last executing test programs: 12.417545018s ago: executing program 0 (id=472): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e24}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000640)=[{{0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000140)="75f19cba63258792f179dc57be9aa6d41ade8f9e2bbf3ee44d32173d3465d551827e7f160a5974cbc5de4839f6f828753d1f06da8bf0263768a61a5e9af0c9470bbdb880372ecec712f0a35467e6770f03ff69931bb8f57ad3856ebe82ec44f055b2e3f0ac04", 0x66}], 0x1, &(0x7f0000000580)=ANY=[@ANYBLOB="1c000000000000000100000002000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="0000000034000000000000000100000001000000", @ANYRES32=r2, @ANYRES32=r1, @ANYRES32=r2, @ANYRES32=r1, @ANYRES32=r2, @ANYRES32=r0, @ANYRES32=r0, @ANYRES32=r1, @ANYRES32=r0, @ANYBLOB="0000000018000000000000000100000001000000", @ANYRES32, @ANYRES32=r1, @ANYBLOB='\x00\x00\x00\x00\x00\x00', @ANYRES32=r0, @ANYBLOB="0000000030000000000000000100000001000000", @ANYRES32=r1, @ANYRES32=r1, @ANYRES32=r1, @ANYRES32=r1, @ANYRES32=r2, @ANYRES32=r2, @ANYRES32=r0, @ANYRES32=r2], 0xb8, 0x4}}], 0x1, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x0, 0x22, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0xc, 0xa, 0x0, 0x9, 0x50, 0xc, 0x2fa11, 0x401}, 0x0) setsockopt$XDP_TX_RING(0xffffffffffffffff, 0x11b, 0x20, 0x0, 0x0) r3 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) setpgid(r3, 0x0) tkill(r3, 0x7) tkill(r3, 0x27) getrandom(&(0x7f0000000240)=""/286, 0xffffff9a, 0x0) openat$binfmt(0xffffffffffffff9c, 0x0, 0x41, 0x1ff) r4 = syz_create_resource$binfmt(&(0x7f0000000100)='./file1\x00') r5 = syz_create_resource$binfmt(&(0x7f0000000040)='./file1\x00') r6 = openat$binfmt(0xffffffffffffff9c, r5, 0x42, 0x1ff) close(r6) execveat$binfmt(0xffffffffffffff9c, r4, 0x0, &(0x7f0000004780)={[], 0xf000}, 0x1000) 10.508149745s ago: executing program 0 (id=476): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000080)=@newtfilter={0x24, 0x2c, 0x20, 0x70bd27, 0x25dfdbfd, {0x0, 0x0, 0x0, 0x0, {0xfff3, 0xfff3}, {0x0, 0xfff3}, {0x2, 0xa}}}, 0x24}, 0x1, 0x0, 0x0, 0x20041090}, 0x40890) r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000002c0), 0x2, 0x0) ioctl$VHOST_SET_OWNER(r0, 0xaf01, 0x0) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000300)={0x1, 0x0, 0x0, &(0x7f0000000480)=""/74, 0x0}) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000000400)) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000280)={0x0, 0x0, 0x0, &(0x7f0000000340)=""/185, 0x0}) ioctl$VHOST_VSOCK_SET_RUNNING(r0, 0x4004af61, &(0x7f00000000c0)=0x1) syz_open_dev$sg(&(0x7f0000000080), 0x6f5e, 0x1) ioctl$VHOST_VSOCK_SET_GUEST_CID(r0, 0x4008af60, &(0x7f0000001500)={@my=0x1}) sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="640000000001010400000000141a000002000000240001801400018008000100e000000108000200e00000010c00028005000100000000002400028014000180080001"], 0x64}}, 0x40110) r1 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r1, &(0x7f0000000200)={0x28, 0x0, 0xffffffff, @my=0x1}, 0x10) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000080)=""/57, 0x0, &(0x7f0000001540)=""/4092}) r2 = eventfd(0xf7b2) ioctl$VHOST_SET_VRING_ERR(r0, 0x4008af22, &(0x7f0000000040)={0x0, r2}) ioctl$VHOST_VSOCK_SET_RUNNING(r0, 0x4004af61, &(0x7f0000000000)=0x1) 10.418330733s ago: executing program 2 (id=477): syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f00000002c0)={'wlan1\x00'}) r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000000)={0x28, 0x2f, 0x9, 0x70bd27, 0x25dfdbfb, {0x4}, [@typed={0x11, 0x16, 0x0, 0x0, @str='&*(-^/[#\\.\xa5%\x00'}]}, 0x28}, 0x1, 0x0, 0x0, 0x42014}, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) r3 = syz_open_dev$sndpcmp(&(0x7f0000000240), 0x1, 0x0) ioctl$SNDRV_PCM_IOCTL_STATUS64(r3, 0x80804120, &(0x7f0000001780)) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg(r2, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x0, 0x0, 0x0, 0x0, 0xb49, 0x9, 0xfffffffffffffff7, 0x0, 0x3e}, 0x0) socket$inet6_sctp(0xa, 0x801, 0x84) r4 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) ioctl$SNDCTL_DSP_SPEED(r4, 0xc0045002, &(0x7f00000001c0)) ioctl$BINDER_SET_CONTEXT_MGR_EXT(0xffffffffffffffff, 0x4018620d, &(0x7f0000000080)={0x73622a85, 0x100}) ioctl$SNDCTL_DSP_SUBDIVIDE(r4, 0xc0045009, &(0x7f0000000140)=0xffff) timer_settime(0x0, 0x0, &(0x7f0000000340)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) 9.38556007s ago: executing program 0 (id=478): r0 = socket$inet6_mptcp(0xa, 0x1, 0x106) connect$inet6(r0, &(0x7f0000000180)={0xa, 0x4001, 0xfffffffd, @dev={0xfe, 0x80, '\x00', 0x39}, 0x3d}, 0x1c) pipe2$9p(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) ioctl$RTC_AIE_ON(0xffffffffffffffff, 0x7001) ioctl$RTC_AIE_OFF(0xffffffffffffffff, 0x7002) setitimer(0xc3d0181c873aaa3f, 0x0, 0x0) r2 = syz_usb_connect$hid(0x0, 0x3f, &(0x7f0000000040)={{0x12, 0x1, 0x1, 0x0, 0x0, 0x0, 0x20, 0x6a3, 0xcfa, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x2d, 0x1, 0x0, 0x0, 0x0, 0x18, "", [{{0x9, 0x4, 0x0, 0x0, 0xff, 0x3, 0x0, 0x1, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x6}}, {{{0x9, 0x5, 0x81, 0x3, 0x10, 0x0, 0xf, 0xf3}}, [{{0x9, 0x5, 0x2, 0x3, 0x60, 0x6a, 0x9, 0xd}}]}}}]}}]}}, 0x0) syz_usb_control_io$hid(r2, 0x0, 0x0) syz_usb_control_io(r2, &(0x7f0000000140)={0x2c, &(0x7f0000000180)={0x0, 0x23, 0xf2, {0xf2, 0xd, "7e83a67411af234e792222803bdcf1cd64b26b900000000000f2e90730b0a06f47bc057f82fed4adbad1c58924dfa9542f997d231797b4a5f56e4f326131ab6753971c0cf9cf0e103e5b5a59a694f4efbec427e4c2a150f3cd3627bdc325b1095c204077490a6429aa555a710fb35b513b5a59ff646986f378fe4c3a2a1a059228be529ebb6d3972a16c3472ce3e3d35837b1083e3f0f19a6e720e664416dca69ff2ef166e764b0e000000000000000000000000000000000568e2051be39d095671fb038974d10ac6e9fb562f223a1dc9968a8c4b44f7f53e89a88cb3758096d3d89fd902cdf4f6858739f9a940cf9b"}}, 0x0, 0x0, 0x0, 0x0}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000540)=@delchain={0x24, 0x66, 0xf31, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {0x9, 0xffe0}, {0x10, 0x2}, {0xffe0}}}, 0x24}}, 0x0) r4 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000040)={'bond0\x00', 0x0}) r6 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r6, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000300)=@newqdisc={0x88, 0x24, 0xf0b, 0x70bd26, 0x2, {0x0, 0x0, 0x0, r5, {0x0, 0xffff}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_mqprio={{0xb}, {0x58, 0x2, {{0x1, [], 0x0, [0x1, 0x2, 0xfffe, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x5c4, 0x8000, 0x0, 0x0, 0x3dc], [0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000]}}}}]}, 0x88}}, 0x20000000) sendmsg$nl_route_sched(r6, &(0x7f00000012c0)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000240)=@newqdisc={0x4c, 0x24, 0x4ee4e6a52ff56541, 0x70bd2e, 0xfffbffff, {0x0, 0x0, 0x0, r5, {0x0, 0x8}, {0xffff, 0xffff}, {0x8, 0xfff3}}, [@qdisc_kind_options=@q_taprio={{0xb}, {0x1c, 0x2, [@TCA_TAPRIO_ATTR_SCHED_ENTRY_LIST={0x10, 0x2, 0x0, 0x1, [{0xc, 0x1, 0x0, 0x1, [@TCA_TAPRIO_SCHED_ENTRY_INTERVAL={0x8, 0x4, 0xff}]}]}, @TCA_TAPRIO_ATTR_FLAGS={0x8, 0xa, 0x2}]}}]}, 0xfec1}, 0x1, 0x0, 0x0, 0x40001}, 0x4040010) getsockopt$TIPC_SOCK_RECVQ_DEPTH(r6, 0x10f, 0x84, &(0x7f0000000080), &(0x7f00000000c0)=0x4) sendmsg$nl_route(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000002340)=ANY=[@ANYBLOB="44000000100001002abd7000fcdbdf25000000", @ANYRES32=0x0, @ANYBLOB="8111000000000000140003006272696467655f736c6176655f30000008000400d400000008000a00", @ANYRES64=r3], 0x44}}, 0x0) splice(r0, 0x0, r1, 0x0, 0x7ffff000, 0xd) 8.744118548s ago: executing program 3 (id=481): pipe2$9p(&(0x7f0000000080), 0x0) socket$inet_udp(0x2, 0x2, 0x0) socket$inet(0x2, 0x3, 0x2) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)) socket$inet_icmp_raw(0x2, 0x3, 0x1) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000006c0)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r1, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x4004000) recvmsg$unix(r0, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000080), 0x100}, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) socket$inet6_tcp(0xa, 0x1, 0x0) sendmsg$inet(r3, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0) recvmsg$unix(r2, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000840)=[@cred={{0x1c}}, @rights={{0x44, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x2c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x34, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}, @cred={{0x1c}}], 0x108}, 0x0) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000680), 0x180000, 0x0) r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) r6 = ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r5, 0x4020ae46, &(0x7f0000000040)={0x3, 0x2, 0x3000, 0x1000, &(0x7f0000feb000/0x1000)=nil}) bpf$PROG_LOAD(0x5, &(0x7f0000000140)={0xa, 0x4, &(0x7f0000000080)=ANY=[@ANYBLOB="7b87f20f", @ANYRES64=r6], &(0x7f00000000c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x94) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) syz_kvm_setup_cpu$x86(r5, r6, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, 0x0}], 0x1, 0x4, 0x0, 0x0) ioctl$KVM_RUN(r6, 0xae80, 0x0) 7.837212716s ago: executing program 3 (id=483): ioctl$EXT4_IOC_GETFSUUID(0xffffffffffffffff, 0x8008662c, &(0x7f0000000300)) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000280)=@newlink={0x48, 0x10, 0xffffff1f, 0x0, 0x1, {0x0, 0x0, 0x0, 0x0, 0x0, 0x450a}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @geneve={{0xb}, {0x18, 0x2, 0x0, 0x1, [@IFLA_GENEVE_REMOTE6={0x14, 0x7, @mcast1}]}}}]}, 0x48}, 0x1, 0x0, 0x0, 0x40000}, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x401) ioctl$SG_IO(r1, 0x2285, &(0x7f0000000380)={0x53, 0xfffffffffffffffd, 0x8e, 0x4, @buffer={0x0, 0x0, 0x0}, &(0x7f0000000440)="bf1891bc8ea3307253874a6150f8329c499c34d666e26f42e4475811261c48abf625c9412165f0174c39668d1939e3787f8e3b34e5ab7e1465d58859c73e030d8b9209486972b9c82d64f7269dc02a8ae26cbdeb739c130bf99d4fede1502a4b3bc72b1cefc705abf8fbed3ea56a4cae83c3527daaad85ce20046a9c11bc091e13b9e1acda251b41e4fa424d97b3", 0x0, 0x1000001, 0x10011, 0x200, 0x0}) sendmsg$NFT_BATCH(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) r2 = syz_genetlink_get_family_id$tipc(&(0x7f0000000500), 0xffffffffffffffff) sendmsg$TIPC_CMD_SET_NETID(0xffffffffffffffff, &(0x7f00000005c0)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000580)={&(0x7f0000000540)={0x24, r2, 0xc7306ce7156a3157, 0x70bd2b, 0x25dfdbfc, {{}, {}, {0x8, 0x2, 0x240}}, [""]}, 0x24}, 0x1, 0x0, 0x0, 0x4000020}, 0x20000001) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)=ANY=[@ANYBLOB="140000001000010000070000000000000000000a40000000160a05000000000000000000020000000900010073797a300000000014000380080001400000000008000240000000030900020073797a300000000014000000110001"], 0x68}}, 0x20000800) sendmsg$NFT_BATCH(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000900)=ANY=[@ANYBLOB="14000000100001004e4854368bde00000000000000000000000a48000000160a01080000000000000000020000010900020073797a30000000000900010073797a30000000001c00038018001a801400010067656e6576653000000000000000000014000000160a01080000007c6cc8519fc1ac880000000000000000041400000011005c43cfef87be76dfdb7c3c41c9fc753aad5898478d7f176c29158c5ec2e2ecc538251e204d0c4a169b5c8f536c27d23f77fa1ab4711c00709b6f1ab05c432c95809304dd4f4e668261a814dd988780f981b5d8c25fa749ba6461a15563cb80560d10fc9bb345a07aac10015e259cd8e32b40b17ad986bb2c1c509497cc8bb420267dfc78d8bfe6b3cace9d77e2b61d70ca79f4329ed408005c75572899b48aee653fafa9e2225dd4df7f0c304a6cfeba60d00d6068aac3e68f2604"], 0x84}}, 0x24040884) syz_open_procfs(0x0, &(0x7f0000000100)='syscall\x00') r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket(0x1, 0x803, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000780)=@newlink={0x3c, 0x10, 0x401, 0x70bd2d, 0x0, {0x0, 0x0, 0x0, 0x0, 0x2400, 0x4100}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @batadv={{0xb}, {0x4}}}, @IFLA_MASTER={0x8, 0x3, r5}]}, 0x3c}}, 0x4000000) keyctl$KEYCTL_WATCH_KEY(0x20, 0x0, 0xffffffffffffffff, 0x3d) pipe2$watch_queue(&(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) keyctl$KEYCTL_WATCH_KEY(0x20, 0x0, r6, 0x0) r7 = syz_open_dev$dvb_demux(&(0x7f0000000400), 0x0, 0x700) ioctl$DVB_DEMUX_DMX_SET_PES_FILTER(r7, 0x40146f2c, &(0x7f0000000000)={0xefb8, 0x1, 0x2, 0x3, 0x4}) 6.926165471s ago: executing program 3 (id=484): r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000002c0)=@newqdisc={0x34, 0x24, 0x4ee4e6a52ff56541, 0x70bd27, 0xffffffff, {0x0, 0x0, 0x0, r3, {0x0, 0xfff1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_cake={{0x9}, {0x4}}]}, 0x34}}, 0x20040084) r4 = openat$tun(0xffffffffffffff9c, &(0x7f00000004c0), 0x0, 0x0) close(r4) socket$unix(0x1, 0x2, 0x0) ioctl$SIOCSIFHWADDR(r4, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x1}}) r5 = socket(0x400000000010, 0x3, 0x0) r6 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r5, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000022c0)=@newtfilter={0xe8c, 0x2c, 0xd27, 0x30bd29, 0x25dfdc00, {0x0, 0x0, 0x0, r7, {0x1, 0x4}, {}, {0x8, 0xffe0}}, [@filter_kind_options=@f_matchall={{0xd}, {0xe58, 0x2, [@TCA_MATCHALL_ACT={0xe54, 0x2, [@m_pedit={0xe50, 0x1, 0x0, 0x0, {{0xa}, {0xe24, 0x2, 0x0, 0x1, [@TCA_PEDIT_PARMS={0xe20, 0x2, {{{0x2, 0x9, 0x5, 0x6}, 0x1, 0xfb}, [{0x2, 0x9c, 0x84, 0x3, 0x2, 0x7}, {0x1, 0x6, 0x4, 0x3, 0xfffffffd, 0x81}, {0x1, 0x1, 0x8, 0x101, 0x3}, {0x3, 0x3, 0x0, 0x7, 0x5, 0x4}, {0xf, 0x7, 0x694, 0x51, 0x8001}, {0x3, 0x8004, 0xc, 0x101, 0x3, 0x84b5}, {0x9c, 0x4, 0x9, 0x2, 0x487, 0x8}, {0x1, 0x10000, 0x5, 0x4, 0x3, 0x8000}, {0x7, 0x9, 0x1ff, 0x8, 0x2, 0x7fff}, {0x439356e7, 0x609, 0x16, 0xfffffffc, 0x10000, 0x6}, {0x5, 0x3, 0x8, 0x3, 0x400000, 0xffffffff}, {0x685, 0x0, 0x7, 0x7, 0x8, 0x5}, {0x5, 0x8, 0x9, 0x5, 0xfffff000, 0x7}, {0x768d, 0x7ff, 0x8, 0x7, 0x5, 0x9}, {0x1, 0xfffffffb, 0x6, 0x7, 0x7ff, 0x6}, {0xfffffffb, 0x3, 0xfffffffa, 0x6, 0x2}, {0xfffff9fd, 0x9, 0xa5f, 0xa, 0x5, 0x2}, {0x6, 0x9, 0x167, 0x2, 0x71, 0xa2}, {0x140, 0x2, 0xc, 0x8, 0x87, 0x60}, {0x5, 0xa, 0x2, 0x4, 0x3, 0x2000}, {0x32d, 0x8, 0x7fff, 0x4, 0x8, 0x6}, {0x8, 0x200, 0x58fe, 0x7ff, 0x4, 0x3}, {0x101, 0xd, 0x101, 0x1, 0x3, 0x8}, {0x0, 0x3, 0x1ff, 0x7437ec78, 0x2, 0x9}, {0xffffffff, 0x1, 0x9, 0x0, 0x1, 0x4}, {0xc, 0xe, 0x0, 0x3, 0x8, 0x81}, {0x3, 0x3, 0x6, 0xe, 0x0, 0x80}, {0xd, 0x0, 0x7ff, 0x0, 0x80000000, 0x2}, {0x4, 0xb, 0x7c5f1878, 0x57c4, 0x8, 0x25ff}, {0x4, 0xd, 0x1fadd976, 0x3071, 0x0, 0x1}, {0x5, 0x800, 0x3, 0x3, 0x6, 0x9}, {0x9, 0x1ff, 0x1000, 0x9c, 0x1, 0x7}, {0x9, 0xd76, 0x6, 0xdc2, 0xa16a, 0x2}, {0x1ff, 0x5, 0x7, 0x2, 0x2, 0x1}, {0x1, 0x32158142, 0x0, 0x8, 0x6, 0x7}, {0xe, 0x4, 0x9000, 0x2, 0x2, 0x7f}, {0x3, 0x2ec74d53, 0x0, 0x0, 0x8, 0x2}, {0x5, 0xfff, 0xffffff13, 0x9, 0x6, 0x6}, {0x1, 0x6, 0x3, 0x4, 0xffb, 0xc}, {0x6, 0x6, 0x1ff, 0x8, 0x7ff, 0x8001}, {0x4, 0xffffffff, 0x0, 0xfffff740, 0x4, 0x4}, {0xffff, 0x5, 0x7, 0xac, 0xf}, {0x80, 0x3, 0x6, 0x1000, 0xd8fe, 0x8001}, {0xd, 0x3, 0x80000000, 0x0, 0xffffff81, 0x7ff}, {0xfffffffb, 0x2, 0x1ff, 0xf9, 0xffff8001, 0x800000}, {0x0, 0x6, 0x7ffc, 0x9, 0x500, 0x7}, {0x1, 0xffffffff, 0x834, 0x7, 0x0, 0x3}, {0x7fff, 0x6, 0x0, 0x2002, 0x2, 0x8}, {0xf61, 0x101, 0x9, 0x2, 0x80000000, 0x7fff}, {0xc7, 0x4, 0x8, 0x2, 0xffff, 0x20000000}, {0x0, 0x5, 0x1, 0xffff, 0x3, 0x3}, {0x8, 0x10001, 0x9f98, 0x1, 0x8, 0x66a}, {0xfff, 0x6, 0x8, 0x80000001, 0x0, 0x7f}, {0xefa, 0x6, 0x7f, 0x2, 0x0, 0xb}, {0x4, 0x4b, 0x0, 0x1, 0x7f, 0x7fffffff}, {0xfff, 0x47e4, 0x1, 0x0, 0x80000001, 0x9}, {0x3, 0x9, 0x7, 0x6, 0x3e6b7592, 0x5}, {0x9, 0x9, 0x1, 0x9, 0x0, 0x2}, {0x8, 0x80000001, 0x7fff, 0xb2d9, 0xfffffffe, 0x8}, {0x80000001, 0x9, 0x5202, 0x2, 0x53d2, 0x3}, {0x6, 0x7, 0x8, 0x8, 0x7f, 0x80000000}, {0xfffffff9, 0x9, 0x6, 0x6, 0x9, 0x83}, {0xfffffffd, 0x8, 0x6, 0x5, 0x7fffffff, 0x8f}, {0x741, 0x0, 0x9, 0x7fffffff, 0x0, 0x200}, {0x401, 0x2, 0x8, 0x4, 0x4, 0xc6e9}, {0x1, 0x2d73, 0x400, 0x5, 0x9f17, 0xffffff7f}, {0x2, 0x8401, 0x2b00, 0xfffff57b, 0xfffffc00, 0xd}, {0x3, 0x4, 0xc52b, 0x9, 0x5, 0xff}, {0x0, 0x4, 0x401, 0x0, 0x1, 0x9}, {0x8, 0x4, 0x1, 0x2, 0x10, 0x1}, {0xff, 0x8, 0x8, 0x5, 0x8}, {0x2, 0xb15ce2d, 0x80000001, 0xbeab, 0x8, 0x5}, {0x3, 0x8, 0x3, 0x7, 0x8, 0x4}, {0xfff, 0x9, 0x6, 0x3, 0x100, 0x57}, {0x9, 0x5, 0x4, 0x3, 0xa, 0x2}, {0xb3, 0x2000000e, 0x3, 0x7e8, 0x7, 0x9}, {0x400000ff, 0x7, 0x5, 0x7, 0x6, 0x6}, {0xa, 0x8f, 0x9, 0xffffff46, 0x84, 0x80000000}, {0x9, 0x2, 0xfffffffc, 0x0, 0xd50, 0x3}, {0xd203, 0x7, 0x1, 0x10000, 0x43, 0x1ff}, {0x4, 0x3ff, 0xffffffff, 0x1, 0x5, 0x100}, {0x1ff, 0x3, 0x7ff, 0xfffffff8, 0x1ff, 0x9}, {0x7, 0xd, 0x3ff, 0x1, 0x7, 0x4}, {0x0, 0x6, 0x0, 0x9, 0xffff0001, 0xcca}, {0x7, 0x1, 0xfffffff1, 0x3ff, 0x100, 0x4}, {0x3, 0x9, 0x0, 0xed4, 0x4, 0x6}, {0x9, 0x7, 0x8001, 0x7, 0x7, 0x2}, {0x3, 0xfff, 0x9, 0x5, 0xb5, 0x3}, {0x0, 0x1, 0x1, 0x5, 0xffffff01, 0xfff}, {0x7, 0x5, 0x2, 0x2, 0x0, 0xfffff9de}, {0x5, 0xffffffff, 0xe6b, 0xb, 0xb, 0x4}, {0x1d, 0xffffff10, 0x1, 0x2, 0xff, 0x52e2}, {0x0, 0x1, 0x0, 0x7, 0xdb, 0x5}, {0x7, 0x2, 0x9, 0x8, 0x7f, 0x100}, {0x81, 0x4, 0x988, 0x3, 0x0, 0x7}, {0xdc03, 0x7, 0x402c, 0x8, 0xfffffff9, 0x4}, {0xa, 0xfffffffe, 0x1, 0x1ff, 0x1ff, 0xc1b7}, {0xa24b, 0x947d, 0x40, 0x4, 0x9, 0x2}, {0x9, 0x401, 0xa89, 0x5ef, 0x9, 0x8}, {0x4, 0x7fff, 0x0, 0x4, 0x7fffffff}, {0x3, 0xb8c, 0x6, 0x21761f6a, 0xfffffffe, 0x4}, {0xfff, 0xda, 0x1f, 0x4, 0x8, 0x5}, {0x8, 0x10, 0x100, 0x0, 0xfffffff7, 0x43}, {0xfffff000, 0x8, 0xe98, 0x9, 0x9, 0x34b0}, {0x4, 0x8, 0x8, 0x3, 0x6cf4, 0x2}, {0x3, 0x3, 0x5, 0x4, 0xbe, 0x81}, {0x4, 0x800, 0x0, 0x5, 0x8, 0xfa2f}, {0x10, 0x5e20, 0x81, 0x2, 0x8, 0x6}, {0x9, 0x6, 0x6, 0x4, 0xf, 0x5}, {0x100, 0x1, 0xffffffff, 0xffffffff, 0x9, 0x74}, {0x4, 0x4, 0x8, 0x1, 0x0, 0x3}, {0xfffffff8, 0xfffffffb, 0xffffffff, 0x62f, 0x401, 0x30564e0}, {0x9a2f, 0x800, 0x8, 0x1, 0x7}, {0x20000002, 0x2, 0x800, 0x200, 0x9, 0x3}, {0x7, 0x6, 0x8936, 0xdcb, 0x0, 0x2}, {0x6, 0x80000000, 0x8, 0xe, 0xfffffffa, 0x8de3}, {0x0, 0x9, 0x8, 0xfff, 0x6, 0x1ff}, {0x8195, 0x2, 0x1000}, {0x1, 0x50, 0xff, 0x9e0f, 0x5, 0x6}, {0x7fff, 0x6, 0x2, 0x5, 0x8000, 0x3}, {0x7ff, 0x9, 0xa, 0x6, 0x7, 0xe77}, {0x1, 0x5e12, 0x3, 0xfffffffa, 0x2, 0x80000001}, {0xffffff8c, 0x2, 0x1, 0x1, 0x4, 0x5}, {0x4, 0x7, 0x104, 0x78d, 0xffffcff9, 0x9}, {0x2001, 0xe, 0x7, 0x2, 0x2, 0x207f}, {0x10, 0x5, 0xfffffffa, 0xff, 0x80000, 0xfff}, {0x1, 0x7ff, 0x696e, 0xa, 0x49d, 0xb}, {0x9bf4, 0x0, 0x5, 0x3, 0x3, 0x1000}], [{0x1, 0x1}, {0x2}, {0x5}, {0x2}, {0x1, 0x745e81639ff0f356}, {0x4}, {0x5}, {0x3}, {0x3}, {0x2}, {0x3}, {0x4}, {0x0, 0x1}, {0x2}, {0x2}, {}, {0x3}, {0x0, 0x1}, {0x0, 0x1}, {0x5}, {0x3, 0x1}, {0x1}, {0x2, 0x1}, {0x2}, {0x3, 0x1}, {0x2}, {0x3}, {0x2}, {0x1, 0x1}, {0x1}, {0x1, 0x1}, {0x5}, {0x4}, {0x5, 0x1}, {0x5, 0x1}, {}, {0x4, 0x1}, {0x2, 0x1}, {0x4, 0x1}, {0x1, 0x1}, {0x5}, {0xa}, {0x3, 0x1}, {0x5}, {0x2, 0x1}, {0x3}, {0x4, 0x1}, {0x2, 0x1}, {0x0, 0x1}, {0x0, 0x1}, {0x2}, {0x4}, {0x4, 0x1}, {0x4}, {0x4}, {0x2, 0x1}, {0x2, 0x1}, {0x5}, {0x4, 0x1}, {0x1}, {0x4}, {0x0, 0x1}, {0x2}, {0x1, 0x1}, {0x3, 0x1}, {0x5}, {0x3, 0x1}, {0x1, 0x1}, {0x5, 0x1}, {0x0, 0x1}, {0x2, 0x1}, {0x3, 0x1}, {0x0, 0x1}, {0x0, 0x1}, {0x3}, {0x6}, {0xa}, {0x2, 0x1}, {}, {0x1, 0x1}, {0x1}, {0x4, 0x1}, {0x5}, {0x3}, {0x3, 0x1}, {0x4}, {0x2, 0x1}, {0x5}, {0x6}, {0x2}, {0xb82e57098c7a44ef}, {0x3, 0x1}, {0x1}, {0x0, 0x1}, {0x4}, {0x1, 0x1}, {0x1}, {0x0, 0x1}, {0x4}, {0x4}, {0x0, 0x1}, {0x2}, {0x4, 0x1}, {0x1}, {0x1, 0x1}, {0x2}, {0x5}, {0x1, 0x1}, {}, {0x4, 0x1}, {0x3}, {0x3}, {0x1}, {0x5}, {0x3, 0x1}, {0x4}, {0x4, 0x1}, {0x0, 0x1}, {0x4}, {0x4, 0x1}, {0x1}, {0x5, 0x1}, {0x4}, {0x0, 0x1}, {0x3}, {0x1}, {0x0, 0x1}, {0x4}], 0x1}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x1}}}}]}]}}]}, 0xe8c}, 0x1, 0x0, 0x0, 0x10}, 0x0) r8 = socket$kcm(0x11, 0x3, 0x0) r9 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) setsockopt$sock_attach_bpf(r8, 0x107, 0xf, &(0x7f0000000600), 0x56) sendmsg$kcm(r8, &(0x7f00000000c0)={&(0x7f0000000580)=@xdp={0x2c, 0x0, r10, 0x3e}, 0x80, &(0x7f0000000080)=[{&(0x7f0000000180)="27030200590214120600002fb96dbcf706e10500000086ddffff1144ee1611d4b8bf4a31accb", 0xfdef}], 0x1}, 0x0) 6.49561128s ago: executing program 2 (id=487): r0 = syz_ublk_setup_io_uring(0x20, &(0x7f0000000040)={0x0, 0x6, 0x1000, 0x1, 0x1ba}, 0x0, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f0000000300)=@file={0x0, './file1\x00'}, 0x6e) sendmmsg$unix(r4, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) syz_ublk_setup_io_uring(0x1a3b, &(0x7f0000000540)={0x0, 0xbe8, 0x800, 0x3, 0x2af, 0x0, r0}, &(0x7f00000005c0), &(0x7f0000000600), &(0x7f0000000640)) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x3, 0x0, 0x1, 0x0, 0xb47, 0x9, 0x0, 0x80000001, 0x3}, 0x0) syz_ublk_add_dev(r0, 0x0, r1, r2, &(0x7f0000000180)={0x2e, 0x0, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f00000000c0)=@any_dev={0x1, 0xe50, 0x0, 0x0, 0x1000, 0x2000003, 0x0, 0x0, 0x16}}}, &(0x7f0000000280)) r5 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r5, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4008}, 0x4000000) ioctl$DRM_IOCTL_MODE_GETCRTC(0xffffffffffffffff, 0xc06864a1, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, 0x0, 0x0, 0x27, 0x0, 0x0) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000480)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000004c0)=@updpolicy={0xf8, 0x19, 0x1, 0x0, 0x0, {{@in6=@rand_addr=' \x01\x00', @in=@dev={0xac, 0x14, 0x14, 0x15}, 0x0, 0x5, 0x0, 0x3, 0xa, 0xa0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, {0x0, 0xac, 0xfff, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x7fffffff, 0x10000}, {0x2, 0xa00, 0x40800000000000, 0x800000000000000}, 0x0, 0x0, 0x1, 0x0, 0x0, 0x3}, [@tmpl={0x44, 0x5, [{{@in=@empty, 0x4d2, 0x3c}, 0x0, @in=@broadcast, 0x0, 0x0, 0x3, 0x0, 0x49}]}]}, 0xf8}}, 0x4000010) r6 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r6, &(0x7f0000000000)={0xa, 0xfffe, 0x8, @mcast2, 0x9}, 0x1c) sendmmsg$inet6(r6, &(0x7f0000003cc0)=[{{0x0, 0x0, &(0x7f0000003980), 0x171}}], 0x400000000000172, 0x4001c00) 6.463934543s ago: executing program 0 (id=488): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000080)=@newtfilter={0x24, 0x2c, 0x20, 0x70bd27, 0x25dfdbfd, {0x0, 0x0, 0x0, 0x0, {0xfff3, 0xfff3}, {0x0, 0xfff3}, {0x2, 0xa}}}, 0x24}, 0x1, 0x0, 0x0, 0x20041090}, 0x40890) r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000002c0), 0x2, 0x0) ioctl$VHOST_SET_OWNER(r0, 0xaf01, 0x0) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000300)={0x1, 0x0, 0x0, &(0x7f0000000480)=""/74, 0x0}) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000000400)) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000280)={0x0, 0x0, 0x0, &(0x7f0000000340)=""/185, 0x0}) ioctl$VHOST_VSOCK_SET_RUNNING(r0, 0x4004af61, &(0x7f00000000c0)=0x1) syz_open_dev$sg(&(0x7f0000000080), 0x6f5e, 0x1) ioctl$VHOST_VSOCK_SET_GUEST_CID(r0, 0x4008af60, &(0x7f0000001500)={@my=0x1}) sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="640000000001010400000000141a000002000000240001801400018008000100e000000108000200e00000010c00028005000100000000002400028014000180080001"], 0x64}}, 0x40110) r1 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r1, &(0x7f0000000200)={0x28, 0x0, 0xffffffff, @my=0x1}, 0x10) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000080)=""/57, 0x0, &(0x7f0000001540)=""/4092}) r2 = eventfd(0xf7b2) ioctl$VHOST_SET_VRING_ERR(r0, 0x4008af22, &(0x7f0000000040)={0x0, r2}) ioctl$VHOST_VSOCK_SET_RUNNING(r0, 0x4004af61, &(0x7f0000000000)=0x1) 6.282193414s ago: executing program 1 (id=490): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000100)={0x4c, 0x2, 0x6, 0x801, 0x0, 0x0, {0x0, 0x0, 0x40}, [@IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_TYPENAME={0x11, 0x3, 'hash:ip,mark\x00'}]}, 0x4c}}, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$KVM_CAP_HYPERV_VP_INDEX(0xffffffffffffffff, 0x4068aea3, 0x0) sendmsg$IPSET_CMD_ADD(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)={0x48, 0x9, 0x6, 0x201, 0x0, 0x0, {0x2, 0x0, 0xffff}, [@IPSET_ATTR_DATA={0x20, 0x7, 0x0, 0x1, [@IPSET_ATTR_IP={0xc, 0x1, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @multicast2}}, @IPSET_ATTR_MARK={0x8, 0xa, 0x1, 0x0, 0x2}, @IPSET_ATTR_CIDR={0x5, 0x3, 0x2}]}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5}]}, 0x48}, 0x1, 0x0, 0x0, 0x800}, 0x40c0080) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_LIST(r2, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x20000005}, 0x80) r3 = syz_open_dev$tty1(0xc, 0x4, 0x1) r4 = dup(r3) write$UHID_INPUT(r4, &(0x7f0000000180)={0x9, {"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", 0x1000}}, 0x1006) ioctl$KVM_RESET_DIRTY_RINGS(r4, 0xaec7) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x0, 0x0}) r5 = socket$inet6(0xa, 0x1, 0x0) bind$inet6(r5, &(0x7f0000f65000)={0xa, 0x4e20, 0x97f, @loopback}, 0x1c) sendto$inet6(r5, 0x0, 0x0, 0xfffffefffbfbbfbe, &(0x7f0000000100)={0xa, 0x4e20, 0x23e, @empty}, 0x1c) socket$nl_generic(0x10, 0x3, 0x10) r6 = memfd_create(&(0x7f00000000c0)='-B\xd5N4\xa6Ey\xdb\xd1\xa7\xb1S\xf1:)\x00\x8a\xd7Uw\x00\xbc\xa92\xb3\xbb\x8d\xac\xacva}knh#\xcf)\x0f\xc8\xc0:\x9cc\x10d\xee\xa9\x8b\x066\xb8G\xd1c\xe1$\xff\x97\x8f~\xb90a\xa9\xb2\x04K\x98\x93=\xabQ\xf7\x19\xea\xef\xe3\xe1@\x84\x13\xefZb:\x8f\t\x01B\xec\xde\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00@Ip]D\xd6\r\xac\v#co\xd5\xb9\xc806\xa8\x99\xffs7\xa1b1\xb1;i)j\x0e\x1e\xedI\xa2\x80\x89\x1d\xd9p!