last executing test programs: 9.225225762s ago: executing program 4 (id=2845): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f00000000c0)={0xa, 0x4e22, 0x9, @ipv4={'\x00', '\xff\xff', @remote}, 0x6}, 0x1c) r1 = socket(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000080)=@newqdisc={0x60, 0x24, 0xd0f, 0x70bd2d, 0x0, {0x60, 0x0, 0x0, r3, {0x0, 0xa}, {0xffff, 0xffff}, {0x1a, 0xffff}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x34, 0x2, [@TCA_TBF_PARMS={0x28, 0x1, {{0xea, 0x2, 0x0, 0x0, 0x9, 0x5}, {0x12, 0x2, 0x0, 0x401, 0x8001, 0x1400}, 0xa5, 0x5, 0xffffffd}}, @TCA_TBF_BURST={0x8, 0x6, 0x8057}]}}]}, 0x60}, 0x1, 0x0, 0x0, 0x40000}, 0x44080) sendmsg$nl_route_sched(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000500)=@newqdisc={0x48, 0x24, 0xd0f, 0x70bd29, 0x0, {0x60, 0x0, 0x0, r3, {}, {0xffe0, 0xa}, {0xf, 0x10}}, [@qdisc_kind_options=@q_htb={{0x8}, {0x1c, 0x2, [@TCA_HTB_INIT={0x18, 0x2, {0x3, 0xfff, 0xf653}}]}}]}, 0x48}, 0x1, 0x0, 0x0, 0x34008081}, 0x4000) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x4e22, 0x7, @ipv4={'\x00', '\xff\xff', @empty}, 0x106}, 0x1c) mbind(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x5, 0x0, 0x8, 0x0) syz_open_dev$usbmon(&(0x7f0000000080), 0x0, 0x0) syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') r4 = syz_open_dev$usbfs(&(0x7f0000000100), 0x76, 0x101301) ioctl$USBDEVFS_CLEAR_HALT(r4, 0xc0105502, &(0x7f0000000300)={0x1, 0x1}) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r5, &(0x7f000057eff8)=@abs, 0x6e) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_MSG_GETSET(r7, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000640)={&(0x7f00000005c0)={0x14, 0xa, 0xa, 0x101}, 0x14}}, 0x20000000) connect(r7, &(0x7f00000000c0)=@isdn={0x22, 0x9, 0x3, 0xe, 0x9}, 0x80) setsockopt$MRT_INIT(r4, 0x0, 0xc8, &(0x7f0000002140), 0x4) sendmmsg$unix(r6, 0x0, 0x0, 0x0) recvmmsg(r5, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) syz_clone(0x810e0000, &(0x7f0000000140)="bdf39dbc875bfba4b5083c18b0d4c3817118a6a676381073b1a8589483d7910f3df6b55e7897165c222d5a05b2db27359e6f66aa67289e5079c0f4a365909e24aadd80dcc5f26e9da3507e32a1ce74c97a8fa1", 0x53, &(0x7f0000000040), &(0x7f00000001c0), &(0x7f0000000200)="cd1e023bd6610106467f5e372bd276475d012fd8a98f4ec9847a49fdbaa0f6a93af11e5a63e10032086a70a2d1eab31de79ea9fdf9e33b328386e04b52a84458f1cb707e740457cebc578ae5d50d51f1f933f7a3c3192de7f54fb7f2b1236ac9b266ae9da4f5ef661cad294581bee3bbe03efe1dd56d48ee1abfcb362c32fc8eac79f2d438f2961a767d83b016106bde07106f840e56e4e5cfaa27d41bcc5b8a87757c9151a2308f1f53bdb108a1248759f1428aa160e85d756ed36f23980dbdf7755b21498d56b92c3b67") syz_open_dev$sndctrl(&(0x7f0000000580), 0x3, 0xa800) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000340)={&(0x7f0000000300)='rxrpc_call\x00', 0xffffffffffffffff, 0x0, 0x3}, 0x18) timer_create(0x5, &(0x7f0000000500)={0x0, 0x1f, 0x0, @thr={&(0x7f0000000400)="ef8d6cde725d8ee5e2d31415aca757f4ff4092c12dc3c37e4029b266fda8451e3858096dfb4a56d80904dd6384ee903550a749ea6a11878c76fb2f412f7be029cedaccbcec66192fb948d9e98a8af55d169b9c39031be9ddf104e20b0e3b84b9a4adecef77003c1be0db22e65eeead7ec2", &(0x7f0000000480)="9d139470cfea37e0f24e101966a06c97f5800a19558819a6c14fad0a8fc339638a17808e308f107f241b96e7991113dc2550de35b0c3e55d036b8c85d920e5456b09acef94d025a5a87fddb63c781f"}}, &(0x7f0000000540)) r8 = syz_open_procfs(0x0, &(0x7f00000000c0)='net/xfrm_stat\x00') read$FUSE(r8, &(0x7f0000000100)={0x2020, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x2020) setpgid(0x0, r9) 7.682445416s ago: executing program 3 (id=2848): syz_usb_control_io$sierra_net(0xffffffffffffffff, &(0x7f00000000c0)={0x14, &(0x7f0000000000)={0x20, 0x9, 0xb2, {0xb2, 0x2, "bf82ad5553067f278d925c0a180658893d744156c2cf2e0ff3e71963431d6268a75dec4a5eb1cd0ffbab1ed470210492f2614c8b15df753e346b06841111d30c168adbba35b769d1832fd2fa7ab1b401dd3bd1196ce951615c69ac0b25d8a7da35d98b5ce59454384b5517dd9b86b7833f7c59db48d96ea237be7d4e7509db8da065b9a767841d8c2c7fbdc890a0e286137b0f9ffc7164e33582d84dcde9905f1a900730824c00033edea639844efa21"}}, &(0x7f0000000180)={0x0, 0x3, 0xbf, @string={0xbf, 0x3, "17778cb21040174a276702baf6c06828b85ea2812bab74abdb7087482bdfdb7826a4a44baba040f6e031e56b2026b957aa1ff1155c864ceca68fe8419ccf0ea710dc326475ec041f9bfc03b5192e1d9aea3cf8e1ba45307e1f1df404c07ecdc088d70a2a11f9eb2b3d779509d14d0ad170ace6e19a06a0c62de3e30101278feb041d1d29d002ed3d4628248edd928c141831a3374470da2eaa2a01c729014c6ca126c8f0c05d332caa8f33e811540b327e2a222d287be9a10934f37787"}}}, &(0x7f0000000700)={0x1c, &(0x7f0000000100)={0x20, 0xc, 0x26, "c7fdc6dd9abe8fa8aeaf0315d8d16958a171ea7d000332a6b3b64304842cfb84c3db486fa193"}, 0x0, 0x0}) r0 = syz_open_dev$loop(&(0x7f0000000480), 0xd76, 0x181400) r1 = syz_open_dev$usbfs(&(0x7f0000000080), 0x76, 0x101301) ioctl$USBDEVFS_CONTROL(r1, 0xc0185500, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='cgroup.stat\x00', 0x275a, 0x0) landlock_create_ruleset(&(0x7f0000000040)={0x0, 0x3}, 0x10, 0x0) sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000300)={0x34, 0x0, 0x1, 0x0, 0x0, {{}, {@val={0x8}, @void}}, [@chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x1590}, @NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x6}], @NL80211_ATTR_DURATION={0x8, 0x57, 0x80}]}, 0x34}, 0x1, 0x0, 0x0, 0x885}, 0x0) openat(r2, &(0x7f0000000040)='./file1\x00', 0x2800, 0x27) r3 = openat(0xffffffffffffff9c, &(0x7f0000000280)='./cgroup\x00', 0x0, 0x10) r4 = openat$cgroup_ro(r3, &(0x7f0000000300)='cgroup.kill\x00', 0x275a, 0x0) link(&(0x7f0000000780)='./file1\x00', &(0x7f00000007c0)='./cgroup\x00') read$FUSE(r4, &(0x7f0000001240)={0x2020}, 0x2020) r5 = socket$inet(0x2, 0x3, 0x2) recvfrom$l2tp(r5, 0x0, 0x14, 0x20, 0x0, 0x0) setsockopt$SO_BINDTODEVICE(r5, 0x1, 0x19, &(0x7f0000000140)='bridge0\x00', 0x10) sendto$inet(r5, 0x0, 0x0, 0x800, &(0x7f0000000100)={0x2, 0x4e24, @multicast1}, 0x10) write$binfmt_misc(r2, &(0x7f0000000040), 0xe09) ioctl$LOOP_CONFIGURE(r0, 0x4c0a, &(0x7f00000002c0)={r2, 0x0, {0x2a00, 0x80010000, 0x0, 0x2, 0x0, 0x0, 0x0, 0x2, 0x1c, "fee8a2ab78fc979fd1e00d96072000001ea89de2b7fb0000e60080b8785d96000100", "2809e8dbe108598948224ad54afac11d875397bdb22d0000b420a1a93c5240f45f819e01177d3d458dd4992861ac00", "90be8b1c551265406c7f306003d8a0f4bd0000dabeffff00"}}) r6 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000400), r2) ioctl$sock_ipv6_tunnel_SIOCGET6RD(r2, 0x89f8, &(0x7f0000000440)={'gretap0\x00', &(0x7f00000004c0)={'syztnl2\x00', 0x0, 0x20, 0x80, 0x6, 0x4, {{0x19, 0x4, 0x0, 0x5, 0x64, 0x67, 0x0, 0x2, 0x4, 0x0, @remote, @loopback, {[@lsrr={0x83, 0x7, 0x2b, [@rand_addr=0x64010101]}, @end, @noop, @lsrr={0x83, 0xf, 0xc9, [@rand_addr=0x64010100, @loopback, @local]}, @cipso={0x86, 0x37, 0x2, [{0x0, 0x5, "70b666"}, {0x2, 0x10, "e938b460463270d555ab418b0560"}, {0x2, 0xe, "b1375f389f44aad149102f59"}, {0x5, 0x6, "ecda0ae6"}, {0x4, 0x8, "d1396b2d3410"}]}]}}}}}) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r2, 0x89f3, &(0x7f0000000600)={'tunl0\x00', &(0x7f0000000580)={'gretap0\x00', 0x0, 0x7800, 0x80, 0x0, 0xac, {{0x10, 0x4, 0x2, 0x3a, 0x40, 0x67, 0x0, 0xd, 0x29, 0x0, @local, @initdev={0xac, 0x1e, 0x1, 0x0}, {[@ssrr={0x89, 0x2b, 0x7f, [@private=0xa010100, @rand_addr=0x64010102, @empty, @empty, @local, @broadcast, @loopback, @dev={0xac, 0x14, 0x14, 0x13}, @private=0xa010100, @private=0xa010102]}]}}}}}) ioctl$AUTOFS_DEV_IOCTL_TIMEOUT(r3, 0xc018937a, &(0x7f0000000800)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x7}}, './file1\x00'}) sendmsg$DEVLINK_CMD_TRAP_GROUP_GET(r9, &(0x7f0000000940)={&(0x7f0000000840)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000900)={&(0x7f0000000880)={0x70, 0x0, 0x200, 0x70bd28, 0x25dfdbfd, {}, [{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0xd}}, {@pci={{0x8}, {0x11}}, {0xd}}]}, 0x70}, 0x1, 0x0, 0x0, 0x8000}, 0x81) sendmsg$ETHTOOL_MSG_EEE_GET(0xffffffffffffffff, &(0x7f0000000740)={&(0x7f0000000280), 0xc, &(0x7f00000006c0)={&(0x7f0000000640)={0x44, r6, 0x200, 0x70bd2c, 0x25dfdbfd, {}, [@HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r7}]}, @HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r8}]}, @HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'tunl0\x00'}]}]}, 0x44}, 0x1, 0x0, 0x0, 0x4000000}, 0x8044) 7.546062446s ago: executing program 4 (id=2849): r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x80c42, 0x0) ioctl$TIOCPKT(r0, 0x5420, &(0x7f0000000180)=0x400) r1 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) ioctl$VHOST_NET_SET_BACKEND(r1, 0x8008af83, &(0x7f0000000000)={0x1}) ioctl$TCSETSF(r0, 0x5404, &(0x7f0000000000)={0xfff, 0x7, 0x10, 0xfff7fff5, 0x0, "262176cf2c9b385e6c136b700c94d8c036e0ff"}) 7.064010252s ago: executing program 4 (id=2851): mkdirat(0xffffffffffffff9c, &(0x7f0000002000)='./file0\x00', 0x0) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0xfffffffe, 0xfffffffe, &(0x7f0000006680)) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x6a855000) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9) r0 = socket$inet_sctp(0x2, 0x5, 0x84) getsockopt$inet_sctp_SCTP_DEFAULT_PRINFO(r0, 0x84, 0x72, &(0x7f0000000180)={0x0, 0x4, 0x20}, &(0x7f0000000200)=0xc) syncfs(r0) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000040)=ANY=[@ANYBLOB="380000002100010000000000fedbdf2502080000e1ffffffffffffff0800010064010100140011"], 0x38}}, 0x0) statx(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x4800, 0x100, &(0x7f0000004380)) 6.787367051s ago: executing program 2 (id=2853): r0 = socket$key(0xf, 0x3, 0x2) unshare(0x22020600) getsockname$packet(0xffffffffffffffff, 0x0, 0x0) r1 = syz_open_dev$sndpcmp(&(0x7f0000001540), 0x1, 0x0) ioctl$SNDRV_PCM_IOCTL_HW_PARAMS_OLD(r1, 0xc1004111, &(0x7f0000001580)={0x0, [], [{0x48a8, 0x5}, {0xfffffffe}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, {0x101, 0x80000000}, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, {}, {}, {0x20}, {0xfffffffc}]}) r2 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000200), 0x200, 0x0) ioctl$RTC_ALM_READ(r2, 0x40187013, &(0x7f00000000c0)) r3 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000080), 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_PORT(r3, 0xc0a85320, &(0x7f0000000340)={{0x80, 0xfc}, 'port1\x00', 0x0, 0x60004, 0x0, 0xffffffff, 0x6, 0x0, 0x0, 0x0, 0x1}) ioctl$SNDRV_SEQ_IOCTL_CREATE_PORT(r3, 0xc0a85320, &(0x7f0000001e00)={{0x80, 0x80}, 'port0\x00', 0x25, 0x0, 0x7ffc, 0x1, 0x4, 0x0, 0x5, 0x0, 0x1, 0x9}) ioctl$SNDRV_SEQ_IOCTL_QUERY_NEXT_PORT(r3, 0xc0a85352, &(0x7f0000000200)={{0x80, 0x9}, 'port1\x00', 0x89, 0x14, 0x4, 0xfffffeff, 0x0, 0x0, 0x200000, 0x0, 0x4875c99660ff2b2d}) syz_usb_connect(0x0, 0x2d, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x52, 0xe8, 0xe5, 0x10, 0x13b1, 0x42, 0xdcc4, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x1b, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x44, 0x0, 0x1, 0x2e, 0xaf, 0xb2, 0x0, [], [{{0x9, 0x5, 0x81, 0x2, 0x3ff}}]}}]}}]}}, 0x0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r4, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000008c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r4, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000b40)={{0x14}, [@NFT_MSG_NEWRULE={0x98, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2}, [@NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_RULE_EXPRESSIONS={0x6c, 0x4, 0x0, 0x1, [{0x68, 0x1, 0x0, 0x1, @target={{0xb}, @val={0x58, 0x2, 0x0, 0x1, [@NFTA_TARGET_INFO={0x40, 0x3, "cd4b6abe42031763d02899c77f963d140d7a9d3ac869f3a860917523679abf4579f9cd6564e64066681fb945bfe585ab6933a6f6514a0eebad4e3537"}, @NFTA_TARGET_NAME={0xa, 0x1, 'HMARK\x00'}, @NFTA_TARGET_REV={0x8}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14}}, 0xc0}, 0x1, 0x0, 0x0, 0x20040000}, 0x0) sendmsg$AUDIT_TRIM(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x10, 0x3f6, 0x400, 0x70bd2a, 0x25dfdbfb, "", ["", "", ""]}, 0x10}, 0x1, 0x0, 0x0, 0x40408d5}, 0x800) sendmsg$key(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000002140)={&(0x7f0000001780)=ANY=[], 0x7}}, 0x20000014) 6.251336589s ago: executing program 4 (id=2854): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket(0x10, 0x803, 0x0) r2 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r3, {0x0, 0x9}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x4, 0xc00}}}]}, 0x38}}, 0x80) sendmsg$nl_route_sched(r1, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000003c0)=@newtfilter={0x78, 0x2c, 0xd27, 0xfffffffc, 0x0, {0x0, 0x0, 0xf2ff, r3, {0xc, 0xfff1}, {}, {0x5, 0xf}}, [@filter_kind_options=@f_flow={{0x9}, {0x48, 0x2, [@TCA_FLOW_EMATCHES={0x44, 0xb, 0x0, 0x1, [@TCA_EMATCH_TREE_HDR={0x8, 0x1, {0xfffb}}, @TCA_EMATCH_TREE_LIST={0x38, 0x2, 0x0, 0x1, [@TCF_EM_CANID={0x14, 0x1, 0x0, 0x0, {{0x7, 0x7, 0x2}, {{0x0, 0x1, 0x0, 0x1}, {0x0, 0x1, 0x1, 0x1}}}}, @TCF_EM_META={0x20, 0x2, 0x0, 0x0, {{0xfffb, 0x4, 0x2}, [@TCA_EM_META_HDR={0xffffffffffffffb0, 0x1, {{0x5, 0xe, 0x2}, {0x0, 0x7, 0x2}}}, @TCA_EM_META_HDR={0x0, 0x1, {{0x3, 0x7, 0x2}, {0x800, 0xe}}}]}}]}]}]}}]}, 0x78}}, 0x20040054) 6.159640461s ago: executing program 3 (id=2855): syz_usb_connect(0x0, 0x24, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000062d14406d0470084761000000010902120001000000000904"], 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x0, 0xfffffffd, 0x0, 0x0, 0x41100, 0x40, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x2}, 0x94) socket$inet_udp(0x2, 0x2, 0x0) r0 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000480)={'bridge0\x00'}) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000840)=ANY=[@ANYBLOB="fc000000190001000000000003ffffff00000000000000000000000000000000fe8000000000000000000000000000bb00000000000000000200000000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="000000000000000007000000000000000000000000000000000000000000000000000000000000000200000000000000000000000000000000000000000000000000000000000000020000000000000000000000002000000000000000000000000000000000000001000100000000004400050020010000000000000000000000000000000000026c0000000a000000fc000000000000000000000000000000000000000400"/180], 0xfc}, 0x1, 0x0, 0x0, 0x20008000}, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) 6.118026325s ago: executing program 1 (id=2856): openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000000)='map_files\x00') getdents(r0, 0x0, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0xa, 0x803, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x0, &(0x7f00000000c0)}) connect$unix(r3, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e20}, 0x6e) sendmmsg$unix(r4, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r4, 0x0, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x1, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0xfffffffc}, 0x0) syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) r5 = socket$netlink(0x10, 0x3, 0xa) r6 = socket(0x400000000010, 0x800, 0x0) ioctl$SIOCSIFMTU(r6, 0x8922, &(0x7f0000000180)={'veth1_vlan\x00', 0x8a}) dup(r5) r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_open_procfs(0x0, &(0x7f00000000c0)='task\x00') fchdir(r8) r9 = openat(0xffffffffffffff9c, &(0x7f0000004280)='.\x00', 0x0, 0x0) getdents64(r9, &(0x7f0000000080)=""/29, 0x1d) getdents64(r9, 0xfffffffffffffffe, 0x29) r10 = syz_genetlink_get_family_id$devlink(0x0, 0xffffffffffffffff) sendmsg$DEVLINK_CMD_TRAP_GET(r7, &(0x7f0000000900)={0x0, 0x0, &(0x7f00000008c0)={&(0x7f00000006c0)=ANY=[@ANYBLOB='P\x00\x00\x00', @ANYRES16=r10, @ANYBLOB="010027bd7000ffdbdf253d0000000e0001006e657464657673696d0800000f0002006e657464657673696d3000001c008200736f757263655f6d61635f69735f6d756c74696361737400"], 0x50}, 0x1, 0x0, 0x0, 0x81}, 0x4c094) sendmsg$nl_route(r2, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000680)={0x0, 0x18}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000140)={0x0, 0xffffffffffffff6e, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="5000000010008105e9c51c000000000000000000", @ANYRES32=r11, @ANYBLOB="01000000000000002800128009000100766c616e000000001800028006000100000000000c0002000c0000000d00000008000500", @ANYRES64=r1], 0x50}, 0x1, 0x0, 0x0, 0x80}, 0x0) socket$packet(0x11, 0x2, 0x300) 5.921783637s ago: executing program 0 (id=2857): sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000002900)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000002c0)={0x74, 0x2, 0x6, 0x301, 0x0, 0x0, {0x2}, [@IPSET_ATTR_DATA={0x4c, 0x7, 0x0, 0x1, [@IPSET_ATTR_PROTO={0x5, 0x7, 0x89}, @IPSET_ATTR_SIZE={0x8, 0x17, 0x1, 0x0, 0x2}, @IPSET_ATTR_SIZE={0x8, 0x17, 0x1, 0x0, 0x8000}, @IPSET_ATTR_PORT_TO={0x6, 0x5, 0x1, 0x0, 0x4e20}, @IPSET_ATTR_MARKMASK={0x8, 0xb, 0x1, 0x0, 0x1}, @IPSET_ATTR_IP={0x18, 0x1, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV6={0x14, 0x2, 0x1, 0x0, @private1={0xfc, 0x1, '\x00', 0x1}}}, @IPSET_ATTR_MAXELEM={0x8, 0x13, 0x1, 0x0, 0x2}]}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x1}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}]}, 0x74}, 0x1, 0x0, 0x0, 0x4000400}, 0x40000010) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000001c0)=@gettclass={0x24, 0x2a, 0x129, 0x70bd31, 0x0, {0x0, 0x0, 0x0, 0x0, {0xe, 0x3}, {0xc, 0xc}, {0xc, 0xf}}}, 0x24}, 0x1, 0x0, 0x0, 0x40804}, 0x40004) openat$audio1(0xffffffffffffff9c, &(0x7f0000000080), 0x40000, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = socket$inet6(0xa, 0x2, 0x0) r3 = syz_io_uring_setup(0x8d2, &(0x7f00000000c0)={0x0, 0x951a, 0x3010, 0x1}, &(0x7f0000000040)=0x0, &(0x7f00000001c0)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r4, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r4, r5, &(0x7f0000000200)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, r2, 0x0, &(0x7f0000000640)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000800)=ANY=[], 0xe8}, 0x0, 0x24040092}) io_uring_enter(r3, 0x47ba, 0x3e80, 0x0, 0x0, 0x0) connect$inet6(r2, &(0x7f00000002c0)={0xa, 0x4e24}, 0x1c) setsockopt$EBT_SO_SET_ENTRIES(0xffffffffffffffff, 0x0, 0x80, &(0x7f00000000c0)=@nat={'nat\x00', 0x19, 0x1, 0x0, [0xfffffffffffffff8, 0x0, 0x8, 0x200003f0, 0x20000420], 0x0, 0x0, 0x0}, 0x1f0) ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, &(0x7f0000000080)={'bridge_slave_0\x00', &(0x7f00000000c0)=@ethtool_sset_info={0x37, 0x1, 0x1005}}) r6 = syz_io_uring_setup(0x24f9, &(0x7f0000000400)={0x0, 0x100000, 0x10100, 0x6, 0xcb}, &(0x7f0000000280)=0x0, &(0x7f0000000480)=0x0) r9 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='rdma.current\x00', 0x275a, 0x0) getsockopt$inet_tcp_int(r9, 0x6, 0xc, &(0x7f0000000200), &(0x7f0000000240)=0x4) write$UHID_CREATE2(r9, &(0x7f00000000c0)=ANY=[], 0x118) syz_io_uring_submit(r7, r8, &(0x7f0000000000)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0}) io_uring_enter(r6, 0x2d3e, 0x0, 0x0, 0x0, 0x0) 5.811927912s ago: executing program 4 (id=2858): syz_open_dev$loop(&(0x7f0000000100), 0xdf6, 0x0) write$binfmt_misc(0xffffffffffffffff, &(0x7f0000000040), 0xe09) socket$nl_rdma(0x10, 0x3, 0x14) r0 = socket$inet6_mptcp(0xa, 0x1, 0x106) ioctl$sock_inet6_SIOCDELRT(r0, 0x890c, &(0x7f0000000140)={@private1={0xfc, 0x1, '\x00', 0x1}, @rand_addr=' \x01\x00', @mcast2, 0x8, 0x3c80, 0x85, 0x400, 0x3, 0x60}) socketpair$unix(0x1, 0x3, 0x0, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000000f00), 0x0, 0x2, 0x0) sendmsg(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x9, 0x0, 0xfffffffffffffffd, 0x400009, 0x8, 0xa}, 0x0) syz_open_dev$media(0x0, 0x80000006, 0xd01840) setsockopt$inet6_tcp_TCP_MD5SIG(0xffffffffffffffff, 0x6, 0xe, &(0x7f0000000300)={@in6={{0xa, 0x4e24, 0x202, @private2={0xfc, 0x2, '\x00', 0xff}, 0x4ac2d78a}}, 0x0, 0x0, 0x34, 0x0, "ee8b0e650926a96ecc136e7fb980e989db9e8bf9b93129488f651a8de213eb94cd46e19d9c65a018444a131f4da58ae36556dd38ea6c029607462029add09240005c6776267517308a3d40aa1c788df6"}, 0xd8) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) close(r1) r2 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r1, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @ipv4={'\x00', '\xff\xff', @empty}, 0xf}, 0x1c) listen(r2, 0x0) r3 = socket$inet_mptcp(0x2, 0x1, 0x106) connect$inet(r3, &(0x7f0000000140)={0x2, 0x4e22, @loopback}, 0x10) sendmmsg(0xffffffffffffffff, 0x0, 0x0, 0x8810) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r4, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000004c0)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="0100000000000000000001000000280001801400040000000000000000000000ffffac1414aa060001000a0080000800060003"], 0x3c}, 0x1, 0x0, 0x0, 0x4000000}, 0x4000000) 5.295856623s ago: executing program 2 (id=2859): ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f00000002c0)={'erspan0\x00', 0x0}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000001000)=ANY=[@ANYRES16=r0, @ANYRES8, @ANYBLOB="96624548b7d462ed0a73a8cc8b9362c30e9030d745979d24d583d24aedf66adc572672001276fef6fa98f7dde5b2323c06d1b078f3636849fd74f5cbf9135a2e6e961fc4a932964ff70e6d7e7c8931d957d53f67f608503906b448d51da2a55ea651a1b039465ae1612dd5531063084fa3aa7f71fd0cd239136e6c3cd51aba49227560c3baae03b7c39bfcbb190e28125f0526d626061cf185457d5227349315896ae7b1defc8a5a689eb156da20a8bc7809c836908e9488220e9cc5608eae05ff899840cddad8d847dc72bb903ffe41210bc1efb3c52d", @ANYRESOCT=r0, @ANYRES8=r0, @ANYRES64], 0x40}, 0x1, 0x0, 0x0, 0x100}, 0x40080c0) syz_open_dev$amidi(&(0x7f0000000600), 0x6, 0x1) bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f0000000640), 0x4) ioctl$AUTOFS_DEV_IOCTL_CATATONIC(0xffffffffffffffff, 0xc0189379, &(0x7f0000000680)={{0x1, 0x1, 0x18}, './file0\x00'}) openat$sysctl(0xffffffffffffff9c, &(0x7f00000006c0)='/proc/sys/net/ipv4/tcp_window_scaling\x00', 0x1, 0x0) syz_open_dev$vbi(&(0x7f0000000700), 0x3, 0x2) syz_open_dev$usbfs(&(0x7f0000000740), 0x7, 0x10000) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000800)={{}, &(0x7f0000000780), &(0x7f00000007c0)='%-5lx \x00'}, 0x20) r1 = openat$sequencer(0xffffffffffffff9c, &(0x7f00000001c0), 0xa0602, 0x0) ioctl$sock_TIOCINQ(r1, 0x541b, 0x0) ioctl$AUTOFS_DEV_IOCTL_FAIL(0xffffffffffffffff, 0xc0189377, &(0x7f0000000840)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x3}}, './file0\x00'}) timerfd_create(0x2, 0x100000) socket$inet_udp(0x2, 0x2, 0x0) openat$misdntimer(0xffffffffffffff9c, &(0x7f0000000880), 0x80, 0x0) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) ioctl$KVM_UNREGISTER_COALESCED_MMIO(r3, 0x4010ae68, &(0x7f0000000300)={0x4, 0x111000}) openat$tcp_mem(0xffffffffffffff9c, &(0x7f0000000340)='/proc/sys/net/ipv4/tcp_rmem\x00', 0x1, 0x0) socket$inet6_mptcp(0xa, 0x1, 0x106) r4 = getpid() newfstatat(0xffffffffffffff9c, &(0x7f0000000d40)='./file0\x00', &(0x7f0000000d80)={0x0, 0x0, 0x0, 0x0, 0x0}, 0x1000) getresgid(&(0x7f0000000e00), &(0x7f0000000e40)=0x0, &(0x7f0000000e80)) ioctl$NS_GET_OWNER_UID(0xffffffffffffffff, 0xb704, &(0x7f0000000ec0)=0x0) lstat(&(0x7f0000000f00)='./file0\x00', &(0x7f0000000f40)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000500)=[{{&(0x7f0000000040)=@abs={0x1, 0x0, 0x4e21}, 0x6e, &(0x7f0000000280)=[{&(0x7f00000000c0)="55c089ab61519673cc7f6da907c60bed347722af52790f366a727f663c46428797df03b98d329d74489e7efa892ab5a96c7063", 0x33}, {&(0x7f0000000140)="07e58e22c5d1eba4b7d7382936338b605eea6407d1be25f3d4fd1f13b4196b33820c91d559a529e0a86083e288ead70c95d4d32ec27038b56ab6b58b0ed8a1e919e9f35aeb86793ad5c7202e59d7f9c7ec747668ae40d6e1cf1ae3a141b36f34507957bc700293603490f3d69fa4088a03bbd487f71338670a1cc585337de4ed47e2565a526e8c4809fc0c1314e3a56a6230220273225fa98769f03dc436a374700e8d81880581f7634b643e0000000000", 0xb1}, {&(0x7f0000000200)="544e292421858bc142d9b9219098c49fdc4e7ab75d407da26974588249c58334e8561d6a9e032fb86e974f8822c7e12ff98360692d1f0f26576d4e8f2a36a3229e8dd453f0a18799b748c41de9c2750e5d1186f3b6844b52e200319073ece6f59f37973024be8e54d22a60a7e107303120c961127eac563e1ab589", 0x7b}], 0x3, &(0x7f0000000900), 0x0, 0x4004004}}, {{&(0x7f00000009c0)=@file={0x1, './file0\x00'}, 0x6e, &(0x7f0000000cc0)=[{&(0x7f0000000480)="9500c3a8934ebc38409f57d8ec95052e31d2cfd8cc0ec5eed9d7df7fc663778660616157b57ac7ff80b116a7dd1858", 0x2f}, {&(0x7f0000000a80)="114457d7f8e63e023d4144417b4b9e73a6a9567aa070f36e1aec5ba1992565197935e2a93998c96d94b882f65dbdf5a1bb2bcc3afa93004aff5151a11f35e228d60b63d2", 0x44}, {&(0x7f0000000b00)="abf12770df10642d40da46a8e4b427886a82", 0x12}, {&(0x7f0000000b40)="4c16813c326bc72614d8d65955582e5d2e5025d1f7204bb9a5d84d642e", 0x1d}, {&(0x7f0000000b80)="5c08cd75dd5e33dc6052a6e2468aa5f0d3a83e6aecf2a60032a58212f6ba69bfb9bfe8f0dbac07a3437e2e4ac831b1ee56bbf701b6e4d27b19d6598b91741ee341b51b7b93a10755868b315b840d75a789c7e77085b7247f6740795feff9f9ca67256858c94edd2730fcd1068efbf3062f3e2f71f3b70d81652e492e2fd586ea264963392e46c714f7f8eac865e1709258366fc6229e80c72b679c9e4c1f98e4a400a8", 0xa3}, {&(0x7f0000000c40)="f3a6c4eaa9", 0x5}, {&(0x7f0000000c80)="cfd6fd3c60532210681e807926be71deb55b92f1a9247c0c19b8e9c8f59c8c8249e6dede4538d8adeb8fa97a8e2e37f4bb4a26c742a0f0", 0x37}], 0x7, &(0x7f0000000fc0)=[@cred={{0x1c, 0x1, 0x2, {r4, r5, r6}}}, @cred={{0x1c, 0x1, 0x2, {0xffffffffffffffff, r7, r8}}}], 0x40, 0x8841}}], 0x2, 0x8890) r9 = socket$l2tp6(0xa, 0x2, 