last executing test programs: 3.495135868s ago: executing program 2 (id=1791): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x6, 0xb, &(0x7f0000000400)=ANY=[@ANYBLOB="180000000300000000000000010000001801000020756c0000000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000009002000850000000600000095"], &(0x7f0000000000)='GPL\x00', 0x2, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp=0x25, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x99ec}, 0x94) r1 = socket$inet_udp(0x2, 0x2, 0x0) r2 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_GET_CHARDEV(r2, &(0x7f0000000380)={0x0, 0xfffffffffffffed4, &(0x7f0000000240)={&(0x7f0000000280)={0x18, 0x140f, 0x1, 0x70bd26, 0x25dfdbfa, "", [@RDMA_NLDEV_ATTR_CHARDEV_TYPE={0x7, 0x45, 'sa\x00'}]}, 0x18}, 0x1, 0x0, 0x0, 0x20000000}, 0x1004) r3 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f0000000e40)={'ip6_vti0\x00', &(0x7f0000000dc0)={'ip6gre0\x00', 0x0, 0x29, 0x3, 0x8, 0x6aa, 0x18, @mcast2, @local, 0x0, 0x20, 0x6, 0x4}}) connect$packet(r3, &(0x7f0000000e80)={0x11, 0x4, r4, 0x1, 0x2, 0x6, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}}, 0x14) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f00000004c0)={'syz_tun\x00', 0x0}) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000000c0)={r0, r5, 0x25, 0x0, @void}, 0x10) syz_emit_ethernet(0xd82, &(0x7f0000000000)={@local, @link_local, @void, {@ipv6={0x86dd, @generic={0x0, 0x6, "6410a6", 0xd4c, 0x0, 0x0, @private2, @mcast2, {[], "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"}}}}}, 0x0) 3.229344861s ago: executing program 2 (id=1796): bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b400000000000000791048000000000071041f0000000000950000"], 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_msg}, 0x94) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a4c000000090a010400"], 0xb4}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) socket$netlink(0x10, 0x3, 0x0) socket(0x400000000010, 0x3, 0x0) r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$inet_mtu(r0, 0x0, 0xa, &(0x7f00000000c0)=0x3, 0x4) sendto$inet(r0, &(0x7f0000000040)="0400", 0xffec, 0x0, &(0x7f0000000340)={0x2, 0x0, @loopback}, 0x10) 3.117492256s ago: executing program 2 (id=1799): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000140)=ANY=[@ANYBLOB="1700000000000000000003000100000000000000", @ANYRES32, @ANYBLOB="fdffffff0000ff0700"/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) r1 = socket$inet6(0xa, 0x2, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r1, 0x29, 0x40, &(0x7f00000007c0)=@raw={'raw\x00', 0x3c1, 0x3, 0x390, 0x0, 0x111, 0x4b4, 0x1f8, 0xd4feffff, 0x2c0, 0x20a, 0x278, 0x2c0, 0x278, 0x3, 0x0, {[{{@ipv6={@empty, @empty, [0xffffffff, 0xffffff00, 0xffffff00], [], 'ipvlan0\x00', 'caif0\x00', {}, {}, 0x6, 0xfe}, 0x0, 0x198, 0x1f8, 0x0, {}, [@common=@ah={{0x30}, {[0x4d6, 0x1], 0x2, 0x3a}}, @common=@unspec=@string={{0xc0}, {0x0, 0xfffd, 'bm\x00', "6d93eb04697dfa39de04767f46614613a407abbf4ed2e83a63b484dbb3bf6b2a850e79009e2905d2f98ba19f91f3c9faee6d3686e9bee067f4e77d9ad66238750c4100d7ee97ec7646259d90edece6e9787a97bc956c01754c34c5c9518c46178ed5f9194454980e579c80eca35a58dc47d1d5e4ff6e216c724e88c702448587", 0x59, 0x0, {0xfff}}}]}, @common=@inet=@HMARK={0x60, 'HMARK\x00', 0x0, {@ipv4=@empty, [0x0, 0xff, 0xff], 0x4e20, 0x4e23, 0x4e21, 0x4e24, 0x4917, 0x0, 0x4, 0x9, 0x9}}}, {{@uncond, 0x0, 0xa8, 0xc8}, @unspec=@TRACE={0x20}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x3f0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x18, 0xf, &(0x7f00000006c0)=ANY=[@ANYBLOB="1800000002000000000000000f00000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000200000000bf91000000000000b70200492dec8000020000008500000085000000000000950000000000000000b0e279951eb7ec"], &(0x7f0000000080)='GPL\x00', 0x6, 0x78, &(0x7f00000000c0)=""/120, 0x41100, 0xd}, 0x90) bpf$BPF_GET_BTF_INFO(0xf, &(0x7f0000000640)={0xffffffffffffffff, 0x20, &(0x7f0000000600)={&(0x7f0000000440)=""/238, 0xee, 0x0, &(0x7f0000000540)=""/133, 0x85}}, 0x10) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000900)={0x4, 0x21, &(0x7f0000001100)=ANY=[@ANYBLOB="1800000000010000000000000400000018110000", @ANYRES32, @ANYBLOB="00000000000000000100010014000000b7030000000000008500000083000000bf090000000000005509010000000000950000000000000085100000080000001f84fcff04000000950000000000000018110000", @ANYRES32=0x1, @ANYBLOB="0000000000000000b7080000080000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000010000008500000082000000850000000200000018120000", @ANYRES32=0x1, @ANYBLOB="0000000000000000b703000000000000850000000c000000b700000000000000bf91000000000000b7020000000000008500000084000000b7000000000000009500000000000000"], &(0x7f00000007c0)='GPL\x00', 0x7ff, 0x0, 0x0, 0x41000, 0x1, '\x00', 0x0, @fallback=0x11, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000840)={0x1, 0xc, 0x1, 0xfffffff5}, 0x10, 0xffffffffffffffff, 0xffffffffffffffff, 0x2, &(0x7f0000000880)=[0xffffffffffffffff, 0x1], &(0x7f00000008c0)=[{0x1, 0x4, 0x0, 0xb}, {0x0, 0x2, 0xe, 0xa62296b9d1e0688e}], 0x10, 0x10001}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x2, 0x4, &(0x7f0000000140)=ANY=[@ANYBLOB="180000000300000000000000feffff10850000000700000095"], 0x0, 0x80000, 0x0, 0x0, 0x100, 0x74, '\x00', 0x0, @fallback=0x26, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r2, r3, 0x0, 0x0, 0x0, 0x0, 0x10000}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x3, 0x4, &(0x7f00000005c0)=ANY=[@ANYBLOB="1800000000000000000000000000001d7118ba000000000095"], &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x20, '\x00', 0x0, @fallback=0x35, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 2.924980376s ago: executing program 2 (id=1802): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000080)=ANY=[@ANYBLOB="12010000090024206d041cc340000000000109022400010000a00009040000010301010009210008000122010009058103"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) socket$inet_udp(0x2, 0x2, 0x0) r1 = openat$tun(0xffffffffffffff9c, 0x0, 0xa2f01, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, 0x0) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x101000, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r3, 0xae60) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x87d33f1d305bee15}, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f00000001c0)={0x1fd, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) setsockopt$MRT6_DEL_MFC_PROXY(0xffffffffffffffff, 0x29, 0xd3, 0x0, 0x0) ioctl$KVM_SET_IRQCHIP(r3, 0x8208ae63, &(0x7f0000000280)={0x1, 0x0, @pic={0x3, 0x7, 0xe1, 0x81, 0x9, 0xd1, 0x40, 0x41, 0xfb, 0x0, 0xc, 0x1, 0xfb, 0x3e, 0xfe, 0x38}}) ioctl$KVM_SET_REGS(0xffffffffffffffff, 0x4090ae82, &(0x7f0000000000)={[0x6e, 0x0, 0x100000000005, 0x20, 0x3, 0x2, 0x106c, 0x100, 0x8000000000000, 0x80000004000080, 0x8000000, 0x8, 0x0, 0x2, 0x0, 0x8000], 0x1, 0x3c4210}) ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0) 2.198596772s ago: executing program 0 (id=1811): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x2400, 0x0) r1 = socket(0x1, 0x5, 0x0) ioctl$sock_SIOCETHTOOL(r1, 0x89fe, &(0x7f0000000340)={'bridge0\x00', &(0x7f0000000000)=@ethtool_coalesce={0xf, 0x0, 0x1fd, 0x0, 0x7, 0x9, 0x0, 0x5, 0x9, 0x5, 0xca1, 0x8, 0x1, 0x6, 0xff, 0x9, 0x3, 0x7, 0x7, 0xa, 0x7, 0x1000, 0xc}}) r2 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_syzos_vm$x86(r2, &(0x7f0000bff000/0x400000)=nil) r3 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r3, 0x6, 0x7, &(0x7f0000000000)=0x4800008, 0x4) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r0, 0x81f8943c, &(0x7f0000000b40)={0x0, ""/256, 0x0, 0x0, 0x0, 0x0, ""/16, ""/16, ""/16, 0x0, 0x0}) ioctl$BTRFS_IOC_GET_DEV_STATS(r3, 0xc4089434, &(0x7f0000000d40)={0x0, 0x400, 0x0, [0xffffffffffffffff, 0x4, 0x800, 0x6, 0xfa], [0x80, 0x0, 0x5, 0xfffffffffffffffd, 0x9, 0xe, 0x4, 0x61f, 0xe7, 0x4, 0x7, 0x8, 0x448c, 0x6, 0x8, 0xfffffffffffffff7, 0x0, 0xeb2, 0x8000, 0x7, 0x8, 0x9, 0x3, 0xd, 0x3, 0x54b, 0x200, 0xf0ca, 0x80000001, 0x100000000, 0x90, 0x8000000000000001, 0x8000, 0x101, 0x2, 0x7f, 0x9, 0xe, 0x8001, 0x1, 0x2, 0x67b, 0xc, 0x6, 0xa, 0x1ff, 0x1, 0x4, 0xab1, 0x800, 0x7, 0x9, 0x2, 0x10, 0x5, 0x2, 0x3, 0x8, 0xecaa, 0x0, 0x1, 0x4, 0x430, 0x9, 0x10001, 0x1, 0x10000, 0x8, 0xb79, 0x1ff, 0xa4d6, 0x6, 0x7384, 0x8, 0x5, 0x2, 0xa, 0xc0, 0x5, 0xffffffffffffffff, 0x7, 0x1, 0x2c, 0x4, 0xa354, 0x5, 0x0, 0x2, 0x400, 0x3, 0x4, 0x3, 0x0, 0x4, 0x8000, 0xfffffffffffffff7, 0x697, 0x2, 0x0, 0x5, 0xd5, 0x5, 0x8, 0x200, 0x4, 0xf4, 0xfffffffffffffff9, 0x8, 0x4, 0x7, 0x9, 0x8000000000000001, 0x5, 0xffffffffffff0001, 0x3, 0x4, 0x9, 0x0, 0x4, 0x8001, 0x9]}) ioctl$BTRFS_IOC_SUBVOL_CREATE_V2(0xffffffffffffffff, 0x50009418, &(0x7f0000001180)={{r3}, r4, 0xa, @unused=[0x5, 0x5, 0x7], @devid=r5}) r6 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r6, &(0x7f0000000040)={0x3, 0x0, &(0x7f0000000340)={&(0x7f0000000180)=ANY=[@ANYBLOB="02030003120000002cbd7000fcdbdf2503000900800000001cdc0dca1d9f68846960e56de42944af05000600000000000a0000ffffff80000000000000000000000000000000000102000000000000000200010000000000000700070000000005000500000000000a00000000000000000000000000000000000000000000010700000000000000010014"], 0x90}, 0x1, 0x7}, 0x0) r7 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r7, 0x4018620d, &(0x7f0000004a80)={0x73622a85, 0x100, 0x1}) ioctl$BINDER_WRITE_READ(r7, 0xc0306201, &(0x7f0000001900)={0x14, 0x0, &(0x7f0000000240)=[@increfs_done={0x40106308, 0x1, 0x1000000}], 0x0, 0x0, 0x0}) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000080)={'syztnl1\x00', &(0x7f0000000180)={'syztnl1\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @dev, @ipv4={'\x00', '\xff\xff', @rand_addr=0x64010102}, 0x0, 0x0, 0x0, 0x4007}}) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1) ioctl$KVM_SET_IRQCHIP(r2, 0x8208ae63, &(0x7f0000000340)={0x2, 0x0, @ioapic={0xe6ef0000, 0x4, 0x2, 0xffffffff, 0x0, [{0x5, 0x4, 0x3, '\x00', 0x23}, {0x8, 0x85, 0x2}, {0x4, 0x80, 0x1, '\x00', 0x2}, {0xc0, 0x6, 0x2, '\x00', 0x2}, {0x2, 0x4, 0x5}, {0xfa, 0x3, 0xf, '\x00', 0x25}, {0x0, 0x8, 0x1, '\x00', 0x7}, {0xbc, 0x1, 0x3, '\x00', 0x4f}, {0x6, 0x9, 0xc4, '\x00', 0x80}, {0x1, 0x80, 0x1, '\x00', 0x3}, {0x4, 0xa, 0x0, '\x00', 0xe}, {0x5, 0x4, 0x3, '\x00', 0xf}, {0x7, 0x12, 0x6, '\x00', 0x5}, {0x5, 0x6, 0xc, '\x00', 0xc3}, {0x2, 0x0, 0x0, '\x00', 0x2}, {0x4, 0xb, 0xa8, '\x00', 0x5}, {0x1, 0xd9, 0x9, '\x00', 0x5}, {0x5, 0x7, 0x42, '\x00', 0x2}, {0x8, 0x74, 0x9, '\x00', 0x3}, {0x2, 0x58, 0xff, '\x00', 0x8}, {0x7f, 0x6, 0x80, '\x00', 0x4}, {0xdc, 0x7, 0x0, '\x00', 0x2}, {0xa, 0x71, 0x6, '\x00', 0x6}, {0x6, 0x5, 0x6, '\x00', 0x80}]}}) 1.791007032s ago: executing program 0 (id=1817): r0 = socket$packet(0x11, 0x3, 0x300) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$BATADV_CMD_GET_MESH(r2, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={0x0, 0x92}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffffffffffffff000000", @ANYRES32=r3, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}, 0x1, 0x0, 0x0, 0xc000}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x54, 0x24, 0xe0b, 0xfffffffc, 0x0, {0x0, 0x0, 0x0, r3, {0x0, 0x9}, {0xffff, 0xffff}, {0xf}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x24, 0x2, {{0x1ff, 0x6, 0xfffffffd, 0x0, 0x19, 0x32d}, [@TCA_NETEM_ECN={0x8, 0x7, 0x1}]}}}]}, 0x54}}, 0x0) sendto$packet(r0, &(0x7f0000000580)="44c394f305916c4516999da20800", 0xe, 0x0, &(0x7f0000000300)={0x11, 0x0, r3, 0x1, 0x0, 0x6, @multicast}, 0x14) 1.661223328s ago: executing program 4 (id=1819): socket$nl_route(0x10, 0x3, 0x0) lsetxattr$security_capability(0x0, 0x0, 0x0, 0x0, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x8000, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000540)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000fd7000/0x18000)=nil, &(0x7f00000000c0)=[@text16={0x10, 0x0}], 0x1, 0x0, 0x0, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000140)=[@text16={0x10, &(0x7f0000000180)="660f388084000072baf80c66b860b4498c66efbafc0c66b80e00000066ef64f30fc7b000100f850100f30fc7b1030066b9800000c00f326635000400000f30d2bc0a000f23c80f21f86635040040000f23f8b8f4008ee0", 0x57}], 0x1, 0x48, 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(0xffffffffffffffff, 0x4020ae46, &(0x7f0000000140)={0x2710, 0x3, 0xb000, 0x2000, &(0x7f0000004000/0x2000)=nil}) setsockopt$TIPC_GROUP_JOIN(0xffffffffffffffff, 0x10f, 0x87, 0x0, 0x0) r3 = socket$tipc(0x1e, 0x5, 0x0) setsockopt$TIPC_GROUP_JOIN(r3, 0x10f, 0x87, &(0x7f0000000140)={0x10000042, 0x0, 0x2}, 0x10) 1.601339771s ago: executing program 0 (id=1820): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000010880)=ANY=[@ANYBLOB="0200000004000000080000000c"], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x11, 0xd, &(0x7f0000000280)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r0}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}, @call={0x85, 0x0, 0x0, 0x5}]}, &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0xc, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000080)={r1, r0}, 0xc) 1.544861174s ago: executing program 4 (id=1822): sendmsg$nl_generic(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000005c0)=ANY=[@ANYBLOB="3c0000001c00010000000000160000000a0009ed0700000000000000140001800d2a79075827af5aa534d6815c2e93f10c0002"], 0x3c}}, 0x0) r0 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) r1 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000080), 0x802, 0x0) ioctl$UI_BEGIN_FF_ERASE(r1, 0xc00c55ca, &(0x7f0000000100)={0xa, 0x7}) ptrace(0x4207, r0) r2 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='net/vlan/vlan1\x00') ioctl$sock_SIOCSIFVLAN_DEL_VLAN_CMD(0xffffffffffffffff, 0x8983, &(0x7f0000000000)={0x1, 'vlan1\x00', {}, 0x5832}) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r4, r5, &(0x7f000000e000/0x18000)=nil, 0x0, 0x0, 0x30, 0x0, 0x0) syz_clone(0x81002400, 0x0, 0x0, 0x0, 0x0, 0x0) lseek(r2, 0x4, 0x4) 1.523152335s ago: executing program 1 (id=1823): ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, &(0x7f0000000080)={'vxcan1\x00', 0x0}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000800)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000002c0)=@can_newroute={0x44, 0x18, 0x1, 0x1000000, 0x25dfdbfd, {0x1d, 0x1, 0x2}, [@CGW_DST_IF={0x8}, @CGW_SRC_IF={0x8, 0x9, r0}, @CGW_MOD_SET={0x15, 0x4, {{{0x3}, 0x0, 0x3, 0x0, 0x0, "4505a8b9e859abc0"}, 0x1}}, @CGW_MOD_UID={0x8}]}, 0x44}}, 0x0) 1.449449608s ago: executing program 0 (id=1824): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={0x0, 0x5c}}, 0x20084884) sendmsg$IPSET_CMD_FLUSH(0xffffffffffffffff, 0x0, 0x20004000) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="10000000040000000800000005"], 0x48) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xc, &(0x7f00000001c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bc82000000000000a6020000f8ffffffb703000008000000b703000000000000850000003300000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000280)={{r1}, &(0x7f0000000080), &(0x7f0000000240)=r2}, 0x20) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000340)={r2, 0x18000000000002a0, 0xe, 0x0, &(0x7f00000002c0)="b9ffac03076611268c989e14f088a82280079428710c31f90532446997e5781aaebfad3082f482bb3324656250f4dc2dacfcf882698f8947d4333bb542ed88277393207c3027d11e81ca30b344d7080000d35f788d1aabd3824054184825bd8a91874065dc589cbba10fc5090f00"/123, 0x0, 0x40500, 0x60000000, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x1}, 0x16) connect$qrtr(0xffffffffffffffff, 0x0, 0x0) 1.405229891s ago: executing program 1 (id=1825): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000dc0), r0) ioctl$sock_SIOCGIFINDEX_802154(r0, 0x8933, &(0x7f0000000e00)={'wpan0\x00', 0x0}) sendmsg$IEEE802154_LLSEC_DEL_SECLEVEL(r0, &(0x7f0000000f00)={0x0, 0x0, &(0x7f0000000ec0)={&(0x7f0000000280)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010029bd7000fcdbdf253100000008000200", @ANYRES32=r2, @ANYBLOB="0500330017000000050034000700000005003500fd000000050036"], 0x3c}, 0x1, 0x0, 0x0, 0x4004084}, 0x840) 1.331882194s ago: executing program 2 (id=1826): r0 = socket$can_bcm(0x1d, 0x2, 0x2) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x41, &(0x7f0000000000)=0x4011, 0x4) bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0x3, 0x3, &(0x7f0000000000)=ANY=[@ANYBLOB="1206"], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x65, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000100)=@bpf_ext={0x1c, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x41100, 0x50, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x1313f, 0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000000)}, 0x94) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x42000, 0x0) close(r1) r2 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TUNSETOFFLOAD(r2, 0xc004743e, 0x110e22fff6) ioctl$TUNGETVNETLE(r1, 0x4010744d, &(0x7f0000000180)) connect$can_bcm(r0, &(0x7f00000005c0), 0x10) setsockopt$sock_int(r0, 0x1, 0x29, &(0x7f00000001c0)=0x7f, 0x4) recvmmsg(r0, &(0x7f00000099c0)=[{{0x0, 0x0, 0x0}, 0x4251}, {{0x0, 0x0, &(0x7f0000007040)=[{&(0x7f0000006040)=""/4086, 0x1000}], 0x1}, 0x8000}], 0x3fffffffffffdfc, 0x10002, 0x0) sendmsg$can_bcm(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000240)=ANY=[@ANYBLOB="050000007f0000000000010000000000", @ANYRES64=0x0, @ANYRES64=0x2710], 0x48}}, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000680), 0xffffffffffffffff) sendmsg$L2TP_CMD_TUNNEL_CREATE(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000000)={0x50, r4, 0x917, 0x0, 0x0, {}, [@L2TP_ATTR_PROTO_VERSION={0x5}, @L2TP_ATTR_CONN_ID={0x8}, @L2TP_ATTR_ENCAP_TYPE={0x6}, @L2TP_ATTR_PEER_CONN_ID={0x8}, @L2TP_ATTR_IP_SADDR={0x8, 0x18, @loopback=0xac1414aa}, @L2TP_ATTR_IP6_SADDR={0x14, 0x1f, @mcast1}]}, 0x50}}, 0x0) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0xd, 0x20000000ec071, 0xffffffffffffffff, 0x0) setsockopt$SO_TIMESTAMP(r0, 0x1, 0x1d, &(0x7f0000000180)=0x2, 0x4) sendmmsg$inet(r0, 0x0, 0x0, 0x0) 1.21707015s ago: executing program 4 (id=1827): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x3, 0xc, &(0x7f0000000140)=ANY=[@ANYBLOB="18020000010000000000000000000000850000008700000018010000646c6c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007200000095"], &(0x7f0000000080)='GPL\x00'}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r0, 0x0, 0xe, 0x0, &(0x7f00000001c0)="10000000000000000000000900f6", 0x0, 0x2f, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_LINKMODES_GET(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000280)=ANY=[@ANYRESOCT=r1, @ANYRES16=r1, @ANYBLOB="010300000100fddbdf2526"], 0x14}}, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000480)=@base={0x9, 0x9, 0x38e, 0x80, 0x2105, 0x1, 0x80000000, '\x00', 0x0, 0xffffffffffffffff, 0x2, 0x1, 0x3}, 0x50) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000580)=@bpf_lsm={0x4, 0x7, &(0x7f0000000040)=ANY=[@ANYBLOB="18000000000000000000000000000000050002000000000085000000cc00000085000000000000000500feff000000009500000000000000"], &(0x7f0000000000)='syzkaller\x00', 0x1, 0xff9, &(0x7f0000000a80)=""/4089, 0x0, 0x0, '\x00', 0x0, 0x1b, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0xc}, 0x21) r3 = socket$pptp(0x18, 0x1, 0x2) bind$pptp(r3, &(0x7f0000000140)={0x18, 0x2, {0xfffe, @loopback}}, 0x1e) unshare(0x22020600) r4 = bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x0) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, 0x0, 0x0) r5 = bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) ioctl$BTRFS_IOC_SPACE_INFO(r5, 0xc0109414, &(0x7f0000000800)={0x0, 0xffffffffffffff60}) connect$pptp(r3, &(0x7f0000000080)={0x18, 0x2, {0x0, @rand_addr=0x64010102}}, 0x1e) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$wireguard(&(0x7f00000001c0), r6) sendmsg$WG_CMD_SET_DEVICE(r6, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000b80)={0x4c, r7, 0x1, 0x70bd2c, 0x25dfdbfe, {}, [@WGDEVICE_A_IFNAME={0x14, 0x2, 'wg2\x00'}, @WGDEVICE_A_PRIVATE_KEY={0x24, 0x3, @b}]}, 0x4c}, 0x1, 0x0, 0x0, 0xc004}, 0x4000040) r8 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000240), 0xc0001, 0x0) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ethtool(&(0x7f0000000200), 0xffffffffffffffff) ioctl$XFS_IOC_DIOINFO(r4, 0x800c581e, &(0x7f00000000c0)) ioctl$PPPIOCATTCHAN(r8, 0x40047438, &(0x7f0000000340)=0x1) pipe(&(0x7f0000000080)) syz_emit_ethernet(0x136, &(0x7f0000000380)=ANY=[@ANYBLOB="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"], &(0x7f00000007c0)={0x1, 0x3, [0x8a1, 0x9d9, 0xfe6, 0xb99]}) ioctl$BTRFS_IOC_GET_SUPPORTED_FEATURES(r8, 0x80489439, &(0x7f0000000180)) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r10, &(0x7f0000000300)=[{{0x0, 0x0, &(0x7f0000000c40)=[{0x0}, {&(0x7f0000000580)="23a9", 0x2}, {&(0x7f0000002000)="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", 0x1000}], 0x3, 0x0, 0x0, 0x24000040}}], 0x1, 0x0) recvmmsg(r9, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000500)=@base={0x18, 0x4, 0x401, 0x8, 0x480b6, r2, 0xffffffff, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x3, 0x5}, 0x50) 1.21644346s ago: executing program 0 (id=1828): write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000cc0)={'syz1\x00', {0xfff9, 0x2, 0x2, 0x9b99}, 0x37, [0xfffffff8, 0x8, 0x5, 0x9, 0x8, 0x155f, 0x6, 0x4, 0x25cd, 0x1, 0x2, 0xa, 0xa2b9, 0x6, 0x7, 0xe4, 0x6, 0xfc000000, 0x3, 0xbbf, 0x4a732f64, 0x1, 0x8, 0xd, 0x0, 0x12a3, 0x6, 0x1, 0x2, 0x6, 0x7, 0x81, 0x8a, 0x79, 0x2, 0x10000, 0x0, 0x91, 0x4, 0x4, 0x16, 0x8, 0x5, 0x401, 0xfffffff5, 0x405, 0xa7, 0x81, 0x9, 0xf9a2, 0x80000001, 0xff, 0x0, 0x2, 0x2, 0x2, 0x7, 0x1, 0x7ff, 0x4, 0x4007f, 0xffffffff, 0x9, 0x4], [0x9, 0x3, 0x6, 0x9, 0x4, 0xc66, 0xa8a9, 0x20000073, 0x8e, 0xd50, 0x7, 0x5, 0x2, 0x809, 0x4, 0xa7, 0x1000, 0x0, 0x200b398, 0x400080, 0x1, 0x4, 0x1c, 0x7, 0x1, 0x2, 0x3, 0x8, 0xffffff7f, 0x400, 0x6, 0x4c2336d3, 0x4, 0x0, 0xfffffff8, 0x401, 0x46, 0xf1, 0x4, 0xab00060, 0x5, 0x1006, 0x2, 0x5, 0x3ff, 0x1ff, 0x1, 