 0x0, 0x0, 'cbcmac(xeta-generic)\x00'}, 0x58) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1000005, 0x8031, 0xffffffffffffffff, 0x0) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000140)="2c385aa3d49100dc6626c892b6bc436a", 0x10) r1 = accept4(r0, 0x0, 0x0, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000d00), r1) 11m33.126259888s ago: executing program 0 (id=4888): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x200, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = eventfd(0x8c69) ioctl$KVM_IOEVENTFD(r1, 0x4040ae79, &(0x7f0000000140)={0xfffffffffffffc04, 0x0, 0x4, r2, 0x11}) ioctl$KVM_IOEVENTFD(r1, 0x4040ae79, &(0x7f0000000240)={0x8, 0x0, 0x4, r2, 0x1}) ioctl$KVM_IOEVENTFD(r1, 0x4040ae79, &(0x7f0000000040)={0x27800000000, 0x0, 0x4, r2, 0x1}) 11m32.999837346s ago: executing program 0 (id=4891): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='hugetlb.2MB.usage_in_bytes\x00', 0x275a, 0x0) fcntl$lock(r0, 0x6, &(0x7f0000000000)={0x0, 0x0, 0x2, 0x20000000000000}) fcntl$lock(r0, 0x26, &(0x7f0000000300)={0x1, 0x0, 0x2005, 0x1fd}) fcntl$lock(r0, 0x26, &(0x7f0000000280)={0x1, 0x0, 0x2b, 0x9}) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/locks\x00', 0x0, 0x0) pread64(r1, &(0x7f00000024c0)=""/209, 0xd1, 0x8) 11m32.201567181s ago: executing program 0 (id=4907): r0 = landlock_create_ruleset(&(0x7f0000000040)={0xc469, 0x3}, 0x18, 0x0) r1 = syz_open_dev$sg(&(0x7f00000060c0), 0x0, 0x8002) r2 = fcntl$dupfd(r1, 0x0, r1) read$snapshot(r2, 0x0, 0xffffffbf) read$FUSE(r2, 0x0, 0x0) landlock_restrict_self(r0, 0x9) 11m31.790892523s ago: executing program 34 (id=4907): r0 = landlock_create_ruleset(&(0x7f0000000040)={0xc469, 0x3}, 0x18, 0x0) r1 = syz_open_dev$sg(&(0x7f00000060c0), 0x0, 0x8002) r2 = fcntl$dupfd(r1, 0x0, r1) read$snapshot(r2, 0x0, 0xffffffbf) read$FUSE(r2, 0x0, 0x0) landlock_restrict_self(r0, 0x9) 10m38.000423742s ago: executing program 5 (id=5484): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket(0x400000000010, 0x3, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r3, {0x0, 0x1}, {0xffff, 0xffff}, {0x0, 0x9}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000340)=@newtfilter={0xa4, 0x2c, 0xd27, 0x30bd29, 0x25dfdbfd, {0x0, 0x0, 0x0, r3, {0x0, 0x9}, {}, {0x7, 0x10}}, [@filter_kind_options=@f_route={{0xa}, {0x74, 0x2, [@TCA_ROUTE4_ACT={0x70, 0x6, [@m_tunnel_key={0x6c, 0x1, 0x0, 0x0, {{0xf}, {0x3c, 0x2, 0x0, 0x1, [@TCA_TUNNEL_KEY_PARMS={0x1c, 0x2, {{0x3, 0x1, 0x0, 0x2, 0x2}, 0x1}}, @TCA_TUNNEL_KEY_ENC_IPV6_SRC={0x14, 0x5, @private1={0xfc, 0x1, '\x00', 0x1}}, @TCA_TUNNEL_KEY_NO_CSUM={0x5}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x1, 0x3}}}}]}]}}]}, 0xa4}, 0x1, 0x0, 0x0, 0x40}, 0x2008c014) 10m37.706737958s ago: executing program 5 (id=5491): syz_io_uring_setup(0x38, &(0x7f0000000580)={0x0, 0xbbda, 0x13500}, 0x0, 0x0, 0x0) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ff4000/0xa000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f000068c000/0xc000)=nil, &(0x7f0000817000/0x1000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) r0 = io_uring_setup(0x7, &(0x7f0000000040)={0x0, 0xc8a1, 0xc000, 0x8, 0x2bb}) bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x12, 0x3, 0x0, &(0x7f0000000240)='syzkaller\x00', 0x80000000, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="16"], 0x50) io_uring_enter(r0, 0x2219, 0x7721, 0x16, 0x0, 0x0) 10m37.636517971s ago: executing program 5 (id=5493): bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x1, 0x3, 0x0, &(0x7f00002bf000)='GPL\x00', 0x4, 0xb7, &(0x7f0000000040)=""/183, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0xfffffffc}, 0x94) open(&(0x7f00000000c0)='./file1\x00', 0x66842, 0x21) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ff7000/0x1000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) r0 = io_uring_setup(0x524, &(0x7f0000000040)={0x0, 0x3cb1, 0x1c080, 0xa, 0x20002f7}) ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, &(0x7f0000000000)={'veth0_to_hsr\x00', 0x0}) io_uring_enter(r0, 0x2219, 0x7721, 0x16, 0x0, 0x0) 10m37.460510737s ago: executing program 5 (id=5495): syz_mount_image$fuse(0x0, &(0x7f0000000000)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) r0 = open_tree(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x89901) move_mount(r0, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) chroot(&(0x7f0000000100)='./file0\x00') r1 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r1, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000300)='./file0\x00', 0x0) pivot_root(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000080)='./file0/../file0/../file0/../file0/file0\x00') 10m37.354715529s ago: executing program 5 (id=5498): r0 = socket$inet_sctp(0x2, 0x800000000000001, 0x84) sendto$inet(r0, &(0x7f0000a34fff)='H', 0x1, 0x0, &(0x7f0000030ff0)={0x2, 0x0, @local={0xac, 0x14, 0xffffffffffffffff}}, 0x10) sendto$inet(r0, &(0x7f0000000100)='\x00', 0x1, 0x0, &(0x7f00000000c0)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10) shutdown(r0, 0x1) setsockopt$TIPC_GROUP_JOIN(0xffffffffffffffff, 0x10f, 0x87, &(0x7f00000001c0)={0x8000042, 0x3}, 0x10) mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1) setsockopt$inet_sctp_SCTP_RTOINFO(r0, 0x84, 0x0, &(0x7f00000001c0)={0x0, 0x5, 0x8100, 0x4000}, 0x10) 10m36.985934503s ago: executing program 5 (id=5503): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x20) r0 = openat$dir(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x6c6882, 0x13d) r1 = landlock_create_ruleset(&(0x7f0000000140)={0x4000, 0x3, 0x2}, 0x18, 0x0) landlock_restrict_self(r1, 0xd) r2 = landlock_create_ruleset(&(0x7f00000001c0)={0x2fbd, 0x1}, 0x18, 0x0) landlock_restrict_self(r2, 0x0) renameat2(0xffffffffffffff9c, &(0x7f0000000180)='./cgroup\x00', r0, &(0x7f0000000000)='./file0\x00', 0x4) 10m36.560567978s ago: executing program 35 (id=5503): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x20) r0 = openat$dir(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x6c6882, 0x13d) r1 = landlock_create_ruleset(&(0x7f0000000140)={0x4000, 0x3, 0x2}, 0x18, 0x0) landlock_restrict_self(r1, 0xd) r2 = landlock_create_ruleset(&(0x7f00000001c0)={0x2fbd, 0x1}, 0x18, 0x0) landlock_restrict_self(r2, 0x0) renameat2(0xffffffffffffff9c, &(0x7f0000000180)='./cgroup\x00', r0, &(0x7f0000000000)='./file0\x00', 0x4) 6m6.487337714s ago: executing program 3 (id=8260): r0 = syz_usb_connect(0x2, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000be9b2a204705202755af0102030109022400010000100009046e"], 0x0) syz_usb_control_io$uac1(r0, 0x0, 0x0) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt(r1, 0x84, 0x81, &(0x7f0000000280)="1a00000002000000", 0x8) setsockopt$inet_sctp6_SCTP_AUTH_KEY(r1, 0x84, 0x17, &(0x7f0000000180)=ANY=[@ANYRES32=0x0, @ANYBLOB="04"], 0x9) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX_OLD(r1, 0x84, 0x6b, &(0x7f0000000200)=[@in6={0xa, 0x4e24, 0x0, @private2, 0x1}, @in6={0xa, 0x4e22, 0x4, @private0={0xfc, 0x0, '\x00', 0x1}, 0x3}], 0x38) r2 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$EBT_SO_SET_ENTRIES(r2, 0x0, 0x80, &(0x7f0000000780)=@nat={'nat\x00', 0x19, 0x0, 0x90, [0x2000000006c0, 0x0, 0x0, 0x2000000006f0, 0x200000000720], 0x0, 0x0, &(0x7f00000006c0)=ANY=[@ANYBLOB="00000000000000000000000000000000000000000000000000000000000000000000000000000000ffffffff0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000feffdaf0fe7608ffff0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000feffff"]}, 0x108) syz_usb_connect$cdc_ncm(0x0, 0x8a, &(0x7f0000000240)={{0x12, 0x1, 0x200, 0x2, 0x0, 0x0, 0xff, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x78, 0x2, 0x1, 0x0, 0x40, 0x3, "", {{0x9, 0x4, 0x0, 0x0, 0x1, 0x2, 0xd, 0x0, 0x0, {{0x8, 0x24, 0x6, 0x0, 0x1, "d8f7f4"}, {0x5, 0x24, 0x0, 0xd}, {0xd, 0x24, 0xf, 0x1, 0x7, 0x2, 0xe, 0x4}, {0x6, 0x24, 0x1a, 0x938, 0x58}, [@call_mgmt={0x5, 0x24, 0x1, 0x0, 0xf9}, @mbim_extended={0x8, 0x24, 0x1c, 0x2, 0x3, 0x4}, @mbim={0xc, 0x24, 0x1b, 0x8000, 0x6, 0x5, 0x80, 0x5, 0x9}]}, {{0x9, 0x5, 0x81, 0x3, 0x10, 0x2a, 0x9, 0x9}}}, {}, {0x9, 0x4, 0x1, 0x1, 0x2, 0x2, 0xd, 0x0, 0x0, "", {{{0x9, 0x5, 0x82, 0x2, 0x10, 0x9, 0xa8, 0x98}}, {{0x9, 0x5, 0x3, 0x2, 0x20, 0x81, 0x5, 0x4}}}}}}}]}}, &(0x7f0000000480)={0xa, &(0x7f0000000300)={0xa, 0x6, 0x250, 0xfc, 0x6, 0x80, 0x40, 0x8}, 0x33, &(0x7f0000000340)={0x5, 0xf, 0x33, 0x4, [@ext_cap={0x7, 0x10, 0x2, 0x0, 0x7, 0x7}, @ss_container_id={0x14, 0x10, 0x4, 0x9, "163286afeb88c09ec5ed971c15a7b89d"}, @generic={0xc, 0x10, 0x1, "e5d574b9268b740d90"}, @ext_cap={0x7, 0x10, 0x2, 0x10, 0x6, 0x9, 0x6}]}, 0x2, [{0x9e, &(0x7f0000000380)=@string={0x9e, 0x3, "9ccd90bfd1f9e259ed85fe8983a712235b012e2b665f602dbf5be9c9c43d214e66cbbd5052a1c4365d60d4de2180c8cbc30c037a5a8fdeae82b29f167b10efb6db5c1032e9ff9395786a003c8ecca797bd3304561dbe79c68eafb3b23146ce4675c82dd3c19b00162c57bcd11ee7e5842f3659015457146bb26a3d5ee02a79386d68da8f4cd589b2671d26c3770ce18b74e2aaf3cf9f6939587627fd"}}, {0x4, &(0x7f0000000440)=@lang_id={0x4, 0x3, 0x2001}}]}) syz_usb_connect$cdc_ecm(0x3, 0x6a, &(0x7f0000000000)={{0x12, 0x1, 0x200, 0x2, 0x0, 0x0, 0x10, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x58, 0x1, 0x1, 0x10, 0x60, 0x65, "", [{{0x9, 0x4, 0x0, 0x8, 0x2, 0x2, 0x6, 0x0, 0x5, {{0x8, 0x24, 0x6, 0x0, 0x0, "d61090"}, {0x5, 0x24, 0x0, 0xf}, {0xd, 0x24, 0xf, 0x1, 0x7, 0xfff9, 0x4}, [@acm={0x4, 0x24, 0x2, 0x8}, @call_mgmt={0x5, 0x24, 0x1, 0x0, 0x4}, @mbim_extended={0x8, 0x24, 0x1c, 0xfffd, 0x5, 0x5}]}, {[{{0x9, 0x5, 0x81, 0x3, 0x3ff, 0x7, 0x2, 0x5}}], {{0x9, 0x5, 0x82, 0x2, 0x40, 0x8, 0xf2, 0x8}}, {{0x9, 0x5, 0x3, 0x2, 0x8, 0x8, 0x9, 0x8}}}}}]}}]}}, &(0x7f0000000200)={0xa, &(0x7f0000000080)={0xa, 0x6, 0x200, 0x4, 0x9, 0x68, 0x8, 0x40}, 0x3f, &(0x7f00000000c0)={0x5, 0xf, 0x3f, 0x4, [@ext_cap={0x7, 0x10, 0x2, 0x18, 0x1, 0x5}, @ss_container_id={0x14, 0x10, 0x4, 0x7, "f583ba1c2da7253e4a42abc31d023140"}, @ssp_cap={0x18, 0x10, 0xa, 0x0, 0x3, 0x1, 0x880, 0x5, [0x3f00, 0xc00f, 0xdf80]}, @ext_cap={0x7, 0x10, 0x2, 0x6, 0x6, 0x6, 0xfaeb}]}, 0x3, [{0x4, &(0x7f0000000140)=@lang_id={0x4, 0x3, 0x3c01}}, {0x4, &(0x7f0000000180)=@lang_id={0x4, 0x3, 0x820}}, {0x31, &(0x7f00000001c0)=@string={0x31, 0x3, "6635f948095bb475687650145cb6108920f8395cd1341e510a97e7c6b7331e0d09a397dbcf722db211df43e0c8117a"}}]}) 6m1.101708496s ago: executing program 3 (id=8305): openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r0 = io_uring_setup(0x178e, &(0x7f0000000140)={0x0, 0x52c1, 0x8, 0x0, 0x839a}) r1 = socket$pppoe(0x18, 0x1, 0x0) r2 = socket$pppoe(0x18, 0x1, 0x0) connect$pppoe(r2, &(0x7f0000000040)={0x18, 0x0, {0x1, @broadcast, 'ip6gre0\x00'}}, 0x1e) connect$pppoe(r1, &(0x7f00000001c0)={0x18, 0x0, {0x1, @empty, 'ip_vti0\x00'}}, 0x1e) ioctl$PPPOEIOCSFWD(r2, 0x4008b100, 0x0) r3 = dup(0xffffffffffffffff) write$6lowpan_enable(r3, 0x0, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) 6m1.024095203s ago: executing program 3 (id=8307): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) sendmmsg$alg(0xffffffffffffffff, &(0x7f0000000a40)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000200)="d7", 0x1}], 0x1}, {0x0, 0x0, &(0x7f0000000340)=[{&(0x7f0000000300)="9e", 0x1}], 0x1, 0x0, 0x0, 0x880}], 0x2, 0x40881) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, &(0x7f00000001c0)=[@text16={0x10, 0x0}], 0x1, 0x4, 0x0, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000100)=[@text64={0x40, 0x0}], 0x1, 0x43, 0x0, 0x0) ioctl$KVM_SET_VCPU_EVENTS(r2, 0x4400ae8f, &(0x7f00000000c0)=@x86={0x60, 0x4, 0xc, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x80, 0x9, 0x1, 0x0, 0x0, 0x8, 0x0, 0xff, 0xff, 0x0, '\x00', 0x0, 0x1}) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_SET_IRQCHIP(r1, 0x8208ae63, &(0x7f0000000380)={0x2, 0x0, @ioapic={0x8000000, 0x9, 0x10001, 0xfffffffe, 0x0, [{0x2, 0x1, 0x87, '\x00', 0x8}, {0x9, 0x8, 0x2, '\x00', 0xb}, {0xff, 0x7f, 0xd3, '\x00', 0x67}, {0x0, 0x5, 0xf5, '\x00', 0xf}, {0x7, 0x9, 0xc, '\x00', 0xfb}, {0x0, 0x4, 0x54, '\x00', 0xff}, {0x71, 0xd5, 0xf1, '\x00', 0x7f}, {0x0, 0x4, 0xc}, {0x7f, 0x5, 0xb, '\x00', 0x8}, {0xd7, 0xd, 0x8, '\x00', 0x6}, {0x0, 0x28, 0x80, '\x00', 0xdc}, {0xff, 0x1, 0x6, '\x00', 0x1}, {0xfe, 0x7, 0x26}, {0xcf, 0x3, 0x1, '\x00', 0x6}, {0xf, 0xee, 0x7, '\x00', 0x3}, {0x39, 0x2, 0x6, '\x00', 0xb}, {0x9, 0x6, 0x2, '\x00', 0x8}, {0x5, 0xc, 0x5, '\x00', 0xc}, {0x7, 0x1, 0x7, '\x00', 0xc2}, {0x0, 0x80, 0xe, '\x00', 0x7f}, {0x1, 0xc, 0x80, '\x00', 0x7f}, {0x10, 0x6, 0x3, '\x00', 0x10}, {0x1, 0x27, 0xf3, '\x00', 0x4}, {0x7, 0x6, 0x4}]}}) 6m0.851421638s ago: executing program 7 (id=8308): timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)=0x0) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10000, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r0, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) r1 = socket$rds(0x15, 0x5, 0x0) bind$rds(r1, &(0x7f0000000040)={0x2, 0x4e21, @local}, 0x10) sendmsg$inet(r1, &(0x7f0000000480)={&(0x7f0000000000)={0x2, 0x4e22, @initdev={0xac, 0x1e, 0x1, 0x0}}, 0x10, &(0x7f0000000380)=[{&(0x7f00000001c0)="91cfdfefdb", 0x1a000}], 0x1}, 0x0) sendmsg$rds(r1, &(0x7f0000000140)={&(0x7f00000000c0)={0x2, 0x4e21, @private=0xa010102}, 0x10, 0x0, 0x0, 0x0, 0x0, 0x800}, 0x0) ioctl$KVM_SET_CPUID2(0xffffffffffffffff, 0x4008ae90, &(0x7f00000000c0)={0x29}) 6m0.652273634s ago: executing program 7 (id=8310): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) ioctl$KVM_CREATE_PIT2(r1, 0x4040ae77, &(0x7f0000000180)={0x1}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r1, &(0x7f0000002000/0x18000)=nil, &(0x7f0000000100)=[@text16={0x10, &(0x7f0000000040)="0f01cb650f741065666765f36f0f330f09660f3a0cb9000000752066b9800000c00f326635004000000f300f01d7ba4100ed", 0x32}], 0x1, 0x4498bda7e2139f51, 0x0, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000000)={0x1, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f00000003c0)={[0x0, 0x0, 0x8000, 0x40, 0x0, 0x0, 0x2004cb, 0x0, 0xfffffffffffffffe, 0x5, 0x7fff, 0x1000200004, 0x4, 0x2, 0x0, 0x1], 0x8080000}) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_SET_PIT2(r1, 0x4070aea0, &(0x7f0000002400)={[{0x7, 0xce, 0xfa, 0x5, 0x3, 0x96, 0x9, 0x6, 0x75, 0x0, 0x2, 0x6, 0xffffdfff}, {0x15, 0x1, 0x6, 0xe7, 0x1, 0x6, 0x2, 0x6, 0xb, 0x5, 0x4, 0x9, 0x1}, {0x2, 0x1004, 0x8, 0x52, 0x1, 0x2a, 0x7f, 0x8, 0xb, 0x40, 0xf4, 0x4, 0x200}], 0x9}) 6m0.380675065s ago: executing program 7 (id=8311): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000240)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f00000002c0)={0x73622a85, 0x1000, 0x1}) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000140)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=[@increfs], 0x0, 0x0, 0x0}) r2 = dup3(r1, r0, 0x0) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0) mmap$binder(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x11, r3, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r3, 0x4018620d, &(0x7f0000004a80)={0x73622a85, 0x100, 0x1}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000004c0)={0x8, 0x0, &(0x7f0000000000)=[@acquire], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000001c0)={0x4c, 0x0, &(0x7f0000000bc0)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0xffffffffffffff5f, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) 6m0.310252093s ago: executing program 7 (id=8312): mkdir(&(0x7f0000000400)='./file0\x00', 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f00000000c0), 0x42, 0x0) mount$fuse(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=0000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) mount$fuse(0x0, &(0x7f0000000280)='./file0\x00', 0x0, 0x100000, 0x0) r1 = open_tree(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x89901) move_mount(r1, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x0) r2 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r2, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000300)='./file0\x00', 0x0) r3 = open_tree(r1, &(0x7f0000000640)='\x00', 0x89901) move_mount(r3, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000300)='./file0\x00', 0x0) 6m0.246343128s ago: executing program 7 (id=8313): write$FUSE_INIT(0xffffffffffffffff, &(0x7f0000000040)={0x50, 0x0, 0x0, {0x7, 0x1f, 0x2, 0x6d100f4f, 0xd, 0xf, 0xf, 0x2, 0x0, 0x0, 0x1, 0xffff}}, 0x50) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x100, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = dup(r1) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000840)={0x1fe, 0x2, 0x2000, 0x1000, &(0x7f0000003000/0x1000)=nil}) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r2, r0, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000000)=[@textreal={0x8, 0x0}], 0x1, 0x3f, 0x0, 0x0) syz_kvm_setup_cpu$x86(r1, r3, &(0x7f0000004000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, &(0x7f00000000c0)="66b824010f00d80f01d10f0736420f001d0f000000f366360f2067b9cd0800000f320f201ec74424003f010000c74424020c000000ff2c24b9800000c00f3235000800000f308fa928932e", 0x4b}], 0x1, 0x42, 0x0, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@text64={0x40, 0x0}], 0x1, 0x11, 0x0, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) 6m0.067351312s ago: executing program 7 (id=8314): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000340)=@newqdisc={0x4c, 0x24, 0x4ee4e6a52ff56541, 0x1, 0x25dfdbfd, {0x0, 0x0, 0x0, r2, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x1c, 0x2, {{0x3, 0x3, 0x6361, 0x7, 0xffffffff, 0x3}}}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x40088c1}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000080)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70b926, 0x25dfdc01, {0x0, 0x0, 0x0, r2, {0x0, 0xd}, {0xffff, 0xb}, {0xffff, 0xffe0}}, [@qdisc_kind_options=@q_fq_codel={{0xd}, {0x4}}]}, 0x38}, 0x1, 0x0, 0x0, 0x240040e0}, 0x4890) r3 = socket$unix(0x1, 0x1, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)=@newqdisc={0x24, 0x24, 0x4ee4e6a52ff56541, 0x70bd29, 0x25dfdbfd, {0x0, 0x0, 0x0, r5, {0x0, 0x11}, {0xffe6, 0xd}, {0xb, 0xc}}}, 0x24}, 0x1, 0x0, 0x0, 0x2000c021}, 0x4000000) 5m59.742801596s ago: executing program 36 (id=8314): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000340)=@newqdisc={0x4c, 0x24, 0x4ee4e6a52ff56541, 0x1, 0x25dfdbfd, {0x0, 0x0, 0x0, r2, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x1c, 0x2, {{0x3, 0x3, 0x6361, 0x7, 0xffffffff, 0x3}}}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x40088c1}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000080)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70b926, 0x25dfdc01, {0x0, 0x0, 0x0, r2, {0x0, 0xd}, {0xffff, 0xb}, {0xffff, 0xffe0}}, [@qdisc_kind_options=@q_fq_codel={{0xd}, {0x4}}]}, 0x38}, 0x1, 0x0, 0x0, 0x240040e0}, 0x4890) r3 = socket$unix(0x1, 0x1, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)=@newqdisc={0x24, 0x24, 0x4ee4e6a52ff56541, 0x70bd29, 0x25dfdbfd, {0x0, 0x0, 0x0, r5, {0x0, 0x11}, {0xffe6, 0xd}, {0xb, 0xc}}}, 0x24}, 0x1, 0x0, 0x0, 0x2000c021}, 0x4000000) 5m58.9237623s ago: executing program 3 (id=8324): mkdir(&(0x7f0000000400)='./file0\x00', 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f00000000c0), 0x42, 0x0) mount$fuse(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=0000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) mount$fuse(0x0, &(0x7f0000000280)='./file0\x00', 0x0, 0x100000, 0x0) r1 = open_tree(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x89901) move_mount(r1, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x0) r2 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r2, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000300)='./file0\x00', 0x0) r3 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r3, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000300)='./file0\x00', 0x0) 5m58.655604192s ago: executing program 3 (id=8325): r0 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, 0xffffffffffffffff, 0x0) openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) r1 = socket$kcm(0xa, 0x5, 0x0) r2 = socket$kcm(0xa, 0x5, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="000000000000000000e8ffffffffffff05000000", @ANYRES32=0x1], 0x48) ioctl$sock_kcm_SIOCKCMCLONE(r2, 0x8916, &(0x7f0000000000)={r2}) r3 = socket$kcm(0xa, 0x5, 0x0) ioctl$sock_kcm_SIOCKCMCLONE(r3, 0x8916, &(0x7f0000000000)={r3}) ioctl$sock_kcm_SIOCKCMCLONE(r1, 0x8936, &(0x7f0000000000)={r2}) 5m57.714748587s ago: executing program 3 (id=8327): socket$packet(0x11, 0x2, 0x300) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = dup(r0) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) r3 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r3, 0x107, 0xa, &(0x7f0000000080)=0x2, 0x4) setsockopt$packet_rx_ring(r3, 0x107, 0x5, &(0x7f0000000140)=@req3={0x1000, 0x3a, 0x1000, 0x3a, 0x7ff, 0xf83, 0x3}, 0x1c) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000040)={'syzkaller1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}}) write$tun(r2, &(0x7f0000000080)=ANY=[@ANYBLOB="083c86dd0001110004600000a60c6eec00be00442ffffe8000000000000000000000000000aaff020000000000000000000000000001"], 0xfdef) 5m57.31182471s ago: executing program 37 (id=8327): socket$packet(0x11, 0x2, 0x300) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = dup(r0) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) r3 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r3, 0x107, 0xa, &(0x7f0000000080)=0x2, 0x4) setsockopt$packet_rx_ring(r3, 0x107, 0x5, &(0x7f0000000140)=@req3={0x1000, 0x3a, 0x1000, 0x3a, 0x7ff, 0xf83, 0x3}, 0x1c) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000040)={'syzkaller1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}}) write$tun(r2, &(0x7f0000000080)=ANY=[@ANYBLOB="083c86dd0001110004600000a60c6eec00be00442ffffe8000000000000000000000000000aaff020000000000000000000000000001"], 0xfdef) 14.199501856s ago: executing program 4 (id=9826): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0/file0\x00', 0x1c0) mkdirat(0xffffffffffffff9c, &(0x7f0000000140)='./file1\x00', 0x1c0) r0 = landlock_create_ruleset(&(0x7f0000000180)={0x100}, 0x18, 0x0) r1 = openat$dir(0xffffffffffffff9c, &(0x7f00000001c0)='./file0\x00', 0x200000, 0x0) landlock_add_rule$LANDLOCK_RULE_PATH_BENEATH(r0, 0x1, &(0x7f0000000200)={0x100, r1}, 0x0) r2 = openat$dir(0xffffffffffffff9c, &(0x7f0000000240)='./file0/file0\x00', 0x200000, 0x0) landlock_add_rule$LANDLOCK_RULE_PATH_BENEATH(r0, 0x1, &(0x7f0000000280)={0x100, r2}, 0x0) r3 = openat$dir(0xffffffffffffff9c, &(0x7f0000000300)='./file1\x00', 0x200000, 0x0) landlock_add_rule$LANDLOCK_RULE_PATH_BENEATH(r0, 0x1, &(0x7f0000000340)={0x100, r3}, 0x0) landlock_restrict_self(r0, 0x0) r4 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) r5 = landlock_create_ruleset(&(0x7f00000002c0)={0x7f6e}, 0x18, 0x0) landlock_add_rule$LANDLOCK_RULE_PATH_BENEATH(r5, 0x1, &(0x7f0000000000)={0x2108, r4}, 0x0) landlock_restrict_self(r5, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='net_prio.prioidx\x00', 0x275a, 0x0) 13.93767647s ago: executing program 4 (id=9827): socket$nl_xfrm(0x10, 0x3, 0x6) socket$nl_generic(0x10, 0x3, 0x10) socketpair$unix(0x1, 0x3, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) getsockname$unix(r0, &(0x7f0000000300)=@abs, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = socket$netlink(0x10, 0x3, 0x15) writev(r2, &(0x7f0000000100)=[{&(0x7f0000000180)="390000001300034700bb65e1c3e4ffff01000000010000005600000025000000190004000400000007fd17e5ffff0800040000000000000000", 0x39}], 0x1) recvmmsg(r2, &(0x7f0000000680)=[{{0x0, 0x0, 0x0}, 0x5}, {{0x0, 0x0, 0x0}, 0x4}], 0x2, 0x40010000, 0x0) keyctl$KEYCTL_RESTRICT_KEYRING(0x1d, 0x0, &(0x7f00000003c0)='id_resolver\x00', &(0x7f0000000400)) poll(&(0x7f0000000000), 0x20000000000000b5, 0x9) r3 = syz_open_dev$vim2m(&(0x7f00000000c0), 0x7, 0x2) ioctl$vim2m_VIDIOC_S_FMT(r3, 0xc0d05605, &(0x7f0000000cc0)={0x1, @pix={0xfffffffe, 0x0, 0x30314742, 0x1, 0x0, 0x0, 0x3}}) getsockopt$inet_sctp6_SCTP_GET_PEER_ADDR_INFO(0xffffffffffffffff, 0x84, 0xf, 0x0, 0x0) 13.820412857s ago: executing program 8 (id=9829): r0 = fsopen(&(0x7f00000001c0)='ramfs\x00', 0x0) socket$inet_tcp(0x2, 0x1, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x48) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) r3 = fsmount(r0, 0x1, 0xa) fchdir(r3) r4 = open(&(0x7f0000000080)='./bus\x00', 0x1031c2, 0xb4) ftruncate(r4, 0x2007ffb) close(r4) r5 = open(&(0x7f0000000280)='.