\xc86s\xe07(\xee\xf9<\"\xf0\xc8\xae\x96J\xe2]\x01\x86\xb7.<\xf5N\xd3\x94W1\xff\x18z>\xa7q,\xf7\x96\xb8{\x8e\xbf4\xe0\x95\x1ce\xe4\x85\xcdi\xed\xd3>\xeb\xa5\xaf\x87\x90@\xd1\xbd`^\xfa\xb6\x9cj\x13/\xc5\\W\x04\br\x17X\xe3\xfb\xc8\xd4\xaeX\xc9s\xd18\xd9L\xbf\xa0\xa6\xdf2\a\x99i\xb1/\x19@\x1cq\xeb?\xc1z:\x913\xfa8\xac\xd3q\xe4vPGU', 0x1) r7 = dup(r6) write$binfmt_elf32(r7, &(0x7f0000000200)=ANY=[@ANYBLOB="7f454c464a030403ff0700000000000002000300040000003e03000038000000d6000000977000007e03200007", @ANYRES16=r7], 0x38) execveat(r7, &(0x7f0000000000)='\x00', 0x0, 0x0, 0x1000) 6.006685236s ago: executing program 1 (id=492): mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000000600)=ANY=[@ANYBLOB="66643d0c79d3846101009049ca56f0a2f705fb78526dce", @ANYRESHEX, @ANYBLOB=',rootmode=00000000000000000040000', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0, @ANYBLOB=',']) kexec_load(0x3, 0x2, &(0x7f00000005c0)=[{&(0x7f0000000100)="047715ac7141c111fab2fcda5de4dc8b278029bcb1bd17524f177856cac105f463c77e2d2ab44d875217dc82baa911f236f959fb9227524d4fe6b621a19823457d04c399283edbac755852623c82f7206d26e918a2981c8f68476969bf8c4bcd37ba24e4ba1683339879a11b854a7478f898805f327af12eaab8ac918c201b", 0x7f, 0x5, 0xffffffff}, {&(0x7f0000000340)="8c4e55be8948c65379def4df90ce301f71e7", 0x12, 0x100, 0x9}], 0x0) sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000002840)=[{{&(0x7f0000000080)={0xa, 0x4e23, 0x0, @loopback, 0x20}, 0x1c, 0x0}}], 0x1, 0x14018891) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x48001}, 0x4044050) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000540), 0x82, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000280), 0x80, 0x0) sendmmsg$alg(r2, &(0x7f0000007640)=[{0x0, 0x0, &(0x7f0000000880)=[{&(0x7f0000000740)="bd9c629b909dddebc0508bf412865663aded7919352b141faa7dc00680ce5a44ff1ed1c813c6c1e58e28c509cd269d0e79fff4d2ea4c1da69fa672c4f5eb15788aa929e9f5c94e443cf68a1759ee805958a7c76c8c7f11a39ea32c019c2f2c8cce48d92d659f623081974c0135dc1fe2a057f725a843c083e0620ffa607d3b9570a5b4094fca255491844b3d5cb63bab3d76ad07f9503d1450f1fb860b18ac983285f983e51262c539312073482f1538d9588323b836e6e2b7704dff3cbf89c2b828c7613310eafd664c946b1a6728154b1877257a8abe3d983344da083b86aee35e6b9b0d9307", 0xe7}], 0x1, &(0x7f00000008c0)=[@iv={0xb8, 0x117, 0x2, 0xa0, "bd19a432ebf20eb0a0ee39d005e869fe74b9842d9c92be0054aa20f9dbfeb8e59fa49c486a1a51c45c98c886185e506d1cf93255718fc79d6b6d1d434c678807c5ab4264c8ba94065d11d8ee27dd16f4a0342bed8a3c79acd4bb1f9f46ef28a63b329e09a86c62f907539c9af6f1b0bc00510c3b27f64245b6f4f80e00bca3c91538839a52c3c393aada6ed6155fa03c988b6658e106d043cc8652373dd8e2a7"}], 0xb8, 0x40800}, {0x0, 0x0, &(0x7f0000003900)=[{&(0x7f00000009c0)="c2debd9e2d4617d17e01e704d3576f8b26b757ffa164a105efcaa28e5d52d4383258c148e95e4ee927dab4ba9cdbf4dbf6b0e19f8b7e9a95211ec6aedfd78a09200b7076afabdae9c87c6837e202845b6cf3ac6b728856d66eef286087", 0x5d}, {&(0x7f0000000ac0)="3fe4c8a3288f097706", 0x9}, {&(0x7f0000000b40)="86545d2157646172b815818bfd0e1457556266898579380233e0e3853e4a118a5a2bcc52eeea6b2dc4fc32c3f81f9b1d06cd70", 0x33}, {&(0x7f0000000b80)="0d4842ef613cd072196eae2d74d31c309df1c61a888039b1a23acbea852fb54afae1761845284c6e484aa5154a2b418ffe2ac1d6363010c9d8f2d75a71eb55849202714884c6a0a760f5e028016a68fc07407f5671a5a4a8c91e9d056039df63390376a7359c6fc2059d1e3ffeec1ff0f4c09099e8e61c268324d0fc621f6dc2912e4bd5316ff808ac5126ade9b759e1489c04a517e992d7b56d9df469c0c906000e0f82c089ec12677e7ade15e68a", 0xaf}, {&(0x7f0000000c40)="176d6b3905505e2a41391bf6fd66d8ad4ebc86e07694005204b0151bfa8dc581a5be209d8850a950791f10f76de79651272a11f6d7267276ff1596a47826a90a0b74b425d8ff2bbea5c5732f69a908c45b4b348abc24d2cd2031a9508ef8e3594bd12ebc38c466f76d6ff3618471f4f6574e1043766375eb889750ca25429f976089462bf1b689280ebc67640f4534eef4b7ffd85963bc5d8b114670c00f", 0x9e}, {&(0x7f0000000d40)="7edb39aa76e39c9fc185dd49e1d028ba5e90ec3bb54d3c486f189f406945a495fe7b4ad51446c162f581368e4d711db9add53f7917e1dc55ae9543ea21d63f85d9a5a996f6fa32ead42a9b7e97a7ae1b4a8f76ff9321b4ec76606f9709bb57eda4e8c45e797ff2cabc03a3d03ca57b5239833610ac", 0x75}], 0x6, 0x0, 0x0, 0xc0}], 0x2, 0x48040) r3 = socket$alg(0x26, 0x5, 0x0) bind$alg(r3, &(0x7f0000000380)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-cast5-avx\x00'}, 0x58) setsockopt$ALG_SET_KEY(r3, 0x117, 0x1, &(0x7f00000004c0)="2c385a7af3", 0x5) r4 = accept4(r3, 0x0, 0x0, 0x800) sendmmsg$alg(r4, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048", 0xff31}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r4, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000840)={0x1, 0x2, 0x3000, 0x2000, &(0x7f0000003000/0x2000)=nil}) r5 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r5, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000100)=[@text32={0x20, &(0x7f00000000c0)="650f340f3566b842000f00d8b805000000b9a00000000f01c13e0f070fde460b0f0130670f01c2f2360f217a0f07", 0x2e}], 0x1, 0x11, 0x0, 0x0) pwritev(0xffffffffffffffff, &(0x7f0000000b00)=[{&(0x7f0000001880)="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", 0xf91}], 0x1, 0x1, 0x2) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000180)=[@text64={0x40, 0x0}], 0x1, 0x18, 0x0, 0x0) ioctl$KVM_RUN(r5, 0xae80, 0x0) 5.712040355s ago: executing program 1 (id=494): r0 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0x9, 0x0, 0x0) syz_usb_connect(0x0, 0x3f, 0x0, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r1, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x4) connect$inet6(r1, &(0x7f0000000100)={0xa, 0x0, 0x7, @ipv4={'\x00', '\xff\xff', @local}, 0x8001}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r1, 0x6, 0x1f, &(0x7f00000002c0), 0x4) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r1, 0x6, 0x14, &(0x7f0000000400)=0x1, 0x4) setsockopt$inet6_tcp_TLS_TX(r1, 0x11a, 0x2, &(0x7f00000003c0)=@gcm_128={{0x304}, "77b40400", "bb6710bc8150e4a1a117d7b27caf00", "8c76287d", "3d8efa05fdffffff"}, 0x28) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000001480)='blkio.bfq.io_service_bytes\x00', 0x275a, 0x0) ioctl$KVM_CREATE_VM(r2, 0xae01, 0x21) write$tun(r2, &(0x7f0000000340)=ANY=[], 0x141) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1, 0x10012, r2, 0x0) setsockopt$inet6_tcp_TLS_TX(r1, 0x11a, 0x1, &(0x7f0000000080)=@gcm_128={{0x303}, "b7a41f2300", "d21b0e8a0e000000000000000600", "1d1cbe23", "ecba06893bcdc493"}, 0x28) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) recvfrom(r1, &(0x7f0000002800)=""/4071, 0xfffffffffffffdab, 0x17, 0x0, 0xc8a) writev(r1, &(0x7f0000000300)=[{&(0x7f00000005c0)="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", 0xffffffa0}, {&(0x7f0000000340)="bf67a361000138944b854b78cc4e2237f68791bd7786513b715bf9ad6389844bc809b10b216304437e8d4b9e9cec7b31a34a02854029d58ba77b51b6479ef73e43d95fb478cc230a625897", 0x4b}, {&(0x7f0000000440)="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", 0x149}], 0x3) setsockopt$sock_int(r1, 0x1, 0x7, &(0x7f00000000c0)=0xffff1884, 0x4) r3 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) ioctl$EVIOCGMASK(r3, 0x5b01, 0x0) 5.524729572s ago: executing program 4 (id=495): r0 = add_key$keyring(&(0x7f0000000680), &(0x7f0000000000)={'syz', 0x1}, 0x0, 0x0, 0xffffffffffffffff) add_key$fscrypt_v1(&(0x7f0000000080), &(0x7f00000000c0)={'fscrypt:', @desc4}, &(0x7f0000000100)={0x0, "00379bce195566778899aabbccddfcff00112233445566778899aabbccddeeff000011688e0346d524b29db701e5ddeeff8000", 0x40}, 0x48, r0) add_key$fscrypt_v1(&(0x7f0000000080), &(0x7f0000000180)={'fscrypt:', @auto=[0x30, 0x30, 0x30, 0x30, 0x61, 0x30, 0x38, 0x30, 0x30, 0x62, 0x30, 0x4, 0x30, 0x52, 0x30, 0x32]}, &(0x7f0000000100)={0x0, "00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff", 0x3e}, 0x48, r0) add_key$fscrypt_v1(&(0x7f0000000080), &(0x7f0000000200)={'fscrypt:', @auto=[0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x34]}, &(0x7f0000000100)={0x0, "00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff", 0x40}, 0x48, r0) add_key$fscrypt_v1(&(0x7f0000000080), &(0x7f0000000440)={'fscrypt:', @auto=[0x30, 0x30, 0x64, 0x30, 0x64, 0x30, 0x62, 0x30, 0x30, 0x30, 0x34, 0x30, 0x30, 0x35, 0x30, 0x35]}, &(0x7f0000000100)={0x0, "00112233445566778899aabbccddeeff00112233445566357a2e68bc1629ecff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff", 0x40}, 0x48, r0) add_key$fscrypt_v1(&(0x7f0000000080), &(0x7f0000000280)={'fscrypt:', @auto=[0x64, 0x33, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x36]}, &(0x7f0000000100)={0x0, "00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff", 0x40}, 0x48, r0) add_key$fscrypt_v1(&(0x7f0000000080), &(0x7f00000002c0)={'fscrypt:', @auto=[0x30, 0x30, 0x30, 0x35, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x37]}, &(0x7f0000000100)={0x0, "00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff", 0x40}, 0x48, r0) add_key$fscrypt_v1(&(0x7f0000000080), &(0x7f0000000300)={'fscrypt:', @auto=[0x30, 0x35, 0x30, 0x30, 0x30, 0x30, 0x30, 0x61, 0x30, 0x30, 0x65, 0x36, 0x30, 0x64, 0x63, 0x38]}, &(0x7f0000000100)={0x0, "00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff", 0x1c}, 0x48, r0) add_key$fscrypt_v1(&(0x7f0000000480), &(0x7f0000000580)={'fscrypt:', @desc2}, &(0x7f00000005c0)={0x0, "41aaa6461c7d9cdfe002a4fdf77ac6a6b897264411411eb3e0e991467601fa7590931ab1575e497fa2974dbe559c8f95118b6680568af90fbd32a6fd249117c5", 0x29}, 0x48, r0) add_key$fscrypt_v1(&(0x7f0000000080), &(0x7f0000000340)={'fscrypt:', @auto=[0x30, 0x31, 0x30, 0x63, 0x34, 0x30, 0x66, 0x30, 0x30, 0x35, 0x30, 0x30, 0x66, 0x32, 0x39, 0x31]}, &(0x7f0000000100)={0x0, "00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff", 0x40}, 0x48, r0) add_key$fscrypt_v1(&(0x7f0000000080), &(0x7f0000000780)={'fscrypt:', @auto=[0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x31, 0x30, 0x30, 0x30, 0x61]}, &(0x7f0000000100)={0x0, "00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff", 0x40}, 0x48, r0) add_key$keyring(&(0x7f0000000700), &(0x7f0000000740)={'syz', 0x0}, 0x0, 0x0, r0) add_key$fscrypt_v1(&(0x7f0000000080), &(0x7f00000003c0)={'fscrypt:', @auto=[0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x62]}, &(0x7f0000000100)={0x0, "00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff", 0x40}, 0x48, r0) add_key$fscrypt_v1(&(0x7f0000000080), &(0x7f0000000400)={'fscrypt:', @desc3}, &(0x7f0000000100)={0x0, "00112233444d66778899aabbccddefff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff0011223344556677889c69bbccddeeff", 0x40}, 0x48, r0) add_key$keyring(&(0x7f0000000640), &(0x7f00000006c0)={'syz', 0x2}, 0x0, 0x0, r0) add_key$fscrypt_v1(&(0x7f0000000040), &(0x7f0000000380)={'fscrypt:', @auto=[0x30, 0x30, 0x65, 0x38, 0x30, 0x30, 0x30, 0x65, 0x30, 0x30, 0x6f, 0x30, 0x30, 0x30, 0x30, 0x64]}, &(0x7f0000000100)={0x0, "00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff", 0x12}, 0x48, r0) add_key$fscrypt_v1(&(0x7f00000001c0), &(0x7f00000004c0)={'fscrypt:', @auto=[0x30, 0x30, 0x36, 0x30, 0x30, 0x30, 0x30, 0x62, 0x63, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x66]}, &(0x7f0000000100)={0x0, "00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff", 0x43}, 0x48, r0) add_key$fscrypt_v1(&(0x7f0000000080), &(0x7f0000000500)={'fscrypt:', @auto=[0x31, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x0, 0x30, 0x63, 0x31, 0x30]}, &(0x7f0000000100)={0x0, "00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff", 0x40}, 0x48, r0) add_key$fscrypt_v1(&(0x7f0000000080), &(0x7f0000000540)={'fscrypt:', @auto=[0x39, 0x61, 0x65, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x32, 0x30, 0x31, 0x31]}, &(0x7f0000000100)={0x0, "00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff0011223344556c778899aabbccddeeff", 0x3d}, 0x48, r0) add_key$keyring(&(0x7f0000000000), &(0x7f0000000080)={'syz', 0x3}, 0x0, 0x0, r0) 5.404353135s ago: executing program 0 (id=496): syz_emit_ethernet(0x86, &(0x7f0000000000)={@local, @local, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "f81fcb", 0x50, 0x3a, 0x0, @private0, @mcast2, {[], @param_prob={0x4, 0x0, 0x0, 0x0, {0x0, 0x6, "4aa198", 0x0, 0x3c, 0xff, @ipv4, @ipv4={'\x00', '\xff\xff', @loopback}, [@srh={0x2f, 0x2, 0x4, 0x1, 0x0, 0x0, 0x0, [@private0]}, @fragment]}}}}}}}, 0x0) r0 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000240), 0xa000, 0x0) readv(r0, &(0x7f0000001300)=[{&(0x7f0000000280)=""/4096, 0x1000}, {&(0x7f0000000040)=""/95, 0x5f}], 0x2) mmap$dsp(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x2000009, 0x11, r0, 0x0) syz_usb_ep_write$ath9k_ep1(0xffffffffffffffff, 0x82, 0xa8, &(0x7f0000000040)=ANY=[@ANYBLOB="6b0ee0b3d4"]) syz_emit_ethernet(0x4a, &(0x7f0000000000)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaaaaaaabb86dd69010000001406fffe800000000000000000000039fe8000000000000000000000000000aa4e224e24000000", @ANYRES32=0x41424344, @ANYRES32=0x41424344, @ANYBLOB="51c2"], 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000980)={0x8, 0xf, &(0x7f0000000200)=ANY=[@ANYBLOB="1800008080b63428e900"/20, @ANYRES32, @ANYBLOB="0000000000000000b702000014000000b7020000000000008500000051000000bf0900000000000055"], 0x0, 0x47, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x5}, 0x94) sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000007880)=[{{0x0, 0x0, &(0x7f0000000740)=[{&(0x7f0000000040)="af0ac9", 0x3}], 0x1}}], 0x1, 0x4000000) r1 = syz_open_dev$loop(&(0x7f0000000100), 0x2, 0x2001) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='blkio.bfq.io_service_bytes_recursive\x00', 0x275a, 0x0) write$binfmt_misc(r2, &(0x7f0000000040), 0xe09) ioctl$LOOP_CONFIGURE(r1, 0x4c0a, &(0x7f00000002c0)={r2, 0x0, {0x2a00, 0x80010000, 0x0, 0x2, 0x0, 0x0, 0x0, 0x14, 0x1c, "fee8a2ab78fc979fd1e00d96072000001ea89de2b7fb0000e60080b8785d960001000000000000000000007efff100004000", "2809e8dbe108598948224ad54afac11d875397bdb22d0000b420a1a93c527d3d458dd4992861ac00", "f4bd000000801900", [0x8, 0xffffffff9673e35d]}}) r3 = openat$binfmt_format(0xffffffffffffff9c, &(0x7f0000000080)='/proc/sys/fs/binfmt_misc/syz0\x00', 0x2, 0x0) unshare(0x6a040000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) prctl$PR_SET_VMA(0x53564d41, 0x0, &(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x0) r4 = socket(0x10, 0x2, 0x0) write(r4, &(0x7f0000000040)="1c0000001a009b8a140000003b9b301f00"/28, 0x1c) lseek(r3, 0x3, 0x4) 5.340575309s ago: executing program 4 (id=497): mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', 0x0, 0x0, &(0x7f0000000600)=ANY=[@ANYBLOB="66643d0c79d3846101009049", @ANYRESHEX, @ANYBLOB=',rootmode=00000000000000000040000,user_i', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0, @ANYBLOB=',']) kexec_load(0x3, 0x1, &(0x7f00000005c0)=[{&(0x7f0000000340), 0x0, 0x100, 0x9}], 0x0) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x48001}, 0x4044050) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000540), 0x82, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000280), 0x80, 0x0) sendmmsg$alg(r2, &(0x7f0000007640)=[{0x0, 0x0, &(0x7f0000000880)=[{&(0x7f0000000740)="bd9c629b909dddebc0508bf412865663aded7919352b141faa7dc00680ce5a44ff1ed1c813c6c1e58e28c509cd269d0e79fff4d2ea4c1da69fa672c4f5eb15788aa929e9f5c94e443cf68a1759ee805958a7c76c8c7f11a39ea32c019c2f2c8cce48d92d659f623081974c0135dc1fe2a057f725a843c083e0620ffa607d3b9570a5b4094fca255491844b3d5cb63bab3d76ad07f9503d1450f1fb860b18ac983285f983e51262c539312073482f1538d9588323b836e6e2b7704dff3cbf89c2b828c7613310eafd664c946b1a6728154b1877257a8abe3d983344da083b86aee35e6b9b0d9307", 0xe7}], 0x1, &(0x7f00000008c0)=[@iv={0xb8, 0x117, 0x2, 0xa0, "bd19a432ebf20eb0a0ee39d005e869fe74b9842d9c92be0054aa20f9dbfeb8e59fa49c486a1a51c45c98c886185e506d1cf93255718fc79d6b6d1d434c678807c5ab4264c8ba94065d11d8ee27dd16f4a0342bed8a3c79acd4bb1f9f46ef28a63b329e09a86c62f907539c9af6f1b0bc00510c3b27f64245b6f4f80e00bca3c91538839a52c3c393aada6ed6155fa03c988b6658e106d043cc8652373dd8e2a7"}], 0xb8, 0x40800}, {0x0, 0x0, &(0x7f0000003900)=[{&(0x7f00000009c0)="c2debd9e2d4617d17e01e704d3576f8b26b757ffa164a105efcaa28e5d52d4383258c148e95e4ee927dab4ba9cdbf4dbf6b0e19f8b7e9a95211ec6aedfd78a09200b7076afabdae9c87c6837e202845b6cf3ac6b728856d66eef286087e0154a40c153e5fe7505615fb53b33f629928c80aeea7fd091180968d44cd4544b6bb4c116f4d6c4c3d148eb273bd4fa76ad8f709ed07bd2a91564fc364f1b971b0e005fe1d24f1b0d7f157b695c625cc39aac2d6f07b11d926c801fb1", 0xba}, {&(0x7f0000000ac0)="3fe4c8a3288f097706", 0x9}, {&(0x7f0000000b40)="86545d2157646172b815818bfd0e1457556266898579380233e0e3853e4a118a5a2bcc52eeea6b2dc4fc32c3f81f9b1d06cd70", 0x33}, {&(0x7f0000000b80)="0d4842ef613cd072196eae2d74d31c309df1c61a888039b1a23acbea852fb54afae1761845284c6e484aa5154a2b418ffe2ac1d6363010c9d8f2d75a71eb55849202714884c6a0a760f5e028016a68fc07407f5671a5a4a8c91e9d056039df63390376a7359c6fc2059d1e3ffeec1ff0f4c09099e8e61c268324d0fc621f6dc2912e4bd5316ff808ac5126ade9b759e1489c04a517e992d7b56d9df469c0c906000e0f82c089ec12677e7ade15e68a", 0xaf}, {&(0x7f0000000c40)="176d6b3905505e2a41391bf6fd66d8ad4ebc86e07694005204b0151bfa8dc581a5be209d8850a950791f10f76de79651272a11f6d7267276ff1596a47826a90a0b74b425d8ff2bbea5c5732f69a908c45b4b348abc24d2cd2031a9508ef8e3594bd12ebc38c466f76d6ff3618471f4f6574e1043766375eb889750ca25429f976089462bf1b689280ebc67640f4534eef4b7ffd85963bc5d8b114670c00f76cbdd722662dce5fc58daf323bf987ef7d646a99794c02b62b30e189691c4be9094ea58e9df52d9dbd9e0fae7a4a130246680b2", 0xd2}, {&(0x7f0000000d40)="7edb39aa76e39c9fc185dd49e1d028ba5e90ec3bb54d3c486f189f406945a495fe7b4ad51446c162f581368e4d711db9add53f7917e1dc55ae9543ea21d63f85d9a5a996f6fa32ead42a9b7e97a7ae1b4a8f76ff9321b4ec76606f9709bb57eda4e8c45e797ff2cabc03a3d03ca57b5239833610ac4306ac2a443c768b9365de67f9f9be49fe7d6f4d71abedeb55ab91ddd31154758fcaa8f25a56126152b9ba46d9bd4cd0d67de6fda9f72a37319681", 0xb0}], 0x6, 0x0, 0x0, 0xc0}], 0x2, 0x48040) r3 = socket$alg(0x26, 0x5, 0x0) bind$alg(r3, &(0x7f0000000380)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-cast5-avx\x00'}, 0x58) setsockopt$ALG_SET_KEY(r3, 0x117, 0x1, &(0x7f00000004c0)="2c385a7af3", 0x5) r4 = accept4(r3, 0x0, 0x0, 0x800) sendmmsg$alg(r4, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048", 0xff31}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r4, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000840)={0x1, 0x2, 0x3000, 0x2000, &(0x7f0000003000/0x2000)=nil}) r5 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r5, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000100)=[@text32={0x20, &(0x7f00000000c0)="650f340f3566b842000f00d8b805000000b9a00000000f01c13e0f070fde460b0f0130670f01c2f2360f217a0f07", 0x2e}], 0x1, 0x11, 0x0, 0x0) pwritev(0xffffffffffffffff, &(0x7f0000000b00)=[{&(0x7f0000001880)="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", 0xf91}], 0x1, 0x1, 0x2) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000180)=[@text64={0x40, 0x0}], 0x1, 0x18, 0x0, 0x0) ioctl$KVM_RUN(r5, 0xae80, 0x0) 4.652251972s ago: executing program 4 (id=498): socket(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000002c0)) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x48001}, 0x4044050) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000540), 0x82, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) sendmmsg$alg(0xffffffffffffffff, &(0x7f0000007640)=[{0x0, 0x0, &(0x7f0000000880)=[{&(0x7f0000000740)}], 0x1, 0x0, 0xb8, 0x40800}, {0x0, 0x0, &(0x7f0000003900)=[{&(0x7f00000009c0)="c2debd9e2d4617d17e01e704d3576f8b26b757ffa164a105efcaa28e5d52d4383258c148e95e4ee927dab4ba9cdbf4dbf6b0e19f8b7e9a95211ec6aedfd78a09200b7076afabdae9c87c6837e202845b6cf3ac6b728856d66eef286087e0154a40c153e5fe7505615fb53b33f629928c80aeea7fd091180968d44cd4544b6bb4c116f4d6c4c3d148eb273bd4fa76", 0x8e}, {&(0x7f0000000b40)="86545d2157646172b815818bfd0e1457556266898579380233e0e3853e4a118a5a2bcc52eeea6b2d", 0x28}], 0x2, 0x0, 0x0, 0xc0}], 0x2, 0x48040) r2 = socket$alg(0x26, 0x5, 0x0) ioctl$LOOP_CONFIGURE(0xffffffffffffffff, 0x4c0a, &(0x7f0000000080)={0xffffffffffffffff, 0x0, {0x0, 0x0, 0x0, 0x6, 0x1000, 0x0, 0x1, 0x19, 0xc, "faf98317e5a114998a1a8dbe43ea6acc96e3a2503dc3bd3fe37d58128bbad0099cebdc25f5ab60c9e6d680f985881a7beda9d69098c8b534464c516bdd8a0f35", "32d8cc26f7061a74df2cfc06c89f3d9e234b30c50997d3bef409ff2176ff7bfe55cd4a5d83cd4a524bd3ffe70c7f3f800b2f7b6aa54cc50a1fcaed1e831fa79a", "67523760fd40f78d2cfc03d81a8ca55ba139c01802c4dae4162e43ac61b7ad33", [0x5, 0x7]}}) ioctl$XFS_IOC_OPEN_BY_HANDLE(r1, 0xc038586b, &(0x7f0000000ac0)={0xffffffffffffffff, &(0x7f00000006c0)='\x00', 0x81, &(0x7f0000000700)={@_ha_fsid={[0x2, 0xfff]}, {0x1ff, 0x2, 0x6, 0x6}}, 0x3, &(0x7f0000000980), &(0x7f0000000a80)=0x9}) bind$alg(r2, &(0x7f0000000380)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-cast5-avx\x00'}, 0x58) setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, &(0x7f00000004c0)="2c385a7af3", 0x5) r3 = accept4(r2, 0x0, 0x0, 0x800) sendmmsg$alg(r3, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048", 0xff31}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r3, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000840)={0x1, 0x2, 0x3000, 0x2000, &(0x7f0000003000/0x2000)=nil}) r4 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000100)=[@text32={0x20, &(0x7f00000000c0)="650f340f3566b842000f00d8b805000000b9a00000000f01c13e0f070fde460b0f0130670f01c2f2360f217a0f07", 0x2e}], 0x1, 0x11, 0x0, 0x0) pwritev(0xffffffffffffffff, &(0x7f0000000b00)=[{&(0x7f0000001880)="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", 0xf91}], 0x1, 0x1, 0x2) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000180)=[@text64={0x40, 0x0}], 0x1, 0x18, 0x0, 0x0) ioctl$KVM_RUN(r4, 0xae80, 0x0) 4.540873928s ago: executing program 2 (id=499): r0 = socket$inet_tcp(0x2, 0x1, 0x6) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000000)=0x800, 0x4) bind$inet(r0, &(0x7f0000000040)={0x2, 0x4e24, @loopback}, 0x10) listen(r0, 0x5) r1 = accept$inet(r0, 0x0, 0x0) setsockopt$inet_tcp_TCP_ULP(r1, 0x6, 0x1f, &(0x7f0000000180), 0x4) setsockopt$inet_tcp_TLS_RX(r1, 0x11a, 0x2, &(0x7f0000000200)=@gcm_128={{0x303}, "1234567812345678", "12345678123456781234567812345678", "12345678", "1234567812345678"}, 0x28) recvfrom$inet(r1, &(0x7f0000000400), 0x4000, 0x0, 0x0, 0x0) 4.102733366s ago: executing program 4 (id=500): socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r1, 0x0, r2, 0x0, 0x6, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r3, 0x427a7000) write$cgroup_devices(r2, 0x0, 0x6) write(r0, 0x0, 0x0) mmap(&(0x7f00009fd000/0x600000)=nil, 0x600000, 0x100000d, 0x6031, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x3000007, 0x31, r2, 0x0) r4 = socket$kcm(0x2d, 0x2, 0x0) ioctl$sock_kcm_SIOCKCMATTACH(r4, 0x89e0, &(0x7f0000000040)) ioctl$sock_kcm_SIOCKCMATTACH(r4, 0x89e0, &(0x7f0000000080)) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000001c0)={0x11, 0xf, &(0x7f0000000380)=ANY=[@ANYBLOB="180000000c000000000000000000008018110000", @ANYRES32, @ANYBLOB="0200000000000000b702000014000000b70300003f0000008500000083000000bf0920000000000055490100000000009500000000000000bf91"], 0x0, 0xb, 0x0, 0x0, 0x41000, 0xc, '\x00', 0x0, 0x0, r3, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x7}, 0x94) r6 = socket$kcm(0x2, 0x3, 0x2) ioctl$SIOCSIFHWADDR(r6, 0x8914, &(0x7f0000000080)={'syzkaller1\x00', @broadcast}) ioctl$sock_inet_SIOCADDRT(0xffffffffffffffff, 0x890b, &(0x7f00000003c0)={0x0, {0x2, 0x4e20, @rand_addr=0x64010100}, {0x2, 0x4a2c, @remote}, {0x2, 0x4e25, @multicast2}, 0x204, 0x0, 0x0, 0x0, 0x2008, 0x0, 0x200003, 0x2, 0x2}) write$tun(r5, &(0x7f00000003c0)=ANY=[@ANYBLOB="080000fa"], 0xdc) close_range(r0, 0xffffffffffffffff, 0x0) 3.610724936s ago: executing program 2 (id=501): keyctl$instantiate(0xc, 0x0, &(0x7f0000000100)=@encrypted_new={'new ', 'default', 0x20, 'user:', 'syz', 0x20, 0xffd}, 0x2a, 0x0) r0 = add_key(&(0x7f0000000140)='encrypted\x00', &(0x7f0000000180), &(0x7f0000000100), 0xca, 0xfffffffffffffffe) keyctl$read(0xb, r0, &(0x7f0000000240)=""/96, 0x60) socket(0x10, 0x3, 0x0) fsopen(&(0x7f00000000c0)='ubifs\x00', 0x0) madvise(&(0x7f0000c00000/0x400000)=nil, 0x400000, 0xe) mlock(&(0x7f0000d84000/0x2000)=nil, 0x2000) setsockopt$netlink_NETLINK_TX_RING(0xffffffffffffffff, 0x10e, 0xc, 0x0, 0x0) syz_usb_connect(0x0, 