last executing test programs: 14m18.966452777s ago: executing program 0 (id=1091): r0 = epoll_create1(0x80000) (async) r1 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f00000001c0), 0x2, 0x0) write$UHID_INPUT2(0xffffffffffffffff, &(0x7f0000000040)=ANY=[@ANYBLOB="0c0000001600bdfa27ccdf37bc966382651f26c841f0794ea555bc56"], 0x1c) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r1, &(0x7f0000000000)={0xc0000011}) epoll_pwait2(r0, &(0x7f0000000040), 0x17, 0x0, 0x0, 0x0) (async) r2 = socket(0x80000000000000a, 0x2, 0x0) (async) socket$inet6(0xa, 0x1, 0x8010000000000084) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) (async) sendmmsg$unix(r4, &(0x7f00000bd000), 0x318, 0x0) (async) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) (async) r5 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r5, 0x84, 0x6, 0x0, &(0x7f00000000c0)) (async) ioctl$FBIOGET_FSCREENINFO(0xffffffffffffffff, 0x4602, &(0x7f0000000100)) (async) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) (async) syz_emit_ethernet(0x42, &(0x7f0000000300)=ANY=[@ANYBLOB="aaaaaa0080000080c2000000080045000034000000000021907800000000ffffffff050090780a010102460000000000000000000000ac1e0001ac1414018303e900"], 0x0) (async) r6 = openat$adsp1(0xffffffffffffff9c, &(0x7f00000000c0), 0xa0201, 0x0) (async) r7 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r7, 0x84, 0x64, &(0x7f0000000080)=[@in={0x2, 0x4e20, @empty}], 0x10) r8 = socket(0x200000000000011, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000080)={'team0\x00', 0x0}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000240)=ANY=[@ANYBLOB="3c000000100005ff04000000000000000000004a", @ANYRES32=0x0, @ANYBLOB="0000000000000000140012800b00010062617461647600000400028008000a00", @ANYRES32=r9, @ANYBLOB], 0x3c}}, 0x0) (async) setsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r7, 0x84, 0x85, &(0x7f0000000240)={0x0, @in={{0x2, 0x0, @empty}}, 0xff, 0x3}, 0x90) (async) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r7, 0x84, 0x9, &(0x7f0000000840)={0x0, @in6={{0xa, 0x4e20, 0x3ae, @empty, 0x129}}, 0x2, 0x2, 0x614, 0x1, 0xb, 0x7, 0x4}, 0x9c) ioctl$SNDRV_TIMER_IOCTL_TREAD_OLD(0xffffffffffffffff, 0x40045402, &(0x7f00000003c0)=0x1) ioctl$SNDCTL_DSP_SETFMT(r6, 0xc0045005, &(0x7f0000000640)=0x8000) (async) fcntl$dupfd(0xffffffffffffffff, 0x406, 0xffffffffffffffff) (async) setsockopt$inet6_group_source_req(r2, 0x29, 0x2c, &(0x7f0000000200)={0x3, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x7}, 0x20000}}, {{0xa, 0x0, 0x40000, @dev={0xfe, 0x80, '\x00', 0x26}}}}, 0x108) (async) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000001c0)=@newqdisc={0x54, 0x10, 0x1, 0x0, 0x10000000, {0x0, 0x0, 0x0, 0x0, {0x1}, {}, {0xf}}, [@TCA_RATE={0x6, 0x5, {0x0, 0x6}}, @TCA_STAB={0x28, 0x8, 0x0, 0x1, [{{0x1c, 0x1a, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}}, {0x8, 0x1b, [0x0, 0x0]}}]}]}, 0x54}, 0x1, 0x0, 0x0, 0x800}, 0x0) (async) memfd_create(&(0x7f0000000040)='\x01\xfd\xae.+\xa6\x8c\xf8\xff2\x199\x94S,|\x99x?Ue[\xbd\xe1!\x03[d \xa0\x97\xf5G\x97A\xc2\xd8\xf0Uq\xe6+\xa5l\x94\v\xd3\a\xe4\xc4\xb1\xa2\x1c\xffC;\x94Q\r\xb6}\x9c\xecC\v\xcf\xeb\xe4\x9aR\xe5,\x82\x03\xfa\x18\x8dR\xbb\xea5F\x00G\xe8\xc6\xb9\xe4\xb4\x99\x8a\x19P\xb8\x8cx\b\x99\x04R\x05\xaf\xa2\xea5\f\xccV\xa6w%\x06\x19\x7f\xc3\xb3O\xe5t3\x03\x1a\x9b\x00Uf\xa5\xf7\x80Tgiz\nX\b\x91\xfd0\x8e\xb6\xa3\v#\xa1\xdf\xb4\xc0\xe6\xb4\xef\xa8i\xd8\xa2\xd2(\x98\x9bA\x8f\x13\xeb\xf4b/\xef!\x8f\xf6]-\xe9k\xb62\x89gEv\x13\xf4\xc7\xb2\xf5\\\x17\x90\xb5\xa6\xa8\xb8o\x0f\xe2 \xe7\x9c$\xd7\xf2@\xf7cdv[\t\x00\x8d\xf3\xcc1\r$\x1e\xff\xf0P\xb2\x97\xb8\xbc\xeb\x91\x87\x8bu\xbf\xd4\'\xff\x1f\f\x016\x9dQ\xeeT\xe8\bY\x00\xb2\x06\xa6x\xd5O\xd6h\\I\xc9\x8d\a\x1d\xc9\x0f\x82\xdbs\xc7\x83L\x9e\xa2\xd1\xb3\xac\x8d\xd8\xb4\xb4\xea\x90Q\xd8\xc7\xeb%\x8bOp\x1ab\x96\xcf\xbb\x15\xcf\xfcN\xed\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\a\x00\x00\x00\x00\x00\x00\x00p+\x96\x1ei|n\xda\xee\x01\xae\x96*\x82*\xb8j\xda\xaa\x14\x1f\x1d\x9f\xf8\xae\xfcH\xc4\xb3j\xe8\xcfO\xef\x0e\xafe\xb5*\x89\x18\xb2w\x96\b\x1by\xeaT\xdd\xb3g6\xbc\x85\xb2Y\xccv\x06\x00\x00\x00\xc5e\x90\xc51\x9f\v_# \b\xa5\xbcP,|\xe9\xd6s\x1f\x1f\xbe\xd3\x80\xb1\xa8 \xce|df\x903\v\x02\xea.\x03X\xb5\xe4,8\xb7\xadEI\xdcA\xa7\xcc\xd7\xf9n\x1b\x95\xf8\x11Z\xe6:\xf4\xcd\xfe\x02\x8ctdy~_oC\x9e\xef\xf0\xa2K\xe9;\x8e:\x01\x03C\x92\xeb\x16\x1c\xbf\xbe\xef\xccUxhg\xffY\xe6\x83\xa6z\xff\x01\x9d o_{!O\xaajU\x84 \xe9\xb59r\x9cw\x18Z\xd3\xcd\x0e\xba\\\xdb\xf0\xe1\x86\t\xaf\ti\xdc\xbf?\xf5\n\xbd^\x05\xc0\xceuC}\xa8\xc7\xad\x86\xd7\x17&\xb9]1\x05J\x96\xf0\x84\xc1\f\xa6p\x96\xb8\x02\x13pA\x19\tf\x12\x88\xc8\x9c\xc9Cn\xd4\xa47V\'+\xcc\xbf\r\xa9\x10\x1d\xcf\xebKlb\xe5:\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00G\xdf\xbb\xc0_\x99F\xf4n]\x14\xbc\xcd\xd3\x9f\x9fe\xc5\xe6\xe8Mb\xc6\x82\x82\xcc\b\x00\x00\x00\x00\x00\x00\x00\xb8\x18\xe2C\xeb\xa9\x17&\x01&\'w\xa1t0\x80\xf0\x93\x80\x9f\x9b\xe0\x9f\xea\xb9\x9eD]#V\xda\x92\xca\xc6\xfa.\xd6\xe31\xfe\xe8\x02\xebX\xbd\nz\x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01;\xbfM.\xe3\x84\x82\x9c\x91\a\x9b\x191c\xaeLz\xe0\x04Daz\x8d\xc3\x03\xab\x8dEGC$\x00e,\x94#\xcd4\xf9\x05\x88.\x13\x03\x04\xdb\x00\x00\x00\x00\x00', 0x4) 14m17.155162s ago: executing program 0 (id=1098): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000500)=ANY=[@ANYBLOB="14000000100000000040000000000a20000000000a01010000000000000000070000000900010073797a300000000064000000090a010400000000000000000700000008000a40000000000900020073797a31000000000900010073797a30000000000800054000000012280011800a0001006c696d6974000000af00000000000000000000000000010108000440000000018f0820001000010000000000000000000084000a"], 0xac}}, 0x0) (async) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000500)=ANY=[@ANYBLOB="14000000100000000040000000000a20000000000a01010000000000000000070000000900010073797a300000000064000000090a010400000000000000000700000008000a40000000000900020073797a31000000000900010073797a30000000000800054000000012280011800a0001006c696d6974000000af00000000000000000000000000010108000440000000018f0820001000010000000000000000000084000a"], 0xac}}, 0x0) getsockname$packet(0xffffffffffffffff, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @local}, &(0x7f0000000080)=0x14) openat$autofs(0xffffffffffffff9c, &(0x7f0000000280), 0x1414c0, 0x0) (async) r2 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000280), 0x1414c0, 0x0) syz_emit_ethernet(0x6e, &(0x7f0000000600)={@link_local, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x1}, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "e53aff", 0x38, 0x3a, 0x0, @remote, @mcast2, {[], @param_prob={0x2, 0x0, 0x0, 0x0, {0x0, 0x6, "509159", 0x0, 0x32, 0x0, @mcast2, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, [], "c93edfc0a4089794"}}}}}}}, 0x0) ioctl$AUTOFS_DEV_IOCTL_OPENMOUNT(r2, 0xc0189374, &(0x7f0000000300)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x1}}, './file0/file0\x00'}) (async) ioctl$AUTOFS_DEV_IOCTL_OPENMOUNT(r2, 0xc0189374, &(0x7f0000000300)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x1}}, './file0/file0\x00'}) r4 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000480)='/sys/kernel/debug/binder/transactions\x00', 0x0, 0x0) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000600)={{0x1, 0xffffffffffffffff}, &(0x7f00000004c0), &(0x7f00000005c0)='%ps \x00'}, 0x20) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000680)=@bpf_tracing={0x1a, 0xd, &(0x7f0000000340)=@raw=[@snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x4}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r3}}], &(0x7f00000003c0)='GPL\x00', 0x7fffffff, 0x0, 0x0, 0x40f00, 0x36, '\x00', r1, 0x1c, r2, 0x8, &(0x7f0000000400)={0xa, 0x4}, 0x8, 0x10, &(0x7f0000000440)={0x0, 0xe, 0x6, 0x7}, 0x10, 0x1388e, r4, 0x0, &(0x7f0000000640)=[r5], 0x0, 0x10, 0x70}, 0x94) ioctl$AUTOFS_DEV_IOCTL_PROTOVER(r2, 0xc0189372, &(0x7f00000002c0)={{0x1, 0x1, 0x18, r0, {0x5}}, './file0\x00'}) (async) ioctl$AUTOFS_DEV_IOCTL_PROTOVER(r2, 0xc0189372, &(0x7f00000002c0)={{0x1, 0x1, 0x18, r0, {0x5}}, './file0\x00'}) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r6, &(0x7f00000027c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r7, &(0x7f00000bd000), 0x2d, 0x20040040) (async) sendmmsg$unix(r7, &(0x7f00000bd000), 0x2d, 0x20040040) ppoll(&(0x7f0000000040)=[{r7, 0x13a}, {r7, 0x26}], 0x2, 0x0, 0x0, 0x0) close(0x3) sendmsg$IPCTNL_MSG_CT_NEW(r0, &(0x7f0000000240)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000200)={&(0x7f0000000140)={0x4c, 0x0, 0x1, 0x101, 0x0, 0x0, {0xf, 0x0, 0x2}, [@CTA_MARK={0x8, 0x8, 0x1, 0x0, 0x9}, @CTA_TUPLE_MASTER={0xc, 0xe, 0x0, 0x1, [@CTA_TUPLE_ZONE={0x6}]}, @CTA_ID={0x8}, @CTA_ID={0x8, 0xc, 0x1, 0x0, 0x2}, @CTA_TIMEOUT={0x8, 0x7, 0x1, 0x0, 0xdf}, @CTA_SEQ_ADJ_ORIG={0xc, 0xf, 0x0, 0x1, [@CTA_SEQADJ_CORRECTION_POS={0x8, 0x1, 0x1, 0x0, 0x5}]}]}, 0x4c}, 0x1, 0x0, 0x0, 0x8080}, 0x20000800) 14m16.955039106s ago: executing program 0 (id=1099): bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x1, 0x4, &(0x7f0000000080)=ANY=[@ANYBLOB="b4050000000000007110180000000000ce050000000030019500000000000000"], &(0x7f0000003ff6)='GPL\x00', 0x7, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f00000000c0), 0xfffffee3, 0x10, &(0x7f0000000000), 0x2b2}, 0x48) 14m16.362466394s ago: executing program 0 (id=1100): mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) (async) r0 = open_tree(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x89901) move_mount(r0, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) (async) chroot(&(0x7f0000000300)='./file0/../file0/../file0/../file0\x00') (async) r1 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) (async) sendmmsg$alg(0xffffffffffffffff, &(0x7f0000000040)=[{0x0, 0x0, 0x0, 0x0, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) (async) syz_usb_connect$cdc_ncm(0x4, 0xa0, &(0x7f0000000040)={{0x12, 0x1, 0x201, 0x2, 0x0, 0x0, 0x10, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x8e, 0x2, 0x1, 0x6, 0x0, 0xf5, {{0x9, 0x4, 0x0, 0x0, 0x1, 0x2, 0xd, 0x0, 0x0, {{0x5}, {0x5, 0x24, 0x0, 0x400}, {0xd, 0x24, 0xf, 0x1, 0x8, 0x4e, 0x663, 0x8}, {0x6, 0x24, 0x1a, 0x3, 0x4}, [@mdlm={0x15, 0x24, 0x12, 0x6}, @mbim={0xc, 0x24, 0x1b, 0x3, 0x3, 0x81, 0x3, 0x1, 0x7}, @mbim={0xc, 0x24, 0x1b, 0x6, 0x7, 0x8, 0xd, 0x5, 0x7f}, @call_mgmt={0x5, 0x24, 0x1, 0x2, 0x8}]}, {{0x9, 0x5, 0x81, 0x3, 0x3ff, 0xdc, 0x1, 0xf}}}, {}, {0x9, 0x4, 0x1, 0x1, 0x2, 0x2, 0xd, 0x0, 0x0, "", {{{0x9, 0x5, 0x82, 0x2, 0x20, 0x20, 0x3, 0x6}}, {{0x9, 0x5, 0x3, 0x2, 0x0, 0x0, 0x2, 0x10}}}}}}}]}}, 0x0) (async) r2 = openat$qrtrtun(0xffffffffffffff9c, &(0x7f0000000080), 0x2) (async) r3 = openat$qrtrtun(0xffffffffffffff9c, &(0x7f0000000040), 0x8002) write$binfmt_aout(r3, &(0x7f0000000380)=ANY=[@ANYBLOB="03070000b5"], 0xc8) (async) write$binfmt_aout(r2, &(0x7f00000000c0)=ANY=[@ANYBLOB="03040000b500000001008aea0000feff"], 0xc8) dup3(r3, r2, 0x0) (async) move_mount(r1, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000300)='./file0\x00', 0x0) pivot_root(&(0x7f00000000c0)='./file0/../file0/../file0/../file0\x00', &(0x7f0000000080)='./file0/../file0/../file0/../file0/file0\x00') 14m15.782302009s ago: executing program 0 (id=1103): r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) capset(&(0x7f0000000000)={0x20071026}, &(0x7f0000000040)={0x200000, 0x208000, 0x0, 0x0, 0x0, 0xfffffffc}) ioctl$TIOCL_GETKMSGREDIRECT(r0, 0x4b3c, 0x0) r1 = syz_open_dev$vcsa(&(0x7f0000000700), 0x7, 0x40000) getsockopt$inet_mreqn(r1, 0x0, 0x20, &(0x7f0000000740)={@initdev, @multicast1, 0x0}, &(0x7f0000000780)=0xc) r3 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000080)={0x1b, 0x0, 0x0, 0x6, 0x0, 0xffffffffffffffff, 0x4, '\x00', r2, r1, 0x3, 0x2, 0x5}, 0x50) r4 = syz_open_dev$vcsn(&(0x7f0000000100), 0x5, 0x100) r5 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000080)='/sys/power/resume', 0x149a82, 0x0) write$cgroup_int(r5, &(0x7f0000000040)=0x1c8, 0x12) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000140)={0x1, 0xffffffffffffffff}, 0x4) r7 = openat$ocfs2_control(0xffffffffffffff9c, &(0x7f00000004c0), 0x460000, 0x0) r8 = ioctl$KVM_GET_STATS_FD_cpu(0xffffffffffffffff, 0xaece) r9 = syz_open_dev$vcsa(&(0x7f0000000080), 0x1, 0x40402) writev(r9, &(0x7f0000000c40)=[{0x0}, {&(0x7f00000005c0)="c21cfb", 0x3}, {&(0x7f00000007c0), 0x320}, {&(0x7f0000000900), 0x4000}], 0xe) r10 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000500)={0x0, 0x40}, 0xc) r11 = bpf$OBJ_GET_MAP(0x7, &(0x7f0000000580)=@o_path={&(0x7f0000000540)='./file0\x00', 0x0, 0x4020, r0}, 0x18) bpf$PROG_LOAD(0x5, &(0x7f0000000640)={0xc, 0x34, &(0x7f0000000180)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x6}, {{0x18, 0x1, 0x1, 0x0, r3}}, {}, [@tail_call={{0x18, 0x2, 0x1, 0x0, r4}}, @snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x5}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r5}}, @initr0={0x18, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x758}, @snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x4}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r6}}, @map_idx_val={0x18, 0xa, 0x6, 0x0, 0x1, 0x0, 0x0, 0x0, 0xb68}, @func={0x85, 0x0, 0x1, 0x0, 0xfffffffffffffff8}, @generic={0x0, 0x7, 0x5, 0x4, 0x1}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000000340)='GPL\x00', 0x6, 0xac, &(0x7f0000000380)=""/172, 0x1e00, 0x16, '\x00', 0x0, @fallback=0xf, 0xffffffffffffffff, 0x8, &(0x7f0000000440)={0x6, 0x5}, 0x8, 0x10, &(0x7f0000000480)={0x1, 0xc, 0xed, 0xb36}, 0x10, 0xffffffffffffffff, r7, 0x1, &(0x7f00000005c0)=[r8, r9, r10, r0, r11], &(0x7f0000000600)=[{0x5, 0x3, 0xb, 0x7}]}, 0x94) 14m15.225789585s ago: executing program 0 (id=1104): r0 = socket$netlink(0x10, 0x3, 0x0) timer_create(0xfffffffffffffffc, 0x0, &(0x7f0000001400)=0x0) timer_settime(0x0, 0x1, &(0x7f0000000240)={{}, {0x77359400}}, 0x0) rseq(0x0, 0x0, 0x0, 0x0) timer_gettime(r1, &(0x7f0000000040)) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$NL80211_CMD_SET_TX_BITRATE_MASK(r3, &(0x7f0000001980)={0x0, 0x0, &(0x7f0000001940)={0x0}, 0x1, 0x0, 0x0, 0xc001}, 0x4000000) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x17) r5 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r5, 0xc02064b2, &(0x7f0000000080)={0x8, 0x9, 0x10000007}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r5, 0xc02064b2, &(0x7f0000000040)={0x1, 0x6576, 0x9, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r5, 0xc00464b4, &(0x7f0000000180)={r6}) clock_gettime(0x0, &(0x7f0000000140)={0x0, 0x0}) timer_settime(r1, 0x0, &(0x7f0000000180)={{0x0, 0x3938700}, {r7, r8+10000000}}, 0x0) sendmsg$nl_route(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r4, @ANYBLOB="01000000000000001c0012000c000100626f6e64000000000c0002000800010005"], 0x3c}}, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)=ANY=[@ANYBLOB="4c00000010001ffffcffffff0000000000000000", @ANYRES32=0x0, @ANYBLOB="0000000080400300240012800b00010067726574617000001400028005000a000000000008000700ac14142808000a00", @ANYRES32=r4, @ANYBLOB="9ede2b6245f4af50cc0b00000000000008c794d621155b53d0b849a9b9b475c9c4ca8fd95d7074e9f77396c4c5b3498de041349c828a25e42d1700e5e8e79aff0597f324dee1a882c71f9ab1d6664c1bd859cd38647642053e39d11e85ae2bb6d306af2f7a455a"], 0x4c}, 0x1, 0x0, 0x0, 0x20004080}, 0x0) socket$netlink(0x10, 0x3, 0x0) (async) timer_create(0xfffffffffffffffc, 0x0, &(0x7f0000001400)) (async) timer_settime(0x0, 0x1, &(0x7f0000000240)={{}, {0x77359400}}, 0x0) (async) rseq(0x0, 0x0, 0x0, 0x0) (async) timer_gettime(r1, &(0x7f0000000040)) (async) socket$netlink(0x10, 0x3, 0x0) (async) socket(0x10, 0x803, 0x0) (async) sendmsg$NL80211_CMD_SET_TX_BITRATE_MASK(r3, &(0x7f0000001980)={0x0, 0x0, &(0x7f0000001940)={0x0}, 0x1, 0x0, 0x0, 0xc001}, 0x4000000) (async) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x17) (async) syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) (async) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r5, 0xc02064b2, &(0x7f0000000080)={0x8, 0x9, 0x10000007}) (async) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r5, 0xc02064b2, &(0x7f0000000040)={0x1, 0x6576, 0x9}) (async) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r5, 0xc00464b4, &(0x7f0000000180)={r6}) (async) clock_gettime(0x0, &(0x7f0000000140)) (async) timer_settime(r1, 0x0, &(0x7f0000000180)={{0x0, 0x3938700}, {r7, r8+10000000}}, 0x0) (async) sendmsg$nl_route(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r4, @ANYBLOB="01000000000000001c0012000c000100626f6e64000000000c0002000800010005"], 0x3c}}, 0x0) (async) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)=ANY=[@ANYBLOB="4c00000010001ffffcffffff0000000000000000", @ANYRES32=0x0, @ANYBLOB="0000000080400300240012800b00010067726574617000001400028005000a000000000008000700ac14142808000a00", @ANYRES32=r4, @ANYBLOB="9ede2b6245f4af50cc0b00000000000008c794d621155b53d0b849a9b9b475c9c4ca8fd95d7074e9f77396c4c5b3498de041349c828a25e42d1700e5e8e79aff0597f324dee1a882c71f9ab1d6664c1bd859cd38647642053e39d11e85ae2bb6d306af2f7a455a"], 0x4c}, 0x1, 0x0, 0x0, 0x20004080}, 0x0) (async) 14m14.058641964s ago: executing program 32 (id=1104): r0 = socket$netlink(0x10, 0x3, 0x0) timer_create(0xfffffffffffffffc, 0x0, &(0x7f0000001400)=0x0) timer_settime(0x0, 0x1, &(0x7f0000000240)={{}, {0x77359400}}, 0x0) rseq(0x0, 0x0, 0x0, 0x0) timer_gettime(r1, &(0x7f0000000040)) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$NL80211_CMD_SET_TX_BITRATE_MASK(r3, &(0x7f0000001980)={0x0, 0x0, &(0x7f0000001940)={0x0}, 0x1, 0x0, 0x0, 0xc001}, 0x4000000) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x17) r5 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r5, 0xc02064b2, &(0x7f0000000080)={0x8, 0x9, 0x10000007}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r5, 0xc02064b2, &(0x7f0000000040)={0x1, 0x6576, 0x9, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r5, 0xc00464b4, &(0x7f0000000180)={r6}) clock_gettime(0x0, &(0x7f0000000140)={0x0, 0x0}) timer_settime(r1, 0x0, &(0x7f0000000180)={{0x0, 0x3938700}, {r7, r8+10000000}}, 0x0) sendmsg$nl_route(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r4, @ANYBLOB="01000000000000001c0012000c000100626f6e64000000000c0002000800010005"], 0x3c}}, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)=ANY=[@ANYBLOB="4c00000010001ffffcffffff0000000000000000", @ANYRES32=0x0, @ANYBLOB="0000000080400300240012800b00010067726574617000001400028005000a000000000008000700ac14142808000a00", @ANYRES32=r4, @ANYBLOB="9ede2b6245f4af50cc0b00000000000008c794d621155b53d0b849a9b9b475c9c4ca8fd95d7074e9f77396c4c5b3498de041349c828a25e42d1700e5e8e79aff0597f324dee1a882c71f9ab1d6664c1bd859cd38647642053e39d11e85ae2bb6d306af2f7a455a"], 0x4c}, 0x1, 0x0, 0x0, 0x20004080}, 0x0) socket$netlink(0x10, 0x3, 0x0) (async) timer_create(0xfffffffffffffffc, 0x0, &(0x7f0000001400)) (async) timer_settime(0x0, 0x1, &(0x7f0000000240)={{}, {0x77359400}}, 0x0) (async) rseq(0x0, 0x0, 0x0, 0x0) (async) timer_gettime(r1, &(0x7f0000000040)) (async) socket$netlink(0x10, 0x3, 0x0) (async) socket(0x10, 0x803, 0x0) (async) sendmsg$NL80211_CMD_SET_TX_BITRATE_MASK(r3, &(0x7f0000001980)={0x0, 0x0, &(0x7f0000001940)={0x0}, 0x1, 0x0, 0x0, 0xc001}, 0x4000000) (async) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x17) (async) syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) (async) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r5, 0xc02064b2, &(0x7f0000000080)={0x8, 0x9, 0x10000007}) (async) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r5, 0xc02064b2, &(0x7f0000000040)={0x1, 0x6576, 0x9}) (async) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r5, 0xc00464b4, &(0x7f0000000180)={r6}) (async) clock_gettime(0x0, &(0x7f0000000140)) (async) timer_settime(r1, 0x0, &(0x7f0000000180)={{0x0, 0x3938700}, {r7, r8+10000000}}, 0x0) (async) sendmsg$nl_route(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r4, @ANYBLOB="01000000000000001c0012000c000100626f6e64000000000c0002000800010005"], 0x3c}}, 0x0) (async) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)=ANY=[@ANYBLOB="4c00000010001ffffcffffff0000000000000000", @ANYRES32=0x0, @ANYBLOB="0000000080400300240012800b00010067726574617000001400028005000a000000000008000700ac14142808000a00", @ANYRES32=r4, @ANYBLOB="9ede2b6245f4af50cc0b00000000000008c794d621155b53d0b849a9b9b475c9c4ca8fd95d7074e9f77396c4c5b3498de041349c828a25e42d1700e5e8e79aff0597f324dee1a882c71f9ab1d6664c1bd859cd38647642053e39d11e85ae2bb6d306af2f7a455a"], 0x4c}, 0x1, 0x0, 0x0, 0x20004080}, 0x0) (async) 11m2.073953217s ago: executing program 4 (id=1686): r0 = socket$inet6(0xa, 0x80002, 0x88) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000001340)={0x14, 0x3e, 0x107, 0xfffffffc, 0x25dfdbfd, {0x2, 0x7c}}, 0x14}, 0x1, 0x0, 0x0, 0x488c0}, 0xc050) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x10000000004e20, 0x0, @mcast2, 0x6}, 0x1c) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, 0x0, 0x0) syz_emit_ethernet(0x83, &(0x7f0000000240)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaf9ff030086dd601b8b97004d88c19edace00000000000000002100000002ff02000000000000000000000000000104004e20004d13"], 0x0) recvmmsg(r0, &(0x7f0000001140)=[{{0x0, 0x0, 0x0}, 0xffffffff}], 0x1, 0x2, 0x0) socket$inet6_udplite(0xa, 0x2, 0x88) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r2, 0x8933, &(0x7f0000000000)={'team0\x00', 0x0}) r4 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000440)=@newlink={0x58, 0x10, 0xffffffffffffffff, 0x30bd27, 0x25dfdbfb, {0x0, 0x0, 0x0, 0x0, 0x0, 0x1120}, [@IFLA_LINKINFO={0x30, 0x12, 0x0, 0x1, @vlan={{0x9}, {0x20, 0x2, 0x0, 0x1, [@IFLA_VLAN_INGRESS_QOS={0x4}, @IFLA_VLAN_ID={0x6}, @IFLA_VLAN_EGRESS_QOS={0x10, 0x3, 0x0, 0x1, [@IFLA_VLAN_QOS_MAPPING={0xc, 0x39, {0x504, 0x347}}]}]}}}, @IFLA_LINK={0x8, 0x5, r3}]}, 0x58}, 0x1, 0x0, 0x0, 0x8045}, 0x8000002) syz_usb_connect$cdc_ncm(0x2, 0x75, &(0x7f00000000c0)=ANY=[@ANYBLOB="12010000020000082505a1a4400001020301090263000201000000090480000102090000052406000105240000000d240f0100000000000000000006341a00000107241400efffff08058103"], 0x0) r5 = syz_open_procfs(0x0, &(0x7f00000000c0)='net/tcp\x00') preadv(r5, &(0x7f0000000380)=[{&(0x7f00000014c0)=""/223, 0xdf}], 0x1, 0x2000ff0f, 0x0) preadv(r5, &(0x7f0000000080)=[{&(0x7f00000004c0)=""/204, 0xcc}], 0x1, 0x6, 0x3) sendmmsg$inet6(r5, &(0x7f00000008c0)=[{{&(0x7f0000000000)={0xa, 0x4e24, 0x0, @mcast2}, 0x1c, 0x0, 0x0, 0x0, 0xfffffffffffffe80}}, {{&(0x7f0000000040)={0xa, 0x4e23, 0x0, @loopback, 0x5}, 0x0, &(0x7f00000006c0)=[{&(0x7f0000000100)="e38db68112ed53e53cbae73390cf07390b747c1a57a0c5c761fa1f96a36f464794886f07629ff712e13807e17be2d932aaa1432cbb00400e131858979e856dc1eef19afde70fb10d819ca596a1bb9f611122c7172e81734afa9f030b9044c1a29c8680d75649e5ab168a62eeabbf71071bc5c839450c0d006f034b0fbbf7cd"}, {&(0x7f0000000180)="5691b4981235ac8e45bde459d1296a6619e677a92aa6bf398752f74456eb007160324cfd3d19"}, {&(0x7f0000000280)="07370441ac102dd5077bb94e8b1b40c7abe36ebadd47a8ade01b600658ce9f891c595cc2ca9e8664db431193887957922d1692616b8b6ad8931baf3f94d2fb61d13495d2d21ad4d9375da33b0d41d4d0c56f398744d5643676604f97a936f9689bc8b0454494ee73f0ce54ba4b9b61140b03a09f0ecbf871c96052f7cad728f5bfc4e1e2a172218c9c31b50abd46aee42edab28a323c7051e33be9d857971892fdf2614bf63f31ac319638a1c4961b2c1533cacad726dba8176d98483b043d3065efeb9ff962df07a872"}, {&(0x7f00000003c0)="e683ca711b42f5ac95296b8eb8b34bed0353355c53666072c0a8ba64a5f99cd25bb0ec77d750c02c01147d1ebf38990b813ef5aa14505490574982a3f98b32af6ab64d1f80b62e790d36cb862a2afd456bafa43df4bb9e6b31f1a32be225c84222c95a08fae8929c397f41c1972c48fc8b9827cece7a4b5d77cd71cbf61feb533175759a1ffd15538d3ff74bc09e74cfb97ac8bbd82ec2e1d750949b1c93b2dc8423ea48fa"}, {&(0x7f00000001c0)="ed700109ba8e320bafbaa0bb589f2ffc661b3f472370f8b49ed8"}, {&(0x7f00000005c0)="1136a2e8e6c2e86bbb5a722c5cf077653cb81b8cc8c75cc25f16488e5d9a8d02e8e02e84f5b3bf1fe91ede7f7d4fbde43b04d54ba2f6ffb7325fa93624d4d4d536333382d1e769476a7f29ddee654654f5759f4ed956268ff9c15e065cead4e2c1274e645aa5a17456061e6e00468e3377b1d24ec92cac9f328293ab844a85eed6f3f016d821d9ecde36483acda4f8def2bd493fd5701093372a6d49b6bf6035c14fcd92888258c4f55b74d067863f62cb11fd035265b86ac1d3073612ea1e1224654bcfd8ffbec9343980b3fc7cac9e61aa2581634772050f2a8f108026ab29930c0a8984"}], 0x0, &(0x7f0000000740)=[@rthdr_2292={{0x0, 0x29, 0x39, {0x2e, 0x0, 0x2, 0x20, 0x0, [@empty, @ipv4={'\x00', '\xff\xff', @local}, @remote, @private2={0xfc, 0x2, '\x00', 0x1}, @ipv4={'\x00', '\xff\xff', @remote}, @remote]}}}, @dstopts={{0x0, 0x29, 0x37, {0x1d, 0x0, '\x00', [@calipso={0x7, 0x0, {0x0, 0x0, 0x2, 0x7, [0x4, 0xf2, 0xffffffffffffd939]}}, @pad1, @ra={0x5, 0x2, 0x3}, @jumbo={0xc2, 0x4, 0x5b}, @hao={0xc9, 0x0, @mcast2}, @hao={0xc9, 0x0, @dev={0xfe, 0x80, '\x00', 0x3a}}]}}}, @rthdrdstopts={{0x0, 0x29, 0x37, {0x2b, 0x0, '\x00', [@padn, @calipso={0x7, 0x0, {0x3, 0x0, 0x4, 0x101, [0x0, 0x7, 0x3, 0x6, 0x40, 0x4, 0x8001, 0xe000000000000]}}, @calipso={0x7, 0x0, {0x2, 0x0, 0x6, 0x4, [0x401, 0x800]}}]}}}]}}], 0x1, 0x0) syz_emit_ethernet(0x3e, &(0x7f0000000080)=ANY=[@ANYBLOB="aaaaaaaaaaaaffffffffffff080047000030000000000006907800000000000000008608ffffffff0102"], 0x0) syz_usb_connect(0x0, 0x41, &(0x7f0000000080)=ANY=[@ANYBLOB="12010000e518a708ac0501859d200000690109022f00010000000009040000000e010000152403"], 0x0) 10m58.629140259s ago: executing program 4 (id=1695): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$batadv(&(0x7f0000000080), r0) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000000140)={'ip6gre0\x00', &(0x7f00000000c0)={'ip6gre0\x00', 0x0, 0x2f, 0x7c, 0xd9, 0x7f, 0x27, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x1b}}, @rand_addr=' \x01\x00', 0x8030, 0x10, 0x4, 0x9383}}) sendmsg$BATADV_CMD_SET_MESH(r0, &(0x7f0000000240)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000200)={&(0x7f0000000180)=ANY=[@ANYBLOB='D\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="080025bd7000fddbdf250f00000008000300", @ANYRES32=r2, @ANYBLOB="08002c000500000008003b000900000308003c006126000005002a00010000000200000000000000"], 0x44}, 0x1, 0x0, 0x0, 0x20004044}, 0x0) sendmsg$ETHTOOL_MSG_COALESCE_SET(r0, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB='D\x00\x00\x00', @ANYRES16, @ANYBLOB="0100feffffff000000001400000018000180140002006e657464657673696d3000000000000005001900010000000800100004090000080011"], 0x44}}, 0x44000) socket$nl_generic(0x10, 0x3, 0x10) (async) syz_genetlink_get_family_id$batadv(&(0x7f0000000080), r0) (async) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000000140)={'ip6gre0\x00', &(0x7f00000000c0)={'ip6gre0\x00', 0x0, 0x2f, 0x7c, 0xd9, 0x7f, 0x27, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x1b}}, @rand_addr=' \x01\x00', 0x8030, 0x10, 0x4, 0x9383}}) (async) sendmsg$BATADV_CMD_SET_MESH(r0, &(0x7f0000000240)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000200)={&(0x7f0000000180)=ANY=[@ANYBLOB='D\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="080025bd7000fddbdf250f00000008000300", @ANYRES32=r2, @ANYBLOB="08002c000500000008003b000900000308003c006126000005002a00010000000200000000000000"], 0x44}, 0x1, 0x0, 0x0, 0x20004044}, 0x0) (async) sendmsg$ETHTOOL_MSG_COALESCE_SET(r0, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB='D\x00\x00\x00', @ANYRES16, @ANYBLOB="0100feffffff000000001400000018000180140002006e657464657673696d3000000000000005001900010000000800100004090000080011"], 0x44}}, 0x44000) (async) 10m58.264168936s ago: executing program 4 (id=1696): r0 = socket$l2tp(0x2, 0x2, 0x73) bind$inet(r0, &(0x7f0000000080)={0x2, 0x0, @multicast1}, 0x10) connect$inet(r0, &(0x7f0000000200)={0x2, 0x0, @local}, 