last executing test programs: 9.771190101s ago: executing program 2 (id=255): r0 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r0, 0x3b81, &(0x7f00000000c0)={0xc, 0x0, 0x0}) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) mremap(&(0x7f0000724000/0x4000)=nil, 0x4000, 0x4000, 0x4, &(0x7f00004aa000/0x4000)=nil) syz_open_dev$usbfs(&(0x7f0000000340), 0x400000000775, 0x408000) r4 = dup(r2) r5 = openat$rfkill(0xffffffffffffff9c, 0x0, 0x801, 0x0) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680)) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1000003, 0x110, r0, 0x2000) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) rseq(0x0, 0x0, 0x0, 0x0) ioctl$BTRFS_IOC_SPACE_INFO(0xffffffffffffffff, 0xc0109414, &(0x7f0000000480)={0x2b, 0x2, ['\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00']}) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r4, 0xc00c642d, &(0x7f0000000380)={0x0, 0x80000}) syz_io_uring_setup(0x19c8, &(0x7f0000000380)={0x0, 0x8f691, 0x8, 0x0, 0x2b4}, &(0x7f00000002c0)=0x0, &(0x7f00000001c0)=0x0) syz_io_uring_submit(r6, 0x0, &(0x7f0000000000)=@IORING_OP_ACCEPT={0xd, 0x79, 0x5, r3, &(0x7f0000000040)=0x80, &(0x7f0000000200)=@un=@abs, 0x0, 0x800, 0x1}) syz_io_uring_submit(0x0, r7, &(0x7f0000000100)=@IORING_OP_WRITE_FIXED={0x5, 0x40, 0x0, @fd_index=0x6, 0x6, 0xdff, 0x8, 0x3, 0x1, {0x2}}) write$rfkill(r5, &(0x7f0000000080)={0x0, 0x1, 0x3, 0x1}, 0x8) ioctl$IOMMU_TEST_OP_ADD_RESERVED(r0, 0x3ba0, &(0x7f00000003c0)={0x48, 0xc, r1, 0x0, 0x0, 0x200000000}) r8 = syz_open_dev$dri(&(0x7f0000000080), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_SETCRTC(r8, 0xc06864a2, 0x0) r9 = socket$inet6_sctp(0xa, 0x5, 0x84) r10 = socket$inet6(0xa, 0x3, 0x8000000003c) connect$inet6(r10, &(0x7f0000000140)={0xa, 0x0, 0x0, @dev, 0x9}, 0x1c) setsockopt$IP6T_SO_SET_REPLACE(r9, 0x29, 0x40, &(0x7f0000000b00)=@raw={'raw\x00', 0x8, 0x3, 0x428, 0xd0, 0xffffffff, 0xffffffff, 0x0, 0xffffffff, 0x358, 0xffffffff, 0xffffffff, 0x358, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@private0, @mcast2, [], [], 'veth0_macvtap\x00', 'dvmrp1\x00'}, 0x0, 0xa8, 0xd0}, @common=@unspec=@NFQUEUE0={0x28}}, {{@ipv6={@remote, @ipv4={'\x00', '\xff\xff', @dev}, [], [], 'wg1\x00', 'gre0\x00'}, 0x0, 0x258, 0x288, 0x0, {}, [@common=@inet=@hashlimit1={{0x58}, {'pim6reg\x00', {0x0, 0x0, 0x5, 0x0, 0x0, 0x7, 0x3ff}}}, @common=@inet=@hashlimit3={{0x158}, {'wg1\x00', {0x3, 0x0, 0x41, 0x0, 0x0, 0x1000, 0x6, 0x3}}}]}, @common=@unspec=@CONNMARK={0x30}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28, '\x00', 0x7}}}}, 0x488) 8.886083157s ago: executing program 1 (id=256): r0 = syz_io_uring_setup(0x48be, &(0x7f00000011c0)={0x0, 0x0, 0x0, 0x3}, &(0x7f0000000000), &(0x7f0000001180)) io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f0000002300)=[{&(0x7f0000000140)=""/4096, 0x1000}], 0x3100) preadv(0xffffffffffffffff, &(0x7f00000001c0)=[{&(0x7f0000000080)=""/139, 0x8b}], 0x1, 0x104, 0x8) bind$alg(0xffffffffffffffff, 0x0, 0x0) openat$dir(0xffffffffffffff9c, &(0x7f0000000080)='.\x00', 0x101000, 0x108) r1 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r1) ptrace$setregs(0xd, r1, 0x400006, &(0x7f0000000140)) ptrace$cont(0x20, r1, 0x0, 0x0) r2 = syz_open_procfs(0x0, &(0x7f0000000040)='fdinfo/3\x00') pread64(r2, &(0x7f0000000080)=""/237, 0xed, 0x0) r3 = syz_open_dev$evdev(&(0x7f0000000040), 0x3f, 0x0) r4 = syz_usb_connect$cdc_ecm(0x0, 0x5e, &(0x7f0000000000)=ANY=[], 0x0) syz_usb_disconnect(r4) syz_usb_disconnect(r3) r5 = syz_open_dev$sg(&(0x7f0000001940), 0x0, 0x0) ioctl$SG_IO(r5, 0x2285, &(0x7f0000000740)={0x53, 0x0, 0x3, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000000)="28f8a8", 0x0, 0x0, 0x0, 0x0, 0x0}) read$char_usb(r2, &(0x7f0000001140)=""/25, 0x19) syz_usb_connect(0x0, 0x3b, &(0x7f0000000600)={{0x12, 0x1, 0x110, 0xee, 0x21, 0x85, 0x8, 0x12d1, 0x1e43, 0x5c79, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x29, 0x1, 0x5, 0x7, 0x80, 0xe, [{{0x9, 0x4, 0xf, 0x3, 0x0, 0x4b, 0x11, 0xef, 0x5, [@cdc_ecm={{0x5}, {0x5, 0x24, 0x0, 0x40}, {0xd, 0x24, 0xf, 0x1, 0x8, 0x4, 0x7}}]}}]}}]}}, &(0x7f0000000480)={0xa, &(0x7f0000000080)={0xa, 0x6, 0x250, 0x6c, 0x5, 0x8, 0x20, 0x4}, 0x0, 0x0, 0x5, [{0x0, 0x0}, {0x4, &(0x7f0000000100)=@lang_id={0x4, 0x3, 0x458}}, {0x8c, &(0x7f0000000340)=@string={0x8c, 0x3, "02cefd97747a2811b8f224e68f0f25ce1cafc43670eed108bed237d14fd563c66c025a562e626a2a666db84f395868fe69abd2e6b4aeee486078b1c9bfc24ceca5c718476ee36adc3e0433d4f2e70d387dc20e88b092b38b73d8ed633781207cb297517185d5cd7bd5d5c28f08b0a0eee6b925dddbd9ae104d381bf2bb6b95b98b4ff11742f1d5578baf"}}, {0x4, &(0x7f0000000400)=@lang_id={0x4, 0x3, 0x4c0a}}, {0x0, 0x0}]}) r6 = syz_usb_connect(0x0, 0x36, &(0x7f0000000140)=ANY=[@ANYBLOB, @ANYRESDEC=r3], 0x0) syz_usb_control_io$cdc_ecm(r6, &(0x7f00000005c0)={0x14, 0x0, &(0x7f0000000580)={0x0, 0x3, 0x1a, {0x1a}}}, 0x0) syz_usb_disconnect(r4) r7 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r7, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) socket(0x400000000010, 0x3, 0x0) r8 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000100)={'syzkaller0\x00'}) socket(0x400000000010, 0x3, 0x0) socket$unix(0x1, 0x1, 0x0) write$UHID_CREATE2(0xffffffffffffffff, &(0x7f0000001300)={0xb, {'syz0\x00', 'syz1\x00', 'syz0\x00', 0x73, 0x2, 0x7, 0x9, 0x1ff, 0x9, "9b619d46354526422d48c20349e898fe96f89efc3dea0c8c3d206042c7a2d9491ed486d10fe9a43885cfce7f620961a7a9d9c1d0c3f9bba919ee053ee0fe9ec5dad60b4e9dfc2f1ee8982747b756116b28f81f81fcd4d0cf4872ccdb30c967864f55a6640835e7e23eccbb5ce9b60b5e8f569f"}}, 0x18b) 8.699279358s ago: executing program 3 (id=257): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-camellia-asm\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000c18000)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r1 = accept4(r0, 0x0, 0x0, 0x80800) r2 = epoll_create1(0x80000) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r4 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$SO_TIMESTAMPING(r4, 0x1, 0x25, &(0x7f0000000080)=0x2f2c, 0x4) connect$inet(r4, &(0x7f0000000480)={0x2, 0x0, @local}, 0x10) sendmmsg(r4, &(0x7f0000007fc0), 0x800001d, 0x0) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r6, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="8c00000000010104000000000000000002000000240001801400018008000100e000000208000200ac1414000c0002800500010000000000240002801400018008000100e000000108000200e00000020c000280050001000000ffff080007400000000028000d8008000200ffffffff14000380060001"], 0x8c}}, 0x0) sendmsg$NFQNL_MSG_VERDICT_BATCH(r5, 0x0, 0x4) socket$tipc(0x1e, 0x5, 0x0) sendmsg$key(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x80) r7 = socket(0xa, 0x3, 0x3a) setsockopt$MRT6_ADD_MIF(r7, 0x29, 0xca, &(0x7f0000000000)={0x4, 0x1, 0x4}, 0xc) setsockopt$MRT6_FLUSH(r7, 0x29, 0xd4, 0x0, 0x0) r8 = socket(0x400000000010, 0x3, 0x0) r9 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r8, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r10, {0x0, 0x1}, {0xffff, 0xffff}, {0x0, 0x9}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r8, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000140)=@newtfilter={0x74, 0x2c, 0xd27, 0x30bd2b, 0x25dfdbfd, {0x0, 0x0, 0x0, r10, {0x1, 0xffff}, {}, {0x7}}, [@filter_kind_options=@f_flow={{0x9}, {0x44, 0x2, [@TCA_FLOW_EMATCHES={0x501636a30f2d4cce, 0xb, 0x0, 0x1, [@TCA_EMATCH_TREE_HDR={0x8, 0x1, {0x7}}, @TCA_EMATCH_TREE_LIST={0x34, 0x2, 0x0, 0x1, [@TCF_EM_IPT={0x30, 0x1, 0x0, 0x0, {{0x2008, 0x9, 0x40}, [@TCA_EM_IPT_NFPROTO={0x5, 0x4, 0x2}, @TCA_EM_IPT_MATCH_DATA={0x7, 0x5, "ad5fd4"}, @TCA_EM_IPT_MATCH_NAME={0xb}, @TCA_EM_IPT_HOOK={0x8}]}}]}]}]}}]}, 0x74}, 0x1, 0x0, 0x0, 0x10}, 0x2008c014) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r0, &(0x7f0000000140)={0x10}) recvfrom$inet6(r1, 0x0, 0x0, 0x1, 0x0, 0x0) 8.233454129s ago: executing program 3 (id=258): seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x3d, &(0x7f0000000040)={0x1, &(0x7f0000000080)=[{0x6, 0x2, 0x0, 0x7ffffdbd}]}) r0 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r0) ptrace$setregs(0xd, r0, 0x0, &(0x7f00000003c0)="18607651149d7b10b4024fbbdc08899b8f589df2dbb5d7a8d1b36cfab675cb3976ee8100e2878c9cfa178cac130eb046eda93df39ed4b41924dc225ad4028dd63defb87d698be5c749450b350a789dcfc6b2d6a696b5026d1e52f19274566d1da0f353dd65e330ebf71c5e823f2753c5fd76724828ef31b353e71805205c3dceb44cc4c7b3664e29fb") ptrace$getregset(0x4205, r0, 0x2, &(0x7f0000000080)={&(0x7f0000000000)=""/120, 0x78}) ptrace$getregset(0x4204, r0, 0x2, &(0x7f0000000740)={0x0}) ptrace$ARCH_MAP_VDSO_64(0x1e, r0, 0x1, 0x2003) r1 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) syz_usb_connect(0x0, 0x36, &(0x7f0000000040)=ANY=[@ANYBLOB="120100002911ad080a1110115dab010203010902240001010000000904000002c688ff0009050f020000000000090506"], 0x0) ioctl$int_in(r1, 0x40000000af01, 0x0) socket$packet(0x11, 0x3, 0x300) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x48) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x2, 0x8f}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r2 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r2, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) r5 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r5, &(0x7f0000000100)={0x2, 0x0, @local}, 0x10) connect$inet(r5, &(0x7f0000000480)={0x2, 0x0, @multicast2}, 0x10) sendmmsg(r5, &(0x7f0000007fc0), 0x800001d, 0x0) 7.747982919s ago: executing program 2 (id=259): syz_usb_connect(0x0, 0x24, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000d1d7a440041601801f44010203010902120001000000000904"], 0x0) r0 = syz_open_dev$sndctrl(0x0, 0xdc3, 0x0) ioctl$SNDRV_CTL_IOCTL_RAWMIDI_NEXT_DEVICE(r0, 0xc0045520, &(0x7f0000000080)=0xffffbf7f) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x2, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x19) mprotect(&(0x7f00003a8000/0x4000)=nil, 0x4000, 0x1) r1 = gettid() prctl$PR_SCHED_CORE(0x3e, 0x1, r1, 0x0, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x13, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe}, 0x0) socket$key(0xf, 0x3, 0x2) r2 = syz_open_dev$loop(&(0x7f0000000000), 0x75f, 0x1e380) sendfile(r2, r2, 0x0, 0x24002de8) openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x200, 0x0) ioctl$KVM_SET_TSC_KHZ(0xffffffffffffffff, 0xaea2, 0xffffffffffffffff) ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0) openat$procfs(0xffffffffffffff9c, &(0x7f0000000900)='/proc/keys\x00', 0x0, 0x0) 6.69809503s ago: executing program 0 (id=261): r0 = openat(0xffffffffffffffff, &(0x7f0000000040)='./file0\x00', 0x8e042, 0x1f3) ioctl$IOCTL_VMCI_VERSION2(0xffffffffffffffff, 0x7a7, 0x0) socketpair$unix(0x1, 0x3, 0x0, 0x0) connect$unix(0xffffffffffffffff, &(0x7f0000000300)=@abs={0x0, 0x0, 0x4e20}, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0xb49, 0x9, 0x8, 0x0, 0x3}, 0x0) ioctl$SNDRV_SEQ_IOCTL_SET_PORT_INFO(0xffffffffffffffff, 0xc0a85320, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000140), 0x18557f, 0x0) socket$inet(0x2, 0x2, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, 0x0) r1 = syz_open_dev$usbfs(0x0, 0x75, 0x0) ioctl$USBDEVFS_CLAIM_PORT(r1, 0x80045518, &(0x7f0000000000)=0x1) openat$fuse(0xffffffffffffff9c, 0x0, 0x2, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz0\x00', 0x1ff) r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r3 = openat$cgroup_freezer_state(r2, &(0x7f0000000140), 0x2, 0x0) write$cgroup_freezer_state(r3, &(0x7f0000000040)='FROZEN\x00', 0x7) r4 = syz_open_dev$media(&(0x7f0000000380), 0x0, 0x0) ioctl$MEDIA_IOC_SETUP_LINK(r4, 0xc0347c03, &(0x7f00000001c0)={{0x80000000, 0x0, 0x1, [0x0, 0xf7df]}, {0x80000000, 0x0, 0x4, [0x6]}, 0x1, [0x8, 0x3de]}) ioctl$MEDIA_IOC_ENUM_LINKS(r0, 0xc0287c02, &(0x7f00000008c0)={0x80000000, &(0x7f00000001c0)=[{}, {0x80000000, 0x0}], &(0x7f0000000840)}) ioctl$MEDIA_IOC_SETUP_LINK(0xffffffffffffffff, 0xc0347c03, &(0x7f0000000900)={{0x80000000, 0x0, 0x6, [0x5, 0x3]}, {0x80000000, r5, 0x5, [0x3cc, 0x8]}, 0x4, [0x36e7, 0x2]}) sendfile(r3, r3, 0x0, 0x9) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x2000000b, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) munmap(&(0x7f0000002000/0x1000)=nil, 0x1000) r6 = open(&(0x7f00000000c0)='.\x00', 0x0, 0x194) getdents(r6, &(0x7f0000001fc0)=""/184, 0xb8) getdents(r6, &(0x7f0000001fc0)=""/184, 0xb8) 6.4461185s ago: executing program 0 (id=262): r0 = openat(0xffffffffffffffff, 0x0, 0x8e042, 0x1f3) ioctl$IOCTL_VMCI_VERSION2(0xffffffffffffffff, 0x7a7, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000300)=@abs={0x0, 0x0, 0x4e20}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0xb49, 0x9, 0x8, 0x0, 0x3}, 0x0) ioctl$SNDRV_SEQ_IOCTL_SET_PORT_INFO(0xffffffffffffffff, 0xc0a85320, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000140), 0x18557f, 0x0) socket$inet(0x2, 0x2, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, 0x0) r3 = syz_open_dev$usbfs(0x0, 0x75, 0x0) ioctl$USBDEVFS_CLAIM_PORT(r3, 0x80045518, &(0x7f0000000000)=0x1) openat$fuse(0xffffffffffffff9c, 0x0, 0x2, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz0\x00', 0x1ff) r4 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r5 = openat$cgroup_freezer_state(r4, &(0x7f0000000140), 0x2, 0x0) write$cgroup_freezer_state(r5, &(0x7f0000000040)='FROZEN\x00', 0x7) r6 = syz_open_dev$media(&(0x7f0000000380), 0x0, 0x0) ioctl$MEDIA_IOC_SETUP_LINK(r6, 0xc0347c03, &(0x7f00000001c0)={{0x80000000, 0x0, 0x1, [0x0, 0xf7df]}, {0x80000000, 0x0, 0x4, [0x6]}, 0x1, [0x8, 0x3de]}) ioctl$MEDIA_IOC_ENUM_LINKS(r0, 0xc0287c02, &(0x7f00000008c0)={0x80000000, &(0x7f00000001c0)=[{}, {0x80000000, 0x0}], &(0x7f0000000840)}) ioctl$MEDIA_IOC_SETUP_LINK(0xffffffffffffffff, 0xc0347c03, &(0x7f0000000900)={{0x80000000, 0x0, 0x6, [0x5, 0x3]}, {0x80000000, r7, 0x5, [0x3cc, 0x8]}, 0x4, [0x36e7, 0x2]}) sendfile(r5, r5, 0x0, 0x9) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x2000000b, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) munmap(&(0x7f0000002000/0x1000)=nil, 0x1000) r8 = open(&(0x7f00000000c0)='.\x00', 0x0, 0x194) getdents(r8, &(0x7f0000001fc0)=""/184, 0xb8) getdents(r8, &(0x7f0000001fc0)=""/184, 0xb8) 6.410414055s ago: executing program 4 (id=263): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="02000000040000000100000022"], 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000440)={{r0, 0xffffffffffffffff}, &(0x7f00000003c0), &(0x7f0000000400)}, 0x20) (async) r2 = syz_usb_connect(0x0, 0x24, 0x0, 0x0) socket$inet6_mptcp(0xa, 0x1, 0x106) (async) syz_open_dev$admmidi(&(0x7f0000000040), 0x2, 0x200000) (async) syz_usb_control_io$uac1(r2, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r2, 0x0, 0x0) syz_usb_control_io(r2, 0x0, 0x0) bpf$MAP_LOOKUP_BATCH(0x18, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000280), &(0x7f0000000380), 0xffffd6c0, r1}, 0x38) r3 = getpid() ioctl$BLKTRACESETUP(0xffffffffffffffff, 0xc0481273, &(0x7f0000000180)={'\x00', 0x3, 0xffff7893, 0x8, 0x200, 0x1000, r3}) (async) syz_usb_connect(0x2, 0x0, 0x0, 0x0) (async) r4 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r4, 0x3b81, &(0x7f00000000c0)={0xc, 0x0, 0x0}) (async) ioctl$IOMMU_IOAS_ALLOC(r4, 0x3b81, &(0x7f0000000000)={0xc, 0x0, 0x0}) ioctl$IOMMU_TEST_OP_MOCK_DOMAIN(r4, 0x3ba0, &(0x7f0000000100)={0x48, 0x2, r6, 0x0, 0x0}) ioctl$IOMMU_TEST_OP_MOCK_DOMAIN_REPLACE(r4, 0x3ba0, &(0x7f0000000280)={0x48, 0x15, r7, 0x0, r5}) 6.050074133s ago: executing program 2 (id=264): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f00000002c0)=@abs={0x0, 0x0, 0x1001}, 0x6e) sendmmsg$unix(r1, 0x0, 0x0, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r2 = openat$proc_mixer(0xffffffffffffff9c, &(0x7f0000000000)='/proc/asound/card0/oss_mixer\x00', 0x1, 0x0) close(r2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe}, 0x0) syz_usb_connect(0x0, 0x5f, 0x0, 0x0) sendmsg$TIPC_NL_LINK_RESET_STATS(0xffffffffffffffff, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000240)=ANY=[@ANYBLOB="f4000000", @ANYRES16, @ANYBLOB="010000000000000000000a000000c40004801300010062726f6164636173742d6c696e6b00000900010073797a31200000"], 0xf4}}, 0x0) sendmsg$nl_xfrm(0xffffffffffffffff, 0x0, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, 0x0}, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0x5, &(0x7f0000002fc0)=ANY=[@ANYBLOB="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"], &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xfffffffffffffe89, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000540)={r3, 0x0, 0xf, 0x0, &(0x7f0000000200)="5c71f91b0dc413550230b4c817a628527e357783e91682da59e3ced8259fdd7b984b46520fcffbd508e70000000000000009511e65244bdfee495747f7f508ddf3539d0588", 0x0, 0x1, 0x0, 0x1, 0xfd1a, &(0x7f0000000340)="0517701f2ec458ac420bd63c6af4c52e17a68b534308f4a90a5f594944911431db60f3f47273b6c2f4a2215136b1724a234f1266fb033206e15e62c5cef0383881ec4497a3841b134e66c74d77d30ecbbad3377dd56a52935be4bffab43df00c197c8e90520aff140cfaae9e920800000000000000354100aa28bef2da687c74ab3389d3de98", 0x0}, 0x50) r4 = socket$inet(0x2, 0x801, 0x0) pipe2(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) splice(r4, 0x0, r5, 0x0, 0x7ffff000, 0x0) bpf$BPF_MAP_FREEZE(0x16, &(0x7f0000000040)=r5, 0x4) r6 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) r7 = ioctl$KVM_CREATE_VM(r6, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r7, 0x4020ae46, &(0x7f0000000540)={0x0, 0x3, 0x0, 0x2000, &(0x7f0000ffe000/0x2000)=nil}) ioctl$KVM_CLEAR_DIRTY_LOG(r7, 0xc018aec0, &(0x7f0000000140)={0xae10906a41272cf9, 0x280, 0x100, 0x0}) socket(0x400000000010, 0x3, 0x0) r8 = socket$packet(0x11, 0x3, 0x300) bpf$PROG_LOAD(0x5, 0x0, 0x0) sendto$packet(r8, &(0x7f0000000740)="565a92bd2ad96a4be42a5362d1118459ca318a12", 0x14, 0x2000c0c0, &(0x7f0000000000)={0x11, 0x6, 0x0, 0x1, 0x1, 0x6, @local}, 0x14) 5.712729998s ago: executing program 1 (id=265): r0 = syz_open_dev$I2C(&(0x7f0000000000), 0x0, 0x0) ioctl$I2C_FUNCS(r0, 0x705, &(0x7f0000000040)) openat$kvm(0xffffffffffffff9c, &(0x7f0000000440), 0x0, 0x0) ioctl$DRM_IOCTL_GET_CLIENT(0xffffffffffffffff, 0xc0286405, &(0x7f0000000400)={0xfffffff2, 0x8, {0x0}, {}, 0x0, 0x84}) capset(&(0x7f0000000500)={0x20080522, r1}, &(0x7f0000000540)={0x4, 0x6, 0x1000, 0x7, 0x6, 0x2}) syz_usb_connect(0x5, 0x36, &(0x7f0000000080)={{0x12, 0x1, 0x110, 0x60, 0xbb, 0x41, 0x8, 0xc2e, 0x700, 0xe13b, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0xa2, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x61, 0x1, 0x2, 0x23, 0x53, 0x83, 0x3, [], [{{0x9, 0x5, 0x3, 0x3, 0x3ff, 0x8, 0x40, 0x4}}, {{0x9, 0x5, 0x85, 0x3, 0x40, 0xb, 0x2, 0xb}}]}}]}}]}}, 0x0) syz_usb_connect$cdc_ecm(0x5, 0x15e, &(0x7f00000000c0)={{0x12, 0x1, 0x41, 0x2, 0x0, 0x0, 0x20, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x14c, 0x1, 0x1, 0x0, 0x60, 0xff, [{{0x9, 0x4, 0x0, 0x80, 0x2, 0x2, 0x6, 0x0, 0x5, {{0x9, 0x24, 0x6, 0x0, 0x0, "e5941567"}, {0x5, 0x24, 0x0, 0x81}, {0xd, 0x24, 0xf, 0x1, 0x6, 0x7fff, 0x9, 0xf}, [@acm={0x4, 0x24, 0x2, 0x8}, @mdlm={0x15, 0x24, 0x12, 0x18}, @mdlm_detail={0xf4, 0x24, 0x13, 0xb, "747fa848b9ebb6590813f7f4212b14fdeba6b188ee786bf1b886853cbd785bd3d14e72f1551ed26fba6797274bed9e728c6c26e33a6c2292f07f7c58e1e5975cbc20b549ecaa289197a09702e7d63309afba4a328c6ab89ab94b3858fbd2083ff6c0c88c5d33859f3795b7c7d98002e1a275e743ad5e9c9c2c18f04bca0fd0f881cf2669dfc1bf5fab14c50cf4366eff54762bffd0ce0957bcf4f69176446802536029c5e3bf730eb4214b07591c71442deb8def019e03b2a0df247ddd796c0bac10099fc606961f28cdf7aeadfe68ee11dedd163118bf9c131515c67286b83ed77fc7242b0b8d27a543160d7386cc4e"}]}, {[], {{0x9, 0x5, 0x82, 0x2, 0x40, 0xa, 0x73, 0x2}}, {{0x9, 0x5, 0x3, 0x2, 0x200, 0x4, 0x9, 0x7}}}}}]}}]}}, &(0x7f0000000480)={0xa, &(0x7f0000000000)={0xa, 0x6, 0x110, 0x2a, 0x2, 0x7, 0xff, 0xff}, 0x5, &(0x7f0000000240)={0x5, 0xf, 0x5}, 0x6, [{0x4, &(0x7f0000000280)=@lang_id={0x4, 0x3, 0xf0ff}}, {0x4, &(0x7f00000002c0)=@lang_id={0x4}}, {0x4, &(0x7f0000000300)=@lang_id={0x4, 0x3, 0x300a}}, {0x4, &(0x7f0000000340)=@lang_id={0x4, 0x3, 0xc07}}, {0x4, &(0x7f0000000380)=@lang_id={0x4, 0x3, 0x1401}}, {0x4, &(0x7f00000003c0)=@lang_id={0x4, 0x3, 0x4001}}]}) r2 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) bind$netlink(r3, &(0x7f0000514ff4)={0x10, 0x0, 0x25dfdbfc, 0x2ffffffff}, 0xc) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r5 = socket(0x400000000010, 0x3, 0x0) r6 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r5, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r7, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0x2}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x0, 0x3}}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r5, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000340)=@newtfilter={0x84, 0x2c, 0xd27, 0x30bd29, 0x25dfdc00, {0x0, 0x0, 0x0, r7, {0x0, 0x3}, {}, {0x3}}, [@filter_kind_options=@f_matchall={{0xd}, {0x50, 0x2, [@TCA_MATCHALL_ACT={0x4c, 0x2, [@m_ife={0x48, 0x1, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c, 0x1, {{0x40, 0x6, 0x20000000, 0xea, 0x100004}}}]}, {0x4}, {0xc}, {0xc, 0x8, {0x2, 0x3}}}}]}]}}]}, 0x84}, 0x1, 0x0, 0x0, 0x10}, 0x0) r8 = socket(0x10, 0x803, 0x0) r9 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r8, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2b, 0xffffffff, {0x0, 0x0, 0x0, r10, {0x0, 0x7}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}}, 0x0) r11 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x2) ioctl$KVM_SET_MP_STATE(r11, 0x4004ae99, &(0x7f0000000040)) 5.682272542s ago: executing program 4 (id=266): creat(&(0x7f0000000040)='./file0\x00', 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x8400, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=00000000000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r0, &(0x7f0000006380)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r0, &(0x7f0000000040)={0x50, 0x0, r1, {0x7, 0x1f}}, 0x50) r2 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_RECVNXTINFO(r2, 0x84, 0x21, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x1e, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r3 = syz_open_dev$tty20(0xc, 0x4, 0x1) r4 = socket$alg(0x26, 0x5, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x1f, 0xd, &(0x7f0000000980)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bind$alg(r4, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-camellia-aesni\x00'}, 0x58) r5 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000040), 0x42, 0x0) syz_mount_image$fuse(0x0, &(0x7f0000000000)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount$fuse(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r5, @ANYBLOB=',rootmode=0000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) stat(&(0x7f0000000180)='./file0/../file0/file0\x00', 0x0) creat(&(0x7f0000000080)='./file0/../file0/file0\x00', 0x81) read$FUSE(r5, &(0x7f000000e280)={0x2020, 0x0, 0x0, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r5, &(0x7f0000000380)={0x50, 0x0, r6, {0x7, 0x28, 0x0, 0x40488060, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x24522716a989086f, 0xfffffffc}}, 0x50) syz_fuse_handle_req(r5, &(0x7f0000002680)="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", 0x2000, &(0x7f0000000940)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000006c0)={0x90, 0x0, 0x8, {0x1, 0x2, 0x16, 0x1, 0xfffffffd, 0x4, {0x5, 0x80, 0x5, 0x0, 0x0, 0x4000000000008, 0x4, 0x800, 0x6, 0x1000, 0x7fffffff, r7, r8, 0x0, 0x6}}}, 0x0, 0x0, 0x0, 0x0, 0x0}) setsockopt$ALG_SET_KEY(r4, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r9 = accept4(r4, 0x0, 0x0, 0x800) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r9, 0x84, 0x6f, &(0x7f0000000300)={0x0, 0x0, 0x0}, &(0x7f0000000340)=0x10) sendmmsg$alg(r9, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048"}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r9, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) write$binfmt_misc(r3, &(0x7f0000000240), 0xfffffecc) syz_fuse_handle_req(r0, &(0x7f00000021c0)="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", 0x2000, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000580)={0x20}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r10 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0xa4c81, 0x0) io_setup(0x202, &(0x7f0000000200)=0x0) io_submit(r11, 0x1, &(0x7f0000000700)=[&(0x7f0000000440)={0x0, 0x20000000, 0x4, 0x1, 0x0, r10, &(0x7f00000003c0)="6a7e2c1eb6", 0x5, 0x1}]) 3.920696397s ago: executing program 0 (id=267): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x11, 0xc, &(0x7f0000000b80)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000005000000b703000000000000850000007200000095"], 0x0, 0x4, 0x0, 0x0, 0x0, 0x24, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000b40)={&(0x7f0000000600)='kfree\x00', r0}, 0x10) socket$inet_tcp(0x2, 0x1, 0x0) r1 = socket(0x1e, 0x4, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = getpid() sendmsg$unix(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000040)="9d42288a8504", 0x6}], 0x1, &(0x7f0000000200)=[@cred={{0x1c, 0x1, 0x2, {r4}}}], 0x20, 0x4000080}, 0xc000) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.bfq.idle_time\x00', 0x275a, 0x0) setsockopt$sock_attach_bpf(r2, 0x1, 0x2a, &(0x7f0000000100)=r5, 0x4) recvmsg$unix(r2, &(0x7f0000001a00)={0x0, 0x0, 0x0}, 0x142) r6 = socket(0x1e, 0x4, 0x0) r7 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f00000004c0)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000480)={&(0x7f0000000440)=@ipv4_getnetconf={0x1c, 0x52, 0x8, 0x70bd2d, 0x25dfdbfb, {}, [@NETCONFA_FORWARDING={0x8, 0x2, 0x401}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4000}, 0x40000) ioctl$VIDIOC_EXPBUF(0xffffffffffffffff, 0xc0405610, &(0x7f0000000100)={0x8, 0xbc93, 0xef8, 0x4000, 0xffffffffffffffff}) connect$unix(r6, &(0x7f0000000500)=@file={0x1, './file0\x00'}, 0x6e) ioctl$DMA_BUF_IOCTL_SYNC(r8, 0x40086200, &(0x7f0000000300)=0x1) getsockopt$inet_pktinfo(r1, 0x0, 0x8, &(0x7f0000000180)={0x0, @empty, @broadcast}, &(0x7f00000001c0)=0xc) sendmsg$nl_route(r7, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000002c0)=@ipv4_getnexthop={0x18, 0x6a, 0x800, 0x70bd2d, 0x25dfdbfe}, 0x18}}, 0x0) dup(r7) r9 = socket$nl_audit(0x10, 0x3, 0x9) r10 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r10, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)={0x50, 0x2, 0x6, 0x5, 0x0, 0x0, {}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_TYPENAME={0xc, 0x3, 'hash:ip\x00'}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_TIMEOUT={0x8, 0x6, 0x0}]}, @IPSET_ATTR_PROTOCOL={0x5}]}, 0x50}}, 0x20000000) sendmsg$AUDIT_USER_AVC(r9, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000200)={0x14, 0x453, 0x20, 0x70bd2b, 0x25dfdbfb, '\x00'}, 0x14}, 0x1, 0x0, 0x0, 0x4008140}, 0x880) syz_open_dev$usbmon(&(0x7f0000000080), 0x0, 0x0) ioctl$EVIOCSFF(0xffffffffffffffff, 0x40304580, &(0x7f00000006c0)={0x0, 0x0, 0x42, {0x0, 0x1}, {0x47, 0xfffe}, @cond=[{0x84, 0x3ff, 0x4404, 0x4, 0x1, 0xd}, {0x0, 0xa0, 0x1, 0x5, 0x800, 0xff01}]}) r11 = syz_open_dev$evdev(&(0x7f00000000c0), 0x100000003, 0x822b01) write$char_usb(r11, &(0x7f0000000040)="e2", 0x12d8) unshare(0x28000600) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000400)={0x8, 0x10, &(0x7f0000000000)=ANY=[@ANYBLOB="183000000a0000180000000001000000b7080000000000007baa00fe00000000b5080200000000007b8af0ff00000000bf8100000000000007010000a8d5b100bfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32, @ANYBLOB="0000000000000000b705000008000000850000000800000095"], &(0x7f0000000300)='GPL\x00', 0x3, 0xff7, &(0x7f0000001e00)=""/4087, 0x40f00, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) syz_open_dev$sg(&(0x7f00000003c0), 0x0, 0x5) 3.706265891s ago: executing program 0 (id=268): syz_emit_ethernet(0x6a, &(0x7f0000000000)={@broadcast, @random="1704b45adbde", @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x5c, 0x0, 0x0, 0x0, 0x1, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @local}, @time_exceeded={0x5, 0x0, 0x0, 0xe0, 0x0, 0xe000, {0x3, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x11, 0x0, @multicast2=0xe0001b59, @rand_addr, {[@timestamp_prespec={0x44, 0x2c, 0x0, 0x3, 0x0, [{@private}, {@private}, {@dev}, {@remote}, {@private}]}]}}}}}}}, 0x0) r0 = socket$tipc(0x1e, 0x5, 0x0) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x8440, 0x0) ioctl$TIOCSERGETLSR(r1, 0x5459, &(0x7f00000000c0)) getsockopt$TIPC_SOCK_RECVQ_DEPTH(r0, 0x10f, 0x84, 0x0, 0x0) pipe2$9p(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80000) r3 = socket(0x28, 0x5, 0x0) connect$vsock_stream(r3, &(0x7f0000000000)={0x28, 0x0, 0x0, @host}, 0x10) write$P9_RWRITE(r2, &(0x7f0000000140)={0xb, 0x77, 0x1, 0x7}, 0xb) syz_usb_connect(0x0, 0x2d, &(0x7f0000000000)=ANY=[@ANYBLOB="120100021982302013042360e5ec0102030109021b0001000060020904840001ee48b1000905827931"], 0x0) 3.674359761s ago: executing program 1 (id=269): eventfd(0x5) socket$kcm(0x2, 0x200000000000001, 0x106) r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-camellia-aesni-avx2\x00'}, 0x58) accept4(r0, 0x0, 0x0, 0x800) socket$inet6_tcp(0xa, 0x1, 0x0) socket$inet6(0xa, 0x2, 0x0) pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$can_raw(0x1d, 0x3, 0x1) setsockopt$CAN_RAW_FILTER(r2, 0x65, 0x1, &(0x7f0000000140)=[{{0x0, 0x0, 0x1}, {0x0, 0x0, 0x1, 0x1}}, {{0x0, 0x0, 0x0, 0x1}, {0x0, 0x0, 0x1, 0x1}}], 0x10) bind$can_raw(r2, &(0x7f00000000c0), 0x10) setsockopt$CAN_RAW_FILTER(r2, 0x65, 0x1, &(0x7f0000000100)=[{{0x0, 0x0, 0x1}, {0x0, 0x0, 0x1, 0x1}}], 0x8) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000740)=ANY=[@ANYBLOB="1800000040000701fcffffff000bc42fae7c000004004880"], 0x18}, 0x1, 0x0, 0x0, 0x488c0}, 0xc000) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000240)={0x0, r1, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00'}, 0x30) socket$can_raw(0x1d, 0x3, 0x1) socket$can_raw(0x1d, 0x3, 0x1) r4 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) openat$cgroup_int(r4, &(0x7f0000000100)='cgroup.max.descendants\x00', 0x2, 0x0) socket$packet(0x11, 0x2, 0x300) socket$nl_route(0x10, 0x3, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) r7 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r7, &(0x7f00000000c0)={0x0, 0x20, &(0x7f0000000080)={&(0x7f0000000140)=ANY=[@ANYBLOB="9000000010000305000000000000000000000700", @ANYRES32=0x0, @ANYBLOB="996e06004d4c0700540012800800010068737200480002800500030008000000050003000500000005000300fd00000008000200", @ANYRES32=r5, @ANYBLOB="08000100", @ANYRES32=r6], 0x90}}, 0x0) 3.480045205s ago: executing program 4 (id=270): r0 = socket$kcm(0x2b, 0x1, 0x0) r1 = syz_io_uring_setup(0x9eb, &(0x7f0000000140)={0x0, 0xfad6}, &(0x7f0000000240)=0x0, &(0x7f0000000280)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) r4 = socket$packet(0x11, 0x2, 0x300) sendto(r4, 0x0, 0x0, 0x0, &(0x7f0000000c80)=@x25={0x9, @remote={'\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc', 0x0}}, 0x80) syz_usb_connect$hid(0x5, 0x36, &(0x7f0000000040)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40, 0x46d, 0xc222, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x0, 0x1, 0x0, {0x9, 0x21, 0x1000, 0x6, 0x1, {0x22, 0x7}}, {{{0x9, 0x5, 0x81, 0x3, 0x0, 0xd, 0x3}}}}}]}}]}}, 0x0) syz_io_uring_submit(r2, r3, &(0x7f00000002c0)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x3}) io_uring_enter(r1, 0xdb4, 0x0, 0x0, 0x0, 0x0) write$binfmt_script(0xffffffffffffffff, 0x0, 0x0) sendmsg$inet(r0, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x300}, 0x200048cc) shutdown(r0, 0x1) 3.301249651s ago: executing program 1 (id=271): r0 = syz_open_dev$usbfs(&(0x7f0000000480), 0x77, 0x41341) ioctl$USBDEVFS_IOCTL(r0, 0xc0105512, &(0x7f0000000000)=@usbdevfs_connect) ioctl$USBDEVFS_SUBMITURB(r0, 0x8038550a, &(0x7f00000014c0)=@urb_type_iso={0x0, {0xc, 0x1}, 0x2, 0x40, &(0x7f0000000040)="a562efacf6572cbd2927971f7e77a7ef54dd126f22c13160e7a251d2778fce31958da6f2bb523141af792a6d728d0ba1a346142f9cb2e5ee359b7f4d43a632e9a593871d95ee37ee03b54ddc328ebbac9611f5c79d305bb08c8cc94d26d506e73992c0af6955feddbe2e208986a0f09e181b07f585ef03625dcfc6a652589a9c7b14da07fc0e6849bdd862eac56a00c7bd4314917e208da90947410e34176e327e4110b20cd48a021f6084362d3390bbc8489fe6f1dfa06c96524fed7ddc9bc0e3c7e8079b138219cc1a3056a0e988d8645f", 0xd2, 0x2, 0x80, 0x69, 0x1, 0x8, &(0x7f00000004c0)="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", [{0x6, 0x7, 0x9}, {0x7, 0x0, 0xfff}, {0x4, 0x8, 0xc4b}, {0xb, 0x5, 0x3}, {0x7, 0x8, 0x9}, {0x101, 0x4, 0x6}, {0x4, 0x1, 0x101}, {0x4, 0x2, 0xffff8001}, {0xffffffff, 0x3, 0xc66}, {0x81d7, 0xf, 0x3}, {0xc5, 0x47, 0x80000000}, {0x2, 0x0, 0xffff7fff}, {0x9, 0x4, 0x7}, {0x1, 0x2, 0x3}, {0x3, 0xfffffff7, 0x2}, {0x57, 0x7}, {0xffff, 0x5, 0x5}, {0x1ff, 0x6b1}, {0xc5, 0x9, 0x3}, {0x2, 0x80, 0x7}, {0x0, 0x22, 0x80000001}, {0x7ff, 0x6c, 0x80}, {0x8, 0x0, 0x4}, {0x7, 0x7ff, 0x80000001}, {0xc6f1, 0x5}, {0x40400, 0x5, 0x3}, {0x10001, 0x2b9, 0x9}, {0x4, 0x6, 0xfb33}, {0x56, 0x5, 0xcbd}, {0xfffffff7, 0x3, 0x55bc2dc}, {0x4707, 0x40, 0xf20}, {0x80000001, 0x8, 0x100}, {0x2, 0x1, 0x2}, {0x2, 0x1, 0x6}, {0x5, 0xffffffff, 0x1}, {0x3, 0x3, 0xee0fcc05}, {0x4, 0x1}, {0x6f, 0x3, 0x7}, {0xfff, 0x205, 0x9}, {0xffffffff, 0xffff, 0x9}, {0x2, 0x4, 0x208}, {0x891c, 0x5, 0x400}, {0x8, 0x245d, 0xffffffff}, {0x800, 0x360f, 0x2}, {0x7, 0x2950, 0xfffffff5}, {0x1ff, 0x1000, 0x101}, {0x6376, 0x40, 0x401}, {0xfffff5cb, 0x1, 0x6}, {0x10001, 0x4, 0x6}, {0x5, 0xc50, 0x7}, {0xedd0, 0x7, 0x2}, {0x0, 0xfff, 0xffff461c}, {0x2, 0x0, 0x4dbd}, {0x6, 0xe, 0x5}, {0x4, 0x6, 0xc}, {0x4, 0x80, 0x400}, {0x80, 0xfff, 0x74}, {0xffff8001, 0xfffffff7, 0x7}, {0x0, 0x6899, 0x7}, {0xc, 0x717, 0x5}, {0x7f, 0x1, 0x4}, {0x7fffffff, 0x9, 0x6}, {0x9, 0x8}, {0xfffffffe, 0xfffffffe, 0xd89e}, {0xffffff59, 0x841, 0x3}, {0x401, 0x3, 0x4}, {0x0, 0xf, 0x327}, {0x8, 0x10001, 0xae4}, {0x5, 0xbc14, 0x1}, {0x10000, 0xf, 0x3}, {0x1c1b, 0xfe, 0x22}, {0x8, 0x7fff, 0x401}, {0x10001, 0x65f, 0x5}, {0x6, 0x5, 0xc49}, {0x7, 0x8, 0xfffffff8}, {0x1, 0x5, 0x2}, {0x92, 0x5, 0x1}, {0xfffff9c3, 0x800, 0xca}, {0x8, 0x4, 0xd}, {0xffffffff, 0x5, 0x80000001}, {0x8, 0x6, 0xd}, {0x1, 0x6, 0x9}, {0x1, 0x2, 0x10000}, {0x0, 0x6, 0xe}, {0x0, 0x0, 0x9}, {0x9faf, 0x8, 0xc}, {0x8, 0x3, 0x7}, {0x2, 0x40, 0x2}, {0x4, 0xc29, 0x1}, {0x4, 0xd, 0xffff}, {0x2, 0x5, 0x1ef}, {0x0, 0x5, 0x6}, {0x7, 0x5, 0x21461b1f}, {0x8000, 0x2, 0xffffffff}, {0x532, 0x4, 0xefd}, {0x1, 0x5, 0x3}, {0x2, 0x10001, 0x12a4}, {0x8dbe, 0xfffff801, 0x7fff}, {0x3, 0x2, 0x81}, {0x80, 0x9, 0x2e83}, {0x9, 0x3, 0x3}, {0x0, 0x9, 0x5}, {0x1, 0x4, 0x2}, {0x5, 0x2, 0x174b}, {0x2, 0x3, 0x3}]}) 3.299725932s ago: executing program 3 (id=272): r0 = openat(0xffffffffffffffff, &(0x7f0000000040)='./file0\x00', 0x8e042, 0x1f3) ioctl$IOCTL_VMCI_VERSION2(0xffffffffffffffff, 0x7a7, 0x0) socketpair$unix(0x1, 0x3, 0x0, 0x0) connect$unix(0xffffffffffffffff, &(0x7f0000000300)=@abs={0x0, 0x0, 0x4e20}, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0xb49, 0x9, 0x8, 0x0, 0x3}, 0x0) ioctl$SNDRV_SEQ_IOCTL_SET_PORT_INFO(0xffffffffffffffff, 0xc0a85320, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000140), 0x18557f, 0x0) socket$inet(0x2, 0x2, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, 0x0) r1 = syz_open_dev$usbfs(0x0, 0x75, 0x0) ioctl$USBDEVFS_CLAIM_PORT(r1, 0x80045518, &(0x7f0000000000)=0x1) openat$fuse(0xffffffffffffff9c, 0x0, 0x2, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz0\x00', 0x1ff) r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r3 = openat$cgroup_freezer_state(r2, &(0x7f0000000140), 0x2, 0x0) write$cgroup_freezer_state(r3, &(0x7f0000000040)='FROZEN\x00', 0x7) r4 = syz_open_dev$media(&(0x7f0000000380), 0x0, 0x0) ioctl$MEDIA_IOC_SETUP_LINK(r4, 0xc0347c03, &(0x7f00000001c0)={{0x80000000, 0x0, 0x1, [0x0, 0xf7df]}, {0x80000000, 0x0, 0x4, [0x6]}, 0x1, [0x8, 0x3de]}) ioctl$MEDIA_IOC_ENUM_LINKS(r0, 0xc0287c02, &(0x7f00000008c0)={0x80000000, &(0x7f00000001c0)=[{}, {0x80000000, 0x0}], &(0x7f0000000840)}) ioctl$MEDIA_IOC_SETUP_LINK(0xffffffffffffffff, 0xc0347c03, &(0x7f0000000900)={{0x80000000, 0x0, 0x6, [0x5, 0x3]}, {0x80000000, r5, 0x5, [0x3cc, 0x8]}, 0x4, [0x36e7, 0x2]}) sendfile(r3, r3, 0x0, 0x9) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x2000000b, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) munmap(&(0x7f0000002000/0x1000)=nil, 0x1000) r6 = open(&(0x7f00000000c0)='.\x00', 0x0, 0x194) getdents(r6, &(0x7f0000001fc0)=""/184, 0xb8) getdents(r6, &(0x7f0000001fc0)=""/184, 0xb8) 3.169357245s ago: executing program 1 (id=273): socket$nl_route(0x10, 0x3, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe}, 0x0) syz_usb_connect(0x0, 0x5f, &(0x7f0000000380)=ANY=[@ANYBLOB="12010000b1f203401e0903003bd7010203010902"], 0x0) write$vga_arbiter(0xffffffffffffffff, &(0x7f0000001580)=ANY=[], 0x13) prctl$PR_SET_VMA(0x53564d41, 0x0, &(0x7f0000ff6000/0x4000)=nil, 0x4000, 0x0) syz_clone(0x2010800, 0x0, 0x40, 0x0, 0x0, 0x0) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) close(r3) sendmsg$MPTCP_PM_CMD_SET_LIMITS(r0, 0x0, 0x804) syz_clone(0x80001000, 0x0, 0x0, &(0x7f0000000000), 0x0, 0x0) ioctl$TUNGETDEVNETNS(r3, 0xff07, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r4 = openat$sysctl(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sys/vm/compact_memory\x00', 0x1, 0x0) syz_open_procfs(0x0, &(0x7f0000000340)='timerslack_ns\x00') r5 = openat$procfs(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/key-users\x00', 0x0, 0x0) read$rfkill(r5, &(0x7f0000000200), 0x8) write(r4, 0x0, 0x0) 3.073395002s ago: executing program 3 (id=274): syz_usb_connect(0x0, 0x24, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000d1d7a440041601801f44010203010902120001000000000904"], 0x0) r0 = syz_open_dev$sndctrl(0x0, 0xdc3, 0x0) ioctl$SNDRV_CTL_IOCTL_RAWMIDI_NEXT_DEVICE(r0, 0xc0045520, &(0x7f0000000080)=0xffffbf7f) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x2, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x19) mprotect(&(0x7f00003a8000/0x4000)=nil, 0x4000, 0x1) r1 = gettid() prctl$PR_SCHED_CORE(0x3e, 0x1, r1, 0x0, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x13, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe}, 0x0) socket$key(0xf, 0x3, 0x2) r2 = syz_open_dev$loop(&(0x7f0000000000), 0x75f, 0x1e380) sendfile(r2, r2, 0x0, 0x24002de8) openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x200, 0x0) ioctl$KVM_SET_TSC_KHZ(0xffffffffffffffff, 0xaea2, 0xffffffffffffffff) ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0) openat$procfs(0xffffffffffffff9c, &(0x7f0000000900)='/proc/keys\x00', 0x0, 0x0) 2.877305529s ago: executing program 2 (id=275): r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000080)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000e40), 0x40080, 0x0) ioctl$TIOCPKT(r1, 0x5420, &(0x7f00000000c0)=0x1) ioctl$TCSETS(r1, 0x5402, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, "fe94b89fc43c3328eae0cae1f5eba329e6f216"}) splice(r1, 0x0, r0, 0x0, 0x7ffff000, 0x9) 2.642205804s ago: executing program 2 (id=276): syz_emit_ethernet(0x6e, &(0x7f0000000740)={@broadcast, @dev, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, '\x00', 0x38, 0x3a, 0x0, @remote, @mcast2, {[], @param_prob={0x4, 0x1, 0x0, 0x4, {0x9, 0x6, "9eccdc", 0x273, 0x6c, 0x0, @ipv4={'\x00', '\xff\xff', @empty}, @remote, [], "73ee99d2d629e569"}}}}}}}, 0x0) socket$inet6_sctp(0xa, 0x801, 0x84) r0 = openat$misdntimer(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) readv(r0, &(0x7f0000000340), 0x0) ioctl$IMADDTIMER(r0, 0x80044940, &(0x7f0000000000)) munmap(&(0x7f0000002000/0x1000)=nil, 0x1000) r1 = gettid() openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x48240, 0x0) bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000280)={@map, 0xffffffffffffffff, 0x34, 0x30, 0x0, @void, @void, @void, @value}, 0x20) openat(0xffffffffffffff9c, &(0x7f00000001c0)='./file0/file0\x00', 0x210003, 0x7c62dba0331a037d) r2 = socket(0x2b, 0x1, 0x1) setsockopt$inet6_tcp_TCP_REPAIR(r2, 0x6, 0x13, &(0x7f0000000000)=0x1, 0x4) r3 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000280)=ANY=[@ANYBLOB="020a000307ff80000000000000de3f0005001a00ac1414bb000000000000000000000000ff0100000000000000000000000000010a0004"], 0x38}}, 0x0) connect$inet6(r2, &(0x7f0000001040)={0xa, 0x4e23, 0x6, @loopback, 0x5}, 0x1c) r4 = socket(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000000)={'veth0_to_team\x00'}) syz_open_procfs(r1, &(0x7f0000000000)='map_files\x00') 2.42833298s ago: executing program 2 (id=277): r0 = socket$inet_smc(0x2b, 0x1, 0x0) setsockopt$inet_tcp_TCP_FASTOPEN_KEY(r0, 0x6, 0x21, &(0x7f0000000040)="5766b1b827f600333b09d3748ee7d700", 0x10) socket$inet6_tcp(0xa, 0x1, 0x0) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@abs, 0x6e) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg(r2, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) sched_setattr(0x0, &(0x7f00000001c0)={0x38, 0x5, 0x0, 0x0, 0x0, 0xb49, 0x10000, 0x8, 0x9, 0x3}, 0x0) listen(0xffffffffffffffff, 0x3) close(0x3) socket(0x10, 0x3, 0x0) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000100)={0x0, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00'}, 0x30) unshare(0x2a020400) r3 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r3, 0x107, 0x11, &(0x7f0000000080)=0x8, 0x4) 2.007847247s ago: executing program 0 (id=278): r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TCSETS2(r0, 0x402c542b, 0x0) ioctl$TIOCL_PASTESEL(r0, 0x541c, &(0x7f0000000000)) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, 0x0) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000000), 0x651, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000840)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000000000"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) ioctl$sock_inet_SIOCSIFADDR(0xffffffffffffffff, 0x8916, &(0x7f0000000180)={'lo\x00', {0x2, 0x4e21, @empty=0x7f000000}}) socket$pppl2tp(0x18, 0x1, 0x1) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000000)={'bridge_slave_0\x00', 0x0}) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000100)=@bridge_delneigh={0x28, 0x1c, 0x1, 0x0, 0x0, {0x7, 0x0, 0x0, r4, 0x2}, [@NDA_LLADDR={0xa, 0x2, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x1b}}]}, 0x28}}, 0x0) (fail_nth: 5) 1.842200875s ago: executing program 4 (id=279): syz_open_dev$tty1(0xc, 0x4, 0x2) socket$inet6(0xa, 0x1, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r2 = fcntl$getown(r1, 0x9) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x2, 0x0) sendmsg(r1, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0xb49, 0x9, 0x8, 0x0, 0x3}, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000380)={'syzkaller0\x00', 0x7101}) socket(0x10, 0x80002, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r5 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r5, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0x25dfdbfd, {0x0, 0x0, 0x0, r6, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0xf}}, [@qdisc_kind_options=@q_htb={{0x8}, {0x1c, 0x2, [@TCA_HTB_INIT={0x18, 0x2, {0x3, 0x8, 0x10000}}]}}]}, 0x48}}, 0x0) sendmsg$nl_route_sched(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000700)=@newtfilter={0x210, 0x2c, 0xd27, 0x70bd24, 0x25dfdbff, {0x0, 0x0, 0x0, r6, {0xb, 0x9}, {}, {0xfff2, 0x2}}, [@filter_kind_options=@f_bpf={{0x8}, {0x20, 0x2, [@TCA_BPF_OPS={{0x6, 0x4, 0x1}, {0xc, 0x5, [{0x6, 0xd, 0x5, 0x4}]}}, @TCA_BPF_FLAGS_GEN={0x8, 0x9, 0x1}]}}, @TCA_RATE={0x6, 0x5, {0x1, 0x81}}, @TCA_CHAIN={0x8, 0xb, 0xb}, @filter_kind_options=@f_matchall={{0xd}, {0x19c, 0x2, [@TCA_MATCHALL_CLASSID={0x8, 0x1, {0x7}}, @TCA_MATCHALL_ACT={0x190, 0x2, [@m_bpf={0xb4, 0x12, 0x0, 0x0, {{0x8}, {0x50, 0x2, 0x0, 0x1, [@TCA_ACT_BPF_OPS_LEN={0x6, 0x3, 0x6}, @TCA_ACT_BPF_NAME={0xd, 0x6, './cgroup\x00'}, @TCA_ACT_BPF_PARMS={0x18, 0x2, {0x3, 0x0, 0x5, 0x8, 0xc}}, @TCA_ACT_BPF_OPS_LEN={0x6, 0x3, 0x1}, @TCA_ACT_BPF_OPS_LEN={0x6, 0x3, 0x9}, @TCA_ACT_BPF_OPS={0xc, 0x4, [{0x7, 0x9c, 0x3}]}]}, {0x3f, 0x6, "6bc6b75ac01cf4761069d4320fbd089e02f159b3a78eeeb1f92fec904ee20bfc2d5748d166572625926ddec95912fc194ed738b6c188a3aa065c20"}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x1, 0x3}}}}, @m_skbmod={0xd8, 0x4, 0x0, 0x0, {{0xb}, {0xa8, 0x2, 0x0, 0x1, [@TCA_SKBMOD_SMAC={0xa, 0x4, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x1f}}, @TCA_SKBMOD_DMAC={0xa, 0x3, @remote}, @TCA_SKBMOD_PARMS={0x24, 0x2, {{0x4, 0x5, 0x2, 0x1, 0x7fffffff}, 0x1}}, @TCA_SKBMOD_PARMS={0x24, 0x2, {{0x6, 0xfd, 0x4dea7df343ed57ad, 0xeca8, 0x4}, 0x7}}, @TCA_SKBMOD_PARMS={0x24, 0x2, {{0x3, 0x3, 0xffffffffffffffff, 0x9, 0x5}, 0x1}}, @TCA_SKBMOD_SMAC={0xa, 0x4, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x2a}}, @TCA_SKBMOD_SMAC={0xa, 0x4, @broadcast}, @TCA_SKBMOD_ETYPE={0x6, 0x5, 0xd9}]}, {0x5, 0x6, "95"}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x3, 0x3}}}}]}]}}, @TCA_CHAIN={0x8}]}, 0x210}, 0x1, 0x0, 0x0, 0x8848}, 0x20004804) 606.965142ms ago: executing program 3 (id=280): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$ethtool(&(0x7f00000003c0), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_LINKMODES_GET(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000300)={0x20, r2, 0x309, 0x0, 0x0, {0x1d}, [@HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x7}]}]}, 0x20}}, 0x0) r3 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000640), 0xffffffffffffffff) sendmsg$TIPC_NL_MEDIA_SET(r0, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000680)={0x20, r3, 0x1, 0x70bd25, 0x25dfdbfd, {}, [@TIPC_NLA_MEDIA={0xc, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_NAME={0x7, 0x1, 'ib\x00'}]}]}, 0x20}, 0x1, 0x0, 0x0, 0x800}, 0x4000) mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1) r4 = socket$can_raw(0x1d, 0x3, 0x1) bind$can_raw(r4, &(0x7f0000000280), 0x10) setsockopt$CAN_RAW_ERR_FILTER(r4, 0x65, 0x2, &(0x7f0000000080)=0x8, 0x4) r5 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TIOCGISO7816(r5, 0x80285442, 0x0) setsockopt$CAN_RAW_FILTER(r4, 0x65, 0x1, 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) close(r4) r6 = socket$inet_udplite(0x2, 0x2, 0x88) setsockopt$inet_MCAST_MSFILTER(r6, 0x0, 0x30, &(0x7f0000000740)={0xfff, {{0x2, 0x4e21, @multicast2}}}, 0x90) 426.792734ms ago: executing program 4 (id=281): syz_emit_ethernet(0xfef3, &(0x7f0000000200)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaaaaaaaaa86dd6001010010641100fe8000001200000000000000000000bbfe8000000000000000000000000000aa4e200e22006490"], 0x0) 246.401698ms ago: executing program 3 (id=282): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000040)=ANY=[@ANYRES64=0x0], 0x0) syz_usb_disconnect(r0) syz_usb_ep_read(r0, 0x2, 0xa6, &(0x7f0000000140)=""/166) r1 = landlock_create_ruleset(&(0x7f0000000040)={0x0, 0x3}, 0x10, 0x0) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x400, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) syz_io_uring_setup(0x24fa, &(0x7f0000000380)={0x0, 0xff31, 0x20000}, &(0x7f0000000100), 