0x3f, &(0x7f0000000540)=ANY=[@ANYBLOB="12010000a13de30840205029f1850102030109022d0002000000000904210001d553e5000905060500000000000904000001f238b50009050102"], 0x0) mremap(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x2000, 0x7, &(0x7f0000fff000/0x1000)=nil) ioctl$int_in(0xffffffffffffffff, 0x40000000af01, 0x0) ioctl$VHOST_SET_MEM_TABLE(0xffffffffffffffff, 0x4008af03, &(0x7f00000004c0)) ioctl$VHOST_SET_FEATURES(0xffffffffffffffff, 0x4008af00, &(0x7f00000001c0)=0x304008000) r1 = syz_open_dev$tty1(0xc, 0x4, 0x3) r2 = dup(r1) write$UHID_INPUT(r2, &(0x7f0000000000)={0xe, {"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", 0x1000}}, 0x1006) r3 = socket(0x2, 0x80805, 0x0) sendmmsg$inet(r3, &(0x7f0000003540)=[{{0x0, 0x0, 0x0}}, {{&(0x7f0000000740)={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, &(0x7f0000001a40)=[{&(0x7f0000000780)="e4", 0x1}], 0x1}}], 0x2, 0x0) mbind(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x4006, &(0x7f0000000000)=0x4, 0x5, 0x2) 2.583780271s ago: executing program 1 (id=502): writev(0xffffffffffffffff, 0x0, 0x0) bpf$BPF_PROG_ATTACH(0x8, &(0x7f0000000340)={@map, 0xffffffffffffffff, 0x26, 0x5}, 0x20) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFQNL_MSG_CONFIG(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB], 0x40}}, 0x0) syz_usb_connect(0x3, 0x39, &(0x7f0000000000)=ANY=[@ANYBLOB="12010002000000407c2c25010000000000010902270001010080fa0904000003ffffff000705810200020007050202000200"], 0x0) syz_open_dev$char_usb(0xc, 0xb4, 0x0) mknod$loop(0x0, 0xfff, 0x1) setxattr$security_capability(0x0, 0x0, &(0x7f0000000180)=@v2={0x2000000, [{0x8000, 0x3}, {0x3, 0xff}]}, 0x14, 0x1) socket$kcm(0x10, 0x2, 0x0) write$FUSE_INTERRUPT(r0, &(0x7f0000000040)={0x10}, 0x10) socket$nl_generic(0x10, 0x3, 0x10) mq_open(0x0, 0x800, 0x40, &(0x7f00000012c0)={0xfffffffffffffff7, 0x9, 0x100000001, 0x5}) prctl$PR_SET_UNALIGN(0x6, 0x1) r1 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r1, 0x8933, &(0x7f0000000000)={'vxcan1\x00', 0x0}) bind$can_j1939(r1, &(0x7f00000000c0)={0x1d, r2, 0x0, {}, 0xfe}, 0x18) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000080)=@newlink={0x54, 0x10, 0xffffffffffffffff, 0x70bd27, 0x25dfdbfb, {0x0, 0x0, 0x0, 0x0, 0x50a10, 0x51a23}, [@IFLA_LINKINFO={0x34, 0x12, 0x0, 0x1, @ip6erspan={{0xe}, {0x20, 0x2, 0x0, 0x1, [@IFLA_GRE_COLLECT_METADATA={0x4}, @IFLA_GRE_ERSPAN_VER={0x5, 0x16, 0x1}, @IFLA_GRE_OKEY={0x8}, @IFLA_GRE_ERSPAN_INDEX={0x8, 0x15, 0x100090e}]}}}]}, 0x54}}, 0x20040040) connect$can_j1939(r1, &(0x7f0000000140)={0x1d, r2, 0x0, {0x1, 0xff, 0xa8fe8ad4eea2351f}, 0x2}, 0x18) sendmmsg(r1, &(0x7f0000003e40), 0x3fffffffffffe3d, 0xf5) 2.181535562s ago: executing program 2 (id=503): open(&(0x7f00009e1000)='./file0\x00', 0x60840, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, &(0x7f0000000040)={0x2, &(0x7f0000000080)=[{0x6, 0x0, 0x10, 0x7fff7ff9}, {0x9, 0x4, 0xa, 0x2}]}) gettid() socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$int_in(r0, 0x5452, &(0x7f0000000180)=0xffffffffffffffff) fcntl$setsig(r0, 0xa, 0x12) ppoll(&(0x7f0000000100)=[{r1, 0x8440}], 0x1, 0x0, &(0x7f00000001c0)={[0x8001a0ffffffff]}, 0x8) dup2(r0, r1) r2 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_INIT(r2, 0x0, 0xc8, &(0x7f0000003d40), 0x4) setsockopt$MRT_ADD_VIF(r2, 0x0, 0xca, &(0x7f0000003d80)={0x0, 0x0, 0x0, 0x0, @vifc_lcl_addr=@local, @dev}, 0x10) r3 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r4 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_ADD_VIF(r4, 0x0, 0xca, &(0x7f00000000c0)={0x8, 0x0, 0x0, 0x0, @vifc_lcl_addr=@local, @initdev={0xac, 0x1e, 0x1, 0x0}}, 0x10) setsockopt$inet_mreq(r3, 0x0, 0x23, &(0x7f0000000000)={@multicast1=0xe0000300, @local}, 0x8) syz_emit_ethernet(0x3e, &(0x7f0000000240)={@local, @broadcast, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x30, 0x0, 0x0, 0x80, 0x2, 0x0, @empty, @multicast1=0xe0000300}, @dest_unreach={0x3, 0x7, 0x0, 0x0, 0x3, 0xc58, {0x5, 0x4, 0x0, 0x7, 0x0, 0x65, 0xe, 0x4e, 0x24, 0xc, @empty, @dev={0xac, 0x14, 0x14, 0x44}}}}}}}, 0x0) setsockopt$MRT_ADD_MFC_PROXY(r4, 0x0, 0xd2, &(0x7f0000000200)={@remote, @multicast2=0xe0000300, 0x0, "028a3f6c58b274e6d8451697efe42811ee1df06e9264f7d866b1970548fc3c7b", 0x800b2, 0xfffffff7, 0x4, 0x40000006}, 0x3c) syz_open_procfs(0x0, &(0x7f0000002380)='net/ip_mr_cache\x00') 1.916518154s ago: executing program 3 (id=504): connect$inet6(0xffffffffffffffff, 0x0, 0x0) pwritev(0xffffffffffffffff, 0x0, 0x0, 0x8002, 0x1) r0 = syz_open_dev$vbi(0x0, 0x1, 0x2) ioctl$VIDIOC_G_EXT_CTRLS(r0, 0xc0205648, &(0x7f00000000c0)={0x0, 0x1, 0x0, 0xffffffffffffffff, 0x0, 0x0}) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, 0x0) getsockname$netlink(0xffffffffffffffff, 0x0, &(0x7f0000000180)) bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x1f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f00000001c0)={0x50, 0x2, 0x6, 0x3, 0x0, 0x0, {0x7}, [@IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_TYPENAME={0x16, 0x3, 'hash:net,port,net\x00'}]}, 0x50}, 0x1, 0x0, 0x0, 0x810}, 0x20004000) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000300)={0x60, 0x9, 0x6, 0x3, 0x0, 0x0, {0x5}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_DATA={0x38, 0x7, 0x0, 0x1, [@IPSET_ATTR_PORT={0x6, 0x4, 0x1, 0x0, 0x4e21}, @IPSET_ATTR_PROTO={0x5, 0x7, 0xff}, @IPSET_ATTR_IP={0xc, 0x1, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @private=0xa010101}}, @IPSET_ATTR_IP_TO={0xc, 0x2, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @multicast2}}, @IPSET_ATTR_IP2={0xc, 0x14, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @broadcast}}]}]}, 0x60}, 0x1, 0x0, 0x0, 0x10004893}, 0x80) sendmsg$IPSET_CMD_LIST(0xffffffffffffffff, 0x0, 0x48810) recvmsg(0xffffffffffffffff, 0x0, 0x20) dup(0xffffffffffffffff) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = openat$audio(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$sock_FIOGETOWN(r4, 0x8903, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, 0x0) 1.667336487s ago: executing program 3 (id=505): sendmsg$rds(0xffffffffffffffff, &(0x7f00000001c0)={&(0x7f0000000080)={0x2, 0x0, @remote}, 0x10, &(0x7f0000000440)=[{&(0x7f0000001880)=""/4093, 0xffd}], 0x1, 0x0, 0x0, 0x20000800}, 0x0) io_uring_setup(0x1159, 0x0) socket$inet_sctp(0x2, 0x5, 0x84) openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x20040, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x1c1) r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000000c0)={'batadv_slave_1\x00', 0x0}) r2 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000000180), 0x2100, 0x0) write$tun(r2, &(0x7f0000000280)=ANY=[@ANYBLOB="ee41bb848bfff5b3"], 0x8) sendmsg$nl_route(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000002c0)=ANY=[@ANYBLOB="3c0000001000010427bd7000800000000000", @ANYRES32=0x0, @ANYBLOB="935f0100ef000000140012800c0001006d616376746170000400028008000500", @ANYRES32=r1, @ANYBLOB="7ea4fa9d844819bbaf8e11849db04859bce5bcdfaa1d8aaeb0e02c8c0ec7a141c486172581ced610a96bc7"], 0x3c}, 0x1, 0x0, 0x0, 0x2004d808}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = fsopen(0x0, 0x0) fsconfig$FSCONFIG_CMD_CREATE(r4, 0x6, 0x0, 0x0, 0x0) r5 = fsmount(r4, 0x0, 0x0) fchdir(r5) mkdir(0x0, 0x20) openat$dir(0xffffffffffffff9c, &(0x7f0000000080)='.\x00', 0x101000, 0x108) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r6, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=@ipv4_newroute={0x38, 0x18, 0x601, 0x0, 0x0, {0x2, 0x18, 0x0, 0x0, 0xfe, 0x3, 0x0, 0x1}, [@RTA_OIF={0x8, 0x4, 0x1}, @RTA_ENCAP_TYPE={0x6, 0x15, 0x1}, @RTA_ENCAP={0xc, 0x16, 0x0, 0x1, @MPLS_IPTUNNEL_DST={0x8, 0x1, [{0x100, 0x0, 0x1}]}}]}, 0x38}}, 0x0) sendmsg$nl_route(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)=ANY=[], 0x50}}, 0x20008844) 1.621449309s ago: executing program 4 (id=506): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000080)=@newtfilter={0x24, 0x2c, 0x20, 0x70bd27, 0x25dfdbfd, {0x0, 0x0, 0x0, 0x0, {0xfff3, 0xfff3}, {0x0, 0xfff3}, {0x2, 0xa}}}, 0x24}, 0x1, 0x0, 0x0, 0x20041090}, 0x40890) r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000002c0), 0x2, 0x0) ioctl$VHOST_SET_OWNER(r0, 0xaf01, 0x0) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000300)={0x1, 0x0, 0x0, &(0x7f0000000480)=""/74, 0x0}) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000000400)) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000280)={0x0, 0x0, 0x0, &(0x7f0000000340)=""/185, 0x0}) ioctl$VHOST_VSOCK_SET_RUNNING(r0, 0x4004af61, &(0x7f00000000c0)=0x1) syz_open_dev$sg(&(0x7f0000000080), 0x6f5e, 0x1) ioctl$VHOST_VSOCK_SET_GUEST_CID(r0, 0x4008af60, &(0x7f0000001500)={@my=0x1}) sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="640000000001010400000000141a000002000000240001801400018008000100e000000108000200e00000010c00028005000100000000002400028014000180080001"], 0x64}}, 0x40110) r1 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r1, &(0x7f0000000200)={0x28, 0x0, 0xffffffff, @my=0x1}, 0x10) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000080)=""/57, 0x0, &(0x7f0000001540)=""/4092}) r2 = eventfd(0xf7b2) ioctl$VHOST_SET_VRING_ERR(r0, 0x4008af22, &(0x7f0000000040)={0x0, r2}) ioctl$VHOST_VSOCK_SET_RUNNING(r0, 0x4004af61, &(0x7f0000000000)=0x1) 1.416591158s ago: executing program 3 (id=507): r0 = socket$packet(0x11, 0x3, 0x300) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f0000000080)={'batadv0\x00', 0x0}) sendto$packet(r0, &(0x7f0000000300)="f617a8ea0700ffffffffffff810016fe0806", 0x12, 0x40088d0, &(0x7f0000000200)={0x11, 0x0, r1, 0x1, 0x7, 0x6, @local}, 0x14) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000003c40)={{0xffffffffffffff2b, 0x10, 0x4}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x5, 0x0, 0x0, {0x7, 0x0, 0x1}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWSET={0x3c, 0x9, 0xa, 0x703, 0x0, 0x0, {0x7}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x21}]}, @NFT_MSG_NEWSETELEM={0x2c, 0xc, 0xa, 0x101, 0x0, 0x0, {0x7, 0x0, 0x8}, [@NFTA_SET_ELEM_LIST_ELEMENTS={0x4}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_ELEM_LIST_SET_ID={0x8, 0x4, 0x1, 0x0, 0x2}]}], {0x14, 0x10, 0x1, 0x0, 0x0, {0x0, 0x84}}}, 0xb0}, 0x1, 0x0, 0x0, 0x20000000}, 0x0) syz_usb_connect$uac2(0x3, 0x7b, &(0x7f0000000340)={{0x12, 0x1, 0x201, 0x0, 0x0, 0x0, 0x10, 0x41e, 0x3000, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x69, 0x3, 0x1, 0x2, 0xa0, 0xf5, {0x8, 0xb, 0x2, 0x1, 0x1, 0xa, 0x20, 0xfb}, {{{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x20, 0x0, {{0x9, 0x24, 0x1, 0x100, 0x6, 0x9, 0x6}}}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x20, 0x0, {}, {{0x9, 0x5, 0x1, 0x9, 0x8, 0xe9, 0x8, 0x1, {0x8, 0x25, 0x1, 0x80, 0x0, 0xd6, 0x7}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x20, 0x0, {}, {{0x9, 0x5, 0x82, 0x9, 0x640, 0xf0, 0x8, 0x0, {0x8, 0x25, 0x1, 0xcb8dd29a80976d5, 0x0, 0x7}}}}}}}}]}}, &(0x7f0000000880)={0x0, 0x0, 0x0, 0x0, 0x2, [{0x2, &(0x7f00000005c0)=@string={0x2}}, {0x34, &(0x7f0000000600)=@string={0x34, 0x3, "c92b2e8964602410d4701e1770a13ab133736c21adba6204cd93e3ff0fce5e1eb985050a5cc29b014f2e8cc2c5bff2b405e0"}}]}) syz_usb_connect$printer(0x4, 0x2d, &(0x7f0000000000)={{0x12, 0x1, 0x200, 0x7, 0x1, 0x3, 0x40, 0x525, 0xa4a8, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x1b, 0x1, 0x1, 0x10, 0xa0, 0x90, "", [{{0x9, 0x4, 0x0, 0xfc, 0x2, 0x0, 0x0, 0x0, 0x7, "", {{{0x9, 0x5, 0x1, 0x2, 0x3ff, 0x5, 0x2, 0x5}}}}}]}}]}}, &(0x7f0000000280)={0xa, &(0x7f0000000040)={0xa, 0x6, 0x250, 0x80, 0x2d, 0x4, 0xcc0364413e8787c3, 0x7}, 0x0, 0x0, 0x5, [{0x34, &(0x7f0000000640)=ANY=[@ANYBLOB="3403fda298dce0e78540279620bda46d16f62af5a8cd2857484c1a072a959b6f32660f063ac2afe3f607d200e3f53cb55a8a67b281b2ccb37962d41affe564894642bff49984a7a11d0b7b4664c61a8ac903b08a1bcf86cf645a8a2f71317c939d31370a6370603744c2e1262a55008ced93d9083888c1d29c83184a672a83d2e3302aea86bdc227f625e21aa721ed29d0ccc29f3235ad4f6bfa3f8e24386a350e24ef40b434b71f4d0699ab8972bc435937f6448ee5abc3edc832a9"]}, {0x4, &(0x7f0000000100)=@lang_id={0x4, 0x3, 0x813}}, {0x4f, &(0x7f0000000140)=@string={0x4f, 0x3, "b35c01c42d78483f871c8c80420bc80ed774203a8a3caf1268e19b5ea7435fcf0ec441582e6878c21a5d68574b2bcf4a3ac73ba6061533181eeea3d74f8d22dde0bf5782aaa8b72bd948f6fefe"}}, {0x35, &(0x7f00000001c0)=@string={0x35, 0x3, "9c874f28f40d7ead450c24dc77ac43aafddbb12e4790d5f36df30f85bff0151d8539134f40d34ea9133be9ce810aae77f5cfeb"}}, {0x4, &(0x7f0000000240)=@lang_id={0x4, 0x3, 0x1004}}]}) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='freezer.self_freezing\x00', 0x275a, 0x0) r3 = userfaultfd(0x801) ioctl$UFFDIO_API(r3, 0xc018aa3f, &(0x7f00000000c0)) ioctl$UFFDIO_REGISTER(r3, 0xc020aa00, &(0x7f0000000000)={{&(0x7f0000400000/0xc00000)=nil, 0xc00000}, 0x4}) ioctl$UFFDIO_COPY(r3, 0xc028aa03, &(0x7f0000000040)={&(0x7f0000f39000/0x3000)=nil, &(0x7f0000ffd000/0x2000)=nil, 0x3000, 0x2}) open_tree(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup\x00', 0x89101) unlink(&(0x7f00000003c0)='./cgroup\x00') openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x10000, 0x115) getpid() r4 = add_key(&(0x7f0000001340)='keyring\x00', &(0x7f0000001380)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffe) keyctl$KEYCTL_RESTRICT_KEYRING(0x1d, r4, 0x0, 0x0) keyctl$KEYCTL_RESTRICT_KEYRING(0x1d, r4, &(0x7f0000000000)='asymmetric\x00', &(0x7f0000000040)=@keyring={'key_or_keyring:', r4}) 1.196376671s ago: executing program 2 (id=508): r0 = syz_usb_connect(0x0, 0x36, &(0x7f0000000680)=ANY=[@ANYBLOB="12010000f2303920422c02124085010203010902240001000010"], 0x0) syz_usb_control_io$lan78xx(r0, 0x0, 0x0) syz_usb_control_io$printer(r0, 0x0, &(0x7f0000000500)={0x34, &(0x7f00000001c0)={0x0, 0x12, 0x1, "84"}, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000840)={0x84, &(0x7f0000000340)={0x0, 0x30, 0x1, 'D'}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$uac3(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000980)={0x84, &(0x7f0000000580)={0x0, 0xe, 0x1, "04"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) syz_usb_control_io$rtl8150(r0, 0x0, 0x0) syz_usb_control_io$rtl8150(r0, 0x0, &(0x7f0000000900)={0x2c, &(0x7f0000000800)={0x0, 0x16, 0x1, "dc"}, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$printer(r0, 0x0, 0x0) syz_usb_control_io$sierra_net(r0, 0x0, 0x0) syz_usb_control_io$uac3(r0, 0x0, &(0x7f0000000740)={0x44, &(0x7f0000000440)={0x20, 0x15, 0x5, "f1d4614ed2"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 1.035564339s ago: executing program 0 (id=509): r0 = syz_ublk_setup_io_uring(0x20, &(0x7f0000000040)={0x0, 0x6, 0x1000, 0x1, 0x1ba}, 0x0, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f0000000300)=@file={0x0, './file1\x00'}, 0x6e) sendmmsg$unix(r4, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x3, 0x0, 0x1, 0x0, 0xb47, 0x9, 0x0, 0x80000001, 0x3}, 0x0) syz_ublk_add_dev(r0, 0x0, r1, r2, &(0x7f0000000180)={0x2e, 0x0, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f00000000c0)=@any_dev={0x1, 0xe50, 0x0, 0x0, 0x1000, 0x2000003, 0x0, 0x0, 0x16}}}, &(0x7f0000000280)) r5 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r5, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4008}, 0x4000000) ioctl$DRM_IOCTL_MODE_GETCRTC(0xffffffffffffffff, 0xc06864a1, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, 0x0, 0x0, 0x27, 0x0, 0x0) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000480)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000004c0)=@updpolicy={0xf8, 0x19, 0x1, 0x0, 0x0, {{@in6=@rand_addr=' \x01\x00', @in=@dev={0xac, 0x14, 0x14, 0x15}, 0x0, 0x5, 0x0, 0x3, 0xa, 0xa0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, {0x0, 0xac, 0xfff, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x7fffffff, 0x10000}, {0x2, 0xa00, 0x40800000000000, 0x800000000000000}, 0x0, 0x0, 0x1, 0x0, 0x0, 0x3}, [@tmpl={0x44, 0x5, [{{@in=@empty, 0x4d2, 0x3c}, 0x0, @in=@broadcast, 0x0, 0x0, 0x3, 0x0, 0x49}]}]}, 0xf8}}, 0x4000010) r6 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r6, &(0x7f0000000000)={0xa, 0xfffe, 0x8, @mcast2, 0x9}, 0x1c) sendmmsg$inet6(r6, &(0x7f0000003cc0)=[{{0x0, 0x0, &(0x7f0000003980), 0x171}}], 0x400000000000172, 0x4001c00) 815.186949ms ago: executing program 1 (id=510): setsockopt$inet_buf(0xffffffffffffffff, 0x0, 0x8008000000010, &(0x7f0000000180)="17000000020001000003be8c5ee17688a8003200070100ecff3f0000000300000a0001000098fc5a53d3f5b7e4a96c6b0616", 0x32) r0 = landlock_create_ruleset(&(0x7f0000000180)={0x613d, 0x0, 0x0, 0x0, 0x1, 0x2}, 0x50, 0x0) r1 = socket$inet_tcp(0x2, 0x1, 0x0) r2 = socket$can_raw(0x1d, 0x3, 0x1) ioctl$ifreq_SIOCGIFINDEX_vcan(r2, 0x8933, &(0x7f0000000180)={'vxcan1\x00', 0x0}) r4 = socket(0x10, 0x2, 0x0) mremap(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x3000, 0x3, &(0x7f0000ffb000/0x3000)=nil) mkdir(&(0x7f0000000040)='./file0\x00', 0x0) r5 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x2, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', 0x0, 0x0, &(0x7f0000002140)={{'fd', 0x3d, r5}, 0x2c, {'rootmode', 0x3d, 0x4000}}) readlink(&(0x7f0000002000)='./file0/file3\x00', &(0x7f00000021c0)=""/151, 0x97) syz_fuse_handle_req(r5, &(0x7f0000009680)="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", 0x2000, &(0x7f0000002540)={&(0x7f0000002340)={0x50, 0x0, 0x3, {0x7, 0x2b, 0x9, 0x808080, 0xe, 0x8, 0x7, 0x5, 0x0, 0x0, 0x80, 0x9}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) stat(&(0x7f0000004a40)='./file0/file3\x00', 0x0) close_range(r4, 0xffffffffffffffff, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r2, 0x8933, &(0x7f0000000040)={'vcan0\x00'}) syz_usb_connect(0x5, 0x36, &(0x7f0000000640)=ANY=[@ANYBLOB="12010003560ac140ca073528e7ea010203010902240002030240020904"], &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0}) bind$can_raw(r2, &(0x7f0000000200)={0x1d, r3}, 0x10) setsockopt$CAN_RAW_RECV_OWN_MSGS(r0, 0x65, 0x4, &(0x7f0000000000)=0x1, 0x4) ioctl$sock_inet_SIOCSARP(r1, 0x8955, &(0x7f00000003c0)={{0x2, 0x4e22, @remote}, {0x20000010304, @local}, 0x6, {0x2, 0x4e20, @rand_addr=0x64010101}}) 591.517845ms ago: executing program 4 (id=511): r0 = socket$inet_tcp(0x2, 0x1, 0x6) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000000)=0x800, 0x4) bind$inet(r0, &(0x7f0000000040)={0x2, 0x4e24, @loopback}, 0x10) listen(r0, 0x5) r1 = accept$inet(r0, 0x0, 0x0) setsockopt$inet_tcp_TCP_ULP(r1, 0x6, 0x1f, &(0x7f0000000180), 0x4) setsockopt$inet_tcp_TLS_RX(r1, 0x11a, 0x2, &(0x7f0000000200)=@gcm_128={{0x303}, "1234567812345678", "12345678123456781234567812345678", "12345678", "1234567812345678"}, 0x28) recvfrom$inet(r1, &(0x7f0000000400), 0x4000, 0x0, 0x0, 0x0) 0s ago: executing program 1 (id=512): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x40022042, 0x0) mmap(&(0x7f0000001000/0x2000)=nil, 0x2000, 0x2000009, 0x32, 0xffffffffffffffff, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x1) syz_kvm_setup_cpu$x86(r1, r2, &(0x7f000033d000/0x18000)=nil, &(0x7f0000000100)=[@text32={0x20, &(0x7f00000001c0)="d8df7e23b3b9ce000000b807000000ba000000000f301b8154fea900b9b60a000080320000c4e28ddc8dcd000000c182fd3f0000c8b950020000b801000000b9a6080000b800000100ba000000000f300f300fc79d53bf0000c4b9e16dc301012202", 0xba}], 0x1, 0x10, 0x0, 0x0) r3 = socket$inet_tcp(0x2, 0x1, 0x0) connect$unix(r3, 0x0, 0x0) ppoll(&(0x7f00000001c0)=[{r3, 0x3102}], 0x1, 0x0, 0x0, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000180)={'geneve0\x00'}) sendmsg$nl_route(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000780)=ANY=[@ANYBLOB="4c0000001000010426bd7000000000"], 0x4c}}, 0x10) syz_kvm_setup_cpu$x86(r1, r2, &(0x7f0000fdf000/0x18000)=nil, &(0x7f0000000240)=[@text16={0x10, 0x0}], 0x1, 0x1b, 0x0, 0x0) r5 = syz_open_dev$dvb_demux(0x0, 0x0, 0x41) ioctl$DVB_DEMUX_DMX_SET_PES_FILTER(r5, 0x40146f2c, 0x0) ioctl$DVB_DEMUX_DMX_ADD_PID(r5, 0x40026f33, 0x0) ioctl$DVB_DEMUX_DMX_REMOVE_PID(r5, 0x40026f34, 0x0) ioctl$KVM_X86_SETUP_MCE(r2, 0x4008ae9c, &(0x7f0000000000)={0x20, 0x5, 0xfd}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000040)={[0x7df, 0x40, 0x9, 0xff, 0x10000000100006, 0x8001, 0x2, 0xb, 0x3, 0xffffffff, 0xfffffffffffffff, 0x9, 0x1, 0x20000000000fc, 0x0, 0x4], 0x8080000, 0x40005}) ioctl$KVM_RUN(r2, 0xae80, 0x0) kernel console output (not intermixed with test programs): ndpoint 0xC has invalid maxpacket 1023, setting to 64 [ 95.895638][ T187] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 95.911601][ T187] usb 4-1: Product: syz [ 95.921101][ T187] usb 4-1: Manufacturer: syz [ 95.932715][ T187] usb 4-1: SerialNumber: syz [ 95.962927][ T5798] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 95.995426][ T5814] netlink: 12 bytes leftover after parsing attributes in process `syz.2.26'. [ 96.022356][ T24] usb 1-1: New USB device found, idVendor=17e9, idProduct=8b4e, bcdDevice=9c.08 [ 96.055843][ T24] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 96.106237][ T24] usb 1-1: config 0 descriptor?? [ 96.191527][ T5669] usb 5-1: new high-speed USB device number 3 using dummy_hcd [ 96.331546][ T5669] usb 5-1: device descriptor read/64, error -71 [ 96.392319][ T5798] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 96.416397][ T5803] batman_adv: batadv0: Adding interface: macvtap1 [ 96.446388][ T5803] batman_adv: batadv0: The MTU of interface macvtap1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 96.516062][ T5803] batman_adv: batadv0: Not using interface macvtap1 (retrying later): interface not active [ 96.620081][ T5805] batman_adv: batadv0: Removing interface: macvtap1 [ 96.621722][ T5669] usb 5-1: new high-speed USB device number 4 using dummy_hcd [ 96.635831][ T5798] vivid-006: disconnect [ 96.695247][ T187] asix 4-1:127.1 (unnamed net_device) (uninitialized): Failed to read reg index 0x0000: -71 [ 96.711981][ T5797] vivid-006: reconnect [ 96.736672][ T187] asix 4-1:127.1: probe with driver asix failed with error -71 [ 96.755645][ T5706] usb 1-1: USB disconnect, device number 2 [ 96.767649][ T187] usb 4-1: USB disconnect, device number 2 [ 96.792243][ T5669] usb 5-1: device descriptor read/64, error -71 [ 96.922208][ T5669] usb usb5-port1: attempt power cycle [ 97.212660][ T24] usb 2-1: new high-speed USB device number 4 using dummy_hcd [ 97.292399][ T5669] usb 5-1: new high-speed USB device number 5 using dummy_hcd [ 97.300027][ T5706] usb 3-1: new high-speed USB device number 3 using dummy_hcd [ 97.336363][ T5669] usb 5-1: device descriptor read/8, error -71 [ 97.393178][ T24] usb 2-1: Using ep0 maxpacket: 8 [ 97.402194][ T24] usb 2-1: New USB device found, idVendor=082d, idProduct=0100, bcdDevice=70.4b [ 97.430419][ T24] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 7 [ 97.458304][ T24] usb 2-1: New USB device strings: Mfr=44, Product=2, SerialNumber=3 [ 97.467686][ T5706] usb 3-1: Using ep0 maxpacket: 32 [ 97.483174][ T5706] usb 3-1: New USB device found, idVendor=105b, idProduct=1799, bcdDevice=36.e9 [ 97.492947][ T24] usb 2-1: Product: syz [ 97.503303][ T24] usb 2-1: Manufacturer: syz [ 97.510781][ T5706] usb 3-1: config 0 has an invalid interface number: 239 but max is 0 [ 97.523637][ T24] usb 2-1: SerialNumber: syz [ 97.530379][ T5706] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 97.562693][ T5706] usb 3-1: config 0 has no interface number 0 [ 97.598834][ T5669] usb 5-1: new high-speed USB device number 6 using dummy_hcd [ 97.608158][ T5706] usb 3-1: config 0 interface 239 altsetting 4 bulk endpoint 0x2 has invalid maxpacket 8 [ 97.618769][ T5706] usb 3-1: config 0 interface 239 altsetting 4 endpoint 0x8 has invalid maxpacket 1023, setting to 64 [ 97.632958][ T5669] usb 5-1: device descriptor read/8, error -71 [ 97.646344][ T5706] usb 3-1: config 0 interface 239 altsetting 4 has an endpoint descriptor with address 0xA9, changing to 0x89 [ 97.684526][ T5706] usb 3-1: config 0 interface 239 altsetting 4 endpoint 0x89 has invalid maxpacket 28648, setting to 1024 [ 97.722387][ T5706] usb 3-1: config 0 interface 239 altsetting 4 bulk endpoint 0x89 has invalid maxpacket 1024 [ 97.743335][ T5669] usb usb5-port1: unable to enumerate USB device [ 97.749903][ T5706] usb 3-1: config 0 interface 239 altsetting 4 has an endpoint descriptor with address 0xD5, changing to 0x85 [ 97.773115][ T24] usb 2-1: Handspring Visor / Palm OS: No valid connect info available [ 97.781975][ T5706] usb 3-1: config 0 interface 239 altsetting 4 endpoint 0x85 has an invalid bInterval 252, changing to 11 [ 97.794314][ T24] usb 2-1: Handspring Visor / Palm OS: port 231, is for unknown use [ 97.802658][ T5706] usb 3-1: config 0 interface 239 altsetting 4 endpoint 0x85 has invalid wMaxPacketSize 0 [ 97.826100][ T24] usb 2-1: Handspring Visor / Palm OS: port 193, is for Debugger use [ 97.838139][ T5706] usb 3-1: config 0 interface 239 has no altsetting 0 [ 97.846762][ T24] usb 2-1: Handspring Visor / Palm OS: Number of ports: 2 [ 97.864191][ T5706] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 