0x10) sendmmsg$inet(r0, &(0x7f0000007140)=[{{&(0x7f0000000380)={0x2, 0x4e21, @multicast1}, 0x10, &(0x7f0000000980)=[{&(0x7f0000000600)="2e7075f67e7c82ed5f88c501707a40bcd30f19fad0e0a10bd6f682bac65661f2978a66182def3164e6d857c4cc8669bfbf8769e82ea29ef30d621dcceea3599b944aff531867c5833cf57da49a48a6699d65b419e863015a90841150a1f0591b07385fc93ad4600d9835277423ea4aaa861cb393fb", 0x75}, {0x0}, {&(0x7f0000001500)="e6f52b906a3e804d0c481051091ae752c75b9d5679918cf5071290ec7b1b13c76fc94c744a60dc4e9a80607e2808bc41a59ca0b6f7bc4c95956919ad86d6f6ea54eb9073182a53036f98ef557ed8c101b12146eb777377956dd7089b5aea0edd8adc23a2910b93e8b12c6ed2c9f3fc2dd01d89231e05e4eb30afec79507c78f22919e684030fa302c3b4b16cdbe352edce0a022f7522e25bc2b2953c9c683820f9e34c52c7efc1e6bec0020bd27d21b1753b92647a03b563de17481c2a51e3c57810ef41276648da3c8513b2e673f3fa32b7f8eb7384b7b99ab0bd595d37d02b3984c64b14f0931caf491084d2dfc158e52b397efff6c65871734ff049686f7fa4ed1b6de1f96db32eb0fa6c026326e8e5d5268f774296451a93b1d0109083d0816af99063dbae59e4ab6c2b80c51a67dfd78ecfb140de81e9e326ca1b8ebcd629089dfa477ccd9d3685c234b4be36bf25294c9d0b4e51c7265ae299db9a8c54fcbc7b78c3182aea888ef5f1af1c5c6261a83e0bd091b7c814908271e2a15d5752d8a1e8603c000341e6a79fbd015849f7a7ad810f1e86b7da4b5fc98f9731da038e2ed7522e7523b426eeb72c8c94e6e72426b3133564f0577f629f0ebb144bdf6ef2ac434379004fa0fe3ce0d97c402d41af709d41ae5ecdcc8cf08ca5b68df24de331a67cd4e550847f35e7291d7045856df3d683e7c033bdee44b22da239c26dc6c05479bb55465930281217e75eb4be69707875acf6e5543285f5cc200b18a00f0ecb1e59f2580ba64b27ae4611caa3db985c8af16c90e24fda77e22cc81e7178fcd00841d68f1d597f21a061ca508b13a0e43fe42735b1f09bf484771db550bab6dc8c9b5e0f36abebb3c3ed53af9912f409500e32fd197a710cc2e3cc2bad1c896caddf5148750faa799fe302f3f38f99a4acd1956c5b932e76b3ecad34871ac5ab6221f54fc9a1dda25098e3fc4979a54bcac3e2fabdc148a23b691fc20bc7b8bfa61e161cc6522c920ae8e469689110b2272ea9af3b194eb959cca65a14c5b280404471137f3968d3de938498f47c585389d89698e5c01b9d1f49165392d835e3986aa58135c9c1c1d3de187455d240c309dc996d8f755b79f6dc606fa40091d7c150e97bf90718f9e8c653c3108b829383d7f4a215640382f8d97f9690eef089efa7a1b5a16722b9393a11f357f078f39661b349df0da3e8901f05b86cf8f59a52f312d72f1ef2ff1a6c5cf2dbe031f973d2b6f2c107bb7c37946fbea92976d0b7a9f2dd6944fb362629c3a3b97dcdc94a2ec8346f3f2b3936750c0b91edd615724a081b2e9048edac7311d681252614fd2a475032637d782ea5949f77c13dbe76b44c71f0ae7165fe9dcac700179749766f33a69f3834cdef623bbd0a51f14db22a708f57dbd65011a2c34d0795d4d106f81fbd7249c8ff05b99613c7cccf87c9ac8dbd869deda73206313a7a45ec6a4889c224e3d5d77cd61fbd86660215843c092c396ccc5635f6360aa21e149dd385201eb508e993beaf76b8a0a64232ff67692878214b4b2da0681e050484c57371afda5ea4e6194f5c72fd7eba1844f1aeeca80c7a0720bbd0efd3c322dd716b4648d8660ab413be202684fd02eaab5053652bc1990d2e6ac2495e1299428601c2233ad52d43bcdd63ef48341cb64dd60a21bee68eef60cb9a01c6971f31d216f9997fb90bca84cc64c92862903702b3af5c397efc1e17416682542eb26ccb8ecca8b265ec61bb3448cac878e48a844529c8b7a9b64ab1d3b1f2552e4da3f69e1e4797cc2386518a3cbed64b68cd4037f3fc48e95f4feb1998e8b5e08c6d179a4baca74a7ecf3f281152c93d01330493895ea689760f67e265bb88261877b43cb3e6b96752ba85af019c901e67d195de18f7339eef71bc7151330fad1dff95bbd8fe010e393ce96b76b6bcb1de39675dde1630102865a8ed2e74e65250fadc4dcd475a3781d5811697315e78c4b4b432bc30c4d26e23adfc8473e99588857e2f27470740259c90274442dfef0089cb75a863d9dc3c4ffdf61874e39f2494a9e438bd6b9ef332d7f1eaa0b9329014cc24090b71aed8fdc99f39c1bc0442c2317586654efb85b79a4ed6d540fe57283d8237bf851baae798e25e0c6e82f5b253ce74f2fd27e8e183e849bdfde61c23b968e82662c65c6b73fdfd4e9557718fe13d613b4d7a4cdcc819be2c882ca1ca2b8d4e971e97f8f0343ec5db19ca55997c7b02bd0545c1abdd5744a17993780ac4676724751143280b9751c4ea98b43ca39cd637b5a5e8b871c12ae847d679ed865f6865bb88ab26e41b72a8f137f6caa4b0e7a03b14e500e27f0cecfb4d54667f1857fa80c603d80a784ca1d37c8c61873a52dbe5cdbb01e15d723d1490d7ba85e59950c0298b71ca308f6348e474c6fd3d2583c27dc2569e596815f39db8698557d1e0c9e5a513eda8e0be64dc0f017f136de2727b63ecbceac6bebebfefee1284dbb127e708b4225c9834e8da40dd2affa67295b25f67c4fbd1a6408a3842885ef033d88b1649ad1ee90f551c18ef3ab20268e06e90e138d8c726b0258f7342919a9bb94998641e2f9c135a3a996d58f83601fd0af8b4247d088e54fe54d9dea543b966bb90737f8e499ad0c6376ea9e2aefef0989794b2485628105265f57396991f2014f5d3d109aae0c8d3449187d10b0faf3a57ea4ff56e3be5f36afb5e2e0e8d2ab2234ce2473a951214c409a233fe1161d28189880b14ddc03a4e223f9f328579d53e7872339082ea318f6d765ee49a5ff96674dd40e74c14261ddc24dc545693eae36b43ccce4f67439894b7539e2b174bbb272985d93e362890c4343b4331b4e09e10e8415db05446456d1d3acce3f14d8498db669f7824e9630c53d263804ed2025c5ddc6fb546651ee127c01b5bd1cbbeee3b98bea341e531e51444be7316b96c5a817199832bf3e8c1e9c8f7e8973e0133b3f404dc11b263d6ef90b8bb1ca8f191968289771049b0a7a8539840e04f9d135bc84c4681eceaf0d7910911c44d040a92b096eb8081e24733d5d1e69a6df1bded9036330c6a9e701fd66929a6a82a8c2915d087053a8ce77660eb13d3eb5d00a427e9b4288a1e88700a577422a5fb8d20d9d0fe757577f1bf16d7e72b618daf3a9d1bd859641f16cddec39f220a204a904fe8d8830bf1c18c0b7d8f6a79ebc5ea4fb9ca9cbca918ac0e4d1ff21b24c59f7627acbbc38a17fe871629fe70e17f6e5b7e71402c01ca53b68a8d0c7dbe4ec96bcae75c99af6149785626fd1128a0b6c6f16352fecfa438f8a1e54076deac961c56237f51e7b0f8812630ee7aa52844473057421ae1fa46c57a1ed0a0f3238f4b29edb751908ed596024e6e7c10b68c6728ca02488c3905988670ccf7994a3145d7a1639adb24a3dafaea80552e3ce259d7471110f524d8cd718b2f33d10fec89a3916ea6d7f66955d767349f5c4e0931a3248559136b8cba1a52cf635edc8eedc2b97b60f9c76b1f08480cb939aed57602e051db6aeb885836f7fc20355eb8e57ee4ab9df6a6e8d9ee72d97af56f3ffe8acecbed064fef9b98a7418dc6cd0d25e5cbde60c54c4bab20aff174a5acd1b353e7e70ae6cab7300d90fe3de954b3fedd69a3d09a78283751e98672f29c8fb0b7de0e7975d33d9dceea10e17c6b6d841559a6eb9286f7d724b831fb9e0831705b8d4b10161bec3bb3db108d8b8e69a2f7859e8787ff3412a86b6b5539ce8a2fc34dd61a5ee3613916512070d86d93fc1c6e302129b3f921f3573b8ae5d4e2f0e91987947fef69614d11a4ecafafae7cdd023bf9d1deedcfb608ca30668404f166b443d27cc7862111f40f2530f2d193a9b36e3600bcbf25fafba16d77baa5da3343a56551d1597531cc9510c4cb5f6c62836233229dc1593ed065eddd23efef188a4e4a0d157c5103941b04071e851086900858d57db0dbaf6c929f8d6af5f6d90e56fde93556a3204254ed01c586a1b2c95c5ffca5e08e1838f28bec23f2ced736cec2e76756ecd674f4a7bd83eb78893be9ff3b02dfba2d3863fca766bb264eb21550033f9545f617d455c13d7e581c1651d52714a30364b24cf20df9e9e81438b1a052dab6bfa0b5e92aa3023a541620e6857ca75cb75f136249118e34855f6f6dffc662ac9a0734ce1a367cf03914686a6e4577718f913c8b4914f4f7ded31f1c1cf317a367ee86a8bd53f6d02dde1d06d460525d89707f701fdbbd5afa5dacfcfa6f06544595c6f23ab8a9007c7c97dd818af4ab5460b121c44da72536b474935758fb6a32e56d0437fdcaad928086312640766a53b837347753105028350ce91cc46137cb2d7ecff17c1c57b7af556e50c554555feb2dfc8e9cd73c888204a5c74a84fd1786145828eaa50870b282d4c469cf40455fb0efea17fc8176465529f04f2b9d77616fc52acab58ba1f22d12da9d4febb5f4e88c790292f1d2400421379fdf45b09462ef3547c0f8c752b8084b187b1208a92728dbc633b3f233249a5c59ba452ba170f5deb57f1349de065bff85be39d15339306d2267ec4cc75f79808a32b3246ba2c916d87e96ee6372a7a41c282a4cd359dbe18cde25937ab43864b8c18b73da90f0498d6fb977698dce26ae6928479dd051d80f9b99e995032c5d71f355f865049ed174fb230238ef6d643646ca203aaf9d6abc01bc1447c358adedc7987b47c85c646a24a3fadca342ead8838632c6cfec46ac21f68bfa55bbc0211ec9862b813ec059fb439f0ce437c7640bde3be8ec02364cd99420fb01cce1d9e52143d97ab4f6099c0d08064faefe6eff074ce3f40e5394bfab65af492afb10f4f20bf749d58e3f8834a49c9c641ddc806d5ee887eedc59398ecffe207af0b36f67e87c9dcee55eb2ab3c2d1d24d55e38747263056c9c4471a662fbf4575e3e1a0330e9288ff1aaa0c009631835a1952e3617d7b895d60fc167ab261512fa7fd3e7ca01bc847fe3c6333cb4613ab50c1478ea873cda01d7c1f419e7d68c94885b042f7c6cea885400d5ad52007271d5e283e735f04eb2c56bdaf621550c617bdaaeb8a7e26cf1608c2e9b324d98b8ff4a5008fbb8e73822c51e01a7d99eb1f12dc91cf9b909a4efac9e7323d8d645b4cc7329374d458b677e32f7139f3b90c2cf3dc3a9ec230001f96c14a72c270d584439da7b0ef208075ac54215f06c7260a6ca34cbb3e68b6fec765bba1e99ef506553dd38f4d772657c11b6a84164afa2da98f47241afd98161aa4152d2e5e4bff3b4c6996c88e5e2e028f191570d7301fbb0d6e1292f3651d012988f0ecff5ad29cff81875a291839c73000d844fd580dbdeca7ac6eedc960889b9632f612a7691db90f12a984ab296b966614ebe936f51401a5b7c1b8f81eb0bd21f42d51252c22c5768acd90df0404c9c0dcb81fda48807ef8afe0726315c593e69c9fa2989a526811282c3f8d08620a94f6ab250798abd2a99eb0175a7db3c878e75ff4d1b197566ec4b921940899533764f3648390ac5d82ed51fb9878a806be7810372d68df078724756df01bd0eb3d8ffd914d4f0bf81a2d7725c2dab54a1e657da44f5e7d89103b7f992ad667871b175debb0e1aeb7f5f77b4316da81b1d9be009c9ba811580e07577fbb21682a5421fb4bec9e1378d414e629182efe92f403f567b73084894cbf07dc4f5fd36c2e2b90adfe99f35c741ee03e11ab8400f9d72a22b56ee39c65268a2471625d787dade1f1499dd7a582dbf0ff7fc5ed3e78485231ccce4c4a31fc8195f00274d07c777", 0xfff}, {0x0}, {&(0x7f00000007c0)="81a2c0f3e27f4c8446985adf39b76b3058400170b8d95e25f9bb398a1094214bacfb7a8509cc72be03d24b0d5ce93e4bd9", 0x31}, {&(0x7f00000008c0)}], 0x6, &(0x7f0000000a00)=[@ip_retopts={{0x70, 0x0, 0x7, {[@ra={0x94, 0x4, 0x1}, @cipso={0x86, 0xe, 0x0, [{0x1, 0x3, "a6"}, {0x5, 0x5, "7e50ea"}]}, @end, @rr={0x7, 0x23, 0xa9, [@broadcast, @dev={0xac, 0x14, 0x14, 0x2d}, @broadcast, @multicast2, @dev={0xac, 0x14, 0x14, 0x33}, @remote, @multicast1, @local]}, @ra={0x94, 0x4, 0x1}, @end, @timestamp_prespec={0x44, 0x24, 0xae, 0x3, 0x5, [{@loopback, 0x6}, {@local}, {@rand_addr=0x64010102, 0x4}, {@remote, 0x16fc00}]}, @noop]}}}, @ip_retopts={{0xa4, 0x0, 0x7, {[@timestamp={0x44, 0x8, 0x83, 0x0, 0x6, [0x5a]}, @timestamp_prespec={0x44, 0x2c, 0xe3, 0x3, 0x8, [{@empty, 0x8}, {@rand_addr=0x64010102, 0x80000000}, {@private=0xa010100, 0x1}, {@remote, 0x4}, {@loopback, 0x9}]}, @ssrr={0x89, 0xf, 0xda, [@remote, @local, @remote]}, @timestamp_addr={0x44, 0x4c, 0x66, 0x1, 0x8, [{@multicast2}, {@multicast2, 0xffffffff}, {@local, 0x5a}, {@multicast2, 0x3}, {@remote, 0x2}, {@multicast2, 0x4}, {@rand_addr=0x64010100, 0x7}, {@private=0xa010102, 0xce}, {@initdev={0xac, 0x1e, 0x1, 0x0}, 0x2}]}, @ra={0x94, 0x4, 0x1}]}}}], 0x118}}, {{0x0, 0x0, &(0x7f0000000cc0)=[{&(0x7f0000000480)}, {&(0x7f0000000b40)="caa021cb963f7a4ea88e43d374e185dd26f77ebde79ba3b1cfc13b639e5fc66466a1cc1a4e272a82742dc427932252be37b9558881e88df96db2a807e1382563d50adbdbc697f8f21266553913751b818f7bf27718b990336e15bf743d564b2faa6b7458381238c360c257b61d3e7bbc", 0x70}, {&(0x7f0000000c00)="0362759d80a46bff672e7b177a9746121755ef60cdf7568656ff487719335c52b425c94a68a20bbd1ce54db4eb983b06fca5b3b0a90b6b40f0def7ed1bd1d2030f772682b0515b83cc30aa233a0901d779c379e86684d54c50bbe076a6adb4eba763ef6e6721101f2c600b42f2923d12038b143f8798ff6608d0f93ce96e49b8db8237ef863513e9f9768a24f7e753140fa3fcacdd7184ab4b8c92eaf775c49d56f37eaea764", 0xa6}], 0x3, &(0x7f0000000d00)}}, {{&(0x7f0000000e80)={0x2, 0x4e24, @loopback}, 0x10, &(0x7f0000001080)=[{&(0x7f0000002500)="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", 0xffe}, {&(0x7f0000000ec0)="5905fd459bb6d1d8e37f3a58613b4d70df9f2612baaf3758d496da19b0422e6d60f5876b3e660e0efad9f6a7c60049bd23b687f69f6e", 0x36}, {&(0x7f0000000f00)="0a3852c22621cd1b5e4b64845754b818b699e036b0c91f4303001ef397e0", 0x1e}, {&(0x7f0000000f40)="64ade66b8b52e28ab542275cf11766178a1a090451c52a6bec047dbaba5468ffe15cca3feab8ec7ba8e660509aec10a622405412a688be537b1c588efabd1a73f8169ada314ec9a82cc76399de4e", 0x4e}, {&(0x7f0000000fc0)="aac49263b314f45f07119a5bfd0e971d634dc012296bddd32dbf09eb32a14e2b14b70de5", 0x24}, {&(0x7f0000001000)="f9fc4c4a5cbc4c48c672803e55dc0d7508c07cf6d52025e147bc420106b730591e75ad63d63ed5dc460bec1bcb7f33c6a58d6a215c2de658f0fcb9823f78e1890f214c0e5d6205385c88f0bad6c681ee4fa232589fe182334f0840d6afcb8ce39cbb524434e0135facbd852bd970d8da442d1693c74ce4dbc81d26", 0x7b}], 0x6, &(0x7f0000001100)=[@ip_tos_int={{0x14, 0x0, 0x1, 0x4}}, @ip_ttl={{0x14, 0x0, 0x2, 0xa83b}}, @ip_tos_int={{0x14, 0x0, 0x1, 0xfffffffa}}, @ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @empty, @remote}}}, @ip_tos_int={{0x14, 0x0, 0x1, 0x4}}, @ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @empty, @local}}}, @ip_ttl={{0x14, 0x0, 0x2, 0x10}}], 0xb8}}, {{&(0x7f00000011c0)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x1c}}, 0x10, &(0x7f0000001340)=[{&(0x7f0000003500)}, {&(0x7f0000001200)="57f6f18592488f48fbee7ac3558e7e0c45047dd019f443f37fee6645b08aa36397b9c77d7c0ea99aae839833c569d39297f14e6acc3dea89ac0a808cc274beebd75c58efd9263f73888c5c28b06dbcb91c7b8b99fee8c3e517454898b44fb5929374a3adf1cdc9910bc3de40dcff1edf404dbfbf0ed58ad164eae785ea331e27490f5770d69da2544587714a694a71e72cb346af6edc16987eb8383ceda14808a5f1181cd638774a410b6d17da1495a14d9f1f8cf6c04fec39510ccbb378f2c0395a0c6838f8a4db6c11c32961d8903bd00797a151fef57cf5d713ad117bc3865b24f52a380a6936906e856d63", 0xed}, {&(0x7f0000001300)="557da9", 0x3}], 0x3, &(0x7f0000001380)=[@ip_retopts={{0x28, 0x0, 0x7, {[@timestamp_addr={0x44, 0x14, 0xca, 0x1, 0x3, [{@initdev={0xac, 0x1e, 0x1, 0x0}, 0x2}, {@remote, 0x5}]}, @end]}}}, @ip_tos_int={{0x14, 0x0, 0x1, 0x211}}, @ip_retopts={{0x10}}], 0x50}}, {{&(0x7f0000001400)={0x2, 0x4e24, @loopback}, 0x10, &(0x7f0000005580)=[{&(0x7f0000004500)="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", 0x1000}, {&(0x7f0000001440)="734a73e117b57a353cd13bf82320ed29facfe0c69cd8d188518e4fd9b2fc", 0x1e}, {&(0x7f0000005500)="5b753240f29adfc18bc097efeeac093f580e34dde793c6d02b69cd5f6ad5b08cc80bb1d087ac8113c064dfe430b325bd846747f4f803f9f29fcb9e8f3114a427", 0x40}], 0x3, &(0x7f00000055c0)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @remote, @empty}}}, @ip_tos_u8={{0x11, 0x0, 0x1, 0x13}}, @ip_tos_int={{0x14, 0x0, 0x1, 0x81}}, @ip_ttl={{0x14, 0x0, 0x2, 0x8001}}, @ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @remote, @private=0xa010102}}}, @ip_tos_u8={{0x11, 0x0, 0x1, 0xf}}, @ip_tos_int={{0x14, 0x0, 0x1, 0x56c}}], 0xb8}}, {{&(0x7f0000005680)={0x2, 0x4e20, @broadcast}, 0x10, &(0x7f0000006a40)}}, {{&(0x7f0000006ac0)={0x2, 0x4e21, @empty}, 0x10, &(0x7f0000006b00), 0x0, &(0x7f0000007340)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @empty}}}, @ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @private=0xa010102, @empty}}}, @ip_ttl={{0x14, 0x0, 0x2, 0x5}}, @ip_retopts={{0xfc, 0x0, 0x7, {[@ra={0x94, 0x4, 0x1}, @timestamp_addr={0x44, 0x3c, 0x38, 0x1, 0x2, [{@multicast1, 0x7}, {@private=0xa010101}, {@initdev={0xac, 0x1e, 0x1, 0x0}, 0x3}, {@empty, 0x7}, {@private=0xa010101, 0x32f2}, {@multicast2, 0xba00}, {@empty, 0x86}]}, @timestamp_addr={0x44, 0x44, 0x20, 0x1, 0x9, [{@rand_addr=0x64010100, 0xa}, {@multicast2, 0xfffffff4}, {@loopback, 0x9}, {@initdev={0xac, 0x1e, 0x0, 0x0}, 0x6}, {@loopback, 0x97}, {@empty, 0x9}, {@rand_addr=0x64010101, 0x3}, {@initdev={0xac, 0x1e, 0x1, 0x0}, 0x7}]}, @generic={0x89, 0xb, "c3b22bffbcb675a799"}, @end, @noop, @noop, @cipso={0x86, 0x57, 0x2, [{0x0, 0xe, "3aec914c1f214c55d4ae4999"}, {0x0, 0xe, "9d7a7981bba8a4c13ab93b08"}, {0x6, 0x5, "81d723"}, {0x0, 0x6, "d552c52c"}, {0x6, 0xd, "16b88c4b16b08ae0776af1"}, {0x2, 0x12, "d7424f3a6cdacb5551cdbc6a90675f6b"}, {0x1, 0x5, "d31cef"}, {0x5, 0x6, "df70865d"}]}]}}}, @ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @remote, @rand_addr=0x64010102}}}, @ip_retopts={{0x30, 0x0, 0x7, {[@noop, @ssrr={0x89, 0xf, 0x33, [@local, @multicast1, @rand_addr=0x64010102]}, @ssrr={0x89, 0xf, 0x44, [@private=0xa010100, @broadcast, @multicast2]}]}}}, @ip_ttl={{0x14, 0x0, 0x2, 0x5}}], 0x1c0}}, {{&(0x7f0000006d00)={0x2, 0x4e23, @broadcast}, 0x10, &(0x7f0000006f40)=[{&(0x7f0000006d40)="6a0a9f", 0x3}, {&(0x7f0000006d80)="d901ff8982508a64528e0c0a7f677d38813c3c1a", 0x14}, {&(0x7f0000006dc0)="f156c0e226d2705ca81ccd4a073335bc059030bf165afc357f3a8818c59fa81d12fb188fb4c5c9246112d40e360645cc3fa602574dac40779489ff3ba1bf5506c242ef0d374fa4dc3c2a8bd33ec1b65c44d1dbbfe6234c28f65970a4df3561e4f05b643097ab71699804892a446d28d5c5a0e28f4dc2c9dca8e5b43108440d449f7cdef1e5e0fa91f6002c0d902c6946abb573790cd60d8c802b419ecb0cf239c10892096256b4e4c74bed849bc529a41fb2e8975b9f46fdbbcd66d40fba8fe6d3c58fa4af4d09dcdb4d6e0de60e44d4932bd5035fb487a5799baca6c584d62ad57b59", 0xe3}, {&(0x7f0000006ec0)="fbb810b2255ac3310d3ec54a5297e4bf707ac2d5a74239cee2e68ad32b45a4693ccb6d367060b3c32f7510610b3ea60460729bab933184b20cb8", 0x3a}], 0x4, &(0x7f0000006f80)=[@ip_tos_u8={{0x11, 0x0, 0x1, 0x5}}, @ip_tos_int={{0x14}}, @ip_retopts={{0x10}}, @ip_tos_u8={{0x11, 0x0, 0x1, 0x5}}, @ip_tos_u8={{0x11}}], 0x70}}], 0x8, 0x0) 10m58.05042601s ago: executing program 4 (id=1698): r0 = socket$inet(0x2, 0x3, 0x11) setsockopt$IP_VS_SO_SET_ZERO(r0, 0x0, 0x4, 0x0, 0x0) setsockopt$inet_opts(r0, 0x0, 0x3, &(0x7f0000000000)="e4", 0x1) r1 = socket$unix(0x1, 0x5, 0x0) bind$unix(r1, &(0x7f0000000a00)=@file={0x1, './file1\x00'}, 0x6e) listen(r1, 0x3) r2 = syz_io_uring_setup(0x51e, &(0x7f0000000000)={0x0, 0x9e92, 0x10100}, &(0x7f0000000400)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r3, r4, &(0x7f0000000280)=@IORING_OP_ACCEPT={0xd, 0x0, 0x5, r1, 0x0, 0x0, 0x0, 0x800}) io_uring_enter(r2, 0xa3d, 0x0, 0x0, 0x0, 0x0) shutdown(r1, 0x1) syz_open_dev$cec(&(0x7f00000003c0), 0x0, 0x0) r5 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) r6 = syz_open_dev$dri(&(0x7f0000000180), 0x1, 0x0) r7 = syz_open_dev$dri(&(0x7f0000000480), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r7, 0xc02064b2, &(0x7f0000000100)={0x6, 0x1f, 0x6}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r6, 0xc02064b2, &(0x7f00000000c0)={0xdb, 0x1ff, 0xb}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r7, 0xc02064b2, &(0x7f0000000000)={0x7fff, 0x8, 0x100}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r6, 0xc02064b2, &(0x7f0000000080)={0x2, 0x5, 0x3}) r8 = syz_open_dev$dri(&(0x7f0000000180), 0x1, 0x0) r9 = syz_open_dev$dri(&(0x7f0000000180), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r9, 0xc02064b2, &(0x7f0000000340)={0x8, 0x8169, 0x6}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r8, 0xc02064b2, &(0x7f00000000c0)={0xdb, 0x1000, 0xb}) dup(r7) close_range(r5, 0xffffffffffffffff, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x108) r10 = open_tree(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x89901) move_mount(r10, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) chroot(&(0x7f0000000300)='./file0/../file0/../file0/../file0\x00') r11 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r11, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000300)='./file0\x00', 0x0) 10m57.782617699s ago: executing program 4 (id=1701): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000540)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-twofish-avx\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000c18000)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r1 = accept4(r0, 0x0, 0x0, 0x80800) sendmsg$nl_route_sched(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000002d00)=@delchain={0x4e0, 0x65, 0x200, 0x70bd27, 0x25dfdbff, {0x0, 0x0, 0x0, 0x0, {0xd, 0xb}, {0xd, 0x7}, {0xfff1, 0xd}}, [@TCA_RATE={0x6, 0x5, {0x8, 0x4}}, @filter_kind_options=@f_basic={{0xa}, {0x4a8, 0x2, [@TCA_BASIC_POLICE={0x458, 0x4, [@TCA_POLICE_PEAKRATE={0x404, 0x3, [0x8, 0xd39, 0x8000, 0x4, 0x1, 0x7fffffff, 0x6, 0x6, 0x7, 0xffff, 0x3896330b, 0x0, 0x10000, 0x2, 0x8, 0xf, 0x2, 0x2, 0x0, 0x9, 0x7, 0x10001, 0x5, 0xc3, 0x0, 0xe, 0x3, 0x5, 0xf, 0x800, 0xbac, 0x200, 0x5, 0x10, 0x0, 0x9fe, 0x2, 0xfffffffc, 0x0, 0xffffffc0, 0x7, 0x10000, 0x2, 0x7, 0x0, 0x5, 0x100, 0x0, 0x6, 0x3, 0x7ff, 0x4, 0x1000, 0x3, 0x7ff, 0x2, 0x8, 0x1ee, 0x200, 0x2, 0x3ff, 0x102000, 0xffffffdc, 0x0, 0x0, 0xfff, 0xfffffffa, 0x200, 0x9, 0x8, 0xfffffbff, 0x1, 0x19, 0x7, 0x0, 0x8, 0xffffffff, 0x7f, 0x8, 0x3, 0x3, 0x1000, 0x8, 0x2, 0xfffffffe, 0x0, 0x7fffffff, 0x8, 0x5, 0xe, 0x8, 0x3f, 0x81, 0x1, 0x1000, 0x0, 0x3, 0x7, 0x3, 0xcb, 0x5, 0xff, 0x400, 0x3ff, 0x0, 0x8d13, 0xff, 0x5, 0x4, 0x21ad, 0x2, 0x1, 0x8, 0x8001, 0x1, 0x80000001, 0x1ff, 0x10000, 0x5, 0x101, 0xb4b4, 0x3, 0x1, 0xc, 0x8, 0x2, 0x80000000, 0x8000, 0x8, 0x1, 0x9, 0x4, 0x7, 0x6, 0xc2c9, 0x7, 0x1e9, 0x4, 0x0, 0x4, 0xfffffffa, 0x80000001, 0xff, 0xfffffffb, 0x400, 0xb0d, 0x7, 0xffffb6f2, 0xe, 0x4, 0xe, 0x5, 0x80000000, 0x8a3, 0x2d8, 0x1, 0x6299, 0x7439, 0x1, 0x5, 0x6, 0x400, 0x0, 0x5, 0x9, 0x10000, 0xfffffff6, 0xf, 0xfffffffc, 0x38, 0x5, 0x0, 0x3, 0x5, 0xe, 0x0, 0x252d, 0xfffffffe, 0xfffffffd, 0x3, 0x200, 0x0, 0x4000000, 0x9, 0xfffffff7, 0x0, 0x2, 0xf, 0x5, 0x8, 0x3, 0x6, 0x1, 0x8, 0x4, 0x0, 0xfffffff7, 0x0, 0x7, 0x431e, 0x0, 0x8000000, 0x2, 0x831, 0x180000, 0x1, 0x8a1, 0x5, 0x5, 0x8, 0xffff8000, 0xffffc917, 0x9, 0x4, 0x4085, 0x40, 0x80000000, 0xdc42, 0x0, 0x7, 0xffffff7d, 0xf805, 0x6, 0x45, 0x2, 0x0, 0x8, 0x200, 0x0, 0xfffff8fe, 0x1, 0x5, 0x2, 0xffffffff, 0x4, 0x4, 0x4, 0x10000, 0x0, 0x1, 0x0, 0xfff, 0x8, 0x81d, 0x45a, 0x3, 0x2, 0x7fdde78e, 0x7f, 0x80, 0x5, 0x3, 0x7, 0x80, 0x7993]}, @TCA_POLICE_AVRATE={0x8, 0x4, 0x80}, @TCA_POLICE_PEAKRATE64={0xc, 0x9, 0x7}, @TCA_POLICE_TBF={0x3c, 0x1, {0x470, 0x7fffffffdffffffd, 0xbfc1, 0x7, 0x9, {0x8, 0x1, 0x0, 0x8, 0x1, 0x8}, {0x5, 0x0, 0x2a97, 0x3d, 0x1, 0x9356b6f}, 0x2, 0x1, 0x2}}]}, @TCA_BASIC_EMATCHES={0x4}, @TCA_BASIC_CLASSID={0x8, 0x1, {0xb, 0x6}}, @TCA_BASIC_EMATCHES={0x40, 0x2, 0x0, 0x1, [@TCA_EMATCH_TREE_LIST={0x24, 0x2, 0x0, 0x1, [@TCF_EM_META={0xc, 0x1, 0x0, 0x0, {{0x200, 0x4, 0xffff}}}, @TCF_EM_META={0x14, 0x1, 0x0, 0x0, {{0x9c73, 0x4, 0x9}, [@TCA_EM_META_LVALUE={0x4}, @TCA_EM_META_RVALUE={0x4}]}}]}, @TCA_EMATCH_TREE_HDR={0x8, 0x1, {0x6}}, @TCA_EMATCH_TREE_HDR={0x8, 0x1, {0x1}}, @TCA_EMATCH_TREE_HDR={0x8, 0x1, {0xfff7}}]}]}}]}, 0x4e0}, 0x1, 0x0, 0x0, 0x4000}, 0xc050) recvmsg$can_raw(r1, &(0x7f0000000340)={0x0, 0xf00, &(0x7f00000005c0)=[{&(0x7f0000000ac0)=""/4096, 0x1000}], 0x1}, 0x40) 10m56.786214282s ago: executing program 4 (id=1704): bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x1, 0x4, &(0x7f0000000080)=ANY=[@ANYBLOB="b4050000000000007110180000000000ce050000000000009500700000000000"], &(0x7f0000003ff6)='GPL\x00', 0x7, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f00000000c0), 0xfffffee3, 0x10, &(0x7f0000000000), 0x2b2}, 0x48) 10m56.345340745s ago: executing program 33 (id=1704): bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x1, 0x4, &(0x7f0000000080)=ANY=[@ANYBLOB="b4050000000000007110180000000000ce050000000000009500700000000000"], &(0x7f0000003ff6)='GPL\x00', 0x7, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f00000000c0), 0xfffffee3, 0x10, &(0x7f0000000000), 0x2b2}, 0x48) 6.922484656s ago: executing program 1 (id=3634): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0600000004000000ff0f000007"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000240)={&(0x7f0000000380)='neigh_update\x00', r1}, 0x10) r2 = socket$inet6(0x10, 0x3, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000340)={&(0x7f0000000380)='neigh_update\x00', r3}, 0x18) sendto$inet6(r2, &(0x7f00000000c0)="900000001c001f4d154a817393278bff0a80a578020000000104740014000100ac1414bb0542d6401051a2d708f37ac8da1a297e0099c5ac0000c5b068d0bf46d323456536016466fcb78dcaaf6c3efed495a46215be0000760700c0c80cefd28581d158ba86c9d2896c6d3bca2d0000000b0015009e49a6560641263da4de1df32c1739d7fbee9aa241731ae9e0b390", 0x90, 0x0, 0x0, 0x0) 6.58161353s ago: executing program 1 (id=3636): prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000280)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeea, 0x8031, 0xffffffffffffffff, 0x28f43000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="19000000040000000400000008"], 0x48) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000001500000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r4}, 0x10) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000001c80)={{r3}, &(0x7f0000001c00)=0x8000000, &(0x7f0000001c40)=r4}, 0x20) r5 = syz_open_procfs(0x0, &(0x7f00000000c0)='net/igmp\x00') pread64(r5, &(0x7f0000000180)=""/15, 0xfffffe9c, 0xb6) 4.661508146s ago: executing program 2 (id=3647): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0100000004000000080000000d"], 0x48) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=@framed={{0x18, 0x0, 0x0, 0x0, 0x20}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r0}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='tlb_flush\x00', r1}, 0x10) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000300)=ANY=[@ANYBLOB="180000000000004000000000000000001801000020786c3500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000020850000002d000000850000002a00000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000a40)={&(0x7f00000002c0)='tlb_flush\x00', r2}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x3, &(0x7f0000000080)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}}, &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x1d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 4.473995023s ago: executing program 2 (id=3648): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x7, 0x3, &(0x7f0000000000)=@framed={{0x6a, 0xa, 0x0, 0xff00, 0x0, 0x61, 0x10, 0xb4}, [], {0x95, 0x0, 0x1800}}, &(0x7f0000000240)='syzkaller\x00'}, 0x90) socket$nl_generic(0x10, 0x3, 0x10) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_STRSET_GET(r0, &(0x7f0000000840)={0x0, 0x0, &(0x7f0000000800)={&(0x7f00000002c0)=ANY=[@ANYBLOB='H\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="0100d0000000fbdbdf25010000001800018014000200766574683100000000000000000000001c0002800c00018008000100030000000c000180080001"], 0x48}, 0x1, 0x0, 0x0, 0x840}, 0x4008800) getsockopt$inet_pktinfo(0xffffffffffffffff, 0x0, 0x8, &(0x7f0000000080)={0x0, @rand_addr, @initdev}, &(0x7f00000000c0)=0xc) r2 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f00000000c0)={'bridge_slave_0\x00'}) socket$nl_route(0x10, 0x3, 0x0) socket$nl_route(0x10, 0x3, 0x0) socketpair(0x1, 0x20000000000001, 0x0, 0x0) getsockname$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000400)=0x14) openat$full(0xffffffffffffff9c, &(0x7f0000000000), 0x400001, 0x0) r3 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000a80)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000001340)={0x11, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r3, @ANYBLOB="0000000004000000b705000008000000850000006a00000095"], &(0x7f0000000200)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x28, '\x00', 0x0, @fallback=0x2d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='kfree\x00', r4}, 0x10) syz_emit_ethernet(0x1de, &(0x7f0000000000)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaaaaaaaaa86dd606410a601a80000fc020000000000000000000000000000fe8000000000000000000000000000aa22340502c9a431"], 0x0) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b00000000000000"], 0x48) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r5 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[], 0x48) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000800000000bf91000000000000b702000043e7b5538500000085000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={0x0, r6}, 0x18) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x11, 0x6, &(0x7f0000000cc0)=ANY=[@ANYBLOB="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"], &(0x7f0000000080)='GPL\x00', 0x5, 0x29e, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x6}, 0x70) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r7}, 0x10) bpf$PROG_LOAD(0x5, 0x0, 0x0) r8 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r8, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000005c0)=@newsa={0x150, 0x10, 0x413, 0x0, 0x0, {{@in=@multicast1, @in6=@rand_addr=' \x01\x00', 0x0, 0x0, 0x4e24, 0x0, 0x2, 0x0, 0x20, 0x0, 0x0, 0xee00}, {@in6=@ipv4={'\x00', '\xff\xff', @remote}, 0x0, 0x32}, @in=@dev, {0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x20000000008}, {0x0, 0x8, 0xcc}, {0xf6}, 0x0, 0x0, 0xa, 0x1, 0x1}, [@algo_aead={0x60, 