0x73) bind$l2tp6(r9, &(0x7f0000000100)={0xa, 0x0, 0x0, @empty}, 0x20) connect$l2tp6(r9, &(0x7f0000000000)={0xa, 0x0, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0xb, 0x4}, 0x20) getpeername$inet6(r9, 0x0, &(0x7f0000000100)) 4.734289722s ago: executing program 0 (id=2860): socket$inet6_udp(0xa, 0x2, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e25, 0x0, @ipv4={'\x00', '\xff\xff', @empty}}, 0x1c) r1 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(0xffffffffffffffff, 0x84, 0x22, &(0x7f0000000180)={0x3, 0x8, 0x8, 0xa, 0x0}, &(0x7f00000001c0)=0x10) getsockopt$inet_sctp_SCTP_STREAM_SCHEDULER(0xffffffffffffffff, 0x84, 0x7b, &(0x7f00000000c0)={r2, 0x40}, &(0x7f0000000100)=0x8) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@file={0x0, './mnt\x00'}, 0x6e) sendmmsg$unix(r5, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg(r5, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) socket$inet6_sctp(0xa, 0x5, 0x84) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r6, 0x0, 0x0) syz_open_procfs(0xffffffffffffffff, 0x0) prctl$PR_SET_FP_MODE(0x2d, 0x2) openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x0, 0x0) r7 = openat(0xffffffffffffff9c, &(0x7f0000000800)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x8042, 0x0) fallocate(r7, 0x0, 0x1000000, 0x3) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x27ffff7, 0x4012011, r7, 0x0) r8 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r8, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x10) sendmsg$NFT_BATCH(r8, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000180)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a88000000060a0b040000000000000000020000005c000480580001800a000100696e6eddd754e6246572000002480002800800024000000084080003400000000a0800044000000013080001400000000024000580090001006d6574610000000014000280080001400000000e08000240000000010900010073797a30000000000900020073797a3200000000140000001100010000000000000000"], 0xb0}}, 0x0) setsockopt$inet_sctp_SCTP_DEFAULT_SNDINFO(r1, 0x84, 0x22, &(0x7f0000000140)={0x1, 0x8009, 0x6, 0x1, r3}, 0x10) r9 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f0000000c80)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r7, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000003c0)=@newqdisc={0x140, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r10, {0xfff3}, {0xd, 0xffff}, {0xb}}, [@qdisc_kind_options=@q_mqprio={{0xb}, {0x110, 0x2, {{0x10, [0x4, 0xb, 0xd, 0x4, 0xa, 0xd, 0x2, 0xb, 0xf, 0x3, 0xa, 0xb, 0xe, 0x8, 0xc, 0x4], 0x1, [0x1, 0x6, 0x2, 0x5, 0x3, 0x901, 0x7fff, 0xa5, 0x2, 0x6, 0x5, 0xa, 0x298, 0x7fff, 0x7, 0x8], [0x6, 0x5, 0xa7, 0x3, 0x1, 0x5, 0x3, 0x7ff, 0x6, 0x6, 0x6e21, 0x2, 0x75d7, 0x3, 0x1, 0x5]}, [@TCA_MQPRIO_MIN_RATE64={0xb8, 0x3, 0x0, 0x1, [{0xc, 0x3, 0x1}, {0xc, 0x3, 0x2000}, {0xc, 0x3, 0xffffffffffffffd9}, {0xc, 0x3, 0x7}, {0xc, 0x3, 0x6}, {0xc, 0x3, 0x9}, {0xc, 0x3, 0x74b2}, {0xc, 0x3, 0x7f}, {0xc, 0x3, 0x1c0}, {0xc, 0x3, 0x7}, {0xc}, {0xc, 0x3, 0x7ffffffffffffffd}, {0xc, 0x3, 0x9}, {0xc, 0x3, 0x2a}, {0xc, 0x3, 0x7}]}]}}}]}, 0x140}}, 0x0) add_key(&(0x7f0000000000)='blacklist\x00', 0x0, 0x0, 0x0, 0xfffffffffffffffe) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x7, &(0x7f0000000240)={0x5, &(0x7f0000000280)=[{0x6, 0x5, 0x7, 0x7ffc0001}, {0x5, 0x8, 0x2, 0x5}, {0xa0, 0x40, 0x4, 0x400}, {0x1, 0x1, 0x7, 0x99}, {0x99, 0x7, 0x2, 0x8}]}) 4.64385834s ago: executing program 3 (id=2861): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000380)=@updpolicy={0xb8, 0x13, 0xcb23c9c9931e99e9, 0x0, 0x0, {{@in6=@dev={0xfe, 0x80, '\x00', 0x3b}, @in6=@local, 0x0, 0x0, 0x0, 0xc9c, 0xa, 0x10, 0x30, 0x0, 0x0, 0xee01}, {0x0, 0x7f, 0x7, 0x3, 0x0, 0xfffffffffffffffd, 0x5, 0xffffffffffffffff}, {0xffffffff, 0x0, 0x0, 0x5}, 0x5, 0x0, 0x1, 0x1, 0x2}}, 0xb8}, 0x1, 0x0, 0x0, 0x84811}, 0x0) r1 = socket$inet6_sctp(0xa, 0x801, 0x84) sendto$inet6(r1, &(0x7f0000000740)='|', 0x1, 0x0, &(0x7f00000007c0)={0xa, 0x4e23, 0x5, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x4}, 0x1c) shutdown(r1, 0x1) listen(r1, 0xe1500000) syz_emit_ethernet(0x4a, &(0x7f0000000000)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaaaaaaa0086dd6000000000140601fe8000000000000000000000000000bbfe8000000000000000000000000000aa00004e220df64f992930d60019ea163f6d73440dec1a965b477ddb20f36a42a0d0685ec8726a959094e0efac57b03ac8df42930b7045d463bf9f", @ANYRES32=0x41424344, @ANYRES32=0x41424344, @ANYBLOB="5010000090780000"], 0x0) 4.643520714s ago: executing program 4 (id=2862): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) r1 = fsopen(&(0x7f0000000180)='proc\x00', 0x1) fsconfig$FSCONFIG_CMD_CREATE(r1, 0x6, 0x0, 0x0, 0x0) r2 = landlock_create_ruleset(&(0x7f0000000000)={0x19a1, 0x3}, 0x18, 0x0) writev(r2, &(0x7f0000000080)=[{&(0x7f0000000040)="216db3e5", 0x4}], 0x1) syz_open_dev$dri(&(0x7f0000000080), 0x1, 0x0) close_range(r2, r1, 0x6) r3 = socket$unix(0x1, 0x1, 0x0) bind$unix(r3, &(0x7f0000000180)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) listen(r3, 0x2) ppoll(&(0x7f0000000200)=[{r3, 0xf430}], 0x1, 0x0, 0x0, 0x0) fsconfig$FSCONFIG_SET_FLAG(r1, 0x0, &(0x7f0000000040)='rw\x00', 0x0, 0x0) r4 = syz_usb_connect(0x0, 0x2d, &(0x7f0000000d00)=ANY=[@ANYBLOB="120100021982302013042360e5ec0102030109021b0001000060020904840001ee48b100090582"], 0x0) syz_usb_control_io$cdc_ecm(r4, 0x0, 0x0) syz_usb_control_io(r4, 0x0, 0x0) syz_usb_control_io$rtl8150(r4, 0x0, 0x0) r5 = syz_open_dev$I2C(&(0x7f0000000000), 0x1, 0x402) read(r5, 0x0, 0x300) r6 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000040), 0x62181) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r6, 0xc08c5332, &(0x7f0000000080)={0x0, 0x5, 0x0, 'queue1\x00'}) writev(r6, &(0x7f0000000580)=[{&(0x7f0000000000)="228292", 0xfff6}], 0x2) setsockopt$inet_sctp6_SCTP_INITMSG(r0, 0x84, 0x2, &(0x7f00000000c0)={0xfff9, 0x8}, 0x8) r7 = socket$nl_route(0x10, 0x3, 0x0) mlock(&(0x7f0000001000/0x3000)=nil, 0x3000) sendmsg$nl_route(r7, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000200)=ANY=[@ANYBLOB="200000006900030100000000000000000000005ad58789970000000000080001"], 0x20}}, 0x0) sendto$inet6(r0, &(0x7f0000000580)="81", 0x1, 0x4048805, &(0x7f0000000280)={0xa, 0x0, 0x2, @private0={0xfc, 0x0, '\x00', 0x1}, 0x81}, 0x1c) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_REM(r0, 0x84, 0x65, 0x0, 0x0) r8 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r8, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000200)=@acquire={0x174, 0x17, 0x1, 0x0, 0x0, {{@in6=@private0}, @in6=@remote, {@in6=@private0, @in6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}, {{@in6=@mcast1, @in=@broadcast, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0xee00}}}, [@XFRMA_IF_ID={0x8}, @tmpl={0x44, 0x1c, [{{@in6=@private2}, 0x0, @in=@multicast2}]}]}, 0x174}}, 0x0) socket(0x2, 0x3, 0x7f) 4.528484446s ago: executing program 2 (id=2863): r0 = socket$kcm(0x2, 0x5, 0x84) sendmsg$inet(r0, &(0x7f0000000180)={&(0x7f0000000080)={0x2, 0x4e24, @private=0xa010102}, 0x10, &(0x7f0000000100)=[{&(0x7f0000000140)='A', 0x1}], 0x1}, 0x24008051) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_VENDOR(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="010700000000fcdbdf2567"], 0x2c}}, 0x40) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000001c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_POWER_SAVE(r1, &(0x7f0000000380)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000340)={&(0x7f0000000200)={0x54, r2, 0x400, 0x70bd2d, 0x25dfdbfc, {{}, {@val={0x8, 0x3, r4}, @void}}, [@NL80211_ATTR_PS_STATE={0x8}, @NL80211_ATTR_PS_STATE={0x8}, @NL80211_ATTR_PS_STATE={0x8, 0x5d, 0x1}, @NL80211_ATTR_PS_STATE={0x8, 0x5d, 0x1}, @NL80211_ATTR_PS_STATE={0x8, 0x5d, 0x1}, @NL80211_ATTR_PS_STATE={0x8, 0x5d, 0x1}, @NL80211_ATTR_PS_STATE={0x8, 0x5d, 0x1}]}, 0x54}, 0x1, 0x0, 0x0, 0x40000}, 0x24008804) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$unix(r5, &(0x7f00000007c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000040)=[@rights={{0x14, 0x1, 0x1, [r5]}}], 0x18, 0x404c004}, 0x8000) setsockopt$sock_attach_bpf(r6, 0x1, 0x22, &(0x7f00000018c0), 0x4) recvmsg(r6, &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000002d00)=""/78, 0xf}, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000280)={0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, &(0x7f00000003c0)=[{}, {0x2, 0x0, 0xfffffffc, 0x8}]}, 0x94) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) close(r8) ioctl$IOMMU_VFIO_IOMMU_UNMAP_DMA(0xffffffffffffffff, 0x3b72, &(0x7f0000000000)=ANY=[@ANYBLOB="1800000000000000ff"]) recvmsg$unix(r7, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x0) r10 = socket(0x15, 0x5, 0x0) getsockopt(r10, 0x200000000114, 0x2717, 0x0, &(0x7f0000000040)) setsockopt$sock_attach_bpf(r0, 0x84, 0x10, &(0x7f0000000000)=r9, 0xc) 4.237789053s ago: executing program 3 (id=2864): r0 = socket$pppoe(0x18, 0x1, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000300)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg(r2, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) sched_setattr(0x0, 0x0, 0x0) syz_open_dev$dri(&(0x7f0000000080), 0x1, 0x0) socket$inet_mptcp(0x2, 0x1, 0x106) r3 = openat$audio(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$SNDCTL_DSP_SETFRAGMENT(r3, 0xc004500a, &(0x7f0000000240)=0x3) ioctl$SNDCTL_DSP_CHANNELS(r3, 0xc0045006, &(0x7f0000000080)=0x7f) sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, 0x0, 0x0) ioctl$SNDCTL_DSP_SPEED(r3, 0xc0045002, &(0x7f0000000000)) r4 = request_key(&(0x7f0000000140)='id_legacy\x00', &(0x7f00000001c0)={'syz', 0x1}, &(0x7f0000000200)='(\x00', 0xfffffffffffffffe) keyctl$KEYCTL_RESTRICT_KEYRING(0x1d, r4, &(0x7f0000000280)='keyring\x00', &(0x7f00000002c0)=@chain) read$dsp(r3, &(0x7f0000000300)=""/79, 0x4f) syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) dup(0xffffffffffffffff) syz_open_dev$media(&(0x7f00000006c0), 0x9, 0x24040) pselect6(0x40, &(0x7f00000000c0)={0x6, 0xfffffffffffffffd, 0x9, 0x40, 0x2, 0xd}, 0x0, 0x0, 0x0, 0x0) r5 = socket$inet6_sctp(0xa, 0x5, 0x84) r6 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r6, 0x84, 0x14, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r5, 0x84, 0x7b, &(0x7f0000000100)={r7, 0x1}, 0x8) r8 = syz_open_dev$tty1(0xc, 0x4, 0x1) write$UHID_INPUT(r8, &(0x7f0000002080)={0xfc, {"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", 0x1000}}, 0x1006) sendmmsg(r0, &(0x7f0000001340)=[{{0x0, 0x0, &(0x7f0000000980)=[{&(0x7f0000000500)="ab", 0x5ea}], 0x1}}], 0x484, 0x24048084) 3.959861633s ago: executing program 2 (id=2865): madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='cgroup.stat\x00', 0x275a, 0x0) openat$vhost_vsock(0xffffffffffffff9c, 0x0, 0x2, 0x0) r0 = socket$inet6(0xa, 0x1, 0x8010000000000084) bind$inet6(r0, &(0x7f00000000c0)={0xa, 0x4e21, 0x0, @empty}, 0x1c) openat$rdma_cm(0xffffffffffffff9c, 0x0, 0x2, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) bind$netlink(r3, &(0x7f0000000200)={0x10, 0x0, 0x0, 0x80065c9}, 0xc) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r4, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010600000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff1b000000020000000900010073797a30000001000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r4, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)={{0x14}, [@NFT_MSG_NEWSET={0x3c, 0x12, 0xa, 0x201, 0x0, 0x0, {0x2}, [@NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_KEY_TYPE={0x8}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_FLAGS={0x8, 0x3, 0x1, 0x0, 0xa}]}], {0x14}}, 0x64}}, 0x0) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x4e21, 0x0, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x14}}}, 0x1c) r5 = socket(0x2, 0x80805, 0x0) r6 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x2, 0x0) r7 = ioctl$KVM_CREATE_VM(r6, 0xae01, 0x0) r8 = ioctl$KVM_CREATE_VCPU(r7, 0xae41, 0x0) ioctl$KVM_SET_XCRS(r8, 0x4188aea7, &(0x7f0000000480)={0x5, 0x0, [{0xa, 0x0, 0x80000001}, {0x1, 0x0, 0x7}, {0x807, 0x0, 0x2}, {0x0, 0x0, 0x1}, {0x5, 0x0, 0x20000000000000}, {0x3, 0x0, 0x4}, {0x8402, 0x0, 0x4}, {0x2, 0x0, 0x1}, {0x7, 0x0, 0x8}, {0xfe, 0x0, 0x4}, {0x6}, {0x0, 0x0, 0x74}, {0x8, 0x0, 0x6}, {0x2, 0x0, 0x8}, {0x43, 0x0, 0x4}, {0x7761, 0x0, 0x3}]}) sendmmsg$inet_sctp(r5, &(0x7f00000032c0), 0x0, 0x0) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0x9, &(0x7f0000000300)={0x0, @in6={{0xa, 0x0, 0x0, @empty}}, 0x0, 0x0, 0x318, 0x1, 0x24}, 0x9c) syz_usb_control_io(0xffffffffffffffff, 0x0, 0x0) syz_usb_control_io$printer(0xffffffffffffffff, 0x0, &(0x7f0000000780)={0xfc78, 0x0, 0x0, 0x0, 0x0, &(0x7f00000006c0)={0x20, 0x1, 0x1, 0x1}, 0x0}) r9 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) ioctl$EVIOCGMASK(r9, 0x5b03, 0x0) 3.258183496s ago: executing program 1 (id=2866): sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f000000c300)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a40000000160a05000000000000000000020000000900020073797a31000000000900010073797a3000000000140003800800024000000400080001400000000014000000110001"], 0x68}}, 0x0) sendmsg$NFT_MSG_GETFLOWTABLE(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000001c0)={0x2c, 0x17, 0xa, 0x801, 0x0, 0x0, {0x2}, [@NFTA_FLOWTABLE_NAME={0x9, 0x2, 'syz0\x00'}, @NFTA_FLOWTABLE_TABLE={0x9, 0x1, 'syz0\x00'}]}, 0x2c}, 0x1, 0x0, 0x0, 0x20004005}, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) openat$sndseq(0xffffffffffffff9c, &(0x7f0000000080), 0x700) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000040), 0x2000, 0x0) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f000000c280)={&(0x7f0000000000)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01010000000000000000050000000900010073797a300000000078000000030a01030000000000000000050000000900010073797a300000000008000540000000001c0008800c00024000000000000000000c00014000000000000000000900030073797a3200000000280004800800024000000000140003007465616d5f736c6176655f3000000000080001400000000114000000020a090100000000000000000000000014"], 0xd4}}, 0x4000010) write$binfmt_misc(r1, &(0x7f0000000000), 0xfffffecc) splice(r0, 0x0, r2, 0x0, 0x4ffe6, 0x0) 2.357380045s ago: executing program 1 (id=2867): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r1) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$tipc(&(0x7f0000000080), r2) sendmsg$TIPC_CMD_ENABLE_BEARER(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c657230"], 0x38}}, 0x0) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x305200, 0x0) close(r4) r5 = socket$unix(0x1, 0x1, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000440)=@newqdisc={0x58, 0x24, 0x4ee4e6a52ff56541, 0x70bd2d, 0xffffffff, {0x0, 0x0, 0x0, r7, {0x0, 0xb}, {0xffff, 0xffff}, {0xb}}, [@qdisc_kind_options=@q_sfb={{0x8}, {0x2c, 0x2, @TCA_SFB_PARMS={0x28, 0x1, {0xa, 0x7f61, 0x1, 0xc5, 0xe23, 0x1, 0x1, 0x7fff, 0x1}}}}]}, 0x58}, 0x1, 0x0, 0x0, 0x20008001}, 0x0) sendmsg$nl_route_sched(r6, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000006c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd28, 0xa0000, {0x0, 0x0, 0x0, r7, {0x0, 0x9}, {0x10, 0xb}, {0x5, 0xa858712265c6c23}}, [@qdisc_kind_options=@q_skbprio={{0xc}, {0x8, 0x2, 0xe9}}]}, 0x38}, 0x1, 0x0, 0x0, 0x2000c061}, 0x4008000) ioctl$SIOCSIFHWADDR(r4, 0x8922, &(0x7f0000002280)={'syzkaller0\x00', @random="2b0100414ec6"}) 2.255091887s ago: executing program 2 (id=2868): r0 = syz_open_dev$sndmidi(&(0x7f0000000240), 0x2, 0x141101) r1 = dup(r0) r2 = socket$nl_sock_diag(0x10, 0x3, 0x4) sendmsg$SOCK_DIAG_BY_FAMILY(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000380)={0x14, 0x15, 0x1}, 0x14}}, 0x0) r3 = syz_io_uring_setup(0xece, &(0x7f0000000400)={0x0, 0x100002, 0x10300, 0x2}, &(0x7f0000000100)=0x0, &(0x7f0000000080)=0x0) sendmsg$NFNL_MSG_ACCT_NEW(r1, &(0x7f0000000340)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000300)={&(0x7f00000002c0)={0x34, 0x0, 0x7, 0x101, 0x0, 0x0, {0x5, 0x0, 0x1}, [@NFACCT_FLAGS={0x8, 0x5, 0x1, 0x0, 0x3}, @NFACCT_PKTS={0xc, 0x2, 0x1, 0x0, 0x9}, @NFACCT_FILTER={0xc, 0x7, 0x0, 0x1, [@NFACCT_FILTER_MASK={0x8, 0x1, 0x1, 0x0, 0x1}]}]}, 0x34}, 0x1, 0x0, 0x0, 0x8040}, 0x488d0) syz_io_uring_submit(r4, r5, &(0x7f00000001c0)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x3}) io_uring_enter(r3, 0xa3d, 0x0, 0x0, 0x0, 0xff39) syz_usb_connect(0x0, 0x2d, &(0x7f0000000180)=ANY=[@ANYBLOB="1201000009968810524711004f320102030109021b0001000000000904000001ff01320009050d0353", @ANYRES64=r4], 0x0) dup(r3) r6 = openat$kvm(0xffffffffffffff9c, &(0x7f00000004c0), 0x0, 0x0) r7 = ioctl$KVM_CREATE_VM(r6, 0xae01, 0x0) ioctl$KVM_XEN_HVM_CONFIG(r7, 0x4038ae7a, &(0x7f0000000040)={0x84, 0xa84, 0x0, 0x0}) fsconfig$FSCONFIG_SET_PATH(r1, 0x3, &(0x7f0000000040)='\x00', &(0x7f00000000c0)='./file0\x00', 0xffffffffffffffff) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c) 2.224604484s ago: executing program 0 (id=2869): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) close(r0) r1 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r0, &(0x7f0000000080)={0xa, 0x4e22, 0x0, @empty}, 0x1c) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r3, 0xae60) ioctl$KVM_REGISTER_COALESCED_MMIO(r3, 0x4010ae67, &(0x7f0000000280)={0x80a0000, 0x14000}) close(r3) listen(r1, 0x0) r4 = socket$inet_mptcp(0x2, 0x1, 0x106) seccomp$SECCOMP_GET_ACTION_AVAIL(0x2, 0x0, &(0x7f0000000bc0)=0x7fc00000) connect$inet(r4, &(0x7f0000000000)={0x2, 0x4e22, @local}, 0x10) setsockopt$inet_sctp_SCTP_RECVNXTINFO(r1, 0x84, 0x21, &(0x7f0000000240)=0x7, 0x4) r5 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x401) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0) r6 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x2, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000002140)={{'fd', 0x3d, r6}, 0x2c, {'rootmode', 0x3d, 0x4000}}) write$FUSE_NOTIFY_INVAL_INODE(r6, &(0x7f0000000000)={0x28, 0x2, 0x0, {0x1, 0xfffffffffffffffd}}, 0x28) ioctl$SG_IO(r5, 0x2285, &(0x7f00000005c0)={0x53, 0xffffffffffffffff, 0x6, 0x0, @scatter={0x0, 0x3, 0x0}, &(0x7f00000000c0)="930b7633ecb5", 0x0, 0x0, 0x0, 0x0, 0x0}) r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_PEER_AUTH_CHUNKS(0xffffffffffffffff, 0x84, 0x1a, &(0x7f00000000c0)={0x0, 0xe8, "97301a97b3d5f7d4224547c841888318a3dec73ca6d8859c04c9929b84764f21402d679ea861747bcf002bdce29220068531782182e3f1baca8b0f1e283610b10f565f50fc1d53032bc16f854e412ecccbac8e33a9eb82304d46ae2dc119b917f9cbf4e64100d6c5d92c7833900ef3df7c5be0d873a89eeb4425beb17974daa1ab16538c2d397e9ce85796749e24e0e250e752b33b057417165dd2c6418ec97ab1f388535cf25db69da6a4f7d794563341ce26177ef708fd4a0092b80f4c6727cd240840da83d24cc72daca4f53db05d3d6eba292f3e90f2ed46b9f92add825ce5232432891f6f60"}, &(0x7f0000000040)=0xf0) setsockopt$inet_sctp6_SCTP_DELAYED_SACK(r8, 0x84, 0x10, &(0x7f00000001c0)=@assoc_value={r9, 0xdf5e}, 0x8) r10 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000200), 0xffffffffffffffff) r11 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r11, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000008c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r11, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000280)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a84000000060a0b0400000000fff8000002000005580004802c000180090001006d657461000000001c00028008000240000000010800014000000008080001400000001028000180080001006e6174001c0002800800014000000000080003400000001408000240000000020900010073797a30000000000900020073797a32"], 0xac}, 0x1, 0x0, 0x0, 0x850}, 0x0) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r7, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000300)={0x38, r10, 0x1, 0x0, 0x0, {}, [@MPTCP_PM_ATTR_ADDR={0x24, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e23}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x8}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @multicast1=0xac1414aa}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x1}]}]}, 0x38}}, 0x0) 1.936637234s ago: executing program 3 (id=2870): r0 = openat$dlm_plock(0xffffffffffffff9c, &(0x7f0000002340), 0x408040, 0x0) r1 = syz_io_uring_setup(0x88f, &(0x7f0000000140)={0x0, 0xaee2, 0x0, 0x2, 0xbfdffffc}, &(0x7f0000000000)=0x0, &(0x7f0000000280)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r2, r3, &(0x7f00000002c0)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x3}) r4 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000001840), 0x2982, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) connect$unix(r5, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) recvmmsg(r5, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r6 = socket$alg(0x26, 0x5, 0x0) bind$alg(r6, &(0x7f0000001100)={0x26, 'hash\x00', 0x0, 0x0, 'xxhash64\x00'}, 0x58) r7 = accept(r6, 0x0, 0x0) r8 = socket(0x2b, 0x1, 0x1) r9 = socket$inet6_udp(0xa, 0x2, 0x0) r10 = syz_clone(0x88200200, 0x0, 0x0, 0x0, 0x0, 0x0) r11 = getpid() kcmp(r11, r10, 0x2, 0xffffffffffffffff, 0xffffffffffffffff) read$FUSE(0xffffffffffffffff, &(0x7f000001b240)={0x2020, 0x0, 0x0, 0x0}, 0x2020) r13 = getgid() sendmsg$unix(r7, &(0x7f0000000a40)={0x0, 0x0, &(0x7f0000000440)=[{&(0x7f00000001c0)="69f12ce01110e773df1167c3525ed568483bd0929c75376c0c2fde173ffed07f18a7473ad6526668304b7d2e33e9b467e6a06962df8b513fe2d534165cdf5d0f99594ff8d9990317b2", 0x49}, {&(0x7f0000000240)="d54b4db1f77ed135bdfbb0f59c1aba9c7e3f040cd4ead6c2bf25db900ce2f43050407e596194032dc50d0f223b03765c3554684c75170d446d7c3f4aabc1d8215cbbc2580aa16adc499b0a5224418c4700867a442b126e278cd35f4b2c2241129f10e7df2486839c6e7140171bb28e35ee", 0x71}, {&(0x7f00000002c0)="7c47fa5cca13e29d0d990bb50dc9cb7f991aa85e68f7b970d85cfb614fa1df595f5965a4eea83b93d41a2b881bf0e43e8a270c1ea3866ed49aa23d70e439858f2548c2dac8b8a7dbbf1f81c5c26d1786d0e3499c37f9e5e0b933f68a5a0fe820a27b23181bc6f078dac7551f0e73bca95da26e297f0639fe4620ced2d16e5aadd2b8349ff37e289deacbd74a963a19b9a71e3af65297cbf2a55542b3770b9d45cd03d5211bb12fa0ea5753a3d7290862981a9df09583d0db", 0xb8}, {&(0x7f0000000380)="6a4512c3a7dd3d3763c0dbc00383923080dcac6f1eac5ca8ac53dd0152046191694175e26b64e97e0d117d04e4a573a8f35caa6dc186ee37e409398ba9db25a6fcb565abd83666d3089ed31addfd80a96204a5eb658cb48d437987cfd1abb5174b5886238a208eb947bd13885d230ad2de190771e3ac05c575a61e5f36c0f57e0a2cb17e5b592ebc438dce0f6c77a84672698b", 0x93}, {&(0x7f000001a240)="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", 0x1000}], 0x5, &(0x7f0000000900)=[@rights={{0x28, 0x1, 0x1, [r9, 0xffffffffffffffff, r7, 0xffffffffffffffff, r4, 0xffffffffffffffff]}}, @cred={{0x1c, 0x1, 0x2, {0xffffffffffffffff}}}, @rights={{0x24, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, r9, r5, r7]}}, @cred={{0x1c, 0x1, 0x2, {0x0, 0x0, 0xee01}}}, @rights={{0x10}}, @cred={{0x1c}}, @rights={{0x1c, 0x1, 0x1, [r7, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x18, 0x1, 0x1, [r6, r9]}}, @rights={{0x14, 0x1, 0x1, [r8]}}, @cred={{0x1c, 0x1, 0x2, {r11, r12, r13}}}], 0x130, 0x4004000}, 0x40040) r14 = geteuid() statx(r0, &(0x7f0000002380)='./file0\x00', 0x4100, 0x200, &(0x7f0000002540)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) getsockopt$inet6_IPV6_IPSEC_POLICY(r0, 0x29, 0x22, &(0x7f0000002fc0)={{{@in6=@mcast2, @in, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@multicast1}, 0x0, @in=@dev}}, &(0x7f00000030c0)=0xe8) r17 = getuid() getgroups(0x8, &(0x7f0000003100)=[0xee01, 0xee01, 0xee01, 0xee00, 0xee00, 0xee00, 0xee00, 0x0]) statx(r0, &(0x7f0000003680)='./file0\x00', 0x1000, 0x20, &(0x7f00000036c0)={0x0, 0x0, 0x0, 0x0, 0x0}) lstat(&(0x7f00000037c0)='./file0\x00', &(0x7f0000003800)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) statx(r0, &(0x7f0000003980)='./file0\x00', 0x800, 0x7ff, &(0x7f00000039c0)={0x0, 0x0, 0x0, 0x0, 0x0}) r22 = getegid() syz_fuse_handle_req(r0, &(0x7f0000000300)="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", 0x2000, &(0x7f0000003c00)={&(0x7f00000000c0)={0x50, 0xfffffffffffffffe, 0x6, {0x7, 0x2b, 0xe153, 0x1000000, 0x8000, 0xde8, 0xa, 0x1, 0x0, 0x0, 0x2, 0x4}}, &(0x7f0000000040)={0x18, 0x0, 0x6, {0x100000001}}, &(0x7f00000001c0)={0x18, 0x0, 0x2, {0x4}}, &(0x7f0000000200)={0x18, 0x0, 0x1, {0x3}}, &(0x7f0000002300)={0x18, 0x0, 0xfffffffffffffffe, {0xffffffff}}, &(0x7f00000023c0)={0x28, 0x0, 0x4, {{0x1000000020, 0xffff, 0x1}}}, &(0x7f0000002400)={0x60, 0x0, 0x9, {{0x3, 0x4000, 0x9, 0x9, 0x80000001, 0x9, 0x4, 0x1}}}, &(0x7f0000002480)={0x18, 0xfffffffffffffffe, 0x3, {0x3ff}}, &(0x7f00000024c0)={0x11, 0x0, 0x1, {'\x00'}}, &(0x7f0000002500)={0x20, 0xfffffffffffffffe, 0x9, {0x0, 0x4}}, &(0x7f0000002640)={0x78, 0x0, 0x4, {0xa, 0xffffffff, 0x0, {0x4, 0x7, 0x4, 0x7541, 0x5, 0x9, 0x4, 0x8, 0x5, 0x1000, 0x9, 0x0, 0x0, 0xfc89, 0x6}}}, &(0x7f00000026c0)={0x90, 0x0, 0x1, {0x5, 0x2, 0x9, 0x3, 0x0, 0xfffffffe, {0x3, 0x6, 0x8, 0x81, 0x7d2, 0x4, 0x9091, 0x8, 0x7, 0x2000, 0x80, 0x0, 0xee00, 0x8, 0x8}}}, &(0x7f0000002780)=ANY=[@ANYBLOB="ffffff060000000000000003000000000000000800"/43], &(0x7f0000003140)={0x518, 0x0, 0x9, [{{0x2, 0x3, 0x9, 0x7, 0xc89, 0x1ff, {0x3, 0x1, 0x5, 0x8, 0x2, 0x8, 0x8, 0xffffff3b, 0x7, 0xc000, 0x2, 0x0, 0x0, 0xf, 0x7}}, {0x6, 0x6, 0x1, 0x7ff, '\x00'}}, {{0x0, 0x0, 0x8, 0xf, 0xc, 0x377, {0x0, 0x7, 0x3ff, 0x584, 0x80000001, 0x3cfd, 0x6, 0x468, 0xb, 0xa000, 0x8, 0x0, 0x0, 0x6, 0x5}}, {0x1, 0xb9b, 0x4, 0x3ff, '@*:.'