\x00', 0x0, 0x0) fcntl$notify(r5, 0x402, 0x8000003d) openat(0xffffffffffffff9c, &(0x7f0000000180)='./bus\x00', 0x88882, 0x0) 10.086390302s ago: executing program 4 (id=9840): socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)) r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000015c0), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) r1 = eventfd(0xb) ioctl$VHOST_SET_LOG_FD(r0, 0x4004af07, &(0x7f0000000240)=r1) ioctl$VHOST_SET_VRING_KICK(r0, 0x4008af20, &(0x7f0000000040)={0x1, r1}) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000280)={0x0, 0x1, 0x0, &(0x7f0000000580)=""/131, &(0x7f0000000500)=""/74, 0xeeef0000}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000380)={&(0x7f00000000c0)=ANY=[@ANYBLOB="300000001800010301000d00000000000a410000ff03000600000000140001"], 0x30}, 0x1, 0x0, 0x0, 0x20000000}, 0x0) r2 = openat$full(0xffffffffffffff9c, &(0x7f00000002c0), 0x20000, 0x0) read$FUSE(r2, &(0x7f0000001600)={0x2020}, 0x2020) r3 = syz_usb_connect(0x2, 0x3f, &(0x7f00000007c0)=ANY=[@ANYBLOB="11010000733336088dee1adb23610000000109022d0001100000000904000003fe03010009cd8d1f000200000009050502000000001009058b1e20"], 0x0) syz_usb_control_io(r3, 0x0, 0x0) syz_usb_disconnect(0xffffffffffffffff) ioctl$VIDIOC_S_EXT_CTRLS(0xffffffffffffffff, 0xc0205648, &(0x7f0000000100)={0x0, 0x1, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000040)={0x1f375, 0xd, '\x00', @p_u8=&(0x7f0000000440)=0x4}}) r4 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) ioctl$FS_IOC_GETVERSION(r4, 0xc0145b0d, &(0x7f0000000040)) 9.784205952s ago: executing program 6 (id=9842): mknodat(0xffffffffffffff9c, &(0x7f00000000c0)='./file2\x00', 0x81c0, 0xb) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000080)) syz_usb_connect(0x0, 0x2d, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000083667d1040206402d14e010203010902"], 0x0) r0 = socket$can_j1939(0x1d, 0x2, 0x7) mknod$loop(0x0, 0x10, 0x1) fsconfig$FSCONFIG_SET_STRING(0xffffffffffffffff, 0x1, 0x0, 0x0, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000080)={'vcan0\x00', 0x0}) bind$can_j1939(r0, &(0x7f0000000340)={0x1d, r1, 0x0, {0x2, 0x0, 0x6}, 0xfe}, 0x18) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x13, &(0x7f0000000280)=0x481, 0x4) r2 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r2, 0x8933, &(0x7f0000000440)={'vcan0\x00', 0x0}) bind$can_j1939(r2, &(0x7f0000000340)={0x1d, r3, 0x0, {0x2, 0x0, 0x6}, 0xfe}, 0x18) setsockopt$sock_int(r2, 0x1, 0x6, &(0x7f0000000040)=0x1, 0x4) sendmsg$inet(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000000)="04bcf9fc1878786d0a", 0x9}], 0x1}, 0x0) r4 = socket(0x10, 0x3, 0x0) write(r4, &(0x7f0000000000)="2400000011005f0414f9f4070009041f810000000e0000000000000008000f0001000000", 0x24) 9.357078012s ago: executing program 8 (id=9844): ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, 0x0) setsockopt$netlink_NETLINK_TX_RING(0xffffffffffffffff, 0x10e, 0xc, &(0x7f0000000280)={0x14000}, 0x10) sendmsg$nl_generic(0xffffffffffffffff, 0x0, 0x0) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)=0x0) symlinkat(&(0x7f0000002040)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00') r1 = open(&(0x7f0000000280)='.\x00', 0x0, 0x0) syz_open_procfs$namespace(0x0, 0x0) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) fcntl$lock(r1, 0x410, &(0x7f00000000c0)={0x1, 0x1, 0x1, 0xfffe}) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) rename(&(0x7f0000000140)='./file0\x00', &(0x7f0000001900)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00') fcntl$lock(0xffffffffffffffff, 0x7, &(0x7f0000000040)={0x0, 0x0, 0x8000, 0x1003ff}) openat(r1, &(0x7f0000000640)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x8041, 0x118) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r0, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) 9.124425551s ago: executing program 2 (id=9845): ioctl$KVM_SET_CPUID2(0xffffffffffffffff, 0x4008ae90, &(0x7f0000000000)={0x1, 0x0, [{0x40000001, 0x4, 0x2, 0x31237648, 0x10006, 0x2, 0x80}]}) ioctl$KVM_SET_REGS(0xffffffffffffffff, 0x4090ae82, &(0x7f00000000c0)={[0x1, 0x2, 0x80, 0x1, 0x0, 0x0, 0x6, 0x0, 0x0, 0x2, 0x8b45, 0x0, 0x6, 0x6, 0x0, 0x200000], 0xeeee0000, 0x28340}) ioctl$KVM_CLEAR_DIRTY_LOG(0xffffffffffffffff, 0xc018aec0, &(0x7f00000001c0)={0x1ff, 0x1c0, 0x100, &(0x7f0000000d00)=[0xe0b, 0x8e0, 0xffffffffffff7b3b, 0x3ff, 0xfffffffffffffffd, 0x7, 0x0, 0x8, 0x0, 0xd, 0x2, 0x7, 0x7, 0x8000000000000000, 0xfffffffffffeffff, 0x0, 0x7ff, 0x3, 0x4, 0x4, 0x9, 0x5, 0x113b041f800000, 0x5, 0x7, 0x3, 0x77fbebcd, 0x6, 0x81, 0xffffffff80000001, 0x3, 0xc0e4, 0x1, 0x86, 0x5809, 0x8, 0x7fffffffffffffff, 0xb2, 0x1, 0x8, 0x0, 0x1000, 0x9a, 0x2, 0xfffffffffffffffa, 0x1, 0xff, 0x1, 0xd, 0x2, 0xd6, 0x7, 0x8, 0x6, 0xc, 0x8, 0x5, 0x7, 0x80000001, 0xc0, 0x800, 0x4, 0x7, 0x1464, 0x2, 0x9, 0x1, 0x511, 0x90, 0x9, 0x8, 0x9, 0xb, 0x604, 0x9, 0xfff, 0x3, 0x4, 0x3b, 0x4, 0x5, 0x3a31, 0xffffffffffffff67, 0x67, 0x1a, 0x6, 0x1, 0x3, 0xfe6, 0xa, 0x3, 0x3, 0x1ff, 0xa79, 0x8, 0x8, 0x3, 0x0, 0xffffffffffffff7f, 0x7bf, 0x5, 0xfffffffffffffff7, 0x7, 0x100000000, 0x7, 0x5, 0x8, 0x101, 0x2, 0x1b2, 0x4, 0x6, 0xcea8, 0x3ff, 0xd, 0x9be9, 0x8, 0x8, 0x3, 0x2ac2, 0xdc92, 0x0, 0xffffffffffff2522, 0xfffffffffffffffa, 0xea, 0x5, 0xe, 0x3]}) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000340), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) openat2$dir(0xffffffffffffff9c, 0x0, &(0x7f00000000c0)={0x2afc0, 0x1c1, 0x6}, 0x18) r2 = openat$binfmt_register(0xffffffffffffff9c, &(0x7f0000000140), 0x1, 0x0) write$binfmt_register(r2, &(0x7f0000000440)={0x3a, 'syz3', 0x3a, 'E', 0x3a, 0x9, 0x3a, '\xe2\xbf\xd9\xafk\xd3~a3\xd0\x94', 0x3a, '^', 0x3a, './file0'}, 0x33) truncate(&(0x7f0000000400)='./file0\x00', 0x10) ioctl$KVM_REGISTER_COALESCED_MMIO(r1, 0x4010ae67, &(0x7f0000000380)={0x2, 0x34000, 0x1}) r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x2) ioctl$KVM_RUN(r3, 0xae80, 0x0) ioctl$KVM_REGISTER_COALESCED_MMIO(r1, 0x4010ae67, &(0x7f0000000040)={0x0, 0x12000, 0x1}) ioctl$KVM_REGISTER_COALESCED_MMIO(r1, 0x4010ae67, &(0x7f0000000000)={0x6000, 0x2000, 0x1}) ioctl$KVM_RUN(r3, 0xae80, 0x0) 8.587434496s ago: executing program 2 (id=9846): syz_usb_connect(0x1, 0x3d, &(0x7f0000000080)=ANY=[@ANYBLOB="12010000bdce4208110f80106afc0000000109022b00010000000009043700022ee5cd0009058010ff037f790209050e0320000980070705ab0b78"], 0x0) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x1000002, 0x200000005c831, 0xffffffffffffffff, 0x0) mremap(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x400000, 0x3, &(0x7f0000000000/0x400000)=nil) syz_open_dev$char_usb(0xc, 0xb4, 0x0) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) r0 = io_uring_setup(0x7, &(0x7f0000000040)={0x0, 0xc8a1, 0xc000, 0x8, 0xc1}) syz_emit_ethernet(0x0, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="1700000004"], 0x50) syz_emit_ethernet(0x93, &(0x7f0000000080)={@broadcast, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x24}, @void, {@llc_tr={0x11, {@llc={0x1, 0x0, "1a", "36406bcb27b4974c68c1e6918431ca699261672b0b54e10ba6f78e084da96845b95b7571b8c9876273af9064c0b136c0cfc38b2f2f09335f951b8097ce42d6e9c90def027aefe35f85f80e3ea7f7c36acdc1985c3363b013db098f824f0160f37041f5911c914b79abea2e5f57ebe44aa2de7722ec81e645811a9da1c035e2b039a6"}}}}}, 0x0) io_uring_enter(r0, 0x2219, 0x7721, 0x16, 0x0, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_GET(r1, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000280)=ANY=[@ANYBLOB="600000000101030000000000000000000a000003440001802c00018014000300fc010000000000000000000000000001140004002001000000000000000000000000000206000340000000000c000280050001"], 0x60}, 0x1, 0x0, 0x0, 0x14}, 0x10) syz_usb_connect$cdc_ncm(0x0, 0x7c, &(0x7f0000000000)=ANY=[@ANYBLOB="12010102020000102505a1a440000102030109026a00020105fa0e0904000001020d00000524060001052400ba000d240f0102000000fb0605000706241a60e122062407046925042413020424130609058103ff030003060904010000020d00000904f40102020d00"], &(0x7f0000005340)={0x0, 0x0, 0x0, 0x0}) syz_usb_connect$uac2(0x0, 0x8a, &(0x7f0000000080)={{0x12, 0x1, 0x201, 0x0, 0x0, 0x0, 0x8, 0xe41, 0x4241, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x78, 0x3, 0x1, 0x0, 0x10, 0x1, {0x8, 0xb, 0x0, 0x0, 0x1, 0x9, 0x20, 0xbc}, {{{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x20, 0x0, {{0x9, 0x24, 0x1, 0x8, 0x2, 0x18, 0xc}, [@effect_unit={0xf, 0x24, 0x7, 0x6, 0x0, 0x3, [0x2, 0x3, 0x2, 0x1]}]}}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x20, 0x0, {}, {{0x9, 0x5, 0x1, 0x9, 0x10, 0x8, 0x10, 0x6, {0x8, 0x25, 0x1, 0x1, 0x3f, 0x5, 0x9}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x20, 0x0, {}, {{0x9, 0x5, 0x82, 0x9, 0x40, 0xf, 0x0, 0xc0, {0x8, 0x25, 0x1, 0x0, 0x30, 0xaf, 0x408}}}}}}}}]}}, &(0x7f0000000540)={0xa, &(0x7f0000000140)={0xa, 0x6, 0x92fd9c051ec52cc7, 0x1, 0x8, 0x5, 0x20}, 0x19, &(0x7f0000000180)={0x5, 0xf, 0x19, 0x1, [@ss_container_id={0x14, 0x10, 0x4, 0x81, "c54a665c8bf3da0718146afd7cbb3c2a"}]}, 0x7, [{0x4, &(0x7f00000001c0)=@lang_id={0x4, 0x3, 0x1809}}, {0x25, &(0x7f0000000200)=@string={0x25, 0x3, "d1533d4b51b929cb7a96236be791c3c5c5a63e20958b9d85f54932baf00248f6056e2c"}}, {0x4, &(0x7f0000000240)=@lang_id={0x4, 0x3, 0x405}}, {0x98, &(0x7f0000000280)=ANY=[]}, {0xad, &(0x7f0000000340)=@string={0xad, 0x3, "5371e324d161c795bcb3e757a9d813fb43f03491562d4e53e5847b987e76fbf5527466892f048b5ea97327ecc9aa9726d5e6268d1719efcb329ac176cc196ae15680ac86db3ddb0e02084cee43212173e4e80e5482a7cb8cc0f96c027fbef51ca3ccd71612f218b3ad45a6136018458773e7ab3ac1f1106cbe9fbbf90ee8e4a8306d83b49bad90d8874d435fb865aa7b388dfdb264d3fc84761d9c7d988d9bde164eb74665775111164856"}}, {0x30, &(0x7f0000000440)=@string={0x30, 0x3, "3955a56546612cc601bc41af987b8342c8cccbaee2b839e34cc1434dae95a37bc239b0c01c540fcb04bb65b996c6"}}, {0xb9, &(0x7f0000000480)=@string={0xb9, 0x3, "9ac71a551478d9d7013c9e4b1b6221415707bfb5c7b8eb44c4591ede980b4160cc4ab42bc9eb7e3e88ed4de0ac3cb3cad923b76ab77eb061bb8d1abd8713cff8d87e3b3a44a63e88a2d2d7e5c6903c9d83b38472a24b9ca40dbf8e521202ef0af079bda439627bffbfa4bf6ecca8e8370d177ef291d2e08e3bd7f37fe415d29efc8984df409fa3748f762a98a3c296b3281a1e82e510d13fba8e5c7dbf3ddd958da944b34e19d300a21c324bb6d7584a6f8219886ea369"}}]}) 8.230014446s ago: executing program 4 (id=9848): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x1, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r1) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$tipc(&(0x7f0000000380), r2) sendmsg$TIPC_CMD_ENABLE_BEARER(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c657230"], 0x38}, 0x1, 0x0, 0x0, 0x44081}, 0x0) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000240)={'syzkaller0\x00', @broadcast}) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x100, 0x0) close(r4) r5 = socket$unix(0x1, 0x5, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000440)=@newqdisc={0x78, 0x24, 0x4ee4e6a52ff56541, 0x70bd2d, 0x0, {0x0, 0x0, 0x0, r7, {0x0, 0xb}, {0xffff, 0xffff}, {0xffff}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x48, 0x2, {{0x3, 0x7, 0x5, 0x5, 0xffffffff, 0x6}, [@TCA_NETEM_SLOT={0x2c, 0xc, {0x7ff, 0x100000000, 0x6eb, 0x5, 0x7, 0x2c0b}}]}}}]}, 0x78}, 0x1, 0x0, 0x0, 0x240080c1}, 0x0) sendmsg$nl_route_sched(r6, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000004c0)=@newqdisc={0x34, 0x24, 0x4ee4e6a52ff56541, 0x70bd2e, 0x25dfdbfb, {0x0, 0x0, 0x0, r7, {0x0, 0x1}, {0x3, 0xb}, {0xffe0, 0x6}}, [@qdisc_kind_options=@q_cake={{0x9}, {0x4}}]}, 0x34}, 0x1, 0x0, 0x0, 0x2404c0f1}, 0x200c840) ioctl$SIOCSIFHWADDR(r4, 0x8922, &(0x7f0000002280)={'syzkaller0\x00', @random="2b0100004ec6"}) 8.051596858s ago: executing program 9 (id=9849): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$kcm(0x10, 0x2, 0x10) r2 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r2, 0x11b, 0x4, &(0x7f00000000c0)={&(0x7f0000000000)=""/62, 0x33e000, 0x1000}, 0x20) setsockopt$XDP_UMEM_COMPLETION_RING(r2, 0x11b, 0x6, &(0x7f0000000080)=0x1, 0x4) setsockopt$XDP_RX_RING(r2, 0x11b, 0x2, &(0x7f0000001980)=0x100, 0x4) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r1, 0x8933, &(0x7f0000000140)={'batadv_slave_1\x00', 0x0}) setsockopt$XDP_UMEM_FILL_RING(r2, 0x11b, 0x5, &(0x7f0000000300)=0x1, 0x4) bind$xdp(r2, &(0x7f0000000100)={0x2c, 0x0, r3}, 0x10) r4 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r4, 0x11b, 0x4, &(0x7f0000000340)={&(0x7f0000000000)=""/62, 0x328000, 0x800, 0x9, 0x3}, 0x20) setsockopt$XDP_UMEM_COMPLETION_RING(r4, 0x11b, 0x6, &(0x7f0000000080)=0x1, 0x4) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f0000000580)={'batadv_slave_1\x00', 0x0}) setsockopt$XDP_TX_RING(r4, 0x11b, 0x3, &(0x7f0000000280)=0x20, 0x4) setsockopt$XDP_UMEM_FILL_RING(r4, 0x11b, 0x5, &(0x7f0000000300)=0x2, 0x4) bind$xdp(r4, &(0x7f0000000100)={0x2c, 0x0, r5}, 0x10) 7.063543096s ago: executing program 4 (id=9850): socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f0000000140)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) dup2(0xffffffffffffffff, 0xffffffffffffffff) r2 = openat(0xffffffffffffff9c, &(0x7f0000000440)='./file0\x00', 0x103a42, 0x0) r3 = fanotify_init(0x200, 0x0) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='blkio.throttle.io_serviced\x00', 0x275a, 0x0) openat$sndseq(0xffffffffffffff9c, &(0x7f0000000000), 0x40) fanotify_mark(r3, 0x101, 0x8000011, r4, 0x0) ftruncate(r2, 0x6000000) accept$inet(r2, 0x0, &(0x7f00000000c0)) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x5, 0x12, r2, 0x4000) 7.057215005s ago: executing program 9 (id=9860): syz_usb_connect$hid(0x0, 0x0, 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f0000000040)={0x3, &(0x7f0000000140)=[{0x20, 0x0, 0x0, 0xfffff024}, {0x20, 0x0, 0x0, 0xfffff034}, {0x6, 0xfc, 0x0, 0x7}]}, 0x10) sendmmsg(r0, &(0x7f0000001c00), 0x400000000000159, 0x40840) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, &(0x7f0000000640)="430fc73f0f2390b9800000c00f3235010000000f300f20d835080000000f22d8c4e18173f53866baf80cb83879e487ef66bafc0cec66b88e008ec02d1aa80000460f1c460041ae", 0x47}], 0x1, 0x74, 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) r2 = socket$igmp(0x2, 0x3, 0x2) setsockopt$IPT_SO_SET_REPLACE(r2, 0x0, 0x40, &(0x7f0000000e00)=@raw={'raw\x00', 0x8, 0x3, 0x2a8, 0xf8, 0x43, 0xa0, 0x0, 0x98, 0x210, 0x178, 0x178, 0x210, 0x178, 0x49, 0x0, {[{{@ip={@loopback, @local, 0x0, 0x0, 'wg0\x00', 'ip6erspan0\x00', {}, {}, 0x84, 0x0, 0x40}, 0x12a, 0xd0, 0xf8, 0x0, {0x0, 0x7a010000}, [@common=@unspec=@state={{0x28}, {0xfffffffe}}, @common=@unspec=@owner={{0x38}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x7}}]}, @common=@unspec=@NFQUEUE1={0x28, 'NFQUEUE\x00', 0x1, {0x8, 0x5}}}, {{@ip={@multicast2, @loopback, 0xff000000, 0xff, 'syz_tun\x00', 'veth1_to_batadv\x00', {}, {0xff}, 0x2f, 0x3, 0x51}, 0x0, 0xb0, 0x118, 0x0, {}, [@common=@set={{0x40}, {{0x4, [0x3, 0x0, 0x0, 0x6, 0x1, 0x2], 0x4, 0x4}}}]}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x8, 0x8, 0x7, 0x3af3, 'netbios-ns\x00', 'syz1\x00'}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x308) mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x3000002, 0x5d031, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x18) socket$nl_route(0x10, 0x3, 0x0) r3 = fsopen(&(0x7f00000000c0)='sysfs\x00', 0x1) fsconfig$FSCONFIG_SET_STRING(r3, 0x1, &(0x7f0000000000)='mand\x00', &(0x7f0000000040)='sysfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r3, 0x6, 0x0, 0x0, 0x0) fsmount(r3, 0x0, 0x0) 6.336183157s ago: executing program 6 (id=9851): r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x121301, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x0, "00009200000000000000000000000058b200"}) r1 = epoll_create(0x8) pselect6(0x40, &(0x7f0000000040)={0xc, 0x1, 0xfffffffffffffff3, 0x0, 0x0, 0x0, 0x400000000000, 0x400}, 0x0, 0x0, 0x0, 0x0) bind$inet(0xffffffffffffffff, &(0x7f0000000080)={0x2, 0x0, @loopback}, 0x10) r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(r2, &(0x7f00000004c0)={0x26, 'hash\x00', 0x0, 0x0, 'hmac(sha1)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, 0x0, 0x0) r3 = accept4(r2, 0x0, 0x0, 0x80800) sendmsg$IPSET_CMD_HEADER(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000140)={0x40, 0xc, 0x6, 0x201, 0x0, 0x0, {0x0, 0x0, 0x3}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}]}, 0x40}, 0x1, 0x0, 0x0, 0x80000}, 0x800) fcntl$getown(r1, 0x9) timer_create(0x1, 0x0, 0x0) setsockopt$ALG_SET_KEY(0xffffffffffffffff, 0x117, 0x1, 0x0, 0x0) syz_open_pts(r0, 0x0) r4 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) close_range(r4, 0xffffffffffffffff, 0x0) 5.908712026s ago: executing program 6 (id=9852): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r1) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$tipc(&(0x7f00000000c0), r2) sendmsg$TIPC_CMD_ENABLE_BEARER(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c657230"], 0x38}, 0x1, 0x0, 0x0, 0x44081}, 0x40000) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x100, 0x0) close(r4) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r5, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000440)=@newqdisc={0x58, 0x24, 0x4ee4e6a52ff56541, 0x70bd26, 0x25dfdbfe, {0x0, 0x0, 0x0, r7, {0x0, 0xb}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_sfb={{0x8}, {0x2c, 0x2, @TCA_SFB_PARMS={0x28, 0x1, {0x20bbfb2b, 0xf2, 0x45ff, 0x9, 0xfffffffc, 0xb5, 0x10001, 0x2, 0x81}}}}]}, 0x58}}, 0x180c0) r8 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r8, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000004c0)=@newqdisc={0x4c, 0x24, 0x4ee4e6a52ff56541, 0x70bd2b, 0x80000, {0x0, 0x0, 0x0, r7, {0x0, 0xe}, {0x2, 0xb}, {0xffe0, 0x484c10e0d22b6613}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x1c, 0x2, {{0xff, 0x0, 0xfffffffa, 0xc, 0x8, 0x3}}}}]}, 0x4c}}, 0x4008000) ioctl$SIOCSIFHWADDR(r4, 0x8922, &(0x7f0000002280)={'syzkaller0\x00', @random="2b0100004ec6"}) 5.637705837s ago: executing program 8 (id=9853): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = openat$vimc1(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) ioctl$VIDIOC_SUBSCRIBE_EVENT(r1, 0x4020565a, &(0x7f00000000c0)={0x2, 0x8, 0x2}) ioctl$VIDIOC_SUBSCRIBE_EVENT(r1, 0x4020565a, &(0x7f0000000080)={0x2, 0xfffff7ff, 0x1}) r2 = socket$kcm(0x11, 0x3, 0x0) r3 = openat$dsp1(0xffffffffffffff9c, &(0x7f0000000040), 0x1, 0x0) ioctl$SOUND_MIXER_READ_STEREODEVS(r3, 0x80044dfb, &(0x7f0000000080)) r4 = socket(0x10, 0x803, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000240)={'vxcan1\x00', 0x0}) sendmsg$nl_route(r4, &(0x7f0000000380)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000300)=@bridge_dellink={0x4c, 0x11, 0x4, 0x70bd29, 0x25dfdbfe, {0x7, 0x0, 0x0, r5, 0x5, 0x10000}, [@IFLA_CARRIER_CHANGES={0x8, 0x23, 0xffff1415}, @IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @geneve={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_GENEVE_DF={0x5, 0xd, 0x7}]}}}, @IFLA_CARRIER={0x5, 0x21, 0x85}]}, 0x4c}, 0x1, 0x0, 0x0, 0x20008000}, 0x20000000) sendmsg$kcm(r2, &(0x7f0000000fc0)={&(0x7f0000001340)=@hci={0x1f, 0x300, 0x31}, 0x80, &(0x7f0000001000)=[{&(0x7f0000001040)="b8b2cc1e00c1dba49dbb66ca892f", 0xe}], 0x1}, 0x0) ioctl$VIDIOC_UNSUBSCRIBE_EVENT(r1, 0x4020565b, &(0x7f0000000200)={0x0, 0x4, 0x3}) setsockopt$inet6_int(r0, 0x29, 0x4, &(0x7f0000000000)=0xb, 0x4) r6 = socket$igmp6(0xa, 0x3, 0x2) r7 = openat$vicodec1(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) ioctl$VIDIOC_G_FBUF(r7, 0x8030560a, &(0x7f00000001c0)={0x63, 0x3, &(0x7f0000000100)="2d9400f6be84dbc6113a1c05e44ca10d691f837370bd0fadbb79396e9ac2557984f096292c2ff6be1ca02e67c468a3e738095a2728ce7402a3af4518d38dc068b6", {0x7, 0x9464, 0x31435750, 0x1, 0xffffffff, 0x7, 0xb, 0x9}}) connect$inet6(r6, &(0x7f0000000180)={0xa, 0x4001, 0x403, @empty, 0xa}, 0x1c) 5.59707464s ago: executing program 2 (id=9854): bpf$ENABLE_STATS(0x20, 0x0, 0x0) bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x50) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) socket$inet_udp(0x2, 0x2, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x50) r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r1}, &(0x7f0000bbdffc)=0x0) pipe(&(0x7f0000000000)) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000940)={0xffffffffffffffff, 0xffffffffffffffff}) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r3, 0x0, r4, 0x0, 0xf3a, 0x0) write$binfmt_misc(r4, &(0x7f0000000980), 0xfdef) timer_settime(r2, 0x0, &(0x7f0000000340)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) setsockopt$inet_mreq(r0, 0x0, 0x23, &(0x7f0000000000)={@multicast1=0xe0000300, @local}, 0x8) syz_emit_ethernet(0x2a, &(0x7f0000000040)={@link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}, @broadcast, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x1c, 0x0, 0x0, 0x80, 0x2, 0x0, @empty, @multicast1=0xe0000300}, @echo_reply={0x0, 0x0, 0x0, 0x64, 0x20d0}}}}}, 0x0) 5.358400863s ago: executing program 9 (id=9855): unshare(0x6a040000) r0 = socket(0x1e, 0x4, 0x0) socketpair$unix(0x1, 0x3, 0x0, 0x0) sendmmsg$unix(0xffffffffffffffff, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f0000000140)={0x26, 'hash\x00', 0x0, 0x0, 'blake2b-160\x00'}, 0x58) recvmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) recvmmsg$unix(r0, &(0x7f0000001bc0)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) r2 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$FBIOPUT_VSCREENINFO(r2, 0x4601, &(0x7f0000000100)={0x400, 0xa, 0x0, 0x0, 0x0, 0x180, 0x0, 0x0, {}, {}, {}, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x4, 0x0, 0x0, 0x0, 0x4, 0x0, 0x1}) ioctl$FBIOGET_FSCREENINFO(r2, 0x4602, &(0x7f0000000080)) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)=@ipv4_newrule={0x1c, 0x20, 0x301, 0x70bd2c, 0x25dfdbff, {0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1}}, 0x1c}, 0x1, 0x0, 0x0, 0x240480d4}, 0x0) 5.229496309s ago: executing program 8 (id=9856): sendmsg$MPTCP_PM_CMD_GET_LIMITS(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0xffffffffffffffb4, 0x0, 0x1, 0x0, 0x0, 0x41}, 0x809d) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000300)='blkio.bfq.io_merged_recursive\x00', 0x275a, 0x0) syz_emit_ethernet(0x36, &(0x7f0000000100)=ANY=[@ANYBLOB="000002f0d31209000000bc2e79e995"], 0x0) write$binfmt_script(r2, &(0x7f0000000100), 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r2, 0x0) preadv(r2, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffff23}], 0x3e, 0x0, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000b1e000/0x18000)=nil, &(0x7f0000000040)=[@text16={0x10, &(0x7f0000000180)="66b9800000c00f326635000800000f300f0f1c9a65660ff3b20618baa000ec672e660f38803d004000000f285473f61366b9800000c00f320f300f20e06635800000000f22e02b6aa6c8", 0xe1}], 0x1, 0x0, 0x0, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text32={0x20, 0x0}], 0x1, 0x0, 0x0, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000008c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a32000000001400000011"], 0x7c}}, 0x0) sendmmsg$inet6(0xffffffffffffffff, &(0x7f00000025c0)=[{{0x0, 0x0, &(0x7f0000000340)=[{&(0x7f0000000140)='i', 0x1}], 0x1}}], 0x1, 0x40) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={0x0, 0x4c}}, 0x0) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, 0xffffffffffffffff, &(0x7f0000000000)={0xc0000000}) ioctl$KVM_RUN(r3, 0xae80, 0x0) 4.90205431s ago: executing program 6 (id=9857): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(r2, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-serpent-avx2\x00'}, 0x58) setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, 0x0, 0x0) r3 = accept4(r2, 0x0, 0x0, 0x800) sendmmsg$alg(r3, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0x10}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb09587", 0x4b}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1", 0x55}], 0x3}], 0x1, 0x40800) recvmsg(r3, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000240)=""/185, 0xb9}], 0x1}, 0x0) r4 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, &(0x7f00000001c0)=[@text16={0x10, 0x0}], 0x1, 0x4, 0x0, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000100)=[@text64={0x40, 0x0}], 0x1, 0x43, 0x0, 0x0) ioctl$KVM_SET_VCPU_EVENTS(r4, 0x4400ae8f, &(0x7f00000000c0)=@x86={0x60, 0x4, 0xc, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x80, 0x9, 0x1, 0x0, 0x0, 0x8, 0x0, 0xff, 0xff, 0x0, '\x00', 0x0, 0x1}) ioctl$KVM_RUN(r4, 0xae80, 0x0) ioctl$KVM_SET_IRQCHIP(r1, 0x8208ae63, &(0x7f0000000380)={0x2, 0x0, @ioapic={0x8000000, 0x9, 0x10001, 0xfffffffe, 0x0, [{0x2, 0x14, 0x87, '\x00', 0x8}, {0x9, 0x8, 0x2, '\x00', 0xb}, {0xff, 0x7f, 0xd3, '\x00', 0x67}, {0x0, 0x5, 0xf5, '\x00', 0xf}, {0x7, 0x9, 0xc, '\x00', 0xfb}, {0x0, 0x4, 0x54, '\x00', 0xff}, {0x71, 0xd5, 0xf1, '\x00', 0x7f}, {0x3, 0x4, 0xc}, {0x7f, 0x5, 0xb, '\x00', 0x8}, {0xd7, 0xd, 0x8, '\x00', 0x6}, {0x0, 0x28, 0x80, '\x00', 0xdc}, {0xff, 0x1, 0xfe, '\x00', 0x1}, {0xfe, 0x7, 0x26}, {0xcf, 0x3, 0x1, '\x00', 0x6}, {0xf, 0xee, 0x7, '\x00', 0x3}, {0x39, 0x2, 0x6, '\x00', 0xb}, {0x9, 0x6, 0x2, '\x00', 0x8}, {0x5, 0xc, 0x5, '\x00', 0xc}, {0x7, 0x1, 0x7, '\x00', 0xc2}, {0x0, 0x80, 0xe, '\x00', 0x7f}, {0x1, 0xc, 0x80, '\x00', 0x7f}, {0x10, 0x6, 0x3, '\x00', 0x10}, {0x1, 0x23, 0xf3, '\x00', 0x4}, {0x7, 0x6, 0x4}]}}) 4.372738432s ago: executing program 2 (id=9858): r0 = getpgrp(0xffffffffffffffff) r1 = syz_open_procfs(r0, &(0x7f0000002280)='totmaps\x00') prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x1, 0x4, &(0x7f0000006680)) writev(r1, &(0x7f0000003380)=[{&(0x7f00000022c0)="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", 0x1000}, {&(0x7f00000032c0)}], 0x2) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000340)={0x0}}, 0x0) mkdir(&(0x7f00000033c0)='./file0\x00', 0x20) chown(0x0, 0x0, 0x0) read$FUSE(r1, &(0x7f0000000240)={0x2020}, 0x2020) r3 = memfd_create(&(0x7f0000000000)='\x01\xfd\xae.