97.864218][ T5706] usb 3-1: Product: syz [ 97.864234][ T5706] usb 3-1: Manufacturer: syz [ 97.864249][ T5706] usb 3-1: SerialNumber: syz [ 97.867426][ T5706] usb 3-1: config 0 descriptor?? [ 97.869338][ T5822] raw-gadget.1 gadget.2: fail, usb_ep_enable returned -22 [ 97.869640][ T5822] raw-gadget.1 gadget.2: fail, usb_ep_enable returned -22 [ 97.921203][ T5620] Bluetooth: hci5: urb ffff88802bb2d400 submission failed (90) [ 97.977565][ T24] usb 2-1: palm_os_3_probe - error -71 getting bytes available request [ 97.977652][ T24] visor 2-1:1.0: Handspring Visor / Palm OS converter detected [ 97.997564][ T24] usb 2-1: Handspring Visor / Palm OS converter now attached to ttyUSB0 [ 98.037643][ T24] usb 2-1: Handspring Visor / Palm OS converter now attached to ttyUSB1 [ 98.041385][ T24] usb 2-1: USB disconnect, device number 4 [ 98.049663][ T24] visor ttyUSB0: Handspring Visor / Palm OS converter now disconnected from ttyUSB0 [ 98.079996][ T24] visor ttyUSB1: Handspring Visor / Palm OS converter now disconnected from ttyUSB1 [ 98.082163][ T24] visor 2-1:1.0: device disconnected [ 98.135401][ T5822] netlink: 60 bytes leftover after parsing attributes in process `syz.2.28'. [ 98.135578][ T5822] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 98.160265][ T5822] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 98.545407][ T5858] syz.3.32 uses obsolete (PF_INET,SOCK_PACKET) [ 99.229485][ T5858] netdevsim netdevsim3: Direct firmware load for  failed with error -2 [ 99.327921][ T5858] netdevsim netdevsim3: Falling back to sysfs fallback for:  [ 100.264580][ T24] usb 3-1: USB disconnect, device number 3 [ 103.097071][ T5870] Zero length message leads to an empty skb [ 103.551644][ T5708] usb 2-1: new high-speed USB device number 5 using dummy_hcd [ 103.648570][ T5924] syzkaller0: entered promiscuous mode [ 103.672599][ T5924] syzkaller0: entered allmulticast mode [ 103.722341][ T5708] usb 2-1: Using ep0 maxpacket: 16 [ 103.733742][ T5708] usb 2-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 103.758362][ T5708] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x84 has an invalid bInterval 0, changing to 7 [ 103.784329][ T5708] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 103.799748][ T5708] usb 2-1: Product: syz [ 103.806807][ T5708] usb 2-1: Manufacturer: syz [ 103.817950][ T5708] usb 2-1: SerialNumber: syz [ 103.837805][ T5708] usb 2-1: config 0 descriptor?? [ 103.851114][ T5708] em28xx 2-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0) [ 103.891649][ T5708] em28xx 2-1:0.0: DVB interface 0 found: isoc [ 103.994793][ T5927] i2c i2c-0: Frontend requested software zigzag, but didn't set the frequency step size [ 104.135927][ T5708] em28xx 2-1:0.0: unknown em28xx chip ID (0) [ 104.310113][ T5708] em28xx 2-1:0.0: reading from i2c device at 0xa0 failed (error=-5) [ 104.347636][ T5708] em28xx 2-1:0.0: board has no eeprom [ 104.398118][ T5940] process 'syz.3.52' launched '/dev/fd/6' with NULL argv: empty string added [ 104.449738][ T5935] program syz.0.49 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 104.492015][ T5708] em28xx 2-1:0.0: Identified as PCTV tripleStick (292e) (card=94) [ 104.524994][ T5708] em28xx 2-1:0.0: dvb set to isoc mode. [ 104.553607][ T5939] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 104.567336][ T5690] em28xx 2-1:0.0: Binding DVB extension [ 104.581232][ T5708] usb 2-1: USB disconnect, device number 5 [ 104.614384][ T5708] em28xx 2-1:0.0: Disconnecting em28xx [ 104.830472][ T5690] em28xx 2-1:0.0: Registering input extension [ 104.889074][ T5708] em28xx 2-1:0.0: Closing input extension [ 105.028188][ T5708] em28xx 2-1:0.0: Freeing device [ 105.484342][ T187] usb 3-1: new high-speed USB device number 4 using dummy_hcd [ 105.569372][ T5690] IPVS: starting estimator thread 0... [ 105.609792][ T5953] IPVS: fo: FWM 3 0x00000003 - no destination available [ 105.653275][ T187] usb 3-1: Using ep0 maxpacket: 8 [ 105.666030][ T187] usb 3-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 105.679339][ T5954] IPVS: using max 35 ests per chain, 84000 per kthread [ 105.709272][ T187] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 105.768027][ T187] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 105.810021][ T187] usb 3-1: config 0 descriptor?? [ 106.064260][ T187] iowarrior 3-1:0.0: IOWarrior product=0x1512, serial= interface=0 now attached to iowarrior0 [ 107.051446][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 107.228382][ T5968] sctp: sctp_transport_update_pmtu: Reported pmtu 68 too low, using default minimum of 512 [ 107.356401][ T5706] usb 3-1: USB disconnect, device number 4 [ 107.595000][ T5968] sctp: sctp_transport_update_pmtu: Reported pmtu 68 too low, using default minimum of 512 [ 108.824010][ T4922] usb 4-1: new high-speed USB device number 3 using dummy_hcd [ 108.991482][ T4922] usb 4-1: Using ep0 maxpacket: 16 [ 109.009749][ T4922] usb 4-1: New USB device found, idVendor=0471, idProduct=0327, bcdDevice=61.a4 [ 109.051739][ T187] usb 1-1: new full-speed USB device number 3 using dummy_hcd [ 109.059847][ T4922] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 109.125874][ T4922] usb 4-1: config 0 descriptor?? [ 109.144154][ T6005] netlink: 24 bytes leftover after parsing attributes in process `syz.1.66'. [ 109.199261][ T4922] gspca_main: sonixj-2.14.0 probing 0471:0327 [ 109.243286][ T187] usb 1-1: New USB device found, idVendor=1286, idProduct=1fa4, bcdDevice=fb.16 [ 109.313686][ T187] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 109.400133][ T187] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 109.450950][ T187] usb 1-1: Product: syz [ 109.476116][ T187] usb 1-1: Manufacturer: syz [ 109.493786][ T187] usb 1-1: SerialNumber: syz [ 109.539100][ T187] usb 1-1: config 0 descriptor?? [ 109.635879][ T187] mvusb_mdio 1-1:0.0: probe with driver mvusb_mdio failed with error -5 [ 109.891593][ T24] usb 2-1: new high-speed USB device number 6 using dummy_hcd [ 110.085991][ T24] usb 2-1: Using ep0 maxpacket: 8 [ 110.094899][ T24] usb 2-1: New USB device found, idVendor=1660, idProduct=0932, bcdDevice=80.ea [ 110.124072][ T24] usb 2-1: config index 0 descriptor too short (expected 30, got 18) [ 110.155459][ T24] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 110.191809][ T24] usb 2-1: Product: syz [ 110.204936][ T24] usb 2-1: Manufacturer: syz [ 110.220915][ T24] usb 2-1: SerialNumber: syz [ 110.264116][ T24] usb 2-1: config 0 descriptor?? [ 110.298777][ T24] dvb-usb: found a 'Medion MD95700 (MDUSBTV-HYBRID)' in warm state. [ 110.315636][ T24] usb 2-1: setting power ON [ 110.351936][ T24] dvb-usb: bulk message failed: -22 (2/0) [ 110.377820][ T24] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 110.415909][ T24] dvbdev: DVB: registering new adapter (Medion MD95700 (MDUSBTV-HYBRID)) [ 110.436162][ T4922] gspca_sonixj: reg_w1 err -71 [ 110.456151][ T24] usb 2-1: media controller created [ 110.461881][ T4922] sonixj 4-1:0.0: probe with driver sonixj failed with error -71 [ 110.504191][ T6020] dvb-usb: bulk message failed: -22 (3/0) [ 110.543344][ T4922] usb 4-1: USB disconnect, device number 3 [ 110.591556][ T24] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 110.666423][ T24] usb 2-1: selecting invalid altsetting 6 [ 110.685307][ T24] usb 2-1: digital interface selection failed (-22) [ 110.735047][ T24] dvb-usb: no frontend was attached by 'Medion MD95700 (MDUSBTV-HYBRID)' [ 110.761062][ T24] usb 2-1: setting power OFF [ 110.769476][ T24] dvb-usb: bulk message failed: -22 (2/0) [ 110.789241][ T24] dvb-usb: Medion MD95700 (MDUSBTV-HYBRID) successfully initialized and connected. [ 110.819357][ T24] (NULL device *): no alternate interface [ 110.924533][ T24] dvb-usb: Medion MD95700 (MDUSBTV-HYBRID) successfully deinitialized and disconnected. [ 111.002320][ T24] usb 2-1: USB disconnect, device number 6 [ 111.557046][ T6032] x_tables: ip6_tables: mh match: only valid for protocol 135 [ 111.898400][ T6035] syzkaller0: entered promiscuous mode [ 111.981579][ T6035] syzkaller0: entered allmulticast mode [ 112.291007][ T30] audit: type=1326 audit(1786469366.097:2): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6041 comm="syz.4.72" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f312059e0d9 code=0x0 [ 112.346467][ T24] usb 1-1: USB disconnect, device number 3 [ 112.403163][ T6046] xt_TCPMSS: path-MTU clamping only supported in FORWARD, OUTPUT and POSTROUTING hooks [ 112.661987][ T5690] usb 2-1: new high-speed USB device number 7 using dummy_hcd [ 112.821936][ T5690] usb 2-1: Using ep0 maxpacket: 16 [ 112.834327][ T5690] usb 2-1: New USB device found, idVendor=0b95, idProduct=772a, bcdDevice=82.73 [ 112.854104][ T5690] usb 2-1: config 0 has an invalid interface number: 34 but max is 0 [ 112.872588][ T5690] usb 2-1: config 0 has no interface number 0 [ 112.885545][ T5690] usb 2-1: config 0 interface 34 altsetting 0 bulk endpoint 0xA has invalid maxpacket 1023 [ 112.911958][ T5690] usb 2-1: config 0 interface 34 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 80 [ 112.955976][ T5690] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 112.965908][ T5690] usb 2-1: Product: syz [ 112.976330][ T5690] usb 2-1: Manufacturer: syz [ 112.999153][ T5690] usb 2-1: SerialNumber: syz [ 113.067073][ T5690] usb 2-1: config 0 descriptor?? [ 113.085031][ T6045] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 113.107797][ T6045] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 113.399879][ T6045] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 113.418501][ T6045] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 113.640939][ T5690] asix 2-1:0.34 (unnamed net_device) (uninitialized): Failed to read reg index 0x0000: -61 [ 113.663971][ T5690] asix 2-1:0.34: probe with driver asix failed with error -61 [ 114.000193][ T6066] vhci_hcd vhci_hcd.0: pdev(2) rhport(0) sockfd(3) [ 114.006879][ T6066] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 114.021576][ T6066] vhci_hcd vhci_hcd.0: Device attached [ 114.064377][ T6067] vhci_hcd: connection closed [ 114.070485][ T1033] vhci_hcd vhci_hcd.2: stop threads [ 114.081818][ T1033] vhci_hcd vhci_hcd.2: release socket [ 114.091563][ T1033] vhci_hcd vhci_hcd.2: disconnect device [ 114.848704][ T6062] batman_adv: batadv0: Adding interface: dummy0 [ 114.877148][ T6062] batman_adv: batadv0: The MTU of interface dummy0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 114.920930][ T6062] batman_adv: batadv0: Interface activated: dummy0 [ 114.954413][ T6063] batadv0: mtu less than device minimum [ 114.962369][ T6063] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 114.974697][ T6063] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 114.986620][ T6063] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 114.998443][ T6063] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 115.010270][ T6063] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 115.022101][ T6063] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 115.033816][ T6063] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 115.045652][ T6063] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 115.057462][ T6063] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 115.181527][ T5690] usb 3-1: new high-speed USB device number 5 using dummy_hcd [ 115.341492][ T5690] usb 3-1: Using ep0 maxpacket: 32 [ 115.362343][ T5690] usb 3-1: New USB device found, idVendor=2040, idProduct=c612, bcdDevice=e5.51 [ 115.390300][ T5690] usb 3-1: config 123 interface 0 has no altsetting 0 [ 115.409823][ T5690] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 115.436291][ T5690] usb 3-1: Product: syz [ 115.442935][ T5690] usb 3-1: Manufacturer: syz [ 115.466799][ T5690] usb 3-1: SerialNumber: syz [ 116.069949][ T5669] usb 2-1: USB disconnect, device number 7 [ 116.387459][ T5690] usb 3-1: dvb_usb_v2: found a 'Hauppauge 126xxx' in warm state [ 116.477867][ T5690] usb 3-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 116.519025][ T5690] dvbdev: DVB: registering new adapter (Hauppauge 126xxx) [ 116.558520][ T5690] usb 3-1: media controller created [ 116.622551][ T5690] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 116.732290][ T5690] set interface failed [ 116.737190][ T5690] usb 3-1: dvb_usb_v2: usb_bulk_msg() failed=-22 [ 116.768746][ T5690] error writing reg: 0xff, val: 0x00 [ 116.886863][ T5690] dvb_usb_mxl111sf 3-1:123.0: probe with driver dvb_usb_mxl111sf failed with error -22 [ 116.937146][ T5690] usb 3-1: USB disconnect, device number 5 [ 117.757183][ T6115] vhci_hcd vhci_hcd.0: pdev(4) rhport(0) sockfd(5) [ 117.763752][ T6115] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 117.812520][ T6115] vhci_hcd vhci_hcd.0: Device attached [ 117.823919][ T6119] vhci_hcd vhci_hcd.0: pdev(4) rhport(1) sockfd(7) [ 117.830483][ T6119] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 117.839931][ T6119] vhci_hcd vhci_hcd.0: Device attached [ 117.854047][ T6115] vhci_hcd vhci_hcd.0: pdev(4) rhport(2) sockfd(9) [ 117.860582][ T6115] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 117.878392][ T6115] vhci_hcd vhci_hcd.0: Device attached [ 117.892355][ T6115] vhci_hcd vhci_hcd.0: pdev(4) rhport(3) sockfd(11) [ 117.899004][ T6115] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 117.918116][ T6115] vhci_hcd vhci_hcd.0: Device attached [ 117.941776][ T6115] vhci_hcd vhci_hcd.0: pdev(4) rhport(4) sockfd(13) [ 117.948409][ T6115] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 117.977253][ T6115] vhci_hcd vhci_hcd.0: Device attached [ 118.022941][ T6119] vhci_hcd vhci_hcd.0: pdev(4) rhport(5) sockfd(15) [ 118.029572][ T6119] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 118.044591][ T5708] usb 41-1: new high-speed USB device number 2 using vhci_hcd [ 118.074110][ T6119] vhci_hcd vhci_hcd.0: Device attached [ 118.099538][ T6115] vhci_hcd vhci_hcd.0: pdev(4) rhport(6) sockfd(18) [ 118.106210][ T6115] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 118.140863][ T6115] vhci_hcd vhci_hcd.0: Device attached [ 118.161757][ T6119] vhci_hcd vhci_hcd.0: pdev(4) rhport(7) sockfd(17) [ 118.168389][ T6119] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 118.182972][ T6119] vhci_hcd vhci_hcd.0: Device attached [ 118.278717][ T6133] vhci_hcd: connection closed [ 118.279220][ T36] vhci_hcd vhci_hcd.4: stop threads [ 118.290177][ T6128] vhci_hcd: connection closed [ 118.290585][ T6124] vhci_hcd: connection closed [ 118.292230][ T6136] vhci_hcd: connection closed [ 118.295662][ T6116] vhci_hcd: connection reset by peer [ 118.302642][ T6126] vhci_hcd: connection closed [ 118.305007][ T6120] vhci_hcd: connection closed [ 118.321497][ T6122] vhci_hcd: connection closed [ 118.342605][ T36] vhci_hcd vhci_hcd.4: release socket [ 118.364107][ T36] vhci_hcd vhci_hcd.4: disconnect device [ 118.377942][ T36] vhci_hcd vhci_hcd.4: stop threads [ 118.389071][ T36] vhci_hcd vhci_hcd.4: release socket [ 118.405450][ T36] vhci_hcd vhci_hcd.4: disconnect device [ 118.429317][ T36] vhci_hcd vhci_hcd.4: stop threads [ 118.451320][ T36] vhci_hcd vhci_hcd.4: release socket [ 118.474494][ T36] vhci_hcd vhci_hcd.4: disconnect device [ 118.489348][ T36] vhci_hcd vhci_hcd.4: stop threads [ 118.507188][ T36] vhci_hcd vhci_hcd.4: release socket [ 118.528212][ T36] vhci_hcd vhci_hcd.4: disconnect device [ 118.549717][ T36] vhci_hcd vhci_hcd.4: stop threads [ 118.571553][ T36] vhci_hcd vhci_hcd.4: release socket [ 118.591113][ T36] vhci_hcd vhci_hcd.4: disconnect device [ 118.615414][ T36] vhci_hcd vhci_hcd.4: stop threads [ 118.631164][ T36] vhci_hcd vhci_hcd.4: release socket [ 118.646090][ T36] vhci_hcd vhci_hcd.4: disconnect device [ 118.661229][ T36] vhci_hcd vhci_hcd.4: stop threads [ 118.688435][ T36] vhci_hcd vhci_hcd.4: release socket [ 118.716635][ T36] vhci_hcd vhci_hcd.4: disconnect device [ 118.742582][ T36] vhci_hcd vhci_hcd.4: stop threads [ 118.750209][ T36] vhci_hcd vhci_hcd.4: release socket [ 118.772191][ T36] vhci_hcd vhci_hcd.4: disconnect device [ 118.858253][ T6146] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 118.922717][ T6148] netlink: 'syz.0.95': attribute type 1 has an invalid length. [ 120.421830][ T187] usb 2-1: new high-speed USB device number 8 using dummy_hcd [ 120.459622][ T6171] xt_hashlimit: size too large, truncated to 1048576 [ 120.582980][ T187] usb 2-1: Using ep0 maxpacket: 16 [ 120.617610][ T187] usb 2-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 120.643573][ T187] usb 2-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xF3, changing to 0x83 [ 120.700084][ T187] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 120.753616][ T187] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 120.783766][ T187] usb 2-1: Product: syz [ 120.792517][ T187] usb 2-1: Manufacturer: syz [ 120.800448][ T187] usb 2-1: SerialNumber: syz [ 120.838114][ T187] usb 2-1: config 0 descriptor?? [ 120.868327][ T187] em28xx 2-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0) [ 120.895103][ T187] em28xx 2-1:0.0: Audio interface 0 found (Vendor Class) [ 120.903528][ T6160] netdevsim netdevsim0: Direct firmware load for  failed with error -2 [ 120.926989][ T6160] netdevsim netdevsim0: Falling back to sysfs fallback for:  [ 121.316321][ T6166] netlink: 12 bytes leftover after parsing attributes in process `syz.1.101'. [ 121.612077][ T187] em28xx 2-1:0.0: unknown em28xx chip ID (0) [ 121.629689][ T187] em28xx 2-1:0.0: Config register raw data: 0xfffffffb [ 121.668667][ T187] em28xx 2-1:0.0: AC97 chip type couldn't be determined [ 121.704017][ T187] em28xx 2-1:0.0: No AC97 audio processor [ 121.754386][ T187] usb 2-1: USB disconnect, device number 8 [ 121.770155][ T187] em28xx 2-1:0.0: Disconnecting em28xx [ 121.856548][ T187] em28xx 2-1:0.0: Freeing device [ 122.287226][ T6196] syzkaller0: entered promiscuous mode [ 122.300247][ T6196] syzkaller0: entered allmulticast mode [ 122.793004][ T6199] netlink: 20 bytes leftover after parsing attributes in process `syz.3.109'. [ 123.162624][ T5708] vhci_hcd vhci_hcd.4: vhci_device speed not set [ 123.263609][ T187] usb 5-1: new high-speed USB device number 7 using dummy_hcd [ 123.451789][ T187] usb 5-1: Using ep0 maxpacket: 16 [ 123.465780][ T187] usb 5-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 123.479078][ T187] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 123.507565][ T187] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 123.550045][ T187] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 123.552147][ T6208] netlink: 12 bytes leftover after parsing attributes in process `syz.0.112'. [ 123.584038][ T187] usb 5-1: Product: syz [ 123.596712][ T187] usb 5-1: Manufacturer: syz [ 123.602596][ T187] usb 5-1: SerialNumber: syz [ 123.662920][ T187] usb 5-1: 0:2 : does not exist [ 123.878393][ T187] usb 5-1: 5:0: failed to get current value for ch 0 (-22) [ 124.011852][ T10] usb 1-1: new high-speed USB device number 4 using dummy_hcd [ 124.023241][ T187] usb 5-1: USB disconnect, device number 7 [ 124.164416][ T5614] udevd[5614]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 124.202413][ T10] usb 1-1: Using ep0 maxpacket: 16 [ 124.216626][ T10] usb 1-1: New USB device found, idVendor=054c, idProduct=0038, bcdDevice=16.f5 [ 124.238405][ T10] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 124.247351][ T10] usb 1-1: Product: syz [ 124.255293][ T10] usb 1-1: Manufacturer: syz [ 124.260167][ T10] usb 1-1: SerialNumber: syz [ 124.282423][ T10] usb 1-1: config 0 descriptor?? [ 124.298095][ T10] visor 1-1:0.0: Sony Clie 3.5 converter detected [ 124.463795][ T6208] netlink: 48 bytes leftover after parsing attributes in process `syz.0.112'. [ 124.485333][ T5690] usb usb42-port8: attempt power cycle [ 124.503025][ T10] usb 1-1: clie_3_5_startup: get config number bad return length: 0 [ 124.537769][ T10] visor 1-1:0.0: probe with driver visor failed with error -5 [ 124.832700][ T4922] usb 1-1: USB disconnect, device number 4 [ 124.971948][ T10] usb 5-1: new high-speed USB device number 8 using dummy_hcd [ 125.119784][ T5690] usb usb42-port8: unable to enumerate USB device [ 125.142113][ T10] usb 5-1: Using ep0 maxpacket: 8 [ 125.181554][ T10] usb 5-1: New USB device found, idVendor=0c45, idProduct=8003, bcdDevice=f9.64 [ 125.207925][ T10] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=67 [ 125.217221][ T10] usb 5-1: Product: syz [ 125.225928][ T10] usb 5-1: Manufacturer: syz [ 125.234728][ T10] usb 5-1: SerialNumber: syz [ 125.241645][ T10] usb 5-1: config 0 descriptor?? [ 125.255454][ T10] gspca_main: sn9c2028-2.14.0 probing 0c45:8003 [ 125.457026][ T10] gspca_sn9c2028: read1 error -32 [ 125.533880][ T6227] netlink: 'syz.0.117': attribute type 1 has an invalid length. [ 125.566104][ T6227] netlink: 'syz.0.117': attribute type 2 has an invalid length. [ 125.597873][ T6228] netlink: 8 bytes leftover after parsing attributes in process `syz.0.117'. [ 125.670993][ T6223] xt_hashlimit: size too large, truncated to 1048576 [ 125.986676][ T10] gspca_sn9c2028: read1 error -110 [ 126.010040][ T10] sn9c2028 5-1:0.0: probe with driver sn9c2028 failed with error -110 [ 127.197281][ T10] usb 5-1: USB disconnect, device number 8 [ 127.888808][ T6243] loop9: detected capacity change from 0 to 7 [ 127.914448][ C1] I/O error, dev loop9, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 127.924270][ C1] Buffer I/O error on dev loop9, logical block 0, async page read [ 127.975381][ C1] I/O error, dev loop9, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 127.985083][ C1] Buffer I/O error on dev loop9, logical block 0, async page read [ 128.012558][ T6244] loop9: detected capacity change from 7 to 0 [ 128.020743][ C1] I/O error, dev loop9, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 128.020863][ C1] Buffer I/O error on dev loop9, logical block 0, async page read [ 128.021882][ T6243] ldm_validate_partition_table(): Disk read failed. [ 128.021918][ T6243] Dev loop9: unable to read RDB block 0 [ 128.021939][ T6243] loop9: unable to read partition table [ 128.022077][ T6243] loop9: partition table beyond EOD, truncated [ 128.022101][ T6243] loop_reread_partitions: partition scan of loop9 (XV3g$r+t dԫ9$BSW?DF,CdȊ΄g)+Gzm) failed (rc=-5) [ 128.596058][ T6255] nvme_fabrics: missing parameter 'transport=%s' [ 128.605094][ T6255] nvme_fabrics: missing parameter 'nqn=%s' [ 129.205540][ T6263] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 130.278454][ T6272] syzkaller0: entered promiscuous mode [ 130.297152][ T6272] syzkaller0: entered allmulticast mode [ 130.415975][ T6272] tipc: Started in network mode [ 130.488010][ T6272] tipc: Node identity c6ac6f166dec, cluster identity 4711 [ 130.571824][ T6272] tipc: Enabled bearer , priority 0 [ 130.748104][ T6247] netdevsim netdevsim4: Direct firmware load for  failed with error -2 [ 130.780541][ T6247] netdevsim netdevsim4: Falling back to sysfs fallback for:  [ 130.866241][ T6271] tipc: Resetting bearer [ 130.999984][ T6276] vhci_hcd vhci_hcd.0: pdev(1) rhport(0) sockfd(3) [ 131.006561][ T6276] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 131.059458][ T6271] tipc: Disabling bearer [ 131.071658][ T6276] vhci_hcd vhci_hcd.0: Device attached [ 131.312343][ T4922] usb 35-1: new low-speed USB device number 2 using vhci_hcd [ 131.320293][ T5669] usb 2-1: new high-speed USB device number 9 using dummy_hcd [ 131.491714][ T5669] usb 2-1: Using ep0 maxpacket: 16 [ 131.615590][ T6277] usb 35-1: recv xbuf, 0 [ 131.625043][ T48] vhci_hcd vhci_hcd.1: stop threads [ 131.647409][ T48] vhci_hcd vhci_hcd.1: release socket [ 131.677922][ T5669] usb 2-1: unable to get BOS descriptor or descriptor too short [ 131.696291][ T48] vhci_hcd vhci_hcd.1: disconnect device [ 131.718386][ T5669] usb 2-1: New USB device found, idVendor=0000, idProduct=0000, bcdDevice= 0.00 [ 131.786204][ T5669] usb 2-1: no configurations [ 131.842846][ T5669] usb 2-1: can't read configurations, error -22 [ 131.894972][ T6292] PKCS7: Unknown OID: [4] 5.25.43183.11314.97.496.3.846527319083.2007.15776 [ 131.924003][ T6289] VFS: Lookup of 'binder0' in fuse fuse would have caused loop [ 131.954253][ T6292] PKCS7: Only support pkcs7_signedData type [ 132.308442][ T10] usb 3-1: new high-speed USB device number 6 using dummy_hcd [ 132.505974][ T10] usb 3-1: device descriptor read/64, error -71 [ 132.786433][ T1304] ieee802154 phy0 wpan0: encryption failed: -22 [ 132.794510][ T1304] ieee802154 phy1 wpan1: encryption failed: -22 [ 132.824225][ T10] usb 3-1: new high-speed USB device number 7 using dummy_hcd [ 132.991592][ T10] usb 3-1: device descriptor read/64, error -71 [ 133.145764][ T10] usb