last executing test programs: 9m4.326941478s ago: executing program 32 (id=412): r0 = memfd_create(&(0x7f0000000180)='\b\x9dF\xd8\b\xb3~u\xa5\"\xdc\xfdq\xf6c\r;\xfcO\x8c=\x81\xb1\xfa\x8b\x8aWpA\xd4\x98\x85K\x89>N\x8ar\x17O\x0fKR\xe2{mn\xcc\xbf2\xc0\xa7\x14\xd0\xd4\xfe/m\xdf\xb6]\xc2\xaa\x86\xec(\xf7\xcd\xa6\xd9n^.\x13*\xd4\xb8\xe8\xc4\xefb\x14Vx\xc6\xfe\x9e\xee\xe7\xd7E\xe9\t\x83\xdeNX\xec\xe66\x1b\x97$\xee\x845n,B\xd5?\xe5E:+Pm\x1d\xb4\xb8\xeb\xe8Op2\x82\xc7\x0e\x97\x03\xef\x1a\xa5\x00.\x89\b!m\f\xd9\x8b$}\x9f\fX\x81\xa8\xf6\x94\xbc\xed\x80|l]\xe9\xca\xd3\xc9\xa3\x9e\x9cJI\xf1\xa2\xa0\xc4:\x00\x00\x00\x00\x00\x00\b\xfey\bJ\x86\x8d\xdf\x16\xbb3\x85\xf5\xe0zYe\xc2\n\x0f\x87\xc4\x8f\x8e\xec\xee\xcd\f\xe9\xc8\xbc\x97,\xb7!\xf2\x93\xd3\t\xd9=\x93\x1d\x945\x97\x1e\x9d\xa6\xe9\xa6\xf9p,\xf7v>\xcd\xd9\xc4\x1b\x9c(\xb8\x90\xdeg\xbf[n\x82\x96\xaev\xd4\xac \x14\xf0\x18@\xc3\xf1\xe2\x14\x1c\x0f\xa4-\xde\xae\xfa;\xaf\xae\x06\x9ag\x02\x98\xd0C2\xe7?\xfb\xb01\x9d\xf8\xd3Q\xb3\xb2\x18V\xe8\x8c\x87\xf4\t\x1c\x85\xa4\xc1\xb1\xf4k!G\xf5\xbb\xbbs&\xeac\xb3\xafW\x846\v\xb3\xca\xeb\xb7\x9e\x9e#]\x10lj\xaf\xaf\xd1\'{\x11\xaa,\x0f\xc5OY\"\x82\x84\xb6:J\x8c\xf37\x1d\xca\xf1\xef\x9f\xcf\a\xcf\xcb', 0x0) pipe2(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$binfmt_misc(r2, &(0x7f0000000500)="05dc", 0x2) mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1) splice(r1, 0x0, r0, &(0x7f0000000140)=0x8008, 0x9, 0x1) 7m31.379395618s ago: executing program 33 (id=1415): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_JOIN_MESH(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000100)={0x38, r1, 0x11, 0x70bd2b, 0x25dfdbfb, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_MCAST_RATE={0x8, 0x6b, 0x5}, @NL80211_ATTR_HANDLE_DFS={0x4}, @NL80211_ATTR_HANDLE_DFS={0x4}, @NL80211_ATTR_MESH_CONFIG={0xc, 0x23, 0x0, 0x1, [@NL80211_MESHCONF_CONNECTED_TO_GATE={0x5, 0x1d, 0x1}]}]}, 0x38}, 0x1, 0x0, 0x0, 0x40008c0}, 0xc844) 7m26.63612133s ago: executing program 34 (id=1441): r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) connect$inet6(r0, &(0x7f0000000100)={0xa, 0x0, 0x0, @mcast2, 0x7}, 0x1c) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, 0x0, 0x0) sendmmsg$inet6(r0, &(0x7f0000005880)=[{{0x0, 0x0, &(0x7f0000000040)=[{&(0x7f00000011c0)="8217fa", 0x3}], 0x1}}], 0x1, 0x4400c800) sendto$inet6(r0, &(0x7f0000000300), 0x16, 0x3b00, 0x0, 0xfffffffffffffdfd) 5m54.656697305s ago: executing program 35 (id=2374): r0 = memfd_create(&(0x7f0000000000)=',\xea\x00\xd4\xd7\x02\x8dmbs\x0f\xb9\x80\xb9\x13\x92\'\x94N\xc3\xe0m\xa4\x01\x00\x00\x00\x00\x00\x00\x00-\xb3\x8d\xa1v\xe5\x8a0h7\xa4\xed\x94 \x05q\xa4d\xda0y\xed\xdb\xf4\xeb\x85\x9b\xde\b\xa6\x1f\xaa\f\xa0\x16\xd3\xd6\x98\xf44Q\xae\x8c)\xcd\x1b\xecB\x0f', 0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x100000e, 0x20c44fb6edc09a38, 0xffffffffffffffff, 0x0) ftruncate(r0, 0x7000000) r1 = dup(r0) read$FUSE(r1, &(0x7f00000063c0)={0x2020}, 0xffffffb5) 5m53.472902535s ago: executing program 2 (id=2382): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_EVENTS(r0, 0x84, 0xb, &(0x7f0000000200)={0x0, 0x4, 0x0, 0x9, 0x0, 0x0, 0x0, 0x5, 0x0, 0xfd, 0x0, 0x0, 0xfc}, 0xe) shutdown(r0, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x10, &(0x7f00000002c0)=[@in={0x2, 0x0, @local}]}, &(0x7f0000000440)=0x10) getsockopt$inet_sctp6_SCTP_GET_ASSOC_STATS(r0, 0x84, 0x83, &(0x7f0000000540)={r1, @in={{0x2, 0x4e20, @multicast1}}, [0x3, 0x0, 0x7, 0x0, 0x3, 0xb, 0x8, 0x7, 0x1, 0x7, 0x0, 0x8, 0xfffffffc, 0x5, 0x8]}, &(0x7f0000000300)=0x100) 5m53.399689515s ago: executing program 2 (id=2383): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0xc0241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000300)={'syzkaller1\x00', 0xc201}) r1 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$tun(r0, &(0x7f0000000200)=ANY=[@ANYBLOB="034886dd09032800030020000000600000001204730081e949b93897bc3b0000000000007d01ff020000000000000000000000000001"], 0xfdef) 5m53.134993254s ago: executing program 2 (id=2384): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000480), 0x48241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) r1 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$tun(r0, &(0x7f0000000340)=ANY=[@ANYBLOB="aaaaaaaaaa3b1f00000000004325bdc988a8000081"], 0x18) 5m52.97792342s ago: executing program 2 (id=2385): mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x0) mount(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000100)='hugetlbfs\x00', 0x0, 0x0) mount$bind(&(0x7f0000000040)='.\x00', &(0x7f0000000080)='./file0\x00', 0x0, 0x2a05004, 0x0) mount$fuseblk(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x24000, 0x0) mount$bind(&(0x7f0000000240)='.\x00', &(0x7f00000001c0)='./file0\x00', 0x0, 0x1a8584c, 0x0) 5m52.910802443s ago: executing program 2 (id=2386): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r1 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$tun(r0, &(0x7f0000000040)={@val={0x0, 0x86dd}, @val={0x0, 0x0, 0x11, 0x800}, @mpls={[], @ipv6=@icmpv6={0x0, 0x6, "ec9700", 0x38, 0x2c, 0x0, @local, @mcast2, {[@dstopts={0x73}], @param_prob={0x4, 0x0, 0x0, 0x804e, {0x1, 0x6, "55cab8", 0x5, 0x32, 0x0, @rand_addr=' \x01\x00', @loopback}}}}}}, 0x6e) 5m52.546995763s ago: executing program 2 (id=2389): r0 = socket$inet(0x2, 0x2, 0x0) setsockopt$inet_mreqn(r0, 0x0, 0x23, &(0x7f0000000740)={@multicast2, @loopback}, 0xc) r1 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r1, &(0x7f0000000940)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000000)="d8000000100081046881f782db44b9090000000b01000000e8fe55a1180015000600140000000012080004003e000000a80016000a00001c06000200036010fab94dcf5c0461c1a6ced67f6f94007134cf6ee08000a0e408e8d8ef52878516277ce06bbace8017cbec4c2ee5a7cef4090000001fb791643a5ee4ce1b14d6d930dfe1d95322fe7c9ffeffffff16a4683f1aeb4edbb57a5025ccca9e02360db70100000040fad95667e006dcffff951f215ce3bb9ad809d5e1cace81c639df2d04c343eb7a9db9596bb727ed0bffece0b42a9ecbee5de6ccd4", 0xd8}], 0x1}, 0x20004880) setsockopt$inet_mreqsrc(r0, 0x0, 0x24, &(0x7f0000000440)={@multicast2, @loopback, @empty}, 0xc) 5m52.135560848s ago: executing program 36 (id=2389): r0 = socket$inet(0x2, 0x2, 0x0) setsockopt$inet_mreqn(r0, 0x0, 0x23, &(0x7f0000000740)={@multicast2, @loopback}, 0xc) r1 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r1, &(0x7f0000000940)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000000)="d8000000100081046881f782db44b9090000000b01000000e8fe55a1180015000600140000000012080004003e000000a80016000a00001c06000200036010fab94dcf5c0461c1a6ced67f6f94007134cf6ee08000a0e408e8d8ef52878516277ce06bbace8017cbec4c2ee5a7cef4090000001fb791643a5ee4ce1b14d6d930dfe1d95322fe7c9ffeffffff16a4683f1aeb4edbb57a5025ccca9e02360db70100000040fad95667e006dcffff951f215ce3bb9ad809d5e1cace81c639df2d04c343eb7a9db9596bb727ed0bffece0b42a9ecbee5de6ccd4", 0xd8}], 0x1}, 0x20004880) setsockopt$inet_mreqsrc(r0, 0x0, 0x24, &(0x7f0000000440)={@multicast2, @loopback, @empty}, 0xc) 4m52.363538496s ago: executing program 6 (id=2937): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_XEN_HVM_CONFIG(r1, 0x4038ae7a, &(0x7f0000000340)={0x80, 0x40000094, 0x0, 0x0, 0xfffffffffffffe9a}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 4m51.833658897s ago: executing program 6 (id=2940): write$UHID_CREATE2(0xffffffffffffffff, 0x0, 0x118) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000580), 0x2, 0x0) setsockopt$inet6_tcp_TLS_TX(0xffffffffffffffff, 0x11a, 0x1, &(0x7f0000000140)=@gcm_128={{0x303}, "87ee8ac6c46dad33", "2607080d7f4fcf00fd4ef2dece6c7c58", '\x00', '#\x00'}, 0x28) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000080)={0x0, 0x3, 0x0, 0x3d70000000, &(0x7f0000ffe000/0x2000)=nil}) ioctl$KVM_CLEAR_DIRTY_LOG(r1, 0xc018aec0, &(0x7f0000000140)={0x0, 0x240, 0x380, 0x0}) 4m51.470164972s ago: executing program 6 (id=2944): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt(r0, 0x84, 0x81, &(0x7f0000000280)="1a0000000212a277", 0x8) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000000000)=[@in6={0xa, 0x4e23, 0xa, @loopback}], 0x1c) setsockopt$inet_sctp6_SCTP_AUTH_KEY(r0, 0x84, 0x17, &(0x7f00000001c0)=ANY=[@ANYRES32=0x0, @ANYBLOB="06"], 0x9) sendto$inet6(r0, &(0x7f0000000080)="b1", 0x1, 0x4000050, &(0x7f00000000c0)={0xa, 0x4e23, 0x0, @loopback, 0xffffffff}, 0x1c) setsockopt$inet_sctp6_SCTP_AUTH_ACTIVE_KEY(r0, 0x84, 0x18, &(0x7f0000000180)={0x0, 0x6}, 0x8) 4m51.397561228s ago: executing program 6 (id=2945): mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x0) mount$bind(&(0x7f0000000000)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101091, 0x0) mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0) mount$bind(&(0x7f0000000100)='./file0\x00', &(0x7f00000000c0)='./file0/file0\x00', 0x0, 0x23e9c9e, 0x0) mount$bind(0x0, &(0x7f00000003c0)='./file0/file0\x00', 0x0, 0x80000, 0x0) mount$fuse(0x0, &(0x7f0000000340)='./file0\x00', 0x0, 0x20000, 0x0) 4m51.311026777s ago: executing program 6 (id=2947): r0 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000040), 0x8102, 0x0) ioctl$SNDCTL_DSP_SETFMT(r0, 0xc0045005, &(0x7f0000000300)=0x10) r1 = syz_open_dev$sndctrl(&(0x7f0000001440), 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_PCM_PREFER_SUBDEVICE(r1, 0x40045532, &(0x7f0000000200)) r2 = syz_open_dev$sndpcmp(&(0x7f0000000000), 0x0, 0xa2c25) writev(r2, &(0x7f00000006c0)=[{&(0x7f0000000380)="1883f6", 0x3}, {0x0}], 0x2) 4m50.532567539s ago: executing program 6 (id=2954): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000000)={0x26, 'aead\x00', 0x0, 0x0, 'gcm_base(ctr(aes-aesni),ghash-generic)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000140)="2c385aa3d49100dc6626c892b6bc436a", 0x10) r1 = accept4(r0, 0x0, 0x0, 0x800) sendmsg$alg(r1, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000180)=[@op={0x18, 0x117, 0x3, 0x1}, @assoc={0x18, 0x117, 0x4, 0xb}], 0x30}, 0x4c4) syz_genetlink_get_family_id$tipc2(&(0x7f0000000100), r1) 4m50.26536484s ago: executing program 37 (id=2954): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000000)={0x26, 'aead\x00', 0x0, 0x0, 'gcm_base(ctr(aes-aesni),ghash-generic)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000140)="2c385aa3d49100dc6626c892b6bc436a", 0x10) r1 = accept4(r0, 0x0, 0x0, 0x800) sendmsg$alg(r1, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000180)=[@op={0x18, 0x117, 0x3, 0x1}, @assoc={0x18, 0x117, 0x4, 0xb}], 0x30}, 0x4c4) syz_genetlink_get_family_id$tipc2(&(0x7f0000000100), r1) 3m11.084030702s ago: executing program 9 (id=3896): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000480), 0x22401, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000100)=[@text16={0x10, &(0x7f0000000200)="ea0d00b0000f229464670fc79c8100800000ba6100ecbaf80c66b8ecb1048566efbafc0c66b8106d7dd166eff0867dc5decb66b9800000c00f326635000100000f30ea0000e50066b8010000000f01d9", 0x50}], 0x1, 0x43, 0x0, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, &(0x7f00000000c0)=[@text16={0x10, 0x0, 0x3f}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 3m9.941191647s ago: executing program 9 (id=3900): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000540)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-twofish-avx\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000c18000)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r1 = accept4(r0, 0x0, 0x0, 0x0) sendmsg$NL80211_CMD_SET_BEACON(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000001ac0)={0xe0, 0x0, 0x300, 0x70bd27, 0x25dfdbff, {{}, {@val={0x8}, @val={0xc, 0x99, {0x3, 0x42}}}}, [@NL80211_ATTR_BEACON_HEAD={0xb5, 0xe, {{{0x0, 0x0, 0x8, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1}, {0x3}, @device_a, @device_a, @from_mac, {0x0, 0xd1}}, 0xb, @random=0xa, 0x4019, @val={0x0, 0x10, @random="c0ce754aa2229e59d24d19ae79c70321"}, @val, @void, @void, @void, @val={0x5, 0x3, {0x4, 0xed, 0x1}}, @void, @void, @val={0x3c, 0x4, {0x1, 0xb, 0xd, 0x8}}, @void, @void, @void, @val={0x76, 0x6, {0x0, 0x8, 0x2d, 0x6}}, [{0xdd, 0x64, "569a0508d8b428d7f526cf677ba5739d8f4587e85e5ac206c234bc8c06901ee2c8b63f09453d1afda890dd4c791df917ae88c22d0a2adba7ae92cf4f036f65785df1d0fe61316758f45d9c891a31c8df926cac58b175a605297f74b6ec5d725e9fb440e1"}]}}]}, 0xe0}}, 0x400c020) recvmsg$can_raw(r1, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000005c0)=[{&(0x7f0000000ac0)=""/4096, 0x1000}], 0x1}, 0x40) 3m9.782170788s ago: executing program 9 (id=3903): r0 = getpgrp(0x0) r1 = syz_pidfd_open(r0, 0x0) r2 = epoll_create(0x1) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r1, &(0x7f00000000c0)) r3 = syz_clone(0x20002000, 0x0, 0x0, 0x0, 0x0, 0x0) kcmp$KCMP_EPOLL_TFD(r0, r3, 0x7, r1, &(0x7f0000000180)={r2, r1}) 3m9.598633309s ago: executing program 9 (id=3904): mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) mount$bind(&(0x7f00000002c0)='.\x00', &(0x7f0000000200)='./file0\x00', 0x0, 0x101091, 0x0) r0 = open_tree(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x0) mount$bind(&(0x7f00000001c0)='./file0\x00', &(0x7f0000000280)='./file0/file0\x00', 0x0, 0x1000, 0x0) mount$bind(&(0x7f0000000440)='./file0\x00', &(0x7f0000000000)='./file0/file0\x00', 0x0, 0x10a5840, 0x0) move_mount(0xffffffffffffff9c, &(0x7f0000000380)='./file0\x00', r0, &(0x7f0000000240)='./file0/file0\x00', 0x272) 3m9.472877618s ago: executing program 9 (id=3905): r0 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) r1 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000740), 0x2, 0x0) ioctl$IOCTL_VMCI_VERSION2(r1, 0x7a7, &(0x7f0000000080)=0xa0000) ioctl$IOCTL_VMCI_INIT_CONTEXT(r1, 0x7a0, &(0x7f0000000000)={@my=0x0}) ioctl$IOCTL_VMCI_DATAGRAM_SEND(r1, 0x7ab, &(0x7f0000000280)={&(0x7f0000000780)={{@my=0x0}, {@my=0x0, 0x800000}, 0x400, "884fbe2726aa0a32f3e65f909acda971a093228292456e0332e6c11577b514f0bb8db731789d860e9589c4cbdd60b7a851a8a3c55ada2f90c51a69bf4a5c3e32296535dc838ef00dc18a32a79118dc858628f741f107552021e5a81d38e4374a8a717a7ca9015083cfff5d16156ef9cabf4f60c0da46870a10bf520cc5abcf9e3a437761ea75776763139fadd55c46daf5338870951822f6a803ccfbab9c3f507672d7c39ea9ccf81d9bc2b4649e7b44ed9fd7cb9bd389240cd41c415113d1caac4536f05c07e596d6addad2a4d27ba21a3b655753c508caedcc812ca235a7cd1686426b208bdecf8a4265ba8f6824aa60306e2d623481eed301b6dc21041fa8b6592be00bb74de1989a45a5aa32c189e9f5a5bb878281d0129afcfb8410cd1fa5acd080993d2d084213130a9b8d517d13251e6605a03d9b8faf507e820205a1f471af7b261419e79e09c547f7c10fd3f1ad876f59fdcc5e07d0ff4dee6ea2e3856616a352d648b9b5261b6263020fc3ae8eb404bc25703b3d3b83172d07ff22907d6631d226c8247c92c1826ff814590dfe8c7fc54dfb265e906f756846546316b20e0105e2a5355a210b2b7f5db61d8f90bb783b41ce368233bd08044e9283531fffe49e3d305ecfb16075a047557f57bb7baf8babfc02975ad0d60ed8de9cb8adc9f667bc6826cbea8e260e4bff28a5ec19d38d1fc019db3cfaf310e764d78619cb27fb17af05a0e8ae831ce8413721e71138e62cc4ad8e7974d1506b4fb581c549a3dd7b7ef44ac37201aa3bce6f37f648d781bcb4f329fd45ffa640f1b04efb38a36e0ed0e2abcb07e4ad88ae3edfb6d840d75340204243d0e1c1c3139823b0d5ad196430bf4566619a1a97df4376a7e9a9e9c1d97b9f773c921778f2cb5165c02da1423305c502076177e4af50cb3343c10b01b78e3fe5520bdfae2b3dbe42db0f0eb55bbcb19038018d45ccdb8b0df400085a02c61b033f430fb6a7408e090c65798bc49d35e049d276fd1952d2b3dfd92a2548411e21be26216fe68fc3cf1c6625031260153708a53255b3d3d0411d5f0e8ab2102a97e539c34e9c769a7dafb87c5918deb59ef05e928c2c52775de467fa843cbcdabc290097eeb2ee7c58d86e3fccc39a5b694c18a4cc0d6af1e61d9c69e6466bc0cbef15365109e4f67a6268625f8c3f358fb7d567cbea52e1bc289bd8effda4e362a729e8cd3064970b97e3f72535d9ba88e97a14834cfd8dc86b5d2f9b35425a4162e6abe8b785ef462883e716c91b8eb281d81f68f606f16fcbc5cddfdec3b515818a647d86a4c17bae6ad525e95598052c49cdee821ceb45b2350dda13628db0dd266f30285241a2b147d65113b8ed3665a3451f7a56cf430ec98aeac702d9b9f776d97520a9d039e5b2fff34ac4d4e0a32e1f35c8f38e4f4fe1b3212a70f185ad71ec86b8c9"}, 0x418}) close_range(r0, 0xffffffffffffffff, 0x0) 3m9.062723734s ago: executing program 9 (id=3909): r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0xa2f01, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = dup(r1) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000000040)={'syzkaller1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}}) write$tun(r0, &(0x7f0000000440)=ANY=[@ANYBLOB="0a0000f80180c2000002aaaaaaaaaabb86dd6d000000006411fffc010000000000000000000000000000ff0200000000000000000000000000014e204e23"], 0x9e) 3m8.620334411s ago: executing program 38 (id=3909): r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0xa2f01, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = dup(r1) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000000040)={'syzkaller1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}}) write$tun(r0, &(0x7f0000000440)=ANY=[@ANYBLOB="0a0000f80180c2000002aaaaaaaaaabb86dd6d000000006411fffc010000000000000000000000000000ff0200000000000000000000000000014e204e23"], 0x9e) 48.846199762s ago: executing program 7 (id=5340): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f00000000c0)={0x73622a85, 0x110b, 0x8000000000002}) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000200)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000180)=[@acquire], 0x0, 0x0, 0x0}) r2 = dup3(r1, r0, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000280)={0x10, 0x0, &(0x7f0000000880)=[@clear_death], 0x0, 0x0, 0x0}) 48.7529845s ago: executing program 7 (id=5343): r0 = syz_open_dev$dri(&(0x7f00000000c0), 0x1ff, 0x0) r1 = syz_open_dev$dri(&(0x7f0000000300), 0x40100001, 0x189002) ioctl$DRM_IOCTL_SET_CLIENT_CAP(r1, 0x4010640d, &(0x7f0000000000)={0x3, 0x2}) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r1, 0xc01064b5, &(0x7f0000000140)={&(0x7f0000000100)=[0x0], 0x1}) ioctl$DRM_IOCTL_MODE_GETPLANE(r0, 0xc02064b6, &(0x7f00000002c0)={r2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_SETCRTC(r0, 0xc06864a2, &(0x7f0000000580)={&(0x7f0000000180)=[0x0], 0x1, r3, r4, 0x3, 0xc, 0xffffffff, 0x804, {0xac7c, 0x1, 0x3, 0x67, 0xf4b, 0x1, 0x2, 0x5, 0x4132, 0xe154, 0x1000, 0x7f, 0x3, 0xffffffff, "fe1d00003413000000f1ff000080004000"}}) 48.640708756s ago: executing program 7 (id=5345): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000480)={0x73622a85, 0x0, 0x2}) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000200)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=[@increfs], 0x0, 0x0, 0x0}) r2 = dup3(r1, r0, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000640)={0x8, 0x0, &(0x7f0000000000)=[@decrefs={0x400c6314}], 0x0, 0x0, 0x0}) 48.494236696s ago: executing program 7 (id=5347): mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) mount$bind(&(0x7f00000002c0)='.\x00', &(0x7f0000000200)='./file0\x00', 0x0, 0x101091, 0x0) mount$bind(0x0, &(0x7f0000000140)='./file0\x00', 0x0, 0x100000, 0x0) r0 = open_tree(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x0) mount$bind(&(0x7f0000000440)='./file0\x00', &(0x7f0000000000)='./file0/file0\x00', 0x0, 0x10a5840, 0x0) move_mount(0xffffffffffffff9c, &(0x7f0000000380)='./file0\x00', r0, &(0x7f0000000240)='./file0\x00', 0x272) 48.416708475s ago: executing program 7 (id=5348): mknodat$loop(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x1000, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x20842, 0x0) fcntl$setstatus(r0, 0x4, 0x42000) r1 = openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x20842, 0x4) fcntl$setstatus(r1, 0x4, 0x42000) close(0x3) 47.924046566s ago: executing program 7 (id=5351): r0 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000000240)={0x0, 0x0}, &(0x7f0000000280)=0x5) setuid(r1) r2 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) r3 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) kcmp(r3, r2, 0x5, 0xffffffffffffffff, 0xffffffffffffffff) 47.56687215s ago: executing program 39 (id=5351): r0 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000000240)={0x0, 0x0}, &(0x7f0000000280)=0x5) setuid(r1) r2 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) r3 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) kcmp(r3, r2, 0x5, 0xffffffffffffffff, 0xffffffffffffffff) 46.235112204s ago: executing program 5 (id=5369): sendmsg$NL80211_CMD_REQ_SET_REG(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000240)=ANY=[@ANYBLOB="c04000", @ANYRES16, @ANYBLOB="000000000000000000001b000000200022801c000080080002000000000008000400000000000800050000000000050092000000000007002100616100007c0022803400008008000300000000000800050000000000080002000000000008000300000000000800020000000000080004000000000044000080080004"], 0xc0}}, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='net_prio.prioidx\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000180), 0xfefc) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1000004, 0x10012, r0, 0x0) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) getsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r1, 0x84, 0x1f, &(0x7f0000000280)={0x0, @in={{0x2, 0x4e1f, @empty}}, 0x7fff, 0x9}, &(0x7f0000000140)=0x90) 46.123818659s ago: executing program 5 (id=5371): mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) mkdir(&(0x7f0000000100)='./file1\x00', 0x13b) mkdir(&(0x7f0000000000)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000380)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './bus'}}]}) chdir(&(0x7f0000000140)='./bus\x00') mknodat$loop(0xffffffffffffff9c, &(0x7f0000000040)='./file2\x00', 0x6000, 0x0) 45.978129125s ago: executing program 5 (id=5373): r0 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_int(r0, 0x107, 0xa, &(0x7f0000000080)=0x1, 0x4) setsockopt$packet_rx_ring(r0, 0x107, 0x5, &(0x7f0000000140)=@req3={0x1000, 0x3a, 0x1000, 0x3a, 0x800, 0x2, 0x4}, 0x1c) r1 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000340)={'gretap0\x00', 0x0}) sendto$packet(r1, &(0x7f0000000280)="0515", 0x2, 0x240458d1, &(0x7f0000000200)={0x11, 0x8100, r2, 0x1, 0x85, 0x6, @broadcast}, 0x14) 45.77106109s ago: executing program 5 (id=5376): mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) mount$bind(&(0x7f00000002c0)='.\x00', &(0x7f0000000200)='./file0\x00', 0x0, 0x101091, 0x0) mount$bind(0x0, &(0x7f0000000140)='./file0\x00', 0x0, 0x100000, 0x0) r0 = open_tree(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x0) mount$bind(&(0x7f0000000440)='./file0\x00', &(0x7f0000000000)='./file0/file0\x00', 0x0, 0x10a5840, 0x0) move_mount(0xffffffffffffff9c, &(0x7f0000000380)='./file0\x00', r0, &(0x7f0000000240)='./file0\x00', 0x272) 45.614291254s ago: executing program 5 (id=5377): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000280), 0x42, 0x0) mount$fuse(0x0, &(0x7f0000000180)='./file0/../file0\x00', &(0x7f00000000c0), 0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB='fd=', @ANYRESDEC=r0, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) removexattr(&(0x7f0000000540)='./file0\x00', &(0x7f0000000580)=@random={'system.', '.