}}, {{0x1, 0x1, 0xffffffff, 0x6, 0xb, 0x8, {0x1, 0x700000, 0x7d82, 0x4, 0x2, 0x2, 0x5, 0x5, 0x7, 0xa000, 0xffff, 0x0, 0x0, 0x8, 0x2}}, {0x6, 0x7, 0x1, 0x0, '\x00'}}, {{0x5, 0x3, 0x2, 0x7fff, 0x7, 0x7, {0x5, 0x6118, 0xfffffffffffffff7, 0x4, 0x7fff, 0x7, 0x1, 0x3, 0xf, 0x4000, 0x3, 0x0, 0x0, 0x401, 0x7}}, {0x1, 0x6, 0xf, 0x7, '/dev/dlm_plock\x00'}}, {{0x3, 0x0, 0x4ebd, 0xcbb5, 0x0, 0x4, {0x3, 0xda, 0x30000000, 0x7fff, 0xeb2a, 0x2, 0x4, 0x2, 0x7, 0x1000, 0x9, 0x0, r13, 0x5, 0x8}}, {0x0, 0x81, 0xf, 0x2, '/dev/dlm_plock\x00'}}, {{0x1, 0x0, 0x14, 0x6, 0x6, 0x7, {0x5, 0x60000000000000, 0x9, 0x3ff, 0x6, 0x6, 0x3, 0x3, 0x8320, 0x4000, 0x9, r14, r15, 0x1, 0xd86e}}, {0x0, 0x9, 0x1, 0x101, '\x00'}}, {{0x4, 0x1, 0x0, 0x8000000000000000, 0x5, 0x200000, {0x6, 0x6, 0xfffffffffffffff7, 0x1, 0x9, 0x2, 0xfffffffb, 0x0, 0xdd6, 0xa000, 0xfffffff8, r16, 0x0, 0x5, 0xffffffff}}, {0x2, 0x100000001, 0x3, 0x8, '&E*'}}, {{0x3, 0x2, 0xfffffffffffffffc, 0x8f, 0x1, 0x7461, {0x4, 0x1, 0x1, 0x101, 0xfffffffffffffff7, 0x4, 0x1, 0xc, 0xff, 0x4000, 0x0, r17, r18, 0x401, 0x5}}, {0x4, 0x6, 0x0, 0x3}}]}, &(0x7f0000003880)={0xa0, 0xfffffffffffffffe, 0x101, {{0x0, 0x3, 0x4, 0x8, 0x2, 0x5, {0x1, 0x6, 0x3, 0xc93c, 0x0, 0x3, 0x6, 0x80000009, 0x2, 0x2000, 0xfffffc00, r19, r20, 0x7fff, 0xb}}}}, &(0x7f0000003940)={0x20, 0x0, 0xff6, {0x80000000, 0x0, 0x10001, 0xfff}}, &(0x7f0000003ac0)={0x130, 0x0, 0x81, {0x100, 0x200, 0x0, '\x00', {0x10, 0x2, 0x80000001, 0x80, r21, r22, 0x6000, '\x00', 0x7, 0x49, 0x6, 0x7fffffff, {0x9, 0x1}, {0x27a8, 0xf5d0}, {0x2, 0x1}, {0x7, 0x8}, 0x5, 0x1, 0xffffffff, 0x4}}}}) io_uring_enter(r1, 0x75fa, 0xe475, 0x0, 0x0, 0x0) 1.879862445s ago: executing program 1 (id=2871): seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, &(0x7f0000000040)) mknod$loop(&(0x7f0000000400)='./file0\x00', 0x10, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) r0 = socket$kcm(0x10, 0x3, 0x10) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)}, 0x0) seccomp$SECCOMP_SET_MODE_FILTER(0x1, 0x1, &(0x7f0000000100)={0x0, 0x0}) sched_setscheduler(0x0, 0x1, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x4000000) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x1ff) r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r2 = openat$cgroup_procs(r1, &(0x7f0000000040)='cgroup.procs\x00', 0x2, 0x0) write$cgroup_pid(r2, &(0x7f00000001c0), 0x12) quotactl$Q_SYNC(0xffffffff80000102, 0x0, 0x0, 0x0) connect$unix(0xffffffffffffffff, 0x0, 0x0) sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0) r3 = openat$fuse(0xffffffffffffff9c, 0x0, 0x2, 0x0) syz_mount_image$fuse(&(0x7f0000000040), &(0x7f0000000000)='./file0\x00', 0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r3, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',grou', @ANYRESDEC=0x0], 0x0, 0x0, 0x0) mount$fuse(0x0, &(0x7f0000000280)='./file0\x00', 0x0, 0x100000, 0x0) openat$fuse(0xffffffffffffff9c, &(0x7f0000000040), 0x42, 0x0) r4 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r4, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000300)='./file0\x00', 0x0) mount$fuse(0x0, &(0x7f0000000000)='./file0\x00', 0x0, 0x84000, 0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000)=0x2eb4, 0x2000007ff) sched_setaffinity(0x0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socket$inet6(0xa, 0x80002, 0x0) 1.135836278s ago: executing program 0 (id=2872): r0 = socket$inet6(0xa, 0x800000000000002, 0x0) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x41, &(0x7f00000000c0)=0x63ba, 0x4) (async) setsockopt$inet6_int(r0, 0x29, 0x4a, &(0x7f0000000080)=0x1, 0x4) sendmmsg$inet6(r0, &(0x7f00000002c0)=[{{&(0x7f0000000040)={0xa, 0x4e23, 0x0, @loopback, 0x8}, 0x1c, 0x0}}], 0x1, 0x40000) (async) recvmmsg(r0, &(0x7f0000000940)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000001f80)=""/129, 0xfffffffffffffcea}, 0x5}], 0x1, 0x40002042, 0x0) (async) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x3, &(0x7f0000000400)=[{0x1c, 0x0, 0xfd}, {0x1d, 0x0, 0x0, 0x24}, {0x6}]}) 1.106156642s ago: executing program 1 (id=2873): bpf$MAP_UPDATE_CONST_STR(0x2, 0x0, 0x0) r0 = gettid() mkdirat$cgroup_root(0xffffffffffffff9c, 0x0, 0x1ff) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) socket$key(0xf, 0x3, 0x2) openat$adsp1(0xffffffffffffff9c, &(0x7f0000000000), 0x42342, 0x0) socket$kcm(0x10, 0x2, 0x0) r3 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000180)='/sys/power/pm_test', 0xc3a01, 0x0) sendfile(r3, 0xffffffffffffffff, 0x0, 0x8) process_vm_writev(r0, &(0x7f0000000000)=[{&(0x7f00008f9f09)=""/247, 0x7ffff000}], 0x1, &(0x7f0000121000)=[{&(0x7f0000217f28)=""/231, 0xffffff4e}], 0x23a, 0x0) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x2, 0x4c831, 0xffffffffffffffff, 0x0) 943.516047ms ago: executing program 3 (id=2874): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) pipe(&(0x7f0000000480)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r4, 0x5761, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r3, 0x0, 0x0) fcntl$getownex(r1, 0x10, &(0x7f0000000200)={0x0, 0x0}) sched_setattr(r5, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x1, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0xfffffffc}, 0x0) syz_open_dev$tty20(0xc, 0x4, 0x0) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000180)={&(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff8000/0x2000)=nil, &(0x7f0000ffb000/0x3000)=nil, 0x0}, 0x68) syz_mount_image$fuse(0x0, &(0x7f0000000000)='./file0\x00', 0x8, 0x0, 0x0, 0x0, 0x0) r6 = syz_open_procfs(0x0, &(0x7f0000000100)='ns\x00') r7 = open_tree(r6, &(0x7f0000000640)='\x00', 0x89901) move_mount(r7, &(0x7f0000000040)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) mount$fuseblk(0x0, &(0x7f00000000c0)='./file0\x00', 0x0, 0x2025, 0x0) r8 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r8, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x5, 0x0, 0x0, {0x1}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x40, 0x3, 0xa, 0x3, 0x0, 0x0, {0x1}, [@NFTA_CHAIN_NAME={0x9, 0x3, 'syz1\x00'}, @NFTA_CHAIN_HOOK={0x14, 0x4, 0x0, 0x1, [@NFTA_HOOK_PRIORITY={0x8, 0x2, 0x1, 0x0, 0xfffffffc}, @NFTA_HOOK_HOOKNUM={0x8}]}, @NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWRULE={0x70, 0x6, 0xa, 0x401, 0x0, 0x0, {0x1}, [@NFTA_RULE_EXPRESSIONS={0x48, 0x4, 0x0, 0x1, [{0x24, 0x1, 0x0, 0x1, @reject={{0xb}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_REJECT_TYPE={0x8}, @NFTA_REJECT_ICMP_CODE={0x5}]}}}, {0x20, 0x1, 0x0, 0x1, @rt={{0x7}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_RT_DREG={0x8, 0x1, 0x1, 0x0, 0x9}, @NFTA_RT_KEY={0x8}]}}}]}, @NFTA_RULE_CHAIN_ID={0x8}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14}}, 0xf8}}, 0x0) r9 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCETHTOOL(r9, 0x8946, &(0x7f0000000000)={'bond0\x00', &(0x7f0000000040)=@ethtool_sfeatures={0x3b, 0x2, [{0x7ad8, 0x1}, {0xfffffffc, 0x80003}]}}) r10 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000240), r7) ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f0000000280)={'team0\x00', 0x0}) getsockname$packet(r6, &(0x7f00000002c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @multicast}, &(0x7f0000000300)=0x14) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r6, &(0x7f0000000440)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000400)={&(0x7f0000000340)={0x88, r10, 0x400, 0x70bd2c, 0x25dfdbfe, {}, [@MPTCP_PM_ATTR_LOC_ID={0x5, 0x5, 0x8}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x1}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x1}, @MPTCP_PM_ATTR_ADDR={0x40, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x1}, @MPTCP_PM_ADDR_ATTR_IF_IDX={0x8, 0x7, r11}, @MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @dev={0xfe, 0x80, '\x00', 0x29}}, @MPTCP_PM_ADDR_ATTR_IF_IDX={0x8, 0x7, r12}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x24}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x6}]}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x4}, @MPTCP_PM_ATTR_ADDR={0xc, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x10}]}]}, 0x88}, 0x1, 0x0, 0x0, 0x40000}, 0x4) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)={{0x14}, [@NFT_MSG_NEWFLOWTABLE={0x30, 0x16, 0xa, 0x203, 0x0, 0x0, {0x2}, [@NFTA_FLOWTABLE_NAME={0x9, 0x2, 'syz2\x00'}, @NFTA_FLOWTABLE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_FLOWTABLE_HOOK={0x4}]}], {0x14}}, 0x58}}, 0x0) 941.421442ms ago: executing program 0 (id=2875): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000500)=ANY=[@ANYBLOB="12010000000000107d1e2e2c00000010000109022400cc45000000090400000103000000092100000001436da004ea969acc36def26eea7b4b000a5a1ee12f0a618fd6f3b60f22af62fce7c939b93dffea4e8aa71df189c95bd5011eb06723d936ff7dc6c0c22c538c230c90c8b735e602e7631f2599c26c2f49b917c4bf6ecbe9e4adaa944b09d5fd3016cd428a5705037ba92391ff809c153d5724d3680e8b988d0a83a4cbae034e92594929254b66162da6cf1f1510042d3c0f8aa6e4ed352b0d6d602eee62d742013eeca1e2007a73d306000000000000004f8912251bfbb5d0ccb64075eac6e082aca81aec51ccebf4d32b6334986106e04ca39976da7e89b05b3135bc55373f9a177de53518536ba3f2af1d8b67dddf5cc055a0c859b03a1b6e9d326bdf71771470957b06ad2bc82c04cd108ce2b6e8051ec6a41afabd0afe5e2c9a7553d259bcc2100b2156686ba3c7c07950e2896f598dc5f37a0c916cb8511827b35eb3100f2a02efdc3954363fa620bb536ce86ace55928db00a15bcb9bc19e597b4e459a1df"], 0x0) (async) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text32={0x20, &(0x7f0000000180)="b9800000c00f3235000100000f3066baf80cb877326d83ef66bafc0cec640f7941000f38035400060f01c966baa00066edc4c29940e1b8810eb78e0f23c80f21f8350400a0000f23f8b805000000b90e0000000f01d90f61d7", 0x59}], 0x1, 0x19, 0x0, 0x0) (async, rerun: 32) ioctl$KVM_SET_REGS(r3, 0x4090ae82, &(0x7f0000000240)={[0x4000000000007, 0x1, 0xa, 0x1, 0x8, 0x2, 0x1045, 0x4, 0x9, 0x1, 0xffffffffffffffff, 0xffffffff, 0x4, 0x9, 0x1, 0x6c], 0x4, 0x140056}) (rerun: 32) connect$inet(0xffffffffffffffff, &(0x7f0000000000)={0x2, 0x0, @local}, 0x10) (async) mprotect(&(0x7f0000003000/0x1000)=nil, 0x1000, 0x1) (async) ioctl$KVM_RUN(r3, 0xae80, 0x0) (async) syz_usb_control_io(r0, 0x0, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r5, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) (async, rerun: 32) sendmmsg$unix(0xffffffffffffffff, &(0x7f00000bd000), 0x318, 0x0) (async, rerun: 32) symlinkat(&(0x7f0000000140)='./file0/file1\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00') (async) lstat(&(0x7f0000000400)='./file0/file1\x00', 0x0) (async) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) (async, rerun: 64) ioctl$UFFDIO_REGISTER(0xffffffffffffffff, 0xc020aa00, &(0x7f0000000240)={{&(0x7f0000400000/0x1000)=nil, 0x20400000}, 0x1}) (rerun: 64) r6 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r6, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f00000000c0)=ANY=[@ANYBLOB="200000001800110101000000000000000ae0"], 0x20}, 0x1, 0x0, 0x0, 0x44845}, 0x4) r7 = syz_open_dev$vbi(&(0x7f0000000000), 0x1, 0x2) ioctl$VIDIOC_CREATE_BUFS(r7, 0xc100565c, &(0x7f00000013c0)={0x0, 0x2, 0x2, {0x5, @vbi={0x0, 0x0, 0x4, 0x0, [], [0x8200], 0x1}}}) ioctl$VIDIOC_QBUF(r7, 0xc058565d, &(0x7f0000000200)=@multiplanar_fd={0x5, 0x745777b791d46092, 0x4, 0x100, 0x3, {}, {0x1, 0x8, 0x8, 0x3, 0x4, 0x0, "a115caa7"}, 0x0, 0x4, {&(0x7f0000000300)=[{0x2, 0x3, {}, 0x7}, {0x0, 0x9, {}, 0x9}]}, 0x9}) (async) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) (async) mremap(&(0x7f000020e000/0x2000)=nil, 0x2000, 0x400000, 0x3, &(0x7f000082a000/0x400000)=nil) ioctl$KVM_SET_USER_MEMORY_REGION(0xffffffffffffffff, 0x4020ae46, 0x0) (async) mbind(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x0, 0x0, 0x0, 0x2) (async) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) 663.923204ms ago: executing program 2 (id=2876): pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) socket$netlink(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f000000c280)={&(0x7f0000000000)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01010000000000000000050000000900010073797a300000000078000000030a01030000000000000000050000000900010073797a300000000008000540000000001c0008800c00024000000000000000000c00014000000000000000000900030073797a3200000000"], 0xd4}}, 0x4000010) write$binfmt_misc(r1, &(0x7f0000000000), 0xfffffecc) splice(r0, 0x0, r2, 0x0, 0x4ffe6, 0x0) 423.378202ms ago: executing program 0 (id=2877): sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f000000c300)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a40000000160a05000000000000000000020000000900020073797a31000000000900010073797a3000000000140003800800024000000400080001400000000014000000110001"], 0x68}}, 0x0) sendmsg$NFT_MSG_GETFLOWTABLE(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000001c0)={0x2c, 0x17, 0xa, 0x801, 0x0, 0x0, {0x2}, [@NFTA_FLOWTABLE_NAME={0x9, 0x2, 'syz0\x00'}, @NFTA_FLOWTABLE_TABLE={0x9, 0x1, 'syz0\x00'}]}, 0x2c}, 0x1, 0x0, 0x0, 0x20004005}, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) openat$sndseq(0xffffffffffffff9c, &(0x7f0000000080), 0x700) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000040), 0x2000, 0x0) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f000000c280)={&(0x7f0000000000)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01010000000000000000050000000900010073797a300000000078000000030a01030000000000000000050000000900010073797a300000000008000540000000001c0008800c00024000000000000000000c00014000000000000000000900030073797a3200000000280004800800024000000000140003007465616d5f736c6176655f3000000000080001400000000114000000020a090100000000000000000000000014"], 0xd4}}, 0x4000010) write$binfmt_misc(r1, &(0x7f0000000000), 0xfffffecc) splice(r0, 0x0, r2, 0x0, 0x4ffe6, 0x0) 0s ago: executing program 1 (id=2878): r0 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r0) ptrace$PTRACE_GETSIGMASK(0x420a, r0, 0x8, &(0x7f0000000100)) open(&(0x7f0000000140)='./file1\x00', 0x60142, 0x0) r1 = socket(0x10, 0x3, 0x0) r2 = syz_open_procfs(0x0, &(0x7f0000000040)='net/raw6\x00') read$FUSE(r2, &(0x7f0000000080)={0x2020}, 0x2020) setsockopt$netlink_NETLINK_TX_RING(r1, 0x10e, 0xc, &(0x7f0000000140)={0x4200, 0x3, 0x5}, 0x10) sendmsg$nl_generic(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000010c0)=ANY=[@ANYBLOB="200000001600010a00000000000000000a0000000c0000800800", @ANYRES16=r1], 0x20}, 0x1, 0x0, 0x0, 0x20040041}, 0x0) kernel console output (not intermixed with test programs): found, idVendor=0421, idProduct=0335, bcdDevice=5f.0e [ 738.611074][ T43] usb 1-1: device descriptor read/64, error -71 [ 738.621471][T10646] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 738.637666][T10646] usb 4-1: config 0 descriptor?? [ 738.647418][T10646] usb 4-1: bad CDC descriptors [ 738.653561][T10646] cdc_acm 4-1:0.0: Control and data interfaces are not separated! [ 738.664901][T10646] cdc_acm 4-1:0.0: This needs exactly 3 endpoints [ 738.674909][T10646] cdc_acm 4-1:0.0: probe with driver cdc_acm failed with error -22 [ 738.822498][T14633] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 738.864539][T10646] usb 4-1: USB disconnect, device number 119 [ 738.876570][ T43] usb 1-1: new high-speed USB device number 96 using dummy_hcd [ 739.087857][ T43] usb 1-1: device descriptor read/64, error -71 [ 739.196952][ T43] usb usb1-port1: attempt power cycle [ 739.293442][T14640] netlink: 20 bytes leftover after parsing attributes in process `syz.2.2307'. [ 739.575755][ T30] kauditd_printk_skb: 56 callbacks suppressed [ 739.575774][ T30] audit: type=1804 audit(1759263139.309:815): pid=14642 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.4.2309" name="/newroot/478/file1" dev="fuse" ino=1 res=1 errno=0 [ 739.682604][ T43] usb 1-1: new high-speed USB device number 97 using dummy_hcd [ 739.721574][ T43] usb 1-1: device descriptor read/8, error -71 [ 739.976684][ T43] usb 1-1: new high-speed USB device number 98 using dummy_hcd [ 740.017488][ T43] usb 1-1: device descriptor read/8, error -71 [ 740.026481][ T5840] usb 4-1: new high-speed USB device number 120 using dummy_hcd [ 740.053736][T14655] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2312'. [ 740.106695][ T5907] usb 3-1: new low-speed USB device number 107 using dummy_hcd [ 740.145680][ T43] usb usb1-port1: unable to enumerate USB device [ 740.156603][ T5840] usb 4-1: device descriptor read/64, error -71 [ 740.265323][ T5907] usb 3-1: config 0 has an invalid interface number: 1 but max is 0 [ 740.276273][ T5907] usb 3-1: config 0 has no interface number 0 [ 740.310994][ T5907] usb 3-1: config 0 interface 1 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 740.323325][ T5907] usb 3-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 740.339053][ T5907] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 740.353355][ T5907] usb 3-1: config 0 descriptor?? [ 740.426276][ T5907] iowarrior 3-1:0.1: no interrupt-in endpoint found [ 740.446785][ T5840] usb 4-1: new high-speed USB device number 121 using dummy_hcd [ 740.576475][ T5840] usb 4-1: device descriptor read/64, error -71 [ 740.656691][ T43] usb 2-1: new high-speed USB device number 106 using dummy_hcd [ 740.686775][ T5840] usb usb4-port1: attempt power cycle [ 740.816647][ T43] usb 2-1: Using ep0 maxpacket: 8 [ 740.854297][ T43] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 740.870774][ T43] usb 2-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 740.881997][ T43] usb 2-1: config 1 has no interface number 1 [ 740.897190][ T43] usb 2-1: config 1 interface 2 altsetting 1 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 740.992699][ T43] usb 2-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 741.004424][ T43] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 741.014004][ T43] usb 2-1: Product: syz [ 741.018724][ T43] usb 2-1: Manufacturer: syz [ 741.023395][ T43] usb 2-1: SerialNumber: syz [ 741.026620][ T5840] usb 4-1: new high-speed USB device number 122 using dummy_hcd [ 741.061917][ T5840] usb 4-1: device descriptor read/8, error -71 [ 741.326735][ T5840] usb 4-1: new high-speed USB device number 123 using dummy_hcd [ 741.357634][ T5840] usb 4-1: device descriptor read/8, error -71 [ 741.467701][ T5840] usb usb4-port1: unable to enumerate USB device [ 741.773126][T14678] syz_tun: entered allmulticast mode [ 741.901271][T14680] dvmrp1: entered allmulticast mode [ 742.386623][T10646] usb 5-1: new high-speed USB device number 121 using dummy_hcd [ 742.516536][T10646] usb 5-1: device descriptor read/64, error -71 [ 742.602855][T14677] syz_tun: left allmulticast mode [ 742.806662][T10646] usb 5-1: new high-speed USB device number 122 using dummy_hcd [ 742.842283][ T5840] usb 3-1: USB disconnect, device number 107 [ 743.036622][T10646] usb 5-1: device descriptor read/64, error -71 [ 743.173257][T10646] usb usb5-port1: attempt power cycle [ 743.236133][T14690] netlink: 24 bytes leftover after parsing attributes in process `syz.3.2324'. [ 743.287467][T14690] (unnamed net_device) (uninitialized): Removing last arp target with arp_interval on [ 743.298110][ T43] usb 2-1: cannot find UAC_HEADER [ 743.381567][ T43] snd-usb-audio 2-1:1.0: probe with driver snd-usb-audio failed with error -22 [ 743.436087][ T43] usb 2-1: USB disconnect, device number 106 [ 743.479003][ T6244] udevd[6244]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 743.677400][T10646] usb 5-1: new high-speed USB device number 123 using dummy_hcd [ 743.715809][T10646] usb 5-1: device descriptor read/8, error -71 [ 743.966771][T10646] usb 5-1: new high-speed USB device number 124 using dummy_hcd [ 743.976537][ T5907] usb 3-1: new high-speed USB device number 108 using dummy_hcd [ 743.997252][T10646] usb 5-1: device descriptor read/8, error -71 [ 744.117010][T10646] usb usb5-port1: unable to enumerate USB device [ 744.126619][ T5907] usb 3-1: Using ep0 maxpacket: 16 [ 744.139873][ T5907] usb 3-1: config 166 has an invalid interface number: 177 but max is 1 [ 744.156494][ T5907] usb 3-1: config 166 has an invalid interface number: 34 but max is 1 [ 744.175113][ T5907] usb 3-1: config 166 has no interface number 0 [ 744.185248][ T5907] usb 3-1: config 166 has no interface number 1 [ 744.196666][ T5907] usb 3-1: config 166 interface 177 altsetting 4 has an invalid descriptor for endpoint zero, skipping [ 744.236578][ T5907] usb 3-1: config 166 interface 177 altsetting 4 has an invalid descriptor for endpoint zero, skipping [ 744.293465][ T5907] usb 3-1: config 166 interface 34 altsetting 1 has a duplicate endpoint with address 0x9, skipping [ 744.317892][ T5907] usb 3-1: config 166 interface 34 altsetting 1 has an endpoint descriptor with address 0xA6, changing to 0x86 [ 744.332626][ T5907] usb 3-1: config 166 interface 34 altsetting 1 endpoint 0x86 has invalid maxpacket 23105, setting to 1024 [ 744.349034][ T5907] usb 3-1: config 166 interface 34 altsetting 1 bulk endpoint 0x86 has invalid maxpacket 1024 [ 744.364624][ T5907] usb 3-1: config 166 interface 34 altsetting 1 endpoint 0x85 has an invalid bInterval 0, changing to 7 [ 744.438872][ T5907] usb 3-1: config 166 interface 34 altsetting 1 endpoint 0x85 has invalid wMaxPacketSize 0 [ 744.519066][T14716] netlink: 'syz.3.2331': attribute type 4 has an invalid length. [ 744.548344][ T5907] usb 3-1: config 166 interface 34 altsetting 1 has 5 endpoint descriptors, different from the interface descriptor's value: 4 [ 744.581294][ T5907] usb 3-1: config 166 interface 177 has no altsetting 0 [ 744.592478][ T5907] usb 3-1: config 166 interface 34 has no altsetting 0 [ 744.609988][T14716] netlink: 'syz.3.2331': attribute type 4 has an invalid length. [ 744.878772][ T5907] usb 3-1: New USB device found, idVendor=0bda, idProduct=0138, bcdDevice=30.12 [ 744.912273][ T5907] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 744.939934][ T5907] usb 3-1: Product: syz [ 744.949648][ T5907] usb 3-1: Manufacturer: syz [ 744.960300][ T5907] usb 3-1: SerialNumber: syz [ 745.497496][ T5914] usb 1-1: new high-speed USB device number 99 using dummy_hcd [ 745.666650][ T5914] usb 1-1: Using ep0 maxpacket: 32 [ 745.694117][ T5914] usb 1-1: config 0 has an invalid interface number: 35 but max is 0 [ 745.755632][ T5914] usb 1-1: config 0 has no interface number 0 [ 745.765743][ T5914] usb 1-1: New USB device found, idVendor=10c4, idProduct=818a, bcdDevice=7d.8f [ 745.778008][ T5914] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 745.786217][ T5914] usb 1-1: Product: syz [ 745.799380][ T5907] ums-realtek 3-1:166.177: USB Mass Storage device detected [ 745.920288][ T5914] usb 1-1: Manufacturer: syz [ 745.924966][ T5914] usb 1-1: SerialNumber: syz [ 745.964336][ T5914] usb 1-1: config 0 descriptor?? [ 745.969843][T10421] usb 5-1: new low-speed USB device number 125 using dummy_hcd [ 745.994519][ T5907] ums-realtek 3-1:166.34: USB Mass Storage device detected [ 746.069041][ T5907] ums-realtek 3-1:166.34: probe with driver ums-realtek failed with error -5 [ 746.117627][ T5907] usb 3-1: Found UVC 0.00 device syz (0bda:0138) [ 746.139716][T10421] usb 5-1: LPM exit latency is zeroed, disabling LPM. [ 746.166881][ T5907] usb 3-1: No valid video chain found. [ 746.178377][T10421] usb 5-1: config 1 interface 0 altsetting 7 endpoint 0x82 is Bulk; changing to Interrupt [ 746.232061][ T5914] radio-si470x 1-1:0.35: this is not a si470x device. [ 746.241590][T10421] usb 5-1: config 1 interface 0 altsetting 7 endpoint 0x3 is Bulk; changing to Interrupt [ 746.252133][ T5907] usb 3-1: USB disconnect, device number 108 [ 746.271976][T10421] usb 5-1: config 1 interface 0 has no altsetting 0 [ 746.290416][T10421] usb 5-1: string descriptor 0 read error: -22 [ 746.297277][ T5914] radio-raremono 1-1:0.35: this is not Thanko's Raremono. [ 746.321183][T10421] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 746.346795][ T5914] usb 1-1: USB disconnect, device number 99 [ 746.361125][T10421] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 746.398576][T14730] raw-gadget.1 gadget.4: fail, usb_ep_enable returned -22 [ 746.414179][T14730] raw-gadget.1 gadget.4: fail, usb_ep_enable returned -22 [ 746.453680][T10421] cdc_ether 5-1:1.0: probe with driver cdc_ether failed with error -22 [ 746.598423][T14736] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2336'. [ 746.613605][T14736] netlink: 44 bytes leftover after parsing attributes in process `syz.1.2336'. [ 746.630503][T14736] bridge0: port 1(bridge_slave_0) entered disabled state [ 746.651270][T14730] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 746.703429][T14741] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 746.719935][T14730] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 746.737284][T14741] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 746.758448][T14744] netlink: 28 bytes leftover after parsing attributes in process `syz.3.2338'. [ 746.809491][T14744] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2338'. [ 746.823887][ T5940] usb 5-1: USB disconnect, device number 125 [ 