0x7fff, 0x8001, 0x1cb, 0x1, 0x80000004, 0x6, 0x438, 0x2, 0x9, 0x95, 0x7fffffff, 0x4, 0xfffffff9, 0x1, 0x1000, 0xfffff801, 0x5], [0x2, 0xfffffffe, 0xffff, 0xc, 0x2, 0x2e6bf783, 0x80000001, 0x5, 0x5, 0x491, 0x8d3, 0x8, 0x8, 0x400, 0x2, 0x400, 0x41, 0x6, 0xee4b, 0x2000004, 0x1, 0x8000003, 0x5, 0x9, 0x3, 0x3, 0x9, 0x3, 0xc7, 0xfff, 0x10000a, 0x2, 0x400, 0x3e55, 0x5, 0xd3, 0x8, 0x97f7, 0x3, 0xd, 0x7, 0x601, 0x101, 0xdd80, 0x60a0, 0x7f, 0x9d26, 0x10000, 0x1, 0x2, 0x2, 0x6, 0x8000, 0xf45, 0x3, 0xd500, 0x8, 0x77, 0x9, 0x6, 0x10000, 0xfffffffd, 0x5, 0x1], [0xa772, 0x6, 0x5, 0x1afa, 0xbfc, 0x8, 0x5, 0x5, 0x55, 0x40, 0xff, 0x1005, 0x1, 0x7, 0x1e, 0x9, 0x81, 0x3, 0x9d86, 0xd, 0xfffffff7, 0x8, 0x140f2, 0x5396, 0x3, 0x6, 0x80008001, 0x7777, 0xffffffff, 0x2, 0x100, 0xd8ce, 0x7fffffff, 0x100009, 0xc, 0x32d, 0x3, 0x1ff, 0x2000803, 0xffffffff, 0x10000, 0x0, 0x8004, 0x7fff, 0x3, 0x6, 0xf, 0xe, 0x1, 0x26d, 0x6, 0xfffffff9, 0x4, 0xfffffff9, 0x9, 0x4, 0x463f, 0x4, 0xdab, 0x6, 0x8, 0x14000, 0x1, 0x9]}, 0x45c) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000240)=[@text16={0x10, &(0x7f0000000280)="0f050f060fc71abaf80c66b88eb5558166efbafc0ced0f070f01ca660f38812b3e7a000f08362e0f21ce", 0x2a}], 0x1, 0x11, 0x0, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r3, 0x4090ae82, &(0x7f0000000000)={[0x35, 0xfff, 0xfffffffffffffffe, 0x40000000000180, 0x2, 0x6, 0xf2, 0xd, 0x7fffffffffffe, 0x7, 0x5, 0x7, 0x4, 0x5, 0x4, 0x8], 0x25000, 0x304}) openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$KVM_GET_SUPPORTED_CPUID(0xffffffffffffffff, 0xc008ae05, &(0x7f0000000280)={0x2, 0x0, [{0xa, 0x9, 0x2, 0x56, 0x9, 0x0, 0xed2}, {0xb, 0x5, 0x1, 0x400, 0x1, 0x2, 0x3}]}) r4 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r5 = dup(r4) ioctl$KVM_SET_USER_MEMORY_REGION(r4, 0x4020ae46, &(0x7f0000000840)={0x1fe, 0x2, 0x3000, 0x2000, &(0x7f0000003000/0x2000)=nil}) r6 = ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r6, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@text32={0x20, &(0x7f00000000c0)="c20000361e0f01c3660fd2eff30f10f1b961020000b80e000000ba000000000f30b98d0200000f320b99f3530000660f6af7c4e2f91d20", 0x37}], 0x1, 0x11, 0x0, 0x0) syz_kvm_setup_cpu$x86(r4, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000200)=[@text32={0x20, 0x0}], 0x1, 0x50, 0x0, 0x0) ioctl$KVM_RUN(r6, 0xae80, 0x0) mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x8) 1.170320962s ago: executing program 1 (id=1829): socket$inet(0x2, 0x3, 0x6) socket(0x15, 0x80005, 0x0) r0 = socket$packet(0x11, 0x3, 0x300) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0500000004000000ff0f00000700000000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000d00)={0x3, 0x3, &(0x7f0000000480)=ANY=[@ANYBLOB="189f8b5e72d4ad859f109d15acdb000095001000fe000000"], &(0x7f0000000b40)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000140)=[r2, r2]}, 0x94) getsockopt$bt_hci(r1, 0x84, 0xd, &(0x7f0000003140)=""/4111, &(0x7f0000000080)=0x100f) socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) r4 = socket$tipc(0x1e, 0x5, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="0b00000007000000010001000900000001"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000540)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r6, @ANYBLOB="0000000000000000b70800000d0000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x16, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @flow_dissector, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000000)={r7, 0x2000002, 0xe, 0x0, &(0x7f0000000200)="63eced8e46dc3f0adf33c9f7b986", 0x0, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) sendmsg$nl_generic(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000001080)=ANY=[@ANYBLOB="3000000040000701feffffff00000000047c0000040042801400018006000600800a000008001c00", @ANYRES16=r5, @ANYRES8=r4], 0x30}, 0x1, 0x0, 0x0, 0x48815}, 0xc000) syz_genetlink_get_family_id$devlink(&(0x7f00000001c0), r3) getsockname$packet(r3, &(0x7f0000000240)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendto$packet(r0, &(0x7f00000005c0)="10bdc4f5f910d4c5fbc75d99a314bb56d706d9be589f29641de6746b4c6ff575a1c111fc96aacbc9a1920708a1002441b001f1ed93ae7e68cfe19993e176125fdf8f8078db0f461be9928b2e7d83f40d97b35848e637366c2e5920856f0757c8174c99e438f7558bbd00b7d8db5a1cbeb9d00738ca36a88266369489132ce4dea3b14cadc657fc0e6bfaf0545162aace6bcc61bb63f1664baef6bf5e53d53ed9c30968f53de1cc4abd046f1476c329d9ccc89d51661d45e733f5690a1552f7a7ca0c0b646de18d20c13eba631f54b9f3dbc8f5880075f7f039c2820fc1301338622b63459e57", 0xe6, 0x40800, 0x0, 0x0) r8 = socket$kcm(0x2a, 0x2, 0x0) sendmsg$kcm(r8, &(0x7f00000000c0)={&(0x7f0000000040)=@qipcrtr, 0x80, 0x0}, 0x0) r9 = socket$inet_sctp(0x2, 0x1, 0x84) r10 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$IP_VS_SO_SET_ADD(r10, 0x0, 0x482, &(0x7f00000000c0)={0x84, @loopback, 0x4e20, 0x3, 'none\x00', 0x30, 0x0, 0x3f}, 0x2c) r11 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000340)={'dvmrp0\x00'}) sendmsg$nl_route(r11, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000300)=ANY=[], 0x2c}}, 0x40080) setsockopt$IP_VS_SO_SET_DELDEST(r9, 0x0, 0x488, &(0x7f0000000280)={{0x84, @rand_addr=0x64010102, 0x4e20, 0x3, 'nq\x00', 0x1d, 0x2, 0x2a}, {@loopback, 0x4e23, 0x2000, 0xc24, 0x9, 0xfffffff9}}, 0x44) 900.541976ms ago: executing program 3 (id=1831): bpf$PROG_LOAD(0x5, 0x0, 0x0) 857.032648ms ago: executing program 4 (id=1832): socket$nl_route(0x10, 0x3, 0x0) lsetxattr$security_capability(0x0, 0x0, 0x0, 0x0, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x8000, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000540)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_NESTED_STATE(r2, 0x4080aebf, &(0x7f0000003680)=@vmx={0x0, 0x0, 0x2080, {0x0, 0x0, {}, 0x1, 0xffffffffffffffff}}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000140)=[@text16={0x10, &(0x7f0000000180)="660f388084000072baf80c66b860b4498c66efbafc0c66b80e00000066ef64f30fc7b000100f850100f30fc7b1030066b9800000c00f326635000400000f30d2bc0a000f23c80f21f86635040040000f23f8b8f4008ee0", 0x57}], 0x1, 0x48, 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(0xffffffffffffffff, 0x4020ae46, &(0x7f0000000140)={0x2710, 0x3, 0xb000, 0x2000, &(0x7f0000004000/0x2000)=nil}) setsockopt$TIPC_GROUP_JOIN(0xffffffffffffffff, 0x10f, 0x87, 0x0, 0x0) r3 = socket$tipc(0x1e, 0x5, 0x0) setsockopt$TIPC_GROUP_JOIN(r3, 0x10f, 0x87, &(0x7f0000000140)={0x10000042, 0x0, 0x2}, 0x10) 795.259981ms ago: executing program 1 (id=1833): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000b00)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x50) r1 = socket$packet(0x11, 0x3, 0x300) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0x5, &(0x7f0000000200)=ANY=[@ANYBLOB="18110000", @ANYRES32=r0, @ANYBLOB], &(0x7f0000000300)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x23, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800}, 0x94) setsockopt$sock_attach_bpf(r1, 0x1, 0x32, &(0x7f0000000040)=r2, 0x4) socket$nl_netfilter(0x10, 0x3, 0xc) r3 = socket$kcm(0x11, 0x3, 0x0) setsockopt$sock_attach_bpf(r3, 0x107, 0xf, &(0x7f0000000000), 0x4) sendmsg$kcm(r3, &(0x7f0000000080)={&(0x7f0000000180)=@hci={0x1f, 0x0, 0x3}, 0x80, &(0x7f0000000840)=[{&(0x7f0000000680)="27050200340f14000600002fb96dbcaca8faf706060000170000005f45f4384a410858d291bdd54ec5ff1144ee162fd4b8bf7256da82f600102c21880b00000000010040570000000600000000000000805db18f79374a68cf63db33fe3b11c3d382c521f3bece29f7624f689b79e22b84f4b91c6f6d4f46827433fde2699131743a5954e3ace1d69fdf", 0x8a}, {&(0x7f0000002340)="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", 0xec0}], 0x2}, 0x9cdc2384056f0939) 693.418896ms ago: executing program 3 (id=1834): r0 = socket$tipc(0x1e, 0x2, 0x0) bind$tipc(r0, &(0x7f0000000000)=@nameseq={0x1e, 0x1, 0x0, {0x42, 0x0, 0x2}}, 0x10) bind$tipc(r0, &(0x7f0000000100)=@name={0x1e, 0x2, 0x0, {{0x42, 0x20000003}}}, 0x10) openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000500)={0x6, 0x3, &(0x7f0000000200)=ANY=[@ANYBLOB="180000002000"/16], &(0x7f0000000280)='GPL\x00', 0x5}, 0x94) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000750000001801000020646c2500000000002020207b1af8ff00000000bfa100000000000007"], 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=@framed={{0x18, 0x2}, [@call={0x85, 0x0, 0x0, 0x7b}]}, 0x0}, 0x94) sendmsg$IPVS_CMD_NEW_DAEMON(0xffffffffffffffff, 0x0, 0x4048080) write(0xffffffffffffffff, &(0x7f0000000000)="240000001a005f0214f9f40700090100000000000000000500000000080004", 0x1f) r1 = socket$kcm(0x10, 0x2, 0x0) socket$nl_route(0x10, 0x3, 0x0) write$cgroup_subtree(r1, &(0x7f0000000000)=ANY=[@ANYBLOB="563f000019"], 0xfe33) 693.081896ms ago: executing program 4 (id=1835): ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, &(0x7f0000000080)={'vxcan1\x00', 0x0}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000800)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000002c0)=@can_newroute={0x44, 0x18, 0x1, 0x1000000, 0x25dfdbfd, {0x1d, 0x1, 0x2}, [@CGW_DST_IF={0x8}, @CGW_SRC_IF={0x8, 0x9, r0}, @CGW_MOD_SET={0x15, 0x4, {{{0x3}, 0x0, 0x3, 0x0, 0x0, "4505a8b9e859abc0"}, 0x1}}, @CGW_MOD_UID={0x8}]}, 0x44}}, 0x0) 613.82468ms ago: executing program 4 (id=1836): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000080)=ANY=[@ANYBLOB="12010000090024206d041cc340000000000109022400010000a00009040000010301010009210008000122010009058103"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) socket$inet_udp(0x2, 0x2, 0x0) r1 = openat$tun(0xffffffffffffff9c, 0x0, 0xa2f01, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, 0x0) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x101000, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r3, 0xae60) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x87d33f1d305bee15}, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f00000001c0)={0x1fd, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) setsockopt$MRT6_DEL_MFC_PROXY(0xffffffffffffffff, 0x29, 0xd3, 0x0, 0x0) ioctl$KVM_SET_IRQCHIP(r3, 0x8208ae63, &(0x7f0000000280)={0x1, 0x0, @pic={0x3, 0x7, 0xe1, 0x81, 0x9, 0xd1, 0x40, 0x41, 0xfb, 0x0, 0xc, 0x1, 0xfb, 0x3e, 0xfe, 0x38}}) ioctl$KVM_SET_REGS(0xffffffffffffffff, 0x4090ae82, &(0x7f0000000000)={[0x6e, 0x0, 0x100000000005, 0x20, 0x3, 0x2, 0x106c, 0x100, 0x8000000000000, 0x80000004000080, 0x8000000, 0x8, 0x0, 0x2, 0x0, 0x8000], 0x1, 0x3c4210}) ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0) 562.073312ms ago: executing program 1 (id=1837): sendmsg$nl_generic(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000005c0)=ANY=[@ANYBLOB="3c0000001c00010000000000160000000a0009ed0700000000000000140001800d2a79075827af5aa534d6815c2e93f10c0002"], 0x3c}}, 0x0) r0 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) r1 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000080), 0x802, 0x0) ioctl$UI_BEGIN_FF_ERASE(r1, 0xc00c55ca, &(0x7f0000000100)={0xa, 0x7}) ptrace(0x4207, r0) r2 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='net/vlan/vlan1\x00') ioctl$sock_SIOCSIFVLAN_DEL_VLAN_CMD(0xffffffffffffffff, 0x8983, &(0x7f0000000000)={0x1, 'vlan1\x00', {}, 0x5832}) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r4, r5, &(0x7f000000e000/0x18000)=nil, 0x0, 0x0, 0x30, 0x0, 0x0) syz_clone(0x81002400, 0x0, 0x0, 0x0, 0x0, 0x0) lseek(r2, 0x4, 0x4) 557.276812ms ago: executing program 3 (id=1838): r0 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f00000004c0)={{{@in=@multicast1, @in=@broadcast, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x0, 0x4f}}, {{@in6=@mcast2, 0x404d3, 0x2b}, 0x0, @in=@empty}}, 0xe4) r1 = socket$key(0xf, 0x3, 0x2) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) r3 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000380)=ANY=[@ANYBLOB="1400000042000501"], 0x14}}, 0x44014) recvmmsg(r3, &(0x7f0000000000)=[{{0x0, 0x0, &(0x7f0000000040)=[{&(0x7f00000004c0)=""/4082, 0xff2}], 0x1}, 0xfffffffc}], 0x1, 0x2, 0x0) sendmsg$nl_xfrm(r2, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000001f40)={&(0x7f00000004c0)=@updpolicy={0xb8, 0x19, 0x1, 0x0, 0x0, {{@in6=@rand_addr=' \x01\x00', @in=@local, 0x0, 0x5, 0x0, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, {0x0, 0xa9, 0x0, 0x0, 0x0, 0xffffffffffffffff}, {0x0, 0xa00, 0x40800000000000, 0x800000000000000}}}, 0xb8}}, 0x0) setsockopt$sock_int(r1, 0x1, 0x8, &(0x7f00000001c0), 0x4) sendmsg$key(r1, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) sendmsg$key(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000140)=ANY=[@ANYBLOB="0212000002"], 0x10}}, 0x0) close(r0) r4 = socket$key(0xf, 0x3, 0x2) sendmsg$netlink(0xffffffffffffffff, 0x0, 0x0) setsockopt$netlink_NETLINK_TX_RING(0xffffffffffffffff, 0x10e, 0xc, &(0x7f0000000180)={0x2, 0xfffffffc, 0x27, 0xffffffff}, 0x10) socket$nl_route(0x10, 0x3, 0x0) sendmsg$key(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000300)={0x2, 0x13, 0x0, 0xe, 0x2, 0x0, 0x0, 0x25dfdbf8}, 0x10}}, 0x4000050) 401.594901ms ago: executing program 3 (id=1839): socket(0x10, 0x80002, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) socket$unix(0x1, 0x5, 0x0) socket$netlink(0x10, 0x3, 0x0) clock_gettime(0x0, &(0x7f0000000000)) bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x48) r0 = socket$can_bcm(0x1d, 0x2, 0x2) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x0) socket$nl_route(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)={0x0}}, 0x0) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x25, 0x0, 0x0) setsockopt$netlink_NETLINK_TX_RING(0xffffffffffffffff, 0x10e, 0xc, 0x0, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r2, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x10000047}, 0x4000084) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_LIST(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000380)=ANY=[@ANYBLOB="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"], 0x1c}, 0x1, 0x0, 0x0, 0x20000005}, 0x80) 289.468126ms ago: executing program 1 (id=1840): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000000)={0x26, 'aead\x00', 0x0, 0x0, 'aegis128-aesni\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000140)="2c385aa3d49100dc6626c892b6bc436a", 0x10) r1 = accept4(r0, 0x0, 0x0, 0x0) sendmsg$TEAM_CMD_OPTIONS_SET(r1, &(0x7f0000001180)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000001540)=ANY=[], 0x370}, 0x1, 0x0, 0x0, 0x40000}, 0x8840) sendmsg$alg(r1, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000080)=[@assoc={0x18, 0x117, 0x4, 0x200}], 0x18}, 0x0) recvmmsg(r1, &(0x7f0000000180)=[{{0x0, 0x0, 0x0}, 0x1}, {{0x0, 0x0, &(0x7f00000003c0)=[{&(0x7f0000000500)=""/229, 0xe5}], 0x1}, 0xb}], 0x2, 0x10, 0x0) 207.62636ms ago: executing program 2 (id=1841): socket(0x2a, 0x2, 0x0) r0 = socket(0x10, 0x3, 0x0) sendmsg$ETHTOOL_MSG_COALESCE_SET(r0, &(0x7f00000002c0)={0x0, 0x0, 0x0}, 0x0) sendmmsg$alg(r0, &(0x7f0000000140), 0x4924b68, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) socket$netlink(0x10, 0x3, 0x0) pipe(&(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PPPIOCGIDLE32(r1, 0x8008743f, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket$inet6_udp(0xa, 0x2, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000680)={0x10, 0x4, &(0x7f0000000380)=ANY=[@ANYBLOB="1802000000c400000000000000000000850000003e00000095"], &(0x7f00000000c0)='GPL\x00'}, 0x90) bpf$MAP_CREATE(0x0, &(0x7f00000023c0)=ANY=[@ANYBLOB="1200000004000000080000000b"], 0x48) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x20040000) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=ANY=[@ANYBLOB="9000000010000305000000000000000000000700", @ANYRES32=0x0, @ANYBLOB="996e06004d4c0700540012800800010068737200480002800500030008000000050003000500000005000300fd00000008000200", @ANYRES32=r2, @ANYBLOB="08000100", @ANYRES32=r3], 0x90}}, 0x0) 198.49964ms ago: executing program 3 (id=1842): socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'batadv_slave_0\x00'}) r1 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) setsockopt$ax25_SO_BINDTODEVICE(0xffffffffffffffff, 0x101, 0x19, &(0x7f0000000000)=@bpq0, 0xfffffffffffffe1d) ioctl$sock_netdev_private(r1, 0x8914, &(0x7f0000000000)) r2 = syz_init_net_socket$rose(0xb, 0x5, 0x0) ioctl$sock_rose_SIOCADDRT(r2, 0x890b, &(0x7f00000007c0)={@remote={0xcc, 0xcc, 0xcc, 0xcc, 0x3}, 0x6, @null, @bpq0, 0x5, [@rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @null, @default, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @null, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @default]}) r3 = syz_init_net_socket$rose(0xb, 0x5, 0x0) ioctl$sock_rose_SIOCDELRT(r3, 0x890c, &(0x7f00000000c0)={@remote={0xcc, 0xcc, 0xcc, 0xcc, 0x1}, 0x6, @null, @bpq0, 0x1, [@bcast, @default, @default, @default, @null, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}, @default]}) 104.658065ms ago: executing program 0 (id=1843): r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$wireguard(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$WG_CMD_SET_DEVICE(r0, &(0x7f0000000c00)={0x0, 0x0, &(0x7f0000000bc0)={0x0}, 0x1, 0x0, 0x0, 0x40048c1}, 0x4000000) socket$packet(0x11, 0x3, 0x300) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000002c0)='cgroup.stat\x00', 0x26e1, 0x0) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x84, 0x78, &(0x7f0000000040)=r1, 0x4) openat$cgroup_type(r1, &(0x7f0000000100), 0x2, 0x0) r2 = socket(0x10, 0x803, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000400)={'veth0_to_hsr\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000800)=@newtfilter={0x54, 0x2c, 0xd2b, 0x70bd2b, 0x25dfdbfb, {0x0, 0x0, 0x0, r3, {0x6}, {}, {0x3, 0x10}}, [@filter_kind_options=@f_u32={{0x8}, {0x28, 0x2, [@TCA_U32_SEL={0x24, 0x5, {0xd, 0x7, 0x1, 0x3d3f, 0x0, 0xfff, 0xb709, 0x58f, [{0x0, 0x20008000, 0x4, 0x1}]}}]}}]}, 0x54}, 0x1, 0x0, 0x0, 0x4084}, 0x24040084) recvmmsg$unix(r2, &(0x7f0000000580)=[{{0x0, 0x0, &(0x7f0000000040)=[{&(0x7f00000002c0)=""/219, 0xdb}], 0x1}}], 0x1, 0x60, 0x0) sendmsg$GTP_CMD_NEWPDP(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000300)={0x2c, 0x0, 0x1, 0x2, 0x25dfdbfe, {}, [@GTPA_LINK={0x8}, @GTPA_I_TEI={0x8, 0x8, 0x1}, @GTPA_LINK={0x8, 0x1, r3}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4004054}, 0x4000044) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={0x0}}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000002c0)=ANY=[], 0xc3}, 0x1, 0x100000000000000, 0x0, 0x2000}, 0x40400c0) r4 = socket(0x10, 0x3, 0x0) sendmmsg(r4, &(0x7f0000000000), 0x4000000000001f2, 0x0) 0s ago: executing program 3 (id=1844): bpf$PROG_LOAD(0x5, 0x0, 0x0) kernel console output (not intermixed with test programs): 828][ T4435] (syz.0.19,4435,1):ocfs2_check_dir_entry:325 ERROR: bad entry in directory #72: rec_len is smaller than minimal - offset=0, inode=72, rec_len=2, name_len=0 [ 82.703568][ T4435] (syz.0.19,4435,1):ocfs2_prepare_dir_for_insert:4311 ERROR: status = -2 [ 82.738339][ T4435] (syz.0.19,4435,1):__ocfs2_prepare_orphan_dir:2168 ERROR: status = -2 [ 82.767156][ T4435] (syz.0.19,4435,1):ocfs2_prepare_orphan_dir:2210 ERROR: status = -2 [ 82.799190][ T4435] (syz.0.19,4435,1):ocfs2_prepare_orphan_dir:2226 ERROR: status = -2 [ 82.907752][ T4360] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop3 scanned by udevd (4360) [ 82.923236][ T4435] (syz.0.19,4435,1):ocfs2_add_inode_to_orphan:2661 ERROR: status = -2 [ 82.955869][ T4435] (syz.0.19,4435,1):ocfs2_dio_wr_get_block:2213 ERROR: status = -2 [ 82.979137][ T4435] (syz.0.19,4435,0):ocfs2_dio_end_io:2428 ERROR: Direct IO failed, bytes = -5 [ 83.198749][ T4268] ocfs2: Unmounting device (7,0) on (node local) [ 83.356768][ T4467] loop2: detected capacity change from 0 to 32768 [ 83.421423][ T4467] BTRFS: device fsid 3a492a15-ac49-4ce6-945e-cef7a687c6c9 devid 1 transid 8 /dev/loop2 scanned by syz.2.24 (4467) [ 83.448948][ T4480] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 83.519603][ T4467] BTRFS info (device loop2): first mount of filesystem 3a492a15-ac49-4ce6-945e-cef7a687c6c9 [ 83.557567][ T4480] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 83.585831][ T4480] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 83.595000][ T4467] BTRFS info (device loop2): using crc32c (crc32c-intel) checksum algorithm [ 83.623192][ T4480] A link change request failed with some changes committed already. Interface bridge_slave_0 may have been left with an inconsistent configuration, please check. [ 83.648840][ T4467] BTRFS info (device loop2): using free space tree [ 83.932308][ T4467] BTRFS info (device loop2): enabling ssd optimizations [ 84.050007][ T4508] fuse: Bad value for 'fd' [ 84.140750][ T4278] BTRFS info (device loop2): last unmount of filesystem 3a492a15-ac49-4ce6-945e-cef7a687c6c9 [ 84.354939][ T4475] loop1: detected capacity change from 0 to 32768 [ 84.522432][ T4475] XFS (loop1): Mounting V5 Filesystem [ 84.772673][ T4475] XFS (loop1): Ending clean mount [ 84.800840][ T4475] XFS (loop1): Quotacheck needed: Please wait. [ 84.898103][ T4531] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 84.915660][ T4475] XFS (loop1): Quotacheck: Done. [ 84.931860][ T4531] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 84.956051][ T4531] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 85.246225][ T4269] XFS (loop1): Unmounting Filesystem [ 85.259262][ T4533] fuse: Bad value for 'fd' [ 85.277863][ T4505] loop0: detected capacity change from 0 to 32768 [ 85.401960][ T4505] XFS (loop0): Mounting V5 Filesystem [ 85.511285][ T4505] XFS (loop0): Ending clean mount [ 85.555838][ T4505] XFS (loop0): Quotacheck needed: Please wait. [ 85.607879][ T4524] loop2: detected capacity change from 0 to 32768 [ 85.655241][ T4505] XFS (loop0): Quotacheck: Done. [ 85.702121][ T4524] BTRFS info (device loop2): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 85.743183][ T4524] BTRFS info (device loop2): using sha256 (sha256-avx2) checksum algorithm [ 85.775891][ T27] audit: type=1804 audit(1776610105.728:8): pid=4505 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.0.31" name="/newroot/7/file0/bus" dev="loop0" ino=9291 