0x0) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) write$UHID_CREATE2(r4, &(0x7f0000000040)=ANY=[], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x5, 0x12, r4, 0x0) ioctl$KVM_CREATE_IRQCHIP(r3, 0xae60) r5 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) r6 = dup(r5) ioctl$KVM_SET_VAPIC_ADDR(r6, 0x4008ae93, &(0x7f00000000c0)=0xffff) read$FUSE(r1, 0x0, 0x0) r7 = syz_usb_connect$hid(0x0, 0x90, &(0x7f00000000c0)=ANY=[], 0x0) syz_usb_control_io(r7, 0x0, 0x0) syz_usb_control_io(r7, &(0x7f0000000080)={0x2c, &(0x7f0000000100)=ANY=[@ANYBLOB="0000d2"], 0x0, 0x0, 0x0, 0x0}, 0x0) 204.100086ms ago: executing program 4 (id=283): r0 = syz_open_dev$usbfs(&(0x7f0000000480), 0x77, 0x41341) ioctl$USBDEVFS_IOCTL(r0, 0xc0105512, &(0x7f0000000000)=@usbdevfs_connect) ioctl$USBDEVFS_SUBMITURB(r0, 0x8038550a, &(0x7f00000014c0)=@urb_type_iso={0x0, {0xc, 0x1}, 0x2, 0x40, &(0x7f0000000040)="a562efacf6572cbd2927971f7e77a7ef54dd126f22c13160e7a251d2778fce31958da6f2bb523141af792a6d728d0ba1a346142f9cb2e5ee359b7f4d43a632e9a593871d95ee37ee03b54ddc328ebbac9611f5c79d305bb08c8cc94d26d506e73992c0af6955feddbe2e208986a0f09e181b07f585ef03625dcfc6a652589a9c7b14da07fc0e6849bdd862eac56a00c7bd4314917e208da90947410e34176e327e4110b20cd48a021f6084362d3390bbc8489fe6f1dfa06c96524fed7ddc9bc0e3c7e8079b138219cc1a3056a0e988d8645f", 0xd2, 0x2, 0x80, 0x69, 0x1, 0x8, &(0x7f00000004c0)="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", [{0x6, 0x7, 0x9}, {0x7, 0x0, 0xfff}, {0x4, 0x8, 0xc4b}, {0xb, 0x5, 0x3}, {0x7, 0x8, 0x9}, {0x101, 0x4, 0x6}, {0x4, 0x1, 0x101}, {0x4, 0x2, 0xffff8001}, {0xffffffff, 0x3, 0xc66}, {0x81d7, 0xf, 0x3}, {0xc5, 0x47, 0x80000000}, {0x2, 0x0, 0xffff7fff}, {0x9, 0x4, 0x7}, {0x1, 0x2, 0x3}, {0x3, 0xfffffff7, 0x2}, {0x57, 0x7}, {0xffff, 0x5, 0x5}, {0x1ff, 0x6b1}, {0xc5, 0x9, 0x3}, {0x2, 0x80, 0x7}, {0x0, 0x22, 0x80000001}, {0x7ff, 0x6c, 0x80}, {0x8, 0x0, 0x4}, {0x7, 0x7ff, 0x80000001}, {0xc6f1, 0x5}, {0x40400, 0x5, 0x3}, {0x10001, 0x2b9, 0x9}, {0x4, 0x6, 0xfb33}, {0x56, 0x5, 0xcbd}, {0xfffffff7, 0x3, 0x55bc2dc}, {0x4707, 0x40, 0xf20}, {0x80000001, 0x8, 0x100}, {0x2, 0x1, 0x2}, {0x2, 0x1, 0x6}, {0x5, 0xffffffff, 0x1}, {0x3, 0x3, 0xee0fcc05}, {0x4, 0x1}, {0x6f, 0x3, 0x7}, {0xfff, 0x205, 0x9}, {0xffffffff, 0xffff, 0x9}, {0x2, 0x4, 0x208}, {0x891c, 0x5, 0x400}, {0x8, 0x245d, 0xffffffff}, {0x800, 0x360f, 0x2}, {0x7, 0x2950, 0xfffffff5}, {0x1ff, 0x1000, 0x101}, {0x6376, 0x40, 0x401}, {0xfffff5cb, 0x1, 0x6}, {0x10001, 0x4, 0x6}, {0x5, 0xc50, 0x7}, {0xedd0, 0x7, 0x2}, {0x0, 0xfff, 0xffff461c}, {0x2, 0x0, 0x4dbd}, {0x6, 0xe, 0x5}, {0x4, 0x6, 0xc}, {0x4, 0x80, 0x400}, {0x80, 0xfff, 0x74}, {0xffff8001, 0xfffffff7, 0x7}, {0x0, 0x6899, 0x7}, {0xc, 0x717, 0x5}, {0x7f, 0x1, 0x4}, {0x7fffffff, 0x9, 0x6}, {0x9, 0x8}, {0xfffffffe, 0xfffffffe, 0xd89e}, {0xffffff59, 0x841, 0x3}, {0x401, 0x3, 0x4}, {0x0, 0xf, 0x327}, {0x8, 0x10001, 0xae4}, {0x5, 0xbc14, 0x1}, {0x10000, 0xf, 0x3}, {0x1c1b, 0xfe, 0x22}, {0x8, 0x7fff, 0x401}, {0x10001, 0x65f, 0x5}, {0x6, 0x5, 0xc49}, {0x7, 0x8, 0xfffffff8}, {0x1, 0x5, 0x2}, {0x92, 0x5, 0x1}, {0xfffff9c3, 0x800, 0xca}, {0x8, 0x4, 0xd}, {0xffffffff, 0x5, 0x80000001}, {0x8, 0x6, 0xd}, {0x1, 0x6, 0x9}, {0x1, 0x2, 0x10000}, {0x0, 0x6, 0xe}, {0x0, 0x0, 0x9}, {0x9faf, 0x8, 0xc}, {0x8, 0x3, 0x7}, {0x2, 0x40, 0x2}, {0x4, 0xc29, 0x1}, {0x4, 0xd, 0xffff}, {0x2, 0x5, 0x1ef}, {0x0, 0x5, 0x6}, {0x7, 0x5, 0x21461b1f}, {0x8000, 0x2, 0xffffffff}, {0x532, 0x4, 0xefd}, {0x1, 0x5, 0x3}, {0x2, 0x10001, 0x12a4}, {0x8dbe, 0xfffff801, 0x7fff}, {0x3, 0x2, 0x81}, {0x80, 0x9, 0x2e83}, {0x9, 0x3, 0x3}, {0x0, 0x9, 0x5}, {0x1, 0x4, 0x2}, {0x5, 0x2, 0x174b}, {0x2, 0x3, 0x3}]}) 47.356564ms ago: executing program 1 (id=284): bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0xe, &(0x7f0000000380)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000340), 0xfffffffffffffe19, 0x0, 0xffffffffffffffff, 0x54, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x42) syz_genetlink_get_family_id$ethtool(&(0x7f0000000140), 0xffffffffffffffff) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x1, 0x803, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000001c0)=0x14) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000007c0)=ANY=[@ANYBLOB="53b6411518345000"/20, @ANYRES32=0x0, @ANYBLOB="040100000000000028001280090001007665746800000000180002801400010000000000", @ANYRES32=0x0, @ANYBLOB=' \x00\x00\x00 \x00\x00\x00\b\x00\n\x00', @ANYRES32=r2, @ANYBLOB], 0x50}, 0x1, 0x0, 0x0, 0x40000}, 0x0) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000000200)={'ip_vti0\x00', &(0x7f0000000180)={'sit0\x00', 0x0, 0x8000, 0x6a21a927d37a312c, 0xf8a, 0x1, {{0x11, 0x4, 0x3, 0x1, 0x44, 0x68, 0x0, 0xfb, 0x4, 0x0, @broadcast, @broadcast, {[@lsrr={0x83, 0xf, 0x9, [@multicast2, @rand_addr=0x64010102, @initdev={0xac, 0x1e, 0x1, 0x0}]}, @timestamp_addr={0x44, 0x1c, 0x87, 0x1, 0x9, [{@empty, 0x7ff}, {@loopback, 0xfffffffb}, {@rand_addr=0x64010101, 0x41be}]}, @end, @end]}}}}}) r3 = openat$hwrng(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) preadv(r3, &(0x7f0000000240)=[{&(0x7f0000033a80)=""/102386, 0xfffffd6e}], 0x1, 0x0, 0x0) ioctl$DRM_IOCTL_SYNCOBJ_FD_TO_HANDLE_FD(0xffffffffffffffff, 0xc01064c2, &(0x7f0000000300)={0x0}) ioctl$DRM_IOCTL_SYNCOBJ_CREATE(0xffffffffffffffff, 0xc00864bf, &(0x7f0000000840)={0x0}) ioctl$DRM_IOCTL_SYNCOBJ_FD_TO_HANDLE_FD(0xffffffffffffffff, 0xc01064c2, &(0x7f0000000880)={0x0}) r7 = socket$alg(0x26, 0x5, 0x0) bind$alg(r7, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc(twofish)\x00'}, 0x4f) setsockopt$ALG_SET_KEY(r7, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r8 = accept4(r7, 0x0, 0x0, 0x800) sendmmsg$alg(r8, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048"}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r8, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) r9 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r10 = ioctl$KVM_CREATE_VM(r9, 0xae01, 0x0) r11 = ioctl$KVM_CREATE_VCPU(r10, 0xae41, 0x6) sendmsg$NL80211_CMD_SET_REKEY_OFFLOAD(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000240)={0x14, 0x0, 0x10, 0x70bd2b, 0x25dfdbfb, {{}, {@void, @void}}}, 0x14}}, 0x20004050) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r11, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@text32={0x20, &(0x7f0000000140)="66baf80cb8044fdc87efed660f388059e0b805000000b91e4200000f01c10f20c035000000200f22c0f20fa20f01cb36263e660f381efc660f7c150c000000b805000000b9210000000f01c1c4e17929d8", 0x51}], 0x1, 0x11, 0x0, 0x0) ioctl$KVM_SET_CPUID2(r11, 0x4008ae90, &(0x7f0000000240)=ANY=[]) bind$inet6(0xffffffffffffffff, &(0x7f0000000000)={0xa, 0x0, 0x8, @empty, 0x3}, 0x1c) syz_kvm_setup_cpu$x86(r10, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000200)=[@text16={0x10, 0x0}], 0x1, 0xd, 0x0, 0x0) ioctl$KVM_RUN(r11, 0xae80, 0x0) ioctl$DRM_IOCTL_SYNCOBJ_SIGNAL(r3, 0xc01064c5, &(0x7f0000000900)={&(0x7f00000008c0)=[r4, r5, r6, 0x0], 0x4}) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000240)={'vlan0\x00'}) syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000b00)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x20, 0x1038, 0x1410, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x40, 0x20, [{{0x9, 0x4, 0x0, 0x0, 0x2, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x7, 0x0, 0x1, {0x22, 0x5}}, {{{0x9, 0x5, 0x81, 0x3, 0x200, 0x6}}}}}]}}]}}, 0x0) 0s ago: executing program 0 (id=285): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f00000002c0)=@abs={0x0, 0x0, 0x1001}, 0x6e) sendmmsg$unix(r1, 0x0, 0x0, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r2 = openat$proc_mixer(0xffffffffffffff9c, &(0x7f0000000000)='/proc/asound/card0/oss_mixer\x00', 0x1, 0x0) close(r2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe}, 0x0) syz_usb_connect(0x0, 0x5f, 0x0, 0x0) sendmsg$TIPC_NL_LINK_RESET_STATS(0xffffffffffffffff, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000240)=ANY=[@ANYBLOB="f4000000", @ANYRES16, @ANYBLOB="010000000000000000000a000000c40004801300010062726f6164636173742d6c696e6b00000900010073797a31200000"], 0xf4}}, 0x0) sendmsg$nl_xfrm(0xffffffffffffffff, 0x0, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, 0x0}, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0x5, &(0x7f0000002fc0)=ANY=[@ANYBLOB="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"], &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xfffffffffffffe89, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000540)={r3, 0x0, 0xf, 0x0, &(0x7f0000000200)="5c71f91b0dc413550230b4c817a628527e357783e91682da59e3ced8259fdd7b984b46520fcffbd508e70000000000000009511e65244bdfee495747f7f508ddf3539d0588", 0x0, 0x1, 0x0, 0x1, 0xfd1a, &(0x7f0000000340)="0517701f2ec458ac420bd63c6af4c52e17a68b534308f4a90a5f594944911431db60f3f47273b6c2f4a2215136b1724a234f1266fb033206e15e62c5cef0383881ec4497a3841b134e66c74d77d30ecbbad3377dd56a52935be4bffab43df00c197c8e90520aff140cfaae9e920800000000000000354100aa28bef2da687c74ab3389d3de98", 0x0}, 0x50) r4 = socket$inet(0x2, 0x801, 0x0) pipe2(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) splice(r4, 0x0, r5, 0x0, 0x7ffff000, 0x0) bpf$BPF_MAP_FREEZE(0x16, &(0x7f0000000040)=r5, 0x4) r6 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) r7 = ioctl$KVM_CREATE_VM(r6, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r7, 0x4020ae46, &(0x7f0000000540)={0x0, 0x3, 0x0, 0x2000, &(0x7f0000ffe000/0x2000)=nil}) ioctl$KVM_CLEAR_DIRTY_LOG(r7, 0xc018aec0, &(0x7f0000000140)={0xae10906a41272cf9, 0x280, 0x100, 0x0}) socket(0x400000000010, 0x3, 0x0) r8 = socket$packet(0x11, 0x3, 0x300) bpf$PROG_LOAD(0x5, 0x0, 0x0) sendto$packet(r8, &(0x7f0000000740)="565a92bd2ad96a4be42a5362d1118459ca318a12", 0x14, 0x2000c0c0, &(0x7f0000000000)={0x11, 0x6, 0x0, 0x1, 0x1, 0x6, @local}, 0x14) kernel console output (not intermixed with test programs): bond0 [ 95.924351][ T3533] bridge0: port 1(bridge_slave_0) entered blocking state [ 95.931552][ T3533] bridge0: port 1(bridge_slave_0) entered forwarding state [ 95.959809][ T1085] bridge0: port 2(bridge_slave_1) entered blocking state [ 95.967111][ T1085] bridge0: port 2(bridge_slave_1) entered forwarding state [ 95.982539][ T5856] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 96.003161][ T5855] 8021q: adding VLAN 0 to HW filter on device team0 [ 96.025480][ T5857] 8021q: adding VLAN 0 to HW filter on device team0 [ 96.041641][ T1157] bridge0: port 1(bridge_slave_0) entered blocking state [ 96.048936][ T1157] bridge0: port 1(bridge_slave_0) entered forwarding state [ 96.094251][ T1157] bridge0: port 1(bridge_slave_0) entered blocking state [ 96.101569][ T1157] bridge0: port 1(bridge_slave_0) entered forwarding state [ 96.111750][ T1157] bridge0: port 2(bridge_slave_1) entered blocking state [ 96.118981][ T1157] bridge0: port 2(bridge_slave_1) entered forwarding state [ 96.154446][ T1085] bridge0: port 2(bridge_slave_1) entered blocking state [ 96.161663][ T1085] bridge0: port 2(bridge_slave_1) entered forwarding state [ 96.189532][ T5851] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 96.274542][ T5856] veth0_vlan: entered promiscuous mode [ 96.322149][ T5854] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 96.336040][ T5856] veth1_vlan: entered promiscuous mode [ 96.450915][ T5855] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 96.485120][ T5856] veth0_macvtap: entered promiscuous mode [ 96.493078][ T5851] veth0_vlan: entered promiscuous mode [ 96.516147][ T5857] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 96.535911][ T5856] veth1_macvtap: entered promiscuous mode [ 96.554415][ T5851] veth1_vlan: entered promiscuous mode [ 96.588448][ T5854] veth0_vlan: entered promiscuous mode [ 96.641057][ T5856] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 96.661717][ T5855] veth0_vlan: entered promiscuous mode [ 96.676204][ T5854] veth1_vlan: entered promiscuous mode [ 96.690591][ T5856] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 96.701302][ T5855] veth1_vlan: entered promiscuous mode [ 96.726280][ T5856] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 96.735542][ T5856] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 96.745306][ T5856] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 96.754893][ T5856] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 96.790617][ T5857] veth0_vlan: entered promiscuous mode [ 96.812297][ T5851] veth0_macvtap: entered promiscuous mode [ 96.829624][ T5857] veth1_vlan: entered promiscuous mode [ 96.841017][ T5851] veth1_macvtap: entered promiscuous mode [ 96.884776][ T5854] veth0_macvtap: entered promiscuous mode [ 96.912949][ T5851] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 96.933635][ T5854] veth1_macvtap: entered promiscuous mode [ 96.946697][ T5855] veth0_macvtap: entered promiscuous mode [ 96.981119][ T5851] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 97.015939][ T5855] veth1_macvtap: entered promiscuous mode [ 97.028573][ T5851] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 97.037898][ T5851] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 97.046624][ T5851] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 97.058384][ T5851] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 97.073326][ T5854] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 97.095905][ T3533] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 97.110144][ T3533] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 97.156151][ T5854] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 97.181473][ T5855] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 97.198545][ T5857] veth0_macvtap: entered promiscuous mode [ 97.224153][ T3533] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 97.224446][ T5854] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 97.236889][ T3533] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 97.242530][ T5854] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 97.260196][ T5854] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 97.269256][ T5854] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 97.289984][ T5855] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 97.308849][ T5857] veth1_macvtap: entered promiscuous mode [ 97.328876][ T5842] Bluetooth: hci4: command tx timeout [ 97.334371][ T5842] Bluetooth: hci2: command tx timeout [ 97.338196][ T5840] Bluetooth: hci0: command tx timeout [ 97.382024][ T5855] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 97.391031][ T5855] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 97.401538][ T5855] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 97.411077][ T51] Bluetooth: hci1: command tx timeout [ 97.417503][ T51] Bluetooth: hci3: command tx timeout [ 97.427988][ T5855] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 97.430588][ T5856] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 97.446002][ T5857] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 97.469029][ T5857] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 97.515256][ T5857] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 97.526078][ T5857] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 97.535330][ T5857] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 97.544214][ T5857] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 97.562421][ T1154] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 97.582041][ T1154] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 97.688738][ T1085] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 97.715138][ T1085] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 97.946806][ T1085] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 97.971565][ T1085] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 98.126057][ T1085] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 98.176973][ T1085] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 98.307390][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 98.531412][ T5940] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 98.809125][ T5944] netlink: 32 bytes leftover after parsing attributes in process `syz.2.7'. [ 98.826945][ T5944] netlink: 32 bytes leftover after parsing attributes in process `syz.2.7'. [ 98.847620][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 99.157512][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 99.179837][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 99.188748][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 99.198371][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 99.407590][ T51] Bluetooth: hci0: command tx timeout [ 99.413079][ T51] Bluetooth: hci2: command tx timeout [ 99.418763][ T5840] Bluetooth: hci4: command tx timeout [ 99.422340][ T5955] netlink: 11 bytes leftover after parsing attributes in process `syz.2.9'. [ 99.487718][ T51] Bluetooth: hci3: command tx timeout [ 99.488164][ T5840] Bluetooth: hci1: command tx timeout [ 99.949639][ T1154] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 100.278985][ T1154] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 100.629839][ T1154] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 100.906668][ T1154] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 101.488460][ T5908] usb 2-1: new high-speed USB device number 2 using dummy_hcd [ 102.237384][ T1154] bridge_slave_1: left allmulticast mode [ 102.243288][ T1154] bridge_slave_1: left promiscuous mode [ 102.268536][ T1154] bridge0: port 2(bridge_slave_1) entered disabled state [ 102.300690][ T5908] usb 2-1: New USB device found, idVendor=1604, idProduct=8001, bcdDevice=44.1f [ 102.316870][ T5908] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 102.339209][ T5908] usb 2-1: Product: syz [ 102.346947][ T5908] usb 2-1: Manufacturer: syz [ 102.351663][ T5908] usb 2-1: SerialNumber: syz [ 102.417081][ T5908] usb 2-1: config 0 descriptor?? [ 102.421888][ T1154] bridge_slave_0: left allmulticast mode [ 102.467784][ T1154] bridge_slave_0: left promiscuous mode [ 102.501034][ T1154] bridge0: port 1(bridge_slave_0) entered disabled state [ 102.726347][ T5938] usb 2-1: USB disconnect, device number 2 [ 103.145995][ T1154] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 103.161375][ T1154] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 103.172654][ T1154] bond0 (unregistering): Released all slaves [ 103.216598][ T5152] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 103.226299][ T5152] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 103.234059][ T5152] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 103.241754][ T5152] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 103.252635][ T5152] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 103.260206][ T5152] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 103.268749][ T5152] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 103.276337][ T5152] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 103.288407][ T51] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 103.298665][ T5152] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 103.298850][ T51] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 103.313592][ T5152] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 103.338993][ T51] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 103.353934][ T5152] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 103.364561][ T5152] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 103.716472][ T6009] Zero length message leads to an empty skb [ 103.808801][ T6011] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 103.879973][ T6013] syz.2.16 uses obsolete (PF_INET,SOCK_PACKET) [ 103.938536][ T1154] hsr_slave_0: left promiscuous mode [ 103.944802][ T1154] hsr_slave_1: left promiscuous mode [ 103.951630][ T1154] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 103.961032][ T1154] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 103.972853][ T1154] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 103.981856][ T1154] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 104.008630][ T1154] veth1_macvtap: left promiscuous mode [ 104.014528][ T1154] veth0_macvtap: left promiscuous mode [ 104.020775][ T1154] veth1_vlan: left promiscuous mode [ 104.026438][ T1154] veth0_vlan: left promiscuous mode [ 104.087497][ T5938] usb 2-1: new high-speed USB device number 3 using dummy_hcd [ 104.257777][ T5938] usb 2-1: Using ep0 maxpacket: 8 [ 104.268169][ T5938] usb 2-1: New USB device found, idVendor=0c45, idProduct=614a, bcdDevice=c4.6d [ 104.296197][ T5938] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 104.314852][ T5938] usb 2-1: Product: syz [ 104.325183][ T5938] usb 2-1: Manufacturer: syz [ 104.336709][ T5938] usb 2-1: SerialNumber: syz [ 104.349649][ T5938] usb 2-1: config 0 descriptor?? [ 104.385721][ T5938] gspca_main: sonixj-2.14.0 probing 0c45:614a [ 104.706067][ T1154] team0 (unregistering): Port device team_slave_1 removed [ 104.740490][ T1154] team0 (unregistering): Port device team_slave_0 removed [ 105.311426][ T6031] ipt_ECN: cannot use operation on non-tcp rule [ 105.329054][ T5842] Bluetooth: hci0: command tx timeout [ 105.408388][ T5842] Bluetooth: hci3: command tx timeout [ 105.408397][ T5152] Bluetooth: hci2: command tx timeout [ 105.486870][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 105.497711][ T0] NOHZ tick-stop error: local softirq work is pending, handler #108!!! [ 105.531110][ T5938] gspca_sonixj: reg_r err -110 [ 105.536047][ T5938] sonixj 2-1:0.0: probe with driver sonixj failed with error -110 [ 105.567618][ T0] NOHZ tick-stop error: local softirq work is pending, handler #08!!! [ 105.767084][ T5925] usb 3-1: new high-speed USB device number 2 using dummy_hcd [ 105.866951][ T0] NOHZ tick-stop error: local softirq work is pending, handler #100!!! [ 106.172637][ T6003] chnl_net:caif_netlink_parms(): no params data found [ 106.341393][ T5925] usb 3-1: config 0 has no interfaces? [ 106.364261][ T6005] chnl_net:caif_netlink_parms(): no params data found [ 106.382521][ T5925] usb 3-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b [ 106.444759][ T5925] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 106.485902][ T5925] usb 3-1: Product: syz [ 106.501955][ T5925] usb 3-1: Manufacturer: syz [ 106.542635][ T6004] chnl_net:caif_netlink_parms(): no params data found [ 106.562276][ T5925] usb 3-1: SerialNumber: syz [ 106.665904][ T5925] usb 3-1: config 0 descriptor?? [ 107.011976][ T5925] usb 2-1: USB disconnect, device number 3 [ 107.355328][ T6003] bridge0: port 1(bridge_slave_0) entered blocking state [ 107.364542][ T6003] bridge0: port 1(bridge_slave_0) entered disabled state [ 107.407122][ T5842] Bluetooth: hci0: command tx timeout [ 107.451841][ T6003] bridge_slave_0: entered allmulticast mode [ 107.472226][ T6003] bridge_slave_0: entered promiscuous mode [ 107.486984][ T5842] Bluetooth: hci3: command tx timeout [ 107.488588][ T5152] Bluetooth: hci2: command tx timeout [ 107.548546][ T6003] bridge0: port 2(bridge_slave_1) entered blocking state [ 107.577753][ T6003] bridge0: port 2(bridge_slave_1) entered disabled state [ 107.585178][ T6003] bridge_slave_1: entered allmulticast mode [ 107.605791][ T6003] bridge_slave_1: entered promiscuous mode [ 108.087875][ T6003] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 108.129717][ T6005] bridge0: port 1(bridge_slave_0) entered blocking state [ 