usb3-port1: attempt power cycle [ 133.501636][ T10] usb 3-1: new high-speed USB device number 8 using dummy_hcd [ 133.569711][ T10] usb 3-1: device descriptor read/8, error -71 [ 133.821614][ T10] usb 3-1: new high-speed USB device number 9 using dummy_hcd [ 133.882903][ T10] usb 3-1: device descriptor read/8, error -71 [ 134.011243][ T6321] kAFS: unable to lookup cell '(,c' [ 134.025079][ T10] usb usb3-port1: unable to enumerate USB device [ 134.291908][ T10] usb 5-1: new high-speed USB device number 9 using dummy_hcd [ 134.463632][ T10] usb 5-1: Using ep0 maxpacket: 32 [ 134.486323][ T10] usb 5-1: New USB device found, idVendor=0424, idProduct=9901, bcdDevice=c2.57 [ 134.524334][ T10] usb 5-1: config 0 has an invalid interface number: 67 but max is 0 [ 134.553866][ T10] usb 5-1: config 0 has no interface number 0 [ 134.577244][ T10] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 134.594095][ T10] usb 5-1: Product: syz [ 134.615329][ T10] usb 5-1: Manufacturer: syz [ 134.671956][ T10] usb 5-1: SerialNumber: syz [ 134.710855][ T10] usb 5-1: config 0 descriptor?? [ 134.876047][ T6326] syzkaller0: entered promiscuous mode [ 134.907360][ T6326] syzkaller0: entered allmulticast mode [ 135.188222][ T10] smsc95xx 5-1:0.67 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000030: -32 [ 135.231364][ T10] smsc95xx 5-1:0.67 (unnamed net_device) (uninitialized): Error reading E2P_CMD [ 135.471444][ T0] NOHZ tick-stop error: local softirq work is pending, handler #202!!! [ 136.108113][ T5708] usb 2-1: new high-speed USB device number 11 using dummy_hcd [ 136.372632][ T5708] usb 2-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 136.421218][ T5708] usb 2-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 136.445136][ T5708] usb 2-1: config 27 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 136.459451][ T5708] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 136.501154][ T6329] raw-gadget.2 gadget.1: fail, usb_ep_enable returned -22 [ 136.576753][ T5708] usb 2-1: Quirk or no altset; falling back to MIDI 1.0 [ 136.585819][ T5708] usb 2-1: invalid MIDI in EP 0 [ 136.761587][ T4922] usb 3-1: new high-speed USB device number 10 using dummy_hcd [ 136.973065][ T4922] usb 3-1: New USB device found, idVendor=04fc, idProduct=504a, bcdDevice=43.02 [ 136.999397][ T4922] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 137.017096][ T4922] usb 3-1: Product: syz [ 137.040442][ T4922] usb 3-1: Manufacturer: syz [ 137.050566][ T4922] usb 3-1: SerialNumber: syz [ 137.083068][ T4922] usb 3-1: config 0 descriptor?? [ 137.097899][ T4922] gspca_main: sunplus-2.14.0 probing 04fc:504a [ 137.336080][ T6331] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 137.358031][ T6331] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 137.458832][ T5708] snd-usb-audio 2-1:27.0: probe with driver snd-usb-audio failed with error -22 [ 137.541841][ T5708] usb 2-1: USB disconnect, device number 11 [ 137.633248][ T4922] gspca_sunplus: reg_r err -110 [ 138.017548][ T6339] netlink: 'syz.3.147': attribute type 8 has an invalid length. [ 138.026242][ T6339] netlink: 4 bytes leftover after parsing attributes in process `syz.3.147'. [ 138.361834][ T10] smsc95xx 5-1:0.67 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000000: -71 [ 138.391818][ T10] smsc95xx 5-1:0.67: probe with driver smsc95xx failed with error -71 [ 138.414393][ T10] usb 5-1: USB disconnect, device number 9 [ 138.516072][ T5708] usb 3-1: USB disconnect, device number 10 [ 139.491761][ T5669] usb 2-1: new full-speed USB device number 12 using dummy_hcd [ 139.665967][ T5669] usb 2-1: New USB device found, idVendor=04b8, idProduct=0202, bcdDevice= 0.40 [ 139.701943][ T5669] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 139.730382][ T5669] usb 2-1: Product: syz [ 139.736314][ T5669] usb 2-1: Manufacturer: syz [ 139.744690][ T5669] usb 2-1: SerialNumber: syz [ 139.888254][ T6339] bond0: entered promiscuous mode [ 139.897956][ T6339] bond_slave_0: entered promiscuous mode [ 139.912076][ T6339] bond_slave_1: entered promiscuous mode [ 139.926151][ T6339] gretap0: entered promiscuous mode [ 139.940520][ T6339] team0: entered promiscuous mode [ 139.951512][ T6339] team_slave_0: entered promiscuous mode [ 139.959604][ T6339] team_slave_1: entered promiscuous mode [ 139.979882][ T6339] hsr1: entered promiscuous mode [ 140.199292][ T5669] usblp 2-1:1.0: usblp0: USB Unidirectional printer dev 12 if 0 alt 0 proto 1 vid 0x04B8 pid 0x0202 [ 140.322215][ T187] usb 1-1: new high-speed USB device number 5 using dummy_hcd [ 140.494931][ T187] usb 1-1: New USB device found, idVendor=05ac, idProduct=8243, bcdDevice=8b.40 [ 140.515204][ T187] usb 1-1: too many endpoints for config 0 interface 0 altsetting 0: 253, using maximum allowed: 30 [ 140.542147][ T187] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 140.579832][ T187] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 140.596412][ T187] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 253 [ 140.617826][ T187] usb 1-1: New USB device strings: Mfr=11, Product=0, SerialNumber=0 [ 140.629976][ T187] usb 1-1: Manufacturer: syz [ 140.649792][ T187] usb 1-1: config 0 descriptor?? [ 140.861647][ T24] usb 3-1: new high-speed USB device number 11 using dummy_hcd [ 141.031480][ T24] usb 3-1: Using ep0 maxpacket: 16 [ 141.046726][ T24] usb 3-1: unable to get BOS descriptor or descriptor too short [ 141.064706][ T24] usb 3-1: New USB device found, idVendor=103d, idProduct=0100, bcdDevice= 0.40 [ 141.093091][ T24] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 141.112350][ T24] usb 3-1: config 1 interface 2 altsetting 1 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 141.114676][ T187] appleir 0003:05AC:8243.0001: unknown main item tag 0x0 [ 141.139829][ T24] usb 3-1: config 1 interface 1 has no altsetting 0 [ 141.163365][ T24] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 141.179611][ T187] appleir 0003:05AC:8243.0001: hiddev1,hidraw0: USB HID v0.00 Device [syz] on usb-dummy_hcd.0-1/input0 [ 141.180088][ T24] usb 3-1: Product: syz [ 141.215515][ T24] usb 3-1: Manufacturer: syz [ 141.230360][ T24] usb 3-1: SerialNumber: syz [ 141.244088][ T6376] syzkaller0: entered promiscuous mode [ 141.254391][ T6376] syzkaller0: entered allmulticast mode [ 141.312972][ T6376] tipc: Started in network mode [ 141.331566][ T6376] tipc: Node identity 162907b006b, cluster identity 4711 [ 141.357375][ T6376] tipc: Enabled bearer , priority 0 [ 141.379253][ T6382] netlink: 11 bytes leftover after parsing attributes in process `syz.0.152'. [ 141.388830][ T6376] tipc: Resetting bearer [ 141.420498][ T6375] tipc: Resetting bearer [ 141.486240][ T6375] tipc: Disabling bearer [ 141.715716][ T5708] usb 1-1: USB disconnect, device number 5 [ 141.741366][ T24] usb 3-1: Audio class v2/v3 interfaces need an interface association [ 141.769363][ T24] snd-usb-audio 3-1:1.0: probe with driver snd-usb-audio failed with error -22 [ 141.877434][ T24] usb 3-1: USB disconnect, device number 11 [ 142.271070][ T5708] usb 2-1: USB disconnect, device number 12 [ 142.298556][ T6390] net_ratelimit: 10 callbacks suppressed [ 142.298580][ T6390] netlink: NAT attribute has 1 unknown bytes [ 142.324805][ T5708] usblp0: removed [ 142.341741][ T6390] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 142.400986][ T6396] netlink: 52 bytes leftover after parsing attributes in process `syz.4.161'. [ 142.744860][ T6405] syzkaller0: entered promiscuous mode [ 142.768504][ T6405] syzkaller0: entered allmulticast mode [ 143.053461][ T5708] usb 2-1: new high-speed USB device number 13 using dummy_hcd [ 143.221535][ T5708] usb 2-1: Using ep0 maxpacket: 8 [ 143.233260][ T5708] usb 2-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 143.264661][ T5708] usb 2-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 56832, setting to 1024 [ 143.296700][ T5708] usb 2-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024 [ 143.335090][ T5708] usb 2-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 143.363376][ T5708] usb 2-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 143.383454][ T5708] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 143.661593][ T5708] usb 2-1: GET_CAPABILITIES returned 0 [ 143.674702][ T5708] usbtmc 2-1:16.0: can't read capabilities [ 143.724793][ T6427] syzkaller0: entered promiscuous mode [ 143.746115][ T6427] syzkaller0: entered allmulticast mode [ 143.889339][ T5708] usb 2-1: USB disconnect, device number 13 [ 144.241714][ T4922] usb 4-1: new high-speed USB device number 4 using dummy_hcd [ 144.413902][ T4922] usb 4-1: New USB device found, idVendor=0c10, idProduct=0000, bcdDevice=5d.91 [ 144.433433][ T4922] usb 4-1: config 0 has an invalid interface number: 252 but max is 0 [ 144.442998][ T4922] usb 4-1: config 0 has no interface number 0 [ 144.449200][ T4922] usb 4-1: config 0 interface 252 has no altsetting 0 [ 144.489737][ T4922] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 144.545181][ T4922] usb 4-1: Product: syz [ 144.555355][ T4922] usb 4-1: Manufacturer: syz [ 144.578327][ T4922] usb 4-1: SerialNumber: syz [ 144.604878][ T4922] usb 4-1: config 0 descriptor?? [ 144.741548][ T187] usb 1-1: new full-speed USB device number 6 using dummy_hcd [ 144.918289][ T187] usb 1-1: New USB device found, idVendor=3344, idProduct=22f0, bcdDevice=ef.4d [ 144.981346][ T187] usb 1-1: config 2 has an invalid descriptor of length 0, skipping remainder of the config [ 145.002693][ T6449] netlink: 8 bytes leftover after parsing attributes in process `syz.3.174'. [ 145.020227][ T187] usb 1-1: config 2 has 0 interfaces, different from the descriptor's value: 1 [ 145.058467][ T187] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 145.082889][ T187] usb 1-1: Product: syz [ 145.095258][ T187] usb 1-1: Manufacturer: syz [ 145.108667][ T187] usb 1-1: SerialNumber: syz [ 145.232020][ T5706] usb 5-1: new full-speed USB device number 10 using dummy_hcd [ 145.408477][ T5706] usb 5-1: unable to get BOS descriptor or descriptor too short [ 145.439025][ T5706] usb 5-1: not running at top speed; connect to a high speed hub [ 145.460624][ T5706] usb 5-1: New USB device found, idVendor=0644, idProduct=800f, bcdDevice= 0.40 [ 145.517943][ T5706] usb 5-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 248, changing to 4 [ 145.533253][ T5706] usb 5-1: config 1 interface 1 altsetting 1 endpoint 0x1 has invalid maxpacket 1024, setting to 1023 [ 145.555784][ T5706] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 145.571546][ T5706] usb 5-1: Product: syz [ 145.588157][ T5706] usb 5-1: Manufacturer: syz [ 145.599137][ T5706] usb 5-1: SerialNumber: syz [ 145.704992][ T6457] syz.1.182: vmalloc error: size 9223372036854775807, exceeds total pages, mode:0xcc0(GFP_KERNEL), nodemask=(null),cpuset=/,mems_allowed=0-1 [ 145.743145][ T6457] CPU: 0 UID: 0 PID: 6457 Comm: syz.1.182 Not tainted syzkaller #0 PREEMPT(full) [ 145.743176][ T6457] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 145.743189][ T6457] Call Trace: [ 145.743198][ T6457] [ 145.743206][ T6457] dump_stack_lvl+0xe8/0x150 [ 145.743241][ T6457] warn_alloc+0x24c/0x270 [ 145.743274][ T6457] ? __pfx_warn_alloc+0x10/0x10 [ 145.743313][ T6457] ? __mutex_trylock_common+0x15f/0x270 [ 145.743348][ T6457] __vmalloc_node_range_noprof+0x12c/0x1730 [ 145.743386][ T6457] ? rcu_is_watching+0x15/0xb0 [ 145.743411][ T6457] ? trace_contention_end+0x3d/0x140 [ 145.743447][ T6457] ? __mutex_lock+0x30d/0x1550 [ 145.743481][ T6457] ? tomoyo_path_number_perm+0x219/0x5f0 [ 145.743511][ T6457] ? tomoyo_path_number_perm+0x219/0x5f0 [ 145.743540][ T6457] ? dvb_dvr_do_ioctl+0x76/0x220 [ 145.743560][ T6457] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 145.743590][ T6457] ? do_vfs_ioctl+0x116f/0x1530 [ 145.743621][ T6457] ? dvb_dvr_do_ioctl+0x12b/0x220 [ 145.743646][ T6457] vmalloc_noprof+0xb2/0xe0 [ 145.743668][ T6457] ? dvb_dvr_do_ioctl+0x12b/0x220 [ 145.743697][ T6457] dvb_dvr_do_ioctl+0x12b/0x220 [ 145.743726][ T6457] dvb_usercopy+0x199/0x2e0 [ 145.743760][ T6457] ? __pfx_dvb_dvr_do_ioctl+0x10/0x10 [ 145.743786][ T6457] ? __pfx_dvb_usercopy+0x10/0x10 [ 145.743816][ T6457] ? __fget_files+0x3a2/0x420 [ 145.743845][ T6457] ? __fget_files+0x2a/0x420 [ 145.743865][ T6457] ? __pfx_dvb_dvr_ioctl+0x10/0x10 [ 145.743883][ T6457] dvb_dvr_ioctl+0x29/0x40 [ 145.743918][ T6457] __se_sys_ioctl+0xfc/0x170 [ 145.743938][ T6457] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 145.743959][ T6457] do_syscall_64+0x174/0x580 [ 145.743985][ T6457] ? clear_bhb_loop+0x70/0xc0 [ 145.744013][ T6457] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 145.744028][ T6457] RIP: 0033:0x7f76ee79e0d9 [ 145.744048][ T6457] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 145.744076][ T6457] RSP: 002b:00007f76ef6ed028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 145.744098][ T6457] RAX: ffffffffffffffda RBX: 00007f76eea25fa0 RCX: 00007f76ee79e0d9 [ 145.744111][ T6457] RDX: 7fffffffffffffff RSI: 0000000000006f2d RDI: 0000000000000004 [ 145.744124][ T6457] RBP: 00007f76ee835024 R08: 0000000000000000 R09: 0000000000000000 [ 145.744135][ T6457] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 145.744146][ T6457] R13: 00007f76eea26038 R14: 00007f76eea25fa0 R15: 00007f76eeb4fa48 [ 145.744177][ T6457] [ 145.746687][ T6457] Mem-Info: [ 146.059584][ T6457] active_anon:6684 inactive_anon:0 isolated_anon:0 [ 146.059584][ T6457] active_file:0 inactive_file:52932 isolated_file:0 [ 146.059584][ T6457] unevictable:0 dirty:392 writeback:0 [ 146.059584][ T6457] slab_reclaimable:10649 slab_unreclaimable:100544 [ 146.059584][ T6457] mapped:31479 shmem:521 pagetables:1284 [ 146.059584][ T6457] sec_pagetables:0 bounce:0 [ 146.059584][ T6457] kernel_misc_reclaimable:0 [ 146.059584][ T6457] free:1303036 free_pcp:12208 free_cma:0 [ 146.256221][ T6457] Node 0 active_anon:27136kB inactive_anon:0kB active_file:0kB inactive_file:211528kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:125916kB dirty:1564kB writeback:0kB shmem:2084kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:12496kB pagetables:5000kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB gpu_active:0kB gpu_reclaim:0kB [ 146.421965][ T6457] Node 1 active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:200kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:4kB writeback:0kB shmem:0kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:32kB pagetables:136kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB gpu_active:0kB gpu_reclaim:0kB [ 146.582052][ T6457] Node 0 DMA free:15360kB boost:0kB min:208kB low:260kB high:312kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 146.702099][ T6457] lowmem_reserve[]: 0 2488 2489 2489 2489 [ 146.719360][ T6457] Node 0 DMA32 free:1260300kB boost:0kB min:34160kB low:42700kB high:51240kB reserved_highatomic:0KB free_highatomic:0KB active_anon:27832kB inactive_anon:0kB active_file:0kB inactive_file:211536kB unevictable:0kB writepending:1608kB zspages:0kB present:3129332kB managed:2548644kB mlocked:0kB bounce:0kB free_pcp:41176kB local_pcp:18836kB free_cma:0kB [ 146.835847][ T6457] lowmem_reserve[]: 0 0 0 0 0 [ 146.875273][ T6457] Node 0 Normal free:0kB boost:0kB min:0kB low:0kB high:0kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:1048580kB managed:260kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 146.926945][ T6465] pci 0000:00:05.0: vgaarb: VGA decodes changed: olddecodes=io+mem,decodes=none:owns=io+mem [ 147.032683][ T6457] lowmem_reserve[]: 0 0 0 0 0 [ 147.057915][ T6457] Node 1 Normal free:3936588kB boost:0kB min:55736kB low:69668kB high:83600kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:200kB unevictable:0kB writepending:4kB zspages:0kB present:4194300kB managed:4111100kB mlocked:0kB bounce:0kB free_pcp:7816kB local_pcp:0kB free_cma:0kB [ 147.120749][ T4922] usb 4-1: USB disconnect, device number 4 [ 147.142938][ T6457] lowmem_reserve[]: 0 0 0 0 0 [ 147.159328][ T6457] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 147.218238][ T6457] Node 0 DMA32: 1003*4kB (UME) 784*8kB (UME) 868*16kB (UM) 284*32kB (ME) 179*64kB (UME) 110*128kB (UME) 51*256kB (UME) 18*512kB (ME) 9*1024kB (UME) 7*2048kB (UME) 282*4096kB (M) = 1259692kB [ 147.304803][ T6457] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 147.427111][ T6457] Node 1 Normal: 5*4kB (U) 7*8kB (UM) 8*16kB (UM) 2*32kB (UM) 1*64kB (M) 2*128kB (UM) 3*256kB (UM) 2*512kB (M) 2*1024kB (UM) 2*2048kB (UM) 959*4096kB (M) = 3936588kB [ 147.534163][ T6467] kvm: kvm [6466]: vcpu0, guest rIP: 0x1b8 Unhandled WRMSR(0x11e) = 0xbe702111 [ 147.559442][ T6457] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 147.634489][ T6457] Node 0 hugepages_total=4 hugepages_free=4 hugepages_surp=0 hugepages_size=2048kB [ 147.686377][ T6457] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 147.732450][ T6457] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 147.778064][ T6457] 53652 total pagecache pages [ 147.807571][ T6457] 0 pages in swap cache [ 147.829046][ T6457] Free swap = 124996kB [ 147.844726][ T6457] Total swap = 124996kB [ 147.859258][ T6457] 2097051 pages RAM [ 147.874659][ T6457] 0 pages HighMem/MovableOnly [ 147.890619][ T6457] 428210 pages reserved [ 147.909416][ T6457] 0 pages cma reserved [ 147.964009][ T5706] usb 5-1: BAAD SPEAKERPHONE c_chmask mismatch [ 148.287584][ T10] usb 1-1: USB disconnect, device number 6 [ 148.369945][ T5706] snd-usb-audio 5-1:1.0: probe with driver snd-usb-audio failed with error -22 [ 148.422950][ T6474] vlan2: entered promiscuous mode [ 148.444428][ T5706] usb 5-1: selecting invalid altsetting 1 [ 148.453931][ T6474] bridge0: entered promiscuous mode [ 148.470511][ T5706] snd-usb-us122l 5-1:1.1: usb_set_interface error [ 148.511840][ T5706] snd-usb-us122l 5-1:1.1: probe with driver snd-usb-us122l failed with error -22 [ 148.642813][ T5706] usb 5-1: USB disconnect, device number 10 [ 148.718723][ T5614] udevd[5614]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 148.841870][ T187] usb 1-1: new full-speed USB device number 7 using dummy_hcd [ 149.054761][ T187] usb 1-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 149.094652][ T187] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 149.116769][ T187] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 149.139201][ T187] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 149.156482][ T187] usb 1-1: Product: syz [ 149.171083][ T187] usb 1-1: Manufacturer: syz [ 149.175840][ T187] usb 1-1: SerialNumber: syz [ 149.203244][ T187] usb 1-1: 0:2 : does not exist [ 149.219451][ T187] usb 1-1: unit 9 not found! [ 149.241542][ T5706] usb 5-1: new high-speed USB device number 11 using dummy_hcd [ 149.414011][ T5706] usb 5-1: Using ep0 maxpacket: 16 [ 149.448220][ T5706] usb 5-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 149.472937][ T6477] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 149.499305][ T6477] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 149.512191][ T5706] usb 5-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xF3, changing to 0x83 [ 149.554645][ T5706] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 149.608134][ T5706] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 149.642088][ T5706] usb 5-1: Product: syz [ 149.656914][ T5706] usb 5-1: Manufacturer: syz [ 149.673998][ T5706] usb 5-1: SerialNumber: syz [ 149.684397][ T5669] usb 1-1: USB disconnect, device number 7 [ 149.722518][ T5706] usb 5-1: config 0 descriptor?? [ 149.757997][ T5706] em28xx 5-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0) [ 149.783522][ T5706] em28xx 5-1:0.0: Audio interface 0 found (Vendor Class) [ 150.183443][ T6501] loop2: detected capacity change from 0 to 7 [ 150.196516][ T6501] Dev loop2: unable to read RDB block 7 [ 150.216121][ T6501] loop2: unable to read partition table [ 150.227269][ T6501] loop2: partition table beyond EOD, truncated [ 150.241528][ T6501] loop_reread_partitions: partition scan of loop2 (被x ) failed (rc=-5) [ 150.352550][ T5706] em28xx 5-1:0.0: unknown em28xx chip ID (0) [ 150.384038][ T5706] em28xx 5-1:0.0: Config register raw data: 0xfffffffb [ 150.526749][ T6507] syzkaller0: entered promiscuous mode [ 150.534950][ T6507] syzkaller0: entered allmulticast mode [ 150.774995][ T6511] syzkaller0: entered promiscuous mode [ 150.787164][ T6511] syzkaller0: entered allmulticast mode [ 150.811596][ T5708] usb 1-1: new high-speed USB device number 8 using dummy_hcd [ 150.971519][ T5708] usb 1-1: Using ep0 maxpacket: 32 [ 150.994179][ T5708] usb 1-1: New USB device found, idVendor=05ac, idProduct=0219, bcdDevice=f0.72 [ 151.038376][ T5708] usb 1-1: config 0 has an invalid interface number: 85 but max is 0 [ 151.067283][ T5708] usb 1-1: config 0 has no interface number 0 [ 151.083303][ T5708] usb 1-1: config 0 interface 85 altsetting 7 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 151.096733][ T5708] usb 1-1: config 0 interface 85 has no altsetting 0 [ 151.109384][ T5708] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 151.119639][ T5708] usb 1-1: Product: syz [ 151.126519][ T5708] usb 1-1: Manufacturer: syz [ 151.135913][ T5708] usb 1-1: SerialNumber: syz [ 151.149333][ T5708] usb 1-1: config 0 descriptor?? [ 151.436425][ T5706] em28xx 5-1:0.0: Unknown AC97 audio processor detected! [ 151.471954][ T5706] em28xx 5-1:0.0: couldn't setup AC97 register 2 [ 151.491695][ T5706] em28xx 5-1:0.0: couldn't setup AC97 register 4 [ 151.521606][ T5706] em28xx 5-1:0.0: couldn't setup AC97 register 6 [ 151.562019][ T5706] em28xx 5-1:0.0: couldn't setup AC97 register 54 [ 151.571429][ T0] NOHZ tick-stop error: local softirq work is pending, handler #02!!! [ 151.787149][ T5708] appletouch 1-1:0.85: Geyser mode initialized. [ 151.819317][ T5708] input: appletouch as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.85/input/input9 [ 151.861675][ T6525] mmap: syz.1.203 (6525) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 151.910532][ T6525] netlink: 92 bytes leftover after parsing attributes in process `syz.1.203'. [ 151.994556][ T6525] kvm: kvm [6524]: vcpu2, guest rIP: 0xfff0 Unhandled WRMSR(0xc0010003) = 0xffffffffffffffff [ 152.172596][ T6528] tipc: Enabled bearer , priority 0 [ 152.181166][ T6528] syzkaller0: entered promiscuous mode [ 152.188014][ T6528] syzkaller0: entered allmulticast mode [ 152.214688][ T5706] usb 5-1: USB disconnect, device number 11 [ 152.225722][ T187] usb 1-1: USB disconnect, device number 8 [ 152.338263][ T187] appletouch 1-1:0.85: input: appletouch disconnected [ 152.378759][ T6528] tipc: Resetting bearer [ 152.463513][ T6527] tipc: Resetting bearer [ 152.497656][ T6527] tipc: Disabling bearer [ 152.915577][ T6533] batadv_slave_1: entered promiscuous mode [ 152.960829][ T6533] batadv_slave_1: left promiscuous mode [ 153.001511][ T187] usb 2-1: new high-speed USB device number 14 using dummy_hcd [ 153.172734][ T187] usb 2-1: New USB device found, idVendor=0af0, idProduct=7a05, bcdDevice=f6.00 [ 153.206173][ T187] usb 2-1: New USB device strings: Mfr=0, Product=2, SerialNumber=3 [ 153.217448][ T187] usb 2-1: Product: syz [ 153.227484][ T187] usb 2-1: SerialNumber: syz [ 153.265741][ T187] usb 2-1: config 0 descriptor?? [ 153.515440][ T187] hso 2-1:0.0: Failed to find BULK eps [ 154.276974][ T5706] usb 2-1: USB disconnect, device number 14 [ 155.082537][ T187] usb 2-1: new high-speed USB device number 15 using dummy_hcd [ 155.264467][ T187] usb 2-1: New USB device found, idVendor=0af0, idProduct=7a05, bcdDevice=f6.00 [ 155.309893][ T187] usb 2-1: New USB device strings: Mfr=0, Product=2, SerialNumber=3 [ 155.334314][ T187] usb 2-1: Product: syz [ 155.350098][ T187] usb 2-1: SerialNumber: syz [ 155.439216][ T187] usb 2-1: config 0 descriptor?? [ 155.716348][ T10] IPVS: starting estimator thread 0... [ 155.750068][ T187] usb 2-1: USB disconnect, device number 15 [ 155.831951][ T6579] IPVS: using max 30 ests per chain, 72000 per kthread [ 156.052821][ T5620] Bluetooth: hci0: Controller not accepting commands anymore: ncmd = 0 [ 156.062146][ T5620] Bluetooth: hci0: Injecting HCI hardware error event [ 156.070028][ T50] Bluetooth: hci0: hardware error 0x00 [ 158.132587][ T50] Bluetooth: hci0: Opcode 0x0c03 failed: -110 [ 158.177829][ T10] IPVS: starting estimator thread 0... [ 158.271481][ T6599] IPVS: using max 30 ests per chain, 72000 per kthread [ 158.701938][ T187] usb 1-1: new high-speed USB device number 9 using dummy_hcd [ 158.766834][ T6609] xt_TCPMSS: Only works on TCP SYN packets [ 158.811643][ T5706] usb 2-1: new high-speed USB device number 16 using dummy_hcd [ 158.872837][ T187] usb 1-1: Using ep0 maxpacket: 8 [ 158.882516][ T187] usb 