&*,-}\x00'}) syz_fuse_handle_req(r0, &(0x7f0000004140)="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", 0x2000, &(0x7f0000000440)={&(0x7f0000000340)={0x50, 0x0, 0x0, {0x7, 0x29, 0x0, 0x2000}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_fuse_handle_req(r0, &(0x7f0000006140)="e0332f8f5747b9f778142cc174a9b5f0244b78bb6346cb5fc9135b8220090ee698fddc241870359d32327f299718466d88c89e68097036bb35abfe03e3c02234dcdb2c7d1209c657485ca1aa3f2fb80e71397b80fca6f3cf2367fb19eb95e5b4a0170063374645d9e020099ffd7def3d94cd29412b3d7b7a47bc70121be848cfcecea78d41a93622b134bd06e84dec07a9e5abc29cb02d5b9091e748cffacf48352628822bab7b24a17bdf4b3f3bd9fb17793496aa6490da3f58039ce5b40745dd63f82d93bed80b50ca5742d67d39029a98db95c9392e2d5fd9a35bad30cfe98682b5a069738a12c3cfd25949106cfc839202fd21c2b28e44be73280d5037351ead2dd1c277d9cc9088c6b14365eb0937ea9685f6b26232293803260f2c8cfe176b55df304bc2865b8f52581afc4beed445ae8cc405cb7bcc51103aef812c41437c5b070a3591ad0964677f4f9017bb300727dfab009056bee3671a9694be2e2f2173fcc06ceba5aed0d9da697cd88365c5c354788efcc705e90d572e34e9e566fc206a8167970ecb9cbc43f4d9de4d43688582b6600dfcfc7379c831e756a45835647bd87879a3e3942c61b9ea2c2af35d49a4caa9a109b0beb972996ff8924ea371e15dc48efd12b1203a7f1fe354977fcf9e4ee2c8f210387e551ddb55e5f67ee6bb9bc8772649693b0adf24606e8ccc59f020834d8cbfcadfa1770549fe464dfc412308fbaee8d30bd20c002794bfb923bac6b490841248d12ad9a0e54d1d96e3aff5dc4930a6c8b7c75264a46af7a6339725fb84e0363463ebaaaf58d6b9309ae7c87a8df8c68d2487d684011de1fa7645f3f48cf3bb61bee8bcace2f8ef5f967f2765f8086aeaa5dcc34c84e379a7ddd6438cccb5b8098dfbffffffffffffeadbc4ad2b2ef98412a46f74a171ad056429dbb723cdb9ca9f9f03170dba2870e5988b7cb755599d1eb8f7eaf5c8ded4b56022cb479d0bdfae18f69f9ecc42f4c181ea10838229ba5db7f088ad8d5f77e49c1fd93ed6b983c43b23c7eeb1233f0c114885057a27cd3f67a309e3fecba241836bc92308b830b10b04af6c9595b44e859b9ca7ef079e151fdd500060787be3a7a5b3e23b06ec70f087134504f8b8e7b6799ebfe14f698ba7a813a380e6f92cace9230aa8094a2465f7224e2becad469d0aaf0e48b0098eacfb17abdb69bb2ebba97a09d2b739b532d70db91fcb0fcb38bccdc01d7c8113024ea8b619e385e58d31899721416e10b408504a9c4fcf870d21051227440a616cf62f6637b62eceaee09029f88009be02269cb5e5ed090c6f5e6c652c31214aef301bd23ec2504f90991cd27539c1b8b54db51825e951d076cd0e70f56de4b91894ce22049205483a0fe7d7886b36118bebd96d138980e26604b6e70a7275c6b81501143119a8c2c271558202eda196704ef9ae3c33301e1afbe56d069ce4926bf531d960f3df58192f3da558adc169d48d39e24e04e95c406b34b1f4ed2726ef0f6a67dd84c75636984191d019cebfa883fdf99affcdb4c874614a5312455403895891daf7469d6721583ccd1290ab05b14516f22965fc52c4a528f1a5c20cc133fea279d9efc991ec4d51d2654daceda234f6d3b0c635db697aba3eeaf8356319adba42428266ac09a6e6495ca8f60c1c4e052068511696296e88ef86a591948627ba97df634e0063eb5f208df00a069b1213c29e58cf76f591253d60de9d7c01d29992ccc728140299c429fec0df9d90f83fa2467ce00de83b16d10c7edb80ff8d4b1b19eea9bd1e2783a0d41215c9cf23bc3ca1ff414e3f29aadba00c5a8d5b44c28c10e99140e5428278e54bfd880a93fd1b54b560422ab2bfcf120a7902373b6442c6e9867b19aa0a6b77b1634ab6fd1c8a1d90d99ebb9ebcb89d593562b266fbc53c40501f9298690283c45059b3f6ee278e46cb3904c947446c28af8855b2a68e6e0c0da205a6e12fdd15b393d579039b31c1a54230ac2ea13cf1f5540046b4dcccdd731fff7323c4880e5d2d8668d8a7f08920715c17ef9652eb55f224c82a6fdb970dbf1032403f283bd868a23f4785a6ab9c0bcd2308dba1a1f258ae512cf64784e501008db366ab7093a6cc4b6ee86154d44a1a15c10834602dd5ccf730f6d1142ac19d113496dbcb80021cb5733924265d082a8453b5c21e0245e4a2627e8df090da6a129ee49c58c1a7437369acdee15f5e4e5638f05d9f6391572d9890219def702a013a2b05239664dba44feec2a9508a3200b47de03e6a784bca2f3633df534af33da0a95a34ca845b61a22ff55a5a4c04ff9e06e7162f458a8c56e106e75ffb76a921f4057dd73d5f3801aa78ca4c78d6b79bce560404c2fe3d57876287f73e84c27c486ffb997951f9e0b3aa81a5e7804ac7360add11e7851842d0ed8df041c999e50226fef006373bbb53d5d8e9d1653924e60234fd0b6645b821746f3d88591ff66e294e8e958ca425ddbc7d604f7cbbcb9d5fe0d4ad53878eb16bc801def1005e1eb12a6d4924d2179948e7aa542f2600ba3c6c600629d64c529c7326c1f38aa4e1a6cc259e58f86400d65d67856c8f4fffc33ad4c279dc05367307f562f8127f37b03c3cf38a97cfde0c02aad8ac40d347a9e0a496f227c068dc6c666fb2b6a18990f607399b0707d135752d93739e1840b5b4c125c81eeeb318869b408f87778451e49f3ad988a8aa97672989ad367833ff7e7f0e79c37ac794fe466623e122127fb94ebbc01bc775183b26b2dc407b1aa1a55d4ce04dbe1df4fba0377fea4c4bfa5a37c4dd733fd116b9c7f50b11dd512ad68646b9ddca295fe27bee78476901fbb5c8d2856ae0e9e21ab26e3587c1325f1fa28edb4081f2ba309d5fc39f7f54abbd0d5a152c2f7e3a8b3a5ef6e097b109061c91124f41f33055a7bb86706629f614d40346715cf2fe387ef4e4fc6646839824d3ef85eeac85bc5e681320f6fa7057e0a10de8c4678b48510f77b91bb397dd1209eaba8ea1f237c348e9e0d7af1229e2c04b6560e48e3a7491f3066b63a8923becdcfd8594c1c55098a51283b599765b049831cacd9478e5e996c778d524b476f6677218c94886d7548be7617e5796e35bb3c9b13d70e4897867d85f0350e9329985f051fb556b861aef7dead54e6b29b9ad837cb4774f47a5371ef034612aa0c151345546b876b53e9f2c06e3ce0113e67eba8842f4ac5b51a61315bf050078c710dcf14371d9593730b1d0302ef999f488bbf42b7360171da98ad68932bda4937358fd1d0c2bcd04f7dbe2beaffa0d53cccda316cb19270cf4aa56695ef3203b49fe92d1623cc1d714da6b8f94112db1781562ab2ae50bda23debd55da440434299c992f2f8c264310d6d8ccdd042737db0253d6889d8bf36fe99a131b73300c9798b8fd58b5fc681b97e71230cd3094e441fe5cf1294bbc28f41146f06e39d5e19e673dd489dbddfc16fe281160a8008e375025cbf25e84945f2f0a5ffb2cd58273328ea9d7533b2f0861eff95823cea18dc1877183fefab808bda0890f91f1d79b36953b138fd62caea3411900647a4afadfecade2ff6274175f06614d108daaf9821c413a137e33c826957953bb39e2d852097f978c3577abcb71d68b45794247d8e82614979708f6d6d0e469828206b22913d6d320d815d42c0d943640c63196f703f946089f535eac511e26c6a5a529e875eb15aaf65fd50dcbaf37a009f2f9081cdbc744cf7aa2336913e89f1961581ad4bb6aeb1d23a787e2d3f99639871df5842c30581263d5139128f0a3f37ef48bb636d7aae06581de6baa55a12019d3ed831950915fdc1eee819dd01047bda606f2852699529718c99606246a92bb1dd9435d8f3a48646c0e423441bc783be358c0c91e6846419b6c0a81354500cb2721834dc11ba40c3bbe5717e5142922a168ca0e20fc269ea584c7f68ff7cced62c4277385368b4ad596b79c45a9c4575c37f300cab37a5693cb777fabed412934d3a77505b17cb2628119ddff45f3fcbffb50386eb9cfb6f82b37fa852ad4b65bf8e2898b11bf051cb7fb0fa81cbf81b9ceebb05498aeb2691eb15297edd682976d5a4f444cdaa82f063bc4482c28c4e6257c7cf3e5ee5a502c6527b77b12725e7526ff896ee2f8066536dce04d63072a34c19d533d4dbdb93e7185482cbf7510c5eef2f8aebebad011727cd8061a367b7e1868252bb43d9a74c9c6a10539e357d5367fac69a9296fe5a79a2e5b45950ff462e0e882aa32ff7f29b5644e5311f3e0b076c58683de29ad9dd8b2c92a41ca8313ac997e44981e82aec550bbf6c88adf3d54e9fdf93d9dce95289e9086043d888f19d209cbea79f8f5b2c81b2c3889eae1cb5305e282b883c4cfa3798eceeabb442a74ff6a8470020a296ef01d8e32553663c844e67e5a3a44375f0074ce9547a6c489ee86d7652219491f35c6b904d51a26c3d2cc77d8ff97050dd0d0aed4a1ecf1db7ac48673a1dcc70ac16f709dcf4b90148aede5302111ceaa3a81c49b724cfa206283b62513f96c1da77efafe2d2d08a5f391ab690b5d974ceed2e95e85b1039def0e94c79cc0aa1de1f8133e985adfadf4a657710487b265bb6692fd2b91a06ac98d50b052b8a13168e2638b93209238fbe67f4590a81a2cdbcc479ca9178720a6ec05bc9457f27ad2e2fd2f4e9c643ef85b6287a01f7fd597799cce7d6464ed3c95110733d4ba92314ba3dd81e51f541a6e37f8bb14376e41560f9049b4ff349a467defc205f915a345b5f06d090645180ca642c719f03e9813bff7fd635660efe38b022130d42f2cedd792bcba2bfb14385c6d1cbe5ff2e38c22f1f8d5e4d93d296042507e43f24ff904827b16f2a3572d26078d7fdb0cfdbe2e6bee07b94ae441e510681c96f97ef0ddbd7efbd80ce0689f6e2022a189dd2937d3eadd82a154a5fac91b5ef48523706957b8d5f55077973e9a036009d745a6df39ba154dc59c4ef784d62b3f2d782dc508242a1b0e4cc294b6e62e98ef946f0d984c3174cf86b8a0beb615f046ec50dd0c8a9c0f36df60bd162f1130f894085e7c47b6c28ff336f5d75166c1840e7ad07204fc10ce976505f6aece0316d8c65b973f61cea2fe4c6db722717985c25249f041c07a86b878702a8c9ab7c33fe41039041aa38489b02a28f18d69ab34619e9e35514c54592c8059984ace64b5302b5f22d68c35c7ffb23c63ce877a1e1b160dd2c329eabcc0e1e3072021bd811de3c0c7a68af20ddb9e2912b7eecc2a8cf083a252d0fe31629b20559f7b976e4d8625644385c692b8cdc2886a42d750962d0dee10a1546ecb7ef961216cc456d2450a44aab07014fe0be076ca6bcb46b644af844b2ad8b3817f1895a5d579af3dc937541f4b7e9203e7a7af534b406d8f6e3bc555d767603122ab1c4e62de19d6af63be8e39fe45732859d6d92e11f1a847f7d62764b6364aa7f95f03cc7deba178fb03a467da5be71657ae50ff6bf93c51efb7d19ac9887e92fe5f3c9d545209eff307c9e02073bd3404827e148aa63c135ed668589bdfec38cb47716201a9d02f1b03993f89e96b33b32e52ddffb0580dac45422ba7a3fef76e519a3dc8d12eac60c2d2f8c4303aafa3e80135c403360d51c9cdeba3ffb31e664302f587e0e983ede7f9b2bfe2bc64bd5029cfa88445e043e08f3e9affee25e980e75d2664738726e3d2eade7dce0ece78a514bbbe5a54c121374d079e3b05996052d66889742232b73e950e1a9892e7352c9e546a8cfb48332d2b2be6327208ca51dc2869a562581947f62b0d5bfb3e0911d4854f822d6738b4deb195840d2bbae0b074b8d1e1010c24ec00052dce7d259e3044aab1a99d261fb3b49cf09dfc85473f94db06d49e202ca12182283d48144f8389a5301679901600bf8130d36315b277a99204b85a1598f84bd2d4c4893108f6717bf44234181467d6eeee61e1823268b5c60bf04d0e13e429f411b51adfca20ff1a1b1eee203d59b03da1643c3e9fc474a91470116c6c5275542adb10f3adae2ae87e88b93f334e0ceb6216fc081e8d84d8b0a503196dc50599b22b89b807627b427a815aea0dbca69e5fb215ee996395d8a21a1c67ac295be33c6517504e1f00f579f8c484873cc670b5b9e787b1c30ca1f0b25f8bb8f4bde3b3f4fa730c292cbf97b25068ba9c65f78c555d5f75d52a57958d7111e824f3afa16484f625abf62afc80654c36fd9f8284466422fb18e08274e8febc719d45b784974d50d187ad2349429af3f7930252a4d45997762e9d5f5493d408ca144532aa89aa3d43c46951dafb8f81794e2e9679ce238cfe86e112f4f046d87feec3be04461032819d62f217faa71fa9dc6da8861015567d1f7309090e25b7015dcc6d72a5e7ba53296ab1bc72467ac50831628cf5238155aed3fb189a8b527ebd38771e16454fe51e3edde55cea454414690491207c23f6cf33aaeeda432de2d1ede04e039a16245e66cce6f4e4ea534f290f02a2a81a46d6ffea7967dfbe37461f83d472091156594852823392efc953f4ac099d74e2d0328d9f47bd952352981a34055acd0273309484ab56afa85ff0c22fb53ac5d7cc8e346b4c2f38a4e2451738146b7b90c14f826c7dbc1b2be79d83772a8d629f2dfaf15286a15be1ea22a05d4ee3de6a6bfb7e208dbbcc88e77baac940d6438aeeb77c3a32db08b46e79545b65f7f3c1bd433092bc9116668c338ab35c01cb5871167868c6b61bd4c0ca5f96e5ce2465da06c4a320839f3bb7c0dffd40d5bb9a32fcbc6f691787de7211da062616272c77c62ac83e4cb29fb954ab27d9009877b79be54acd336bfe2a6e087abaab004743f5ea4ec8ddfb8086920e8e458a413adb98077a3cf860513cc8a453eb129556c871be7e7232a6130c4332819ad17b289fdb31f8f8854dffb4cfeca6d792567b444c750820a2a8a2e0f93779e61a4966650909369fc8bd5bd2bad4ff95cc8a14f6cd83ae6411b4bfe1a9b5cdf1fcf32c54cef1731edc47d41fa581376b25006fc859b98805d70a157e481a2cb2ab425340965213adfecdb5addb2b4b2ec5cc6935e4e279bb98283fb20dfcd8a2c91aefda9dc5a57bba4d8803d1eb0f4ba9529de01e39c2aa60a91267c31d036a3f669b9377661837f58c6950fdf38986ea13ff5e9c4d966bf999002da1a854d54aa225b259d91eb88425328e7d13b06dea321a151a8dfc44755214da97168e8acf027d66b7fff45ded94fcde53ff80342d4595644549c4ed827225596e2b30480e94eb049b6cd718fe8424d044bb5098e0206047ddb81755e3cb92131dd47ec754b64c4b78f663e364cf8a74cdd9857c81316dabfbc9d6a23ee6d1eaf6b8fc1544cfeb06002c8a40fb0e49859d2073a7b1cb112713518ad5e007d0a256f901469bfa5cae98841f877faeb584d41bfe695da72ca5700ae085f39c99f769502ea9f43c0b84ca4611441d5adb3e5d0a426297e535258748169cad487f97d171c0630642943508206ce648aad2971297f3d4037d73e5fbc73460ca7401b7dbd7807273ae077a81fd0d4bc90b6068e3ec95afcfeab16619306fb23942a4308e8253b35f4912df392dfc5daf35dd842a5a1f78fc294cbdbd504056f0c7779121b5b3db7461e437347452476f3b0bb22e63aa23cb9d3e797c6c95513058d8fb2c27864ac0e1f5001c988e29c79bfa4236c7be41dee5561d825c1f0fbebc0c06cc4712e88ad5efd94f4eb4e93794af42a9752a2ebc57dc2f3881c75bbb23ad25b69619f9f5b07fe114ba291d2b5b4c1c175e1aa3ee3eda55e6126b3ad1e613bf8e0bbac727b879e7796fa0ad100893677a18b53f5eb31db43a97370d3749afa92fd0291fa96b05daa6beb43b9c1c11d9515976976d1cc1e44f35d317299ceb68ea2545f2a2b92b4e1046f6f92c33aae6995593189bb2611576599fd765b8e6fe2e88674ffd57ee8252287b1904d622c36a502db45c72b0d5fc3d983cc44bc955eb43911404667a4ab147d72b69ef2514dfb820ad75758e85df88499cea94ed658b4c1c2f49fe2bbb8d2dd97f844a6df289296cfb9cd5bc8d17aa235e2c4501b1422b25acd6dbc3a91d03904c545320524f9034955ab02f5d058097c37d23984baf808d28b3e12821eb8919a77c1b6a8bdeceecfcc487c39db592817dd378a7c5127b427e7279b2a82f6b8eec6b3fabe0947e353e7a386475b15011de93e2f2891f772ef90f4aba1ee1c4d7321c81ce4dcaa378daeabb93182c319494436dbe67d252a01291cacb59686ebd53c6df21c083e98fa299cf5e9b59f1ccea95c62b1437c8ff8754a6372b5b879ebc3241f6430871eafe35337d75cb68c42862846df4342ab434f7f0a7b9f66824e1e696e3dbecde179592774b7511e5a7a1a06ba601eb5f2a935c7cef0f83ecd412a84afdd05120fceb1afb6445ebfcdf12c2287bfb75dddccc45afb4f5bb1308d39309c92c0b61a322d5229881fa5d598113cce54107036ca9f63fe863d257c706fe89d5c7ae59a459c6f15ba48d80da4aff541797b26418acddb987df3544bc4918cdbbdd8dd1bc2163c89635044e7b4da878457727a667c0146a12b4c46639497243259bfe4aa5ea50eb79f39fa9209256c9a685e3e39d6d8b6a9ca7d3554fbff0908ad6c6ecf68e506c20b16cd4a98e3ada9eb0cb3eb0b75b13b6d80bf99eddf2282da52cec085d3a725b71c29395d605e1eb26143290946a3a0d24347fa46145735dbf4eabc12150b8d5f7eeca804d7ed1fecd0132d1b94ebec65cbc07dfd4d54a5140567e77c646bd92666922c43aca8e482c59b970fa43087eb76d6715e4e8e5ebe54ca391383ef685b133534fcc1e5c5eb56f9d76a888506c4ac8d289c37039e0c4f927b0e11e85c5c7ec1cf4b19bebee6014cb89ee57f2ade8d166005e956d46a0c01f60b58299479e8a59a2e88f1a7ffd08b27d92fc2772b338959bd0a1c9cb95075c3cc17043c818345b29b76c0b8ed41c8c7259cc780c657cb9509daec1558453cfe061f54e08523a55d3223897559d51096b680802144f1dfbc114cee5ba322e007c2af0c08867291dd732bfe4b24d1d5ae517a7f5903c369ac6b157d42eb6ca8c0d7b50fd533a56c814e7cf04db3012eebd53ec1b123d65ab1e462d9f9182b690d56a88ad5a1f4d89f1749b005e88085505cc6d7de8eeee08def67bc1d1519d44b7a62dc07e491f328f786956d9200f00d78829e6af7c1a5835366201374b9487330920d4c57e2f7073292e173acc2424bb0d5e0e9448b4c02f9cfc99bc408110b6a3e9bc3799e4b178c2871069bc7d9ceba564378f02b2932c36f159478b5facd452b595a86d119216af9d860bd3997305320159a69a70fc62284141d23d2dc1e5394b271d99e5570450f1c55807e96c7cbe1b7c2e3e96f69fecf0f375e36e0d2acf319e37199e98486a8d145ce2d996c1909402744cce63664a75e480b197c345360321e830e5572d1d7bfe5a129a67fa98e6eda5268fa588047859daa11d087d0dbf0ccc7e120e3a5820cb4f5dc06748317e3f866518eb66e39dc8a68a7411b3403fc8eeab8283dee4d767e8e5842ed922e03ae5b3c9c494d5ebc61527ccd1222740fedd9e469ba6b30761cf387d654081c7e63182860e4548748058914a9cea01caf074fe6a78fafa2b45c516f9f20af9ac6773a400fa9661a872f6b55f0ed52a9be9e9c35502604b924f0eb628d6545da322e0713f9a5587e87e4b04fa495423b7c72093b764adfd1430a2e608b7af3d2bf80fef00e5b69abe386618274921ff57621bb99739de2e066ff17e95eba027f6a35170af3a69e93359a9643e155832d45c1aa9a8f71ad35504b99d3d0a1c11ae108664ea36f4dcded083aee17ac9efe7ee3fdf7b63c7c09bcef62caa88708510d45cea79d323083ddbfe7e5d3d9138f206a7af82ef1d26c85015c3e55a285a35d0052546493536b9061db27291a9292033753b7bddac63dac6f6271689240e43523c434a65e1d35299e386c953d0c92f21057e0b7883e049d20961e75069587eb3df6206496f76bbfd96635bb19837ba2ab193d79072ffb8829306b63697ff104a65031b8a38c24cca9ba23d5cdf753169a00fe2b2c3849f234a7029b657b3324c10d553e601aa97d17024f7bf5a99f96392f4a079a83daa27f4e3b512ee8536e764ce4dc36fd0874dfa502a693e55bd9f116202c5e906703e2c43d84448598b7af78aa60a205c152841e75e23436738ccaa6bbcef87e6a237d86d1a5e38e56c162cd6d61a4fb8b410b1643ad557a22348edfa82c23db11c9abdd8141fce263a66537512e93a930a4801ad862a902c7c1e00eb7c7466b1351318b7196c2a9016c55a05e104e124bdb568132f9397e31b10d04e5284bd029ea2f6a3ed11854e09b5871d6a725c21a9ef5d7e729a90a8206d5f61e6e42e47dda3e31b9134d47872a0dd7a576b665ec6ceaa5fd7d85ed7feede9ac9fc23e40241c0318077edda75b62eb271e28fb3705f7b4950c14b721a3a74a7a4e4de02cef5de76a1602b906016c0892ef37db51b0a1dd53f28b3d896f20abbad1ad0e0220960423267fc6e1779d1150fd584dd184bb43278d2d68ff21ac0daeef5408348cb80f4a9e0e606f6048bbaa517289451f084fffb63c5d904788cfc310b5495528a58f4650dafc4e4675b99d35ebab710ac6fefcee6c51a2835510fb6d2dbd8f97c3e53fb7a23c3f3c0283eb2271504581b9c1fa31e35c117e56a5d668a9c57df3b4e1129ca019a8b877fa4a22768dfbdd9d2154e17f4a7755b065090d88982471bfb242d89af5c6782693a6ab1b1be74dfa5655ac3b5ef4ace8dc595803cf4025bdf5c0e9fbe7a12a3a313311809591da08a2cc6cd8480dc960e1f79fa208440a0e589be5756c36d5830a51c4bdc39c2a85c0431bae3a7331b2ffdf23623693d343a7938a8a8a4dd4d523c6450a705bccbb38427f06f4f84a18adf303c0ddecf4ce2b6cdde4e09a4c31816195f0fe9f05fcdc0609f8a75ad2f23d5c24faaf346c13ec0512a5c29477ac561c878085d1a323f6bab08e2fb9ee57d7bb621ef21caf3609d74036c6dc1d7be0b6058d89dcb8d9aa4462fa0a740be66e3fdaa957f27c5a26dc586ac8c927ab2d7cf1b761798ea4191be8f4423cf1a6727d0c5f27a9969a753573afa584dea82678f3471ba36d726c396d68c671e579120f1a11cd50fa66b26fc2d6cb74ba07edbd5d3a288cf58ed1255381df02b2fb8983b7cf833433d1ab8fdef12651c3507e4b69fbc4b234678cca36761e8da434e5f036f204a1400da15277ef27ac140e2d574b89c0fd617da27e6ce862883bbe81c288834b9477d0d440c15dad505b363fcc1cfef8e2e3a96438809505844196acd0af751dedfced67f209c2ffa9c6da842c93ff4b5fd54a67df904f2f31b4236728c99582a667a8461d397770a657ffa7d514b0f076d7f35e9704a836e7882a2acf0a0ec2158ac7234953c3696abdc791c0b163ee76fbcc5adc18b6fa0f51f76f3d313a0d891f1deb69f6e44289b1aa43a768b8d13270959763a2c45129daeea493a5b0d7b36753b223dca9a8037368653400", 0x2000, &(0x7f0000000700)={&(0x7f0000000040)={0x50, 0xffffffffffffff8c, 0x0, {0x7, 0x28, 0x3e, 0x3230135, 0x2, 0x65c}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 44.130565998s ago: executing program 5 (id=5381): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000540)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-twofish-avx\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000c18000)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r1 = accept4(r0, 0x0, 0x0, 0x80800) sendmsg$NL80211_CMD_SET_BEACON(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000001ac0)={0x20, 0x0, 0x300, 0x70bd2a, 0x25dfdbfd, {{}, {@void, @val={0xc, 0x99, {0x3, 0x1a}}}}}, 0x20}}, 0xc020) recvmsg$can_raw(r1, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000005c0)=[{&(0x7f0000000ac0)=""/4096, 0x1000}], 0x1}, 0x40) 43.638052183s ago: executing program 40 (id=5381): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000540)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-twofish-avx\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000c18000)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r1 = accept4(r0, 0x0, 0x0, 0x80800) sendmsg$NL80211_CMD_SET_BEACON(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000001ac0)={0x20, 0x0, 0x300, 0x70bd2a, 0x25dfdbfd, {{}, {@void, @val={0xc, 0x99, {0x3, 0x1a}}}}}, 0x20}}, 0xc020) recvmsg$can_raw(r1, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000005c0)=[{&(0x7f0000000ac0)=""/4096, 0x1000}], 0x1}, 0x40) 28.888567327s ago: executing program 4 (id=5517): sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000000440)=[{{&(0x7f0000002180)={0xa, 0x4e21, 0x8, @local, 0x8}, 0x1c, 0x0}}], 0x1, 0x240880d1) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x41, 0x0) write$binfmt_aout(r0, &(0x7f00000001c0)=ANY=[], 0xff2e) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000dc0)={0x0, 0x0, 0x0, 0x0, 0xfe, "0062ba7d82000000160000000000f738096304"}) r1 = syz_open_pts(r0, 0x80) r2 = dup3(r1, r0, 0x80000) read$watch_queue(r2, &(0x7f0000001d40)=""/4095, 0xfff) 27.926818035s ago: executing program 4 (id=5527): r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000000)={0x2, 0x4e21, @broadcast}, 0x2f) setsockopt$inet_tcp_int(r0, 0x6, 0x2, &(0x7f00000001c0)=0xa3, 0x4) connect$inet(r0, &(0x7f0000000180)={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x1b}}, 0x10) sendto$inet(r0, &(0x7f0000000000), 0xffffffffffffff94, 0x0, 0x0, 0x0) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000140)={0x1, &(0x7f0000000100)=[{0x6, 0x7, 0x0, 0x8001}]}, 0x10) recvfrom$inet(r0, &(0x7f0000000080)=""/8, 0xfffffffffffffd0b, 0x720, 0x0, 0xfffffffffffffd25) 26.900155806s ago: executing program 4 (id=5533): r0 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r0}, &(0x7f0000000300)) r1 = socket$kcm(0x21, 0x2, 0x2) sendmsg$kcm(r1, &(0x7f0000000080)={&(0x7f0000000000)=@rxrpc=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x1, @private}}, 0x80, 0x0, 0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="18000000000000001001000001"], 0x18}, 0x0) syz_usb_connect(0x5, 0x0, 0x0, 0x0) read$FUSE(r1, &(0x7f0000000b00)={0x2020}, 0x2020) timer_settime(0x0, 0x0, &(0x7f0000000340)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) 24.2643832s ago: executing program 4 (id=5551): mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x0) mount$bind(&(0x7f0000000000)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x19109b, 0x0) mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0) mount$bind(&(0x7f0000000040)='./file0/../file0\x00', &(0x7f00000000c0)='./file0/file0\x00', 0x0, 0x23e9c9e, 0x0) mount$bind(0x0, &(0x7f00000003c0)='./file0/file0\x00', 0x0, 0x80000, 0x0) mount$bind(&(0x7f00000001c0)='./file0/file0\x00', &(0x7f0000000080)='./file0\x00', 0x0, 0x28b5281, 0x0) open_tree(0xffffffffffffff9c, &(0x7f0000000100)='\x00', 0x89101) 24.100559029s ago: executing program 4 (id=5555): r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000280)={0x2, 0x4e21, @multicast1}, 0x10) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000100)=0xb329, 0x4) connect$inet(r0, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10) sendto$inet(r0, &(0x7f0000000900)="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", 0xffffff5d, 0x12, 0x0, 0x0) recvfrom$inet(r0, &(0x7f0000000080)=""/8, 0xfffffffffffffd0b, 0xc9100120, 0x0, 0xfffffffffffffd25) shutdown(r0, 0x1) 23.422316877s ago: executing program 4 (id=5564): openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) r0 = syz_open_dev$vim2m(&(0x7f0000000000), 0x7, 0x2) ioctl$vim2m_VIDIOC_G_FMT(r0, 0xc0285628, &(0x7f0000000080)={0x3, @win={{0x2}, 0x0, 0x0, &(0x7f0000000040)={{0x0, 0x0, 0x0, 0x3}}, 0x0, 0x0, 0x3c}}) r1 = syz_open_dev$vim2m(&(0x7f0000000000), 0x7, 0x2) timer_create(0x2, 0x0, &(0x7f0000bbdffc)=0x0) timer_gettime(r2, &(0x7f0000000000)) ioctl$vim2m_VIDIOC_G_FMT(r1, 0xc0285629, &(0x7f0000000080)={0x3, @win={{0x2}, 0x0, 0x0, &(0x7f0000000040), 0x0, 0x0}}) 22.867752255s ago: executing program 41 (id=5564): openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) r0 = syz_open_dev$vim2m(&(0x7f0000000000), 0x7, 0x2) ioctl$vim2m_VIDIOC_G_FMT(r0, 0xc0285628, &(0x7f0000000080)={0x3, @win={{0x2}, 0x0, 0x0, &(0x7f0000000040)={{0x0, 0x0, 0x0, 0x3}}, 0x0, 0x0, 0x3c}}) r1 = syz_open_dev$vim2m(&(0x7f0000000000), 0x7, 0x2) timer_create(0x2, 0x0, &(0x7f0000bbdffc)=0x0) timer_gettime(r2, &(0x7f0000000000)) ioctl$vim2m_VIDIOC_G_FMT(r1, 0xc0285629, &(0x7f0000000080)={0x3, @win={{0x2}, 0x0, 0x0, &(0x7f0000000040), 0x0, 0x0}}) 9.137455076s ago: executing program 1 (id=5640): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000440), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x2) ioctl$KVM_SET_MP_STATE(r2, 0x4004ae99, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1000003, 0x13, r2, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 8.571630939s ago: executing program 1 (id=5644): r0 = socket$inet6(0xa, 0x80002, 0x0) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x4e24, 0x0, @mcast2, 0x5}, 0x1c) sendto$inet6(r0, 0x0, 0x0, 0x20088004, &(0x7f0000000280)={0xa, 0x4e23, 0x0, @remote, 0x7}, 0x1c) sendto$inet6(r0, &(0x7f00000009c0)="c7cfcaaa22e10542fca5c0195350f15147657e0bfc59d383a47190db88690e6fedc3040ab5809ae02a54cd429cc3338c5afa0c9dce3f91950d1f567f358ac21154159130e88cbb6c43197813b2f23f3e442f80877490b393408142ebcfea6821f543e5ee9e27032e2b75d78f1b79f5a6bb6f0645e267770ef7e8f3a92148091217450ce8581e54223eeb6486205a209bf1fe854d211c03f8c3140fc3979d824082990d119473d20e94f253c9621fac339560ae46cb24b88bf2d01559bb658e343257b90f233b81bc5c398be3bbddb23a1e", 0xffd6, 0xc001, 0x0, 0xffffffffffffff0c) setsockopt$inet6_udp_int(r0, 0x11, 0x1, &(0x7f0000000080), 0x4) write(r0, 0x0, 0x0) ioctl$UI_END_FF_ERASE(0xffffffffffffffff, 0x400c55cb, &(0x7f0000000040)={0x7, 0xa, 0x10}) 7.792960772s ago: executing program 1 (id=5646): r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r0, 0x107, 0xf, &(0x7f0000000080)=0xf3e, 0x62) r1 = socket$inet6(0xa, 0x80002, 0x0) setsockopt$inet6_udp_int(r1, 0x11, 0x67, &(0x7f0000000200)=0x3, 0x4) connect$inet6(r1, &(0x7f00000001c0)={0xa, 0x4e23, 0x0, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x20}}}, 0x1c) sendmmsg$inet6(r1, &(0x7f0000003cc0)=[{{0x0, 0x0, &(0x7f0000003980), 0x171}}], 0x400000000000172, 0x4001c00) recvmmsg(r0, &(0x7f0000002f00)=[{{0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000100)=""/43, 0x2b}], 0x1}}], 0x1, 0x0, 0x0) 6.974004466s ago: executing program 1 (id=5651): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000500)={0xa, 0x4e22, 0xc, @ipv4={'\x00', '\xff\xff', @loopback}, 0x5}, 0x1c) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x4e22, 0x7, @ipv4={'\x00', '\xff\xff', @empty}, 0x106}, 0x1c) r1 = fcntl$dupfd(r0, 0x406, r0) setsockopt$sock_int(r0, 0x1, 0x2a, &(0x7f0000000000)=0x40000012, 0x4) sendmsg$NFT_BATCH(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000380)=ANY=[], 0x56c}, 0x1, 0x0, 0x0, 0x200440d1}, 0x0) read$FUSE(r1, &(0x7f00000036c0)={0x2020}, 0x2020) 6.63116469s ago: executing program 1 (id=5654): mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file1\x00', 0x94) mount$fuse(0x0, 0x0, 0x0, 0xfc5cd7921c2c19c4, &(0x7f0000000400)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=0x0]) mount(0x0, &(0x7f0000000380)='./file1\x00', &(0x7f0000000040)='autofs\x00', 0x0, &(0x7f0000000400)) chdir(&(0x7f0000000080)='./file1\x00') mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) mount$bind(&(0x7f0000000000)='./file0\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x803400, 0x0) mount$cgroup(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x100f0, 0x0) 6.31658134s ago: executing program 1 (id=5656): sendmsg$nl_generic(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={0x0, 0x30}}, 0x0) connect$pppl2tp(0xffffffffffffffff, &(0x7f0000000080)=@pppol2tpv3in6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x1, 0x0, 0x0, 0x0, {0xa, 0x0, 0x6, @remote}}}, 0x3a) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) write$cgroup_subtree(r0, &(0x7f0000000000)=ANY=[], 0x32600) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r0, 0x0) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$inet_buf(r1, 0x0, 0x40, &(0x7f0000000080)="8c5d7b87b32ecae06ac8cfe890364ab911d8c33439477a7591f6914e91c6821ee7163f8ae1896184d48797997716158aad89f66dd67480ce8ff178ef748cfcdcf54127d5ff95cbcaebf10a3b7cddafa2c0fa6aa2eaef0d457680203c02d0c623", 0x7590) 3.281685021s ago: executing program 3 (id=5688): r0 = socket$vsock_stream(0x28, 0x1, 0x0) bind$vsock_stream(r0, &(0x7f0000000140)={0x28, 0x0, 0x2710, @local}, 0x10) listen(r0, 0x0) r1 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r1, &(0x7f0000000080)={0x28, 0x0, 0x2710}, 0x10) setsockopt$sock_timeval(r1, 0x1, 0x42, &(0x7f0000000280)={0x0, 0x2710}, 0x10) recvmmsg(r1, &(0x7f0000005cc0)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000004400)=""/211, 0xd3}}, {{0x0, 0x0, &(0x7f0000004600), 0x2}}, {{0x0, 0x0, &(0x7f0000005c40)=[{0x0, 0x7}], 0x1}}], 0x3, 0x0, &(0x7f0000005ec0)={0x0, 0x3938700}) 3.210619445s ago: executing program 3 (id=5690): syz_clone(0x100411, 0x0, 0x0, 0x0, 0x0, 0x0) r0 = socket$rds(0x15, 0x5, 0x0) bind$rds(r0, &(0x7f0000000040)={0x2, 0x0, @local}, 0x10) sendmsg$rds(r0, &(0x7f0000000080)={&(0x7f0000000180)={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, 0x0}, 0x0) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="563f00001800599c6d0eab070004000523"], 0xfe33) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[], 0xfe45) syz_emit_vhci(&(0x7f00000000c0)=@HCI_EVENT_PKT={0x4, @hci_ev_encrypt_change={{0x8, 0x4}, {0x8, 0xc9, 0x57}}}, 0x7) 2.95415718s ago: executing program 3 (id=5695): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, 0x0) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000300)={[0x0, 0x1000000000, 0x5, 0x41, 0x4, 0x0, 0x2004cb, 0x0, 0x40000000000a1d, 0x68ff, 0x5, 0x0, 0x3, 0x2], 0x10000, 0x202}) ioctl$KVM_SET_SREGS(r2, 0x4138ae84, &(0x7f0000000100)={{0xd000, 0x0, 0x0, 0x2, 0x8, 0x0, 0x0, 0x2, 0x0, 0x8, 0x6, 0xf9}, {0xffff1000, 0x10000, 0x1f, 0x0, 0x2, 0x2, 0x0, 0x0, 0x7, 0xff, 0x0, 0x5}, {0xeeee0000, 0xeeee1000, 0xc, 0x0, 0x7, 0xc4, 0x0, 0x1, 0x48, 0x3, 0x0, 0x3}, {0xdddd0000, 0xffff1000, 0xe, 0x0, 0x1, 0x0, 0x9, 0x9, 0x8, 0x0, 0x4}, {0x6000, 0xffff1000, 0x3, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x40}, {0x100000, 0x26000, 0x0, 0x74, 0x5, 0x5, 0x2, 0x0, 0x0, 0x2, 0x5}, {0x0, 0xeeee8000, 0xa, 0x4, 0x0, 0x3, 0xa1, 0x20, 0x0, 0x9}, {0x0, 0x6000, 0x4, 0x0, 0x0, 0x7, 0x8, 0x40, 0x26, 0x0, 0x0, 0x5}, {0xeeef0000, 0x3}, {0xdddd1000, 0x400}, 0xddf8ffdb, 0x0, 0x0, 0x400, 0x2, 0xf801, 0x0, [0x80000001, 0x0, 0x1]}) ioctl$KVM_RUN(r2, 0xae80, 0x0) 2.796290729s ago: executing program 3 (id=5697): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) mount$bind(&(0x7f0000000100)='.\x00', &(0x7f0000000300)='./file0/../file0\x00', 0x0, 0x2151090, 0x0) mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0) mount$bind(&(0x7f0000000040)='./file0\x00', &(0x7f00000000c0)='./file0/file0\x00', 0x0, 0x8b101a, 0x0) mount$bind(0x0, &(0x7f00000003c0)='./file0/file0\x00', 0x0, 0x80000, 0x0) mount$bind(&(0x7f0000000380)='./file0\x00', &(0x7f0000000300)='./file0\x00', 0x0, 0x2925099, 0x0) umount2(&(0x7f0000000340)='./file0/file0\x00', 0x8) 2.749338006s ago: executing program 3 (id=5698): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc(&(0x7f0000000140), r0) r2 = socket$tipc(0x1e, 0x2, 0x0) bind$tipc(r2, &(0x7f0000000100)=@name={0x1e, 0x2, 0x0, {{0x42}}}, 0x10) r3 = socket$tipc(0x1e, 0x2, 0x0) setsockopt$TIPC_GROUP_JOIN(r3, 0x10f, 0x87, &(0x7f0000000180)={0x42, 0x0, 0x2}, 0x10) sendmsg$TIPC_CMD_SHOW_NAME_TABLE(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)={0x30, r1, 0x1, 0xfffffffc, 0x40000000, {{}, {}, {0x14, 0x19, {0x1, 0x1, 0x0, 0x6472333b}}}}, 0x30}, 0x1, 0x0, 0x0, 0x20000000}, 0x20000040) 1.292931053s ago: executing program 8 (id=5706): mknodat$null(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0, 0x103) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000280), 0x2, 0x0) mount$fuse(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000140), 0x0, &(0x7f0000000200)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0xc000}}) statx(0xffffffffffffff9c, &(0x7f00000001c0)='./file0\x00', 0x2000, 0x800, 0x0) read$FUSE(r0, &(0x7f0000001280)={0x2020, 0x0, 0x0, 0x0}, 0x2020) syz_fuse_handle_req(r0, &(0x7f0000006300)="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", 0x2000, &(0x7f0000000b40)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000002c0)={0x130, 0x0, 0x4fcb6233, {0x0, 0xffffffc4, 0x0, '\x00', {0x27ff, 0x801, 0x8000000000000000, 0x804, r2, 0x0, 0xd000, '\x00', 0x6, 0x81, 0xffffffff, 0x1, {0x8, 0xfffaa852}, {0x4000000000006, 0x9}, {0x2f, 0x7}, {0x1000000000, 0xa00}, 0x80008003, 0xa, 0xfffffffe, 0xc9}}}}) write$FUSE_INIT(r0, &(0x7f0000001200)={0x50, 0x0, r1, {0x7, 0x29, 0x0, 0x22000100}}, 0x50) 1.13397456s ago: executing program 8 (id=5707): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000440), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CAP_EXCEPTION_PAYLOAD(r1, 0x4068aea3, &(0x7f0000000500)={0xa4, 0x0, 0x1}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x2) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1000003, 0x13, r2, 0x0) ioctl$KVM_SET_REGS(0xffffffffffffffff, 0x4090ae82, &(0x7f00000000c0)={[0x1, 0xc, 0x7, 0x3, 0x1, 0x0, 0x2, 0x8, 0x0, 0x0, 0x0, 0x0, 0x7, 0x7, 0x1, 0x3], 0x8000000, 0x49340}) ioctl$KVM_RUN(r2, 0xae80, 0x0) 1.031631937s ago: executing program 0 (id=5709): r0 = socket$vsock_stream(0x28, 0x1, 0x0) bind$vsock_stream(r0, &(0x7f0000000140)={0x28, 0x0, 0x2710, @local}, 0x10) listen(r0, 0x0) r1 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r1, &(0x7f0000000080)={0x28, 0x0, 0x2710}, 0x10) recvmmsg(r1, &(0x7f0000005cc0)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000004400)=""/211, 0xd3}}, {{0x0, 0xb, &(0x7f0000004600), 0x2}}, {{0x0, 0x0, &(0x7f0000000000)=[{0x0, 0x40000}], 0x1}}], 0x3, 0x102, &(0x7f0000005ec0)={0x0, 0x3938700}) writev(r1, &(0x7f0000000400)=[{&(0x7f0000000180)='bD', 0x2}], 0x1) 956.690343ms ago: executing program 0 (id=5710): r0 = fsopen(&(0x7f0000000380)='sysfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) r1 = fsmount(r0, 0x0, 0x8) fchdir(r1) r2 = inotify_init() inotify_add_watch(r2, &(0x7f0000000000)='.\x00', 0x400017e) openat(0xffffffffffffff9c, &(0x7f0000000500)='.\x00', 0x100, 0x0) 897.314744ms ago: executing program 8 (id=5711): prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]}) r0 = socket$pptp(0x18, 0x1, 0x2) bind$pptp(r0, &(0x7f0000000200)={0x18, 0x2, {0xfeff, @local}}, 0x1e) connect$pptp(r0, &(0x7f0000000700)={0x18, 0x2, {0x0, @multicast1}}, 0x1e) r1 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000040), 0x1a01, 0x0) ioctl$EVIOCGPROP(r1, 0x40047438, &(0x7f0000000180)=""/246) writev(r1, &(0x7f0000000640)=[{&(0x7f0000000300)="3b997cb14adc5bc5894a75631e3aacf765d734e3", 0x14}], 0x1) 768.175705ms ago: executing program 8 (id=5712): socket$packet(0x11, 0x2, 0x300) socket$packet(0x11, 0xa, 0x300) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r1 = socket$kcm(0x2, 0x3, 0x2) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000040)={'syzkaller1\x00', @broadcast}) write$tun(r0, &(0x7f0000003040)={@val={0x8, 0x800}, @val={0x0, 0x3, 0x0, 0x1}, @ipv4=@tcp={{0x5, 0x4, 0x0, 0x0, 0x28, 0x0, 0x0, 0x0, 0x89, 0x0, @rand_addr, @multicast2=0xe0000001}, {{0x0, 0x0, 0x41424344, 0x41424344, 0x0, 0x0, 0x5}}}}, 0x36) 767.012772ms ago: executing program 0 (id=5713): bind$inet6(0xffffffffffffffff, &(0x7f0000000000)={0xa, 0x4a22, 0x0, @local, 0xb}, 0x1c) writev(0xffffffffffffffff, &(0x7f0000000340)=[{&(0x7f0000000000)="65f2", 0x2}], 0x1) sendmsg(0xffffffffffffffff, &(0x7f0000000640)={0x0, 0x0, &(0x7f00000005c0)=[{}], 0x1, 0x0, 0x0, 0x11000000}, 0x0) r0 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r0) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000540)) ptrace$cont(0x20, r0, 0x0, 0x0) 675.400344ms ago: executing program 3 (id=5714): r0 = syz_create_resource$binfmt(&(0x7f0000000040)='./file1\x00') r1 = openat$binfmt(0xffffffffffffff9c, r0, 0x42, 0x1ff) close(r1) execveat$binfmt(0xffffffffffffff9c, r0, 0x0, 0x0, 0x0) mkdir(&(0x7f0000000080)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x4000000, 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, 0x0) 290.720355ms ago: executing program 42 (id=5714): r0 = syz_create_resource$binfmt(&(0x7f0000000040)='./file1\x00') r1 = openat$binfmt(0xffffffffffffff9c, r0, 0x42, 0x1ff) close(r1) execveat$binfmt(0xffffffffffffff9c, r0, 0x0, 0x0, 0x0) mkdir(&(0x7f0000000080)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x4000000, 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, 0x0) 285.598352ms ago: executing program 0 (id=5716): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f00000004c0)={0x26, 'aead\x00', 0x0, 0x0, 'ccm(aes)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r1 = accept4(r0, 0x0, 0x0, 0x800) sendmsg$netlink(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000021c0)=[{&(0x7f0000000200)=ANY=[], 0xa0}], 0x1, 0x0, 0x0, 0x4050}, 0x40) sendmmsg$alg(r1, &(0x7f0000000040), 0x1, 0x40800) recvmsg(r1, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x51}], 0x1}, 0x0) 272.864641ms ago: executing program 8 (id=5717): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0) mount$tmpfs(0x0, &(0x7f00000003c0)='./file0\x00', &(0x7f0000000400), 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB='huge=always']) chdir(&(0x7f0000000140)='./file0\x00') r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000000), 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x100000a, 0x28011, r0, 0x1000) mlockall(0x7) 170.692528ms ago: executing program 0 (id=5718): write$UHID_INPUT(0xffffffffffffffff, &(0x7f0000001040)={0xfc, {"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", 0x1000}}, 0x1006) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15) r0 = userfaultfd(0x80001) mount$afs(0x0, 0x0, 0x0, 0x0, &(0x7f0000000200)=ANY=[]) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000000140)) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000080)={{&(0x7f0000ffd000/0x3000)=nil, 0x3000}, 0x1}) ioctl$UFFDIO_COPY(r0, 0xc028aa05, &(0x7f0000000040)={&(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000000/0x3000)=nil, 0x3000}) 1.167969ms ago: executing program 8 (id=5719): socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000003c0)={0xffffffffffffffff}) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000f80), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000300)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_NEW_STATION(r1, &(0x7f0000001080)={0x0, 0x0, &(0x7f0000001040)={&(0x7f0000000540)={0x48, r2, 0xb97534d5fe9704cf, 0x0, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_STA_SUPPORTED_RATES={0x4}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_STA_AID={0x6, 0x10, 0x580}, @NL80211_ATTR_STA_LISTEN_INTERVAL={0x6}, @NL80211_ATTR_STA_FLAGS2={0xc, 0x43, {0x2, 0x3}}]}, 0x48}, 0x1, 0x0, 0x0, 0xc0}, 0x20000000) 0s ago: executing program 0 (id=5720): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x20040, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000600)=[@text64={0x40, &(0x7f0000000640)="430fc73f0f2390b9800000c00f3235010000000f300f20d835080000000f22d8c4e18173f53866baf80cb83879e487ef66bafc0cec66b88e008ec02d1aa80000460f1c460041ae", 0x47}], 0x1, 0x74, 0x0, 0x0) openat$khugepaged_scan(0xffffffffffffff9c, &(0x7f0000000140), 0x1, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) kernel console output (not intermixed with test programs): ing 0 endpoint 0x5 has invalid maxpacket 56832, setting to 1024 [ 513.207919][ T5875] usb 9-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024 [ 513.218395][ T5875] usb 9-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 513.228791][ T5875] usb 9-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 513.242695][ T5875] usb 9-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 513.252826][ T5875] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 513.261533][T16696] usbtmc 1-1:16.0: usb_control_msg returned -32 [ 513.463944][ T44] usb 1-1: USB disconnect, device number 10 [ 513.488126][ T5875] usb 9-1: usb_control_msg returned -32 [ 513.505362][ T5875] usbtmc 9-1:16.0: can't read capabilities [ 513.532200][ T5875] usb 9-1: USB disconnect, device number 27 [ 513.839239][ T9] usb 8-1: new high-speed USB device number 37 using dummy_hcd [ 513.998546][ T9] usb 8-1: Using ep0 maxpacket: 16 [ 514.014884][ T9] usb 8-1: too many endpoints for config 0 interface 0 altsetting 0: 65, using maximum allowed: 30 [ 514.038669][ T9] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 514.061041][ T9] usb 8-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 65 [ 514.103054][ T9] usb 8-1: New USB device found, idVendor=0419, idProduct=0001, bcdDevice= 0.00 [ 514.105441][ T44] hid-generic 0000:0000:0000.0058: hidraw0: HID v0.00 Device [syz1] on syz0 [ 514.135679][ T9] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 514.157095][ T9] usb 8-1: config 0 descriptor?? [ 514.588144][ T9] samsung 0003:0419:0001.0059: invalid report_size 1088654670 [ 514.603746][ T9] samsung 0003:0419:0001.0059: item 0 4 1 7 parsing failed [ 514.619006][ T9] samsung 0003:0419:0001.0059: parse failed [ 514.625034][ T9] samsung 0003:0419:0001.0059: probe with driver samsung failed with error -22 [ 514.800392][ T9] usb 8-1: USB disconnect, device number 37 [ 515.009311][ T44] usb 1-1: new high-speed USB device number 11 using dummy_hcd [ 515.048689][ T5908] usb 9-1: new high-speed USB device number 28 using dummy_hcd [ 515.178716][ T44] usb 1-1: Using ep0 maxpacket: 8 [ 515.189646][ T44] usb 1-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 515.211846][ T44] usb 1-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 515.223230][ T44] usb 1-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 515.233600][ T44] usb 1-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 515.247671][ T44] usb 1-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 515.257627][ T44] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 515.270798][ T5908] usb 9-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 515.284417][ T5908] usb 9-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 515.295467][ T5908] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 515.313851][ T5908] usb 9-1: Product: syz [ 515.335400][ T5908] usb 9-1: Manufacturer: syz [ 515.356565][ T5908] usb 9-1: SerialNumber: syz [ 515.517056][ T44] usb 1-1: GET_CAPABILITIES returned 0 [ 515.524716][ T44] usbtmc 1-1:16.0: can't read capabilities [ 515.724978][ C1] usbtmc 1-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 515.734160][ C1] usbtmc 1-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 515.743832][ C1] usbtmc 1-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 515.753155][ C1] usbtmc 1-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 515.769848][ C1] usbtmc 1-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 515.779093][ C1] usbtmc 1-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 515.788329][ C1] usbtmc 1-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 515.798685][ C0] usbtmc 1-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 515.807821][ C0] usbtmc 1-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 515.816942][ C0] usbtmc 1-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 515.828039][ C0] usbtmc 1-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 515.869950][ C0] usbtmc 1-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 515.879110][ C0] usbtmc 1-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 515.888437][ C0] usbtmc 1-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 515.900890][ C1] usbtmc 1-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 515.910012][ C1] usbtmc 1-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 515.924198][ T44] usb 1-1: USB disconnect, device number 11 [ 516.401659][ T5908] cdc_ncm 9-1:1.0: MAC-Address: 42:42:42:42:42:42 [ 516.408167][ T5908] cdc_ncm 9-1:1.0: setting rx_max = 16384 [ 516.595098][ T30] audit: type=1326 audit(1764314657.218:61): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16774 comm="syz.0.4143" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f0b06b8f749 code=0x0 [ 516.619164][ T5908] cdc_ncm 9-1:1.0: setting tx_max = 136 [ 516.634739][ T5908] cdc_ncm 9-1:1.0 usb0: register 'cdc_ncm' at usb-dummy_hcd.8-1, CDC NCM (NO ZLP), 42:42:42:42:42:42 [ 516.652338][ T5875] usb 8-1: new high-speed USB device number 38 using dummy_hcd [ 516.675688][ T5908] usb 9-1: USB disconnect, device number 28 [ 516.693557][ T5908] cdc_ncm 9-1:1.0 usb0: unregister 'cdc_ncm' usb-dummy_hcd.8-1, CDC NCM (NO ZLP) [ 516.820366][ T5875] usb 8-1: Using ep0 maxpacket: 8 [ 516.827680][ T5875] usb 8-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 516.839094][ T5875] usb 8-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 516.853852][ T5875] usb 8-1: config 16 interface 0 altsetting 0 endpoint 0x8B has invalid maxpacket 30768, setting to 1024 [ 516.865555][ T5875] usb 8-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 1024 [ 516.876095][ T5875] usb 8-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 516.893593][ T5875] usb 8-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 516.903129][ T5875] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 517.123178][ T5875] usb 8-1: GET_CAPABILITIES returned 0 [ 517.129250][ T5875] usbtmc 8-1:16.0: can't read capabilities [ 517.332900][ T5908] usb 8-1: USB disconnect, device number 38 [ 518.338625][ T44] usb 9-1: new high-speed USB device number 29 using dummy_hcd [ 518.495521][ T44] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 518.528313][ T44] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 518.562748][ T44] usb 9-1: New USB device found, idVendor=256c, idProduct=006d, bcdDevice= 0.00 [ 518.582545][ T44] usb 9-1: New USB device strings: Mfr=2, Product=0, SerialNumber=0 [ 518.608306][ T44] usb 9-1: Manufacturer: syz [ 518.633192][ T44] usb 9-1: config 0 descriptor?? [ 518.856983][ T5875] libceph: connect (1)[c::]:6789 error -101 [ 518.868991][ T5875] libceph: mon0 (1)[c::]:6789 connect error [ 518.927226][ T5875] libceph: connect (1)[c::]:6789 error -101 [ 518.934181][ T5875] libceph: mon0 (1)[c::]:6789 connect error [ 519.141523][ T5908] usb 1-1: new full-speed USB device number 12 using dummy_hcd [ 519.158871][ T5875] libceph: connect (1)[c::]:6789 error -101 [ 519.165161][ T5875] libceph: mon0 (1)[c::]:6789 connect error [ 519.200975][ T5875] libceph: connect (1)[c::]:6789 error -101 [ 519.211698][ T5875] libceph: mon0 (1)[c::]:6789 connect error [ 519.300340][ T5908] usb 1-1: config 0 has an invalid interface number: 128 but max is 0 [ 519.321052][ T5908] usb 1-1: config 0 has no interface number 0 [ 519.331978][ T5908] usb 1-1: New USB device found, idVendor=20b7, idProduct=1540, bcdDevice=b7.5a [ 519.341862][ T5908] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 519.350737][ T5908] usb 1-1: Product: syz [ 519.354996][ T5908] usb 1-1: Manufacturer: syz [ 519.362827][ T5908] usb 1-1: SerialNumber: syz [ 519.373059][ T5908] usb 1-1: config 0 descriptor?? [ 519.458153][ T44] uclogic 0003:256C:006D.005A: failed retrieving string descriptor #100: -71 [ 519.469580][ T44] uclogic 0003:256C:006D.005A: failed retrieving pen parameters: -71 [ 519.477763][ T44] uclogic 0003:256C:006D.005A: failed probing pen v1 parameters: -71 [ 519.486420][ T44] uclogic 0003:256C:006D.005A: failed probing parameters: -71 [ 519.494195][ T44] uclogic 0003:256C:006D.005A: probe with driver uclogic failed with error -71 [ 519.508391][ T44] usb 9-1: USB disconnect, device number 29 [ 519.641914][T16857] ceph: No mds server is up or the cluster is laggy [ 519.650199][T16863] ceph: No mds server is up or the cluster is laggy [ 519.754081][T16888] team0: left allmulticast mode [ 519.759905][T16888] team_slave_0: left allmulticast mode [ 519.767113][T16888] team_slave_1: left allmulticast mode [ 519.789382][ T5908] usb 1-1: Firmware: major: 152, minor: 96, hardware type: UNKNOWN (94) [ 519.991560][ T5908] usb 1-1: Read permanent extended address 80:e3:9b:4b:dd:b7:d0:d0 from device [ 520.015497][ T5908] usb 1-1: atusb_probe: initialization failed, error = -524 [ 520.024605][ T5908] atusb 1-1:0.128: probe with driver atusb failed with error -524 [ 520.218330][ T5905] usb 1-1: USB disconnect, device number 12 [ 521.198937][ T5861] usb 1-1: new high-speed USB device number 13 using dummy_hcd [ 521.361322][ T5861] usb 1-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 521.375407][ T5861] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 255, changing to 11 [ 521.395321][ T5861] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 521.407165][ T5861] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 521.420804][ T5861] usb 1-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 521.438497][ T5861] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 521.451402][ T5861] usb 1-1: config 0 descriptor?? [ 521.457302][T16936] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 521.890115][ T5861] plantronics 0003:047F:FFFF.005B: reserved main item tag 0xd [ 521.929058][ T5861] plantronics 0003:047F:FFFF.005B: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.0-1/input0 [ 522.151988][ T5875] usb 1-1: USB disconnect, device number 13 [ 522.388518][ T5926] usb 8-1: new high-speed USB device number 39 using dummy_hcd [ 522.551296][ T5926] usb 8-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 522.581410][ T5926] usb 8-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 522.603841][ T5926] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 522.628964][ T5926] usb 8-1: config 0 descriptor?? [ 522.651915][ T5926] pwc: Askey VC010 type 2 USB webcam detected. [ 523.008399][ T5861] usb 6-1: new high-speed USB device number 58 using dummy_hcd [ 523.060600][ T5926] pwc: recv_control_msg error -32 req 02 val 2b00 [ 523.068147][ T5926] pwc: recv_control_msg error -32 req 02 val 2700 [ 523.080561][ T5926] pwc: recv_control_msg error -32 req 02 val 2c00 [ 523.168561][ T5861] usb 6-1: Using ep0 maxpacket: 16 [ 523.179933][ T5861] usb 6-1: New USB device found, idVendor=054c, idProduct=0038, bcdDevice=16.f5 [ 523.189305][ T5861] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 523.197471][ T5861] usb 6-1: Product: syz [ 523.204527][ T5861] usb 6-1: Manufacturer: syz [ 523.213789][ T5861] usb 6-1: SerialNumber: syz [ 523.225248][ T5861] usb 6-1: config 0 descriptor?? [ 523.234823][ T5861] visor 6-1:0.0: Sony Clie 3.5 converter detected [ 523.292593][ T5926] pwc: recv_control_msg error -71 req 04 val 1300 [ 523.304265][ T5926] pwc: recv_control_msg error -71 req 04 val 1400 [ 523.313900][ T5926] pwc: recv_control_msg error -71 req 02 val 2000 [ 523.321110][ T5926] pwc: recv_control_msg error -71 req 02 val 2100 [ 523.327986][ T5926] pwc: recv_control_msg error -71 req 04 val 1500 [ 523.336793][ T5926] pwc: recv_control_msg error -71 req 02 val 2500 [ 523.344327][ T5926] pwc: recv_control_msg error -71 req 02 val 2400 [ 523.353972][ T5926] pwc: recv_control_msg error -71 req 02 val 2600 [ 523.362136][ T5926] pwc: recv_control_msg error -71 req 02 val 2900 [ 523.369479][ T5926] pwc: recv_control_msg error -71 req 02 val 2800 [ 523.376805][ T5926] pwc: recv_control_msg error -71 req 04 val 1100 [ 523.384173][ T5926] pwc: recv_control_msg error -71 req 04 val 1200 [ 523.393598][ T5926] pwc: Registered as video103. [ 523.414595][ T5926] input: PWC snapshot button as /devices/platform/dummy_hcd.7/usb8/8-1/input/input92 [ 523.431285][ T5926] usb 8-1: USB disconnect, device number 39 [ 523.528414][ T9] usb 9-1: new high-speed USB device number 30 using dummy_hcd [ 523.654846][ T5861] usb 6-1: Sony Clie 3.5 converter now attached to ttyUSB0 [ 523.681958][ T9] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 523.703705][ T9] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 523.716464][ T9] usb 9-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 523.729728][ T9] usb 9-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 523.740614][ T9] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 523.751099][ T9] usb 9-1: config 0 descriptor?? [ 523.856767][ T5926] usb 6-1: USB disconnect, device number 58 [ 523.878766][ T5926] clie_3.5 ttyUSB0: Sony Clie 3.5 converter now disconnected from ttyUSB0 [ 523.891534][ T5926] visor 6-1:0.0: device disconnected [ 524.164649][ T9] hid_parser_main: 2629 callbacks suppressed [ 524.164677][ T9] plantronics 0003:047F:FFFF.005C: unknown main item tag 0x0 [ 524.185203][ T9] plantronics 0003:047F:FFFF.005C: unknown main item tag 0x0 [ 524.192994][ T9] plantronics 0003:047F:FFFF.005C: unknown main item tag 0x0 [ 524.200727][ T9] plantronics 0003:047F:FFFF.005C: unknown main item tag 0x0 [ 524.208401][ T9] plantronics 0003:047F:FFFF.005C: unknown main item tag 0x0 [ 524.215809][ T9] plantronics 0003:047F:FFFF.005C: unknown main item tag 0x0 [ 524.225672][ T9] plantronics 0003:047F:FFFF.005C: unknown main item tag 0x0 [ 524.233431][ T9] plantronics 0003:047F:FFFF.005C: unknown main item tag 0x0 [ 524.242347][ T9] plantronics 0003:047F:FFFF.005C: unknown main item tag 0x0 [ 524.250121][ T9] plantronics 0003:047F:FFFF.005C: unknown main item tag 0x0 [ 524.266397][ T9] plantronics 0003:047F:FFFF.005C: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.8-1/input0 [ 524.441470][ T9] usb 9-1: USB disconnect, device number 30 [ 525.073723][T17052] netlink: 28 bytes leftover after parsing attributes in process `syz.0.4262'. [ 525.699738][ T5861] usb 1-1: new high-speed USB device number 14 using dummy_hcd [ 525.720436][ T5908] usb 8-1: new high-speed USB device number 40 using dummy_hcd [ 525.858334][ T5861] usb 1-1: Using ep0 maxpacket: 8 [ 525.867880][ T5861] usb 1-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 56832, setting to 1024 [ 525.879613][ T5908] usb 8-1: Using ep0 maxpacket: 32 [ 525.885849][ T5861] usb 1-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024 [ 525.902214][ T5908] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 525.925097][ T5861] usb 1-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 525.942749][ T5908] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 525.958744][ T5861] usb 1-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 525.978722][ T5908] usb 8-1: New USB device found, idVendor=0403, idProduct=6030, bcdDevice= 0.00 [ 526.001858][ T5861] usb 1-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 526.020058][ T5908] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 526.040271][ T5861] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 526.059064][ T5908] usb 8-1: config 0 descriptor?? [ 526.286354][ T5861] usb 1-1: GET_CAPABILITIES returned 0 [ 526.309532][ T5861] usbtmc 1-1:16.0: can't read capabilities [ 526.497177][ T5905] usb 1-1: USB disconnect, device number 14 [ 526.538352][ T5861] usb 9-1: new high-speed USB device number 31 using dummy_hcd [ 526.706851][ T5908] ft260 0003:0403:6030.005D: chip code: 6424 8183 [ 526.715674][ T5861] usb 9-1: Using ep0 maxpacket: 32 [ 526.740015][ T5861] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 526.752814][ T5861] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 526.763468][ T5861] usb 9-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 526.773269][ T5861] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 526.798517][ T5861] usb 9-1: config 0 descriptor?? [ 526.812037][ T5861] hub 9-1:0.0: USB hub found [ 527.024263][ T5861] hub 9-1:0.0: 1 port detected [ 527.122839][ T5908] usb 8-1: USB disconnect, device number 40 [ 527.643576][ T5861] hub 9-1:0.0: activate --> -90 [ 527.761297][T17072] input: syz1 as /devices/virtual/input/input93 [ 527.846784][ T5908] usb 9-1: USB disconnect, device number 31 [ 527.857126][ T5861] hub 9-1:0.0: hub_ext_port_status failed (err = -71) [ 528.007922][ T24] libceph: connect (1)[c::]:6789 error -101 [ 528.016486][ T24] libceph: mon0 (1)[c::]:6789 connect error [ 528.031940][ T5861] usb 8-1: new high-speed USB device number 41 using dummy_hcd [ 528.066746][ T5908] libceph: connect (1)[c::]:6789 error -101 [ 528.076131][ T5908] libceph: mon0 (1)[c::]:6789 connect error [ 528.199424][ T5861] usb 8-1: Using ep0 maxpacket: 8 [ 528.208962][ C0] vcan0: j1939_xtp_rx_dat: no tx connection found [ 528.210644][ T5861] usb 8-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 528.215724][ C0] vcan0: j1939_xtp_rx_dat: no tx connection found [ 528.256245][ T5861] usb 8-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 528.278840][ T5861] usb 8-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 528.289399][ T5908] libceph: connect (1)[c::]:6789 error -101 [ 528.295564][ T5908] libceph: mon0 (1)[c::]:6789 connect error [ 528.305013][ T5861] usb 8-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 528.329773][ T5861] usb 8-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 528.339822][ T5905] libceph: connect (1)[c::]:6789 error -101 [ 528.346187][ T5905] libceph: mon0 (1)[c::]:6789 connect error [ 528.353795][ T5861] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 528.568420][ T40] usb 6-1: new high-speed USB device number 59 using dummy_hcd [ 528.573941][ T5861] usb 8-1: GET_CAPABILITIES returned 0 [ 528.583532][ T5861] usbtmc 8-1:16.0: can't read capabilities [ 528.738432][ T40] usb 6-1: Using ep0 maxpacket: 8 [ 528.745899][ T40] usb 6-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 528.756198][ T40] usb 6-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 528.766105][ T40] usb 6-1: config 16 interface 0 altsetting 0 endpoint 0x8B has invalid maxpacket 30768, setting to 1024 [ 528.777760][ T40] usb 6-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 1024 [ 528.788782][ T40] usb 6-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 528.794287][ C1] usbtmc 8-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 528.802127][ T40] usb 6-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 528.811298][ C1] usbtmc 8-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 528.820863][ T40] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 528.829731][ C1] usbtmc 8-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 528.853714][ T5861] libceph: connect (1)[c::]:6789 error -101 [ 528.854901][T17076] ceph: No mds server is up or the cluster is laggy [ 528.859948][ T5861] libceph: mon0 (1)[c::]:6789 connect error [ 528.868796][T17079] ceph: No mds server is up or the cluster is laggy [ 528.873114][ T5861] libceph: connect (1)[c::]:6789 error -101 [ 528.885391][ T5861] libceph: mon0 (1)[c::]:6789 connect error [ 528.888655][ C0] usbtmc 8-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 528.900663][ C0] usbtmc 8-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 528.930625][ C0] usbtmc 8-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 528.939803][ C0] usbtmc 8-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 528.949094][ C0] usbtmc 8-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 528.981982][ C1] usbtmc 8-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 528.981989][ C0] vcan0: j1939_tp_rxtimer: 0xffff8880278f8000: rx timeout, send abort [ 528.991135][ C1] usbtmc 8-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 529.008802][ C1] usbtmc 8-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 529.017951][ C1] usbtmc 8-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 529.031996][ C1] usbtmc 8-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 529.041329][ C1] usbtmc 8-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 529.050529][ C1] usbtmc 8-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 529.071112][ C0] usbtmc 8-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 529.117452][ T40] usb 6-1: GET_CAPABILITIES returned 0 [ 529.124540][ T40] usbtmc 6-1:16.0: can't read capabilities [ 529.151154][ T5905] usb 8-1: USB disconnect, device number 41 [ 529.363242][ T40] usb 6-1: USB disconnect, device number 59 [ 529.499713][ C0] vcan0: j1939_tp_rxtimer: 0xffff8880278f8000: abort rx timeout. Force session deactivation [ 530.228178][T17128] netlink: 16 bytes leftover after parsing attributes in process `syz.5.4295'. [ 530.240209][T17128] netlink: 'syz.5.4295': attribute type 10 has an invalid length. [ 530.248536][T17128] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 530.261627][T17128] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 530.768524][ T40] usb 8-1: new high-speed USB device number 42 using dummy_hcd [ 530.940928][ T40] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 530.953117][ T40] usb 8-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 530.963850][ T40] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 530.975876][ T40] usb 8-1: config 0 descriptor?? [ 531.300902][ T40] usbhid 8-1:0.0: can't add hid device: -71 [ 531.307023][ T40] usbhid 8-1:0.0: probe with driver usbhid failed with error -71 [ 531.319738][ T40] usb 8-1: USB disconnect, device number 42 [ 531.758427][ T40] usb 8-1: new high-speed USB device number 43 using dummy_hcd [ 531.928324][ T40] usb 8-1: Using ep0 maxpacket: 32 [ 531.935625][ T40] usb 8-1: config 0 interface 0 has no altsetting 0 [ 531.946193][ T40] usb 8-1: New USB device found, idVendor=1044, idProduct=7a4d, bcdDevice= 0.00 [ 531.956400][ T40] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 531.971457][ T40] usb 8-1: config 0 descriptor?? [ 532.413496][ T40] waterforce 0003:1044:7A4D.005E: hidraw0: USB HID v0.05 Device [HID 1044:7a4d] on usb-dummy_hcd.7-1/input0 [ 532.475871][ T30] audit: type=1326 audit(1764314673.098:62): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17194 comm="syz.0.4321" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f0b06b8f749 code=0x0 [ 532.528364][ T40] waterforce 0003:1044:7A4D.005E: fw version request failed with -38 [ 532.805628][ T24] usb 8-1: USB disconnect, device number 43 [ 533.742968][ T30] audit: type=1326 audit(1764314674.368:63): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17231 comm="syz.0.4337" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f0b06b8f749 code=0x0 [ 533.778374][ T5888] usb 9-1: new high-speed USB device number 32 using dummy_hcd [ 533.804815][T17236] sctp: [Deprecated]: syz.5.4340 (pid 17236) Use of int in max_burst socket option. [ 533.804815][T17236] Use struct sctp_assoc_value instead [ 533.933913][ T5888] usb 9-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 533.943514][ T5888] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 533.962611][ T5888] usb 9-1: config 0 descriptor?? [ 533.976705][ T5888] cp210x 9-1:0.0: cp210x converter detected [ 534.017362][ C1] vcan0: j1939_tp_rxtimer: 0xffff88802637f400: rx timeout, send abort [ 534.064070][T17244] netlink: 'syz.5.4344': attribute type 39 has an invalid length. [ 534.384214][ T5888] cp210x 9-1:0.0: failed to get vendor val 0x0010 size 3: -32 [ 534.392580][ T5888] cp210x 9-1:0.0: GPIO initialisation failed: -524 [ 534.406333][ T5888] usb 9-1: cp210x converter now attached to ttyUSB0 [ 534.517900][ C1] vcan0: j1939_tp_rxtimer: 0xffff8880630e2800: rx timeout, send abort [ 534.526741][ C1] vcan0: j1939_tp_rxtimer: 0xffff88802637f400: abort rx timeout. Force session deactivation [ 534.596413][ T5926] usb 9-1: USB disconnect, device number 32 [ 534.604394][ T5888] usb 6-1: new high-speed USB device number 60 using dummy_hcd [ 534.625737][ T5926] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0 [ 534.636118][ T5926] cp210x 9-1:0.0: device disconnected [ 534.788344][ T5888] usb 6-1: Using ep0 maxpacket: 32 [ 534.798831][ T5888] usb 6-1: config 0 has an invalid interface number: 184 but max is 0 [ 534.807052][ T5888] usb 6-1: config 0 has no interface number 0 [ 534.836600][ T5888] usb 6-1: config 0 interface 184 has no altsetting 0 [ 534.846493][ T5888] usb 6-1: New USB device found, idVendor=0424, idProduct=7500, bcdDevice=69.ee [ 534.866615][ T5888] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 534.886953][ T5888] usb 6-1: Product: syz [ 534.893583][ T5888] usb 6-1: Manufacturer: syz [ 534.908438][ T5888] usb 6-1: SerialNumber: syz [ 534.916249][ T5888] usb 6-1: config 0 descriptor?? [ 534.932789][ T5888] smsc75xx v1.0.0 [ 534.966808][T17259] vxcan1: entered allmulticast mode [ 535.026278][ C1] vcan0: j1939_tp_rxtimer: 0xffff8880630e2800: abort rx timeout. Force session deactivation [ 535.626088][ T5888] smsc75xx 6-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000040: -32 [ 535.637341][ T5888] smsc75xx 6-1:0.184 (unnamed net_device) (uninitialized): Error reading E2P_CMD [ 535.718377][ T5908] usb 1-1: new high-speed USB device number 15 using dummy_hcd [ 535.868366][ T5908] usb 1-1: Using ep0 maxpacket: 8 [ 535.879690][ T5908] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 535.890106][ T5908] usb 1-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xBE, changing to 0x8E [ 535.902744][ T5908] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x8E has an invalid bInterval 0, changing to 7 [ 535.914133][ T5908] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x8E has invalid wMaxPacketSize 0 [ 535.924269][ T5908] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 535.940129][ T5908] usb 1-1: New USB device found, idVendor=10c5, idProduct=819a, bcdDevice=e4.46 [ 535.950839][ T5908] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=35 [ 535.960040][ T5908] usb 1-1: Product: syz [ 535.964276][ T5908] usb 1-1: Manufacturer: syz [ 535.969050][ T5908] usb 1-1: SerialNumber: syz [ 535.976668][ T5908] usb 1-1: config 0 descriptor?? [ 536.051847][ T5888] smsc75xx 6-1:0.184 (unnamed net_device) (uninitialized): Failed to write reg index 0x00000010: -71 [ 536.078422][ T5888] smsc75xx 6-1:0.184 (unnamed net_device) (uninitialized): Failed to write HW_CFG: -71 [ 536.088152][ T5888] smsc75xx 6-1:0.184 (unnamed net_device) (uninitialized): smsc75xx_reset error -71 [ 536.104549][ T5888] smsc75xx 6-1:0.184: probe with driver smsc75xx failed with error -71 [ 536.123926][ T5888] usb 6-1: USB disconnect, device number 60 [ 536.188644][ T5908] radio-si470x 1-1:0.0: DeviceID=0x0000 ChipID=0x0000 [ 536.205469][ T5908] radio-si470x 1-1:0.0: This driver is known to work with firmware version 12, but the device has firmware version 0. [ 536.298429][ T5861] usb 8-1: new full-speed USB device number 44 using dummy_hcd [ 536.392269][ T5908] radio-si470x 1-1:0.0: software version 0, hardware version 0 [ 536.411242][ T5908] radio-si470x 1-1:0.0: This driver is known to work with hardware version 1, but the device has hardware version 0. [ 536.424521][ T5908] radio-si470x 1-1:0.0: If you have some trouble using this driver, please report to V4L ML at linux-media@vger.kernel.org [ 536.460829][ T5861] usb 8-1: config 0 has an invalid interface number: 128 but max is 0 [ 536.469352][ T5861] usb 8-1: config 0 has no interface number 0 [ 536.491264][ T5861] usb 8-1: New USB device found, idVendor=20b7, idProduct=1540, bcdDevice=b7.5a [ 536.500807][ T5861] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 536.510550][ T5861] usb 8-1: Product: syz [ 536.515990][ T5861] usb 8-1: Manufacturer: syz [ 536.523502][ T5861] usb 8-1: SerialNumber: syz [ 536.538510][ T5861] usb 8-1: config 0 descriptor?? [ 536.599142][ T5908] radio-si470x 1-1:0.0: submitting int urb failed (-90) [ 536.696604][ T24] hid_parser_main: 6 callbacks suppressed [ 536.696628][ T24] hid-generic 0000:0000:0000.005F: unknown main item tag 0x0 [ 536.738647][ T24] hid-generic 0000:0000:0000.005F: hidraw0: HID v0.00 Device [syz1] on syz0 [ 536.928398][ T5926] usb 9-1: new high-speed USB device number 33 using dummy_hcd [ 536.963527][ T5861] usb 8-1: Firmware: major: 0, minor: 0, hardware type: ATUSB (1) [ 536.972556][ T5861] usb 8-1: Firmware version (0.0) predates our first public release. [ 536.983608][ T5861] usb 8-1: Please update to version 0.2 or newer [ 537.101229][ T5926] usb 9-1: config 0 has no interfaces? [ 537.107952][ T5926] usb 9-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 537.117210][ T5926] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 537.125426][ T5926] usb 9-1: SerialNumber: syz [ 537.135719][ T5926] usb 9-1: config 0 descriptor?? [ 537.210186][ T5908] radio-si470x 1-1:0.0: si470x_set_report: usb_control_msg returned -71 [ 537.221651][ T5908] radio-si470x 1-1:0.0: probe with driver radio-si470x failed with error -22 [ 537.237077][ T5861] usb 8-1: USB disconnect, device number 44 [ 537.268608][ T5908] usb 1-1: USB disconnect, device number 15 [ 537.688370][ T5926] usb 6-1: new high-speed USB device number 61 using dummy_hcd [ 537.841408][ T5926] usb 6-1: Using ep0 maxpacket: 32 [ 537.852493][ T5926] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 537.864303][ T5926] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 537.874672][ T5926] usb 6-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 537.886768][ T5926] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 537.900728][ T5926] usb 6-1: config 0 descriptor?? [ 537.912118][ T5926] hub 6-1:0.0: USB hub found [ 538.116504][ T5926] hub 6-1:0.0: 1 port detected [ 538.741565][ T5926] hub 6-1:0.0: activate --> -90 [ 538.951588][ T5926] hub 6-1:0.0: hub_ext_port_status failed (err = -71) [ 538.974706][ T5926] usb 6-1: USB disconnect, device number 61 [ 538.981265][ T149] usb 6-1: Failed to suspend device, error -71 [ 539.118449][ T9] usb 1-1: new high-speed USB device number 16 using dummy_hcd [ 539.127214][ T5888] usb 8-1: new high-speed USB device number 45 using dummy_hcd [ 539.298599][ T9] usb 1-1: Using ep0 maxpacket: 8 [ 539.306300][ T5888] usb 8-1: Using ep0 maxpacket: 8 [ 539.313681][ T5888] usb 8-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 56832, setting to 1024 [ 539.326093][ T5888] usb 8-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024 [ 539.336689][ T5888] usb 8-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 539.346869][ T5888] usb 8-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 539.361171][ T9] usb 1-1: New USB device found, idVendor=2770, idProduct=930c, bcdDevice=8d.6a [ 539.372713][ T5888] usb 8-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 539.383453][ T9] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 539.391689][ T5888] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 539.400013][ T9] usb 1-1: Product: syz [ 539.404205][ T9] usb 1-1: Manufacturer: syz [ 539.410438][ T9] usb 1-1: SerialNumber: syz [ 539.419337][ T9] usb 1-1: config 0 descriptor?? [ 539.434739][ T9] gspca_main: sq930x-2.14.0 probing 2770:930c [ 539.627862][ T5888] usb 8-1: GET_CAPABILITIES returned 0 [ 539.633582][ T5888] usbtmc 8-1:16.0: can't read capabilities [ 539.718622][ T5926] usb 9-1: USB disconnect, device number 33 [ 539.847512][ T5888] usb 8-1: USB disconnect, device number 45 [ 540.245604][ T9] gspca_sq930x: ucbus_write failed -71 [ 540.468615][ T9] gspca_sq930x: Sensor ov9630 not yet treated [ 540.475034][ T9] sq930x 1-1:0.0: probe with driver sq930x failed with error -22 [ 540.489716][ T9] usb 1-1: USB disconnect, device number 16 [ 541.388414][T17373] vxcan1: entered allmulticast mode [ 541.390470][ C0] vcan0: j1939_tp_rxtimer: 0xffff88806557b400: rx timeout, send abort [ 541.471895][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 541.482065][ T0] NOHZ tick-stop error: local softirq work is pending, handler #08!!! [ 541.490805][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 541.499538][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 541.742949][T17386] syzkaller1: entered promiscuous mode [ 541.751706][T17386] syzkaller1: entered allmulticast mode [ 541.890987][ C0] vcan0: j1939_tp_rxtimer: 0xffff88807a9d5c00: rx timeout, send abort [ 541.902085][ C0] vcan0: j1939_tp_rxtimer: 0xffff88806557b400: abort rx timeout. Force session deactivation [ 542.170710][T17400] kvm: kvm [17399]: vcpu0, guest rIP: 0x9114 Unhandled WRMSR(0xc2) = 0x9d00 [ 542.185868][T17400] kvm: kvm [17399]: vcpu0, guest rIP: 0x9114 Unhandled WRMSR(0xc1) = 0x9d00 [ 542.308583][ T9] usb 8-1: new full-speed USB device number 46 using dummy_hcd [ 542.399311][ C0] vcan0: j1939_tp_rxtimer: 0xffff88807a9d5c00: abort rx timeout. Force session deactivation [ 542.472420][ T9] usb 8-1: config 150 has an invalid interface number: 204 but max is 2 [ 542.483350][ T9] usb 8-1: config 150 has 2 interfaces, different from the descriptor's value: 3 [ 542.492823][ T9] usb 8-1: config 150 has no interface number 0 [ 542.502143][ T9] usb 8-1: config 150 interface 204 has no altsetting 0 [ 542.517893][ T9] usb 8-1: New USB device found, idVendor=04e2, idProduct=1424, bcdDevice=c7.eb [ 542.531324][ T9] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 542.542341][ T9] usb 8-1: Product: syz [ 542.546610][ T9] usb 8-1: Manufacturer: syz [ 542.568391][ T9] usb 8-1: SerialNumber: syz [ 542.790534][ T9] xr_serial 8-1:150.204: skipping garbage [ 542.796537][ T9] xr_serial 8-1:150.204: xr_serial converter detected [ 542.980546][ T24] usb 6-1: new high-speed USB device number 62 using dummy_hcd [ 543.138319][ T24] usb 6-1: Using ep0 maxpacket: 8 [ 543.145175][ T24] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 543.155820][ T24] usb 6-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 