0x12, {{'rfc4309(ccm(aes))\x00'}, 0xa0, 0x80, "25cac5216d1c8af0a976902918bf448c5d9f5459"}}]}, 0x150}}, 0x0) r9 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(r9, 0x0, 0x4000054) pselect6(0x40, &(0x7f00000001c0)={0x0, 0x0, 0x3, 0xfffffffffffffffd}, 0x0, &(0x7f00000002c0)={0x3ff, 0x0, 0x0, 0x9, 0x0, 0x0, 0x80000001}, 0x0, 0x0) 4.233741785s ago: executing program 1 (id=3649): getrandom(0x0, 0xf, 0x1) 4.018297088s ago: executing program 1 (id=3651): futex_waitv(&(0x7f0000001d80), 0x0, 0x0, 0x0, 0x0) socket$inet(0x2, 0x3, 0x1) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r1, &(0x7f0000000000), 0x651, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x11, 0xb, &(0x7f0000000240)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020700000000000002030207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000100850000002d00000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x19, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='sched_switch\x00', r2}, 0x10) getpid() socket$nl_route(0x10, 0x3, 0x0) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x8, 0x4, &(0x7f0000002980)=ANY=[@ANYBLOB], 0x0, 0x5, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @cgroup_skb, 0xffffffffffffffff, 0x19, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x94) open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) mprotect(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x1) futex_waitv(0x0, 0x0, 0x0, &(0x7f0000002940), 0x0) mknod(&(0x7f0000000240)='./file3\x00', 0x0, 0x0) utimensat(0xffffffffffffff9c, &(0x7f0000000000)='./file3\x00', &(0x7f0000000040)={{}, {0x0, 0x3fffffff}}, 0x0) 3.915435624s ago: executing program 3 (id=3652): bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={0x0}, 0x18) prlimit64(0x0, 0xe, &(0x7f0000000240)={0x8, 0x248}, 0x0) sched_setscheduler(0x0, 0x1, 0x0) sched_setaffinity(0x0, 0x1, &(0x7f00000002c0)=0x2) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x6) r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) write$binfmt_misc(r0, &(0x7f0000000240), 0xfffffecc) ioctl$TIOCSTI(r0, 0x5412, &(0x7f0000000040)=0x3) 3.540367175s ago: executing program 2 (id=3656): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xb, 0x7, 0x10001, 0x9, 0x1}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000080)='mem_disconnect\x00', r1}, 0x10) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000b80)={{r0}, &(0x7f0000000b00), &(0x7f0000000b40)}, 0x20) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x6, 0x4, &(0x7f0000000100)=@framed={{0x18, 0x2}, [@call={0x85, 0x0, 0x0, 0x41}]}, &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r2, 0x0, 0xe, 0x0, &(0x7f00000003c0)="131c8701feaa16bca4ac74ab821d", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x9}, 0x50) 3.362002641s ago: executing program 2 (id=3658): r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_rx_ring(r0, 0x107, 0x5, &(0x7f0000000040)=@req3={0x1000, 0x3a, 0x1000, 0x3a}, 0x1c) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000fbe000)={0x2, &(0x7f0000000100)=[{0x28, 0x0, 0x0, 0xfffff034}, {0x80000006}]}, 0x10) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) sendto$inet6(r1, 0x0, 0x0, 0x24008844, &(0x7f00000001c0)={0xa, 0x2, 0x398, @empty}, 0x1c) 3.172658079s ago: executing program 2 (id=3660): bpf$ENABLE_STATS(0x20, 0x0, 0x0) r0 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000180), 0x20000, 0x0) timer_create(0x0, &(0x7f0000000200)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x60d3, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(0x0, 0x1, &(0x7f0000000040)={{0x0, 0x3938700}, {0x77359400}}, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x3, 0x3, &(0x7f0000000000)=@framed, 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @sched_cls=0x36, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000200)={r1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2f00, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) read(r0, &(0x7f0000000100)=""/79, 0x4f) 3.092951905s ago: executing program 6 (id=3661): open(&(0x7f0000000180)='./bus\x00', 0x14927e, 0x101) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='cpuset.effective_cpus\x00', 0x275a, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='cpuset.effective_cpus\x00', 0x275a, 0x0) r0 = socket(0x10, 0x803, 0x0) socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000100)) r1 = socket(0x1, 0x803, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, 0x0) sendmsg$nl_route(r0, 0x0, 0x0) r2 = socket(0x10, 0x803, 0x0) r3 = socket(0x1, 0x803, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000300)=@ipv6_newaddr={0x40, 0x14, 0x9535393fea6295a5, 0x0, 0x0, {0xa, 0x0, 0x0, 0x0, r4}, [@IFA_LOCAL={0x14, 0x2, @mcast1={0xff, 0x2}}, @IFA_ADDRESS={0x14, 0x1, @local}]}, 0x40}, 0x1, 0x0, 0x0, 0x8080}, 0x4000) 2.878390766s ago: executing program 6 (id=3662): socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r1, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x0) recvmsg$unix(r0, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f00000000c0), 0x100}, 0x0) r2 = socket$inet(0x2, 0x2, 0x1) sendmsg$inet(r2, &(0x7f0000000600)={&(0x7f0000000040)={0x2, 0xffff, @multicast1}, 0x10, &(0x7f00000000c0)=[{&(0x7f0000000400)='\b\x00', 0x2}, {&(0x7f0000000180)="2d0000008058", 0x6}], 0x2, &(0x7f0000000100)=ANY=[@ANYBLOB="1c000000000000000000000007000000890b040a0101027f00000100000000001c000000000000000000000008"], 0x40}, 0x20040044) 2.720650355s ago: executing program 6 (id=3663): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0x25dfdbfd, {0x0, 0x0, 0x0, r3, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0xf}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x2}}}]}, 0x38}}, 0x0) r4 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) r6 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r6, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000001c0)=@gettclass={0x24, 0x2a, 0x129, 0x0, 0xfffffffd, {0x0, 0x0, 0x0, r5, {0xb, 0xd}, {}, {0x8, 0xfff1}}}, 0x24}}, 0x40004) recvmmsg(r6, &(0x7f0000001480)=[{{0x0, 0x0, 0x0}, 0x5d}], 0x1, 0x10022, 0x0) 2.482856604s ago: executing program 3 (id=3664): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x5, &(0x7f00000002c0)=ANY=[@ANYBLOB="180000000004000000000000000000008500000050000000850000005000000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x78) r1 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='ext4_ext_remove_space_done\x00', r0}, 0x10) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000380)={0x11, 0x5, &(0x7f00000002c0)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='ext4_ext_remove_space_done\x00', r2}, 0x10) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0600000004000000ff0f000007"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000021b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r4}, 0x10) close(r1) 2.194232799s ago: executing program 6 (id=3665): io_submit(0x0, 0x0, 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x3, &(0x7f0000000740)=@framed, &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000040)='kfree\x00', r0}, 0x18) r1 = syz_usb_connect$hid(0x3, 0x36, &(0x7f0000000080)={{0x12, 0x1, 0x110, 0x0, 0x0, 0x0, 0x10, 0x46d, 0xc22d, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0xf0, 0x20, [{{0x9, 0x4, 0x0, 0x1, 0x1, 0x3, 0x0, 0x81657b94fb2d95c8, 0x0, {0x9, 0x21, 0x6, 0x0, 0x1, {0x22, 0x7}}, {{{0x9, 0x5, 0x81, 0x3, 0x40, 0xfd, 0xfc, 0x4}}}}}]}}]}}, 0x0) syz_usb_control_io$hid(r1, 0x0, 0x0) syz_usb_control_io$hid(r1, &(0x7f00000002c0)={0x24, 0x0, 0x0, &(0x7f0000000040)={0x0, 0x22, 0x7, {[@local=@item_4={0x3, 0x2, 0x0, "d25e6fa6"}, @global=@item_012={0x1, 0x1, 0x0, "1c"}]}}, 0x0}, 0x0) 2.191063661s ago: executing program 3 (id=3666): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x13, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x1e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r1}, 0x10) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000000)={'pim6reg1\x00', 0x2}) bpf$MAP_CREATE(0x0, 0x0, 0x50) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) syz_usb_connect$uac1(0x2, 0xdc, &(0x7f0000000100)=ANY=[@ANYBLOB="12010000000000106b1d01014000010203010902ca0003010070000904000000010100000a24010800000201020d24060000030800000000000000240803960c03112d9cd2ce0c240208000103000000ff000924060506020100000924030003030005490c240206"], 0x0) 2.064778941s ago: executing program 1 (id=3667): r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e21, @broadcast}, 0x10) connect$inet(r0, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10) setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, 0x0, 0x0) sendto$inet(r0, &(0x7f0000000000), 0xffffffffffffff94, 0x0, 0x0, 0x11) ioctl$int_in(r0, 0x5452, &(0x7f0000000200)=0xff) shutdown(r0, 0x1) 1.821501875s ago: executing program 5 (id=3668): bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b00000000000000000000000080000000000000", @ANYRES32], 0x48) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="0b000000080000000c0000000000008001"], 0x48) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000000c0), &(0x7f0000000140), 0x5, r0}, 0x38) bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x0, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r0}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xe, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1b, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB, @ANYRES32=r2, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000200)='fdb_delete\x00', r1}, 0x10) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r3, 0x8924, &(0x7f0000000000)={'bridge_slave_0\x00', @random="010000201000"}) 1.743477288s ago: executing program 1 (id=3669): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB, @ANYRES32=r0], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_GET_MAP_INFO(0xf, 0x0, 0x0) prlimit64(0x0, 0xe, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x8) getpid() sched_setaffinity(0x0, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) r3 = syz_open_dev$tty1(0xc, 0x4, 0x3) ioctl$KDSIGACCEPT(r3, 0x5607, 0x4) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000380)={0x11, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="1801000000000000000000000000ea04850000005000000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000040)='sched_switch\x00', r4}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xd, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b40000000000000061148481c1284d00240000f0efffffff950000000000"], &(0x7f0000000000)='syzkaller\x00', 0x5, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sock_ops}, 0x94) getpid() capset(&(0x7f0000000040)={0x20080522}, &(0x7f0000000080)) ptrace(0x10, 0x0) wait4(0x0, 0x0, 0x20000002, 0x0) 1.644909809s ago: executing program 5 (id=3670): bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="01"], 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000070000001801000020756c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000a5df850000002d00000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f0000000780)={0xd, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000000008500000022000000180100002020702500000000002020207b0af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000"], 0x0, 0x0, 0x0, 0x0, 0x40e00, 0x10, '\x00', 0x0, @sock_ops=0x3, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18090000000000000000000000000000850000006d0000001801000020696c2500000000002020097b1af8ff00000000bfa100000000000007010000b8ffffffb702000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000980)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x17, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000940)={&(0x7f0000000640)='console\x00', r0}, 0x10) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000940)={&(0x7f0000000640)='console\x00', r1}, 0x10) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000000040)={'macsec0\x00', @random="06517dc2e6ea"}) 1.493453946s ago: executing program 5 (id=3671): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x4, 0xe, &(0x7f00000015c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000)={0x2}, 0x8, 0x10, &(0x7f0000000100), 0x10}, 0x57) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x11, 0x6, &(0x7f0000001c40)=ANY=[@ANYBLOB="050000000000000061110c00000000008510000002000000850000000500000095000000000000009500a5050000000077d8f3b423cdac8d80000000000000002be16ad10a48b243ccc42606d25dfd73a015e0ca7fc2506a0f7535f7866907dc6751dfb265a0e3ccae669e17fd6587d452d6453559c3421eed73d56615fe6c54c3b3ffe1b4ce25d7c983c044c03bf3a48dfe47ec9dd6c091c30b93bfae76d9ebacd3ed3e26e7a23129d6606fd28a69989d552af9cc9e5ef6bda9df2c3af36effff9af2551ce935b0f327cb3f011a2fd52347125907000000000000003ed38ae89d24e1cebfba2f87925bfacba83109751fe6c05405d027edd68149ee99eef6a6992308a4fc0b7c70bc677d6dd4aed4af7511d7900a820b6347184e9a217b5614cd50cbe43a1ed2526814bc0000e9e086ce48e90defb6670c3df262ad0a97aec7291c25447c106a99893e10db21901eb397b2f5fd71d20fa7a050fbbef9e326ea27e513e96068fd1e8a43e89f9c85c822a961546ed5363c17ff1432d08806bc376e3e49ee52b59d13182e1f24ed200ada12f7a1525320e716660000000000b02b001500a710eb1affb87ba55b2d72078e9f40b4ae7d01000000d11cd22c35d3294000000000000000000000000000000000000000000000000000000000000000000000000c52f4ebd2c893bb97a068bd10738d3c9f7a98eccb26f7e2df3ad37b729ac83b0dcb4f48f3c3356b9997fc455a17690b6f7f9ccbe4b1701941b18a904c0e585a66c3b84b138efc20a546d3d5227e23b03f2a834391ad24fe977076ce7d9b20cf92cb151763d41f5c76e2ff3e93ee296c4082ee73e7e197253a2b66c353312c9d75711ce1623e9c54bdff59d1a69dcb7d84c235b23a4480c2461b405cfd1a38992f295ad3adc94cd07c850d1c77a211bfa02c24e9280333152fb794e4ddea02017a6c139b50101caecaf2abc084075ad10727522934a87a4ddcdb112754ca5bdec0ead14b6c0f19a4b126bbe0c2b8c9ff68236c8600000000000000000000000066e034c81c3cab4e33fc8dc55ce0ada18dcb1a47a87baf63e4edf11c6e82893add3bee3e10fc873d1d922b0877cbcd95b839d3059d5140a1f742f6e75741e39e5cb6a193e06a1043375b0f61b5d4e17c81baa31b924d84f2243471221c158ae8f44bfbfa7c2730302b66a99f66705b71e6205e7cbf36435e1eabb9a63fcd604d5cc27e1317ad94cf438d7187a2fe4e06fa6cbf84ef1efa82cb2c4af6bd1370616cdbe2b98fd89b79824ba089df1f81e6fcef073059f5f1d6a221d791839d7826ed1759c2153532c393fd1bd7be2e7f5abf2f0800000000ea46c07adee10d0f2bc85cf37182256e4fd8f56942726efc07180eaa5421d697665c8bacd39cdb392e6153af80bc1a69e3bfab032e78c9a96eab13be845a0d44ef2a4ab414ac2e4802a3b5d3aa2a4a4fc259206d97d0cc1602d6b45ff414c53fc9f5f68438f0423e168a97923ca0464b40b2f797841fb2bb2e5ad9feff37220ab7c34f4c382c247e7735adb55c209f7c0f8880733dbd3f5a095cc6a2"], &(0x7f0000000080)='GPL\x00', 0x5, 0x29e, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x6}, 0x70) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r1}, 0x10) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r0, 0x702, 0xe, 0xff0f, &(0x7f0000000540)="e460334470b8d480eb20c15286dd", 0x0, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 1.368410945s ago: executing program 5 (id=3672): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) r1 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000540)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x5}, 0x2f) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x15, 0x1c, &(0x7f0000000000)=@ringbuf={{0x18, 0x8}, {{0x18, 0x1, 0x1, 0x0, r1}, {}, {0x7, 0x0, 0xb, 0x6, 0x0, 0x0, 0x5}, {0x85, 0x0, 0x0, 0x5}}, {{0x5, 0x0, 0x3}}, [@snprintf={{0x7, 0x0, 0xb, 0x2}, {0x3, 0x3, 0x3, 0xa, 0x9}, {0x5, 0x0, 0x6, 0x9}, {0x3, 0x3, 0x3, 0xa, 0xa}, {0x5, 0x1, 0xa, 0x9, 0x9, 0x0, 0x10000000}, {0x7, 0x0, 0x0, 0x8}, {}, {}, {0x7, 0x0, 0xc}, {0x18, 0x6, 0x2, 0x0, r0}, {}, {0x46, 0x8, 0xfff0, 0x76}}], {{0x7, 0x1, 0xb, 0x8}, {0x6, 0x0, 0x5, 0x8}, {0x85, 0x0, 0x0, 0x7}}}, &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_reuseport, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) 1.072448821s ago: executing program 5 (id=3673): r0 = socket$nl_route(0x10, 0x3, 0x0) close(0x3) r1 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r1, 0x11b, 0x4, &(0x7f00000000c0)={&(0x7f0000000000)=""/74, 0x328000, 0x1000}, 0x1c) setsockopt$XDP_UMEM_COMPLETION_RING(r1, 0x11b, 0x6, &(0x7f0000000080)=0x1, 0x4) r2 = socket$inet6_udplite(0xa, 0x2, 0x88) setsockopt$XDP_RX_RING(r1, 0x11b, 0x2, &(0x7f0000001980)=0x100, 0x4) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r2, 0x8933, &(0x7f0000000580)={'batadv_slave_1\x00', 0x0}) setsockopt$XDP_UMEM_FILL_RING(r1, 0x11b, 0x5, &(0x7f0000000300)=0x1, 0x4) bind$xdp(r1, &(0x7f0000000100)={0x2c, 0x0, r3}, 0x10) sendmsg$nl_route_sched(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000001c0)={0x0}}, 0x0) 679.908201ms ago: executing program 5 (id=3674): socket$inet(0x10, 0x3, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f00000001c0)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x6770c000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, 0x0, 0x0) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000006900000000000001000000940000000fad413e850000000700000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r3}, 0x10) getpid() r4 = socket$packet(0x11, 0x2, 0x300) getsockopt$packet_int(r4, 0x107, 0xf, 0x0, 0x0) connect$unix(0xffffffffffffffff, &(0x7f0000000840)=@abs={0x0, 0x0, 0x4e20}, 0x6e) 545.578335ms ago: executing program 3 (id=3675): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0500000004000000ff0f000007"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x20, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @netfilter, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r1}, 0x10) r2 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$UI_DEV_SETUP(r2, 0x405c5503, &(0x7f0000000280)={{0x0, 0x0, 0x3, 0x1}, 'syz1\x00', 0x10}) 362.393261ms ago: executing program 3 (id=3676): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x16, 0x0, 0x4, 0x1, 0x0, 0x1}, 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffffffe}, 0x94) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x12, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000040)='mm_page_alloc\x00', r3}, 0x10) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) 327.37416ms ago: executing program 6 (id=3677): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000080000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="0b00000005000000000400000d00000001"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000800000000000000000000018110000", @ANYRES32=r0], 0x0, 0x0, 0x0, 0x0, 0x0, 0x54, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x4, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='sys_enter\x00', r1}, 0x18) clock_getres(0x1, 0x0) 172.561821ms ago: executing program 6 (id=3678): r0 = accept$inet6(0xffffffffffffffff, 0x0, 0x0) sendmsg$NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}, 0x1, 0x0, 0x0, 0x4000}, 0x80) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, 0x0) r1 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r1, 0xc0502100, 0x0) fcntl$lock(0xffffffffffffffff, 0x24, 0x0) setsockopt$sock_attach_bpf(r0, 0x1, 0x32, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) sendmsg$NL80211_CMD_DEL_PMK(0xffffffffffffffff, 0x0, 0x41) bpf$MAP_CREATE(0x0, 0x0, 0x48) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r2 = gettid() timer_create(0x1, &(0x7f00000002c0)={0x0, 0x21, 0x800000000004, @tid=r2}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x1, &(0x7f0000000340)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) r3 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000100), 0x40200, 0x0) preadv2(r3, &(0x7f0000000180)=[{&(0x7f0000000000)=""/167, 0xa7}], 0x1, 0x4, 0x4, 0x1) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) rmdir(0x0) 10.404338ms ago: executing program 3 (id=3679): sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x40) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x15, 0xc, 0x0, &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x21}, 0x94) r0 = syz_open_dev$evdev(&(0x7f0000001540), 0x0, 0x80000) ioctl$EVIOCGLED(r0, 0x5452, &(0x7f0000000240)=""/77) ioctl$EVIOCSFF(0xffffffffffffffff, 0x40304580, &(0x7f0000000180)={0x57, 0x0, 0x0, {0xfffe, 0x1}, {0x74, 0x2}, @const={0x6, {0x7f, 0x0, 0x8000, 0xfffd}}}) r1 = syz_open_dev$evdev(&(0x7f00000000c0), 0x78, 0x822b01) write$char_usb(r1, &(0x7f0000000040)="e2", 0x1068) 0s ago: executing program 2 (id=3680): bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000680)={0x3, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xffffffff}, 0x94) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB="1e0000000000000004000000ff"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000540)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x6, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socket$netlink(0x10, 0x3, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000000)={r1, 0x2000002, 0xe, 0xfffffffffffffda9, &(0x7f0000000200)="63eced8e46dc3f0adf33c9f7b986", 0x0, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) kernel console output (not intermixed with test programs): 1113.018166][ T5947] usb 2-1: Product: syz [ 1113.051596][T13215] gspca_topro: Sensor soi763a [ 1113.056541][ T5947] usb 2-1: Manufacturer: syz [ 1113.122726][T13215] usb 3-1: USB disconnect, device number 69 [ 1113.148848][ T5947] cdc_wdm 2-1:1.0: skipping garbage [ 1113.191615][ T5947] cdc_wdm 2-1:1.0: skipping garbage [ 1113.197458][T14322] usb 7-1: new high-speed USB device number 91 using dummy_hcd [ 1113.238274][ T5947] cdc_wdm 2-1:1.0: cdc-wdm0: USB WDM device [ 1113.262861][ T5947] cdc_wdm 2-1:1.0: Unknown control protocol [ 1113.335751][ T92] usb 6-1: USB disconnect, device number 6 [ 1113.375862][T14322] usb 7-1: Using ep0 maxpacket: 16 [ 1113.423538][T14322] usb 7-1: New USB device found, idVendor=05d1, idProduct=2001, bcdDevice=29.00 [ 1113.453344][T14322] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1113.506254][T14322] usb 7-1: Product: syz [ 1113.510497][T14322] usb 7-1: Manufacturer: syz [ 1113.551038][T14322] usb 7-1: SerialNumber: syz [ 1113.566669][T14322] usb 7-1: config 0 descriptor?? [ 1113.591187][T14322] ftdi_sio 7-1:0.0: FTDI USB Serial Device converter detected [ 1113.665392][T14322] usb 7-1: Detected FT4233HP [ 1113.743989][T19226] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1113.771920][T19226] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1113.796195][T15014] f81534 4-1:0.12: f81534_set_register: reg: 1002 data: 2f failed: -71 [ 1113.829528][T15014] f81534 4-1:0.12: f81534_find_config_idx: read failed: -71 [ 1113.852609][T15014] f81534 4-1:0.12: f81534_calc_num_ports: find idx failed: -71 [ 1113.877160][T15014] f81534 4-1:0.12: probe with driver f81534 failed with error -71 [ 1113.904744][T19231] __nla_validate_parse: 1 callbacks suppressed [ 1113.904764][T19231] netlink: 16 bytes leftover after parsing attributes in process `syz.2.3160'. [ 1113.936127][T15014] usb 4-1: USB disconnect, device number 90 [ 1114.123540][T19231] bond0: entered promiscuous mode [ 1114.146341][T19231] bond_slave_0: entered promiscuous mode [ 1114.159285][T19231] bond_slave_1: entered promiscuous mode [ 1114.180963][T19231] bond0: left promiscuous mode [ 1114.187846][T19231] bond_slave_0: left promiscuous mode [ 1114.194728][T19231] bond_slave_1: left promiscuous mode [ 1114.923933][T15014] usb 4-1: new high-speed USB device number 91 using dummy_hcd [ 1115.092606][T15014] usb 4-1: Using ep0 maxpacket: 16 [ 1115.094561][T13215] usb 2-1: USB disconnect, device number 50 [ 1115.660347][T19238] : renamed from bond0 (while UP) [ 1115.942828][T13215] usb 3-1: new low-speed USB device number 70 using dummy_hcd [ 1116.105018][T14322] ftdi_sio ttyUSB0: Unable to read latency timer: -71 [ 1116.142169][ T1307] ieee802154 phy0 wpan0: encryption failed: -22 [ 1116.157596][ T1307] ieee802154 phy1 wpan1: encryption failed: -22 [ 1116.202875][T14322] ftdi_sio ttyUSB0: Unable to write latency timer: -71 [ 1116.243452][T14322] usb 7-1: FTDI USB Serial Device converter now attached to ttyUSB0 [ 1116.263966][T13215] usb 3-1: unable to get BOS descriptor or descriptor too short [ 1116.340078][T13215] usb 3-1: config 1 contains an unexpected descriptor of type 0x1, skipping [ 1116.359917][T14322] usb 7-1: USB disconnect, device number 91 [ 1116.427277][T13215] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1116.468090][T14322] ftdi_sio ttyUSB0: FTDI USB Serial Device converter now disconnected from ttyUSB0 [ 1116.493653][T13215] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 1116.514297][T14322] ftdi_sio 7-1:0.0: device disconnected [ 1116.535069][T13215] usb 3-1: string descriptor 0 read error: -22 [ 1116.556855][T13215] usb 3-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 1116.747557][T13215] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1117.048744][T13215] usb 3-1: 0:2 : does not exist [ 1117.162906][ T5961] usb 6-1: new full-speed USB device number 7 using dummy_hcd [ 1117.325899][ T5961] usb 6-1: New USB device found, idVendor=0c72, idProduct=0012, bcdDevice=22.96 [ 1117.346760][ T5961] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1117.391703][ T5961] usb 6-1: Product: syz [ 1117.405573][ T5961] usb 6-1: Manufacturer: syz [ 1117.412919][ T5961] usb 6-1: SerialNumber: syz [ 1117.435965][ T5961] usb 6-1: config 0 descriptor?? [ 1117.523013][T19238] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1117.572833][T19238] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1117.584537][ T24] usb 3-1: USB disconnect, device number 70 [ 1117.721363][ T5961] peak_usb 6-1:0.0: PEAK-System PCAN-USB FD v202 fw v73.248.106 (1 channels) [ 1118.664964][T19274] netlink: 24 bytes leftover after parsing attributes in process `syz.6.3172'. [ 1118.918605][T15014] usb 4-1: unable to get BOS descriptor or descriptor too short [ 1118.943439][T15014] usb 4-1: unable to read config index 0 descriptor/start: -71 [ 1119.002656][T15014] usb 4-1: can't read configurations, error -71 [ 1119.015452][T19286] syzkaller1: entered promiscuous mode [ 1119.133062][T19289] netlink: 'syz.2.3173': attribute type 1 has an invalid length. [ 1119.146026][T19286] syzkaller1: entered allmulticast mode [ 1119.472669][ T24] usb 2-1: new high-speed USB device number 51 using dummy_hcd [ 1119.646753][ T24] usb 2-1: Using ep0 maxpacket: 32 [ 1119.659733][ T24] usb 2-1: config 0 interface 0 altsetting 0 bulk endpoint 0x85 has invalid maxpacket 219 [ 1119.981327][T19302] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3179'. [ 1120.024302][T19287] batman_adv: batadv0: Adding interface: dummy0 [ 1120.030764][T19287] batman_adv: batadv0: The MTU of interface dummy0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1120.075555][ T24] usb 2-1: New USB device found, idVendor=0499, idProduct=1010, bcdDevice= 5.f5 [ 1120.077629][T19287] batman_adv: batadv0: Interface activated: dummy0 [ 1120.121389][ T24] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1120.140198][ T24] usb 2-1: Product: syz [ 1120.168842][ T24] usb 2-1: Manufacturer: syz [ 1120.178876][ T24] usb 2-1: SerialNumber: syz [ 1120.221518][ T24] usb 2-1: config 0 descriptor?? [ 1120.238172][T19290] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 1120.431411][ T24] usb 2-1: Quirk or no altset; falling back to MIDI 1.0 [ 1121.043085][ T24] usb 2-1: USB disconnect, device number 51 [ 1121.156095][ T5960] udevd[5960]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1123.092789][T15014] usb 3-1: new high-speed USB device number 71 using dummy_hcd [ 1123.252820][T15014] usb 3-1: Using ep0 maxpacket: 32 [ 