108.209970][ T6005] bridge0: port 1(bridge_slave_0) entered disabled state [ 108.220744][ T6005] bridge_slave_0: entered allmulticast mode [ 108.233863][ T6005] bridge_slave_0: entered promiscuous mode [ 108.699966][ T1145] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 108.758827][ T6003] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 108.803339][ T5949] usb 3-1: USB disconnect, device number 2 [ 108.918461][ T6005] bridge0: port 2(bridge_slave_1) entered blocking state [ 108.925686][ T6005] bridge0: port 2(bridge_slave_1) entered disabled state [ 108.953777][ T6005] bridge_slave_1: entered allmulticast mode [ 108.974326][ T6005] bridge_slave_1: entered promiscuous mode [ 109.076008][ T6004] bridge0: port 1(bridge_slave_0) entered blocking state [ 109.091717][ T6004] bridge0: port 1(bridge_slave_0) entered disabled state [ 109.112489][ T6004] bridge_slave_0: entered allmulticast mode [ 109.114495][ T6004] bridge_slave_0: entered promiscuous mode [ 109.154748][ T6004] bridge0: port 2(bridge_slave_1) entered blocking state [ 109.178397][ T6004] bridge0: port 2(bridge_slave_1) entered disabled state [ 109.185706][ T6004] bridge_slave_1: entered allmulticast mode [ 109.212931][ T6004] bridge_slave_1: entered promiscuous mode [ 109.348555][ T1145] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 109.496989][ T5152] Bluetooth: hci0: command tx timeout [ 109.570497][ T5152] Bluetooth: hci3: command tx timeout [ 109.575952][ T5152] Bluetooth: hci2: command tx timeout [ 109.803278][ T6005] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 109.888322][ T6004] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 110.245817][ T1145] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 110.311546][ T6003] team0: Port device team_slave_0 added [ 110.419265][ T6003] team0: Port device team_slave_1 added [ 110.447481][ T6005] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 110.481320][ T6004] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 110.517129][ T5908] usb 2-1: new high-speed USB device number 4 using dummy_hcd [ 110.672788][ T5908] usb 2-1: config 27 has an invalid descriptor of length 0, skipping remainder of the config [ 110.684044][ T5908] usb 2-1: config 27 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 2 [ 110.700899][ T5908] usb 2-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 110.727525][ T5908] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 110.738345][ T1145] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 110.761048][ T5908] usb 2-1: Quirk or no altset; falling back to MIDI 1.0 [ 110.873331][ T5908] snd-usb-audio 2-1:27.0: probe with driver snd-usb-audio failed with error -2 [ 111.081016][ T6004] team0: Port device team_slave_0 added [ 111.358671][ T30] audit: type=1326 audit(1750769820.295:2): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6103 comm="syz.2.24" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe7f298e929 code=0x7ffc0000 [ 111.405627][ T30] audit: type=1326 audit(1750769820.295:3): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6103 comm="syz.2.24" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe7f298e929 code=0x7ffc0000 [ 111.481576][ T30] audit: type=1326 audit(1750769820.295:4): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6103 comm="syz.2.24" exe="/root/syz-executor" sig=0 arch=c000003e syscall=317 compat=0 ip=0x7fe7f298e929 code=0x7ffc0000 [ 111.487562][ T6003] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 111.563783][ T30] audit: type=1326 audit(1750769820.295:5): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6103 comm="syz.2.24" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe7f298e929 code=0x7ffc0000 [ 111.587143][ T5925] usb 3-1: new high-speed USB device number 3 using dummy_hcd [ 111.594864][ T5842] Bluetooth: hci0: command tx timeout [ 111.608228][ T6003] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 111.631657][ T30] audit: type=1326 audit(1750769820.295:6): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6103 comm="syz.2.24" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe7f298e929 code=0x7ffc0000 [ 111.667447][ T5842] Bluetooth: hci2: command tx timeout [ 111.668161][ T5152] Bluetooth: hci3: command tx timeout [ 111.693940][ T30] audit: type=1326 audit(1750769820.295:7): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6103 comm="syz.2.24" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7fe7f298e929 code=0x7ffc0000 [ 111.716257][ T6003] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 111.760222][ T6005] team0: Port device team_slave_0 added [ 111.777444][ T5925] usb 3-1: Using ep0 maxpacket: 8 [ 111.828407][ T6004] team0: Port device team_slave_1 added [ 111.846939][ T30] audit: type=1326 audit(1750769820.295:8): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6103 comm="syz.2.24" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe7f298e929 code=0x7ffc0000 [ 111.873571][ T5925] usb 3-1: config index 0 descriptor too short (expected 301, got 45) [ 111.887375][ T5925] usb 3-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 111.890616][ T6003] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 111.906740][ T5925] usb 3-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 111.922584][ T30] audit: type=1326 audit(1750769820.295:9): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6103 comm="syz.2.24" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe7f298e929 code=0x7ffc0000 [ 111.937859][ T6003] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 111.951528][ T5925] usb 3-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 111.997240][ T30] audit: type=1326 audit(1750769820.295:10): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6103 comm="syz.2.24" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7fe7f298d290 code=0x7ffc0000 [ 112.033376][ T5925] usb 3-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 112.061625][ T30] audit: type=1326 audit(1750769820.305:11): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6103 comm="syz.2.24" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7fe7f298e52b code=0x7ffc0000 [ 112.083854][ T5925] usb 3-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 112.093288][ T6003] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 112.123104][ T5925] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 112.244093][ T6005] team0: Port device team_slave_1 added [ 112.439214][ T5925] usb 3-1: GET_CAPABILITIES returned 0 [ 112.458637][ T5925] usbtmc 3-1:16.0: can't read capabilities [ 112.560124][ T6004] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 112.576315][ T6004] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 112.620432][ T6004] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 112.638980][ T6004] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 112.646197][ T6004] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 112.678678][ T6104] usbtmc 3-1:16.0: send_request_dev_dep_msg_in returned -90 [ 112.698289][ T5908] usb 3-1: USB disconnect, device number 3 [ 112.715061][ T6004] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 112.770829][ T6005] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 112.781881][ T6005] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 112.812209][ T6005] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 112.889947][ T6005] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 112.906243][ T6005] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 112.948192][ T6005] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 113.086551][ T6003] hsr_slave_0: entered promiscuous mode [ 113.096611][ T6003] hsr_slave_1: entered promiscuous mode [ 113.109452][ T6003] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 113.141313][ T6003] Cannot create hsr debugfs directory [ 113.291156][ T6004] hsr_slave_0: entered promiscuous mode [ 113.324931][ T6004] hsr_slave_1: entered promiscuous mode [ 113.349763][ T6004] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 113.362237][ T6004] Cannot create hsr debugfs directory [ 113.489512][ T1145] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 113.492876][ T5908] usb 2-1: USB disconnect, device number 4 [ 113.888656][ T1145] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 114.000167][ T6005] hsr_slave_0: entered promiscuous mode [ 114.149642][ T6005] hsr_slave_1: entered promiscuous mode [ 114.155794][ T6005] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 114.170960][ T6005] Cannot create hsr debugfs directory [ 114.277440][ T1145] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 114.793106][ T1145] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 116.162238][ T6162] netlink: 11 bytes leftover after parsing attributes in process `syz.2.28'. [ 116.225554][ T6166] netlink: 48 bytes leftover after parsing attributes in process `syz.1.29'. [ 116.297320][ T1145] bridge_slave_1: left allmulticast mode [ 116.318005][ T1145] bridge_slave_1: left promiscuous mode [ 116.323929][ T1145] bridge0: port 2(bridge_slave_1) entered disabled state [ 116.424395][ T1145] bridge_slave_0: left allmulticast mode [ 116.436200][ T1145] bridge_slave_0: left promiscuous mode [ 116.460291][ T1145] bridge0: port 1(bridge_slave_0) entered disabled state [ 116.566430][ T1145] bridge_slave_1: left allmulticast mode [ 116.574515][ T1145] bridge_slave_1: left promiscuous mode [ 116.585272][ T1145] bridge0: port 2(bridge_slave_1) entered disabled state [ 116.600695][ T6174] netlink: 11 bytes leftover after parsing attributes in process `syz.1.32'. [ 116.613914][ T1145] bridge_slave_0: left allmulticast mode [ 116.621400][ T1145] bridge_slave_0: left promiscuous mode [ 116.648948][ T1145] bridge0: port 1(bridge_slave_0) entered disabled state [ 117.077961][ T6184] kvm_intel: L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 117.737955][ T1145] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 117.754845][ T1145] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 117.777596][ T1145] bond0 (unregistering): Released all slaves [ 118.213471][ T1145] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 118.225226][ T1145] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 118.235496][ T1145] bond0 (unregistering): Released all slaves [ 119.002322][ T1145] hsr_slave_0: left promiscuous mode [ 119.014851][ T1145] hsr_slave_1: left promiscuous mode [ 119.027680][ T1145] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 119.035238][ T1145] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 119.061596][ T1145] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 119.077020][ T1145] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 119.110006][ T1145] hsr_slave_0: left promiscuous mode [ 119.116180][ T1145] hsr_slave_1: left promiscuous mode [ 119.122880][ T1145] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 119.131507][ T1145] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 119.142666][ T1145] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 119.156570][ T1145] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 119.224673][ T1145] veth1_macvtap: left promiscuous mode [ 119.234073][ T1145] veth0_macvtap: left promiscuous mode [ 119.243471][ T1145] veth1_vlan: left promiscuous mode [ 119.252271][ T1145] veth0_vlan: left promiscuous mode [ 119.263084][ T1145] veth1_macvtap: left promiscuous mode [ 119.282400][ T1145] veth0_macvtap: left promiscuous mode [ 119.297414][ T1145] veth1_vlan: left promiscuous mode [ 119.302822][ T1145] veth0_vlan: left promiscuous mode [ 120.769408][ T1145] team0 (unregistering): Port device team_slave_1 removed [ 120.819504][ T1145] team0 (unregistering): Port device team_slave_0 removed [ 121.565060][ T1145] team0 (unregistering): Port device team_slave_1 removed [ 121.612378][ T1145] team0 (unregistering): Port device team_slave_0 removed [ 122.131602][ T6221] netlink: 36 bytes leftover after parsing attributes in process `syz.2.40'. [ 122.319747][ T6224] input: syz0 as /devices/virtual/input/input5 [ 122.856981][ T5843] usb 2-1: new full-speed USB device number 5 using dummy_hcd [ 122.950076][ T6003] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 123.003455][ T6003] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 123.029830][ T5843] usb 2-1: config 6 has an invalid interface number: 2 but max is 0 [ 123.038786][ T6003] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 123.053424][ T5843] usb 2-1: config 6 has no interface number 0 [ 123.067222][ T6003] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 123.086924][ T5843] usb 2-1: config 6 interface 2 altsetting 0 endpoint 0xB has invalid wMaxPacketSize 0 [ 123.111858][ T5843] usb 2-1: config 6 interface 2 altsetting 0 has an endpoint descriptor with address 0x31, changing to 0x1 [ 123.170434][ T5843] usb 2-1: config 6 interface 2 altsetting 0 endpoint 0x1 has invalid maxpacket 13364, setting to 64 [ 123.230151][ T5843] usb 2-1: New USB device found, idVendor=0af0, idProduct=7271, bcdDevice=88.91 [ 123.264132][ T5843] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 123.282434][ T5843] usb 2-1: Product: syz [ 123.286762][ T5843] usb 2-1: Manufacturer: syz [ 123.292055][ T5843] usb 2-1: SerialNumber: syz [ 123.304364][ T5843] hso 2-1:6.2: Failed to find INT IN ep [ 123.451325][ T6005] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 123.520842][ T6005] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 123.573608][ T6005] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 123.618821][ T5949] usb 2-1: USB disconnect, device number 5 [ 123.663553][ T6005] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 123.843175][ T6004] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 123.883930][ T6004] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 123.913083][ T6004] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 123.942056][ T6004] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 123.957400][ T5949] usb 2-1: new high-speed USB device number 6 using dummy_hcd [ 124.063289][ T5908] usb 3-1: new high-speed USB device number 4 using dummy_hcd [ 124.095272][ T6003] 8021q: adding VLAN 0 to HW filter on device bond0 [ 124.147579][ T5949] usb 2-1: Using ep0 maxpacket: 16 [ 124.164978][ T5949] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 54, changing to 9 [ 124.207013][ T5949] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 9268, setting to 1024 [ 124.224093][ T5908] usb 3-1: device descriptor read/64, error -71 [ 124.235217][ T6003] 8021q: adding VLAN 0 to HW filter on device team0 [ 124.247850][ T5949] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 124.293741][ T5949] usb 2-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 124.314674][ T5949] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 124.354868][ T6005] 8021q: adding VLAN 0 to HW filter on device bond0 [ 124.370045][ T5949] usb 2-1: config 0 descriptor?? [ 124.376395][ T6234] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 124.405153][ T1145] bridge0: port 1(bridge_slave_0) entered blocking state [ 124.412417][ T1145] bridge0: port 1(bridge_slave_0) entered forwarding state [ 124.492293][ T1145] bridge0: port 2(bridge_slave_1) entered blocking state [ 124.499551][ T1145] bridge0: port 2(bridge_slave_1) entered forwarding state [ 124.548711][ T5908] usb 3-1: new high-speed USB device number 5 using dummy_hcd [ 124.593664][ T6005] 8021q: adding VLAN 0 to HW filter on device team0 [ 124.664190][ T1145] bridge0: port 1(bridge_slave_0) entered blocking state [ 124.671447][ T1145] bridge0: port 1(bridge_slave_0) entered forwarding state [ 124.695491][ T6004] 8021q: adding VLAN 0 to HW filter on device bond0 [ 124.734112][ T1145] bridge0: port 2(bridge_slave_1) entered blocking state [ 124.741472][ T1145] bridge0: port 2(bridge_slave_1) entered forwarding state [ 124.757472][ T5908] usb 3-1: device descriptor read/64, error -71 [ 124.804552][ T6004] 8021q: adding VLAN 0 to HW filter on device team0 [ 124.836567][ T5949] microsoft 0003:045E:07DA.0001: unbalanced collection at end of report description [ 124.885291][ T5908] usb usb3-port1: attempt power cycle [ 124.904187][ T3533] bridge0: port 1(bridge_slave_0) entered blocking state [ 124.906075][ T5949] microsoft 0003:045E:07DA.0001: parse failed [ 124.911431][ T3533] bridge0: port 1(bridge_slave_0) entered forwarding state [ 124.955596][ T3533] bridge0: port 2(bridge_slave_1) entered blocking state [ 124.960367][ T5949] microsoft 0003:045E:07DA.0001: probe with driver microsoft failed with error -22 [ 124.962841][ T3533] bridge0: port 2(bridge_slave_1) entered forwarding state [ 125.052716][ T6003] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 125.184946][ T6005] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 125.260517][ T5908] usb 3-1: new high-speed USB device number 6 using dummy_hcd [ 125.294665][ T5908] usb 3-1: device descriptor read/8, error -71 [ 125.323334][ T6003] veth0_vlan: entered promiscuous mode [ 125.436281][ T6003] veth1_vlan: entered promiscuous mode [ 125.568989][ T5908] usb 3-1: new high-speed USB device number 7 using dummy_hcd [ 125.582435][ T6004] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 125.594236][ T5925] usb 2-1: USB disconnect, device number 6 [ 125.601866][ T6005] veth0_vlan: entered promiscuous mode [ 125.621088][ T5908] usb 3-1: device descriptor read/8, error -71 [ 125.741406][ T6003] veth0_macvtap: entered promiscuous mode [ 125.765652][ T6005] veth1_vlan: entered promiscuous mode [ 125.791432][ T6003] veth1_macvtap: entered promiscuous mode [ 125.798991][ T5908] usb usb3-port1: unable to enumerate USB device [ 125.855218][ T6004] veth0_vlan: entered promiscuous mode [ 125.923570][ T6003] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 125.945022][ T6004] veth1_vlan: entered promiscuous mode [ 126.012136][ T6003] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 126.087770][ T6003] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 126.136259][ T6003] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 126.145670][ T6003] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 126.173065][ T6003] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 126.243246][ T6005] veth0_macvtap: entered promiscuous mode [ 126.355900][ T6005] veth1_macvtap: entered promiscuous mode [ 126.414343][ T6004] veth0_macvtap: entered promiscuous mode [ 126.469774][ T6004] veth1_macvtap: entered promiscuous mode [ 126.501669][ T6005] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 126.581906][ T6005] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 126.747820][ T1157] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 126.755723][ T1157] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 126.792294][ T6005] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 126.819950][ T6005] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 126.867099][ T6005] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 126.875875][ T6005] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 126.993776][ T6306] netlink: 'syz.2.48': attribute type 21 has an invalid length. [ 127.073677][ T6004] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 127.112050][ T6306] netlink: 132 bytes leftover after parsing attributes in process `syz.2.48'. [ 127.219246][ T6004] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 127.262379][ T65] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 127.287491][ T65] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 127.348303][ T6004] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 127.387214][ T6004] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 127.395993][ T6004] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 127.397594][ T6312] hsr_slave_0: hsr_addr_subst_dest: Unknown node [ 127.411330][ T6312] hsr_slave_1: hsr_addr_subst_dest: Unknown node [ 127.450694][ T6004] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 127.451138][ T6312] hsr_slave_0: hsr_addr_subst_dest: Unknown node [ 127.465918][ T6312] hsr_slave_1: hsr_addr_subst_dest: Unknown node [ 127.525368][ T30] kauditd_printk_skb: 36 callbacks suppressed [ 127.525387][ T30] audit: type=1326 audit(1750769836.485:48): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6311 comm="syz.2.49" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fe7f298e929 code=0x0 [ 127.557954][ T6312] hsr_slave_0: hsr_addr_subst_dest: Unknown node [ 127.564600][ T6312] hsr_slave_1: hsr_addr_subst_dest: Unknown node [ 127.607121][ T6312] hsr_slave_0: hsr_addr_subst_dest: Unknown node [ 127.613571][ T6312] hsr_slave_1: hsr_addr_subst_dest: Unknown node [ 127.657082][ T6312] hsr_slave_0: hsr_addr_subst_dest: Unknown node [ 127.663587][ T6312] hsr_slave_1: hsr_addr_subst_dest: Unknown node [ 127.820487][ T65] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 127.856908][ T65] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 127.931891][ T1145] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 127.941945][ T1145] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 128.027637][ T49] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 128.045853][ T49] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 128.075381][ T6325] Freezing with imperfect legacy cgroup freezer. See cgroup.freeze of cgroup v2 [ 128.256311][ T1145] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 128.421436][ T1145] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 128.499733][ T5949] usb 2-1: new high-speed USB device number 7 using dummy_hcd [ 129.083502][ T5949] usb 2-1: config 27 has an invalid descriptor of length 0, skipping remainder of the config [ 129.158387][ T5949] usb 2-1: config 27 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 2 [ 129.261085][ T5949] usb 2-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 129.346923][ T5949] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 129.576281][ T5949] usb 2-1: Quirk or no altset; falling back to MIDI 1.0 [ 129.719048][ T5949] snd-usb-audio 2-1:27.0: probe with driver snd-usb-audio failed with error -2 [ 129.893010][ T5838] udevd[5838]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:27.