543.165087][ T24] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 100, changing to 10 [ 543.178104][ T24] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 24936, setting to 1024 [ 543.189547][ T24] usb 6-1: New USB device found, idVendor=0225, idProduct=0000, bcdDevice= 0.00 [ 543.198767][ T24] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 543.213875][ T24] hub 6-1:1.0: bad descriptor, ignoring hub [ 543.220631][ T24] hub 6-1:1.0: probe with driver hub failed with error -5 [ 543.228989][ T24] cdc_wdm 6-1:1.0: skipping garbage [ 543.234240][ T24] cdc_wdm 6-1:1.0: skipping garbage [ 543.241929][ T24] cdc_wdm 6-1:1.0: cdc-wdm0: USB WDM device [ 543.247886][ T24] cdc_wdm 6-1:1.0: Unknown control protocol [ 543.596207][ T9] usb 8-1: xr_serial converter now attached to ttyUSB0 [ 543.758568][ T24] usb 1-1: new high-speed USB device number 17 using dummy_hcd [ 543.803233][ T5908] usb 8-1: USB disconnect, device number 46 [ 543.816814][ T5908] xr_serial ttyUSB0: xr_serial converter now disconnected from ttyUSB0 [ 543.827787][ T5908] xr_serial 8-1:150.204: device disconnected [ 543.922703][ T24] usb 1-1: Using ep0 maxpacket: 16 [ 543.932534][ T24] usb 1-1: New USB device found, idVendor=17ef, idProduct=721e, bcdDevice=de.06 [ 543.941922][ T24] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 543.951648][ T24] usb 1-1: Product: syz [ 543.955840][ T24] usb 1-1: Manufacturer: syz [ 543.960635][ T24] usb 1-1: SerialNumber: syz [ 543.969987][ T24] r8152-cfgselector 1-1: Unknown version 0x0000 [ 543.976322][ T24] r8152-cfgselector 1-1: config 0 descriptor?? [ 544.131158][T17421] usb 6-1: reset high-speed USB device number 62 using dummy_hcd [ 544.187982][ T24] r8152-cfgselector 1-1: Unknown version 0x0000 [ 544.198841][ T24] r8152-cfgselector 1-1: bad CDC descriptors [ 544.214895][ T24] r8152-cfgselector 1-1: USB disconnect, device number 17 [ 544.289767][T17421] usb 6-1: device firmware changed [ 544.300613][T17421] cdc_wdm 6-1:1.0: Error autopm - -16 [ 544.300797][ T5926] usb 6-1: USB disconnect, device number 62 [ 544.458393][ T5926] usb 6-1: new high-speed USB device number 63 using dummy_hcd [ 544.608512][ T24] usb 8-1: new high-speed USB device number 47 using dummy_hcd [ 544.618337][ T5926] usb 6-1: Using ep0 maxpacket: 8 [ 544.624990][ T5926] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 544.635513][ T5926] usb 6-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 544.644554][ T5926] usb 6-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 544.658089][ T5926] usb 6-1: New USB device found, idVendor=0225, idProduct=0000, bcdDevice= 0.00 [ 544.667268][ T5926] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 544.686442][ T5926] hub 6-1:1.0: bad descriptor, ignoring hub [ 544.698276][ T5926] hub 6-1:1.0: probe with driver hub failed with error -5 [ 544.708388][ T5926] cdc_wdm 6-1:1.0: skipping garbage [ 544.716454][ T5926] cdc_wdm 6-1:1.0: skipping garbage [ 544.722512][ T5926] cdc_wdm 6-1:1.0: probe with driver cdc_wdm failed with error -22 [ 544.760287][ T24] usb 8-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 544.771247][ T24] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 544.792403][ T24] usb 8-1: config 0 descriptor?? [ 544.804192][ T24] cp210x 8-1:0.0: cp210x converter detected [ 544.988817][ T5908] usb 6-1: USB disconnect, device number 63 [ 545.229676][ T24] cp210x 8-1:0.0: failed to get vendor val 0x0010 size 3: -32 [ 545.239564][ T24] cp210x 8-1:0.0: GPIO initialisation failed: -524 [ 545.255290][ T24] usb 8-1: cp210x converter now attached to ttyUSB0 [ 545.455739][ T24] usb 8-1: USB disconnect, device number 47 [ 545.476722][ T24] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0 [ 545.488387][ T5926] usb 9-1: new full-speed USB device number 34 using dummy_hcd [ 545.496429][ T24] cp210x 8-1:0.0: device disconnected [ 545.651344][ T5926] usb 9-1: config 0 has an invalid interface number: 128 but max is 0 [ 545.670433][ T5926] usb 9-1: config 0 has no interface number 0 [ 545.696114][ T5926] usb 9-1: New USB device found, idVendor=20b7, idProduct=1540, bcdDevice=b7.5a [ 545.710755][ T5926] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 545.729311][ T5926] usb 9-1: Product: syz [ 545.733639][ T5926] usb 9-1: Manufacturer: syz [ 545.739978][ T5926] usb 9-1: SerialNumber: syz [ 545.753342][ T5926] usb 9-1: config 0 descriptor?? [ 546.173223][ T5926] usb 9-1: Firmware: major: 0, minor: 0, hardware type: ATUSB (1) [ 546.198414][ T5926] usb 9-1: Firmware version (0.0) predates our first public release. [ 546.220475][ T5926] usb 9-1: Please update to version 0.2 or newer [ 546.441754][ T5926] usb 9-1: USB disconnect, device number 34 [ 547.105264][T17511] syzkaller1: entered promiscuous mode [ 547.116677][T17511] syzkaller1: entered allmulticast mode [ 547.178424][ T9] usb 1-1: new high-speed USB device number 18 using dummy_hcd [ 547.389337][ T9] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 547.413415][T17520] pim6reg: entered allmulticast mode [ 547.418387][ T9] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 547.469581][ T9] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 547.483180][ T9] usb 1-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 547.492330][ T9] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 547.505900][ T9] usb 1-1: config 0 descriptor?? [ 547.656952][T17524] input: syz0 as /devices/virtual/input/input94 [ 547.961794][ T9] plantronics 0003:047F:FFFF.0060: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.0-1/input0 [ 548.368563][ T44] usb 9-1: new high-speed USB device number 35 using dummy_hcd [ 548.530381][ T44] usb 9-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 548.558377][ T44] usb 9-1: config 1 interface 1 altsetting 1 bulk endpoint 0x3 has invalid maxpacket 1023 [ 548.590765][ T44] usb 9-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 548.611756][ T44] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 548.631415][ T44] usb 9-1: Product: syz [ 548.641788][ T44] usb 9-1: Manufacturer: syz [ 548.657032][ T44] usb 9-1: SerialNumber: syz [ 548.884806][T17532] raw-gadget.1 gadget.8: fail, usb_ep_enable returned -22 [ 549.499307][T17532] raw-gadget.1 gadget.8: fail, usb_ep_enable returned -22 [ 549.722136][ T44] cdc_ncm 9-1:1.0: MAC-Address: 42:42:42:42:42:42 [ 549.729210][ T44] cdc_ncm 9-1:1.0: dwNtbInMaxSize=16 is too small. Using 2048 [ 549.736831][ T44] cdc_ncm 9-1:1.0: setting rx_max = 2048 [ 549.929990][ T44] cdc_ncm 9-1:1.0: setting tx_max = 88 [ 549.965783][ T44] cdc_ncm 9-1:1.0 usb0: register 'cdc_ncm' at usb-dummy_hcd.8-1, CDC NCM (NO ZLP), 42:42:42:42:42:42 [ 550.015474][ T44] usb 9-1: USB disconnect, device number 35 [ 550.043213][ T44] cdc_ncm 9-1:1.0 usb0: unregister 'cdc_ncm' usb-dummy_hcd.8-1, CDC NCM (NO ZLP) [ 550.056287][ T5908] usb 1-1: USB disconnect, device number 18 [ 550.195413][T17565] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=1812281087 (231971979136 ns) > initial count (128 ns). Using initial count to start timer. [ 550.812392][T17583] syzkaller1: entered promiscuous mode [ 550.818033][T17583] syzkaller1: entered allmulticast mode [ 550.920980][T16537] nci: nci_add_new_protocol: the target found does not have the desired protocol [ 552.875433][ T13] nci: nci_rsp_packet: unsupported rsp opcode 0xf37 [ 553.037901][T17674] Invalid ELF header magic: != ELF [ 553.249782][T15929] netdevsim netdevsim9 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 553.327815][T15929] netdevsim netdevsim9 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 553.424809][T15929] netdevsim netdevsim9 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 553.524320][T15929] netdevsim netdevsim9 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 553.820753][T15929] bridge_slave_1: left allmulticast mode [ 553.847377][T15929] bridge_slave_1: left promiscuous mode [ 553.857715][T15929] bridge0: port 2(bridge_slave_1) entered disabled state [ 553.886235][T15929] bridge_slave_0: left allmulticast mode [ 553.903275][T15929] bridge_slave_0: left promiscuous mode [ 553.914368][T15929] bridge0: port 1(bridge_slave_0) entered disabled state [ 554.220504][ T1964] nci: nci_extract_activation_params_nfc_dep: unsupported activation_rf_tech_and_mode 0x1 [ 554.548415][ T9] usb 6-1: new full-speed USB device number 64 using dummy_hcd [ 554.700069][ T5888] usb 8-1: new high-speed USB device number 48 using dummy_hcd [ 554.732427][ T9] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 554.758906][ T9] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 554.803230][ T9] usb 6-1: New USB device found, idVendor=05ac, idProduct=029c, bcdDevice= 0.00 [ 554.828253][ T9] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 554.851995][ T9] usb 6-1: config 0 descriptor?? [ 554.879484][ T5888] usb 8-1: Using ep0 maxpacket: 32 [ 554.886699][ T5888] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 554.914710][ T5888] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 554.926000][ T5888] usb 8-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 554.935384][ T5888] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 554.977468][ T5888] usb 8-1: config 0 descriptor?? [ 554.995815][ T5888] hub 8-1:0.0: USB hub found [ 555.124769][T17743] llcp: nfc_llcp_send_ui_frame: Could not allocate PDU (error=-512) [ 555.125450][T15929] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 555.134729][T17743] llcp: nfc_llcp_send_ui_frame: Could not allocate PDU (error=-512) [ 555.174812][T15929] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 555.190350][T15929] bond0 (unregistering): Released all slaves [ 555.207636][ T5888] hub 8-1:0.0: 1 port detected [ 555.320389][ T9] apple 0003:05AC:029C.0061: unknown main item tag 0x0 [ 555.348891][ T9] apple 0003:05AC:029C.0061: unknown main item tag 0x0 [ 555.357658][ T9] apple 0003:05AC:029C.0061: unknown main item tag 0x0 [ 555.372344][ T9] apple 0003:05AC:029C.0061: unknown main item tag 0x0 [ 555.394783][ T9] apple 0003:05AC:029C.0061: unknown main item tag 0x0 [ 555.402734][ T9] apple 0003:05AC:029C.0061: unknown main item tag 0x0 [ 555.423904][ T9] apple 0003:05AC:029C.0061: unknown main item tag 0x0 [ 555.431267][ T9] apple 0003:05AC:029C.0061: unknown main item tag 0x0 [ 555.439636][ T9] apple 0003:05AC:029C.0061: unknown main item tag 0x0 [ 555.446614][ T9] apple 0003:05AC:029C.0061: unknown main item tag 0x0 [ 555.551501][ T9] apple 0003:05AC:029C.0061: hidraw0: USB HID v0.04 Device [HID 05ac:029c] on usb-dummy_hcd.5-1/input0 [ 555.597417][ T9] usb 6-1: USB disconnect, device number 64 [ 555.753018][T17746] fido_id[17746]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.5/usb6/report_descriptor': No such file or directory [ 555.843912][ T5888] hub 8-1:0.0: activate --> -90 [ 556.248540][T15929] hsr_slave_0: left promiscuous mode [ 556.263635][ T9] usb 8-1: USB disconnect, device number 48 [ 556.269784][ T5888] usb 8-1-port1: config error [ 556.309413][T15929] hsr_slave_1: left promiscuous mode [ 556.330327][T15929] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 556.337784][T15929] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 556.369215][T15929] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 556.384898][T15929] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 556.436399][T15929] veth1_macvtap: left promiscuous mode [ 556.446499][T15929] veth0_macvtap: left promiscuous mode [ 556.459840][T15929] veth1_vlan: left promiscuous mode [ 556.465312][T15929] veth0_vlan: left promiscuous mode [ 557.513797][T15929] team0 (unregistering): Port device team_slave_1 removed [ 557.631687][T15929] team0 (unregistering): Port device team_slave_0 removed [ 557.918517][ T9] usb 9-1: new high-speed USB device number 36 using dummy_hcd [ 558.098580][ T9] usb 9-1: Using ep0 maxpacket: 8 [ 558.106027][ T9] usb 9-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 558.116927][ T9] usb 9-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 558.128323][ T9] usb 9-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 100, changing to 10 [ 558.143737][ T9] usb 9-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 24936, setting to 1024 [ 558.163033][ T9] usb 9-1: New USB device found, idVendor=0225, idProduct=0000, bcdDevice= 0.00 [ 558.174338][ T9] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 558.196872][ T9] hub 9-1:1.0: bad descriptor, ignoring hub [ 558.203141][ T9] hub 9-1:1.0: probe with driver hub failed with error -5 [ 558.223987][ T9] cdc_wdm 9-1:1.0: skipping garbage [ 558.236662][ T9] cdc_wdm 9-1:1.0: skipping garbage [ 558.264876][ T9] cdc_wdm 9-1:1.0: cdc-wdm0: USB WDM device [ 558.274667][ T9] cdc_wdm 9-1:1.0: Unknown control protocol [ 558.560971][ T5926] usb 1-1: new high-speed USB device number 19 using dummy_hcd [ 558.740633][ T5926] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 17 [ 558.804681][ T5926] usb 1-1: New USB device found, idVendor=6161, idProduct=4d15, bcdDevice= 0.00 [ 558.827739][ T5926] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 558.862606][ T5926] usb 1-1: config 0 descriptor?? [ 559.182981][T17799] usb 9-1: reset high-speed USB device number 36 using dummy_hcd [ 559.390270][T17799] usb 9-1: device firmware changed [ 559.406784][T17799] cdc_wdm 9-1:1.0: Error autopm - -16 [ 559.412429][ T9] usb 9-1: USB disconnect, device number 36 [ 559.450612][ T44] usb 6-1: new high-speed USB device number 65 using dummy_hcd [ 559.511104][ T5926] usb 1-1: string descriptor 0 read error: -71 [ 559.552317][ T5926] usb 1-1: Max retries (5) exceeded reading string descriptor 200 [ 559.575249][ T5926] letsketch 0003:6161:4D15.0062: probe with driver letsketch failed with error -32 [ 559.599581][ T9] usb 9-1: new high-speed USB device number 37 using dummy_hcd [ 559.616332][ T5926] usb 1-1: USB disconnect, device number 19 [ 559.628869][ T44] usb 6-1: Using ep0 maxpacket: 16 [ 559.641243][ T44] usb 6-1: too many endpoints for config 0 interface 0 altsetting 0: 65, using maximum allowed: 30 [ 559.688390][ T44] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 559.710127][ T44] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 65 [ 559.738771][ T44] usb 6-1: New USB device found, idVendor=0419, idProduct=0001, bcdDevice= 0.00 [ 559.759222][ T44] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 559.788393][ T9] usb 9-1: Using ep0 maxpacket: 8 [ 559.793877][ T44] usb 6-1: config 0 descriptor?? [ 559.799982][ T9] usb 9-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 559.825367][ T9] usb 9-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 559.855173][ T9] usb 9-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 559.888313][ T9] usb 9-1: New USB device found, idVendor=0225, idProduct=0000, bcdDevice= 0.00 [ 559.908027][ T9] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 559.941803][ T9] hub 9-1:1.0: bad descriptor, ignoring hub [ 559.947789][ T9] hub 9-1:1.0: probe with driver hub failed with error -5 [ 559.993524][ T9] cdc_wdm 9-1:1.0: skipping garbage [ 560.010813][ T9] cdc_wdm 9-1:1.0: skipping garbage [ 560.016098][ T9] cdc_wdm 9-1:1.0: probe with driver cdc_wdm failed with error -22 [ 560.131258][T17861] netlink: 9872 bytes leftover after parsing attributes in process `syz.0.4574'. [ 560.234899][ T44] samsung 0003:0419:0001.0063: invalid report_size 1088654670 [ 560.242935][ T44] samsung 0003:0419:0001.0063: item 0 4 1 7 parsing failed [ 560.251715][ T44] samsung 0003:0419:0001.0063: parse failed [ 560.258088][ T44] samsung 0003:0419:0001.0063: probe with driver samsung failed with error -22 [ 560.278893][ T44] usb 9-1: USB disconnect, device number 37 [ 560.443801][ T44] usb 6-1: USB disconnect, device number 65 [ 562.315121][ T30] audit: type=1326 audit(1764314702.938:64): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17943 comm="syz.0.4605" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f0b06b8f749 code=0x0 [ 562.408320][ T9] usb 8-1: new high-speed USB device number 49 using dummy_hcd [ 562.551983][T17953] kvm: apic: phys broadcast and lowest prio [ 562.568491][ T9] usb 8-1: Using ep0 maxpacket: 8 [ 562.576241][ T9] usb 8-1: config index 0 descriptor too short (expected 301, got 45) [ 562.584943][ T9] usb 8-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 562.595589][ T9] usb 8-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 562.608091][ T9] usb 8-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 562.618702][ T9] usb 8-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 562.632660][ T9] usb 8-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 562.641930][ T9] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 562.802877][T17957] netlink: 'syz.5.4610': attribute type 4 has an invalid length. [ 562.820681][T17957] netlink: 'syz.5.4610': attribute type 4 has an invalid length. [ 562.861398][ T9] usb 8-1: usb_control_msg returned -32 [ 562.867981][ T9] usbtmc 8-1:16.0: can't read capabilities [ 562.929187][T17961] netlink: 9872 bytes leftover after parsing attributes in process `syz.5.4612'. [ 563.088299][ T9] usb 9-1: new full-speed USB device number 38 using dummy_hcd [ 563.247737][ T9] usb 9-1: config 0 has an invalid interface number: 128 but max is 0 [ 563.249590][T17973] kvm: apic: phys broadcast and lowest prio [ 563.257318][ T9] usb 9-1: config 0 has no interface number 0 [ 563.274215][ T9] usb 9-1: New USB device found, idVendor=20b7, idProduct=1540, bcdDevice=b7.5a [ 563.285136][ T9] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 563.293720][ T9] usb 9-1: Product: syz [ 563.297925][ T9] usb 9-1: Manufacturer: syz [ 563.302638][ T9] usb 9-1: SerialNumber: syz [ 563.310207][ T9] usb 9-1: config 0 descriptor?? [ 563.468505][ T5926] usb 6-1: new high-speed USB device number 66 using dummy_hcd [ 563.629345][T17978] usbtmc 8-1:16.0: usb_control_msg returned -32 [ 563.648728][ T5926] usb 6-1: Using ep0 maxpacket: 8 [ 563.656019][ T5926] usb 6-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 563.666068][ T5926] usb 6-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 563.676224][ T5926] usb 6-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 563.687711][ T5926] usb 6-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 563.706152][ T5926] usb 6-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 563.715406][ T5926] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 563.831459][T15828] usb 8-1: USB disconnect, device number 49 [ 563.936741][ T5926] usb 6-1: GET_CAPABILITIES returned 0 [ 563.942510][ T5926] usbtmc 6-1:16.0: can't read capabilities [ 564.163111][ C0] usbtmc 6-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 564.172370][ C0] usbtmc 6-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 564.181583][ C0] usbtmc 6-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 564.190700][ C0] usbtmc 6-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 564.200410][ C0] usbtmc 6-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 564.209544][ C0] usbtmc 6-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 564.218677][ C0] usbtmc 6-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 564.231855][ C0] usbtmc 6-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 564.241006][ C0] usbtmc 6-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 564.250133][ C0] usbtmc 6-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 564.254210][T15828] usb 6-1: USB disconnect, device number 66 [ 564.337450][ T9] usb 9-1: non-Atmel transceiver xxxx0600 [ 564.539728][ T9] usb 9-1: Firmware version (0.0) predates our first public release. [ 564.558413][ T9] usb 9-1: Please update to version 0.2 or newer [ 564.566577][ T9] usb 9-1: atusb_probe: initialization failed, error = -19 [ 564.590299][ T9] usb 9-1: USB disconnect, device number 38 [ 564.824422][ T30] audit: type=1326 audit(1764314705.448:65): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17996 comm="syz.7.4626" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fdbd4b8f749 code=0x0 [ 566.318474][ T9] usb 8-1: new full-speed USB device number 50 using dummy_hcd [ 566.471822][ T9] usb 8-1: New USB device found, idVendor=174f, idProduct=6a31, bcdDevice=26.3f [ 566.481533][ T9] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 566.491050][ T9] usb 8-1: Product: syz [ 566.496192][ T9] usb 8-1: Manufacturer: syz [ 566.500966][ T9] usb 8-1: SerialNumber: syz [ 566.509067][ T9] usb 8-1: config 0 descriptor?? [ 566.518992][ T9] gspca_main: stk1135-2.14.0 probing 174f:6a31 [ 567.198541][ T5825] Bluetooth: hci4: Opcode 0x1003 failed: -110 [ 567.730794][ T9] gspca_stk1135: reg_w 0xd err -71 [ 567.741215][ T9] gspca_stk1135: serial bus timeout: status=0x00 [ 567.748655][ T9] gspca_stk1135: Sensor write failed [ 567.754103][ T9] gspca_stk1135: serial bus timeout: status=0x00 [ 567.768421][ T9] gspca_stk1135: Sensor write failed [ 567.776631][ T9] gspca_stk1135: serial bus timeout: status=0x00 [ 567.788697][ T9] gspca_stk1135: Sensor read failed [ 567.793991][ T9] gspca_stk1135: serial bus timeout: status=0x00 [ 567.800498][ T9] gspca_stk1135: Sensor read failed [ 567.805827][ T9] gspca_stk1135: Detected sensor type unknown (0x0) [ 567.817881][ T9] gspca_stk1135: serial bus timeout: status=0x00 [ 567.826536][ T9] gspca_stk1135: Sensor read failed [ 567.833894][ T9] gspca_stk1135: serial bus timeout: status=0x00 [ 567.841490][ T9] gspca_stk1135: Sensor read failed [ 567.847943][ T9] gspca_stk1135: serial bus timeout: status=0x00 [ 567.854599][ T9] gspca_stk1135: Sensor write failed [ 567.860381][ T9] gspca_stk1135: serial bus timeout: status=0x00 [ 567.866750][ T9] gspca_stk1135: Sensor write failed [ 567.872238][ T9] stk1135 8-1:0.0: probe with driver stk1135 failed with error -71 [ 567.883865][ T9] usb 8-1: USB disconnect, device number 50 [ 568.579036][ T1299] ieee802154 phy0 wpan0: encryption failed: -22 [ 568.585627][ T1299] ieee802154 phy1 wpan1: encryption failed: -22 [ 568.660079][T18083] overlayfs: missing 'lowerdir' [ 568.978325][T15828] usb 8-1: new full-speed USB device number 51 using dummy_hcd [ 569.162082][T15828] usb 8-1: config 0 has an invalid interface number: 128 but max is 0 [ 569.170580][T15828] usb 8-1: config 0 has no interface number 0 [ 569.201672][T15828] usb 8-1: New USB device found, idVendor=20b7, idProduct=1540, bcdDevice=b7.5a [ 569.218273][T15828] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 569.228258][T15828] usb 8-1: Product: syz [ 569.233649][T15828] usb 8-1: Manufacturer: syz [ 569.239550][T15828] usb 8-1: SerialNumber: syz [ 569.247434][T15828] usb 8-1: config 0 descriptor?? [ 570.289949][T15828] usb 8-1: non-Atmel transceiver xxxx0600 [ 570.492454][T15828] usb 8-1: Firmware version (0.0) predates our first public release. [ 570.516304][T15828] usb 8-1: Please update to version 0.2 or newer [ 570.523675][T15828] usb 8-1: atusb_probe: initialization failed, error = -19 [ 570.547363][T15828] usb 8-1: USB disconnect, device number 51 [ 571.351208][T18140] input: syz1 as /devices/virtual/input/input96 [ 571.558561][ T5907] usb 8-1: new high-speed USB device number 52 using dummy_hcd [ 571.722600][ T5907] usb 8-1: Using ep0 maxpacket: 8 [ 571.731700][ T5907] usb 8-1: config 0 has an invalid interface number: 55 but max is 0 [ 571.742721][ T5907] usb 8-1: config 0 has no interface number 0 [ 571.750309][ T5907] usb 8-1: config 0 interface 55 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 571.768401][ T5907] usb 