1123.263533][T15014] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1123.276623][T15014] usb 3-1: New USB device found, idVendor=05da, idProduct=009a, bcdDevice=62.95 [ 1123.292727][T15014] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1123.303450][T19337] netlink: 80 bytes leftover after parsing attributes in process `syz.3.3188'. [ 1123.492826][T13215] usb 2-1: new high-speed USB device number 52 using dummy_hcd [ 1123.567636][T15014] usb 3-1: Product: syz [ 1123.628037][T15014] usb 3-1: Manufacturer: syz [ 1123.642949][T15014] usb 3-1: SerialNumber: syz [ 1123.677165][T15014] usb 3-1: config 0 descriptor?? [ 1123.852706][T13215] usb 2-1: Using ep0 maxpacket: 16 [ 1123.977047][T15014] microtek usb (rev 0.4.3): expecting 3 got 0 endpoints! Bailing out. [ 1124.194344][ T5947] usb 3-1: USB disconnect, device number 71 [ 1124.852757][ T10] usb 4-1: new high-speed USB device number 93 using dummy_hcd [ 1125.022692][ T10] usb 4-1: Using ep0 maxpacket: 32 [ 1125.084331][ T10] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1125.199884][ T10] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1125.271413][ T10] usb 4-1: New USB device found, idVendor=0c45, idProduct=760b, bcdDevice= 0.00 [ 1125.405653][ T10] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1125.484149][ T10] usb 4-1: config 0 descriptor?? [ 1125.987213][ T10] redragon 0003:0C45:760B.002C: hidraw0: USB HID v0.02 Device [HID 0c45:760b] on usb-dummy_hcd.3-1/input0 [ 1126.420404][ T5961] peak_usb 6-1:0.0 can0: unable to request usb[type=2 value=5] err=-71 [ 1126.462855][ T5961] peak_usb 6-1:0.0: unable to tell PCAN-USB FD driver is loaded (err -71) [ 1126.628466][ T5961] peak_usb 6-1:0.0: probe with driver peak_usb failed with error -71 [ 1126.711141][ T5961] usb 6-1: USB disconnect, device number 7 [ 1127.566663][T13215] usb 2-1: unable to get BOS descriptor or descriptor too short [ 1127.625265][T13215] usb 2-1: unable to read config index 0 descriptor/start: -71 [ 1127.684531][T13215] usb 2-1: can't read configurations, error -71 [ 1127.726550][ T24] usb 4-1: USB disconnect, device number 93 [ 1128.282693][ T24] usb 4-1: new high-speed USB device number 94 using dummy_hcd [ 1128.612761][ T24] usb 4-1: Using ep0 maxpacket: 8 [ 1128.740950][ T24] usb 4-1: config 1 interface 0 altsetting 10 bulk endpoint 0x82 has invalid maxpacket 64 [ 1128.791569][ T24] usb 4-1: config 1 interface 0 altsetting 10 bulk endpoint 0x3 has invalid maxpacket 8 [ 1128.802235][ T24] usb 4-1: config 1 interface 0 altsetting 10 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 1128.882553][ T24] usb 4-1: config 1 interface 0 has no altsetting 0 [ 1128.918644][ T24] usb 4-1: New USB device found, idVendor=0565, idProduct=a4a1, bcdDevice= 0.40 [ 1128.935735][ T24] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1128.958870][ T24] usb 4-1: Product: syz [ 1128.972584][ T24] usb 4-1: Manufacturer: з [ 1129.028554][T19406] netlink: 4 bytes leftover after parsing attributes in process `syz.6.3209'. [ 1129.037537][T13215] usb 2-1: new high-speed USB device number 54 using dummy_hcd [ 1129.420346][T13215] usb 2-1: Using ep0 maxpacket: 32 [ 1129.441703][T13215] usb 2-1: config 0 has an invalid descriptor of length 122, skipping remainder of the config [ 1129.460407][ T24] usb 4-1: SerialNumber: syz [ 1129.538721][T13215] usb 2-1: New USB device found, idVendor=22b8, idProduct=6027, bcdDevice=c2.80 [ 1129.564975][T19388] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 1129.574518][T19388] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 1129.632324][T13215] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1129.648958][T13215] usb 2-1: Product: syz [ 1129.657869][T13215] usb 2-1: Manufacturer: syz [ 1129.672667][ T10] usb 3-1: new high-speed USB device number 72 using dummy_hcd [ 1129.688686][T13215] usb 2-1: SerialNumber: syz [ 1129.751751][T13215] usb 2-1: config 0 descriptor?? [ 1129.815553][T13215] usb 2-1: bad CDC descriptors [ 1129.821953][T13215] usb 2-1: unsupported MDLM descriptors [ 1129.833941][T19388] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1129.843715][T19388] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1129.862918][ T10] usb 3-1: config 27 has an invalid descriptor of length 0, skipping remainder of the config [ 1129.894250][ T10] usb 3-1: config 27 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 2 [ 1129.935994][ T24] cdc_ether 4-1:1.0: probe with driver cdc_ether failed with error -71 [ 1130.020101][ T24] usb 4-1: USB disconnect, device number 94 [ 1130.021884][ T10] usb 3-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 1130.086584][ T10] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1130.137348][ T10] usb 3-1: Quirk or no altset; falling back to MIDI 1.0 [ 1130.199062][T19412] netlink: 80 bytes leftover after parsing attributes in process `syz.5.3212'. [ 1130.304744][ T10] snd-usb-audio 3-1:27.0: probe with driver snd-usb-audio failed with error -2 [ 1130.339940][T19409] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1130.350860][T19409] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1130.388320][T19409] delete_channel: no stack [ 1130.437398][ T8374] udevd[8374]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:27.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1130.483438][ T10] usb 3-1: USB disconnect, device number 72 [ 1131.142627][ T24] usb 4-1: new high-speed USB device number 95 using dummy_hcd [ 1131.325835][ T24] usb 4-1: Using ep0 maxpacket: 16 [ 1132.401987][ T10] usb 2-1: USB disconnect, device number 54 [ 1133.114781][ T92] usb 2-1: new high-speed USB device number 55 using dummy_hcd [ 1133.363206][ T92] usb 2-1: Using ep0 maxpacket: 32 [ 1133.454459][ T92] usb 2-1: config 0 interface 0 altsetting 0 bulk endpoint 0x85 has invalid maxpacket 1024 [ 1133.529542][ T92] usb 2-1: New USB device found, idVendor=12d8, idProduct=0001, bcdDevice=de.79 [ 1133.572365][ T92] usb 2-1: New USB device strings: Mfr=1, Product=236, SerialNumber=2 [ 1133.618929][ T92] usb 2-1: Product: syz [ 1133.638680][ T92] usb 2-1: Manufacturer: syz [ 1133.660590][ T92] usb 2-1: SerialNumber: syz [ 1133.710135][ T92] usb 2-1: config 0 descriptor?? [ 1133.739706][T19439] raw-gadget.1 gadget.1: fail, usb_ep_enable returned -22 [ 1134.088804][T19438] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1134.113036][T19438] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1134.253537][ T5961] usb 2-1: USB disconnect, device number 55 [ 1135.077873][T19461] netlink: 80 bytes leftover after parsing attributes in process `syz.1.3224'. [ 1135.338607][ T24] usb 4-1: unable to get BOS descriptor or descriptor too short [ 1135.397353][ T24] usb 4-1: unable to read config index 0 descriptor/start: -71 [ 1135.423388][ T24] usb 4-1: can't read configurations, error -71 [ 1137.566318][T19485] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3227'. [ 1137.831238][ T9227] bond7 (unregistering): (slave ip6gre1): Releasing backup interface [ 1137.848197][ T9227] ip6gre1 (unregistering): left promiscuous mode [ 1138.003106][T19493] fuse: Unknown parameter '0x0000000000000004' [ 1138.683059][ T51] Bluetooth: hci4: command 0x0406 tx timeout [ 1139.058839][T19509] netlink: 80 bytes leftover after parsing attributes in process `syz.5.3236'. [ 1139.858393][ T9227] bond4 (unregistering): (slave bridge8): Releasing backup interface [ 1139.866852][ T9227] bridge8 (unregistering): left promiscuous mode [ 1140.661033][T19516] i2c i2c-0: Invalid block write size 34 [ 1140.977957][ T9227] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1141.011951][ T9227] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1141.025609][ T9227] bond0 (unregistering): Released all slaves [ 1141.049492][ T9227] bond1 (unregistering): Released all slaves [ 1141.077341][ T9227] bond2 (unregistering): Released all slaves [ 1141.300047][ T9227] bond3 (unregistering): Released all slaves [ 1141.591454][ T9227] bond4 (unregistering): Released all slaves [ 1141.617377][ T9227] bond5 (unregistering): Released all slaves [ 1141.838736][ T9227] bond6 (unregistering): Released all slaves [ 1142.105951][ T9227] bond7 (unregistering): Released all slaves [ 1142.449108][ T9227] tipc: Left network mode [ 1142.694270][ T10] usb 4-1: new high-speed USB device number 97 using dummy_hcd [ 1142.882584][ T10] usb 4-1: Using ep0 maxpacket: 16 [ 1142.892087][ T10] usb 4-1: config 0 has an invalid interface number: 251 but max is 0 [ 1142.933983][ T10] usb 4-1: config 0 has no interface number 0 [ 1142.940165][ T10] usb 4-1: config 0 interface 251 altsetting 0 bulk endpoint 0x4 has invalid maxpacket 16 [ 1142.964114][ T10] usb 4-1: config 0 interface 251 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 64 [ 1142.997992][ T10] usb 4-1: New USB device found, idVendor=0b95, idProduct=172a, bcdDevice=f7.f4 [ 1143.079823][ T10] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1143.092880][ T10] usb 4-1: Product: syz [ 1143.097277][ T10] usb 4-1: Manufacturer: syz [ 1143.286509][ T10] usb 4-1: SerialNumber: syz [ 1143.309970][ T10] usb 4-1: config 0 descriptor?? [ 1143.330362][T19533] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 1143.338951][T19533] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 1143.452631][ T92] usb 2-1: new high-speed USB device number 56 using dummy_hcd [ 1143.561104][T19533] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 1143.584386][T19533] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 1143.644788][ T92] usb 2-1: Using ep0 maxpacket: 16 [ 1143.658603][ T92] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1143.701121][ T92] usb 2-1: New USB device found, idVendor=04d8, idProduct=00dd, bcdDevice= 0.00 [ 1143.746815][ T92] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1143.811221][ T92] usb 2-1: config 0 descriptor?? [ 1144.071257][ T9227] hsr_slave_0: left promiscuous mode [ 1144.099315][ T9227] hsr_slave_1: left promiscuous mode [ 1144.133813][ T9227] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1144.380855][ T9227] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1144.506320][ T9227] veth1_macvtap: left promiscuous mode [ 1144.525758][ T9227] veth0_macvtap: left promiscuous mode [ 1145.400808][T19533] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1145.423676][T19533] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1145.589168][ T9227] pim6reg (unregistering): left allmulticast mode [ 1145.602314][T19573] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3252'. [ 1145.865512][T19533] netlink: 40 bytes leftover after parsing attributes in process `syz.3.3244'. [ 1146.140832][ T10] asix 4-1:0.251 (unnamed net_device) (uninitialized): Failed to read reg index 0x0002: -71 [ 1146.184984][ T10] asix 4-1:0.251 (unnamed net_device) (uninitialized): Could not register MDIO bus [ 1146.220438][ T10] asix 4-1:0.251: probe with driver asix failed with error -5 [ 1146.261571][ T10] usb 4-1: USB disconnect, device number 97 [ 1146.799155][T19575] netlink: 80 bytes leftover after parsing attributes in process `syz.5.3253'. [ 1147.167187][ T92] usbhid 2-1:0.0: can't add hid device: -71 [ 1147.210611][ T92] usbhid 2-1:0.0: probe with driver usbhid failed with error -71 [ 1147.260583][ T92] usb 2-1: USB disconnect, device number 56 [ 1147.488871][ T9227] team0 (unregistering): Port device team_slave_1 removed [ 1147.828510][ T9227] team0 (unregistering): Port device team_slave_0 removed [ 1147.961896][ T30] audit: type=1326 audit(1754892527.250:1394): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19591 comm="syz.3.3259" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f867ed8ebe9 code=0x7ffc0000 [ 1147.996244][T19597] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3256'. [ 1148.005871][ T30] audit: type=1326 audit(1754892527.250:1395): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19591 comm="syz.3.3259" exe="/root/syz-executor" sig=0 arch=c000003e syscall=27 compat=0 ip=0x7f867ed8ebe9 code=0x7ffc0000 [ 1148.005931][ T30] audit: type=1326 audit(1754892527.250:1396): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19591 comm="syz.3.3259" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f867ed8ebe9 code=0x7ffc0000 [ 1148.005993][ T30] audit: type=1326 audit(1754892527.250:1397): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19591 comm="syz.3.3259" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f867ed8ebe9 code=0x7ffc0000 [ 1148.006041][ T30] audit: type=1326 audit(1754892527.250:1398): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19591 comm="syz.3.3259" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f867ed8ebe9 code=0x7ffc0000 [ 1148.006086][ T30] audit: type=1326 audit(1754892527.250:1399): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19591 comm="syz.3.3259" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f867ed8ebe9 code=0x7ffc0000 [ 1149.627599][T19611] macvlan1: entered promiscuous mode [ 1149.650190][T19611] macvlan1: left promiscuous mode [ 1149.754301][T14322] usb 6-1: new high-speed USB device number 8 using dummy_hcd [ 1149.912612][ T5949] usb 7-1: new high-speed USB device number 92 using dummy_hcd [ 1149.952905][T14322] usb 6-1: Using ep0 maxpacket: 16 [ 1150.076366][ T5949] usb 7-1: Using ep0 maxpacket: 32 [ 1150.082891][ T24] usb 4-1: new high-speed USB device number 98 using dummy_hcd [ 1150.087629][ T5949] usb 7-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1150.128315][ T5949] usb 7-1: New USB device found, idVendor=04e2, idProduct=1424, bcdDevice=8a.0a [ 1150.219917][ T5949] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1150.272929][ T24] usb 4-1: Using ep0 maxpacket: 16 [ 1150.272947][ T5949] usb 7-1: Product: syz [ 1150.272966][ T5949] usb 7-1: Manufacturer: syz [ 1150.272984][ T5949] usb 7-1: SerialNumber: syz [ 1150.339871][ T5949] usb 7-1: config 0 descriptor?? [ 1150.377418][ T5949] xr_serial 7-1:0.0: failed to claim sibling interface: -16 [ 1150.388596][ T5949] xr_serial 7-1:0.0: probe with driver xr_serial failed with error -16 [ 1150.399456][ T24] usb 4-1: config 0 has an invalid interface number: 251 but max is 0 [ 1150.421112][ T24] usb 4-1: config 0 has no interface number 0 [ 1150.473662][ T24] usb 4-1: config 0 interface 251 altsetting 0 bulk endpoint 0x4 has invalid maxpacket 16 [ 1150.565755][ T5949] usb 7-1: USB disconnect, device number 92 [ 1150.603034][ T24] usb 4-1: config 0 interface 251 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 64 [ 1150.773259][ T24] usb 4-1: New USB device found, idVendor=0b95, idProduct=172a, bcdDevice=f7.f4 [ 1150.782853][ T24] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1150.799238][ T24] usb 4-1: Product: syz [ 1150.813744][ T24] usb 4-1: Manufacturer: syz [ 1150.860259][ T24] usb 4-1: SerialNumber: syz [ 1150.887752][ T24] usb 4-1: config 0 descriptor?? [ 1150.907640][T19616] raw-gadget.2 gadget.3: fail, usb_ep_enable returned -22 [ 1150.917655][T19616] raw-gadget.2 gadget.3: fail, usb_ep_enable returned -22 [ 1150.941834][T19634] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3265'. [ 1151.229691][T19616] raw-gadget.2 gadget.3: fail, usb_ep_enable returned -22 [ 1151.241415][T19616] raw-gadget.2 gadget.3: fail, usb_ep_enable returned -22 [ 1151.748377][T19634] bridge_slave_1: left allmulticast mode [ 1151.859021][T19634] bridge_slave_1: left promiscuous mode [ 1151.866135][T19634] bridge0: port 2(bridge_slave_1) entered disabled state [ 1151.886097][T19634] bridge_slave_0: left allmulticast mode [ 1151.938628][T19634] bridge_slave_0: left promiscuous mode [ 1151.950145][T19634] bridge0: port 1(bridge_slave_0) entered disabled state [ 1153.119530][T19616] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1153.233410][T19616] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1153.259871][T14322] usb 6-1: unable to get BOS descriptor or descriptor too short [ 1153.301116][T14322] usb 6-1: unable to read config index 0 descriptor/start: -71 [ 1153.325930][T14322] usb 6-1: can't read configurations, error -71 [ 1153.915742][T19616] netlink: 40 bytes leftover after parsing attributes in process `syz.3.3264'. [ 1154.197031][ T24] asix 4-1:0.251 (unnamed net_device) (uninitialized): Failed to read reg index 0x0002: -71 [ 1154.334856][ T24] asix 4-1:0.251 (unnamed net_device) (uninitialized): Could not register MDIO bus [ 1154.355340][ T24] asix 4-1:0.251: probe with driver asix failed with error -5 [ 1154.370950][ T24] usb 4-1: USB disconnect, device number 98 [ 1155.040427][T19670] netlink: 20 bytes leftover after parsing attributes in process `syz.3.3275'. [ 1155.129323][T19670] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 1155.625641][T19677] input: syz0 as /devices/virtual/input/input103 [ 1156.402334][T19699] netlink: 4 bytes leftover after parsing attributes in process `syz.5.3283'. [ 1158.402880][ T5947] usb 2-1: new high-speed USB device number 57 using dummy_hcd [ 1158.442208][T19728] netlink: 16 bytes leftover after parsing attributes in process `syz.3.3295'. [ 1158.489989][T19728] bond0: entered promiscuous mode [ 1158.521044][T19728] bond_slave_0: entered promiscuous mode [ 1158.529449][T19728] bond_slave_1: entered promiscuous mode [ 1158.542011][T19728] bond0: left promiscuous mode [ 1158.551346][T19728] bond_slave_0: left promiscuous mode [ 1158.564832][ T5947] usb 2-1: Using ep0 maxpacket: 32 [ 1158.574782][ T5947] usb 2-1: config 4 has an invalid interface number: 128 but max is 0 [ 1158.578880][T19728] bond_slave_1: left promiscuous mode [ 1158.584056][ T5947] usb 2-1: config 4 has no interface number 0 [ 1158.607383][ T5947] usb 2-1: config 4 interface 128 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1158.619358][ T5947] usb 2-1: config 4 interface 128 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1158.630122][ T5947] usb 2-1: New USB device found, idVendor=046d, idProduct=c314, bcdDevice= 0.40 [ 1158.640301][ T5947] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1158.693398][ T5947] hub 2-1:4.128: USB hub found [ 1158.792627][ T5949] usb 6-1: new full-speed USB device number 10 using dummy_hcd [ 1158.900472][ T5947] hub 2-1:4.128: 2 ports detected [ 1158.922263][ T5947] hub 2-1:4.128: Using single TT (err -22) [ 1158.969185][ T5949] usb 6-1: config 7 has an invalid interface number: 101 but max is 0 [ 1158.979744][ T5949] usb 6-1: config 7 has no interface number 0 [ 1159.006339][ T5949] usb 6-1: New USB device found, idVendor=0fd9, idProduct=002c, bcdDevice= 6.6b [ 1159.019671][ T5949] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1159.076607][ T5949] usb 6-1: Product: syz [ 1159.090413][ T5949] usb 6-1: Manufacturer: syz [ 1159.101578][ T5949] usb 6-1: SerialNumber: syz [ 1159.166420][T19746] ptrace attach of "./syz-executor exec"[18848] was attempted by "./syz-executor exec"[19746] [ 1159.389341][T19746] bond1: entered allmulticast mode [ 1159.421344][T19749] netlink: 'syz.6.3301': attribute type 3 has an invalid length. [ 1159.470861][T19746] 8021q: adding VLAN 0 to HW filter on device bond1 [ 1159.716570][T19721] (unnamed net_device) (uninitialized): option arp_validate: invalid value (18446744073709551614) [ 1159.783962][ T5947] hub 2-1:4.128: hub_hub_status failed (err = -71) [ 1159.802966][ T5947] hub 2-1:4.128: config failed, can't get hub status (err -71) [ 1160.015332][ T5947] usb 2-1: USB disconnect, device number 57 [ 1161.652998][ T5949] as10x_usb: device has been detected [ 1161.684571][ T5949] dvbdev: DVB: registering new adapter (Elgato EyeTV DTT Deluxe) [ 1161.788646][ T5949] usb 6-1: DVB: registering adapter 1 frontend 0 (Elgato EyeTV DTT Deluxe)... [ 1161.864819][ T5949] as10x_usb: error during firmware upload part1 [ 1161.879467][ T5949] Registered device Elgato EyeTV DTT Deluxe [ 1161.884272][ T5949] usb 6-1: USB disconnect, device number 10 [ 1162.015241][ T5949] Unregistered device Elgato EyeTV DTT Deluxe [ 1162.094670][ T5949] as10x_usb: device has been disconnected [ 1162.351812][T19773] netlink: 20 bytes leftover after parsing attributes in process `syz.6.3304'. [ 1163.007857][T19781] tipc: Started in network mode [ 1163.013980][T19781] tipc: Node identity 928092952ebe, cluster identity 4711 [ 1163.022960][T19781] tipc: Enabled bearer , priority 0 [ 1163.054529][T19781] syzkaller0: entered promiscuous mode [ 1163.060461][T19781] syzkaller0: entered allmulticast mode [ 1163.086744][T19786] __vm_enough_memory: pid: 19786, comm: syz.1.3305, bytes: 4503599627366400 not enough memory for the allocation [ 1163.127676][T19781] syzkaller0: mtu less than device minimum [ 1163.146126][T19778] tipc: Resetting bearer [ 1163.197564][T19778] tipc: Disabling bearer [ 1163.252565][T15014] usb 6-1: new high-speed USB device number 11 using dummy_hcd [ 1163.434818][T15014] usb 6-1: config 7 descriptor has 1 excess byte, ignoring [ 1163.442355][T15014] usb 6-1: config 7 has 1 interface, different from the descriptor's value: 2 [ 1163.485811][T15014] usb 6-1: New USB device found, idVendor=19d2, idProduct=1275, bcdDevice= 7.84 [ 1163.498895][T15014] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1163.507174][T15014] usb 6-1: Product: syz [ 1163.527475][T15014] usb 6-1: Manufacturer: syz [ 1163.552825][T15014] usb 6-1: SerialNumber: syz [ 1163.583525][T15014] rndis_host 6-1:7.0: skipping garbage [ 1163.591206][T15014] usb 6-1: bad CDC descriptors [ 1163.616031][T15014] option 6-1:7.0: GSM modem (1-port) converter detected [ 1164.311946][T19793] netlink: 16 bytes leftover after parsing attributes in process `syz.2.3309'. [ 1164.426576][T19793] bond0: entered promiscuous mode [ 1164.435828][T19793] bond0: left promiscuous mode [ 1164.900818][T19804] netlink: 12 bytes leftover after parsing attributes in process `syz.6.3312'. [ 1164.953131][T19798] netlink: 28 bytes leftover after parsing attributes in process `syz.2.3311'. [ 1165.978315][T19803] netlink: 4 bytes leftover after parsing attributes in process `syz.6.3312'. [ 1166.498732][ T5949] usb 6-1: USB disconnect, device number 11 [ 1166.528257][ T5949] option 6-1:7.0: device disconnected [ 1166.843544][ T24] usb 3-1: new high-speed USB device number 73 using dummy_hcd [ 1166.866604][T19833] netlink: 132 bytes leftover after parsing attributes in process `syz.5.3321'. [ 1166.992623][ T1230] usb 2-1: new high-speed USB device number 58 using dummy_hcd [ 1167.052215][ T24] usb 3-1: Using ep0 maxpacket: 16 [ 1167.184063][ T24] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1167.199850][ T24] usb 3-1: New USB device found, idVendor=0fe6, idProduct=9700, bcdDevice=d1.9a [ 1167.219807][ T24] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1167.243841][ T1230] usb 2-1: config 27 has an invalid descriptor of length 0, skipping remainder of the config [ 1167.275626][ T24] usb 3-1: Product: syz [ 1167.279845][ T24] usb 3-1: Manufacturer: syz [ 1167.288460][ T1230] usb 2-1: config 27 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 2 [ 1167.312116][ T24] usb 3-1: SerialNumber: syz [ 1167.327706][ T1230] usb 2-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 1167.349668][ T24] usb 3-1: config 0 descriptor?? [ 1167.362335][ T24] dm9601 3-1:0.0: probe with driver dm9601 failed with error -22 [ 1167.376959][ T1230] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1167.388940][ T24] sr9700 3-1:0.0: probe with driver sr9700 failed with error -22 [ 1167.420645][ T1230] usb 2-1: Quirk or no altset; falling back to MIDI 1.0 [ 1167.640822][T19830] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1167.650087][T19830] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1167.670793][T19830] delete_channel: no stack [ 1167.740202][ T1230] snd-usb-audio 2-1:27.0: probe with driver snd-usb-audio failed with error -2 [ 1167.831828][ T1230] usb 2-1: USB disconnect, device number 58 [ 1168.790318][T19857] syzkaller1: entered promiscuous mode [ 1168.797267][T19857] syzkaller1: entered allmulticast mode [ 1169.063594][T19863] netlink: 'syz.6.3328': attribute type 21 has an invalid length. [ 1169.082138][T19863] netlink: 128 bytes leftover after parsing attributes in process `syz.6.3328'. [ 1169.215346][T19863] netlink: 'syz.6.3328': attribute type 6 has an invalid length. [ 1169.223489][T19863] netlink: 3 bytes leftover after parsing attributes in process `syz.6.3328'. [ 1170.778443][ T5949] usb 3-1: USB disconnect, device number 73 [ 1171.240527][T19888] netlink: 28 bytes leftover after parsing attributes in process `syz.2.3333'. [ 1171.483336][ T24] usb 2-1: new low-speed USB device number 59 using dummy_hcd [ 1171.667808][ T24] usb 2-1: config 0 has an invalid interface number: 1 but max is 0 [ 1171.679024][ T24] usb 2-1: config 0 has no interface number 0 [ 1171.706374][ T24] usb 2-1: config 0 interface 1 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 10 [ 1171.751086][ T24] usb 2-1: config 0 interface 1 altsetting 0 endpoint 0x82 has invalid maxpacket 159, setting to 8 [ 1172.270495][ T24] usb 2-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 1172.289310][ T24] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1172.323480][ T24] usb 2-1: config 0 descriptor?? [ 1172.333062][T19891] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 1172.401131][ T24] iowarrior 2-1:0.1: IOWarrior product=0x1512, serial= interface=1 now attached to iowarrior0 [ 1172.679649][T19891] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1172.703085][ T5949] usb 7-1: new high-speed USB device number 93 using dummy_hcd [ 1172.743234][T19891] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1172.913815][ T5949] usb 7-1: Using ep0 maxpacket: 8 [ 1172.973138][ T5949] usb 7-1: config index 0 descriptor too short (expected 30768, got 18) [ 1173.001884][ T5949] usb 7-1: config 102 has too many interfaces: 102, using maximum allowed: 32 [ 1173.044340][ T5949] usb 7-1: config 102 has an invalid descriptor of length 102, skipping remainder of the config [ 1173.097371][ T5949] usb 7-1: config 102 has 0 interfaces, different from the descriptor's value: 102 [ 1173.142110][ T5949] usb 7-1: New USB device found, idVendor=1557, idProduct=7720, bcdDevice=b7.eb [ 1173.169337][ T5949] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1173.221631][T19919] FAULT_INJECTION: forcing a failure. [ 1173.221631][T19919] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1173.267214][T19919] CPU: 0 UID: 0 PID: 19919 Comm: syz.2.3343 Not tainted 6.17.0-rc1-syzkaller #0 PREEMPT(full) [ 1173.267247][T19919] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 1173.267265][T19919] Call Trace: [ 1173.267275][T19919] [ 1173.267285][T19919] dump_stack_lvl+0x189/0x250 [ 1173.267315][T19919] ? __pfx____ratelimit+0x10/0x10 [ 1173.267342][T19919] ? __pfx_dump_stack_lvl+0x10/0x10 [ 1173.267367][T19919] ? __pfx__printk+0x10/0x10 [ 1173.267396][T19919] ? __might_fault+0xb0/0x130 [ 1173.267436][T19919] should_fail_ex+0x414/0x560 [ 1173.267468][T19919] _copy_from_iter+0x1db/0x16f0 [ 1173.267494][T19919] ? rcu_is_watching+0x15/0xb0 [ 1173.267515][T19919] ? kmem_cache_alloc_node_noprof+0x217/0x3c0 [ 1173.267543][T19919] ? __pfx__copy_from_iter+0x10/0x10 [ 1173.267566][T19919] ? __build_skb_around+0x257/0x3e0 [ 1173.267599][T19919] ? netlink_sendmsg+0x642/0xb30 [ 1173.267625][T19919] ? skb_put+0x11b/0x210 [ 1173.267659][T19919] netlink_sendmsg+0x6b2/0xb30 [ 1173.267698][T19919] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1173.267729][T19919] ? aa_sock_msg_perm+0xf1/0x1d0 [ 