1-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 158.905219][ T187] usb 1-1: config index 0 descriptor too short (expected 301, got 45) [ 158.914590][ T187] usb 1-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 158.930114][ T187] usb 1-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 158.949691][ T187] usb 1-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 158.960998][ T6611] netlink: 'syz.3.229': attribute type 1 has an invalid length. [ 158.971498][ T5706] usb 2-1: Using ep0 maxpacket: 8 [ 158.988040][ T5706] usb 2-1: New USB device found, idVendor=06cd, idProduct=0202, bcdDevice=c3.d4 [ 159.007826][ T187] usb 1-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 159.038730][ T5706] usb 2-1: config index 0 descriptor too short (expected 6427, got 27) [ 159.047296][ T187] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 159.067781][ T5706] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 159.119843][ T5706] usb 2-1: config 0 has no interfaces? [ 159.146964][ T5706] usb 2-1: New USB device strings: Mfr=78, Product=1, SerialNumber=0 [ 159.179415][ T5706] usb 2-1: Product: syz [ 159.192322][ T6611] 8021q: adding VLAN 0 to HW filter on device bond1 [ 159.200277][ T5706] usb 2-1: Manufacturer: syz [ 159.221333][ T5706] usb 2-1: config 0 descriptor?? [ 159.283289][ T187] usb 1-1: GET_CAPABILITIES returned 0 [ 159.304502][ T187] usbtmc 1-1:16.0: can't read capabilities [ 159.499296][ T6613] 8021q: adding VLAN 0 to HW filter on device bond1 [ 159.515338][ T6613] bond1: (slave wireguard0): The slave device specified does not support setting the MAC address [ 159.529246][ T6613] bond1: (slave wireguard0): Error -95 calling set_mac_address [ 159.572619][ T6614] mac80211_hwsim hwsim4 wlan1: entered promiscuous mode [ 159.583883][ T187] usb 1-1: USB disconnect, device number 9 [ 159.590754][ T6614] bond1: (slave wlan1): dev_set_mac_address on slave failed! ALB mode requires that the base driver support setting the hw address also when the network device's interface is open [ 160.395744][ T6630] binder: 6628:6630 ioctl c0306201 0 returned -14 [ 160.417225][ T6630] binder: 6628:6630 ioctl 4018620d 0 returned -22 [ 160.444137][ T6630] binder: 6628:6630 ioctl c0306201 0 returned -14 [ 160.594295][ T6637] fuse: Unknown parameter '' [ 160.610647][ T6630] fuse: root generation should be zero [ 160.620945][ T5709] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 160.626576][ T6637] ip6gre1: entered allmulticast mode [ 160.638071][ T48] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 160.729776][ T5709] hid-generic 0000:0000:0000.0002: hidraw0: HID v0.00 Device [syz1] on syz0 [ 161.241487][ T5709] usb 1-1: new high-speed USB device number 10 using dummy_hcd [ 161.277504][ T6649] bridge0: port 3(syz_tun) entered blocking state [ 161.325820][ T6649] bridge0: port 3(syz_tun) entered disabled state [ 161.406917][ T6649] syz_tun: entered allmulticast mode [ 161.422475][ T5709] usb 1-1: New USB device found, idVendor=046d, idProduct=08c1, bcdDevice=ee.8d [ 161.452812][ T5709] usb 1-1: too many configurations: 65, using maximum allowed: 8 [ 161.470905][ T6649] syz_tun: entered promiscuous mode [ 161.499418][ T6649] bridge0: port 3(syz_tun) entered blocking state [ 161.506585][ T6649] bridge0: port 3(syz_tun) entered forwarding state [ 161.516991][ T5709] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 161.538237][ T5709] usb 1-1: config 0 has no interfaces? [ 161.557669][ T5709] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 161.590934][ T5709] usb 1-1: config 0 has no interfaces? [ 161.624886][ T5709] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 161.654890][ T5709] usb 1-1: config 0 has no interfaces? [ 161.682666][ T5709] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 161.705285][ T5709] usb 1-1: config 0 has no interfaces? [ 161.722229][ T5709] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 161.779834][ T5709] usb 1-1: config 0 has no interfaces? [ 161.825455][ T5709] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 161.863459][ T5709] usb 1-1: config 0 has no interfaces? [ 161.895373][ T5709] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 161.920516][ T5709] usb 1-1: config 0 has no interfaces? [ 161.938324][ T5709] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 161.960201][ T5709] usb 1-1: config 0 has no interfaces? [ 161.979508][ T5709] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 161.995321][ T6665] syzkaller0: entered promiscuous mode [ 162.008902][ T6665] syzkaller0: entered allmulticast mode [ 162.017257][ T5709] usb 1-1: config 0 descriptor?? [ 162.375668][ T5708] usb 1-1: USB disconnect, device number 10 [ 162.558476][ T6672] netlink: 'syz.2.245': attribute type 1 has an invalid length. [ 162.642255][ T6672] 8021q: adding VLAN 0 to HW filter on device bond1 [ 162.751069][ T6676] 8021q: adding VLAN 0 to HW filter on device bond1 [ 162.786162][ T6676] bond1: (slave wireguard0): The slave device specified does not support setting the MAC address [ 162.845636][ T6676] bond1: (slave wireguard0): Error -95 calling set_mac_address [ 162.921719][ T5669] usb 5-1: new high-speed USB device number 12 using dummy_hcd [ 162.997928][ T6672] mac80211_hwsim hwsim10 wlan1: entered promiscuous mode [ 163.044810][ T6672] bond1: (slave wlan1): dev_set_mac_address on slave failed! ALB mode requires that the base driver support setting the hw address also when the network device's interface is open [ 163.111672][ T5669] usb 5-1: Using ep0 maxpacket: 8 [ 163.127319][ T5669] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a3, bcdDevice= 0.40 [ 163.154380][ T5669] usb 5-1: config 1 has an invalid descriptor of length 191, skipping remainder of the config [ 163.165218][ T5669] usb 5-1: config 1 interface 0 altsetting 0 has an endpoint descriptor with address 0xA7, changing to 0x87 [ 163.178897][ T5669] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x87 has an invalid bInterval 225, changing to 7 [ 163.196772][ T5669] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x87 has invalid maxpacket 34649, setting to 1024 [ 163.215151][ T5669] usb 5-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 163.231696][ T5669] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 163.241036][ T5669] usb 5-1: Product: syz [ 163.264321][ T5669] usb 5-1: Manufacturer: syz [ 163.277129][ T5669] usb 5-1: SerialNumber: syz [ 163.320514][ T5669] cdc_ether 5-1:1.0: probe with driver cdc_ether failed with error -22 [ 163.348305][ T5669] usbtest 5-1:1.0: Linux user mode ISO test driver [ 163.364494][ T5669] usbtest 5-1:1.0: high-speed {control iso-in} tests (+alt) [ 163.599277][ T6688] macvlan2: entered allmulticast mode [ 163.626870][ T6688] batadv0: entered promiscuous mode [ 163.657789][ T6688] batadv0: entered allmulticast mode [ 163.690491][ T6688] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 163.707330][ T6688] team0: Port device macvlan2 added [ 164.338644][ T6708] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 164.397838][ T6708] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 164.527990][ T6713] xt_CT: You must specify a L4 protocol and not use inversions on it [ 164.801496][ T5669] usb 4-1: new high-speed USB device number 5 using dummy_hcd [ 164.931615][ C1] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 164.971606][ T5669] usb 4-1: Using ep0 maxpacket: 16 [ 164.985180][ T5669] usb 4-1: New USB device found, idVendor=1a86, idProduct=752d, bcdDevice=2d.4d [ 165.006330][ T5669] usb 4-1: config 0 has an invalid interface number: 1 but max is 0 [ 165.026931][ T5669] usb 4-1: config 0 has no interface number 0 [ 165.040393][ T5669] usb 4-1: config 0 interface 1 altsetting 0 endpoint 0xC has an invalid bInterval 176, changing to 11 [ 165.066773][ T5669] usb 4-1: config 0 interface 1 altsetting 0 endpoint 0xC has invalid maxpacket 8243, setting to 1024 [ 165.093788][ T5669] usb 4-1: config 0 has an invalid interface number: 1 but max is 0 [ 165.107947][ T5669] usb 4-1: config 0 has no interface number 0 [ 165.125777][ T5669] usb 4-1: config 0 interface 1 altsetting 0 endpoint 0xC has an invalid bInterval 176, changing to 11 [ 165.155460][ T5669] usb 4-1: config 0 interface 1 altsetting 0 endpoint 0xC has invalid maxpacket 8243, setting to 1024 [ 165.186486][ T5669] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 165.198444][ T5669] usb 4-1: Product: syz [ 165.208876][ T5669] usb 4-1: Manufacturer: syz [ 165.220692][ T5669] usb 4-1: SerialNumber: syz [ 165.243504][ T5669] usb 4-1: config 0 descriptor?? [ 165.265723][ T5669] usb 4-1: Quirk or no altset; falling back to MIDI 1.0 [ 165.473164][ T5706] usb 5-1: USB disconnect, device number 12 [ 165.612217][ T5709] usb 4-1: USB disconnect, device number 5 [ 166.123291][ T6729] syz.4.260 invoked oom-killer: gfp_mask=0x440dc0(GFP_KERNEL_ACCOUNT|__GFP_ZERO|__GFP_COMP), order=0, oom_score_adj=1000 [ 166.141528][ T6729] CPU: 0 UID: 0 PID: 6729 Comm: syz.4.260 Not tainted syzkaller #0 PREEMPT(full) [ 166.141557][ T6729] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 166.141569][ T6729] Call Trace: [ 166.141576][ T6729] [ 166.141585][ T6729] dump_stack_lvl+0xe8/0x150 [ 166.141619][ T6729] dump_header+0xd3/0x4b0 [ 166.141647][ T6729] oom_kill_process+0x3ab/0x970 [ 166.141671][ T6729] out_of_memory+0x1064/0x1480 [ 166.141689][ T6729] ? try_charge_memcg+0xbca/0x1590 [ 166.141726][ T6729] ? __pfx_out_of_memory+0x10/0x10 [ 166.141751][ T6729] ? do_raw_spin_unlock+0xf5/0x210 [ 166.141779][ T6729] try_charge_memcg+0xc74/0x1590 [ 166.141818][ T6729] ? __pfx_try_charge_memcg+0x10/0x10 [ 166.141855][ T6729] ? percpu_ref_tryget+0x15/0x180 [ 166.141912][ T6729] ? __memcg_kmem_charge_page+0x159/0x510 [ 166.141941][ T6729] __memcg_kmem_charge_page+0x31b/0x510 [ 166.141965][ T6729] ? __memcg_kmem_charge_page+0x159/0x510 [ 166.141993][ T6729] __alloc_frozen_pages_noprof+0x1be/0x380 [ 166.142026][ T6729] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 166.142059][ T6729] ? __pfx_policy_nodemask+0x10/0x10 [ 166.142090][ T6729] ? __lock_acquire+0x683/0x2cf0 [ 166.142125][ T6729] alloc_pages_mpol+0x212/0x380 [ 166.142162][ T6729] alloc_pages_noprof+0xac/0x2a0 [ 166.142195][ T6729] __pud_alloc+0x3a/0x460 [ 166.142223][ T6729] copy_page_range+0xcc4/0x1250 [ 166.142277][ T6729] ? __pfx_copy_page_range+0x10/0x10 [ 166.142325][ T6729] dup_mmap+0xf21/0x1d90 [ 166.142371][ T6729] ? __pfx_dup_mmap+0x10/0x10 [ 166.142392][ T6729] ? do_raw_spin_lock+0x12b/0x2f0 [ 166.142430][ T6729] ? copy_mm+0x10f/0x480 [ 166.142454][ T6729] ? copy_mm+0x10f/0x480 [ 166.142495][ T6729] copy_mm+0x11a/0x480 [ 166.142531][ T6729] ? copy_process+0xd3c/0x4390 [ 166.142553][ T6729] copy_process+0x1e3e/0x4390 [ 166.142590][ T6729] ? copy_process+0xd3c/0x4390 [ 166.142636][ T6729] ? __pfx_copy_process+0x10/0x10 [ 166.142656][ T6729] ? futex_hash+0x275/0x2b0 [ 166.142698][ T6729] kernel_clone+0x2d7/0x940 [ 166.142744][ T6729] ? __pfx_kernel_clone+0x10/0x10 [ 166.142767][ T6729] ? io_ring_ctx_wait_and_kill+0x1e3/0x230 [ 166.142811][ T6729] ? do_futex+0x3e7/0x4e0 [ 166.142849][ T6729] __x64_sys_clone+0x1b6/0x230 [ 166.142877][ T6729] ? __pfx___x64_sys_clone+0x10/0x10 [ 166.142921][ T6729] ? rcu_is_watching+0x15/0xb0 [ 166.142963][ T6729] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 166.142987][ T6729] do_syscall_64+0x174/0x580 [ 166.143014][ T6729] ? trace_irq_disable+0x3b/0x140 [ 166.143039][ T6729] ? clear_bhb_loop+0x70/0xc0 [ 166.143064][ T6729] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 166.143085][ T6729] RIP: 0033:0x7f312059e0d9 [ 166.143105][ T6729] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 166.143121][ T6729] RSP: 002b:00007f312154bfd8 EFLAGS: 00000246 ORIG_RAX: 0000000000000038 [ 166.143144][ T6729] RAX: ffffffffffffffda RBX: 00007f3120825fa0 RCX: 00007f312059e0d9 [ 166.143159][ T6729] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 166.143171][ T6729] RBP: 00007f3120635024 R08: 0000000000000000 R09: 0000000000000000 [ 166.143184][ T6729] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 166.143196][ T6729] R13: 00007f3120826038 R14: 00007f3120825fa0 R15: 00007f312094fa48 [ 166.143230][ T6729] [ 166.150763][ T6729] memory: usage 96kB, limit 96kB, failcnt 63 [ 166.522451][ T6729] memory+swap: usage 96kB, limit 9007199254740988kB, failcnt 0 [ 166.604261][ T6729] kmem: usage 96kB, limit 9007199254740988kB, failcnt 0 [ 166.639075][ T6729] Memory cgroup stats for /syz4/test: [ 166.639302][ T6729] cache 0 [ 166.685607][ T6729] rss 0 [ 166.699778][ T6729] rss_huge 0 [ 166.713886][ T6729] shmem 0 [ 166.730151][ T6729] mapped_file 0 [ 166.749834][ T6729] dirty 0 [ 166.761043][ T6729] writeback 0 [ 166.776547][ T6729] workingset_refault_anon 0 [ 166.793803][ T6729] workingset_refault_file 0 [ 166.812119][ T6729] swap 0 [ 166.822609][ T6729] swapcached 0 [ 166.834767][ T6729] pgpgin 0 [ 166.843852][ T6729] pgpgout 0 [ 166.856895][ T6729] pgfault 13 [ 166.866505][ T6729] pgmajfault 0 [ 166.879787][ T6729] inactive_anon 0 [ 166.899560][ T6729] active_anon 0 [ 166.916008][ T6729] inactive_file 0 [ 166.933866][ T6729] active_file 0 [ 166.943444][ T6729] unevictable 0 [ 166.952720][ T6729] hierarchical_memory_limit 98304 [ 166.968926][ T6729] hierarchical_memsw_limit 9223372036854771712 [ 166.994410][ T6729] total_cache 0 [ 167.001659][ T4922] usb 4-1: new high-speed USB device number 6 using dummy_hcd [ 167.004822][ T6729] total_rss 0 [ 167.032138][ T6729] total_rss_huge 0 [ 167.042985][ T6729] total_shmem 0 [ 167.051924][ T6729] total_mapped_file 0 [ 167.071966][ T6729] total_dirty 0 [ 167.080198][ T6729] total_writeback 0 [ 167.091936][ T6729] total_workingset_refault_anon 0 [ 167.102746][ T6729] total_workingset_refault_file 0 [ 167.113471][ T6729] total_swap 0 [ 167.121582][ T6729] total_swapcached 0 [ 167.129578][ T6729] total_pgpgin 0 [ 167.150119][ T6729] total_pgpgout 0 [ 167.159817][ T6729] total_pgfault 13 [ 167.164821][ T6729] total_pgmajfault 0 [ 167.168880][ T6729] total_inactive_anon 0 [ 167.180710][ T6729] total_active_anon 0 [ 167.187721][ T4922] usb 4-1: New USB device found, idVendor=2040, idProduct=4900, bcdDevice=4d.8b [ 167.197797][ T6729] total_inactive_file 0 [ 167.202419][ T6729] total_active_file 0 [ 167.206606][ T6729] total_unevictable 0 [ 167.218902][ T6729] anon_cost 0 [ 167.227882][ T4922] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x7 has invalid wMaxPacketSize 0 [ 167.241613][ T6729] file_cost 0 [ 167.248243][ T6729] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=/,mems_allowed=0-1,oom_memcg=/syz4/test,task_memcg=/syz4/test,task=syz.4.260,pid=6728,uid=0 [ 167.266508][ T4922] usb 4-1: config 0 interface 0 altsetting 0 bulk endpoint 0x7 has invalid maxpacket 0 [ 167.280641][ T4922] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x89 has invalid wMaxPacketSize 0 [ 167.290478][ T6729] Memory cgroup out of memory: Killed process 6728 (syz.4.260) total-vm:104300kB, anon-rss:1432kB, file-rss:22680kB, shmem-rss:0kB, UID:0 pgtables:132kB oom_score_adj:1000 [ 167.315732][ T6739] netlink: 28 bytes leftover after parsing attributes in process `syz.2.263'. [ 167.326688][ T4922] usb 4-1: config 0 interface 0 altsetting 0 bulk endpoint 0x89 has invalid maxpacket 0 [ 167.343342][ T4922] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 167.360281][ T4922] usb 4-1: config 0 descriptor?? [ 167.666450][ T4922] hdpvr 4-1:0.0: unexpected answer of status request, len -32 [ 167.694084][ T4922] hdpvr 4-1:0.0: device init failed [ 167.706145][ T4922] hdpvr 4-1:0.0: probe with driver hdpvr failed with error -12 [ 167.762960][ T4922] usb 4-1: USB disconnect, device number 6 [ 168.136348][ T6754] fuse: Invalid gid '0x0000000000000003' [ 168.951083][ T6771] tipc: Started in network mode [ 168.969670][ T6771] tipc: Node identity 1e88e13b32ff, cluster identity 4711 [ 168.996839][ T6771] tipc: Enabled bearer , priority 0 [ 169.028247][ T6777] syzkaller0: entered promiscuous mode [ 169.058774][ T6777] syzkaller0: entered allmulticast mode [ 169.103642][ T6771] sch_tbf: burst 255 is lower than device syzkaller0 mtu (1514) ! [ 169.218979][ T6771] tipc: Resetting bearer [ 169.284294][ T6770] tipc: Resetting bearer [ 169.396778][ T6770] tipc: Disabling bearer [ 170.806712][ T6797] bridge0: received packet on syz_tun with own address as source address (addr:aa:aa:aa:aa:aa:aa, vlan:0) [ 170.968857][ T6798] loop2: detected capacity change from 0 to 7 [ 170.992630][ T6798] Dev loop2: unable to read RDB block 7 [ 171.049190][ T6798] loop2: unable to read partition table [ 171.121823][ T6798] loop2: partition table beyond EOD, truncated [ 171.194328][ T6798] loop_reread_partitions: partition scan of loop2 (被x ) failed (rc=-5) [ 173.008169][ T6819] netlink: 24 bytes leftover after parsing attributes in process `syz.0.285'. [ 173.047746][ T6816] PKCS7: Unknown OID: [4] 5.25.43183.11314.97.496.3.846527319083.2007.15776 [ 173.077611][ T6816] PKCS7: Only support pkcs7_signedData type [ 173.601978][ T6830] netlink: 12 bytes leftover after parsing attributes in process `syz.3.288'. [ 173.731619][ C1] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 173.881834][ T5706] usb 4-1: new high-speed USB device number 7 using dummy_hcd [ 173.987410][ T6825] tipc: Started in network mode [ 173.996736][ T6825] tipc: Node identity 3691a3afb462, cluster identity 4711 [ 174.006223][ T6825] tipc: Enabled bearer , priority 0 [ 174.032626][ T6826] syzkaller0: entered promiscuous mode [ 174.049152][ T6826] syzkaller0: entered allmulticast mode [ 174.051834][ T5706] usb 4-1: Using ep0 maxpacket: 8 [ 174.073583][ T5706] usb 4-1: New USB device found, idVendor=046d, idProduct=0892, bcdDevice=6d.2a [ 174.096078][ T5706] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 174.108409][ T5706] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 174.118243][ T6832] tipc: Resetting bearer [ 174.127618][ T5706] usb 4-1: config 0 descriptor?? [ 174.154587][ T5706] gspca_main: vc032x-2.14.0 probing 046d:0892 [ 174.170107][ T6820] tipc: Resetting bearer [ 174.209906][ T6820] tipc: Disabling bearer [ 174.390202][ T6841] netlink: 'syz.1.291': attribute type 13 has an invalid length. [ 174.501576][ T5669] usb 3-1: new full-speed USB device number 12 using dummy_hcd [ 174.666860][ T5669] usb 3-1: unable to get BOS descriptor or descriptor too short [ 174.678213][ T5669] usb 3-1: not running at top speed; connect to a high speed hub [ 174.686472][ T5669] usb 3-1: New USB device found, idVendor=0c72, idProduct=000c, bcdDevice= e.3d [ 174.700724][ T5669] usb 3-1: config 1 has an invalid interface number: 93 but max is 0 [ 174.710717][ T5669] usb 3-1: config 1 has no interface number 0 [ 174.721087][ T5669] usb 3-1: config 1 interface 93 has no altsetting 0 [ 174.732723][ T5669] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 174.742127][ T5669] usb 3-1: Product: syz [ 174.754275][ T5669] usb 3-1: Manufacturer: syz [ 174.765685][ T5669] usb 3-1: SerialNumber: syz [ 174.968004][ T5706] gspca_vc032x: reg_w err -71 [ 174.989738][ T5706] vc032x 4-1:0.0: probe with driver vc032x failed with error -71 [ 175.063144][ T5706] usb 4-1: USB disconnect, device number 7 [ 175.122893][ T5669] peak_usb 3-1:1.93 can0: sending cmd f=0x6 n=0x1 failure: -22 [ 175.146854][ T5669] peak_usb 3-1:1.93: unable to read PCAN-USB serial number (err -22) [ 175.264898][ T5669] peak_usb 3-1:1.93: probe with driver peak_usb failed with error -22 [ 175.290956][ T5669] usb 3-1: USB disconnect, device number 12 [ 175.981784][ T10] usb 3-1: new high-speed USB device number 13 using dummy_hcd [ 176.153886][ T10] usb 3-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 176.178270][ T10] usb 3-1: config 0 has no interfaces? [ 176.195532][ T10] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 176.223627][ T10] usb 3-1: config 0 descriptor?? [ 176.456195][ T10] usb 3-1: USB disconnect, device number 13 [ 176.864154][ T6880] usb usb9: Requested nonsensical USBDEVFS_URB_SHORT_NOT_OK. [ 176.880885][ T6880] usb usb9: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 176.961683][ T10] usb 3-1: new high-speed USB device number 14 using dummy_hcd [ 177.143561][ T10] usb 3-1: New USB device found, idVendor=046d, idProduct=0870, bcdDevice=61.47 [ 177.190549][ T10] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 177.230498][ T10] usb 3-1: config 0 descriptor?? [ 177.254820][ T10] gspca_main: STV06xx-2.14.0 probing 046d:0870 [ 177.996042][ T6882] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 178.098389][ T6882] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 179.042549][ T4922] usb 4-1: new high-speed USB device number 8 using dummy_hcd [ 179.089367][ T10] gspca_stv06xx: Photobit pb0100 sensor detected [ 179.202137][ T4922] usb 4-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 179.225873][ T4922] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 179.252742][ T4922] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 179.266230][ T6900] syzkaller0: entered promiscuous mode [ 179.280654][ T6900] syzkaller0: entered allmulticast mode [ 179.290789][ T4922] usb 4-1: config 0 descriptor?? [ 179.311125][ T4922] pwc: Askey VC010 type 2 USB webcam detected. [ 179.353693][ T6900] tipc: Enabled bearer , priority 0 [ 179.369902][ T6899] tipc: Resetting bearer [ 179.413622][ T6899] tipc: Disabling bearer [ 179.528705][ T4922] pwc: send_video_command error -71 [ 179.549000][ T4922] pwc: Failed to set video mode CIF@30 fps; return code = -71 [ 179.601650][ T4922] Philips webcam 4-1:0.0: probe with driver Philips webcam failed with error -71 [ 179.640123][ T4922] usb 4-1: USB disconnect, device number 8 [ 179.993699][ T10] input: STV06xx as /devices/platform/dummy_hcd.2/usb3/3-1/input/input12 [ 180.057004][ T4922] usb 4-1: new high-speed USB device number 9 using dummy_hcd [ 180.081294][ T10] usb 3-1: USB disconnect, device number 14 [ 180.212531][ T4922] usb 4-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 180.259977][ T4922] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 180.282822][ T4922] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 180.309046][ T4922] usb 4-1: config 0 descriptor?? [ 180.338820][ T4922] pwc: Askey VC010 type 2 USB webcam detected. [ 180.728427][ T4922] pwc: recv_control_msg error -32 req 02 val 2b00 [ 180.765484][ T4922] pwc: recv_control_msg error -32 req 02 val 2700 [ 180.783457][ T4922] pwc: recv_control_msg error -32 req 02 val 2c00 [ 180.806953][ T4922] pwc: recv_control_msg error -32 req 04 val 1000 [ 180.824992][ T4922] pwc: recv_control_msg error -32 req 04 val 1300 [ 180.844671][ T4922] pwc: recv_control_msg error -32 req 04 val 1400 [ 180.863081][ T4922] pwc: recv_control_msg error -32 req 02 val 2000 [ 180.878469][ T4922] pwc: recv_control_msg error -32 req 02 val 2100 [ 180.894804][ T4922] pwc: recv_control_msg error -32 req 04 val 1500 [ 180.908626][ T4922] pwc: recv_control_msg error -32 req 02 val 2500 [ 180.930477][ T4922] pwc: recv_control_msg error -32 req 02 val 2400 [ 180.957466][ T4922] pwc: recv_control_msg error -32 req 02 val 2600 [ 180.977905][ T4922] pwc: recv_control_msg error -32 req 02 val 2900 [ 180.991512][ T5706] usb 5-1: new high-speed USB device number 13 using dummy_hcd [ 181.000957][ T4922] pwc: recv_control_msg error -32 req 02 val 2800 [ 181.161442][ T5706] usb 5-1: Using ep0 maxpacket: 16 [ 181.178017][ T5706] usb 5-1: New USB device found, idVendor=0471, idProduct=0327, bcdDevice=61.a4 [ 181.202084][ T5706] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 181.221287][ T4922] pwc: recv_control_msg error -71 req 04 val 1200 [ 181.244936][ T5706] usb 5-1: config 0 descriptor?? [ 181.257876][ T4922] pwc: Registered as video103. [ 181.310202][ T4922] input: PWC snapshot button as /devices/platform/dummy_hcd.3/usb4/4-1/input/input13 [ 181.365635][ T5706] gspca_main: sonixj-2.14.0 probing 0471:0327 [ 181.394237][ T4922] usb 4-1: USB disconnect, device number 9 [ 182.731415][ T0] NOHZ tick-stop error: local softirq work is pending, handler #202!!! [ 182.951398][ T0] NOHZ tick-stop error: local softirq work is pending, handler #02!!! [ 183.534589][ T6948] netlink: 'syz.0.320': attribute type 1 has an invalid length. [ 183.660595][ T6951] netlink: 28 bytes leftover after parsing attributes in process `syz.0.320'. [ 183.886469][ T6957] hsr_slave_0: hsr_addr_subst_dest: Unknown node [ 183.894060][ T6957] hsr_slave_1: hsr_addr_subst_dest: Unknown node [ 184.120108][ T6957] netlink: 4 bytes leftover after parsing attributes in process `syz.1.322'. [ 184.147031][ T6949] bond1: (slave geneve2): making interface the new active one [ 184.192733][ T6949] bond1: (slave