8-1: config 0 interface 55 altsetting 0 has an endpoint descriptor with address 0xAB, changing to 0x8B [ 571.782767][ T5907] usb 8-1: config 0 interface 55 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 571.795537][ T5907] usb 8-1: config 0 interface 55 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 2 [ 571.824250][ T5907] usb 8-1: New USB device found, idVendor=0f11, idProduct=1080, bcdDevice=fc.6a [ 571.845807][ T5907] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 571.860837][ T5907] usb 8-1: config 0 descriptor?? [ 571.876518][ T5907] ldusb 8-1:0.55: LD USB Device #0 now attached to major 180 minor 0 [ 572.128621][ T5888] usb 1-1: new high-speed USB device number 20 using dummy_hcd [ 572.298300][ T5888] usb 1-1: Using ep0 maxpacket: 32 [ 572.323956][ T5888] usb 1-1: New USB device found, idVendor=0458, idProduct=5005, bcdDevice= 0.00 [ 572.352442][ T5888] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 572.400494][ T5888] usb 1-1: config 0 descriptor?? [ 572.904791][ T5888] kye 0003:0458:5005.0064: tablet report size too small, or kye_tablet_rdesc unexpectedly large [ 572.960023][ T5888] hid_parser_main: 2628 callbacks suppressed [ 572.960049][ T5888] kye 0003:0458:5005.0064: unknown main item tag 0x0 [ 572.996179][ T5888] kye 0003:0458:5005.0064: unknown main item tag 0x0 [ 573.016091][ T5888] kye 0003:0458:5005.0064: item fetching failed at offset 4/5 [ 573.046135][ T5888] kye 0003:0458:5005.0064: parse failed [ 573.068429][ T5888] kye 0003:0458:5005.0064: probe with driver kye failed with error -22 [ 573.175669][ T5888] usb 1-1: USB disconnect, device number 20 [ 573.883853][T18207] netlink: 8 bytes leftover after parsing attributes in process `syz.5.4704'. [ 573.919458][T18207] netlink: 8 bytes leftover after parsing attributes in process `syz.5.4704'. [ 574.159655][ T44] usb 8-1: USB disconnect, device number 52 [ 574.184616][ T44] ldusb 8-1:0.55: LD USB Device #0 now disconnected [ 574.368446][ T9] usb 6-1: new high-speed USB device number 67 using dummy_hcd [ 574.528287][ T9] usb 6-1: Using ep0 maxpacket: 16 [ 574.540645][ T9] usb 6-1: config 0 has no interfaces? [ 574.568800][ T9] usb 6-1: New USB device found, idVendor=04fc, idProduct=1528, bcdDevice=6d.5d [ 574.577912][ T9] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 574.614828][ T9] usb 6-1: Product: syz [ 574.628283][ T9] usb 6-1: Manufacturer: syz [ 574.633108][ T9] usb 6-1: SerialNumber: syz [ 574.649644][ T9] usb 6-1: config 0 descriptor?? [ 574.888081][T15828] usb 6-1: USB disconnect, device number 67 [ 575.231218][T15828] usb 6-1: new full-speed USB device number 68 using dummy_hcd [ 575.413294][T15828] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 575.462593][T15828] usb 6-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 575.503462][T15828] usb 6-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 575.532118][T15828] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 575.552050][T15828] usb 6-1: Product: syz [ 575.561572][T15828] usb 6-1: Manufacturer: syz [ 575.566300][T15828] usb 6-1: SerialNumber: syz [ 575.786729][T15828] usb 6-1: 0:2 : does not exist [ 575.813545][T15828] usb 6-1: 5:0: failed to get current value for ch 0 (-22) [ 575.903901][T15828] usb 6-1: USB disconnect, device number 68 [ 575.968167][ T5938] udevd[5938]: error opening ATTR{/sys/devices/platform/dummy_hcd.5/usb6/6-1/6-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 576.044837][T18267] netlink: 8 bytes leftover after parsing attributes in process `syz.8.4716'. [ 576.069701][T18267] netlink: 8 bytes leftover after parsing attributes in process `syz.8.4716'. [ 578.306098][T18360] netlink: 176 bytes leftover after parsing attributes in process `syz.8.4756'. [ 578.758327][ T9] usb 1-1: new high-speed USB device number 21 using dummy_hcd [ 578.918457][ T9] usb 1-1: Using ep0 maxpacket: 16 [ 578.927333][ T9] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 578.938536][ T9] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 578.948607][ T9] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 578.961541][ T9] usb 1-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 578.970799][ T9] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 578.981505][ T9] usb 1-1: config 0 descriptor?? [ 579.415989][ T9] HID 045e:07da: Invalid code 65791 type 1 [ 579.435357][ T9] input: HID 045e:07da as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/0003:045E:07DA.0065/input/input97 [ 579.491176][ T9] microsoft 0003:045E:07DA.0065: input,hidraw0: USB HID v0.00 Device [HID 045e:07da] on usb-dummy_hcd.0-1/input0 [ 579.542150][T18386] netlink: 176 bytes leftover after parsing attributes in process `syz.7.4768'. [ 579.629469][ T9] usb 1-1: USB disconnect, device number 21 [ 579.672017][T18387] fido_id[18387]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.0/usb1/1-1/report_descriptor': No such file or directory [ 580.540216][T18423] netlink: 'syz.7.4783': attribute type 2 has an invalid length. [ 580.558579][T18423] netlink: 'syz.7.4783': attribute type 4 has an invalid length. [ 580.567342][T18423] netlink: 'syz.7.4783': attribute type 8 has an invalid length. [ 580.598622][T18423] netlink: 44 bytes leftover after parsing attributes in process `syz.7.4783'. [ 581.688388][ T9] usb 1-1: new high-speed USB device number 22 using dummy_hcd [ 581.811783][T18439] input: syz0 as /devices/virtual/input/input98 [ 581.851516][ T9] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 581.868363][ T9] usb 1-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 581.889275][ T9] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 581.918659][ T9] usb 1-1: config 0 descriptor?? [ 582.009481][T18445] netlink: 'syz.7.4792': attribute type 1 has an invalid length. [ 582.350600][ T9] keytouch 0003:0926:3333.0066: fixing up Keytouch IEC report descriptor [ 582.378486][ T9] input: HID 0926:3333 as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/0003:0926:3333.0066/input/input99 [ 582.450117][T18462] input: syz0 as /devices/virtual/input/input100 [ 582.533898][ T9] keytouch 0003:0926:3333.0066: input,hidraw0: USB HID v0.00 Keyboard [HID 0926:3333] on usb-dummy_hcd.0-1/input0 [ 582.947097][ T44] usb 1-1: USB disconnect, device number 22 [ 583.097753][T18478] overlayfs: overlapping lowerdir path [ 583.113024][T18478] overlayfs: failed to verify upper (825/file0, ino=4356, err=-116) [ 583.121311][T18478] overlayfs: failed to verify index dir 'upper' xattr [ 583.128128][T18478] overlayfs: try deleting index dir or mounting with '-o index=off' to disable inodes index. [ 583.517933][ T5868] Process accounting resumed [ 583.568322][ T44] usb 6-1: new high-speed USB device number 69 using dummy_hcd [ 583.722714][ T44] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 583.748445][ T44] usb 6-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 583.757596][ T44] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 583.773844][ T44] usb 6-1: config 0 descriptor?? [ 584.211395][ T44] keytouch 0003:0926:3333.0067: fixing up Keytouch IEC report descriptor [ 584.258603][ T44] input: HID 0926:3333 as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:0.0/0003:0926:3333.0067/input/input101 [ 584.449504][ T44] keytouch 0003:0926:3333.0067: input,hidraw0: USB HID v0.00 Keyboard [HID 0926:3333] on usb-dummy_hcd.5-1/input0 [ 584.725282][ T44] usb 6-1: USB disconnect, device number 69 [ 584.984861][T18527] overlayfs: overlapping lowerdir path [ 585.004088][T18527] overlayfs: failed to verify upper (224/file0, ino=1194, err=-116) [ 585.013674][T18527] overlayfs: failed to verify index dir 'upper' xattr [ 585.021429][T18527] overlayfs: try deleting index dir or mounting with '-o index=off' to disable inodes index. [ 585.283911][ T44] usb 8-1: new high-speed USB device number 53 using dummy_hcd [ 585.360451][ T61] nci: nci_rf_intf_activated_ntf_packet: unsupported rf_interface 0x6 [ 585.450298][ T44] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 585.464880][ T44] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 585.475205][ T44] usb 8-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 585.484419][ T44] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 585.495629][ T44] usb 8-1: config 0 descriptor?? [ 585.913271][ T44] keytouch 0003:0926:3333.0068: fixing up Keytouch IEC report descriptor [ 585.925393][ T44] input: HID 0926:3333 as /devices/platform/dummy_hcd.7/usb8/8-1/8-1:0.0/0003:0926:3333.0068/input/input102 [ 586.008526][ T44] keytouch 0003:0926:3333.0068: input,hidraw0: USB HID v0.00 Keyboard [HID 0926:3333] on usb-dummy_hcd.7-1/input0 [ 586.192265][ T44] usb 8-1: USB disconnect, device number 53 [ 586.258379][ T5905] libceph: connect (1)[c::]:6789 error -101 [ 586.264456][ T5905] libceph: mon0 (1)[c::]:6789 connect error [ 586.336634][ T5868] libceph: connect (1)[b::]:6789 error -101 [ 586.343262][ T5868] libceph: mon0 (1)[b::]:6789 connect error [ 586.550282][ T44] libceph: connect (1)[c::]:6789 error -101 [ 586.557379][ T44] libceph: mon0 (1)[c::]:6789 connect error [ 586.609082][ T5868] libceph: connect (1)[b::]:6789 error -101 [ 586.615209][ T5868] libceph: mon0 (1)[b::]:6789 connect error [ 587.060131][T18563] ceph: No mds server is up or the cluster is laggy [ 587.060259][T18566] ceph: No mds server is up or the cluster is laggy [ 587.079223][ T44] libceph: connect (1)[c::]:6789 error -101 [ 587.088656][ T44] libceph: mon0 (1)[c::]:6789 connect error [ 587.129198][ T5868] libceph: connect (1)[b::]:6789 error -101 [ 587.141213][ T5868] libceph: mon0 (1)[b::]:6789 connect error [ 587.490252][ T44] usb 6-1: new high-speed USB device number 70 using dummy_hcd [ 587.650576][ T44] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 587.671093][ T44] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 587.691813][ T44] usb 6-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 587.708766][ T44] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 587.730565][ T44] usb 6-1: config 0 descriptor?? [ 588.159094][ T44] keytouch 0003:0926:3333.0069: fixing up Keytouch IEC report descriptor [ 588.174566][ T44] input: HID 0926:3333 as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:0.0/0003:0926:3333.0069/input/input103 [ 588.277003][ T44] keytouch 0003:0926:3333.0069: input,hidraw0: USB HID v0.00 Keyboard [HID 0926:3333] on usb-dummy_hcd.5-1/input0 [ 588.396704][ T44] usb 6-1: USB disconnect, device number 70 [ 588.811863][T18623] ceph: No mds server is up or the cluster is laggy [ 588.811934][T18620] ceph: No mds server is up or the cluster is laggy [ 590.570467][T18705] syzkaller1: entered promiscuous mode [ 590.577229][T18705] syzkaller1: entered allmulticast mode [ 590.788849][T15828] usb 8-1: new high-speed USB device number 54 using dummy_hcd [ 590.948594][T15828] usb 8-1: Using ep0 maxpacket: 16 [ 590.960173][T15828] usb 8-1: config 0 has an invalid interface number: 1 but max is 0 [ 590.969037][T15828] usb 8-1: config 0 has no interface number 0 [ 590.980694][T15828] usb 8-1: New USB device found, idVendor=04fc, idProduct=1528, bcdDevice=6d.5d [ 590.993729][T15828] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 591.004004][T15828] usb 8-1: Product: syz [ 591.016312][T15828] usb 8-1: Manufacturer: syz [ 591.028260][T15828] usb 8-1: SerialNumber: syz [ 591.036240][T15828] usb 8-1: config 0 descriptor?? [ 591.050015][T15828] gspca_main: spca1528-2.14.0 probing 04fc:1528 [ 592.118329][ T5868] usb 9-1: new full-speed USB device number 39 using dummy_hcd [ 592.267944][T15828] gspca_spca1528: reg_w err -71 [ 592.273388][T15828] spca1528 8-1:0.1: probe with driver spca1528 failed with error -71 [ 592.282848][ T5868] usb 9-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 592.293163][ T5868] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 592.296427][T15828] usb 8-1: USB disconnect, device number 54 [ 592.310603][ T5868] usb 9-1: Product: syz [ 592.318754][ T5868] usb 9-1: Manufacturer: syz [ 592.324200][ T5868] usb 9-1: SerialNumber: syz [ 592.334411][ T5868] usb 9-1: config 0 descriptor?? [ 592.552003][ T5868] usb 9-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 592.708326][ T5888] usb 1-1: new high-speed USB device number 23 using dummy_hcd [ 592.802690][T18753] overlayfs: statfs failed on './file0' [ 592.858731][ T5888] usb 1-1: Using ep0 maxpacket: 8 [ 592.866165][ T5888] usb 1-1: config index 0 descriptor too short (expected 301, got 45) [ 592.875281][ T5888] usb 1-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 592.891776][ T5888] usb 1-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 592.903235][ T5888] usb 1-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 592.913714][ T5888] usb 1-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 592.927008][ T5888] usb 1-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 592.937194][ T5888] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 593.041297][T18770] loop6: detected capacity change from 0 to 2640 [ 593.049034][T18770] buffer_io_error: 10 callbacks suppressed [ 593.049055][T18770] Buffer I/O error on dev loop6, logical block 0, async page read [ 593.063503][T18770] Buffer I/O error on dev loop6, logical block 0, async page read [ 593.071859][T18770] Buffer I/O error on dev loop6, logical block 0, async page read [ 593.080161][T18770] Buffer I/O error on dev loop6, logical block 0, async page read [ 593.088151][T18770] Buffer I/O error on dev loop6, logical block 0, async page read [ 593.097858][T18772] Buffer I/O error on dev loop6, logical block 0, async page read [ 593.106807][T18770] Buffer I/O error on dev loop6, logical block 0, async page read [ 593.115888][T18770] Buffer I/O error on dev loop6, logical block 0, async page read [ 593.124555][T18772] Buffer I/O error on dev loop6, logical block 0, async page read [ 593.133164][T18770] Buffer I/O error on dev loop6, logical block 0, async page read [ 593.156866][ T5888] usb 1-1: usb_control_msg returned -32 [ 593.169068][ T5888] usbtmc 1-1:16.0: can't read capabilities [ 593.169415][T18770] ldm_validate_partition_table(): Disk read failed. [ 593.203217][T18770] Dev loop6: unable to read RDB block 0 [ 593.211502][T18770] loop6: unable to read partition table [ 593.220314][T18770] loop_reread_partitions: partition scan of loop6 (3Ÿ ¾‚³˜) failed (rc=-5) [ 593.559108][ T5868] dvb_usb_rtl28xxu 9-1:0.0: probe with driver dvb_usb_rtl28xxu failed with error -71 [ 593.577385][ T5868] usb 9-1: USB disconnect, device number 39 [ 593.921631][T18777] usbtmc 1-1:16.0: usb_control_msg returned -32 [ 594.065126][ T5905] usb 1-1: USB disconnect, device number 23 [ 594.418376][ T5905] usb 9-1: new full-speed USB device number 40 using dummy_hcd [ 594.577771][ T5905] usb 9-1: config 0 has an invalid interface number: 41 but max is 0 [ 594.592859][ T5905] usb 9-1: config 0 has no interface number 0 [ 594.608768][ T5907] usb 6-1: new high-speed USB device number 71 using dummy_hcd [ 594.628977][ T5905] usb 9-1: config 0 interface 41 has no altsetting 0 [ 594.639464][ T5905] usb 9-1: New USB device found, idVendor=0fe6, idProduct=9800, bcdDevice=d1.9a [ 594.646848][T18811] netlink: 36 bytes leftover after parsing attributes in process `syz.0.4943'. [ 594.651800][ T5905] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 594.668300][ T5905] usb 9-1: Product: syz [ 594.672825][ T5905] usb 9-1: Manufacturer: syz [ 594.688727][ T5905] usb 9-1: SerialNumber: syz [ 594.702296][ T5905] usb 9-1: config 0 descriptor?? [ 594.778776][ T5907] usb 6-1: Using ep0 maxpacket: 32 [ 594.786211][ T5907] usb 6-1: config 0 has an invalid interface number: 184 but max is 0 [ 594.795313][ T5907] usb 6-1: config 0 has no interface number 0 [ 594.806013][ T5907] usb 6-1: config 0 interface 184 has no altsetting 0 [ 594.817249][ T5907] usb 6-1: New USB device found, idVendor=0424, idProduct=7500, bcdDevice=69.ee [ 594.833295][ T5907] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 594.841743][ T5907] usb 6-1: Product: syz [ 594.845963][ T5907] usb 6-1: Manufacturer: syz [ 594.852638][ T5907] usb 6-1: SerialNumber: syz [ 594.865918][ T5907] usb 6-1: config 0 descriptor?? [ 594.876415][ T5907] smsc75xx v1.0.0 [ 595.108345][ T24] usb 8-1: new high-speed USB device number 55 using dummy_hcd [ 595.258293][ T24] usb 8-1: Using ep0 maxpacket: 32 [ 595.266016][ T24] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 595.277038][ T24] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 595.287174][ T24] usb 8-1: New USB device found, idVendor=1e7d, idProduct=2d51, bcdDevice= 0.00 [ 595.297591][ T24] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 595.308634][ T24] usb 8-1: config 0 descriptor?? [ 595.523800][ T5905] CoreChips 9-1:0.41 (unnamed net_device) (uninitialized): sr_get_phy_addr : Error reading PHYID register:ffffffe0 [ 595.737785][ T5905] CoreChips 9-1:0.41 (unnamed net_device) (uninitialized): Failed to send software reset:ffffffb9 [ 595.749716][ T5905] CoreChips 9-1:0.41 (unnamed net_device) (uninitialized): Failed to power down PHY : -71 [ 595.762361][ T5905] CoreChips 9-1:0.41: probe with driver CoreChips failed with error -71 [ 595.781751][ T5905] usb 9-1: USB disconnect, device number 40 [ 596.094146][ T5907] smsc75xx 6-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000040: -71 [ 596.130253][ T5907] smsc75xx 6-1:0.184 (unnamed net_device) (uninitialized): Error reading E2P_CMD [ 596.141040][ T5907] smsc75xx 6-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000014: -71 [ 596.154381][ T5907] smsc75xx 6-1:0.184 (unnamed net_device) (uninitialized): Failed to read PMT_CTL: -71 [ 596.165594][ T5907] smsc75xx 6-1:0.184 (unnamed net_device) (uninitialized): device not ready in smsc75xx_reset [ 596.186866][ T5907] smsc75xx 6-1:0.184 (unnamed net_device) (uninitialized): smsc75xx_reset error -71 [ 596.203739][ T5907] smsc75xx 6-1:0.184: probe with driver smsc75xx failed with error -71 [ 596.229435][ T5907] usb 6-1: USB disconnect, device number 71 [ 596.356098][T18836] netlink: 36 bytes leftover after parsing attributes in process `syz.8.4953'. [ 597.079988][ T5825] Bluetooth: hci2: unexpected event for opcode 0x0c1b [ 599.058336][ T5868] usb 9-1: new high-speed USB device number 41 using dummy_hcd [ 599.208469][ T5868] usb 9-1: Using ep0 maxpacket: 32 [ 599.216667][ T5868] usb 9-1: config 0 has an invalid interface number: 132 but max is 0 [ 599.225620][ T5868] usb 9-1: config 0 has no interface number 0 [ 599.232457][ T5868] usb 9-1: config 0 interface 132 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 599.245772][ T5868] usb 9-1: New USB device found, idVendor=0413, idProduct=6023, bcdDevice=ec.e5 [ 599.255743][ T5868] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 599.264734][ T5868] usb 9-1: Product: syz [ 599.269508][ T5868] usb 9-1: Manufacturer: syz [ 599.274263][ T5868] usb 9-1: SerialNumber: syz [ 599.288813][ T5868] usb 9-1: config 0 descriptor?? [ 599.300703][ T5868] em28xx 9-1:0.132: New device syz syz @ 480 Mbps (0413:6023, interface 132, class 132) [ 599.310795][ T5868] em28xx 9-1:0.132: Video interface 132 found: [ 599.702006][ T5868] em28xx 9-1:0.132: unknown em28xx chip ID (0) [ 599.849696][T18946] loop6: detected capacity change from 0 to 2640 [ 599.867649][ T5829] buffer_io_error: 3737 callbacks suppressed [ 599.867668][ T5829] Buffer I/O error on dev loop6, logical block 0, async page read [ 599.885424][ T5829] Buffer I/O error on dev loop6, logical block 0, async page read [ 599.895171][ T5829] Buffer I/O error on dev loop6, logical block 0, async page read [ 599.905675][ T5829] Buffer I/O error on dev loop6, logical block 0, async page read [ 599.921521][T18951] Buffer I/O error on dev loop6, logical block 0, async page read [ 599.930300][ T5829] Buffer I/O error on dev loop6, logical block 0, async page read [ 599.941345][T18951] Buffer I/O error on dev loop6, logical block 0, async page read [ 599.950028][ T5829] Buffer I/O error on dev loop6, logical block 0, async page read [ 599.958743][T18951] Buffer I/O error on dev loop6, logical block 0, async page read [ 599.968707][ T5829] Buffer I/O error on dev loop6, logical block 0, async page read [ 599.982901][ T5829] ldm_validate_partition_table(): Disk read failed. [ 600.001211][ T5829] Dev loop6: unable to read RDB block 0 [ 600.007482][ T5829] loop6: unable to read partition table [ 600.051633][T18946] ldm_validate_partition_table(): Disk read failed. [ 600.059205][T18946] Dev loop6: unable to read RDB block 0 [ 600.065938][T18946] loop6: unable to read partition table [ 600.072517][T18946] loop_reread_partitions: partition scan of loop6 (3Ÿ ¾‚³˜) failed (rc=-5) [ 600.342276][ T5868] em28xx 9-1:0.132: failed to trigger write to i2c address 0xa0 (error=-5) [ 600.363753][ T5868] em28xx 9-1:0.132: failed to read eeprom (err=-5) [ 600.375647][ T5868] em28xx 9-1:0.132: em28xx_i2c_register: em28xx_i2_eeprom failed! retval [-5] [ 600.414229][ T24] usbhid 8-1:0.0: can't add hid device: -32 [ 600.429304][ T24] usbhid 8-1:0.0: probe with driver usbhid failed with error -32 [ 600.438597][ T5908] usb 6-1: new high-speed USB device number 72 using dummy_hcd [ 600.440985][ T5868] em28xx 9-1:0.132: Identified as Leadtek Winfast USB II (card=7) [ 600.503815][ T5868] em28xx 9-1:0.132: analog set to bulk mode. [ 600.513959][ T5888] em28xx 9-1:0.132: Registering V4L2 extension [ 600.529069][ T5868] usb 9-1: USB disconnect, device number 41 [ 600.546698][ T5868] em28xx 9-1:0.132: Disconnecting em28xx [ 600.648391][ T5908] usb 6-1: Using ep0 maxpacket: 8 [ 600.672139][ T5908] usb 6-1: config index 0 descriptor too short (expected 301, got 45) [ 600.709283][ T5908] usb 6-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 600.729134][ T5908] usb 6-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 600.755473][ T5908] usb 6-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 600.778249][ T5908] usb 6-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 600.812742][ T5908] usb 6-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 600.829067][ T5888] em28xx 9-1:0.132: Config register raw data: 0xffffffed [ 600.834445][ T5908] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 600.849939][ T5888] em28xx 9-1:0.132: AC97 chip type couldn't be determined [ 600.887354][ T5888] em28xx 9-1:0.132: No AC97 audio processor [ 600.927639][ T5888] usb 9-1: Decoder not found [ 600.957624][ T5888] em28xx 9-1:0.132: failed to create media graph [ 600.977622][ T5888] em28xx 9-1:0.132: V4L2 device video103 deregistered [ 601.003985][ T5888] em28xx 9-1:0.132: Remote control support is not available for this card. [ 601.030969][ T5868] em28xx 9-1:0.132: Closing input extension [ 601.065126][ T5868] em28xx 9-1:0.132: Freeing device [ 601.120352][ T5908] usb 6-1: usb_control_msg returned -32 [ 601.146942][ T5908] usbtmc 6-1:16.0: can't read capabilities [ 601.318390][ T5888] usb 1-1: new high-speed USB device number 24 using dummy_hcd [ 601.478361][ T5888] usb 1-1: Using ep0 maxpacket: 8 [ 601.486028][ T5888] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 601.497192][ T5888] usb 1-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 601.506555][ T5888] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 601.527381][ T5888] usb 1-1: config 0 descriptor?? [ 601.755365][ T5888] iowarrior 1-1:0.0: IOWarrior product=0x1512, serial= interface=0 now attached to iowarrior1 [ 601.850530][T18995] loop6: detected capacity change from 