res=1 errno=0 [ 85.788917][ T4524] BTRFS info (device loop2): force clearing of disk cache [ 85.825970][ T4524] BTRFS info (device loop2): enabling auto defrag [ 85.842872][ T4524] BTRFS info (device loop2): max_inline at 0 [ 85.855496][ T4524] BTRFS info (device loop2): enabling disk space caching [ 85.883830][ T4268] XFS (loop0): Unmounting Filesystem [ 85.889339][ T4524] BTRFS info (device loop2): disk space caching is enabled [ 86.181731][ T4524] BTRFS info (device loop2): enabling ssd optimizations [ 86.227399][ T4524] BTRFS info (device loop2): rebuilding free space tree [ 86.253508][ T4573] netlink: 'syz.4.46': attribute type 10 has an invalid length. [ 86.302394][ T4524] BTRFS info (device loop2): disabling free space tree [ 86.316739][ T4524] BTRFS info (device loop2): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1) [ 86.353776][ T4524] BTRFS info (device loop2): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2) [ 86.367142][ T4573] bond0: (slave wlan1): Enslaving as an active interface with an up link [ 86.383124][ T4577] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 86.434323][ T4577] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 86.473007][ T4577] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 86.568485][ T33] BTRFS info (device loop2): qgroup scan completed (inconsistency flag cleared) [ 86.589927][ T126] cfg80211: failed to load regulatory.db [ 86.718839][ T4582] loop0: detected capacity change from 0 to 512 [ 86.782719][ T4582] EXT4-fs error (device loop0): ext4_orphan_get:1405: inode #15: comm syz.0.47: inode has both inline data and extents flags [ 86.813899][ T4582] EXT4-fs error (device loop0): ext4_orphan_get:1410: comm syz.0.47: couldn't read orphan inode 15 (err -117) [ 86.845773][ T4582] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: writeback. [ 86.898435][ T4586] netlink: 'syz.4.48': attribute type 10 has an invalid length. [ 86.921810][ T27] audit: type=1800 audit(1776610106.868:9): pid=4582 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.47" name="file1" dev="overlay" ino=20 res=0 errno=0 [ 86.970586][ T27] audit: type=1804 audit(1776610106.898:10): pid=4582 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.0.47" name="/newroot/9/file0/file0/file1" dev="overlay" ino=20 res=1 errno=0 [ 87.005471][ T4586] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 87.032452][ T4268] EXT4-fs (loop0): unmounting filesystem. [ 87.038349][ T4586] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 87.038747][ T4586] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 87.159318][ T4588] netlink: 'syz.0.49': attribute type 10 has an invalid length. [ 87.174521][ T4278] BTRFS info (device loop2): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 87.264900][ T4578] loop1: detected capacity change from 0 to 32768 [ 87.353838][ T4578] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop1 scanned by syz.1.45 (4578) [ 87.422394][ T4578] BTRFS info (device loop1): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 87.463912][ T4589] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 87.467221][ T4578] BTRFS info (device loop1): using sha256 (sha256-avx2) checksum algorithm [ 87.489426][ T4578] BTRFS info (device loop1): force clearing of disk cache [ 87.505106][ T4578] BTRFS info (device loop1): enabling auto defrag [ 87.518365][ T4578] BTRFS info (device loop1): max_inline at 0 [ 87.531237][ T4578] BTRFS info (device loop1): enabling disk space caching [ 87.547884][ T4578] BTRFS info (device loop1): disk space caching is enabled [ 87.582005][ T4589] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 87.608411][ T4589] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 87.637522][ T4600] netlink: 'syz.4.52': attribute type 10 has an invalid length. [ 87.650909][ T4601] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 87.666804][ T4601] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 87.699621][ T4601] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 87.729894][ T4578] BTRFS info (device loop1): enabling ssd optimizations [ 87.742647][ T4578] BTRFS info (device loop1): rebuilding free space tree [ 87.780418][ T4578] BTRFS info (device loop1): disabling free space tree [ 87.805888][ T4578] BTRFS info (device loop1): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1) [ 87.823359][ T4625] netlink: 'syz.3.53': attribute type 10 has an invalid length. [ 87.852718][ T4578] BTRFS info (device loop1): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2) [ 87.935617][ T4626] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 87.984847][ T4578] BTRFS info (device loop1): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 88.000701][ T4626] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 88.016873][ T4626] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 88.153725][ T4630] netlink: 'syz.4.55': attribute type 10 has an invalid length. [ 88.182784][ T4630] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 88.210992][ T4630] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 88.218916][ T4630] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 89.449397][ T4646] loop2: detected capacity change from 0 to 32768 [ 89.583533][ T4646] XFS (loop2): Mounting V5 Filesystem [ 89.714084][ T4646] XFS (loop2): Starting recovery (logdev: internal) [ 89.772559][ T4646] XFS (loop2): Ending recovery (logdev: internal) [ 89.814317][ T4650] loop0: detected capacity change from 0 to 32768 [ 89.995417][ T4650] XFS (loop0): Mounting V5 Filesystem [ 90.112907][ T4674] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 90.138328][ T4650] XFS (loop0): Ending clean mount [ 90.159326][ T4674] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 90.167719][ T4674] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 90.177189][ T4650] XFS (loop0): Quotacheck needed: Please wait. [ 90.228488][ T4650] XFS (loop0): Quotacheck: Done. [ 90.277505][ T4646] syz.2.61 (4646) used greatest stack depth: 17688 bytes left [ 90.308753][ T27] audit: type=1804 audit(1776610110.258:11): pid=4650 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.0.63" name="/newroot/12/file0/bus" dev="loop0" ino=9291 res=1 errno=0 [ 90.444024][ T4278] XFS (loop2): Unmounting Filesystem [ 90.463879][ T4268] XFS (loop0): Unmounting Filesystem [ 91.077976][ T4685] Set syz1 is full, maxelem 1023 reached [ 91.561718][ T4683] loop2: detected capacity change from 0 to 32768 [ 91.593645][ T4683] BTRFS: device fsid 14d642db-7b15-43e4-81e6-4b8fac6a25f8 devid 1 transid 8 /dev/loop2 scanned by syz.2.68 (4683) [ 91.680005][ T4683] BTRFS info (device loop2): first mount of filesystem 14d642db-7b15-43e4-81e6-4b8fac6a25f8 [ 91.715171][ T4683] BTRFS info (device loop2): using blake2b (blake2b-256-generic) checksum algorithm [ 91.744660][ T4683] BTRFS info (device loop2): setting incompat feature flag for COMPRESS_ZSTD (0x10) [ 91.793266][ T4683] BTRFS info (device loop2): use zstd compression, level 3 [ 91.811609][ T4683] BTRFS info (device loop2): using free space tree [ 91.982874][ T4683] BTRFS info (device loop2): enabling ssd optimizations [ 92.016432][ T27] audit: type=1800 audit(1776610111.968:12): pid=4683 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.68" name="file1" dev="loop2" ino=260 res=0 errno=0 [ 92.453978][ T4278] BTRFS info (device loop2): last unmount of filesystem 14d642db-7b15-43e4-81e6-4b8fac6a25f8 [ 94.385433][ T4727] loop0: detected capacity change from 0 to 32768 [ 94.876259][ T4727] XFS (loop0): Mounting V5 Filesystem [ 95.137931][ T4727] XFS (loop0): Ending clean mount [ 95.166413][ T4727] XFS (loop0): Quotacheck needed: Please wait. [ 95.196372][ T4727] XFS (loop0): Quotacheck: Done. [ 95.439273][ T4268] XFS (loop0): Unmounting Filesystem [ 96.218098][ T4775] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 96.258299][ T4775] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 96.280911][ T4775] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 98.470467][ T4779] loop0: detected capacity change from 0 to 32768 [ 98.545744][ T4779] BTRFS: device fsid 14d642db-7b15-43e4-81e6-4b8fac6a25f8 devid 1 transid 8 /dev/loop0 scanned by syz.0.97 (4779) [ 98.605507][ T4779] BTRFS info (device loop0): first mount of filesystem 14d642db-7b15-43e4-81e6-4b8fac6a25f8 [ 98.616626][ T4779] BTRFS info (device loop0): using blake2b (blake2b-256-generic) checksum algorithm [ 98.650361][ T4779] BTRFS info (device loop0): setting incompat feature flag for COMPRESS_ZSTD (0x10) [ 98.687576][ T4779] BTRFS info (device loop0): use zstd compression, level 3 [ 98.719180][ T4779] BTRFS info (device loop0): using free space tree [ 98.908887][ T4779] BTRFS info (device loop0): enabling ssd optimizations [ 98.989777][ T27] audit: type=1800 audit(1776610118.938:13): pid=4779 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.97" name="file1" dev="loop0" ino=260 res=0 errno=0 [ 99.459898][ T4268] BTRFS info (device loop0): last unmount of filesystem 14d642db-7b15-43e4-81e6-4b8fac6a25f8 [ 99.537657][ T4831] netlink: 'syz.1.112': attribute type 10 has an invalid length. [ 99.709852][ T4832] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 99.761926][ T4832] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 99.795976][ T4832] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 100.107086][ T4844] Set syz1 is full, maxelem 1023 reached [ 101.383723][ T4861] overlayfs: failed to clone upperpath [ 101.587035][ T4867] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 101.590554][ T4848] loop0: detected capacity change from 0 to 40427 [ 101.607541][ T4867] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 101.634167][ T4848] F2FS-fs (loop0): invalid crc value [ 101.650561][ T4867] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 101.701400][ T4848] F2FS-fs (loop0): Found nat_bits in checkpoint [ 101.884856][ T4848] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e5 [ 103.992722][ T4887] netlink: 'syz.1.132': attribute type 10 has an invalid length. [ 104.057390][ T4887] bond0: (slave wlan1): Enslaving as an active interface with an up link [ 104.135001][ T4268] syz-executor: attempt to access beyond end of device [ 104.135001][ T4268] loop0: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 104.159831][ T4888] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 104.177640][ T4888] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 104.239318][ T4888] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 105.253428][ T4901] overlayfs: failed to clone upperpath [ 108.164589][ C0] sched: RT throttling activated [ 109.372320][ T4957] Set syz1 is full, maxelem 1023 reached [ 109.498300][ T4964] netlink: 48 bytes leftover after parsing attributes in process `syz.2.160'. [ 109.800263][ T4973] netlink: 24 bytes leftover after parsing attributes in process `syz.1.163'. [ 109.825451][ T4973] netlink: 24 bytes leftover after parsing attributes in process `syz.1.163'. [ 110.024282][ T4970] loop2: detected capacity change from 0 to 32768 [ 110.046338][ T4970] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop2 scanned by syz.2.162 (4970) [ 110.228768][ T4970] BTRFS info (device loop2): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 110.402094][ T4970] BTRFS info (device loop2): using sha256 (sha256-avx2) checksum algorithm [ 110.567092][ T4970] BTRFS info (device loop2): using free space tree [ 111.067651][ T5002] loop0: detected capacity change from 0 to 512 [ 111.131540][ T5002] EXT4-fs error (device loop0): ext4_orphan_get:1405: inode #15: comm syz.0.170: inode has both inline data and extents flags [ 111.198503][ T4970] BTRFS info (device loop2): enabling ssd optimizations [ 111.200306][ T5002] EXT4-fs error (device loop0): ext4_orphan_get:1410: comm syz.0.170: couldn't read orphan inode 15 (err -117) [ 111.315767][ T5002] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: writeback. [ 111.347258][ T5011] Set syz1 is full, maxelem 1023 reached [ 111.384993][ T5002] syz.0.170 (pid 5002) is setting deprecated v1 encryption policy; recommend upgrading to v2. [ 111.450457][ T4278] BTRFS info (device loop2): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 111.620036][ T5015] netlink: 48 bytes leftover after parsing attributes in process `syz.3.173'. [ 111.800234][ T4268] EXT4-fs (loop0): unmounting filesystem. [ 114.416543][ T5053] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 114.457239][ T5053] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 114.463622][ T5055] Set syz1 is full, maxelem 1023 reached [ 114.486779][ T5053] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 114.607132][ T5056] loop2: detected capacity change from 0 to 4096 [ 115.061003][ T5046] loop0: detected capacity change from 0 to 32768 [ 115.280818][ T5046] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop0 scanned by syz.0.183 (5046) [ 115.688092][ T5046] BTRFS info (device loop0): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 115.738444][ T5046] BTRFS info (device loop0): using sha256 (sha256-avx2) checksum algorithm [ 115.804780][ T5046] BTRFS info (device loop0): using free space tree [ 115.865227][ T5078] fuse: Bad value for 'fd' [ 116.085620][ T5046] BTRFS info (device loop0): enabling ssd optimizations [ 116.836350][ T5046] overlayfs: failed to resolve './file0': -2 [ 116.988143][ T4268] BTRFS info (device loop0): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 117.387361][ T5112] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 117.410634][ T5112] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 117.443506][ T5112] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 117.739401][ T5126] process 'syz.4.207' launched '/dev/fd/4' with NULL argv: empty string added [ 119.933641][ T5151] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 119.953908][ T5151] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 119.981264][ T5151] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 120.117900][ T5139] loop2: detected capacity change from 0 to 40427 [ 120.151748][ T5139] F2FS-fs (loop2): invalid crc value [ 120.191604][ T5139] F2FS-fs (loop2): Found nat_bits in checkpoint [ 120.201018][ T5138] overlayfs: failed to clone upperpath [ 120.337173][ T5139] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e5 [ 120.709747][ T5170] fuse: Bad value for 'fd' [ 120.736654][ T27] audit: type=1326 audit(1776610140.688:14): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5171 comm="syz.3.223" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7ea339c819 code=0x7ffc0000 [ 120.801563][ T27] audit: type=1326 audit(1776610140.718:15): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5171 comm="syz.3.223" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7ea339c819 code=0x7ffc0000 [ 120.877424][ T27] audit: type=1326 audit(1776610140.718:16): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5171 comm="syz.3.223" exe="/root/syz-executor" sig=0 arch=c000003e syscall=428 compat=0 ip=0x7f7ea339c819 code=0x7ffc0000 [ 120.967964][ T27] audit: type=1326 audit(1776610140.718:17): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5171 comm="syz.3.223" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7ea339c819 code=0x7ffc0000 [ 121.042238][ T27] audit: type=1326 audit(1776610140.718:18): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5171 comm="syz.3.223" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7ea339c819 code=0x7ffc0000 [ 121.128057][ T5182] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 121.144725][ T27] audit: type=1326 audit(1776610140.718:19): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5171 comm="syz.3.223" exe="/root/syz-executor" sig=0 arch=c000003e syscall=442 compat=0 ip=0x7f7ea339c819 code=0x7ffc0000 [ 121.179892][ T5182] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 121.215749][ T27] audit: type=1326 audit(1776610140.718:20): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5171 comm="syz.3.223" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7ea339c819 code=0x7ffc0000 [ 121.238755][ T5182] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 121.307760][ T27] audit: type=1326 audit(1776610140.718:21): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5171 comm="syz.3.223" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7ea339c819 code=0x7ffc0000 [ 121.701028][ T5179] loop0: detected capacity change from 0 to 32768 [ 121.765674][ T5179] JBD2: Ignoring recovery information on journal [ 121.849147][ T5179] ocfs2: Mounting device (7,0) on (node local, slot 0) with ordered data mode. [ 121.900389][ T5200] fuse: Bad value for 'fd' [ 122.178554][ T4268] ocfs2: Unmounting device (7,0) on (node local) [ 122.916043][ T5208] overlayfs: failed to clone upperpath [ 122.956953][ T5210] netlink: 48 bytes leftover after parsing attributes in process `syz.1.240'. [ 123.197819][ T5216] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 123.237074][ T5216] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 123.264835][ T5216] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 123.541023][ T4278] syz-executor: attempt to access beyond end of device [ 123.541023][ T4278] loop2: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 123.828700][ T5234] fuse: Bad value for 'fd' [ 124.000097][ T5241] loop0: detected capacity change from 0 to 512 [ 124.078006][ T5241] EXT4-fs error (device loop0): ext4_orphan_get:1405: inode #15: comm syz.0.253: inode has both inline data and extents flags [ 124.193144][ T5241] EXT4-fs error (device loop0): ext4_orphan_get:1410: comm syz.0.253: couldn't read orphan inode 15 (err -117) [ 124.314477][ T5241] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: writeback. [ 124.808365][ T27] audit: type=1800 audit(1776610144.758:22): pid=5241 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.253" name="file1" dev="overlay" ino=21 res=0 errno=0 [ 124.846683][ T27] audit: type=1804 audit(1776610144.798:23): pid=5241 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.0.253" name="/newroot/42/file0/file0/file1" dev="overlay" ino=21 res=1 errno=0 [ 124.923123][ T5254] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 124.957859][ T4268] EXT4-fs (loop0): unmounting filesystem. [ 125.022833][ T5254] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 125.041129][ T5254] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 126.062785][ T5250] loop2: detected capacity change from 0 to 32768 [ 126.138343][ T5250] JBD2: Ignoring recovery information on journal [ 126.308605][ T5259] loop0: detected capacity change from 0 to 40427 [ 126.325415][ T5272] fuse: Bad value for 'fd' [ 126.349889][ T5259] F2FS-fs (loop0): invalid crc value [ 126.360569][ T5250] ocfs2: Mounting device (7,2) on (node local, slot 0) with ordered data mode. [ 126.398199][ T5259] F2FS-fs (loop0): Found nat_bits in checkpoint [ 126.560970][ T5259] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e5 [ 126.602145][ T4278] ocfs2: Unmounting device (7,2) on (node local) [ 127.167698][ T5294] loop2: detected capacity change from 0 to 512 [ 127.213448][ T5294] EXT4-fs error (device loop2): ext4_orphan_get:1405: inode #15: comm syz.2.269: inode has both inline data and extents flags [ 127.264839][ T5294] EXT4-fs error (device loop2): ext4_orphan_get:1410: comm syz.2.269: couldn't read orphan inode 15 (err -117) [ 127.284654][ T5294] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback. [ 127.316347][ T27] audit: type=1800 audit(1776610147.268:24): pid=5294 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.269" name="file1" dev="overlay" ino=21 res=0 errno=0 [ 127.340444][ T27] audit: type=1804 audit(1776610147.268:25): pid=5294 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.2.269" name="/newroot/41/file0/file0/file1" dev="overlay" ino=21 res=1 errno=0 [ 127.451151][ T5303] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 127.461113][ T4278] EXT4-fs (loop2): unmounting filesystem. [ 127.516834][ T5303] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 127.526233][ T5303] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 127.745384][ T5309] fuse: Bad value for 'fd' [ 128.591781][ T4268] syz-executor: attempt to access beyond end of device [ 128.591781][ T4268] loop0: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 128.677713][ T5328] loop2: detected capacity change from 0 to 4096 [ 129.000672][ T5335] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 129.745377][ T5335] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 129.752887][ T5335] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 129.804979][ T5325] overlayfs: missing 'lowerdir' [ 129.971159][ T5339] fuse: Bad value for 'fd' [ 130.040455][ T5341] loop0: detected capacity change from 0 to 512 [ 130.143886][ T5341] EXT4-fs error (device loop0): ext4_orphan_get:1405: inode #15: comm syz.0.285: inode has both inline data and extents flags [ 130.179719][ T5341] EXT4-fs error (device loop0): ext4_orphan_get:1410: comm syz.0.285: couldn't read orphan inode 15 (err -117) [ 130.192375][ T5341] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: writeback. [ 130.228960][ T27] audit: type=1800 audit(1776610150.178:26): pid=5341 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.285" name="file1" dev="overlay" ino=21 res=0 errno=0 [ 130.251189][ T5353] netlink: 48 bytes leftover after parsing attributes in process `syz.1.295'. [ 130.323503][ T4268] EXT4-fs (loop0): unmounting filesystem. [ 130.537269][ T27] audit: type=1804 audit(1776610150.178:27): pid=5341 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.0.285" name="/newroot/44/file0/file0/file1" dev="overlay" ino=21 res=1 errno=0 [ 130.923131][ T5360] netlink: 48 bytes leftover after parsing attributes in process `syz.3.296'. [ 131.180001][ T5361] loop2: detected capacity change from 0 to 4096 [ 131.879617][ T5363] loop0: detected capacity change from 0 to 32768 [ 131.922085][ T5363] JBD2: Ignoring recovery information on journal [ 132.161623][ T5363] ocfs2: Mounting device (7,0) on (node local, slot 0) with ordered data mode. [ 132.667017][ T1273] ieee802154 phy0 wpan0: encryption failed: -22 [ 132.673376][ T1273] ieee802154 phy1 wpan1: encryption failed: -22 [ 132.872048][ T5389] overlayfs: failed to clone upperpath [ 132.911630][ T4268] ocfs2: Unmounting device (7,0) on (node local) [ 132.929994][ T5393] netlink: 48 bytes leftover after parsing attributes in process `syz.3.310'. [ 133.925896][ T5372] overlayfs: missing 'lowerdir' [ 134.179865][ T5414] netlink: 268 bytes leftover after parsing attributes in process `syz.2.319'. [ 134.439303][ T5423] overlayfs: failed to clone upperpath [ 138.687676][ T5491] netlink: 16 bytes leftover after parsing attributes in process `syz.3.351'. [ 140.068020][ T5527] netlink: 8 bytes leftover after parsing attributes in process `syz.4.366'. [ 141.141840][ T5521] loop2: detected capacity change from 0 to 40427 [ 141.170387][ T5521] F2FS-fs (loop2): build fault injection attr: rate: 684, type: 0x3ffff [ 141.198436][ T5521] F2FS-fs (loop2): build fault injection attr: rate: 0, type: 0x35f7 [ 141.224386][ T5521] F2FS-fs (loop2): invalid crc value [ 141.253274][ T5521] F2FS-fs (loop2): Found nat_bits in checkpoint [ 141.779696][ T5521] F2FS-fs (loop2): Start checkpoint disabled! [ 142.146306][ T5521] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e6 [ 142.305947][ T5521] overlayfs: missing 'lowerdir' [ 142.338781][ T5564] netlink: 8 bytes leftover after parsing attributes in process `syz.1.380'. [ 142.413896][ T5566] netlink: 8 bytes leftover after parsing attributes in process `syz.4.381'. [ 142.446196][ T5566] netlink: 12 bytes leftover after parsing attributes in process `syz.4.381'. [ 142.465253][ T5566] netlink: 'syz.4.381': attribute type 12 has an invalid length. [ 142.487042][ T5566] netdevsim netdevsim4 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 142.496303][ T5566] netdevsim netdevsim4 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 142.505241][ T5566] netdevsim netdevsim4 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 142.513975][ T5566] netdevsim netdevsim4 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 142.583482][ T46] kworker/u4:3: attempt to access beyond end of device [ 142.583482][ T46] loop2: rw=2049, sector=40960, nr_sectors = 40 limit=40427 [ 142.612357][ T5566] netlink: 8 bytes leftover after parsing attributes in process `syz.4.381'. [ 142.642792][ T5566] netlink: 12 bytes leftover after parsing attributes in process `syz.4.381'. [ 142.664766][ T5566] netlink: 'syz.4.381': attribute type 12 has an invalid length. [ 142.786090][ T5572] loop0: detected capacity change from 0 to 4096 [ 142.921731][ T5578] netlink: 24 bytes leftover after parsing attributes in process `syz.1.388'. [ 143.264899][ T5585] overlayfs: failed to clone upperpath [ 143.661487][ T5596] netlink: 8 bytes leftover after parsing attributes in process `syz.2.395'. [ 144.244549][ T5604] loop0: detected capacity change from 0 to 4096 [ 144.534284][ T5615] overlayfs: failed to clone upperpath [ 145.732086][ T5594] overlayfs: missing 'lowerdir' [ 145.983064][ T5637] loop0: detected capacity change from 0 to 4096 [ 146.219548][ T5643] overlayfs: failed to clone upperpath [ 146.423218][ T5629] loop2: detected capacity change from 0 to 32768 [ 146.462121][ T5629] XFS (loop2): Mounting V5 Filesystem [ 146.610630][ T5629] XFS (loop2): Ending clean mount [ 146.620839][ T5629] XFS (loop2): Quotacheck needed: Please wait. [ 146.831536][ T5629] XFS (loop2): Quotacheck: Done. [ 147.756628][ T4278] XFS (loop2): Unmounting Filesystem [ 152.240843][ T5697] loop2: detected capacity change from 0 to 32768 [ 152.439193][ T5697] XFS (loop2): Mounting V5 Filesystem [ 152.582193][ T5697] XFS (loop2): Ending clean mount [ 152.610151][ T5697] XFS (loop2): Quotacheck needed: Please wait. [ 152.667436][ T5697] XFS (loop2): Quotacheck: Done. [ 152.824074][ T4278] XFS (loop2): Unmounting Filesystem [ 153.017983][ T5726] overlayfs: failed to clone upperpath [ 153.549069][ T5742] netlink: 8 bytes leftover after parsing attributes in process `syz.4.451'. [ 153.574954][ T5742] netlink: 12 bytes leftover after parsing attributes in process `syz.4.451'. [ 153.609498][ T5742] netlink: 'syz.4.451': attribute type 12 has an invalid length. [ 153.646075][ T5742] netlink: 8 bytes leftover after parsing attributes in process `syz.4.451'. [ 153.675513][ T5742] netlink: 12 bytes leftover after parsing attributes in process `syz.4.451'. [ 153.712949][ T5742] netlink: 'syz.4.451': attribute type 12 has an invalid length. [ 153.772012][ T5746] loop2: detected capacity change from 0 to 4096 [ 154.091912][ T5735] loop0: detected capacity change from 0 to 40427 [ 154.132511][ T5735] F2FS-fs (loop0): build fault injection attr: rate: 684, type: 0x3ffff [ 154.157963][ T5735] F2FS-fs (loop0): build fault injection attr: rate: 0, type: 0x35f7 [ 154.195947][ T5735] F2FS-fs (loop0): invalid crc value [ 154.228083][ T5735] F2FS-fs (loop0): Found nat_bits in checkpoint [ 154.370189][ T5735] F2FS-fs (loop0): Start checkpoint disabled! [ 154.428471][ T5735] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e6 [ 154.491925][ T5735] overlayfs: option "workdir=./bus" is useless in a non-upper mount, ignore [ 154.518988][ T5735] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent [ 154.706595][ T4328] kworker/u4:8: attempt to access beyond end of device [ 154.706595][ T4328] loop0: rw=2049, sector=40960, nr_sectors = 40 limit=40427 [ 156.453931][ T5779] netlink: 24 bytes leftover after parsing attributes in process `syz.1.466'. [ 157.249118][ T5804] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 157.260818][ T5804] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 157.284209][ T5804] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 157.466162][ T5797] loop2: detected capacity change from 0 to 40427 [ 157.499813][ T5797] F2FS-fs (loop2): invalid crc value [ 157.539911][ T5797] F2FS-fs (loop2): Found nat_bits in checkpoint [ 157.644003][ T5797] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e5 [ 157.826657][ T5824] overlayfs: failed to clone upperpath [ 158.480219][ T4278] syz-executor: attempt to access beyond end of device [ 158.480219][ T4278] loop2: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 158.508013][ T5837] L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 160.169062][ T5875] overlayfs: failed to clone upperpath [ 160.214778][ T4516] usb 3-1: new high-speed USB device number 2 using dummy_hcd [ 160.414666][ T4516] usb 3-1: Using ep0 maxpacket: 32 [ 160.431952][ T4516] usb 3-1: config 0 has an invalid interface number: 196 but max is 0 [ 160.454635][ T4516] usb 3-1: config 0 has no interface number 0 [ 160.464863][ T4516] usb 3-1: config 0 interface 196 altsetting 1 bulk endpoint 0x2 has invalid maxpacket 528 [ 160.506570][ T4516] usb 3-1: config 0 interface 196 altsetting 1 endpoint 0x82 has invalid wMaxPacketSize 0 [ 160.538432][ T4516] usb 3-1: config 0 interface 196 altsetting 1 bulk endpoint 0x82 has invalid maxpacket 0 [ 160.569347][ T4516] usb 3-1: config 0 interface 196 has no altsetting 0 [ 160.601352][ T4516] usb 3-1: New USB device found, idVendor=05ac, idProduct=7700, bcdDevice=eb.3a [ 160.617879][ T4516] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 160.644616][ T4516] usb 3-1: Product: syz [ 160.655042][ T4516] usb 3-1: Manufacturer: syz [ 160.669971][ T4516] usb 3-1: SerialNumber: syz [ 160.689335][ T4516] usb 3-1: config 0 descriptor?? [ 160.718855][ T5868] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 161.208554][ T4516] ipheth 3-1:0.196: Apple iPhone USB Ethernet device attached [ 161.428823][ T5901] vcan0: MTU too low for tipc bearer [ 161.448937][ T5901] tipc: Enabling of bearer rejected, failed to enable media [ 162.327774][ T27] audit: type=1326 audit(1776610182.278:28): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5938 comm="syz.1.521" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fc4e1b9c819 code=0x0 [ 162.479563][ T3935] ipheth 3-1:0.196: ipheth_rx_submit: usb_submit_urb: -90 [ 162.780632][ T5956] overlayfs: failed to clone upperpath [ 162.988442][ T4313] usb 3-1: USB disconnect, device number 2 [ 163.151767][ T4313] ipheth 3-1:0.196: Apple iPhone USB Ethernet now disconnected [ 163.614805][ T4423] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 163.828899][ T4423] usb 1-1: Using ep0 maxpacket: 8 [ 163.839028][ T4423] usb 1-1: config 0 interface 0 altsetting 0 has an invalid endpoint with address 0x0, skipping [ 163.878739][ T4423] usb 1-1: config 0 interface 0 altsetting 0 has an invalid endpoint with address 0x23, skipping [ 163.891169][ T6002] fuse: Bad value for 'fd' [ 163.910978][ T4423] usb 1-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 1 [ 163.967140][ T4423] usb 1-1: New USB device found, idVendor=084e, idProduct=1001, bcdDevice=ed.ae [ 163.994634][ T4423] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 164.022914][ T4423] usb 1-1: Product: syz [ 164.048452][ T4423] usb 1-1: Manufacturer: syz [ 164.053091][ T4423] usb 1-1: SerialNumber: syz [ 164.087031][ T4423] usb 1-1: config 0 descriptor?? [ 164.335861][ T4510] usb 1-1: USB disconnect, device number 2 [ 164.376111][ T6013] overlayfs: failed to clone upperpath [ 164.674932][ T6022] overlayfs: failed to clone upperpath [ 165.241736][ T6046] overlayfs: failed to clone upperpath [ 165.377121][ T6050] overlayfs: failed to clone upperpath [ 165.810410][ T6068] fuse: Bad value for 'fd' [ 166.142906][ T6084] overlayfs: upper fs does not support RENAME_WHITEOUT. [ 166.152318][ T6084] overlayfs: failed to set xattr on upper [ 166.163552][ T6084] overlayfs: ...falling back to index=off,metacopy=off. [ 166.385615][ T4510] usb 1-1: new high-speed USB device number 3 using dummy_hcd [ 166.574793][ T4510] usb 1-1: Using ep0 maxpacket: 16 [ 166.581954][ T4510] usb 1-1: config 0 interface 0 altsetting 2 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 166.594113][ T4510] usb 1-1: config 0 interface 0 altsetting 2 endpoint 0x81 has invalid wMaxPacketSize 0 [ 166.606903][ T4510] usb 1-1: config 0 interface 0 has no altsetting 0 [ 166.616285][ T4510] usb 1-1: New USB device found, idVendor=056a, idProduct=0331, bcdDevice= 0.00 [ 166.635278][ T4510] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 166.690642][ T4510] usb 1-1: config 0 descriptor?? [ 166.831172][ T6112] fuse: Bad value for 'fd' [ 167.329437][ T4313] usb 1-1: USB disconnect, device number 3 [ 169.257967][ T6214] overlayfs: failed to clone upperpath [ 169.414978][ T27] audit: type=1804 audit(1776610189.368:29): pid=6222 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.4.641" name="bus" dev="ramfs" ino=38972 res=1 errno=0 [ 169.439920][ T27] audit: type=1804 audit(1776610189.388:30): pid=6222 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.4.641" name="bus" dev="ramfs" ino=38972 res=1 errno=0 [ 169.561780][ T4510] usb 3-1: new high-speed USB device number 3 using dummy_hcd [ 169.764265][ T4510] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 169.780397][ T4510] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 169.790826][ T4510] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 169.805590][ T4510] usb 3-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 169.814963][ T4510] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 169.833375][ T4510] usb 3-1: config 0 descriptor?? [ 170.261698][ T4510] plantronics 0003:047F:FFFF.0002: unknown main item tag 0x0 [ 170.287415][ T4510] plantronics 0003:047F:FFFF.0002: unknown main item tag 0x0 [ 170.300533][ T4510] plantronics 0003:047F:FFFF.0002: unknown main item tag 0x0 [ 170.316002][ T4510] plantronics 0003:047F:FFFF.0002: unknown main item tag 0x0 [ 170.331249][ T4510] plantronics 0003:047F:FFFF.0002: unknown main item tag 0x0 [ 170.345604][ T4510] plantronics 0003:047F:FFFF.0002: unknown main item tag 0x0 [ 170.367247][ T4510] plantronics 0003:047F:FFFF.0002: unknown main item tag 0x0 [ 170.388678][ T4510] plantronics 0003:047F:FFFF.0002: unknown main item tag 0x0 [ 170.403864][ T4510] plantronics 0003:047F:FFFF.0002: unknown main item tag 0x0 [ 170.416119][ T4510] plantronics 0003:047F:FFFF.0002: unknown main item tag 0x0 [ 170.426976][ T4510] plantronics 0003:047F:FFFF.0002: unknown main item tag 0x0 [ 170.447695][ T4510] plantronics 0003:047F:FFFF.0002: unknown main item tag 0x0 [ 170.467071][ T4510] plantronics 0003:047F:FFFF.0002: unknown main item tag 0x0 [ 170.478178][ T4510] plantronics 0003:047F:FFFF.0002: unknown main item tag 0x0 [ 170.490177][ T4510] plantronics 0003:047F:FFFF.0002: unknown main item tag 0x0 [ 170.506518][ T4510] plantronics 0003:047F:FFFF.0002: No inputs registered, leaving [ 170.555640][ T4510] plantronics 0003:047F:FFFF.0002: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.2-1/input0 [ 170.592666][ T4510] usb 3-1: USB disconnect, device number 3 [ 170.764314][ T6228] fido_id[6228]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.2/usb3/report_descriptor': No such file or directory [ 171.454619][ T6225] ip6gre0: mtu less than device minimum [ 171.711839][ T6248] set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 173.005843][ T6303] overlayfs: failed to clone lowerpath [ 173.104618][ T4313] usb 3-1: new high-speed USB device number 4 using dummy_hcd [ 173.294672][ T4313] usb 3-1: Using ep0 maxpacket: 16 [ 173.301895][ T4313] usb 3-1: config 0 interface 0 has no altsetting 0 [ 173.316486][ T4313] usb 3-1: New USB device found, idVendor=04f3, idProduct=0755, bcdDevice= 0.00 [ 173.338639][ T4313] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 173.372903][ T4313] usb 3-1: config 0 descriptor?? [ 173.815202][ T4313] elan 0003:04F3:0755.0003: unknown main item tag 0x0 [ 173.822613][ T4313] elan 0003:04F3:0755.0003: unknown main item tag 0x0 [ 173.830001][ T4313] elan 0003:04F3:0755.0003: unknown main item tag 0x0 [ 173.838236][ T4313] elan 0003:04F3:0755.0003: unknown main item tag 0x0 [ 173.845711][ T4313] elan 0003:04F3:0755.0003: unknown main item tag 0x0 [ 173.852723][ T4313] elan 0003:04F3:0755.0003: unknown main item tag 0x0 [ 173.864184][ T4313] elan 0003:04F3:0755.0003: unknown main item tag 0x0 [ 173.871287][ T4313] elan 0003:04F3:0755.0003: unknown main item tag 0x0 [ 173.878713][ T4313] elan 0003:04F3:0755.0003: unknown main item tag 0x0 [ 173.885827][ T4313] elan 0003:04F3:0755.0003: unknown main item tag 0x0 [ 173.892790][ T4313] elan 0003:04F3:0755.0003: unknown main item tag 0x0 [ 173.900032][ T4313] elan 0003:04F3:0755.0003: unknown main item tag 0x0 [ 173.908216][ T4313] elan 0003:04F3:0755.0003: unknown main item tag 0x0 [ 173.916056][ T4313] elan 0003:04F3:0755.0003: unknown main item tag 0x0 [ 173.929760][ T4313] elan 0003:04F3:0755.0003: unknown main item tag 0x0 [ 173.942833][ T4313] elan 0003:04F3:0755.0003: unknown main item tag 0x0 [ 173.950072][ T4313] elan 0003:04F3:0755.0003: unknown main item tag 0x0 [ 173.957898][ T4313] elan 0003:04F3:0755.0003: unknown main item tag 0x0 [ 173.965706][ T4313] elan 0003:04F3:0755.0003: unknown main item tag 0x0 [ 173.975865][ T4313] elan 0003:04F3:0755.0003: unknown main item tag 0x0 [ 173.982677][ T4313] elan 0003:04F3:0755.0003: unknown main item tag 0x0 [ 173.989867][ T4313] elan 0003:04F3:0755.0003: unknown main item tag 0x0 [ 173.996981][ T4313] elan 0003:04F3:0755.0003: unknown main item tag 0x0 [ 174.003938][ T4313] elan 0003:04F3:0755.0003: unknown main item tag 0x0 [ 174.011026][ T4313] elan 0003:04F3:0755.0003: unknown main item tag 0x0 [ 174.018234][ T4313] elan 0003:04F3:0755.0003: unknown main item tag 0x0 [ 174.030100][ T4313] elan 0003:04F3:0755.0003: unknown main item tag 0x0 [ 174.038321][ T4313] elan 0003:04F3:0755.0003: unknown main item tag 0x0 [ 174.049370][ T4313] elan 0003:04F3:0755.0003: unknown main item tag 0x0 [ 174.057399][ T4313] elan 0003:04F3:0755.0003: unknown main item tag 0x0 [ 174.066020][ T4313] elan 0003:04F3:0755.0003: unknown main item tag 0x0 [ 174.072825][ T4313] elan 0003:04F3:0755.0003: unknown main item tag 0x0 [ 174.082376][ T4313] elan 0003:04F3:0755.0003: unknown main item tag 0x0 [ 174.089690][ T4313] elan 0003:04F3:0755.0003: unknown main item tag 0x0 [ 174.096875][ T4313] elan 0003:04F3:0755.0003: unknown main item tag 0x0 [ 174.103683][ T4313] elan 0003:04F3:0755.0003: unknown main item tag 0x0 [ 174.120799][ T4313] elan 0003:04F3:0755.0003: unknown main item tag 0x0 [ 174.134622][ T4313] elan 0003:04F3:0755.0003: unknown main item tag 0x0 [ 174.149363][ T4313] elan 0003:04F3:0755.0003: unknown main item tag 0x0 [ 174.159522][ T6336] tipc: Started in network mode [ 174.174667][ T4313] elan 0003:04F3:0755.0003: unknown main item tag 0x0 [ 174.181755][ T6336] tipc: Node identity 4004, cluster identity 4711 [ 174.192193][ T4313] elan 0003:04F3:0755.0003: unknown main item tag 0x0 [ 174.204744][ T4313] elan 0003:04F3:0755.0003: hidraw0: USB HID v0.07 Device [HID 04f3:0755] on usb-dummy_hcd.2-1/input0 [ 174.215945][ T6336] tipc: Node number set to 16388 [ 174.240885][ T4313] usb 3-1: USB disconnect, device number 4 [ 174.456932][ T6340] fido_id[6340]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.2/usb3/report_descriptor': No such file or directory [ 175.534713][ T4313] usb 3-1: new high-speed USB device number 5 using dummy_hcd [ 175.724745][ T4313] usb 3-1: Using ep0 maxpacket: 16 [ 175.738778][ T4313] usb 3-1: config 0 has no interfaces? [ 175.787056][ T4313] usb 3-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 175.842024][ T4313] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 175.884131][ T4313] usb 3-1: Product: syz [ 175.911254][ T4313] usb 3-1: Manufacturer: syz [ 175.939706][ T4313] usb 3-1: SerialNumber: syz [ 175.975594][ T4313] usb 3-1: config 0 descriptor?? [ 176.636905][ T4313] usb 3-1: USB disconnect, device number 5 [ 178.314613][ T4421] usb 1-1: new high-speed USB device number 4 using dummy_hcd [ 178.520705][ T4421] usb 1-1: too many endpoints for config 0 interface 0 altsetting 0: 253, using maximum allowed: 30 [ 178.553169][ T4421] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 178.585193][ T4421] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 178.604662][ T4421] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 253 [ 178.639668][ T4421] usb 1-1: New USB device found, idVendor=05ac, idProduct=8243, bcdDevice=8b.40 [ 178.659054][ T4421] usb 1-1: New USB device strings: Mfr=11, Product=0, SerialNumber=0 [ 178.674970][ T4421] usb 1-1: Manufacturer: syz [ 178.715630][ T4421] usb 1-1: config 0 descriptor?? [ 178.836250][ T27] audit: type=1326 audit(1776610198.788:31): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6458 comm="syz.3.735" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f7ea339c819 code=0x0 [ 179.129887][ T4421] appleir 0003:05AC:8243.0004: unknown main item tag 0x0 [ 179.143061][ T4421] appleir 0003:05AC:8243.0004: No inputs registered, leaving [ 179.172846][ T4421] appleir 0003:05AC:8243.0004: hiddev0,hidraw0: USB HID v0.00 Device [syz] on usb-dummy_hcd.0-1/input0 [ 179.266085][ T6468] netlink: 'syz.2.738': attribute type 10 has an invalid length. [ 179.303169][ T6468] bond0: (slave wlan1): Enslaving as an active interface with an up link [ 179.334031][ T6468] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 179.359496][ T6468] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 179.372371][ T6468] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 179.418735][ T4421] usb 1-1: USB disconnect, device number 4 [ 179.603024][ T6475] kvm: pic: non byte write [ 179.747932][ T6481] overlayfs: failed to clone upperpath [ 180.846893][ T2967] Bluetooth: hci5: Frame reassembly failed (-84) [ 181.001427][ T6524] overlayfs: failed to clone upperpath [ 182.164282][ T6580] overlayfs: failed to clone upperpath [ 182.824867][ T4286] Bluetooth: hci5: Opcode 0x1003 failed: -110 [ 182.934603][ T4421] usb 3-1: new full-speed USB device number 6 using dummy_hcd [ 183.136192][ T4421] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 183.165620][ T4421] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 512, setting to 64 [ 183.200747][ T4421] usb 3-1: config 1 interface 1 altsetting 1 endpoint 0x82 has invalid maxpacket 1024, setting to 64 [ 183.220589][ T4421] usb 3-1: config 1 interface 1 altsetting 1 endpoint 0x3 has invalid maxpacket 512, setting to 64 [ 183.242069][ T6618] syz.3.801 calls setitimer() with new_value NULL pointer. Misfeature support will be removed [ 183.274296][ T4421] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 183.293853][ T4421] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 183.317980][ T4421] usb 3-1: Product: syz [ 183.322200][ T4421] usb 3-1: Manufacturer: syz [ 183.340332][ T4421] usb 3-1: SerialNumber: syz [ 183.363232][ T6599] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 183.379816][ T4421] cdc_mbim 3-1:1.0: skipping garbage [ 183.414731][ T4423] usb 1-1: new high-speed USB device number 5 using dummy_hcd [ 183.582753][ T6599] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 183.614811][ T4423] usb 1-1: Using ep0 maxpacket: 16 [ 183.625553][ T6599] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 183.640640][ T4423] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 183.662307][ T4423] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 183.700752][ T4423] usb 1-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 183.720923][ T4423] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 183.743669][ T4423] usb 1-1: config 0 descriptor?? [ 184.264322][ T6599] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 184.292049][ T6599] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 184.300093][ T4421] cdc_mbim 3-1:1.0: dwNtbInMaxSize=0 is too small. Using 2048 [ 184.317031][ T4421] cdc_mbim 3-1:1.0: setting rx_max = 2048 [ 184.522541][ T4421] cdc_mbim 3-1:1.0: setting tx_max = 184 [ 184.562580][ T4421] cdc_mbim 3-1:1.0: cdc-wdm0: USB WDM device [ 184.611243][ T4421] cdc_mbim 3-1:1.0 wwan0: register 'cdc_mbim' at usb-dummy_hcd.2-1, CDC MBIM, ea:db:18:ba:e4:63 [ 184.749327][ T4421] usb 3-1: USB disconnect, device number 6 [ 184.780155][ T4421] cdc_mbim 3-1:1.0 wwan0: unregister 'cdc_mbim' usb-dummy_hcd.2-1, CDC MBIM [ 185.814638][ T4313] usb 3-1: new high-speed USB device number 7 using dummy_hcd [ 186.004592][ T4313] usb 3-1: Using ep0 maxpacket: 16 [ 186.012604][ T4313] usb 3-1: config 0 has an invalid interface number: 34 but max is 0 [ 186.041371][ T4313] usb 3-1: config 0 has no interface number 0 [ 186.048756][ T4313] usb 3-1: config 0 interface 34 altsetting 0 bulk endpoint 0xA has invalid maxpacket 1023 [ 186.061341][ T4313] usb 3-1: config 0 interface 34 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 80 [ 186.083683][ T4313] usb 3-1: New USB device found, idVendor=0b95, idProduct=772a, bcdDevice=82.73 [ 186.092950][ T4313] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 186.102649][ T4313] usb 3-1: Product: syz [ 186.111558][ T4313] usb 3-1: Manufacturer: syz [ 186.116513][ T4313] usb 3-1: SerialNumber: syz [ 186.132329][ T4313] usb 3-1: config 0 descriptor?? [ 186.138207][ T6653] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 186.147538][ T6653] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 186.385882][ T6653] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 186.407260][ T6653] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 186.464068][ T6669] netlink: 12 bytes leftover after parsing attributes in process `syz.3.821'. [ 186.632686][ T4313] asix 3-1:0.34 (unnamed net_device) (uninitialized): invalid hw address, using random [ 186.767532][ T4423] usbhid 1-1:0.0: can't add hid device: -71 [ 186.774177][ T4423] usbhid: probe of 1-1:0.0 failed with error -71 [ 186.803185][ T4423] usb 1-1: USB disconnect, device number 5 [ 188.682010][ T6716] overlayfs: failed to clone upperpath [ 188.726072][ T4313] asix 3-1:0.34 (unnamed net_device) (uninitialized): Failed to write reg index 0x0000: -71 [ 188.744816][ T4313] asix 3-1:0.34 (unnamed net_device) (uninitialized): Failed to write RX_CTL mode to 0x0088: ffffffb9 [ 188.765018][ T4313] asix: probe of 3-1:0.34 failed with error -71 [ 188.787751][ T4313] usb 3-1: USB disconnect, device number 7 [ 188.806986][ T4512] usb 1-1: new high-speed USB device number 6 using dummy_hcd [ 189.000187][ T4512] usb 1-1: Using ep0 maxpacket: 16 [ 189.012966][ T4512] usb 1-1: config 0 interface 0 altsetting 1 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 189.036364][ T4512] usb 1-1: config 0 interface 0 has no altsetting 0 [ 189.053362][ T4512] usb 1-1: New USB device found, idVendor=28bd, idProduct=0055, bcdDevice= 0.00 [ 189.072938][ T4512] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 189.100188][ T4512] usb 1-1: config 0 descriptor?? [ 189.411177][ T27] audit: type=1326 audit(1776610209.358:32): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6727 comm="syz.3.847" exe="/root/syz-executor" sig=31 arch=c000003e syscall=39 compat=0 ip=0x7f7ea3396597 code=0x0 [ 189.546215][ T4512] uclogic 0003:28BD:0055.0005: interface is invalid, ignoring [ 189.733113][ T4317] usb 1-1: USB disconnect, device number 6 [ 190.085985][ T27] audit: type=1326 audit(1776610210.038:33): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6755 comm="syz.1.860" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fc4e1b9c819 code=0x0 [ 191.074640][ T48] Bluetooth: hci0: command 0x0406 tx timeout [ 191.080718][ T48] Bluetooth: hci3: command 0x0406 tx timeout [ 191.086927][ T4286] Bluetooth: hci4: command 0x0406 tx timeout [ 191.086958][ T4276] Bluetooth: hci2: command 0x0406 tx timeout [ 191.092970][ T4286] Bluetooth: hci1: command 0x0406 tx timeout [ 191.785810][ T6795] overlayfs: failed to clone lowerpath [ 192.584948][ T4423] usb 3-1: new high-speed USB device number 8 using dummy_hcd [ 192.779885][ T4423] usb 3-1: Using ep0 maxpacket: 16 [ 192.787930][ T4423] usb 3-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 255, changing to 7 [ 192.805434][ T4423] usb 3-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 95, changing to 7 [ 192.822041][ T4423] usb 3-1: New USB device found, idVendor=0582, idProduct=0582, bcdDevice= 0.40 [ 192.843868][ T4423] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 192.853204][ T4423] usb 3-1: Product: syz [ 192.861592][ T4423] usb 3-1: Manufacturer: syz [ 192.867312][ T4423] usb 3-1: SerialNumber: syz [ 193.081936][ T6812] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 193.112642][ T6812] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 193.315703][ T4423] usb 3-1: 1:1 : incorrect wMaxPacketSize for BADD profile [ 193.329420][ T4423] usb 3-1: incorrect wMaxPacketSize 0x3ff for BADD profile [ 193.423446][ T4423] snd-usb-audio: probe of 3-1:1.0 failed with error -22 [ 193.466247][ T4423] usb 3-1: USB disconnect, device number 8 [ 193.722664][ T4343] udevd[4343]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 193.906299][ T6848] bridge0: port 3(erspan0) entered blocking state [ 193.919060][ T6848] bridge0: port 3(erspan0) entered disabled state [ 193.935938][ T6848] device erspan0 entered promiscuous mode [ 193.954440][ T6848] bridge0: port 3(erspan0) entered blocking state [ 193.961684][ T6848] bridge0: port 3(erspan0) entered forwarding state [ 193.977897][ T6849] device erspan0 left promiscuous mode [ 193.984678][ T6849] bridge0: port 3(erspan0) entered disabled state [ 194.110327][ T1273] ieee802154 phy0 wpan0: encryption failed: -22 [ 194.116844][ T1273] ieee802154 phy1 wpan1: encryption failed: -22 [ 194.177010][ T6853] netlink: 4 bytes leftover after parsing attributes in process `syz.2.899'. [ 194.649499][ T6877] set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 194.801003][ T6881] user requested TSC rate below hardware speed [ 196.648082][ T6929] netlink: 'syz.4.928': attribute type 27 has an invalid length. [ 197.205285][ T6929] bridge0: port 2(bridge_slave_1) entered disabled state [ 197.213905][ T6929] bridge0: port 1(bridge_slave_0) entered disabled state [ 198.425116][ T6960] DRBG: could not allocate digest TFM handle: hmac(sha512) [ 198.466637][ T6929] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 198.603732][ T6929] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 199.127604][ T6929] netdevsim netdevsim4 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 199.136809][ T6929] netdevsim netdevsim4 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 199.146465][ T6929] netdevsim netdevsim4 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 199.155990][ T6929] netdevsim netdevsim4 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 199.269954][ T6929] netdevsim netdevsim4 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 199.279100][ T6929] netdevsim netdevsim4 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 199.288099][ T6929] netdevsim netdevsim4 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 199.297231][ T6929] netdevsim netdevsim4 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 199.395557][ T6989] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 199.434571][ T6989] Bluetooth: hci0: Opcode 0x0406 failed: -4 [ 199.474502][ T6989] Bluetooth: hci0: Suspend notifier action (1) failed: -4 [ 199.506695][ T6989] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 199.518980][ T6989] Bluetooth: hci1: Opcode 0x0406 failed: -4 [ 199.535269][ T6989] Bluetooth: hci1: Suspend notifier action (1) failed: -4 [ 199.542639][ T6989] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 199.555496][ T6989] Bluetooth: hci3: Opcode 0x0406 failed: -4 [ 199.563636][ T6989] Bluetooth: hci3: Suspend notifier action (1) failed: -4 [ 199.565354][ T7001] process '/newroot/226/file0' started with executable stack [ 199.580137][ T6989] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 199.593264][ T6989] Bluetooth: hci4: Opcode 0x0406 failed: -4 [ 199.633879][ T6989] Bluetooth: hci4: Suspend notifier action (1) failed: -4 [ 199.655419][ T6989] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 199.672112][ T6989] Bluetooth: hci2: Opcode 0x0406 failed: -4 [ 199.692532][ T6989] Bluetooth: hci2: Suspend notifier action (1) failed: -4 [ 201.055869][ T4471] usb 3-1: new high-speed USB device number 9 using dummy_hcd [ 201.277811][ T4471] usb 3-1: unable to get BOS descriptor or descriptor too short [ 201.291024][ T4471] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 201.302657][ T4471] usb 3-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 201.317236][ T4471] usb 3-1: config 1 interface 1 has no altsetting 0 [ 201.330004][ T4471] usb 3-1: New USB device found, idVendor=041e, idProduct=3048, bcdDevice= 0.40 [ 201.342987][ T4471] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 201.354432][ T4471] usb 3-1: Product: syz [ 201.362326][ T4471] usb 3-1: Manufacturer: syz [ 201.369358][ T4471] usb 3-1: SerialNumber: syz [ 201.465075][ T4276] Bluetooth: hci0: command 0x0c1a tx timeout [ 201.554769][ T4276] Bluetooth: hci3: command 0x0c1a tx timeout [ 201.560879][ T4276] Bluetooth: hci1: command 0x0c1a tx timeout [ 201.634714][ T4276] Bluetooth: hci4: command 0x0c1a tx timeout [ 201.705091][ T4280] Bluetooth: hci2: command 0x0c1a tx timeout [ 201.775993][ T4471] usb 3-1: 1:1 : no or invalid class specific endpoint descriptor [ 201.783964][ T4471] usb 3-1: 1:1 : unsupported format bits 0xffffec08 [ 201.790709][ T4471] usb 3-1: __uac_clock_find_source(): recursive clock topology detected, id 8. [ 201.799720][ T4471] usb 3-1: parse_audio_format_rates_v2v3(): unable to find clock source (clock -22) [ 201.809845][ T4471] usb 3-1: selecting invalid altsetting 0 [ 201.815727][ T4471] usb 3-1: __uac_clock_find_source(): recursive clock topology detected, id 8. [ 201.855074][ T4471] usb 3-1: __uac_clock_find_source(): recursive clock topology detected, id 8. [ 202.090670][ T7069] overlayfs: failed to clone upperpath [ 202.578494][ T4471] usb 3-1: selecting invalid altsetting 0 [ 202.584331][ T4471] usb 3-1: unit 2 not found! [ 202.589506][ T4471] usb 3-1: unit 8: unexpected type 0x0c [ 202.724220][ T4471] usb 3-1: USB disconnect, device number 9 [ 203.058601][ T7096] overlayfs: failed to clone upperpath [ 203.544635][ T4280] Bluetooth: hci0: command 0x0406 tx timeout [ 203.624829][ T4280] Bluetooth: hci1: command 0x0406 tx timeout [ 203.630958][ T4280] Bluetooth: hci3: command 0x0406 tx timeout [ 203.709927][ T4280] Bluetooth: hci4: command 0x0406 tx timeout [ 203.784963][ T4280] Bluetooth: hci2: command 0x0406 tx timeout [ 204.122224][ T7123] capability: warning: `syz.4.1000' uses 32-bit capabilities (legacy support in use) [ 204.159863][ T4471] usb 3-1: new high-speed USB device number 10 using dummy_hcd [ 204.335905][ T7128] overlayfs: failed to clone upperpath [ 204.366616][ T4471] usb 3-1: Using ep0 maxpacket: 32 [ 204.397174][ T4471] usb 3-1: config 0 has an invalid interface number: 184 but max is 0 [ 204.405775][ T4471] usb 3-1: config 0 has no interface number 0 [ 204.411976][ T4471] usb 3-1: config 0 interface 184 has no altsetting 0 [ 204.432434][ T4471] usb 3-1: New USB device found, idVendor=0424, idProduct=7500, bcdDevice=69.ee [ 204.441677][ T4471] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 204.450284][ T4471] usb 3-1: Product: syz [ 204.454720][ T4471] usb 3-1: Manufacturer: syz [ 204.459353][ T4471] usb 3-1: SerialNumber: syz [ 204.486793][ T4471] usb 3-1: config 0 descriptor?? [ 204.502764][ T4471] smsc75xx v1.0.0 [ 204.884820][ T4317] usb 1-1: new high-speed USB device number 7 using dummy_hcd [ 205.116344][ T4317] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 205.134554][ T4317] usb 1-1: config 0 has no interfaces? [ 205.146523][ T4317] usb 1-1: New USB device found, idVendor=2c42, idProduct=1602, bcdDevice=da.64 [ 205.155794][ T4317] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 205.163839][ T4317] usb 1-1: Product: syz [ 205.168595][ T4317] usb 1-1: Manufacturer: syz [ 205.173276][ T4317] usb 1-1: SerialNumber: syz [ 205.199626][ T4317] usb 1-1: config 0 descriptor?? [ 205.300072][ T4471] smsc75xx 3-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000040: -71 [ 205.315546][ T4471] smsc75xx 3-1:0.184 (unnamed net_device) (uninitialized): Error reading E2P_CMD [ 205.325298][ T4471] smsc75xx 3-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000014: -71 [ 205.336636][ T4471] smsc75xx 3-1:0.184 (unnamed net_device) (uninitialized): Failed to read PMT_CTL: -71 [ 205.346396][ T4471] smsc75xx 3-1:0.184 (unnamed net_device) (uninitialized): device not ready in smsc75xx_reset [ 205.356948][ T4471] smsc75xx 3-1:0.184 (unnamed net_device) (uninitialized): smsc75xx_reset error -71 [ 205.366895][ T4471] smsc75xx: probe of 3-1:0.184 failed with error -71 [ 205.398987][ T4471] usb 3-1: USB disconnect, device number 10 [ 205.419348][ T4515] usb 1-1: USB disconnect, device number 7 [ 206.273654][ T7181] input: syz1 as /devices/virtual/input/input5 [ 206.334983][ T4343] udevd[4343]: setting owner of /dev/input/event4 to uid=0, gid=104 failed: No such file or directory [ 207.094070][ T7216] overlayfs: failed to clone lowerpath [ 207.173923][ T7222] 9pnet_fd: Insufficient options for proto=fd [ 207.644656][ T4515] usb 3-1: new high-speed USB device number 11 using dummy_hcd [ 207.834602][ T4515] usb 3-1: Using ep0 maxpacket: 8 [ 207.841239][ T4515] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 207.852186][ T4515] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 207.865217][ T4515] usb 3-1: New USB device found, idVendor=05ac, idProduct=0262, bcdDevice= 0.00 [ 207.874333][ T4515] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 207.884377][ T4515] usb 3-1: config 0 descriptor?? [ 208.327863][ T4515] apple 0003:05AC:0262.0006: unknown main item tag 0x3 [ 208.357013][ T4515] apple 0003:05AC:0262.0006: unknown main item tag 0x0 [ 208.391933][ T4515] apple 0003:05AC:0262.0006: unknown main item tag 0x0 [ 208.424939][ T4515] apple 0003:05AC:0262.0006: unknown main item tag 0x0 [ 208.508455][ T4515] apple 0003:05AC:0262.0006: unknown main item tag 0x0 [ 208.634788][ T4515] apple 0003:05AC:0262.0006: unknown main item tag 0x0 [ 208.739262][ T4515] apple 0003:05AC:0262.0006: unknown main item tag 0x0 [ 208.928148][ T4515] apple 0003:05AC:0262.0006: unknown main item tag 0x0 [ 208.939263][ T4515] apple 0003:05AC:0262.0006: hidraw0: USB HID v0.04 Device [HID 05ac:0262] on usb-dummy_hcd.2-1/input0 [ 208.953586][ T4515] usb 3-1: USB disconnect, device number 11 [ 209.139627][ T7243] fido_id[7243]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.2/usb3/report_descriptor': No such file or directory [ 210.074651][ T4515] usb 1-1: new high-speed USB device number 8 using dummy_hcd [ 210.257132][ T4515] usb 1-1: Using ep0 maxpacket: 32 [ 210.268582][ T4515] usb 1-1: config 0 has an invalid interface number: 184 but max is 0 [ 210.291542][ T4515] usb 1-1: config 0 has no interface number 0 [ 210.318334][ T4515] usb 1-1: config 0 interface 184 has no altsetting 0 [ 210.343128][ T4515] usb 1-1: New USB device found, idVendor=0424, idProduct=7500, bcdDevice=69.ee [ 210.365528][ T4515] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 210.373732][ T4515] usb 1-1: Product: syz [ 210.383201][ T4515] usb 1-1: Manufacturer: syz [ 210.388332][ T4515] usb 1-1: SerialNumber: syz [ 210.407398][ T4515] usb 1-1: config 0 descriptor?? [ 210.424864][ T4515] smsc75xx v1.0.0 [ 210.824675][ T4317] usb 3-1: new high-speed USB device number 12 using dummy_hcd [ 211.004667][ T4317] usb 3-1: Using ep0 maxpacket: 16 [ 211.018305][ T4515] smsc75xx 1-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000040: -32 [ 211.019501][ T4317] usb 3-1: config 1 has an invalid interface number: 105 but max is 0 [ 211.038514][ T4317] usb 3-1: config 1 has no interface number 0 [ 211.043715][ T4515] smsc75xx 1-1:0.184 (unnamed net_device) (uninitialized): Error reading E2P_CMD [ 211.051495][ T4317] usb 3-1: config 1 interface 105 altsetting 2 bulk endpoint 0x4 has invalid maxpacket 16 [ 211.074798][ T4317] usb 3-1: config 1 interface 105 altsetting 2 bulk endpoint 0x82 has invalid maxpacket 64 [ 211.094571][ T4317] usb 3-1: config 1 interface 105 has no altsetting 0 [ 211.104201][ T4317] usb 3-1: New USB device found, idVendor=20f4, idProduct=e05a, bcdDevice=6c.6d [ 211.113727][ T4317] usb 3-1: New USB device strings: Mfr=1, Product=23, SerialNumber=3 [ 211.122046][ T4317] usb 3-1: Product: syz [ 211.126550][ T4317] usb 3-1: Manufacturer: syz [ 211.131278][ T4317] usb 3-1: SerialNumber: syz [ 211.146014][ T7272] raw-gadget.1 gadget.2: fail, usb_ep_enable returned -22 [ 211.155205][ T7272] raw-gadget.1 gadget.2: fail, usb_ep_enable returned -22 [ 211.573102][ T7272] raw-gadget.1 gadget.2: fail, usb_ep_enable returned -22 [ 211.585185][ T7272] raw-gadget.1 gadget.2: fail, usb_ep_enable returned -22 [ 211.688313][ T4515] smsc75xx 1-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000010: -71 [ 211.707799][ T4515] smsc75xx 1-1:0.184 (unnamed net_device) (uninitialized): Failed to read HW_CFG: -71 [ 211.717949][ T4515] smsc75xx 1-1:0.184 (unnamed net_device) (uninitialized): smsc75xx_reset error -71 [ 211.727909][ T4515] smsc75xx: probe of 1-1:0.184 failed with error -71 [ 211.748864][ T4515] usb 1-1: USB disconnect, device number 8 [ 212.010280][ T4317] aqc111 3-1:1.105 (unnamed net_device) (uninitialized): Failed to read(0x1) reg index 0x0001: -71 [ 212.021577][ T4317] aqc111 3-1:1.105 (unnamed net_device) (uninitialized): Failed to read(0x1) reg index 0x0001: -71 [ 212.035203][ T4317] aqc111 3-1:1.105 (unnamed net_device) (uninitialized): Failed to read(0x1) reg index 0x0001: -71 [ 212.051775][ T4317] aqc111 3-1:1.105 eth1: register 'aqc111' at usb-dummy_hcd.2-1, USB-C 3.1 to 5GBASE-T Ethernet Adapter, 5c:18:0b:bd:8f:59 [ 212.077028][ T4317] usb 3-1: USB disconnect, device number 12 [ 212.083697][ T4317] aqc111 3-1:1.105 eth1: unregister 'aqc111' usb-dummy_hcd.2-1, USB-C 3.1 to 5GBASE-T Ethernet Adapter [ 212.125211][ T4317] aqc111 3-1:1.105 eth1 (unregistered): Failed to write(0x1) reg index 0x0002: -19 [ 212.134746][ T4317] aqc111 3-1:1.105 eth1 (unregistered): Failed to write(0x1) reg index 0x0002: -19 [ 212.144206][ T4317] aqc111 3-1:1.105 eth1 (unregistered): Failed to write(0x61) reg index 0x0000: -19 [ 212.434271][ T7312] capability: warning: `syz.0.1081' uses deprecated v2 capabilities in a way that may be insecure [ 213.854732][ T4515] usb 1-1: new high-speed USB device number 9 using dummy_hcd [ 213.943735][ T7364] binder: 7363:7364 ioctl c0306201 200000000080 returned -14 [ 214.034703][ T4515] usb 1-1: Using ep0 maxpacket: 16 [ 214.056850][ T4515] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 214.094693][ T4515] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 214.115211][ T4515] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 214.139821][ T4515] usb 1-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 214.152570][ T4515] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 214.175309][ T4515] usb 1-1: config 0 descriptor?? [ 214.414685][ T4317] usb 3-1: new high-speed USB device number 13 using dummy_hcd [ 214.592073][ T4515] microsoft 0003:045E:07DA.0007: ignoring exceeding usage max [ 214.604591][ T4317] usb 3-1: Using ep0 maxpacket: 16 [ 214.611464][ T4317] usb 3-1: config 1 has an invalid interface number: 105 but max is 0 [ 214.612604][ T4515] microsoft 0003:045E:07DA.0007: unknown main item tag 0x0 [ 214.632389][ T4515] microsoft 0003:045E:07DA.0007: unknown main item tag 0x0 [ 214.636436][ T4317] usb 3-1: config 1 has no interface number 0 [ 214.641175][ T4515] microsoft 0003:045E:07DA.0007: unknown main item tag 0x0 [ 214.665095][ T4317] usb 3-1: config 1 interface 105 altsetting 2 bulk endpoint 0x4 has invalid maxpacket 16 [ 214.676995][ T4515] microsoft 0003:045E:07DA.0007: unknown main item tag 0x0 [ 214.684772][ T4317] usb 3-1: config 1 interface 105 altsetting 2 bulk endpoint 0x82 has invalid maxpacket 64 [ 214.695474][ T4515] microsoft 0003:045E:07DA.0007: unknown main item tag 0x0 [ 214.702711][ T4515] microsoft 0003:045E:07DA.0007: unknown main item tag 0x0 [ 214.704746][ T4317] usb 3-1: config 1 interface 105 has no altsetting 0 [ 214.734685][ T4515] microsoft 0003:045E:07DA.0007: unknown main item tag 0x0 [ 214.752293][ T4515] microsoft 0003:045E:07DA.0007: unknown main item tag 0x0 [ 214.754025][ T4317] usb 3-1: New USB device found, idVendor=20f4, idProduct=e05a, bcdDevice=6c.6d [ 214.762750][ T4515] microsoft 0003:045E:07DA.0007: unknown main item tag 0x0 [ 214.780494][ T4515] microsoft 0003:045E:07DA.0007: unknown main item tag 0x0 [ 214.799254][ T4317] usb 3-1: New USB device strings: Mfr=1, Product=23, SerialNumber=3 [ 214.809107][ T4515] input: HID 045e:07da as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/0003:045E:07DA.0007/input/input6 [ 214.821663][ T4317] usb 3-1: Product: syz [ 214.830285][ T4317] usb 3-1: Manufacturer: syz [ 214.844673][ T4317] usb 3-1: SerialNumber: syz [ 214.851887][ T7370] raw-gadget.1 gadget.2: fail, usb_ep_enable returned -22 [ 214.869874][ T7370] raw-gadget.1 gadget.2: fail, usb_ep_enable returned -22 [ 214.901182][ T4515] microsoft 0003:045E:07DA.0007: input,hidraw0: USB HID v0.00 Device [HID 045e:07da] on usb-dummy_hcd.0-1/input0 [ 214.953901][ T4515] usb 1-1: USB disconnect, device number 9 [ 215.184300][ T7378] fido_id[7378]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.0/usb1/report_descriptor': No such file or directory [ 215.288305][ T7370] raw-gadget.1 gadget.2: fail, usb_ep_enable returned -22 [ 215.305171][ T7370] raw-gadget.1 gadget.2: fail, usb_ep_enable returned -22 [ 215.328128][ T7389] overlayfs: failed to clone upperpath [ 215.925901][ T4515] usb 1-1: new high-speed USB device number 10 using dummy_hcd [ 216.079558][ T4317] aqc111 3-1:1.105 (unnamed net_device) (uninitialized): Failed to read(0x1) reg index 0x0001: -71 [ 216.105031][ T4317] aqc111 3-1:1.105 (unnamed net_device) (uninitialized): Failed to read(0x1) reg index 0x0001: -71 [ 216.130362][ T4317] aqc111 3-1:1.105 eth1: register 'aqc111' at usb-dummy_hcd.2-1, USB-C 3.1 to 5GBASE-T Ethernet Adapter, b2:87:e3:ed:e0:d3 [ 216.141453][ T4515] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 216.170522][ T4515] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 216.181418][ T4317] usb 3-1: USB disconnect, device number 13 [ 216.200615][ T4515] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 216.212550][ T4317] aqc111 3-1:1.105 eth1: unregister 'aqc111' usb-dummy_hcd.2-1, USB-C 3.1 to 5GBASE-T Ethernet Adapter [ 216.240612][ T4515] usb 1-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 216.254801][ T4515] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 216.279782][ T4515] usb 1-1: config 0 descriptor?? [ 216.304919][ T4317] aqc111 3-1:1.105 eth1 (unregistered): Failed to write(0x1) reg index 0x0002: -19 [ 216.332500][ T4317] aqc111 3-1:1.105 eth1 (unregistered): Failed to write(0x1) reg index 0x0002: -19 [ 216.359030][ T4317] aqc111 3-1:1.105 eth1 (unregistered): Failed to write(0x61) reg index 0x0000: -19 [ 216.695989][ T4515] plantronics 0003:047F:FFFF.0008: unknown main item tag 0x0 [ 216.713735][ T4515] plantronics 0003:047F:FFFF.0008: unknown main item tag 0x0 [ 216.721366][ T4515] plantronics 0003:047F:FFFF.0008: unknown main item tag 0x0 [ 216.751712][ T4515] plantronics 0003:047F:FFFF.0008: unknown main item tag 0x0 [ 216.765220][ T4515] plantronics 0003:047F:FFFF.0008: unknown main item tag 0x0 [ 216.804601][ T4515] plantronics 0003:047F:FFFF.0008: unknown main item tag 0x0 [ 216.812130][ T4515] plantronics 0003:047F:FFFF.0008: unknown main item tag 0x0 [ 216.863433][ T4515] plantronics 0003:047F:FFFF.0008: unknown main item tag 0x0 [ 216.884760][ T4515] plantronics 0003:047F:FFFF.0008: unknown main item tag 0x0 [ 216.892217][ T4515] plantronics 0003:047F:FFFF.0008: unknown main item tag 0x0 [ 216.930064][ T4515] plantronics 0003:047F:FFFF.0008: unknown main item tag 0x0 [ 216.939703][ T4515] plantronics 0003:047F:FFFF.0008: unknown main item tag 0x0 [ 216.964723][ T4515] plantronics 0003:047F:FFFF.0008: unknown main item tag 0x0 [ 216.972548][ T4515] plantronics 0003:047F:FFFF.0008: unknown main item tag 0x0 [ 217.019587][ T4515] plantronics 0003:047F:FFFF.0008: unknown main item tag 0x0 [ 217.060627][ T4515] plantronics 0003:047F:FFFF.0008: No inputs registered, leaving [ 217.113324][ T4515] plantronics 0003:047F:FFFF.0008: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.0-1/input0 [ 217.163494][ T4515] usb 1-1: USB disconnect, device number 10 [ 217.319019][ T7434] fido_id[7434]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.0/usb1/report_descriptor': No such file or directory [ 217.855087][ T7456] overlayfs: failed to clone upperpath [ 217.884621][ T4317] usb 1-1: new full-speed USB device number 11 using dummy_hcd [ 218.076104][ T4317] usb 1-1: config 0 has an invalid interface number: 64 but max is 0 [ 218.088634][ T4317] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 218.123649][ T4317] usb 1-1: config 0 has no interface number 0 [ 218.143559][ T4317] usb 1-1: New USB device found, idVendor=046d, idProduct=0823, bcdDevice= 0.07 [ 218.167535][ T4317] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 218.189958][ T4317] usb 1-1: Product: syz [ 218.194222][ T4317] usb 1-1: Manufacturer: syz [ 218.200464][ T4317] usb 1-1: SerialNumber: syz [ 218.231201][ T4317] usb 1-1: config 0 descriptor?? [ 218.414604][ T4512] usb 3-1: new high-speed USB device number 14 using dummy_hcd [ 218.601124][ T4471] usb 1-1: USB disconnect, device number 11 [ 218.614650][ T4512] usb 3-1: Using ep0 maxpacket: 32 [ 218.621647][ T4512] usb 3-1: config 0 has an invalid interface number: 184 but max is 0 [ 218.643745][ T4512] usb 3-1: config 0 has no interface number 0 [ 218.681540][ T4512] usb 3-1: config 0 interface 184 has no altsetting 0 [ 218.704124][ T4512] usb 3-1: New USB device found, idVendor=0424, idProduct=7500, bcdDevice=69.ee [ 218.723992][ T4512] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 218.739360][ T4512] usb 3-1: Product: syz [ 218.743569][ T4512] usb 3-1: Manufacturer: syz [ 218.759779][ T4512] usb 3-1: SerialNumber: syz [ 218.783528][ T4512] usb 3-1: config 0 descriptor?? [ 218.807366][ T4512] smsc75xx v1.0.0 [ 219.207709][ T7474] vcan0: MTU too low for tipc bearer [ 219.224719][ T7474] tipc: Enabling of bearer rejected, failed to enable media [ 219.795476][ T7487] device syzkaller1 entered promiscuous mode [ 219.823213][ T4512] smsc75xx 3-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000040: -71 [ 219.844641][ T4512] smsc75xx 3-1:0.184 (unnamed net_device) (uninitialized): Error reading E2P_CMD [ 219.873997][ T4512] smsc75xx 3-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000014: -71 [ 219.896301][ T4512] smsc75xx 3-1:0.184 (unnamed net_device) (uninitialized): Failed to read PMT_CTL: -71 [ 219.916566][ T4512] smsc75xx 3-1:0.184 (unnamed net_device) (uninitialized): device not ready in smsc75xx_reset [ 219.944684][ T4512] smsc75xx 3-1:0.184 (unnamed net_device) (uninitialized): smsc75xx_reset error -71 [ 219.962279][ T4512] smsc75xx: probe of 3-1:0.184 failed with error -71 [ 219.983314][ T4512] usb 3-1: USB disconnect, device number 14 [ 219.993287][ T7491] overlayfs: failed to clone upperpath [ 220.502381][ T7502] netlink: 239 bytes leftover after parsing attributes in process `syz.3.1162'. [ 222.051921][ T27] audit: type=1804 audit(1776610241.998:34): pid=7584 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.3.1196" name="bus" dev="ramfs" ino=45287 res=1 errno=0 [ 222.104617][ T27] audit: type=1804 audit(1776610241.998:35): pid=7584 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.3.1196" name="bus" dev="ramfs" ino=45287 res=1 errno=0 [ 222.490250][ T7597] netlink: 235 bytes leftover after parsing attributes in process `syz.1.1201'. [ 222.514675][ T4515] usb 1-1: new full-speed USB device number 12 using dummy_hcd [ 222.726291][ T4515] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 1024, setting to 64 [ 222.745011][ T4515] usb 1-1: New USB device found, idVendor=0458, idProduct=5015, bcdDevice= 0.00 [ 222.764313][ T4515] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 222.796033][ T4515] usb 1-1: config 0 descriptor?? [ 222.802513][ T7589] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 223.233644][ T4515] hid (null): report_id 32008 is invalid [ 223.248604][ T4515] hid (null): unknown global tag 0xc [ 223.276367][ T4515] kye 0003:0458:5015.0009: unknown main item tag 0x0 [ 223.291189][ T4515] kye 0003:0458:5015.0009: unknown main item tag 0x0 [ 223.304995][ T4515] kye 0003:0458:5015.0009: unknown main item tag 0x0 [ 223.319780][ T4515] kye 0003:0458:5015.0009: unknown main item tag 0x0 [ 223.337194][ T4515] kye 0003:0458:5015.0009: unknown main item tag 0x0 [ 223.350476][ T4515] kye 0003:0458:5015.0009: unknown main item tag 0x0 [ 223.358389][ T4515] kye 0003:0458:5015.0009: unknown main item tag 0x0 [ 223.371148][ T4515] kye 0003:0458:5015.0009: unknown main item tag 0x0 [ 223.388030][ T4515] kye 0003:0458:5015.0009: unknown main item tag 0x0 [ 223.410541][ T4515] kye 0003:0458:5015.0009: unknown main item tag 0x0 [ 223.418750][ T4515] kye 0003:0458:5015.0009: unknown main item tag 0x0 [ 223.425861][ T4515] kye 0003:0458:5015.0009: unknown main item tag 0x0 [ 223.432887][ T4515] kye 0003:0458:5015.0009: unknown main item tag 0x0 [ 223.461818][ T4515] kye 0003:0458:5015.0009: unknown main item tag 0x0 [ 223.480822][ T4515] kye 0003:0458:5015.0009: unknown main item tag 0x0 [ 223.498615][ T4515] kye 0003:0458:5015.0009: unknown main item tag 0x0 [ 223.514384][ T4515] kye 0003:0458:5015.0009: unknown main item tag 0x0 [ 223.530207][ T4515] kye 0003:0458:5015.0009: unknown main item tag 0x0 [ 223.544398][ T4515] kye 0003:0458:5015.0009: unknown main item tag 0x0 [ 223.558149][ T4515] kye 0003:0458:5015.0009: unknown main item tag 0x0 [ 223.577578][ T4515] kye 0003:0458:5015.0009: unknown main item tag 0x0 [ 223.584352][ T4515] kye 0003:0458:5015.0009: unknown main item tag 0x0 [ 223.611700][ T4515] kye 0003:0458:5015.0009: unknown main item tag 0x0 [ 223.621782][ T4515] kye 0003:0458:5015.0009: unknown main item tag 0x0 [ 223.633155][ T4515] kye 0003:0458:5015.0009: unknown main item tag 0x0 [ 223.655210][ T4515] kye 0003:0458:5015.0009: unknown main item tag 0x0 [ 223.661979][ T4515] kye 0003:0458:5015.0009: unknown main item tag 0x0 [ 223.675668][ T4515] kye 0003:0458:5015.0009: unknown main item tag 0x0 [ 223.685592][ T4515] kye 0003:0458:5015.0009: unknown main item tag 0x0 [ 223.692336][ T4515] kye 0003:0458:5015.0009: unknown main item tag 0x0 [ 223.699620][ T4515] kye 0003:0458:5015.0009: unknown main item tag 0x0 [ 223.706657][ T4515] kye 0003:0458:5015.0009: unknown main item tag 0x0 [ 223.713520][ T4515] kye 0003:0458:5015.0009: unknown main item tag 0x0 [ 223.733743][ T4515] kye 0003:0458:5015.0009: unknown main item tag 0x0 [ 223.743837][ T4515] kye 0003:0458:5015.0009: unknown main item tag 0x0 [ 223.760979][ T4515] kye 0003:0458:5015.0009: unknown main item tag 0x0 [ 223.771093][ T4515] kye 0003:0458:5015.0009: unknown main item tag 0x0 [ 223.785769][ T4515] kye 0003:0458:5015.0009: unknown main item tag 0x0 [ 223.801405][ T4515] kye 0003:0458:5015.0009: unknown main item tag 0x0 [ 223.808897][ T4515] kye 0003:0458:5015.0009: unknown main item tag 0x0 [ 223.815901][ T4515] kye 0003:0458:5015.0009: unknown main item tag 0x0 [ 223.822819][ T4515] kye 0003:0458:5015.0009: unknown main item tag 0x0 [ 223.830467][ T4515] kye 0003:0458:5015.0009: unknown main item tag 0x0 [ 223.838204][ T4515] kye 0003:0458:5015.0009: unknown main item tag 0x0 [ 223.845234][ T4515] kye 0003:0458:5015.0009: unknown main item tag 0x0 [ 223.854031][ T4515] kye 0003:0458:5015.0009: unknown main item tag 0x0 [ 223.861175][ T4515] kye 0003:0458:5015.0009: unknown main item tag 0x0 [ 223.868336][ T4515] kye 0003:0458:5015.0009: unknown main item tag 0x0 [ 223.875311][ T4515] kye 0003:0458:5015.0009: unknown main item tag 0x0 [ 223.882215][ T4515] kye 0003:0458:5015.0009: unknown main item tag 0x0 [ 223.890009][ T4515] kye 0003:0458:5015.0009: unknown main item tag 0x0 [ 223.904724][ T4515] kye 0003:0458:5015.0009: unknown main item tag 0x0 [ 223.914343][ T4515] kye 0003:0458:5015.0009: unknown main item tag 0x0 [ 223.921366][ T4515] kye 0003:0458:5015.0009: unknown main item tag 0x0 [ 223.928581][ T4515] kye 0003:0458:5015.0009: unknown main item tag 0x0 [ 223.935892][ T4515] kye 0003:0458:5015.0009: unknown main item tag 0x0 [ 223.954594][ T4515] kye 0003:0458:5015.0009: unknown main item tag 0x0 [ 223.961465][ T4515] kye 0003:0458:5015.0009: unknown main item tag 0x0 [ 223.970149][ T4515] kye 0003:0458:5015.0009: unknown main item tag 0x0 [ 223.977244][ T4515] kye 0003:0458:5015.0009: unknown main item tag 0x0 [ 223.983972][ T4515] kye 0003:0458:5015.0009: unknown main item tag 0x0 [ 223.991121][ T4515] kye 0003:0458:5015.0009: unknown main item tag 0x0 [ 223.998082][ T4515] kye 0003:0458:5015.0009: unknown main item tag 0x0 [ 224.005136][ T4515] kye 0003:0458:5015.0009: unknown main item tag 0x0 [ 224.011858][ T4515] kye 0003:0458:5015.0009: unknown main item tag 0x0 [ 224.029299][ T4515] kye 0003:0458:5015.0009: unknown main item tag 0x0 [ 224.046839][ T4515] kye 0003:0458:5015.0009: unknown main item tag 0x0 [ 224.054840][ T4515] kye 0003:0458:5015.0009: unknown main item tag 0x0 [ 224.070216][ T4515] kye 0003:0458:5015.0009: unknown main item tag 0x0 [ 224.084595][ T4515] kye 0003:0458:5015.0009: unknown main item tag 0x0 [ 224.094768][ T4515] kye 0003:0458:5015.0009: unknown main item tag 0x0 [ 224.121225][ T4515] kye 0003:0458:5015.0009: unknown main item tag 0x0 [ 224.138084][ T4515] kye 0003:0458:5015.0009: unknown main item tag 0x0 [ 224.153328][ T4515] kye 0003:0458:5015.0009: unknown main item tag 0x0 [ 224.168245][ T4515] kye 0003:0458:5015.0009: unknown main item tag 0x0 [ 224.184601][ T4515] kye 0003:0458:5015.0009: unknown main item tag 0x0 [ 224.212434][ T4515] kye 0003:0458:5015.0009: unknown main item tag 0x0 [ 224.219963][ T4515] kye 0003:0458:5015.0009: unknown main item tag 0x0 [ 224.234619][ T4515] kye 0003:0458:5015.0009: unknown main item tag 0x0 [ 224.241651][ T4515] kye 0003:0458:5015.0009: unknown main item tag 0x0 [ 224.261138][ T4515] kye 0003:0458:5015.0009: unknown main item tag 0x0 [ 224.268834][ T4515] kye 0003:0458:5015.0009: unknown main item tag 0x0 [ 224.275893][ T4515] kye 0003:0458:5015.0009: unknown main item tag 0x0 [ 224.282624][ T4515] kye 0003:0458:5015.0009: unknown main item tag 0x0 [ 224.289914][ T4515] kye 0003:0458:5015.0009: unknown main item tag 0x0 [ 224.297019][ T4515] kye 0003:0458:5015.0009: unknown main item tag 0x0 [ 224.303864][ T4515] kye 0003:0458:5015.0009: unknown main item tag 0x0 [ 224.324584][ T4515] kye 0003:0458:5015.0009: unknown main item tag 0x0 [ 224.331289][ T4515] kye 0003:0458:5015.0009: unknown main item tag 0x0 [ 224.342428][ T4515] kye 0003:0458:5015.0009: unknown main item tag 0x0 [ 224.350055][ T4515] kye 0003:0458:5015.0009: unknown main item tag 0x0 [ 224.357550][ T4515] kye 0003:0458:5015.0009: unknown main item tag 0x0 [ 224.364290][ T4515] kye 0003:0458:5015.0009: unknown main item tag 0x0 [ 224.371356][ T4515] kye 0003:0458:5015.0009: unknown main item tag 0x0 [ 224.392058][ T4515] kye 0003:0458:5015.0009: unknown main item tag 0x0 [ 224.399494][ T4515] kye 0003:0458:5015.0009: unknown main item tag 0x0 [ 224.407105][ T4515] kye 0003:0458:5015.0009: unknown main item tag 0x0 [ 224.413873][ T4515] kye 0003:0458:5015.0009: unknown main item tag 0x0 [ 224.420966][ T4515] kye 0003:0458:5015.0009: unknown main item tag 0x0 [ 224.428144][ T4515] kye 0003:0458:5015.0009: unknown main item tag 0x0 [ 224.435375][ T4515] kye 0003:0458:5015.0009: unknown main item tag 0x0 [ 224.442984][ T27] audit: type=1326 audit(1776610244.388:36): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7645 comm="syz.3.1221" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f7ea339c819 code=0x0 [ 224.443582][ T4515] kye 0003:0458:5015.0009: unknown main item tag 0x0 [ 224.472684][ T4515] kye 0003:0458:5015.0009: unknown main item tag 0x0 [ 224.479817][ T4515] kye 0003:0458:5015.0009: unknown main item tag 0x0 [ 224.486946][ T4515] kye 0003:0458:5015.0009: unknown main item tag 0x0 [ 224.493662][ T4515] kye 0003:0458:5015.0009: unknown main item tag 0x0 [ 224.502829][ T4515] kye 0003:0458:5015.0009: unknown main item tag 0x0 [ 224.509652][ T4515] kye 0003:0458:5015.0009: unknown main item tag 0x0 [ 224.516700][ T4515] kye 0003:0458:5015.0009: unknown main item tag 0x0 [ 224.523437][ T4515] kye 0003:0458:5015.0009: unknown main item tag 0x0 [ 224.530390][ T4515] kye 0003:0458:5015.0009: unknown main item tag 0x0 [ 224.537189][ T4515] kye 0003:0458:5015.0009: unknown main item tag 0x0 [ 224.544344][ T4515] kye 0003:0458:5015.0009: unknown main item tag 0x0 [ 224.551505][ T4515] kye 0003:0458:5015.0009: unknown main item tag 0x0 [ 224.558560][ T4515] kye 0003:0458:5015.0009: unknown main item tag 0x0 [ 224.565681][ T4515] kye 0003:0458:5015.0009: unknown main item tag 0x0 [ 224.573943][ T4515] kye 0003:0458:5015.0009: unknown main item tag 0x0 [ 224.580805][ T4515] kye 0003:0458:5015.0009: unknown main item tag 0x0 [ 224.588393][ T4515] kye 0003:0458:5015.0009: unknown main item tag 0x0 [ 224.595181][ T4515] kye 0003:0458:5015.0009: unknown main item tag 0x0 [ 224.602014][ T4515] kye 0003:0458:5015.0009: unknown main item tag 0x0 [ 224.608868][ T4515] kye 0003:0458:5015.0009: unknown main item tag 0x0 [ 224.615908][ T4515] kye 0003:0458:5015.0009: unknown main item tag 0x0 [ 224.622665][ T4515] kye 0003:0458:5015.0009: unknown main item tag 0x0 [ 224.629725][ T4515] kye 0003:0458:5015.0009: unknown main item tag 0x0 [ 224.636534][ T4515] kye 0003:0458:5015.0009: unknown main item tag 0x0 [ 224.643369][ T4515] kye 0003:0458:5015.0009: unknown main item tag 0x0 [ 224.650463][ T4515] kye 0003:0458:5015.0009: unknown main item tag 0x0 [ 224.657257][ T4515] kye 0003:0458:5015.0009: unknown main item tag 0x0 [ 224.663986][ T4515] kye 0003:0458:5015.0009: unknown main item tag 0x0 [ 224.671289][ T4515] kye 0003:0458:5015.0009: unknown main item tag 0x0 [ 224.678146][ T4515] kye 0003:0458:5015.0009: unknown main item tag 0x0 [ 224.684924][ T4515] kye 0003:0458:5015.0009: unknown main item tag 0x0 [ 224.691628][ T4515] kye 0003:0458:5015.0009: unknown main item tag 0x0 [ 224.698422][ T4515] kye 0003:0458:5015.0009: unknown main item tag 0x0 [ 224.705248][ T4515] kye 0003:0458:5015.0009: unknown main item tag 0x0 [ 224.711954][ T4515] kye 0003:0458:5015.0009: unknown main item tag 0x0 [ 224.718762][ T4515] kye 0003:0458:5015.0009: unknown main item tag 0x0 [ 224.725581][ T4515] kye 0003:0458:5015.0009: unknown main item tag 0x0 [ 224.732298][ T4515] kye 0003:0458:5015.0009: unknown main item tag 0x0 [ 224.739118][ T4515] kye 0003:0458:5015.0009: unknown main item tag 0x0 [ 224.745905][ T4515] kye 0003:0458:5015.0009: unknown main item tag 0x0 [ 224.752906][ T4515] kye 0003:0458:5015.0009: unknown main item tag 0x0 [ 224.759715][ T4515] kye 0003:0458:5015.0009: unknown main item tag 0x0 [ 224.774581][ T4515] kye 0003:0458:5015.0009: unknown main item tag 0x0 [ 224.781336][ T4515] kye 0003:0458:5015.0009: unknown main item tag 0x0 [ 224.794213][ T4515] kye 0003:0458:5015.0009: unknown main item tag 0x0 [ 224.801071][ T4515] kye 0003:0458:5015.0009: unknown main item tag 0x0 [ 224.812471][ T4515] kye 0003:0458:5015.0009: unknown main item tag 0x0 [ 224.820001][ T4515] kye 0003:0458:5015.0009: unknown main item tag 0x0 [ 224.828030][ T4515] kye 0003:0458:5015.0009: unknown main item tag 0x0 [ 224.834885][ T4515] kye 0003:0458:5015.0009: unknown main item tag 0x0 [ 224.842053][ T4515] kye 0003:0458:5015.0009: unknown main item tag 0x0 [ 224.849275][ T4515] kye 0003:0458:5015.0009: unknown main item tag 0x0 [ 224.856440][ T4515] kye 0003:0458:5015.0009: unknown main item tag 0x0 [ 224.863207][ T4515] kye 0003:0458:5015.0009: unknown main item tag 0x0 [ 224.872917][ T4515] kye 0003:0458:5015.0009: unknown main item tag 0x0 [ 224.880699][ T4515] kye 0003:0458:5015.0009: unknown main item tag 0x0 [ 224.891647][ T4515] kye 0003:0458:5015.0009: unknown main item tag 0x0 [ 224.899727][ T4515] kye 0003:0458:5015.0009: unknown main item tag 0x0 [ 224.910767][ T4515] kye 0003:0458:5015.0009: unknown main item tag 0x0 [ 224.920438][ T4515] kye 0003:0458:5015.0009: unknown main item tag 0x0 [ 224.931267][ T4515] kye 0003:0458:5015.0009: unknown main item tag 0x0 [ 224.938801][ T4515] kye 0003:0458:5015.0009: unknown main item tag 0x0 [ 224.954587][ T4515] kye 0003:0458:5015.0009: unknown main item tag 0x0 [ 224.961453][ T4515] kye 0003:0458:5015.0009: unknown main item tag 0x0 [ 224.968274][ T4515] kye 0003:0458:5015.0009: unknown main item tag 0x0 [ 224.984595][ T4515] kye 0003:0458:5015.0009: unknown main item tag 0x0 [ 224.991364][ T4515] kye 0003:0458:5015.0009: unknown main item tag 0x0 [ 225.019282][ T4515] kye 0003:0458:5015.0009: unknown main item tag 0x0 [ 225.026146][ T4515] kye 0003:0458:5015.0009: unknown main item tag 0x0 [ 225.032873][ T4515] kye 0003:0458:5015.0009: unknown main item tag 0x0 [ 225.045280][ T4515] kye 0003:0458:5015.0009: unknown main item tag 0x0 [ 225.052019][ T4515] kye 0003:0458:5015.0009: unknown main item tag 0x0 [ 225.062947][ T4515] kye 0003:0458:5015.0009: unknown main item tag 0x0 [ 225.070863][ T4515] kye 0003:0458:5015.0009: unknown main item tag 0x0 [ 225.081710][ T4515] kye 0003:0458:5015.0009: unknown main item tag 0x0 [ 225.089713][ T4515] kye 0003:0458:5015.0009: unknown main item tag 0x0 [ 225.101247][ T4515] kye 0003:0458:5015.0009: unknown main item tag 0x0 [ 225.109020][ T4515] kye 0003:0458:5015.0009: unknown main item tag 0x0 [ 225.120086][ T4515] kye 0003:0458:5015.0009: unknown main item tag 0x0 [ 225.127961][ T4515] kye 0003:0458:5015.0009: unknown main item tag 0x0 [ 225.138927][ T4515] kye 0003:0458:5015.0009: unknown main item tag 0x0 [ 225.147068][ T4515] kye 0003:0458:5015.0009: unknown main item tag 0x0 [ 225.154225][ T4515] kye 0003:0458:5015.0009: unknown main item tag 0x0 [ 225.167223][ T4515] kye 0003:0458:5015.0009: unknown main item tag 0x0 [ 225.176560][ T4515] kye 0003:0458:5015.0009: unknown main item tag 0x0 [ 225.183314][ T4515] kye 0003:0458:5015.0009: unknown main item tag 0x0 [ 225.192977][ T4515] kye 0003:0458:5015.0009: unknown main item tag 0x0 [ 225.202405][ T4515] kye 0003:0458:5015.0009: unknown main item tag 0x0 [ 225.212677][ T4515] kye 0003:0458:5015.0009: unknown main item tag 0x0 [ 225.221652][ T4515] kye 0003:0458:5015.0009: unknown main item tag 0x0 [ 225.231859][ T4515] kye 0003:0458:5015.0009: unknown main item tag 0x0 [ 225.241073][ T4515] kye 0003:0458:5015.0009: unknown main item tag 0x0 [ 225.251069][ T4515] kye 0003:0458:5015.0009: unknown main item tag 0x0 [ 225.260000][ T4515] kye 0003:0458:5015.0009: unknown main item tag 0x0 [ 225.271035][ T4515] kye 0003:0458:5015.0009: unknown main item tag 0x0 [ 225.280756][ T4515] kye 0003:0458:5015.0009: unknown main item tag 0x0 [ 225.290959][ T4515] kye 0003:0458:5015.0009: unknown main item tag 0x0 [ 225.300924][ T4515] kye 0003:0458:5015.0009: unknown main item tag 