747.140912][T14752] netlink: 16 bytes leftover after parsing attributes in process `syz.0.2340'. [ 747.176022][T14752] netlink: 16 bytes leftover after parsing attributes in process `syz.0.2340'. [ 747.241862][ T1299] ieee802154 phy0 wpan0: encryption failed: -22 [ 747.251356][ T1299] ieee802154 phy1 wpan1: encryption failed: -22 [ 747.646190][T14766] IPVS: set_ctl: invalid protocol: 8 10.1.1.1:20001 [ 747.656181][ T5940] IPVS: starting estimator thread 0... [ 747.794897][T14772] netlink: 'syz.1.2347': attribute type 4 has an invalid length. [ 747.806501][T14768] IPVS: using max 36 ests per chain, 86400 per kthread [ 747.927478][T14776] netlink: 68 bytes leftover after parsing attributes in process `syz.3.2348'. [ 747.962601][T14772] netlink: 'syz.1.2347': attribute type 4 has an invalid length. [ 748.079098][ T30] audit: type=1800 audit(1759263147.779:816): pid=14777 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.4.2345" name=20019C1437B3CFFCC3A25729EB7393A7C721518FF6ECA56673F56C7B548772D22972A7D6084F9A98F5323A22F412C0542BCD9F767C8DD5B24476638E93D8D6A0C536D278E3633A dev="mqueue" ino=48882 res=0 errno=0 [ 748.916563][ T5940] usb 3-1: new high-speed USB device number 109 using dummy_hcd [ 749.086520][ T5940] usb 3-1: Using ep0 maxpacket: 8 [ 749.128872][ T5940] usb 3-1: unable to get BOS descriptor or descriptor too short [ 749.147863][ T5940] usb 3-1: config 59 has an invalid interface number: 141 but max is 0 [ 749.162400][ T5940] usb 3-1: config 59 has no interface number 0 [ 749.186490][ T5940] usb 3-1: config 59 interface 141 altsetting 6 endpoint 0xC has an invalid bInterval 160, changing to 11 [ 749.217179][ T5940] usb 3-1: config 59 interface 141 has no altsetting 0 [ 749.238989][ T5940] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a0, bcdDevice= 0.72 [ 749.258757][ T5940] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 749.328243][T14802] fuse: Unknown parameter '$' [ 749.342430][ T5940] usb 3-1: Product: syz [ 749.355992][ T5940] usb 3-1: Manufacturer: syz [ 749.361335][ T5940] usb 3-1: SerialNumber: syz [ 749.408430][ T5907] IPVS: starting estimator thread 0... [ 749.516823][T14804] IPVS: using max 32 ests per chain, 76800 per kthread [ 749.576535][T10421] usb 5-1: new high-speed USB device number 126 using dummy_hcd [ 749.585549][ T5940] usbtest 3-1:59.141: couldn't get endpoints, -71 [ 749.594159][ T5940] usbtest 3-1:59.141: probe with driver usbtest failed with error -71 [ 749.608433][ T5940] usb 3-1: USB disconnect, device number 109 [ 749.726593][ T5907] usb 4-1: new high-speed USB device number 124 using dummy_hcd [ 749.737072][T10421] usb 5-1: Using ep0 maxpacket: 32 [ 749.743985][T10421] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 749.755299][T10421] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 749.765166][T10421] usb 5-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 749.774734][T10421] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 749.784683][T10421] usb 5-1: config 0 descriptor?? [ 749.799755][T10421] hub 5-1:0.0: USB hub found [ 749.876668][ T5907] usb 4-1: Using ep0 maxpacket: 8 [ 749.884260][ T5907] usb 4-1: config 2 has an invalid interface number: 138 but max is 0 [ 749.893336][ T5907] usb 4-1: config 2 has no interface number 0 [ 749.900176][ T5907] usb 4-1: config 2 interface 138 has no altsetting 0 [ 749.910901][ T5907] usb 4-1: New USB device found, idVendor=0bfd, idProduct=010e, bcdDevice=e8.14 [ 749.920317][ T5907] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 749.929063][ T5907] usb 4-1: Product: syz [ 749.933562][ T5907] usb 4-1: Manufacturer: syz [ 749.938927][ T5907] usb 4-1: SerialNumber: syz [ 749.997389][T10421] hub 5-1:0.0: 1 port detected [ 750.157956][ T5907] kvaser_usb 4-1:2.138: error -ENODEV: Cannot get usb endpoint(s) [ 750.190157][ T5907] usb 4-1: USB disconnect, device number 124 [ 750.227579][ T5914] usb 2-1: new high-speed USB device number 107 using dummy_hcd [ 750.389087][ T5914] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x7 has invalid wMaxPacketSize 0 [ 750.399279][ T5914] usb 2-1: config 0 interface 0 altsetting 0 bulk endpoint 0x7 has invalid maxpacket 0 [ 750.411844][ T5914] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x89 has invalid wMaxPacketSize 0 [ 750.423650][ T5914] usb 2-1: New USB device found, idVendor=2040, idProduct=2000, bcdDevice=65.72 [ 750.433088][ T5914] usb 2-1: New USB device strings: Mfr=151, Product=0, SerialNumber=0 [ 750.444033][ T5914] usb 2-1: Manufacturer: syz [ 750.451518][ T5914] usb 2-1: config 0 descriptor?? [ 750.462669][ T5914] smsusb:smsusb_probe: board id=9, interface number 0 [ 750.470542][ T5914] smsusb:smsusb_probe: Device initialized with return code -19 [ 750.606497][ T43] usb 3-1: new full-speed USB device number 110 using dummy_hcd [ 750.617633][ T5914] hub 5-1:0.0: activate --> -90 [ 750.774318][ T43] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 750.806530][ T43] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 750.858568][ T43] usb 3-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 750.871738][ T43] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 750.891527][ T43] usb 3-1: Product: syz [ 750.904983][ T43] usb 3-1: Manufacturer: syz [ 750.940029][ T43] usb 3-1: SerialNumber: syz [ 750.998496][T14824] netlink: 36 bytes leftover after parsing attributes in process `syz.1.2359'. [ 751.705801][ T43] usb 3-1: 0:2 : does not exist [ 751.793367][ T5914] hub 5-1:0.0: hub_ext_port_status failed (err = -71) [ 751.793716][ T5940] usb 5-1: USB disconnect, device number 126 [ 751.803093][ T5914] usb 5-1-port1: connect-debounce failed [ 751.813735][ T43] usb 3-1: 5:0: failed to get current value for ch 0 (-22) [ 751.901989][ T43] usb 3-1: USB disconnect, device number 110 [ 751.979854][ T6244] udevd[6244]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 752.373344][T14835] ptrace attach of "./syz-executor exec"[13132] was attempted by ""[14835] [ 752.636489][ T5940] usb 5-1: new full-speed USB device number 127 using dummy_hcd [ 752.796649][ T5940] usb 5-1: device descriptor read/64, error -71 [ 753.076802][ T5940] usb 5-1: new full-speed USB device number 2 using dummy_hcd [ 753.226661][ T5940] usb 5-1: device descriptor read/64, error -71 [ 753.347212][ T5940] usb usb5-port1: attempt power cycle [ 753.450321][T10646] usb 2-1: USB disconnect, device number 107 [ 753.458599][T14867] netlink: 28 bytes leftover after parsing attributes in process `syz.3.2377'. [ 753.467775][T14867] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2377'. [ 753.629725][T14871] openvswitch: netlink: Flow set message rejected, Key attribute missing. [ 753.717221][ T5940] usb 5-1: new full-speed USB device number 3 using dummy_hcd [ 753.762433][ T5940] usb 5-1: device descriptor read/8, error -71 [ 754.016766][ T5940] usb 5-1: new full-speed USB device number 4 using dummy_hcd [ 754.060908][ T5940] usb 5-1: device descriptor read/8, error -71 [ 754.187157][ T5940] usb usb5-port1: unable to enumerate USB device [ 754.478462][T14899] netlink: 16 bytes leftover after parsing attributes in process `syz.0.2389'. [ 754.777651][T14914] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2395'. [ 754.806539][ T5914] usb 4-1: new high-speed USB device number 125 using dummy_hcd [ 754.857050][ T5940] usb 1-1: new full-speed USB device number 100 using dummy_hcd [ 754.956664][T10421] usb 2-1: new high-speed USB device number 108 using dummy_hcd [ 754.971878][ T5914] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 754.981917][ T5914] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 5 [ 754.995798][ T5914] usb 4-1: New USB device found, idVendor=1e7d, idProduct=2d50, bcdDevice= 0.00 [ 754.996531][ T5940] usb 1-1: device descriptor read/64, error -71 [ 755.011404][ T5914] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 755.022085][ T5914] usb 4-1: config 0 descriptor?? [ 755.067013][ T43] usb 3-1: new high-speed USB device number 111 using dummy_hcd [ 755.106544][T10421] usb 2-1: Using ep0 maxpacket: 8 [ 755.113319][T10421] usb 2-1: config 0 has an invalid interface number: 186 but max is 0 [ 755.124840][T10421] usb 2-1: config 0 has no interface number 0 [ 755.131406][T10421] usb 2-1: config 0 interface 186 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 755.142585][T10421] usb 2-1: config 0 interface 186 altsetting 0 has an endpoint descriptor with address 0x9A, changing to 0x8A [ 755.154436][T10421] usb 2-1: config 0 interface 186 altsetting 0 endpoint 0x8A has an invalid bInterval 0, changing to 7 [ 755.167094][T10421] usb 2-1: config 0 interface 186 altsetting 0 endpoint 0x8A has invalid wMaxPacketSize 0 [ 755.178008][T10421] usb 2-1: config 0 interface 186 altsetting 0 has 4 endpoint descriptors, different from the interface descriptor's value: 3 [ 755.193555][T10421] usb 2-1: New USB device found, idVendor=07c0, idProduct=1505, bcdDevice=b8.c5 [ 755.202785][T10421] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 755.211104][T10421] usb 2-1: Product: syz [ 755.215280][T10421] usb 2-1: Manufacturer: syz [ 755.220204][T10421] usb 2-1: SerialNumber: syz [ 755.231419][T10421] usb 2-1: config 0 descriptor?? [ 755.247226][ T5940] usb 1-1: new full-speed USB device number 101 using dummy_hcd [ 755.256653][ T43] usb 3-1: Using ep0 maxpacket: 32 [ 755.263746][ T43] usb 3-1: config 0 has no interfaces? [ 755.269444][ T43] usb 3-1: New USB device found, idVendor=0e41, idProduct=5051, bcdDevice=d5.e8 [ 755.279794][ T43] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 755.290887][ T43] usb 3-1: config 0 descriptor?? [ 755.386698][ T5940] usb 1-1: device descriptor read/64, error -71 [ 755.453675][ T5914] kovaplus 0003:1E7D:2D50.0017: hidraw0: USB HID v0.00 Device [HID 1e7d:2d50] on usb-dummy_hcd.3-1/input0 [ 755.465780][T14918] workqueue: Failed to create a rescuer kthread for wq "nfc3_nci_rx_wq": -EINTR [ 755.474054][T10421] iowarrior 2-1:0.186: IOWarrior product=0x1505, serial= interface=186 now attached to iowarrior0 [ 755.506740][ T5940] usb usb1-port1: attempt power cycle [ 755.512916][T10421] usb 2-1: USB disconnect, device number 108 [ 755.574377][T14916] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 755.596017][T14916] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 755.737882][T10421] usb 3-1: USB disconnect, device number 111 [ 755.840861][T14904] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 755.860461][T14904] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 755.876764][ T5940] usb 1-1: new full-speed USB device number 102 using dummy_hcd [ 755.907451][ T5940] usb 1-1: device descriptor read/8, error -71 [ 756.326507][ T5940] usb 1-1: new full-speed USB device number 103 using dummy_hcd [ 756.375208][ T5940] usb 1-1: device descriptor read/8, error -71 [ 756.395954][ T5914] kovaplus 0003:1E7D:2D50.0017: couldn't init struct kovaplus_device [ 756.416052][ T5914] kovaplus 0003:1E7D:2D50.0017: couldn't install mouse [ 756.437621][ T5914] kovaplus 0003:1E7D:2D50.0017: probe with driver kovaplus failed with error -71 [ 756.497419][ T5940] usb usb1-port1: unable to enumerate USB device [ 756.510735][ T5914] usb 4-1: USB disconnect, device number 125 [ 756.586950][ T5944] usb 2-1: new high-speed USB device number 109 using dummy_hcd [ 756.773263][ T5944] usb 2-1: config 0 has an invalid interface number: 1 but max is 0 [ 756.781522][ T5944] usb 2-1: config 0 has no interface number 0 [ 756.788870][ T5944] usb 2-1: config 0 interface 1 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 756.801391][ T5944] usb 2-1: config 0 interface 1 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 756.812352][ T5944] usb 2-1: New USB device found, idVendor=041e, idProduct=2801, bcdDevice= 0.00 [ 756.822258][ T5944] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 756.847818][ T5944] usb 2-1: config 0 descriptor?? [ 757.272468][ T5944] prodikeys 0003:041E:2801.0018: hidraw0: USB HID v0.00 Device [HID 041e:2801] on usb-dummy_hcd.1-1/input1 [ 757.347118][ T5914] usb 4-1: new high-speed USB device number 126 using dummy_hcd [ 757.367113][ T5944] hid_prodikeys: hid-prodikeys: failed to find output report [ 757.367113][ T5944] [ 757.536561][ T5914] usb 4-1: Using ep0 maxpacket: 32 [ 757.548714][ T5944] usb 2-1: USB disconnect, device number 109 [ 757.556930][ T5914] usb 4-1: New USB device found, idVendor=041e, idProduct=403c, bcdDevice=cc.d7 [ 757.586654][ T5914] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 757.627306][ T5914] usb 4-1: config 0 descriptor?? [ 757.636154][ T5914] gspca_main: sq930x-2.14.0 probing 041e:403c [ 757.839452][T14946] @ÿ: renamed from bond_slave_0 [ 757.960806][T14952] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2405'. [ 758.462314][T14946] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 758.477360][T14946] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 758.701202][ T5914] gspca_sq930x: ucbus_write failed -71 [ 758.734590][ T5914] sq930x 4-1:0.0: probe with driver sq930x failed with error -71 [ 758.769282][ T5914] usb 4-1: USB disconnect, device number 126 [ 758.964284][T14971] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 759.119870][T14972] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=1876317852 (240168685056 ns) > initial count (238957770112 ns). Using initial count to start timer. [ 759.125792][T14972] kvm: kvm [14970]: vcpu0, guest rIP: 0x9114 Unhandled WRMSR(0xc2) = 0x9d00 [ 759.153154][T14972] kvm: kvm [14970]: vcpu0, guest rIP: 0x9114 Unhandled WRMSR(0xc1) = 0x9d00 [ 759.557090][ T5163] Bluetooth: hci1: command 0x0405 tx timeout [ 759.668697][T14997] netlink: 'syz.3.2421': attribute type 1 has an invalid length. [ 759.960131][T15008] netlink: 6 bytes leftover after parsing attributes in process `syz.2.2422'. [ 760.036828][ T10] usb 2-1: new full-speed USB device number 110 using dummy_hcd [ 760.077842][T15001] gretap0: entered promiscuous mode [ 760.131123][T15001] bond4: (slave gretap0): making interface the new active one [ 760.259267][T15001] bond4: (slave gretap0): Enslaving as an active interface with an up link [ 760.284888][T15003] macvlan4: entered promiscuous mode [ 760.290403][T15003] macvlan4: entered allmulticast mode [ 760.331543][ T10] usb 2-1: config 5 has an invalid interface number: 3 but max is 0 [ 760.342348][ T10] usb 2-1: config 5 has no interface number 0 [ 760.352163][T15003] bond4: entered promiscuous mode [ 760.360212][ T10] usb 2-1: New USB device found, idVendor=09fb, idProduct=602a, bcdDevice=fd.36 [ 760.373891][T15003] 8021q: adding VLAN 0 to HW filter on device macvlan4 [ 760.381030][ T10] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 760.391105][ T10] usb 2-1: Product: syz [ 760.400027][T15003] bond4: (slave macvlan4): the slave hw address is in use by the bond; couldn't find a slave with a free hw address to give it (this should not have happened) [ 760.417447][T15003] bond4: left promiscuous mode [ 760.422484][ T10] usb 2-1: Manufacturer: syz [ 760.427574][ T10] usb 2-1: SerialNumber: syz [ 760.435848][ T10] ftdi_sio 2-1:5.3: FTDI USB Serial Device converter detected [ 760.473479][ T10] ftdi_sio ttyUSB0: unknown device type: 0xfd36 [ 760.792371][T14993] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2420'. [ 760.862968][T14993] dummy0: entered promiscuous mode [ 760.881246][T14993] macvtap1: entered promiscuous mode [ 760.896259][T14993] macvtap1: entered allmulticast mode [ 760.930053][T14993] dummy0: entered allmulticast mode [ 760.983107][T15005] dummy0: left allmulticast mode [ 761.060698][T15005] dummy0: left promiscuous mode [ 761.099865][ T10] usb 2-1: USB disconnect, device number 110 [ 761.110992][ T10] ftdi_sio 2-1:5.3: device disconnected [ 761.151941][T15026] loop6: detected capacity change from 0 to 524287999 [ 761.347040][ T5940] usb 3-1: new full-speed USB device number 112 using dummy_hcd [ 761.588808][ T5940] usb 3-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 761.629739][ T5940] usb 3-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 761.673794][ T5940] usb 3-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 761.695070][ T5940] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 762.090896][ T5940] usb 3-1: GET_CAPABILITIES returned 0 [ 762.173230][ T5940] usbtmc 3-1:16.0: can't read capabilities [ 762.284224][ T5914] usb 3-1: USB disconnect, device number 112 [ 762.448363][T15044] openvswitch: netlink: IP tunnel dst address not specified [ 764.008972][T15067] netlink: 24 bytes leftover after parsing attributes in process `syz.1.2438'. [ 764.526565][ T5914] usb 3-1: new high-speed USB device number 113 using dummy_hcd [ 764.808469][ T5914] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x7 has invalid wMaxPacketSize 0 [ 764.853890][ T5914] usb 3-1: config 0 interface 0 altsetting 0 bulk endpoint 0x7 has invalid maxpacket 0 [ 765.043585][ T5914] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x89 has invalid wMaxPacketSize 0 [ 765.064469][T15079] netlink: 112 bytes leftover after parsing attributes in process `syz.1.2441'. [ 765.085218][ T5914] usb 3-1: New USB device found, idVendor=2040, idProduct=2000, bcdDevice=65.72 [ 765.104641][ T5914] usb 3-1: New USB device strings: Mfr=151, Product=0, SerialNumber=0 [ 765.131643][ T5914] usb 3-1: Manufacturer: syz [ 765.164275][ T5914] usb 3-1: config 0 descriptor?? [ 765.183569][ T5914] smsusb:smsusb_probe: board id=9, interface number 0 [ 765.200502][ T5914] smsusb:smsusb_probe: Device initialized with return code -19 [ 765.409641][T15088] netlink: 'syz.4.2443': attribute type 4 has an invalid length. [ 765.527746][T15091] netlink: 'syz.4.2443': attribute type 4 has an invalid length. [ 765.728440][T15094] netlink: 36 bytes leftover after parsing attributes in process `syz.2.2439'. [ 766.578532][ T43] usb 2-1: new high-speed USB device number 111 using dummy_hcd [ 766.819050][ T43] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x7 has invalid wMaxPacketSize 0 [ 766.829046][ T43] usb 2-1: config 0 interface 0 altsetting 0 bulk endpoint 0x7 has invalid maxpacket 0 [ 766.906645][T15100] pim6reg: entered allmulticast mode [ 767.088879][ T43] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x89 has invalid wMaxPacketSize 0 [ 767.174850][ T43] usb 2-1: New USB device found, idVendor=2040, idProduct=2000, bcdDevice=65.72 [ 767.187935][ T43] usb 2-1: New USB device strings: Mfr=151, Product=0, SerialNumber=0 [ 767.200048][ T43] usb 2-1: Manufacturer: syz [ 767.244454][ T43] usb 2-1: config 0 descriptor?? [ 767.290740][ T43] smsusb:smsusb_probe: board id=9, interface number 0 [ 767.306164][ T43] smsusb:smsusb_probe: Device initialized with return code -19 [ 767.536010][T15114] netlink: 44 bytes leftover after parsing attributes in process `syz.0.2450'. [ 767.790117][ T43] usb 3-1: USB disconnect, device number 113 [ 767.886268][T15122] netlink: 36 bytes leftover after parsing attributes in process `syz.1.2446'. [ 767.900819][T15123] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2451'. [ 768.210797][T15127] sctp: [Deprecated]: syz.0.2452 (pid 15127) Use of struct sctp_assoc_value in delayed_ack socket option. [ 768.210797][T15127] Use struct sctp_sack_info instead [ 768.436540][ T5914] usb 4-1: new high-speed USB device number 127 using dummy_hcd [ 768.711987][ T5914] usb 4-1: Using ep0 maxpacket: 8 [ 768.728338][ T5914] usb 4-1: config index 0 descriptor too short (expected 301, got 45) [ 768.737085][ T5914] usb 4-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 768.747970][ T5914] usb 4-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 768.758123][ T5914] usb 4-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 768.768599][T10421] usb 3-1: new full-speed USB device number 114 using dummy_hcd [ 768.789982][ T5914] usb 4-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 768.806670][ T5914] usb 4-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 768.818497][ T5914] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 768.907227][T10421] usb 3-1: device descriptor read/64, error -71 [ 769.131769][ T5914] usb 4-1: usb_control_msg returned -32 [ 769.144180][ T5914] usbtmc 4-1:16.0: can't read capabilities [ 769.157324][T10421] usb 3-1: new full-speed USB device number 115 using dummy_hcd [ 769.296510][T10421] usb 3-1: device descriptor read/64, error -71 [ 769.407322][T10421] usb usb3-port1: attempt power cycle [ 769.699466][ T5914] usb 2-1: USB disconnect, device number 111 [ 769.749849][T10421] usb 3-1: new full-speed USB device number 116 using dummy_hcd [ 769.777580][T10421] usb 3-1: device descriptor read/8, error -71 [ 769.852377][T15140] netlink: 56 bytes leftover after parsing attributes in process `syz.1.2457'. [ 770.076578][T10421] usb 3-1: new full-speed USB device number 117 using dummy_hcd [ 770.097486][T10421] usb 3-1: device descriptor read/8, error -71 [ 770.277267][T10421] usb usb3-port1: unable to enumerate USB device [ 771.417975][T10421] usb 2-1: new high-speed USB device number 112 using dummy_hcd [ 771.590617][T10421] usb 2-1: config 128 has an invalid interface number: 148 but max is 0 [ 771.629635][T15160] netlink: 28 bytes leftover after parsing attributes in process `syz.2.2463'. [ 771.640108][T15160] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2463'. [ 771.684165][T10421] usb 2-1: config 128 has no interface number 0 [ 771.709775][T10421] usb 2-1: config 128 interface 148 altsetting 9 endpoint 0x7 has invalid wMaxPacketSize 0 [ 771.728423][T15162] sctp: [Deprecated]: syz.4.2464 (pid 15162) Use of struct sctp_assoc_value in delayed_ack socket option. [ 771.728423][T15162] Use struct sctp_sack_info instead [ 771.748602][T10421] usb 2-1: config 128 interface 148 altsetting 9 endpoint 0x5 has an invalid bInterval 129, changing to 11 [ 771.762674][T10421] usb 2-1: config 128 interface 148 has no altsetting 0 [ 771.774121][T10421] usb 2-1: New USB device found, idVendor=0cf3, idProduct=e019, bcdDevice=fb.4f [ 771.783904][T10421] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 771.792487][T10421] usb 2-1: Product: syz [ 771.811774][T10421] usb 2-1: Manufacturer: syz [ 771.821980][T10421] usb 2-1: SerialNumber: syz [ 771.953914][T15166] netlink: 20 bytes leftover after parsing attributes in process `syz.4.2466'. [ 772.067343][T10421] usb 2-1: USB disconnect, device number 112 [ 772.226606][ T5914] usb 5-1: new high-speed USB device number 5 using dummy_hcd [ 772.379904][ T5914] usb 5-1: config 0 has an invalid interface number: 229 but max is 0 [ 772.392946][ T5914] usb 5-1: config 0 has no interface number 0 [ 772.399991][ T5914] usb 5-1: New USB device found, idVendor=0dfc, idProduct=0001, bcdDevice= c.19 [ 772.416992][ T5914] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 772.451351][ T5914] usb 5-1: config 0 descriptor?? [ 772.556459][T10421] usb 2-1: new high-speed USB device number 113 using dummy_hcd [ 772.663469][ T5914] usb 5-1: USB disconnect, device number 5 [ 772.696942][ T43] usb 3-1: new high-speed USB device number 118 using dummy_hcd [ 772.706860][T10421] usb 2-1: Using ep0 maxpacket: 8 [ 772.713808][T10421] usb 2-1: config index 0 descriptor too short (expected 301, got 45) [ 772.724079][T10421] usb 2-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 772.734371][T10421] usb 2-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 772.744419][T10421] usb 2-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 16 [ 772.754515][T10421] usb 2-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 772.768098][T10421] usb 2-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 772.777260][T10421] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 772.866926][ T43] usb 3-1: Using ep0 maxpacket: 32 [ 772.874655][ T43] usb 3-1: config 0 has an invalid interface number: 35 but max is 0 [ 772.883847][ T43] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 772.894522][ T43] usb 3-1: config 0 has no interface number 0 [ 772.901333][ T43] usb 3-1: config 0 interface 35 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 772.919857][ T43] usb 3-1: New USB device found, idVendor=10c4, idProduct=818a, bcdDevice=7d.ad [ 772.946014][ T43] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 772.955227][ T43] usb 3-1: Product: syz [ 772.966633][ T43] usb 3-1: Manufacturer: syz [ 772.972872][ T43] usb 3-1: SerialNumber: syz [ 772.985337][ T43] usb 3-1: config 0 descriptor?? [ 772.996314][T10421] usb 2-1: usb_control_msg returned -32 [ 773.007210][T10421] usbtmc 2-1:16.0: can't read capabilities [ 773.017732][ T43] radio-si470x 3-1:0.35: could not find interrupt in endpoint [ 773.025320][ T43] radio-si470x 3-1:0.35: probe with driver radio-si470x failed with error -5 [ 773.205512][ T43] radio-raremono 3-1:0.35: this is not Thanko's Raremono. [ 773.222861][ T43] usbhid 3-1:0.35: couldn't find an input interrupt endpoint [ 774.684563][T15138] usbtmc 4-1:16.0: usb_control_msg returned -110 [ 774.730965][T10421] usb 4-1: USB disconnect, device number 127 [ 775.747274][T15200] fuse: Unknown parameter 'roämode' [ 775.772211][ T43] usb 2-1: USB disconnect, device number 113 [ 776.801987][T15215] sctp: [Deprecated]: syz.4.2476 (pid 15215) Use of struct sctp_assoc_value in delayed_ack socket option. [ 776.801987][T15215] Use struct sctp_sack_info instead [ 776.829121][T15216] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2475'. [ 776.909335][T10421] usb 3-1: USB disconnect, device number 118 [ 778.444729][T15242] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2485'. [ 778.453992][T15242] netlink: 76 bytes leftover after parsing attributes in process `syz.2.2485'. [ 778.608782][T10421] usb 4-1: new high-speed USB device number 2 using dummy_hcd [ 778.694743][T15248] vlan0: entered promiscuous mode [ 778.712190][T15248] bridge0: entered promiscuous mode [ 778.732271][T15248] vlan0: entered allmulticast mode [ 778.742648][T15250] sctp: [Deprecated]: syz.4.2487 (pid 15250) Use of struct sctp_assoc_value in delayed_ack socket option. [ 778.742648][T15250] Use struct sctp_sack_info instead [ 778.759564][T15248] bridge0: entered allmulticast mode [ 778.778017][T10421] usb 4-1: Using ep0 maxpacket: 8 [ 778.806193][T10421] usb 4-1: config 5 has an invalid interface number: 72 but max is 0 [ 778.827004][T10421] usb 4-1: config 5 has no interface number 0 [ 778.846725][T10421] usb 4-1: config 5 interface 72 has no altsetting 0 [ 778.865458][T10421] usb 4-1: New USB device found, idVendor=1b3d, idProduct=01cd, bcdDevice= 8.00 [ 778.903402][T10421] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 778.932771][T10421] usb 4-1: Product: syz [ 778.951302][T10421] usb 4-1: Manufacturer: syz [ 778.965888][T10421] usb 4-1: SerialNumber: syz [ 779.217321][ T30] audit: type=1326 audit(1759263178.949:817): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15234 comm="syz.3.2483" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8b3df8eec9 code=0x7ffc0000 [ 779.242459][ T5940] usb 2-1: new full-speed USB device number 114 using dummy_hcd [ 779.253203][T15235] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 779.274320][T15235] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 779.283881][ T30] audit: type=1326 audit(1759263178.949:818): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15234 comm="syz.3.2483" exe="/root/syz-executor" sig=0 arch=c000003e syscall=63 compat=0 ip=0x7f8b3df8eec9 code=0x7ffc0000 [ 779.384725][ T30] audit: type=1326 audit(1759263178.949:819): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15234 comm="syz.3.2483" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8b3df8eec9 code=0x7ffc0000 [ 779.429832][ T5940] usb 2-1: config 12 has an invalid interface number: 4 but max is 3 [ 779.467755][ T5940] usb 2-1: config 12 contains an unexpected descriptor of type 0x2, skipping [ 779.519609][ T5940] usb 2-1: config 12 has an invalid interface number: 106 but max is 3 [ 779.541030][ T30] audit: type=1326 audit(1759263178.949:820): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15234 comm="syz.3.2483" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f8b3df8eec9 code=0x7ffc0000 [ 779.582022][ T5940] usb 2-1: config 12 contains an unexpected descriptor of type 0x2, skipping [ 779.613984][ T5940] usb 2-1: config 12 contains an unexpected descriptor of type 0x2, skipping [ 779.644569][ T30] audit: type=1326 audit(1759263178.979:821): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15234 comm="syz.3.2483" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8b3df8eec9 code=0x7ffc0000 [ 779.654185][T10421] ftdi_sio 4-1:5.72: FTDI USB Serial Device converter detected [ 779.679365][ T5940] usb 2-1: config 12 contains an unexpected descriptor of type 0x2, skipping [ 779.689773][T10421] usb 4-1: Detected FT4232H [ 779.695001][T10421] ftdi_sio ttyUSB0: Unable to read latency timer: -71 [ 779.726779][ T5940] usb 2-1: config 12 contains an unexpected descriptor of type 0x2, skipping [ 779.736084][ T5940] usb 2-1: config 12 has an invalid interface number: 227 but max is 3 [ 779.740166][T10421] ftdi_sio ttyUSB0: Unable to write latency timer: -71 [ 779.744964][ T30] audit: type=1326 audit(1759263178.979:822): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15234 comm="syz.3.2483" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8b3df8eec9 code=0x7ffc0000 [ 779.773971][ T5940] usb 2-1: config 12 has no interface number 0 [ 779.780341][ T5940] usb 2-1: config 12 has no interface number 1 [ 779.792507][ T5940] usb 2-1: config 12 has no interface number 2 [ 779.799373][ T5940] usb 2-1: config 12 interface 3 altsetting 16 endpoint 0x6 has invalid maxpacket 1536, setting to 64 [ 779.810773][ T30] audit: type=1326 audit(1759263178.979:823): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15234 comm="syz.3.2483" exe="/root/syz-executor" sig=0 arch=c000003e syscall=1 compat=0 ip=0x7f8b3df8eec9 code=0x7ffc0000 [ 779.840271][T10421] usb 4-1: FTDI USB Serial Device converter now attached to ttyUSB0 [ 779.856619][ T5940] usb 2-1: config 12 interface 3 altsetting 16 endpoint 0xD has invalid maxpacket 1023, setting to 64 [ 779.867486][T10421] usb 4-1: USB disconnect, device number 2 [ 779.882633][T15271] netlink: 28 bytes leftover after parsing attributes in process `syz.0.2494'. [ 779.901997][T15271] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2494'. [ 779.923827][ T5940] usb 2-1: config 12 interface 3 altsetting 16 endpoint 0x3 has invalid maxpacket 512, setting to 64 [ 779.941931][ T30] audit: type=1326 audit(1759263178.979:824): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15234 comm="syz.3.2483" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8b3df8eec9 code=0x7ffc0000 [ 779.971852][ T5940] usb 2-1: config 12 interface 3 altsetting 16 has a duplicate endpoint with address 0x3, skipping [ 779.986457][ T5940] usb 2-1: config 12 interface 3 altsetting 16 endpoint 0xA has invalid maxpacket 512, setting to 64 [ 780.021168][T10421] ftdi_sio ttyUSB0: FTDI USB Serial Device converter now disconnected from ttyUSB0 [ 780.045727][T10421] ftdi_sio 4-1:5.72: device disconnected [ 780.096784][ T30] audit: type=1326 audit(1759263178.979:825): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15234 comm="syz.3.2483" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8b3df8eec9 code=0x7ffc0000 [ 780.119233][ C0] vkms_vblank_simulate: vblank timer overrun [ 780.168636][ T30] audit: type=1326 audit(1759263178.979:826): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15234 comm="syz.3.2483" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f8b3df8eec9 code=0x7ffc0000 [ 780.172378][ T5940] usb 2-1: config 12 interface 4 altsetting 0 endpoint 0xC has invalid maxpacket 1024, setting to 64 [ 780.214941][ T5940] usb 2-1: config 12 interface 4 altsetting 0 has a duplicate endpoint with address 0xA, skipping [ 780.249877][ T5940] usb 2-1: config 12 interface 4 altsetting 0 has a duplicate endpoint with address 0x6, skipping [ 780.421608][ T5940] usb 2-1: config 12 interface 4 altsetting 0 has a duplicate endpoint with address 0x3, skipping [ 780.503470][ T5940] usb 2-1: config 12 interface 4 altsetting 0 endpoint 0xF has an invalid bInterval 199, changing to 4 [ 780.590724][ T5940] usb 2-1: config 12 interface 4 altsetting 0 endpoint 0xF has invalid maxpacket 1024, setting to 1023 [ 780.685152][ T5940] usb 2-1: config 12 interface 106 altsetting 4 has a duplicate endpoint with address 0x6, skipping [ 780.754133][ T5940] usb 2-1: config 12 interface 106 altsetting 4 has a duplicate endpoint with address 0x8, skipping [ 780.789872][ T5940] usb 2-1: config 12 interface 106 altsetting 4 has a duplicate endpoint with address 0x4, skipping [ 780.855417][ T5940] usb 2-1: config 12 interface 106 altsetting 4 has 3 endpoint descriptors, different from the interface descriptor's value: 10 [ 780.916795][ T5940] usb 2-1: config 12 interface 227 altsetting 7 endpoint 0x9 has invalid maxpacket 1024, setting to 64 [ 780.944349][T15287] vlan2: entered promiscuous mode [ 780.955481][T15287] vlan2: entered allmulticast mode [ 780.961141][T15287] bridge0: entered allmulticast mode [ 780.991127][T15291] sctp: [Deprecated]: syz.2.2500 (pid 15291) Use of struct sctp_assoc_value in delayed_ack socket option. [ 780.991127][T15291] Use struct sctp_sack_info instead [ 780.994215][ T5940] usb 2-1: config 12 interface 227 altsetting 7 has a duplicate endpoint with address 0x8, skipping [ 781.094388][ T5940] usb 2-1: config 12 interface 227 altsetting 7 endpoint 0x1 has invalid maxpacket 1023, setting to 64 [ 781.119766][ T5940] usb 2-1: config 12 interface 227 altsetting 7 has an endpoint descriptor with address 0xA3, changing to 0x83 [ 781.174532][ T5940] usb 2-1: config 12 interface 227 altsetting 7 has a duplicate endpoint with address 0x83, skipping [ 781.190862][ T5940] usb 2-1: config 12 interface 227 altsetting 7 has 4 endpoint descriptors, different from the interface descriptor's value: 3 [ 781.205341][ T5940] usb 2-1: config 12 interface 3 has no altsetting 0 [ 781.215242][ T5940] usb 2-1: config 12 interface 106 has no altsetting 0 [ 781.216789][ T5914] usb 4-1: new low-speed USB device number 3 using dummy_hcd [ 781.274047][ T5940] usb 2-1: config 12 interface 227 has no altsetting 0 [ 781.287387][ T5940] usb 2-1: New USB device found, idVendor=1e0e, idProduct=9071, bcdDevice=28.fd [ 781.296921][ T5940] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 781.305281][ T5940] usb 2-1: Product: syz [ 781.338783][T15293] syz_tun: entered promiscuous mode [ 781.372960][ T5940] usb 2-1: Manufacturer: ╲밳뿜ã—訮濘è‚盬౸ [ 781.428987][ T5940] usb 2-1: SerialNumber: syz [ 781.501914][ T5914] usb 4-1: unable to get BOS descriptor or descriptor too short [ 781.536248][ T5914] usb 4-1: config 1 interface 0 altsetting 250 endpoint 0x1 is Bulk; changing to Interrupt [ 781.559810][ T5914] usb 4-1: config 1 interface 0 altsetting 250 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 781.586809][ T5914] usb 4-1: config 1 interface 0 has no altsetting 0 [ 781.713336][ T5914] usb 4-1: string descriptor 0 read error: -22 [ 781.724748][ T5914] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40 [ 781.757271][ T5914] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 781.802980][ T5940] usb 2-1: USB disconnect, device number 114 [ 781.836846][T15290] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 784.429969][ T43] usb 4-1: USB disconnect, device number 3 [ 785.032195][T15336] sctp: [Deprecated]: syz.2.2513 (pid 15336) Use of struct sctp_assoc_value in delayed_ack socket option. [ 785.032195][T15336] Use struct sctp_sack_info instead [ 785.684078][T15348] netlink: 7 bytes leftover after parsing attributes in process `syz.1.2518'. [ 785.714082][T15348] netlink: 16 bytes leftover after parsing attributes in process `syz.1.2518'. [ 786.216654][ T5914] usb 2-1: new full-speed USB device number 115 using dummy_hcd [ 786.418948][ T5914] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 786.447117][ T5914] usb 2-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFC, changing to 0x8C [ 786.498982][ T5914] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x8C has an invalid bInterval 0, changing to 10 [ 786.547954][ T5914] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x8C has invalid wMaxPacketSize 0 [ 786.563067][ T5914] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 786.589851][ T5914] usb 2-1: New USB device found, idVendor=045e, idProduct=0284, bcdDevice=a4.8f [ 786.599739][ T5914] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 786.620286][ T5914] usb 2-1: Product: syz [ 786.654396][ T5914] usb 2-1: Manufacturer: syz [ 786.685043][ T5914] usb 2-1: SerialNumber: syz [ 786.704567][T15361] netlink: 28 bytes leftover after parsing attributes in process `syz.2.2520'. [ 786.720613][T15360] netlink: 'syz.0.2521': attribute type 10 has an invalid length. [ 786.721881][ T5914] usb 2-1: config 0 descriptor?? [ 786.752199][ T5914] xbox_remote_probe: endpoint_in message size==0? [ 786.759176][T15361] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2520'. [ 786.761175][T15360] bond0: (slave wlan1): Enslaving as an active interface with an up link [ 786.912017][T15362] mac80211_hwsim hwsim30 wlan1: entered allmulticast mode [ 786.995281][ T5914] usb 2-1: USB disconnect, device number 115 [ 787.534403][T15372] sctp: [Deprecated]: syz.2.2525 (pid 15372) Use of struct sctp_assoc_value in delayed_ack socket option. [ 787.534403][T15372] Use struct sctp_sack_info instead [ 787.762485][T15380] netlink: 'syz.1.2527': attribute type 4 has an invalid length. [ 787.784762][ T5944] usb 4-1: new high-speed USB device number 4 using dummy_hcd [ 787.815886][T15380] netlink: 'syz.1.2527': attribute type 4 has an invalid length. [ 788.466511][ T5944] usb 4-1: device descriptor read/64, error -71 [ 788.916734][ T5944] usb 4-1: new high-speed USB device number 5 using dummy_hcd [ 789.254129][ T5944] usb 4-1: device descriptor read/64, error -71 [ 789.416713][ T5944] usb usb4-port1: attempt power cycle [ 789.806550][ T5944] usb 4-1: new high-speed USB device number 6 using dummy_hcd [ 789.827371][ T5944] usb 4-1: device descriptor read/8, error -71 [ 789.870188][T15420] fuse: Bad value for 'fd' [ 789.895872][T15420] loop6: detected capacity change from 0 to 524288000 [ 789.988932][T15424] sctp: [Deprecated]: syz.0.2539 (pid 15424) Use of struct sctp_assoc_value in delayed_ack socket option. [ 789.988932][T15424] Use struct sctp_sack_info instead [ 790.175514][T15427] netlink: 168 bytes leftover after parsing attributes in process `syz.0.2540'. [ 790.196976][ T5944] usb 4-1: new high-speed USB device number 7 using dummy_hcd [ 790.257671][ T5944] usb 4-1: device descriptor read/8, error -71 [ 790.378714][ T5944] usb usb4-port1: unable to enumerate USB device [ 790.475722][T15434] netlink: 32 bytes leftover after parsing attributes in process `syz.0.2541'. [ 791.026118][ T5940] usb 2-1: new high-speed USB device number 116 using dummy_hcd [ 791.318507][ T5940] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x7 has invalid wMaxPacketSize 0 [ 791.349855][ T5940] usb 2-1: config 0 interface 0 altsetting 0 bulk endpoint 0x7 has invalid maxpacket 0 [ 791.388521][ T5940] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x89 has invalid wMaxPacketSize 0 [ 791.427909][ T5940] usb 2-1: New USB device found, idVendor=2040, idProduct=2000, bcdDevice=65.72 [ 791.449180][ T5940] usb 2-1: New USB device strings: Mfr=151, Product=0, SerialNumber=0 [ 791.457820][ T5940] usb 2-1: Manufacturer: syz [ 791.465630][ T5940] usb 2-1: config 0 descriptor?? [ 791.525566][T15421] syz.4.2534 (15421): drop_caches: 2 [ 791.535505][ T5940] smsusb:smsusb_probe: board id=9, interface number 0 [ 791.544439][ T5940] smsusb:smsusb_probe: Device initialized with return code -19 [ 791.758201][T15438] program syz.1.2543 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 791.973533][T15452] netlink: 36 bytes leftover after parsing attributes in process `syz.1.2543'. [ 794.073485][T15470] sctp: [Deprecated]: syz.2.2550 (pid 15470) Use of struct sctp_assoc_value in delayed_ack socket option. [ 794.073485][T15470] Use struct sctp_sack_info instead [ 794.536056][T15476] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2551'. [ 794.640307][T15479] hsr0: entered promiscuous mode [ 794.732590][T15485] FAULT_INJECTION: forcing a failure. [ 794.732590][T15485] name failslab, interval 1, probability 0, space 0, times 0 [ 794.768320][T15485] CPU: 1 UID: 0 PID: 15485 Comm: syz.0.2553 Not tainted syzkaller #0 PREEMPT(full) [ 794.768346][T15485] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 794.768357][T15485] Call Trace: [ 794.768366][T15485] [ 794.768376][T15485] dump_stack_lvl+0x189/0x250 [ 794.768403][T15485] ? __pfx____ratelimit+0x10/0x10 [ 794.768424][T15485] ? __pfx_dump_stack_lvl+0x10/0x10 [ 794.768445][T15485] ? __pfx__printk+0x10/0x10 [ 794.768468][T15485] ? __pfx___might_resched+0x10/0x10 [ 794.768485][T15485] ? fs_reclaim_acquire+0x7d/0x100 [ 794.768508][T15485] should_fail_ex+0x414/0x560 [ 794.768539][T15485] should_failslab+0xa8/0x100 [ 794.768566][T15485] __kmalloc_cache_noprof+0x70/0x3d0 [ 794.768590][T15485] ? __rdma_create_id+0x66/0x640 [ 794.768613][T15485] ? __pfx_ucma_event_handler+0x10/0x10 [ 794.768636][T15485] ? __pfx_ucma_event_handler+0x10/0x10 [ 794.768656][T15485] __rdma_create_id+0x66/0x640 [ 794.768677][T15485] ? do_raw_spin_unlock+0x122/0x240 [ 794.768701][T15485] ? __pfx_ucma_event_handler+0x10/0x10 [ 794.768721][T15485] rdma_create_user_id+0x82/0xc0 [ 794.768747][T15485] ucma_create_id+0x206/0x360 [ 794.768770][T15485] ? __pfx_ucma_create_id+0x10/0x10 [ 794.768806][T15485] ucma_write+0x246/0x2e0 [ 794.768837][T15485] ? __pfx_ucma_write+0x10/0x10 [ 794.768856][T15485] ? security_file_permission+0x75/0x290 [ 794.768881][T15485] ? rw_verify_area+0x255/0x4d0 [ 794.768909][T15485] vfs_writev+0x4b6/0x960 [ 794.768930][T15485] ? __pfx_ucma_write+0x10/0x10 [ 794.768953][T15485] ? __pfx_vfs_writev+0x10/0x10 [ 794.768986][T15485] ? __fget_files+0x2a/0x420 [ 794.769008][T15485] ? __fget_files+0x3a0/0x420 [ 794.769024][T15485] ? __fget_files+0x2a/0x420 [ 794.769049][T15485] do_writev+0x14d/0x2d0 [ 794.769070][T15485] ? __pfx_do_writev+0x10/0x10 [ 794.769085][T15485] ? rcu_is_watching+0x15/0xb0 [ 794.769110][T15485] ? do_syscall_64+0xbe/0x3b0 [ 794.769133][T15485] do_syscall_64+0xfa/0x3b0 [ 794.769152][T15485] ? lockdep_hardirqs_on+0x9c/0x150 [ 794.769170][T15485] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 794.769188][T15485] ? clear_bhb_loop+0x60/0xb0 [ 794.769210][T15485] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 794.769227][T15485] RIP: 0033:0x7f5c56d8eec9 [ 794.769247][T15485] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 794.769263][T15485] RSP: 002b:00007f5c57c28038 EFLAGS: 00000246 ORIG_RAX: 0000000000000014 [ 794.769282][T15485] RAX: ffffffffffffffda RBX: 00007f5c56fe5fa0 RCX: 00007f5c56d8eec9 [ 794.769295][T15485] RDX: 0000000000000003 RSI: 0000200000000000 RDI: 0000000000000004 [ 794.769307][T15485] RBP: 00007f5c57c28090 R08: 0000000000000000 R09: 0000000000000000 [ 794.769319][T15485] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 794.769330][T15485] R13: 00007f5c56fe6038 R14: 00007f5c56fe5fa0 R15: 00007f5c5710fa28 [ 794.769358][T15485] [ 795.100421][ T5940] usb 2-1: USB disconnect, device number 116 [ 795.259225][T15478] hsr0: left promiscuous mode [ 795.828783][ T5907] usb 1-1: new high-speed USB device number 104 using dummy_hcd [ 796.357992][ T5907] usb 1-1: config 0 has 1 interface, different from the descriptor's value: 5 [ 796.666957][ T5907] usb 1-1: config 0 has no interface number 0 [ 796.750088][ T5907] usb 1-1: config 0 interface 1 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 796.808237][ T5907] usb 1-1: config 0 interface 1 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 796.933392][ T5907] usb 1-1: New USB device found, idVendor=256c, idProduct=006d, bcdDevice= 0.00 [ 796.962680][ T5907] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 796.988985][ T5907] usb 1-1: config 0 descriptor?? [ 797.145089][T15498] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2557'. [ 797.199833][T15510] netlink: 'syz.3.2558': attribute type 4 has an invalid length. [ 797.264471][T15512] netlink: 'syz.3.2558': attribute type 4 has an invalid length. [ 797.284028][T15513] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2557'. [ 797.904917][T15490] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 798.248479][T15490] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 798.434506][T15490] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 798.491531][T15490] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 799.127426][ T5907] usbhid 1-1:0.1: can't add hid device: -71 [ 799.133475][ T5907] usbhid 1-1:0.1: probe with driver usbhid failed with error -71 [ 799.893741][ T5907] usb 1-1: USB disconnect, device number 104 [ 800.358589][T15527] sctp: [Deprecated]: syz.0.2562 (pid 15527) Use of struct sctp_assoc_value in delayed_ack socket option. [ 800.358589][T15527] Use struct sctp_sack_info instead [ 800.574586][T15534] netlink: 'syz.4.2564': attribute type 4 has an invalid length. [ 800.611756][T15534] netlink: 'syz.4.2564': attribute type 4 has an invalid length. [ 801.087904][T15536] netlink: 'syz.2.2563': attribute type 4 has an invalid length. [ 801.176148][T15539] netlink: 'syz.2.2563': attribute type 4 has an invalid length. [ 802.046839][ T5944] usb 1-1: new high-speed USB device number 105 using dummy_hcd [ 802.189142][T15549] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 802.246730][ T5944] usb 1-1: Using ep0 maxpacket: 8 [ 802.262847][ T5944] usb 1-1: New USB device found, idVendor=04a5, idProduct=3003, bcdDevice=3a.b2 [ 802.274801][ T5944] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 802.296135][ T5944] usb 1-1: Product: syz [ 802.315257][ T5944] usb 1-1: Manufacturer: syz [ 802.332735][ T5944] usb 1-1: SerialNumber: syz [ 802.351700][ T5944] usb 1-1: config 0 descriptor?? [ 802.582661][ T5944] gspca_main: sunplus-2.14.0 probing 04a5:3003 [ 803.051256][T15544] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2567'. [ 803.080154][ T5944] gspca_sunplus: reg_w_riv err -71 [ 803.085582][ T5944] sunplus 1-1:0.0: probe with driver sunplus failed with error -71 [ 803.134049][ T5944] usb 1-1: USB disconnect, device number 105 [ 803.462375][T15573] sctp: [Deprecated]: syz.1.2575 (pid 15573) Use of struct sctp_assoc_value in delayed_ack socket option. [ 803.462375][T15573] Use struct sctp_sack_info instead [ 803.526656][ T43] usb 5-1: new high-speed USB device number 6 using dummy_hcd [ 803.776584][ T43] usb 5-1: Using ep0 maxpacket: 8 [ 803.785805][ T43] usb 5-1: config 0 has an invalid interface number: 63 but max is 0 [ 803.794803][ T43] usb 5-1: config 0 has no interface number 0 [ 803.819440][ T43] usb 5-1: config 0 interface 63 altsetting 119 has 0 endpoint descriptors, different from the interface descriptor's value: 4 [ 803.833850][ T43] usb 5-1: config 0 interface 63 has no altsetting 0 [ 803.851219][ T43] usb 5-1: New USB device found, idVendor=046d, idProduct=0896, bcdDevice=3a.11 [ 803.861621][ T43] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 803.966490][ T5944] usb 1-1: new high-speed USB device number 106 using dummy_hcd [ 803.976927][ T43] usb 5-1: Product: syz [ 803.996607][ T43] usb 5-1: Manufacturer: syz [ 804.006860][ T43] usb 5-1: SerialNumber: syz [ 804.017536][ T43] usb 5-1: config 0 descriptor?? [ 804.035396][ T43] gspca_main: vc032x-2.14.0 probing 046d:0896 [ 804.158168][ T5944] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 804.170377][ T5944] usb 1-1: New USB device found, idVendor=046d, idProduct=c222, bcdDevice= 0.00 [ 804.250303][T15567] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 804.346763][ T5944] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 804.348292][T15567] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 804.373587][ T5944] usb 1-1: config 0 descriptor?? [ 804.549666][ T43] gspca_vc032x: reg_r err -110 [ 804.555470][ T43] vc032x 5-1:0.63: probe with driver vc032x failed with error -110 [ 804.826512][T10421] usb 4-1: new high-speed USB device number 8 using dummy_hcd [ 804.880796][T15587] fuse: Unknown parameter '0x0000000000000003' [ 804.976804][T10421] usb 4-1: Using ep0 maxpacket: 8 [ 804.983776][T10421] usb 4-1: config 179 has an invalid interface number: 65 but max is 0 [ 804.992776][T10421] usb 4-1: config 179 has no interface number 0 [ 805.012186][T10421] usb 4-1: config 179 interface 65 altsetting 12 endpoint 0xF has an invalid bInterval 64, changing to 10 [ 805.037307][T10421] usb 4-1: config 179 interface 65 altsetting 12 endpoint 0xF has invalid maxpacket 1029, setting to 1024 [ 805.053355][T10421] usb 4-1: config 179 interface 65 altsetting 12 endpoint 0x83 has an invalid bInterval 102, changing to 10 [ 805.073405][T10421] usb 4-1: config 179 interface 65 altsetting 12 endpoint 0x83 has invalid maxpacket 24624, setting to 1024 [ 805.085930][T10421] usb 4-1: config 179 interface 65 altsetting 12 has 2 endpoint descriptors, different from the interface descriptor's value: 23 [ 805.100018][T10421] usb 4-1: config 179 interface 65 has no altsetting 0 [ 805.107790][T15590] netem: incorrect gi model size [ 805.114807][T10421] usb 4-1: New USB device found, idVendor=12ab, idProduct=0004, bcdDevice= 0.00 [ 805.126243][T10421] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 805.134122][T15590] netem: change failed [ 805.211105][T15583] raw-gadget.3 gadget.3: fail, usb_ep_enable returned -22 [ 805.244677][T10421] input: Honey Bee Xbox360 dancepad as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:179.65/input/input31 [ 805.309106][ T5944] lg-g15 0003:046D:C222.0019: item fetching failed at offset 5/7 [ 805.317241][ T5198] input input31: unable to