+\xa6\x8c\xb6?2\x199\x94S,|x?Ue[\xbd\xe1!\x033\xbc\'#\xff\x17\x9b%\xf3[d \x06\x00\x00\x00\x97A\xc2\xd8\xf0Uq!\xe4\xc4\xb1\xa2\x1c\xffC;\x94Q\r\xb6}\x9c\xecC\v\xcf\xeb\xe4\x9aR\xe5,\x82\x03\x00\x19\x8d\xe8\xc6\xb9\xe4\xb4\x99\x8a\x19\xe5\xb8\x8cx\b\x99\x04R\x05\xaf\xa2\xea5\f\xcc\x1a\x9b\x00Uf\xa5\xf7\x80Tgiz\nX\b\x91\xfd0\x8e\xb6\xa3\v#\x16\xdf\xb4\xc0\xe6\xb4\xef\xa8i\xd8\xa2\xd2(\x98\x9bA\x8f\x13\xeb\xf4b/\xef!\x8f\xf6]-\xf1k\xb62\x89gEv\x13\xf4\xc7\xb2\xf5\\\x17\x90\xb5\xa6\xa8\xb8o\x0f\xe2 \xe7\x9c$\xd7\xf2@\xf7cdv[\t\x00\x8d\xf3\xcc1\r$\x1e\xff\xf0P\xb2\x97\xb8\xbc\xeb\x91\x87\x8bu\xbf\xd4\'\xff\x1f\f\x016\x9dQ\xeeT\xe8\bY\x00\xb2\x06\xa6\xbel\x9b.o\xbe\x80\x9dx\xd5O\xd6h\\I\xc9\x8d\a\x1d\xc9k\x83\xfc\xa4\xad4\x03\xa2X\x0f\x82\xdbs\xc7\x83L\x9e\xa2\xd1\xb3\xac\x8d\xd8\xb4\xb4\xea\x90Q\xd8\xc7\xeb%\x8bOp\x1ab\x96\xcf\xbb\x15\xcf\xfcN\xed\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00s\xaf\xa2\x14]p+\x96\x1ei|n\xda\xee\\\xae\x96*\x82*\xb8j\xda\xaa\x14\x1f\x1d\xf8\xf8\xae\xfcH\xc4\xb3j\xe8\xcfO\xef\x0e\xafe\xb5*\x89\x18\xb2w\x96\b\x1by\xeaT\xdd\xb3g6\xbc\x85\xb2Y\xccv\x06\x00\x00\x00\xc5e\x90\xc51\x9f\v_# \b\xa5\xbcP,|\xe9\xd6s\x1f\x1f\xbe\xd3\x80\xb1\xa8 \xce|df\x903\v\x02\xea.\x03X\xb5\xe4,8\xb7\xadEI\xdcA\xa7\xcc\xd7\xf9n\x1b\x95\xf8\x11Z\xe6:\x03\xce\xfe\x02\x8ctdy~_oC\x9e\xef\xf0\xa2K\xe9;\x8e:\x01\x03C\x92\xeb\x16\x1c\xbf\xbe\xef\xccUxhg\xdfY\xe6\x83\xa6z\xff\x01\x9d o_{!O\xaajU\x84 \xe9\xb59r\x9cw\x18Z\xd3\xcd\x0e\xba\\\xdb\xf0\xe1\x86\t\xaf\vi\xdc\xbf?\xf5\n\xbd^\x05\xc0\xceuC}\xa8\xc7\xad\x86\xd7\x15&\xb9]1\x05J\x96\xf0\x84\xc1\f\xa6p\x96?\x00\x00\x00\x00\x00\x00\x00\x12\x88\xc8\x9c\xc9Cn\xd4\xa47V\'+\xcc\xbf\r\xa9\x10\x1d\xcf\xebKl\xcc\xa4:\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00G\xdf\xbb\xc0_\x99F\xf4n]\x14\xbc\xcd\xd3\x9f\x9fe\xc5\xe6\xe8Mb\xc6\x82\x82\xcb\xcaXe\xe1\xa2\xaa\x02\x86\xb8\x18\xe2C\xeb\xa9\x17&\x01&\'w\xa1t0\x80\xf0\x93\x80\x9f\x9b\xe0\x9f\xea\xb9\x9eD]#V\xda\x92\xca\xc6\xfa.\xd6\xe31\xfe\xe8\x02\xebX\xbd\nz\x01O\xd3r\xa2\xa9u\x93>m\xd7q\'\xdf\xfajo\xd8n\xa7\xecJi\xde\xdf\x7f\xe3\xc4*Z 4\xe8S$\xa1H=\xdf\x05\xf3\xc3T\xd1\xdd\xc6f\xa4\xb4\x96\\\xa0\xf9\x0f\x17\x11{\xb6\x9d\xd21\xc1\x90Vj\x13r\x00\x00\xde\x03\xab\xff\x8as0\xc6E\xca\"\xd9*\x9a\x15\xb95r\x8f\xaaj\x82\xd6\xd2%\xed\xa2WQ\xec2\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xccX\xfdRB\xffU\xe9\xfa\x1f\xf6\xce\b\xde@\x061\xc6z\xe4\xe0\xc9?\xa7\x94>\x9c\xd1\xa5o\x04\xaaim\xae\xfe\xc7f\xa3\x96\xd7\xb4c)r{\r#\xddI&\n\xf2\xec\xd4\xff\x9f\x136zZ-2\x80\xfbH+\x9b8\xf3\xed\xdf\xa2my\xb28c[\xc3\xfe\xb5M\x84\x97\xa5\'s\xe9\xdc=)I\xabLt2\x9c\v\xd9S', 0x6) fallocate(r3, 0x0, 0x9, 0x4) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x5, 0x12, r3, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) r5 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TCXONC(r5, 0x5608, 0x3) ioctl$SIOCSIFHWADDR(r4, 0x8924, &(0x7f00000001c0)={'bridge_slave_0\x00', @dev={'\xaa\xaa\xaa\xaa\xaa', 0xb}}) pread64(r1, &(0x7f000001a240)=""/102400, 0x19000, 0x100008) 3.964261817s ago: executing program 9 (id=9859): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000001180)=ANY=[@ANYBLOB="12010000090003206d0414c34000ffff000109022400010400a000090400000103010100093700086ce82201000905815f"], 0x0) syz_usb_control_io$hid(r0, &(0x7f00000001c0)={0x14, &(0x7f0000000dc0)=ANY=[@ANYBLOB="00020c0000000c0002"], 0x0, 0x0, 0x0}, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$tipc2(&(0x7f00000004c0), 0xffffffffffffffff) sendmsg$TIPC_NL_KEY_SET(r1, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000000)={0x2c, &(0x7f00000000c0)=ANY=[], 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000080)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]}) r2 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000040), 0x147c40, 0x0) readahead(r2, 0x2a91, 0x7ff) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_genetlink_get_family_id$smc(&(0x7f0000000200), r1) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000000)="d8000000180081064e81f782db44b904021d080006067c09e8fe55a10a0015400500142603600e120800060000001001a8001600a400014003000000036004fab94dcf5c0461c1d67f", 0x49}], 0x1}, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000900)={0x84, 0x0, 0x0, 0x0, &(0x7f0000000500)={0x20, 0x0, 0x68}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, &(0x7f00000006c0)={0x84, 0x0, 0x0, 0x0, &(0x7f00000005c0)={0x20, 0x0, 0x4, {0x5}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, &(0x7f0000000e80)={0x84, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB=' \x00\v\x00\x00\x00'], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 3.789323206s ago: executing program 8 (id=9861): socket(0x22, 0x4, 0x2) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f00000bd000), 0x318, 0x0) syz_genetlink_get_family_id$devlink(0x0, 0xffffffffffffffff) open(&(0x7f00000005c0)='./bus\x00', 0x167842, 0x40) rename(0x0, 0x0) r0 = socket$kcm(0x1e, 0x5, 0x0) sendmsg$kcm(r0, &(0x7f0000000540)={&(0x7f0000000280)=@tipc=@name={0x1e, 0x2, 0x0, {{0x1, 0x1}}}, 0x80, 0x0}, 0x0) r1 = socket$kcm(0x10, 0x2, 0x4) sendmsg$kcm(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000013c0)=[{&(0x7f00000001c0)="39000000140081ae0000dc676f97daf01e2357f9ffffffffffffff0521018701546fabca1b4e8a06a6580e88370200c54c1960b89c40ebb373", 0x39}], 0x1}, 0x0) socket$inet6_mptcp(0xa, 0x1, 0x106) r2 = socket$inet_mptcp(0x2, 0x1, 0x106) accept(0xffffffffffffffff, 0x0, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_int(r3, 0x29, 0x10, &(0x7f0000000000)=0x2, 0x4) sendto$inet6(r3, 0x0, 0x0, 0x20008045, &(0x7f00000001c0)={0xa, 0x2, 0x1000, @empty}, 0x1c) recvfrom(r2, 0x0, 0x0, 0x4112, 0x0, 0x0) 3.575511716s ago: executing program 2 (id=9862): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r1) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$tipc(&(0x7f00000000c0), r2) sendmsg$TIPC_CMD_ENABLE_BEARER(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c657230"], 0x38}}, 0x0) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x100, 0x0) close(r4) r5 = socket$unix(0x1, 0x1, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000026c0)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r7, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2, 0xffff}}, [@qdisc_kind_options=@q_cbs={{0x8}, {0x1c, 0x2, @TCA_CBS_PARMS={0x18, 0x1, {0x0, '\x00', 0x1, 0x7, 0x100, 0x8}}}}]}, 0x48}, 0x1, 0x0, 0x0, 0x20000001}, 0x0) sendmsg$nl_route_sched(r6, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000340)=@newqdisc={0x5c, 0x24, 0x4ee4e6a52ff56441, 0x70b925, 0x80000, {0x0, 0x0, 0x0, r7, {}, {0x2, 0xb}, {0x9, 0xb}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x2c, 0x2, {{0x5, 0x7d, 0x8001, 0x0, 0xfffffff8, 0x10}, [@TCA_NETEM_CORR={0x10, 0x1, {0x7fffffff, 0x5, 0xfffffffd}}]}}}]}, 0x5c}, 0x1, 0x0, 0x0, 0x2000c061}, 0x200c000) ioctl$SIOCSIFHWADDR(r4, 0x8922, &(0x7f0000002280)={'syzkaller0\x00', @random="2b0100004ec6"}) 3.541639907s ago: executing program 6 (id=9863): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x1, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket$unix(0x1, 0x1, 0x0) r2 = socket$kcm(0x11, 0x3, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000500)=[{&(0x7f0000000180)="6fe4dd9e", 0x4}], 0x1}, 0x0) r3 = socket(0x400000000010, 0x3, 0x0) r4 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xfffffffd, {0x0, 0x0, 0x0, r5, {0x0, 0x1}, {0xffff, 0xffff}, {0xffe0, 0x9}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}, 0x1, 0x0, 0x0, 0x8810}, 0x8000) sendmsg$nl_route_sched(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000400)=@newtfilter={0x58, 0x2c, 0xf3f, 0x30bd29, 0x25dfdbfd, {0x0, 0x0, 0x0, r5, {0x9, 0x4}, {}, {0x7, 0x6}}, [@filter_kind_options=@f_basic={{0xa}, {0x28, 0x2, [@TCA_BASIC_EMATCHES={0x24, 0x2, 0x0, 0x1, [@TCA_EMATCH_TREE_HDR={0x8, 0x1, {0x1}}, @TCA_EMATCH_TREE_LIST={0x18, 0x2, 0x0, 0x1, [@TCF_EM_CANID={0x14, 0x1, 0x0, 0x0, {{0xceb, 0x7, 0x4}, {{0x0, 0x0, 0x1, 0x1}, {0x0, 0x0, 0x1}}}}]}]}]}}]}, 0x58}, 0x1, 0x0, 0x0, 0x20041090}, 0x0) r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r6) socket$nl_generic(0x10, 0x3, 0x10) ioctl$SIOCSIFHWADDR(r6, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$kcm(r2, &(0x7f00000000c0)={&(0x7f0000000380)=@xdp={0x2c, 0x7, r7, 0x3e}, 0x80, &(0x7f0000000080)=[{&(0x7f0000000180)='\'', 0x5dc}], 0x1}, 0x4) 3.317293802s ago: executing program 8 (id=9864): r0 = syz_open_dev$dri(0x0, 0x1, 0x0) ioctl$DRM_IOCTL_SET_CLIENT_CAP(r0, 0x4010640d, &(0x7f0000000000)={0x3, 0x2}) r1 = syz_usb_connect$hid(0x5, 0x36, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x10, 0x9da, 0xa, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x80, 0x0, "", [{{0x9, 0x4, 0x0, 0x0, 0x9, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x29}}, {{{0x9, 0x5, 0x81, 0x3, 0x0, 0x0, 0x0, 0xe9}}}}}]}}]}}, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xf, 0x4008032, 0xffffffffffffffff, 0x1c5f1000) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x19) r2 = userfaultfd(0x80001) ioctl$UFFDIO_API(r2, 0xc018aa3f, &(0x7f00000000c0)) ioctl$UFFDIO_REGISTER(r2, 0xc020aa00, &(0x7f0000000080)={{&(0x7f0000ffd000/0x3000)=nil, 0x3000}, 0x1}) keyctl$revoke(0x3, 0x0) ioctl$UFFDIO_COPY(r2, 0xc028aa05, &(0x7f0000000100)={&(0x7f0000ffd000/0x3000)=nil, &(0x7f0000013000/0x4000)=nil, 0x3000, 0x3}) r3 = openat$kvm(0xffffff9c, &(0x7f0000000140), 0x0, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) syz_usb_control_io$hid(r1, 0x0, 0x0) syz_usb_control_io$hid(r1, &(0x7f0000000040)={0x24, 0x0, 0x0, 0x0, &(0x7f00000001c0)={0x0, 0x22, 0x371, {0x9}}}, &(0x7f0000000080)={0xffffffffffffffeb, 0x0, 0x0, 0x0, 0x0, 0x0}) 2.763500349s ago: executing program 6 (id=9865): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r1, &(0x7f00000bd000), 0x218, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sendmsg$nl_xfrm(0xffffffffffffffff, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = gettid() r3 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) ioctl$KVM_GET_XSAVE2(r4, 0x9000aecf, &(0x7f0000ffe000/0x2000)=nil) file_getattr(0xffffffffffffff9c, 0x0, 0x0, 0x0, 0x1000) ptrace$PTRACE_SECCOMP_GET_FILTER(0x420c, r2, 0x8000000000000001, 0x0) fsconfig$FSCONFIG_SET_STRING(0xffffffffffffffff, 0x1, &(0x7f0000000580)='iocharset', &(0x7f00000005c0)='io#harset', 0x0) syz_usb_connect(0x0, 0x36, &(0x7f00000000c0)=ANY=[@ANYBLOB="120100008010bd40820514009dbb0000000109022400011b00000009040000022a3e740009058bff7f0000100109050b362f"], 0x0) syz_usb_connect$hid(0x5, 0x36, &(0x7f00000001c0)=ANY=[], 0x0) r5 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000240), 0xc2882, 0x0) close(r5) 835.973527ms ago: executing program 4 (id=9866): r0 = socket$pptp(0x18, 0x1, 0x2) bind$pptp(r0, &(0x7f0000000000)={0x18, 0x2, {0x0, @local}}, 0x1e) connect$pptp(r0, &(0x7f0000000140)={0x18, 0x2, {0x0, @rand_addr=0x64010102}}, 0x1e) connect$pptp(r0, &(0x7f0000000080)={0x18, 0x2, {0x2, @rand_addr=0x64010102}}, 0x1e) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000140), 0xffffffffffffffff) r3 = socket$l2tp6(0xa, 0x2, 0x73) sendmsg$L2TP_CMD_TUNNEL_CREATE(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="230900000000000000000100000005000700000000000800090000000000060002000100000008000a000000000008001700", @ANYRES32=r3], 0x3c}}, 0x0) close(r3) r4 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x4000000004002, 0x0) r5 = dup(r4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xa, 0x13, r5, 0x2000) madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x17) write$binfmt_aout(r5, 0x0, 0xffffffdb) mbind(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x1, 0x0, 0x0, 0x2) 827.605156ms ago: executing program 2 (id=9876): mknod(0x0, 0x0, 0xffffffff) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) openat$sndseq(0xffffffffffffff9c, &(0x7f00000000c0), 0x8800) socketpair$unix(0x1, 0x3, 0x0, 0x0) sendmmsg$unix(0xffffffffffffffff, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x0, 0x40000120, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x0, 0x8, 0x0, 0x0, 0xd, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(0xffffffffffffffff, 0x4090ae82, &(0x7f0000000000)={[0x35, 0x9, 0x2, 0x180, 0x4, 0x10, 0xf1, 0x7, 0x7fffffffffffe, 0x5, 0x4, 0x9, 0x7f, 0x800000000f4a, 0x100000000, 0xbdb], 0xc000, 0x4000}) ioctl$VIDIOC_SUBDEV_ENUM_FRAME_SIZE(0xffffffffffffffff, 0xc040564a, &(0x7f0000000200)={0x0, 0x0, 0x300f, 0x2, 0x0, 0x0, 0x0, 0x1}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 445.490893ms ago: executing program 9 (id=9867): close(0xffffffffffffffff) socket$key(0xf, 0x3, 0x2) r0 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000001580), 0x0, 0x0) pread64(r0, &(0x7f0000000040)=""/54, 0x36, 0x0) r1 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x4000000004043, 0x0) r2 = dup(r1) ioctl$LOOP_CHANGE_FD(0xffffffffffffffff, 0x4c06, r2) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) close(r3) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) close(r4) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4090}, 0x0) sendmsg$NFT_BATCH(r5, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000680)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWSET={0x44, 0x9, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x4}, [@NFTA_SET_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x2}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ID={0x8, 0xa, 0x1, 0x0, 0xfffffffc}, @NFTA_SET_FLAGS={0x8, 0x3, 0x1, 0x0, 0x130}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x6c}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) sendmsg$NFT_BATCH(r4, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000340)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWSETELEM={0x4c, 0xc, 0xa, 0x101, 0x0, 0x0, {0xa, 0x0, 0x6}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x20, 0x3, 0x0, 0x1, [{0x1c, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_KEY={0xc, 0x1, 0x0, 0x1, [@NFTA_DATA_VALUE={0x6, 0x1, '\x00\x00'}]}, @NFTA_SET_ELEM_TIMEOUT={0xc, 0x4, 0x1, 0x0, 0x7}]}]}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x74}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) sendmsg$NFT_BATCH(r3, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000001c0)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a480000001e0a010100000000000000000a0000060900020073797a31000000000900010073797a31000000001c000380180000800c000180060001"], 0x70}, 0x1, 0x0, 0x0, 0x4451099e661a63b1}, 0x0) 0s ago: executing program 9 (id=9868): r0 = io_uring_setup(0x257e, &(0x7f00000003c0)={0x0, 0xfdcf, 0x800, 0x1}) socket$inet(0x2, 0x4000000000000001, 0x0) r1 = syz_usb_connect(0x0, 0x3f, &(0x7f00000000c0)=ANY=[@ANYBLOB="11010000733336088dee1edb23610000000109022d0101100000000904000003fe03010009cd8d1f0002000000090505020000fcffff09058b1e20"], 0x0) syz_usb_control_io(r1, 0x0, 0x0) syz_usb_control_io$uac1(r1, 0x0, 0x0) syz_usb_disconnect(r1) r2 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) sendmmsg$sock(0xffffffffffffffff, &(0x7f0000003b40), 0x0, 0x20000044) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) openat$tun(0xffffffffffffff9c, 0x0, 0xc1842, 0x0) bind$alg(0xffffffffffffffff, 0x0, 0x0) sendmmsg$alg(0xffffffffffffffff, &(0x7f0000000040), 0x0, 0x40800) sendmsg$NL80211_CMD_FRAME(0xffffffffffffffff, &(0x7f0000001380)={0x0, 0x0, 0x0}, 0x0) ioctl$HIDIOCGUSAGE(r2, 0xc0105b08, &(0x7f0000000340)={0x1, 0x200, 0x3cf3, 0x200000, 0x110001}) socket$nl_xfrm(0x10, 0x3, 0x6) close_range(r0, 0xffffffffffffffff, 0x0) kernel console output (not intermixed with test programs): 715][T31649] Buffer I/O error on dev loop6, logical block 0, async page read [ 1089.999466][T31649] Buffer I/O error on dev loop6, logical block 0, async page read [ 1090.016870][T31649] ldm_validate_partition_table(): Disk read failed. [ 1090.042754][T31649] Buffer I/O error on dev loop6, logical block 0, async page read [ 1090.063846][T31649] Buffer I/O error on dev loop6, logical block 0, async page read [ 1090.081154][T31649] Dev loop6: unable to read RDB block 0 [ 1090.096502][T31649] loop6: unable to read partition table [ 1090.110557][T31649] loop_reread_partitions: partition scan of loop6 (ir¡c‡’ úÒVUŸX¯ÃG¨½›˜ñZtM<IÆ i8NL í á·ùWû@©àQ6ÒÝ%ž…û¥¡Úè) failed (rc=-5) [ 1090.239702][ T5687] usb 3-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 1090.355761][ T5687] usb 3-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 1090.379197][ T5687] usb 3-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 1090.392513][ T5687] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1090.459629][T31641] raw-gadget.1 gadget.2: fail, usb_ep_enable returned -22 [ 1090.469014][T31655] netlink: 'syz.6.9446': attribute type 1 has an invalid length. [ 1090.517431][T31655] bond9: entered promiscuous mode [ 1090.527558][T31655] bond9: entered allmulticast mode [ 1090.535465][ T5687] usb 3-1: Quirk or no altset; falling back to MIDI 1.0 [ 1090.546151][T31655] 8021q: adding VLAN 0 to HW filter on device bond9 [ 1090.621412][ T6803] usb 9-1: new high-speed USB device number 60 using dummy_hcd [ 1090.811798][ T6803] usb 9-1: Using ep0 maxpacket: 8 [ 1090.820421][T31655] bridge6: entered promiscuous mode [ 1090.835496][ T6803] usb 9-1: config 0 has an invalid descriptor of length 92, skipping remainder of the config [ 1090.849060][T31655] bridge6: entered allmulticast mode [ 1090.869375][T31655] bond9: (slave bridge6): Enslaving as a backup interface with an up link [ 1090.880597][ T6803] usb 9-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 2 [ 1090.958732][ T6803] usb 9-1: New USB device found, idVendor=054c, idProduct=06c3, bcdDevice=9b.1d [ 1090.989832][T31657] bridge7: entered promiscuous mode [ 1090.996387][ T6803] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1091.010434][T31657] bridge7: entered allmulticast mode [ 1091.031891][ T6803] usb 9-1: Product: syz [ 1091.052502][T31657] bond9: (slave bridge7): Enslaving as a backup interface with a down link [ 1091.061894][ T6803] usb 9-1: Manufacturer: syz [ 1091.071679][T10834] usb 10-1: new high-speed USB device number 33 using dummy_hcd [ 1091.083117][ T6803] usb 9-1: SerialNumber: syz [ 1091.113750][ T6803] usb 9-1: config 0 descriptor?? [ 1091.251468][T10834] usb 10-1: Using ep0 maxpacket: 8 [ 1091.282825][T10834] usb 10-1: config 168 has an invalid descriptor of length 255, skipping remainder of the config [ 1091.325765][T10834] usb 10-1: too many endpoints for config 168 interface 0 altsetting 188: 100, using maximum allowed: 30 [ 1091.365343][T31653] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1091.382350][T10834] usb 10-1: config 168 interface 0 altsetting 188 has 0 endpoint descriptors, different from the interface descriptor's value: 100 [ 1091.408911][T31653] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1091.438464][T10834] usb 10-1: config 168 interface 0 has no altsetting 0 [ 1091.485501][T10834] usb 10-1: config 168 has an invalid descriptor of length 255, skipping remainder of the config [ 1091.511700][T31661] create_pit_timer: 5 callbacks suppressed [ 1091.511712][T31661] kvm: requested 4190 ns i8254 timer period limited to 200000 ns [ 1091.528443][T10834] usb 10-1: too many endpoints for config 168 interface 0 altsetting 188: 100, using maximum allowed: 30 [ 1091.569426][T10834] usb 10-1: config 168 interface 0 altsetting 188 has 0 endpoint descriptors, different from the interface descriptor's value: 100 [ 1091.596276][ T6803] port100 9-1:0.0: NFC: Could not find bulk-in or bulk-out endpoint [ 1091.609968][T31661] kvm: pic: level sensitive irq not supported [ 1091.610072][T31661] kvm: pic: non byte read [ 1091.621610][T10834] usb 10-1: config 168 interface 0 has no altsetting 0 [ 1091.633655][ T6803] usb 9-1: USB disconnect, device number 60 [ 1091.653485][T10834] usb 10-1: config 168 has an invalid descriptor of length 255, skipping remainder of the config [ 1091.714890][T10834] usb 10-1: too many endpoints for config 168 interface 0 altsetting 188: 100, using maximum allowed: 30 [ 1091.754492][T10834] usb 10-1: config 168 interface 0 altsetting 188 has 0 endpoint descriptors, different from the interface descriptor's value: 100 [ 1091.803236][T10834] usb 10-1: config 168 interface 0 has no altsetting 0 [ 1091.858740][T10834] usb 10-1: string descriptor 0 read error: -22 [ 1091.892319][T10834] usb 10-1: New USB device found, idVendor=0a07, idProduct=0064, bcdDevice=40.6e [ 1091.913181][T10834] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1091.942865][T10834] adutux 10-1:168.0: interrupt endpoints not found [ 1091.993465][T31667] syzkaller0: entered promiscuous mode [ 1091.999241][T31667] syzkaller0: entered allmulticast mode [ 1092.084269][T31667] tipc: Enabled bearer , priority 0 [ 1092.116185][T31666] tipc: Resetting bearer [ 1092.157904][T10835] lan78xx 5-1:1.0 (unnamed net_device) (uninitialized): Failed to init LTM with error -EPROTO [ 1092.175070][T10835] lan78xx 5-1:1.0 (unnamed net_device) (uninitialized): Registers INIT FAILED.... [ 1092.193999][T31659] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1092.203390][T10835] lan78xx 5-1:1.0 (unnamed net_device) (uninitialized): Bind routine FAILED [ 1092.261954][T31659] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1092.277015][T10835] lan78xx 5-1:1.0: probe with driver lan78xx failed with error -71 [ 1092.304531][T31666] tipc: Disabling bearer [ 1092.364333][T10835] usb 5-1: USB disconnect, device number 107 [ 1092.409700][ T809] usb 10-1: USB disconnect, device number 33 [ 1092.596386][T31672] syzkaller0: entered promiscuous mode [ 1092.602625][T31672] syzkaller0: entered allmulticast mode [ 1092.761422][T29025] net_ratelimit: 50 callbacks suppressed [ 1092.761441][T29025] bond1: (slave geneve1): failed to get link speed/duplex [ 1092.808963][T31674] random: crng reseeded on system resumption [ 1092.832349][T29025] bond0: (slave ip6erspan0): failed to get link speed/duplex [ 1092.922220][T29025] bond1: (slave geneve1): failed to get link speed/duplex [ 1092.961870][T29025] bond0: (slave ip6erspan0): failed to get link speed/duplex [ 1093.052763][T19461] bond1: (slave geneve1): failed to get link speed/duplex [ 1093.087252][T19461] bond0: (slave ip6erspan0): failed to get link speed/duplex [ 1093.181508][T19461] bond1: (slave geneve1): failed to get link speed/duplex [ 1093.234551][T19461] bond0: (slave ip6erspan0): failed to get link speed/duplex [ 1093.251250][ T0] NOHZ tick-stop error: local softirq work is pending, handler #202!!! [ 1093.334704][T19461] bond1: (slave geneve1): failed to get link speed/duplex [ 1093.422584][T19458] bond0: (slave ip6erspan0): failed to get link speed/duplex [ 1093.447177][T31692] syzkaller0: entered promiscuous mode [ 1093.453046][T31692] syzkaller0: entered allmulticast mode [ 1093.550731][T10835] usb 3-1: USB disconnect, device number 80 [ 1093.571334][ T6812] usb 5-1: new high-speed USB device number 108 using dummy_hcd [ 1093.617763][T31697] xt_hashlimit: max too large, truncated to 1048576 [ 1093.741795][ T6812] usb 5-1: Using ep0 maxpacket: 16 [ 1093.773561][T31694] syzkaller0: entered promiscuous mode [ 1093.776446][ T6812] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1093.786426][T31694] syzkaller0: entered allmulticast mode [ 1093.820290][ T6812] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 1093.846666][ T6812] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 1093.884839][ T6812] usb 5-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 1093.914236][ T6812] usb 5-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 1093.937262][ T6812] usb 5-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 1093.951450][ T6812] usb 5-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 1093.961344][ T6812] usb 5-1: Manufacturer: syz [ 1093.970342][ T6812] usb 5-1: config 0 descriptor?? [ 1094.353268][ T6812] rc_core: IR keymap rc-hauppauge not found [ 1094.360343][ T6812] Registered IR keymap rc-empty [ 1094.379490][ T6812] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 1094.444689][ T6812] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 1094.494507][ T6812] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/rc/rc0 [ 1094.524227][ T6812] input: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/rc/rc0/input156 [ 1094.571791][ T6812] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 1094.621567][ T6812] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 1094.655038][ T6812] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 1094.691911][ T6812] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 1094.732727][ T6812] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 1094.752588][ T6812] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 1094.832817][ T6812] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 1094.851559][ T6812] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 1094.882051][ T6812] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 1094.937974][ T6812] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 1094.983738][ T6812] mceusb 5-1:0.0: Registered 424242424242 with mce emulator interface version 1 [ 1094.994192][ T6812] mceusb 5-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active) [ 1095.008684][ T6812] usb 5-1: USB disconnect, device number 108 [ 1096.369422][ T809] usb 5-1: new high-speed USB device number 109 using dummy_hcd [ 1096.719280][ T809] usb 5-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 1096.728709][ T809] usb 5-1: config 1 has an invalid descriptor of length 255, skipping remainder of the config [ 1096.761338][ T809] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 1096.774156][ T809] usb 5-1: config 1 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 1096.790306][ T809] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 255, changing to 11 [ 1096.827483][ T809] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 1096.911121][ T809] usb 5-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 1096.936036][ T809] usb 5-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 1096.945866][ T809] usb 5-1: Product: syz [ 1096.971106][ T809] usb 5-1: Manufacturer: syz [ 1096.990047][T31715] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 1097.006534][ T809] cdc_wdm 5-1:1.0: skipping garbage [ 1097.016826][ T809] cdc_wdm 5-1:1.0: skipping garbage [ 1097.034673][ T809] cdc_wdm 5-1:1.0: cdc-wdm0: USB WDM device [ 1097.074491][ T809] cdc_wdm 5-1:1.0: Unknown control protocol [ 1097.241945][ C1] cdc_wdm 5-1:1.0: nonzero urb status received: -71 [ 1097.248607][ C1] cdc_wdm 5-1:1.0: wdm_int_callback - 0 bytes [ 1097.254958][ C1] cdc_wdm 5-1:1.0: nonzero urb status received: -71 [ 1097.261577][ C1] cdc_wdm 5-1:1.0: wdm_int_callback - 0 bytes [ 1097.268270][ C1] cdc_wdm 5-1:1.0: nonzero urb status received: -71 [ 1097.274904][ C1] cdc_wdm 5-1:1.0: wdm_int_callback - 0 bytes [ 1097.281797][ C1] cdc_wdm 5-1:1.0: nonzero urb status received: -71 [ 1097.288608][ C1] cdc_wdm 5-1:1.0: wdm_int_callback - 0 bytes [ 1097.295451][ C1] cdc_wdm 5-1:1.0: nonzero urb status received: -71 [ 1097.302097][ C1] cdc_wdm 5-1:1.0: wdm_int_callback - 0 bytes [ 1097.309436][ C1] cdc_wdm 5-1:1.0: nonzero urb status received: -71 [ 1097.316072][ C1] cdc_wdm 5-1:1.0: wdm_int_callback - 0 bytes [ 1097.322819][ C1] cdc_wdm 5-1:1.0: nonzero urb status received: -71 [ 1097.329477][ C1] cdc_wdm 5-1:1.0: wdm_int_callback - 0 bytes [ 1097.336220][ C1] cdc_wdm 5-1:1.0: nonzero urb status received: -71 [ 1097.342862][ C1] cdc_wdm 5-1:1.0: wdm_int_callback - 0 bytes [ 1097.349566][ C1] cdc_wdm 5-1:1.0: nonzero urb status received: -71 [ 1097.356187][ C1] cdc_wdm 5-1:1.0: wdm_int_callback - 0 bytes [ 1097.362806][ C1] cdc_wdm 5-1:1.0: nonzero urb status received: -71 [ 1097.369430][ C1] cdc_wdm 5-1:1.0: wdm_int_callback - 0 bytes [ 1097.613893][T10834] usb 5-1: USB disconnect, device number 109 [ 1097.619998][ C1] cdc_wdm 5-1:1.0: wdm_int_callback - usb_submit_urb failed with result -19 [ 1100.721971][T19458] net_ratelimit: 4 callbacks suppressed [ 1100.721989][T19458] bond1: (slave geneve1): failed to get link speed/duplex [ 1100.813668][ T36] bond0: (slave ip6erspan0): failed to get link speed/duplex [ 1100.859944][T31743] kvm: pic: single mode not supported [ 1100.859967][T31743] kvm: pic: level sensitive irq not supported [ 1100.981420][T29025] bond0: (slave ip6erspan0): failed to get link speed/duplex [ 1101.024256][T29025] bond1: (slave geneve1): failed to get link speed/duplex [ 1101.065955][T31753] kvm: requested 4190 ns i8254 timer period limited to 200000 ns [ 1101.111349][ T36] bond0: (slave ip6erspan0): failed to get link speed/duplex [ 1101.152618][ T36] bond1: (slave geneve1): failed to get link speed/duplex [ 1101.165432][T31748] kvm: requested 838 ns i8254 timer period limited to 200000 ns [ 1101.178277][ T6812] usb 10-1: new high-speed USB device number 34 using dummy_hcd [ 1101.231526][T29025] bond0: (slave ip6erspan0): failed to get link speed/duplex [ 1101.271723][T29025] bond1: (slave geneve1): failed to get link speed/duplex [ 1101.351936][ T1116] bond0: (slave ip6erspan0): failed to get link speed/duplex [ 1101.373520][ T6812] usb 10-1: config 0 has no interfaces? [ 1101.401863][T19458] bond1: (slave geneve1): failed to get link speed/duplex [ 1101.426757][ T6812] usb 10-1: New USB device found, idVendor=06d0, idProduct=0622, bcdDevice=17.a2 [ 1101.467488][ T6812] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1101.505016][ T6812] usb 10-1: Product: syz [ 1101.524993][ T6812] usb 10-1: Manufacturer: syz [ 1101.549489][ T6812] usb 10-1: SerialNumber: syz [ 1101.560681][T31761] syzkaller0: entered promiscuous mode [ 1101.580208][T31761] syzkaller0: entered allmulticast mode [ 1101.594517][ T6812] usb 10-1: config 0 descriptor?? [ 1101.643648][T31761] tipc: Enabled bearer , priority 0 [ 1101.679482][T31760] tipc: Resetting bearer [ 1101.748933][T31760] tipc: Disabling bearer [ 1101.847545][T10835] usb 10-1: USB disconnect, device number 34 [ 1102.230549][ T30] audit: type=1804 audit(1777575622.113:2071): pid=31774 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.4.9483" name="/newroot/369/file1" dev="fuse" ino=1 res=1 errno=0 [ 1102.271685][ T809] usb 3-1: new high-speed USB device number 81 using dummy_hcd [ 1102.433494][ T809] usb 3-1: Using ep0 maxpacket: 16 [ 1102.446200][ T809] usb 3-1: unable to get BOS descriptor or descriptor too short [ 1102.462803][ T809] usb 3-1: config 7 has an invalid interface number: 118 but max is 0 [ 1102.479907][ T809] usb 3-1: config 7 has no interface number 0 [ 1102.532427][ T809] usb 3-1: config 7 interface 118 altsetting 4 bulk endpoint 0x2 has invalid maxpacket 16 [ 1102.565425][ T809] usb 3-1: config 7 interface 118 has no altsetting 0 [ 1102.596796][ T809] usb 3-1: New USB device found, idVendor=07ca, idProduct=b800, bcdDevice=22.09 [ 1102.609102][ T809] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1102.620425][ T809] usb 3-1: Product: syz [ 1102.626780][ T809] usb 3-1: Manufacturer: syz [ 1102.638740][ T809] usb 3-1: SerialNumber: syz [ 1102.662807][T31768] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 1102.753611][ T6812] usb 9-1: new high-speed USB device number 61 using dummy_hcd [ 1102.831636][T31790] input: syz0 as /devices/virtual/input/input157 [ 1102.931407][ T6812] usb 9-1: Using ep0 maxpacket: 16 [ 1102.950117][ T6812] usb 9-1: config 4 has an invalid descriptor of length 0, skipping remainder of the config [ 1102.985286][ T6812] usb 9-1: config 4 has 0 interfaces, different from the descriptor's value: 1 [ 1103.003771][ T809] usb 3-1: BOGUS urb xfer, pipe 1 != type 3 [ 1103.040132][ T809] (null): radio-mr800 - initialization failed [ 1103.054048][ T6812] usb 9-1: New USB device found, idVendor=13b1, idProduct=0042, bcdDevice=76.fe [ 1103.078395][ T809] radio-mr800 3-1:7.118: probe with driver radio-mr800 failed with error -71 [ 1103.094900][ T6812] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1103.172883][ T6812] usb 9-1: Product: syz [ 1103.173237][ T809] usbhid 3-1:7.118: couldn't find an input interrupt endpoint [ 1103.187010][ T6812] usb 9-1: Manufacturer: syz [ 1103.192088][ T6812] usb 9-1: SerialNumber: syz [ 1103.215482][ T809] usb 3-1: USB disconnect, device number 81 [ 1103.496244][T31779] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1103.545644][T31779] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1103.572287][T31796] syzkaller0: entered promiscuous mode [ 1103.606712][T30934] usb 9-1: USB disconnect, device number 61 [ 1103.657122][T31796] syzkaller0: entered allmulticast mode [ 1103.974169][T31803] kvm: vcpu 2: requested lapic timer restore with starting count register 0x390=1812281087 (231971979136 ns) > initial count (200000 ns). Using initial count to start timer. [ 1104.151387][ T809] usb 5-1: new high-speed USB device number 110 using dummy_hcd [ 1104.323440][ T809] usb 5-1: config 17 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 1104.362381][ T809] usb 5-1: config 17 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 1104.389974][ T809] usb 5-1: config 17 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 1104.421865][ T809] usb 5-1: New USB device found, idVendor=0458, idProduct=5003, bcdDevice= 0.00 [ 1104.448397][ T809] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1104.484834][T31802] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 1105.044174][T31812] loop2: detected capacity change from 0 to 7 [ 1105.055279][T31812] loop2: [ 1105.058568][T31812] loop2: partition table partially beyond EOD, truncated [ 1105.262575][T30934] usb 10-1: new high-speed USB device number 35 using dummy_hcd [ 1105.342064][ T50] Bluetooth: hci3: command 0x0406 tx timeout [ 1105.342372][T10834] Bluetooth: hci3: Opcode 0x0c1a failed: -110 [ 1105.354973][ T809] aiptek 5-1:17.0: Aiptek using 400 ms programming speed [ 1105.417057][ T809] input: Aiptek as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:17.0/input/input158 [ 1105.452599][T30934] usb 10-1: Using ep0 maxpacket: 16 [ 1105.458765][T10834] Bluetooth: hci3: Error when powering off device on rfkill (-110) [ 1105.511607][T30934] usb 10-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1105.612101][T30934] usb 10-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 1105.646083][ T5687] usb 5-1: USB disconnect, device number 110 [ 1105.646158][ C0] aiptek 5-1:17.0: aiptek_irq - usb_submit_urb failed with result -19 [ 1105.700762][T30934] usb 10-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 1105.738957][T30934] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1105.770402][T30934] usb 10-1: Product: syz [ 1105.772545][ T36] net_ratelimit: 65 callbacks suppressed [ 1105.772563][ T36] bond0: (slave ip6erspan0): failed to get link speed/duplex [ 1105.788527][T30934] usb 10-1: Manufacturer: syz [ 1105.801344][T30934] usb 10-1: SerialNumber: syz [ 1105.813814][T10834] tipc: Resetting bearer [ 1105.844530][T30934] usb 10-1: 0:2 : does not exist [ 1105.904489][ T4993] loop2: [ 1105.925832][ T4993] loop2: partition table partially beyond EOD, truncated [ 1106.020836][T31828] syzkaller0: entered promiscuous mode [ 1106.067110][T30934] usb 10-1: 5:0: failed to get current value for ch 0 (-22) [ 1106.083283][T31828] syzkaller0: entered allmulticast mode [ 1106.149192][T31833] syzkaller0: entered promiscuous mode [ 1106.171742][T31833] syzkaller0: entered allmulticast mode [ 1106.204888][T30934] usb 10-1: USB disconnect, device number 35 [ 1106.345392][T30547] udevd[30547]: error opening ATTR{/sys/devices/platform/dummy_hcd.9/usb10/10-1/10-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1106.597581][T31832] tipc: Enabled bearer , priority 0 [ 1106.642916][T31829] tipc: Resetting bearer [ 1107.042379][ T6812] usb 7-1: new full-speed USB device number 80 using dummy_hcd [ 1107.199597][T31829] tipc: Disabling bearer [ 1107.235224][ T6812] usb 7-1: config 8 has an invalid interface number: 177 but max is 0 [ 1107.244117][ T6812] usb 7-1: config 8 has an invalid descriptor of length 0, skipping remainder of the config [ 1107.274284][ T6812] usb 7-1: config 8 has no interface number 0 [ 1107.294521][ T6812] usb 7-1: config 8 interface 177 altsetting 9 endpoint 0x8 has invalid maxpacket 1023, setting to 64 [ 1107.311994][ T1116] bond1: (slave geneve1): failed to get link speed/duplex [ 1107.330488][ T6812] usb 7-1: config 8 interface 177 altsetting 9 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 1107.391471][ T1116] bond0: (slave ip6erspan0): failed to get link speed/duplex [ 1107.399439][ T6812] usb 7-1: config 8 interface 177 has no altsetting 0 [ 1107.427748][ T6812] usb 7-1: New USB device found, idVendor=04d8, idProduct=fd08, bcdDevice=59.b1 [ 1107.458085][ T6812] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1107.491365][ T1116] bond1: (slave geneve1): failed to get link speed/duplex [ 1107.498209][T31845] raw-gadget.0 gadget.6: fail, usb_ep_enable returned -22 [ 1107.585327][ T1116] bond0: (slave ip6erspan0): failed to get link speed/duplex [ 1107.596604][ T4993] loop2: [ 1107.602397][ T4993] loop2: partition table partially beyond EOD, truncated [ 1107.641425][ T1116] bond1: (slave geneve1): failed to get link speed/duplex [ 1107.731847][T19461] bond0: (slave ip6erspan0): failed to get link speed/duplex [ 1107.782631][T19461] bond1: (slave geneve1): failed to get link speed/duplex [ 1107.861719][T19462] bond0: (slave ip6erspan0): failed to get link speed/duplex [ 1107.953017][T19462] bond1: (slave geneve1): failed to get link speed/duplex [ 1108.044011][ T6812] usb 7-1: string descriptor 0 read error: -71 [ 1108.090327][ T6812] ir_toy 7-1:8.177: required endpoints not found [ 1108.123024][ T6812] usb 7-1: USB disconnect, device number 80 [ 1108.221354][T10834] Bluetooth: hci0: Opcode 0x0c1a failed: -110 [ 1108.222230][ T50] Bluetooth: hci0: command 0x0406 tx timeout [ 1108.233681][ T809] usb 3-1: new high-speed USB device number 82 using dummy_hcd [ 1108.241678][T10834] Bluetooth: hci0: Error when powering off device on rfkill (-110) [ 1108.397529][ T809] usb 3-1: config 1 interface 0 altsetting 127 bulk endpoint 0x81 has invalid maxpacket 64 [ 1108.414621][ T809] usb 3-1: config 1 interface 0 altsetting 127 bulk endpoint 0x2 has invalid maxpacket 32 [ 1108.448472][ T809] usb 3-1: config 1 interface 0 has no altsetting 0 [ 1108.479949][ T809] usb 3-1: New USB device found, idVendor=0bda, idProduct=8150, bcdDevice= 0.40 [ 1108.490411][ T809] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1108.505159][ T809] usb 3-1: Product: syz [ 1108.509492][ T809] usb 3-1: Manufacturer: syz [ 1108.514662][T31859] netlink: 'syz.4.9510': attribute type 1 has an invalid length. [ 1108.524199][ T809] usb 3-1: SerialNumber: syz [ 1108.536860][T31857] raw-gadget.1 gadget.2: fail, usb_ep_enable returned -22 [ 1108.550900][T31857] raw-gadget.1 gadget.2: fail, usb_ep_enable returned -22 [ 1109.045662][ T809] rtl8150 3-1:1.0: couldn't reset the device [ 1109.053839][ T809] rtl8150 3-1:1.0: probe with driver rtl8150 failed with error -5 [ 1109.072977][ T809] usb 3-1: USB disconnect, device number 82 [ 1109.101563][ T6812] usb 7-1: new high-speed USB device number 81 using dummy_hcd [ 1109.257442][T31870] netlink: 'syz.4.9514': attribute type 21 has an invalid length. [ 1109.287743][ T6812] usb 7-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1109.309473][ T6812] usb 7-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 1109.334385][T31870] netlink: 120 bytes leftover after parsing attributes in process `syz.4.9514'. [ 1109.346070][T31870] netlink: 'syz.4.9514': attribute type 1 has an invalid length. [ 1109.360832][ T6812] usb 7-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 1109.379233][T31870] netlink: 9 bytes leftover after parsing attributes in process `syz.4.9514'. [ 1109.388499][ T6812] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 1109.405899][ T6812] usb 7-1: SerialNumber: syz [ 1109.805308][T31883] syzkaller0: entered promiscuous mode [ 1109.827911][ T6812] usb 7-1: 0:2 : does not exist [ 1109.839939][T31883] syzkaller0: entered allmulticast mode [ 1109.995946][ T4993] loop2: [ 1110.007003][ T4993] loop2: partition table partially beyond EOD, truncated [ 1110.031105][ T6812] usb 7-1: USB disconnect, device number 81 [ 1110.200042][T30547] udevd[30547]: error opening ATTR{/sys/devices/platform/dummy_hcd.6/usb7/7-1/7-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1110.338894][ T4993] loop2: [ 1110.366332][ T4993] loop2: partition table partially beyond EOD, truncated [ 1110.651812][ T6812] usb 9-1: new high-speed USB device number 62 using dummy_hcd [ 1110.692520][ T4993] loop2: [ 1110.709481][ T4993] loop2: partition table partially beyond EOD, truncated [ 1110.781452][ T50] Bluetooth: hci2: command 0x0c1a tx timeout [ 1110.783258][T10834] Bluetooth: hci2: Opcode 0x0c1a failed: -110 [ 1110.834267][ T6812] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1110.860953][T10834] Bluetooth: hci2: Error when powering off device on rfkill (-110) [ 1110.885829][T19462] net_ratelimit: 37 callbacks suppressed [ 1110.885842][T19462] bond1: (slave geneve1): failed to get link speed/duplex [ 1110.910786][ T6812] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1110.976751][ T6812] usb 9-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 1110.993787][T19462] bond0: (slave ip6erspan0): failed to get link speed/duplex [ 1111.016514][ T6812] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1111.058218][ T6812] usb 9-1: config 0 descriptor?? [ 1111.093240][T29025] bond1: (slave geneve1): failed to get link speed/duplex [ 1111.141521][T29025] bond0: (slave ip6erspan0): failed to get link speed/duplex [ 1111.231425][T29025] bond1: (slave geneve1): failed to get link speed/duplex [ 1111.281540][T29025] bond0: (slave ip6erspan0): failed to get link speed/duplex [ 1111.374400][ T6812] usbhid 9-1:0.0: can't add hid device: -71 [ 1111.383760][T29025] bond1: (slave geneve1): failed to get link speed/duplex [ 1111.412995][ T6812] usbhid 9-1:0.0: probe with driver usbhid failed with error -71 [ 1111.437390][ T6812] usb 9-1: USB disconnect, device number 62 [ 1111.471997][T29025] bond0: (slave ip6erspan0): failed to get link speed/duplex [ 1111.534824][ T1116] bond1: (slave geneve1): failed to get link speed/duplex [ 1111.621816][ T1116] bond0: (slave ip6erspan0): failed to get link speed/duplex [ 1111.951325][ T6812] usb 9-1: new high-speed USB device number 63 using dummy_hcd [ 1112.120830][T31912] netlink: 'syz.4.9527': attribute type 1 has an invalid length. [ 1112.136175][ T6812] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1112.147985][ T6812] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1112.174973][ T6812] usb 9-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 1112.199820][ T6812] usb 9-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 1112.209911][ T6812] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1112.221731][T30934] usb 10-1: new high-speed USB device number 36 using dummy_hcd [ 1112.222515][ T6812] usb 9-1: config 0 descriptor?? [ 1112.368762][ T4993] loop2: [ 1112.375686][ T4993] loop2: partition table partially beyond EOD, truncated [ 1112.423607][T30934] usb 10-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 1112.447791][T30934] usb 10-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 1112.460012][T30934] usb 10-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 1112.469790][T30934] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1112.485034][T31909] raw-gadget.1 gadget.9: fail, usb_ep_enable returned -22 [ 1112.497958][T30934] usb 10-1: Quirk or no altset; falling back to MIDI 1.0 [ 1112.631356][ T5687] usb 3-1: new high-speed USB device number 83 using dummy_hcd [ 1112.659626][ T6812] plantronics 0003:047F:FFFF.0083: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.8-1/input0 [ 1112.782079][ T5687] usb 3-1: Using ep0 maxpacket: 32 [ 1112.820938][ T5687] usb 3-1: config 155 has an invalid descriptor of length 0, skipping remainder of the config [ 1112.831866][ T5687] usb 3-1: config 155 interface 0 altsetting 0 has an endpoint descriptor with address 0xE2, changing to 0x82 [ 1112.843804][ T5687] usb 3-1: config 155 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 1112.855690][ T5687] usb 3-1: config 155 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 11 [ 1112.884144][ T5687] usb 3-1: New USB device found, idVendor=15c2, idProduct=ffdc, bcdDevice=bd.30 [ 1112.894552][T30934] usb 10-1: USB disconnect, device number 36 [ 1112.909026][ T5687] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1112.926489][ T5687] usb 3-1: Product: syz [ 1112.939246][ T5687] usb 3-1: Manufacturer: syz [ 1112.954291][ T5687] usb 3-1: SerialNumber: syz [ 1112.992680][ C1] imon 3-1:155.0: imon usb_rx_callback_intf0: status(-71) [ 1113.021757][ T50] Bluetooth: hci4: command 0x0c1a tx timeout [ 1113.022610][T10834] Bluetooth: hci4: Opcode 0x0c1a failed: -110 [ 1113.042839][ T5687] input: iMON Panel, Knob and Mouse(15c2:ffdc) as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:155.0/input/input160 [ 1113.078796][T10834] Bluetooth: hci4: Error when powering off device on rfkill (-110) [ 1113.221845][ T5687] imon 3-1:155.0: Unknown 0xffdc device, defaulting to VFD and iMON IR [ 1113.239989][ T5687] (id 0x00) [ 1113.335749][ T5687] rc_core: IR keymap rc-imon-pad not found [ 1113.341804][ T5687] Registered IR keymap rc-empty [ 1113.346963][ T5687] imon 3-1:155.0: Looks like you're trying to use an IR protocol this device does not support [ 1113.359022][ T5687] imon 3-1:155.0: Unsupported IR protocol specified, overriding to iMON IR protocol [ 1113.393608][ C0] plantronics 0003:047F:FFFF.0083: Event data for report 0 was too short (4043 vs 2) [ 1113.426963][ T5687] rc rc0: iMON Remote (15c2:ffdc) as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:155.0/rc/rc0 [ 1113.459037][T31924] snd_dummy snd_dummy.0: control 0:57412:0:syz0:0 is already present [ 1113.472906][ T5687] input: iMON Remote (15c2:ffdc) as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:155.0/rc/rc0/input161 [ 1113.535076][ T5687] imon 3-1:155.0: iMON device (15c2:ffdc, intf0) on usb<3:83> initialized [ 1113.607661][ T6812] usb 9-1: USB disconnect, device number 63 [ 1113.978476][T31936] netlink: 12 bytes leftover after parsing attributes in process `syz.9.9535'. [ 1114.241301][ T5687] usb 10-1: new full-speed USB device number 37 using dummy_hcd [ 1114.414397][ T5687] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 1114.448380][ T5687] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x4 has an invalid bInterval 0, changing to 10 [ 1114.485010][ T5687] usb 10-1: New USB device found, idVendor=0cf3, idProduct=9375, bcdDevice=1a.de [ 1114.529989][ T5687] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1114.560120][ T5687] usb 10-1: config 0 descriptor?? [ 1114.747548][T31954] mac80211_hwsim hwsim25 syzkaller0: left promiscuous mode [ 1114.751454][ T10] usb 7-1: new high-speed USB device number 82 using dummy_hcd [ 1114.756547][T31954] mac80211_hwsim hwsim25 syzkaller0: left allmulticast mode [ 1114.794532][ T5687] ath6kl: Failed to submit usb control message: -71 [ 1114.805797][ T5687] ath6kl: unable to send the bmi data to the device: -71 [ 1114.819639][ T5687] ath6kl: Unable to send get target info: -71 [ 1114.828074][ T5687] ath6kl: Failed to init ath6kl core: -71 [ 1114.836390][ T5687] ath6kl_usb 10-1:0.0: probe with driver ath6kl_usb failed with error -71 [ 1114.863263][ T5687] usb 10-1: USB disconnect, device number 37 [ 1114.953384][ T10] usb 7-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1114.965253][ T10] usb 7-1: config 1 has 0 interfaces, different from the descriptor's value: 3 [ 1114.978498][ T10] usb 7-1: New USB device found, idVendor=0763, idProduct=2003, bcdDevice= 0.40 [ 1114.998400][ T10] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1115.006701][ T10] usb 7-1: Product: syz [ 1115.010932][ T10] usb 7-1: Manufacturer: syz [ 1115.015767][ T10] usb 7-1: SerialNumber: syz [ 1115.321601][ T10] usb 7-1: USB disconnect, device number 82 [ 1115.813085][ T6812] usb 3-1: USB disconnect, device number 83 [ 1115.824290][ T1316] ieee802154 phy0 wpan0: encryption failed: -22 [ 1115.831070][ T1316] ieee802154 phy1 wpan1: encryption failed: -22 [ 1115.863112][ T4993] loop2: [ 1115.875418][ T4993] loop2: partition table partially beyond EOD, truncated [ 1115.943076][T19462] net_ratelimit: 66 callbacks suppressed [ 1115.943097][T19462] bond1: (slave geneve1): failed to get link speed/duplex [ 1116.011605][T19462] bond0: (slave ip6erspan0): failed to get link speed/duplex [ 1116.115222][T19461] bond1: (slave geneve1): failed to get link speed/duplex [ 1116.156689][T19461] bond0: (slave ip6erspan0): failed to get link speed/duplex [ 1116.253472][T19462] bond1: (slave geneve1): failed to get link speed/duplex [ 1116.318557][T31983] tipc: Enabled bearer , priority 0 [ 1116.357378][T31982] syzkaller0: entered promiscuous mode [ 1116.372964][T31982] syzkaller0: entered allmulticast mode [ 1116.495567][T31983] tipc: Resetting bearer [ 1116.518946][T31985] syzkaller0: entered promiscuous mode [ 1116.525462][T31985] syzkaller0: entered allmulticast mode [ 1116.540237][T31981] tipc: Resetting bearer [ 1116.591021][T31981] tipc: Disabling bearer [ 1116.691474][T19461] bond1: (slave geneve1): failed to get link speed/duplex [ 1116.704289][T29025] bond0: (slave ip6erspan0): failed to get link speed/duplex [ 1116.812729][T29025] bond1: (slave geneve1): failed to get link speed/duplex [ 1116.862144][ T36] bond0: (slave ip6erspan0): failed to get link speed/duplex [ 1116.878473][T31990] syzkaller0: entered promiscuous mode [ 1116.893073][T31990] syzkaller0: entered allmulticast mode [ 1116.989758][ T4993] loop2: [ 1116.996541][ T4993] loop2: partition table partially beyond EOD, truncated [ 1117.121437][ T36] bond1: (slave geneve1): failed to get link speed/duplex [ 1117.721377][T30934] usb 9-1: new full-speed USB device number 64 using dummy_hcd [ 1117.894621][T30934] usb 9-1: not running at top speed; connect to a high speed hub [ 1117.915689][T30934] usb 9-1: config 1 interface 0 altsetting 248 endpoint 0x81 has invalid maxpacket 512, setting to 64 [ 1117.928479][T30934] usb 9-1: config 1 interface 0 altsetting 248 endpoint 0x82 has invalid maxpacket 991, setting to 64 [ 1117.948873][T30934] usb 9-1: config 1 interface 0 altsetting 248 has 3 endpoint descriptors, different from the interface descriptor's value: 2 [ 1117.963661][T30934] usb 9-1: config 1 interface 0 has no altsetting 0 [ 1117.983068][ T30] audit: type=1804 audit(1777575637.873:2072): pid=32008 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.4.9558" name="/newroot/391/file1" dev="tmpfs" ino=2033 res=1 errno=0 [ 1118.026345][ T4993] loop2: [ 1118.031910][T30934] usb 9-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 1118.044044][ T4993] loop2: partition table partially beyond EOD, truncated [ 1118.056583][T30934] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1118.076245][T30934] usb 9-1: Product: ꮑ䊫䋃ꘊ눞㳩㶲ᵦ￭ﮒԅí¨î†ì¹˜í°æ¤¸æ•€ç›–箬儎쿙왻胾儽ä ã€¸ã¿§íœ…é‹äŒ½é­‡æ¦ƒç½–儾绋拯煡峒苲î–̫肸黨譒蘙篊鿑臒醽ﬢҢ㽖筓拌뢧飶î™à¬«á¶ªéœŠá‡‰ê¯’紘螳֖鑿헰ﶪ预簸拸庻㉨ᥪ擆ḋ㣈৻߷탫ä¶ä›®ê‡ºâ¶½é©§ï™­ï«½å€è«Íৎ铤寘簽슴ॸ [ 1118.153517][T30934] usb 9-1: SerialNumber: syz [ 1118.170238][T32009] raw-gadget.0 gadget.8: fail, usb_ep_enable returned -22 [ 1118.181420][T32009] raw-gadget.0 gadget.8: fail, usb_ep_enable returned -22 [ 1118.195678][T32009] raw-gadget.0 gadget.8: fail, usb_ep_enable returned -22 [ 1118.231010][T32021] tipc: Started in network mode [ 1118.241735][T32021] tipc: Node identity f20c042c137d, cluster identity 4711 [ 1118.259847][T32021] tipc: Enabled bearer , priority 0 [ 1118.272629][T32021] syzkaller0: entered promiscuous mode [ 1118.290279][T32021] syzkaller0: entered allmulticast mode [ 1118.306104][T32018] netlink: 4 bytes leftover after parsing attributes in process `syz.2.9562'. [ 1118.327243][T32018] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1118.483243][T32025] tipc: Resetting bearer [ 1118.504291][T32020] tipc: Resetting bearer [ 1118.580678][ T4993] loop2: [ 1118.583992][ T4993] loop2: partition table partially beyond EOD, truncated [ 1118.601808][T32020] tipc: Disabling bearer [ 1118.665469][T32030] syzkaller0: entered promiscuous mode [ 1118.680654][T32030] syzkaller0: entered allmulticast mode [ 1118.713845][T30934] cdc_ether 9-1:1.0: probe with driver cdc_ether failed with error -22 [ 1118.762654][T30934] usb 9-1: USB disconnect, device number 64 [ 1118.984660][ T4993] loop2: [ 1118.997101][ T4993] loop2: partition table partially beyond EOD, truncated [ 1119.570891][T32052] tipc: Enabled bearer , priority 0 [ 1119.634733][T32054] syzkaller0: entered promiscuous mode [ 1119.682859][T32054] syzkaller0: entered allmulticast mode [ 1119.874944][T32052] tipc: Resetting bearer [ 1119.922622][T32049] tipc: Resetting bearer [ 1119.986481][T32061] netlink: 'syz.4.9574': attribute type 1 has an invalid length. [ 1120.034289][T32049] tipc: Disabling bearer [ 1120.084676][T32061] 8021q: adding VLAN 0 to HW filter on device bond7 [ 1120.142985][T32062] bond7: (slave veth3): Enslaving as an active interface with a down link [ 1120.273260][ T5687] usb 10-1: new high-speed USB device number 38 using dummy_hcd [ 1120.298741][T32062] netlink: 14 bytes leftover after parsing attributes in process `syz.4.9574'. [ 1120.320455][T32061] bond7: (slave dummy0): making interface the new active one [ 1120.350465][T32061] dummy0: entered promiscuous mode [ 1120.369564][T32061] bond7: (slave dummy0): Enslaving as an active interface with an up link [ 1120.422736][T32062] bond7: (slave dummy0): Releasing active interface [ 1120.439266][ T5687] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 1120.462389][T32062] dummy0 (unregistering): left promiscuous mode [ 1120.477683][ T5687] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x4 has invalid maxpacket 12336, setting to 64 [ 1120.512978][ T5687] usb 10-1: New USB device found, idVendor=0cf3, idProduct=9375, bcdDevice=1a.de [ 1120.537997][ T5687] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1120.597773][ T5687] usb 10-1: config 0 descriptor?? [ 1120.718012][ T4993] loop2: [ 1120.721111][ T4993] loop2: partition table partially beyond EOD, truncated [ 1120.840198][ T5687] ath6kl: Failed to submit usb control message: -71 [ 1120.877954][ T5687] ath6kl: unable to send the bmi data to the device: -71 [ 1120.901556][ T5687] ath6kl: Unable to send get target info: -71 [ 1120.908967][ T5687] ath6kl: Failed to init ath6kl core: -71 [ 1120.920789][ T5687] ath6kl_usb 10-1:0.0: probe with driver ath6kl_usb failed with error -71 [ 1120.998367][ T5687] usb 10-1: USB disconnect, device number 38 [ 1121.111988][ T142] net_ratelimit: 45 callbacks suppressed [ 1121.112034][ T142] bond0: (slave ip6erspan0): failed to get link speed/duplex [ 1121.201057][T29025] bond1: (slave geneve1): failed to get link speed/duplex [ 1121.291652][T19462] bond0: (slave ip6erspan0): failed to get link speed/duplex [ 1121.362050][T19462] bond1: (slave geneve1): failed to get link speed/duplex [ 1121.414622][ T36] bond0: (slave ip6erspan0): failed to get link speed/duplex [ 1121.511623][ T36] bond1: (slave geneve1): failed to get link speed/duplex [ 1121.582911][ T36] bond0: (slave ip6erspan0): failed to get link speed/duplex [ 1121.683767][T19458] bond1: (slave geneve1): failed to get link speed/duplex [ 1121.773807][ T1116] bond0: (slave ip6erspan0): failed to get link speed/duplex [ 1121.853782][ T1116] bond1: (slave geneve1): failed to get link speed/duplex [ 1121.937387][ T4993] loop2: [ 1121.958131][ T4993] loop2: partition table partially beyond EOD, truncated [ 1122.046527][T32091] netlink: 8 bytes leftover after parsing attributes in process `syz.2.9581'. [ 1122.671892][T10835] usb 3-1: new high-speed USB device number 84 using dummy_hcd [ 1122.862365][T10835] usb 3-1: Using ep0 maxpacket: 32 [ 1122.888478][T10835] usb 3-1: config 0 has an invalid interface number: 188 but max is 0 [ 1122.928610][T10835] usb 3-1: config 0 has no interface number 0 [ 1122.956588][T10835] usb 3-1: config 0 interface 188 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 32 [ 1123.004588][T10835] usb 3-1: New USB device found, idVendor=17ef, idProduct=7203, bcdDevice=2e.36 [ 1123.035352][T10835] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1123.074157][T10835] usb 3-1: Product: syz [ 1123.101275][T10835] usb 3-1: Manufacturer: syz [ 1123.122382][T10835] usb 3-1: SerialNumber: syz [ 1123.148822][T10835] usb 3-1: config 0 descriptor?? [ 1123.179028][T32100] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 1123.459559][T32100] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 1123.856380][T32121] tipc: Enabling of bearer rejected, already enabled [ 1123.924333][T32123] mac80211_hwsim hwsim25 syzkaller0: entered promiscuous mode [ 1123.952947][T32123] mac80211_hwsim hwsim25 syzkaller0: entered allmulticast mode [ 1124.208111][T32126] netlink: 'syz.9.9588': attribute type 1 has an invalid length. [ 1124.321590][T32126] 8021q: adding VLAN 0 to HW filter on device bond1 [ 1124.532316][T32129] bond1: (slave geneve2): making interface the new active one [ 1124.623577][T32129] bond1: (slave geneve2): Enslaving as an active interface with an up link [ 1124.982495][T32149] mac80211_hwsim hwsim25 syzkaller0: left allmulticast mode [ 1126.173995][T32164] tipc: Failed to remove unknown binding: 66,0,0/0:608887712/608887714 [ 1126.174059][T32164] tipc: Failed to remove unknown binding: 66,0,0/0:608887712/608887713 [ 1126.176870][T32164] tipc: Failed to remove unknown binding: 66,0,0/0:608887712/608887714 [ 1126.176931][T32164] tipc: Failed to remove unknown binding: 66,0,0/0:608887712/608887713 [ 1126.221695][ T36] net_ratelimit: 64 callbacks suppressed [ 1126.221715][ T36] bond0: (slave ip6erspan0): failed to get link speed/duplex [ 1126.222592][ T36] bond1: (slave geneve1): failed to get link speed/duplex [ 1126.335034][ T36] bond1: (slave geneve1): failed to get link speed/duplex [ 1126.339077][T10835] asix 3-1:0.188 (unnamed net_device) (uninitialized): Failed to write reg index 0x0000: -71 [ 1126.339345][T10835] asix 3-1:0.188: probe with driver asix failed with error -71 [ 1126.341784][ T36] bond0: (slave ip6erspan0): failed to get link speed/duplex [ 1126.348893][T10835] usb 3-1: USB disconnect, device number 84 [ 1126.441536][ T36] bond1: (slave geneve1): failed to get link speed/duplex [ 1126.451415][T19458] bond0: (slave ip6erspan0): failed to get link speed/duplex [ 1126.492811][ T5687] usb 5-1: new high-speed USB device number 111 using dummy_hcd [ 1126.557284][T19458] bond1: (slave geneve1): failed to get link speed/duplex [ 1126.603506][T19458] bond0: (slave ip6erspan0): failed to get link speed/duplex [ 1126.641318][ T5687] usb 5-1: Using ep0 maxpacket: 16 [ 1126.655602][ T5687] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1126.681878][ T5687] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 1126.697278][ T36] bond1: (slave geneve1): failed to get link speed/duplex [ 1126.701480][T32172] netlink: 'syz.9.9601': attribute type 2 has an invalid length. [ 1126.715359][T32172] netlink: 'syz.9.9601': attribute type 5 has an invalid length. [ 1126.725602][ T5687] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 1126.737394][T32172] netlink: 'syz.9.9601': attribute type 2 has an invalid length. [ 1126.745508][T29024] bond0: (slave ip6erspan0): failed to get link speed/duplex [ 1126.756416][ T5687] usb 5-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 1126.774382][T32172] netlink: 'syz.9.9601': attribute type 5 has an invalid length. [ 1126.786406][ T5687] usb 5-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 1126.806404][ T5687] usb 5-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 1126.822665][ T5687] usb 5-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 1126.831028][ T5687] usb 5-1: Manufacturer: syz [ 1126.845663][ T5687] usb 5-1: config 0 descriptor?? [ 1126.991665][ T4993] loop2: [ 1127.000450][ T4993] loop2: partition table partially beyond EOD, truncated [ 1127.271702][ T5687] rc_core: IR keymap rc-hauppauge not found [ 1127.285675][ T5687] Registered IR keymap rc-empty [ 1127.299951][ T5687] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 1127.321434][ T5687] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 1127.356102][ T5687] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/rc/rc0 [ 1127.395294][ T5687] input: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/rc/rc0/input162 [ 1127.429606][ T5687] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 1127.472031][ T5687] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 1127.501790][ T5687] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 1127.511716][T10835] usb 3-1: new high-speed USB device number 85 using dummy_hcd [ 1127.541393][ T5687] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 1127.571560][ T5687] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 1127.611533][ T5687] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 1127.651663][ T5687] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 1127.691752][ T5687] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 1127.701460][T10835] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1127.735900][T10835] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 1127.753725][ T5687] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 1127.775426][T10835] usb 3-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 1127.791950][ T5687] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 1127.803781][T10835] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 1127.827487][T10835] usb 3-1: SerialNumber: syz [ 1127.843439][ T5687] mceusb 5-1:0.0: Registered 424242424242 with mce emulator interface version 1 [ 1127.869018][ T5687] mceusb 5-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active) [ 1127.941423][ T5687] usb 5-1: USB disconnect, device number 111 [ 1128.107700][T10835] usb 3-1: 0:2 : does not exist [ 1128.298013][T10835] usb 3-1: USB disconnect, device number 85 [ 1128.362035][ T809] usb 7-1: new high-speed USB device number 83 using dummy_hcd [ 1128.377157][T30547] udevd[30547]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1128.563313][ T809] usb 7-1: config 1 has an invalid descriptor of length 9, skipping remainder of the config [ 1128.599157][ T809] usb 7-1: config 1 interface 0 altsetting 0 has 5 endpoint descriptors, different from the interface descriptor's value: 6 [ 1128.656724][ T809] usb 7-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 1128.686443][ T809] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1128.735270][ T809] usb 7-1: Product: syz [ 1128.757106][ T809] usb 7-1: Manufacturer: syz [ 1128.786066][ T809] usb 7-1: SerialNumber: syz [ 1128.807586][ T4993] loop2: [ 1128.835967][ T4993] loop2: partition table partially beyond EOD, truncated [ 1128.850630][ T809] usb 7-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 1128.897032][ T6812] usb 7-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 1129.134551][ T809] usb 7-1: USB disconnect, device number 83 [ 1129.982154][ T6812] ath9k_htc 7-1:1.0: ath9k_htc: Target is unresponsive [ 1130.005611][ T6812] ath9k_htc: Failed to initialize the device [ 1130.023037][T32197] syzkaller0: entered promiscuous mode [ 1130.029565][ T809] usb 7-1: ath9k_htc: USB layer deinitialized [ 1130.036561][T32197] syzkaller0: entered allmulticast mode [ 1130.203207][T32200] netlink: 'syz.4.9609': attribute type 10 has an invalid length. [ 1130.203845][T32200] netlink: 'syz.4.9609': attribute type 10 has an invalid length. [ 1130.350766][ T4993] loop2: [ 1130.353938][ T809] usb 7-1: new high-speed USB device number 84 using dummy_hcd [ 1130.368782][ T4993] loop2: partition table partially beyond EOD, truncated [ 1130.531978][ T809] usb 7-1: Using ep0 maxpacket: 32 [ 1130.548284][ T809] usb 7-1: config 1 has an invalid descriptor of length 9, skipping remainder of the config [ 1130.569539][ T4993] loop2: [ 1130.572775][ T4993] loop2: partition table partially beyond EOD, truncated [ 1130.582523][ T809] usb 7-1: config 1 interface 0 altsetting 0 has 5 endpoint descriptors, different from the interface descriptor's value: 6 [ 1130.628908][ T809] usb 7-1: New USB device found, idVendor=0f11, idProduct=1021, bcdDevice= 1.08 [ 1130.673832][ T809] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1130.707983][ T809] usb 7-1: Product: syz [ 1130.718121][ T809] usb 7-1: Manufacturer: syz [ 1130.728430][ T809] usb 7-1: SerialNumber: syz [ 1130.776418][ T809] ldusb 7-1:1.0: LD USB Device #0 now attached to major 180 minor 0 [ 1130.789780][ T4993] loop2: [ 1130.805566][ T4993] loop2: partition table partially beyond EOD, truncated [ 1130.875585][T32217] input: syz1 as /devices/virtual/input/input163 [ 1130.957704][T32217] netlink: 'syz.2.9615': attribute type 1 has an invalid length. [ 1130.988829][ T809] usb 7-1: USB disconnect, device number 84 [ 1131.097913][T32217] tun0: tun_chr_ioctl cmd 1074025681 [ 1131.106330][ T809] ldusb 7-1:1.0: LD USB Device #0 now disconnected [ 1131.243847][ T4993] loop2: [ 1131.250126][ T4993] loop2: partition table partially beyond EOD, truncated [ 1131.305588][T30532] net_ratelimit: 78 callbacks suppressed [ 1131.305608][T30532] bond0: (slave ip6erspan0): failed to get link speed/duplex [ 1131.391461][T30532] bond1: (slave geneve1): failed to get link speed/duplex [ 1131.481449][T30532] bond0: (slave ip6erspan0): failed to get link speed/duplex [ 1131.531890][T30532] bond1: (slave geneve1): failed to get link speed/duplex [ 1131.621720][T30532] bond0: (slave ip6erspan0): failed to get link speed/duplex [ 1131.671588][ T36] bond1: (slave geneve1): failed to get link speed/duplex [ 1131.700803][ T4993] loop2: [ 1131.717048][ T4993] loop2: partition table partially beyond EOD, truncated [ 1131.762389][T29024] bond0: (slave ip6erspan0): failed to get link speed/duplex [ 1131.813431][T29024] bond1: (slave geneve1): failed to get link speed/duplex [ 1131.841107][T32231] netlink: 'syz.8.9619': attribute type 1 has an invalid length. [ 1131.985584][T32231] 8021q: adding VLAN 0 to HW filter on device bond6 [ 1132.108598][T32235] bond6: (slave gretap1): making interface the new active one [ 1132.132459][ T4993] loop2: [ 1132.140205][ T4993] loop2: partition table partially beyond EOD, truncated [ 1132.179569][T32235] bond6: (slave gretap1): Enslaving as an active interface with an up link [ 1132.204050][ T36] bond0: (slave ip6erspan0): failed to get link speed/duplex [ 1132.231709][T29024] bond1: (slave geneve1): failed to get link speed/duplex [ 1132.720296][T32256] tipc: Enabled bearer , priority 0 [ 1132.733209][T32256] syzkaller0: entered promiscuous mode [ 1132.733234][T32256] syzkaller0: entered allmulticast mode [ 1132.772423][T10835] usb 7-1: new high-speed USB device number 85 using dummy_hcd [ 1132.844681][T32256] tipc: Resetting bearer [ 1132.871596][T32255] tipc: Resetting bearer [ 1132.953701][T10835] usb 7-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 1132.963262][T10835] usb 7-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 1132.974118][T10835] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1132.974804][T32255] tipc: Disabling bearer [ 1133.007307][T10835] usb 7-1: config 0 descriptor?? [ 1133.261684][ T30] audit: type=1326 audit(1777575653.143:2073): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=32261 comm="syz.4.9629" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fb451f9cdd9 code=0x0 [ 1133.300299][ T10] usb 7-1: USB disconnect, device number 85 [ 1133.345582][T32264] mac80211_hwsim hwsim25 syzkaller0: entered allmulticast mode [ 1133.696436][ T4993] loop2: [ 1133.703306][ T4993] loop2: partition table partially beyond EOD, truncated [ 1133.771800][ T5687] usb 9-1: new high-speed USB device number 65 using dummy_hcd [ 1133.941588][ T5687] usb 9-1: Using ep0 maxpacket: 16 [ 1133.952429][ T5687] usb 9-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xF3, changing to 0x83 [ 1133.991816][ T5687] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 1134.052741][ T5687] usb 9-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 1134.083732][ T5687] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1134.116388][ T5687] usb 9-1: Product: syz [ 1134.135992][ T5687] usb 9-1: Manufacturer: syz [ 1134.148343][ T5687] usb 9-1: SerialNumber: syz [ 1134.180254][ T5687] usb 9-1: config 0 descriptor?? [ 1134.216520][ T5687] em28xx 9-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0) [ 1134.268891][ T5687] em28xx 9-1:0.0: Audio interface 0 found (Vendor Class) [ 1134.808461][ T5687] em28xx 9-1:0.0: unknown em28xx chip ID (0) [ 1134.890797][ T5687] em28xx 9-1:0.0: Config register raw data: 0xfffffffb [ 1134.927267][ T4993] loop2: [ 1134.946945][ T4993] loop2: partition table partially beyond EOD, truncated [ 1135.566914][ T5687] em28xx 9-1:0.0: Unknown AC97 audio processor detected! [ 1135.595535][ T5687] em28xx 9-1:0.0: couldn't setup AC97 register 2 [ 1135.632210][ T5687] em28xx 9-1:0.0: couldn't setup AC97 register 4 [ 1135.656187][ T5687] em28xx 9-1:0.0: couldn't setup AC97 register 6 [ 1135.696409][ T5687] em28xx 9-1:0.0: couldn't setup AC97 register 54 [ 1135.741806][ T5687] em28xx 9-1:0.0: couldn't setup AC97 register 56 [ 1135.784523][ T0] NOHZ tick-stop error: local softirq work is pending, handler #02!!! [ 1135.937519][ T4993] loop2: [ 1135.954397][ T4993] loop2: partition table partially beyond EOD, truncated [ 1136.033758][ T5687] em28xx 9-1:0.0: couldn't setup AC97 register 2 [ 1136.060529][ T5687] em28xx 9-1:0.0: couldn't setup AC97 register 4 [ 1136.076626][ T5687] em28xx 9-1:0.0: couldn't setup AC97 register 6 [ 1136.098574][ T5687] em28xx 9-1:0.0: couldn't setup AC97 register 54 [ 1136.131108][ T5687] em28xx 9-1:0.0: couldn't setup AC97 register 56 [ 1136.152157][T32305] netlink: 4 bytes leftover after parsing attributes in process `syz.9.9640'. [ 1136.169977][ T5687] usb 9-1: USB disconnect, device number 65 [ 1136.320883][T32305] team0: Failed to send options change via netlink (err -105) [ 1136.338525][T32305] team0: Failed to send port change of device team_slave_0 via netlink (err -105) [ 1136.356252][T32305] team0: Port device team_slave_0 removed [ 1136.433851][T19462] net_ratelimit: 59 callbacks suppressed [ 1136.433872][T19462] bond1: (slave geneve1): failed to get link speed/duplex [ 1136.494895][T19462] bond0: (slave ip6erspan0): failed to get link speed/duplex [ 1136.585781][T32293] bond1: (slave geneve1): failed to get link speed/duplex [ 1136.641334][T19462] bond0: (slave ip6erspan0): failed to get link speed/duplex [ 1136.702875][T19463] bond1: (slave geneve1): failed to get link speed/duplex [ 1136.764057][T19463] bond0: (slave ip6erspan0): failed to get link speed/duplex [ 1136.788272][T32316] netlink: 12 bytes leftover after parsing attributes in process `syz.8.9643'. [ 1136.832384][ T142] bond1: (slave geneve1): failed to get link speed/duplex [ 1136.861962][ T809] usb 10-1: new high-speed USB device number 39 using dummy_hcd [ 1136.892322][ T1116] bond0: (slave ip6erspan0): failed to get link speed/duplex [ 1136.982354][ T1116] bond1: (slave geneve1): failed to get link speed/duplex [ 1137.025140][T19462] bond0: (slave ip6erspan0): failed to get link speed/duplex [ 1137.062760][ T809] usb 10-1: Using ep0 maxpacket: 8 [ 1137.080179][ T809] usb 10-1: unable to get BOS descriptor or descriptor too short [ 1137.115760][ T809] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x88 has an invalid bInterval 0, changing to 7 [ 1137.166229][ T809] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x88 has invalid wMaxPacketSize 0 [ 1137.200226][ T809] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 1137.233864][ T809] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0xC has invalid wMaxPacketSize 0 [ 1137.280110][ T809] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0xF has invalid wMaxPacketSize 0 [ 1137.317146][ T809] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x7 has invalid wMaxPacketSize 0 [ 1137.352641][ T809] usb 10-1: New USB device found, idVendor=0763, idProduct=1002, bcdDevice=5f.84 [ 1137.374379][ T809] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1137.410793][ T809] usb 10-1: Product: syz [ 1137.428775][ T809] usb 10-1: Manufacturer: syz [ 1137.450171][ T809] usb 10-1: SerialNumber: syz [ 1137.481916][ T809] usb 10-1: config 0 descriptor?? [ 1137.491993][ T4993] loop2: [ 1137.504009][ T4993] loop2: partition table partially beyond EOD, truncated [ 1137.526812][ T809] usb 10-1: Quirk or no altset; falling back to MIDI 1.0 [ 1137.772898][T32313] syzkaller1: entered promiscuous mode [ 1137.807018][T32313] syzkaller1: entered allmulticast mode [ 1137.900327][T30552] udevd[30552]: error opening ATTR{/sys/devices/platform/dummy_hcd.9/usb10/10-1/10-1:0.