1173.267762][T19919] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 1173.267785][T19919] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1173.267814][T19919] __sock_sendmsg+0x21c/0x270 [ 1173.267844][T19919] ____sys_sendmsg+0x52d/0x830 [ 1173.267880][T19919] ? __pfx_____sys_sendmsg+0x10/0x10 [ 1173.267912][T19919] ? import_iovec+0x74/0xa0 [ 1173.267938][T19919] ___sys_sendmsg+0x21f/0x2a0 [ 1173.267962][T19919] ? __pfx____sys_sendmsg+0x10/0x10 [ 1173.268032][T19919] ? __might_fault+0xb0/0x130 [ 1173.268064][T19919] __sys_sendmmsg+0x227/0x430 [ 1173.268092][T19919] ? __pfx___sys_sendmmsg+0x10/0x10 [ 1173.268109][T19919] ? __mutex_unlock_slowpath+0x1a1/0x760 [ 1173.268167][T19919] ? ksys_write+0x22a/0x250 [ 1173.268197][T19919] ? __pfx_ksys_write+0x10/0x10 [ 1173.268221][T19919] ? rcu_is_watching+0x15/0xb0 [ 1173.268248][T19919] __x64_sys_sendmmsg+0xa0/0xc0 [ 1173.268272][T19919] do_syscall_64+0xfa/0x3b0 [ 1173.268298][T19919] ? lockdep_hardirqs_on+0x9c/0x150 [ 1173.268323][T19919] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1173.268343][T19919] ? clear_bhb_loop+0x60/0xb0 [ 1173.268368][T19919] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1173.268387][T19919] RIP: 0033:0x7f09dbf8ebe9 [ 1173.268407][T19919] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1173.268425][T19919] RSP: 002b:00007f09dcec9038 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 1173.268449][T19919] RAX: ffffffffffffffda RBX: 00007f09dc1b5fa0 RCX: 00007f09dbf8ebe9 [ 1173.268481][T19919] RDX: 040000000000009f RSI: 00002000000002c0 RDI: 0000000000000004 [ 1173.268494][T19919] RBP: 00007f09dcec9090 R08: 0000000000000000 R09: 0000000000000000 [ 1173.268507][T19919] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1173.268519][T19919] R13: 00007f09dc1b6038 R14: 00007f09dc1b5fa0 R15: 00007f09dc2dfa28 [ 1173.268553][T19919] [ 1173.560696][ C0] vkms_vblank_simulate: vblank timer overrun [ 1173.758772][ T5949] usb 7-1: string descriptor 0 read error: -22 [ 1173.986140][T19909] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1174.004086][T19909] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1174.082280][T19927] (unnamed net_device) (uninitialized): option lp_interval: invalid value (0) [ 1174.097882][T19930] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3346'. [ 1174.117692][T19927] (unnamed net_device) (uninitialized): option lp_interval: allowed values 1 - 2147483647 [ 1174.142019][T19930] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3346'. [ 1174.166446][ T5949] usb 7-1: USB disconnect, device number 93 [ 1174.247959][T19930] netlink: 'syz.2.3346': attribute type 19 has an invalid length. [ 1174.287293][T19930] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3346'. [ 1174.367759][ T24] usb 2-1: USB disconnect, device number 59 [ 1174.368428][T19930] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3346'. [ 1174.373842][ C1] iowarrior 2-1:0.1: iowarrior_callback - usb_submit_urb failed with result -19 [ 1174.462112][T19930] netlink: 'syz.2.3346': attribute type 19 has an invalid length. [ 1174.532997][T19930] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3346'. [ 1174.598450][T19930] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3346'. [ 1174.623437][T19930] netlink: 'syz.2.3346': attribute type 19 has an invalid length. [ 1174.644559][T19930] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3346'. [ 1174.671643][T19930] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3346'. [ 1174.731390][T19930] netlink: 'syz.2.3346': attribute type 19 has an invalid length. [ 1174.762701][T19930] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3346'. [ 1174.836185][T19947] netlink: 24 bytes leftover after parsing attributes in process `syz.5.3350'. [ 1174.864150][T19930] netlink: 'syz.2.3346': attribute type 19 has an invalid length. [ 1175.412600][ T92] usb 3-1: new high-speed USB device number 74 using dummy_hcd [ 1175.632818][ T92] usb 3-1: Using ep0 maxpacket: 16 [ 1175.660191][ T92] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1175.682866][ T92] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1175.703278][T13215] usb 6-1: new high-speed USB device number 12 using dummy_hcd [ 1175.712638][ T92] usb 3-1: New USB device found, idVendor=04d8, idProduct=f002, bcdDevice= 0.00 [ 1175.742572][ T92] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1175.808210][ T92] usb 3-1: config 0 descriptor?? [ 1175.917044][T13215] usb 6-1: Using ep0 maxpacket: 16 [ 1176.045666][T19962] FAULT_INJECTION: forcing a failure. [ 1176.045666][T19962] name failslab, interval 1, probability 0, space 0, times 0 [ 1176.132204][T19962] CPU: 1 UID: 0 PID: 19962 Comm: syz.3.3354 Not tainted 6.17.0-rc1-syzkaller #0 PREEMPT(full) [ 1176.132240][T19962] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 1176.132252][T19962] Call Trace: [ 1176.132261][T19962] [ 1176.132271][T19962] dump_stack_lvl+0x189/0x250 [ 1176.132303][T19962] ? __pfx____ratelimit+0x10/0x10 [ 1176.132331][T19962] ? __pfx_dump_stack_lvl+0x10/0x10 [ 1176.132355][T19962] ? __pfx__printk+0x10/0x10 [ 1176.132384][T19962] ? __pfx___might_resched+0x10/0x10 [ 1176.132405][T19962] ? fs_reclaim_acquire+0x7d/0x100 [ 1176.132440][T19962] should_fail_ex+0x414/0x560 [ 1176.132471][T19962] should_failslab+0xa8/0x100 [ 1176.132501][T19962] kmem_cache_alloc_node_noprof+0x76/0x3c0 [ 1176.132528][T19962] ? __alloc_skb+0x112/0x2d0 [ 1176.132561][T19962] __alloc_skb+0x112/0x2d0 [ 1176.132593][T19962] qdisc_notify+0x110/0x440 [ 1176.132626][T19962] qdisc_graft+0x1109/0x1590 [ 1176.132668][T19962] ? __pfx_qdisc_graft+0x10/0x10 [ 1176.132697][T19962] ? qdisc_create+0xa52/0xea0 [ 1176.132730][T19962] tc_modify_qdisc+0x189b/0x20e0 [ 1176.132775][T19962] ? __pfx_tc_modify_qdisc+0x10/0x10 [ 1176.132843][T19962] ? __pfx_tc_modify_qdisc+0x10/0x10 [ 1176.132865][T19962] rtnetlink_rcv_msg+0x779/0xb70 [ 1176.132899][T19962] ? rtnetlink_rcv_msg+0x1ab/0xb70 [ 1176.132925][T19962] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 1176.132950][T19962] ? ref_tracker_free+0x63a/0x7d0 [ 1176.132977][T19962] ? __asan_memcpy+0x40/0x70 [ 1176.133001][T19962] ? __pfx_ref_tracker_free+0x10/0x10 [ 1176.133041][T19962] netlink_rcv_skb+0x208/0x470 [ 1176.133071][T19962] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 1176.133099][T19962] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 1176.133141][T19962] ? netlink_deliver_tap+0x2e/0x1b0 [ 1176.133179][T19962] netlink_unicast+0x82c/0x9e0 [ 1176.133216][T19962] ? __pfx_netlink_unicast+0x10/0x10 [ 1176.133243][T19962] ? netlink_sendmsg+0x642/0xb30 [ 1176.133268][T19962] ? skb_put+0x11b/0x210 [ 1176.133302][T19962] netlink_sendmsg+0x805/0xb30 [ 1176.133342][T19962] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1176.133373][T19962] ? aa_sock_msg_perm+0xf1/0x1d0 [ 1176.133406][T19962] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 1176.133427][T19962] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1176.133457][T19962] __sock_sendmsg+0x21c/0x270 [ 1176.133484][T19962] ____sys_sendmsg+0x52d/0x830 [ 1176.133512][T19962] ? __pfx_____sys_sendmsg+0x10/0x10 [ 1176.133543][T19962] ? import_iovec+0x74/0xa0 [ 1176.133571][T19962] ___sys_sendmsg+0x21f/0x2a0 [ 1176.133593][T19962] ? __pfx____sys_sendmsg+0x10/0x10 [ 1176.133657][T19962] ? __fget_files+0x2a/0x420 [ 1176.133696][T19962] ? __fget_files+0x3a0/0x420 [ 1176.133727][T19962] __sys_sendmmsg+0x227/0x430 [ 1176.133757][T19962] ? __pfx___sys_sendmmsg+0x10/0x10 [ 1176.133775][T19962] ? __mutex_unlock_slowpath+0x1a1/0x760 [ 1176.133844][T19962] ? ksys_write+0x22a/0x250 [ 1176.133874][T19962] ? __pfx_ksys_write+0x10/0x10 [ 1176.133898][T19962] ? rcu_is_watching+0x15/0xb0 [ 1176.133927][T19962] __x64_sys_sendmmsg+0xa0/0xc0 [ 1176.133950][T19962] do_syscall_64+0xfa/0x3b0 [ 1176.133980][T19962] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1176.133999][T19962] ? asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 1176.134019][T19962] ? clear_bhb_loop+0x60/0xb0 [ 1176.134043][T19962] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1176.134062][T19962] RIP: 0033:0x7f867ed8ebe9 [ 1176.134082][T19962] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1176.134112][T19962] RSP: 002b:00007f867fb40038 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 1176.134135][T19962] RAX: ffffffffffffffda RBX: 00007f867efb5fa0 RCX: 00007f867ed8ebe9 [ 1176.134150][T19962] RDX: 040000000000009f RSI: 00002000000002c0 RDI: 0000000000000004 [ 1176.134164][T19962] RBP: 00007f867fb40090 R08: 0000000000000000 R09: 0000000000000000 [ 1176.134177][T19962] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1176.134189][T19962] R13: 00007f867efb6038 R14: 00007f867efb5fa0 R15: 00007f867f0dfa28 [ 1176.134224][T19962] [ 1176.702754][ T92] hid-picolcd 0003:04D8:F002.002D: collection stack underflow [ 1176.710481][ T92] hid-picolcd 0003:04D8:F002.002D: item 0 1 0 12 parsing failed [ 1176.912703][ T24] usb 2-1: new high-speed USB device number 60 using dummy_hcd [ 1177.065157][ T24] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1177.071324][ T92] hid-picolcd 0003:04D8:F002.002D: device report parse failed [ 1177.084703][ T24] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1177.084738][ T24] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 1177.084829][ T24] usb 2-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 1177.084853][ T24] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1177.091025][ T24] usb 2-1: config 0 descriptor?? [ 1177.140320][ T24] hub 2-1:0.0: USB hub found [ 1177.227834][ T92] hid-picolcd 0003:04D8:F002.002D: probe with driver hid-picolcd failed with error -22 [ 1177.281263][ T92] usb 3-1: USB disconnect, device number 74 [ 1177.577939][ T1307] ieee802154 phy0 wpan0: encryption failed: -22 [ 1177.584835][ T1307] ieee802154 phy1 wpan1: encryption failed: -22 [ 1179.132657][T15014] usb 4-1: new high-speed USB device number 99 using dummy_hcd [ 1179.352896][T15014] usb 4-1: Using ep0 maxpacket: 32 [ 1179.364293][ T24] hub 2-1:0.0: config failed, can't read hub descriptor (err -22) [ 1179.398607][T15014] usb 4-1: config 0 has an invalid interface number: 85 but max is 0 [ 1179.428453][ T24] usb 2-1: USB disconnect, device number 60 [ 1179.508855][T15014] usb 4-1: config 0 has no interface number 0 [ 1179.530966][T13215] usb 6-1: unable to get BOS descriptor or descriptor too short [ 1179.557974][T15014] usb 4-1: config 0 interface 85 has no altsetting 0 [ 1179.581480][T13215] usb 6-1: too many configurations: 211, using maximum allowed: 8 [ 1179.626779][T15014] usb 4-1: New USB device found, idVendor=05ac, idProduct=0219, bcdDevice=f0.72 [ 1179.634699][T13215] usb 6-1: unable to read config index 0 descriptor/start: -71 [ 1179.658084][T15014] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1179.680583][T13215] usb 6-1: can't read configurations, error -71 [ 1179.682482][T15014] usb 4-1: Product: syz [ 1179.708917][T15014] usb 4-1: Manufacturer: syz [ 1179.732650][T15014] usb 4-1: SerialNumber: syz [ 1179.860825][T15014] usb 4-1: config 0 descriptor?? [ 1179.920019][T15014] appletouch 4-1:0.85: Could not find int-in endpoint [ 1179.942732][T15014] appletouch 4-1:0.85: probe with driver appletouch failed with error -5 [ 1179.969903][T15014] usbhid 4-1:0.85: couldn't find an input interrupt endpoint [ 1180.282684][T19991] fuse: Bad value for 'fd' [ 1181.093278][T15014] usb 2-1: new high-speed USB device number 61 using dummy_hcd [ 1181.252666][T15014] usb 2-1: Using ep0 maxpacket: 8 [ 1181.276706][T15014] usb 2-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 1181.288096][T15014] usb 2-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 1181.298485][T15014] usb 2-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 1181.314535][T15014] usb 2-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 1181.392100][T15014] usb 2-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 1181.460581][T15014] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1181.737388][T15014] usb 2-1: GET_CAPABILITIES returned 0 [ 1181.757459][T15014] usbtmc 2-1:16.0: can't read capabilities [ 1181.954661][ C1] usbtmc 2-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 1182.276215][ T5947] usb 4-1: USB disconnect, device number 99 [ 1183.213249][ T92] usb 6-1: new high-speed USB device number 14 using dummy_hcd [ 1183.413103][ T92] usb 6-1: device descriptor read/64, error -71 [ 1183.601800][T20048] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 1183.672548][ T92] usb 6-1: new high-speed USB device number 15 using dummy_hcd [ 1183.785087][T13215] usb 2-1: USB disconnect, device number 61 [ 1183.805500][ T92] usb 6-1: device descriptor read/64, error -71 [ 1183.934952][ T92] usb usb6-port1: attempt power cycle [ 1184.058512][ T30] audit: type=1804 audit(1754892563.360:1400): pid=20065 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.6.3386" name="/newroot/350/file0" dev="tmpfs" ino=1831 res=1 errno=0 [ 1184.061084][T20065] IPVS: set_ctl: invalid protocol: 58 100.1.1.1:20000 [ 1184.082860][ T30] audit: type=1800 audit(1754892563.360:1401): pid=20065 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.6.3386" name="file0" dev="tmpfs" ino=1831 res=0 errno=0 [ 1184.152826][ T5947] usb 3-1: new full-speed USB device number 75 using dummy_hcd [ 1184.214061][T20069] VFS: Lookup of 'file0' in fuse fuse would have caused loop [ 1184.222725][ T24] usb 4-1: new high-speed USB device number 100 using dummy_hcd [ 1184.292621][ T92] usb 6-1: new high-speed USB device number 16 using dummy_hcd [ 1184.314494][ T92] usb 6-1: device descriptor read/8, error -71 [ 1184.314761][ T5947] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1184.332044][ T5947] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 1184.349765][ T5947] usb 3-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 1184.360883][ T5947] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1184.370517][ T5947] usb 3-1: Product: syz [ 1184.379626][ T5947] usb 3-1: Manufacturer: syz [ 1184.384666][ T5947] usb 3-1: SerialNumber: syz [ 1184.391389][ T24] usb 4-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 1184.406518][ T24] usb 4-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config [ 1184.420574][ T24] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 1184.444982][ T24] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 52, changing to 9 [ 1184.462339][ T24] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8241, setting to 1024 [ 1184.476979][ T24] usb 4-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 1184.486951][ T24] usb 4-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 1184.495836][ T24] usb 4-1: Product: syz [ 1184.500166][ T24] usb 4-1: Manufacturer: syz [ 1184.525057][ T24] cdc_wdm 4-1:1.0: skipping garbage [ 1184.541416][ T24] cdc_wdm 4-1:1.0: skipping garbage [ 1184.560504][ T24] cdc_wdm 4-1:1.0: cdc-wdm0: USB WDM device [ 1184.567334][ T24] cdc_wdm 4-1:1.0: Unknown control protocol [ 1184.582824][ T92] usb 6-1: new high-speed USB device number 17 using dummy_hcd [ 1184.616499][ T92] usb 6-1: device descriptor read/8, error -71 [ 1184.667405][ T5947] usb 3-1: 0:2 : does not exist [ 1184.687004][ T5947] usb 3-1: 5:0: failed to get current value for ch 0 (-22) [ 1184.721958][ T5947] usb 3-1: USB disconnect, device number 75 [ 1184.742899][ T92] usb usb6-port1: unable to enumerate USB device [ 1184.798946][ T8374] udevd[8374]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1184.847067][ T5186] Bluetooth: hci5: command 0x0406 tx timeout [ 1185.109038][T20084] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1185.120237][T20084] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1185.307405][T20085] __nla_validate_parse: 1 callbacks suppressed [ 1185.307452][T20085] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3390'. [ 1186.512814][ T5947] usb 7-1: new high-speed USB device number 94 using dummy_hcd [ 1186.772866][ T5947] usb 7-1: Using ep0 maxpacket: 8 [ 1186.849225][T20105] netlink: 16 bytes leftover after parsing attributes in process `syz.5.3397'. [ 1186.945016][ T5947] usb 7-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 1186.964971][ T5947] usb 7-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 1186.989178][T20105] bond0: entered promiscuous mode [ 1187.018350][T20105] bond_slave_0: entered promiscuous mode [ 1187.060426][T20105] bond_slave_1: entered promiscuous mode [ 1187.066295][T13215] usb 4-1: USB disconnect, device number 100 [ 1187.119089][ T5947] usb 7-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 1187.153978][ T5947] usb 7-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 1187.202908][ T5947] usb 7-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 1187.232621][ T5947] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1187.288240][T20105] bond1: entered promiscuous mode [ 1187.334475][T20105] bond0: left promiscuous mode [ 1187.353729][T20105] bond_slave_0: left promiscuous mode [ 1187.359830][T20105] bond_slave_1: left promiscuous mode [ 1187.396816][T20105] bond1: left promiscuous mode [ 1187.512935][ T5947] usb 7-1: GET_CAPABILITIES returned 0 [ 1187.521639][ T5947] usbtmc 7-1:16.0: can't read capabilities [ 1187.545309][T20113] ptrace attach of "./syz-executor exec"[18110] was attempted by "./syz-executor exec"[20113] [ 1187.613299][T20113] bond1: entered allmulticast mode [ 1187.619936][T20113] 8021q: adding VLAN 0 to HW filter on device bond1 [ 1187.708790][ C1] usbtmc 7-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 1188.611327][ T92] usb 6-1: new high-speed USB device number 18 using dummy_hcd [ 1188.811241][ T92] usb 6-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 1188.831767][ T92] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1188.864239][ T92] usb 6-1: config 0 descriptor?? [ 1188.928709][ T92] cp210x 6-1:0.0: cp210x converter detected [ 1189.064430][T20125] netlink: 28 bytes leftover after parsing attributes in process `syz.2.3403'. [ 1189.212678][T20130] netlink: 'syz.1.3405': attribute type 2 has an invalid length. [ 1189.220217][T20129] netlink: 20 bytes leftover after parsing attributes in process `syz.3.3404'. [ 1189.220806][T20130] netlink: 723 bytes leftover after parsing attributes in process `syz.1.3405'. [ 1189.283061][T20121] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1189.292414][T20121] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1189.385607][ T92] usb 6-1: cp210x converter now attached to ttyUSB0 [ 1189.393111][ T24] usb 3-1: new high-speed USB device number 76 using dummy_hcd [ 1189.564801][ T24] usb 3-1: New USB device found, idVendor=055f, idProduct=c420, bcdDevice=6a.33 [ 1189.577072][ T24] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1189.597047][ T92] usb 6-1: USB disconnect, device number 18 [ 1189.598499][ T24] usb 3-1: config 0 descriptor?? [ 1189.635480][ T24] gspca_main: sunplus-2.14.0 probing 055f:c420 [ 1189.658013][ T92] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0 [ 1189.719678][ T92] cp210x 6-1:0.0: device disconnected [ 1189.799008][T15014] usb 7-1: USB disconnect, device number 94 [ 1189.835447][ T24] gspca_sunplus: reg_w_riv err -71 [ 1189.843272][ T24] sunplus 3-1:0.0: probe with driver sunplus failed with error -71 [ 1189.859188][ T24] usb 3-1: USB disconnect, device number 76 [ 1190.024787][T13215] usb 4-1: new high-speed USB device number 101 using dummy_hcd [ 1190.215023][T13215] usb 4-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 1190.246201][T13215] usb 4-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config [ 1190.251282][ T30] audit: type=1326 audit(1754892569.550:1402): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20145 comm="syz.1.3411" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f6ad6f8ebe9 code=0x0 [ 1190.287787][T13215] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 1190.299146][T13215] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 52, changing to 9 [ 1190.313870][T13215] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8241, setting to 1024 [ 1190.327752][T13215] usb 4-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 1190.338056][T13215] usb 4-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 1190.347118][T13215] usb 4-1: Product: syz [ 1190.412412][T13215] usb 4-1: Manufacturer: syz [ 1190.431031][T13215] cdc_wdm 4-1:1.0: skipping garbage [ 1190.439506][T13215] cdc_wdm 4-1:1.0: skipping garbage [ 1190.531788][T13215] cdc_wdm 4-1:1.0: cdc-wdm0: USB WDM device [ 1190.645560][T13215] cdc_wdm 4-1:1.0: Unknown control protocol [ 1190.712741][ T5947] usb 3-1: new high-speed USB device number 77 using dummy_hcd [ 1190.872748][ T24] usb 6-1: new full-speed USB device number 19 using dummy_hcd [ 1190.922334][ T5947] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1190.964635][ T5947] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1190.997857][ T5947] usb 3-1: New USB device found, idVendor=046d, idProduct=c222, bcdDevice= 0.00 [ 1191.029111][ T5947] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1191.051695][ T5947] usb 3-1: config 0 descriptor?? [ 1191.061180][ T24] usb 6-1: config 0 has an invalid interface number: 132 but max is 0 [ 1191.072106][ T24] usb 6-1: config 0 has no interface number 0 [ 1191.086137][T20157] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1191.095770][T20157] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1191.268661][ T24] usb 6-1: New USB device found, idVendor=05ac, idProduct=0291, bcdDevice=43.25 [ 1191.287127][ T24] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1191.340691][ T24] usb 6-1: Product: syz [ 1191.346840][ T5947] lg-g15 0003:046D:C222.002E: hidraw0: USB HID v0.00 Device [HID 046d:c222] on usb-dummy_hcd.2-1/input0 [ 1191.359537][ T24] usb 6-1: Manufacturer: syz [ 1191.364313][ T24] usb 6-1: SerialNumber: syz [ 1191.397988][ T24] usb 6-1: config 0 descriptor?? [ 1191.409915][ T24] hub 6-1:0.132: bad descriptor, ignoring hub [ 1191.430725][ T24] hub 6-1:0.132: probe with driver hub failed with error -5 [ 1191.463936][ T24] input: bcm5974 as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:0.132/input/input104 [ 1191.482408][ T5947] usb 3-1: USB disconnect, device number 77 [ 1191.730355][T20163] fido_id[20163]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.2/usb3/report_descriptor': No such file or directory [ 1191.760802][T20153] pim6reg: entered allmulticast mode [ 1192.791784][ T92] usb 4-1: USB disconnect, device number 101 [ 1192.932952][ T24] usb 3-1: new high-speed USB device number 78 using dummy_hcd [ 1193.152930][ T24] usb 3-1: Using ep0 maxpacket: 16 [ 1193.582868][T20176] vhci_hcd vhci_hcd.0: pdev(1) rhport(0) sockfd(7) [ 1193.589541][T20176] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 1193.689682][T20173] netdevsim netdevsim1: Direct firmware load for x failed with error -2 [ 1193.705313][T20149] pim6reg: left allmulticast mode [ 1193.739354][T20176] vhci_hcd vhci_hcd.0: Device attached [ 1193.753027][T13215] usb 6-1: USB disconnect, device number 19 [ 1193.778314][T20173] netdevsim netdevsim1: Falling back to sysfs fallback for: x [ 1194.014419][ T5947] usb 35-1: new low-speed USB device number 2 using vhci_hcd [ 1194.105586][T20177] vhci_hcd: connection reset by peer [ 1194.111279][T13517] vhci_hcd: stop threads [ 1194.148543][T13517] vhci_hcd: release socket [ 1194.259734][T13517] vhci_hcd: disconnect device [ 1194.723035][ T92] usb 6-1: new low-speed USB device number 20 using dummy_hcd [ 1195.293682][ T92] usb 6-1: device descriptor read/64, error -71 [ 1195.543185][ T92] usb 6-1: new low-speed USB device number 21 using dummy_hcd [ 1195.735975][ T92] usb 6-1: device descriptor read/64, error -71 [ 1195.877701][ T92] usb usb6-port1: attempt power cycle [ 1196.047769][ T24] usb 3-1: unable to get BOS descriptor or descriptor too short [ 1196.057289][ T24] usb 3-1: unable to read config index 0 descriptor/start: -71 [ 1196.079433][ T24] usb 3-1: can't read configurations, error -71 [ 1196.262612][ T92] usb 6-1: new low-speed USB device number 22 using dummy_hcd [ 1196.294933][ T92] usb 6-1: device descriptor read/8, error -71 [ 1196.392736][T20214] netlink: 16 bytes leftover after parsing attributes in process `syz.6.3430'. [ 1196.409158][T20214] bond0: entered promiscuous mode [ 1196.414893][T20214] bond_slave_0: entered promiscuous mode [ 1196.421025][T20214] bond_slave_1: entered promiscuous mode [ 1196.435643][T20214] bond0: left promiscuous mode [ 1196.440828][T20214] bond_slave_0: left promiscuous mode [ 1196.447424][T20214] bond_slave_1: left promiscuous mode [ 1196.484079][T13215] usb 2-1: new high-speed USB device number 62 using dummy_hcd [ 1196.512753][ T24] usb 3-1: new high-speed USB device number 79 using dummy_hcd [ 1196.562751][ T92] usb 6-1: new low-speed USB device number 23 using dummy_hcd [ 1196.635957][ T92] usb 6-1: device descriptor read/8, error -71 [ 1196.647149][T13215] usb 2-1: config 27 has an invalid descriptor of length 0, skipping remainder of the config [ 1196.661224][T13215] usb 2-1: config 27 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 2 [ 1196.698748][ T24] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x9 has invalid wMaxPacketSize 0 [ 1196.715471][T13215] usb 2-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 1196.726177][T13215] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1196.736405][ T24] usb 3-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 1196.747334][ T24] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1196.763375][ T92] usb usb6-port1: unable to enumerate USB device [ 1196.765573][T13215] usb 2-1: Quirk or no altset; falling back to MIDI 1.0 [ 1196.779275][ T24] usb 3-1: Product: syz [ 1196.783649][ T24] usb 3-1: Manufacturer: syz [ 1196.799483][ T24] usb 3-1: SerialNumber: syz [ 1196.851782][ T24] usb 3-1: config 0 descriptor?? [ 1196.872125][T13215] snd-usb-audio 2-1:27.0: probe with driver snd-usb-audio failed with error -2 [ 1196.910289][ T8374] udevd[8374]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:27.