receive magic message: -110 [ 805.334561][ T5198] input input31: unable to receive magic message: -32 [ 805.344132][ T5198] input input31: unable to receive magic message: -32 [ 805.376037][ T5198] input input31: unable to receive magic message: -32 [ 805.384512][ T5944] lg-g15 0003:046D:C222.0019: probe with driver lg-g15 failed with error -22 [ 805.468877][T15583] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 805.484397][ T5961] input input31: unable to receive magic message: -32 [ 805.491413][T15593] loop6: detected capacity change from 0 to 524287999 [ 805.504637][T15583] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 805.549110][T10421] usb 4-1: USB disconnect, device number 8 [ 805.555014][ C0] xpad 4-1:179.65: xpad_irq_in - usb_submit_urb failed with result -19 [ 805.555049][ C0] xpad 4-1:179.65: xpad_irq_out - usb_submit_urb failed with result -19 [ 806.063859][T15603] netlink: 'syz.1.2582': attribute type 3 has an invalid length. [ 806.073932][T15603] netlink: 199836 bytes leftover after parsing attributes in process `syz.1.2582'. [ 806.126253][ T5914] usb 5-1: USB disconnect, device number 6 [ 806.234428][T15607] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 806.247259][T15607] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 806.614309][ T43] usb 1-1: USB disconnect, device number 106 [ 806.636932][ T5944] usb 4-1: new high-speed USB device number 9 using dummy_hcd [ 806.808740][ T5944] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 806.822788][ T5944] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 806.833714][ T5944] usb 4-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 806.918482][ T5944] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 806.966669][ T5944] usb 4-1: SerialNumber: syz [ 806.974611][T15614] netlink: 28 bytes leftover after parsing attributes in process `syz.4.2586'. [ 807.406673][T15614] netlink: 28 bytes leftover after parsing attributes in process `syz.4.2586'. [ 807.434464][T15614] ip6gretap0: entered promiscuous mode [ 807.743996][T15614] ip6gretap0: left promiscuous mode [ 807.908692][ T5944] usb 4-1: 0:2 : does not exist [ 807.913622][ T5944] usb 4-1: unit 5 not found! [ 807.938044][ T5944] usb 4-1: USB disconnect, device number 9 [ 808.003666][ T6244] udevd[6244]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 808.092682][T15625] sctp: [Deprecated]: syz.4.2587 (pid 15625) Use of struct sctp_assoc_value in delayed_ack socket option. [ 808.092682][T15625] Use struct sctp_sack_info instead [ 808.364142][ T5914] usb 2-1: new high-speed USB device number 117 using dummy_hcd [ 808.516491][ T5914] usb 2-1: Using ep0 maxpacket: 32 [ 808.524445][ T5914] usb 2-1: config index 0 descriptor too short (expected 29220, got 36) [ 808.540988][ T5914] usb 2-1: config 0 has too many interfaces: 81, using maximum allowed: 32 [ 808.622308][ T5914] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 808.643916][ T5914] usb 2-1: config 0 has 1 interface, different from the descriptor's value: 81 [ 808.696658][ T1299] ieee802154 phy0 wpan0: encryption failed: -22 [ 808.703161][ T1299] ieee802154 phy1 wpan1: encryption failed: -22 [ 808.713764][ T5914] usb 2-1: config 0 interface 0 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 808.725101][ T5914] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 18 [ 808.739661][ T5914] usb 2-1: New USB device found, idVendor=03f0, idProduct=6c17, bcdDevice= 0.40 [ 808.741894][T15641] netlink: 6 bytes leftover after parsing attributes in process `syz.3.2590'. [ 808.749493][ T5914] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 808.787491][ T5914] usb 2-1: config 0 descriptor?? [ 808.839736][T15641] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 808.958149][T15641] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2590'. [ 809.023332][T10421] usb 2-1: USB disconnect, device number 117 [ 809.063297][T15647] netlink: 'syz.2.2591': attribute type 4 has an invalid length. [ 809.210252][T15652] netlink: 'syz.2.2591': attribute type 4 has an invalid length. [ 809.393221][ T5914] usb 4-1: new high-speed USB device number 10 using dummy_hcd [ 809.481722][T10421] usb 2-1: new high-speed USB device number 118 using dummy_hcd [ 809.576752][ T5914] usb 4-1: Using ep0 maxpacket: 8 [ 809.583760][ T5914] usb 4-1: config 0 interface 0 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 809.612194][ T5914] usb 4-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0x9A, changing to 0x8A [ 809.646444][T10421] usb 2-1: Using ep0 maxpacket: 32 [ 809.790711][T10421] usb 2-1: config index 0 descriptor too short (expected 29220, got 36) [ 809.815712][ T5914] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x8A has an invalid bInterval 0, changing to 7 [ 809.828117][T10421] usb 2-1: config 0 has too many interfaces: 81, using maximum allowed: 32 [ 810.062797][T10421] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 810.102266][ T5914] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x8A has invalid wMaxPacketSize 0 [ 810.143154][T10421] usb 2-1: config 0 has 1 interface, different from the descriptor's value: 81 [ 810.154106][ T5914] usb 4-1: config 0 interface 0 altsetting 0 has 4 endpoint descriptors, different from the interface descriptor's value: 3 [ 810.183639][T10421] usb 2-1: config 0 interface 0 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 810.197524][T10421] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 18 [ 810.240891][T10421] usb 2-1: New USB device found, idVendor=03f0, idProduct=6c17, bcdDevice= 0.40 [ 810.258216][ T5914] usb 4-1: New USB device found, idVendor=07c0, idProduct=1505, bcdDevice=b8.c5 [ 810.267707][T10421] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 810.277565][ T5914] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 810.290038][ T5914] usb 4-1: Product: syz [ 810.295747][ T5914] usb 4-1: Manufacturer: syz [ 810.302685][T10421] usb 2-1: config 0 descriptor?? [ 810.316684][ T5914] usb 4-1: SerialNumber: syz [ 810.333921][ T5914] usb 4-1: config 0 descriptor?? [ 810.896508][T10421] usb 3-1: new high-speed USB device number 119 using dummy_hcd [ 810.897569][T15675] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 810.952727][T15675] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 811.066868][T10421] usb 3-1: Using ep0 maxpacket: 16 [ 811.087866][T10421] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 811.107530][ T5907] usb 2-1: USB disconnect, device number 118 [ 811.121032][T10421] usb 3-1: New USB device found, idVendor=046d, idProduct=c513, bcdDevice= 0.00 [ 811.146537][T10421] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 811.208547][T10421] usb 3-1: config 0 descriptor?? [ 811.235669][T15682] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 811.255959][T15682] iommufd_mock iommufd_mock1: Adding to iommu group 1 [ 811.341624][T15684] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2600'. [ 811.374543][T15686] sctp: [Deprecated]: syz.4.2599 (pid 15686) Use of struct sctp_assoc_value in delayed_ack socket option. [ 811.374543][T15686] Use struct sctp_sack_info instead [ 811.581869][T15695] fuse: Bad value for 'fd' [ 811.599347][T15695] loop6: detected capacity change from 0 to 524288000 [ 811.652916][T10421] logitech-djreceiver 0003:046D:C513.001A: unknown main item tag 0x0 [ 811.678146][T10421] logitech-djreceiver 0003:046D:C513.001A: unknown main item tag 0x0 [ 811.692006][T10421] logitech-djreceiver 0003:046D:C513.001A: unknown main item tag 0x0 [ 811.774179][T10421] logitech-djreceiver 0003:046D:C513.001A: unknown main item tag 0x0 [ 811.829286][T10421] logitech-djreceiver 0003:046D:C513.001A: unknown main item tag 0x0 [ 811.835776][T15698] fuse: Bad value for 'fd' [ 811.904078][T10421] usb 3-1: USB disconnect, device number 119 [ 812.087425][ T5914] iowarrior 4-1:0.0: IOWarrior product=0x1505, serial=42424242 interface=0 now attached to iowarrior0 [ 812.132774][ T5914] usb 4-1: USB disconnect, device number 10 [ 812.601906][ T5914] usb 4-1: new high-speed USB device number 11 using dummy_hcd [ 812.770104][ T5914] usb 4-1: config 0 has no interfaces? [ 812.775861][ T5914] usb 4-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 812.785667][ T5914] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 812.840070][ T5914] usb 4-1: config 0 descriptor?? [ 813.177205][T15701] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 813.194902][T15701] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 813.236105][ T43] usb 4-1: USB disconnect, device number 11 [ 813.854682][T15715] netlink: 'syz.0.2607': attribute type 4 has an invalid length. [ 813.955544][T15716] netlink: 'syz.0.2607': attribute type 4 has an invalid length. [ 813.971963][ T5944] usb 4-1: new high-speed USB device number 12 using dummy_hcd [ 814.656790][ T5944] usb 4-1: Using ep0 maxpacket: 16 [ 814.696104][ T5944] usb 4-1: config 1 has an invalid descriptor of length 1, skipping remainder of the config [ 814.712891][ T5944] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 814.768063][ T5944] usb 4-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 1.40 [ 814.793136][ T5944] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 814.806415][ T5944] usb 4-1: Product: syz [ 814.810631][ T5944] usb 4-1: Manufacturer: syz [ 814.822453][ T5944] usb 4-1: SerialNumber: syz [ 815.096600][ T5940] usb 5-1: new high-speed USB device number 7 using dummy_hcd [ 815.243630][ T5944] usb 4-1: 0:2 : does not exist [ 815.287372][ T5940] usb 5-1: Using ep0 maxpacket: 8 [ 815.301885][ T5940] usb 5-1: config 179 has an invalid interface number: 65 but max is 0 [ 815.314369][ T5940] usb 5-1: config 179 has no interface number 0 [ 815.343605][ T5940] usb 5-1: config 179 interface 65 altsetting 0 endpoint 0xF has an invalid bInterval 0, changing to 7 [ 815.374583][ T5940] usb 5-1: config 179 interface 65 altsetting 0 endpoint 0xF has invalid maxpacket 1025, setting to 1024 [ 815.463519][ T5940] usb 5-1: config 179 interface 65 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 815.487375][ T5940] usb 5-1: config 179 interface 65 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 23 [ 815.504283][ T5940] usb 5-1: New USB device found, idVendor=12ab, idProduct=90a3, bcdDevice=1e.eb [ 815.521856][ T5940] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 815.543505][T15727] raw-gadget.2 gadget.4: fail, usb_ep_enable returned -22 [ 815.749836][ T5944] usb 4-1: 5:0: failed to get current value for ch 0 (-22) [ 815.797190][ T5944] usb 4-1: 5:0: cannot get min/max values for control 3 (id 5) [ 815.812885][ T5940] input: Generic X-Box pad as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:179.65/input/input32 [ 815.857523][T15736] sctp: [Deprecated]: syz.0.2613 (pid 15736) Use of struct sctp_assoc_value in delayed_ack socket option. [ 815.857523][T15736] Use struct sctp_sack_info instead [ 815.877895][ T5944] usb 4-1: 5:0: cannot get min/max values for control 4 (id 5) [ 816.036458][ T5944] usb 4-1: 5:0: cannot get min/max values for control 3 (id 5) [ 816.082800][ T5944] usb 4-1: USB disconnect, device number 12 [ 816.211753][ T6244] udevd[6244]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 817.891162][T15741] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2614'. [ 817.953425][T15751] vlan0: entered promiscuous mode [ 817.977494][T15751] vlan0: entered allmulticast mode [ 818.240889][ T5944] usb 5-1: USB disconnect, device number 7 [ 818.246945][ C1] xpad 5-1:179.65: xpad_irq_in - usb_submit_urb failed with result -19 [ 818.246980][ C1] xpad 5-1:179.65: xpad_irq_out - usb_submit_urb failed with result -19 [ 818.539619][T15758] netlink: 16 bytes leftover after parsing attributes in process `syz.0.2620'. [ 819.692757][T15764] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 820.010426][ T5914] usb 1-1: new high-speed USB device number 107 using dummy_hcd [ 820.270260][ T5914] usb 1-1: New USB device found, idVendor=0424, idProduct=7850, bcdDevice= 0.00 [ 820.280018][ T5914] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 820.311723][ T5914] usb 1-1: Product: syz [ 820.346069][ T5914] usb 1-1: Manufacturer: syz [ 820.376540][ T5914] usb 1-1: SerialNumber: syz [ 820.736754][T10646] usb 2-1: new high-speed USB device number 119 using dummy_hcd [ 820.909013][T10646] usb 2-1: Using ep0 maxpacket: 32 [ 820.954726][T15792] input: syz1 as /devices/virtual/input/input33 [ 821.000434][T10646] usb 2-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xA6, changing to 0x86 [ 821.019850][T10646] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x86 has an invalid bInterval 0, changing to 7 [ 821.075120][T15792] netlink: 'syz.4.2629': attribute type 1 has an invalid length. [ 821.098877][T10646] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x86 has invalid wMaxPacketSize 0 [ 821.298783][T15793] gretap1: entered allmulticast mode [ 821.313915][T10646] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x7 has an invalid bInterval 0, changing to 7 [ 821.333638][T10646] usb 2-1: New USB device found, idVendor=05ef, idProduct=020a, bcdDevice=91.36 [ 821.343592][T10646] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 821.362467][T10646] usb 2-1: Product: syz [ 821.374705][T15793] bond3: (slave gretap1): making interface the new active one [ 821.382527][T10646] usb 2-1: Manufacturer: syz [ 821.392667][T10646] usb 2-1: SerialNumber: syz [ 821.405932][ T5914] lan78xx 1-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000118. ret = -EPIPE [ 821.411176][T10646] usb 2-1: config 0 descriptor?? [ 821.419560][ T5914] lan78xx 1-1:1.0 (unnamed net_device) (uninitialized): Registers INIT FAILED.... [ 821.449353][T15793] bond3: (slave gretap1): Enslaving as an active interface with an up link [ 821.462796][ T5914] lan78xx 1-1:1.0 (unnamed net_device) (uninitialized): Bind routine FAILED [ 821.544057][ T5914] lan78xx 1-1:1.0: probe with driver lan78xx failed with error -32 [ 821.730254][ T5944] usb 4-1: new full-speed USB device number 13 using dummy_hcd [ 821.854443][ T5914] usb 1-1: USB disconnect, device number 107 [ 821.937169][T10646] iforce 2-1:0.0: usb_submit_urb failed: -32 [ 821.943727][T15786] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 821.966068][T15786] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 821.976784][ T5944] usb 4-1: device descriptor read/64, error -71 [ 822.084183][T10646] iforce 2-1:0.0: usb_submit_urb failed: -71 [ 822.125597][T10646] iforce 2-1:0.0: usb_submit_urb failed: -71 [ 822.132121][T10646] iforce 2-1:0.0: usb_submit_urb failed: -71 [ 822.138824][T10646] iforce 2-1:0.0: usb_submit_urb failed: -71 [ 822.155755][T10646] iforce 2-1:0.0: usb_submit_urb failed: -71 [ 822.223316][T10646] iforce 2-1:0.0: usb_submit_urb failed: -71 [ 822.237095][T10646] iforce 2-1:0.0: usb_submit_urb failed: -71 [ 822.245573][T10646] iforce 2-1:0.0: usb_submit_urb failed: -71 [ 822.252769][T10646] iforce 2-1:0.0: usb_submit_urb failed: -71 [ 822.259553][T10646] iforce 2-1:0.0: usb_submit_urb failed: -71 [ 822.269300][T10646] iforce 2-1:0.0: usb_submit_urb failed: -71 [ 822.276525][ T5944] usb 4-1: new full-speed USB device number 14 using dummy_hcd [ 822.285356][T10646] iforce 2-1:0.0: usb_submit_urb failed: -71 [ 822.292306][T10646] iforce 2-1:0.0: usb_submit_urb failed: -71 [ 822.299158][T10646] iforce 2-1:0.0: usb_submit_urb failed: -71 [ 822.305614][T10646] iforce 2-1:0.0: usb_submit_urb failed: -71 [ 822.313254][T10646] iforce 2-1:0.0: usb_submit_urb failed: -71 [ 822.321581][T10646] iforce 2-1:0.0: usb_submit_urb failed: -71 [ 822.328458][T10646] iforce 2-1:0.0: usb_submit_urb failed: -71 [ 822.335382][T10646] input input34: Timeout waiting for response from device. [ 822.382971][T10646] usb 2-1: USB disconnect, device number 119 [ 822.426523][ T5944] usb 4-1: device descriptor read/64, error -71 [ 822.456594][ T5940] usb 3-1: new high-speed USB device number 120 using dummy_hcd [ 822.549796][ T5944] usb usb4-port1: attempt power cycle [ 822.611897][T15813] netlink: 24 bytes leftover after parsing attributes in process `syz.4.2633'. [ 822.642657][ T5940] usb 3-1: Using ep0 maxpacket: 16 [ 822.661145][ T5940] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 822.673041][ T5940] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 822.686626][ T5940] usb 3-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 822.697538][ T5940] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 822.705774][ T5940] usb 3-1: Product: syz [ 822.710309][ T5940] usb 3-1: Manufacturer: syz [ 822.716718][ T5940] usb 3-1: SerialNumber: syz [ 822.896523][ T5944] usb 4-1: new full-speed USB device number 15 using dummy_hcd [ 822.920115][ T5944] usb 4-1: device descriptor read/8, error -71 [ 822.976689][ T43] usb 2-1: new high-speed USB device number 120 using dummy_hcd [ 823.139814][ T43] usb 2-1: config 220 has an invalid interface number: 76 but max is 2 [ 823.150542][ T43] usb 2-1: config 220 contains an unexpected descriptor of type 0x2, skipping [ 823.166587][ T43] usb 2-1: config 220 has an invalid descriptor of length 0, skipping remainder of the config [ 823.177370][ T5944] usb 4-1: new full-speed USB device number 16 using dummy_hcd [ 823.186523][ T43] usb 2-1: config 220 has no interface number 2 [ 823.197931][ T43] usb 2-1: config 220 interface 1 altsetting 5 has 0 endpoint descriptors, different from the interface descriptor's value: 12 [ 823.216177][ T5944] usb 4-1: device descriptor read/8, error -71 [ 823.225681][ T43] usb 2-1: config 220 interface 0 has no altsetting 0 [ 823.237380][ T43] usb 2-1: config 220 interface 76 has no altsetting 0 [ 823.245384][ T43] usb 2-1: config 220 interface 1 has no altsetting 0 [ 823.261569][ T43] usb 2-1: New USB device found, idVendor=8086, idProduct=0b07, bcdDevice=6c.b9 [ 823.271488][T10646] usb 5-1: new high-speed USB device number 8 using dummy_hcd [ 823.290757][ T43] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 823.299833][ T43] usb 2-1: Product: syz [ 823.304275][ T43] usb 2-1: Manufacturer: syz [ 823.310934][ T43] usb 2-1: SerialNumber: syz [ 823.327091][ T5944] usb usb4-port1: unable to enumerate USB device [ 823.438638][T10646] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x7 has invalid wMaxPacketSize 0 [ 823.448980][T10646] usb 5-1: config 0 interface 0 altsetting 0 bulk endpoint 0x7 has invalid maxpacket 0 [ 823.466853][T10646] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x89 has invalid wMaxPacketSize 0 [ 823.486577][T10646] usb 5-1: New USB device found, idVendor=2040, idProduct=2000, bcdDevice=65.72 [ 823.496676][T10646] usb 5-1: New USB device strings: Mfr=151, Product=0, SerialNumber=0 [ 823.504932][T10646] usb 5-1: Manufacturer: syz [ 823.551480][T15827] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2637'. [ 823.563811][ T30] kauditd_printk_skb: 16 callbacks suppressed [ 823.563828][ T30] audit: type=1326 audit(1759263223.249:843): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15820 comm="syz.0.2637" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5c56d8eec9 code=0x7ffc0000 [ 823.709737][T10646] usb 5-1: config 0 descriptor?? [ 823.728071][ T43] usb 2-1: Found UVC 7.01 device syz (8086:0b07) [ 823.734941][ T43] usb 2-1: No valid video chain found. [ 823.745714][ T43] usb 2-1: selecting invalid altsetting 0 [ 823.745720][ T30] audit: type=1326 audit(1759263223.249:844): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15820 comm="syz.0.2637" exe="/root/syz-executor" sig=0 arch=c000003e syscall=135 compat=0 ip=0x7f5c56d8eec9 code=0x7ffc0000 [ 823.745772][ T30] audit: type=1326 audit(1759263223.249:845): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15820 comm="syz.0.2637" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5c56d8eec9 code=0x7ffc0000 [ 823.804344][T10646] smsusb:smsusb_probe: board id=9, interface number 0 [ 823.927470][ T43] usb 2-1: selecting invalid altsetting 0 [ 823.933896][ T43] usbtest 2-1:220.1: probe with driver usbtest failed with error -22 [ 823.949795][T10646] smsusb:smsusb_probe: Device initialized with return code -19 [ 823.962422][T15825] program syz.4.2639 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 823.987247][ T43] usb 2-1: USB disconnect, device number 120 [ 824.212301][T15832] netlink: 36 bytes leftover after parsing attributes in process `syz.4.2639'. [ 824.274510][ T30] audit: type=1326 audit(1759263223.249:846): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15820 comm="syz.0.2637" exe="/root/syz-executor" sig=0 arch=c000003e syscall=314 compat=0 ip=0x7f5c56d8eec9 code=0x7ffc0000 [ 824.301364][ T30] audit: type=1326 audit(1759263223.249:847): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15820 comm="syz.0.2637" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5c56d8eec9 code=0x7ffc0000 [ 824.422568][ T30] audit: type=1326 audit(1759263223.249:848): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15820 comm="syz.0.2637" exe="/root/syz-executor" sig=0 arch=c000003e syscall=1 compat=0 ip=0x7f5c56d8eec9 code=0x7ffc0000 [ 824.872872][ T30] audit: type=1326 audit(1759263223.249:849): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15820 comm="syz.0.2637" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5c56d8eec9 code=0x7ffc0000 [ 824.964309][ T5940] usb 3-1: 0:2 : does not exist [ 825.005092][ T5940] usb 3-1: USB disconnect, device number 120 [ 825.086611][ T30] audit: type=1326 audit(1759263223.259:850): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15820 comm="syz.0.2637" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f5c56d8eec9 code=0x7ffc0000 [ 825.176212][ T30] audit: type=1326 audit(1759263223.259:851): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15820 comm="syz.0.2637" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5c56d8eec9 code=0x7ffc0000 [ 825.307431][T15850] fuse: Bad value for 'fd' [ 825.333796][T15850] loop6: detected capacity change from 0 to 524288000 [ 825.383912][ T30] audit: type=1326 audit(1759263223.259:852): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15820 comm="syz.0.2637" exe="/root/syz-executor" sig=0 arch=c000003e syscall=109 compat=0 ip=0x7f5c56d8eec9 code=0x7ffc0000 [ 826.915098][T10421] usb 5-1: USB disconnect, device number 8 [ 827.375269][T15885] netlink: 16 bytes leftover after parsing attributes in process `syz.0.2653'. [ 827.963934][T10421] usb 4-1: new high-speed USB device number 17 using dummy_hcd [ 828.165233][T10421] usb 4-1: config 0 has no interfaces? [ 828.361158][T10421] usb 4-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b [ 828.415882][T10421] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 828.427320][T10421] usb 4-1: Product: syz [ 828.432962][T10421] usb 4-1: Manufacturer: syz [ 828.519039][T10421] usb 4-1: SerialNumber: syz [ 828.645091][T10421] usb 4-1: config 0 descriptor?? [ 829.414321][T15905] loop6: detected capacity change from 0 to 524287999 [ 830.388655][T15920] sctp: [Deprecated]: syz.4.2662 (pid 15920) Use of struct sctp_assoc_value in delayed_ack socket option. [ 830.388655][T15920] Use struct sctp_sack_info instead [ 830.706702][T10421] usb 2-1: new full-speed USB device number 121 using dummy_hcd [ 830.802636][ T5914] usb 4-1: USB disconnect, device number 17 [ 830.870117][T10421] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 830.882873][T10421] usb 2-1: New USB device found, idVendor=1a34, idProduct=f705, bcdDevice= 0.00 [ 830.893981][T10421] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 830.909368][T10421] usb 2-1: config 0 descriptor?? [ 831.573437][T15942] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2668'. [ 831.583533][T15942] openvswitch: netlink: nsh attribute has 65532 unknown bytes. [ 831.592159][T15942] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 833.008536][T15955] sctp: [Deprecated]: syz.3.2674 (pid 15955) Use of struct sctp_assoc_value in delayed_ack socket option. [ 833.008536][T15955] Use struct sctp_sack_info instead [ 833.055304][T15957] fuse: Bad value for 'fd' [ 833.070003][T15957] loop6: detected capacity change from 0 to 524288000 [ 834.166669][ T30] kauditd_printk_skb: 24 callbacks suppressed [ 834.172217][ T30] audit: type=1800 audit(1759263233.899:877): pid=15976 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.4.2678" name="SYSV00000000" dev="hugetlbfs" ino=5 res=0 errno=0 [ 835.042630][T10421] usbhid 2-1:0.0: can't add hid device: -71 [ 835.049294][T10421] usbhid 2-1:0.0: probe with driver usbhid failed with error -71 [ 835.089423][T10421] usb 2-1: USB disconnect, device number 121 [ 835.566935][T15983] netlink: 16 bytes leftover after parsing attributes in process `syz.4.2680'. [ 836.067542][T16000] sctp: [Deprecated]: syz.4.2685 (pid 16000) Use of struct sctp_assoc_value in delayed_ack socket option. [ 836.067542][T16000] Use struct sctp_sack_info instead [ 836.075200][T15992] loop6: detected capacity change from 0 to 524287999 [ 836.645142][T16015] FAULT_INJECTION: forcing a failure. [ 836.645142][T16015] name failslab, interval 1, probability 0, space 0, times 0 [ 836.697064][T16015] CPU: 1 UID: 0 PID: 16015 Comm: syz.4.2689 Not tainted syzkaller #0 PREEMPT(full) [ 836.697097][T16015] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 836.697109][T16015] Call Trace: [ 836.697117][T16015] [ 836.697125][T16015] dump_stack_lvl+0x189/0x250 [ 836.697152][T16015] ? __pfx____ratelimit+0x10/0x10 [ 836.697172][T16015] ? __pfx_dump_stack_lvl+0x10/0x10 [ 836.697193][T16015] ? __pfx__printk+0x10/0x10 [ 836.697216][T16015] ? __pfx___might_resched+0x10/0x10 [ 836.697234][T16015] ? fs_reclaim_acquire+0x7d/0x100 [ 836.697258][T16015] should_fail_ex+0x414/0x560 [ 836.697288][T16015] should_failslab+0xa8/0x100 [ 836.697315][T16015] kmem_cache_alloc_noprof+0x73/0x3c0 [ 836.697337][T16015] ? ep_insert+0x272/0x19e0 [ 836.697359][T16015] ep_insert+0x272/0x19e0 [ 836.697391][T16015] ? __pfx_ep_insert+0x10/0x10 [ 836.697408][T16015] ? __pfx___mutex_lock+0x10/0x10 [ 836.697429][T16015] ? __fget_files+0x2a/0x420 [ 836.697450][T16015] ? __fget_files+0x2a/0x420 [ 836.697465][T16015] ? __fget_files+0x3a0/0x420 [ 836.697481][T16015] ? __fget_files+0x2a/0x420 [ 836.697507][T16015] do_epoll_ctl+0x7f4/0xe80 [ 836.697533][T16015] __x64_sys_epoll_ctl+0x163/0x1a0 [ 836.697554][T16015] ? __pfx___x64_sys_epoll_ctl+0x10/0x10 [ 836.697570][T16015] ? rcu_is_watching+0x15/0xb0 [ 836.697593][T16015] ? do_syscall_64+0xbe/0x3b0 [ 836.697616][T16015] do_syscall_64+0xfa/0x3b0 [ 836.697634][T16015] ? lockdep_hardirqs_on+0x9c/0x150 [ 836.697652][T16015] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 836.697670][T16015] ? clear_bhb_loop+0x60/0xb0 [ 836.697692][T16015] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 836.697709][T16015] RIP: 0033:0x7fc7e678eec9 [ 836.697726][T16015] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 836.697741][T16015] RSP: 002b:00007fc7e761c038 EFLAGS: 00000246 ORIG_RAX: 00000000000000e9 [ 836.697761][T16015] RAX: ffffffffffffffda RBX: 00007fc7e69e5fa0 RCX: 00007fc7e678eec9 [ 836.697774][T16015] RDX: 0000000000000004 RSI: 0000000000000001 RDI: 0000000000000003 [ 836.697785][T16015] RBP: 00007fc7e761c090 R08: 0000000000000000 R09: 0000000000000000 [ 836.697796][T16015] R10: 0000200000000000 R11: 0000000000000246 R12: 0000000000000001 [ 836.697808][T16015] R13: 00007fc7e69e6038 R14: 00007fc7e69e5fa0 R15: 00007fc7e6b0fa28 [ 836.697838][T16015] [ 837.356581][T16023] vlan2: entered promiscuous mode [ 837.376613][T16023] vlan2: entered allmulticast mode [ 837.382119][T16023] bridge0: entered allmulticast mode [ 837.777699][T16040] sctp: [Deprecated]: syz.0.2698 (pid 16040) Use of struct sctp_assoc_value in delayed_ack socket option. [ 837.777699][T16040] Use struct sctp_sack_info instead [ 838.246766][T10421] usb 1-1: new full-speed USB device number 108 using dummy_hcd [ 838.399782][T10421] usb 1-1: unable to get BOS descriptor or descriptor too short [ 838.439401][T10421] usb 1-1: not running at top speed; connect to a high speed hub [ 838.472415][T10421] usb 1-1: config 1 has an invalid interface number: 138 but max is 0 [ 838.481080][T10421] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 838.491833][T10421] usb 1-1: config 1 has no interface number 0 [ 838.498502][T10421] usb 1-1: config 1 interface 138 altsetting 252 endpoint 0x7 has invalid wMaxPacketSize 0 [ 838.513627][T10421] usb 1-1: config 1 interface 138 has no altsetting 0 [ 838.527047][T10421] usb 1-1: New USB device found, idVendor=0cb8, idProduct=c90b, bcdDevice= d.ae [ 838.537187][T10421] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 838.554264][T10421] usb 1-1: Product: syz [ 838.564435][T10421] usb 1-1: Manufacturer: syz [ 838.569355][T10421] usb 1-1: SerialNumber: syz [ 838.808604][T10421] usb 1-1: Quirk or no altset; falling back to MIDI 1.0 [ 838.887662][T10421] usb 1-1: USB disconnect, device number 108 [ 839.047510][ T6245] udevd[6245]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.138/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 839.357935][T16068] vlan0: entered promiscuous mode [ 839.363926][T16068] vlan0: entered allmulticast mode [ 839.400519][T16068] bridge0: entered allmulticast mode [ 839.474592][T16073] binder: 16072:16073 ioctl c018620c 200000000000 returned -22 [ 839.525292][T16073] binder: 16072:16073 ioctl c04064a0 2000000003c0 returned -22 [ 839.575139][T16073] binder: 16072:16073 ioctl c01864c6 200000000040 returned -22 [ 839.933783][T16082] sctp: [Deprecated]: syz.1.2709 (pid 16082) Use of struct sctp_assoc_value in delayed_ack socket option. [ 839.933783][T16082] Use struct sctp_sack_info instead [ 840.195916][T16086] sch_tbf: burst 19872 is lower than device lo mtu (11337746) ! [ 840.291317][T16088] usb usb8: usbfs: process 16088 (syz.0.2711) did not claim interface 0 before use [ 840.399441][T16093] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2713'. [ 841.256777][T16113] netlink: 830 bytes leftover after parsing attributes in process `syz.1.2719'. [ 841.479077][T10646] usb 5-1: new high-speed USB device number 9 using dummy_hcd [ 841.646797][T10646] usb 5-1: Using ep0 maxpacket: 32 [ 841.657704][T10646] usb 5-1: config 0 has an invalid interface number: 9 but max is 0 [ 841.687166][T10646] usb 5-1: config 0 has no interface number 0 [ 841.721179][T10646] usb 5-1: New USB device found, idVendor=06a2, idProduct=0003, bcdDevice=b4.8c [ 841.771205][T10646] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 841.793096][T10646] usb 5-1: Product: syz [ 841.805238][T10646] usb 5-1: Manufacturer: syz [ 841.814839][T16118] sctp: [Deprecated]: syz.3.2722 (pid 16118) Use of struct sctp_assoc_value in delayed_ack socket option. [ 841.814839][T16118] Use struct sctp_sack_info instead [ 841.821928][T10646] usb 5-1: SerialNumber: syz [ 841.913464][T10646] usb 5-1: config 0 descriptor?? [ 841.947624][T10646] gspca_main: gspca_topro-2.14.0 probing 06a2:0003 [ 842.164759][T10646] gspca_topro: reg_w err -71 [ 842.255298][T10646] gspca_topro: Sensor soi763a [ 842.329728][T10646] usb 5-1: USB disconnect, device number 9 [ 842.369350][T16127] netlink: 830 bytes leftover after parsing attributes in process `syz.2.2724'. [ 843.034460][T16142] tipc: Enabled bearer , priority 0 [ 843.073519][T16142] syzkaller0: entered promiscuous mode [ 843.104278][T16142] syzkaller0: entered allmulticast mode [ 843.160435][T16142] syzkaller0: mtu less than device minimum [ 843.184469][T16141] tipc: Resetting bearer [ 843.306802][T16147] netlink: 28 bytes leftover after parsing attributes in process `syz.4.2730'. [ 843.363602][T16147] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2730'. [ 843.388736][T16141] tipc: Disabling bearer [ 843.521707][T16147] ip6gretap0: entered promiscuous mode [ 843.674188][T16147] ip6gretap0: left promiscuous mode [ 843.725452][T16149] netlink: 65039 bytes leftover after parsing attributes in process `syz.1.2731'. [ 844.147062][ T30] audit: type=1326 audit(1759263243.889:878): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16156 comm="syz.0.2733" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f5c56d8eec9 code=0x0 [ 844.230904][T16163] sctp: [Deprecated]: syz.2.2736 (pid 16163) Use of struct sctp_assoc_value in delayed_ack socket option. [ 844.230904][T16163] Use struct sctp_sack_info instead [ 844.326477][T10646] usb 5-1: new high-speed USB device number 10 using dummy_hcd [ 844.354213][T16166] usb usb8: usbfs: process 16166 (syz.3.2738) did not claim interface 0 before use [ 844.547359][T10646] usb 5-1: Using ep0 maxpacket: 16 [ 844.675487][T10646] usb 5-1: New USB device found, idVendor=17ef, idProduct=721e, bcdDevice=de.06 [ 844.695173][T10646] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 844.817243][T10646] usb 5-1: Product: syz [ 844.821627][T10646] usb 5-1: Manufacturer: syz [ 844.826250][T10646] usb 5-1: SerialNumber: syz [ 845.387198][T10646] r8152-cfgselector 5-1: Unknown version 0x0000 [ 845.405178][T10646] r8152-cfgselector 5-1: config 0 descriptor?? [ 845.490530][T10646] hub 5-1:0.0: bad descriptor, ignoring hub [ 845.516167][T10646] hub 5-1:0.0: probe with driver hub failed with error -5 [ 845.785124][T16181] netlink: 20 bytes leftover after parsing attributes in process `syz.4.2735'. [ 846.140735][T10421] r8152-cfgselector 5-1: USB disconnect, device number 10 [ 848.391377][ T30] audit: type=1804 audit(1759263248.129:879): pid=16200 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.3.2745" name="/newroot/540/file1" dev="fuse" ino=1 res=1 errno=0 [ 848.856707][T16212] sctp: [Deprecated]: syz.2.2749 (pid 16212) Use of struct sctp_assoc_value in delayed_ack socket option. [ 848.856707][T16212] Use struct sctp_sack_info instead [ 849.113633][T16215] usb usb8: usbfs: process 16215 (syz.0.2750) did not claim interface 0 before use [ 849.197898][T16215] FAULT_INJECTION: forcing a failure. [ 849.197898][T16215] name failslab, interval 1, probability 0, space 0, times 0 [ 849.339939][T16215] CPU: 0 UID: 0 PID: 16215 Comm: syz.0.2750 Not tainted syzkaller #0 PREEMPT(full) [ 849.339969][T16215] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 849.339981][T16215] Call Trace: [ 849.340233][T16215] [ 849.340245][T16215] dump_stack_lvl+0x189/0x250 [ 849.340278][T16215] ? __pfx____ratelimit+0x10/0x10 [ 849.340298][T16215] ? __pfx_dump_stack_lvl+0x10/0x10 [ 849.340316][T16215] ? __pfx__printk+0x10/0x10 [ 849.340353][T16215] ? __pfx___might_resched+0x10/0x10 [ 849.340374][T16215] should_fail_ex+0x414/0x560 [ 849.340402][T16215] should_failslab+0xa8/0x100 [ 849.340427][T16215] kmem_cache_alloc_node_noprof+0x76/0x3c0 [ 849.340449][T16215] ? __alloc_skb+0x112/0x2d0 [ 849.340471][T16215] __alloc_skb+0x112/0x2d0 [ 849.340491][T16215] netlink_sendmsg+0x5c6/0xb30 [ 849.340523][T16215] ? __pfx_netlink_sendmsg+0x10/0x10 [ 849.340544][T16215] ? aa_sock_msg_perm+0xf1/0x1d0 [ 849.340563][T16215] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 849.340585][T16215] ? __pfx_netlink_sendmsg+0x10/0x10 [ 849.340606][T16215] __sock_sendmsg+0x21c/0x270 [ 849.340628][T16215] ____sys_sendmsg+0x505/0x830 [ 849.340657][T16215] ? __pfx_____sys_sendmsg+0x10/0x10 [ 849.340689][T16215] ? import_iovec+0x74/0xa0 [ 849.340715][T16215] ___sys_sendmsg+0x21f/0x2a0 [ 849.340737][T16215] ? __pfx____sys_sendmsg+0x10/0x10 [ 849.340790][T16215] ? __fget_files+0x2a/0x420 [ 849.340808][T16215] ? __fget_files+0x3a0/0x420 [ 849.340836][T16215] __x64_sys_sendmsg+0x19b/0x260 [ 849.340862][T16215] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 849.340895][T16215] ? __pfx_ksys_write+0x10/0x10 [ 849.340926][T16215] ? do_syscall_64+0xbe/0x3b0 [ 849.340951][T16215] do_syscall_64+0xfa/0x3b0 [ 849.340969][T16215] ? lockdep_hardirqs_on+0x9c/0x150 [ 849.340990][T16215] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 849.341009][T16215] ? clear_bhb_loop+0x60/0xb0 [ 849.341031][T16215] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 849.341049][T16215] RIP: 0033:0x7f5c56d8eec9 [ 849.341068][T16215] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 849.341083][T16215] RSP: 002b:00007f5c57c28038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 849.341102][T16215] RAX: ffffffffffffffda RBX: 00007f5c56fe5fa0 RCX: 00007f5c56d8eec9 [ 849.341117][T16215] RDX: 0000000020000000 RSI: 0000200000000680 RDI: 0000000000000005 [ 849.341129][T16215] RBP: 00007f5c57c28090 R08: 0000000000000000 R09: 0000000000000000 [ 849.341141][T16215] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 849.341153][T16215] R13: 00007f5c56fe6038 R14: 00007f5c56fe5fa0 R15: 00007f5c5710fa28 [ 849.341182][T16215] [ 850.044560][ T43] usb 1-1: new high-speed USB device number 109 using dummy_hcd [ 850.198033][ T43] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x7 has invalid wMaxPacketSize 0 [ 850.222175][ T43] usb 1-1: config 0 interface 0 altsetting 0 bulk endpoint 0x7 has invalid maxpacket 0 [ 850.264534][ T43] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x89 has invalid wMaxPacketSize 0 [ 850.307744][T16227] syzkaller1: entered promiscuous mode [ 850.313413][T16227] syzkaller1: entered allmulticast mode [ 850.360932][ T43] usb 1-1: New USB device found, idVendor=2040, idProduct=2000, bcdDevice=65.72 [ 850.379071][ T43] usb 1-1: New USB device strings: Mfr=151, Product=0, SerialNumber=0 [ 850.399271][ T43] usb 1-1: Manufacturer: syz [ 850.425825][ T43] usb 1-1: config 0 descriptor?? [ 850.448545][ T43] smsusb:smsusb_probe: board id=9, interface number 0 [ 850.471458][ T43] smsusb:smsusb_probe: Device initialized with return code -19 [ 850.577403][T10646] usb 2-1: new high-speed USB device number 122 using dummy_hcd [ 850.648654][T16219] program syz.0.2755 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 850.746908][T10646] usb 2-1: Using ep0 maxpacket: 32 [ 850.793155][T10646] usb 2-1: config index 0 descriptor too short (expected 29220, got 36) [ 850.878600][T10646] usb 2-1: config 0 has too many interfaces: 81, using maximum allowed: 32 [ 850.941983][T10646] usb 2-1: config 0 has 1 interface, different from the descriptor's value: 81 [ 850.983710][T16242] netlink: 36 bytes leftover after parsing attributes in process `syz.0.2755'. [ 851.026132][T10646] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 851.038223][T10646] usb 2-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 851.048662][T10646] usb 2-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 851.063120][T10646] usb 2-1: New USB device found, idVendor=03f0, idProduct=6c17, bcdDevice= 0.40 [ 851.076507][T10646] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 851.097599][T10646] usb 2-1: config 0 descriptor?? [ 851.177115][T10421] usb 5-1: new high-speed USB device number 11 using dummy_hcd [ 851.274468][T16245] sctp: [Deprecated]: syz.3.2761 (pid 16245) Use of struct sctp_assoc_value in delayed_ack socket option. [ 851.274468][T16245] Use struct sctp_sack_info instead [ 851.351865][T10646] usblp 2-1:0.0: usblp0: USB Bidirectional printer dev 122 if 0 alt 0 proto 3 vid 0x03F0 pid 0x6C17 [ 851.368524][T10421] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x7 has invalid wMaxPacketSize 0 [ 851.378541][T10421] usb 5-1: config 0 interface 0 altsetting 0 bulk endpoint 0x7 has invalid maxpacket 0 [ 851.419420][T10646] usb 2-1: USB disconnect, device number 122 [ 851.429351][T10421] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x89 has invalid wMaxPacketSize 0 [ 851.480207][T10421] usb 5-1: New USB device found, idVendor=2040, idProduct=2000, bcdDevice=65.72 [ 851.500160][T10646] usblp0: removed [ 851.506815][T10421] usb 5-1: New USB device strings: Mfr=151, Product=0, SerialNumber=0 [ 851.556140][T10421] usb 5-1: Manufacturer: syz [ 851.598736][T10421] usb 5-1: config 0 descriptor?? [ 851.619440][T10421] smsusb:smsusb_probe: board id=9, interface number 0 [ 851.642017][T10421] smsusb:smsusb_probe: Device initialized with return code -19 [ 851.737597][T16250] netlink: 72 bytes leftover after parsing attributes in process `syz.3.2763'. [ 851.807083][ T5907] usb 3-1: new high-speed USB device number 121 using dummy_hcd [ 851.856646][T10646] usb 2-1: new high-speed USB device number 123 using dummy_hcd [ 851.856824][T16241] program syz.4.2760 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 851.957181][ T5907] usb 3-1: device descriptor read/64, error -71 [ 852.082931][T10646] usb 2-1: Using ep0 maxpacket: 32 [ 852.109457][T10646] usb 2-1: config index 0 descriptor too short (expected 29220, got 36) [ 852.118558][T10646] usb 2-1: config 0 has too many interfaces: 81, using maximum allowed: 32 [ 852.157439][T16255] netlink: 36 bytes leftover after parsing attributes in process `syz.4.2760'. [ 852.235404][T10646] usb 2-1: config 0 has 1 interface, different from the descriptor's value: 81 [ 852.250337][T16257] input: syz1 as /devices/virtual/input/input35 [ 852.252285][T10646] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 852.266653][ T5907] usb 3-1: new high-speed USB device number 122 using dummy_hcd [ 852.315809][T10646] usb 2-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 852.348686][T10646] usb 2-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 852.385502][T10646] usb 2-1: New USB device found, idVendor=03f0, idProduct=6c17, bcdDevice= 0.40 [ 852.396765][ T5907] usb 3-1: device descriptor read/64, error -71 [ 852.469233][T10646] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 852.540769][T10646] usb 2-1: config 0 descriptor?? [ 852.557507][ T5907] usb usb3-port1: attempt power cycle [ 852.761925][T10646] usblp 2-1:0.0: usblp0: USB Bidirectional printer dev 123 if 0 alt 0 proto 3 vid 0x03F0 pid 0x6C17 [ 853.130325][ T5907] usb 3-1: new high-speed USB device number 123 using dummy_hcd [ 853.161320][ T5907] usb 3-1: device descriptor read/8, error -71 [ 853.213936][T10421] usb 1-1: USB disconnect, device number 109 [ 853.327311][ T5914] usb 2-1: USB disconnect, device number 123 [ 853.339882][ T5914] usblp0: removed [ 853.407092][ T5907] usb 3-1: new high-speed USB device number 124 using dummy_hcd [ 853.438950][ T5907] usb 3-1: device descriptor read/8, error -71 [ 853.547202][ T5907] usb usb3-port1: unable to enumerate USB device [ 853.676482][T10646] usb 1-1: new low-speed USB device number 110 using dummy_hcd [ 853.842772][T10646] usb 1-1: config 0 has an invalid interface number: 1 but max is 0 [ 853.852436][T10646] usb 1-1: config 0 has no interface number 0 [ 853.859418][T10646] usb 1-1: config 0 interface 1 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 10 [ 853.872477][T10646] usb 1-1: config 0 interface 1 altsetting 0 endpoint 0x82 has invalid maxpacket 159, setting to 8 [ 853.886250][T10646] usb 1-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 853.897853][T10646] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 853.919108][T10646] usb 1-1: config 0 descriptor?? [ 853.925458][T16269] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 853.986660][ T43] usb 5-1: USB disconnect, device number 11 [ 854.035915][T10646] iowarrior 1-1:0.1: IOWarrior product=0x1512, serial= interface=1 now attached to iowarrior0 [ 854.156833][ T5907] usb 1-1: USB disconnect, device number 110 [ 854.174302][T16276] netlink: 830 bytes leftover after parsing attributes in process `syz.4.2769'. [ 854.620140][T16284] sctp: [Deprecated]: syz.2.2773 (pid 16284) Use of struct sctp_assoc_value in delayed_ack socket option. [ 854.620140][T16284] Use struct sctp_sack_info instead [ 855.141690][T16292] netlink: 'syz.0.2775': attribute type 4 has an invalid length. [ 855.231139][T16298] netlink: 'syz.0.2775': attribute type 4 has an invalid length. [ 855.486655][T16299] netlink: 830 bytes leftover after parsing attributes in process `syz.2.2776'. [ 855.734713][T16309] hub 9-0:1.0: USB hub found [ 855.741731][T16309] hub 9-0:1.0: 1 port detected [ 856.218226][T16313] program syz.4.2778 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 856.420655][T16316] netlink: 36 bytes leftover after parsing attributes in process `syz.4.2778'. [ 857.150541][T16318] sch_tbf: burst 19872 is lower than device lo mtu (11337746) ! [ 857.288206][T16319] usb usb8: usbfs: process 16319 (syz.0.2779) did not claim interface 0 before use [ 858.001769][T16328] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2781'. [ 858.506957][T16334] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2782'. [ 859.436756][ T5907] usb 5-1: new full-speed USB device number 12 using dummy_hcd [ 859.597954][ T5907] usb 5-1: no configurations [ 859.602885][ T5907] usb 5-1: can't read configurations, error -22 [ 859.675044][T16354] netlink: 'syz.1.2790': attribute type 24 has an invalid length. [ 859.765128][T16358] netlink: 'syz.0.2789': attribute type 4 has an invalid length. [ 859.779531][ T5907] usb 5-1: new full-speed USB device number 13 using dummy_hcd [ 859.841850][T16363] netlink: 'syz.0.2789': attribute type 4 has an invalid length. [ 859.900221][T16364] netlink: 28 bytes leftover after parsing attributes in process `syz.1.2792'. [ 859.924402][T16365] UHID_CREATE from different security context by process 1957 (syz.3.2791), this is not allowed. [ 859.941116][ T5907] usb 5-1: no configurations [ 859.946243][ T5907] usb 5-1: can't read configurations, error -22 [ 859.959860][ T5907] usb usb5-port1: attempt power cycle [ 859.977572][T16364] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2792'. [ 860.526715][ T5907] usb 5-1: new full-speed USB device number 14 using dummy_hcd [ 860.559581][ T5907] usb 5-1: no configurations [ 860.565997][ T5907] usb 5-1: can't read configurations, error -22 [ 860.706581][ T5907] usb 5-1: new full-speed USB device number 15 using dummy_hcd [ 860.744142][T16371] IPVS: sync thread started: state = MASTER, mcast_ifn = tunl0, syncid = 3, id = 0 [ 860.790927][ T5907] usb 5-1: no configurations [ 860.796138][ T5907] usb 5-1: can't read configurations, error -22 [ 860.823277][ T5907] usb usb5-port1: unable to enumerate USB device [ 860.846805][T16374] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2794'. [ 861.576958][T16381] fuse: Bad value for 'fd' [ 861.598068][T16381] loop6: detected capacity change from 0 to 524288000 [ 862.490874][T16403] fuse: Bad value for 'fd' [ 862.507272][T16403] loop6: detected capacity change from 0 to 524288000 [ 862.680454][T16401] tipc: Started in network mode [ 862.695852][T16401] tipc: Node identity 6ed50b586635, cluster identity 4711 [ 862.848752][T16401] tipc: Enabled bearer , priority 0 [ 862.931441][T16407] syzkaller0: entered promiscuous mode [ 863.065399][T16407] syzkaller0: entered allmulticast mode [ 863.611577][T16407] tipc: Resetting bearer [ 863.693331][T16415] vlan0: entered promiscuous mode [ 863.704714][T16415] vlan0: entered allmulticast mode [ 863.760644][T16400] tipc: Resetting bearer [ 863.906764][ T43] tipc: Node number set to 148900696 [ 864.038038][T16400] tipc: Disabling bearer [ 864.061344][T16422] netlink: 830 bytes leftover after parsing attributes in process `syz.4.2807'. [ 864.575787][T16442] netlink: 'syz.3.2812': attribute type 4 has an invalid length. [ 864.862440][T16442] netlink: 'syz.3.2812': attribute type 4 has an invalid length. [ 865.223023][T16450] netlink: 32 bytes leftover after parsing attributes in process `syz.0.2814'. [ 865.340030][ T5840] usb 3-1: new high-speed USB device number 125 using dummy_hcd [ 865.486501][ T5907] usb 1-1: new high-speed USB device number 111 using dummy_hcd [ 865.494362][ T5840] usb 3-1: device descriptor read/64, error -71 [ 865.661238][ T5907] usb 1-1: New USB device found, idVendor=17e9, idProduct=8b4e, bcdDevice=9c.08 [ 865.670971][ T5907] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 865.736842][ T5840] usb 3-1: new high-speed USB device number 126 using dummy_hcd [ 865.860716][ T5907] usb 1-1: config 0 descriptor?? [ 865.896502][ T5840] usb 3-1: device descriptor read/64, error -71 [ 866.007046][ T5840] usb usb3-port1: attempt power cycle [ 866.041601][T16459] sock: sock_timestamping_bind_phc: sock not bind to device [ 866.346718][ T5840] usb 3-1: new high-speed USB device number 127 using dummy_hcd [ 866.378734][ T5840] usb 3-1: device descriptor read/8, error -71 [ 866.501735][ T5907] udl 1-1:0.0: [drm] Unrecognized vendor firmware descriptor [ 866.527297][ T5907] [drm:udl_init] *ERROR* Selecting channel failed [ 866.575728][ T5907] [drm] Initialized udl 0.0.1 for 1-1:0.0 on minor 2 [ 866.583658][ T5907] [drm] Initialized udl on minor 2 [ 866.656663][ T5907] udl 1-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffb9 [ 866.675431][ T5840] usb 3-1: new high-speed USB device number 2 using dummy_hcd [ 866.689540][ T5907] udl 1-1:0.0: [drm] Cannot find any crtc or sizes [ 866.707642][ T5914] udl 1-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffb9 [ 866.717833][ T5840] usb 3-1: device descriptor read/8, error -71 [ 866.727272][ T5907] usb 1-1: USB disconnect, device number 111 [ 866.733949][ T5914] udl 1-1:0.0: [drm] Cannot find any crtc or sizes [ 866.826856][ T5840] usb usb3-port1: unable to enumerate USB device [ 866.970367][ T30] audit: type=1800 audit(1759263266.699:880): pid=16468 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.2818" name="SYSV00000000" dev="tmpfs" ino=4 res=0 errno=0 [ 867.121526][T16472] netlink: 'syz.1.2820': attribute type 10 has an invalid length. [ 867.198032][T16472] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 867.224108][T16472] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 867.270180][T16472] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 867.282414][T16472] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 867.365177][T16472] bond0: (slave batadv0): Releasing backup interface [ 867.505823][T16478] binder: 16477:16478 ioctl c0306201 2000000003c0 returned -14 [ 867.539920][ T5163] Bluetooth: hci3: SCO packet for unknown connection handle 200 [ 867.793358][T16486] netlink: 52 bytes leftover after parsing attributes in process `syz.1.2825'. [ 