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1138.184056][ T809] usb 10-1: USB disconnect, device number 39 [ 1139.577888][ T4993] loop2: [ 1139.582222][ T4993] loop2: partition table partially beyond EOD, truncated [ 1139.732784][T32361] syzkaller0: entered promiscuous mode [ 1139.750574][T32361] syzkaller0: entered allmulticast mode [ 1139.977355][T32366] syzkaller0: entered promiscuous mode [ 1139.989657][T32366] syzkaller0: entered allmulticast mode [ 1140.138216][ T4993] loop2: [ 1140.159944][ T4993] loop2: partition table partially beyond EOD, truncated [ 1140.363853][ T4993] loop2: [ 1140.383830][ T4993] loop2: partition table partially beyond EOD, truncated [ 1140.561126][T32383] pci 0000:00:05.0: vgaarb: VGA decodes changed: olddecodes=io+mem,decodes=none:owns=io+mem [ 1140.846770][T32379] syz.2.9664 (32379): drop_caches: 2 [ 1140.979915][ T4993] loop2: [ 1140.993158][ T4993] loop2: partition table partially beyond EOD, truncated [ 1141.271998][ T6812] usb 5-1: new high-speed USB device number 112 using dummy_hcd [ 1141.448228][ T6812] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1141.485129][ T6812] usb 5-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 1141.529835][ T6812] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1141.539131][ T142] net_ratelimit: 70 callbacks suppressed [ 1141.539145][ T142] bond1: (slave geneve1): failed to get link speed/duplex [ 1141.585028][ T6812] usb 5-1: config 0 descriptor?? [ 1141.593661][ T142] bond0: (slave ip6erspan0): failed to get link speed/duplex [ 1141.606414][ T6812] pwc: Askey VC010 type 2 USB webcam detected. [ 1141.692335][T19462] bond1: (slave geneve1): failed to get link speed/duplex [ 1141.731476][T19462] bond0: (slave ip6erspan0): failed to get link speed/duplex [ 1141.801428][T19461] bond1: (slave geneve1): failed to get link speed/duplex [ 1141.852746][T19461] bond0: (slave ip6erspan0): failed to get link speed/duplex [ 1141.911375][T19461] bond1: (slave geneve1): failed to get link speed/duplex [ 1141.972389][T19461] bond0: (slave ip6erspan0): failed to get link speed/duplex [ 1142.023905][ T4993] loop2: [ 1142.027287][ T6812] pwc: recv_control_msg error -32 req 02 val 2b00 [ 1142.033885][T19462] bond1: (slave geneve1): failed to get link speed/duplex [ 1142.034995][ T4993] loop2: partition table partially beyond EOD, [ 1142.050955][ T6812] pwc: recv_control_msg error -32 req 02 val 2700 [ 1142.065201][ T4993] truncated [ 1142.094711][ T6812] pwc: recv_control_msg error -32 req 02 val 2c00 [ 1142.101733][T19462] bond0: (slave ip6erspan0): failed to get link speed/duplex [ 1142.116671][ T6812] pwc: recv_control_msg error -32 req 04 val 1000 [ 1142.152210][ T6812] pwc: recv_control_msg error -32 req 04 val 1300 [ 1142.172080][ T6812] pwc: recv_control_msg error -32 req 04 val 1400 [ 1142.185457][ T6812] pwc: recv_control_msg error -32 req 02 val 2000 [ 1142.193767][ T6812] pwc: recv_control_msg error -32 req 02 val 2100 [ 1142.224479][ T6812] pwc: recv_control_msg error -32 req 04 val 1500 [ 1142.246823][ T6812] pwc: recv_control_msg error -32 req 02 val 2500 [ 1142.256384][ T6812] pwc: recv_control_msg error -32 req 02 val 2400 [ 1142.289611][ T6812] pwc: recv_control_msg error -32 req 02 val 2600 [ 1142.474409][T32408] netlink: 20 bytes leftover after parsing attributes in process `syz.9.9673'. [ 1142.509543][ T6812] pwc: recv_control_msg error -71 req 02 val 2800 [ 1142.522465][ T6812] pwc: recv_control_msg error -71 req 04 val 1100 [ 1142.530840][ T6812] pwc: recv_control_msg error -71 req 04 val 1200 [ 1142.590266][ T6812] pwc: Registered as video103. [ 1142.638057][ T6812] input: PWC snapshot button as /devices/platform/dummy_hcd.4/usb5/5-1/input/input164 [ 1142.713947][ T6812] usb 5-1: USB disconnect, device number 112 [ 1142.755023][ T10] IPVS: starting estimator thread 0... [ 1142.861480][T32412] IPVS: using max 53 ests per chain, 127200 per kthread [ 1143.363854][ T4993] loop2: [ 1143.372997][ T4993] loop2: partition table partially beyond EOD, truncated [ 1143.622548][T32424] tipc: Failed to remove unknown binding: 66,0,0/0:2344662906/2344662908 [ 1143.622583][T32424] tipc: Failed to remove unknown binding: 66,0,0/0:2344662906/2344662907 [ 1143.624594][T32424] tipc: Failed to remove unknown binding: 66,0,0/0:2344662906/2344662908 [ 1143.624624][T32424] tipc: Failed to remove unknown binding: 66,0,0/0:2344662906/2344662907 [ 1143.680980][ T4993] loop2: [ 1143.681015][ T4993] loop2: partition table partially beyond EOD, truncated [ 1144.715219][ T4993] loop2: [ 1144.729897][ T4993] loop2: partition table partially beyond EOD, truncated [ 1144.919440][ T4993] loop2: [ 1144.927684][ T4993] loop2: partition table partially beyond EOD, truncated [ 1145.083841][T32454] tipc: Enabling of bearer rejected, already enabled [ 1145.110589][T32451] syzkaller0: entered promiscuous mode [ 1145.181388][ T10] usb 10-1: new high-speed USB device number 40 using dummy_hcd [ 1145.218465][T32451] syzkaller0: entered allmulticast mode [ 1145.425736][ T30] audit: type=1400 audit(1777575665.283:2074): apparmor="DENIED" operation="stack_onexec" class="file" info="label not found" error=-2 profile="unconfined" name=3AAE86AD47AA0D9495E6D80F7BDE2D18FFB36CF152AED2D408FB58E305FC8E2F2F7D91F81B621CC4214D4A27E1614FBEE0BEAC8F4A045070B770212D46D4A2DF096B791F2A4BA218E12CB76AA24945B70A7C9DD5EDEAC52B5A876F73CFBE66371A72F11F3D9544D6B59B4A5541DCEF5CBF11FFFF37DFD147C8A3E5098A207BE806EA7167101F8C1B5C8FE41E170FD0C775DBC5BE0B6D3AB625AB702E5B1DC15F9C4B3D09BE812F340E681E0694F5BADF640DA3FDFC2F929B4C2BEB9A592C577287B6021BFEEC24146C7F95608BB60A736207A09D9F47E89C4044EADDE57CDEFD15F25B822D2EAF2205DF0D6B71B63EE0B63CB598F26509AF36983578F6F4198A0843CC1B1BD780015007AB9709CC6211E3B5C685B972B5C5E95F054A7A9FE149282F679C8466B9734E3850EC98419DD0C887715902F9E7802842085BC606F30C2654869E9E3701FD0FC69137FE165592689465EEBD5CAFAD7C29DE2ADADEC42A818D8EE389CA1FE33A1EF23617C89116A3A458B56612E4C36C43A9150D5331ADBB0BEB01A062B1F1349FC2ECEA76CB7C40CDFE378185F3099B1D71414D0FDA5A47F8593260CC0BD723A4CCA81435F0 [ 1145.475414][ T10] usb 10-1: Using ep0 maxpacket: 32 [ 1145.828092][ T4993] loop2: [ 1145.834675][ T4993] loop2: partition table partially beyond EOD, truncated [ 1145.867691][ T10] usb 10-1: config 0 has an invalid interface number: 67 but max is 0 [ 1145.896402][T32467] syzkaller0: entered promiscuous mode [ 1145.909300][T32467] syzkaller0: entered allmulticast mode [ 1145.928238][ T10] usb 10-1: config 0 has no interface number 0 [ 1145.994818][ T10] usb 10-1: New USB device found, idVendor=0424, idProduct=9901, bcdDevice=c2.57 [ 1146.027586][ T10] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1146.089156][ T10] usb 10-1: Product: syz [ 1146.107968][ T10] usb 10-1: Manufacturer: syz [ 1146.134442][ T10] usb 10-1: SerialNumber: syz [ 1146.199853][ T10] usb 10-1: config 0 descriptor?? [ 1146.406258][ T4993] loop2: [ 1146.409478][ T4993] loop2: partition table partially beyond EOD, truncated [ 1146.542170][T19462] net_ratelimit: 65 callbacks suppressed [ 1146.542229][T19462] bond0: (slave ip6erspan0): failed to get link speed/duplex [ 1146.592211][T19462] bond1: (slave geneve1): failed to get link speed/duplex [ 1146.657636][ T10] smsc95xx 10-1:0.67 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000030: -32 [ 1146.694159][ T1116] bond0: (slave ip6erspan0): failed to get link speed/duplex [ 1146.701987][ T5687] usb 3-1: new high-speed USB device number 86 using dummy_hcd [ 1146.719811][ T10] smsc95xx 10-1:0.67 (unnamed net_device) (uninitialized): Error reading E2P_CMD [ 1146.736302][T19463] bond1: (slave geneve1): failed to get link speed/duplex [ 1146.821794][T19462] bond0: (slave ip6erspan0): failed to get link speed/duplex [ 1146.862544][ T1116] bond1: (slave geneve1): failed to get link speed/duplex [ 1146.873180][ T5687] usb 3-1: New USB device found, idVendor=17e9, idProduct=8b4e, bcdDevice=9c.08 [ 1146.931728][ T1116] bond0: (slave ip6erspan0): failed to get link speed/duplex [ 1146.940814][ T5687] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1147.001478][ T1116] bond1: (slave geneve1): failed to get link speed/duplex [ 1147.048250][ T5687] usb 3-1: config 0 descriptor?? [ 1147.072838][T19462] bond0: (slave ip6erspan0): failed to get link speed/duplex [ 1147.141433][T19462] bond1: (slave geneve1): failed to get link speed/duplex [ 1147.375422][ T5687] udl 3-1:0.0: [drm] Unrecognized vendor firmware descriptor [ 1147.439212][ T5687] [drm:udl_init] *ERROR* Selecting channel failed [ 1147.788000][ T5687] [drm] Initialized udl 0.0.1 for 3-1:0.0 on minor 2 [ 1147.817992][ T5687] [drm] Initialized udl on minor 2 [ 1147.896259][ T5687] udl 3-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffb9 [ 1147.946987][ T5687] udl 3-1:0.0: [drm] Cannot find any crtc or sizes [ 1147.969748][ T4993] loop2: [ 1147.980607][T10835] udl 3-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffb9 [ 1147.991181][ T5687] usb 3-1: USB disconnect, device number 86 [ 1148.006926][T10835] udl 3-1:0.0: [drm] Cannot find any crtc or sizes [ 1148.011497][ T4993] loop2: partition table partially beyond EOD, truncated [ 1148.295341][T32485] syzkaller0: entered promiscuous mode [ 1148.295389][T32485] syzkaller0: entered allmulticast mode [ 1148.632722][ T4993] loop2: [ 1148.637722][ T4993] loop2: partition table partially beyond EOD, truncated [ 1149.071632][T32498] kvm: requested 129904 ns i8254 timer period limited to 200000 ns [ 1149.113342][T32498] kvm: requested 99733 ns i8254 timer period limited to 200000 ns [ 1149.198919][ T10] smsc95xx 10-1:0.67 (unnamed net_device) (uninitialized): Failed to write reg index 0x00000014: -71 [ 1149.262461][ T10] smsc95xx 10-1:0.67: probe with driver smsc95xx failed with error -71 [ 1149.287053][ T10] usb 10-1: USB disconnect, device number 40 [ 1149.763055][ T5687] usb 7-1: new high-speed USB device number 86 using dummy_hcd [ 1149.786718][ T4993] loop2: [ 1149.789816][ T4993] loop2: partition table partially beyond EOD, truncated [ 1149.942858][ T5687] usb 7-1: config 1 contains an unexpected descriptor of type 0x2, skipping [ 1149.953976][ T5687] usb 7-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1149.964725][ T5687] usb 7-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 1149.991779][ T5687] usb 7-1: config 1 has no interface number 1 [ 1150.008223][ T5687] usb 7-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0 [ 1150.027263][ T4993] loop2: [ 1150.034072][ T4993] loop2: partition table partially beyond EOD, truncated [ 1150.054554][ T5687] usb 7-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 1150.108560][ T5687] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1150.140425][ T5687] usb 7-1: Product: syz [ 1150.163552][ T5687] usb 7-1: Manufacturer: syz [ 1150.171798][ T6812] usb 5-1: new high-speed USB device number 113 using dummy_hcd [ 1150.182152][ T5687] usb 7-1: SerialNumber: syz [ 1150.198928][T32522] tipc: Enabled bearer , priority 0 [ 1150.217195][T32522] syzkaller0: entered promiscuous mode [ 1150.223138][T32522] syzkaller0: entered allmulticast mode [ 1150.233362][T32522] netem: change failed [ 1150.238816][T32522] netlink: 44 bytes leftover after parsing attributes in process `syz.2.9709'. [ 1150.258880][T32522] tipc: Resetting bearer [ 1150.266826][T32521] tipc: Resetting bearer [ 1150.303651][T32521] tipc: Disabling bearer [ 1150.332420][ T6812] usb 5-1: Using ep0 maxpacket: 32 [ 1150.339962][ T6812] usb 5-1: config 4 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1150.365094][ T6812] usb 5-1: config 4 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1150.393974][ T6812] usb 5-1: New USB device found, idVendor=046d, idProduct=c314, bcdDevice= 0.40 [ 1150.409393][T32507] netlink: 24 bytes leftover after parsing attributes in process `syz.6.9704'. [ 1150.424155][ T4993] loop2: [ 1150.427327][ T4993] loop2: partition table partially beyond EOD, truncated [ 1150.449051][ T6812] usb 5-1: New USB device strings: Mfr=255, Product=255, SerialNumber=0 [ 1150.469782][ T5687] usb 7-1: No MIDI 2.0 at altset 1, falling back to MIDI 1.0 [ 1150.491679][ T6812] usb 5-1: Product: syz [ 1150.499212][ T5687] usb 7-1: MIDIStreaming interface descriptor not found [ 1150.514098][ T6812] usb 5-1: Manufacturer: syz [ 1150.568106][ T6812] hub 5-1:4.0: USB hub found [ 1150.632615][T32524] syzkaller0: entered promiscuous mode [ 1150.656786][T32524] syzkaller0: entered allmulticast mode [ 1150.679042][ T5687] usb 7-1: USB disconnect, device number 86 [ 1150.877150][ T6812] hub 5-1:4.0: config failed, can't read hub descriptor (err -22) [ 1150.952182][ T6812] usb 5-1: USB disconnect, device number 113 [ 1151.052158][ T4993] loop2: [ 1151.061971][ T4993] loop2: partition table partially beyond EOD, truncated [ 1151.273586][T32532] kvm: vcpu 2: requested lapic timer restore with starting count register 0x390=1812281087 (231971979136 ns) > initial count (200000 ns). Using initial count to start timer. [ 1151.351441][ T5687] usb 3-1: new high-speed USB device number 87 using dummy_hcd [ 1151.546724][ T5687] usb 3-1: New USB device found, idVendor=20b7, idProduct=1540, bcdDevice=b7.5a [ 1151.562773][ T142] net_ratelimit: 69 callbacks suppressed [ 1151.562794][ T142] bond0: (slave ip6erspan0): failed to get link speed/duplex [ 1151.579931][ T5687] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1151.612093][ T5687] usb 3-1: Product: syz [ 1151.623280][ T5687] usb 3-1: Manufacturer: syz [ 1151.639134][ T5687] usb 3-1: SerialNumber: syz [ 1151.645815][ T142] bond1: (slave geneve1): failed to get link speed/duplex [ 1151.647806][ T5687] usb 3-1: config 0 descriptor?? [ 1151.731691][ T142] bond0: (slave ip6erspan0): failed to get link speed/duplex [ 1151.781895][T19463] bond1: (slave geneve1): failed to get link speed/duplex [ 1151.817285][T32536] syzkaller0: entered promiscuous mode [ 1151.840851][T32536] syzkaller0: entered allmulticast mode [ 1151.911351][ T0] NOHZ tick-stop error: local softirq work is pending, handler #82!!! [ 1151.931851][T32538] tipc: Enabled bearer , priority 0 [ 1151.943176][T19462] bond1: (slave geneve1): failed to get link speed/duplex [ 1151.955727][T32538] syzkaller0: entered promiscuous mode [ 1151.968381][T32538] syzkaller0: entered allmulticast mode [ 1152.028334][T32538] tipc: Resetting bearer [ 1152.086344][T32543] batadv_slave_0: left promiscuous mode [ 1152.109108][T32543] team1: left promiscuous mode [ 1152.114208][T32543] team1: left allmulticast mode [ 1152.120817][T32543] team2: left promiscuous mode [ 1152.126118][T32543] team2: left allmulticast mode [ 1152.135152][T32543] bond1: left promiscuous mode [ 1152.142083][T32543] bond1: left allmulticast mode [ 1152.161376][T32543] vlan2: left allmulticast mode [ 1152.167339][T32543] bond4: left allmulticast mode [ 1152.173033][T32543] geneve2: left allmulticast mode [ 1152.178950][T32543] mac80211_hwsim hwsim25 syzkaller0: left promiscuous mode [ 1152.186725][T32543] mac80211_hwsim hwsim25 syzkaller0: left allmulticast mode [ 1152.239592][T32536] tipc: Enabled bearer , priority 0 [ 1152.267858][T32537] tipc: Resetting bearer [ 1152.328256][T32537] tipc: Disabling bearer [ 1152.338457][T32535] tipc: Resetting bearer [ 1152.372708][T32535] tipc: Disabling bearer [ 1152.401370][T19462] bond1: (slave geneve1): failed to get link speed/duplex [ 1152.421722][T19462] bond0: (slave ip6erspan0): failed to get link speed/duplex [ 1152.454610][ T5687] usb 3-1: Firmware version (0.0) predates our first public release. [ 1152.507774][ T5687] usb 3-1: Please update to version 0.2 or newer [ 1152.518067][T19462] bond1: (slave geneve1): failed to get link speed/duplex [ 1152.632153][T19462] bond0: (slave ip6erspan0): failed to get link speed/duplex [ 1152.649502][ T5687] usb 3-1: USB disconnect, device number 87 [ 1152.668005][T32556] tipc: Enabled bearer , priority 0 [ 1152.708747][T32556] syzkaller0: entered promiscuous mode [ 1152.764145][T32556] syzkaller0: entered allmulticast mode [ 1152.921544][T19462] bond1: (slave geneve1): failed to get link speed/duplex [ 1152.999891][ T10] usb 7-1: new high-speed USB device number 87 using dummy_hcd [ 1153.132557][T32563] tipc: Resetting bearer [ 1153.191434][ T10] usb 7-1: Using ep0 maxpacket: 8 [ 1153.199391][T32555] tipc: Resetting bearer [ 1153.212628][ T10] usb 7-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1153.299038][ T10] usb 7-1: config 1 interface 0 altsetting 0 endpoint 0xF has invalid wMaxPacketSize 0 [ 1153.334843][ T4993] loop2: [ 1153.343192][ T10] usb 7-1: config 1 interface 0 altsetting 0 bulk endpoint 0xF has invalid maxpacket 0 [ 1153.357296][ T4993] loop2: partition table partially beyond EOD, truncated [ 1153.399309][ T10] usb 7-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 1153.433884][T32555] tipc: Disabling bearer [ 1153.492403][ T10] usb 7-1: New USB device found, idVendor=110a, idProduct=1110, bcdDevice=ab.5d [ 1153.570644][ T10] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1153.703301][ T10] usb 7-1: Product: syz [ 1153.748085][ T10] usb 7-1: Manufacturer: syz [ 1153.790932][ T10] usb 7-1: SerialNumber: syz [ 1153.828581][ T4993] loop2: [ 1153.846716][ T4993] loop2: partition table partially beyond EOD, truncated [ 1153.885482][ T10] ti_usb_3410_5052 7-1:1.0: TI USB 3410 1 port adapter converter detected [ 1154.129452][ T4993] loop2: [ 1154.168517][ T4993] loop2: partition table partially beyond EOD, truncated [ 1154.183924][ T10] usb 7-1: Direct firmware load for moxa/moxa-1110.fw failed with error -2 [ 1154.299334][ T10] usb 7-1: Falling back to sysfs fallback for: moxa/moxa-1110.fw [ 1154.408935][T32575] syzkaller0: entered promiscuous mode [ 1154.460461][T32575] syzkaller0: entered allmulticast mode [ 1155.014734][ T4993] loop2: [ 1155.017795][ T4993] loop2: partition table partially beyond EOD, truncated [ 1155.127839][T32580] tipc: Enabling of bearer rejected, already enabled [ 1155.158674][T32580] mac80211_hwsim hwsim25 syzkaller0: entered promiscuous mode [ 1155.180148][T32580] mac80211_hwsim hwsim25 syzkaller0: entered allmulticast mode [ 1155.705215][ T4993] loop2: [ 1155.727817][ T4993] loop2: partition table partially beyond EOD, truncated [ 1156.129611][T32595] kvm: kvm [32594]: vcpu0, guest rIP: 0x29 Unhandled WRMSR(0xc1) = 0xffff [ 1156.228927][T32595] kvm: kvm [32594]: vcpu0, guest rIP: 0x29 Unhandled WRMSR(0xc2) = 0xffff [ 1156.341823][T32595] kvm: kvm [32594]: vcpu0, guest rIP: 0x29 Unhandled WRMSR(0xc1) = 0xffff [ 1156.376370][ T4993] loop2: [ 1156.394985][ T4993] loop2: partition table partially beyond EOD, truncated [ 1156.436966][T32595] kvm: kvm [32594]: vcpu0, guest rIP: 0x29 Unhandled WRMSR(0xc2) = 0xffff [ 1156.576986][T32595] kvm: kvm [32594]: vcpu0, guest rIP: 0x29 Unhandled WRMSR(0xc1) = 0xffff [ 1156.582321][ T142] net_ratelimit: 46 callbacks suppressed [ 1156.582342][ T142] bond0: (slave ip6erspan0): failed to get link speed/duplex [ 1156.634174][T32595] kvm: kvm [32594]: vcpu0, guest rIP: 0x29 Unhandled WRMSR(0xc2) = 0xffff [ 1156.747090][ T142] bond1: (slave geneve1): failed to get link speed/duplex [ 1156.844052][ T142] bond0: (slave ip6erspan0): failed to get link speed/duplex [ 1156.955401][T32615] dvb_demux: dvb_demux_feed_del: feed not in list (type=0 state=0 pid=ffff) [ 1156.976179][ T142] bond1: (slave geneve1): failed to get link speed/duplex [ 1157.039821][T32615] netlink: 9 bytes leftover after parsing attributes in process `syz.4.9735'. [ 1157.055589][ T142] bond0: (slave ip6erspan0): failed to get link speed/duplex [ 1157.126506][T32615] gretap0: entered promiscuous mode [ 1157.146547][T32618] netlink: 5 bytes leftover after parsing attributes in process `syz.4.9735'. [ 1157.164222][ T142] bond1: (slave geneve1): failed to get link speed/duplex [ 1157.218946][T32618] 0ªî{X¹¦: renamed from gretap0 [ 1157.271051][T32618] 0ªî{X¹¦: left promiscuous mode [ 1157.286159][T32618] 0ªî{X¹¦: entered allmulticast mode [ 1157.326659][T32618] A link change request failed with some changes committed already. Interface 30ªî{X¹¦ may have been left with an inconsistent configuration, please check. [ 1157.381442][T19462] bond0: (slave ip6erspan0): failed to get link speed/duplex [ 1157.411551][T19462] bond1: (slave geneve1): failed to get link speed/duplex [ 1157.511596][T19462] bond0: (slave ip6erspan0): failed to get link speed/duplex [ 1157.642112][ T4993] loop2: [ 1157.661044][ T4993] loop2: partition table partially beyond EOD, truncated [ 1157.800018][T32623] x_tables: ip_tables: rpfilter match: used from hooks OUTPUT, but only valid from PREROUTING [ 1158.207078][T32637] syzkaller0: entered promiscuous mode [ 1158.232892][T32637] syzkaller0: entered allmulticast mode [ 1158.417171][T32639] syzkaller0: entered promiscuous mode [ 1158.436822][T32639] syzkaller0: entered allmulticast mode [ 1158.949605][ T4993] loop2: [ 1158.960830][ T4993] loop2: partition table partially beyond EOD, truncated [ 1159.115969][T32653] syzkaller0: entered promiscuous mode [ 1159.169084][T32653] syzkaller0: entered allmulticast mode [ 1159.351733][ T5687] usb 5-1: new high-speed USB device number 114 using dummy_hcd [ 1159.457223][ T4993] loop2: [ 1159.471900][ T4993] loop2: partition table partially beyond EOD, truncated [ 1159.522150][ T5687] usb 5-1: Using ep0 maxpacket: 32 [ 1159.534271][ T5687] usb 5-1: New USB device found, idVendor=0ac8, idProduct=0321, bcdDevice=6f.be [ 1159.560913][ T5687] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1159.610366][ T5687] usb 5-1: config 0 descriptor?? [ 1159.660698][ T5687] gspca_main: vc032x-2.14.0 probing 0ac8:0321 [ 1159.696632][T32669] vimc link validate: Sensor A:src:640x480 (0x33424752, 8, 0, 0, 0) Raw Capture 0:snk:640x480 (0x33424752, 8, 0, 0, 0) [ 1159.951400][ T6812] usb 3-1: new high-speed USB device number 88 using dummy_hcd [ 1160.105017][ T6812] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1160.144441][ T6812] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 1160.169986][ T6812] usb 3-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 1160.210401][ T6812] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=67 [ 1160.225626][ T6812] usb 3-1: SerialNumber: syz [ 1160.468219][ T6812] usb 3-1: 0:2 : does not exist [ 1160.606176][ T6812] usb 3-1: USB disconnect, device number 88 [ 1160.706758][T30711] udevd[30711]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1160.826903][T32681] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1160.861422][T32681] batadv_slave_0: entered promiscuous mode [ 1160.945138][T32684] kvm: kvm [32683]: vcpu0, guest rIP: 0x1b8 Unhandled WRMSR(0xc1) = 0x1 [ 1160.974555][T32684] kvm_intel: kvm [32683]: vcpu0, guest rIP: 0x1b8 Unhandled WRMSR(0x1d9) = 0x1 [ 1161.000121][T32684] kvm: kvm [32683]: vcpu0, guest rIP: 0x1b8 Unhandled WRMSR(0x186) = 0x1 [ 1161.011058][T32684] kvm: kvm [32683]: vcpu0, guest rIP: 0x1b8 Unhandled WRMSR(0x186) = 0x1 [ 1161.022798][T32684] kvm: kvm [32683]: vcpu0, guest rIP: 0x1b8 Unhandled WRMSR(0x187) = 0x1 [ 1161.157169][ T4993] loop2: [ 1161.168660][ T4993] loop2: partition table partially beyond EOD, truncated [ 1161.241347][T10834] usb 10-1: new high-speed USB device number 41 using dummy_hcd [ 1161.328439][T32690] kvm: requested 181028 ns i8254 timer period limited