0x0 [ 225.313230][ T4515] kye 0003:0458:5015.0009: unknown main item tag 0x0 [ 225.323504][ T4515] kye 0003:0458:5015.0009: unknown main item tag 0x0 [ 225.334340][ T4515] kye 0003:0458:5015.0009: unknown main item tag 0x0 [ 225.348560][ T4515] kye 0003:0458:5015.0009: unknown main item tag 0x0 [ 225.358494][ T4515] kye 0003:0458:5015.0009: unknown main item tag 0x0 [ 225.369621][ T4515] kye 0003:0458:5015.0009: unknown main item tag 0x0 [ 225.380450][ T4515] kye 0003:0458:5015.0009: unknown main item tag 0x0 [ 225.391909][ T4515] kye 0003:0458:5015.0009: unknown main item tag 0x0 [ 225.401835][ T4515] kye 0003:0458:5015.0009: unknown main item tag 0x0 [ 225.423221][ T4515] kye 0003:0458:5015.0009: unknown main item tag 0x0 [ 225.432766][ T4515] kye 0003:0458:5015.0009: unknown main item tag 0x0 [ 225.444405][ T4515] kye 0003:0458:5015.0009: unknown main item tag 0x0 [ 225.453694][ T4515] kye 0003:0458:5015.0009: unknown main item tag 0x0 [ 225.478607][ T4515] kye 0003:0458:5015.0009: unknown main item tag 0x0 [ 225.487202][ T4515] kye 0003:0458:5015.0009: unknown main item tag 0x0 [ 225.494312][ T4515] kye 0003:0458:5015.0009: unknown main item tag 0x0 [ 225.516576][ T4515] kye 0003:0458:5015.0009: unknown main item tag 0x0 [ 225.523409][ T4515] kye 0003:0458:5015.0009: unknown main item tag 0x0 [ 225.533899][ T4515] kye 0003:0458:5015.0009: unknown main item tag 0x0 [ 225.543159][ T4515] kye 0003:0458:5015.0009: unknown main item tag 0x0 [ 225.556814][ T4515] kye 0003:0458:5015.0009: unknown main item tag 0x0 [ 225.563554][ T4515] kye 0003:0458:5015.0009: unknown main item tag 0x0 [ 225.587586][ T4515] kye 0003:0458:5015.0009: unknown main item tag 0x0 [ 225.594349][ T4515] kye 0003:0458:5015.0009: unknown main item tag 0x0 [ 225.604073][ T4515] kye 0003:0458:5015.0009: unknown main item tag 0x0 [ 225.616725][ T4515] kye 0003:0458:5015.0009: unknown main item tag 0x0 [ 225.623467][ T4515] kye 0003:0458:5015.0009: unknown main item tag 0x0 [ 225.647198][ T4515] kye 0003:0458:5015.0009: unknown main item tag 0x0 [ 225.653967][ T4515] kye 0003:0458:5015.0009: unknown main item tag 0x0 [ 225.676712][ T4515] kye 0003:0458:5015.0009: unknown main item tag 0x0 [ 225.683489][ T4515] kye 0003:0458:5015.0009: unknown main item tag 0x0 [ 225.693486][ T4515] kye 0003:0458:5015.0009: unknown main item tag 0x0 [ 225.702614][ T4515] kye 0003:0458:5015.0009: unknown main item tag 0x0 [ 225.719372][ T4515] kye 0003:0458:5015.0009: unknown main item tag 0x0 [ 225.736591][ T4515] kye 0003:0458:5015.0009: unknown main item tag 0x0 [ 225.743362][ T4515] kye 0003:0458:5015.0009: unknown main item tag 0x0 [ 225.754670][ T4515] kye 0003:0458:5015.0009: unknown main item tag 0x0 [ 225.761433][ T4515] kye 0003:0458:5015.0009: unknown main item tag 0x0 [ 225.794592][ T4515] kye 0003:0458:5015.0009: unknown main item tag 0x0 [ 225.801412][ T4515] kye 0003:0458:5015.0009: unknown main item tag 0x0 [ 225.825283][ T4515] kye 0003:0458:5015.0009: unknown main item tag 0x0 [ 225.832042][ T4515] kye 0003:0458:5015.0009: unknown main item tag 0x0 [ 225.863420][ T4515] kye 0003:0458:5015.0009: unknown main item tag 0x0 [ 225.871527][ T4515] kye 0003:0458:5015.0009: unknown main item tag 0x0 [ 225.878940][ T4515] kye 0003:0458:5015.0009: unknown main item tag 0x0 [ 225.886406][ T4515] kye 0003:0458:5015.0009: unknown main item tag 0x0 [ 225.893138][ T4515] kye 0003:0458:5015.0009: unknown main item tag 0x0 [ 225.927396][ T4515] kye 0003:0458:5015.0009: unknown main item tag 0x2 [ 225.934246][ T4515] kye 0003:0458:5015.0009: unknown main item tag 0x2 [ 225.954668][ T4515] kye 0003:0458:5015.0009: unknown main item tag 0x0 [ 225.961438][ T4515] kye 0003:0458:5015.0009: unknown main item tag 0x0 [ 225.968672][ T4515] kye 0003:0458:5015.0009: unknown main item tag 0x0 [ 225.979531][ T4515] kye 0003:0458:5015.0009: unknown main item tag 0x2 [ 225.989131][ T4515] kye 0003:0458:5015.0009: report_id 32008 is invalid [ 225.999692][ T4515] kye 0003:0458:5015.0009: item 0 2 1 8 parsing failed [ 226.009426][ T4515] kye 0003:0458:5015.0009: parse failed [ 226.018454][ T4515] kye: probe of 0003:0458:5015.0009 failed with error -22 [ 226.031954][ T4515] usb 1-1: USB disconnect, device number 12 [ 226.097256][ T7619] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1211'. [ 226.504104][ T7676] overlayfs: failed to clone upperpath [ 226.614718][ T4515] usb 1-1: new full-speed USB device number 13 using dummy_hcd [ 226.806203][ T4515] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 226.837921][ T4515] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 226.859043][ T4515] usb 1-1: New USB device found, idVendor=1e7d, idProduct=319c, bcdDevice= 0.00 [ 226.889502][ T4515] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 226.921519][ T4515] usb 1-1: config 0 descriptor?? [ 227.367626][ T4515] isku 0003:1E7D:319C.000A: unknown main item tag 0x0 [ 227.383391][ T4515] isku 0003:1E7D:319C.000A: unknown main item tag 0x0 [ 227.397001][ T4515] isku 0003:1E7D:319C.000A: unknown main item tag 0x0 [ 227.409704][ T4515] isku 0003:1E7D:319C.000A: unknown main item tag 0x0 [ 227.424295][ T4515] isku 0003:1E7D:319C.000A: unknown main item tag 0x0 [ 227.441933][ T4515] isku 0003:1E7D:319C.000A: unknown main item tag 0x0 [ 227.462188][ T4515] isku 0003:1E7D:319C.000A: unknown main item tag 0x0 [ 227.482730][ T4515] isku 0003:1E7D:319C.000A: hidraw0: USB HID v0.00 Device [HID 1e7d:319c] on usb-dummy_hcd.0-1/input0 [ 227.566772][ T4515] isku 0003:1E7D:319C.000A: couldn't init struct isku_device [ 227.574276][ T4515] isku 0003:1E7D:319C.000A: couldn't install keyboard [ 227.604457][ T4515] isku: probe of 0003:1E7D:319C.000A failed with error -71 [ 227.636710][ T4515] usb 1-1: USB disconnect, device number 13 [ 227.817199][ T7711] fido_id[7711]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.0/usb1/report_descriptor': No such file or directory [ 228.281726][ T7738] overlayfs: failed to clone lowerpath [ 228.640555][ T7752] 9pnet_fd: Insufficient options for proto=fd [ 230.234830][ T4471] usb 1-1: new high-speed USB device number 14 using dummy_hcd [ 230.424662][ T4471] usb 1-1: Using ep0 maxpacket: 8 [ 230.435098][ T4471] usb 1-1: config 0 interface 0 altsetting 4 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 230.481868][ T4471] usb 1-1: config 0 interface 0 has no altsetting 0 [ 230.498986][ T4471] usb 1-1: New USB device found, idVendor=0458, idProduct=0087, bcdDevice= 0.00 [ 230.518350][ T4471] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 230.538789][ T4471] usb 1-1: config 0 descriptor?? [ 230.847782][ T7833] netlink: 44 bytes leftover after parsing attributes in process `syz.4.1293'. [ 230.955925][ T4471] kye 0003:0458:0087.000B: unknown main item tag 0x0 [ 230.969661][ T4471] kye 0003:0458:0087.000B: unknown main item tag 0x0 [ 230.979210][ T4471] kye 0003:0458:0087.000B: unknown main item tag 0x0 [ 230.986726][ T4471] kye 0003:0458:0087.000B: unknown main item tag 0x0 [ 231.003644][ T4471] kye 0003:0458:0087.000B: unknown main item tag 0x0 [ 231.011315][ T4471] kye 0003:0458:0087.000B: item fetching failed at offset 12/43 [ 231.029966][ T4471] kye 0003:0458:0087.000B: parse failed [ 231.041462][ T4471] kye: probe of 0003:0458:0087.000B failed with error -22 [ 231.077982][ T4517] usb 3-1: new high-speed USB device number 15 using dummy_hcd [ 231.158021][ T4471] usb 1-1: USB disconnect, device number 14 [ 231.279985][ T4517] usb 3-1: New USB device found, idVendor=05d1, idProduct=2021, bcdDevice= 9.00 [ 231.294241][ T4517] usb 3-1: New USB device strings: Mfr=0, Product=16, SerialNumber=0 [ 231.312319][ T4517] usb 3-1: Product: syz [ 231.327950][ T4517] usb 3-1: config 0 descriptor?? [ 231.343096][ T4517] ftdi_sio 3-1:0.0: FTDI USB Serial Device converter detected [ 231.360592][ T4517] usb 3-1: Detected FT232H [ 231.542212][ T4517] ftdi_sio ttyUSB0: Unable to read latency timer: -32 [ 231.756424][ T4517] ftdi_sio 3-1:0.0: GPIO initialisation failed: -71 [ 231.784192][ T4517] usb 3-1: FTDI USB Serial Device converter now attached to ttyUSB0 [ 231.830725][ T4517] usb 3-1: USB disconnect, device number 15 [ 231.859391][ T4517] ftdi_sio ttyUSB0: FTDI USB Serial Device converter now disconnected from ttyUSB0 [ 231.895899][ T4517] ftdi_sio 3-1:0.0: device disconnected [ 232.985032][ T4471] usb 3-1: new full-speed USB device number 16 using dummy_hcd [ 233.177121][ T4471] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 233.220164][ T4471] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 233.250490][ T4471] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 233.292157][ T4471] usb 3-1: New USB device found, idVendor=0457, idProduct=07da, bcdDevice= 0.00 [ 233.303359][ T4471] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 233.321554][ T4471] usb 3-1: config 0 descriptor?? [ 233.749171][ T4471] hid-generic 0003:0457:07DA.000C: unknown main item tag 0x0 [ 233.762211][ T4471] hid-generic 0003:0457:07DA.000C: unknown main item tag 0x0 [ 233.770273][ T4471] hid-generic 0003:0457:07DA.000C: unknown main item tag 0x0 [ 233.778449][ T4471] hid-generic 0003:0457:07DA.000C: unknown main item tag 0x0 [ 233.786450][ T4471] hid-generic 0003:0457:07DA.000C: unknown main item tag 0x0 [ 233.798822][ T4471] hid-generic 0003:0457:07DA.000C: unknown main item tag 0x0 [ 233.809731][ T4471] hid-generic 0003:0457:07DA.000C: unknown main item tag 0x0 [ 233.819582][ T4471] hid-generic 0003:0457:07DA.000C: unknown main item tag 0x0 [ 233.830746][ T4471] hid-generic 0003:0457:07DA.000C: unknown main item tag 0x0 [ 233.838547][ T4471] hid-generic 0003:0457:07DA.000C: unknown main item tag 0x0 [ 233.846533][ T4471] hid-generic 0003:0457:07DA.000C: unknown main item tag 0x0 [ 233.854067][ T4471] hid-generic 0003:0457:07DA.000C: unknown main item tag 0x0 [ 233.861910][ T4471] hid-generic 0003:0457:07DA.000C: unknown main item tag 0x0 [ 233.869876][ T4471] hid-generic 0003:0457:07DA.000C: unknown main item tag 0x0 [ 233.878324][ T4471] hid-generic 0003:0457:07DA.000C: unknown main item tag 0x0 [ 233.890620][ T4471] hid-generic 0003:0457:07DA.000C: unknown main item tag 0x0 [ 233.903733][ T4471] hid-generic 0003:0457:07DA.000C: unknown main item tag 0x0 [ 233.916942][ T4471] hid-generic 0003:0457:07DA.000C: unknown main item tag 0x0 [ 233.931162][ T4471] hid-generic 0003:0457:07DA.000C: unknown main item tag 0x0 [ 233.945319][ T4471] hid-generic 0003:0457:07DA.000C: unknown main item tag 0x0 [ 233.964295][ T4471] hid-generic 0003:0457:07DA.000C: unknown main item tag 0x0 [ 233.977711][ T4471] hid-generic 0003:0457:07DA.000C: unknown main item tag 0x0 [ 233.991081][ T4471] hid-generic 0003:0457:07DA.000C: unknown main item tag 0x0 [ 234.004274][ T4471] hid-generic 0003:0457:07DA.000C: unknown main item tag 0x0 [ 234.017795][ T4471] hid-generic 0003:0457:07DA.000C: unknown main item tag 0x0 [ 234.033731][ T4471] hid-generic 0003:0457:07DA.000C: unknown main item tag 0x0 [ 234.052499][ T4471] hid-generic 0003:0457:07DA.000C: unknown main item tag 0x0 [ 234.070336][ T4471] hid-generic 0003:0457:07DA.000C: unknown main item tag 0x0 [ 234.080455][ T4471] hid-generic 0003:0457:07DA.000C: unknown main item tag 0x0 [ 234.111033][ T4471] hid-generic 0003:0457:07DA.000C: unknown main item tag 0x0 [ 234.129192][ T4471] hid-generic 0003:0457:07DA.000C: unknown main item tag 0x0 [ 234.139305][ T4471] hid-generic 0003:0457:07DA.000C: unknown main item tag 0x0 [ 234.157356][ T4471] hid-generic 0003:0457:07DA.000C: unknown main item tag 0x0 [ 234.174574][ T4471] hid-generic 0003:0457:07DA.000C: unknown main item tag 0x0 [ 234.194737][ T4471] hid-generic 0003:0457:07DA.000C: hidraw0: USB HID v0.00 Device [HID 0457:07da] on usb-dummy_hcd.2-1/input0 [ 234.233286][ T4471] usb 3-1: USB disconnect, device number 16 [ 234.428279][ T7928] fido_id[7928]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.2/usb3/report_descriptor': No such file or directory [ 234.632604][ T7943] tipc: Started in network mode [ 234.654617][ T7943] tipc: Node identity fffffff8, cluster identity 4711 [ 234.671676][ T7943] tipc: Node number set to 4294967288 [ 234.688093][ T11] tipc: Subscription rejected, illegal request [ 235.227889][ T7970] fuse: Bad value for 'fd' [ 235.782593][ T7990] overlayfs: failed to clone upperpath [ 236.057575][ T4313] usb 3-1: new high-speed USB device number 17 using dummy_hcd [ 236.249610][ T4313] usb 3-1: config index 0 descriptor too short (expected 45, got 36) [ 236.263453][ T4313] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 236.282199][ T4313] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 236.292130][ T4313] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 236.310711][ T4313] usb 3-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 236.320660][ T4313] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 236.337525][ T4313] usb 3-1: config 0 descriptor?? [ 236.430508][ T8013] 9pnet: p9_errstr2errno: server reported unknown error ÿL [ 236.749039][ T4313] plantronics 0003:047F:FFFF.000D: unknown main item tag 0x0 [ 236.764791][ T4313] plantronics 0003:047F:FFFF.000D: unknown main item tag 0x0 [ 236.772877][ T4313] plantronics 0003:047F:FFFF.000D: unknown main item tag 0x0 [ 236.780735][ T4313] plantronics 0003:047F:FFFF.000D: unknown main item tag 0x0 [ 236.791504][ T4313] plantronics 0003:047F:FFFF.000D: unknown main item tag 0x0 [ 236.799280][ T4313] plantronics 0003:047F:FFFF.000D: unknown main item tag 0x0 [ 236.807496][ T4313] plantronics 0003:047F:FFFF.000D: unknown main item tag 0x0 [ 236.815382][ T4313] plantronics 0003:047F:FFFF.000D: unknown main item tag 0x0 [ 236.828032][ T4313] plantronics 0003:047F:FFFF.000D: unknown main item tag 0x0 [ 236.844745][ T4313] plantronics 0003:047F:FFFF.000D: unknown main item tag 0x0 [ 236.856713][ T4313] plantronics 0003:047F:FFFF.000D: unknown main item tag 0x0 [ 236.873284][ T4313] plantronics 0003:047F:FFFF.000D: unknown main item tag 0x0 [ 236.888748][ T4313] plantronics 0003:047F:FFFF.000D: unknown main item tag 0x0 [ 236.904091][ T4313] plantronics 0003:047F:FFFF.000D: unknown main item tag 0x0 [ 236.920636][ T4313] plantronics 0003:047F:FFFF.000D: unknown main item tag 0x0 [ 236.941195][ T4313] plantronics 0003:047F:FFFF.000D: No inputs registered, leaving [ 236.996913][ T4313] plantronics 0003:047F:FFFF.000D: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.2-1/input0 [ 237.036010][ T4313] usb 3-1: USB disconnect, device number 17 [ 237.164918][ T8043] fido_id[8043]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.2/usb3/report_descriptor': No such file or directory [ 238.327444][ T4471] usb 1-1: new high-speed USB device number 15 using dummy_hcd [ 238.544734][ T4471] usb 1-1: Using ep0 maxpacket: 32 [ 238.556849][ T4471] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 238.592898][ T4471] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 238.621856][ T4471] usb 1-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 238.648436][ T4471] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 238.682257][ T4471] usb 1-1: config 0 descriptor?? [ 238.697344][ T4471] hub 1-1:0.0: USB hub found [ 238.890908][ T8100] tipc: Started in network mode [ 238.914688][ T8100] tipc: Node identity fffffff8, cluster identity 4711 [ 238.921681][ T8100] tipc: Node number set to 4294967288 [ 238.940662][ T11] tipc: Subscription rejected, illegal request [ 239.031065][ T8073] kvm: pic: single mode not supported [ 239.031288][ T8073] kvm: pic: level sensitive irq not supported [ 239.138079][ T4471] hub 1-1:0.0: config failed, can't read hub descriptor (err -22) [ 239.188563][ T4471] usbhid 1-1:0.0: can't add hid device: -71 [ 239.209791][ T4471] usbhid: probe of 1-1:0.0 failed with error -71 [ 239.265905][ T4471] usb 1-1: USB disconnect, device number 15 [ 239.872248][ T8137] tipc: Started in network mode [ 239.892022][ T8137] tipc: Node identity fffffff8, cluster identity 6 [ 239.920261][ T8137] tipc: Node number set to 4294967288 [ 239.949642][ T2967] tipc: Subscription rejected, illegal request [ 240.082462][ T8150] overlayfs: failed to clone upperpath [ 240.824894][ T4423] usb 1-1: new high-speed USB device number 16 using dummy_hcd [ 241.026014][ T4423] usb 1-1: config 5 has an invalid interface number: 71 but max is 0 [ 241.043216][ T4423] usb 1-1: config 5 has an invalid descriptor of length 0, skipping remainder of the config [ 241.055361][ T4423] usb 1-1: config 5 has no interface number 0 [ 241.061566][ T4423] usb 1-1: config 5 interface 71 has no altsetting 0 [ 241.074450][ T4423] usb 1-1: New USB device found, idVendor=0bb4, idProduct=0a3c, bcdDevice=71.4c [ 241.095520][ T4423] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 241.112406][ T4423] usb 1-1: Product: syz [ 241.126244][ T4423] usb 1-1: Manufacturer: syz [ 241.132890][ T4423] usb 1-1: SerialNumber: syz [ 241.355498][ T4423] usb 1-1: USB disconnect, device number 16 [ 241.931022][ T8208] user requested TSC rate below hardware speed [ 242.293712][ T8223] overlayfs: failed to clone upperpath [ 242.690917][ T8240] bridge0: port 3(syz_tun) entered blocking state [ 242.699014][ T8240] bridge0: port 3(syz_tun) entered disabled state [ 242.707005][ T8240] device syz_tun entered promiscuous mode [ 242.713799][ T8240] bridge0: port 3(syz_tun) entered blocking state [ 242.720391][ T8240] bridge0: port 3(syz_tun) entered forwarding state [ 242.906465][ T8250] overlayfs: failed to clone upperpath [ 243.072010][ T4517] usb 1-1: new high-speed USB device number 17 using dummy_hcd [ 243.267691][ T4517] usb 1-1: Using ep0 maxpacket: 32 [ 243.277009][ T4517] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 243.307882][ T4517] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 243.331906][ T4517] usb 1-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 243.343770][ T4517] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 243.382984][ T4517] usb 1-1: config 0 descriptor?? [ 243.400465][ T4517] hub 1-1:0.0: USB hub found [ 243.706294][ T4517] hub 1-1:0.0: config failed, can't read hub descriptor (err -22) [ 243.722802][ T4517] usbhid 1-1:0.0: can't add hid device: -71 [ 243.729531][ T4517] usbhid: probe of 1-1:0.0 failed with error -71 [ 243.775183][ T4517] usb 1-1: USB disconnect, device number 17 [ 246.007075][ T8378] can0: slcan on ttynull. [ 246.128914][ T8389] overlayfs: failed to clone upperpath [ 246.165391][ T8378] can0 (unregistered): slcan off ttynull. [ 247.194676][ T4517] usb 1-1: new high-speed USB device number 18 using dummy_hcd [ 247.384720][ T4517] usb 1-1: Using ep0 maxpacket: 32 [ 247.391766][ T4517] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 247.430982][ T4517] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 247.451148][ T4517] usb 1-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 247.479933][ T4517] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 247.512700][ T4517] usb 1-1: config 0 descriptor?? [ 247.536123][ T4517] hub 1-1:0.0: USB hub found [ 247.738647][ T4517] hub 1-1:0.0: config failed, can't read hub descriptor (err -22) [ 247.959204][ T4517] hid-generic 0003:046D:C31C.000E: item fetching failed at offset 0/1 [ 247.964961][ T4317] usb 3-1: new high-speed USB device number 18 using dummy_hcd [ 247.988669][ T4517] hid-generic: probe of 0003:046D:C31C.000E failed with error -22 [ 248.164706][ T4317] usb 3-1: Using ep0 maxpacket: 16 [ 248.172802][ T4317] usb 3-1: config 0 interface 0 altsetting 4 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 248.223324][ T4317] usb 3-1: config 0 interface 0 has no altsetting 0 [ 248.240637][ T4317] usb 3-1: New USB device found, idVendor=056e, idProduct=00fc, bcdDevice= 0.00 [ 248.264599][ T4317] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 248.275078][ T4517] usb 1-1: USB disconnect, device number 18 [ 248.307399][ T4317] usb 3-1: config 0 descriptor?? [ 248.720543][ T4317] elecom 0003:056E:00FC.000F: unknown main item tag 0x0 [ 248.754783][ T4317] elecom 0003:056E:00FC.000F: unknown main item tag 0x0 [ 248.761851][ T4317] elecom 0003:056E:00FC.000F: unknown main item tag 0x0 [ 248.777561][ T4317] elecom 0003:056E:00FC.000F: unknown main item tag 0x0 [ 248.788056][ T4317] elecom 0003:056E:00FC.000F: unknown main item tag 0x0 [ 248.804817][ T4317] elecom 0003:056E:00FC.000F: unknown main item tag 0x0 [ 248.811844][ T4317] elecom 0003:056E:00FC.000F: unknown main item tag 0x0 [ 248.834701][ T4317] elecom 0003:056E:00FC.000F: unknown main item tag 0x0 [ 248.854851][ T4317] elecom 0003:056E:00FC.000F: unknown main item tag 0x0 [ 248.862791][ T4317] elecom 0003:056E:00FC.000F: unknown main item tag 0x0 [ 248.892424][ T4317] elecom 0003:056E:00FC.000F: unknown main item tag 0x0 [ 248.905987][ T4317] elecom 0003:056E:00FC.000F: unknown main item tag 0x0 [ 248.914858][ T4317] elecom 0003:056E:00FC.000F: unknown main item tag 0x0 [ 248.938176][ T4317] elecom 0003:056E:00FC.000F: unknown main item tag 0x0 [ 248.954266][ T8504] Invalid argument reading file caps for ./file0 [ 248.960978][ T4317] elecom 0003:056E:00FC.000F: unknown main item tag 0x0 [ 248.978881][ T4317] elecom 0003:056E:00FC.000F: unknown main item tag 0x0 [ 248.989009][ T4317] elecom 0003:056E:00FC.000F: unknown main item tag 0x0 [ 249.006345][ T4317] elecom 0003:056E:00FC.000F: unknown main item tag 0x0 [ 249.026293][ T4317] elecom 0003:056E:00FC.000F: unknown main item tag 0x0 [ 249.033324][ T4317] elecom 0003:056E:00FC.000F: unknown main item tag 0x0 [ 249.045615][ T4317] elecom 0003:056E:00FC.000F: unknown main item tag 0x0 [ 249.053486][ T4317] elecom 0003:056E:00FC.000F: unknown main item tag 0x0 [ 249.066554][ T4317] elecom 0003:056E:00FC.000F: unknown main item tag 0x0 [ 249.073638][ T4317] elecom 0003:056E:00FC.000F: unknown main item tag 0x0 [ 249.087055][ T4317] elecom 0003:056E:00FC.000F: unknown main item tag 0x0 [ 