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 129.896172][ T6348] netlink: 'syz.4.53': attribute type 15 has an invalid length. [ 129.918336][ T5925] usb 3-1: new high-speed USB device number 8 using dummy_hcd [ 129.953939][ T6348] netlink: 666 bytes leftover after parsing attributes in process `syz.4.53'. [ 129.987223][ T6351] netlink: 212376 bytes leftover after parsing attributes in process `syz.4.53'. [ 130.107067][ T5949] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 130.216920][ T5925] usb 3-1: Using ep0 maxpacket: 8 [ 130.261729][ T5925] usb 3-1: New USB device found, idVendor=0c45, idProduct=614a, bcdDevice=c4.6d [ 130.285268][ T5925] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 130.307556][ T5949] usb 1-1: Using ep0 maxpacket: 8 [ 130.312798][ T5925] usb 3-1: Product: syz [ 130.319732][ T5925] usb 3-1: Manufacturer: syz [ 130.325351][ T5949] usb 1-1: New USB device found, idVendor=0c45, idProduct=614a, bcdDevice=c4.6d [ 130.340291][ T5925] usb 3-1: SerialNumber: syz [ 130.380029][ T5949] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 130.475972][ T5949] usb 1-1: Product: syz [ 130.521590][ T5925] usb 3-1: config 0 descriptor?? [ 130.558842][ T5925] gspca_main: sonixj-2.14.0 probing 0c45:614a [ 130.616142][ T5949] usb 1-1: Manufacturer: syz [ 130.626037][ T5949] usb 1-1: SerialNumber: syz [ 130.667488][ T5949] usb 1-1: config 0 descriptor?? [ 130.772663][ T5949] gspca_main: sonixj-2.14.0 probing 0c45:614a [ 130.935054][ T6360] pci 0000:00:05.0: vgaarb: VGA decodes changed: olddecodes=io+mem,decodes=none:owns=io+mem [ 131.584407][ T6369] ipt_ECN: cannot use operation on non-tcp rule [ 131.692419][ T5925] gspca_sonixj: reg_r err -110 [ 131.715954][ T5925] sonixj 3-1:0.0: probe with driver sonixj failed with error -110 [ 131.827840][ T5949] gspca_sonixj: reg_r err -110 [ 131.838390][ T5949] sonixj 1-1:0.0: probe with driver sonixj failed with error -110 [ 132.156485][ T5949] usb 2-1: USB disconnect, device number 7 [ 132.407018][ T6380] trusted_key: syz.1.59 sent an empty control message without MSG_MORE. [ 132.613547][ T5925] net_ratelimit: 68 callbacks suppressed [ 132.613567][ T5925] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 132.796959][ T936] usb 4-1: new high-speed USB device number 2 using dummy_hcd [ 132.855692][ T1145] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 132.865074][ T5925] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 132.865369][ T1305] ieee802154 phy0 wpan0: encryption failed: -22 [ 132.875500][ T5922] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 132.893859][ T1305] ieee802154 phy1 wpan1: encryption failed: -22 [ 132.999808][ T936] usb 4-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 133.029500][ T936] usb 4-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config [ 133.099783][ T5895] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 133.120905][ T5922] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 133.129435][ T5843] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 133.137895][ T936] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 133.167171][ T936] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 52, changing to 9 [ 133.297225][ T936] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8241, setting to 1024 [ 133.338666][ T936] usb 4-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 133.371964][ T936] usb 4-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 133.414843][ T936] usb 4-1: Product: syz [ 133.428618][ T936] usb 4-1: Manufacturer: syz [ 133.491926][ T936] cdc_wdm 4-1:1.0: skipping garbage [ 133.508035][ T936] cdc_wdm 4-1:1.0: skipping garbage [ 133.524089][ T6405] netlink: 4 bytes leftover after parsing attributes in process `syz.1.64'. [ 133.588904][ T936] cdc_wdm 4-1:1.0: cdc-wdm0: USB WDM device [ 133.685865][ T936] cdc_wdm 4-1:1.0: Unknown control protocol [ 133.706053][ T6405] netlink: 4 bytes leftover after parsing attributes in process `syz.1.64'. [ 134.030878][ C1] cdc_wdm 4-1:1.0: nonzero urb status received: -EPIPE [ 134.134088][ T5949] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 134.234777][ T5949] usb 4-1: USB disconnect, device number 2 [ 134.355591][ T5895] usb 1-1: USB disconnect, device number 2 [ 134.367147][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 134.573502][ T936] usb 3-1: USB disconnect, device number 8 [ 135.198334][ T5895] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 135.425016][ T30] audit: type=1326 audit(1750769844.355:49): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6381 comm="syz.3.61" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6ab518e929 code=0x7fc00000 [ 135.596956][ T5938] usb 3-1: new high-speed USB device number 9 using dummy_hcd [ 135.774197][ T30] audit: type=1326 audit(1750769844.735:50): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6438 comm="syz.3.68" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f6ab518e929 code=0x0 [ 135.819366][ T5938] usb 3-1: config 0 has no interfaces? [ 135.836139][ T5938] usb 3-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b [ 135.845974][ T5938] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 135.874294][ T5938] usb 3-1: Product: syz [ 135.890151][ T5938] usb 3-1: Manufacturer: syz [ 135.910501][ T5938] usb 3-1: SerialNumber: syz [ 135.968277][ T5938] usb 3-1: config 0 descriptor?? [ 136.522843][ T936] usb 5-1: new high-speed USB device number 2 using dummy_hcd [ 136.695226][ T936] usb 5-1: config 0 has no interfaces? [ 136.710281][ T936] usb 5-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b [ 136.722064][ T936] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 136.731169][ T936] usb 5-1: Product: syz [ 136.741845][ T936] usb 5-1: Manufacturer: syz [ 136.753413][ T936] usb 5-1: SerialNumber: syz [ 136.784515][ T936] usb 5-1: config 0 descriptor?? [ 137.039680][ T6449] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 137.051627][ T6449] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 138.290812][ T5895] net_ratelimit: 3 callbacks suppressed [ 138.290828][ T5895] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 138.387266][ T5843] usb 3-1: USB disconnect, device number 9 [ 138.614614][ T65] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 138.624052][ T5895] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 138.633714][ T936] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 139.171146][ T6465] netlink: 8 bytes leftover after parsing attributes in process `syz.3.73'. [ 139.180387][ T5922] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 139.188763][ T6465] netlink: 20 bytes leftover after parsing attributes in process `syz.3.73'. [ 139.249081][ T5895] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 139.267452][ T5843] usb 3-1: new high-speed USB device number 10 using dummy_hcd [ 139.345448][ T5895] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 139.437571][ T5843] usb 3-1: Using ep0 maxpacket: 32 [ 139.463742][ T5843] usb 3-1: config 0 has an invalid interface number: 51 but max is 0 [ 139.487015][ T5843] usb 3-1: config 0 has no interface number 0 [ 139.523472][ T5843] usb 3-1: New USB device found, idVendor=061d, idProduct=c150, bcdDevice=ce.6f [ 139.540792][ T5843] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 139.562207][ T5843] usb 3-1: Product: syz [ 139.568764][ T5843] usb 3-1: Manufacturer: syz [ 139.573622][ T5843] usb 3-1: SerialNumber: syz [ 139.584669][ T5843] usb 3-1: config 0 descriptor?? [ 139.612485][ T5843] quatech2 3-1:0.51: Quatech 2nd gen USB to Serial Driver converter detected [ 139.838105][ T5843] usb 3-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB0 [ 139.890270][ T936] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 139.913190][ T5843] usb 3-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB1 [ 139.975041][ T5895] usb 5-1: USB disconnect, device number 2 [ 140.169744][ T6476] xt_NFQUEUE: number of queues (65532) out of range (got 68713) [ 140.315234][ C0] usb 3-1: qt2_read_bulk_callback - non-zero urb status: -71 [ 140.324558][ T5843] usb 3-1: USB disconnect, device number 10 [ 140.352618][ T5843] quatech-serial ttyUSB0: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB0 [ 140.393820][ T5895] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 140.398834][ T5843] quatech-serial ttyUSB1: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB1 [ 140.455408][ T5843] quatech2 3-1:0.51: device disconnected [ 141.356928][ T5895] usb 1-1: new high-speed USB device number 3 using dummy_hcd [ 141.721492][ T5938] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 141.939728][ T5895] usb 1-1: Using ep0 maxpacket: 16 [ 141.970298][ T5895] usb 1-1: config 0 has an invalid interface number: 34 but max is 0 [ 142.005340][ T5895] usb 1-1: config 0 has no interface number 0 [ 142.045049][ T5895] usb 1-1: config 0 interface 34 altsetting 2 bulk endpoint 0x4 has invalid maxpacket 16 [ 142.224699][ T5895] usb 1-1: config 0 interface 34 altsetting 2 bulk endpoint 0x82 has invalid maxpacket 64 [ 142.266918][ T5843] usb 2-1: new high-speed USB device number 8 using dummy_hcd [ 142.294157][ T5895] usb 1-1: config 0 interface 34 has no altsetting 0 [ 142.408648][ T5895] usb 1-1: New USB device found, idVendor=1199, idProduct=9054, bcdDevice=ff.5c [ 142.424130][ T5895] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 142.427030][ T5843] usb 2-1: Using ep0 maxpacket: 16 [ 142.436851][ T5895] usb 1-1: Product: syz [ 142.449767][ T5895] usb 1-1: Manufacturer: syz [ 142.457449][ T5895] usb 1-1: SerialNumber: syz [ 142.491325][ T5843] usb 2-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 142.494829][ T5895] usb 1-1: config 0 descriptor?? [ 142.523514][ T6515] netlink: 'syz.4.86': attribute type 58 has an invalid length. [ 142.571522][ T5843] usb 2-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 142.585021][ T5843] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 142.589028][ T6495] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 142.621777][ T6515] netlink: 'syz.4.86': attribute type 30 has an invalid length. [ 142.638994][ T6495] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 142.659081][ T5843] usb 2-1: Product: syz [ 142.663316][ T5843] usb 2-1: Manufacturer: syz [ 142.746959][ T5843] usb 2-1: SerialNumber: syz [ 142.752703][ T6515] netlink: 32 bytes leftover after parsing attributes in process `syz.4.86'. [ 142.774244][ T5843] usb 2-1: config 0 descriptor?? [ 143.073194][ T5895] usb 5-1: new high-speed USB device number 3 using dummy_hcd [ 143.255329][ T5895] usb 5-1: Using ep0 maxpacket: 32 [ 143.272421][ T5895] usb 5-1: config 0 has an invalid interface number: 146 but max is 0 [ 143.286308][ T5895] usb 5-1: config 0 has no interface number 0 [ 143.311247][ T5895] usb 5-1: config 0 interface 146 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 143.355954][ T5895] usb 5-1: config 0 interface 146 altsetting 0 has an endpoint descriptor with address 0xE3, changing to 0x83 [ 143.389903][ T5895] usb 5-1: config 0 interface 146 altsetting 0 endpoint 0x83 has invalid maxpacket 33307, setting to 1024 [ 143.484166][ T5895] usb 5-1: config 0 interface 146 altsetting 0 bulk endpoint 0x83 has invalid maxpacket 1024 [ 143.507947][ T5895] usb 5-1: config 0 interface 146 altsetting 0 has an endpoint descriptor with address 0xF2, changing to 0x82 [ 143.520111][ T5895] usb 5-1: config 0 interface 146 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 143.530991][ T5895] usb 5-1: config 0 interface 146 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 0 [ 143.587503][ T5938] usb 4-1: new high-speed USB device number 3 using dummy_hcd [ 143.597270][ T5895] usb 5-1: config 0 interface 146 altsetting 0 endpoint 0x1 has invalid maxpacket 19968, setting to 1024 [ 143.628765][ T5895] usb 5-1: config 0 interface 146 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 1024 [ 143.640325][ T5895] usb 5-1: config 0 interface 146 altsetting 0 has 4 endpoint descriptors, different from the interface descriptor's value: 3 [ 143.659399][ T5895] usb 5-1: New USB device found, idVendor=05da, idProduct=009a, bcdDevice=62.95 [ 143.669179][ T5895] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 143.733291][ T5895] usb 5-1: Product: syz [ 143.738503][ T5895] usb 5-1: Manufacturer: syz [ 143.743843][ T5895] usb 5-1: SerialNumber: syz [ 143.753279][ T5895] usb 5-1: config 0 descriptor?? [ 143.759794][ T6517] raw-gadget.2 gadget.4: fail, usb_ep_enable returned -22 [ 143.769632][ T6517] raw-gadget.2 gadget.4: fail, usb_ep_enable returned -22 [ 143.788073][ T5895] microtek usb (rev 0.4.3): will this work? Response EP is not usually 3 [ 143.797150][ T5895] microtek usb (rev 0.4.3): will this work? Image data EP is not usually 2 [ 143.807263][ T5949] net_ratelimit: 4 callbacks suppressed [ 143.807281][ T5949] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 143.829757][ T5938] usb 4-1: New USB device found, idVendor=8086, idProduct=0110, bcdDevice=bf.ad [ 143.839650][ T5938] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 143.857558][ T5938] usb 4-1: config 0 descriptor?? [ 143.914647][ T5938] gspca_main: spca508-2.14.0 probing 8086:0110 [ 143.923299][ T5895] scsi host1: microtekX6 [ 143.985948][ T6515] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 143.997175][ T6515] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 144.049578][ T6515] bond2 (unregistering): Released all slaves [ 144.210520][ T5938] gspca_spca508: reg_read err -32 [ 144.216552][ T5925] usb 1-1: USB disconnect, device number 3 [ 144.329614][ T5949] usb 5-1: USB disconnect, device number 3 [ 144.367506][ T1154] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 144.376453][ T5843] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 144.385683][ T936] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 144.717373][ T5938] gspca_spca508: reg_read err -110 [ 144.732793][ T5938] gspca_spca508: reg_read err -32 [ 144.747033][ T5938] gspca_spca508: reg_read err -32 [ 144.820511][ T5938] gspca_spca508: reg_read err -32 [ 144.826451][ T5938] gspca_spca508: reg write: error -32 [ 144.833740][ T5938] spca508 4-1:0.0: probe with driver spca508 failed with error -32 [ 144.847470][ T5925] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 144.855661][ T5925] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 144.923762][ T6546] x_tables: unsorted entry at hook 1 [ 144.986005][ T5925] usb 2-1: USB disconnect, device number 8 [ 145.054369][ T6545] netlink: 8 bytes leftover after parsing attributes in process `syz.0.92'. [ 145.090147][ T6545] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 145.099636][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 145.753101][ T5925] usb 5-1: new high-speed USB device number 4 using dummy_hcd [ 145.893748][ T5949] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 145.960478][ T5925] usb 5-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 145.980958][ T5925] usb 5-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config [ 146.031192][ T5925] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 146.061416][ T5925] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 52, changing to 9 [ 146.137946][ T5925] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8241, setting to 1024 [ 146.305482][ T5925] usb 5-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 146.336391][ T5908] usb 4-1: USB disconnect, device number 3 [ 146.357085][ T5925] usb 5-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 146.402568][ T5925] usb 5-1: Product: syz [ 146.424896][ T5925] usb 5-1: Manufacturer: syz [ 146.610582][ T5925] cdc_wdm 5-1:1.0: skipping garbage [ 146.633244][ T5925] cdc_wdm 5-1:1.0: skipping garbage [ 146.672299][ T5925] cdc_wdm 5-1:1.0: cdc-wdm0: USB WDM device [ 146.689176][ T5925] cdc_wdm 5-1:1.0: Unknown control protocol [ 147.451655][ C0] cdc_wdm 5-1:1.0: nonzero urb status received: -EPIPE [ 147.452312][ T5908] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 147.747108][ T5908] usb 5-1: USB disconnect, device number 4 [ 148.760890][ T30] audit: type=1326 audit(1750769857.725:51): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6553 comm="syz.4.95" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f01c4d8e929 code=0x7fc00000 [ 149.573587][ T5949] net_ratelimit: 2 callbacks suppressed [ 149.573607][ T5949] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 149.716955][ T5908] usb 5-1: new high-speed USB device number 5 using dummy_hcd [ 149.732707][ T6605] netlink: 1 bytes leftover after parsing attributes in process `syz.0.109'. [ 150.037220][ T5908] usb 5-1: Using ep0 maxpacket: 8 [ 150.093713][ T5908] usb 5-1: New USB device found, idVendor=1557, idProduct=7720, bcdDevice=b7.eb [ 150.111970][ T6611] netlink: 8 bytes leftover after parsing attributes in process `syz.1.112'. [ 150.130240][ T1154] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 150.144823][ T5908] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 150.154346][ T5949] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 150.163513][ T5925] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 150.227597][ T5908] usb 5-1: config 0 descriptor?? [ 150.377133][ T6610] pim6reg0: tun_chr_ioctl cmd 1074025680 [ 150.638889][ T5949] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 150.695686][ T6616] netlink: 32 bytes leftover after parsing attributes in process `syz.1.113'. [ 150.706123][ T6616] netlink: 32 bytes leftover after parsing attributes in process `syz.1.113'. [ 151.007615][ T936] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 151.219475][ T6609] delete_channel: no stack [ 151.276191][ T6623] netlink: 11 bytes leftover after parsing attributes in process `syz.0.115'. [ 151.782182][ T5949] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 152.177643][ T5949] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 152.898538][ T5895] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 153.497292][ T936] usb 1-1: new high-speed USB device number 4 using dummy_hcd [ 153.779428][ T936] usb 1-1: Using ep0 maxpacket: 16 [ 153.820147][ T936] usb 1-1: config 0 interface 0 altsetting 9 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 153.887088][ T936] usb 1-1: config 0 interface 0 altsetting 9 endpoint 0x81 has invalid wMaxPacketSize 0 [ 153.939046][ T936] usb 1-1: config 0 interface 0 has no altsetting 0 [ 153.962743][ T936] usb 1-1: New USB device found, idVendor=046d, idProduct=c117, bcdDevice= 0.00 [ 153.974176][ T5936] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 154.076894][ T5895] usb 4-1: new high-speed USB device number 4 using dummy_hcd [ 154.145810][ T936] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 154.204873][ T5938] usb 3-1: new high-speed USB device number 11 using dummy_hcd [ 154.224628][ T936] usb 1-1: config 0 descriptor?? [ 154.377758][ T5895] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 154.427581][ T5895] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 154.468937][ T5938] usb 3-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 154.504096][ T5938] usb 3-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config [ 154.516870][ T5895] usb 4-1: New USB device found, idVendor=0458, idProduct=501a, bcdDevice= 0.00 [ 154.546557][ T5938] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 154.555978][ T5895] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 154.597000][ T5938] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 52, changing to 9 [ 154.636953][ T5925] net_ratelimit: 1 callbacks suppressed [ 154.636973][ T5925] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 154.677736][ T5895] usb 4-1: config 0 descriptor?? [ 154.777040][ T5938] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8241, setting to 1024 [ 154.895802][ T5938] usb 3-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 154.952866][ T5938] usb 3-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 154.975951][ T5938] usb 3-1: Product: syz [ 154.996274][ T5938] usb 3-1: Manufacturer: syz [ 155.023145][ T5949] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 155.055094][ T5908] asix 5-1:0.0 (unnamed net_device) (uninitialized): Failed to read reg index 0x0000: -71 [ 155.097289][ T5938] cdc_wdm 3-1:1.0: skipping garbage [ 155.112258][ T5908] asix 5-1:0.0: probe with driver asix failed with error -71 [ 155.141533][ T5938] cdc_wdm 3-1:1.0: skipping garbage [ 155.210856][ T5908] usb 5-1: USB disconnect, device number 5 [ 155.223027][ T5938] cdc_wdm 3-1:1.0: cdc-wdm0: USB WDM device [ 155.256343][ T5938] cdc_wdm 3-1:1.0: Unknown control protocol [ 155.323308][ T5895] kye 0003:0458:501A.0002: tablet report size too small, or kye_tablet_rdesc unexpectedly large [ 155.439837][ T5895] kye 0003:0458:501A.0002: hidraw0: USB HID v0.04 Device [HID 0458:501a] on usb-dummy_hcd.3-1/input0 [ 155.495950][ T5895] kye 0003:0458:501A.0002: tablet-enabling feature report not found [ 155.530895][ T5895] kye 0003:0458:501A.0002: tablet enabling failed [ 155.653477][ C0] cdc_wdm 3-1:1.0: nonzero urb status received: -EPIPE [ 155.706367][ T5895] usb 4-1: USB disconnect, device number 4 [ 155.948388][ T936] usb 3-1: USB disconnect, device number 11 [ 156.112092][ T5908] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 156.176088][ T6649] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 156.277178][ T5908] usb 1-1: USB disconnect, device number 4 [ 156.409502][ T6645] fido_id[6645]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.3/usb4/report_descriptor': No such file or directory [ 157.112536][ T936] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 157.131505][ T30] audit: type=1326 audit(1750769866.045:52): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6635 comm="syz.2.118" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe7f298e929 code=0x7fc00000 [ 157.170447][ T5895] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 157.178636][ T5895] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 157.273834][ T6657] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 157.818972][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 157.832181][ T5895] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 158.222389][ T5895] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 158.267321][ T6664] netlink: 32 bytes leftover after parsing attributes in process `syz.3.124'. [ 158.361502][ T6664] netlink: 32 bytes leftover after parsing attributes in process `syz.3.124'. [ 158.701250][ T6672] netlink: 11 bytes leftover after parsing attributes in process `syz.4.126'. [ 158.997638][ T6683] capability: warning: `syz.4.130' uses deprecated v2 capabilities in a way that may be insecure [ 159.102898][ T936] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 160.287448][ T5938] net_ratelimit: 2 callbacks suppressed [ 160.287464][ T5938] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 160.336873][ T5843] usb 5-1: new high-speed USB device number 6 using dummy_hcd [ 160.568799][ T5843] usb 5-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 160.597026][ T5843] usb 5-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config [ 160.687705][ T5843] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 160.731961][ T5843] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 52, changing to 9 [ 160.793558][ T5843] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8241, setting to 1024 [ 160.827619][ T5843] usb 5-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 161.333440][ T5938] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 161.347169][ T5843] usb 5-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 161.374225][ T5843] usb 5-1: Product: syz [ 161.378817][ T936] usb 2-1: new high-speed USB device number 9 using dummy_hcd [ 161.411217][ T5843] usb 5-1: Manufacturer: syz [ 161.489795][ T5843] cdc_wdm 5-1:1.0: skipping garbage [ 161.565102][ T5843] cdc_wdm 5-1:1.0: skipping garbage [ 161.607058][ T5843] cdc_wdm 5-1:1.0: cdc-wdm0: USB WDM device [ 161.652572][ T5843] cdc_wdm 5-1:1.0: Unknown control protocol [ 161.707264][ T936] usb 2-1: config 0 has no interfaces? [ 161.776223][ T936] usb 2-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b [ 161.816280][ T936] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 161.838935][ T936] usb 2-1: Product: syz [ 161.848149][ T6710] FAULT_INJECTION: forcing a failure. [ 161.848149][ T6710] name fail_usercopy, interval 1, probability 0, space 0, times 1 [ 161.869002][ T936] usb 2-1: Manufacturer: syz [ 161.886973][ T936] usb 2-1: SerialNumber: syz [ 161.896396][ T936] usb 2-1: config 0 descriptor?? [ 161.926222][ T6710] CPU: 0 UID: 0 PID: 6710 Comm: syz.2.136 Not tainted 6.16.0-rc3-syzkaller-00042-g78f4e737a53e #0 PREEMPT(full) [ 161.926252][ T6710] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 161.926271][ T6710] Call Trace: [ 161.926277][ T6710] [ 161.926284][ T6710] dump_stack_lvl+0x189/0x250 [ 161.926312][ T6710] ? __pfx____ratelimit+0x10/0x10 [ 161.926333][ T6710] ? __pfx_dump_stack_lvl+0x10/0x10 [ 161.926356][ T6710] ? __pfx__printk+0x10/0x10 [ 161.926372][ T6710] ? __might_fault+0xb0/0x130 [ 161.926393][ T6710] should_fail_ex+0x414/0x560 [ 161.926415][ T6710] _copy_from_user+0x2d/0xb0 [ 161.926430][ T6710] do_sock_getsockopt+0x1cd/0x650 [ 161.926450][ T6710] ? __pfx_do_sock_getsockopt+0x10/0x10 [ 161.926466][ T6710] ? do_syscall_64+0x40/0x3b0 [ 161.926478][ T6710] ? __fget_files+0x3a0/0x420 [ 161.926493][ T6710] ? __fget_files+0x2a/0x420 [ 161.926514][ T6710] __x64_sys_getsockopt+0x1a5/0x250 [ 161.926530][ T6710] ? do_syscall_64+0x40/0x3b0 [ 161.926543][ T6710] ? do_syscall_64+0x40/0x3b0 [ 161.926558][ T6710] do_syscall_64+0xfa/0x3b0 [ 161.926570][ T6710] ? lockdep_hardirqs_on+0x9c/0x150 [ 161.926590][ T6710] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 161.926606][ T6710] ? clear_bhb_loop+0x60/0xb0 [ 161.926625][ T6710] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 161.926639][ T6710] RIP: 0033:0x7fe7f298e929 [ 161.926655][ T6710] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 161.926667][ T6710] RSP: 002b:00007fe7f377f038 EFLAGS: 00000246 ORIG_RAX: 0000000000000037 [ 161.926682][ T6710] RAX: ffffffffffffffda RBX: 00007fe7f2bb5fa0 RCX: 00007fe7f298e929 [ 161.926693][ T6710] RDX: 000000000000007d RSI: 0000000000000084 RDI: 0000000000000003 [ 161.926701][ T6710] RBP: 00007fe7f377f090 R08: 0000200000000340 R09: 0000000000000000 [ 161.926710][ T6710] R10: 0000200000000200 R11: 0000000000000246 R12: 0000000000000001 [ 161.926718][ T6710] R13: 0000000000000000 R14: 00007fe7f2bb5fa0 R15: 00007fe7f2cdfa28 [ 161.926740][ T6710] [ 162.172839][ T936] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 162.174830][ C1] cdc_wdm 5-1:1.0: nonzero urb status received: -EPIPE [ 162.369186][ T1154] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 162.378707][ T55] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 162.422964][ T5938] usb 5-1: USB disconnect, device number 6 [ 162.449917][ T6716] ip6gretap1: entered promiscuous mode [ 162.458595][ T6716] ip6gretap1: entered allmulticast mode [ 162.616293][ T6722] netlink: 32 bytes leftover after parsing attributes in process `syz.2.138'. [ 162.634511][ T6722] netlink: 32 bytes leftover after parsing attributes in process `syz.2.138'. [ 162.736908][ T5843] usb 4-1: new high-speed USB device number 5 using dummy_hcd [ 162.903829][ T5843] usb 4-1: Using ep0 maxpacket: 8 [ 163.024672][ T5843] usb 4-1: config index 0 descriptor too short (expected 301, got 45) [ 163.036894][ T5843] usb 4-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 163.041614][ T6724] netlink: 11 bytes leftover after parsing attributes in process `syz.2.140'. [ 163.056418][ T5843] usb 4-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 163.194178][ T5843] usb 4-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 163.245680][ T5843] usb 4-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 163.331720][ T5843] usb 4-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 163.374585][ T5843] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 163.414687][ T5938] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 163.444473][ T30] audit: type=1326 audit(1750769872.405:53): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6702 comm="syz.4.134" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f01c4d8e929 code=0x7fc00000 [ 163.501186][ T5938] IPVS: starting estimator thread 0... [ 163.638697][ T6730] IPVS: using max 29 ests per chain, 69600 per kthread [ 163.661624][ T5843] usb 4-1: GET_CAPABILITIES returned 0 [ 163.687013][ T5843] usbtmc 4-1:16.0: can't read capabilities [ 163.937325][ T5938] usb 5-1: new high-speed USB device number 7 using dummy_hcd [ 163.952822][ T5843] usb 4-1: USB disconnect, device number 5 [ 164.132251][ T5938] usb 5-1: Using ep0 maxpacket: 8 [ 164.173257][ T5938] usb 5-1: New USB device found, idVendor=0c45, idProduct=614a, bcdDevice=c4.6d [ 164.226886][ T5938] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 164.232008][ T6734] FAULT_INJECTION: forcing a failure. [ 164.232008][ T6734] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 164.234948][ T5938] usb 5-1: Product: syz [ 164.234967][ T5938] usb 5-1: Manufacturer: syz [ 164.234984][ T5938] usb 5-1: SerialNumber: syz [ 164.270231][ T5938] usb 5-1: config 0 descriptor?? [ 164.271560][ T5843] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 164.316075][ T6734] CPU: 0 UID: 0 PID: 6734 Comm: syz.0.143 Not tainted 6.16.0-rc3-syzkaller-00042-g78f4e737a53e #0 PREEMPT(full) [ 164.316104][ T6734] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 164.316116][ T6734] Call Trace: [ 164.316124][ T6734] [ 164.316133][ T6734] dump_stack_lvl+0x189/0x250 [ 164.316170][ T6734] ? __pfx____ratelimit+0x10/0x10 [ 164.316200][ T6734] ? __pfx_dump_stack_lvl+0x10/0x10 [ 164.316236][ T6734] ? __pfx__printk+0x10/0x10 [ 164.316272][ T6734] should_fail_ex+0x414/0x560 [ 164.316303][ T6734] _copy_to_user+0x31/0xb0 [ 164.316325][ T6734] simple_read_from_buffer+0xe1/0x170 [ 164.316352][ T6734] proc_fail_nth_read+0x1df/0x250 [ 164.316380][ T6734] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 164.316408][ T6734] ? rw_verify_area+0x258/0x650 [ 164.316437][ T6734] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 164.316460][ T6734] vfs_read+0x200/0x980 [ 164.316495][ T6734] ? __pfx___mutex_lock+0x10/0x10 [ 164.316527][ T6734] ? __pfx_vfs_read+0x10/0x10 [ 164.316559][ T6734] ? __fget_files+0x2a/0x420 [ 164.316586][ T6734] ? __fget_files+0x3a0/0x420 [ 164.316606][ T6734] ? __fget_files+0x2a/0x420 [ 164.316638][ T6734] ksys_read+0x145/0x250 [ 164.316670][ T6734] ? __pfx_ksys_read+0x10/0x10 [ 164.316697][ T6734] ? rcu_is_watching+0x15/0xb0 [ 164.316734][ T6734] ? do_syscall_64+0xbe/0x3b0 [ 164.316756][ T6734] do_syscall_64+0xfa/0x3b0 [ 164.316772][ T6734] ? lockdep_hardirqs_on+0x9c/0x150 [ 164.316803][ T6734] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 164.316822][ T6734] ? clear_bhb_loop+0x60/0xb0 [ 164.316846][ T6734] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 164.316863][ T6734] RIP: 0033:0x7fe377d8d33c [ 164.316881][ T6734] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 164.316897][ T6734] RSP: 002b:00007fe378bec030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 164.316917][ T6734] RAX: ffffffffffffffda RBX: 00007fe377fb5fa0 RCX: 00007fe377d8d33c [ 164.316931][ T6734] RDX: 000000000000000f RSI: 00007fe378bec0a0 RDI: 0000000000000004 [ 164.316951][ T6734] RBP: 00007fe378bec090 R08: 0000000000000000 R09: 0000000000000000 [ 164.316963][ T6734] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 164.316974][ T6734] R13: 0000000000000000 R14: 00007fe377fb5fa0 R15: 00007fe3780dfa28 [ 164.317006][ T6734] [ 164.329764][ T5938] gspca_main: sonixj-2.14.0 probing 0c45:614a [ 164.398625][ T5843] usb 2-1: USB disconnect, device number 9 [ 164.585575][ T55] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 164.693780][ T6736] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 164.947070][ T55] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 165.407231][ T5922] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 165.538247][ T5843] usb 4-1: new high-speed USB device number 6 using dummy_hcd [ 165.648046][ T55] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 165.708728][ T5938] gspca_sonixj: reg_r err -110 [ 165.713761][ T5938] sonixj 5-1:0.0: probe with driver sonixj failed with error -110 [ 165.723144][ T6760] ipt_ECN: cannot use operation on non-tcp rule [ 165.732107][ T5843] usb 4-1: Using ep0 maxpacket: 32 [ 165.748489][ T5843] usb 4-1: config 0 has an invalid interface number: 184 but max is 0 [ 165.792354][ T5843] usb 4-1: config 0 has no interface number 0 [ 165.823790][ T5843] usb 4-1: config 0 interface 184 has no altsetting 0 [ 165.879109][ T5843] usb 4-1: New USB device found, idVendor=0424, idProduct=7500, bcdDevice=69.ee [ 165.888959][ T5843] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 165.897546][ T5843] usb 4-1: Product: syz [ 165.901922][ T5843] usb 4-1: Manufacturer: syz [ 165.906636][ T5843] usb 4-1: SerialNumber: syz [ 165.923215][ T5843] usb 4-1: config 0 descriptor?? [ 165.935627][ T5843] smsc75xx v1.0.0 [ 165.945384][ T5843] smsc75xx 4-1:0.184 (unnamed net_device) (uninitialized): usbnet_get_endpoints failed: -22 [ 165.986689][ T5843] smsc75xx 4-1:0.184: probe with driver smsc75xx failed with error -22 [ 166.138682][ T6751] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 166.147042][ T6751] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 166.159592][ T6751] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 166.171555][ T6751] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 166.547154][ T5843] usb 1-1: new high-speed USB device number 5 using dummy_hcd [ 166.694033][ T5908] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 166.709301][ T5843] usb 1-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 166.748960][ T5843] usb 1-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config [ 166.779447][ T5938] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 166.803789][ T5843] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 166.850412][ T5843] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 52, changing to 9 [ 166.876111][ T5843] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8241, setting to 1024 [ 166.896639][ T5843] usb 1-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 166.907360][ T5843] usb 1-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 166.915504][ T5843] usb 1-1: Product: syz [ 166.920091][ T5843] usb 1-1: Manufacturer: syz [ 166.951521][ T6771] FAULT_INJECTION: forcing a failure. [ 166.951521][ T6771] name failslab, interval 1, probability 0, space 0, times 1 [ 166.956738][ T5843] cdc_wdm 1-1:1.0: skipping garbage [ 166.991185][ T5843] cdc_wdm 1-1:1.0: skipping garbage [ 167.016513][ T5843] cdc_wdm 1-1:1.0: cdc-wdm0: USB WDM device [ 167.033059][ T6771] CPU: 1 UID: 0 PID: 6771 Comm: syz.1.155 Not tainted 6.16.0-rc3-syzkaller-00042-g78f4e737a53e #0 PREEMPT(full) [ 167.033087][ T6771] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 167.033099][ T6771] Call Trace: [ 167.033107][ T6771] [ 167.033116][ T6771] dump_stack_lvl+0x189/0x250 [ 167.033152][ T6771] ? __pfx____ratelimit+0x10/0x10 [ 167.033187][ T6771] ? __pfx_dump_stack_lvl+0x10/0x10 [ 167.033218][ T6771] ? __pfx__printk+0x10/0x10 [ 167.033246][ T6771] ? __pfx___might_resched+0x10/0x10 [ 167.033282][ T6771] should_fail_ex+0x414/0x560 [ 167.033312][ T6771] ? alloc_netdev_mqs+0xa6/0x11e0 [ 167.033339][ T6771] should_failslab+0xa8/0x100 [ 167.033363][ T6771] __kvmalloc_node_noprof+0x161/0x5f0 [ 167.033384][ T6771] ? alloc_netdev_mqs+0xa6/0x11e0 [ 167.033410][ T6771] ? aa_get_newest_label+0xf7/0x5d0 [ 167.033437][ T6771] ? __pfx_ipgre_tunnel_setup+0x10/0x10 [ 167.033465][ T6771] alloc_netdev_mqs+0xa6/0x11e0 [ 167.033491][ T6771] ? __pfx_ipgre_tunnel_setup+0x10/0x10 [ 167.033535][ T6771] __ip_tunnel_create+0x349/0x560 [ 167.033559][ T6771] ? __pfx___ip_tunnel_create+0x10/0x10 [ 167.033579][ T6771] ? bpf_lsm_capable+0x9/0x20 [ 167.033597][ T6771] ? security_capable+0x7e/0x2e0 [ 167.033629][ T6771] ip_tunnel_ctl+0x4dd/0xc30 [ 167.033666][ T6771] ipgre_tunnel_ctl+0x2ef/0x5c0 [ 167.033703][ T6771] ip_tunnel_siocdevprivate+0xf2/0x180 [ 167.033739][ T6771] ? __pfx_ip_tunnel_siocdevprivate+0x10/0x10 [ 167.033781][ T6771] ? netdev_name_node_lookup+0xdf/0x120 [ 167.033815][ T6771] dev_ifsioc+0xb54/0xf00 [ 167.033845][ T6771] dev_ioctl+0x84c/0x1150 [ 167.033869][ T6771] sock_ioctl+0x719/0x790 [ 167.033900][ T6771] ? __pfx_sock_ioctl+0x10/0x10 [ 167.033931][ T6771] ? __fget_files+0x3a0/0x420 [ 167.033952][ T6771] ? __fget_files+0x2a/0x420 [ 167.033976][ T6771] ? bpf_lsm_file_ioctl+0x9/0x20 [ 167.034005][ T6771] ? __pfx_sock_ioctl+0x10/0x10 [ 167.034033][ T6771] __se_sys_ioctl+0xf9/0x170 [ 167.034066][ T6771] do_syscall_64+0xfa/0x3b0 [ 167.034083][ T6771] ? lockdep_hardirqs_on+0x9c/0x150 [ 167.034111][ T6771] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 167.034131][ T6771] ? clear_bhb_loop+0x60/0xb0 [ 167.034155][ T6771] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 167.034174][ T6771] RIP: 0033:0x7f009358e929 [ 167.034192][ T6771] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 167.034208][ T6771] RSP: 002b:00007f00943a4038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 167.034229][ T6771] RAX: ffffffffffffffda RBX: 00007f00937b5fa0 RCX: 00007f009358e929 [ 167.034243][ T6771] RDX: 0000200000001040 RSI: 00000000000089f1 RDI: 0000000000000007 [ 167.034256][ T6771] RBP: 00007f00943a4090 R08: 0000000000000000 R09: 0000000000000000 [ 167.034268][ T6771] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 167.034279][ T6771] R13: 0000000000000000 R14: 00007f00937b5fa0 R15: 00007f00938dfa28 [ 167.034311][ T6771] [ 167.046886][ T5843] cdc_wdm 1-1:1.0: Unknown control protocol [ 167.419564][ T6774] netlink: 24 bytes leftover after parsing attributes in process `syz.1.156'. [ 167.739659][ C0] cdc_wdm 1-1:1.0: nonzero urb status received: -EPIPE [ 167.739704][ T5908] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 167.941888][ T5922] usb 1-1: USB disconnect, device number 5 [ 168.048714][ T12] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 168.123490][ T5908] usb 5-1: USB disconnect, device number 7 [ 168.212768][ T5843] usb 4-1: USB disconnect, device number 6 [ 168.255932][ T6787] netlink: 8 bytes leftover after parsing attributes in process `syz.2.159'. [ 168.767326][ T5938] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 169.191707][ T30] audit: type=1326 audit(1750769878.135:54): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6762 comm="syz.0.152" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe377d8e929 code=0x7fc00000 [ 169.445700][ T6811] fuse: blksize only supported for fuseblk [ 169.465396][ T6811] trusted_key: encrypted_key: master key parameter is missing [ 169.526929][ T5938] usb 2-1: new high-speed USB device number 10 using dummy_hcd [ 169.686925][ T5938] usb 2-1: Using ep0 maxpacket: 32 [ 169.712905][ T5938] usb 2-1: config 0 has an invalid interface number: 51 but max is 0 [ 169.727717][ T5938] usb 2-1: config 0 has no interface number 0 [ 169.748596][ T5938] usb 2-1: New USB device found, idVendor=061d, idProduct=c150, bcdDevice=ce.6f [ 169.765197][ T5938] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 169.811746][ T5938] usb 2-1: Product: syz [ 169.820629][ T55] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 169.829275][ T5938] usb 2-1: Manufacturer: syz [ 169.872084][ T5938] usb 2-1: SerialNumber: syz [ 170.010555][ T5938] usb 2-1: config 0 descriptor?? [ 170.030879][ T5938] quatech2 2-1:0.51: Quatech 2nd gen USB to Serial Driver converter detected [ 170.467378][ T5938] usb 2-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB0 [ 170.504888][ T6806] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 170.518389][ T6815] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 170.536912][ T5938] usb 2-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB1 [ 170.553495][ T6806] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 170.609815][ T65] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 170.847464][ T5895] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 170.887893][ T5938] usb 3-1: new high-speed USB device number 12 using dummy_hcd [ 170.987315][ T55] usb 1-1: new high-speed USB device number 6 using dummy_hcd [ 171.029581][ C1] usb 2-1: qt2_read_bulk_callback - non-zero urb status: -71 [ 171.036905][ T5925] usb 2-1: USB disconnect, device number 10 [ 171.046685][ T5925] quatech-serial ttyUSB0: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB0 [ 171.078372][ T5938] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 171.097563][ T5843] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 171.119799][ T5925] quatech-serial ttyUSB1: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB1 [ 171.125809][ T5938] usb 3-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 171.159726][ T5938] usb 3-1: New USB device found, idVendor=1604, idProduct=8001, bcdDevice=44.1f [ 171.169358][ T55] usb 1-1: Using ep0 maxpacket: 8 [ 171.174446][ T5938] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 171.199078][ T5925] quatech2 2-1:0.51: device disconnected [ 171.203630][ T55] usb 1-1: New USB device found, idVendor=0c45, idProduct=614a, bcdDevice=c4.6d [ 171.224627][ T5938] usb 3-1: Product: syz [ 171.236429][ T55] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 171.245853][ T5938] usb 3-1: Manufacturer: syz [ 171.276228][ T55] usb 1-1: Product: syz [ 171.280746][ T5938] usb 3-1: SerialNumber: syz [ 171.285743][ T55] usb 1-1: Manufacturer: syz [ 171.296892][ T55] usb 1-1: SerialNumber: syz [ 171.323666][ T55] usb 1-1: config 0 descriptor?? [ 171.339279][ T5938] usb 3-1: config 0 descriptor?? [ 171.372908][ T55] gspca_main: sonixj-2.14.0 probing 0c45:614a [ 171.596383][ T5938] usb 3-1: USB disconnect, device number 12 [ 171.768560][ T6830] netlink: 32 bytes leftover after parsing attributes in process `syz.3.176'. [ 171.778486][ T6830] netlink: 32 bytes leftover after parsing attributes in process `syz.3.176'. [ 171.907456][ T5938] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 172.487066][ T55] gspca_sonixj: reg_r err -110 [ 172.492002][ T55] sonixj 1-1:0.0: probe with driver sonixj failed with error -110 [ 172.528073][ T5938] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 172.616695][ T6846] ipt_ECN: cannot use operation on non-tcp rule [ 172.813180][ T6847] netlink: 8 bytes leftover after parsing attributes in process `syz.2.180'. [ 172.929558][ T5938] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 173.809951][ T1085] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 173.967494][ T5938] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 174.472577][ T49] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 174.553112][ T30] audit: type=1326 audit(1750769883.515:55): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6867 comm="syz.1.187" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f009358e929 code=0x0 [ 175.008844][ T5938] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 175.171491][ T5938] usb 1-1: USB disconnect, device number 6 [ 175.669582][ T6874] netlink: 32 bytes leftover after parsing attributes in process `syz.0.189'. [ 175.737596][ T6874] netlink: 32 bytes leftover after parsing attributes in process `syz.0.189'. [ 175.984342][ T6877] FAULT_INJECTION: forcing a failure. [ 175.984342][ T6877] name failslab, interval 1, probability 0, space 0, times 0 [ 176.012595][ T6877] CPU: 0 UID: 0 PID: 6877 Comm: syz.0.191 Not tainted 6.16.0-rc3-syzkaller-00042-g78f4e737a53e #0 PREEMPT(full) [ 176.012617][ T6877] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 176.012626][ T6877] Call Trace: [ 176.012632][ T6877] [ 176.012639][ T6877] dump_stack_lvl+0x189/0x250 [ 176.012666][ T6877] ? __pfx____ratelimit+0x10/0x10 [ 176.012688][ T6877] ? __pfx_dump_stack_lvl+0x10/0x10 [ 176.012710][ T6877] ? __pfx__printk+0x10/0x10 [ 176.012730][ T6877] ? __pfx___might_resched+0x10/0x10 [ 176.012752][ T6877] ? fs_reclaim_acquire+0x7d/0x100 [ 176.012772][ T6877] should_fail_ex+0x414/0x560 [ 176.012794][ T6877] should_failslab+0xa8/0x100 [ 176.012811][ T6877] __kmalloc_noprof+0xcb/0x4f0 [ 176.012824][ T6877] ? kfree+0x4d/0x440 [ 176.012843][ T6877] ? tomoyo_realpath_from_path+0xe3/0x5d0 [ 176.012868][ T6877] tomoyo_realpath_from_path+0xe3/0x5d0 [ 176.012890][ T6877] ? tomoyo_domain+0xd9/0x130 [ 176.012914][ T6877] ? tomoyo_path_number_perm+0x1bc/0x5a0 [ 176.012931][ T6877] tomoyo_path_number_perm+0x1e8/0x5a0 [ 176.012949][ T6877] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 176.012980][ T6877] ? __lock_acquire+0xab9/0xd20 [ 176.013016][ T6877] ? __fget_files+0x2a/0x420 [ 176.013034][ T6877] ? __fget_files+0x2a/0x420 [ 176.013048][ T6877] ? __fget_files+0x3a0/0x420 [ 176.013063][ T6877] ? __fget_files+0x2a/0x420 [ 176.013082][ T6877] security_file_ioctl+0xcb/0x2d0 [ 176.013099][ T6877] __se_sys_ioctl+0x47/0x170 [ 176.013123][ T6877] do_syscall_64+0xfa/0x3b0 [ 176.013136][ T6877] ? lockdep_hardirqs_on+0x9c/0x150 [ 176.013156][ T6877] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 176.013170][ T6877] ? clear_bhb_loop+0x60/0xb0 [ 176.013188][ T6877] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 176.013201][ T6877] RIP: 0033:0x7fe377d8e929 [ 176.013214][ T6877] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 176.013232][ T6877] RSP: 002b:00007fe378bec038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 176.013247][ T6877] RAX: ffffffffffffffda RBX: 00007fe377fb5fa0 RCX: 00007fe377d8e929 [ 176.013257][ T6877] RDX: 0000200000000000 RSI: 00000000c0585605 RDI: 0000000000000003 [ 176.013267][ T6877] RBP: 00007fe378bec090 R08: 0000000000000000 R09: 0000000000000000 [ 176.013275][ T6877] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 176.013283][ T6877] R13: 0000000000000000 R14: 00007fe377fb5fa0 R15: 00007fe3780dfa28 [ 176.013305][ T6877] [ 176.013311][ T6877] ERROR: Out of memory at tomoyo_realpath_from_path. [ 176.271736][ T5908] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 176.371468][ T1154] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 176.401855][ T6879] process 'syz.2.190' launched '/dev/fd/4' with NULL argv: empty string added [ 176.489303][ T6879] fuse: Bad value for 'fd' [ 176.851688][ T5843] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 176.864535][ T6886] netlink: 11 bytes leftover after parsing attributes in process `syz.0.194'. [ 176.987240][ T5908] usb 4-1: new high-speed USB device number 7 using dummy_hcd [ 177.200650][ T5908] usb 4-1: config 0 has no interfaces? [ 177.210793][ T5908] usb 4-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b [ 177.220160][ T5908] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 177.228895][ T5908] usb 4-1: Product: syz [ 177.243024][ T5908] usb 4-1: Manufacturer: syz [ 177.248113][ T5908] usb 4-1: SerialNumber: syz [ 177.262137][ T5908] usb 4-1: config 0 descriptor?? [ 177.332981][ T5895] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 178.187672][ T6908] netlink: 8 bytes leftover after parsing attributes in process `syz.0.198'. [ 178.302788][ T6910] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 178.379424][ T5938] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 178.702190][ T6915] FAULT_INJECTION: forcing a failure. [ 178.702190][ T6915] name failslab, interval 1, probability 0, space 0, times 0 [ 178.715644][ T6915] CPU: 0 UID: 0 PID: 6915 Comm: syz.1.202 Not tainted 6.16.0-rc3-syzkaller-00042-g78f4e737a53e #0 PREEMPT(full) [ 178.715671][ T6915] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 178.715684][ T6915] Call Trace: [ 178.715692][ T6915] [ 178.715701][ T6915] dump_stack_lvl+0x189/0x250 [ 178.715737][ T6915] ? __pfx____ratelimit+0x10/0x10 [ 178.715767][ T6915] ? __pfx_dump_stack_lvl+0x10/0x10 [ 178.715797][ T6915] ? __pfx__printk+0x10/0x10 [ 178.715824][ T6915] ? __pfx___might_resched+0x10/0x10 [ 178.715853][ T6915] ? fs_reclaim_acquire+0x7d/0x100 [ 178.715881][ T6915] should_fail_ex+0x414/0x560 [ 178.715912][ T6915] should_failslab+0xa8/0x100 [ 178.715936][ T6915] __kmalloc_noprof+0xcb/0x4f0 [ 178.715954][ T6915] ? ip_options_get+0x51/0x4c0 [ 178.715991][ T6915] ip_options_get+0x51/0x4c0 [ 178.716025][ T6915] do_ip_setsockopt+0x1d9b/0x2d00 [ 178.716052][ T6915] ? __pfx_do_ip_setsockopt+0x10/0x10 [ 178.716076][ T6915] ? aa_sk_perm+0x81e/0x950 [ 178.716104][ T6915] ? __pfx_aa_sk_perm+0x10/0x10 [ 178.716125][ T6915] ? __lock_acquire+0xab9/0xd20 [ 178.716163][ T6915] ip_setsockopt+0x66/0x110 [ 178.716180][ T6915] ? __pfx_sock_common_setsockopt+0x10/0x10 [ 178.716203][ T6915] do_sock_setsockopt+0x25a/0x3e0 [ 178.716235][ T6915] ? __pfx_do_sock_setsockopt+0x10/0x10 [ 178.716264][ T6915] ? __fget_files+0x2a/0x420 [ 178.716296][ T6915] __x64_sys_setsockopt+0x18b/0x220 [ 178.716326][ T6915] do_syscall_64+0xfa/0x3b0 [ 178.716343][ T6915] ? lockdep_hardirqs_on+0x9c/0x150 [ 178.716371][ T6915] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 178.716390][ T6915] ? clear_bhb_loop+0x60/0xb0 [ 178.716415][ T6915] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 178.716434][ T6915] RIP: 0033:0x7f009358e929 [ 178.716451][ T6915] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 178.716468][ T6915] RSP: 002b:00007f00943a4038 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 178.716489][ T6915] RAX: ffffffffffffffda RBX: 00007f00937b5fa0 RCX: 00007f009358e929 [ 178.716504][ T6915] RDX: 0000000000000004 RSI: 0000000000000000 RDI: 0000000000000003 [ 178.716515][ T6915] RBP: 00007f00943a4090 R08: 0000000000000005 R09: 0000000000000000 [ 178.716527][ T6915] R10: 0000200000000000 R11: 0000000000000246 R12: 0000000000000001 [ 178.716539][ T6915] R13: 0000000000000000 R14: 00007f00937b5fa0 R15: 00007f00938dfa28 [ 178.716574][ T6915] [ 179.437876][ T6917] fuse: Unknown parameter 'groupid' [ 179.577145][ T12] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 179.589165][ T5938] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 179.603294][ T5908] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 179.910694][ T6923] netlink: 11 bytes leftover after parsing attributes in process `syz.0.206'. [ 180.239410][ T65] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 180.947020][ T5925] usb 1-1: new high-speed USB device number 7 using dummy_hcd [ 180.960738][ T30] audit: type=1326 audit(1750769889.925:56): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6934 comm="syz.1.209" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f009358e929 code=0x0 [ 181.008354][ T5843] usb 4-1: USB disconnect, device number 7 [ 181.154471][ T6942] netlink: 32 bytes leftover after parsing attributes in process `syz.3.212'. [ 181.197545][ T6942] netlink: 32 bytes leftover after parsing attributes in process `syz.3.212'. [ 181.213190][ T5925] usb 1-1: Using ep0 maxpacket: 16 [ 181.243391][ T6944] warning: `syz.2.211' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211 [ 181.280677][ T5925] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x84 has invalid wMaxPacketSize 0 [ 181.396267][ T5925] usb 1-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 181.441087][ T5925] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 181.467531][ T5925] usb 1-1: Product: syz [ 181.482946][ T5925] usb 1-1: Manufacturer: syz [ 181.505418][ T5925] usb 1-1: SerialNumber: syz [ 181.522838][ T5925] usb 1-1: config 0 descriptor?? [ 181.545413][ T5925] em28xx 1-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0) [ 181.590601][ T5925] em28xx 1-1:0.0: DVB interface 0 found: bulk [ 181.688182][ T30] audit: type=1326 audit(1750769890.645:57): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6947 comm="syz.3.213" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f6ab512ab19 code=0x7ffc0000 [ 181.712330][ C1] vkms_vblank_simulate: vblank timer overrun [ 181.742227][ T5895] net_ratelimit: 2 callbacks suppressed [ 181.742247][ T5895] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 181.825509][ T30] audit: type=1326 audit(1750769890.645:58): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6947 comm="syz.3.213" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6ab518e929 code=0x7ffc0000 [ 181.847621][ C1] vkms_vblank_simulate: vblank timer overrun [ 182.128038][ T12] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 182.129456][ T30] audit: type=1326 audit(1750769890.645:59): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6947 comm="syz.3.213" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f6ab512ab19 code=0x7ffc0000 [ 182.227624][ T5925] em28xx 1-1:0.0: unknown em28xx chip ID (0) [ 182.242070][ T30] audit: type=1326 audit(1750769890.645:60): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6947 comm="syz.3.213" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f6ab512ab19 code=0x7ffc0000 [ 182.264153][ C1] vkms_vblank_simulate: vblank timer overrun [ 182.444706][ T30] audit: type=1326 audit(1750769890.645:61): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6947 comm="syz.3.213" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6ab518e929 code=0x7ffc0000 [ 182.585712][ T30] audit: type=1326 audit(1750769890.645:62): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6947 comm="syz.3.213" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f6ab512ab19 code=0x7ffc0000 [ 182.617612][ T5922] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 182.684144][ T30] audit: type=1326 audit(1750769890.645:63): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6947 comm="syz.3.213" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6ab518e929 code=0x7ffc0000 [ 182.724953][ T30] audit: type=1326 audit(1750769890.645:64): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6947 comm="syz.3.213" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f6ab512ab19 code=0x7ffc0000 [ 182.747036][ C1] vkms_vblank_simulate: vblank timer overrun [ 182.756892][ T30] audit: type=1326 audit(1750769890.645:65): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6947 comm="syz.3.213" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6ab518e929 code=0x7ffc0000 [ 182.779070][ C1] vkms_vblank_simulate: vblank timer overrun [ 182.786094][ T5922] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 182.794252][ T5922] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 182.962687][ T5925] em28xx 1-1:0.0: reading from i2c device at 0xa0 failed (error=-5) [ 183.059636][ T5925] em28xx 1-1:0.0: board has no eeprom [ 183.316921][ T5925] em28xx 1-1:0.0: Identified as PCTV tripleStick (292e) (card=94) [ 183.360135][ T6948] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 183.369267][ T6948] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 183.382858][ T5925] em28xx 1-1:0.0: dvb set to bulk mode. [ 183.424348][ T6948] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 183.436085][ T5922] em28xx 1-1:0.0: Binding DVB extension [ 183.540257][ T5925] usb 1-1: USB disconnect, device number 7 [ 183.568130][ T5925] em28xx 1-1:0.0: Disconnecting em28xx [ 183.773737][ T5922] em28xx 1-1:0.0: Registering input extension [ 183.816020][ T5908] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 183.836129][ T5925] em28xx 1-1:0.0: Closing input extension [ 184.173211][ T5925] em28xx 1-1:0.0: Freeing device [ 184.232778][ T6964] netlink: 8 bytes leftover after parsing attributes in process `syz.3.216'. [ 184.689651][ T1145] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 184.863399][ T5895] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 184.912659][ T6966] netlink: 11 bytes leftover after parsing attributes in process `syz.1.217'. [ 185.844458][ T6987] tipc: Started in network mode [ 186.026697][ T1145] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 186.035307][ T6987] tipc: Node identity 0000000000000000000000625f953d01, cluster identity 4711 [ 186.107019][ T6987] tipc: Enabling of bearer rejected, failed to enable media [ 186.534235][ T6993] FAULT_INJECTION: forcing a failure. [ 186.534235][ T6993] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 186.548803][ T6993] CPU: 1 UID: 0 PID: 6993 Comm: syz.0.223 Not tainted 6.16.0-rc3-syzkaller-00042-g78f4e737a53e #0 PREEMPT(full) [ 186.548831][ T6993] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 186.548840][ T6993] Call Trace: [ 186.548846][ T6993] [ 186.548852][ T6993] dump_stack_lvl+0x189/0x250 [ 186.548888][ T6993] ? __pfx____ratelimit+0x10/0x10 [ 186.548910][ T6993] ? __pfx_dump_stack_lvl+0x10/0x10 [ 186.548932][ T6993] ? __pfx__printk+0x10/0x10 [ 186.548948][ T6993] ? __might_fault+0xb0/0x130 [ 186.548969][ T6993] should_fail_ex+0x414/0x560 [ 186.548990][ T6993] _copy_from_user+0x2d/0xb0 [ 186.549005][ T6993] ___sys_sendmsg+0x158/0x2a0 [ 186.549025][ T6993] ? __pfx____sys_sendmsg+0x10/0x10 [ 186.549068][ T6993] ? __fget_files+0x2a/0x420 [ 186.549083][ T6993] ? __fget_files+0x3a0/0x420 [ 186.549106][ T6993] __x64_sys_sendmsg+0x19b/0x260 [ 186.549126][ T6993] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 186.549150][ T6993] ? __pfx_ksys_write+0x10/0x10 [ 186.549162][ T6993] ? rcu_is_watching+0x15/0xb0 [ 186.549194][ T6993] ? do_syscall_64+0xbe/0x3b0 [ 186.549210][ T6993] do_syscall_64+0xfa/0x3b0 [ 186.549221][ T6993] ? lockdep_hardirqs_on+0x9c/0x150 [ 186.549241][ T6993] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 186.549255][ T6993] ? clear_bhb_loop+0x60/0xb0 [ 186.549273][ T6993] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 186.549286][ T6993] RIP: 0033:0x7fe377d8e929 [ 186.549303][ T6993] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 186.549315][ T6993] RSP: 002b:00007fe378bec038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 186.549333][ T6993] RAX: ffffffffffffffda RBX: 00007fe377fb5fa0 RCX: 00007fe377d8e929 [ 186.549343][ T6993] RDX: 0000000004000080 RSI: 0000200000001200 RDI: 0000000000000003 [ 186.549352][ T6993] RBP: 00007fe378bec090 R08: 0000000000000000 R09: 0000000000000000 [ 186.549361][ T6993] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 186.549369][ T6993] R13: 0000000000000000 R14: 00007fe377fb5fa0 R15: 00007fe3780dfa28 [ 186.549390][ T6993] [ 186.856336][ T6957] tipc: Started in network mode [ 186.861451][ T6957] tipc: Node identity ac14140f, cluster identity 4711 [ 186.868464][ T6957] tipc: Enabling of bearer rejected, failed to enable media [ 186.982409][ T5895] net_ratelimit: 1 callbacks suppressed [ 186.982430][ T5895] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 187.103581][ T5908] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 187.316932][ T5843] usb 3-1: new high-speed USB device number 13 using dummy_hcd [ 187.498652][ T5843] usb 3-1: Using ep0 maxpacket: 16 [ 187.510793][ T5843] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x84 has invalid wMaxPacketSize 0 [ 187.534993][ T5843] usb 3-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 187.564669][ T5843] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 187.637517][ T5908] usb 1-1: new high-speed USB device number 8 using dummy_hcd [ 187.673865][ T5843] usb 3-1: Product: syz [ 187.719534][ T5843] usb 3-1: Manufacturer: syz [ 187.728301][ T5925] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 187.794577][ T5843] usb 3-1: SerialNumber: syz [ 187.816963][ T5908] usb 1-1: Using ep0 maxpacket: 8 [ 187.864545][ T5908] usb 1-1: New USB device found, idVendor=0c45, idProduct=614a, bcdDevice=c4.6d [ 187.887169][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 187.898664][ T1085] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 187.900025][ T5843] usb 3-1: config 0 descriptor?? [ 187.932538][ T5908] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 187.954994][ T5843] em28xx 3-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0) [ 187.967056][ T5843] em28xx 3-1:0.0: DVB interface 0 found: bulk [ 188.027726][ T5908] usb 1-1: Product: syz [ 188.031952][ T5908] usb 1-1: Manufacturer: syz [ 188.047214][ T5908] usb 1-1: SerialNumber: syz [ 188.057924][ T5908] usb 1-1: config 0 descriptor?? [ 188.075470][ T5908] gspca_main: sonixj-2.14.0 probing 0c45:614a [ 188.134558][ T55] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 188.620770][ T5843] em28xx 3-1:0.0: unknown em28xx chip ID (0) [ 188.738128][ T1145] tipc: Left network mode [ 188.896742][ T5908] gspca_sonixj: reg_r err -71 [ 188.902348][ T5908] sonixj 1-1:0.0: probe with driver sonixj failed with error -71 [ 188.935831][ T5908] usb 1-1: USB disconnect, device number 8 [ 189.170701][ T5908] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 189.452952][ T5843] em28xx 3-1:0.0: reading from i2c device at 0xa0 failed (error=-5) [ 189.465779][ T5843] em28xx 3-1:0.0: board has no eeprom [ 189.567017][ T5843] em28xx 3-1:0.0: Identified as PCTV tripleStick (292e) (card=94) [ 189.574942][ T5843] em28xx 3-1:0.0: dvb set to bulk mode. [ 189.623830][ T5922] em28xx 3-1:0.0: Binding DVB extension [ 189.677038][ T5843] usb 3-1: USB disconnect, device number 13 [ 189.704904][ T5843] em28xx 3-1:0.0: Disconnecting em28xx [ 189.809149][ T7032] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 189.828641][ T5922] em28xx 3-1:0.0: Registering input extension [ 189.966746][ T5843] em28xx 3-1:0.0: Closing input extension [ 189.984760][ T7035] Scaler: ================= START STATUS ================= [ 190.046753][ T5843] em28xx 3-1:0.0: Freeing device [ 190.078967][ T5938] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 190.111719][ T7035] Scaler: ================== END STATUS ================== [ 190.171105][ T5938] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 190.587045][ T5908] usb 1-1: new high-speed USB device number 9 using dummy_hcd [ 190.857303][ T5908] usb 1-1: Using ep0 maxpacket: 8 [ 190.921981][ T5908] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0xE has invalid wMaxPacketSize 0 [ 190.948555][ T5908] usb 1-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xB3, changing to 0x83 [ 190.977990][ T5908] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 255, changing to 11 [ 190.989565][ T5908] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x83 has invalid maxpacket 59391, setting to 1024 [ 191.214448][ T7053] netlink: 8 bytes leftover after parsing attributes in process `syz.3.236'. [ 191.652488][ T5908] usb 1-1: New USB device found, idVendor=077d, idProduct=627a, bcdDevice= 0.10 [ 191.827527][ T5908] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 191.840636][ T5908] usb 1-1: Product: syz [ 191.844883][ T5908] usb 1-1: Manufacturer: syz [ 191.916417][ T5908] usb 1-1: SerialNumber: syz [ 191.948018][ T5908] usb 1-1: config 0 descriptor?? [ 192.036610][ T7035] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 192.094868][ T5908] radioshark2 1-1:0.0: Invalid radioSHARK2 device [ 192.112918][ T5908] radioshark2 1-1:0.0: probe with driver radioshark2 failed with error -22 [ 192.377925][ T5908] usb 1-1: USB disconnect, device number 9 [ 192.409284][ T5895] net_ratelimit: 15 callbacks suppressed [ 192.409301][ T5895] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 192.996245][ T7063] gtp0: entered promiscuous mode [ 193.010220][ T7063] gtp0: entered allmulticast mode [ 193.497325][ T5895] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 193.505915][ T5925] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 193.547277][ T30] kauditd_printk_skb: 305 callbacks suppressed [ 193.547295][ T30] audit: type=1326 audit(1750769902.505:371): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7071 comm="syz.0.241" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe377d8e929 code=0x7ffc0000 [ 193.645596][ T30] audit: type=1326 audit(1750769902.505:372): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7071 comm="syz.0.241" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe377d8e929 code=0x7ffc0000 [ 193.677581][ T3533] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 193.716916][ T30] audit: type=1326 audit(1750769902.505:373): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7071 comm="syz.0.241" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe377d8e929 code=0x7ffc0000 [ 193.827351][ T30] audit: type=1326 audit(1750769902.505:374): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7071 comm="syz.0.241" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe377d8e929 code=0x7ffc0000 [ 193.850064][ T5925] usb 3-1: new high-speed USB device number 14 using dummy_hcd [ 193.896877][ T30] audit: type=1326 audit(1750769902.505:375): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7071 comm="syz.0.241" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7fe377d2ab19 code=0x7ffc0000 [ 193.947625][ T30] audit: type=1326 audit(1750769902.505:376): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7071 comm="syz.0.241" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7fe377d2ab19 code=0x7ffc0000 [ 194.027172][ T5925] usb 3-1: Using ep0 maxpacket: 8 [ 194.073928][ T5925] usb 3-1: New USB device found, idVendor=0c45, idProduct=614a, bcdDevice=c4.6d [ 194.121726][ T30] audit: type=1326 audit(1750769902.505:377): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7071 comm="syz.0.241" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe377d8e929 code=0x7ffc0000 [ 194.149906][ T5925] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 194.165068][ T5925] usb 3-1: Product: syz [ 194.205616][ T5925] usb 3-1: Manufacturer: syz [ 194.236085][ T5925] usb 3-1: SerialNumber: syz [ 194.266370][ T30] audit: type=1326 audit(1750769902.545:378): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7071 comm="syz.0.241" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe377d8e929 code=0x7ffc0000 [ 194.301999][ T5895] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 194.309625][ T5925] usb 3-1: config 0 descriptor?? [ 194.311589][ T1305] ieee802154 phy0 wpan0: encryption failed: -22 [ 194.325580][ T1305] ieee802154 phy1 wpan1: encryption failed: -22 [ 194.357180][ T5925] gspca_main: sonixj-2.14.0 probing 0c45:614a [ 194.449656][ T5843] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 194.458388][ T10] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 194.483783][ T30] audit: type=1326 audit(1750769902.545:379): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7071 comm="syz.0.241" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe377d8e929 code=0x7ffc0000 [ 194.547359][ T55] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 194.569841][ T30] audit: type=1326 audit(1750769902.545:380): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7071 comm="syz.0.241" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7fe377d2ab19 code=0x7ffc0000 [ 194.802657][ T7072] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 194.814274][ T7072] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 194.856907][ T55] usb 2-1: new high-speed USB device number 11 using dummy_hcd [ 194.876498][ T7072] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 194.928791][ T5895] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 195.036376][ T55] usb 2-1: New USB device found, idVendor=055f, idProduct=c230, bcdDevice=b6.ac [ 195.069022][ T55] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 195.082187][ T55] usb 2-1: Product: syz [ 195.086510][ T55] usb 2-1: Manufacturer: syz [ 195.092841][ T55] usb 2-1: SerialNumber: syz [ 195.110159][ T55] usb 2-1: config 0 descriptor?? [ 195.134324][ T55] gspca_main: sunplus-2.14.0 probing 055f:c230 [ 195.183545][ T5925] gspca_sonixj: reg_r err -71 [ 195.189512][ T5925] sonixj 3-1:0.0: probe with driver sonixj failed with error -71 [ 195.204655][ T5925] usb 3-1: USB disconnect, device number 14 [ 196.627149][ T5843] usb 5-1: new high-speed USB device number 8 using dummy_hcd [ 196.950922][ T5843] usb 5-1: New USB device found, idVendor=0af0, idProduct=7a05, bcdDevice= 0.00 [ 196.996620][ T5843] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 197.035573][ T5843] usb 5-1: Product: syz [ 197.055750][ T5843] usb 5-1: Manufacturer: syz [ 197.070617][ T5843] usb 5-1: SerialNumber: syz [ 197.100790][ T5843] usb 5-1: config 0 descriptor?? [ 197.660090][ T55] net_ratelimit: 6 callbacks suppressed [ 197.660113][ T55] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 197.674753][ T5908] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 197.697063][ T5922] usb 2-1: USB disconnect, device number 11 [ 197.707282][ T5843] usb-storage 5-1:0.0: USB Mass Storage device detected [ 197.755471][ T1085] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 197.768498][ T65] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 198.023436][ T7118] block device autoloading is deprecated and will be removed. [ 198.046306][ T7119] capability: warning: `syz.1.253' uses 32-bit capabilities (legacy support in use) [ 198.128116][ T1154] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 198.655041][ T7127] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 198.743175][ T5922] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 198.751890][ T5843] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 198.777654][ T36] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 198.835957][ T5908] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 198.845036][ T55] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 199.363838][ T7136] netlink: 8 bytes leftover after parsing attributes in process `syz.3.257'. [ 199.373679][ T7136] netlink: 8 bytes leftover after parsing attributes in process `syz.3.257'. [ 199.483875][ T7136] pim6reg: entered allmulticast mode [ 199.508698][ T7136] netlink: 64 bytes leftover after parsing attributes in process `syz.3.257'. [ 199.526911][ T5843] usb 2-1: new high-speed USB device number 12 using dummy_hcd [ 199.689046][ T5843] usb 2-1: device descriptor read/64, error -71 [ 200.036934][ T5843] usb 2-1: new high-speed USB device number 13 using dummy_hcd [ 200.168119][ T5843] usb 2-1: device descriptor read/64, error -71 [ 200.227171][ T10] usb 4-1: new high-speed USB device number 9 using dummy_hcd [ 200.283193][ T5925] usb 5-1: USB disconnect, device number 8 [ 200.302080][ T5843] usb usb2-port1: attempt power cycle [ 200.386923][ T10] usb 4-1: Using ep0 maxpacket: 8 [ 200.413792][ T10] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0xF has invalid wMaxPacketSize 0 [ 200.446111][ T10] usb 4-1: config 1 interface 0 altsetting 0 bulk endpoint 0xF has invalid maxpacket 0 [ 200.486339][ T10] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x6 has invalid wMaxPacketSize 0 [ 200.497006][ T55] usb 3-1: new high-speed USB device number 15 using dummy_hcd [ 200.573818][ T10] usb 4-1: New USB device found, idVendor=110a, idProduct=1110, bcdDevice=ab.5d [ 200.663748][ T10] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 200.672268][ T10] usb 4-1: Product: syz [ 200.676567][ T10] usb 4-1: Manufacturer: syz [ 200.682778][ T10] usb 4-1: SerialNumber: syz [ 200.687576][ T5843] usb 2-1: new high-speed USB device number 14 using dummy_hcd [ 200.708734][ T10] ti_usb_3410_5052 4-1:1.0: TI USB 3410 1 port adapter converter detected [ 200.720015][ T5843] usb 2-1: device descriptor read/8, error -71 [ 200.785456][ T55] usb 3-1: New USB device found, idVendor=1604, idProduct=8001, bcdDevice=44.1f [ 200.806634][ T55] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 200.814745][ T55] usb 3-1: Product: syz [ 200.819000][ T55] usb 3-1: Manufacturer: syz [ 200.823630][ T55] usb 3-1: SerialNumber: syz [ 200.846680][ T55] usb 3-1: config 0 descriptor?? [ 201.026925][ T5843] usb 2-1: new high-speed USB device number 15 using dummy_hcd [ 201.057725][ T5843] usb 2-1: device descriptor read/8, error -71 [ 201.185636][ T55] usb 3-1: USB disconnect, device number 15 [ 201.187807][ T5843] usb usb2-port1: unable to enumerate USB device [ 201.562569][ T7157] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 202.597004][ T55] usb 2-1: new high-speed USB device number 16 using dummy_hcd [ 203.011115][ T5908] net_ratelimit: 12 callbacks suppressed [ 203.011131][ T5908] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 203.011460][ T5908] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 203.011765][ T55] usb 2-1: Using ep0 maxpacket: 8 [ 203.071226][ T55] usb 2-1: config 162 has an invalid interface number: 97 but max is 0 [ 203.102391][ T55] usb 2-1: config 162 has no interface number 0 [ 203.109263][ T55] usb 2-1: config 162 interface 97 has no altsetting 0 [ 203.119735][ T1085] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 203.256165][ T65] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 203.267593][ T55] usb 2-1: New USB device found, idVendor=0c2e, idProduct=0700, bcdDevice=e1.3b [ 203.267627][ T55] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 203.267650][ T55] usb 2-1: Product: syz [ 203.267667][ T55] usb 2-1: Manufacturer: syz [ 203.267683][ T55] usb 2-1: SerialNumber: syz [ 203.480882][ T7168] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 203.481300][ T7168] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 203.568690][ T10] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 203.593737][ T55] metro_usb 2-1:162.97: Metrologic USB to Serial converter detected [ 203.644851][ T55] usb 2-1: Metrologic USB to Serial converter now attached to ttyUSB0 [ 203.730155][ T55] usb 2-1: USB disconnect, device number 16 [ 203.750328][ T55] metro-usb ttyUSB0: Metrologic USB to Serial converter now disconnected from ttyUSB0 [ 203.751330][ T55] metro_usb 2-1:162.97: device disconnected [ 203.887934][ T3533] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 203.891653][ T1145] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 204.053422][ T5895] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 204.053829][ T55] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 204.251400][ T5908] usb 4-1: USB disconnect, device number 9 [ 204.331206][ T7178] netlink: 28 bytes leftover after parsing attributes in process `syz.1.269'. [ 204.353229][ T7178] netlink: 28 bytes leftover after parsing attributes in process `syz.1.269'. [ 204.367421][ T10] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 204.382170][ T7178] batadv0: entered promiscuous mode [ 204.417178][ T7178] batadv0: left promiscuous mode [ 204.547109][ T5843] usb 1-1: new high-speed USB device number 10 using dummy_hcd [ 204.707019][ T5908] usb 5-1: new high-speed USB device number 9 using dummy_hcd [ 204.707204][ T5843] usb 1-1: Using ep0 maxpacket: 32 [ 204.733678][ T5843] usb 1-1: config 0 has an invalid interface number: 132 but max is 0 [ 204.759654][ T5843] usb 1-1: config 0 has no interface number 0 [ 204.766244][ T5843] usb 1-1: config 0 interface 132 altsetting 0 endpoint 0x82 has an invalid bInterval 67, changing to 7 [ 204.778277][ T5843] usb 1-1: config 0 interface 132 altsetting 0 endpoint 0x82 has invalid maxpacket 57393, setting to 1024 [ 204.792739][ T5843] usb 1-1: New USB device found, idVendor=0413, idProduct=6023, bcdDevice=ec.e5 [ 204.802242][ T5843] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 204.810812][ T5843] usb 1-1: Product: syz [ 204.826667][ T5843] usb 1-1: Manufacturer: syz [ 204.831983][ T5843] usb 1-1: SerialNumber: syz [ 204.870080][ T5908] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 204.895001][ T5843] usb 1-1: config 0 descriptor?? [ 204.904817][ T5908] usb 5-1: New USB device found, idVendor=046d, idProduct=c222, bcdDevice= 0.00 [ 204.925958][ T5843] em28xx 1-1:0.132: New device syz syz @ 480 Mbps (0413:6023, interface 132, class 132) [ 204.935895][ T5908] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 204.962590][ T5908] usb 5-1: config 0 descriptor?? [ 204.998625][ T5843] em28xx 1-1:0.132: Video interface 132 found: isoc [ 205.156935][ T5895] usb 2-1: new high-speed USB device number 17 using dummy_hcd [ 205.177832][ T55] usb 4-1: new high-speed USB device number 10 using dummy_hcd [ 205.179941][ T5843] em28xx 1-1:0.132: unknown em28xx chip ID (0) [ 205.302262][ T5843] em28xx 1-1:0.132: failed to trigger read from i2c address 0xa0 (error=-5) [ 205.341592][ T5843] em28xx 1-1:0.132: board has no eeprom [ 205.357966][ T5908] usbhid 5-1:0.0: can't add hid device: -71 [ 205.379290][ T5895] usb 2-1: config 0 has no interfaces? [ 205.391106][ T55] usb 4-1: New USB device found, idVendor=1604, idProduct=8001, bcdDevice=44.1f [ 205.406994][ T5908] usbhid 5-1:0.0: probe with driver usbhid failed with error -71 [ 205.435144][ T5895] usb 2-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b [ 205.458415][ T55] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 205.470581][ T5843] em28xx 1-1:0.132: Identified as Leadtek Winfast USB II (card=7) [ 205.470595][ T5908] usb 5-1: USB disconnect, device number 9 [ 205.487806][ T55] usb 4-1: Product: syz [ 205.492028][ T55] usb 4-1: Manufacturer: syz [ 205.496656][ T55] usb 4-1: SerialNumber: syz [ 205.501442][ T5895] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 205.520592][ T5895] usb 2-1: Product: syz [ 205.524972][ T5843] em28xx 1-1:0.132: analog set to isoc mode. [ 205.527108][ T5895] usb 2-1: Manufacturer: syz [ 205.549571][ T5895] usb 2-1: SerialNumber: syz [ 205.556639][ T10] em28xx 1-1:0.132: Registering V4L2 extension [ 205.557550][ T55] usb 4-1: config 0 descriptor?? [ 205.584380][ T5895] usb 2-1: config 0 descriptor?? [ 205.596987][ T5843] usb 1-1: USB disconnect, device number 10 [ 206.349820][ T7203] FAULT_INJECTION: forcing a failure. [ 206.349820][ T7203] name failslab, interval 1, probability 0, space 0, times 0 [ 206.390764][ T7203] CPU: 1 UID: 0 PID: 7203 Comm: syz.0.278 Not tainted 6.16.0-rc3-syzkaller-00042-g78f4e737a53e #0 PREEMPT(full) [ 206.390788][ T7203] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 206.390797][ T7203] Call Trace: [ 206.390803][ T7203] [ 206.390810][ T7203] dump_stack_lvl+0x189/0x250 [ 206.390838][ T7203] ? __pfx____ratelimit+0x10/0x10 [ 206.390866][ T7203] ? __pfx_dump_stack_lvl+0x10/0x10 [ 206.390889][ T7203] ? __pfx__printk+0x10/0x10 [ 206.390910][ T7203] ? ref_tracker_alloc+0x318/0x460 [ 206.390932][ T7203] should_fail_ex+0x414/0x560 [ 206.390954][ T7203] should_failslab+0xa8/0x100 [ 206.390971][ T7203] kmem_cache_alloc_noprof+0x73/0x3c0 [ 206.390995][ T7203] ? skb_clone+0x212/0x3a0 [ 206.391018][ T7203] skb_clone+0x212/0x3a0 [ 206.391039][ T7203] __netlink_deliver_tap+0x404/0x850 [ 206.391065][ T7203] ? netlink_deliver_tap+0x2e/0x1b0 [ 206.391083][ T7203] netlink_deliver_tap+0x19c/0x1b0 [ 206.391100][ T7203] netlink_unicast+0x72f/0x8d0 [ 206.391122][ T7203] netlink_sendmsg+0x805/0xb30 [ 206.391146][ T7203] ? __pfx_netlink_sendmsg+0x10/0x10 [ 206.391165][ T7203] ? aa_sock_msg_perm+0x94/0x160 [ 206.391185][ T7203] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 206.391203][ T7203] ? __pfx_netlink_sendmsg+0x10/0x10 [ 206.391221][ T7203] __sock_sendmsg+0x219/0x270 [ 206.391245][ T7203] ____sys_sendmsg+0x505/0x830 [ 206.391267][ T7203] ? __pfx_____sys_sendmsg+0x10/0x10 [ 206.391292][ T7203] ? import_iovec+0x74/0xa0 [ 206.391309][ T7203] ___sys_sendmsg+0x21f/0x2a0 [ 206.391328][ T7203] ? __pfx____sys_sendmsg+0x10/0x10 [ 206.391373][ T7203] ? __fget_files+0x2a/0x420 [ 206.391388][ T7203] ? __fget_files+0x3a0/0x420 [ 206.391412][ T7203] __x64_sys_sendmsg+0x19b/0x260 [ 206.391432][ T7203] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 206.391457][ T7203] ? __pfx_ksys_write+0x10/0x10 [ 206.391469][ T7203] ? rcu_is_watching+0x15/0xb0 [ 206.391494][ T7203] ? do_syscall_64+0xbe/0x3b0 [ 206.391510][ T7203] do_syscall_64+0xfa/0x3b0 [ 206.391522][ T7203] ? lockdep_hardirqs_on+0x9c/0x150 [ 206.391542][ T7203] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 206.391556][ T7203] ? clear_bhb_loop+0x60/0xb0 [ 206.391574][ T7203] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 206.391588][ T7203] RIP: 0033:0x7fe377d8e929 [ 206.391601][ T7203] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 206.391614][ T7203] RSP: 002b:00007fe378bec038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 206.391630][ T7203] RAX: ffffffffffffffda RBX: 00007fe377fb5fa0 RCX: 00007fe377d8e929 [ 206.391641][ T7203] RDX: 0000000000000000 RSI: 0000200000000040 RDI: 0000000000000005 [ 206.391650][ T7203] RBP: 00007fe378bec090 R08: 0000000000000000 R09: 0000000000000000 [ 206.391659][ T7203] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 206.391667][ T7203] R13: 0000000000000000 R14: 00007fe377fb5fa0 R15: 00007fe3780dfa28 [ 206.391689][ T7203] [ 206.533194][ T10] em28xx 1-1:0.132: failed to trigger read from i2c address 0x4a (error=-19) [ 206.533564][ T10] em28xx 1-1:0.132: failed to trigger read from i2c address 0x48 (error=-19) [ 206.533683][ T10] em28xx 1-1:0.132: failed to trigger read from i2c address 0x42 (error=-19) [ 206.533786][ T10] em28xx 1-1:0.132: failed to trigger read from i2c address 0x40 (error=-19) [ 206.537728][ T5843] em28xx 1-1:0.132: Disconnecting em28xx [ 206.584306][ T5925] usb 4-1: USB disconnect, device number 10 [ 206.873229][ T10] em28xx 1-1:0.132: Config register raw data: 0xffffffed [ 206.873280][ T10] em28xx 1-1:0.132: AC97 chip type couldn't be determined [ 206.873291][ T10] em28xx 1-1:0.132: No AC97 audio processor [ 206.886410][ T10] usb 1-1: Decoder not found [ 207.767238][ T936] usb 2-1: USB disconnect, device number 17 [ 207.787943][ T10] em28xx 1-1:0.132: failed to create media graph [ 207.794393][ T10] em28xx 1-1:0.132: V4L2 device video103 deregistered [ 207.908437][ T10] em28xx 1-1:0.132: Remote control support is not available for this card. [ 207.927574][ T7217] ================================================================== [ 207.935693][ T7217] BUG: KASAN: slab-use-after-free in v4l2_fh_open+0xc7/0x430 [ 207.943106][ T7217] Read of size 8 at addr ffff8880577c4738 by task v4l_id/7217 [ 207.950577][ T7217] [ 207.952914][ T7217] CPU: 0 UID: 0 PID: 7217 Comm: v4l_id Not tainted 6.16.0-rc3-syzkaller-00042-g78f4e737a53e #0 PREEMPT(full) [ 207.952935][ T7217] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 207.952945][ T7217] Call Trace: [ 207.952952][ T7217] [ 207.952959][ T7217] dump_stack_lvl+0x189/0x250 [ 207.952987][ T7217] ? __virt_addr_valid+0x1c8/0x5c0 [ 207.953002][ T7217] ? rcu_is_watching+0x15/0xb0 [ 207.953032][ T7217] ? __pfx_dump_stack_lvl+0x10/0x10 [ 207.953056][ T7217] ? rcu_is_watching+0x15/0xb0 [ 207.953079][ T7217] ? lock_release+0x4b/0x3e0 [ 207.953109][ T7217] ? __virt_addr_valid+0x1c8/0x5c0 [ 207.953125][ T7217] ? __virt_addr_valid+0x4a5/0x5c0 [ 207.953141][ T7217] print_report+0xd2/0x2b0 [ 207.953162][ T7217] ? v4l2_fh_open+0xc7/0x430 [ 207.953189][ T7217] kasan_report+0x118/0x150 [ 207.953208][ T7217] ? v4l2_fh_open+0xc7/0x430 [ 207.953234][ T7217] v4l2_fh_open+0xc7/0x430 [ 207.953257][ T7217] ? __pfx___mutex_lock+0x10/0x10 [ 207.953284][ T7217] em28xx_v4l2_open+0x157/0x9a0 [ 207.953312][ T7217] v4l2_open+0x20f/0x360 [ 207.953328][ T7217] chrdev_open+0x4c9/0x5e0 [ 207.953346][ T7217] ? __pfx_chrdev_open+0x10/0x10 [ 207.953366][ T7217] ? __pfx_chrdev_open+0x10/0x10 [ 207.953382][ T7217] do_dentry_open+0xdf0/0x1970 [ 207.953407][ T7217] vfs_open+0x3b/0x340 [ 207.953424][ T7217] ? path_openat+0x2ecd/0x3830 [ 207.953448][ T7217] path_openat+0x2ee5/0x3830 [ 207.953469][ T7217] ? arch_stack_walk+0xfc/0x150 [ 207.953497][ T7217] ? __pfx_path_openat+0x10/0x10 [ 207.953518][ T7217] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 207.953542][ T7217] do_filp_open+0x1fa/0x410 [ 207.953563][ T7217] ? __lock_acquire+0xab9/0xd20 [ 207.953585][ T7217] ? __pfx_do_filp_open+0x10/0x10 [ 207.953616][ T7217] ? _raw_spin_unlock+0x28/0x50 [ 207.953635][ T7217] ? alloc_fd+0x64c/0x6c0 [ 207.953655][ T7217] do_sys_openat2+0x121/0x1c0 [ 207.953676][ T7217] ? __pfx_do_sys_openat2+0x10/0x10 [ 207.953697][ T7217] ? exc_page_fault+0x76/0xf0 [ 207.953720][ T7217] ? do_user_addr_fault+0xc8a/0x1390 [ 207.953742][ T7217] __x64_sys_openat+0x138/0x170 [ 207.953764][ T7217] do_syscall_64+0xfa/0x3b0 [ 207.953777][ T7217] ? lockdep_hardirqs_on+0x9c/0x150 [ 207.953800][ T7217] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 207.953815][ T7217] ? clear_bhb_loop+0x60/0xb0 [ 207.953832][ T7217] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 207.953849][ T7217] RIP: 0033:0x7f59346a7407 [ 207.953863][ T7217] Code: 48 89 fa 4c 89 df e8 38 aa 00 00 8b 93 08 03 00 00 59 5e 48 83 f8 fc 74 1a 5b c3 0f 1f 84 00 00 00 00 00 48 8b 44 24 10 0f 05 <5b> c3 0f 1f 80 00 00 00 00 83 e2 39 83 fa 08 75 de e8 23 ff ff ff [ 207.953877][ T7217] RSP: 002b:00007ffd26190cc0 EFLAGS: 00000202 ORIG_RAX: 0000000000000101 [ 207.953894][ T7217] RAX: ffffffffffffffda RBX: 00007f5934e75880 RCX: 00007f59346a7407 [ 207.953906][ T7217] RDX: 0000000000000000 RSI: 00007ffd26191f1b RDI: ffffffffffffff9c [ 207.953917][ T7217] RBP: 0000000000000002 R08: 0000000000000000 R09: 0000000000000000 [ 207.953927][ T7217] R10: 0000000000000000 R11: 0000000000000202 R12: 0000000000000000 [ 207.953937][ T7217] R13: 00007ffd26190f10 R14: 00007f5934fdc000 R15: 0000562a2175f4d8 [ 207.953957][ T7217] [ 207.953963][ T7217] [ 208.258409][ T7217] Allocated by task 10: [ 208.262567][ T7217] kasan_save_track+0x3e/0x80 [ 208.267264][ T7217] __kasan_kmalloc+0x93/0xb0 [ 208.271859][ T7217] __kmalloc_cache_noprof+0x230/0x3d0 [ 208.277235][ T7217] em28xx_v4l2_init+0x10b/0x2e70 [ 208.282185][ T7217] em28xx_init_extension+0x11d/0x1c0 [ 208.287485][ T7217] process_scheduled_works+0xae1/0x17b0 [ 208.293046][ T7217] worker_thread+0x8a0/0xda0 [ 208.297651][ T7217] kthread+0x70e/0x8a0 [ 208.301726][ T7217] ret_from_fork+0x3fc/0x770 [ 208.306332][ T7217] ret_from_fork_asm+0x1a/0x30 [ 208.311109][ T7217] [ 208.313437][ T7217] Freed by task 10: [ 208.317244][ T7217] kasan_save_track+0x3e/0x80 [ 208.321956][ T7217] kasan_save_free_info+0x46/0x50 [ 208.326989][ T7217] __kasan_slab_free+0x62/0x70 [ 208.331763][ T7217] kfree+0x18e/0x440 [ 208.335684][ T7217] em28xx_v4l2_init+0x1683/0x2e70 [ 208.340720][ T7217] em28xx_init_extension+0x11d/0x1c0 [ 208.346103][ T7217] process_scheduled_works+0xae1/0x17b0 [ 208.351667][ T7217] worker_thread+0x8a0/0xda0 [ 208.356358][ T7217] kthread+0x70e/0x8a0 [ 208.360434][ T7217] ret_from_fork+0x3fc/0x770 [ 208.365042][ T7217] ret_from_fork_asm+0x1a/0x30 [ 208.369818][ T7217] [ 208.372148][ T7217] The buggy address belongs to the object at ffff8880577c4000 [ 208.372148][ T7217] which belongs to the cache kmalloc-8k of size 8192 [ 208.386206][ T7217] The buggy address is located 1848 bytes inside of [ 208.386206][ T7217] freed 8192-byte region [ffff8880577c4000, ffff8880577c6000) [ 208.400187][ T7217] [ 208.402521][ T7217] The buggy address belongs to the physical page: [ 208.409031][ T7217] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x577c0 [ 208.417910][ T7217] head: order:3 mapcount:0 entire_mapcount:0 nr_pages_mapped:0 pincount:0 [ 208.426414][ T7217] anon flags: 0xfff00000000040(head|node=0|zone=1|lastcpupid=0x7ff) [ 208.434408][ T7217] page_type: f5(slab) [ 208.438396][ T7217] raw: 00fff00000000040 ffff88801a442280 ffffea0000caa000 0000000000000005 [ 208.446985][ T7217] raw: 0000000000000000 0000000000020002 00000000f5000000 0000000000000000 [ 208.455668][ T7217] head: 00fff00000000040 ffff88801a442280 ffffea0000caa000 0000000000000005 [ 208.464434][ T7217] head: 0000000000000000 0000000000020002 00000000f5000000 0000000000000000 [ 208.473120][ T7217] head: 00fff00000000003 ffffea00015df001 00000000ffffffff 00000000ffffffff [ 208.481801][ T7217] head: ffffffffffffffff 0000000000000000 00000000ffffffff 0000000000000008 [ 208.490561][ T7217] page dumped because: kasan: bad access detected [ 208.496984][ T7217] page_owner tracks the page as allocated [ 208.502701][ T7217] page last allocated via order 3, migratetype Unmovable, gfp_mask 0xd20c0(__GFP_IO|__GFP_FS|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP|__GFP_NOMEMALLOC), pid 6931, tgid 6930 (syz.0.207), ts 182808132236, free_ts 181416148106 [ 208.523986][ T7217] post_alloc_hook+0x240/0x2a0 [ 208.528769][ T7217] get_page_from_freelist+0x21e4/0x22c0 [ 208.534332][ T7217] __alloc_frozen_pages_noprof+0x181/0x370 [ 208.540159][ T7217] alloc_pages_mpol+0x232/0x4a0 [ 208.545020][ T7217] allocate_slab+0x8a/0x3b0 [ 208.549538][ T7217] ___slab_alloc+0xbfc/0x1480 [ 208.554226][ T7217] __kmalloc_node_track_caller_noprof+0x2f8/0x4e0 [ 208.560645][ T7217] kmemdup_noprof+0x2b/0x70 [ 208.565160][ T7217] ipv4_sysctl_init_net+0x47/0x3f0 [ 208.570280][ T7217] ops_init+0x35c/0x5c0 [ 208.574548][ T7217] setup_net+0x219/0x4b0 [ 208.578801][ T7217] copy_net_ns+0x31b/0x4d0 [ 208.583229][ T7217] create_new_namespaces+0x3f3/0x720 [ 208.588538][ T7217] unshare_nsproxy_namespaces+0x11c/0x170 [ 208.594359][ T7217] ksys_unshare+0x4c8/0x8c0 [ 208.598874][ T7217] __x64_sys_unshare+0x38/0x50 [ 208.603647][ T7217] page last free pid 5202 tgid 5202 stack trace: [ 208.609977][ T7217] __free_frozen_pages+0xc71/0xe70 [ 208.615195][ T7217] __put_partials+0x161/0x1c0 [ 208.619909][ T7217] put_cpu_partial+0x17c/0x250 [ 208.624680][ T7217] __slab_free+0x2f7/0x400 [ 208.629109][ T7217] qlist_free_all+0x97/0x140 [ 208.633799][ T7217] kasan_quarantine_reduce+0x148/0x160 [ 208.639295][ T7217] __kasan_slab_alloc+0x22/0x80 [ 208.644167][ T7217] kmem_cache_alloc_noprof+0x1c1/0x3c0 [ 208.649818][ T7217] getname_flags+0xb8/0x540 [ 208.654429][ T7217] do_readlinkat+0xbc/0x500 [ 208.658945][ T7217] __x64_sys_readlink+0x7f/0x90 [ 208.663803][ T7217] do_syscall_64+0xfa/0x3b0 [ 208.668312][ T7217] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 208.674211][ T7217] [ 208.676540][ T7217] Memory state around the buggy address: [ 208.682188][ T7217] ffff8880577c4600: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 208.690263][ T7217] ffff8880577c4680: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 208.698339][ T7217] >ffff8880577c4700: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 208.706401][ T7217] ^ [ 208.712299][ T7217] ffff8880577c4780: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 208.720370][ T7217] ffff8880577c4800: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 208.728435][ T7217] ================================================================== [ 208.756904][ T5925] usb 4-1: new high-speed USB device number 11 using dummy_hcd [ 208.757444][ T5895] net_ratelimit: 9 callbacks suppressed [ 208.757463][ T5895] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 208.765203][ T5843] em28xx 1-1:0.132: Closing input extension [ 208.770300][ T5895] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 208.792862][ T5895] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 208.801533][ T5895] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 208.852529][ T7217] Kernel panic - not syncing: KASAN: panic_on_warn set ... [ 208.859766][ T7217] CPU: 0 UID: 0 PID: 7217 Comm: v4l_id Not tainted 6.16.0-rc3-syzkaller-00042-g78f4e737a53e #0 PREEMPT(full) [ 208.871419][ T7217] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 208.881513][ T7217] Call Trace: [ 208.884916][ T7217] [ 208.887876][ T7217] dump_stack_lvl+0x99/0x250 [ 208.892495][ T7217] ? __asan_memcpy+0x40/0x70 [ 208.897108][ T7217] ? __pfx_dump_stack_lvl+0x10/0x10 [ 208.902346][ T7217] ? __pfx__printk+0x10/0x10 [ 208.906958][ T7217] panic+0x2db/0x790 [ 208.910878][ T7217] ? __pfx_panic+0x10/0x10 [ 208.915320][ T7217] ? _raw_spin_unlock_irqrestore+0xfd/0x110 [ 208.921411][ T7217] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 208.927762][ T7217] ? print_memory_metadata+0x314/0x400 [ 208.933328][ T7217] ? v4l2_fh_open+0xc7/0x430 [ 208.937937][ T7217] check_panic_on_warn+0x89/0xb0 [ 208.943152][ T7217] ? v4l2_fh_open+0xc7/0x430 [ 208.947772][ T7217] end_report+0x78/0x160 [ 208.952028][ T7217] kasan_report+0x129/0x150 [ 208.956540][ T7217] ? v4l2_fh_open+0xc7/0x430 [ 208.961157][ T7217] v4l2_fh_open+0xc7/0x430 [ 208.965621][ T7217] ? __pfx___mutex_lock+0x10/0x10 [ 208.970878][ T7217] em28xx_v4l2_open+0x157/0x9a0 [ 208.975772][ T7217] v4l2_open+0x20f/0x360 [ 208.980035][ T7217] chrdev_open+0x4c9/0x5e0 [ 208.984472][ T7217] ? __pfx_chrdev_open+0x10/0x10 [ 208.989452][ T7217] ? __pfx_chrdev_open+0x10/0x10 [ 208.994417][ T7217] do_dentry_open+0xdf0/0x1970 [ 208.999220][ T7217] vfs_open+0x3b/0x340 [ 209.003308][ T7217] ? path_openat+0x2ecd/0x3830 [ 209.008095][ T7217] path_openat+0x2ee5/0x3830 [ 209.012723][ T7217] ? arch_stack_walk+0xfc/0x150 [ 209.017601][ T7217] ? __pfx_path_openat+0x10/0x10 [ 209.022562][ T7217] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 209.028656][ T7217] do_filp_open+0x1fa/0x410 [ 209.033183][ T7217] ? __lock_acquire+0xab9/0xd20 [ 209.038113][ T7217] ? __pfx_do_filp_open+0x10/0x10 [ 209.043169][ T7217] ? _raw_spin_unlock+0x28/0x50 [ 209.048045][ T7217] ? alloc_fd+0x64c/0x6c0 [ 209.052413][ T7217] do_sys_openat2+0x121/0x1c0 [ 209.057123][ T7217] ? __pfx_do_sys_openat2+0x10/0x10 [ 209.062433][ T7217] ? exc_page_fault+0x76/0xf0 [ 209.067163][ T7217] ? do_user_addr_fault+0xc8a/0x1390 [ 209.072468][ T7217] __x64_sys_openat+0x138/0x170 [ 209.077342][ T7217] do_syscall_64+0xfa/0x3b0 [ 209.081853][ T7217] ? lockdep_hardirqs_on+0x9c/0x150 [ 209.087066][ T7217] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 209.093142][ T7217] ? clear_bhb_loop+0x60/0xb0 [ 209.097916][ T7217] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 209.103823][ T7217] RIP: 0033:0x7f59346a7407 [ 209.108294][ T7217] Code: 48 89 fa 4c 89 df e8 38 aa 00 00 8b 93 08 03 00 00 59 5e 48 83 f8 fc 74 1a 5b c3 0f 1f 84 00 00 00 00 00 48 8b 44 24 10 0f 05 <5b> c3 0f 1f 80 00 00 00 00 83 e2 39 83 fa 08 75 de e8 23 ff ff ff [ 209.127974][ T7217] RSP: 002b:00007ffd26190cc0 EFLAGS: 00000202 ORIG_RAX: 0000000000000101 [ 209.136540][ T7217] RAX: ffffffffffffffda RBX: 00007f5934e75880 RCX: 00007f59346a7407 [ 209.144542][ T7217] RDX: 0000000000000000 RSI: 00007ffd26191f1b RDI: ffffffffffffff9c [ 209.152530][ T7217] RBP: 0000000000000002 R08: 0000000000000000 R09: 0000000000000000 [ 209.160522][ T7217] R10: 0000000000000000 R11: 0000000000000202 R12: 0000000000000000 [ 209.168503][ T7217] R13: 00007ffd26190f10 R14: 00007f5934fdc000 R15: 0000562a2175f4d8 [ 209.176496][ T7217] [ 209.179836][ T7217] Kernel Offset: disabled [ 209.184188][ T7217] Rebooting in 86400 seconds..