to 200000 ns [ 1161.352580][T32690] kvm: requested 98057 ns i8254 timer period limited to 200000 ns [ 1161.371942][T32690] kvm: requested 90514 ns i8254 timer period limited to 200000 ns [ 1161.433452][T10834] usb 10-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 1161.450037][T10834] usb 10-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config [ 1161.469604][T10834] usb 10-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 1161.491336][T10834] usb 10-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 52, changing to 9 [ 1161.504769][ T5687] gspca_vc032x: I2c Bus Busy Wait 00 [ 1161.521451][T10834] usb 10-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8241, setting to 1024 [ 1161.547524][T10834] usb 10-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 1161.571276][T10834] usb 10-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 1161.583590][ T4993] loop2: [ 1161.589665][ T4993] loop2: partition table partially beyond EOD, truncated [ 1161.591344][T10834] usb 10-1: Product: syz [ 1161.611471][T10834] usb 10-1: Manufacturer: syz [ 1161.621664][T19461] net_ratelimit: 51 callbacks suppressed [ 1161.621683][T19461] bond0: (slave ip6erspan0): failed to get link speed/duplex [ 1161.631461][T10834] cdc_wdm 10-1:1.0: skipping garbage [ 1161.657751][T10834] cdc_wdm 10-1:1.0: skipping garbage [ 1161.671480][T19461] bond1: (slave geneve1): failed to get link speed/duplex [ 1161.700437][T10834] cdc_wdm 10-1:1.0: cdc-wdm0: USB WDM device [ 1161.728329][T10834] cdc_wdm 10-1:1.0: Unknown control protocol [ 1161.764427][T19461] bond0: (slave ip6erspan0): failed to get link speed/duplex [ 1161.781536][T19461] bond1: (slave geneve1): failed to get link speed/duplex [ 1161.885640][T32293] bond0: (slave ip6erspan0): failed to get link speed/duplex [ 1161.903831][T32293] bond1: (slave geneve1): failed to get link speed/duplex [ 1161.930263][ C1] wdm_int_callback: 390 callbacks suppressed [ 1161.930280][ C1] cdc_wdm 10-1:1.0: nonzero urb status received: -71 [ 1161.942944][ C1] wdm_int_callback: 390 callbacks suppressed [ 1161.942961][ C1] cdc_wdm 10-1:1.0: wdm_int_callback - 0 bytes [ 1161.951421][ T6812] usb 3-1: new high-speed USB device number 89 using dummy_hcd [ 1161.955839][ C1] cdc_wdm 10-1:1.0: nonzero urb status received: -71 [ 1161.969333][ C1] cdc_wdm 10-1:1.0: wdm_int_callback - 0 bytes [ 1161.976157][ C1] cdc_wdm 10-1:1.0: nonzero urb status received: -71 [ 1161.982878][ C1] cdc_wdm 10-1:1.0: wdm_int_callback - 0 bytes [ 1161.989722][ C1] cdc_wdm 10-1:1.0: nonzero urb status received: -71 [ 1161.996448][ C1] cdc_wdm 10-1:1.0: wdm_int_callback - 0 bytes [ 1162.003104][ C1] cdc_wdm 10-1:1.0: nonzero urb status received: -71 [ 1162.003494][T32293] bond0: (slave ip6erspan0): failed to get link speed/duplex [ 1162.009798][ C1] cdc_wdm 10-1:1.0: wdm_int_callback - 0 bytes [ 1162.010276][ C1] cdc_wdm 10-1:1.0: nonzero urb status received: -71 [ 1162.030029][ C1] cdc_wdm 10-1:1.0: wdm_int_callback - 0 bytes [ 1162.037750][ C1] cdc_wdm 10-1:1.0: nonzero urb status received: -71 [ 1162.044480][ C1] cdc_wdm 10-1:1.0: wdm_int_callback - 0 bytes [ 1162.050861][ C1] cdc_wdm 10-1:1.0: nonzero urb status received: -71 [ 1162.052251][T32293] bond1: (slave geneve1): failed to get link speed/duplex [ 1162.057551][ C1] cdc_wdm 10-1:1.0: wdm_int_callback - 0 bytes [ 1162.058042][ C1] cdc_wdm 10-1:1.0: nonzero urb status received: -71 [ 1162.077500][ C1] cdc_wdm 10-1:1.0: wdm_int_callback - 0 bytes [ 1162.084542][T10834] usb 10-1: USB disconnect, device number 41 [ 1162.091015][ C1] cdc_wdm 10-1:1.0: nonzero urb status received: -71 [ 1162.091044][ C1] cdc_wdm 10-1:1.0: wdm_int_callback - 0 bytes [ 1162.091061][ C1] cdc_wdm 10-1:1.0: wdm_int_callback - usb_submit_urb failed with result -19 [ 1162.115401][ T6812] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1162.130700][ T5687] gspca_vc032x: reg_w err -71 [ 1162.137464][ T5687] gspca_vc032x: I2c Bus Busy Wait 00 [ 1162.138855][ T6812] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 1162.143272][ T5687] gspca_vc032x: I2c Bus Busy Wait 00 [ 1162.152416][ T809] usb 9-1: new high-speed USB device number 66 using dummy_hcd [ 1162.157510][ T5687] gspca_vc032x: I2c Bus Busy Wait 00 [ 1162.167237][ T6812] usb 3-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 1162.170699][T29024] bond0: (slave ip6erspan0): failed to get link speed/duplex [ 1162.188627][ T6812] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 1162.189932][ T5687] gspca_vc032x: I2c Bus Busy Wait 00 [ 1162.199493][ T6812] usb 3-1: SerialNumber: syz [ 1162.205337][T32293] bond1: (slave geneve1): failed to get link speed/duplex [ 1162.214604][ T5687] gspca_vc032x: I2c Bus Busy Wait 00 [ 1162.219937][ T5687] gspca_vc032x: I2c Bus Busy Wait 00 [ 1162.225803][ T5687] gspca_vc032x: I2c Bus Busy Wait 00 [ 1162.231427][ T5687] gspca_vc032x: I2c Bus Busy Wait 00 [ 1162.236784][ T5687] gspca_vc032x: I2c Bus Busy Wait 00 [ 1162.243902][ T5687] gspca_vc032x: I2c Bus Busy Wait 00 [ 1162.249319][ T5687] gspca_vc032x: I2c Bus Busy Wait 00 [ 1162.254705][ T5687] gspca_vc032x: I2c Bus Busy Wait 00 [ 1162.259998][ T5687] gspca_vc032x: I2c Bus Busy Wait 00 [ 1162.265350][ T5687] gspca_vc032x: I2c Bus Busy Wait 00 [ 1162.270639][ T5687] gspca_vc032x: I2c Bus Busy Wait 00 [ 1162.276213][ T5687] gspca_vc032x: I2c Bus Busy Wait 00 [ 1162.282407][ T5687] gspca_vc032x: I2c Bus Busy Wait 00 [ 1162.287750][ T5687] gspca_vc032x: Unknown sensor... [ 1162.295173][ T5687] vc032x 5-1:0.0: probe with driver vc032x failed with error -22 [ 1162.308676][ T5687] usb 5-1: USB disconnect, device number 114 [ 1162.311481][ T809] usb 9-1: Using ep0 maxpacket: 8 [ 1162.337782][ T809] usb 9-1: unable to get BOS descriptor or descriptor too short [ 1162.360651][ T809] usb 9-1: config 236 has an invalid interface number: 54 but max is 0 [ 1162.381441][ T809] usb 9-1: config 236 has no interface number 0 [ 1162.395163][ T809] usb 9-1: New USB device found, idVendor=0b95, idProduct=2790, bcdDevice=f6.39 [ 1162.410602][ T809] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1162.418839][ T809] usb 9-1: Product: syz [ 1162.432453][ T809] usb 9-1: Manufacturer: syz [ 1162.440056][ T6812] usb 3-1: 0:2 : does not exist [ 1162.453971][ T809] usb 9-1: SerialNumber: syz [ 1162.495514][ T6812] usb 3-1: USB disconnect, device number 89 [ 1162.692899][ T809] usb 9-1: USB disconnect, device number 66 [ 1163.064502][ T5687] usb 5-1: new high-speed USB device number 115 using dummy_hcd [ 1163.110991][ T4993] loop2: [ 1163.123937][ T4993] loop2: partition table partially beyond EOD, truncated [ 1163.236006][ T5687] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 1163.274059][ T5687] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x4 has invalid maxpacket 12336, setting to 64 [ 1163.303585][ T5687] usb 5-1: New USB device found, idVendor=0cf3, idProduct=9375, bcdDevice=1a.de [ 1163.305945][T32709] tipc: Enabled bearer , priority 0 [ 1163.336446][ T5687] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1163.363835][T32705] syzkaller0: entered promiscuous mode [ 1163.371807][T32705] syzkaller0: entered allmulticast mode [ 1163.376025][ T5687] usb 5-1: config 0 descriptor?? [ 1163.463451][T10834] usb 3-1: new high-speed USB device number 90 using dummy_hcd [ 1163.495475][T32705] tipc: Resetting bearer [ 1163.509359][T32704] tipc: Resetting bearer [ 1163.547238][T32704] tipc: Disabling bearer [ 1163.621380][ T5687] ath6kl: Failed to submit usb control message: -71 [ 1163.667391][T10834] usb 3-1: New USB device found, idVendor=0424, idProduct=7850, bcdDevice= 0.00 [ 1163.687501][ T5687] ath6kl: unable to send the bmi data to the device: -71 [ 1163.710662][T10834] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1163.735838][ T5687] ath6kl: Unable to send get target info: -71 [ 1163.760412][T10834] usb 3-1: Product: syz [ 1163.784203][ T5687] ath6kl: Failed to init ath6kl core: -71 [ 1163.820347][T10834] usb 3-1: Manufacturer: syz [ 1163.828687][T10834] usb 3-1: SerialNumber: syz [ 1163.838115][ T5687] ath6kl_usb 5-1:0.0: probe with driver ath6kl_usb failed with error -71 [ 1163.885257][ T30] audit: type=1800 audit(1777575683.773:2075): pid=32719 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.8.9764" name="bus" dev="tmpfs" ino=4378 res=0 errno=0 [ 1163.923864][ T5687] usb 5-1: USB disconnect, device number 115 [ 1164.185851][T10834] lan78xx 3-1:1.0 (unnamed net_device) (uninitialized): lan78xx_setup_irq_domain() failed : -71 [ 1164.289372][T10834] lan78xx 3-1:1.0 (unnamed net_device) (uninitialized): Bind routine FAILED [ 1164.474018][T10834] lan78xx 3-1:1.0: probe with driver lan78xx failed with error -71 [ 1164.624568][T10834] usb 3-1: USB disconnect, device number 90 [ 1164.855435][ T4993] loop2: [ 1164.874355][ T4993] loop2: partition table partially beyond EOD, truncated [ 1165.526830][ T4993] loop2: [ 1165.541020][ T4993] loop2: partition table partially beyond EOD, truncated [ 1165.784205][T32743] netlink: 'syz.8.9772': attribute type 16 has an invalid length. [ 1165.804111][T32745] netlink: 4 bytes leftover after parsing attributes in process `syz.4.9773'. [ 1165.815578][T32743] netlink: 8 bytes leftover after parsing attributes in process `syz.8.9772'. [ 1165.815917][T32745] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1165.877318][T32745] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1165.916292][T32743] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1165.981492][T10834] usb 3-1: new high-speed USB device number 91 using dummy_hcd [ 1166.171912][T10834] usb 3-1: Using ep0 maxpacket: 16 [ 1166.210381][T10834] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1166.267374][T10834] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 1166.303703][T10834] usb 3-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 1166.350369][T10834] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1166.362923][T10834] usb 3-1: Product: syz [ 1166.387504][T10834] usb 3-1: Manufacturer: syz [ 1166.394541][T10834] usb 3-1: SerialNumber: syz [ 1166.426983][T10834] usb 3-1: 0:2 : does not exist [ 1166.650771][T10834] usb 3-1: 5:0: failed to get current value for ch 0 (-22) [ 1166.713111][T19463] net_ratelimit: 72 callbacks suppressed [ 1166.713131][T19463] bond1: (slave geneve1): failed to get link speed/duplex [ 1166.741412][T19463] bond0: (slave ip6erspan0): failed to get link speed/duplex [ 1166.755254][T32762] syzkaller0: entered promiscuous mode [ 1166.761036][T32762] syzkaller0: entered allmulticast mode [ 1166.847863][T10834] usb 3-1: USB disconnect, device number 91 [ 1166.922075][ T1116] bond1: (slave geneve1): failed to get link speed/duplex [ 1166.953416][ T1116] bond0: (slave ip6erspan0): failed to get link speed/duplex [ 1166.963736][T30711] udevd[30711]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1167.052083][T19461] bond1: (slave geneve1): failed to get link speed/duplex [ 1167.091385][T19461] bond0: (slave ip6erspan0): failed to get link speed/duplex [ 1167.172366][T19461] bond1: (slave geneve1): failed to get link speed/duplex [ 1167.211415][T19461] bond0: (slave ip6erspan0): failed to get link speed/duplex [ 1167.227636][ T4993] loop2: [ 1167.235687][ T4993] loop2: partition table partially beyond EOD, truncated [ 1167.301359][T19461] bond1: (slave geneve1): failed to get link speed/duplex [ 1167.311609][ T809] usb 10-1: new high-speed USB device number 42 using dummy_hcd [ 1167.342425][T19461] bond0: (slave ip6erspan0): failed to get link speed/duplex [ 1167.482632][ T809] usb 10-1: Using ep0 maxpacket: 16 [ 1167.493480][ T809] usb 10-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1167.516460][ T809] usb 10-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 1167.530580][ T809] usb 10-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 1167.539249][ T809] usb 10-1: Manufacturer: syz [ 1167.571870][ T809] usb 10-1: config 0 descriptor?? [ 1168.130357][T10834] usb 10-1: USB disconnect, device number 42 [ 1168.465676][ T4993] loop2: [ 1168.486159][ T4993] loop2: partition table partially beyond EOD, truncated [ 1169.153695][ T330] syzkaller0: entered promiscuous mode [ 1169.186616][ T330] syzkaller0: entered allmulticast mode [ 1169.886134][ T335] syzkaller0: entered promiscuous mode [ 1169.917274][ T335] syzkaller0: entered allmulticast mode [ 1170.029844][ T335] tipc: Enabled bearer , priority 0 [ 1170.075631][ T334] tipc: Resetting bearer [ 1170.204161][ T334] tipc: Disabling bearer [ 1170.731887][ T5687] usb 10-1: new low-speed USB device number 43 using dummy_hcd [ 1170.925870][ T5687] usb 10-1: config 0 has an invalid interface number: 55 but max is 0 [ 1170.943990][ T5687] usb 10-1: config 0 has no interface number 0 [ 1170.955492][ T5687] usb 10-1: config 0 interface 55 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 1170.980670][ T5687] usb 10-1: config 0 interface 55 altsetting 0 endpoint 0xE has invalid maxpacket 32, setting to 8 [ 1170.995214][ T5687] usb 10-1: config 0 interface 55 altsetting 0 has an endpoint descriptor with address 0xAB, changing to 0x8B [ 1171.010511][ T5687] usb 10-1: config 0 interface 55 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 10 [ 1171.026501][ T5687] usb 10-1: config 0 interface 55 altsetting 0 endpoint 0x8B has invalid maxpacket 120, setting to 8 [ 1171.041480][ T5687] usb 10-1: config 0 interface 55 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 2 [ 1171.063872][ T5687] usb 10-1: New USB device found, idVendor=0f11, idProduct=1080, bcdDevice=fc.6a [ 1171.078944][ T5687] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1171.121955][ T5687] usb 10-1: config 0 descriptor?? [ 1171.149393][ T338] raw-gadget.0 gadget.9: fail, usb_ep_enable returned -22 [ 1171.181577][ T338] raw-gadget.0 gadget.9: fail, usb_ep_enable returned -22 [ 1171.200719][ T30] audit: type=1804 audit(1777575691.083:2076): pid=342 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.8.9793" name="/newroot/851/file1" dev="fuse" ino=1 res=1 errno=0 [ 1171.267911][ T4993] loop2: [ 1171.285348][ T4993] loop2: partition table partially beyond EOD, truncated [ 1171.297413][ T5687] ldusb 10-1:0.55: LD USB Device #0 now attached to major 180 minor 0 [ 1171.589996][ T353] tipc: Enabling of bearer rejected, already enabled [ 1171.639391][ T4993] loop2: [ 1171.640038][ T353] netlink: 8 bytes leftover after parsing attributes in process `syz.8.9796'. [ 1171.657514][ T4993] loop2: partition table partially beyond EOD, truncated [ 1171.707148][ T358] syzkaller0: entered promiscuous mode [ 1171.719279][ T358] syzkaller0: entered allmulticast mode [ 1171.758166][ T360] netlink: 8 bytes leftover after parsing attributes in process `syz.9.9791'. [ 1171.798480][ T360] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1171.807735][T19461] net_ratelimit: 70 callbacks suppressed [ 1171.807753][T19461] bond0: (slave ip6erspan0): failed to get link speed/duplex [ 1171.858383][ T360] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1171.902369][ T360] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1171.935041][ T360] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1172.012271][ T5717] usb 10-1: USB disconnect, device number 43 [ 1172.021793][T19461] bond0: (slave ip6erspan0): failed to get link speed/duplex [ 1172.047988][ T5717] ldusb 10-1:0.55: LD USB Device #0 now disconnected [ 1172.062113][T19461] bond1: (slave geneve1): failed to get link speed/duplex [ 1172.163280][ T4993] loop2: [ 1172.166633][T19463] bond0: (slave ip6erspan0): failed to get link speed/duplex [ 1172.176212][ T4993] loop2: partition table partially beyond EOD, truncated [ 1172.231392][T19463] bond1: (slave geneve1): failed to get link speed/duplex [ 1172.641756][ T5687] usb 5-1: new high-speed USB device number 116 using dummy_hcd [ 1172.737388][ T381] tipc: Enabled bearer , priority 0 [ 1172.777103][ T381] syzkaller0: entered promiscuous mode [ 1172.799749][ T381] syzkaller0: entered allmulticast mode [ 1172.807659][T29024] bond0: (slave ip6erspan0): failed to get link speed/duplex [ 1172.834799][ T387] netlink: 8 bytes leftover after parsing attributes in process `syz.8.9806'. [ 1172.848459][ T5687] usb 5-1: Using ep0 maxpacket: 8 [ 1172.870094][ T382] tipc: Resetting bearer [ 1172.895418][ T388] netlink: 8 bytes leftover after parsing attributes in process `syz.8.9806'. [ 1172.951444][ T389] netlink: 'syz.8.9806': attribute type 10 has an invalid length. [ 1172.957356][ T5687] usb 5-1: New USB device found, idVendor=046d, idProduct=08dd, bcdDevice=ff.f4 [ 1172.976683][ T388] netlink: 4 bytes leftover after parsing attributes in process `syz.8.9806'. [ 1172.997014][ T5687] usb 5-1: New USB device strings: Mfr=8, Product=2, SerialNumber=3 [ 1173.006842][ T5687] usb 5-1: Product: syz [ 1173.029083][ T5687] usb 5-1: Manufacturer: syz [ 1173.038719][ T387] 8021q: adding VLAN 0 to HW filter on device bond2 [ 1173.050290][ T5687] usb 5-1: SerialNumber: syz [ 1173.111969][ T4993] loop2: [ 1173.114194][ T5687] usb 5-1: config 0 descriptor?? [ 1173.127911][ T4993] loop2: partition table partially beyond EOD, truncated [ 1173.130571][ T5687] gspca_main: gspca_zc3xx-2.14.0 probing 046d:08dd [ 1173.152889][ T389] bond0: (slave bridge0): Enslaving as an active interface with an up link [ 1173.244775][ T388] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1173.262754][ T388] bond2: (slave bond0): making interface the new active one [ 1173.287072][ T388] bond2: (slave bond0): Enslaving as an active interface with an up link [ 1173.308715][ T380] tipc: Resetting bearer [ 1173.333175][ T5687] gspca_zc3xx: reg_w_i err -71 [ 1173.341087][ T5687] gspca_zc3xx 5-1:0.0: probe with driver gspca_zc3xx failed with error -71 [ 1173.380303][ T380] tipc: Disabling bearer [ 1173.387187][ T5687] usb 5-1: USB disconnect, device number 116 [ 1173.492265][ T5717] usb 3-1: new high-speed USB device number 92 using dummy_hcd [ 1173.542705][ T402] binder: 400:402 ioctl c0306201 200000000480 returned -14 [ 1173.644614][ T399] tipc: Enabled bearer , priority 0 [ 1173.683347][ T401] syzkaller0: entered promiscuous mode [ 1173.686685][ T5717] usb 3-1: New USB device found, idVendor=0424, idProduct=7850, bcdDevice= 0.00 [ 1173.728529][ T5717] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1173.731523][ T401] syzkaller0: entered allmulticast mode [ 1173.752532][ T5717] usb 3-1: Product: syz [ 1173.827828][ T5717] usb 3-1: Manufacturer: syz [ 1173.833541][ T5717] usb 3-1: SerialNumber: syz [ 1173.896328][ T399] tipc: Resetting bearer [ 1173.911657][T32293] bond0: (slave ip6erspan0): failed to get link speed/duplex [ 1173.981985][ T142] bond1: (slave geneve1): failed to get link speed/duplex [ 1174.024145][ T396] tipc: Resetting bearer [ 1174.150186][ T396] tipc: Disabling bearer [ 1174.201517][ T142] bond1: (slave geneve1): failed to get link speed/duplex [ 1174.242288][T19461] bond0: (slave ip6erspan0): failed to get link speed/duplex [ 1174.327833][ T5717] lan78xx 3-1:1.0 (unnamed net_device) (uninitialized): Failed to sync IRQ enable register: -EPIPE [ 1174.544705][ T6794] usb 5-1: new high-speed USB device number 117 using dummy_hcd [ 1174.701864][ T6794] usb 5-1: Using ep0 maxpacket: 32 [ 1174.716249][ T6794] usb 5-1: New USB device found, idVendor=0ac8, idProduct=0321, bcdDevice=6f.be [ 1174.729847][ T6794] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1174.742320][ T6794] usb 5-1: config 0 descriptor?? [ 1174.752877][ T6794] gspca_main: vc032x-2.14.0 probing 0ac8:0321 [ 1174.851464][ T5687] usb 9-1: new high-speed USB device number 67 using dummy_hcd [ 1175.011572][ T5687] usb 9-1: Using ep0 maxpacket: 32 [ 1175.022199][ T5687] usb 9-1: config 0 has an invalid interface number: 188 but max is 0 [ 1175.031955][ T5687] usb 9-1: config 0 has no interface number 0 [ 1175.038774][ T5687] usb 9-1: config 0 interface 188 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 32 [ 1175.055508][ T5687] usb 9-1: New USB device found, idVendor=17ef, idProduct=7203, bcdDevice=2e.36 [ 1175.066008][ T5687] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1175.075015][ T5687] usb 9-1: Product: syz [ 1175.079669][ T5687] usb 9-1: Manufacturer: syz [ 1175.084947][ T5687] usb 9-1: SerialNumber: syz [ 1175.095009][ T5687] usb 9-1: config 0 descriptor?? [ 1175.102593][ T423] raw-gadget.3 gadget.8: fail, usb_ep_enable returned -22 [ 1175.320388][ T423] raw-gadget.3 gadget.8: fail, usb_ep_enable returned -22 [ 1175.791917][ T6803] usb 10-1: new high-speed USB device number 44 using dummy_hcd [ 1175.972883][ T6803] usb 10-1: Using ep0 maxpacket: 8 [ 1175.983871][ T6803] usb 10-1: unable to get BOS descriptor or descriptor too short [ 1175.999533][ T6803] usb 10-1: config 0 has an invalid descriptor of length 203, skipping remainder of the config [ 1176.013941][ T6803] usb 10-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xEE, changing to 0x8E [ 1176.027155][ T6803] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x8E has an invalid bInterval 0, changing to 7 [ 1176.039872][ T6803] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x8E has invalid wMaxPacketSize 0 [ 1176.051375][ T6803] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 1176.062932][ T6803] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0xC has invalid wMaxPacketSize 0 [ 1176.074540][ T6803] usb 10-1: config 0 interface 0 altsetting 0 bulk endpoint 0xC has invalid maxpacket 0 [ 1176.085553][ T6803] usb 10-1: config 0 interface 0 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 5 [ 1176.114255][ T6803] usb 10-1: New USB device found, idVendor=0763, idProduct=1002, bcdDevice=5f.84 [ 1176.124543][ T6803] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1176.134341][ T6803] usb 10-1: Product: syz [ 1176.139152][ T6803] usb 10-1: Manufacturer: syz [ 1176.146105][ T6803] usb 10-1: SerialNumber: syz [ 1176.157641][ T6803] usb 10-1: config 0 descriptor?? [ 1176.175042][ T6803] usb 10-1: Quirk or no altset; falling back to MIDI 1.0 [ 1176.296027][ T6803] snd-usb-audio 10-1:0.0: probe with driver snd-usb-audio failed with error -2 [ 1176.394622][T32185] udevd[32185]: error opening ATTR{/sys/devices/platform/dummy_hcd.9/usb10/10-1/10-1:0.