0 to 2640 [ 601.860509][ T5938] ldm_validate_partition_table(): Disk read failed. [ 601.867646][ T5938] Dev loop6: unable to read RDB block 0 [ 601.874302][ T5938] loop6: unable to read partition table [ 601.884284][T18995] ldm_validate_partition_table(): Disk read failed. [ 601.891655][T18995] Dev loop6: unable to read RDB block 0 [ 601.897996][T18995] loop6: unable to read partition table [ 601.906058][T18995] loop_reread_partitions: partition scan of loop6 (3Ÿ ¾‚³˜) failed (rc=-5) [ 601.921406][T18993] usbtmc 6-1:16.0: usb_control_msg returned -32 [ 601.951479][T18972] usbtmc 6-1:16.0: send_request_dev_dep_msg_in returned -90 [ 602.059909][ T5888] usb 6-1: USB disconnect, device number 72 [ 604.111934][ T5905] usb 1-1: USB disconnect, device number 24 [ 604.539209][ T9661] nci: nci_add_new_protocol: the target found does not have the desired protocol [ 605.909023][T18973] nci: nci_add_new_protocol: the target found does not have the desired protocol [ 606.900278][T19133] hsr_slave_0: hsr_addr_subst_dest: Unknown node [ 606.907438][T19133] hsr_slave_1: hsr_addr_subst_dest: Unknown node [ 607.178301][ T5888] usb 1-1: new full-speed USB device number 25 using dummy_hcd [ 607.278516][ T24] usb 9-1: new high-speed USB device number 42 using dummy_hcd [ 607.340669][ T5888] usb 1-1: config 0 has an invalid interface number: 128 but max is 0 [ 607.349258][ T5888] usb 1-1: config 0 has no interface number 0 [ 607.360489][ T5888] usb 1-1: New USB device found, idVendor=20b7, idProduct=1540, bcdDevice=b7.5a [ 607.379767][ T5888] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 607.399279][ T5888] usb 1-1: Product: syz [ 607.403588][ T5888] usb 1-1: Manufacturer: syz [ 607.418425][ T5888] usb 1-1: SerialNumber: syz [ 607.426551][ T5888] usb 1-1: config 0 descriptor?? [ 607.440659][ T24] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 607.453923][ T24] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 607.464449][ T24] usb 9-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 607.477204][ T24] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 607.492605][ T24] usb 9-1: config 0 descriptor?? [ 607.927233][ T24] keytouch 0003:0926:3333.006A: fixing up Keytouch IEC report descriptor [ 607.960630][ T24] input: HID 0926:3333 as /devices/platform/dummy_hcd.8/usb9/9-1/9-1:0.0/0003:0926:3333.006A/input/input105 [ 608.090142][ T24] keytouch 0003:0926:3333.006A: input,hidraw0: USB HID v0.00 Keyboard [HID 0926:3333] on usb-dummy_hcd.8-1/input0 [ 608.125948][T19142] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 608.161596][T19142] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 608.213022][ T5926] usb 9-1: USB disconnect, device number 42 [ 608.247582][T19154] netlink: 'syz.5.5076': attribute type 9 has an invalid length. [ 608.261028][ T5888] usb 1-1: Firmware version (0.0) predates our first public release. [ 608.277658][T19152] fido_id[19152]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.8/usb9/9-1/report_descriptor': No such file or directory [ 608.296489][ T5888] usb 1-1: Please update to version 0.2 or newer [ 608.304784][T19154] netlink: 'syz.5.5076': attribute type 11 has an invalid length. [ 608.318654][T19154] netlink: 'syz.5.5076': attribute type 12 has an invalid length. [ 608.338626][T19154] netlink: 210020 bytes leftover after parsing attributes in process `syz.5.5076'. [ 608.368505][T19154] netlink: 4 bytes leftover after parsing attributes in process `syz.5.5076'. [ 608.383859][ T5888] usb 1-1: USB disconnect, device number 25 [ 608.685983][T19162] hsr_slave_0: hsr_addr_subst_dest: Unknown node [ 608.692538][T19162] hsr_slave_1: hsr_addr_subst_dest: Unknown node [ 610.265264][ T5926] IPVS: starting estimator thread 0... [ 610.369843][T19218] IPVS: using max 26 ests per chain, 62400 per kthread [ 611.238350][ T5907] usb 1-1: new high-speed USB device number 26 using dummy_hcd [ 611.388348][ T5907] usb 1-1: Using ep0 maxpacket: 8 [ 611.399079][ T5907] usb 1-1: New USB device found, idVendor=0ccd, idProduct=10a3, bcdDevice=23.a2 [ 611.409034][ T5907] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 611.417350][ T5907] usb 1-1: Product: syz [ 611.421931][ T5907] usb 1-1: Manufacturer: syz [ 611.426882][ T5907] usb 1-1: SerialNumber: syz [ 611.454931][ T5907] usb 1-1: config 0 descriptor?? [ 611.602283][ T5825] Bluetooth: hci1: command 0x0406 tx timeout [ 611.699568][ T5907] usb 1-1: dvb_usb_v2: found a 'Terratec H7' in warm state [ 611.909719][T19243] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 611.922274][T19243] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 611.958425][T19273] semctl(GETNCNT/GETZCNT) is since 3.16 Single Unix Specification compliant. [ 611.958425][T19273] The task syz.7.5128 (19273) triggered the difference, watch for misbehavior. [ 612.144242][ T5907] usb write operation failed. (-71) [ 612.160299][ T5907] usb 1-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 612.178842][ T5907] dvbdev: DVB: registering new adapter (Terratec H7) [ 612.196530][ T5907] usb 1-1: media controller created [ 612.202457][ T5907] usb read operation failed. (-71) [ 612.208041][ T5907] usb write operation failed. (-71) [ 612.217497][ T5907] dvb_usb_az6007 1-1:0.0: probe with driver dvb_usb_az6007 failed with error -5 [ 612.242921][ T5907] usb 1-1: USB disconnect, device number 26 [ 613.128364][ T5888] usb 6-1: new high-speed USB device number 74 using dummy_hcd [ 613.291607][ T5888] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 613.302816][ T5888] usb 6-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 613.313217][ T5888] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 613.325244][ T5888] usb 6-1: config 0 descriptor?? [ 613.541779][ T5888] usbhid 6-1:0.0: can't add hid device: -71 [ 613.549313][ T5888] usbhid 6-1:0.0: probe with driver usbhid failed with error -71 [ 613.560031][ T5888] usb 6-1: USB disconnect, device number 74 [ 613.750896][T19299] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 613.780972][T19299] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 614.018394][ T44] usb 9-1: new high-speed USB device number 43 using dummy_hcd [ 614.058413][ T5888] usb 6-1: new high-speed USB device number 75 using dummy_hcd [ 614.168298][ T44] usb 9-1: Using ep0 maxpacket: 8 [ 614.177521][ T44] usb 9-1: New USB device found, idVendor=0ccd, idProduct=10a3, bcdDevice=23.a2 [ 614.187061][ T44] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 614.195205][ T44] usb 9-1: Product: syz [ 614.199663][ T44] usb 9-1: Manufacturer: syz [ 614.204305][ T44] usb 9-1: SerialNumber: syz [ 614.211456][ T44] usb 9-1: config 0 descriptor?? [ 614.218532][ T5888] usb 6-1: Using ep0 maxpacket: 32 [ 614.225934][ T5888] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 614.238039][ T5888] usb 6-1: New USB device found, idVendor=0f11, idProduct=1021, bcdDevice= 0.40 [ 614.247967][ T5888] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 614.264278][ T5888] usb 6-1: config 0 descriptor?? [ 614.273396][ T5888] ldusb 6-1:0.0: Interrupt out endpoint not found (using control endpoint instead) [ 614.284731][ T5888] ldusb 6-1:0.0: LD USB Device #0 now attached to major 180 minor 0 [ 614.428419][ T44] usb 9-1: dvb_usb_v2: found a 'Terratec H7' in warm state [ 614.501916][ C0] ldusb 6-1:0.0: Ring buffer overflow, 8 bytes dropped [ 614.645010][T19302] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 614.685644][T19302] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 614.724181][T19327] fuse: Bad value for 'fd' [ 614.835537][ C0] ldusb 6-1:0.0: Ring buffer overflow, 8 bytes dropped [ 614.908356][ T44] usb write operation failed. (-71) [ 614.918697][ T44] usb 9-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 614.943003][ T44] dvbdev: DVB: registering new adapter (Terratec H7) [ 614.952291][ T44] usb 9-1: media controller created [ 614.957956][ T44] usb read operation failed. (-71) [ 614.966598][ T44] usb write operation failed. (-71) [ 614.979885][ T44] dvb_usb_az6007 9-1:0.0: probe with driver dvb_usb_az6007 failed with error -5 [ 615.009892][ T44] usb 9-1: USB disconnect, device number 43 [ 615.037115][T19338] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 615.077326][ T5926] IPVS: starting estimator thread 0... [ 615.085375][T19338] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 615.170759][T19340] IPVS: using max 28 ests per chain, 67200 per kthread [ 615.695814][T19361] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 615.706201][T19361] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 615.917809][ T5926] usb 6-1: USB disconnect, device number 75 [ 615.955127][ T5926] ldusb 6-1:0.0: LD USB Device #0 now disconnected [ 616.188449][ T44] usb 9-1: new high-speed USB device number 44 using dummy_hcd [ 616.341262][ T44] usb 9-1: config index 0 descriptor too short (expected 28277, got 36) [ 616.350301][ T44] usb 9-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 616.363060][ T44] usb 9-1: config 0 has no interfaces? [ 616.370037][ T44] usb 9-1: New USB device found, idVendor=056a, idProduct=0063, bcdDevice= 0.00 [ 616.381817][ T44] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 616.398455][ T44] usb 9-1: config 0 descriptor?? [ 616.620223][ T44] usb 9-1: USB disconnect, device number 44 [ 617.540407][T19405] netlink: 'syz.7.5190': attribute type 2 has an invalid length. [ 617.567214][T19405] netlink: 'syz.7.5190': attribute type 1 has an invalid length. [ 617.581655][T19405] netlink: 'syz.7.5190': attribute type 8 has an invalid length. [ 617.598668][T19405] netlink: 44 bytes leftover after parsing attributes in process `syz.7.5190'. [ 619.698360][ T5926] usb 9-1: new high-speed USB device number 45 using dummy_hcd [ 619.862144][ T5926] usb 9-1: New USB device found, idVendor=1a86, idProduct=7522, bcdDevice=35.36 [ 619.878355][ T5926] usb 9-1: New USB device strings: Mfr=241, Product=2, SerialNumber=3 [ 619.886583][ T5926] usb 9-1: Product: syz [ 619.909327][ T5926] usb 9-1: Manufacturer: syz [ 619.913995][ T5926] usb 9-1: SerialNumber: syz [ 619.951346][ T5926] usb 9-1: config 0 descriptor?? [ 619.979045][ T5926] ch341 9-1:0.0: ch341-uart converter detected [ 621.001219][ T5926] usb 9-1: ch341-uart converter now attached to ttyUSB0 [ 621.210774][ T5907] usb 9-1: USB disconnect, device number 45 [ 621.233892][ T5907] ch341-uart ttyUSB0: ch341-uart converter now disconnected from ttyUSB0 [ 621.269146][ T5907] ch341 9-1:0.0: device disconnected [ 622.650209][T19585] netlink: 64 bytes leftover after parsing attributes in process `syz.0.5266'. [ 622.868406][ T5907] usb 9-1: new high-speed USB device number 46 using dummy_hcd [ 623.029203][ T5907] usb 9-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 623.062926][ T5907] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 255, changing to 11 [ 623.087624][ T5907] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 623.103959][ T5907] usb 9-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 623.124475][ T5907] usb 9-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 623.136067][ T5907] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 623.153076][ T5907] usb 9-1: config 0 descriptor?? [ 623.161853][T19583] raw-gadget.0 gadget.8: fail, usb_ep_enable returned -22 [ 623.365306][T19613] overlayfs: "xino" feature enabled using 3 upper inode bits. [ 623.411581][T19613] overlayfs: failed lookup in lower (/, name='tracing', err=-66): unsupported object type [ 623.423159][T19613] overlayfs: failed to look up (tracing) for ino (-66) [ 623.599332][ T5907] plantronics 0003:047F:FFFF.006B: reserved main item tag 0xd [ 623.619131][ T5907] plantronics 0003:047F:FFFF.006B: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.8-1/input0 [ 623.892230][ T5907] usb 9-1: USB disconnect, device number 46 [ 624.722464][T19667] dvmrp0: entered allmulticast mode [ 625.353366][T19695] dvmrp0: entered allmulticast mode [ 625.539819][ T61] nci: nci_rf_discover_ntf_packet: unsupported rf_tech_and_mode 0xc1 [ 626.744652][T19738] netlink: 'syz.0.5324': attribute type 12 has an invalid length. [ 627.492682][ T5907] usb 9-1: new high-speed USB device number 47 using dummy_hcd [ 627.662497][ T5907] usb 9-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 627.688450][ T5907] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 627.709398][ T5907] usb 9-1: Product: syz [ 627.721720][T19780] binder: 19778:19780 ioctl c0306201 200000000640 returned -22 [ 627.726709][ T5907] usb 9-1: Manufacturer: syz [ 627.735137][ T5907] usb 9-1: SerialNumber: syz [ 628.351503][ T5888] usb 8-1: USB disconnect, device number 55 [ 628.768869][ T5907] cdc_ncm 9-1:1.0: MAC-Address: 42:42:42:42:42:42 [ 628.862600][T19799] @: renamed from vlan0 (while UP) [ 628.937499][ T5825] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 628.950021][ T5825] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 628.959655][ T5825] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 628.983876][ T5907] cdc_ncm 9-1:1.0 usb0: register 'cdc_ncm' at usb-dummy_hcd.8-1, CDC NCM (NO ZLP), 42:42:42:42:42:42 [ 628.995969][ T5825] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 629.003826][ T5825] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 629.028457][ T5907] usb 9-1: USB disconnect, device number 47 [ 629.046528][ T5907] cdc_ncm 9-1:1.0 usb0: unregister 'cdc_ncm' usb-dummy_hcd.8-1, CDC NCM (NO ZLP) [ 629.534073][T19811] "syz.0.5359" (19811) uses obsolete ecb(arc4) skcipher [ 629.700868][T19800] chnl_net:caif_netlink_parms(): no params data found [ 629.774445][T19824] @: renamed from vlan0 (while UP) [ 629.939322][T19800] bridge0: port 1(bridge_slave_0) entered blocking state [ 629.946652][T19800] bridge0: port 1(bridge_slave_0) entered disabled state [ 629.957094][T19800] bridge_slave_0: entered allmulticast mode [ 629.965638][T19800] bridge_slave_0: entered promiscuous mode [ 629.981565][T19800] bridge0: port 2(bridge_slave_1) entered blocking state [ 629.988969][T19800] bridge0: port 2(bridge_slave_1) entered disabled state [ 629.996260][T19800] bridge_slave_1: entered allmulticast mode [ 630.010067][ T1299] ieee802154 phy0 wpan0: encryption failed: -22 [ 630.016632][ T1299] ieee802154 phy1 wpan1: encryption failed: -22 [ 630.045528][T19800] bridge_slave_1: entered promiscuous mode [ 630.181261][T19800] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 630.212440][T19800] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 630.355185][T19800] team0: Port device team_slave_0 added [ 630.392376][T19800] team0: Port device team_slave_1 added [ 630.529860][T19800] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 630.545451][T19800] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 630.573565][T19800] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 630.587233][T19800] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 630.600398][T19800] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 630.633890][T19800] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 630.762082][T19800] hsr_slave_0: entered promiscuous mode [ 630.790000][T19800] hsr_slave_1: entered promiscuous mode [ 631.038601][T18005] Bluetooth: hci3: command tx timeout [ 632.362245][T19800] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 632.412265][T19800] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 632.441821][T19800] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 632.465065][T19800] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 632.707907][T19800] 8021q: adding VLAN 0 to HW filter on device bond0 [ 632.765936][T19800] 8021q: adding VLAN 0 to HW filter on device team0 [ 632.790469][ T51] bridge0: port 1(bridge_slave_0) entered blocking state [ 632.797709][ T51] bridge0: port 1(bridge_slave_0) entered forwarding state [ 632.837519][T15929] bridge0: port 2(bridge_slave_1) entered blocking state [ 632.844872][T15929] bridge0: port 2(bridge_slave_1) entered forwarding state [ 633.077245][ T5825] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 633.091786][ T5825] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 633.101137][ T5825] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 633.114175][ T5825] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 633.121472][ T5825] Bluetooth: hci3: command tx timeout [ 633.130338][ T5823] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 633.527406][T19800] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 633.817532][T19800] veth0_vlan: entered promiscuous mode [ 633.890113][T19800] veth1_vlan: entered promiscuous mode [ 633.919454][T19904] chnl_net:caif_netlink_parms(): no params data found [ 634.130479][T19800] veth0_macvtap: entered promiscuous mode [ 634.181412][T19800] veth1_macvtap: entered promiscuous mode [ 634.236883][T19904] bridge0: port 1(bridge_slave_0) entered blocking state [ 634.257864][T19904] bridge0: port 1(bridge_slave_0) entered disabled state [ 634.274831][T19904] bridge_slave_0: entered allmulticast mode [ 634.301360][T19904] bridge_slave_0: entered promiscuous mode [ 634.341800][T19904] bridge0: port 2(bridge_slave_1) entered blocking state [ 634.350089][T19904] bridge0: port 2(bridge_slave_1) entered disabled state [ 634.357447][T19904] bridge_slave_1: entered allmulticast mode [ 634.376939][T19904] bridge_slave_1: entered promiscuous mode [ 634.503729][T19800] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 634.549328][T19904] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 634.602775][T19904] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 634.713635][T19800] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 634.742809][T19904] team0: Port device team_slave_0 added [ 634.769668][T19904] team0: Port device team_slave_1 added [ 634.852751][ T61] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 634.865192][ T61] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 634.884198][T19904] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 634.893093][T19904] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 634.920878][T19904] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 634.932573][ T61] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 634.948725][T19904] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 634.956691][T19904] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 634.984693][T19904] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 635.000594][ T61] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 635.136946][T19904] hsr_slave_0: entered promiscuous mode [ 635.160644][T19904] hsr_slave_1: entered promiscuous mode [ 635.167626][T19904] debugfs: 'hsr0' already exists in 'hsr' [ 635.189034][T19904] Cannot create hsr debugfs directory [ 635.198993][ T5823] Bluetooth: hci0: command tx timeout [ 635.205604][T18005] Bluetooth: hci3: command tx timeout [ 635.502797][ T61] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 635.528826][ T61] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 635.749475][ T61] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 635.767679][ T61] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 637.023693][T19904] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 637.031637][T20041] netlink: 1335 bytes leftover after parsing attributes in process `syz.0.5421'. [ 637.078665][T19904] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 637.102607][T19904] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 637.148219][T19904] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 637.254620][T20050] dvmrp0: left allmulticast mode [ 637.278398][ T5823] Bluetooth: hci0: command tx timeout [ 637.284227][T18005] Bluetooth: hci3: command tx timeout [ 637.499604][T19904] 8021q: adding VLAN 0 to HW filter on device bond0 [ 637.571719][ T12] Bluetooth: (null): Invalid header checksum [ 637.579214][T19904] 8021q: adding VLAN 0 to HW filter on device team0 [ 637.646947][ T9661] bridge0: port 1(bridge_slave_0) entered blocking state [ 637.654233][ T9661] bridge0: port 1(bridge_slave_0) entered forwarding state [ 637.674086][ T61] Bluetooth: (null): Invalid header checksum [ 637.715007][ T61] bridge0: port 2(bridge_slave_1) entered blocking state [ 637.722294][ T61] bridge0: port 2(bridge_slave_1) entered forwarding state [ 637.779775][ T61] Bluetooth: (null): Invalid header checksum [ 637.892165][ T36] Bluetooth: (null): Invalid header checksum [ 638.005767][ T12] Bluetooth: (null): Invalid header checksum [ 638.113768][ T74] Bluetooth: (null): Invalid header checksum [ 638.218933][ T12] Bluetooth: (null): Invalid header checksum [ 638.334228][ T4478] Bluetooth: (null): Invalid header checksum [ 638.490589][T19904] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 639.214397][T19904] veth0_vlan: entered promiscuous mode [ 639.261237][T19904] veth1_vlan: entered promiscuous mode [ 639.316887][T19904] veth0_macvtap: entered promiscuous mode [ 639.358993][T18005] Bluetooth: hci0: command tx timeout [ 639.366341][T19904] veth1_macvtap: entered promiscuous mode [ 639.456647][T19904] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 639.563800][T19904] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 639.593280][ T9661] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 639.618133][ T9661] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 639.651447][ T9661] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 639.656496][T20142] netlink: 172 bytes leftover after parsing attributes in process `syz.1.5446'. [ 639.694870][ T9661] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 639.963260][ T3544] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 639.988852][ T3544] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 640.069031][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 640.103532][ T36] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 640.144040][ T36] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 641.448269][T18005] Bluetooth: hci0: command tx timeout [ 641.653549][T20208] netlink: 'syz.8.5463': attribute type 1 has an invalid length. [ 641.698522][T20208] netlink: 'syz.8.5463': attribute type 4 has an invalid length. [ 641.716637][T20208] netlink: 9462 bytes leftover after parsing attributes in process `syz.8.5463'. [ 642.310955][T20238] netlink: 20 bytes leftover after parsing attributes in process `syz.8.5473'. [ 642.633591][T20253] overlayfs: failed to decode file handle (len=6, type=251, flags=0, err=-61) [ 644.510435][ T5908] usb 5-1: new high-speed USB device number 17 using dummy_hcd [ 644.688685][ T5908] usb 5-1: Using ep0 maxpacket: 8 [ 644.704529][ T5908] usb 5-1: config 179 has an invalid interface number: 65 but max is 0 [ 644.729996][ T5908] usb 5-1: config 179 has no interface number 0 [ 644.758650][ T5908] usb 5-1: config 179 interface 65 altsetting 0 endpoint 0xF has an invalid bInterval 0, changing to 7 [ 644.792118][ T5908] usb 5-1: config 179 interface 65 altsetting 0 endpoint 0xF has invalid maxpacket 1025, setting to 1024 [ 644.835371][ T5908] usb 5-1: config 179 interface 65 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 644.873277][ T5908] usb 5-1: config 179 interface 65 altsetting 0 endpoint 0x83 has invalid maxpacket 41728, setting to 1024 [ 644.936740][ T5908] usb 5-1: config 179 interface 65 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 23 [ 644.993187][ T5908] usb 5-1: New USB device found, idVendor=12ab, idProduct=90a3, bcdDevice=1e.eb [ 645.037257][ T5908] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 645.087493][T20307] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 645.341277][ T5908] input: Generic X-Box pad as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:179.65/input/input107 [ 645.543853][T20307] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 645.606205][T20307] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 645.955135][T20302] usb 5-1: USB disconnect, device number 17 [ 645.955195][ C1] xpad 5-1:179.65: xpad_irq_in - usb_submit_urb failed with result -19 [ 645.969545][ C1] xpad 5-1:179.65: xpad_irq_out - usb_submit_urb failed with result -19 [ 646.433563][T20351] syzkaller1: entered promiscuous mode [ 646.459405][T20351] syzkaller1: entered allmulticast mode [ 651.106170][T20480] overlayfs: failed to clone upperpath [ 652.088406][T20507] netlink: 'syz.0.5550': attribute type 1 has an invalid length. [ 652.122683][T18005] Bluetooth: hci2: unexpected event for opcode 0x0804 [ 652.815169][T20539] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 653.057140][T20550] Bluetooth: Invalid esc byte 0x0b [ 653.066743][ T51] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 653.098477][T20336] Bluetooth: (null): Invalid header checksum [ 653.317149][ T51] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 653.469414][ T51] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 653.732171][ T51] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 653.854804][ T5823] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 653.871897][ T5823] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 653.888451][ T5823] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 653.903625][ T5823] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 653.921363][ T5823] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 654.195784][ T51] bridge_slave_1: left allmulticast mode [ 654.216408][ T51] bridge_slave_1: left promiscuous mode [ 654.238848][ T51] bridge0: port 2(bridge_slave_1) entered disabled state [ 654.281198][ T51] bridge_slave_0: left allmulticast mode [ 654.297243][ T51] bridge_slave_0: left promiscuous mode [ 654.315359][ T51] bridge0: port 1(bridge_slave_0) entered disabled state [ 655.332383][ T51] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 655.375234][ T51] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 655.400473][ T51] bond0 (unregistering): Released all slaves [ 655.998421][ T5823] Bluetooth: hci0: command tx timeout [ 656.911610][T20646] 9pnet_virtio: no channels available for device ./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa [ 657.092888][T20651] @0Ù: renamed from bond_slave_1 (while UP) [ 657.226507][ T51] hsr_slave_0: left promiscuous mode [ 657.268655][ T51] hsr_slave_1: left promiscuous mode [ 657.285279][ T51] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 657.293724][ T51] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 657.315568][ T51] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 657.334157][ T51] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 657.411196][ T51] veth1_macvtap: left promiscuous mode [ 657.427027][ T51] veth0_macvtap: left promiscuous mode [ 657.440312][ T51] veth1_vlan: left promiscuous mode [ 657.455380][ T51] veth0_vlan: left promiscuous mode [ 658.080465][ T5823] Bluetooth: hci0: command tx timeout [ 658.139246][T20678] netlink: 'syz.1.5591': attribute type 10 has an invalid length. [ 658.200254][T20678] netlink: 156 bytes leftover after parsing attributes in process `syz.1.5591'. [ 658.414320][T20680] netlink: 8 bytes leftover after parsing attributes in process `syz.1.5591'. [ 659.579192][ T51] team0 (unregistering): Port device team_slave_1 removed [ 659.752465][ T51] team0 (unregistering): Port device team_slave_0 removed [ 660.158312][ T5823] Bluetooth: hci0: command tx timeout [ 660.512944][T20680] : entered promiscuous mode [ 660.709411][T20572] chnl_net:caif_netlink_parms(): no params data found [ 661.091148][T20572] bridge0: port 1(bridge_slave_0) entered blocking state [ 661.112915][T20572] bridge0: port 1(bridge_slave_0) entered disabled state [ 661.148558][T20572] bridge_slave_0: entered allmulticast mode [ 661.168711][T20572] bridge_slave_0: entered promiscuous mode [ 661.184956][T20572] bridge0: port 2(bridge_slave_1) entered blocking state [ 661.212405][T20572] bridge0: port 2(bridge_slave_1) entered disabled state [ 661.228554][T20572] bridge_slave_1: entered allmulticast mode [ 661.249658][T20572] bridge_slave_1: entered promiscuous mode [ 661.316941][T20734] syzkaller0: entered allmulticast mode [ 661.388614][T20732] syzkaller0: entered promiscuous mode [ 661.402422][T20572] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 661.457221][T20732] syzkaller0 (unregistering): left allmulticast mode [ 661.482282][T20732] syzkaller0 (unregistering): left promiscuous mode [ 661.562678][T20572] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 661.872704][T20572] team0: Port device team_slave_0 added [ 661.884918][T20572] team0: Port device team_slave_1 added [ 662.058045][T20572] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 662.087011][T20572] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 662.159796][T20572] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 662.222560][T20572] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 662.238610][ T5823] Bluetooth: hci0: command tx timeout [ 662.244371][T20572] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 662.273055][T20572] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 662.485180][T20572] hsr_slave_0: entered promiscuous mode [ 662.519978][T20572] hsr_slave_1: entered promiscuous mode [ 662.541485][T20572] debugfs: 'hsr0' already exists in 'hsr' [ 662.561359][T20572] Cannot create hsr debugfs directory [ 663.150755][T20786] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 663.302804][T20572] netdevsim netdevsim3 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 663.428052][T20572] netdevsim netdevsim3 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 663.626096][T20572] netdevsim netdevsim3 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 663.892858][T20572] netdevsim netdevsim3 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 664.253712][T20572] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 664.282600][T20572] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 664.316174][T20572] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 664.371803][T20572] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 664.795175][T20572] 8021q: adding VLAN 0 to HW filter on device bond0 [ 664.853457][T20572] 8021q: adding VLAN 0 to HW filter on device team0 [ 664.882221][ T36] bridge0: port 1(bridge_slave_0) entered blocking state [ 664.889659][ T36] bridge0: port 1(bridge_slave_0) entered forwarding state [ 664.939890][ T61] bridge0: port 2(bridge_slave_1) entered blocking state [ 664.947160][ T61] bridge0: port 2(bridge_slave_1) entered forwarding state [ 665.617792][T20572] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 665.784636][T20572] veth0_vlan: entered promiscuous mode [ 665.830703][ T5905] IPVS: starting estimator thread 0... [ 665.852800][T20572] veth1_vlan: entered promiscuous mode [ 665.926092][T20876] IPVS: using max 29 ests per chain, 69600 per kthread [ 665.965177][T20572] veth0_macvtap: entered promiscuous mode [ 666.012409][T20572] veth1_macvtap: entered promiscuous mode [ 666.065571][T20572] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 666.129088][T20572] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 666.160376][T15929] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 666.183526][T15929] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 666.205321][T15929] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 666.235579][T15929] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 666.381862][ T4478] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 666.398994][ T4478] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 666.486880][T15929] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 666.510392][T15929] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 666.751567][T20894] overlayfs: upper fs does not support file handles, falling back to index=off. [ 667.664714][ T44] IPVS: starting estimator thread 0... [ 667.809061][T20921] IPVS: using max 28 ests per chain, 67200 per kthread [ 667.969317][T20928] Dead loop on virtual device ip6_vti0, fix it urgently! [ 668.030774][T20928] Dead loop on virtual device ip6_vti0, fix it urgently! [ 668.072620][T20928] Dead loop on virtual device ip6_vti0, fix it urgently! [ 668.136414][T20928] Dead loop on virtual device ip6_vti0, fix it urgently! [ 668.174470][T20928] Dead loop on virtual device ip6_vti0, fix it urgently! [ 668.216038][T20928] Dead loop on virtual device ip6_vti0, fix it urgently! [ 668.260033][T20928] Dead loop on virtual device ip6_vti0, fix it urgently! [ 671.402353][T21009] overlayfs: failed to clone upperpath [ 673.427908][T21071] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 675.267334][T21103] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 675.281861][ T5823] Bluetooth: hci0: command 0x0406 tx timeout [ 675.436118][ T30] audit: type=1326 audit(1764314816.058:66): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21111 comm="syz.8.5711" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff3c758f749 code=0x7ffc0000 [ 675.459563][ T30] audit: type=1326 audit(1764314816.058:67): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21111 comm="syz.8.5711" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff3c758f749 code=0x7ffc0000 [ 675.484248][ T30] audit: type=1326 audit(1764314816.058:68): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21111 comm="syz.8.5711" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7ff3c758f749 code=0x7ffc0000 [ 675.549569][ T30] audit: type=1326 audit(1764314816.058:69): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21111 comm="syz.8.5711" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff3c758f749 code=0x7ffc0000 [ 675.577136][ T30] audit: type=1326 audit(1764314816.058:70): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21111 comm="syz.8.5711" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff3c758f749 code=0x7ffc0000 [ 675.613041][ T30] audit: type=1326 audit(1764314816.058:71): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21111 comm="syz.8.5711" exe="/root/syz-executor" sig=0 arch=c000003e syscall=49 compat=0 ip=0x7ff3c758f749 code=0x7ffc0000 [ 675.643018][ T30] audit: type=1326 audit(1764314816.058:72): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21111 comm="syz.8.5711" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff3c758f749 code=0x7ffc0000 [ 675.671889][ T30] audit: type=1326 audit(1764314816.058:73): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21111 comm="syz.8.5711" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff3c758f749 code=0x7ffc0000 [ 675.701136][ T30] audit: type=1326 audit(1764314816.058:74): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21111 comm="syz.8.5711" exe="/root/syz-executor" sig=0 arch=c000003e syscall=42 compat=0 ip=0x7ff3c758f749 code=0x7ffc0000 [ 675.753666][ T30] audit: type=1326 audit(1764314816.058:75): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21111 comm="syz.8.5711" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff3c758f749 code=0x7ffc0000 [ 675.792152][ T36] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 675.818889][T21115] syzkaller1: entered promiscuous mode [ 675.832932][T21115] syzkaller1: entered allmulticast mode [ 675.936468][ T36] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 676.025611][ T36] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 676.120789][ T36] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 676.261811][ T5823] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 676.273454][ T5823] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 676.282508][ T5823] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 676.291849][ T5823] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 676.300827][ T5823] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 676.437681][T21134] ------------[ cut here ]------------ [ 676.444292][T21134] intf 08:02:11:00:00:00 [link=0]: bad STA 08:02:11:00:00:01 bandwidth 20 MHz (0) > channel config 10 MHz (7) [ 676.456229][T21134] WARNING: drivers/net/wireless/virtual/mac80211_hwsim.c:2696 at 0x0, CPU#1: syz.8.5719/21134 [ 676.466650][T21134] Modules linked in: [ 676.471135][T21134] CPU: 1 UID: 0 PID: 21134 Comm: syz.8.5719 Not tainted syzkaller #0 PREEMPT(full) [ 676.480594][T21134] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 676.490925][T21134] RIP: 0010:mac80211_hwsim_sta_rc_update+0x6f4/0x860 [ 676.500225][T21134] Code: 85 d2 00 00 00 45 8b 36 44 89 f7 e8 a6 20 00 00 48 8b 7c 24 28 48 8b 74 24 30 89 ea 48 8b 4c 24 10 41 89 d8 45 89 f9 41 56 50 <67> 48 0f b9 3a 48 83 c4 10 e9 08 ff ff ff e8 b9 79 e9 fa 90 0f 0b [ 676.521549][T21134] RSP: 0018:ffffc9000c6e6df8 EFLAGS: 00010287 [ 676.527676][T21134] RAX: 000000000000000a RBX: 0000000000000014 RCX: ffff88807dbe8ec0 [ 676.535763][T21134] RDX: 0000000000000000 RSI: ffff88807d1d3012 RDI: ffffffff8fcf5f60 [ 676.543845][T21134] RBP: 0000000000000000 R08: 0000000000000014 R09: 0000000000000000 [ 676.552341][T21134] R10: 000000000000000d R11: 0000000000000002 R12: 0000000000000000 [ 676.560936][T21134] R13: dffffc0000000000 R14: 0000000000000007 R15: 0000000000000000 [ 676.569028][T21134] FS: 00007ff3c84ed6c0(0000) GS:ffff888125b03000(0000) knlGS:0000000000000000 [ 676.577995][T21134] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 676.584724][T21134] CR2: 0000200000001080 CR3: 000000005c3fa000 CR4: 00000000003526f0 [ 676.592827][T21134] Call Trace: [ 676.597863][T21134] [ 676.601898][T21134] ? mac80211_hwsim_sta_rc_update+0x73/0x860 [ 676.607971][T21134] mac80211_hwsim_sta_add+0xa4/0x350 [ 676.613345][T21134] drv_sta_state+0x86a/0x1770 [ 676.618074][T21134] sta_info_insert_rcu+0x1a30/0x2840 [ 676.623963][T21134] ? sta_info_insert_rcu+0x349/0x2840 [ 676.629466][T21134] ? __pfx_sta_info_insert_rcu+0x10/0x10 [ 676.635145][T21134] ? rate_control_rate_init_all_links+0x186/0x1a0 [ 676.641981][T21134] ? ieee80211_add_station+0x4f1/0x6a0 [ 676.647485][T21134] sta_info_insert+0x16/0xc0 [ 676.652205][T21134] rdev_add_station+0xfc/0x270 [ 676.657020][T21134] nl80211_new_station+0x1755/0x1b70 [ 676.662504][T21134] ? __pfx_nl80211_new_station+0x10/0x10 [ 676.668261][T21134] ? netlink_rcv_skb+0x208/0x470 [ 676.673265][T21134] ? nl80211_pre_doit+0x4d5/0x8e0 [ 676.678424][T21134] genl_family_rcv_msg_doit+0x215/0x300 [ 676.684019][T21134] ? __pfx_genl_family_rcv_msg_doit+0x10/0x10 [ 676.690187][T21134] ? bpf_lsm_capable+0x9/0x20 [ 676.694915][T21134] ? security_capable+0x7e/0x2e0 [ 676.701040][T21134] genl_rcv_msg+0x60e/0x790 [ 676.705607][T21134] ? __pfx_genl_rcv_msg+0x10/0x10 [ 676.711730][T21134] ? __pfx_nl80211_pre_doit+0x10/0x10 [ 676.717162][T21134] ? __pfx_nl80211_new_station+0x10/0x10 [ 676.723155][T21134] ? __pfx_nl80211_post_doit+0x10/0x10 [ 676.728760][T21134] netlink_rcv_skb+0x208/0x470 [ 676.733657][T21134] ? __pfx_genl_rcv_msg+0x10/0x10 [ 676.738848][T21134] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 676.744228][T21134] ? down_read+0x274/0x2e0 [ 676.748782][T21134] ? genl_rcv+0xd/0x40 [ 676.752906][T21134] genl_rcv+0x28/0x40 [ 676.756927][T21134] netlink_unicast+0x82f/0x9e0 [ 676.761841][T21134] ? __pfx_netlink_unicast+0x10/0x10 [ 676.767194][T21134] ? netlink_sendmsg+0x642/0xb30 [ 676.772308][T21134] ? skb_put+0x11b/0x210 [ 676.776616][T21134] netlink_sendmsg+0x805/0xb30 [ 676.781502][T21134] ? aa_sk_perm+0x15f/0x920 [ 676.786494][T21134] ? __pfx_netlink_sendmsg+0x10/0x10 [ 676.791939][T21134] ? tomoyo_socket_sendmsg_permission+0x1e1/0x300 [ 676.798608][T21134] ? __pfx_netlink_sendmsg+0x10/0x10 [ 676.805090][T21134] sock_sendmsg_nosec+0x18f/0x1d0 [ 676.811352][T21134] ____sys_sendmsg+0x577/0x880 [ 676.816186][T21134] ? __pfx_____sys_sendmsg+0x10/0x10 [ 676.821625][T21134] ? import_iovec+0x74/0xa0 [ 676.826194][T21134] ___sys_sendmsg+0x21f/0x2a0 [ 676.830971][T21134] ? __pfx____sys_sendmsg+0x10/0x10 [ 676.836218][T21134] ? futex_wake+0x4b2/0x560 [ 676.840894][T21134] ? __fget_files+0x2a/0x420 [ 676.845524][T21134] ? __fget_files+0x3a0/0x420 [ 676.850350][T21134] __x64_sys_sendmsg+0x19b/0x260 [ 676.855334][T21134] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 676.860943][T21134] ? do_syscall_64+0xbe/0xf80 [ 676.865672][T21134] do_syscall_64+0xfa/0xf80 [ 676.870297][T21134] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 676.876409][T21134] ? clear_bhb_loop+0x60/0xb0 [ 676.881410][T21134] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 676.887349][T21134] RIP: 0033:0x7ff3c758f749 [ 676.891848][T21134] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 676.912832][T21134] RSP: 002b:00007ff3c84ed038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 676.922405][T21134] RAX: ffffffffffffffda RBX: 00007ff3c77e5fa0 RCX: 00007ff3c758f749 [ 676.930502][T21134] RDX: 0000000020000000 RSI: 0000200000001080 RDI: 0000000000000006 [ 676.938563][T21134] RBP: 00007ff3c7613f91 R08: 0000000000000000 R09: 0000000000000000 [ 676.946566][T21134] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 676.954728][T21134] R13: 00007ff3c77e6038 R14: 00007ff3c77e5fa0 R15: 00007ffc8cfd6508 [ 676.963325][T21134] [ 676.966397][T21134] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 676.973713][T21134] CPU: 1 UID: 0 PID: 21134 Comm: syz.8.5719 Not tainted syzkaller #0 PREEMPT(full) [ 676.983120][T21134] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 676.993232][T21134] Call Trace: [ 676.996548][T21134] [ 676.999510][T21134] dump_stack_lvl+0x99/0x250 [ 677.004140][T21134] ? __asan_memcpy+0x40/0x70 [ 677.008778][T21134] ? __pfx_dump_stack_lvl+0x10/0x10 [ 677.014107][T21134] ? __pfx__printk+0x10/0x10 [ 677.018770][T21134] vpanic+0x237/0x6d0 [ 677.022787][T21134] ? __pfx_vpanic+0x10/0x10 [ 677.027398][T21134] ? is_bpf_text_address+0x292/0x2b0 [ 677.032710][T21134] ? is_bpf_text_address+0x26/0x2b0 [ 677.037943][T21134] panic+0xb9/0xc0 [ 677.041917][T21134] ? __pfx_panic+0x10/0x10 [ 677.046391][T21134] __warn+0x317/0x4b0 [ 677.050415][T21134] __report_bug+0x288/0x500 [ 677.054962][T21134] ? __pfx___report_bug+0x10/0x10 [ 677.060035][T21134] ? lockdep_unlock+0x89/0x120 [ 677.064822][T21134] ? __lock_acquire+0x146f/0x2cf0 [ 677.069912][T21134] report_bug_entry+0x16a/0x220 [ 677.074819][T21134] ? mac80211_hwsim_sta_rc_update+0x6f4/0x860 [ 677.080909][T21134] ? mac80211_hwsim_sta_rc_update+0x6f9/0x860 [ 677.087006][T21134] handle_bug+0xca/0x200 [ 677.091270][T21134] exc_invalid_op+0x1a/0x50 [ 677.095786][T21134] asm_exc_invalid_op+0x1a/0x20 [ 677.100647][T21134] RIP: 0010:mac80211_hwsim_sta_rc_update+0x6f4/0x860 [ 677.107423][T21134] Code: 85 d2 00 00 00 45 8b 36 44 89 f7 e8 a6 20 00 00 48 8b 7c 24 28 48 8b 74 24 30 89 ea 48 8b 4c 24 10 41 89 d8 45 89 f9 41 56 50 <67> 48 0f b9 3a 48 83 c4 10 e9 08 ff ff ff e8 b9 79 e9 fa 90 0f 0b [ 677.127136][T21134] RSP: 0018:ffffc9000c6e6df8 EFLAGS: 00010287 [ 677.133240][T21134] RAX: 000000000000000a RBX: 0000000000000014 RCX: ffff88807dbe8ec0 [ 677.141237][T21134] RDX: 0000000000000000 RSI: ffff88807d1d3012 RDI: ffffffff8fcf5f60 [ 677.149238][T21134] RBP: 0000000000000000 R08: 0000000000000014 R09: 0000000000000000 [ 677.157329][T21134] R10: 000000000000000d R11: 0000000000000002 R12: 0000000000000000 [ 677.165318][T21134] R13: dffffc0000000000 R14: 0000000000000007 R15: 0000000000000000 [ 677.173332][T21134] ? hwsim_get_chanwidth+0x15b/0x1a0 [ 677.178646][T21134] ? mac80211_hwsim_sta_rc_update+0x73/0x860 [ 677.184646][T21134] mac80211_hwsim_sta_add+0xa4/0x350 [ 677.189946][T21134] drv_sta_state+0x86a/0x1770 [ 677.194738][T21134] sta_info_insert_rcu+0x1a30/0x2840 [ 677.200046][T21134] ? sta_info_insert_rcu+0x349/0x2840 [ 677.205454][T21134] ? __pfx_sta_info_insert_rcu+0x10/0x10 [ 677.211201][T21134] ? rate_control_rate_init_all_links+0x186/0x1a0 [ 677.217641][T21134] ? ieee80211_add_station+0x4f1/0x6a0 [ 677.223240][T21134] sta_info_insert+0x16/0xc0 [ 677.227852][T21134] rdev_add_station+0xfc/0x270 [ 677.232643][T21134] nl80211_new_station+0x1755/0x1b70 [ 677.237959][T21134] ? __pfx_nl80211_new_station+0x10/0x10 [ 677.243605][T21134] ? netlink_rcv_skb+0x208/0x470 [ 677.248577][T21134] ? nl80211_pre_doit+0x4d5/0x8e0 [ 677.253628][T21134] genl_family_rcv_msg_doit+0x215/0x300 [ 677.259209][T21134] ? __pfx_genl_family_rcv_msg_doit+0x10/0x10 [ 677.265311][T21134] ? bpf_lsm_capable+0x9/0x20 [ 677.270034][T21134] ? security_capable+0x7e/0x2e0 [ 677.275106][T21134] genl_rcv_msg+0x60e/0x790 [ 677.282679][T21134] ? __pfx_genl_rcv_msg+0x10/0x10 [ 677.287831][T21134] ? __pfx_nl80211_pre_doit+0x10/0x10 [ 677.293272][T21134] ? __pfx_nl80211_new_station+0x10/0x10 [ 677.298918][T21134] ? __pfx_nl80211_post_doit+0x10/0x10 [ 677.304414][T21134] netlink_rcv_skb+0x208/0x470 [ 677.309200][T21134] ? __pfx_genl_rcv_msg+0x10/0x10 [ 677.314336][T21134] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 677.319668][T21134] ? down_read+0x274/0x2e0 [ 677.324215][T21134] ? genl_rcv+0xd/0x40 [ 677.328303][T21134] genl_rcv+0x28/0x40 [ 677.332318][T21134] netlink_unicast+0x82f/0x9e0 [ 677.337124][T21134] ? __pfx_netlink_unicast+0x10/0x10 [ 677.342523][T21134] ? netlink_sendmsg+0x642/0xb30 [ 677.347557][T21134] ? skb_put+0x11b/0x210 [ 677.351847][T21134] netlink_sendmsg+0x805/0xb30 [ 677.356628][T21134] ? aa_sk_perm+0x15f/0x920 [ 677.361158][T21134] ? __pfx_netlink_sendmsg+0x10/0x10 [ 677.366461][T21134] ? tomoyo_socket_sendmsg_permission+0x1e1/0x300 [ 677.372997][T21134] ? __pfx_netlink_sendmsg+0x10/0x10 [ 677.378328][T21134] sock_sendmsg_nosec+0x18f/0x1d0 [ 677.383555][T21134] ____sys_sendmsg+0x577/0x880 [ 677.388391][T21134] ? __pfx_____sys_sendmsg+0x10/0x10 [ 677.393761][T21134] ? import_iovec+0x74/0xa0 [ 677.398313][T21134] ___sys_sendmsg+0x21f/0x2a0 [ 677.403033][T21134] ? __pfx____sys_sendmsg+0x10/0x10 [ 677.408276][T21134] ? futex_wake+0x4b2/0x560 [ 677.412839][T21134] ? __fget_files+0x2a/0x420 [ 677.417552][T21134] ? __fget_files+0x3a0/0x420 [ 677.422280][T21134] __x64_sys_sendmsg+0x19b/0x260 [ 677.427297][T21134] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 677.432976][T21134] ? do_syscall_64+0xbe/0xf80 [ 677.437709][T21134] do_syscall_64+0xfa/0xf80 [ 677.442255][T21134] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 677.448352][T21134] ? clear_bhb_loop+0x60/0xb0 [ 677.453050][T21134] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 677.458967][T21134] RIP: 0033:0x7ff3c758f749 [ 677.463411][T21134] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 677.483585][T21134] RSP: 002b:00007ff3c84ed038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 677.492031][T21134] RAX: ffffffffffffffda RBX: 00007ff3c77e5fa0 RCX: 00007ff3c758f749 [ 677.500025][T21134] RDX: 0000000020000000 RSI: 0000200000001080 RDI: 0000000000000006 [ 677.508086][T21134] RBP: 00007ff3c7613f91 R08: 0000000000000000 R09: 0000000000000000 [ 677.516078][T21134] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 677.524127][T21134] R13: 00007ff3c77e6038 R14: 00007ff3c77e5fa0 R15: 00007ffc8cfd6508 [ 677.532228][T21134] [ 677.535608][T21134] Kernel Offset: disabled [ 677.539939][T21134] Rebooting in 86400 seconds..