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1196.952808][T14322] usb 4-1: new high-speed USB device number 102 using dummy_hcd [ 1197.041625][T20210] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1197.050788][ T30] audit: type=1326 audit(1754892576.330:1403): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20203 comm="syz.1.3426" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6ad6f8ebe9 code=0x7ffc0000 [ 1197.059216][T20210] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1197.096397][ T30] audit: type=1326 audit(1754892576.330:1404): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20203 comm="syz.1.3426" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6ad6f8ebe9 code=0x7ffc0000 [ 1197.232293][T20210] delete_channel: no stack [ 1197.267788][T14322] usb 4-1: device descriptor read/64, error -71 [ 1197.293114][T13215] usb 2-1: USB disconnect, device number 62 [ 1198.011283][ T30] audit: type=1326 audit(1754892576.330:1405): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20203 comm="syz.1.3426" exe="/root/syz-executor" sig=0 arch=c000003e syscall=222 compat=0 ip=0x7f6ad6f8ebe9 code=0x7ffc0000 [ 1198.108742][ T30] audit: type=1326 audit(1754892576.330:1406): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20203 comm="syz.1.3426" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6ad6f8ebe9 code=0x7ffc0000 [ 1198.142254][T14322] usb 4-1: new high-speed USB device number 103 using dummy_hcd [ 1198.292281][ T30] audit: type=1326 audit(1754892576.330:1407): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20203 comm="syz.1.3426" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6ad6f8ebe9 code=0x7ffc0000 [ 1198.316353][T14322] usb 4-1: device descriptor read/64, error -71 [ 1198.370822][ T30] audit: type=1326 audit(1754892576.330:1408): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20203 comm="syz.1.3426" exe="/root/syz-executor" sig=0 arch=c000003e syscall=322 compat=0 ip=0x7f6ad6f8ebe9 code=0x7ffc0000 [ 1198.454435][T14322] usb usb4-port1: attempt power cycle [ 1198.603648][T20233] netlink: 60 bytes leftover after parsing attributes in process `syz.5.3434'. [ 1198.636775][ T30] audit: type=1326 audit(1754892576.330:1409): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20203 comm="syz.1.3426" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6ad6f8ebe9 code=0x7ffc0000 [ 1198.729716][ T30] audit: type=1326 audit(1754892576.340:1410): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20203 comm="syz.1.3426" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6ad6f8ebe9 code=0x7ffc0000 [ 1198.788196][ T30] audit: type=1326 audit(1754892576.340:1411): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20203 comm="syz.1.3426" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f6ad6f8ebe9 code=0x7ffc0000 [ 1198.812552][T14322] usb 4-1: new high-speed USB device number 104 using dummy_hcd [ 1198.856806][ T30] audit: type=1326 audit(1754892576.340:1412): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20203 comm="syz.1.3426" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6ad6f8ebe9 code=0x7ffc0000 [ 1198.912919][T14322] usb 4-1: device descriptor read/8, error -71 [ 1199.091734][T20237] netlink: 'syz.5.3436': attribute type 3 has an invalid length. [ 1199.111686][T20237] netlink: 20 bytes leftover after parsing attributes in process `syz.5.3436'. [ 1199.162909][T14322] usb 4-1: new high-speed USB device number 105 using dummy_hcd [ 1199.193594][T14322] usb 4-1: device descriptor read/8, error -71 [ 1199.237609][ T5947] vhci_hcd: vhci_device speed not set [ 1199.356227][T14322] usb usb4-port1: unable to enumerate USB device [ 1199.602964][T15014] usb 6-1: new high-speed USB device number 24 using dummy_hcd [ 1199.683257][T14322] usb 2-1: new full-speed USB device number 63 using dummy_hcd [ 1199.685426][ T92] usb 3-1: USB disconnect, device number 79 [ 1199.817774][T15014] usb 6-1: config 0 has no interfaces? [ 1199.851852][T15014] usb 6-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b [ 1199.870517][T15014] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1199.879674][T14322] usb 2-1: config 7 has an invalid interface number: 101 but max is 0 [ 1199.882684][T15014] usb 6-1: Product: syz [ 1199.888881][T14322] usb 2-1: config 7 has no interface number 0 [ 1199.896806][T15014] usb 6-1: Manufacturer: syz [ 1199.922391][T15014] usb 6-1: SerialNumber: syz [ 1199.952144][T14322] usb 2-1: New USB device found, idVendor=0fd9, idProduct=002c, bcdDevice= 6.6b [ 1200.003492][T15014] usb 6-1: config 0 descriptor?? [ 1200.009256][T14322] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1200.048736][T14322] usb 2-1: Product: syz [ 1200.074623][T14322] usb 2-1: Manufacturer: syz [ 1200.101408][T14322] usb 2-1: SerialNumber: syz [ 1200.919303][T15014] usb 6-1: USB disconnect, device number 24 [ 1201.222582][ T92] usb 3-1: new high-speed USB device number 80 using dummy_hcd [ 1201.504689][ T92] usb 3-1: config 0 interface 0 altsetting 12 endpoint 0x87 has an invalid bInterval 102, changing to 10 [ 1201.592602][ T92] usb 3-1: config 0 interface 0 altsetting 12 endpoint 0x87 has invalid maxpacket 24624, setting to 1024 [ 1202.066800][T20271] netlink: 52 bytes leftover after parsing attributes in process `syz.5.3445'. [ 1202.116095][ T92] usb 3-1: config 0 interface 0 has no altsetting 0 [ 1202.132962][T20271] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check. [ 1202.498691][T14322] as10x_usb: device has been detected [ 1202.508939][T14322] dvbdev: DVB: registering new adapter (Elgato EyeTV DTT Deluxe) [ 1202.539814][ T92] usb 3-1: New USB device found, idVendor=06cd, idProduct=0115, bcdDevice=d9.c3 [ 1202.587143][T14322] usb 2-1: DVB: registering adapter 1 frontend 0 (Elgato EyeTV DTT Deluxe)... [ 1202.618834][ T92] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1202.631572][T14322] as10x_usb: error during firmware upload part1 [ 1202.650494][T20276] netlink: 60 bytes leftover after parsing attributes in process `syz.3.3446'. [ 1202.660615][T14322] Registered device Elgato EyeTV DTT Deluxe [ 1202.663066][T14322] usb 2-1: USB disconnect, device number 63 [ 1202.684777][ T92] usb 3-1: Product: syz [ 1202.712551][ T92] usb 3-1: Manufacturer: syz [ 1202.717211][ T92] usb 3-1: SerialNumber: syz [ 1202.797866][T14322] Unregistered device Elgato EyeTV DTT Deluxe [ 1202.808037][T14322] as10x_usb: device has been disconnected [ 1202.823626][ T92] usb 3-1: config 0 descriptor?? [ 1202.888626][ T92] keyspan 3-1:0.0: Keyspan 2 port adapter converter detected [ 1202.957241][ T92] keyspan 3-1:0.0: found no endpoint descriptor for endpoint 7 [ 1202.990593][ T92] keyspan 3-1:0.0: found no endpoint descriptor for endpoint 81 [ 1203.044896][ T92] keyspan 3-1:0.0: found no endpoint descriptor for endpoint 1 [ 1203.051293][T20276] loop6: detected capacity change from 0 to 524287999 [ 1203.120601][ T92] keyspan 3-1:0.0: found no endpoint descriptor for endpoint 2 [ 1203.193302][ T92] keyspan 3-1:0.0: found no endpoint descriptor for endpoint 85 [ 1203.241552][ T92] keyspan 3-1:0.0: found no endpoint descriptor for endpoint 5 [ 1203.359728][ T92] usb 3-1: Keyspan 2 port adapter converter now attached to ttyUSB0 [ 1203.415656][ T92] keyspan 3-1:0.0: found no endpoint descriptor for endpoint 83 [ 1203.442742][T15014] usb 2-1: new high-speed USB device number 64 using dummy_hcd [ 1203.503014][ T92] keyspan 3-1:0.0: found no endpoint descriptor for endpoint 3 [ 1203.532818][ T92] keyspan 3-1:0.0: found no endpoint descriptor for endpoint 4 [ 1203.628931][ T92] keyspan 3-1:0.0: found no endpoint descriptor for endpoint 86 [ 1203.666415][T15014] usb 2-1: New USB device found, idVendor=0813, idProduct=0001, bcdDevice=3a.08 [ 1203.688533][ T92] keyspan 3-1:0.0: found no endpoint descriptor for endpoint 6 [ 1203.712033][T15014] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1203.756703][ T92] usb 3-1: Keyspan 2 port adapter converter now attached to ttyUSB1 [ 1203.811422][T15014] usb 2-1: config 0 descriptor?? [ 1203.853728][T15014] gspca_main: cpia1-2.14.0 probing 0813:0001 [ 1204.149195][ T24] usb 3-1: USB disconnect, device number 80 [ 1204.237989][T15014] cpia1 2-1:0.0: unexpected state after lo power cmd: 00 [ 1204.268749][ T24] keyspan_2 ttyUSB0: Keyspan 2 port adapter converter now disconnected from ttyUSB0 [ 1204.390862][ T24] keyspan_2 ttyUSB1: Keyspan 2 port adapter converter now disconnected from ttyUSB1 [ 1204.450414][ T24] keyspan 3-1:0.0: device disconnected [ 1204.456606][T20294] netlink: 60 bytes leftover after parsing attributes in process `syz.6.3453'. [ 1204.639499][T15014] cpia1 2-1:0.0: only firmware version 1 is supported (got: 0) [ 1204.801945][T20294] loop6: detected capacity change from 0 to 524287999 [ 1205.443453][ T24] usb 2-1: USB disconnect, device number 64 [ 1205.602709][ T5949] usb 7-1: new high-speed USB device number 95 using dummy_hcd [ 1205.763545][ T5949] usb 7-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 1205.778653][ T5949] usb 7-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config [ 1205.815610][ T5949] usb 7-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 1205.837898][ T5949] usb 7-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 52, changing to 9 [ 1205.852853][ T5949] usb 7-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8241, setting to 1024 [ 1205.865436][T20289] IPv6: NLM_F_CREATE should be specified when creating new route [ 1205.923084][ T24] usb 2-1: new high-speed USB device number 65 using dummy_hcd [ 1205.936878][ T5949] usb 7-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 1205.966570][ T5949] usb 7-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 1206.042719][ T5949] usb 7-1: Product: syz [ 1206.060250][ T5949] usb 7-1: Manufacturer: syz [ 1206.103892][ T5949] cdc_wdm 7-1:1.0: skipping garbage [ 1206.133603][ T5949] cdc_wdm 7-1:1.0: skipping garbage [ 1206.166728][T13215] hid-generic 0000:10001:FFFFFFFD.002F: unknown main item tag 0x0 [ 1206.198456][ T5949] cdc_wdm 7-1:1.0: cdc-wdm0: USB WDM device [ 1206.216230][ T5949] cdc_wdm 7-1:1.0: Unknown control protocol [ 1206.220609][T13215] hid-generic 0000:10001:FFFFFFFD.002F: unknown main item tag 0x0 [ 1206.272840][T13215] hid-generic 0000:10001:FFFFFFFD.002F: unknown main item tag 0x0 [ 1206.498981][T13215] hid-generic 0000:10001:FFFFFFFD.002F: hidraw0: HID v0.00 Device [syz0] on syz0 [ 1206.695163][T20332] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1206.727763][T20332] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1207.042307][T20331] fido_id[20331]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 1207.246243][T20339] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3461'. [ 1207.421035][T20343] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3463'. [ 1207.430356][T20343] bridge_slave_1: left allmulticast mode [ 1207.436326][T20343] bridge_slave_1: left promiscuous mode [ 1207.442381][T20343] bridge0: port 2(bridge_slave_1) entered disabled state [ 1207.552803][T14322] usb 3-1: new full-speed USB device number 81 using dummy_hcd [ 1207.694783][T20343] bridge_slave_0: left allmulticast mode [ 1207.701758][T20343] bridge_slave_0: left promiscuous mode [ 1207.815480][T14322] usb 3-1: not running at top speed; connect to a high speed hub [ 1207.827317][T14322] usb 3-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 1207.839737][T20343] bridge0: port 1(bridge_slave_0) entered disabled state [ 1208.059722][T14322] usb 3-1: config 1 has no interface number 1 [ 1208.111035][T14322] usb 3-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0 [ 1208.144597][T14322] usb 3-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 1208.156959][T14322] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1208.172983][T14322] usb 3-1: Product: syz [ 1208.196182][T14322] usb 3-1: Manufacturer: syz [ 1208.245910][T14322] usb 3-1: SerialNumber: syz [ 1208.564860][T13215] usb 7-1: USB disconnect, device number 95 [ 1209.068643][T20347] netlink: 16 bytes leftover after parsing attributes in process `syz.6.3465'. [ 1209.142631][T20347] bond0: entered promiscuous mode [ 1209.183128][T20347] bond_slave_0: entered promiscuous mode [ 1209.220985][T20347] bond_slave_1: entered promiscuous mode [ 1209.295732][T20347] bond0: left promiscuous mode [ 1209.300649][T20347] bond_slave_0: left promiscuous mode [ 1209.347958][T20347] bond_slave_1: left promiscuous mode [ 1209.566360][T20351] syzkaller1: entered promiscuous mode [ 1209.571897][T20351] syzkaller1: entered allmulticast mode [ 1209.772716][T13215] usb 6-1: new high-speed USB device number 25 using dummy_hcd [ 1209.852723][ T24] usb 7-1: new high-speed USB device number 96 using dummy_hcd [ 1209.906319][T20359] netlink: 68 bytes leftover after parsing attributes in process `syz.1.3470'. [ 1209.923226][T13215] usb 6-1: Using ep0 maxpacket: 8 [ 1209.956576][T13215] usb 6-1: New USB device found, idVendor=0763, idProduct=2081, bcdDevice=d0.ab [ 1209.974548][T13215] usb 6-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 1209.993029][T13215] usb 6-1: Product: syz [ 1209.998466][T13215] usb 6-1: Manufacturer: syz [ 1210.009662][T13215] usb 6-1: SerialNumber: syz [ 1210.022064][T13215] usb 6-1: config 0 descriptor?? [ 1210.027521][ T24] usb 7-1: Using ep0 maxpacket: 16 [ 1210.038677][ T24] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1210.362621][ T51] Bluetooth: hci1: command 0x0406 tx timeout [ 1210.419021][ T24] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1210.459236][ T24] usb 7-1: New USB device found, idVendor=05ac, idProduct=8241, bcdDevice= 0.00 [ 1210.471848][ T24] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1210.505370][ T24] usb 7-1: config 0 descriptor?? [ 1210.954005][ T24] appleir 0003:05AC:8241.0030: unknown main item tag 0x0 [ 1210.961215][ T24] appleir 0003:05AC:8241.0030: unknown main item tag 0x0 [ 1211.004418][ T24] appleir 0003:05AC:8241.0030: unknown main item tag 0x0 [ 1211.022880][ T24] appleir 0003:05AC:8241.0030: unknown main item tag 0x0 [ 1211.033185][ T5949] usb 4-1: new low-speed USB device number 106 using dummy_hcd [ 1211.033550][ T24] appleir 0003:05AC:8241.0030: unknown main item tag 0x0 [ 1211.102799][ T24] appleir 0003:05AC:8241.0030: hiddev0,hidraw0: USB HID v0.00 Device [HID 05ac:8241] on usb-dummy_hcd.6-1/input0 [ 1211.145134][T14322] usb 3-1: failed to enable PITCH for EP 0x82 [ 1211.192747][ T5949] usb 4-1: Invalid ep0 maxpacket: 16 [ 1211.298092][T20372] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1211.320973][T14322] usb 3-1: USB disconnect, device number 81 [ 1211.343540][T20372] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1211.371272][ T5949] usb 4-1: new low-speed USB device number 107 using dummy_hcd [ 1211.410549][T20372] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1211.457072][T20372] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1211.484521][T20372] netlink: 212408 bytes leftover after parsing attributes in process `syz.6.3469'. [ 1211.494662][T20372] netlink: zone id is out of range [ 1211.499911][T20372] netlink: zone id is out of range [ 1211.575468][T20372] netlink: zone id is out of range [ 1211.580672][T20372] netlink: zone id is out of range [ 1211.628951][ T5949] usb 4-1: Invalid ep0 maxpacket: 16 [ 1211.642571][ T5949] usb usb4-port1: attempt power cycle [ 1211.684161][T20372] netlink: zone id is out of range [ 1211.687772][ T8025] udevd[8025]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/sound/card4/controlC4/../uevent} for writing: No such file or directory [ 1211.689477][T20372] netlink: zone id is out of range [ 1211.729601][T20372] netlink: get zone limit has 8 unknown bytes [ 1211.778003][T20381] IPv6: sit1: Disabled Multicast RS [ 1211.815615][T20381] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3474'. [ 1211.992576][ T5949] usb 4-1: new low-speed USB device number 108 using dummy_hcd [ 1212.009660][T20375] netlink: 75 bytes leftover after parsing attributes in process `syz.1.3475'. [ 1212.023778][ T5949] usb 4-1: Invalid ep0 maxpacket: 16 [ 1212.163023][ T5949] usb 4-1: new low-speed USB device number 109 using dummy_hcd [ 1212.196996][ T5949] usb 4-1: Invalid ep0 maxpacket: 16 [ 1212.205503][ T5949] usb usb4-port1: unable to enumerate USB device [ 1212.392790][ T5949] usb 7-1: reset high-speed USB device number 96 using dummy_hcd [ 1212.671061][T14322] usb 6-1: USB disconnect, device number 25 [ 1212.947263][T20386] netlink: 28 bytes leftover after parsing attributes in process `syz.6.3477'. [ 1213.189506][T20391] ptrace attach of "./syz-executor exec"[10154] was attempted by "./syz-executor exec"[20391] [ 1213.287968][T20391] bond4: entered allmulticast mode [ 1213.293755][T20391] 8021q: adding VLAN 0 to HW filter on device bond4 [ 1213.660883][T15014] usb 7-1: USB disconnect, device number 96 [ 1214.312693][ T5949] usb 2-1: new low-speed USB device number 66 using dummy_hcd [ 1214.500962][ T5949] usb 2-1: Invalid ep0 maxpacket: 64 [ 1214.654759][ T5949] usb 2-1: new low-speed USB device number 67 using dummy_hcd [ 1214.663173][T20412] sg_write: data in/out 2539/14 bytes for SCSI command 0x0-- guessing data in; [ 1214.663173][T20412] program syz.2.3484 not setting count and/or reply_len properly [ 1214.846817][ T5949] usb 2-1: Invalid ep0 maxpacket: 64 [ 1214.861817][ T5949] usb usb2-port1: attempt power cycle [ 1215.323447][ T5949] usb 2-1: new low-speed USB device number 68 using dummy_hcd [ 1215.366066][ T5949] usb 2-1: Invalid ep0 maxpacket: 64 [ 1215.513115][ T5949] usb 2-1: new low-speed USB device number 69 using dummy_hcd [ 1215.545916][ T5949] usb 2-1: Invalid ep0 maxpacket: 64 [ 1215.551718][ T5949] usb usb2-port1: unable to enumerate USB device [ 1215.575613][T13215] usb 3-1: new high-speed USB device number 82 using dummy_hcd [ 1215.903063][T13215] usb 3-1: Using ep0 maxpacket: 16 [ 1215.939176][T13215] usb 3-1: config 1 contains an unexpected descriptor of type 0x2, skipping [ 1215.966065][T13215] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1216.116493][T13215] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 1216.154856][T13215] usb 3-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 1216.166960][T13215] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1216.179791][T13215] usb 3-1: Product: syz [ 1216.186654][T13215] usb 3-1: Manufacturer: syz [ 1216.191935][T13215] usb 3-1: SerialNumber: syz [ 1216.615622][T20417] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1216.712540][ T24] usb 6-1: new high-speed USB device number 26 using dummy_hcd [ 1216.722794][T13215] usb 3-1: 0:2 : does not exist [ 1216.812748][T14322] usb 4-1: new high-speed USB device number 110 using dummy_hcd [ 1216.962792][ T24] usb 6-1: Using ep0 maxpacket: 16 [ 1216.983165][T14322] usb 4-1: Using ep0 maxpacket: 16 [ 1217.119199][T13215] usb 3-1: 1:0: cannot get min/max values for control 2 (id 1) [ 1217.273983][T13215] usb 3-1: USB disconnect, device number 82 [ 1217.492850][T14324] usb 7-1: new high-speed USB device number 97 using dummy_hcd [ 1217.678308][T14324] usb 7-1: Using ep0 maxpacket: 8 [ 1217.702547][T14324] usb 7-1: New USB device found, idVendor=0763, idProduct=2080, bcdDevice=d0.ab [ 1217.712191][T14324] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1217.720713][T14324] usb 7-1: Product: syz [ 1217.747877][T14324] usb 7-1: Manufacturer: syz [ 1217.759960][T14324] usb 7-1: SerialNumber: syz [ 1217.779371][T20440] [U] ¹ÉMÙ­ÕÁQ&’Ù Kœ4 [ 1217.790357][T14324] usb 7-1: config 0 descriptor?? [ 1217.794668][T20440] [U] [“)ÎU°}¸Ç”ÍÚJϬ}N°SEF*œ £‡¿ßÅNZÍÀF[F_H®¦'ª„W"ÓXÅ~¶ÎÏÚ;VA˜)^ˆ`Û1C':ZÂÞ÷ÃÃÚÞFOBÞ *?ÛŸC‹Z˜S¯Ý<8ZNÑ·š Ñ˜¾ÔEY TT<$CÐR¿Æ–»/VG¿Ðà {Y«~Y5\—;ƃZ–ÓDX ŸƒYÖA€Ì"XI®F¦{‚Å`A$í¡55?­É×S«AÃM¢ÅO‰¤«ÝÍ»*K€¶ [ 1217.901191][T20440] [U] ÔO‡4 [ 1217.909399][T20443] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1217.955627][T20440] [U] œšU·©BÕ+ '~GIÞƒRQ^Á¿™,(-|¢ØÚŸ†Ë-<ƒ6&µÅH.Z9ÉÎ/ÚRJΩ°™³ËˆÅ+)Ö­KΦ.›NHÕA#LW#RF7–PÙªÛÍMAX€Ï]Œ¤›LN"KŒM +,G¶SB´HJ‚¹ËXÏ̧ÉCÎÝQ„ [ 1217.973286][T20443] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1218.138903][ T5949] usb 3-1: new low-speed USB device number 83 using dummy_hcd [ 1218.315363][T14324] usb 7-1: USB disconnect, device number 97 [ 1218.427355][ T8374] udevd[8374]: error opening ATTR{/sys/devices/platform/dummy_hcd.6/usb7/7-1/7-1:0.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1218.927364][T20457] netlink: 124 bytes leftover after parsing attributes in process `syz.2.3497'. [ 1219.452395][T20462] netlink: 'syz.6.3496': attribute type 13 has an invalid length. [ 1219.754612][T20466] ptrace attach of "./syz-executor exec"[18110] was attempted by "./syz-executor exec"[20466] [ 1219.815759][T20462] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1219.832124][T20462] 8021q: adding VLAN 0 to HW filter on device team0 [ 1220.124219][ T92] usb 3-1: new high-speed USB device number 84 using dummy_hcd [ 1220.232916][T20462] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 1220.272620][ T92] usb 3-1: device descriptor read/64, error -71 [ 1220.294969][T20466] workqueue: Failed to create a rescuer kthread for wq "bond2": -EINTR [ 1220.366762][ T24] usb 6-1: unable to get BOS descriptor or descriptor too short [ 1220.461751][ T24] usb 6-1: unable to read config index 0 descriptor/start: -71 [ 1220.492780][ T24] usb 6-1: can't read configurations, error -71 [ 1220.643463][ T92] usb 3-1: new high-speed USB device number 85 using dummy_hcd [ 1220.737728][T20473] netlink: 60 bytes leftover after parsing attributes in process `syz.5.3500'. [ 1220.792852][ T92] usb 3-1: device descriptor read/64, error -71 [ 1220.868377][T20473] loop6: detected capacity change from 0 to 524287999 [ 1220.914611][ T92] usb usb3-port1: attempt power cycle [ 1220.996726][T14322] usb 4-1: unable to get BOS descriptor or descriptor too short [ 1221.032935][T14322] usb 4-1: unable to read config index 0 descriptor/start: -71 [ 1221.050858][T14322] usb 4-1: can't read configurations, error -71 [ 1221.303698][ T92] usb 3-1: new high-speed USB device number 86 using dummy_hcd [ 1221.383969][ T92] usb 3-1: device descriptor read/8, error -71 [ 1221.392703][T14322] usb 4-1: new full-speed USB device number 111 using dummy_hcd [ 1221.595417][T14322] usb 4-1: unable to get BOS descriptor or descriptor too short [ 1221.623045][T14322] usb 4-1: not running at top speed; connect to a high speed hub [ 1221.653494][ T92] usb 3-1: new high-speed USB device number 87 using dummy_hcd [ 1221.693418][ T92] usb 3-1: device descriptor read/8, error -71 [ 1221.710608][T14322] usb 4-1: config 12 has an invalid interface number: 184 but max is 0 [ 1221.710643][T14322] usb 4-1: config 12 has no interface number 0 [ 1221.710687][T14322] usb 4-1: config 12 interface 184 altsetting 0 endpoint 0x3 has an invalid bInterval 0, changing to 10 [ 1221.714257][T14322] usb 4-1: New USB device found, idVendor=0499, idProduct=100d, bcdDevice=84.a2 [ 1221.714290][T14322] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1221.714321][T14322] usb 4-1: Product: syz [ 1221.714337][T14322] usb 4-1: Manufacturer: syz [ 1221.714354][T14322] usb 4-1: SerialNumber: syz [ 1221.803345][ T92] usb usb3-port1: unable to enumerate USB device [ 1221.977640][T14322] usb 4-1: Quirk or no altset; falling back to MIDI 1.0 [ 1222.106385][T14322] usb 4-1: USB disconnect, device number 111 [ 1223.106335][T20508] could not allocate digest TFM handle poly1305 [ 1223.273863][ T92] usb 3-1: new high-speed USB device number 88 using dummy_hcd [ 1223.522607][ T92] usb 3-1: Using ep0 maxpacket: 32 [ 1223.535505][ T92] usb 3-1: config 1 has an invalid interface number: 233 but max is 0 [ 1223.544229][ T92] usb 3-1: config 1 has no interface number 0 [ 1223.572546][ T92] usb 3-1: config 1 interface 233 has no altsetting 0 [ 1223.789775][ T92] usb 3-1: New USB device found, idVendor=04e8, idProduct=ff30, bcdDevice=34.ac [ 1223.799280][ T92] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1223.822569][ T92] usb 3-1: Product: syz [ 1223.837052][ T92] usb 3-1: Manufacturer: syz [ 1223.865961][ T92] usb 3-1: SerialNumber: syz [ 1223.882697][T14322] usb 7-1: new high-speed USB device number 98 using dummy_hcd [ 1223.960840][T20525] netlink: 28 bytes leftover after parsing attributes in process `syz.1.3512'. [ 1224.042787][T14322] usb 7-1: Using ep0 maxpacket: 16 [ 1224.178476][ T92] imon_raw 3-1:1.233: IR endpoint missing [ 1224.236826][ T92] usb 3-1: USB disconnect, device number 88 [ 1224.568788][T20530] netlink: 60 bytes leftover after parsing attributes in process `syz.1.3513'. [ 1224.714893][T20529] loop6: detected capacity change from 0 to 524287999 [ 1225.612797][ T92] usb 2-1: new high-speed USB device number 70 using dummy_hcd [ 1225.759604][T20549] ptrace attach of "./syz-executor exec"[10154] was attempted by "./syz-executor exec"[20549] [ 1225.772800][ T92] usb 2-1: Using ep0 maxpacket: 32 [ 1225.788174][T20553] ptrace attach of "./syz-executor exec"[18848] was attempted by "./syz-executor exec"[20553] [ 1225.816025][ T92] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1225.931215][ T92] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1225.984030][ T92] usb 2-1: New USB device found, idVendor=1e7d, idProduct=2d51, bcdDevice= 0.00 [ 1226.021349][T20552] bond2: entered allmulticast mode [ 1226.028784][T20552] 8021q: adding VLAN 0 to HW filter on device bond2 [ 1226.242402][T20549] bond5: entered allmulticast mode [ 1226.252731][T20549] 8021q: adding VLAN 0 to HW filter on device bond5 [ 1226.260245][ T92] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1226.665212][ T92] usb 2-1: config 0 descriptor?? [ 1226.732703][ T5949] usb 3-1: new high-speed USB device number 89 using dummy_hcd [ 1226.940301][ T5949] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1227.055057][ T5949] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1227.103264][ T92] koneplus 0003:1E7D:2D51.0031: unknown main item tag 0x0 [ 1227.115785][ T5949] usb 3-1: New USB device found, idVendor=256c, idProduct=006d, bcdDevice= 0.00 [ 1227.136662][ T92] koneplus 0003:1E7D:2D51.0031: unknown main item tag 0x0 [ 1227.171414][ T5949] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1227.212891][ T92] koneplus 0003:1E7D:2D51.0031: unknown main item tag 0x0 [ 1227.266415][ T92] koneplus 0003:1E7D:2D51.0031: unknown main item tag 0x0 [ 1227.274975][ T5949] usb 3-1: config 0 descriptor?? [ 1227.352660][ T92] koneplus 0003:1E7D:2D51.0031: unknown main item tag 0x0 [ 1227.444478][ T92] koneplus 0003:1E7D:2D51.0031: hidraw0: USB HID v0.00 Device [HID 1e7d:2d51] on usb-dummy_hcd.1-1/input0 [ 1227.881866][T20537] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1227.943927][T20537] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1227.959099][T20537] netlink: 212408 bytes leftover after parsing attributes in process `syz.1.3516'. [ 1227.996385][T20537] netlink: zone id is out of range [ 1228.001584][T20537] netlink: zone id is out of range [ 1228.100295][T20537] netlink: zone id is out of range [ 1228.107865][T14322] usb 7-1: unable to get BOS descriptor or descriptor too short [ 1228.155392][T14322] usb 7-1: unable to read config index 0 descriptor/start: -71 [ 1228.184216][T20537] netlink: zone id is out of range [ 1228.191886][T20537] netlink: get zone limit has 8 unknown bytes [ 1228.204784][T14322] usb 7-1: can't read configurations, error -71 [ 1228.632929][T14322] usb 7-1: new high-speed USB device number 99 using dummy_hcd [ 1228.818109][T14322] usb 7-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1228.830798][T14322] usb 7-1: config 0 interface 0 altsetting 12 has 0 endpoint descriptors, different from the interface descriptor's value: 2 [ 1228.976803][T14322] usb 7-1: config 0 interface 0 has no altsetting 0 [ 1229.200139][T14322] usb 7-1: New USB device found, idVendor=1199, idProduct=b000, bcdDevice=e5.38 [ 1229.210730][T14322] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1229.219489][T14322] usb 7-1: Product: syz [ 1229.319583][T14322] usb 7-1: Manufacturer: syz [ 1229.337675][T14322] usb 7-1: SerialNumber: syz [ 1229.376006][T14322] usb 7-1: config 0 descriptor?? [ 1229.427548][ T24] usb 2-1: USB disconnect, device number 70 [ 1229.651527][T20222] usb 7-1: USB disconnect, device number 99 [ 1230.903433][T20580] sctp: [Deprecated]: syz.6.3524 (pid 20580) Use of struct sctp_assoc_value in delayed_ack socket option. [ 1230.903433][T20580] Use struct sctp_sack_info instead [ 1231.552658][ T5949] uclogic 0003:256C:006D.0032: v1 frame probing failed: -71 [ 1231.582668][ T5949] uclogic 0003:256C:006D.0032: failed probing parameters: -71 [ 1231.590783][ T5949] uclogic 0003:256C:006D.0032: probe with driver uclogic failed with error -71 [ 