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1176.789214][ T5717] lan78xx 3-1:1.0 (unnamed net_device) (uninitialized): Failed to init LTM with error -EPROTO [ 1176.820500][ T5717] lan78xx 3-1:1.0 (unnamed net_device) (uninitialized): Registers INIT FAILED.... [ 1176.833189][T19462] net_ratelimit: 47 callbacks suppressed [ 1176.833211][T19462] bond0: (slave ip6erspan0): failed to get link speed/duplex [ 1176.865758][ T5717] lan78xx 3-1:1.0 (unnamed net_device) (uninitialized): Bind routine FAILED [ 1176.881525][ T5717] lan78xx 3-1:1.0: probe with driver lan78xx failed with error -71 [ 1176.891791][T32293] bond1: (slave geneve1): failed to get link speed/duplex [ 1176.936538][ T5717] usb 3-1: USB disconnect, device number 92 [ 1176.951218][ T0] NOHZ tick-stop error: local softirq work is pending, handler #302!!! [ 1176.981880][T32293] bond0: (slave ip6erspan0): failed to get link speed/duplex [ 1177.031695][T32293] bond1: (slave geneve1): failed to get link speed/duplex [ 1177.109833][ T6803] usb 10-1: USB disconnect, device number 44 [ 1177.118728][T32293] bond0: (slave ip6erspan0): failed to get link speed/duplex [ 1177.152036][T32293] bond1: (slave geneve1): failed to get link speed/duplex [ 1177.253536][T19462] bond0: (slave ip6erspan0): failed to get link speed/duplex [ 1177.274826][ T1316] ieee802154 phy0 wpan0: encryption failed: -22 [ 1177.283683][ T1316] ieee802154 phy1 wpan1: encryption failed: -22 [ 1177.301874][T19462] bond1: (slave geneve1): failed to get link speed/duplex [ 1177.413383][ T1116] bond0: (slave ip6erspan0): failed to get link speed/duplex [ 1177.462039][T32293] bond1: (slave geneve1): failed to get link speed/duplex [ 1177.477515][ T4993] loop2: [ 1177.496557][ T4993] loop2: partition table partially beyond EOD, truncated [ 1177.999031][ T6794] gspca_vc032x: reg_r err -71 [ 1178.121687][ T6794] gspca_vc032x: I2c Bus Busy Wait 00 [ 1178.127057][ T6794] gspca_vc032x: I2c Bus Busy Wait 00 [ 1178.133173][ T6794] gspca_vc032x: I2c Bus Busy Wait 00 [ 1178.139937][ T6794] gspca_vc032x: I2c Bus Busy Wait 00 [ 1178.151476][ T6794] gspca_vc032x: I2c Bus Busy Wait 00 [ 1178.161297][ T6794] gspca_vc032x: I2c Bus Busy Wait 00 [ 1178.168300][ T6794] gspca_vc032x: I2c Bus Busy Wait 00 [ 1178.174386][ T4993] loop2: [ 1178.177832][ T4993] loop2: partition table partially beyond EOD, truncated [ 1178.186161][ T6794] gspca_vc032x: I2c Bus Busy Wait 00 [ 1178.192441][ T6794] gspca_vc032x: I2c Bus Busy Wait 00 [ 1178.209606][ T6794] gspca_vc032x: I2c Bus Busy Wait 00 [ 1178.222819][ T6794] gspca_vc032x: I2c Bus Busy Wait 00 [ 1178.234683][ T6794] gspca_vc032x: I2c Bus Busy Wait 00 [ 1178.250350][ T6794] gspca_vc032x: I2c Bus Busy Wait 00 [ 1178.266785][ T6794] gspca_vc032x: I2c Bus Busy Wait 00 [ 1178.275023][ T6794] gspca_vc032x: I2c Bus Busy Wait 00 [ 1178.280378][ T6794] gspca_vc032x: I2c Bus Busy Wait 00 [ 1178.296588][ T6794] gspca_vc032x: I2c Bus Busy Wait 00 [ 1178.302778][ T6794] gspca_vc032x: Unknown sensor... [ 1178.308347][ T6794] vc032x 5-1:0.0: probe with driver vc032x failed with error -22 [ 1178.346924][ T6794] usb 5-1: USB disconnect, device number 117 [ 1178.474734][ T5687] asix 9-1:0.188 (unnamed net_device) (uninitialized): Failed to write reg index 0x0000: -71 [ 1178.494356][ T5687] asix 9-1:0.188 (unnamed net_device) (uninitialized): Failed to write Medium Mode mode to 0x0306: ffffffb9 [ 1178.510249][ T5687] asix 9-1:0.188: probe with driver asix failed with error -71 [ 1178.531759][ T5717] usb 10-1: new high-speed USB device number 45 using dummy_hcd [ 1178.534180][ T5687] usb 9-1: USB disconnect, device number 67 [ 1178.583095][ T6803] usb 3-1: new high-speed USB device number 93 using dummy_hcd [ 1178.709440][ T5717] usb 10-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 60, changing to 7 [ 1178.722875][ T5717] usb 10-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 1178.737090][ T5717] usb 10-1: New USB device found, idVendor=0499, idProduct=5008, bcdDevice= 0.40 [ 1178.746796][ T5717] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1178.761647][ T5717] usb 10-1: Product: syz [ 1178.769346][ T446] netlink: 4 bytes leftover after parsing attributes in process `syz.6.9825'. [ 1178.774899][ T6803] usb 3-1: New USB device found, idVendor=1604, idProduct=8001, bcdDevice=44.1f [ 1178.780125][ T5717] usb 10-1: Manufacturer: syz [ 1178.809900][ T446] veth0_macvtap: left promiscuous mode [ 1178.811283][ T6803] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1178.819798][ T5717] usb 10-1: SerialNumber: syz [ 1178.881002][ T6803] usb 3-1: Product: syz [ 1178.892273][ T6803] usb 3-1: Manufacturer: syz [ 1178.898496][ T6803] usb 3-1: SerialNumber: syz [ 1178.910066][ T6803] usb 3-1: config 0 descriptor?? [ 1179.200214][ T439] netlink: 20 bytes leftover after parsing attributes in process `syz.9.9822'. [ 1179.621486][ T6803] usb 3-1: USB disconnect, device number 93 [ 1179.784051][ T5717] usb 10-1: Quirk or no altset; falling back to MIDI 1.0 [ 1179.797964][ T5717] snd-usb-audio 10-1:1.0: probe with driver snd-usb-audio failed with error -2 [ 1179.940661][ T5717] usb 10-1: Quirk or no altset; falling back to MIDI 1.0 [ 1179.986239][ T5717] snd-usb-audio 10-1:1.1: probe with driver snd-usb-audio failed with error -2 [ 1180.076660][ T5717] usb 10-1: Quirk or no altset; falling back to MIDI 1.0 [ 1180.435438][ T5717] snd-usb-audio 10-1:1.2: probe with driver snd-usb-audio failed with error -2 [ 1180.525314][ T5717] usb 10-1: USB disconnect, device number 45 [ 1180.645358][ T4993] loop2: [ 1180.666912][ T4993] loop2: partition table partially beyond EOD, truncated [ 1180.873184][T30711] udevd[30711]: error opening ATTR{/sys/devices/platform/dummy_hcd.9/usb10/10-1/10-1:1.2/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1181.451743][ T4993] loop2: [ 1181.466567][ T4993] loop2: partition table partially beyond EOD, truncated [ 1181.478554][ T30] audit: type=1800 audit(1777575701.353:2077): pid=458 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.8.9829" name="bus" dev="ramfs" ino=182362 res=0 errno=0 [ 1181.903863][T32293] net_ratelimit: 57 callbacks suppressed [ 1181.903885][T32293] bond1: (slave geneve1): failed to get link speed/duplex [ 1181.991747][T32293] bond0: (slave ip6erspan0): failed to get link speed/duplex [ 1182.093721][ T487] tipc: Enabled bearer , priority 0 [ 1182.125648][ T487] syzkaller0: entered promiscuous mode [ 1182.149947][ T487] syzkaller0: entered allmulticast mode [ 1182.191422][T32293] bond1: (slave geneve1): failed to get link speed/duplex [ 1182.376233][ T489] netlink: 44 bytes leftover after parsing attributes in process `syz.6.9839'. [ 1182.588029][ T493] tipc: Resetting bearer [ 1182.651691][ T30] audit: type=1804 audit(1777575702.543:2078): pid=482 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.2.9837" name="/newroot/125/file1" dev="tmpfs" ino=672 res=1 errno=0 [ 1182.674553][ T142] bond1: (slave geneve1): failed to get link speed/duplex [ 1182.726157][ T486] tipc: Resetting bearer [ 1182.894025][ T486] tipc: Disabling bearer [ 1182.992199][T32293] bond1: (slave geneve1): failed to get link speed/duplex [ 1183.002162][T32293] bond0: (slave ip6erspan0): failed to get link speed/duplex [ 1183.111601][T19463] bond1: (slave geneve1): failed to get link speed/duplex [ 1183.152393][ T142] bond0: (slave ip6erspan0): failed to get link speed/duplex [ 1183.252391][T19461] bond1: (slave geneve1): failed to get link speed/duplex [ 1183.293024][T19461] bond0: (slave ip6erspan0): failed to get link speed/duplex [ 1183.401430][ T6794] usb 5-1: new full-speed USB device number 118 using dummy_hcd [ 1183.577621][ T6794] usb 5-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 1183.611366][ T6794] usb 5-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 1183.651381][ T6794] usb 5-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 1183.676534][ T6794] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1183.849200][ T4993] loop2: [ 1183.853742][ T4993] loop2: partition table partially beyond EOD, truncated [ 1183.915784][ T6794] usb 5-1: usb_control_msg returned -32 [ 1183.923892][ T507] kvm_pr_unimpl_wrmsr: 2 callbacks suppressed [ 1183.923930][ T507] kvm: kvm [506]: vcpu0, guest rIP: 0x1b8 Unhandled WRMSR(0x187) = 0x1 [ 1183.929592][ T6794] usbtmc 5-1:16.0: can't read capabilities [ 1183.952401][ T507] kvm_intel: kvm [506]: vcpu0, guest rIP: 0x1b8 Unhandled WRMSR(0x1d9) = 0x1 [ 1184.012623][ T507] kvm: kvm [506]: vcpu0, guest rIP: 0x1b8 Unhandled WRMSR(0x187) = 0x1 [ 1184.038833][ T507] kvm: kvm [506]: vcpu0, guest rIP: 0x1b8 Unhandled WRMSR(0x186) = 0x1 [ 1184.048845][ T507] kvm: kvm [506]: vcpu0, guest rIP: 0x18e Unhandled WRMSR(0x11e) = 0x0 [ 1184.057165][ T507] kvm: kvm [506]: vcpu0, guest rIP: 0x1b8 Unhandled WRMSR(0x11e) = 0x1 [ 1184.068576][ T507] kvm_intel: kvm [506]: vcpu0, guest rIP: 0x1b8 Unhandled WRMSR(0x1d9) = 0x1 [ 1184.078913][ T507] kvm: kvm [506]: vcpu0, guest rIP: 0x18e Unhandled WRMSR(0x11e) = 0x0 [ 1184.087227][ T507] kvm: kvm [506]: vcpu0, guest rIP: 0x1b8 Unhandled WRMSR(0x11e) = 0x1 [ 1184.098673][ T507] kvm_intel: kvm [506]: vcpu0, guest rIP: 0x1b8 Unhandled WRMSR(0x1d9) = 0x1 [ 1184.109015][ T507] kvm: kvm [506]: vcpu0, guest rIP: 0x18e Unhandled WRMSR(0x11e) = 0x0 [ 1184.138840][ T6794] usb 5-1: USB disconnect, device number 118 [ 1184.166943][ T507] kvm: kvm [506]: vcpu0, guest rIP: 0x1b8 Unhandled WRMSR(0x11e) = 0x1 [ 1184.195558][ T507] kvm_intel: kvm [506]: vcpu0, guest rIP: 0x1b8 Unhandled WRMSR(0x1d9) = 0x1 [ 1184.205958][ T507] kvm: kvm [506]: vcpu0, guest rIP: 0x18e Unhandled WRMSR(0x11e) = 0x0 [ 1184.217421][ T507] kvm_intel: kvm [506]: vcpu0, guest rIP: 0x1b8 Unhandled WRMSR(0x1d9) = 0x1 [ 1184.250899][ T507] kvm_intel: kvm [506]: vcpu0, guest rIP: 0x1b8 Unhandled WRMSR(0x1d9) = 0x1 [ 1184.267943][ T507] kvm_intel: kvm [506]: vcpu0, guest rIP: 0x1b8 Unhandled WRMSR(0x1d9) = 0x1 [ 1184.375111][ T4993] loop2: [ 1184.378117][ T4993] loop2: partition table partially beyond EOD, truncated [ 1184.692141][ T6794] usb 3-1: new low-speed USB device number 94 using dummy_hcd [ 1184.878305][ T6794] usb 3-1: config 0 has an invalid interface number: 55 but max is 0 [ 1184.928834][ T6794] usb 3-1: config 0 has no interface number 0 [ 1184.966794][ T6794] usb 3-1: config 0 interface 55 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 1185.033347][ T6794] usb 3-1: config 0 interface 55 altsetting 0 endpoint 0xE has invalid maxpacket 32, setting to 8 [ 1185.057497][ T525] tipc: Enabled bearer , priority 0 [ 1185.086270][ T525] syzkaller0: entered promiscuous mode [ 1185.094466][ T6794] usb 3-1: config 0 interface 55 altsetting 0 has an endpoint descriptor with address 0xAB, changing to 0x8B [ 1185.101610][ T525] syzkaller0: entered allmulticast mode [ 1185.169630][ T6794] usb 3-1: config 0 interface 55 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 10 [ 1185.230428][ T6794] usb 3-1: config 0 interface 55 altsetting 0 endpoint 0x8B has invalid maxpacket 120, setting to 8 [ 1185.296912][ T6794] usb 3-1: config 0 interface 55 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 2 [ 1185.297737][ T525] tipc: Resetting bearer [ 1185.368933][ T6794] usb 3-1: New USB device found, idVendor=0f11, idProduct=1080, bcdDevice=fc.6a [ 1185.410394][ T6794] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1185.460694][ T524] tipc: Resetting bearer [ 1185.474582][ T6794] usb 3-1: config 0 descriptor?? [ 1185.512524][ T518] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 1185.552329][ T518] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 1185.627936][ T6794] ldusb 3-1:0.55: LD USB Device #0 now attached to major 180 minor 0 [ 1185.642849][ T524] tipc: Disabling bearer [ 1186.103949][ T534] netlink: 8 bytes leftover after parsing attributes in process `syz.2.9846'. [ 1186.124756][ T534] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1186.146692][ T534] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1186.385738][ T518] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1186.473758][ T518] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1186.728256][ T6803] usb 3-1: USB disconnect, device number 94 [ 1186.777575][ T6803] ldusb 3-1:0.55: LD USB Device #0 now disconnected [ 1186.983894][ T1116] net_ratelimit: 56 callbacks suppressed [ 1186.983931][ T1116] bond1: (slave geneve1): failed to get link speed/duplex [ 1187.074302][ T1116] bond0: (slave ip6erspan0): failed to get link speed/duplex [ 1187.163694][ T1116] bond1: (slave geneve1): failed to get link speed/duplex [ 1187.232169][ T1116] bond0: (slave ip6erspan0): failed to get link speed/duplex [ 1187.264232][ T544] tipc: Enabled bearer , priority 0 [ 1187.323189][ T545] syzkaller0: entered promiscuous mode [ 1187.358951][ T4993] loop2: [ 1187.363438][ T545] syzkaller0: entered allmulticast mode [ 1187.380906][ T4993] loop2: partition table partially beyond EOD, truncated [ 1187.571935][ T550] tipc: Resetting bearer [ 1187.617405][ T543] tipc: Resetting bearer [ 1187.792970][ T543] tipc: Disabling bearer [ 1187.852894][T19461] bond1: (slave geneve1): failed to get link speed/duplex [ 1188.391674][T32293] bond0: (slave ip6erspan0): failed to get link speed/duplex [ 1188.536752][T32293] bond0: (slave ip6erspan0): failed to get link speed/duplex [ 1188.648524][T32293] bond1: (slave geneve1): failed to get link speed/duplex [ 1188.662646][ T4993] loop2: [ 1188.685315][ T4993] loop2: partition table partially beyond EOD, truncated [ 1188.732127][T19462] bond0: (slave ip6erspan0): failed to get link speed/duplex [ 1188.831444][ T142] bond1: (slave geneve1): failed to get link speed/duplex [ 1189.418310][ T4993] loop2: [ 1189.448905][ T4993] loop2: partition table partially beyond EOD, truncated [ 1189.527922][ T5687] usb 10-1: new high-speed USB device number 46 using dummy_hcd [ 1189.721474][ T5687] usb 10-1: Using ep0 maxpacket: 32 [ 1189.733660][ T5687] usb 10-1: config 4 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1189.748572][ T5687] usb 10-1: config 4 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1189.778466][ T5687] usb 10-1: New USB device found, idVendor=046d, idProduct=c314, bcdDevice= 0.40 [ 1189.789863][ T5687] usb 10-1: New USB device strings: Mfr=255, Product=255, SerialNumber=0 [ 1189.804797][ T583] tipc: Enabled bearer , priority 0 [ 1189.824464][ T5687] usb 10-1: Product: syz [ 1189.829377][ T5687] usb 10-1: Manufacturer: syz [ 1189.836157][ T585] syzkaller0: entered promiscuous mode [ 1189.867024][ T585] syzkaller0: entered allmulticast mode [ 1189.882857][ T5687] hub 10-1:4.0: USB hub found [ 1189.908623][ T587] syzkaller0: entered promiscuous mode [ 1189.918164][ T587] syzkaller0: entered allmulticast mode [ 1190.043990][ T584] tipc: Resetting bearer [ 1190.086551][ T581] tipc: Resetting bearer [ 1190.102115][ T809] usb 9-1: new high-speed USB device number 68 using dummy_hcd [ 1190.147131][ T5687] hub 10-1:4.0: 2 ports detected [ 1190.184039][ T581] tipc: Disabling bearer [ 1190.291564][ T809] usb 9-1: Using ep0 maxpacket: 16 [ 1190.299202][ T809] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1190.341692][ T809] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1190.396206][ T809] usb 9-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 1190.396881][ T4993] loop2: [ 1190.426176][ T4993] loop2: partition table partially beyond EOD, truncated [ 1190.446972][ T809] usb 9-1: New USB device found, idVendor=09da, idProduct=000a, bcdDevice= 0.00 [ 1190.481575][ T809] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1190.522823][ T809] usb 9-1: config 0 descriptor?? [ 1190.971335][ T30] audit: type=1326 audit(1777575710.853:2079): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=574 comm="syz.9.9859" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff1dc39cdd9 code=0x7ffc0000 [ 1191.021232][ T0] NOHZ tick-stop error: local softirq work is pending, handler #86!!! [ 1191.063607][ T30] audit: type=1326 audit(1777575710.853:2080): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=574 comm="syz.9.9859" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff1dc39cdd9 code=0x7ffc0000 [ 1191.191920][ T30] audit: type=1326 audit(1777575710.853:2081): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=574 comm="syz.9.9859" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7ff1dc39cdd9 code=0x7ffc0000 [ 1191.313213][ T30] audit: type=1326 audit(1777575710.853:2082): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=574 comm="syz.9.9859" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff1dc39cdd9 code=0x7ffc0000 [ 1191.351210][ T0] NOHZ tick-stop error: local softirq work is pending, handler #382!!! [ 1191.425022][ T30] audit: type=1326 audit(1777575710.853:2083): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=574 comm="syz.9.9859" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=187 compat=0 ip=0x7ff1dc39cdd9 code=0x7ffc0000 [ 1191.499583][ T5687] hub 10-1:4.0: activate --> -90 [ 1191.551397][ T30] audit: type=1326 audit(1777575710.853:2084): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=574 comm="syz.9.9859" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff1dc39cdd9 code=0x7ffc0000 [ 1191.581214][ T0] NOHZ tick-stop error: local softirq work is pending, handler #06!!! [ 1191.591239][ T0] NOHZ tick-stop error: local softirq work is pending, handler #186!!! [ 1191.679089][ T30] audit: type=1326 audit(1777575710.853:2085): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=574 comm="syz.9.9859" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff1dc39cdd9 code=0x7ffc0000 [ 1191.762326][ T30] audit: type=1326 audit(1777575710.913:2086): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=574 comm="syz.9.9859" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7ff1dc39ca6b code=0x7ffc0000 [ 1191.840517][ T30] audit: type=1326 audit(1777575710.913:2087): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=574 comm="syz.9.9859" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7ff1dc39ca6b code=0x7ffc0000 [ 1191.920101][ T6794] usb 10-1: USB disconnect, device number 46 [ 1191.978270][ T30] audit: type=1326 audit(1777575710.913:2088): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=574 comm="syz.9.9859" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7ff1dc35d60e code=0x7ffc0000 [ 1192.052203][T29025] net_ratelimit: 38 callbacks suppressed [ 1192.052222][T29025] bond0: (slave ip6erspan0): failed to get link speed/duplex [ 1192.103527][T29025] bond1: (slave geneve1): failed to get link speed/duplex [ 1192.203404][T29025] bond0: (slave ip6erspan0): failed to get link speed/duplex [ 1192.253866][T29025] bond1: (slave geneve1): failed to get link speed/duplex [ 1192.341927][ T1116] bond0: (slave ip6erspan0): failed to get link speed/duplex [ 1192.391453][ T1116] bond1: (slave geneve1): failed to get link speed/duplex [ 1192.493338][ T1116] bond0: (slave ip6erspan0): failed to get link speed/duplex [ 1192.524392][ T1116] bond1: (slave geneve1): failed to get link speed/duplex [ 1192.611385][T19462] bond0: (slave ip6erspan0): failed to get link speed/duplex [ 1192.641630][ T809] a4tech 0003:09DA:000A.0084: unknown main item tag 0x0 [ 1192.682257][T19462] bond1: (slave geneve1): failed to get link speed/duplex [ 1192.704057][ T809] a4tech 0003:09DA:000A.0084: unknown main item tag 0x0 [ 1192.735749][ T809] a4tech 0003:09DA:000A.0084: unknown main item tag 0x0 [ 1192.776620][ T809] a4tech 0003:09DA:000A.0084: unknown main item tag 0x0 [ 1192.778914][ T604] netlink: 8 bytes leftover after parsing attributes in process `syz.9.9867'. [ 1192.804711][ T604] netlink: 8 bytes leftover after parsing attributes in process `syz.9.9867'. [ 1192.827100][ T809] a4tech 0003:09DA:000A.0084: unknown main item tag 0x0 [ 1192.849209][ T809] a4tech 0003:09DA:000A.0084: unknown main item tag 0x0 [ 1192.885532][ T809] a4tech 0003:09DA:000A.0084: unknown main item tag 0x0 [ 1192.909711][ T809] a4tech 0003:09DA:000A.0084: unknown main item tag 0x0 [ 1192.933236][ T809] a4tech 0003:09DA:000A.0084: unknown main item tag 0x0 [ 1192.965892][ T809] a4tech 0003:09DA:000A.0084: unknown main item tag 0x0 [ 1193.008491][ T809] a4tech 0003:09DA:000A.0084: hidraw0: USB HID v0.00 Device [HID 09da:000a] on usb-dummy_hcd.8-1/input0 [ 1193.076846][ T809] usb 9-1: USB disconnect, device number 68 [ 1193.212131][ T37] ------------[ cut here ]------------ [ 1193.218487][ T37] time_after(jiffies, timeout) [ 1193.218520][ T37] WARNING: io_uring/io_uring.c:2352 at io_ring_exit_work+0x4c1/0x980, CPU#1: kworker/u8:3/37 [ 1193.235217][ T37] Modules linked in: [ 1193.239889][ T37] CPU: 1 UID: 0 PID: 37 Comm: kworker/u8:3 Tainted: G L syzkaller #0 PREEMPT(full) [ 1193.251748][ T37] Tainted: [L]=SOFTLOCKUP [ 1193.256407][ T37] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 1193.268497][ T37] Workqueue: iou_exit io_ring_exit_work [ 1193.274608][ T37] RIP: 0010:io_ring_exit_work+0x4c1/0x980 [ 1193.280686][ T37] Code: c6 05 15 84 ef 0e 01 48 c7 c7 00 4b 27 8c be 25 00 00 00 48 c7 c2 20 46 27 8c e8 9a ec 76 00 e9 7e fe ff ff e8 30 b0 9a 00 90 <0f> 0b 90 b8 70 17 00 00 48 89 44 24 10 eb 9a c7 84 24 b0 00 00 00 [ 1193.302440][ T37] RSP: 0018:ffffc90000ad7940 EFLAGS: 00010293 [ 1193.308889][ T37] RAX: ffffffff812afc00 RBX: 0000000100015c3b RCX: ffff88801e69bd80 [ 1193.317841][ T37] RDX: 0000000000000000 RSI: fffffffffffffffb RDI: 0000000000000000 [ 1193.326325][ T37] RBP: ffffc90000ad7ad0 R08: ffffc90000ad78c7 R09: 1ffff9200015af18 [ 1193.334945][ T37] R10: dffffc0000000000 R11: fffff5200015af19 R12: dffffc0000000000 [ 1193.343517][ T37] R13: 0000000100015c36 R14: 0000000000002000 R15: ffff888026f7e000 [ 1193.351956][ T37] FS: 0000000000000000(0000) GS:ffff888125390000(0000) knlGS:0000000000000000 [ 1193.361684][ T37] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 1193.368622][ T37] CR2: 00007ff4713f2b60 CR3: 0000000034674000 CR4: 00000000003526f0 [ 1193.377088][ T37] DR0: ffffffffffffffff DR1: 00000000000001f8 DR2: 0000000000000002 [ 1193.385507][ T37] DR3: ffffffffefffff15 DR6: 00000000ffff0ff0 DR7: 0000000000000400 [ 1193.394130][ T37] Call Trace: [ 1193.397592][ T37] [ 1193.400707][ T37] ? __pfx_io_ring_exit_work+0x10/0x10 [ 1193.406665][ T37] ? lock_acquire+0x221/0x350 [ 1193.411655][ T37] ? process_scheduled_works+0xa70/0x1860 [ 1193.417674][ T37] ? process_scheduled_works+0xa70/0x1860 [ 1193.424400][ T37] process_scheduled_works+0xb5d/0x1860 [ 1193.430330][ T37] ? __pfx_process_scheduled_works+0x10/0x10 [ 1193.436734][ T37] ? assign_work+0x3d5/0x5e0 [ 1193.441697][ T37] worker_thread+0xa53/0xfc0 [ 1193.446561][ T37] kthread+0x388/0x470 [ 1193.450879][ T37] ? __pfx_worker_thread+0x10/0x10 [ 1193.456508][ T37] ? __pfx_kthread+0x10/0x10 [ 1193.461456][ T37] ret_from_fork+0x514/0xb70 [ 1193.466352][ T37] ? __pfx_ret_from_fork+0x10/0x10 [ 1193.471796][ T37] ? __switch_to+0xc79/0x1410 [ 1193.476766][ T37] ? __pfx_kthread+0x10/0x10 [ 1193.481884][ T37] ret_from_fork_asm+0x1a/0x30 [ 1193.486924][ T37] [ 1193.490119][ T37] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 1193.497386][ T37] CPU: 1 UID: 0 PID: 37 Comm: kworker/u8:3 Tainted: G L syzkaller #0 PREEMPT(full) [ 1193.508220][ T37] Tainted: [L]=SOFTLOCKUP [ 1193.512526][ T37] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 1193.522563][ T37] Workqueue: iou_exit io_ring_exit_work [ 1193.528114][ T37] Call Trace: [ 1193.531380][ T37] [ 1193.534316][ T37] vpanic+0x56c/0xa60 [ 1193.538280][ T37] ? __pfx__printk+0x10/0x10 [ 1193.542860][ T37] ? __pfx_vpanic+0x10/0x10 [ 1193.547347][ T37] ? is_bpf_text_address+0x292/0x2b0 [ 1193.552614][ T37] ? is_bpf_text_address+0x26/0x2b0 [ 1193.557794][ T37] panic+0xc5/0xd0 [ 1193.561499][ T37] ? __pfx_panic+0x10/0x10 [ 1193.565901][ T37] ? ret_from_fork_asm+0x1a/0x30 [ 1193.570825][ T37] __warn+0x315/0x4c0 [ 1193.574791][ T37] ? io_ring_exit_work+0x4c1/0x980 [ 1193.579888][ T37] ? io_ring_exit_work+0x4c1/0x980 [ 1193.584982][ T37] __report_bug+0x29a/0x540 [ 1193.589480][ T37] ? __pfx___mutex_trylock_common+0x10/0x10 [ 1193.595361][ T37] ? io_ring_exit_work+0x4c1/0x980 [ 1193.600474][ T37] ? __pfx___report_bug+0x10/0x10 [ 1193.605581][ T37] ? lockdep_hardirqs_on+0x7a/0x110 [ 1193.610803][ T37] ? irqentry_exit+0x218/0x730 [ 1193.615563][ T37] ? trace_irq_disable+0x3b/0x140 [ 1193.620603][ T37] ? io_ring_exit_work+0x4c3/0x980 [ 1193.625715][ T37] ? io_ring_exit_work+0x4c1/0x980 [ 1193.630815][ T37] report_bug+0x16a/0x220 [ 1193.635134][ T37] ? io_ring_exit_work+0x4c1/0x980 [ 1193.640228][ T37] ? io_ring_exit_work+0x4c3/0x980 [ 1193.645328][ T37] handle_bug+0x9c/0x200 [ 1193.649649][ T37] exc_invalid_op+0x1a/0x50 [ 1193.654135][ T37] asm_exc_invalid_op+0x1a/0x20 [ 1193.658989][ T37] RIP: 0010:io_ring_exit_work+0x4c1/0x980 [ 1193.664692][ T37] Code: c6 05 15 84 ef 0e 01 48 c7 c7 00 4b 27 8c be 25 00 00 00 48 c7 c2 20 46 27 8c e8 9a ec 76 00 e9 7e fe ff ff e8 30 b0 9a 00 90 <0f> 0b 90 b8 70 17 00 00 48 89 44 24 10 eb 9a c7 84 24 b0 00 00 00 [ 1193.684409][ T37] RSP: 0018:ffffc90000ad7940 EFLAGS: 00010293 [ 1193.690474][ T37] RAX: ffffffff812afc00 RBX: 0000000100015c3b RCX: ffff88801e69bd80 [ 1193.698439][ T37] RDX: 0000000000000000 RSI: fffffffffffffffb RDI: 0000000000000000 [ 1193.706394][ T37] RBP: ffffc90000ad7ad0 R08: ffffc90000ad78c7 R09: 1ffff9200015af18 [ 1193.714347][ T37] R10: dffffc0000000000 R11: fffff5200015af19 R12: dffffc0000000000 [ 1193.722301][ T37] R13: 0000000100015c36 R14: 0000000000002000 R15: ffff888026f7e000 [ 1193.730258][ T37] ? io_ring_exit_work+0x4c0/0x980 [ 1193.735364][ T37] ? __pfx_io_ring_exit_work+0x10/0x10 [ 1193.740896][ T37] ? lock_acquire+0x221/0x350 [ 1193.745559][ T37] ? process_scheduled_works+0xa70/0x1860 [ 1193.751301][ T37] ? process_scheduled_works+0xa70/0x1860 [ 1193.757087][ T37] process_scheduled_works+0xb5d/0x1860 [ 1193.762634][ T37] ? __pfx_process_scheduled_works+0x10/0x10 [ 1193.768602][ T37] ? assign_work+0x3d5/0x5e0 [ 1193.773178][ T37] worker_thread+0xa53/0xfc0 [ 1193.777762][ T37] kthread+0x388/0x470 [ 1193.781812][ T37] ? __pfx_worker_thread+0x10/0x10 [ 1193.786901][ T37] ? __pfx_kthread+0x10/0x10 [ 1193.791476][ T37] ret_from_fork+0x514/0xb70 [ 1193.796051][ T37] ? __pfx_ret_from_fork+0x10/0x10 [ 1193.801142][ T37] ? __switch_to+0xc79/0x1410 [ 1193.805810][ T37] ? __pfx_kthread+0x10/0x10 [ 1193.810394][ T37] ret_from_fork_asm+0x1a/0x30 [ 1193.815151][ T37] [ 1193.818678][ T37] Kernel Offset: disabled [ 1193.822992][ T37] Rebooting in 86400 seconds..