867.954009][T16488] bridge0: port 4(erspan0) entered blocking state [ 867.989955][T16488] bridge0: port 4(erspan0) entered disabled state [ 867.999440][T16488] erspan0: entered allmulticast mode [ 868.018392][T16488] erspan0: entered promiscuous mode [ 868.050457][T16488] bridge0: port 4(erspan0) entered blocking state [ 868.058631][T16488] bridge0: port 4(erspan0) entered listening state [ 868.080074][T16490] erspan0: left allmulticast mode [ 868.093314][T16490] erspan0: left promiscuous mode [ 868.104256][T16490] bridge0: port 4(erspan0) entered disabled state [ 868.180050][T16496] program syz.4.2829 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 868.336943][ T43] usb 3-1: new full-speed USB device number 3 using dummy_hcd [ 868.365121][T16501] tipc: Enabled bearer , priority 0 [ 868.408484][T16503] netlink: 36 bytes leftover after parsing attributes in process `syz.4.2829'. [ 868.551983][T16504] syzkaller0: entered promiscuous mode [ 868.565686][T16504] syzkaller0: entered allmulticast mode [ 868.574471][ T43] usb 3-1: config 27 has an invalid descriptor of length 0, skipping remainder of the config [ 868.594228][ T43] usb 3-1: config 27 interface 0 altsetting 0 has an endpoint descriptor with address 0x78, changing to 0x8 [ 868.613356][T16501] tipc: Resetting bearer [ 868.622383][T16500] tipc: Resetting bearer [ 868.636005][ T43] usb 3-1: config 27 interface 0 altsetting 0 endpoint 0x8 has an invalid bInterval 0, changing to 10 [ 868.672407][ T43] usb 3-1: config 27 interface 0 altsetting 0 endpoint 0x8 has invalid maxpacket 127, setting to 64 [ 868.700018][T16500] tipc: Disabling bearer [ 868.706521][ T43] usb 3-1: config 27 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 868.706580][ T43] usb 3-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 868.706602][ T43] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 868.749995][T16494] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 868.769569][ T43] usb 3-1: Quirk or no altset; falling back to MIDI 1.0 [ 868.790565][ T43] usb 3-1: invalid MIDI in EP 0 [ 868.790640][T16507] program syz.1.2832 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 868.963185][T16494] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 869.009545][T16494] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 869.077948][T16510] netlink: 36 bytes leftover after parsing attributes in process `syz.1.2832'. [ 869.612272][ T43] snd-usb-audio 3-1:27.0: probe with driver snd-usb-audio failed with error -22 [ 869.661014][ T43] usb 3-1: USB disconnect, device number 3 [ 870.129018][ T1299] ieee802154 phy0 wpan0: encryption failed: -22 [ 870.135570][ T1299] ieee802154 phy1 wpan1: encryption failed: -22 [ 870.239408][T16524] netlink: 'syz.0.2837': attribute type 5 has an invalid length. [ 870.711188][T16544] netlink: 830 bytes leftover after parsing attributes in process `syz.2.2843'. [ 871.227779][T16558] sch_tbf: burst 19872 is lower than device lo mtu (11337746) ! [ 871.254768][T16560] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2846'. [ 871.601422][T16558] usb usb8: usbfs: process 16558 (syz.4.2845) did not claim interface 0 before use [ 872.326503][T10646] usb 2-1: new high-speed USB device number 124 using dummy_hcd [ 872.660869][T10646] usb 2-1: Using ep0 maxpacket: 32 [ 872.674609][T10646] usb 2-1: config 1 interface 0 altsetting 3 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 872.689037][T10646] usb 2-1: config 1 interface 0 altsetting 3 has 2 endpoint descriptors, different from the interface descriptor's value: 1 [ 872.720312][T16569] loop6: detected capacity change from 0 to 7 [ 872.729039][T16569] Dev loop6: unable to read RDB block 7 [ 872.744015][T10646] usb 2-1: config 1 interface 0 has no altsetting 0 [ 872.757297][T16569] loop6: unable to read partition table [ 872.771009][T10646] usb 2-1: New USB device found, idVendor=05ac, idProduct=021b, bcdDevice= 0.40 [ 872.790802][T16569] loop6: partition table beyond EOD, truncated [ 872.798706][T10646] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 872.882529][T10646] usb 2-1: Product: syz [ 872.894709][T16569] loop_reread_partitions: partition scan of loop6 (þ被xü—ŸÑà– ) failed (rc=-5) [ 872.914154][T10646] usb 2-1: Manufacturer: 《 [ 872.937810][T10646] usb 2-1: SerialNumber: syz [ 873.374367][T16563] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 873.419450][T16563] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 873.467290][ T43] usb 1-1: new high-speed USB device number 112 using dummy_hcd [ 873.506577][T10646] usbhid 2-1:1.0: can't add hid device: -71 [ 873.514742][T10646] usbhid 2-1:1.0: probe with driver usbhid failed with error -71 [ 873.536760][T10646] usb 2-1: USB disconnect, device number 124 [ 873.646757][ T43] usb 1-1: Using ep0 maxpacket: 16 [ 873.664804][ T43] usb 1-1: unable to get BOS descriptor or descriptor too short [ 873.680014][ T43] usb 1-1: unable to read config index 0 descriptor/start: -71 [ 873.689363][ T43] usb 1-1: can't read configurations, error -71 [ 873.716984][ T5840] usb 3-1: new high-speed USB device number 4 using dummy_hcd [ 873.867212][ T5840] usb 3-1: Using ep0 maxpacket: 16 [ 873.884655][ T5840] usb 3-1: config 0 has an invalid interface number: 68 but max is 0 [ 873.897697][ T5840] usb 3-1: config 0 has no interface number 0 [ 873.911227][ T5840] usb 3-1: config 0 interface 68 altsetting 0 bulk endpoint 0x81 has invalid maxpacket 1023 [ 873.944114][ T5840] usb 3-1: New USB device found, idVendor=13b1, idProduct=0042, bcdDevice=dc.c4 [ 873.962061][ T5840] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 873.991619][ T5840] usb 3-1: Product: syz [ 873.991669][T16585] netlink: 20 bytes leftover after parsing attributes in process `syz.4.2854'. [ 873.995823][ T5840] usb 3-1: Manufacturer: syz [ 873.995843][ T5840] usb 3-1: SerialNumber: syz [ 874.025890][ T5840] usb 3-1: config 0 descriptor?? [ 874.045641][T16581] raw-gadget.3 gadget.2: fail, usb_ep_enable returned -22 [ 874.093053][ T5840] usb 3-1: Warning: ath10k USB support is incomplete, don't expect anything to work! [ 874.276660][ T5907] usb 4-1: new high-speed USB device number 18 using dummy_hcd [ 874.439214][ T5907] usb 4-1: New USB device found, idVendor=046d, idProduct=0870, bcdDevice=61.47 [ 874.494746][ T5907] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 874.540957][ T5907] usb 4-1: config 0 descriptor?? [ 874.580238][ T5907] gspca_main: STV06xx-2.14.0 probing 046d:0870 [ 874.834532][ T5840] usb 3-1: USB disconnect, device number 4 [ 874.840901][ T3464] usb 3-1: Failed to submit usb control message: -71 [ 874.855558][ T3464] usb 3-1: unable to send the bmi data to the device: -71 [ 874.865504][ T3464] usb 3-1: unable to get target info from device [ 874.912376][ T5907] usb 4-1: USB disconnect, device number 18 [ 874.954380][ T3464] usb 3-1: could not get target info (-71) [ 874.998634][ T3464] usb 3-1: could not probe fw (-71) [ 875.879275][T16622] netlink: 72 bytes leftover after parsing attributes in process `syz.0.2860'. [ 875.900030][T16622] netlink: 24 bytes leftover after parsing attributes in process `syz.0.2860'. [ 876.110794][T16623] netlink: 24 bytes leftover after parsing attributes in process `syz.2.2863'. [ 876.296962][ T10] usb 5-1: new high-speed USB device number 16 using dummy_hcd [ 876.374431][T16631] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2865'. [ 876.606904][ T10] usb 5-1: Using ep0 maxpacket: 32 [ 876.678214][ T10] usb 5-1: config 0 has an invalid interface number: 132 but max is 0 [ 876.698804][ T10] usb 5-1: config 0 has no interface number 0 [ 876.713994][ T10] usb 5-1: config 0 interface 132 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 876.749466][ T10] usb 5-1: New USB device found, idVendor=0413, idProduct=6023, bcdDevice=ec.e5 [ 876.759443][ T10] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 876.775358][ T10] usb 5-1: Product: syz [ 876.939031][ T10] usb 5-1: Manufacturer: syz [ 877.246748][ T10] usb 5-1: SerialNumber: syz [ 877.373990][ T10] usb 5-1: config 0 descriptor?? [ 877.414314][ T10] em28xx 5-1:0.132: New device syz syz @ 480 Mbps (0413:6023, interface 132, class 132) [ 877.459628][ T10] em28xx 5-1:0.132: Video interface 132 found: [ 877.839615][ T10] em28xx 5-1:0.132: unknown em28xx chip ID (0) [ 877.915452][T16642] tipc: Enabled bearer , priority 0 [ 877.952050][T16642] syzkaller0: entered promiscuous mode [ 877.963018][T16642] syzkaller0: entered allmulticast mode [ 878.016193][T16642] syzkaller0: mtu greater than device maximum [ 878.024928][T16641] tipc: Resetting bearer [ 878.077925][T16641] tipc: Disabling bearer [ 878.116264][T16645] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2862'. [ 878.216744][ T5907] usb 3-1: new high-speed USB device number 5 using dummy_hcd [ 878.355983][T16647] sctp: [Deprecated]: syz.0.2869 (pid 16647) Use of struct sctp_assoc_value in delayed_ack socket option. [ 878.355983][T16647] Use struct sctp_sack_info instead [ 878.377662][ T5907] usb 3-1: Using ep0 maxpacket: 16 [ 878.393102][ T5907] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0xD has an invalid bInterval 0, changing to 7 [ 878.422708][ T5907] usb 3-1: New USB device found, idVendor=4752, idProduct=0011, bcdDevice=32.4f [ 878.441297][ T5907] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 878.473457][ T5907] usb 3-1: Product: syz [ 878.490310][ T5907] usb 3-1: Manufacturer: syz [ 878.495007][ T5907] usb 3-1: SerialNumber: syz [ 878.538314][ T5907] usb 3-1: config 0 descriptor?? [ 878.564809][ T5907] hub 3-1:0.0: bad descriptor, ignoring hub [ 878.572283][ T5907] hub 3-1:0.0: probe with driver hub failed with error -5 [ 878.586836][ T5907] usb 3-1: Quirk or no altset; falling back to MIDI 1.0 [ 878.739494][T16650] fuse: Bad value for 'fd' [ 878.896306][ T5907] usb 3-1: USB disconnect, device number 5 [ 878.997818][ T10] em28xx 5-1:0.132: failed to trigger read from i2c address 0xa0 (error=-5) [ 879.023878][ T10] em28xx 5-1:0.132: board has no eeprom [ 879.083933][ T30] audit: type=1326 audit(1759263278.819:881): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16658 comm="syz.0.2872" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f5c56d8eec9 code=0x0 [ 879.087055][ T10] em28xx 5-1:0.132: Identified as Leadtek Winfast USB II (card=7) [ 879.120782][ T10] em28xx 5-1:0.132: analog set to bulk mode. [ 879.127297][ T5840] em28xx 5-1:0.132: Registering V4L2 extension [ 879.227832][ T5840] em28xx 5-1:0.132: failed to trigger read from i2c address 0x4a (error=-5) [ 879.312096][ T5840] em28xx 5-1:0.132: failed to trigger read from i2c address 0x48 (error=-5) [ 879.324529][ T5840] em28xx 5-1:0.132: failed to trigger read from i2c address 0x42 (error=-5) [ 879.345066][ T5840] em28xx 5-1:0.132: failed to trigger read from i2c address 0x40 (error=-5) [ 879.535032][ T5840] em28xx 5-1:0.132: failed to trigger read from i2c address 0x84 (error=-5) [ 879.563176][ T5840] em28xx 5-1:0.132: failed to trigger read from i2c address 0x86 (error=-5) [ 879.638042][ T5840] em28xx 5-1:0.132: failed to trigger read from i2c address 0x94 (error=-5) [ 879.656316][ T5840] em28xx 5-1:0.132: failed to trigger read from i2c address 0x96 (error=-5) [ 879.681078][ T43] usb 1-1: new high-speed USB device number 114 using dummy_hcd [ 879.710295][T16680] netlink: 36 bytes leftover after parsing attributes in process `syz.2.2876'. [ 879.874431][ T5840] em28xx 5-1:0.132: failed to trigger read from i2c address 0xc0 (error=-5) [ 879.888370][ T5840] em28xx 5-1:0.132: failed to trigger read from i2c address 0xc2 (error=-5) [ 879.898583][ T5840] em28xx 5-1:0.132: failed to trigger read from i2c address 0xc4 (error=-5) [ 879.910153][ T5840] em28xx 5-1:0.132: failed to trigger read from i2c address 0xc6 (error=-5) [ 879.919961][ T5840] em28xx 5-1:0.132: failed to trigger read from i2c address 0xc8 (error=-5) [ 879.938593][ T5840] em28xx 5-1:0.132: Config register raw data: 0xfffffffb [ 879.948802][ T5840] em28xx 5-1:0.132: AC97 chip type couldn't be determined [ 879.957137][ T5840] em28xx 5-1:0.132: No AC97 audio processor [ 880.033638][ T5840] usb 5-1: Decoder not found [ 880.057031][ T5940] usb 5-1: USB disconnect, device number 16 [ 880.076690][ T5840] em28xx 5-1:0.132: failed to create media graph [ 880.086226][ T5940] em28xx 5-1:0.132: Disconnecting em28xx [ 880.103531][ T5840] em28xx 5-1:0.132: V4L2 device video103 deregistered [ 880.214986][ T5840] em28xx 5-1:0.132: Remote control support is not available for this card. [ 880.216091][T16684] ================================================================== [ 880.231693][T16684] BUG: KASAN: slab-use-after-free in v4l2_fh_open+0xc7/0x430 [ 880.239080][T16684] Read of size 8 at addr ffff8880241b4740 by task v4l_id/16684 [ 880.246614][T16684] [ 880.248936][T16684] CPU: 1 UID: 0 PID: 16684 Comm: v4l_id Not tainted syzkaller #0 PREEMPT(full) [ 880.248953][T16684] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 880.248962][T16684] Call Trace: [ 880.248969][T16684] [ 880.248975][T16684] dump_stack_lvl+0x189/0x250 [ 880.248999][T16684] ? rcu_is_watching+0x15/0xb0 [ 880.249013][T16684] ? __kasan_check_byte+0x12/0x40 [ 880.249032][T16684] ? __pfx_dump_stack_lvl+0x10/0x10 [ 880.249047][T16684] ? rcu_is_watching+0x15/0xb0 [ 880.249060][T16684] ? lock_release+0x4b/0x3e0 [ 880.249073][T16684] ? __virt_addr_valid+0x1c8/0x5c0 [ 880.249090][T16684] ? __virt_addr_valid+0x4a5/0x5c0 [ 880.249107][T16684] print_report+0xca/0x240 [ 880.249122][T16684] ? v4l2_fh_open+0xc7/0x430 [ 880.249136][T16684] kasan_report+0x118/0x150 [ 880.249154][T16684] ? v4l2_fh_open+0xc7/0x430 [ 880.249170][T16684] v4l2_fh_open+0xc7/0x430 [ 880.249186][T16684] em28xx_v4l2_open+0x157/0x9a0 [ 880.249203][T16684] v4l2_open+0x20c/0x360 [ 880.249220][T16684] chrdev_open+0x4cc/0x5e0 [ 880.249234][T16684] ? __pfx_chrdev_open+0x10/0x10 [ 880.249247][T16684] ? fsnotify_open_perm_and_set_mode+0x113/0x610 [ 880.249263][T16684] ? __pfx_chrdev_open+0x10/0x10 [ 880.249274][T16684] do_dentry_open+0x950/0x13f0 [ 880.249294][T16684] vfs_open+0x3b/0x340 [ 880.249306][T16684] ? path_openat+0x2ecd/0x3830 [ 880.249323][T16684] path_openat+0x2ee5/0x3830 [ 880.249337][T16684] ? arch_stack_walk+0xfc/0x150 [ 880.249358][T16684] ? stack_depot_save_flags+0x40/0x860 [ 880.249376][T16684] ? __pfx_path_openat+0x10/0x10 [ 880.249390][T16684] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 880.249410][T16684] do_filp_open+0x1fa/0x410 [ 880.249425][T16684] ? __lock_acquire+0xab9/0xd20 [ 880.249437][T16684] ? __pfx_do_filp_open+0x10/0x10 [ 880.249459][T16684] ? _raw_spin_unlock+0x28/0x50 [ 880.249471][T16684] ? alloc_fd+0x64c/0x6c0 [ 880.249492][T16684] do_sys_openat2+0x121/0x1c0 [ 880.249507][T16684] ? __pfx_do_sys_openat2+0x10/0x10 [ 880.249522][T16684] ? exc_page_fault+0x76/0xf0 [ 880.249537][T16684] ? do_user_addr_fault+0xc8a/0x1390 [ 880.249552][T16684] __x64_sys_openat+0x138/0x170 [ 880.249568][T16684] do_syscall_64+0xfa/0x3b0 [ 880.249583][T16684] ? lockdep_hardirqs_on+0x9c/0x150 [ 880.249596][T16684] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 880.249609][T16684] ? clear_bhb_loop+0x60/0xb0 [ 880.249624][T16684] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 880.249637][T16684] RIP: 0033:0x7f18ab0a7407 [ 880.249650][T16684] Code: 48 89 fa 4c 89 df e8 38 aa 00 00 8b 93 08 03 00 00 59 5e 48 83 f8 fc 74 1a 5b c3 0f 1f 84 00 00 00 00 00 48 8b 44 24 10 0f 05 <5b> c3 0f 1f 80 00 00 00 00 83 e2 39 83 fa 08 75 de e8 23 ff ff ff [ 880.249662][T16684] RSP: 002b:00007ffc72cce890 EFLAGS: 00000202 ORIG_RAX: 0000000000000101 [ 880.249684][T16684] RAX: ffffffffffffffda RBX: 00007f18ab7f5880 RCX: 00007f18ab0a7407 [ 880.249694][T16684] RDX: 0000000000000000 RSI: 00007ffc72ccef1b RDI: ffffffffffffff9c [ 880.249703][T16684] RBP: 0000000000000002 R08: 0000000000000000 R09: 0000000000000000 [ 880.249712][T16684] R10: 0000000000000000 R11: 0000000000000202 R12: 0000000000000000 [ 880.249720][T16684] R13: 00007ffc72cceae0 R14: 00007f18ab95c000 R15: 00005618619f14d8 [ 880.249735][T16684] [ 880.249741][T16684] [ 880.556924][T16684] Allocated by task 5840: [ 880.561241][T16684] kasan_save_track+0x3e/0x80 [ 880.565918][T16684] __kasan_kmalloc+0x93/0xb0 [ 880.570595][T16684] __kmalloc_cache_noprof+0x230/0x3d0 [ 880.575974][T16684] em28xx_v4l2_init+0x10b/0x2e70 [ 880.580910][T16684] em28xx_init_extension+0x11d/0x1c0 [ 880.586192][T16684] process_scheduled_works+0xade/0x17b0 [ 880.592059][T16684] worker_thread+0x8a0/0xda0 [ 880.596640][T16684] kthread+0x70e/0x8a0 [ 880.600794][T16684] ret_from_fork+0x439/0x7d0 [ 880.605378][T16684] ret_from_fork_asm+0x1a/0x30 [ 880.610223][T16684] [ 880.612567][T16684] Freed by task 5840: [ 880.616547][T16684] kasan_save_track+0x3e/0x80 [ 880.621223][T16684] kasan_save_free_info+0x46/0x50 [ 880.626238][T16684] __kasan_slab_free+0x5b/0x80 [ 880.631045][T16684] kfree+0x18e/0x440 [ 880.634936][T16684] em28xx_v4l2_init+0x1683/0x2e70 [ 880.639958][T16684] em28xx_init_extension+0x11d/0x1c0 [ 880.645345][T16684] process_scheduled_works+0xade/0x17b0 [ 880.650902][T16684] worker_thread+0x8a0/0xda0 [ 880.655490][T16684] kthread+0x70e/0x8a0 [ 880.659570][T16684] ret_from_fork+0x439/0x7d0 [ 880.664171][T16684] ret_from_fork_asm+0x1a/0x30 [ 880.668932][T16684] [ 880.671241][T16684] The buggy address belongs to the object at ffff8880241b4000 [ 880.671241][T16684] which belongs to the cache kmalloc-8k of size 8192 [ 880.685464][T16684] The buggy address is located 1856 bytes inside of [ 880.685464][T16684] freed 8192-byte region [ffff8880241b4000, ffff8880241b6000) [ 880.699732][T16684] [ 880.702052][T16684] The buggy address belongs to the physical page: [ 880.708641][T16684] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x241b0 [ 880.717399][T16684] head: order:3 mapcount:0 entire_mapcount:0 nr_pages_mapped:0 pincount:0 [ 880.725899][T16684] ksm flags: 0xfff00000000040(head|node=0|zone=1|lastcpupid=0x7ff) [ 880.733789][T16684] page_type: f5(slab) [ 880.737765][T16684] raw: 00fff00000000040 ffff88801a042280 ffffea0001f53a00 dead000000000003 [ 880.746343][T16684] raw: 0000000000000000 0000000000020002 00000000f5000000 0000000000000000 [ 880.754930][T16684] head: 00fff00000000040 ffff88801a042280 ffffea0001f53a00 dead000000000003 [ 880.763634][T16684] head: 0000000000000000 0000000000020002 00000000f5000000 0000000000000000 [ 880.772307][T16684] head: 00fff00000000003 ffffea0000906c01 00000000ffffffff 00000000ffffffff [ 880.781063][T16684] head: ffffffffffffffff 0000000000000000 00000000ffffffff 0000000000000008 [ 880.789743][T16684] page dumped because: kasan: bad access detected [ 880.796399][T16684] page_owner tracks the page as allocated [ 880.802100][T16684] page last allocated via order 3, migratetype Unmovable, gfp_mask 0x528c0(GFP_NOWAIT|__GFP_IO|__GFP_FS|__GFP_NORETRY|__GFP_COMP), pid 16270, tgid 16270 (syz.4.2769), ts 855033844614, free_ts 854815723502 [ 880.822070][T16684] post_alloc_hook+0x240/0x2a0 [ 880.826839][T16684] get_page_from_freelist+0x21e4/0x22c0 [ 880.832376][T16684] __alloc_frozen_pages_noprof+0x181/0x370 [ 880.838617][T16684] alloc_pages_mpol+0x232/0x4a0 [ 880.843486][T16684] allocate_slab+0x8a/0x370 [ 880.848007][T16684] ___slab_alloc+0xbeb/0x1420 [ 880.852762][T16684] __kvmalloc_node_noprof+0x429/0x5f0 [ 880.858134][T16684] snd_pcm_plugin_alloc+0x19c/0x780 [ 880.863410][T16684] snd_pcm_plug_alloc+0x154/0x280 [ 880.868434][T16684] snd_pcm_oss_change_params_locked+0x2aed/0x3e40 [ 880.874964][T16684] snd_pcm_oss_make_ready+0x11b/0x340 [ 880.880809][T16684] snd_pcm_oss_sync+0x19b/0xc30 [ 880.885692][T16684] snd_pcm_oss_release+0xff/0x250 [ 880.890721][T16684] __fput+0x449/0xa70 [ 880.894873][T16684] task_work_run+0x1d4/0x260 [ 880.899458][T16684] exit_to_user_mode_loop+0xec/0x110 [ 880.904769][T16684] page last free pid 16285 tgid 16285 stack trace: [ 880.911444][T16684] __free_frozen_pages+0xbc4/0xd30 [ 880.916557][T16684] __put_partials+0x156/0x1a0 [ 880.921400][T16684] put_cpu_partial+0x17c/0x250 [ 880.926177][T16684] __slab_free+0x2d5/0x3c0 [ 880.930615][T16684] qlist_free_all+0x97/0x140 [ 880.935211][T16684] kasan_quarantine_reduce+0x148/0x160 [ 880.940665][T16684] __kasan_slab_alloc+0x22/0x80 [ 880.945518][T16684] kmem_cache_alloc_noprof+0x1c1/0x3c0 [ 880.951077][T16684] getname_flags+0xb8/0x540 [ 880.955587][T16684] __x64_sys_symlinkat+0x7a/0xb0 [ 880.960713][T16684] do_syscall_64+0xfa/0x3b0 [ 880.965213][T16684] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 880.971188][T16684] [ 880.973502][T16684] Memory state around the buggy address: [ 880.979502][T16684] ffff8880241b4600: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 880.987563][T16684] ffff8880241b4680: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 880.995643][T16684] >ffff8880241b4700: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 881.003709][T16684] ^ [ 881.009971][T16684] ffff8880241b4780: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 881.018033][T16684] ffff8880241b4800: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 881.026460][T16684] ================================================================== [ 881.034761][ C1] vkms_vblank_simulate: vblank timer overrun [ 881.064285][T16684] Kernel panic - not syncing: KASAN: panic_on_warn set ... [ 881.071625][T16684] CPU: 0 UID: 0 PID: 16684 Comm: v4l_id Not tainted syzkaller #0 PREEMPT(full) [ 881.080668][T16684] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 881.090748][T16684] Call Trace: [ 881.094117][T16684] [ 881.097053][T16684] dump_stack_lvl+0x99/0x250 [ 881.101662][T16684] ? __asan_memcpy+0x40/0x70 [ 881.106252][T16684] ? __pfx_dump_stack_lvl+0x10/0x10 [ 881.111447][T16684] ? __pfx__printk+0x10/0x10 [ 881.116120][T16684] vpanic+0x281/0x750 [ 881.120108][T16684] ? preempt_schedule+0xae/0xc0 [ 881.124978][T16684] ? __pfx_vpanic+0x10/0x10 [ 881.129478][T16684] ? preempt_schedule_common+0x83/0xd0 [ 881.134966][T16684] ? preempt_schedule+0xae/0xc0 [ 881.139901][T16684] ? __pfx_preempt_schedule+0x10/0x10 [ 881.145283][T16684] panic+0xb9/0xc0 [ 881.149016][T16684] ? __pfx_panic+0x10/0x10 [ 881.153446][T16684] ? _raw_spin_unlock_irqrestore+0xfd/0x110 [ 881.159373][T16684] ? v4l2_fh_open+0xc7/0x430 [ 881.163974][T16684] check_panic_on_warn+0x89/0xb0 [ 881.168917][T16684] ? v4l2_fh_open+0xc7/0x430 [ 881.173528][T16684] end_report+0x78/0x160 [ 881.177810][T16684] kasan_report+0x129/0x150 [ 881.182461][T16684] ? v4l2_fh_open+0xc7/0x430 [ 881.187061][T16684] v4l2_fh_open+0xc7/0x430 [ 881.191585][T16684] em28xx_v4l2_open+0x157/0x9a0 [ 881.197230][T16684] v4l2_open+0x20c/0x360 [ 881.201482][T16684] chrdev_open+0x4cc/0x5e0 [ 881.205897][T16684] ? __pfx_chrdev_open+0x10/0x10 [ 881.210830][T16684] ? fsnotify_open_perm_and_set_mode+0x113/0x610 [ 881.217165][T16684] ? __pfx_chrdev_open+0x10/0x10 [ 881.222104][T16684] do_dentry_open+0x950/0x13f0 [ 881.227306][T16684] vfs_open+0x3b/0x340 [ 881.231371][T16684] ? path_openat+0x2ecd/0x3830 [ 881.236138][T16684] path_openat+0x2ee5/0x3830 [ 881.240899][T16684] ? arch_stack_walk+0xfc/0x150 [ 881.245755][T16684] ? stack_depot_save_flags+0x40/0x860 [ 881.251212][T16684] ? __pfx_path_openat+0x10/0x10 [ 881.256144][T16684] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 881.262256][T16684] do_filp_open+0x1fa/0x410 [ 881.266792][T16684] ? __lock_acquire+0xab9/0xd20 [ 881.271647][T16684] ? __pfx_do_filp_open+0x10/0x10 [ 881.276680][T16684] ? _raw_spin_unlock+0x28/0x50 [ 881.281527][T16684] ? alloc_fd+0x64c/0x6c0 [ 881.285857][T16684] do_sys_openat2+0x121/0x1c0 [ 881.290528][T16684] ? __pfx_do_sys_openat2+0x10/0x10 [ 881.295720][T16684] ? exc_page_fault+0x76/0xf0 [ 881.300580][T16684] ? do_user_addr_fault+0xc8a/0x1390 [ 881.305904][T16684] __x64_sys_openat+0x138/0x170 [ 881.310760][T16684] do_syscall_64+0xfa/0x3b0 [ 881.315267][T16684] ? lockdep_hardirqs_on+0x9c/0x150 [ 881.320478][T16684] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 881.326551][T16684] ? clear_bhb_loop+0x60/0xb0 [ 881.331227][T16684] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 881.337199][T16684] RIP: 0033:0x7f18ab0a7407 [ 881.341612][T16684] Code: 48 89 fa 4c 89 df e8 38 aa 00 00 8b 93 08 03 00 00 59 5e 48 83 f8 fc 74 1a 5b c3 0f 1f 84 00 00 00 00 00 48 8b 44 24 10 0f 05 <5b> c3 0f 1f 80 00 00 00 00 83 e2 39 83 fa 08 75 de e8 23 ff ff ff [ 881.361564][T16684] RSP: 002b:00007ffc72cce890 EFLAGS: 00000202 ORIG_RAX: 0000000000000101 [ 881.369991][T16684] RAX: ffffffffffffffda RBX: 00007f18ab7f5880 RCX: 00007f18ab0a7407 [ 881.377957][T16684] RDX: 0000000000000000 RSI: 00007ffc72ccef1b RDI: ffffffffffffff9c [ 881.385922][T16684] RBP: 0000000000000002 R08: 0000000000000000 R09: 0000000000000000 [ 881.394064][T16684] R10: 0000000000000000 R11: 0000000000000202 R12: 0000000000000000 [ 881.402143][T16684] R13: 00007ffc72cceae0 R14: 00007f18ab95c000 R15: 00005618619f14d8 [ 881.410118][T16684] [ 881.413461][T16684] Kernel Offset: disabled [ 881.417782][T16684] Rebooting in 86400 seconds..