geneve2): Enslaving as an active interface with an up link [ 184.250971][ T6951] 8021q: adding VLAN 0 to HW filter on device bond1 [ 184.613044][ T5706] input: sonixj as /devices/platform/dummy_hcd.4/usb5/5-1/input/input14 [ 184.710928][ T4922] usb 5-1: USB disconnect, device number 13 [ 185.191606][ T10] usb 3-1: new high-speed USB device number 15 using dummy_hcd [ 185.353533][ T10] usb 3-1: New USB device found, idVendor=055f, idProduct=c630, bcdDevice=b6.ac [ 185.374197][ T30] audit: type=1326 audit(1786469439.197:3): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6970 comm="syz.4.325" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f312059e0d9 code=0x0 [ 185.409802][ T10] usb 3-1: config 0 has too many interfaces: 253, using maximum allowed: 32 [ 185.428608][ T10] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 253 [ 185.465669][ T10] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 185.478130][ T10] usb 3-1: Product: syz [ 185.489627][ T10] usb 3-1: Manufacturer: syz [ 185.499824][ T10] usb 3-1: SerialNumber: syz [ 185.524227][ T10] usb 3-1: config 0 descriptor?? [ 185.545888][ T10] gspca_main: sunplus-2.14.0 probing 055f:c630 [ 185.801579][ T5669] usb 5-1: new high-speed USB device number 14 using dummy_hcd [ 185.972368][ T5669] usb 5-1: New USB device found, idVendor=18b4, idProduct=fffb, bcdDevice=dc.7b [ 185.992441][ T5669] usb 5-1: config 0 has no interfaces? [ 186.018504][ T5669] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 186.030360][ T10] gspca_sunplus: reg_r err -71 [ 186.039182][ T10] sunplus 3-1:0.0: probe with driver sunplus failed with error -71 [ 186.040429][ T5669] usb 5-1: Product: syz [ 186.066217][ T5669] usb 5-1: Manufacturer: syz [ 186.081886][ T10] usb 3-1: USB disconnect, device number 15 [ 186.087980][ T5669] usb 5-1: SerialNumber: syz [ 186.112455][ T5669] usb 5-1: config 0 descriptor?? [ 186.305614][ T6957] hsr_slave_0: left promiscuous mode [ 186.317773][ T6957] hsr_slave_1: left promiscuous mode [ 186.411803][ T48] netdevsim netdevsim0 netdevsim3: set [1, 1] type 2 family 0 port 20000 - 0 [ 186.423364][ T48] netdevsim netdevsim0 netdevsim2: set [1, 1] type 2 family 0 port 20000 - 0 [ 186.434043][ T48] netdevsim netdevsim0 netdevsim1: set [1, 1] type 2 family 0 port 20000 - 0 [ 186.457341][ T48] netdevsim netdevsim0 netdevsim0: set [1, 1] type 2 family 0 port 20000 - 0 [ 187.329676][ T7004] nvme_fabrics: missing parameter 'transport=%s' [ 187.344551][ T7004] nvme_fabrics: missing parameter 'nqn=%s' [ 187.675649][ T7012] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 187.741507][ T5669] usb 3-1: new high-speed USB device number 16 using dummy_hcd [ 187.913748][ T5669] usb 3-1: New USB device found, idVendor=0979, idProduct=0227, bcdDevice=6f.50 [ 187.938090][ T5669] usb 3-1: config 6 has an invalid interface number: 14 but max is 0 [ 187.971143][ T5669] usb 3-1: config 6 has an invalid descriptor of length 0, skipping remainder of the config [ 188.003526][ T5669] usb 3-1: config 6 has no interface number 0 [ 188.029686][ T5669] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 188.044268][ T5669] usb 3-1: Product: syz [ 188.057208][ T5669] usb 3-1: Manufacturer: syz [ 188.070616][ T5669] usb 3-1: SerialNumber: syz [ 188.148156][ T7015] batadv0: entered promiscuous mode [ 188.159660][ T7015] vlan2: entered promiscuous mode [ 188.399137][ T187] usb 5-1: USB disconnect, device number 14 [ 188.445559][ T5669] gspca_main: jl2005bcd-2.14.0 probing 0979:0227 [ 188.478307][ T5669] command write [95] error -22 [ 188.525937][ T5669] usb 3-1: USB disconnect, device number 16 [ 188.775454][ T7026] tipc: Enabled bearer , priority 0 [ 188.808486][ T7026] syzkaller0: entered promiscuous mode [ 188.823996][ T7026] syzkaller0: entered allmulticast mode [ 188.854023][ T7026] sch_tbf: burst 255 is lower than device syzkaller0 mtu (1514) ! [ 188.881656][ T10] usb 1-1: new high-speed USB device number 11 using dummy_hcd [ 188.921057][ T7026] tipc: Resetting bearer [ 188.941178][ T7025] tipc: Resetting bearer [ 189.029608][ T7025] tipc: Disabling bearer [ 189.056634][ T10] usb 1-1: Using ep0 maxpacket: 16 [ 189.080440][ T10] usb 1-1: New USB device found, idVendor=13b1, idProduct=0042, bcdDevice=76.fe [ 189.129381][ T10] usb 1-1: config 4 has an invalid interface number: 9 but max is 0 [ 189.145009][ T10] usb 1-1: config 4 has an invalid descriptor of length 0, skipping remainder of the config [ 189.194947][ T10] usb 1-1: config 4 has no interface number 0 [ 189.219723][ T10] usb 1-1: config 4 interface 9 altsetting 2 has an invalid descriptor for endpoint zero, skipping [ 189.269654][ T10] usb 1-1: config 4 interface 9 altsetting 2 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 189.317114][ T10] usb 1-1: config 4 interface 9 has no altsetting 0 [ 189.340327][ T10] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 189.360012][ T10] usb 1-1: Product: syz [ 189.365008][ T7032] faux_driver vgem: [drm] Unknown color mode 181; guessing buffer size. [ 189.405270][ T10] usb 1-1: Manufacturer: syz [ 189.427639][ T10] usb 1-1: SerialNumber: syz [ 189.522109][ T10] usb 1-1: Warning: ath10k USB support is incomplete, don't expect anything to work! [ 189.702268][ T136] usb 1-1: Failed to submit usb control message: -71 [ 189.712525][ T10] usb 1-1: USB disconnect, device number 11 [ 189.733473][ T136] usb 1-1: unable to send the bmi data to the device: -71 [ 189.757330][ T136] usb 1-1: unable to get target info from device [ 189.773780][ T136] usb 1-1: could not get target info (-71) [ 189.787374][ T136] usb 1-1: could not probe fw (-71) [ 190.488691][ T7050] syzkaller0: entered promiscuous mode [ 190.528206][ T7050] syzkaller0: entered allmulticast mode [ 190.835564][ T30] audit: type=1326 audit(1786469444.647:4): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7055 comm="syz.4.350" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f312059e0d9 code=0x7ffc0000 [ 190.906673][ T30] audit: type=1326 audit(1786469444.687:5): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7055 comm="syz.4.350" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f312059e0d9 code=0x7ffc0000 [ 191.007273][ T30] audit: type=1326 audit(1786469444.687:6): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7055 comm="syz.4.350" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f312059e0d9 code=0x7ffc0000 [ 191.071545][ T30] audit: type=1326 audit(1786469444.687:7): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7055 comm="syz.4.350" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=436 compat=0 ip=0x7f312059e0d9 code=0x7ffc0000 [ 191.120193][ T30] audit: type=1326 audit(1786469444.687:8): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7055 comm="syz.4.350" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f312059e0d9 code=0x7ffc0000 [ 191.150083][ T30] audit: type=1326 audit(1786469444.687:9): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7055 comm="syz.4.350" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f312059e0d9 code=0x7ffc0000 [ 191.200132][ T30] audit: type=1326 audit(1786469444.687:10): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7055 comm="syz.4.350" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f312059e0d9 code=0x7ffc0000 [ 191.225722][ T30] audit: type=1326 audit(1786469444.687:11): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7055 comm="syz.4.350" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=447 compat=0 ip=0x7f312059e0d9 code=0x7ffc0000 [ 191.254637][ T30] audit: type=1326 audit(1786469444.687:12): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7055 comm="syz.4.350" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f312059e0d9 code=0x7ffc0000 [ 191.280922][ T30] audit: type=1326 audit(1786469444.687:13): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7055 comm="syz.4.350" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f312059e0d9 code=0x7ffc0000 [ 191.366411][ T7069] netlink: 8 bytes leftover after parsing attributes in process `syz.2.354'. [ 191.410782][ T7069] bond0: option lp_interval: invalid value (0) [ 191.419330][ T7069] bond0: option lp_interval: allowed values 1 - 2147483647 [ 191.489276][ T7071] oom_control is deprecated and will be removed. Please report your usecase to linux-mm-@kvack.org if you depend on this functionality. [ 191.526907][ T7074] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 191.547443][ T7074] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 191.651650][ C1] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 194.218097][ T1304] ieee802154 phy0 wpan0: encryption failed: -22 [ 194.224744][ T1304] ieee802154 phy1 wpan1: encryption failed: -22 [ 195.136783][ T7135] sctp: sctp_transport_update_pmtu: Reported pmtu 68 too low, using default minimum of 512 [ 195.183028][ T4922] usb 1-1: new high-speed USB device number 12 using dummy_hcd [ 195.281495][ T24] usb 3-1: new full-speed USB device number 17 using dummy_hcd [ 195.320974][ T7135] sctp: sctp_transport_update_pmtu: Reported pmtu 68 too low, using default minimum of 512 [ 195.351478][ T4922] usb 1-1: Using ep0 maxpacket: 8 [ 195.369045][ T4922] usb 1-1: unable to get BOS descriptor or descriptor too short [ 195.381551][ T4922] usb 1-1: New USB device found, idVendor=0763, idProduct=1002, bcdDevice=5f.84 [ 195.423259][ T4922] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x88 has an invalid bInterval 0, changing to 7 [ 195.445862][ T24] usb 3-1: not running at top speed; connect to a high speed hub [ 195.466046][ T4922] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 195.478310][ T24] usb 3-1: New USB device found, idVendor=258a, idProduct=0036, bcdDevice= 0.40 [ 195.516364][ T4922] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0xC has invalid maxpacket 65535, setting to 1024 [ 195.533037][ T24] usb 3-1: config 1 interface 0 altsetting 129 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 195.549150][ T4922] usb 1-1: config 0 interface 0 altsetting 0 bulk endpoint 0xC has invalid maxpacket 1024 [ 195.563205][ T24] usb 3-1: config 1 interface 0 altsetting 129 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 195.581448][ T4922] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0xF has invalid wMaxPacketSize 0 [ 195.595827][ T24] usb 3-1: config 1 interface 0 has no altsetting 0 [ 195.608946][ T4922] usb 1-1: config 0 interface 0 altsetting 0 bulk endpoint 0x7 has invalid maxpacket 44 [ 195.626591][ T24] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 195.639832][ T24] usb 3-1: Product: syz [ 195.646925][ T4922] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 195.663948][ T24] usb 3-1: Manufacturer: syz [ 195.669871][ T4922] usb 1-1: Product: syz [ 195.674498][ T24] usb 3-1: SerialNumber: syz [ 195.679315][ T4922] usb 1-1: Manufacturer: syz [ 195.686718][ T4922] usb 1-1: SerialNumber: syz [ 195.712602][ T4922] usb 1-1: config 0 descriptor?? [ 195.719570][ T7130] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 195.727506][ T7130] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 195.754835][ T4922] usb 1-1: Quirk or no altset; falling back to MIDI 1.0 [ 196.128817][ T30] kauditd_printk_skb: 43 callbacks suppressed [ 196.128830][ T30] audit: type=1326 audit(1786469449.947:57): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7129 comm="syz.0.374" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f08d419e0d9 code=0x0 [ 197.597607][ T7141] syzkaller1: tun_chr_ioctl cmd 2147767521 [ 197.704181][ T24] usbhid 3-1:1.0: can't add hid device: -71 [ 197.725358][ T24] usbhid 3-1:1.0: probe with driver usbhid failed with error -71 [ 197.785329][ T24] usb 3-1: USB disconnect, device number 17 [ 198.035049][ T7161] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 198.060889][ T7161] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 198.088978][ T7161] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 198.112149][ T7161] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 198.138168][ T7161] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 198.158526][ T7161] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 198.235921][ T187] usb 5-1: new full-speed USB device number 15 using dummy_hcd [ 198.378880][ T7161] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 198.389118][ T7161] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 198.422618][ T187] usb 5-1: not running at top speed; connect to a high speed hub [ 198.433762][ T187] usb 5-1: New USB device found, idVendor=1b80, idProduct=e309, bcdDevice=1f.40 [ 198.448897][ T187] usb 5-1: config 1 has an invalid interface number: 167 but max is 0 [ 198.458790][ T187] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 198.470823][ T187] usb 5-1: config 1 has no interface number 0 [ 198.478062][ T187] usb 5-1: config 1 interface 167 altsetting 167 endpoint 0x8A has an invalid bInterval 0, changing to 4 [ 198.490843][ T187] usb 5-1: config 1 interface 167 altsetting 167 endpoint 0x8A has invalid wMaxPacketSize 0 [ 198.503594][ T187] usb 5-1: config 1 interface 167 altsetting 167 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 198.516951][ T187] usb 5-1: config 1 interface 167 has no altsetting 0 [ 198.534245][ T187] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 198.549918][ T187] usb 5-1: Product: syz [ 198.557324][ T187] usb 5-1: Manufacturer: syz [ 198.567077][ T187] usb 5-1: SerialNumber: syz [ 198.689517][ T5708] usb 1-1: USB disconnect, device number 12 [ 198.881524][ T5709] usb 4-1: new high-speed USB device number 10 using dummy_hcd [ 198.926599][ T187] em28xx 5-1:1.167: New device syz syz @ 12 Mbps (1b80:e309, interface 167, class 167) [ 198.961482][ T187] em28xx 5-1:1.167: Device initialization failed. [ 198.970346][ T187] em28xx 5-1:1.167: Device must be connected to a high-speed USB 2.0 port. [ 198.993968][ T187] usb 5-1: USB disconnect, device number 15 [ 199.031504][ T5709] usb 4-1: device descriptor read/64, error -71 [ 199.135586][ T7174] tipc: Enabled bearer , priority 0 [ 199.147391][ T7174] syzkaller0: entered promiscuous mode [ 199.153148][ T7174] syzkaller0: entered allmulticast mode [ 199.170956][ T7174] sch_tbf: burst 255 is lower than device syzkaller0 mtu (1514) ! [ 199.225256][ T7174] tipc: Resetting bearer [ 199.243641][ T7173] tipc: Resetting bearer [ 199.250708][ T30] audit: type=1326 audit(1786469453.067:58): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7167 comm="syz.2.383" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fc29df9e0d9 code=0x0 [ 199.300051][ T5709] usb 4-1: new high-speed USB device number 11 using dummy_hcd [ 199.312411][ T7172] ip_tables: iptables: counters copy to user failed while replacing table [ 199.329145][ T7173] tipc: Disabling bearer [ 199.431525][ T5709] usb 4-1: device descriptor read/64, error -71 [ 199.564075][ T5709] usb usb4-port1: attempt power cycle [ 199.659791][ T30] audit: type=1326 audit(1786469453.477:59): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7178 comm="syz.1.386" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f76ee79e0d9 code=0x7ffc0000 [ 199.797583][ T30] audit: type=1326 audit(1786469453.477:60): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7178 comm="syz.1.386" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f76ee79e0d9 code=0x7ffc0000 [ 199.934591][ T5709] usb 4-1: new high-speed USB device number 12 using dummy_hcd [ 199.996062][ T5709] usb 4-1: device descriptor read/8, error -71 [ 200.094897][ T30] audit: type=1326 audit(1786469453.477:61): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7178 comm="syz.1.386" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f76ee79e0d9 code=0x7ffc0000 [ 200.227986][ T30] audit: type=1326 audit(1786469453.477:62): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7178 comm="syz.1.386" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=426 compat=0 ip=0x7f76ee79e0d9 code=0x7ffc0000 [ 200.282738][ T5709] usb 4-1: new high-speed USB device number 13 using dummy_hcd [ 200.325134][ T30] audit: type=1326 audit(1786469453.537:63): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7178 comm="syz.1.386" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f76ee79e0d9 code=0x7ffc0000 [ 200.354975][ T5709] usb 4-1: device descriptor read/8, error -71 [ 200.445159][ T7193] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 200.462773][ T7193] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 200.493102][ T5709] usb usb4-port1: unable to enumerate USB device [ 200.500361][ T7193] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 200.518345][ T7193] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 200.541754][ T30] audit: type=1326 audit(1786469453.537:64): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7178 comm="syz.1.386" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f76ee79e0d9 code=0x7ffc0000 [ 200.575341][ T7193] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 200.606457][ T7193] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 200.635638][ T30] audit: type=1326 audit(1786469453.537:65): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7178 comm="syz.1.386" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f76ee79e0d9 code=0x7ffc0000 [ 200.669788][ T30] audit: type=1326 audit(1786469453.537:66): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7178 comm="syz.1.386" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f76ee79e0d9 code=0x7ffc0000 [ 201.378111][ T7202] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 201.420950][ T7202] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 202.061604][ T187] usb 4-1: new high-speed USB device number 14 using dummy_hcd [ 202.233896][ T187] usb 4-1: New USB device found, idVendor=8086, idProduct=0b07, bcdDevice=6c.b9 [ 202.273706][ T187] usb 4-1: config 220 has an invalid interface number: 76 but max is 2 [ 202.307151][ T187] usb 4-1: config 220 contains an unexpected descriptor of type 0x2, skipping [ 202.331272][ T187] usb 4-1: config 220 has an invalid descriptor of length 0, skipping remainder of the config [ 202.352693][ T187] usb 4-1: config 220 has no interface number 2 [ 202.369814][ T187] usb 4-1: config 220 interface 1 altsetting 5 has 0 endpoint descriptors, different from the interface descriptor's value: 12 [ 202.406866][ T187] usb 4-1: config 220 interface 0 has no altsetting 0 [ 202.427786][ T187] usb 4-1: config 220 interface 76 has no altsetting 0 [ 202.447632][ T187] usb 4-1: config 220 interface 1 has no altsetting 0 [ 202.474654][ T187] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 202.504295][ T187] usb 4-1: Product: syz [ 202.516311][ T187] usb 4-1: Manufacturer: syz [ 202.521775][ T7221] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=3070988179 (3070988179 ns) > initial count (1876204212 ns). Using initial count to start timer. [ 202.549769][ T187] usb 4-1: SerialNumber: syz [ 202.798913][ T187] usb 4-1: selecting invalid altsetting 0 [ 202.817946][ T187] uvcvideo 4-1:220.0: Found UVC 7.01 device syz (8086:0b07) [ 202.859045][ T187] uvcvideo 4-1:220.0: No valid video chain found. [ 202.910524][ T187] usb 4-1: selecting invalid altsetting 0 [ 202.921607][ T187] usbtest 4-1:220.1: probe with driver usbtest failed with error -22 [ 202.987895][ T187] usb 4-1: USB disconnect, device number 14 [ 204.269746][ T7248] netlink: 16 bytes leftover after parsing attributes in process `syz.0.404'. [ 204.321630][ T4922] usb 5-1: new full-speed USB device number 16 using dummy_hcd [ 204.492853][ T4922] usb 5-1: not running at top speed; connect to a high speed hub [ 204.521041][ T4922] usb 5-1: New USB device found, idVendor=1b80, idProduct=e309, bcdDevice=1f.40 [ 204.560370][ T4922] usb 5-1: config 1 has an invalid interface number: 167 but max is 0 [ 204.589767][ T4922] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 204.651497][ T4922] usb 5-1: config 1 has no interface number 0 [ 204.677645][ T4922] usb 5-1: config 1 interface 167 altsetting 167 endpoint 0x8A has an invalid bInterval 0, changing to 4 [ 204.736592][ T4922] usb 5-1: config 1 interface 167 altsetting 167 endpoint 0x8A has invalid wMaxPacketSize 0 [ 204.793999][ T4922] usb 5-1: config 1 interface 167 altsetting 167 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 204.853105][ T4922] usb 5-1: config 1 interface 167 has no altsetting 0 [ 204.901472][ T4922] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 204.931466][ T4922] usb 5-1: Product: syz [ 204.956380][ T4922] usb 5-1: Manufacturer: syz [ 204.976478][ T4922] usb 5-1: SerialNumber: syz [ 205.463496][ T4922] em28xx 5-1:1.167: New device syz syz @ 12 Mbps (1b80:e309, interface 167, class 167) [ 205.483574][ T4922] em28xx 5-1:1.167: Device initialization failed. [ 205.490058][ T4922] em28xx 5-1:1.167: Device must be connected to a high-speed USB 2.0 port. [ 205.531542][ T4922] usb 5-1: USB disconnect, device number 16 [ 205.934946][ T7267] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 205.979646][ T7267] netlink: 'syz.1.409': attribute type 1 has an invalid length. [ 206.531726][ T5621] Bluetooth: hci1: command 0x0406 tx timeout [ 206.532288][ T5611] Bluetooth: hci3: command 0x0406 tx timeout [ 206.544299][ T5627] Bluetooth: hci4: command 0x0406 tx timeout [ 206.553644][ T5621] Bluetooth: hci2: command 0x0406 tx timeout [ 207.298377][ T7287] netlink: 4 bytes leftover after parsing attributes in process `syz.3.416'. [ 207.353659][ T7290] netlink: 4 bytes leftover after parsing attributes in process `syz.3.416'. [ 207.377340][ T7287] batadv0: entered promiscuous mode [ 207.396232][ T7287] macvtap1: entered promiscuous mode [ 207.412989][ T7287] macvtap1: entered allmulticast mode [ 207.426228][ T7287] batadv0: entered allmulticast mode [ 207.443981][ T7287] 8021q: adding VLAN 0 to HW filter on device macvtap1 [ 207.478763][ T7290] batadv0: left allmulticast mode [ 207.501824][ T7290] batadv0: left promiscuous mode [ 207.518346][ T7290] macvtap1: left promiscuous mode [ 207.541470][ T7290] macvtap1: left allmulticast mode [ 207.766736][ T30] kauditd_printk_skb: 56 callbacks suppressed [ 207.766757][ T30] audit: type=1326 audit(1786469461.587:123): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7282 comm="syz.1.414" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f76ee79e0d9 code=0x0 [ 207.901138][ T7301] bond2: (slave lo): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 207.947977][ T7301] bond2: (slave lo): Enslaving as an active interface with an up link [ 207.961137][ T7301] A link change request failed with some changes committed already. Interface tunl0 may have been left with an inconsistent configuration, please check. [ 208.261515][ T5669] usb 3-1: new high-speed USB device number 18 using dummy_hcd [ 208.317944][ T7312] netlink: 8 bytes leftover after parsing attributes in process `syz.1.424'. [ 208.412353][ T187] usb 4-1: new full-speed USB device number 15 using dummy_hcd [ 208.431496][ T5669] usb 3-1: Using ep0 maxpacket: 16 [ 208.442609][ T5669] usb 3-1: New USB device found, idVendor=04d8, idProduct=00dd, bcdDevice= 0.00 [ 208.445907][ T5669] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 208.479355][ T5669] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 208.515566][ T5669] usb 3-1: config 0 descriptor?? [ 208.578161][ T187] usb 4-1: New USB device found, idVendor=09c0, idProduct=0203, bcdDevice=d3.43 [ 208.592930][ T187] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 208.605602][ T187] usb 4-1: config 0 descriptor?? [ 208.631563][ T187] dvb-usb: found a 'Genpix SkyWalker-1 DVB-S receiver' in warm state. [ 208.737567][ T7320] veth0_to_batadv: Caught tx_queue_len zero misconfig [ 208.810288][ T187] gp8psk: usb in 128 operation failed. [ 209.222442][ T7310] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 209.239863][ T7310] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 209.267452][ T187] gp8psk: usb in 137 operation failed. [ 209.282448][ T187] dvb-usb: This USB2.0 device cannot be run on a USB1.1 port. (it lacks a hardware PID filter) [ 209.298967][ T187] dvb-usb: Genpix SkyWalker-1 DVB-S receiver error while loading driver (-19) [ 209.319795][ T187] usb 4-1: USB disconnect, device number 15 [ 209.557682][ T5669] usbhid 3-1:0.0: can't add hid device: -71 [ 209.590591][ T5669] usbhid 3-1:0.0: probe with driver usbhid failed with error -71 [ 209.619704][ T5669] usb 3-1: USB disconnect, device number 18 [ 210.802387][ T7352] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 210.878495][ T7352] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 211.038153][ T7345] bridge0: port 3(syz_tun) entered disabled state [ 211.101681][ T7345] bridge0: port 2(bridge_slave_1) entered disabled state [ 211.109716][ T7345] bridge0: port 1(bridge_slave_0) entered disabled state [ 211.214283][ T7345] batman_adv: batadv0: Interface deactivated: dummy0 [ 211.421833][ T7345] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 211.436674][ T7367] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 211.478345][ T7345] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 211.500544][ T7367] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 212.088614][ T7352] mac80211_hwsim hwsim7 ..c: renamed from wlan1 (while UP) [ 212.234398][ T3332] netdevsim netdevsim4 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 212.280448][ T3332] netdevsim netdevsim4 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 212.324023][ T3332] netdevsim netdevsim4 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 212.355952][ T3332] netdevsim netdevsim4 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 212.681877][ T5709] usb 5-1: new high-speed USB device number 17 using dummy_hcd [ 212.853322][ T5709] usb 5-1: Using ep0 maxpacket: 16 [ 212.869867][ T5709] usb 5-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 212.908945][ T5709] usb 5-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xF3, changing to 0x83 [ 212.985072][ T5709] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 213.118598][ T5709] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 213.165523][ T5709] usb 5-1: Product: syz [ 213.199044][ T5709] usb 5-1: Manufacturer: syz [ 213.237789][ T5709] usb 5-1: SerialNumber: syz [ 213.273595][ T5709] usb 5-1: config 0 descriptor?? [ 213.295570][ T5709] em28xx 5-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0) [ 213.334072][ T5709] em28xx 5-1:0.0: Audio interface 0 found (Vendor Class) [ 213.909482][ T5709] em28xx 5-1:0.0: unknown em28xx chip ID (0) [ 213.928025][ T5709] em28xx 5-1:0.0: Config register raw data: 0xfffffffb [ 214.555640][ T5709] em28xx 5-1:0.0: Unknown AC97 audio processor detected! [ 214.597874][ T5709] em28xx 5-1:0.0: couldn't setup AC97 register 2 [ 214.615379][ T5709] em28xx 5-1:0.0: couldn't setup AC97 register 4 [ 214.640507][ T5709] em28xx 5-1:0.0: couldn't setup AC97 register 6 [ 214.659523][ T5709] em28xx 5-1:0.0: couldn't setup AC97 register 54 [ 214.674471][ T5709] em28xx 5-1:0.0: couldn't setup AC97 register 56 [ 215.494728][ T5709] em28xx 5-1:0.0: couldn't setup AC97 register 2 [ 215.522309][ T5709] em28xx 5-1:0.0: couldn't setup AC97 register 4 [ 215.556588][ T5709] em28xx 5-1:0.0: couldn't setup AC97 register 6 [ 215.585219][ T5709] em28xx 5-1:0.0: couldn't setup AC97 register 54 [ 215.614994][ T5709] em28xx 5-1:0.0: couldn't setup AC97 register 56 [ 215.649201][ T5709] usb 5-1: USB disconnect, device number 17 [ 216.681582][ T5709] usb 5-1: new high-speed USB device number 18 using dummy_hcd [ 216.882488][ T5709] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40 [ 216.932270][ T5709] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 216.961052][ T5709] usb 5-1: config 1 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 216.984486][ T5709] usb 5-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 217.017545][ T5709] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 217.037557][ T5709] usb 5-1: Product: syz [ 217.051178][ T5709] usb 5-1: Manufacturer: syz [ 217.061033][ T5709] usb 5-1: SerialNumber: syz [ 217.083189][ T7419] trusted_key: encrypted_key: insufficient parameters specified [ 217.102678][ T5709] hub 5-1:1.0: bad descriptor, ignoring hub [ 217.115862][ T5709] hub 5-1:1.0: probe with driver hub failed with error -5 [ 217.399275][ T7421] pci 0000:00:05.0: vgaarb: VGA decodes changed: olddecodes=none,decodes=none:owns=io+mem [ 217.464014][ T5709] usblp 5-1:1.0: usblp0: USB Unidirectional printer dev 18 if 0 alt 0 proto 1 vid 0x0525 pid 0xA4A8 [ 217.966756][ T7416] usb 5-1: reset high-speed USB device number 18 using dummy_hcd [ 218.035301][ T7416] usb 5-1: device reset changed ep0 maxpacket size! [ 218.080723][ T7355] usb 5-1: USB disconnect, device number 18 [ 218.120236][ T7355] usblp0: removed [ 218.311482][ T7355] usb 5-1: new high-speed USB device number 19 using dummy_hcd [ 218.502010][ T7355] usb 5-1: Using ep0 maxpacket: 16 [ 218.525262][ T7355] usb 5-1: New USB device found, idVendor=13b1, idProduct=0042, bcdDevice=9d.3d [ 218.563541][ T7355] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 218.597279][ T7355] usb 5-1: config 0 interface 0 has no altsetting 0 [ 218.644741][ T7355] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 218.671844][ T7355] usb 5-1: Product: syz [ 218.677604][ T7355] usb 5-1: Manufacturer: syz [ 218.686457][ T7355] usb 5-1: SerialNumber: syz [ 218.710179][ T7355] usb 5-1: config 0 descriptor?? [ 218.755678][ T7355] hub 5-1:0.0: bad descriptor, ignoring hub [ 218.764769][ T7355] hub 5-1:0.0: probe with driver hub failed with error -5 [ 218.792766][ T7355] usb 5-1: Warning: ath10k USB support is incomplete, don't expect anything to work! [ 218.817523][ T48] usb 5-1: Failed to submit usb control message: -71 [ 218.832567][ T48] usb 5-1: unable to send the bmi data to the device: -71 [ 218.843372][ T48] usb 5-1: unable to get target info from device [ 218.852179][ T5709] usb 1-1: new high-speed USB device number 13 using dummy_hcd [ 218.860225][ T48] usb 5-1: could not get target info (-71) [ 218.869544][ T48] usb 5-1: could not probe fw (-71) [ 219.014096][ T5709] usb 1-1: Using ep0 maxpacket: 8 [ 219.043406][ T5709] usb 1-1: unable to get BOS descriptor or descriptor too short [ 219.053255][ T5709] usb 1-1: New USB device found, idVendor=1235, idProduct=800c, bcdDevice= 0.40 [ 219.078477][ T5709] usb 1-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 127, changing to 7 [ 219.104314][ T5709] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 219.104814][ T7365] usb 5-1: USB disconnect, device number 19 [ 219.121623][ T5709] usb 1-1: Product: syz [ 219.125907][ T5709] usb 1-1: Manufacturer: syz [ 219.133919][ T5709] usb 1-1: SerialNumber: syz [ 219.417251][ T5709] usb 1-1: Audio class v2/v3 interfaces need an interface association [ 219.558322][ T5709] snd-usb-audio 1-1:1.0: probe with driver snd-usb-audio failed with error -22 [ 219.643360][ T5709] usb 1-1: USB disconnect, device number 13 [ 219.715513][ T5614] udevd[5614]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 220.032148][ T7461] netlink: 'syz.4.458': attribute type 32 has an invalid length. [ 220.221450][ T7365] usb 3-1: new high-speed USB device number 19 using dummy_hcd [ 220.344446][ T5706] usb 4-1: new high-speed USB device number 16 using dummy_hcd [ 220.382576][ T7365] usb 3-1: Using ep0 maxpacket: 8 [ 220.394681][ T7365] usb 3-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 220.418273][ T7365] usb 3-1: config index 0 descriptor too short (expected 74, got 45) [ 220.441605][ T7365] usb 3-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 1536, setting to 1024 [ 220.473820][ T7365] usb 3-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024 [ 220.493822][ T7365] usb 3-1: config 16 interface 0 altsetting 0 endpoint 0x8B has invalid maxpacket 30768, setting to 1024 [ 220.511558][ T5706] usb 4-1: Using ep0 maxpacket: 8 [ 220.518878][ T7365] usb 3-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 1024 [ 220.530481][ T7365] usb 3-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 220.530892][ T5706] usb 4-1: New USB device found, idVendor=0f11, idProduct=1080, bcdDevice=fc.6a [ 220.553212][ T7365] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 220.605096][ T5706] usb 4-1: config 0 has an invalid interface number: 55 but max is 0 [ 220.633857][ T5706] usb 4-1: config 0 has no interface number 0 [ 220.659413][ T5706] usb 4-1: config 0 interface 55 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 220.681938][ T5706] usb 4-1: config 0 interface 55 altsetting 0 has an endpoint descriptor with address 0xAB, changing to 0x8B [ 220.694019][ T5706] usb 4-1: config 0 interface 55 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 220.715240][ T5706] usb 4-1: config 0 interface 55 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 2 [ 220.744392][ T5706] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 220.790917][ T5706] usb 4-1: config 0 descriptor?? [ 220.800862][ T7365] usb 3-1: GET_CAPABILITIES returned 0 [ 220.827442][ T7365] usbtmc 3-1:16.0: can't read capabilities [ 220.856716][ T5706] ldusb 4-1:0.55: LD USB Device #0 now attached to major 180 minor 0 [ 221.138133][ T7365] usb 4-1: USB disconnect, device number 16 [ 221.138224][ C1] ldusb 4-1:0.55: usb_submit_urb failed (-19) [ 221.168877][ T7365] ldusb 4-1:0.55: LD USB Device #0 now disconnected [ 221.384270][ T7365] usb 3-1: USB disconnect, device number 19 Stopping sshd: [ 222.050399][ T7498] syzkaller0: entered promiscuous mode [ 222.083875][ T7498] syzkaller0: entered allmulticast mode stopped /usr/sbin/sshd (pid 5368) OK Stopping crond: stopped /usr/sbin/crond (pid 5352) OK Stopping dhcpcd... stopped /sbin/dhcpcd (pid 5273) Stopping network: [ 224.685609][ T7546] netlink: 'syz.2.477': attribute type 11 has an invalid length. [ 225.571543][ C1] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 225.842169][ T7560] syz.0.478 calls setitimer() with new_value NULL pointer. Misfeature support will be removed [ 226.172133][ T5706] usb 1-1: new high-speed USB device number 14 using dummy_hcd [ 226.355000][ T5706] usb 1-1: Using ep0 maxpacket: 32 [ 226.378992][ T5706] usb 1-1: New USB device found, idVendor=06a3, idProduct=0cfa, bcdDevice= 0.00 OK [ 226.419324][ T5706] usb 1-1: too many endpoints for config 0 interface 0 altsetting 0: 255, using maximum allowed: 30 [ 226.460481][ T5706] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 226.557233][ T5706] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x2 has an invalid bInterval 106, changing to 10 Stopping iptables: [ 226.675346][ T5706] usb 1-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 255 [ 226.786877][ T5706] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 226.836252][ T5706] usb 1-1: config 0 descriptor?? OK Stopping system message bus: [ 227.296101][ T5706] saitek 0003:06A3:0CFA.0003: item fetching failed at offset 0/6 [ 227.344312][ T5706] saitek 0003:06A3:0CFA.0003: parse failed [ 227.393424][ T5706] saitek 0003:06A3:0CFA.0003: probe with driver saitek failed with error -22 [ 227.532001][ T7594] dvb_demux: dvb_demux_feed_del: feed not in list (type=0 state=0 pid=ffff) [ 227.635315][ T7560] netlink: 36 bytes leftover after parsing attributes in process `syz.0.478'. [ 227.698503][ T5706] usb 1-1: USB disconnect, device number 14 [ 228.202685][ T7597] sit0: entered promiscuous mode [ 228.221695][ T7597] netlink: 'syz.4.485': attribute type 1 has an invalid length. [ 228.241483][ T7597] netlink: 9 bytes leftover after parsing attributes in process `syz.4.485'. done [ 229.764424][ T7635] loop2: detected capacity change from 0 to 7 [ 229.793048][ T7635] Dev loop2: unable to read RDB block 7 [ 229.828187][ T7635] loop2: unable to read partition table [ 229.842623][ T7635] loop2: partition table beyond EOD, truncated [ 229.867593][ T7635] loop_reread_partitions: partition scan of loop2 (被x ) failed (rc=-5) killall: can't kill pid 5799: No such process Stopping klogd: OK Stopping acpid: [ 231.641554][ T5710] usb 3-1: new high-speed USB device number 20 using dummy_hcd [ 231.801563][ T5710] usb 3-1: Using ep0 maxpacket: 8 [ 231.807814][ T5710] usb 3-1: New USB device found, idVendor=2040, idProduct=2950, bcdDevice=85.f1 [ 231.819837][ T5710] usb 3-1: config 0 has an invalid interface number: 33 but max is 1 [ 231.828135][ T5710] usb 3-1: config 0 has no interface number 1 [ 231.834557][ T5710] usb 3-1: config 0 interface 33 altsetting 0 endpoint 0x6 has an invalid bInterval 0, changing to 7 [ 231.845890][ T5710] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 231.856996][ T5710] usb 3-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 231.873909][ T5710] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 231.882533][ T5710] usb 3-1: Product: syz [ 231.886776][ T5710] usb 3-1: Manufacturer: syz [ 231.891866][ T5710] usb 3-1: SerialNumber: syz [ 231.902567][ T5710] usb 3-1: config 0 descriptor?? [ 231.916071][ T5710] pvrusb2: Hardware description: WinTV PVR USB2 Model 29xxx OK [ 232.219213][ T2355] pvrusb2: Failed to submit write-control URB status=-90 [ 232.241056][ T5710] pvrusb2: Hardware description: WinTV PVR USB2 Model 29xxx Stopping syslogd: [ 232.293905][ T5710] usb 3-1: USB disconnect, device number 20 [ 232.306868][ T2355] usb 3-1: Direct firmware load for v4l-pvrusb2-29xxx-01.fw failed with error -2 [ 232.328339][ T2355] usb 3-1: Falling back to sysfs fallback for: v4l-pvrusb2-29xxx-01.fw stopped /sbin/syslogd (pid 4961) OK [ 232.475261][ T7670] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 232.499076][ T7670] misc raw-gadget: fail, usb_gadget_register_driver returned -16 umount: can't remount debugfs read-only [ 232.943068][ T7659] syzkaller1: entered promiscuous mode [ 232.967904][ T7659] syzkaller1: entered allmulticast mode [ 233.106689][ T7675] syz_tun: entered allmulticast mode [ 233.390285][ T7682] netlink: 28 bytes leftover after parsing attributes in process `syz.3.505'. [ 233.901493][ T5709] usb 4-1: new high-speed USB device number 17 using dummy_hcd [ 234.073495][ T5709] usb 4-1: Using ep0 maxpacket: 16 [ 234.092005][ T5709] usb 4-1: unable to get BOS descriptor or descriptor too short [ 234.107853][ T5709] usb 4-1: New USB device found, idVendor=041e, idProduct=3000, bcdDevice= 0.40 [ 234.129332][ T5709] usb 4-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 233, changing to 7 [ 234.153509][ T5709] usb 4-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 240, changing to 7 [ 234.194874][ T5709] usb 4-1: config 1 interface 2 altsetting 1 endpoint 0x82 has invalid maxpacket 1600, setting to 1024 [ 234.225571][ T5709] usb 4-1: language id specifier not provided by device, defaulting to English [ 234.237405][ T5709] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 234.245980][ T5709] usb 4-1: Product: syz [ 234.280148][ T5709] usb 4-1: Manufacturer: ⯉褮恤ဤ烔᜞ꅰ넺猳Ⅼ몭Ѣ鏍￣츏Ṟ薹ਅ쉜ƛ⹏슌뿅듲 [ 234.314987][ T5709] usb 4-1: SerialNumber: syz [ 234.330373][ T7699] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 234.355405][ T7699] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 234.609400][ T5709] usb 4-1: Audio class v2/v3 interfaces need an interface association [ 235.114850][ T5709] snd-usb-audio 4-1:1.0: probe with driver snd-usb-audio failed with error -22 umount: can't remount sysfs read-only umount: devtmpfs busy - remounted read-only umount: can't remount /dev/root read-only The system is going down NOW! Sent SIGTERM to all processes [ 235.308253][ T5709] usb 4-1: USB disconnect, device number 17 Connection to 10.128.0.254 closed by remote host. [ 235.542092][ T7360] usb 2-1: USB disconnect, device number 16 [ 236.312848][ T5631] syz_tun (unregistering): left allmulticast mode [ 236.319303][ T5631] syz_tun (unregistering): left promiscuous mode [ 236.326026][ T5631] bridge0: port 3(syz_tun) entered disabled state [ 236.492995][ T7175] syz_tun (unregistering): left allmulticast mode Sent SIGKILL to all processes Requesting system poweroff [ 237.185281][ T136] bridge_slave_1: left allmulticast mode [ 237.191839][ T136] bridge_slave_1: left promiscuous mode [ 237.204856][ T136] bridge0: port 2(bridge_slave_1) entered disabled state [ 237.217480][ T136] bridge_slave_0: left allmulticast mode [ 237.223237][ T136] bridge_slave_0: left promiscuous mode [ 237.229142][ T136] bridge0: port 1(bridge_slave_0) entered disabled state [ 237.519770][ T136] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 237.532634][ T136] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 237.542087][ T136] bond0 (unregistering): Released all slaves [ 237.628643][ T136] tipc: Left network mode [ 237.684047][ T2355] pvrusb2: ***WARNING*** Device fx2 controller firmware seems to be missing. [ 237.699226][ T7705] smc: removing smcd device lo [ 237.705321][ T2355] pvrusb2: Did you install the pvrusb2 firmware files in their proper location? [ 237.726119][ T2355] pvrusb2: request_firmware unable to locate fx2 controller file v4l-pvrusb2-29xxx-01.fw [ 237.745990][ T2355] pvrusb2: Failure uploading firmware1 [ 237.762664][ T2355] pvrusb2: Device initialization was not successful. [ 237.769914][ T2355] pvrusb2: Giving up since device microcontroller firmware appears to be missing. [ 237.789009][ T2355] pvrusb2: Failed to submit write-control URB status=-19 [ 237.806820][ T2355] usb 3-1: Direct firmware load for v4l-pvrusb2-29xxx-01.fw failed with error -2 [ 237.828104][ T2355] usb 3-1: Falling back to sysfs fallback for: v4l-pvrusb2-29xxx-01.fw [ 237.837834][ T5710] pvrusb2: Device being rendered inoperable [ 237.850891][ T2355] ------------[ cut here ]------------ [ 237.856693][ T2355] ret [ 237.856721][ T2355] WARNING: drivers/base/firmware_loader/fallback.c:148 at firmware_fallback_sysfs+0x755/0xa40, CPU#0: pvrusb2-context/2355 [ 237.872247][ T2355] Modules linked in: [ 237.876882][ T2355] CPU: 0 UID: 0 PID: 2355 Comm: pvrusb2-context Not tainted syzkaller #0 PREEMPT(full) [ 237.886743][ T2355] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 237.897079][ T2355] RIP: 0010:firmware_fallback_sysfs+0x755/0xa40 [ 237.903420][ T2355] Code: 9b fb e9 48 fc ff ff e8 99 e1 9b fb c6 05 55 aa 15 0a 01 48 c7 c7 40 ea 75 8c e8 96 99 fc fa e9 70 fc ff ff e8 7c e1 9b fb 90 <0f> 0b 90 4c 89 f7 48 c7 c6 40 eb 75 8c 4c 89 e2 e8 86 12 01 fb e9 [ 237.923491][ T2355] RSP: 0018:ffffc900074ff680 EFLAGS: 00010293 [ 237.929588][ T2355] RAX: ffffffff862b1fe4 RBX: dffffc0000000000 RCX: ffff88802c189f00 [ 237.937617][ T2355] RDX: 0000000000000000 RSI: 00000000fffffff5 RDI: 0000000000000000 [ 237.945622][ T2355] RBP: 0000000000000001 R08: ffffffff90574837 R09: 1ffffffff20ae906 [ 237.953651][ T2355] R10: dffffc0000000000 R11: fffffbfff20ae907 R12: ffffffff8cd0cca0 [ 237.961693][ T2355] R13: 0000000000001770 R14: ffff888051e8a0b0 R15: 00000000fffffff5 [ 237.969674][ T2355] FS: 0000000000000000(0000) GS:ffff888124f55000(0000) knlGS:0000000000000000 [ 237.978816][ T2355] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 237.985486][ T2355] CR2: 000020000028b030 CR3: 0000000030e5c000 CR4: 00000000003526f0 [ 237.993526][ T2355] Call Trace: [ 237.996848][ T2355] [ 237.999788][ T2355] ? kfree+0x1c5/0x640 [ 238.003964][ T2355] _request_firmware+0x1049/0x1780 [ 238.009109][ T2355] ? __pfx__request_firmware+0x10/0x10 [ 238.014616][ T2355] ? pvr2_send_request_ex+0x1a8c/0x2240 [ 238.020388][ T2355] request_firmware+0x36/0x50 [ 238.025126][ T2355] pvr2_locate_firmware+0xb3/0x500 [ 238.030261][ T2355] pvr2_upload_firmware1+0x1bd/0x940 [ 238.035593][ T2355] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 238.041638][ T2355] ? __pfx_pvr2_upload_firmware1+0x10/0x10 [ 238.047485][ T2355] pvr2_hdw_initialize+0x425/0x3c60 [ 238.053114][ T2355] ? __mutex_trylock_common+0x15f/0x270 [ 238.058759][ T2355] ? __pfx_pvr2_hdw_initialize+0x10/0x10 [ 238.064450][ T2355] ? rcu_is_watching+0x15/0xb0 [ 238.069235][ T2355] ? trace_contention_end+0x3d/0x140 [ 238.074558][ T2355] ? pvr2_context_thread_func+0x279/0xc10 [ 238.080309][ T2355] ? __mutex_unlock_slowpath+0x731/0x900 [ 238.085994][ T2355] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 238.092042][ T2355] ? schedule+0x90/0x2b0 [ 238.096299][ T2355] ? schedule+0x16e/0x2b0 [ 238.100652][ T2355] pvr2_context_thread_func+0x504/0xc10 [ 238.106246][ T2355] ? __pfx_pvr2_context_thread_func+0x10/0x10 [ 238.112384][ T2355] ? __pfx_autoremove_wake_function+0x10/0x10 [ 238.118486][ T2355] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 238.124575][ T2355] ? __kthread_parkme+0x71/0x1f0 [ 238.129530][ T2355] ? __kthread_parkme+0x196/0x1f0 [ 238.134824][ T2355] kthread+0x388/0x470 [ 238.138939][ T2355] ? __pfx_pvr2_context_thread_func+0x10/0x10 [ 238.145095][ T2355] ? __pfx_kthread+0x10/0x10 [ 238.149699][ T2355] ret_from_fork+0x514/0xb70 [ 238.154356][ T2355] ? __pfx_ret_from_fork+0x10/0x10 [ 238.159477][ T2355] ? __switch_to+0xc89/0x1420 [ 238.164195][ T2355] ? __pfx_kthread+0x10/0x10 [ 238.168827][ T2355] ret_from_fork_asm+0x1a/0x30 [ 238.173678][ T2355] [ 238.176715][ T2355] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 238.183997][ T2355] CPU: 0 UID: 0 PID: 2355 Comm: pvrusb2-context Not tainted syzkaller #0 PREEMPT(full) [ 238.193715][ T2355] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 238.203774][ T2355] Call Trace: [ 238.207074][ T2355] [ 238.210007][ T2355] vpanic+0x56c/0xa60 [ 238.214020][ T2355] ? __pfx__printk+0x10/0x10 [ 238.218616][ T2355] ? __pfx_vpanic+0x10/0x10 [ 238.223122][ T2355] ? is_bpf_text_address+0x292/0x2b0 [ 238.228445][ T2355] ? is_bpf_text_address+0x26/0x2b0 [ 238.233671][ T2355] panic+0xc5/0xd0 [ 238.237433][ T2355] ? __pfx_panic+0x10/0x10 [ 238.241967][ T2355] ? ret_from_fork_asm+0x1a/0x30 [ 238.246969][ T2355] __warn+0x315/0x4c0 [ 238.250960][ T2355] ? firmware_fallback_sysfs+0x755/0xa40 [ 238.256602][ T2355] ? firmware_fallback_sysfs+0x755/0xa40 [ 238.262264][ T2355] __report_bug+0x276/0x570 [ 238.266778][ T2355] ? firmware_fallback_sysfs+0x755/0xa40 [ 238.272432][ T2355] ? __pfx___report_bug+0x10/0x10 [ 238.277463][ T2355] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 238.282842][ T2355] ? __up_read+0x29c/0x930 [ 238.287292][ T2355] ? firmware_fallback_sysfs+0x755/0xa40 [ 238.292940][ T2355] report_bug+0x16a/0x220 [ 238.297321][ T2355] ? firmware_fallback_sysfs+0x755/0xa40 [ 238.302966][ T2355] ? firmware_fallback_sysfs+0x757/0xa40 [ 238.308699][ T2355] handle_bug+0x9c/0x200 [ 238.312974][ T2355] exc_invalid_op+0x1a/0x50 [ 238.317494][ T2355] asm_exc_invalid_op+0x1a/0x20 [ 238.322377][ T2355] RIP: 0010:firmware_fallback_sysfs+0x755/0xa40 [ 238.328633][ T2355] Code: 9b fb e9 48 fc ff ff e8 99 e1 9b fb c6 05 55 aa 15 0a 01 48 c7 c7 40 ea 75 8c e8 96 99 fc fa e9 70 fc ff ff e8 7c e1 9b fb 90 <0f> 0b 90 4c 89 f7 48 c7 c6 40 eb 75 8c 4c 89 e2 e8 86 12 01 fb e9 [ 238.348250][ T2355] RSP: 0018:ffffc900074ff680 EFLAGS: 00010293 [ 238.354328][ T2355] RAX: ffffffff862b1fe4 RBX: dffffc0000000000 RCX: ffff88802c189f00 [ 238.362307][ T2355] RDX: 0000000000000000 RSI: 00000000fffffff5 RDI: 0000000000000000 [ 238.370281][ T2355] RBP: 0000000000000001 R08: ffffffff90574837 R09: 1ffffffff20ae906 [ 238.378278][ T2355] R10: dffffc0000000000 R11: fffffbfff20ae907 R12: ffffffff8cd0cca0 [ 238.386259][ T2355] R13: 0000000000001770 R14: ffff888051e8a0b0 R15: 00000000fffffff5 [ 238.394278][ T2355] ? firmware_fallback_sysfs+0x754/0xa40 [ 238.400005][ T2355] ? kfree+0x1c5/0x640 [ 238.404085][ T2355] _request_firmware+0x1049/0x1780 [ 238.409225][ T2355] ? __pfx__request_firmware+0x10/0x10 [ 238.414693][ T2355] ? pvr2_send_request_ex+0x1a8c/0x2240 [ 238.420261][ T2355] request_firmware+0x36/0x50 [ 238.424945][ T2355] pvr2_locate_firmware+0xb3/0x500 [ 238.430073][ T2355] pvr2_upload_firmware1+0x1bd/0x940 [ 238.435364][ T2355] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 238.441390][ T2355] ? __pfx_pvr2_upload_firmware1+0x10/0x10 [ 238.447222][ T2355] pvr2_hdw_initialize+0x425/0x3c60 [ 238.452434][ T2355] ? __mutex_trylock_common+0x15f/0x270 [ 238.457995][ T2355] ? __pfx_pvr2_hdw_initialize+0x10/0x10 [ 238.463650][ T2355] ? rcu_is_watching+0x15/0xb0 [ 238.468426][ T2355] ? trace_contention_end+0x3d/0x140 [ 238.473722][ T2355] ? pvr2_context_thread_func+0x279/0xc10 [ 238.479472][ T2355] ? __mutex_unlock_slowpath+0x731/0x900 [ 238.485119][ T2355] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 238.491105][ T2355] ? schedule+0x90/0x2b0 [ 238.495370][ T2355] ? schedule+0x16e/0x2b0 [ 238.499704][ T2355] pvr2_context_thread_func+0x504/0xc10 [ 238.505254][ T2355] ? __pfx_pvr2_context_thread_func+0x10/0x10 [ 238.511328][ T2355] ? __pfx_autoremove_wake_function+0x10/0x10 [ 238.517445][ T2355] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 238.523256][ T2355] ? __kthread_parkme+0x71/0x1f0 [ 238.528195][ T2355] ? __kthread_parkme+0x196/0x1f0 [ 238.533224][ T2355] kthread+0x388/0x470 [ 238.537328][ T2355] ? __pfx_pvr2_context_thread_func+0x10/0x10 [ 238.543426][ T2355] ? __pfx_kthread+0x10/0x10 [ 238.548044][ T2355] ret_from_fork+0x514/0xb70 [ 238.552651][ T2355] ? __pfx_ret_from_fork+0x10/0x10 [ 238.557774][ T2355] ? __switch_to+0xc89/0x1420 [ 238.562483][ T2355] ? __pfx_kthread+0x10/0x10 [ 238.567085][ T2355] ret_from_fork_asm+0x1a/0x30 [ 238.571869][ T2355] [ 238.575066][ T2355] Kernel Offset: disabled [ 238.579396][ T2355] Rebooting in 86400 seconds..