1231.661894][ T5949] usb 3-1: USB disconnect, device number 89 [ 1231.857955][T20594] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3526'. [ 1233.762824][ T5949] usb 2-1: new high-speed USB device number 71 using dummy_hcd [ 1234.001573][ T5949] usb 2-1: Using ep0 maxpacket: 16 [ 1234.234612][T20611] netlink: 16 bytes leftover after parsing attributes in process `syz.2.3531'. [ 1234.595116][T20611] bond0: entered promiscuous mode [ 1234.725925][T20611] bond0: left promiscuous mode [ 1235.967104][ T10] usb 3-1: new high-speed USB device number 90 using dummy_hcd [ 1236.037199][T20627] loop6: detected capacity change from 0 to 63 [ 1236.086239][ T8374] buffer_io_error: 8 callbacks suppressed [ 1236.086260][ T8374] Buffer I/O error on dev loop6, logical block 0, async page read [ 1236.112688][ T10] usb 3-1: device descriptor read/64, error -71 [ 1236.190324][T20627] Buffer I/O error on dev loop6, logical block 0, async page read [ 1236.221276][ T8374] Buffer I/O error on dev loop6, logical block 0, async page read [ 1236.284923][ T8374] Buffer I/O error on dev loop6, logical block 0, async page read [ 1236.313225][ T8374] Buffer I/O error on dev loop6, logical block 0, async page read [ 1236.352961][T20628] Buffer I/O error on dev loop6, logical block 0, async page read [ 1236.370567][T20627] Buffer I/O error on dev loop6, logical block 0, async page read [ 1236.520131][T20627] Buffer I/O error on dev loop6, logical block 0, async page read [ 1236.553322][ T10] usb 3-1: new high-speed USB device number 91 using dummy_hcd [ 1236.555721][ T8374] Buffer I/O error on dev loop6, logical block 0, async page read [ 1236.570053][T20627] Buffer I/O error on dev loop6, logical block 0, async page read [ 1236.892821][ T10] usb 3-1: device descriptor read/64, error -71 [ 1237.008952][ T10] usb usb3-port1: attempt power cycle [ 1237.372929][ T10] usb 3-1: new high-speed USB device number 92 using dummy_hcd [ 1237.406761][ T10] usb 3-1: device descriptor read/8, error -71 [ 1237.450940][ T5949] usb 2-1: unable to get BOS descriptor or descriptor too short [ 1237.529340][ T5949] usb 2-1: unable to read config index 0 descriptor/start: -71 [ 1237.550313][ T5949] usb 2-1: can't read configurations, error -71 [ 1237.652558][ T10] usb 3-1: new high-speed USB device number 93 using dummy_hcd [ 1237.693539][ T10] usb 3-1: device descriptor read/8, error -71 [ 1237.803932][ T10] usb usb3-port1: unable to enumerate USB device [ 1238.623407][T20650] tipc: Enabled bearer , priority 0 [ 1238.702768][T20650] syzkaller0: entered promiscuous mode [ 1238.739738][T20650] syzkaller0: entered allmulticast mode [ 1238.763279][T14324] usb 7-1: new high-speed USB device number 100 using dummy_hcd [ 1238.785901][T20650] F2FS-fs: Value of option "test_dummy_encryption" is unrecognized [ 1238.943197][T14324] usb 7-1: Using ep0 maxpacket: 8 [ 1238.961757][T14324] usb 7-1: New USB device found, idVendor=0c45, idProduct=613a, bcdDevice=c4.6d [ 1238.979596][T14324] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1238.997416][T20655] tipc: Resetting bearer [ 1239.017991][ T1307] ieee802154 phy0 wpan0: encryption failed: -22 [ 1239.024508][ T1307] ieee802154 phy1 wpan1: encryption failed: -22 [ 1239.035387][T14324] usb 7-1: Product: syz [ 1239.049430][T14324] usb 7-1: Manufacturer: syz [ 1239.059086][T14324] usb 7-1: SerialNumber: syz [ 1239.073434][T14324] usb 7-1: config 0 descriptor?? [ 1239.096373][T14324] gspca_main: sonixj-2.14.0 probing 0c45:613a [ 1239.433009][ T24] usb 4-1: new high-speed USB device number 112 using dummy_hcd [ 1239.446288][T14322] usb 3-1: new high-speed USB device number 94 using dummy_hcd [ 1239.603647][T14322] usb 3-1: Using ep0 maxpacket: 8 [ 1239.682936][ T24] usb 4-1: Using ep0 maxpacket: 16 [ 1239.699995][T14322] usb 3-1: too many endpoints for config 0 interface 0 altsetting 0: 253, using maximum allowed: 30 [ 1239.721616][T20222] tipc: Node number set to 3158217365 [ 1239.741984][T14322] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 253 [ 1239.760958][T14324] gspca_sonixj: reg_r err -32 [ 1239.766086][T14324] sonixj 7-1:0.0: probe with driver sonixj failed with error -32 [ 1239.841470][ T5949] usb 2-1: new full-speed USB device number 73 using dummy_hcd [ 1239.857714][T14322] usb 3-1: New USB device found, idVendor=056e, idProduct=00fb, bcdDevice= 0.00 [ 1239.879627][T14322] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1239.900729][T14322] usb 3-1: config 0 descriptor?? [ 1240.015085][ T5949] usb 2-1: config index 0 descriptor too short (expected 31685, got 18) [ 1240.024036][ T5949] usb 2-1: config 118 has too many interfaces: 53, using maximum allowed: 32 [ 1240.187643][ T5949] usb 2-1: config 118 has an invalid descriptor of length 196, skipping remainder of the config [ 1240.207810][ T5949] usb 2-1: config 118 has 0 interfaces, different from the descriptor's value: 53 [ 1240.241117][ T5949] usb 2-1: New USB device found, idVendor=0c72, idProduct=0014, bcdDevice=39.ac [ 1240.257239][ T5949] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1240.277169][ T5949] usb 2-1: Product: syz [ 1240.291795][ T5949] usb 2-1: Manufacturer: syz [ 1240.309947][ T5949] usb 2-1: SerialNumber: syz [ 1240.816308][ T5949] usb 2-1: USB disconnect, device number 73 [ 1241.314568][T20222] usb 7-1: USB disconnect, device number 100 [ 1241.451309][T14322] usbhid 3-1:0.0: can't add hid device: -71 [ 1241.478534][T20648] tipc: Resetting bearer [ 1241.484825][T14322] usbhid 3-1:0.0: probe with driver usbhid failed with error -71 [ 1241.551952][T14322] usb 3-1: USB disconnect, device number 94 [ 1241.597918][T20648] tipc: Disabling bearer [ 1241.650149][T20678] netlink: 60 bytes leftover after parsing attributes in process `syz.1.3547'. [ 1243.186448][ T24] usb 4-1: unable to get BOS descriptor or descriptor too short [ 1243.234721][ T24] usb 4-1: unable to read config index 0 descriptor/start: -71 [ 1243.255394][ T24] usb 4-1: can't read configurations, error -71 [ 1243.502523][T15014] usb 6-1: new high-speed USB device number 28 using dummy_hcd [ 1243.824606][T15014] usb 6-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0x64, changing to 0x4 [ 1243.861504][T15014] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x4 has an invalid bInterval 0, changing to 7 [ 1243.889400][T15014] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x4 has invalid maxpacket 41447, setting to 1024 [ 1243.936650][T15014] usb 6-1: New USB device found, idVendor=0cf3, idProduct=9374, bcdDevice=bc.3b [ 1243.981656][T15014] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1244.014670][T15014] usb 6-1: config 0 descriptor?? [ 1244.445126][T20695] netlink: 212408 bytes leftover after parsing attributes in process `syz.5.3551'. [ 1244.533100][T20695] netlink: zone id is out of range [ 1244.539799][T20695] netlink: zone id is out of range [ 1244.559054][T20695] netlink: zone id is out of range [ 1244.576054][T20695] netlink: zone id is out of range [ 1244.581658][T20695] netlink: zone id is out of range [ 1244.587432][T20695] netlink: get zone limit has 8 unknown bytes [ 1244.619020][T20717] loop2: detected capacity change from 0 to 7 [ 1244.632796][T20717] Dev loop2: unable to read RDB block 7 [ 1244.639722][T20717] loop2: unable to read partition table [ 1244.652865][T20717] loop2: partition table beyond EOD, truncated [ 1244.659505][T20717] loop_reread_partitions: partition scan of loop2 (þ被xü—ŸÑà– ) failed (rc=-5) [ 1244.959131][T20724] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1245.245571][T15014] ath6kl: Failed to submit usb control message: -110 [ 1245.260141][T15014] ath6kl: unable to send the bmi data to the device: -110 [ 1245.314519][T15014] ath6kl: Unable to send get target info: -110 [ 1245.367203][T15014] ath6kl: Failed to init ath6kl core: -110 [ 1245.389857][T15014] ath6kl_usb 6-1:0.0: probe with driver ath6kl_usb failed with error -110 [ 1245.529673][T20737] ptrace attach of "./syz-executor exec"[18649] was attempted by "./syz-executor exec"[20737] [ 1245.606572][T20737] bond1: entered allmulticast mode [ 1245.617746][T20737] 8021q: adding VLAN 0 to HW filter on device bond1 [ 1245.706642][T13215] usb 7-1: new full-speed USB device number 101 using dummy_hcd [ 1245.972802][T13215] usb 7-1: device descriptor read/64, error -71 [ 1246.071443][T15014] usb 6-1: USB disconnect, device number 28 [ 1246.222664][T13215] usb 7-1: new full-speed USB device number 102 using dummy_hcd [ 1246.542509][T15014] usb 6-1: new high-speed USB device number 29 using dummy_hcd [ 1246.665376][T13215] usb 7-1: device descriptor read/64, error -71 [ 1246.727809][T15014] usb 6-1: Using ep0 maxpacket: 16 [ 1246.781489][T15014] usb 6-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 1246.831610][T15014] usb 6-1: New USB device found, idVendor=045e, idProduct=05da, bcdDevice= 0.00 [ 1246.862969][T15014] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1246.867260][T13215] usb usb7-port1: attempt power cycle [ 1246.941140][T15014] usb 6-1: config 0 descriptor?? [ 1247.306114][T13215] usb 7-1: new full-speed USB device number 103 using dummy_hcd [ 1247.366008][T13215] usb 7-1: device descriptor read/8, error -71 [ 1247.662592][T13215] usb 7-1: new full-speed USB device number 104 using dummy_hcd [ 1247.713857][T13215] usb 7-1: device descriptor read/8, error -71 [ 1247.902123][T13215] usb usb7-port1: unable to enumerate USB device [ 1248.471013][T20767] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3567'. [ 1249.086030][ T92] usb 7-1: new high-speed USB device number 105 using dummy_hcd [ 1249.358733][ T92] usb 7-1: Using ep0 maxpacket: 32 [ 1249.534722][T13215] usb 6-1: USB disconnect, device number 29 [ 1249.590437][ T92] usb 7-1: config 0 interface 0 altsetting 0 bulk endpoint 0x85 has invalid maxpacket 255 [ 1249.913903][ T92] usb 7-1: New USB device found, idVendor=0499, idProduct=1010, bcdDevice= 5.f5 [ 1249.944019][ T92] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1249.952289][ T92] usb 7-1: Product: syz [ 1250.102507][ T92] usb 7-1: Manufacturer: syz [ 1250.107169][ T92] usb 7-1: SerialNumber: syz [ 1250.221374][ T92] usb 7-1: config 0 descriptor?? [ 1250.470571][T20772] raw-gadget.1 gadget.6: fail, usb_ep_enable returned -22 [ 1250.527098][ T92] usb 7-1: Quirk or no altset; falling back to MIDI 1.0 [ 1252.372130][T13215] usb 7-1: USB disconnect, device number 105 [ 1253.239465][T20807] netlink: 4 bytes leftover after parsing attributes in process `syz.6.3577'. [ 1253.687142][T14322] usb 4-1: new low-speed USB device number 114 using dummy_hcd [ 1254.107152][T14322] usb 4-1: Invalid ep0 maxpacket: 32 [ 1254.272583][T14322] usb 4-1: new low-speed USB device number 115 using dummy_hcd [ 1254.441518][T14322] usb 4-1: Invalid ep0 maxpacket: 32 [ 1254.672623][T14322] usb usb4-port1: attempt power cycle [ 1255.072746][T14322] usb 4-1: new low-speed USB device number 116 using dummy_hcd [ 1255.135831][T14322] usb 4-1: Invalid ep0 maxpacket: 32 [ 1255.276750][T14322] usb 4-1: new low-speed USB device number 117 using dummy_hcd [ 1255.321663][ T30] kauditd_printk_skb: 44 callbacks suppressed [ 1255.321685][ T30] audit: type=1326 audit(1754892634.620:1457): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20824 comm="syz.6.3581" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f033498ebe9 code=0x0 [ 1255.325851][T14322] usb 4-1: Invalid ep0 maxpacket: 32 [ 1255.350150][ C1] vkms_vblank_simulate: vblank timer overrun [ 1255.488802][T14322] usb usb4-port1: unable to enumerate USB device [ 1256.353961][ T24] usb 6-1: new high-speed USB device number 30 using dummy_hcd [ 1256.552824][ T24] usb 6-1: device descriptor read/64, error -71 [ 1256.832521][ T24] usb 6-1: new high-speed USB device number 31 using dummy_hcd [ 1256.972607][ T24] usb 6-1: device descriptor read/64, error -71 [ 1257.163013][T20868] netlink: 76 bytes leftover after parsing attributes in process `syz.3.3591'. [ 1257.182582][ T24] usb usb6-port1: attempt power cycle [ 1257.401500][T14322] usb 3-1: new high-speed USB device number 95 using dummy_hcd [ 1257.542828][ T24] usb 6-1: new high-speed USB device number 32 using dummy_hcd [ 1257.599907][ T24] usb 6-1: device descriptor read/8, error -71 [ 1257.606411][T14322] usb 3-1: Using ep0 maxpacket: 16 [ 1257.622101][T14322] usb 3-1: config 0 has an invalid interface number: 251 but max is 0 [ 1257.631151][T14322] usb 3-1: config 0 has no interface number 0 [ 1257.637483][T14322] usb 3-1: config 0 interface 251 altsetting 0 bulk endpoint 0x4 has invalid maxpacket 16 [ 1257.658286][T14322] usb 3-1: config 0 interface 251 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 64 [ 1257.693109][T14322] usb 3-1: New USB device found, idVendor=0b95, idProduct=172a, bcdDevice=f7.f4 [ 1257.703165][T14322] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1257.711163][T14322] usb 3-1: Product: syz [ 1257.722571][T14322] usb 3-1: Manufacturer: syz [ 1257.737532][T14322] usb 3-1: SerialNumber: syz [ 1257.793841][T14322] usb 3-1: config 0 descriptor?? [ 1257.820806][T20864] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 1257.828380][T20864] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 1257.842600][ T24] usb 6-1: new high-speed USB device number 33 using dummy_hcd [ 1257.880068][ T24] usb 6-1: device descriptor read/8, error -71 [ 1258.013113][ T24] usb usb6-port1: unable to enumerate USB device [ 1258.065794][T20864] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 1258.073324][T20864] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 1258.492015][ T30] audit: type=1326 audit(1754892637.790:1458): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20876 comm="syz.6.3594" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f033498ebe9 code=0x7ffc0000 [ 1258.561019][ T30] audit: type=1326 audit(1754892637.820:1459): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20876 comm="syz.6.3594" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f033498ebe9 code=0x7ffc0000 [ 1258.617613][ T30] audit: type=1326 audit(1754892637.820:1460): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20876 comm="syz.6.3594" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f033498ebe9 code=0x7ffc0000 [ 1258.862736][ T92] usb 7-1: new high-speed USB device number 106 using dummy_hcd [ 1258.939658][ T30] audit: type=1326 audit(1754892637.820:1461): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20876 comm="syz.6.3594" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f033498ebe9 code=0x7ffc0000 [ 1259.026333][ T30] audit: type=1326 audit(1754892637.820:1462): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20876 comm="syz.6.3594" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f033498ebe9 code=0x7ffc0000 [ 1259.049634][ T92] usb 7-1: device descriptor read/64, error -71 [ 1259.059400][ T30] audit: type=1326 audit(1754892637.820:1463): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20876 comm="syz.6.3594" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f033498ebe9 code=0x7ffc0000 [ 1259.172508][ T30] audit: type=1326 audit(1754892637.820:1464): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20876 comm="syz.6.3594" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f033498ebe9 code=0x7ffc0000 [ 1259.314078][ T92] usb 7-1: new high-speed USB device number 107 using dummy_hcd [ 1259.472657][ T92] usb 7-1: device descriptor read/64, error -71 [ 1259.552564][T15014] usb 6-1: new high-speed USB device number 34 using dummy_hcd [ 1259.593068][ T92] usb usb7-port1: attempt power cycle [ 1259.732657][T15014] usb 6-1: Using ep0 maxpacket: 16 [ 1259.751656][T15014] usb 6-1: config 0 has an invalid interface number: 8 but max is 0 [ 1259.761484][T15014] usb 6-1: config 0 has no interface number 0 [ 1259.780460][T15014] usb 6-1: config 0 interface 8 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 1259.812283][T15014] usb 6-1: config 0 interface 8 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0 [ 1259.845942][T15014] usb 6-1: New USB device found, idVendor=0d8c, idProduct=000e, bcdDevice=8e.8f [ 1259.855638][T15014] usb 6-1: New USB device strings: Mfr=0, Product=24, SerialNumber=3 [ 1259.882146][T15014] usb 6-1: Product: syz [ 1259.886997][T15014] usb 6-1: SerialNumber: syz [ 1259.903475][T15014] usb 6-1: config 0 descriptor?? [ 1259.929920][T15014] cm109 6-1:0.8: invalid payload size 0, expected 4 [ 1259.937274][ T92] usb 7-1: new high-speed USB device number 108 using dummy_hcd [ 1259.951320][T15014] input: CM109 USB driver as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:0.8/input/input105 [ 1259.964218][ T92] usb 7-1: device descriptor read/8, error -71 [ 1260.112710][T20222] usb 2-1: new high-speed USB device number 74 using dummy_hcd [ 1260.152985][ T5949] usb 4-1: new full-speed USB device number 118 using dummy_hcd [ 1260.178139][T20864] netlink: 40 bytes leftover after parsing attributes in process `syz.2.3592'. [ 1260.212750][ T92] usb 7-1: new high-speed USB device number 109 using dummy_hcd [ 1260.233501][ T92] usb 7-1: device descriptor read/8, error -71 [ 1260.285409][T20222] usb 2-1: config 1 contains an unexpected descriptor of type 0x2, skipping [ 1260.294829][T20222] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1260.302695][ T5949] usb 4-1: device descriptor read/64, error -71 [ 1260.305471][T20222] usb 2-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 1260.320735][T20222] usb 2-1: config 1 has no interface number 1 [ 1260.327153][T20222] usb 2-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0 [ 1260.347664][ T92] usb usb7-port1: unable to enumerate USB device [ 1260.355142][ C0] cm109 6-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 1260.362368][ C0] cm109 6-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 1260.369961][ C0] cm109 6-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 1260.377244][ C0] cm109 6-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 1260.384607][ C0] cm109 6-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 1260.391798][ C0] cm109 6-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 1260.398987][ C0] cm109 6-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 1260.406172][ C0] cm109 6-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 1260.413465][ C0] cm109 6-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 1260.420670][ C0] cm109 6-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 1260.430491][T14322] asix 3-1:0.251 (unnamed net_device) (uninitialized): Failed to read reg index 0x0002: -71 [ 1260.461266][ T92] usb 6-1: USB disconnect, device number 34 [ 1260.467492][ C0] cm109 6-1:0.8: cm109_submit_buzz_toggle: usb_submit_urb (urb_ctl) failed -19 [ 1260.478509][T20222] usb 2-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 1260.488521][T20222] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1260.497798][T20222] usb 2-1: Product: syz [ 1260.499080][ T92] cm109 6-1:0.8: cm109_toggle_buzzer_sync: usb_control_msg() failed -19 [ 1260.509813][T14322] asix 3-1:0.251 (unnamed net_device) (uninitialized): Could not register MDIO bus [ 1260.523832][T20222] usb 2-1: Manufacturer: syz [ 1260.529085][T20222] usb 2-1: SerialNumber: syz [ 1260.535231][T14322] asix 3-1:0.251: probe with driver asix failed with error -5 [ 1260.562601][ T5949] usb 4-1: new full-speed USB device number 119 using dummy_hcd [ 1260.563075][T14322] usb 3-1: USB disconnect, device number 95 [ 1260.702659][ T5949] usb 4-1: device descriptor read/64, error -71 [ 1260.802929][T20892] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1260.812028][T20892] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1260.820846][ T5949] usb usb4-port1: attempt power cycle [ 1260.988942][T20896] netlink: 16 bytes leftover after parsing attributes in process `syz.5.3598'. [ 1261.013125][T20896] bond0: entered promiscuous mode [ 1261.018242][T20896] bond_slave_0: entered promiscuous mode [ 1261.028544][T20896] bond_slave_1: entered promiscuous mode [ 1261.043335][T20896] bond1: entered promiscuous mode [ 1261.058625][T20896] bond0: left promiscuous mode [ 1261.072079][T20896] bond_slave_0: left promiscuous mode [ 1261.087423][T20896] bond_slave_1: left promiscuous mode [ 1261.097012][T20896] bond1: left promiscuous mode [ 1261.165165][ T5949] usb 4-1: new full-speed USB device number 120 using dummy_hcd [ 1261.193345][ T5949] usb 4-1: device descriptor read/8, error -71 [ 1261.362835][ T92] usb 3-1: new high-speed USB device number 96 using dummy_hcd [ 1261.432624][ T5949] usb 4-1: new full-speed USB device number 121 using dummy_hcd [ 1261.454847][ T5949] usb 4-1: device descriptor read/8, error -71 [ 1261.543995][ T92] usb 3-1: New USB device found, idVendor=0813, idProduct=0001, bcdDevice=3a.08 [ 1261.570841][T14322] usb 6-1: new high-speed USB device number 35 using dummy_hcd [ 1261.577318][ T5949] usb usb4-port1: unable to enumerate USB device [ 1261.587712][ T92] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1261.604915][ T92] usb 3-1: config 0 descriptor?? [ 1261.618020][ T92] gspca_main: cpia1-2.14.0 probing 0813:0001 [ 1261.722550][T14322] usb 6-1: Using ep0 maxpacket: 8 [ 1261.734775][T14322] usb 6-1: New USB device found, idVendor=0c45, idProduct=613a, bcdDevice=c4.6d [ 1261.744279][T14322] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1261.752831][T14322] usb 6-1: Product: syz [ 1261.757469][T14322] usb 6-1: Manufacturer: syz [ 1261.762236][T14322] usb 6-1: SerialNumber: syz [ 1261.772080][T14322] usb 6-1: config 0 descriptor?? [ 1261.781624][T14322] gspca_main: sonixj-2.14.0 probing 0c45:613a [ 1261.926628][ T10] usb 7-1: new high-speed USB device number 110 using dummy_hcd [ 1262.015343][ T92] cpia1 3-1:0.0: unexpected state after lo power cmd: 00 [ 1262.093147][ T10] usb 7-1: Using ep0 maxpacket: 32 [ 1262.106195][ T10] usb 7-1: New USB device found, idVendor=0fd9, idProduct=0025, bcdDevice=29.40 [ 1262.118786][ T10] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1262.137793][ T10] usb 7-1: config 0 descriptor?? [ 1262.366826][ T10] dvb-usb: found a 'Elgato EyeTV Sat' in warm state. [ 1262.878534][ T10] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 1262.929524][T14322] gspca_sonixj: reg_r err -110 [ 1262.941379][T14322] sonixj 6-1:0.0: probe with driver sonixj failed with error -110 [ 1263.032923][ T10] dvbdev: DVB: registering new adapter (Elgato EyeTV Sat) [ 1263.044821][T20914] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1263.055750][T20914] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1263.082602][ T10] usb 7-1: media controller created [ 1263.143750][T15014] usb 4-1: new high-speed USB device number 122 using dummy_hcd [ 1263.150658][T20222] usb 2-1: No MIDI 2.0 at altset 1, falling back to MIDI 1.0 [ 1263.191869][ T10] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 1263.221158][T20222] usb 2-1: MIDIStreaming interface descriptor not found [ 1263.336285][T15014] usb 4-1: config 27 has an invalid descriptor of length 0, skipping remainder of the config [ 1263.347696][T20222] usb 2-1: USB disconnect, device number 74 [ 1263.357685][T15014] usb 4-1: config 27 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 2 [ 1263.371270][ T92] gspca_cpia1: usb_control_msg 03, error -71 [ 1263.379805][ T92] cpia1 3-1:0.0: unexpected systemstate: 00 [ 1263.416389][T15014] usb 4-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 1263.444453][T15014] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1263.455154][ T8025] udevd[8025]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1263.480450][ T92] usb 3-1: USB disconnect, device number 96 [ 1263.576881][T15014] usb 4-1: Quirk or no altset; falling back to MIDI 1.0 [ 1263.648599][T20905] IPv6: sit1: Disabled Multicast RS [ 1263.700855][ T8374] udevd[8374]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:27.