249.094071][ T4317] elecom 0003:056E:00FC.000F: unknown main item tag 0x0 [ 249.115011][ T4317] elecom 0003:056E:00FC.000F: unknown main item tag 0x0 [ 249.122205][ T4317] elecom 0003:056E:00FC.000F: unknown main item tag 0x0 [ 249.152656][ T4317] elecom 0003:056E:00FC.000F: unknown main item tag 0x0 [ 249.162784][ T4317] elecom 0003:056E:00FC.000F: unknown main item tag 0x0 [ 249.184701][ T4317] elecom 0003:056E:00FC.000F: unknown main item tag 0x0 [ 249.192358][ T4317] elecom 0003:056E:00FC.000F: unknown main item tag 0x0 [ 249.226409][ T4317] elecom 0003:056E:00FC.000F: unknown main item tag 0x0 [ 249.243673][ T4317] elecom 0003:056E:00FC.000F: unknown main item tag 0x0 [ 249.253424][ T4317] elecom 0003:056E:00FC.000F: unknown main item tag 0x0 [ 249.273751][ T4317] elecom 0003:056E:00FC.000F: unknown main item tag 0x0 [ 249.292943][ T4317] elecom 0003:056E:00FC.000F: unknown main item tag 0x0 [ 249.318369][ T4317] elecom 0003:056E:00FC.000F: unknown main item tag 0x0 [ 249.334633][ T4317] elecom 0003:056E:00FC.000F: unknown main item tag 0x0 [ 249.350315][ T4317] elecom 0003:056E:00FC.000F: hidraw0: USB HID v0.05 Device [HID 056e:00fc] on usb-dummy_hcd.2-1/input0 [ 249.385991][ T4317] usb 3-1: USB disconnect, device number 18 [ 249.554003][ T8520] fido_id[8520]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.2/usb3/report_descriptor': No such file or directory [ 249.823511][ T8533] overlayfs: failed to clone upperpath [ 250.268431][ T8553] overlayfs: failed to clone upperpath [ 250.494638][ T4317] usb 1-1: new full-speed USB device number 19 using dummy_hcd [ 250.700723][ T4317] usb 1-1: config 0 has an invalid interface number: 41 but max is 0 [ 250.715516][ T4317] usb 1-1: config 0 has no interface number 0 [ 250.731977][ T4317] usb 1-1: config 0 interface 41 has no altsetting 0 [ 250.773181][ T4317] usb 1-1: New USB device found, idVendor=0fe6, idProduct=9800, bcdDevice=d1.9a [ 250.793706][ T4317] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 250.805861][ T4317] usb 1-1: Product: syz [ 250.810169][ T4317] usb 1-1: Manufacturer: syz [ 250.820902][ T4317] usb 1-1: SerialNumber: syz [ 250.834459][ T4317] usb 1-1: config 0 descriptor?? [ 251.802599][ T4317] CoreChips 1-1:0.41 (unnamed net_device) (uninitialized): sr_get_phy_addr : Error reading PHYID register:ffffffe0 [ 252.276418][ T4317] CoreChips 1-1:0.41 (unnamed net_device) (uninitialized): Failed to send software reset:ffffffb9 [ 252.304889][ T4317] CoreChips 1-1:0.41 (unnamed net_device) (uninitialized): Failed to reset PHY: -71 [ 252.331036][ T4317] CoreChips: probe of 1-1:0.41 failed with error -71 [ 252.358052][ T4317] usb 1-1: USB disconnect, device number 19 [ 253.961960][ T8714] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1645'. [ 253.971557][ T8714] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 254.166035][ T8714] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 254.201836][ T8728] device bridge_slave_0 left promiscuous mode [ 254.215406][ T8728] bridge0: port 1(bridge_slave_0) entered disabled state [ 254.243385][ T8728] device bridge_slave_1 left promiscuous mode [ 254.282859][ T8728] bridge0: port 2(bridge_slave_1) entered disabled state [ 254.310188][ T8728] bond0: (slave bond_slave_0): Releasing backup interface [ 254.330891][ T8728] bond0: (slave bond_slave_1): Releasing backup interface [ 254.350905][ T8728] team0: Port device team_slave_0 removed [ 254.368321][ T8728] team0: Port device team_slave_1 removed [ 254.375537][ T8728] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 254.383510][ T8728] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 254.397472][ T8728] bond0: (slave wlan1): Releasing backup interface [ 255.352312][ T8769] syz.2.1663 sent an empty control message without MSG_MORE. [ 255.546924][ T1273] ieee802154 phy0 wpan0: encryption failed: -22 [ 255.553326][ T1273] ieee802154 phy1 wpan1: encryption failed: -22 [ 255.615945][ T8780] xt_connbytes: Forcing CT accounting to be enabled [ 255.623348][ T8780] xt_CT: You must specify a L4 protocol and not use inversions on it [ 255.787931][ T8786] netlink: 'syz.3.1670': attribute type 1 has an invalid length. [ 255.812361][ T8786] 8021q: adding VLAN 0 to HW filter on device bond1 [ 255.820254][ T8789] netlink: 32 bytes leftover after parsing attributes in process `syz.4.1672'. [ 255.944788][ T4423] usb 3-1: new high-speed USB device number 19 using dummy_hcd [ 256.144585][ T4423] usb 3-1: Using ep0 maxpacket: 32 [ 256.152295][ T4423] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 256.203067][ T4423] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 256.223389][ T4423] usb 3-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 256.233472][ T4423] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 256.257822][ T4423] usb 3-1: config 0 descriptor?? [ 256.277635][ T4423] hub 3-1:0.0: USB hub found [ 256.308855][ T8808] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 256.337100][ T8808] IPv6: ADDRCONF(NETDEV_CHANGE): dummy0: link becomes ready [ 256.357374][ T8808] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 256.370672][ T8808] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 256.396976][ T8816] syz.3.1683 uses obsolete (PF_INET,SOCK_PACKET) [ 256.444002][ T8812] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 256.451679][ T8812] IPv6: NLM_F_CREATE should be set when creating new route [ 256.670871][ T4423] hub 3-1:0.0: config failed, can't read hub descriptor (err -22) [ 256.691025][ T4423] usbhid 3-1:0.0: can't add hid device: -71 [ 256.707494][ T4423] usbhid: probe of 3-1:0.0 failed with error -71 [ 256.765520][ T4423] usb 3-1: USB disconnect, device number 19 [ 257.096008][ T8842] netlink: 60 bytes leftover after parsing attributes in process `syz.4.1690'. [ 257.138492][ T8842] unsupported nlmsg_type 40 [ 257.372480][ T8853] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1692'. [ 257.410236][ T8853] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1692'. [ 257.441188][ T8853] device team0 entered promiscuous mode [ 257.463877][ T8853] device team_slave_0 entered promiscuous mode [ 257.495635][ T8858] xt_HMARK: spi-set and port-set can't be combined [ 257.502119][ T8853] device team_slave_1 entered promiscuous mode [ 257.525057][ T8853] device bond0 entered promiscuous mode [ 257.549588][ T8853] device bond_slave_0 entered promiscuous mode [ 257.579126][ T8853] device bond_slave_1 entered promiscuous mode [ 257.592739][ T8853] device wlan1 entered promiscuous mode [ 257.623847][ T8853] 8021q: adding VLAN 0 to HW filter on device hsr1 [ 257.667873][ T8864] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 257.675207][ T8864] IPv6: NLM_F_CREATE should be set when creating new route [ 257.682496][ T8864] IPv6: NLM_F_CREATE should be set when creating new route [ 257.689806][ T8864] IPv6: NLM_F_CREATE should be set when creating new route [ 257.720792][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): hsr1: link becomes ready [ 257.738795][ T8869] netlink: 16178 bytes leftover after parsing attributes in process `syz.0.1698'. [ 257.851795][ T8872] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1700'. [ 257.877052][ T8872] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1700'. [ 258.723700][ T8907] netlink: 84 bytes leftover after parsing attributes in process `syz.3.1712'. [ 258.760364][ T8907] netlink: 84 bytes leftover after parsing attributes in process `syz.3.1712'. [ 258.771819][ T8907] A link change request failed with some changes committed already. Interface ip6gre0 may have been left with an inconsistent configuration, please check. [ 258.836991][ T8913] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 258.844377][ T8913] IPv6: NLM_F_CREATE should be set when creating new route [ 258.851684][ T8913] IPv6: NLM_F_CREATE should be set when creating new route [ 258.858967][ T8913] IPv6: NLM_F_CREATE should be set when creating new route [ 259.839678][ T8960] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 259.847086][ T8960] IPv6: NLM_F_CREATE should be set when creating new route [ 259.854348][ T8960] IPv6: NLM_F_CREATE should be set when creating new route [ 259.861711][ T8960] IPv6: NLM_F_CREATE should be set when creating new route [ 259.879005][ T8960] __nla_validate_parse: 2 callbacks suppressed [ 259.879022][ T8960] netlink: 16178 bytes leftover after parsing attributes in process `syz.1.1729'. [ 260.154622][ T8972] netlink: 32 bytes leftover after parsing attributes in process `syz.1.1734'. [ 260.394417][ T8980] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1738'. [ 260.438234][ T8980] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1738'. [ 260.629660][ T8992] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 260.636992][ T8992] IPv6: NLM_F_CREATE should be set when creating new route [ 260.644248][ T8992] IPv6: NLM_F_CREATE should be set when creating new route [ 260.651568][ T8992] IPv6: NLM_F_CREATE should be set when creating new route [ 260.716891][ T8997] netlink: 16178 bytes leftover after parsing attributes in process `syz.4.1742'. [ 262.063880][ T9059] xt_HMARK: spi-set and port-set can't be combined [ 262.091439][ T9062] device syzkaller0 entered promiscuous mode [ 262.892599][ T9098] netlink: 20 bytes leftover after parsing attributes in process `syz.1.1779'. [ 262.916963][ T9100] xt_HMARK: spi-set and port-set can't be combined [ 263.672098][ T9132] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1793'. [ 263.709193][ T9132] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1793'. [ 263.751496][ T9132] device gretap0 entered promiscuous mode [ 263.787337][ T9132] device gretap0 left promiscuous mode [ 264.010121][ T9150] xt_HMARK: spi-set and port-set can't be combined [ 264.454648][ T4313] usb 3-1: new high-speed USB device number 20 using dummy_hcd [ 264.660144][ T4313] usb 3-1: Using ep0 maxpacket: 32 [ 264.676231][ T4313] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 264.704948][ T4313] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 264.725617][ T4313] usb 3-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 264.744621][ T4313] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 264.765532][ T4313] usb 3-1: config 0 descriptor?? [ 264.776610][ T4313] hub 3-1:0.0: USB hub found [ 264.808490][ T9186] netlink: 28 bytes leftover after parsing attributes in process `syz.4.1810'. [ 264.818056][ T9186] netlink: 28 bytes leftover after parsing attributes in process `syz.4.1810'. [ 264.832812][ T9186] device gretap0 entered promiscuous mode [ 264.870916][ T9186] device gretap0 left promiscuous mode [ 265.095435][ T9195] netlink: 'syz.1.1813': attribute type 25 has an invalid length. [ 265.117013][ T4313] hub 3-1:0.0: config failed, can't read hub descriptor (err -22) [ 265.155132][ T4313] usbhid 3-1:0.0: can't add hid device: -71 [ 265.171432][ T4313] usbhid: probe of 3-1:0.0 failed with error -71 [ 265.219038][ T4313] usb 3-1: USB disconnect, device number 20 [ 265.302659][ T9202] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1817'. [ 266.924828][ T9269] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1841'. [ 266.954583][ T9269] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1841'. [ 267.029657][ T9272] ------------[ cut here ]------------ [ 267.035489][ T9272] memcpy: detected field-spanning write (size 32) of single field "&new->sel" at net/sched/cls_u32.c:853 (size 16) [ 267.056443][ T9272] WARNING: CPU: 1 PID: 9272 at net/sched/cls_u32.c:853 u32_change+0x1dfc/0x27e0 [ 267.065745][ T9272] Modules linked in: [ 267.069722][ T9272] CPU: 1 PID: 9272 Comm: syz.0.1843 Not tainted syzkaller #0 [ 267.077324][ T9272] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 267.087591][ T9272] RIP: 0010:u32_change+0x1dfc/0x27e0 [ 267.092921][ T9272] Code: f9 eb 59 e8 b6 7d 1e f9 c6 05 d0 95 a7 05 01 b9 10 00 00 00 48 c7 c7 a0 a4 8e 8b 4c 89 fe 48 c7 c2 20 a5 8e 8b e8 74 ed e9 f8 <0f> 0b e9 ff ee ff ff e8 88 7d 1e f9 eb 24 e8 81 7d 1e f9 c6 05 43 [ 267.112641][ T9272] RSP: 0018:ffffc9000512ee40 EFLAGS: 00010246 [ 267.118903][ T9272] RAX: c374745121680900 RBX: ffff8880286eace0 RCX: 0000000000080000 [ 267.126984][ T9272] RDX: ffffc90005a5a000 RSI: 0000000000003f5e RDI: 0000000000003f5f [ 267.135249][ T9272] RBP: ffffc9000512eff8 R08: ffffc9000512eac7 R09: 1ffff92000a25d58 [ 267.143507][ T9272] R10: dffffc0000000000 R11: fffff52000a25d59 R12: 0000000000000000 [ 267.151729][ T9272] R13: dffffc0000000000 R14: ffff8880286eb400 R15: 0000000000000020 [ 267.159794][ T9272] FS: 00007f6286ed46c0(0000) GS:ffff8880b8f00000(0000) knlGS:0000000000000000 [ 267.168845][ T9272] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 267.175496][ T9272] CR2: 00007f7ea3617dac CR3: 0000000018654000 CR4: 00000000003506e0 [ 267.183511][ T9272] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 267.191601][ T9272] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 267.199679][ T9272] Call Trace: [ 267.203008][ T9272] [ 267.206095][ T9272] ? u32_get+0x370/0x370 [ 267.210403][ T9272] ? u32_get+0x370/0x370 [ 267.214736][ T9272] tc_new_tfilter+0x1160/0x1900 [ 267.219630][ T9272] ? kmem_cache_free+0xf7/0x290 [ 267.224588][ T9272] ? nlmon_xmit+0xac/0xf0 [ 267.228994][ T9272] ? tcf_proto_signal_destroying+0x240/0x240 [ 267.235099][ T9272] ? rcu_read_unlock+0x8c/0xa0 [ 267.239956][ T9272] ? tcf_proto_signal_destroying+0x240/0x240 [ 267.246285][ T9272] ? rtnetlink_rcv_msg+0x226/0xfc0 [ 267.251453][ T9272] ? tcf_proto_signal_destroying+0x240/0x240 [ 267.257551][ T9272] rtnetlink_rcv_msg+0x8cc/0xfc0 [ 267.262574][ T9272] ? rtnetlink_bind+0x80/0x80 [ 267.267388][ T9272] ? __local_bh_enable_ip+0x136/0x1c0 [ 267.272818][ T9272] ? lockdep_hardirqs_on+0x94/0x140 [ 267.278117][ T9272] ? __local_bh_enable_ip+0x136/0x1c0 [ 267.283538][ T9272] ? _local_bh_enable+0xa0/0xa0 [ 267.288507][ T9272] ? __dev_queue_xmit+0x26b/0x37c0 [ 267.293669][ T9272] ? __dev_queue_xmit+0x26b/0x37c0 [ 267.298958][ T9272] ? __dev_queue_xmit+0x1cd2/0x37c0 [ 267.304217][ T9272] ? __dev_queue_xmit+0x26b/0x37c0 [ 267.309612][ T9272] ? ref_tracker_free+0x68c/0x840 [ 267.314759][ T9272] ? __copy_skb_header+0x3ba/0x4f0 [ 267.319924][ T9272] ? refcount_inc+0x70/0x70 [ 267.324473][ T9272] ? memcpy+0x3c/0x60 [ 267.328559][ T9272] ? __copy_skb_header+0x3ba/0x4f0 [ 267.333734][ T9272] ? __skb_clone+0x480/0x790 [ 267.338438][ T9272] netlink_rcv_skb+0x1fb/0x450 [ 267.343266][ T9272] ? rtnetlink_bind+0x80/0x80 [ 267.348254][ T9272] ? netlink_ack+0x1170/0x1170 [ 267.353086][ T9272] ? netlink_deliver_tap+0x2e/0x1b0 [ 267.358448][ T9272] netlink_unicast+0x74d/0x8d0 [ 267.363289][ T9272] netlink_sendmsg+0x8ad/0xbd0 [ 267.368198][ T9272] ? netlink_getsockopt+0x550/0x550 [ 267.373452][ T9272] ? aa_sock_msg_perm+0x94/0x150 [ 267.378480][ T9272] ? bpf_lsm_socket_sendmsg+0x5/0x10 [ 267.383830][ T9272] ? security_socket_sendmsg+0x7c/0xa0 [ 267.389514][ T9272] ? netlink_getsockopt+0x550/0x550 [ 267.394824][ T9272] ____sys_sendmsg+0x5be/0x970 [ 267.399676][ T9272] ? __sys_sendmsg_sock+0x30/0x30 [ 267.404821][ T9272] ? __import_iovec+0x315/0x500 [ 267.409722][ T9272] ? import_iovec+0x6f/0xa0 [ 267.414277][ T9272] ___sys_sendmsg+0x2a2/0x360 [ 267.419069][ T9272] ? __sched_text_start+0x8/0x8 [ 267.423981][ T9272] ? __sys_sendmsg+0x290/0x290 [ 267.428941][ T9272] __sys_sendmmsg+0x2c3/0x510 [ 267.433683][ T9272] ? __ia32_sys_sendmsg+0x80/0x80 [ 267.438826][ T9272] ? __ia32_sys_get_robust_list+0x100/0x100 [ 267.444827][ T9272] ? lockdep_hardirqs_on_prepare+0x409/0x770 [ 267.451101][ T9272] ? lock_chain_count+0x20/0x20 [ 267.456070][ T9272] __x64_sys_sendmmsg+0x9c/0xb0 [ 267.461053][ T9272] do_syscall_64+0x4c/0xa0 [ 267.465677][ T9272] ? clear_bhb_loop+0x60/0xb0 [ 267.470438][ T9272] ? clear_bhb_loop+0x60/0xb0 [ 267.475226][ T9272] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 267.481169][ T9272] RIP: 0033:0x7f6285f9c819 [ 267.485710][ T9272] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 267.505489][ T9272] RSP: 002b:00007f6286ed4028 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 267.513975][ T9272] RAX: ffffffffffffffda RBX: 00007f6286215fa0 RCX: 00007f6285f9c819 [ 267.522060][ T9272] RDX: 04000000000001f2 RSI: 0000200000000000 RDI: 0000000000000007 [ 267.530141][ T9272] RBP: 00007f6286032c91 R08: 0000000000000000 R09: 0000000000000000 [ 267.538246][ T9272] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 267.547175][ T9272] R13: 00007f6286216038 R14: 00007f6286215fa0 R15: 00007ffedf56aea8 [ 267.555586][ T9272] [ 267.558651][ T9272] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 267.565961][ T9272] CPU: 1 PID: 9272 Comm: syz.0.1843 Not tainted syzkaller #0 [ 267.573375][ T9272] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 267.583459][ T9272] Call Trace: [ 267.586764][ T9272] [ 267.589728][ T9272] dump_stack_lvl+0x188/0x24e [ 267.594489][ T9272] ? memcpy+0x3c/0x60 [ 267.598549][ T9272] ? show_regs_print_info+0x12/0x12 [ 267.603808][ T9272] ? load_image+0x400/0x400 [ 267.608364][ T9272] panic+0x2e5/0x730 [ 267.612309][ T9272] ? bpf_jit_dump+0xd0/0xd0 [ 267.616870][ T9272] __warn+0x2f8/0x4f0 [ 267.620904][ T9272] ? u32_change+0x1dfc/0x27e0 [ 267.625627][ T9272] ? u32_change+0x1dfc/0x27e0 [ 267.630357][ T9272] report_bug+0x2ba/0x4f0 [ 267.634739][ T9272] ? u32_change+0x1dfc/0x27e0 [ 267.639465][ T9272] handle_bug+0x3a/0x70 [ 267.643661][ T9272] exc_invalid_op+0x16/0x40 [ 267.648193][ T9272] asm_exc_invalid_op+0x16/0x20 [ 267.653066][ T9272] RIP: 0010:u32_change+0x1dfc/0x27e0 [ 267.658382][ T9272] Code: f9 eb 59 e8 b6 7d 1e f9 c6 05 d0 95 a7 05 01 b9 10 00 00 00 48 c7 c7 a0 a4 8e 8b 4c 89 fe 48 c7 c2 20 a5 8e 8b e8 74 ed e9 f8 <0f> 0b e9 ff ee ff ff e8 88 7d 1e f9 eb 24 e8 81 7d 1e f9 c6 05 43 [ 267.678004][ T9272] RSP: 0018:ffffc9000512ee40 EFLAGS: 00010246 [ 267.684086][ T9272] RAX: c374745121680900 RBX: ffff8880286eace0 RCX: 0000000000080000 [ 267.692071][ T9272] RDX: ffffc90005a5a000 RSI: 0000000000003f5e RDI: 0000000000003f5f [ 267.700060][ T9272] RBP: ffffc9000512eff8 R08: ffffc9000512eac7 R09: 1ffff92000a25d58 [ 267.708056][ T9272] R10: dffffc0000000000 R11: fffff52000a25d59 R12: 0000000000000000 [ 267.716041][ T9272] R13: dffffc0000000000 R14: ffff8880286eb400 R15: 0000000000000020 [ 267.724048][ T9272] ? u32_get+0x370/0x370 [ 267.728323][ T9272] ? u32_get+0x370/0x370 [ 267.732588][ T9272] tc_new_tfilter+0x1160/0x1900 [ 267.737469][ T9272] ? kmem_cache_free+0xf7/0x290 [ 267.742335][ T9272] ? nlmon_xmit+0xac/0xf0 [ 267.746698][ T9272] ? tcf_proto_signal_destroying+0x240/0x240 [ 267.752702][ T9272] ? rcu_read_unlock+0x8c/0xa0 [ 267.757515][ T9272] ? tcf_proto_signal_destroying+0x240/0x240 [ 267.763519][ T9272] ? rtnetlink_rcv_msg+0x226/0xfc0 [ 267.768669][ T9272] ? tcf_proto_signal_destroying+0x240/0x240 [ 267.774679][ T9272] rtnetlink_rcv_msg+0x8cc/0xfc0 [ 267.779657][ T9272] ? rtnetlink_bind+0x80/0x80 [ 267.784362][ T9272] ? __local_bh_enable_ip+0x136/0x1c0 [ 267.789751][ T9272] ? lockdep_hardirqs_on+0x94/0x140 [ 267.794981][ T9272] ? __local_bh_enable_ip+0x136/0x1c0 [ 267.800373][ T9272] ? _local_bh_enable+0xa0/0xa0 [ 267.805254][ T9272] ? __dev_queue_xmit+0x26b/0x37c0 [ 267.810394][ T9272] ? __dev_queue_xmit+0x26b/0x37c0 [ 267.815530][ T9272] ? __dev_queue_xmit+0x1cd2/0x37c0 [ 267.820754][ T9272] ? __dev_queue_xmit+0x26b/0x37c0 [ 267.825892][ T9272] ? ref_tracker_free+0x68c/0x840 [ 267.830951][ T9272] ? __copy_skb_header+0x3ba/0x4f0 [ 267.836099][ T9272] ? refcount_inc+0x70/0x70 [ 267.840625][ T9272] ? memcpy+0x3c/0x60 [ 267.844618][ T9272] ? __copy_skb_header+0x3ba/0x4f0 [ 267.849760][ T9272] ? __skb_clone+0x480/0x790 [ 267.854404][ T9272] netlink_rcv_skb+0x1fb/0x450 [ 267.859210][ T9272] ? rtnetlink_bind+0x80/0x80 [ 267.863928][ T9272] ? netlink_ack+0x1170/0x1170 [ 267.868741][ T9272] ? netlink_deliver_tap+0x2e/0x1b0 [ 267.873978][ T9272] netlink_unicast+0x74d/0x8d0 [ 267.878788][ T9272] netlink_sendmsg+0x8ad/0xbd0 [ 267.883596][ T9272] ? netlink_getsockopt+0x550/0x550 [ 267.888825][ T9272] ? aa_sock_msg_perm+0x94/0x150 [ 267.893796][ T9272] ? bpf_lsm_socket_sendmsg+0x5/0x10 [ 267.899097][ T9272] ? security_socket_sendmsg+0x7c/0xa0 [ 267.904584][ T9272] ? netlink_getsockopt+0x550/0x550 [ 267.909838][ T9272] ____sys_sendmsg+0x5be/0x970 [ 267.914648][ T9272] ? __sys_sendmsg_sock+0x30/0x30 [ 267.919699][ T9272] ? __import_iovec+0x315/0x500 [ 267.924578][ T9272] ? import_iovec+0x6f/0xa0 [ 267.929102][ T9272] ___sys_sendmsg+0x2a2/0x360 [ 267.933814][ T9272] ? __sched_text_start+0x8/0x8 [ 267.938716][ T9272] ? __sys_sendmsg+0x290/0x290 [ 267.943570][ T9272] __sys_sendmmsg+0x2c3/0x510 [ 267.948289][ T9272] ? __ia32_sys_sendmsg+0x80/0x80 [ 267.953355][ T9272] ? __ia32_sys_get_robust_list+0x100/0x100 [ 267.959283][ T9272] ? lockdep_hardirqs_on_prepare+0x409/0x770 [ 267.965312][ T9272] ? lock_chain_count+0x20/0x20 [ 267.970214][ T9272] __x64_sys_sendmmsg+0x9c/0xb0 [ 267.975103][ T9272] do_syscall_64+0x4c/0xa0 [ 267.979552][ T9272] ? clear_bhb_loop+0x60/0xb0 [ 267.984270][ T9272] ? clear_bhb_loop+0x60/0xb0 [ 267.988980][ T9272] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 267.994900][ T9272] RIP: 0033:0x7f6285f9c819 [ 267.999346][ T9272] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 268.018990][ T9272] RSP: 002b:00007f6286ed4028 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 268.027428][ T9272] RAX: ffffffffffffffda RBX: 00007f6286215fa0 RCX: 00007f6285f9c819 [ 268.035414][ T9272] RDX: 04000000000001f2 RSI: 0000200000000000 RDI: 0000000000000007 [ 268.043412][ T9272] RBP: 00007f6286032c91 R08: 0000000000000000 R09: 0000000000000000 [ 268.051407][ T9272] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 268.059406][ T9272] R13: 00007f6286216038 R14: 00007f6286215fa0 R15: 00007ffedf56aea8 [ 268.067499][ T9272] [ 268.071097][ T9272] Kernel Offset: disabled [ 268.075434][ T9272] Rebooting in 86400 seconds..