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1263.725837][T15014] snd-usb-audio 4-1:27.0: probe with driver snd-usb-audio failed with error -2 [ 1263.809452][T20911] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1263.819995][T20911] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1263.866430][T20911] delete_channel: no stack [ 1263.912283][T15014] usb 4-1: USB disconnect, device number 122 [ 1263.923444][ T30] audit: type=1326 audit(1754892643.090:1465): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20908 comm="syz.3.3604" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f867ed8ebe9 code=0x7ffc0000 [ 1263.946418][ T10] stb0899_attach: Driver disabled by Kconfig [ 1263.964967][T20222] usb 2-1: new full-speed USB device number 75 using dummy_hcd [ 1263.972967][ T10] az6027: no front-end attached [ 1263.972967][ T10] [ 1263.974627][ T10] dvb-usb: no frontend was attached by 'Elgato EyeTV Sat' [ 1263.997484][ T10] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.6/usb7/7-1/input/input106 [ 1264.013328][ T30] audit: type=1326 audit(1754892643.100:1466): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20908 comm="syz.3.3604" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f867ed8ebe9 code=0x7ffc0000 [ 1264.046681][ T10] dvb-usb: schedule remote query interval to 400 msecs. [ 1264.060316][ T10] dvb-usb: Elgato EyeTV Sat successfully initialized and connected. [ 1264.097715][ T30] audit: type=1326 audit(1754892643.100:1467): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20908 comm="syz.3.3604" exe="/root/syz-executor" sig=0 arch=c000003e syscall=222 compat=0 ip=0x7f867ed8ebe9 code=0x7ffc0000 [ 1264.146583][ T30] audit: type=1326 audit(1754892643.100:1468): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20908 comm="syz.3.3604" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f867ed8ebe9 code=0x7ffc0000 [ 1264.176064][T20222] usb 2-1: config 6 has an invalid interface number: 2 but max is 0 [ 1264.184707][T15014] usb 7-1: USB disconnect, device number 110 [ 1264.191588][T20222] usb 2-1: config 6 has no interface number 0 [ 1264.194465][ T30] audit: type=1326 audit(1754892643.100:1469): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20908 comm="syz.3.3604" exe="/root/syz-executor" sig=0 arch=c000003e syscall=322 compat=0 ip=0x7f867ed8ebe9 code=0x7ffc0000 [ 1264.236922][T20222] usb 2-1: config 6 interface 2 altsetting 0 endpoint 0xB has invalid wMaxPacketSize 0 [ 1264.291248][T15014] dvb-usb: Elgato EyeTV Sat successfully deinitialized and disconnected. [ 1264.332538][T13215] usb 6-1: USB disconnect, device number 35 [ 1264.334723][ T30] audit: type=1326 audit(1754892643.100:1470): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20908 comm="syz.3.3604" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f867ed8ebe9 code=0x7ffc0000 [ 1264.341920][T20222] usb 2-1: config 6 interface 2 altsetting 0 has an endpoint descriptor with address 0x31, changing to 0x1 [ 1264.364716][ T30] audit: type=1326 audit(1754892643.100:1471): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20908 comm="syz.3.3604" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f867ed8ebe9 code=0x7ffc0000 [ 1264.497493][ T30] audit: type=1326 audit(1754892643.100:1472): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20908 comm="syz.3.3604" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f867ed8ebe9 code=0x7ffc0000 [ 1264.620153][ T30] audit: type=1326 audit(1754892643.100:1473): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20908 comm="syz.3.3604" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f867ed8ebe9 code=0x7ffc0000 [ 1264.638071][T20222] usb 2-1: config 6 interface 2 altsetting 0 endpoint 0x1 has invalid maxpacket 13364, setting to 64 [ 1264.655489][ T30] audit: type=1326 audit(1754892643.100:1474): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20908 comm="syz.3.3604" exe="/root/syz-executor" sig=0 arch=c000003e syscall=46 compat=0 ip=0x7f867ed8ebe9 code=0x7ffc0000 [ 1264.691362][T20222] usb 2-1: New USB device found, idVendor=0af0, idProduct=7271, bcdDevice=88.91 [ 1264.702725][T20222] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1264.717111][T20222] usb 2-1: Product: syz [ 1264.721328][T20222] usb 2-1: Manufacturer: syz [ 1264.727787][T20222] usb 2-1: SerialNumber: syz [ 1264.745418][T20222] hso 2-1:6.2: Failed to find INT IN ep [ 1265.068879][T15014] usb 2-1: USB disconnect, device number 75 [ 1266.038303][T20946] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 1270.742854][T15014] usb 7-1: new high-speed USB device number 111 using dummy_hcd [ 1270.964685][T15014] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1270.994091][T15014] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1271.032475][T15014] usb 7-1: New USB device found, idVendor=1e7d, idProduct=2cf6, bcdDevice= 0.00 [ 1271.062513][T15014] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1271.094277][T15014] usb 7-1: config 0 descriptor?? [ 1271.530936][T15014] pyra 0003:1E7D:2CF6.0033: item fetching failed at offset 5/7 [ 1271.553469][T15014] pyra 0003:1E7D:2CF6.0033: parse failed [ 1271.559362][T15014] pyra 0003:1E7D:2CF6.0033: probe with driver pyra failed with error -22 [ 1271.602515][ T10] usb 2-1: new full-speed USB device number 76 using dummy_hcd [ 1271.721837][ T5949] usb 7-1: USB disconnect, device number 111 [ 1271.785555][ T10] usb 2-1: too many endpoints for config 1 interface 0 altsetting 0: 255, using maximum allowed: 30 [ 1271.810670][ T10] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 1271.848141][ T10] usb 2-1: config 1 interface 0 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 255 [ 1271.884618][ T10] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 1271.894344][T15014] usb 4-1: new high-speed USB device number 123 using dummy_hcd [ 1271.914179][ T10] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 1271.928319][ T10] usb 2-1: SerialNumber: syz [ 1271.953920][ T10] cdc_acm 2-1:1.0: Control and data interfaces are not separated! [ 1272.074983][T15014] usb 4-1: config 27 has an invalid descriptor of length 0, skipping remainder of the config [ 1272.092557][T15014] usb 4-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 1272.114402][T15014] usb 4-1: config 27 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 1272.142606][T15014] usb 4-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 1272.172574][ T10] cdc_acm 2-1:1.0: ttyACM0: USB ACM device [ 1272.188552][T15014] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1272.209095][ T10] usb 2-1: USB disconnect, device number 76 [ 1272.286394][T15014] usb 4-1: Quirk or no altset; falling back to MIDI 1.0 [ 1272.321010][T15014] usb 4-1: invalid MIDI out EP 0 [ 1272.495048][T15014] snd-usb-audio 4-1:27.0: probe with driver snd-usb-audio failed with error -22 [ 1272.562877][T15014] usb 4-1: USB disconnect, device number 123 [ 1273.220427][T21014] netlink: 96 bytes leftover after parsing attributes in process `syz.1.3634'. [ 1274.169389][T21030] netlink: 40 bytes leftover after parsing attributes in process `syz.2.3641'. [ 1274.843655][T15014] usb 6-1: new high-speed USB device number 36 using dummy_hcd [ 1275.017850][T15014] usb 6-1: Using ep0 maxpacket: 32 [ 1275.041816][T15014] usb 6-1: config 0 interface 0 altsetting 2 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1275.059379][T15014] usb 6-1: config 0 interface 0 altsetting 2 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1275.122150][T15014] usb 6-1: config 0 interface 0 has no altsetting 0 [ 1275.143068][T15014] usb 6-1: New USB device found, idVendor=056a, idProduct=032c, bcdDevice= 0.00 [ 1275.175417][T15014] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1275.179917][T21044] netlink: 28 bytes leftover after parsing attributes in process `syz.2.3646'. [ 1275.209906][T15014] usb 6-1: config 0 descriptor?? [ 1275.847906][T15014] usb 6-1: USB disconnect, device number 36 [ 1276.465144][T21069] netlink: 'syz.6.3654': attribute type 4 has an invalid length. [ 1278.072685][T20222] usb 7-1: new high-speed USB device number 112 using dummy_hcd [ 1278.142591][T14322] usb 4-1: new full-speed USB device number 124 using dummy_hcd [ 1278.234428][T20222] usb 7-1: Using ep0 maxpacket: 16 [ 1278.254628][T20222] usb 7-1: config 0 interface 0 altsetting 1 endpoint 0x81 has an invalid bInterval 253, changing to 11 [ 1278.272494][T20222] usb 7-1: config 0 interface 0 has no altsetting 0 [ 1278.289703][T20222] usb 7-1: New USB device found, idVendor=046d, idProduct=c22d, bcdDevice= 0.00 [ 1278.323028][T20222] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1278.335306][T14322] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1278.356179][T14322] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 1278.381127][T21105] veth1_macvtap: left promiscuous mode [ 1278.382061][T20222] usb 7-1: config 0 descriptor?? [ 1278.386860][T21105] macsec0: entered promiscuous mode [ 1278.405660][T14322] usb 4-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 1278.422753][T14322] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1278.431347][T14322] usb 4-1: Product: syz [ 1278.452077][T14322] usb 4-1: Manufacturer: syz [ 1278.471066][T14322] usb 4-1: SerialNumber: syz [ 1278.717579][T14322] usb 4-1: 0:2 : does not exist [ 1278.749549][T14322] usb 4-1: 5:0: failed to get current value for ch 0 (-22) [ 1278.824103][T14322] usb 4-1: USB disconnect, device number 124 [ 1278.891523][T20222] lg-g15 0003:046D:C22D.0035: hidraw0: USB HID v0.06 Device [HID 046d:c22d] on usb-dummy_hcd.6-1/input0 [ 1278.994329][ T8374] udevd[8374]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1279.051029][T20222] usb 7-1: USB disconnect, device number 112 [ 1279.185970][T21112] fido_id[21112]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.6/usb7/report_descriptor': No such file or directory [ 1280.066610][T21127] [ 1280.069009][T21127] ===================================================== [ 1280.076045][T21127] WARNING: SOFTIRQ-safe -> SOFTIRQ-unsafe lock order detected [ 1280.083520][T21127] 6.17.0-rc1-syzkaller #0 Not tainted [ 1280.089007][T21127] ----------------------------------------------------- [ 1280.095955][T21127] syz.3.3679/21127 [HC0[0]:SC0[0]:HE0:SE1] is trying to acquire: [ 1280.103782][T21127] ffff88802abdf948 (&new->fa_lock){....}-{3:3}, at: kill_fasync+0x199/0x4d0 [ 1280.112793][T21127] [ 1280.112793][T21127] and this task is already holding: [ 1280.120176][T21127] ffff8881436c8028 (&client->buffer_lock){..-.}-{3:3}, at: evdev_pass_values+0xb9/0xbd0 [ 1280.130061][T21127] which would create a new lock dependency: [ 1280.135995][T21127] (&client->buffer_lock){..-.}-{3:3} -> (&new->fa_lock){....}-{3:3} [ 1280.144145][T21127] [ 1280.144145][T21127] but this new dependency connects a SOFTIRQ-irq-safe lock: [ 1280.153701][T21127] (&client->buffer_lock){..-.}-{3:3} [ 1280.153739][T21127] [ 1280.153739][T21127] ... which became SOFTIRQ-irq-safe at: [ 1280.166832][T21127] lock_acquire+0x120/0x360 [ 1280.171464][T21127] _raw_spin_lock+0x2e/0x40 [ 1280.176079][T21127] evdev_pass_values+0xb9/0xbd0 [ 1280.181053][T21127] evdev_events+0x1e6/0x340 [ 1280.185671][T21127] input_pass_values+0x285/0x890 [ 1280.190721][T21127] input_event_dispose+0x330/0x6b0 [ 1280.195992][T21127] input_event+0x89/0xe0 [ 1280.200349][T21127] hidinput_report_event+0xa1/0x100 [ 1280.205662][T21127] hid_report_raw_event+0x148b/0x16d0 [ 1280.211157][T21127] hid_input_report+0x43e/0x520 [ 1280.216146][T21127] hid_irq_in+0x47e/0x6d0 [ 1280.220597][T21127] __usb_hcd_giveback_urb+0x41a/0x690 [ 1280.226097][T21127] dummy_timer+0x862/0x4550 [ 1280.230720][T21127] __hrtimer_run_queues+0x52c/0xc60 [ 1280.236030][T21127] hrtimer_run_softirq+0x187/0x2b0 [ 1280.241258][T21127] handle_softirqs+0x283/0x870 [ 1280.246134][T21127] __irq_exit_rcu+0xca/0x1f0 [ 1280.250934][T21127] irq_exit_rcu+0x9/0x30 [ 1280.255304][T21127] sysvec_apic_timer_interrupt+0xa6/0xc0 [ 1280.261053][T21127] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 1280.267302][T21127] unwind_next_frame+0x1166/0x2390 [ 1280.272715][T21127] arch_stack_walk+0x11c/0x150 [ 1280.277586][T21127] stack_trace_save+0x9c/0xe0 [ 1280.282359][T21127] kasan_save_track+0x3e/0x80 [ 1280.287177][T21127] kasan_save_free_info+0x46/0x50 [ 1280.292301][T21127] __kasan_slab_free+0x5b/0x80 [ 1280.297166][T21127] kfree+0x18e/0x440 [ 1280.301157][T21127] kobject_uevent_env+0x361/0x8c0 [ 1280.306275][T21127] really_probe+0x745/0x9e0 [ 1280.310962][T21127] __driver_probe_device+0x18c/0x2f0 [ 1280.316336][T21127] driver_probe_device+0x4f/0x430 [ 1280.321448][T21127] __device_attach_driver+0x2ce/0x530 [ 1280.327001][T21127] bus_for_each_drv+0x24e/0x2e0 [ 1280.332123][T21127] __device_attach+0x2b8/0x400 [ 1280.336987][T21127] bus_probe_device+0x185/0x260 [ 1280.341979][T21127] device_add+0x7b6/0xb50 [ 1280.346408][T21127] usb_set_configuration+0x1a87/0x20e0 [ 1280.352233][T21127] usb_generic_driver_probe+0x8d/0x150 [ 1280.357792][T21127] usb_probe_device+0x1c4/0x390 [ 1280.362759][T21127] really_probe+0x26d/0x9e0 [ 1280.367613][T21127] __driver_probe_device+0x18c/0x2f0 [ 1280.372990][T21127] driver_probe_device+0x4f/0x430 [ 1280.378106][T21127] __device_attach_driver+0x2ce/0x530 [ 1280.383565][T21127] bus_for_each_drv+0x24e/0x2e0 [ 1280.388516][T21127] __device_attach+0x2b8/0x400 [ 1280.393365][T21127] bus_probe_device+0x185/0x260 [ 1280.398311][T21127] device_add+0x7b6/0xb50 [ 1280.402928][T21127] usb_new_device+0xa39/0x16f0 [ 1280.407809][T21127] hub_event+0x2958/0x4a20 [ 1280.412424][T21127] process_scheduled_works+0xade/0x17b0 [ 1280.418082][T21127] worker_thread+0x8a0/0xda0 [ 1280.422771][T21127] kthread+0x70e/0x8a0 [ 1280.426934][T21127] ret_from_fork+0x3f9/0x770 [ 1280.431632][T21127] ret_from_fork_asm+0x1a/0x30 [ 1280.436514][T21127] [ 1280.436514][T21127] to a SOFTIRQ-irq-unsafe lock: [ 1280.443638][T21127] (tasklist_lock){.+.+}-{3:3} [ 1280.443673][T21127] [ 1280.443673][T21127] ... which became SOFTIRQ-irq-unsafe at: [ 1280.456808][T21127] ... [ 1280.456825][T21127] lock_acquire+0x120/0x360 [ 1280.464016][T21127] _raw_read_lock+0x36/0x50 [ 1280.468697][T21127] __do_wait+0xde/0x740 [ 1280.472951][T21127] do_wait+0x1f8/0x520 [ 1280.477114][T21127] kernel_wait+0xab/0x170 [ 1280.481534][T21127] call_usermodehelper_exec_work+0xbe/0x230 [ 1280.487527][T21127] process_scheduled_works+0xade/0x17b0 [ 1280.493250][T21127] worker_thread+0x8a0/0xda0 [ 1280.497934][T21127] kthread+0x70e/0x8a0 [ 1280.502096][T21127] ret_from_fork+0x3f9/0x770 [ 1280.506785][T21127] ret_from_fork_asm+0x1a/0x30 [ 1280.511655][T21127] [ 1280.511655][T21127] other info that might help us debug this: [ 1280.511655][T21127] [ 1280.522063][T21127] Chain exists of: [ 1280.522063][T21127] &client->buffer_lock --> &new->fa_lock --> tasklist_lock [ 1280.522063][T21127] [ 1280.535321][T21127] Possible interrupt unsafe locking scenario: [ 1280.535321][T21127] [ 1280.543660][T21127] CPU0 CPU1 [ 1280.549034][T21127] ---- ---- [ 1280.554411][T21127] lock(tasklist_lock); [ 1280.558772][T21127] local_irq_disable(); [ 1280.565525][T21127] lock(&client->buffer_lock); [ 1280.572907][T21127] lock(&new->fa_lock); [ 1280.579673][T21127] [ 1280.583214][T21127] lock(&client->buffer_lock); [ 1280.588339][T21127] [ 1280.588339][T21127] *** DEADLOCK *** [ 1280.588339][T21127] [ 1280.596484][T21127] 7 locks held by syz.3.3679/21127: [ 1280.601680][T21127] #0: ffff888146b9f118 (&evdev->mutex){+.+.}-{4:4}, at: evdev_write+0x1a1/0x480 [ 1280.610837][T21127] #1: ffff888145e8a230 (&dev->event_lock#2){..-.}-{3:3}, at: input_inject_event+0xa5/0x340 [ 1280.621133][T21127] #2: ffffffff8e139ee0 (rcu_read_lock){....}-{1:3}, at: input_inject_event+0xb6/0x340 [ 1280.630825][T21127] #3: ffffffff8e139ee0 (rcu_read_lock){....}-{1:3}, at: input_pass_values+0x8d/0x890 [ 1280.640518][T21127] #4: ffffffff8e139ee0 (rcu_read_lock){....}-{1:3}, at: evdev_events+0x79/0x340 [ 1280.649705][T21127] #5: ffff8881436c8028 (&client->buffer_lock){..-.}-{3:3}, at: evdev_pass_values+0xb9/0xbd0 [ 1280.659901][T21127] #6: ffffffff8e139ee0 (rcu_read_lock){....}-{1:3}, at: kill_fasync+0x53/0x4d0 [ 1280.668964][T21127] [ 1280.668964][T21127] the dependencies between SOFTIRQ-irq-safe lock and the holding lock: [ 1280.679414][T21127] -> (&client->buffer_lock){..-.}-{3:3} { [ 1280.685173][T21127] IN-SOFTIRQ-W at: [ 1280.689255][T21127] lock_acquire+0x120/0x360 [ 1280.695417][T21127] _raw_spin_lock+0x2e/0x40 [ 1280.701580][T21127] evdev_pass_values+0xb9/0xbd0 [ 1280.708114][T21127] evdev_events+0x1e6/0x340 [ 1280.714279][T21127] input_pass_values+0x285/0x890 [ 1280.720970][T21127] input_event_dispose+0x330/0x6b0 [ 1280.727996][T21127] input_event+0x89/0xe0 [ 1280.733894][T21127] hidinput_report_event+0xa1/0x100 [ 1280.740844][T21127] hid_report_raw_event+0x148b/0x16d0 [ 1280.747874][T21127] hid_input_report+0x43e/0x520 [ 1280.754498][T21127] hid_irq_in+0x47e/0x6d0 [ 1280.760741][T21127] __usb_hcd_giveback_urb+0x41a/0x690 [ 1280.767770][T21127] dummy_timer+0x862/0x4550 [ 1280.773933][T21127] __hrtimer_run_queues+0x52c/0xc60 [ 1280.780795][T21127] hrtimer_run_softirq+0x187/0x2b0 [ 1280.787559][T21127] handle_softirqs+0x283/0x870 [ 1280.793983][T21127] __irq_exit_rcu+0xca/0x1f0 [ 1280.800225][T21127] irq_exit_rcu+0x9/0x30 [ 1280.806121][T21127] sysvec_apic_timer_interrupt+0xa6/0xc0 [ 1280.813596][T21127] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 1280.821233][T21127] unwind_next_frame+0x1166/0x2390 [ 1280.828003][T21127] arch_stack_walk+0x11c/0x150 [ 1280.834423][T21127] stack_trace_save+0x9c/0xe0 [ 1280.840759][T21127] kasan_save_track+0x3e/0x80 [ 1280.847094][T21127] kasan_save_free_info+0x46/0x50 [ 1280.853768][T21127] __kasan_slab_free+0x5b/0x80 [ 1280.860281][T21127] kfree+0x18e/0x440 [ 1280.865830][T21127] kobject_uevent_env+0x361/0x8c0 [ 1280.872508][T21127] really_probe+0x745/0x9e0 [ 1280.878665][T21127] __driver_probe_device+0x18c/0x2f0 [ 1280.885602][T21127] driver_probe_device+0x4f/0x430 [ 1280.892283][T21127] __device_attach_driver+0x2ce/0x530 [ 1280.899396][T21127] bus_for_each_drv+0x24e/0x2e0 [ 1280.905905][T21127] __device_attach+0x2b8/0x400 [ 1280.912407][T21127] bus_probe_device+0x185/0x260 [ 1280.919001][T21127] device_add+0x7b6/0xb50 [ 1280.924979][T21127] usb_set_configuration+0x1a87/0x20e0 [ 1280.932182][T21127] usb_generic_driver_probe+0x8d/0x150 [ 1280.939469][T21127] usb_probe_device+0x1c4/0x390 [ 1280.945979][T21127] really_probe+0x26d/0x9e0 [ 1280.952226][T21127] __driver_probe_device+0x18c/0x2f0 [ 1280.959424][T21127] driver_probe_device+0x4f/0x430 [ 1280.966184][T21127] __device_attach_driver+0x2ce/0x530 [ 1280.973216][T21127] bus_for_each_drv+0x24e/0x2e0 [ 1280.979753][T21127] __device_attach+0x2b8/0x400 [ 1280.986183][T21127] bus_probe_device+0x185/0x260 [ 1280.992700][T21127] device_add+0x7b6/0xb50 [ 1280.998768][T21127] usb_new_device+0xa39/0x16f0 [ 1281.005278][T21127] hub_event+0x2958/0x4a20 [ 1281.011353][T21127] process_scheduled_works+0xade/0x17b0 [ 1281.018728][T21127] worker_thread+0x8a0/0xda0 [ 1281.024974][T21127] kthread+0x70e/0x8a0 [ 1281.030702][T21127] ret_from_fork+0x3f9/0x770 [ 1281.036942][T21127] ret_from_fork_asm+0x1a/0x30 [ 1281.043629][T21127] INITIAL USE at: [ 1281.047536][T21127] lock_acquire+0x120/0x360 [ 1281.053699][T21127] _raw_spin_lock+0x2e/0x40 [ 1281.059862][T21127] evdev_pass_values+0xb9/0xbd0 [ 1281.066370][T21127] evdev_events+0x1e6/0x340 [ 1281.072444][T21127] input_pass_values+0x285/0x890 [ 1281.079042][T21127] input_event_dispose+0x330/0x6b0 [ 1281.085804][T21127] input_inject_event+0x1dd/0x340 [ 1281.092400][T21127] evdev_write+0x2fc/0x480 [ 1281.098403][T21127] vfs_write+0x27b/0xb30 [ 1281.104347][T21127] ksys_write+0x145/0x250 [ 1281.110450][T21127] do_syscall_64+0xfa/0x3b0 [ 1281.116618][T21127] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1281.124097][T21127] } [ 1281.126609][T21127] ... key at: [] evdev_open.__key.25+0x0/0x20 [ 1281.135117][T21127] [ 1281.135117][T21127] the dependencies between the lock to be acquired [ 1281.135126][T21127] and SOFTIRQ-irq-unsafe lock: [ 1281.148642][T21127] -> (tasklist_lock){.+.+}-{3:3} { [ 1281.154036][T21127] HARDIRQ-ON-R at: [ 1281.158192][T21127] lock_acquire+0x120/0x360 [ 1281.164792][T21127] _raw_read_lock+0x36/0x50 [ 1281.171347][T21127] __do_wait+0xde/0x740 [ 1281.177885][T21127] do_wait+0x1f8/0x520 [ 1281.183969][T21127] kernel_wait+0xab/0x170 [ 1281.190410][T21127] call_usermodehelper_exec_work+0xbe/0x230 [ 1281.198410][T21127] process_scheduled_works+0xade/0x17b0 [ 1281.205967][T21127] worker_thread+0x8a0/0xda0 [ 1281.212553][T21127] kthread+0x70e/0x8a0 [ 1281.218796][T21127] ret_from_fork+0x3f9/0x770 [ 1281.225491][T21127] ret_from_fork_asm+0x1a/0x30 [ 1281.232265][T21127] SOFTIRQ-ON-R at: [ 1281.236512][T21127] lock_acquire+0x120/0x360 [ 1281.243163][T21127] _raw_read_lock+0x36/0x50 [ 1281.249666][T21127] __do_wait+0xde/0x740 [ 1281.255834][T21127] do_wait+0x1f8/0x520 [ 1281.262093][T21127] kernel_wait+0xab/0x170 [ 1281.268456][T21127] call_usermodehelper_exec_work+0xbe/0x230 [ 1281.276483][T21127] process_scheduled_works+0xade/0x17b0 [ 1281.284128][T21127] worker_thread+0x8a0/0xda0 [ 1281.290889][T21127] kthread+0x70e/0x8a0 [ 1281.297048][T21127] ret_from_fork+0x3f9/0x770 [ 1281.303640][T21127] ret_from_fork_asm+0x1a/0x30 [ 1281.310583][T21127] INITIAL USE at: [ 1281.314673][T21127] lock_acquire+0x120/0x360 [ 1281.321702][T21127] _raw_write_lock_irq+0xa2/0xf0 [ 1281.328583][T21127] copy_process+0x224f/0x3c00 [ 1281.335273][T21127] kernel_clone+0x21e/0x840 [ 1281.341704][T21127] user_mode_thread+0xdd/0x140 [ 1281.348382][T21127] rest_init+0x23/0x300 [ 1281.354467][T21127] start_kernel+0x3a9/0x410 [ 1281.360895][T21127] x86_64_start_reservations+0x24/0x30 [ 1281.368391][T21127] x86_64_start_kernel+0x143/0x1c0 [ 1281.375537][T21127] common_startup_64+0x13e/0x147 [ 1281.382407][T21127] INITIAL READ USE at: [ 1281.386955][T21127] lock_acquire+0x120/0x360 [ 1281.394117][T21127] _raw_read_lock+0x36/0x50 [ 1281.400972][T21127] __do_wait+0xde/0x740 [ 1281.407482][T21127] do_wait+0x1f8/0x520 [ 1281.414253][T21127] kernel_wait+0xab/0x170 [ 1281.421109][T21127] call_usermodehelper_exec_work+0xbe/0x230 [ 1281.429448][T21127] process_scheduled_works+0xade/0x17b0 [ 1281.437349][T21127] worker_thread+0x8a0/0xda0 [ 1281.444299][T21127] kthread+0x70e/0x8a0 [ 1281.450721][T21127] ret_from_fork+0x3f9/0x770 [ 1281.457654][T21127] ret_from_fork_asm+0x1a/0x30 [ 1281.464781][T21127] } [ 1281.467457][T21127] ... key at: [] tasklist_lock+0x18/0x40 [ 1281.475530][T21127] ... acquired at: [ 1281.479506][T21127] lock_acquire+0x120/0x360 [ 1281.484193][T21127] _raw_read_lock+0x36/0x50 [ 1281.488891][T21127] send_sigio+0x101/0x370 [ 1281.493416][T21127] dnotify_handle_event+0x169/0x440 [ 1281.498804][T21127] fsnotify+0x1814/0x1a80 [ 1281.503326][T21127] vfs_mkdir+0x477/0x510 [ 1281.507750][T21127] do_mkdirat+0x247/0x590 [ 1281.512259][T21127] __x64_sys_mkdirat+0x87/0xa0 [ 1281.517212][T21127] do_syscall_64+0xfa/0x3b0 [ 1281.521933][T21127] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1281.528002][T21127] [ 1281.530329][T21127] -> (&f_owner->lock){....}-{3:3} { [ 1281.535753][T21127] INITIAL USE at: [ 1281.539740][T21127] lock_acquire+0x120/0x360 [ 1281.545994][T21127] _raw_write_lock_irq+0xa2/0xf0 [ 1281.552677][T21127] __f_setown+0x67/0x370 [ 1281.558662][T21127] generic_setlease+0xd60/0x1240 [ 1281.565341][T21127] fcntl_setlease+0x3a2/0x4c0 [ 1281.571757][T21127] do_fcntl+0x6a9/0x1910 [ 1281.577743][T21127] __se_sys_fcntl+0xc8/0x150 [ 1281.584254][T21127] do_syscall_64+0xfa/0x3b0 [ 1281.590597][T21127] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1281.598231][T21127] INITIAL READ USE at: [ 1281.602669][T21127] lock_acquire+0x120/0x360 [ 1281.609389][T21127] _raw_read_lock_irqsave+0xaf/0x100 [ 1281.616858][T21127] send_sigio+0x38/0x370 [ 1281.623361][T21127] kill_fasync+0x24d/0x4d0 [ 1281.629974][T21127] lease_break_callback+0x26/0x30 [ 1281.637400][T21127] __break_lease+0x6a2/0x1620 [ 1281.644275][T21127] do_dentry_open+0x8b7/0x13f0 [ 1281.651216][T21127] vfs_open+0x3b/0x340 [ 1281.657457][T21127] dentry_open+0x61/0xa0 [ 1281.663876][T21127] do_mq_open+0x59e/0x780 [ 1281.670470][T21127] __x64_sys_mq_open+0x16a/0x1c0 [ 1281.677753][T21127] do_syscall_64+0xfa/0x3b0 [ 1281.684435][T21127] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1281.692601][T21127] } [ 1281.695194][T21127] ... key at: [] file_f_owner_allocate.__key+0x0/0x20 [ 1281.704138][T21127] ... acquired at: [ 1281.708024][T21127] lock_acquire+0x120/0x360 [ 1281.712797][T21127] _raw_read_lock_irqsave+0xaf/0x100 [ 1281.718266][T21127] send_sigio+0x38/0x370 [ 1281.722681][T21127] kill_fasync+0x24d/0x4d0 [ 1281.727275][T21127] lease_break_callback+0x26/0x30 [ 1281.732490][T21127] __break_lease+0x6a2/0x1620 [ 1281.737443][T21127] do_dentry_open+0x8b7/0x13f0 [ 1281.742389][T21127] vfs_open+0x3b/0x340 [ 1281.746641][T21127] dentry_open+0x61/0xa0 [ 1281.751059][T21127] do_mq_open+0x59e/0x780 [ 1281.755566][T21127] __x64_sys_mq_open+0x16a/0x1c0 [ 1281.760677][T21127] do_syscall_64+0xfa/0x3b0 [ 1281.765362][T21127] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1281.771435][T21127] [ 1281.773787][T21127] -> (&new->fa_lock){....}-{3:3} { [ 1281.778921][T21127] INITIAL USE at: [ 1281.782815][T21127] lock_acquire+0x120/0x360 [ 1281.788899][T21127] _raw_write_lock_irq+0xa2/0xf0 [ 1281.795513][T21127] fasync_remove_entry+0xf1/0x1c0 [ 1281.802119][T21127] lease_modify+0x1ca/0x3c0 [ 1281.808205][T21127] locks_remove_file+0x4bf/0xea0 [ 1281.814743][T21127] __fput+0x3ab/0xa70 [ 1281.820479][T21127] task_work_run+0x1d4/0x260 [ 1281.826647][T21127] do_exit+0x6b5/0x2300 [ 1281.832471][T21127] do_group_exit+0x21c/0x2d0 [ 1281.838639][T21127] get_signal+0x1286/0x1340 [ 1281.844791][T21127] arch_do_signal_or_restart+0x9a/0x750 [ 1281.851908][T21127] exit_to_user_mode_loop+0x75/0x110 [ 1281.858859][T21127] do_syscall_64+0x2bd/0x3b0 [ 1281.865145][T21127] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1281.872612][T21127] INITIAL READ USE at: [ 1281.876943][T21127] lock_acquire+0x120/0x360 [ 1281.883453][T21127] _raw_read_lock_irqsave+0xaf/0x100 [ 1281.890842][T21127] kill_fasync+0x199/0x4d0 [ 1281.897280][T21127] lease_break_callback+0x26/0x30 [ 1281.904402][T21127] __break_lease+0x6a2/0x1620 [ 1281.911171][T21127] do_dentry_open+0x8b7/0x13f0 [ 1281.918050][T21127] vfs_open+0x3b/0x340 [ 1281.924383][T21127] dentry_open+0x61/0xa0 [ 1281.930633][T21127] do_mq_open+0x59e/0x780 [ 1281.937072][T21127] __x64_sys_mq_open+0x16a/0x1c0 [ 1281.944109][T21127] do_syscall_64+0xfa/0x3b0 [ 1281.950630][T21127] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1281.958522][T21127] } [ 1281.961054][T21127] ... key at: [] fasync_insert_entry.__key+0x0/0x20 [ 1281.969738][T21127] ... acquired at: [ 1281.973548][T21127] lock_acquire+0x120/0x360 [ 1281.978410][T21127] _raw_read_lock_irqsave+0xaf/0x100 [ 1281.983967][T21127] kill_fasync+0x199/0x4d0 [ 1281.988567][T21127] evdev_pass_values+0x627/0xbd0 [ 1281.993773][T21127] evdev_events+0x1e6/0x340 [ 1281.998473][T21127] input_pass_values+0x285/0x890 [ 1282.003676][T21127] input_event_dispose+0x330/0x6b0 [ 1282.008965][T21127] input_inject_event+0x1dd/0x340 [ 1282.014165][T21127] evdev_write+0x2fc/0x480 [ 1282.018852][T21127] vfs_write+0x27b/0xb30 [ 1282.023274][T21127] ksys_write+0x145/0x250 [ 1282.027784][T21127] do_syscall_64+0xfa/0x3b0 [ 1282.032470][T21127] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1282.038719][T21127] [ 1282.041049][T21127] [ 1282.041049][T21127] stack backtrace: [ 1282.047031][T21127] CPU: 1 UID: 0 PID: 21127 Comm: syz.3.3679 Not tainted 6.17.0-rc1-syzkaller #0 PREEMPT(full) [ 1282.047052][T21127] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 1282.047063][T21127] Call Trace: [ 1282.047070][T21127] [ 1282.047077][T21127] dump_stack_lvl+0x189/0x250 [ 1282.047099][T21127] ? __pfx_dump_stack_lvl+0x10/0x10 [ 1282.047118][T21127] ? __pfx__printk+0x10/0x10 [ 1282.047160][T21127] validate_chain+0x1f05/0x2140 [ 1282.047184][T21127] __lock_acquire+0xab9/0xd20 [ 1282.047210][T21127] ? kill_fasync+0x199/0x4d0 [ 1282.047226][T21127] lock_acquire+0x120/0x360 [ 1282.047249][T21127] ? kill_fasync+0x199/0x4d0 [ 1282.047270][T21127] _raw_read_lock_irqsave+0xaf/0x100 [ 1282.047291][T21127] ? kill_fasync+0x199/0x4d0 [ 1282.047308][T21127] ? __pfx__raw_read_lock_irqsave+0x10/0x10 [ 1282.047328][T21127] ? do_raw_spin_lock+0x121/0x290 [ 1282.047349][T21127] kill_fasync+0x199/0x4d0 [ 1282.047366][T21127] ? kill_fasync+0x53/0x4d0 [ 1282.047384][T21127] evdev_pass_values+0x627/0xbd0 [ 1282.047409][T21127] ? evdev_pass_values+0x5e1/0xbd0 [ 1282.047433][T21127] evdev_events+0x1e6/0x340 [ 1282.047455][T21127] ? evdev_events+0x79/0x340 [ 1282.047477][T21127] ? input_pass_values+0x8d/0x890 [ 1282.047497][T21127] input_pass_values+0x285/0x890 [ 1282.047526][T21127] ? input_handle_event+0x70c/0xf30 [ 1282.047551][T21127] input_event_dispose+0x330/0x6b0 [ 1282.047571][T21127] input_inject_event+0x1dd/0x340 [ 1282.047589][T21127] ? input_inject_event+0xb6/0x340 [ 1282.047607][T21127] evdev_write+0x2fc/0x480 [ 1282.047631][T21127] ? __pfx_evdev_write+0x10/0x10 [ 1282.047655][T21127] ? bpf_lsm_file_permission+0x9/0x20 [ 1282.047675][T21127] ? security_file_permission+0x75/0x290 [ 1282.047697][T21127] ? rw_verify_area+0x255/0x4d0 [ 1282.047716][T21127] ? __lock_acquire+0xab9/0xd20 [ 1282.047738][T21127] ? __pfx_evdev_write+0x10/0x10 [ 1282.047761][T21127] vfs_write+0x27b/0xb30 [ 1282.047784][T21127] ? __pfx_vfs_write+0x10/0x10 [ 1282.047805][T21127] ? __fget_files+0x2a/0x420 [ 1282.047819][T21127] ? __fget_files+0x2a/0x420 [ 1282.047831][T21127] ? __fget_files+0x3a0/0x420 [ 1282.047844][T21127] ? __fget_files+0x2a/0x420 [ 1282.047860][T21127] ksys_write+0x145/0x250 [ 1282.047881][T21127] ? __pfx_ksys_write+0x10/0x10 [ 1282.047900][T21127] ? rcu_is_watching+0x15/0xb0 [ 1282.047918][T21127] ? do_syscall_64+0xbe/0x3b0 [ 1282.047941][T21127] do_syscall_64+0xfa/0x3b0 [ 1282.047963][T21127] ? lockdep_hardirqs_on+0x9c/0x150 [ 1282.047983][T21127] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1282.047999][T21127] ? clear_bhb_loop+0x60/0xb0 [ 1282.048016][T21127] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1282.048032][T21127] RIP: 0033:0x7f867ed8ebe9 [ 1282.048046][T21127] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1282.048062][T21127] RSP: 002b:00007f867fb40038 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 1282.048081][T21127] RAX: ffffffffffffffda RBX: 00007f867efb5fa0 RCX: 00007f867ed8ebe9 [ 1282.048093][T21127] RDX: 0000000000001068 RSI: 0000200000000040 RDI: 0000000000000004 [ 1282.048104][T21127] RBP: 00007f867ee11e19 R08: 0000000000000000 R09: 0000000000000000 [ 1282.048115][T21127] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1282.048125][T21127] R13: 00007f867efb6038 R14: 00007f867efb5fa0 R15: 00007f867f0dfa28 [ 1282.048142][T21127]